Re: [users@httpd] Apache Copied In Another Location AIX
On Fri, Oct 9, 2015 at 9:46 AM, VELIDANDI, RAMAKRISHNA < ramakrishna.velida...@unilever.com> wrote: > Hi All, > > > > I am newbie for Apache. > > > > I'm trying to build apache 2.2 on AIX 7 by copying entire installed > directory to different AIX 7 host. > > > > I adjusted apachectl entries and envvars and envvars-std, But stuck with > error while running ./apachectl > > > > exec(): 0509-036 Cannot load program /apache/apache2.2/patch2.2/bin/httpd > because of the following errors: > > 0509-022 Cannot load module > /data/apache/patch2.2/lib/libaprutil-1.so. > > 0509-150 Dependent module > /apache/patch2.2/lib/libexpat.a(libexpat.so.0) could not be loaded. > > 0509-022 Cannot load module > /apache/patch2.2/lib/libexpat.a(libexpat.so.0). > > 0509-026 System error: A file or directory in the path name does > not exist. > > 0509-022 Cannot load module httpd. > > 0509-150 Dependent module > /data/apache/patch2.2/lib/libaprutil-1.so could not be loaded. > > 0509-022 Cannot load module . > > > > Can you please guide with detailed approach to be followed for this > requirement as I have not found useful info in this regard. > > > > Requirement: Want to setup apache on other system (of same OS-AIX) with > copy of existing apache(apache/patch2.2), without installing from software. > > > > > > *Thanks & Regards* > *Ram* > > One way is to use an install path on the build machine that can also be used on the target machine (e.g., /opt/unilever/httpd22 or something else that won't be used by third-party packages). Alternatively, you can update LIBPATH in the /bin/envvars file to use the actual install path. It will currently have the install path on the build machine. > -- Born in Roswell... married an alien... http://emptyhammock.com/
Re: [users@httpd] Assistance in building 2.0.65 RPM on RH 5.7
On 06/30/2015 01:45 PM, John Donnelly wrote: Hello. I am attempting to build an RPM from the httpd-2.0.65.tar.gz tarball on a RH 5.7 system to deploy to existing systems running httpd 2.0.63 and I would like some assistance. I have the base apr lib packages installed : rpm -qa | egrep apr|apu apr-1.2.7-11.el5_6.5 apr-util-devel-1.2.7-11.el5_5.2 apr-devel-1.2.7-11.el5_6.5 apr-devel-1.2.7-11.el5_6.5 apr-util-devel-1.2.7-11.el5_5.2 apr-1.2.7-11.el5_6.5 apr-util-1.2.7-11.el5_5.2 apr-util-1.2.7-11.el5_5.2 httpd 2.0.x needs apr 0.9.x and apr-util 0.9.x, not apr/apr-util 1.x. (You might get it to compile, but it wouldn't be compatible with third-party plug-in modules which were built for httpd 2.0.x.) Why do you need to use 2.0.65? I had to make some subtle changes to the httpd.spec file to get it to build by replacing ³ap[u|r]-config² with ³ap[u|r]-1-config² , and the remove the ³Serial² option : [jdonnellyd@eng-builds-fir httpd-2.0.65.org]$ cd httpd-2.0.65/ [jdonnellyd@eng-builds-fir httpd-2.0.65]$ diff httpd.spec ../../httpd-2.0.65/httpd.spec 21c21,28 BuildPrereq: /usr/bin/apr-config, /usr/bin/apu-config --- ## # vmem changed /usr/bin/apr-config to /usr/bin/apr-1-config # /usr/bin/apu-config to /usr/bin/apu-1-config # jpd 7/1/15 ## #BuildPrereq: /usr/bin/apr-config, /usr/bin/apu-config BuildPrereq: /usr/bin/apr-1-config, /usr/bin/apu-1-config 63c70 Serial: 1 --- # Serial: 1 103a111,116 ## # vmem changed /usr/bin/apr-config to /usr/bin/apr-1-config # /usr/bin/apu-config to /usr/bin/apu-1-config # jpd 7/1/15 ## 114,115c127,128 --with-apr=/usr/bin/apr-config \ --with-apr-util=/usr/bin/apu-config \ --- --with-apr=/usr/bin/apr-1-config \ --with-apr-util=/usr/bin/apu-1-config \ ## Yet the package fails to build ( start of long list of compile errors ) : /usr/lib64/apr-1/build/libtool --silent --mode=compile gcc -pthread -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic -I/usr/kerberos/include -DLINUX=2 -D_REENTRANT -D_GNU_SOURCE -DAP_HAVE_DESIGNATED_INITIALIZER -I/usr/include/apr-1 -I. -I/net/home/jdonnelly/rpmbuild/BUILD/httpd-2.0.65/server -I/net/home/jdonnelly/rpmbuild/BUILD/httpd-2.0.65/prefork/server/mpm/prefor k -I/net/home/jdonnelly/rpmbuild/BUILD/httpd-2.0.65/prefork/include -I/net/home/jdonnelly/rpmbuild/BUILD/httpd-2.0.65/os/unix -I/net/home/jdonnelly/rpmbuild/BUILD/httpd-2.0.65/server/mpm/prefork -I/net/home/jdonnelly/rpmbuild/BUILD/httpd-2.0.65/modules/http -I/net/home/jdonnelly/rpmbuild/BUILD/httpd-2.0.65/modules/filters -I/net/home/jdonnelly/rpmbuild/BUILD/httpd-2.0.65/modules/proxy -I/net/home/jdonnelly/rpmbuild/BUILD/httpd-2.0.65/include -I/net /home/jdonnelly/rpmbuild/BUILD/httpd-2.0.65/modules/generators -I/net/home/jdonnelly/rpmbuild/BUILD/httpd-2.0.65 /prefork/server -I/usr/include/openssl -I/usr/kerberos/include -I/net/home/jdonnelly/rpmbuild/BUILD/httpd-2.0.65 /modules/dav/main -prefer-non-pic -static -c /net/home/jdonnelly/rpmbuild/BUILD/httpd-2.0.65/server/provider.c touch provider.lo /net/home/jdonnelly/rpmbuild/BUILD/httpd-2.0.65/server/util_time.c: In function 'cached_explode': /net/home/jdonnelly/rpmbuild/BUILD/httpd-2.0.65/server/util_time.c:122: warning: implicit declaration of function 'APR_STATUS_IS_SUCCESS' /net/home/jdonnelly/rpmbuild/BUILD/httpd-2.0.65/server/util_filter.c: In function 'ap_save_brigade':/net/home/jdonnelly/rpmbuild/BUILD/httpd-2.0.65/server/ut il_filter.c:531: warning: implicit declaration of funct ion 'APR_RING_FOREACH'@ I am looking for recommendations for how to get this component built. I was expecting it to work on RH 5.7, do I need to go back to a older platform (Cent OS 4.x) ? Thank you, JD - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [users@httpd] Help. DSOs not being built from source? Apache 2.4.12 CentOS 7 (x86_64)
On 06/27/2015 10:53 AM, Anthony Rutledge wrote: DSOs not being built from source? Apache 2.4.12 CentOS 7 (x86_64) This is a good question for those who are experts at installing Apache 2.4.12 from source. First, no errors are being generated. My configure, make, make install sequence successfully creates a /usr/local/apache2/ directory. Second, I have read the manual, poured over ./configure -h, searched the web, and no where does there seem to be anyone experiencing the same problem as me. No matter what configure --foo-bar sequence/combination I use, the shared modules are never built, or I cannot find them. I expect them to be under /usr/local/modules/, but all I get are *.a and *.la files. Alright, gurus, what am I missing? Again, no matter what configure sequence/combination I try, *.so (DSO) files are never built, or I cannot find them. apachectl -l does list mod_so as being compiled in statically. (P.S. Also posted on: ServerFault at http://serverfault.com/questions/701992/apache-2-4-12-centos-7-dso-shared-modules-not-being-built-during-compile ) Can someone explain why no DSO's are being built, or how to build at least one? Very strange. Maybe you didn't make distclean between attempts at different configure invocations in the same dirty source tree? Here's one simple recipe to try: (change /tmp/test-config if you don't have sufficient space there) unpack source again cd httpd-2.4.12 ./configure --enable-mods-shared=few --prefix=/tmp/test-config cfgout 21 make makeout 21 make install installout 21 ./httpd -l ./httpd -M Does it finish? What is the output?
Re: [users@httpd] Hung thread
On Wed, Jun 17, 2015 at 8:51 PM, Mark Jacquet mark_jacq...@yahoo.com.invalid wrote: Just another oddity to add to the issue. Overnight several more hung threads appeared and the load on the system had jumped into the mid 20's. After killing these the load did not drop. Looking at the list of running processes I found httpd's running,spawned from the original root httpd process that *were not even displayed* in the scoreboard!! After killing these hidden zombies off the load dropped again. What's common about the processes? Similar backtrace to the first one posted? So now I have to catch and kill two types: Zombies on the scoreboard and hidden zombies. And this is cute. Some times the zombies hang around so long that when the system gets back to creating a new process for slot #1, if the zombie was originally in that slot it is displayed their along with it's brothers for the new process: scoreboard squatting e.g. Note process 19597 below *1-0*166310/33/1320_ 131.22202255280.01.6035.79 10.172.91.217newyahoo.oak.sap.corp:80NULL *1-0*166310/18/1087_ 105.88340736980.00.6926.65 10.172.240.113www-dse.oak.sap.corp:80GET /cgi-bin/websql/websql.dir/QTS/bugsheetcont.hts?bugid=74133 *1-0*166310/11/1178_ 76.49589542980.00.5634.78 10.172.91.92newyahoo.oak.sap.corp:80NULL *1-0*166310/32/1295_ 92.17425417130.04.0342.07 10.172.240.113newyahoo.oak.sap.corp:80NULL *1-0* 195970/26/1319*W* 35.552441700.00.5437.10 10.172.248.87www-rev.oak.sap.corp:80GET /cgi-bin/rev.cgi?action=105;id=58037 HTTP/1.1 *1-0*166310/12/1427_ 18.41794100.00.14238.52 10.172.240.113newyahoo.oak.sap.corp:80NULL *1-0*166310/27/1442_ 30.67719695430.00.7835.07 10.172.85.9newyahoo.oak.sap.corp:80NULL *1-0*166310/19/784_ 10.70940630.00.4520.95 10.172.246.203newyahoo.oak.sap.corp:80NULL *1-0*166310/8/1034_ 2.86103144630.00.0124.04 10.172.90.155newyahoo.oak.sap.corp:80NULL *2-0*-0/0/99. 58.943145013820.00.002.15 10.136.66.135newyahoo.oak.sap.corp:80NULL *2-0*-0/0/82. 2181.923144824390.00.001.48 10.162.65.165www-dse.oak.sap.corp:80POST /cgi-bin/websql/websql.dir/QTS/bugsescalated.pl?product=AN *2-0*-0/0/162. 2027.12314509350.00.003.36 10.50.3.99newyahoo.oak.sap.corp:80NULL *2-0*-0/0/576. 1704.40314504100.00.0013.38 10.172.240.113newyahoo.oak.sap.corp:80NULL *2-0*-0/0/928. 1295.363145029750.00.0024.38 10.50.17.221newyahoo.oak.sap.corp:80NULL *2-0*-0/0/852. 1798.52314503810.00.0020.72 10.162.65.165newyahoo.oak.sap.corp:80NULL *2-0*-0/0/1084. 551.293145022210.00.0026.52 10.176.138.162newyahoo.oak.sap.corp:80NULL *2-0*-0/0/1180. 385.833145019630.00.0034.31 10.162.65.197newyahoo.oak.sap.corp:80NULL *2-0*-0/0/50. 50.713145000.00.001.62 10.58.181.166www-rev.oak.sap.corp:80GET /cgi-bin/rev.cgi?action=105;id=58051 HTTP/1.1 *2-0*137610/12/1078*W* 58.803489600.00.1031.67 10.172.107.38www-rev.oak.sap.corp:80POST /cgi-bin/rev.cgi HTTP/1.1 *2-0*-0/0/1075. 1061.5331450790.00.0031.65 10.172.90.88newyahoo.oak.sap.corp:80GET /server-status HTTP/1.1 *2-0*-0/0/1362. 46.803145080.00.0039.72 10.172.107.38www-rev.oak.sap.corp:80POST /cgi-bin/rev.cgi HTTP/1.1 *2-0*-0/0/1142. 56.693145011490.00.0035.22 10.172.240.113newyahoo.oak.sap.corp:80NUL Slot #2 currently not being used (still has zombie) MJ Mj On Tuesday, June 16, 2015 5:42 PM, Mark Jacquet mark_jacq...@yahoo.com.INVALID wrote: Upgrade as in Apache upgrade or Solaris 5.10 patch upgrad? :) Apache is all new of course 2.4.12 with the latest add on sources (apr, pcre, etc) The bad news is the OS is not at all up to date. And for reasons I have no control over, I cannot patch. So if this is an OS issue then .. I seem to be running with the Sun Native LDAP SDK. Would building against different LDAP source help? (Open LDAP)? Long term plan - moving all Apache servers to Linux Mj On Tuesday, June 16, 2015 5:31 PM, Eric Covener cove...@gmail.com wrote: On Tue, Jun 16, 2015 at 8:23 PM, Mark Jacquet mark_jacq...@yahoo.com.invalid wrote: So do you think this hang is related to the native LDAP lib code? It is possible but IMO not very likely. It has to corrutp memory just enough to put a looping structure in apr_rmm. What's your upgrade history like? -- Eric Covener cove...@gmail.com - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org -- Born in Roswell... married an alien... http://emptyhammock.com/
Re: [users@httpd] Hung thread
On Jun 16, 2015 18:26, Mark Jacquet mark_jacq...@yahoo.com.invalid wrote: I am seeing something very odd on our Apache 2.4.12 server (SunOS myhostname 5.10 Generic_118833-36 sun4v sparc SUNW,Sun-Fire-T200) We are using MPM Worker. I have been watching the scoreboard all day monitoring system load and running processes/threads. Around 10AM the load jumped to from a normal 1 to 7 then made it's way up to 20 where it has sat all day with 21 threads in status W I traced the threads back to the actual users here at work and asked them what they did, etc. No help there other than they both rapidly made requests to the server (one restored a browser session, the other rapidly clicked some URLs in a Word doc). One user even rebooted for me (no effect on Apache) In any case I have 21 threads in W state. The server has even gone on and created new process leaving these procs behind open with one or more thread active. But the load will not drop! Pstack of a hung process, this one only has one hung thread, looks like this: 3260: /codeadm/http_servers/httpd/bin/httpd -f /codeadm/http_servers/httpd/c - lwp# 1 / thread# 1 ff041714 lwp_wait (10, ffbff2ec) ff03d11c _thrp_join (10, 0, ffbff354, 1, ffbff2ec, ff06cbc0) + 34 ff24fd08 apr_thread_join (ffbff3d4, 1ef320, ff06cbc0, 0, 0, ff3a2000) + 48 000d4490 join_workers (1ef4a0, 1f4a88, 1, 1eef00, 1eee50, 1883d0) + 2f8 000d4e80 child_main (2, d1988, ff06cbc0, 0, 0, ff3a2000) + 7f8 000d50a8 make_child (1883d0, 2, 134518, 7, 0, 1883d0) + 1b0 000d5cb0 perform_idle_server_maintenance (ffbff69c, ffbff698, ffbff684, 163188, 1883d0, ff3a0140) + a28 000d6300 server_main_loop (0, 0, 134518, 7, 0, 1883d0) + 548 000d67e8 worker_run (134518, 18a470, 1883d0, 15, ff3a0100, ff3a0140) + 490 0005dd28 ap_run_mpm (163188, 18a470, 1883d0, 1883d0, 0, 0) + a8 0004e0e0 main (5, ffbff8cc, ffbff8e4, 15, ff3a0100, ff3a0140) + 17b0 0004b3b4 _start (0, 0, 0, 0, 0, 0) + dc - lwp# 16 / thread# 16 ff31dcc4 find_block_by_offset (19c550, 10, d778, 1, 0, 314628) + 8c ff31e218 move_block (19c550, d778, 0, 0, 2, 0) + 228 ff31f44c apr_rmm_calloc (19c550, 18, fe8e4af8, c, 0, 314628) + 1fc fe8e07bc util_ald_alloc (fe580670, 18, 0, 0, 2, 0) + 7c fe8e1f20 util_ald_cache_insert (fe580670, fd0f9898, fe8e4af8, c, 0, 314628) + 170 fe8d9d2c uldap_cache_checkuserid (fe8e4af8, 0, 0, 0, 2, 0) + 1044 fe9e3f74 authn_ldap_check_password (0, fd0f99ac, 31609f, fd0f9998, 80808080, 1010101) + 834 fe982470 authenticate_basic_user (314628, 0, 3145e8, 8d, 237120, 25aec0) + 608 0007f750 ap_run_check_user_id (314628, 236e78, 236e78, 2, d, 25aec0) + 90 000818fc ap_process_request_internal (314628, 0, 3145e8, 8d, 237120, 25aec0) + 6e4 000c5288 ap_process_async_request (314628, 236e78, 236e78, 2, d, 25aec0) + 638 000c5428 ap_process_request (314628, 4, 314628, 8d, 237120, 25aec0) + 20 000bddc0 ap_process_http_sync_connection (237128, 236e78, 236e78, 2, d, 25aec0) + f0 000bdfbc ap_process_http_connection (237128, 236e78, 236e78, 8d, 237120, 25aec0) + 64 000ab038 ap_run_process_connection (237128, 236e78, 236e78, 2, d, 25aec0) + 90 000ab9bc ap_process_connection (237128, 236e78, 236e78, 8d, 237120, 25aec0) + 8c 000d235c process_socket (1ef320, 236e30, 236e78, 2, d, 25aec0) + ec 000d373c worker_thread (1ef320, 1f6ef0, 0, 0, 0, 0) + 49c ff24f894 dummy_worker (1ef320, fd0fc000, 0, 0, ff24f840, 1) + 54 ff0404f4 _lwp_start (0, 0, 0, 0, 0, 0) - lwp# 17 / thread# 17 ff24f840 dummy_worker(), exit value = 0x ** zombie (exited, not detached, not yet joined) ** - lwp# 18 / thread# 18 ff24f840 dummy_worker(), exit value = 0x ** zombie (exited, not detached, not yet joined) ** - lwp# 19 / thread# 19 ff24f840 dummy_worker(), exit value = 0x ** zombie (exited, not detached, not yet joined) ** - lwp# 20 / thread# 20 ff24f840 dummy_worker(), exit value = 0x ** zombie (exited, not detached, not yet joined) ** - lwp# 21 / thread# 21 ff24f840 dummy_worker(), exit value = 0x ** zombie (exited, not detached, not yet joined) ** - lwp# 22 / thread# 22 ff24f840 dummy_worker(), exit value = 0x ** zombie (exited, not detached, not yet joined) ** - lwp# 23 / thread# 23 ff24f840 dummy_worker(), exit value = 0x ** zombie (exited, not detached, not yet joined) ** - lwp# 24 / thread# 24 ff24f840 dummy_worker(), exit value = 0x ** zombie (exited, not detached, not yet joined) ** - lwp# 25 / thread# 25
Re: [users@httpd] HOW TO APPLY TOMCAT UPGRADE
On Tue, Jun 9, 2015 at 11:41 AM, Salami Kehinde Rasheed kennysal...@gmail.com wrote: I need step-by-step to upgrade to apache v7.0.40, what to download and how to apply this on production environment. *SALAMI KEHINDE R* This is the wrong mailing list; this list is for supporting Apache HTTP Server, not Apache Tomcat. Look here: http://tomcat.apache.org/lists.html -- Born in Roswell... married an alien... http://emptyhammock.com/
Re: [users@httpd] Apache 2.4, Perl 5.010, MySQL 5.6 and Windows 8.1 pro - no database connection
On 04/20/2015 04:31 AM, Dan Östberg wrote:
Any changes of httpd.conf that I shall do? Or in any other
configuration file? Or...?
DBIcreatetabledoesn't run but printenv does:
Have you tried running DBIcreatetable from the command-line to see if
you get any Perl compile failure or other fatal errors?
DBIcreatetable:
#!C:\Dwimperl\perl\bin\perl.exe
use 5.010;
use strict;
use warnings;
use DBI;
print Content-type: text/plain; charset=iso-8859-1\n\n;
say Perl MySQL Create Table Demo;
# MySQL database configurations
my $dsn = DBI:mysql:clients;
my $username = root;
my $password = pw;
# connect to MySQL database
my %attr = (PrintError=0, RaiseError=1);
my $dbh = DBI-connect($dsn,$username,$password, \%attr);
# create table statements
my @ddl = (
# create tags table
CREATE TABLE tags (
tag_id int(11) NOT NULL AUTO_INCREMENT PRIMARY KEY,
tag varchar(255) NOT NULL
) ENGINE=InnoDB;,
# create links table
CREATE TABLE links (
link_id int(11) NOT NULL AUTO_INCREMENT PRIMARY KEY,
title varchar(255) NOT NULL,
url varchar(255) NOT NULL,
target varchar(45) NOT NULL
) ENGINE=InnoDB;,
# create link_tags table
CREATE TABLE link_tags (
link_id int(11) NOT NULL,
tag_id int(11) NOT NULL,
PRIMARY KEY (link_id,tag_id),
KEY fk_link_idx (link_id),
KEY fk_tag_idx (tag_id),
CONSTRAINT fk_tag FOREIGN KEY (tag_id)
REFERENCES tags (tag_id),
CONSTRAINT fk_link FOREIGN KEY (link_id)
REFERENCES links (link_id)
) ENGINE=InnoDB
);
# execute all create table statements
for my $sql(@ddl){
$dbh-do($sql);
}
say All tables created successfully!;
# disconnect from the MySQL database
$dbh-disconnect();
printenv:
#!C:\Dwimperl\perl\bin\perl.exe
#
# To permit this cgi, replace # on the first line above with the
# appropriate #!/path/to/perl shebang, and on Unix / Linux also
# set this script executable with chmod 755.
#
# * !!! WARNING !!! *
# This script echoes the server environment variables and therefore
# leaks information - so NEVER use it in a live server environment!
# It is provided only for testing purpose.
# Also note that it is subject to cross site scripting attacks on
# MS IE and any other browser which fails to honor RFC2616.
##
## printenv -- demo CGI program which just prints its environment
##
use strict;
use warnings;
print Content-type: text/plain; charset=iso-8859-1\n\n;
foreach my $var (sort(keys(%ENV))) {
my $val = $ENV{$var};
$val =~ s|\n|\\n|g;
$val =~ s||\\|g;
print ${var}=\${val}\\n;
}
//
Re: [users@httpd] Apache24, Perl 5.010, MySQL 5.6 and Windows 8.1 - no database connection
On 04/19/2015 11:01 AM, Dan Östberg wrote: Everything works (It works!) except for running cgi/pl-files where database connection are involved. A typical Apache server error message is [Sun Apr 19 15:11:03.324060 2015] [cgi:error] [pid 3312:tid 1032] (9)Bad file descriptor: [client ::1:49681] AH01222: don't know how to spawn child process: C:/Apache24/cgi-bin/DBIcreatetable.pl HELP! / / Expect this to be a simple issue of running Perl scripts as CGIs, and nothing to do with database connections. Please have a look at this documentation and see if it helps: http://httpd.apache.org/docs/2.4/mod/core.html#scriptinterpretersource
Re: [users@httpd] file write problem
On 04/10/2015 05:36 PM, Jason Cillo wrote: Does 2.4 support Perl? I thought I read somewhere recently that it did not. There's not yet a mod_perl release that supports 2.4 but you can use it from svn or with patches. On Apr 10, 2015, at 3:50 PM, Jack Connors connorsj...@sbcglobal.net wrote: Environment: OpenSUSE 13.2 (x86_64) Apache 2.4.10 Apache Error Log (/var/log/apache2/error_log): [Fri Apr 10 12:30:44.021729 2015] [ssl:warn] [pid 1513] AH01873: Init: Session Cache is not configured [hint: SSLSessionCache] [Fri Apr 10 12:30:44.025051 2015] [mpm_prefork:notice] [pid 1513] AH00163: Apache/2.4.10 (Linux/SUSE) OpenSSL/1.0.1k-fips configured -- resuming normal operations [Fri Apr 10 12:30:44.025139 2015] [core:notice] [pid 1513] AH00094: Command line: '/usr/sbin/httpd2-prefork -f /etc/apache2/httpd.conf -D SYSTEMD -D FOREGROUND' Local config file (/etc/apache2/httpd.conf.local): Directory /tmp AllowOverride None Require all granted /Directory This doesn't affect whether or not your CGI script can write to /tmp. It only affects whether or not requests that map to /tmp can be served. Excerpt from the CGI script: my $testFile = '/tmp/test.txt'; my $m = webPage starting\n; open (FH, , $testFile) or die cannot open $testFile: $!\n; print FH $m; close FH; Problem: I have a CGI script in perl. The script writes to a file. The file exists and has world read/write access. This function worked with apache 2.2.17. With 2.4, Nothing happens: no errors, no write to file. I have tried the Directory directive shown in the local config file. The local config is included in httpd.conf. Any suggestions. - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [users@httpd] Compatible mod_perl module to Apache 2.4.3
On 04/09/2015 03:30 AM, Sailaja Gadireddy wrote: Hello Team, I would like to know if mod_perl-2.0.8.tar.gz is compatible to Apache 2.4.3. mod_perl has not yet had a release which supports Apache httpd 2.4.x, although patches have been available which handle most issues. Use the appropriate perl.apache.org mailing list (refer to http://perl.apache.org/maillist/index.html) for better help. I have tried compliling it and fot the below error. bash-3.2# perl Makefile.PL MP_APXS=/opt/web/apache_test/bin/apxs MP_APR_CONFIG=/opt/app/software/httpd-2.4.3/srclib/apr/apr-1-config -Duseithreads Reading Makefile.PL args from @ARGV MP_APXS = /opt/web/apache_test/bin/apxs MP_APR_CONFIG = /opt/app/software/httpd-2.4.3/srclib/apr/apr-1-config no conflicting prior mod_perl version found - good. Configuring Apache/2.4.3 mod_perl/2.0.8 Perl/v5.8.4 [ error] Using Perl 5.8.4 w/o ithreads and 'dynamic' mpm httpd. [ error] Failed requirements: [ error] - Perl built with ithreads (build perl with -Duseithreads) Please help me the to fix this. Thanks Regards, Sailaja - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [users@httpd] Re: compile and install from source
On 03/29/2015 03:05 AM, @lbutlr wrote: On Mar 29, 2015, at 00:46, @lbutlr krem...@kreme.com wrote: Downloaded and compiled bind-9.9.7 and it built fine (./configure make make install). but /usr/sbin/named is still 9.8 If I try to start named (service named start), it starts this version instead of the version in /usr/local/sbin I assume I need to either replace /etc/rc.d/named or fix it somehow? I found this in /etc/defaults/rc,conf: wrong mailing list ;) - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [users@httpd] Apache HTTP Server and Weblogic Plug-in for Apache
On Wed, Dec 17, 2014 at 9:40 AM, Daniel dferra...@gmail.com wrote: If you can provide your mpm and it's settings and httpd version, I'd say you are using 2.2.x because of the module file you use(*mod_wl.so instead of **mod_wl_24.so)*, but just to make sure. (on a side note, Oracle recommends WLSRequest on instead of SetHandler, you should use it too). Also make sure backend has no issues connecting manually: curl http://192.168.0.123:7006/benefits; Also how are you starting up httpd, how and which user do you use? have you checked ulimit values when doing so? Regards 2014-12-17 3:36 GMT+01:00 Fabricio Pedroso Jorge fpjb...@gmail.com: Hi all, I am trying to configure a test env with an Apache HTTP Server and an Oracle Weblogic 12c Cluster. The configuration is: Apache HTTP Server: 192.168.0.149 Weblogic Cluster..: 192.168.0.129 (2 Clustered Managed Servers in the same server for testing purposes). The configuration of my httpd.conf file, regarding the plug-in configurations can be seen below: *[...]* *Listen 8080* *[...]* *LoadModule weblogic_module modules/mod_wl.so* *[...]* *IfModule mod_weblogic.c* * WeblogicHost 192.168.0.123* * WeblogicPort 7005* */IfModule* *Location /benefits* * SetHandler weblogic-handler* * WebLogicCluster 192.168.0.123:7005 http://192.168.0.123:7005,192.168.0.123:7006 http://192.168.0.123:7006* * WLSocketTimeoutSecs 20* */Location* When i try to acess my app (benefits) using the address *http://192.168.0.149:8080/benefits http://192.168.0.149:8080/benefits*, i get the following error: *No backend server available for connection: timed out after 10 seconds or idempotent set to OFF or method not idempotent.* At the error_log, the error message is the following: *[Tue Dec 16 23:37:14 2014] [error] [client 192.168.0.118] 849214187838263 weblogic: ***Exception type [NO_RESOURCES] (apr_socket_connect call failed with error=13, host=192.168.0.123, port=7006 ) raised at line 1682 of URL.cpp[Tue Dec 16 23:37:14 2014] [error] [client 192.168.0.118] weblogic: Trying GET /benefits at backend host '192.168.0.123/7006 http://192.168.0.123/7006; got exception 'NO_RESOURCES: [os error=13, line 1682 of URL.cpp]: apr_socket_connect call failed with error=13, host=192.168.0.123, port=7006 '[Tue Dec 16 23:37:16 2014] [error] [client 192.168.0.118] 849214187838263 weblogic: ***Exception type [NO_RESOURCES] (apr_socket_connect call failed with error=13, host=192.168.0.123, port=7005 ) raised at line 1682 of URL.cpp* 13 = EACCES This would appear to be the cause (from Linux man pages): connection request failed because of a local firewall rule *[Tue Dec 16 23:37:16 2014] [error] [client 192.168.0.118] weblogic: Trying GET /benefits at backend host '192.168.0.123/7005 http://192.168.0.123/7005; got exception 'NO_RESOURCES: [os error=13, line 1682 of URL.cpp]: apr_socket_connect call failed with error=13* What am i doing wrong? Thanks for the attention and pacience. -- *Fabrício Pedroso Jorge.* Administrador de Banco de Dados Oracle 11g Certified SQL Expert Oracle 11g Certified Associate Oracle 11g Certified Professional Linux Professional Institute Certified Level I (LPIC-I) ITIL V3 Foudations certificacaodb.com.br *Resumo Profissional:* http://br.linkedin.com/in/fabriciojorge *Contatos:* + 55 91 88991116 skype: fabricio.pedroso.jorge fpjb...@gmail.com -- Born in Roswell... married an alien... http://emptyhammock.com/
Re: [users@httpd] http request cpu usage and URL
On Mon, Dec 8, 2014 at 4:30 PM, Rose, John B jbr...@utk.edu wrote: Looking at top output we have some occasional http requests that generate a wildly disproportionate amount of %cpu usage compared to the more frequent %. Some httpd child processes may be handling far more requests than the others. If you want to tie that process listing to the URL being accessed to see if there was a pattern of a specific web site or page causing that high cpu usage, any suggested methods of doing that? mod_status with ExtendedStatus On shows the active requests and the CPU per child process. With prefork you can see But with the worker and event MPMs it will be hard to tie the CPU to a particular request. If you're brave (a.k.a. you can try it in a test environment), try this module I wrote just now: http://emptyhammock.com/downloads/mod_request_cpu.c This uses a Linux feature to get the elapsed per-thread CPU for processing a request, for logging in the access log. /* * Building the module: * /path/to/apxs -ci mod_request_cpu.c * * Configuration: * LoadModule request_cpu_module modules/mod_request_cpu.so * Add %Z to your access log configuration */ I used it with this access log format: LogFormat %h %l %u %t \%r\ %s %b %D %Z commoncpu The %D (existing feature) is the elapsed time in microseconds. %Z is provided by mod_request_cpu and gives the user and system microseconds (suffixed by u and s), as in the following examples: 127.0.0.1 - - [08/Dec/2014:19:43:44 -0500] GET /server-status/ HTTP/1.1 200 16248 33964 33721u,0s That's 33964 microseconds elapsed time (%D), 28657 microseconds user CPU, and 0 microseconds system CPU (both from %Z). 127.0.0.1 - - [08/Dec/2014:19:43:44 -0500] GET /server-status/ HTTP/1.1 200 16253 33877 28657u,0s 127.0.0.1 - - [08/Dec/2014:19:43:44 -0500] GET /server-status/ HTTP/1.1 200 16246 29015 26633u,0s 127.0.0.1 - - [08/Dec/2014:19:43:44 -0500] GET /server-status/ HTTP/1.1 200 16240 31987 31751u,0s 127.0.0.1 - - [08/Dec/2014:19:43:44 -0500] GET /server-status/ HTTP/1.1 200 21544 26221 22305u,0s 127.0.0.1 - - [08/Dec/2014:19:43:44 -0500] GET /server-status/ HTTP/1.1 200 16247 30902 30722u,0s 127.0.0.1 - - [08/Dec/2014:19:43:44 -0500] GET /server-status/ HTTP/1.1 200 16242 35939 34450u,47s 127.0.0.1 - - [08/Dec/2014:19:43:44 -0500] GET /server-status/ HTTP/1.1 200 16234 38101 34502u,8s 127.0.0.1 - - [08/Dec/2014:19:43:44 -0500] GET /server-status/ HTTP/1.1 200 16235 31423 29342u,0s This is for the same CPU-intensive request over and over, and you see different values logged. The time starts after httpd reads the request header. It builds with 2.2 and 2.4, but I only tested it with 2.4. (Now that I wasted the last 59 minutes on this I guess someone will tell me an existing way to do the same thing :) ) Thanks -- Born in Roswell... married an alien... http://emptyhammock.com/
Re: [users@httpd] Apache crashes on Qualys Scan
On Fri, Dec 5, 2014 at 6:07 AM, Kannan Narayanasamy -X (kannanar - HCL TECHNOLOGIES LIMITED at Cisco) kanna...@cisco.com wrote: Hi Team, While scanning the ports using Qualys scanner, Apache process is crashing. We can add the corresponding port in the exclude list but in customer scenario is not possible to exclude those ports from scanning. Is there any option is available to recover from this crashing. Apache Details: Server version: Apache/2.2.22 (Win32) Server built: Apr 11 2012 12:17:10 Can anyone help us on this part to resolve the issue? Thanks, Kannan Narayanasamy. Find the root cause. Maybe the scanner is checking for a known vulnerability which causes a crash, and you need to upgrade. Several procedures that should provide useful information: 1. Use the latest httpd 2.2.x and see if the problem still occurs. 2. Use mod_log_forensic ( http://httpd.apache.org/docs/2.2/mod/mod_log_forensic.html) to see which request is triggering the crash, verify that it is the same request for each scan run, then study the configuration and any third party modules that would behave differently for that particular request. 3. Disable all third-party modules and see if the problem is still reproduced. If not, add them back one by one to see which is the likely culprit. 4. Use debugging tools (a crash dump or running the httpd.exe child process under a debugger while the problem is reproduced). You'll need .pdb files (debugging symbols) for your httpd for this to be practical. -- Born in Roswell... married an alien... http://emptyhammock.com/
Re: [users@httpd] problem with shared memory and directives for httpd
On Thu, Dec 4, 2014 at 9:29 AM, nik600 nik...@gmail.com wrote: Dear all i'm experiencing a problem with shared memory and i'm not able to figure it out. i've got a segment of shared memory in my module config and seen that if set some settings for the module in my configuration this memory isn't available in the request process. Please use the mailing list for module developers: http://httpd.apache.org/lists.html#modules-dev Thanks! i've also attached an example (very simplified and without any mutex, just to show the case). i've noticed that if i have in my server configuration: IfModule mod_kcache.c KcacheEnabled On /IfModule The memory segment is not availabe: [Thu Dec 04 15:26:15 2014] [crit] [client 127.0.0.1] kcache_return_result invalid config-s But if i comment this directive: IfModule mod_kcache.c # KcacheEnabled On /IfModule The memory segment is available and gets updated: [Thu Dec 04 15:24:47 2014] [debug] src/mod_kcache.c(96): [client 127.0.0.1] config-s-counter=68 [Thu Dec 04 15:24:48 2014] [debug] src/mod_kcache.c(96): [client 127.0.0.1] config-s-counter=69 [Thu Dec 04 15:24:48 2014] [debug] src/mod_kcache.c(96): [client 127.0.0.1] config-s-counter=70 ... i've attached the full example (100 lines of code) I'll appreciate any help, thank all in advance -- /*/ nik600 http://www.kumbe.it - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org -- Born in Roswell... married an alien... http://emptyhammock.com/
Re: [users@httpd] Substitute for ap_mpm_run function
On Fri, Nov 28, 2014 at 4:29 AM, Ishan Thakur ishanthaku...@yahoo.in wrote: Hi, What is the equivalent function of ap_mpm_run(2.2.22 apache) in 2.4.10 ap_hook_mpm(). Look at its use in server/mpm/prefork/prefork.c for an example. BTW, this is a more appropriate mailing list: http://httpd.apache.org/lists.html#modules-dev Thanks Regards, Ishan -- Born in Roswell... married an alien... http://emptyhammock.com/
Re: [users@httpd] Any way to build using nmake in apache 2.4.10
On Tue, Nov 18, 2014 at 4:48 AM, Ishan Thakur ishanthaku...@yahoo.in wrote: Hi , I want to build apache httpd 2.4.10 in win32 platform using USEMAK=1 in Makefile.win. But it requires some .MAK files. Can you tell me how build using this or where to find the MAK files. Thanks Regards, Ishan There are two build systems for Windows, described at http://httpd.apache.org/docs/2.4/platform/win_compiling.html My *guess* is that you'll get more help with the legacy build system (including Makefile.win) in the ApacheLounge forum at http://www.apachelounge.com/viewforum.php?f=6 (ApacheLounge is not affiliated with the ASF; it is a Windows-centric community around Apache httpd.) I suggest trying the newer cmake-based build, which directly supports more levels of Visual Studio using either nmake or Visual Studio project files; see http://httpd.apache.org/docs/2.4/platform/win_compiling.html#cmake You'll probably get the most help for that here. -- Born in Roswell... married an alien... http://emptyhammock.com/
Re: [users@httpd] Problem with mod_proxy and chunked content
On Mon, Nov 17, 2014 at 4:50 AM, Blomme Dieter dieter.blo...@digipolis.be
wrote:
We have fixed this problem temporarily. What I've noticed is that the
header isn't there and inserting it (e.g. with burp or fiddler), fixes the
problem. I've then tried to insert the header in the vhost that acts as a
proxy, but the header didn't appear. I think that mod_proxy strips that
header as the last part of the request.
I don't know if this was mentioned before:
In the original message you showed, the content was chunked but the
response had a content-length header. If a proxy received a response from
upstream with both a transfer-encoding and content-length, it *must* strip
one. (Having different components choose a different message boundary
mechanism to respect enables certain attacks.)
I guess this means that it was bad coming out of the backend httpd+PHP?
We've now fixed the problem by making sure our load balancer enforces http
1.0 for the requests that were problematic. Later on we'll take another
look at this problem when we have more time.
Thans Stefan for the hint! ;)
kind regards,
On 13 Nov 2014, at 19:08, Blomme Dieter dieter.blo...@digipolis.be
wrote:
Yes, but I thought that if that header is missing, it should still check
if the data is chunked, is that incorrect?
On 13 Nov 2014, at 18:52, Stefan Magnus Landrø stefan.lan...@gmail.com
wrote:
The transfer encoding header is missing, right?
Sendt fra min iPhone
Den 13. nov. 2014 kl. 18.13 skrev Blomme Dieter
dieter.blo...@digipolis.be:
Hi,
We have a problem with mod_proxy and chunked content.
We use mod_proxy to selectively request pages from a second site, the
ProxyPass and ProxyPassReverse statements are in the vhost file. Nearly all
requests are OK, Except for one type of request which can't be handled
properly. We use SAML SSO and upon logging out, the response from a
simplesaml service provider is not correct. It is chunked, but is not
parseable. The problem is the chunk part within the SAML Response. This is
also visible in the response (see below). I have googled this and searched
Apache's bugzilla, but there is no solution I've tried that works.
Not forcing http1.0, sendcl, ...
Can anybody please help with this issue?
Thanks very much in advance!
HTTP/1.1 200 OK
Date: Thu, 13 Nov 2014 16:23:02 GMT
Server: Apache/2.2.15 (Red Hat)
X-Powered-By: PHP/5.3.3
X-Robots-Tag: noindex,noarchive
Content-Type: text/html; charset=UTF-8
X-Robots-Tag: noindex,noarchive
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Vary: Accept-Encoding
Content-Length: 7460
132
!DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Transitional//EN
http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd;
html xmlns=http://www.w3.org/1999/xhtml; xml:lang=en lang=en
head
meta http-equiv=content-type content=text/html; charset=utf-8
/script type=text/javascript
36d
window.NREUM||(NREUM={}),__nr_require=function(t,e,n){function
r(n){if(!e[n]){var
o=e[n]={exports:{}};t[n][0].call(o.exports,function(e){var
o=t[n][1][e];return r(o?o:e)},o,o.exports)}return
e[n].exports}if(function==typeof __nr_require)return __nr_require;for(var
o=0;on.length;o++)r(n[o]);return r}({QJf3ax:[function(t,e){function
n(t){function e(e,n,a){tt(e,n,a),a||(a={});for(var
c=u(e),f=c.length,s=i(a,o,r),p=0;fp;p++)c[p].apply(s,n);return s}function
a(t,e){f[t]=u(t).concat(e)}function u(t){return f[t]||[]}function
c(){return n(e)}var
f={};return{on:a,emit:e,create:c,listeners:u,_events:f}}function
r(){return{}}var
o=nr@context,i=t(gos);e.exports=n()},{gos:7eSDFh}],ee:[function(t,e){e.exports=t(QJf3ax)},{}],gos:[function(t,e){e.exports=t(7eSDFh)},{}],7eSDFh:[function(t,e){function
n(t,e,n){if(r.call(t,e))return t[e];var o=n();if(Object.definePr
5a8
opertyObject.keys)try{return
Object.defineProperty(t,e,{value:o,writable:!0,enumerable:!1}),o}catch(i){}return
t[e]=o,o}var
r=Object.prototype.hasOwnProperty;e.exports=n},{}],D5DuLP:[function(t,e){function
n(t,e,n){return r.listeners(t).length?r.emit(t,e,n):(o[t]||(o[t]=[]),void
o[t].push(e))}var
r=t(ee).create(),o={};e.exports=n,n.ee=r,r.q=o},{ee:QJf3ax}],handle:[function(t,e){e.exports=t(D5DuLP)},{}],XL7HBI:[function(t,e){function
n(t){var e=typeof
t;return!t||object!==efunction!==e?-1:t===window?0:i(t,o,function(){return
r++})}var
r=1,o=nr@id,i=t(gos);e.exports=n},{gos:7eSDFh}],id:[function(t,e){e.exports=t(XL7HBI)},{}],loader:[function(t,e){e.exports=t(G9z0Bl)},{}],G9z0Bl:[function(t,e){function
n(){var t=l.info
=NREUM.info;if(tt.agentt.licenseKeyt.applicationIDcc.body){l.proto=https===p.split(:)[0]||t.sslForHttp?https://
:http://,a(mark,[onload,i()]);var
e=c.createElement(script);e.src=l.proto+t.agent,c.body.appendChild(e)}}function
r(){complete===c.readyStateo()}function
o(){a(mark,[domContent,i()])}function i(){return(new
Date).getTime()}var
Re: [users@httpd] SNI
On Wed, Nov 12, 2014 at 5:05 AM, Nick Edwards nick.z.edwa...@gmail.com wrote: Hello, Have a problem on one server where SNI does not appear to work, the only difference is the very first vhost is non SSL, the SSL is loaded second - works, then it loads some more http vhosts, - they work, then loads some SSL sites of same .domain - they work too, then it tries to load SSL site of another domain - this fails, apache reports no errors, but clients including using latest firefox, get wrong cert error, is there an ordering issue? or did something else break? Disc: Use latest apache version of openssl \exceeds minimum required for SNI. Thanks It would help to see your Apache httpd version and a sketch of your SSL-related configuration. -- Born in Roswell... married an alien... http://emptyhammock.com/
Re: [users@httpd] http testing question
On Thu, Nov 6, 2014 at 2:37 PM, Rose, John B jbr...@utk.edu wrote: Any pro/con views, personal experience, insights on these tools, or any not listed here you think are good? Ab - Apache jmeter Webpagetest Httperf Apache Flood We have tried ab, webpagetest, and jmeter a bit but still learning. Thanks What aspects do you plan to test? Most, maybe all, can create arbitrary load on your server, at least when you use multiple clients. Most, maybe all, can check the HTTP response code. Some can perform detailed checks of response content. Some can use the response from one request to drive subsequent requests, such as when simulating login or more complex user flows. Maybe the question is what combination of load testing and functional testing do you need? -- Born in Roswell... married an alien... http://emptyhammock.com/
Re: [users@httpd] Archiva database issue
On Mon, Nov 3, 2014 at 12:31 PM, Tim Furlong tim.furl...@greenenergyoptions.co.uk wrote: Hi, this is my first request for assistance using this method and I am quite unfamiliar with Archiva or Apache, so I hope I don’t prove too difficult. Hi Tim, Apache, or ASF, has lots of projects. This is the user support mailing list for the web server (httpd). Please look here: http://archiva.apache.org/mail-lists.html
Re: [users@httpd] mod_ssl, poodle and SSLv2Hello
On Fri, Oct 17, 2014 at 1:49 PM, Matthew Hughes hughes.m...@gmail.com wrote: Many SSL clients, notably JDK 6, use the SSLv2Hello protocol to handshake with the server. Using this protocol does *not* mean you are using SSL 2.0 or 3.0 for that matter; it is merely a handshake to determine *which* protocol to use. [http://tools.ietf.org/html/rfc5246#appendix-E.2] However, in Apache, if you disable SSLv3 support, this apparently removes support for the SSLv2Hello protocol. Apache Tomcat has explicit support for SSLv2Hello; that is, you can enable that, but not enable SSLv3. Is there any way to do this in Apache? not at the present time; this is being discussed currently on the dev@httpd mailing list - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org -- Born in Roswell... married an alien... http://emptyhammock.com/
Re: [users@httpd] PipedLogs and OpenGL
On Tue, Oct 28, 2014 at 10:37 AM, Juan Carvajal B. j...@mediaarchitecture.org wrote: Hello List! I created an app with GUI that gets data from the apache served through the functionality called piped logs http://httpd.apache.org/docs/2.2/logs.html#piped. My app works just fine when I launch it from codeblocks or when I start it myself via gui or from command line, even if I lunch it as Root. *However*: when Apache launches the application fails to create the openGL window (some cout output located at main() before creating the openGL window is shown in the command line). I digged into the apache error logs and I found the following messages: [ error ] ofAppGLFWWindow: 65542: X11: Failed to open X display Try wrapping your program in a shell script that sets DISPLAY, or checks whether or not DISPLAY is already set if you think that is handled already. [ error ] ofAppGLFWWindow: couldn't init GLFW [ error ] ofAppGLFWWindow: 65537: The GLFW library is not initialized [ error ] ofFbo: GL frame buffer object not supported by this graphics card Segmentation fault (core dumped) My app worked fine in windows (GUI included). However for technical reasons I need to use it in linux (Ubuntu 12.04 64 bits). And I'm facing the problem described above. My app is based in openframworks i.e. openGL. I'm almost sure that this has to do with the context in which apache is being run. However, this is beyond my tech expertise. Every piece of help is highly appreciated! Basic data: Ubuntu 12.04 64bits Apache2 OF 0.84 -- *Join our mailing list http://lists.mediaarchitecture.org/?p=subscribeid=1 (Max 1-mail / month)* -- Born in Roswell... married an alien... http://emptyhammock.com/
Re: [users@httpd] Red Hat 7 Apache 2.4
On Wed, Oct 29, 2014 at 3:25 PM, Rose, John B jbr...@utk.edu wrote: We have installed Red Hat 7 and have been working on setting up some web sites for testing in that environment. It looks like the version bundled with RH7 has the issues mentioned in this https://bugzilla.redhat.com/show_bug.cgi?id=909703 We have done a yum update but I guess what we have is the latest version available via that method. Here is what we are getting … service httpd graceful Passing arguments to httpd using apachectl is no longer supported. You can only start/stop/restart httpd using this script. If you want to pass extra arguments to httpd, edit the /etc/sysconfig/httpd config file. Doing a process listing gives httpd processes with this /usr/sbin/httpd –DFOREGROUND httpd -V Server version: Apache/2.4.6 (Red Hat) Any suggestions? Thanks My two cents: Try Red Hat support resources if you're not able to find stuff in their docs that helps manage their packaging of httpd. I haven't seen evidence that you'll find much help with their systemd integration here, but I could be wrong. -- Born in Roswell... married an alien... http://emptyhammock.com/
Re: [users@httpd] Compiling HTTPD from Source
On Mon, Oct 27, 2014 at 11:10 AM, Lesley Kimmel ljkimme...@hotmail.com wrote: Thanks for your previous input. I compiled HTTPD on RHEL5 and attempted to use on RHEL6 given the lowest glibc and kernel version restrictions. However, I got an error on RHEL6 because libexpat was not found. It turns out that RHEL5 has libexpat by default and RHEL6 does not. I think it supports python and yum. In any case I was able to successfully build HTTPD on RHEL5 to run on RHEL6 by using an 'undocumented' compile flag '--with-expat=builtin'. If it were me I'd use the system expat. Your Linux vendor would be expected to fix any security issues within a short timeframe. APR-Util probably wouldn't have a new release so quickly for this library which it bundles. This brings up the question of what other issues one might run into when compiling on one system to be used on another. Is there not a very generic compile procedure or is it simply the best practice to compile each package on the target system? I'm trying to avoid maintaining several different build servers if possible. I'd be very concerned about OpenSSL. My experience is with scenarios where the security library is part of the custom httpd package. There are always issues of identifying required packages for deployment when you run on different distros/versions, and disabling features in rare cases when the build would find it on the build system but you don't want to require its installation on the target machine. Thanks again, -Les -- Date: Sat, 25 Oct 2014 09:32:35 -0400 From: traw...@gmail.com To: users@httpd.apache.org Subject: Re: [users@httpd] Compiling HTTPD from Source On Sat, Oct 25, 2014 at 9:16 AM, Lesley Kimmel ljkimme...@hotmail.com wrote: All; I've had good success compiling HTTPD from source when compiling on RHEL5 and running on RHEL5 or compiling on RHEL6 and running on RHEL6. I see there are library compatibility issues when compiling on RHEL6, for example, and trying to run on RHEL5. How can I compile in a more generic way to to be distro independent? Generally: compile on the lowest glibc and kernel versions on which you plan to run There's a recent discussion thread on dev@apr about working around this, but it is an iterative process and might not work from release to release. Here's that thread: http://mail-archives.apache.org/mod_mbox/apr-dev/201410.mbox/%3C20141022131350.GA2848%40unixarea.DDR.dd%3E http://mail-archives.apache.org/mod_mbox/apr-dev/201410.mbox/%3c20141022131350.GA2848%40unixarea.DDR.dd%3e Thanks in advance, -Les - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org -- Born in Roswell... married an alien... http://emptyhammock.com/ -- Born in Roswell... married an alien... http://emptyhammock.com/
Re: [users@httpd] Compiling HTTPD from Source
On Sat, Oct 25, 2014 at 9:16 AM, Lesley Kimmel ljkimme...@hotmail.com wrote: All; I've had good success compiling HTTPD from source when compiling on RHEL5 and running on RHEL5 or compiling on RHEL6 and running on RHEL6. I see there are library compatibility issues when compiling on RHEL6, for example, and trying to run on RHEL5. How can I compile in a more generic way to to be distro independent? Generally: compile on the lowest glibc and kernel versions on which you plan to run There's a recent discussion thread on dev@apr about working around this, but it is an iterative process and might not work from release to release. Here's that thread: http://mail-archives.apache.org/mod_mbox/apr-dev/201410.mbox/%3C20141022131350.GA2848%40unixarea.DDR.dd%3E Thanks in advance, -Les - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org -- Born in Roswell... married an alien... http://emptyhammock.com/
Re: [users@httpd] Apache HTTPD sends a 400 the client gets a 200
On Fri, Oct 17, 2014 at 12:10 PM, Tom Purcell tpurc...@chariotsolutions.com
wrote:
Hello
We have an application that consists of REST endpoints on a jboss
server(5.1.0) fronted by Apache httpd(2.2.15). When a client makes a bad
request it usually gets the expected 400 http response code but sometimes
the client sees a 200. This happens sporadically. Two days ago I ran a test
where it happened 11 out of 20 times. Today the highest occurrence has been
3 out of 40.
To add some context here's some output from the test. Note both calls are
identical but one gets a 400, the other 200:
curl -s -D- -u user:passwd -X POST --data @uc.json
https://ourdomain.com/ourapp/rest/v3/subscriber/id/user/0 21
21 : HTTP/1.1 400 Bad Request^M Date: Wed, 15 Oct 2014 18:44:22 GMT^M
X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1^M Content-Type:
application/json^M Content-Length: 361^M Connection: close^M ^M^M {
ErrorMessage : { errorMessage : Json validation failure:
{level=\error\,
schema={\loadingURI\:\#\,\pointer\:\/properties/userConfig/properties/userType\},
instance={\pointer\:\/userConfig/userType\}, domain=\validation\,
keyword=\enum\, message=\instance does not match any enum value\,
enum=[\0\,\1\,\3\], value=0} } }
curl -s -D- -u user:passwd -X POST --data @uc.json
https://ourdomain.com/ourapp/rest/v3/subscriber/id/user/0 21
22 : HTTP/1.1 200 OK^M Date: Wed, 15 Oct 2014 18:44:24 GMT^M
Transfer-Encoding: chunked^M Content-Type: text/plain; charset=UTF-8^M ^M {
ErrorMessage : { errorMessage : Json validation failure:
{level=\error\,
schema={\loadingURI\:\#\,\pointer\:\/properties/userConfig/properties/userType\},
instance={\pointer\:\/userConfig/userType\}, domain=\validation\,
keyword=\enum\, message=\instance does not match any enum value\,
enum=[\0\,\1\,\3\], value=0} } }
The following are the Apache ssl_access.log entries that correspond to
the above calls. Note both got a 400:
10.102.211.152 - - [15/Oct/2014:14:44:22 -0400] POST
/ourapp/rest/v3/subscriber/id/user/0 HTTP/1.1 400 361
10.102.211.152 - - [15/Oct/2014:14:44:24 -0400] POST
/ourapp/rest/v3/subscriber/id/user/0 HTTP/1.1 400 361
More context:
- This never happens going directly against the jboss server
- It does happen both with and without SSL when hitting Apache
- The tests results shown above were run with using curl as a client
but we have also seen it happen with other clients(Charles, wireshark, IOS
apps, etc)
- Note that the 200 response above does not mention the jboss server
but that the 400 does. I have verified that both requests hit the jboss
server by locating the stack traces in the jboss log.
- Normally there is an F5 in the mix and when hitting the app through
it we get the same results. That said the tests referred to here
bypassed the F5 and hit the Apache server directly
So we should get a 400 but when it gets to the client the response code is
200. Any thoughts?
Maybe some component encountered a problem which caused it to set status to
400 AFTER httpd had already built the response header with 200 and passed
it down towards the network.
Is anything in the error log? If not, do you have an available tracing
mechanism that shows function return values? Often an HTTP status code
will be the return value of a function at some point. (I have a module for
2.4 that tells you the hook and the module that returned an error -- if it
was returned across a module interface -- but it is not fun to activate
since it requires rebuilding httpd. See
http://emptyhammock.blogspot.com/2014/05/which-apache-httpd-module-failed-request.html
)
--
Thanks,
Tom Purcell
Cell: 215-779-1963
--
Born in Roswell... married an alien...
http://emptyhammock.com/
Re: [users@httpd] Problem with HTML datalist tag
On Tue, Oct 14, 2014 at 11:09 AM, barry kimelman barryk_apa...@outlook.com wrote: Hello, my laptop at the office is windows 7 with internet explorer 10. our apache server is version 2.2.3 running on a Linux system. I have a small HTML test file with a datalist tag that works fine when runlocally through the browser. However when I send the file up to the apache server and then attempt to display the web page with the datalist tag it does not display correctly. I just see an input box with the contents of the datalist tag choices displayed beside it. I have checked the apache error log and there was no entry of any klind for my web page. Why does the apache web server somehow manage to mess up my simple little web page which is as follows : !DOCTYPE HTML HTML HEAD TITLEDatalist/TITLE /HEAD BODY H1Datalist/H1 input type=text name=product list=productName/ datalist id=productName option value=PenPen/option option value=StaplerStapler/option option value=PencilPencil/option option value=EraserEraser/option option value=PaperPaper/option /datalist /BODY /HTML If you suspect that it is a web server issue, use browser developer tools to confirm that the data and content-type of the file is sent as expected. Presumably it is sent bit for bit the same, but there is a chance that some metadata is wrong, such as if you are using a non-standard file extension for the media type or your server is strangely configured. Otherwise, you could probably get better help from a HTML-related group. -- Born in Roswell... married an alien... http://emptyhammock.com/
Re: [users@httpd] (36)File name too long
On Wed, Sep 17, 2014 at 12:52 PM, Rich Bowen rbo...@rcbowen.com wrote: On 09/16/2014 02:50 PM, mmccar...@tribloom.com wrote: I am using RewriteRule and the proxy flag to proxy through Apache. When a long URL is passed through (longer than 255 characters), I get the error below (redacted). I understand that this is related to the maximum file name on the OS, in this case Ubuntu 14.04. My question is why is this happening when the URL is not related to a file on the file system? The URL is rewritten, then proxied to another server that works fine with long URLs. [Mon Sep 15 11:42:04.211290 2014] [core:error] [pid 18302:tid 140171735451392] (36)File name too long: [client xxx.xx.x.xxx:53717] AH00036: access to /long file path/_aliases failed (filesystem path '/long file path), referer: http://xx.xx.xx.xxx/index.html Thanks, That error message doesn't appear to be from the httpd server itself (ie, that message doesn't appear anywhere in the source code for trunk, 2.4, 2.2, or 2.0), When you see ANn, it is httpd = 2.4, and you should just grep for the n part: ./server/request.c:ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(00036) ./server/request.c- access to %s failed (filesystem path '%s'), ./server/request.c- r-uri, r-filename); which leads me to believe that 1) it's in fact from your filesystem, and 2) there's no direct way to fix that in httpd configuration. As thy why it matters when the file isn't on the filesystem, that's hard to tell without more context, but I presume that at some point in the process it is *looking* for the file in the filesystem. For example, if this RewriteRule is in a .htaccess file, rather than in the main server config, it did in fact have to navigate to a filesystem directory before consulting that .htaccess file. The decision to proxy via rewrite is being made too late in request processing for mod_proxy to prevent httpd looking for a file on disk to match the request, resulting in this issue. If there is a way to configure mod_proxy to handle the request (i.e., using mod_proxy directives), the filesystem check will be bypassed. -- Born in Roswell... married an alien... http://emptyhammock.com/
Re: [users@httpd] Fw: WELCOME to users@httpd.apache.org
On Sat, Sep 13, 2014 at 9:50 AM, Simen Mangseth s...@live.no wrote: See message below. That e-mail address simply replies with information on using the list. Start a new e-mail thread addressed to users@httpd.apache.org and ask your question. Set the subject of the mail to the area of Apache httpd that you're having trouble with. *Fra:* Simen Mangseth s...@live.no *Sendt:* lørdag, 13. september 2014 15:49 *Til:* users-h...@httpd.apache.org Hello, I don’t think this is very user-friendly, but I hope I’ve come to the right place by now. Does anybody reply to this? I need support. *Fra:* users-h...@httpd.apache.org *Sendt:* lørdag, 13. september 2014 15:45 *Til:* Simen Mangseth s...@live.no Hi! This is the ezmlm program. I'm managing the users@httpd.apache.org mailing list. PLEASE READ! This message contains information specific to this mailing list, and is not your standard form-letter subscription acknowledgement. I have added the address s...@live.no to the users mailing list. Welcome to users@httpd.apache.org! Please save this message so that you know the address you are subscribed under, in case you later want to unsubscribe or change your subscription address. This mailing list is maintained by the Apache Software Foundation as a forum in which users of the Apache HTTP server can ask each other questions, pose problems, and discuss issues. It is NOT, repeat NOT, an official support medium of the Foundation. Please take a look at URL:http://httpd.apache.org/userslist.html to see details about how this list is to be used. Posting is only permitted by subscribed addresses as an anti-spam measure. The list is moderated by volunteers from the Apache Software Foundation; moderation will mostly be notable by its absence. However, blatant abuse of the forum's purpose or the sensibilities of the subscribers will not be tolerated. Any actions taken by the moderators is final, solely at their discretion, and not subject to formal appeal. So.. be excellent to each other, and party on! --- Administrative commands for the users list --- I can handle administrative requests automatically. Please do not send them to the list address! Instead, send your message to the correct command address: To subscribe to the list, send a message to: users-subscr...@httpd.apache.org To remove your address from the list, send a message to: users-unsubscr...@httpd.apache.org Send mail to the following for info and FAQ for this list: users-i...@httpd.apache.org users-...@httpd.apache.org Similar addresses exist for the digest list: users-digest-subscr...@httpd.apache.org users-digest-unsubscr...@httpd.apache.org To get messages 123 through 145 (a maximum of 100 per request), mail: users-get.123_...@httpd.apache.org To get an index with subject and author for messages 123-456 , mail: users-index.123_...@httpd.apache.org They are always returned as sets of 100, max 2000 per request, so you'll actually get 100-499. To receive all messages with the same subject as message 12345, send a short message to: users-thread.12...@httpd.apache.org The messages should contain one line or word of text to avoid being treated as sp@m, but I will ignore their content. Only the ADDRESS you send to is important. You can start a subscription for an alternate address, for example john@host.domain, just add a hyphen and your address (with '=' instead of '@') after the command word: users-subscribe-john=host.dom...@httpd.apache.org To stop subscription for this address, mail: users-unsubscribe-john=host.dom...@httpd.apache.org In both cases, I'll send a confirmation message to that address. When you receive it, simply reply to it to complete your subscription. If despite following these instructions, you do not get the desired results, please contact my owner at users-ow...@httpd.apache.org. Please be patient, my owner is a lot slower than I am ;-) --- Enclosed is a copy of the request I received. Return-Path: s...@live.no Received: (qmail 88895 invoked by uid 99); 13 Sep 2014 13:45:32 - Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 13 Sep 2014 13:45:32 + X-ASF-Spam-Status: No, hits=2.5 required=5.0 tests=HTML_FONT_FACE_BAD,HTML_MESSAGE,RCVD_IN_DNSWL_NONE,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of s...@live.no designates 157.55.2.85 as permitted sender) Received: from [157.55.2.85] (HELO DUB004-OMC4S10.hotmail.com) (157.55.2.85) by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 13 Sep 2014 13:45:06 + Received: from DUB404-EAS214 ([157.55.2.72]) by DUB004-OMC4S10.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.22724); Sat, 13 Sep 2014 06:45:05 -0700 X-TMN: [8eetpiHyBCvndgy9mS4MZnIiNMymxpo7]
Re: [users@httpd]
On Fri, Sep 12, 2014 at 6:03 PM, muthamilan Sargunaanandan muthami...@gmail.com wrote: + I'm using windows2008R2 64bit OS On Fri, Sep 12, 2014 at 5:53 PM, muthamilan Sargunaanandan muthami...@gmail.com wrote: Hello SMEs, I'm having a Apache version httpd-2.2.22-win32-x86-openssl-0.9.8t.As per Vulnerability report, Compression algorithms should be disabled. Please help me , how to disable it. Thanks in Advance Regards Muthu Recommendation: Upgrade to the latest httpd 2.2.X version and use the directive SSLCompression off (which is the default in the latest version anyway). Alternative, using your level of httpd and OpenSSL: It MAY be possible to disable compression with the the environment variable setting OPENSSL_NO_DEFAULT_ZLIB=yes, but I'm not 100% sure that OpenSSL 0.9.8t supports that (check the source or change log???), and Windows environment variable configuration is perhaps error prone depending on how you run httpd. If you try this, figure out how to use openssl s_client to check for server compression support with/without the environment variable setting. -- Born in Roswell... married an alien... http://emptyhammock.com/
Re: [users@httpd] event MPM:multiple clients per thread.
On Wed, Sep 10, 2014 at 4:13 AM, dE de.tec...@gmail.com wrote: Hi! I was configuring the MPM modules. As per my understanding, the event module can handle more than one client per thread; since session which are in a keep alive state will be managed by a common thread freeing up the thread to handle other clients. So, no. of threads per process is effectively 'no. of active concurrent clients per process'. Am I correct? It depends on how you define active. With the event MPM in httpd 2.4, additional processing (beyond keepalive) does not require a dedicated thread. Have a look at the Async connections columns at http://www.apache.org/server-status. The connections being written to asynchronously are active from some perspective, though the module generating the response doesn't care about them anymore (in the typical scenario). - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org -- Born in Roswell... married an alien... http://emptyhammock.com/
Re: [users@httpd] Prefork MPM: Locking of error logs during write?
On Sat, Sep 6, 2014 at 10:31 AM, Bill Moseley mose...@hank.org wrote: Apache 2.2.15 on Linux. When Apache children send output to stderr it ends up in my error_log file. Does Apache have any mechanism to prevent intermixing of this output? That is, if all Apache children write large ( but 4k) strings to stderr does Apache have anything to prevent inter mixing of the output? Apache doesn't do any locking or use semaphores to prevent concurrent writing to the log, correct? -- Bill Moseley mose...@hank.org Apache httpd on Unix doesn't use locking. The file is opened in the parent with O_APPEND. If the writers inherit that descriptor, all is okay for small buffers; if a writer opens without O_APPEND, bad. -- Born in Roswell... married an alien... http://emptyhammock.com/
Re: [users@httpd] MaxRequestsPerChild - New child process doesn't process requests
On Fri, Aug 22, 2014 at 3:46 AM, Vattikuti, Vamsi Krishna Venkata (STSD) vam...@hp.com wrote: Hi, Thanks for the feedback. That tomcat application(monitoring) is invoked through a 3rd party module and application remains active in browser for days together, which result in memory leak for httpd process. To prevent that leak, that application owner has configured MaxRequestsPerChild as 100. I will suggest them to increase values of this and other directives. It is likely that you won't find a satisfactory solution as long as you have memory leaks in httpd and extremely-long-running requests. The leak needs to be fixed. I think you will be better off with the prefork MPM until this can be fixed: * Since you have such a low MaxClients, you're not getting much benefit from the worker MPM. * When a prefork child process reaches MaxRequestsPerChild, it can exit immediately since there are no other active requests in the child process, and not be stranded forever, consuming resources but not able to accept new connections. * If necessary, a person or a monitoring script can kill individual prefork child processes based on time of active request or memory use, and only affect a single active request. If this third-party module also requires exactly one child process, in addition to leaking memory and requiring child process cleanup, you've hit double jeopardy. Switch to another line of work. Regards, Vamsi. *From:* Daniel [mailto:dferra...@gmail.com] *Sent:* Friday, August 22, 2014 12:50 PM *To:* users@httpd.apache.org *Subject:* Re: [users@httpd] MaxRequestsPerChild - New child process doesn't process requests What memory leak exactly? You are just proxying to tomcat. Increase the number of maxrequestsperchild to a more sensible number, such as 10.000 or even higher, so httpd is not constantly renewing childs if you have even a minimum load. Add more servers to avoid your issue, and try to use more threads too, 50 at least. It seems like you are constraining too much, and apache 2.2.15 with mpm_worker can give much much more. You will notice performance increasing greatly overall. 2014-08-22 6:06 GMT+02:00 Vattikuti, Vamsi Krishna Venkata (STSD) vam...@hp.com: Hi Jeff, Thanks for quick response. We will check and do the needful That 100 is to prevent memory leak. Regards, Krishna. *From:* Jeff Trawick [mailto:traw...@gmail.com] *Sent:* Friday, August 22, 2014 2:24 AM *To:* users@httpd.apache.org *Subject:* Re: [users@httpd] MaxRequestsPerChild - New child process doesn't process requests On Thu, Aug 21, 2014 at 4:39 PM, Vattikuti, Vamsi Krishna Venkata (STSD) vam...@hp.com wrote: Hi, We are having an issue with Tomcat application accessing through proxy and details are below. Can you please check and share your feedback. *Issue:* We have an application(tomcat) accessed through proxy as below. Also, we have MaxRequestsPerChild setting as 100 Whenever MaxRequestsPerChild reached its limit, a new process is started but the application become unresponsive. It seems that new process doesn’t service any requests We have to restart httpd to recover that *Log:* - Access.log doesn’t show any requests for new child - Error_log shows that a) workers are initiated for new process but it didn’t service any requests b) c) processing has stuck for a minute due to some reason [Fri Aug 08 16:09:17 2014] [debug] ssl_engine_kernel.c(2118): [client 127.0.0.1] Certificate Verification, depth 0 [subject: /C=y/ST=y/L=y/O=y/OU=y/CN=y, issuer: /C=y/ST=y/L=y/O=y/OU=y/CN=y, serial: xyz] [Fri Aug 08 16:10:12 2014] [info] [client 10.150.90.25] Connection to child 6 established (server *:port number from client) d) SSL handshake has started but didn’t complete for 4 connections related to new process. There are no errors related to ssl $ grep -i handshake errorlog.2014-08-08-07_06_44 | grep -c start 707 $ grep -i handshake errorlog.2014-08-08-07_06_44 | grep -c done 703 $ *Apache version:* 2.2.15 *Proxy setting:* SSLProxyEngine On SSLProxyCipherSuite ALL SSLProxyMachineCertificateFile /var/ssl/proxy.pem proxyPass /app1 https://localhost:port number/app1 (Tomcat) *Worker configuration:* KeepAlive On MaxKeepAliveRequests 100 KeepAliveTimeout 15 IfModule worker.c StartServers 1 MaxClients 25 MinSpareThreads 12 MaxSpareThreads 25 ThreadsPerChild 25 ServerLimit 1 MaxRequestsPerChild 100 MaxMemFree 50 /IfModule Thanks Regards, Krishna MaxRequestsPerChild 100 is ridiculously low. What is happening in httpd to cause you to need that setting? Anyway... Once an httpd child process has reached 100 connections, it initiates a graceful shutdown, which means that instead of aborting current requests it will instead wait for current
Re: [users@httpd] MaxRequestsPerChild - New child process doesn't process requests
On Thu, Aug 21, 2014 at 4:39 PM, Vattikuti, Vamsi Krishna Venkata (STSD) vam...@hp.com wrote: Hi, We are having an issue with Tomcat application accessing through proxy and details are below. Can you please check and share your feedback. *Issue:* We have an application(tomcat) accessed through proxy as below. Also, we have MaxRequestsPerChild setting as 100 Whenever MaxRequestsPerChild reached its limit, a new process is started but the application become unresponsive. It seems that new process doesn’t service any requests We have to restart httpd to recover that *Log:* - Access.log doesn’t show any requests for new child - Error_log shows that a) workers are initiated for new process but it didn’t service any requests b) c) processing has stuck for a minute due to some reason [Fri Aug 08 16:09:17 2014] [debug] ssl_engine_kernel.c(2118): [client 127.0.0.1] Certificate Verification, depth 0 [subject: /C=y/ST=y/L=y/O=y/OU=y/CN=y, issuer: /C=y/ST=y/L=y/O=y/OU=y/CN=y, serial: xyz] [Fri Aug 08 16:10:12 2014] [info] [client 10.150.90.25] Connection to child 6 established (server *:port number from client) d) SSL handshake has started but didn’t complete for 4 connections related to new process. There are no errors related to ssl $ grep -i handshake errorlog.2014-08-08-07_06_44 | grep -c start 707 $ grep -i handshake errorlog.2014-08-08-07_06_44 | grep -c done 703 $ *Apache version:* 2.2.15 *Proxy setting:* SSLProxyEngine On SSLProxyCipherSuite ALL SSLProxyMachineCertificateFile /var/ssl/proxy.pem proxyPass /app1 https://localhost:port number/app1 (Tomcat) *Worker configuration:* KeepAlive On MaxKeepAliveRequests 100 KeepAliveTimeout 15 IfModule worker.c StartServers 1 MaxClients 25 MinSpareThreads 12 MaxSpareThreads 25 ThreadsPerChild 25 ServerLimit 1 MaxRequestsPerChild 100 MaxMemFree 50 /IfModule Thanks Regards, Krishna MaxRequestsPerChild 100 is ridiculously low. What is happening in httpd to cause you to need that setting? Anyway... Once an httpd child process has reached 100 connections, it initiates a graceful shutdown, which means that instead of aborting current requests it will instead wait for current requests to finish, then exit. During the time that it is waiting for current requests to finish, new connections must be handled by other child processes. BUT you set ServerLimit to 1 (and other directives such as ThreadsPerChild and MaxClients are consistent with allowing only one child process), so no other child process can be created during that time. Thus, once 100 connections are handled, new clients will be blocked until existing requests finish. --/-- My guess: Your Java application takes a long time (maybe forever?) to handle some requests. MaxRequestsPerChild makes it worse. If the Java requests are slow and eventually finish, the solution is to keep a steady set of httpd child processes (having them gracefully exit when there are slow backend requests can be harmful) and increase the number of httpd threads/child processes to handle the load. If some Java requests hang, see how to handle that on the Tomcat side. Enable server status with ExtendedStatus On and watch what happens -- whether or not certain requests handled by the Java application take a relatively long time, tieing up some or all of your very limited number of httpd threads. -- Born in Roswell... married an alien... http://emptyhammock.com/
Re: [users@httpd] Slow performance in Apache
On Tue, Aug 19, 2014 at 6:00 AM, pratibha.dhank...@wipro.com wrote: Hi All, Need urgent help from all you experts. We have a tomcat and apache server on same physical box .Earlier it was working fine however last week application is integrated with IDAM, since then whenever user is accessing the link through IDAM application is responding either very slow or not at all, Once apache is restarted ,again it start working and after 3-4 hours again same issue occurs. Please suggest. Have done some tuning at apache end as well like Timeout 120 KeepAlive Off MaxKeepAliveRequests 100 KeepAliveTimeout 15 Still not working. See if there is a buildup over time of connections between httpd and Tomcat. netstat and mod_status with ExtendedStatus On would make this relatively easy. (mod_status won't show explicitly that the request is handled by Tomcat, but you can check requests stuck in W state to see if the URL is handled by Tomcat.) -- Regards *Pratibha * The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. www.wipro.com -- Born in Roswell... married an alien... http://emptyhammock.com/
Re: [users@httpd] FreebSD jailed Apache 2.4 rewrite/proxy module errors
On Wed, Aug 13, 2014 at 6:40 AM, Goran Tepshic purpleri...@gmail.com wrote: Just set up a FreeBSD jail to run httpd in it and all works good except these two, rewrite/proxy modules. *These are error logs excerpts:* *mod_rewrite* error: [rewrite:crit] [pid 43447] (13)Permission denied: AH00666: mod_rewrite: could not init rewrite_mapr_lock_acquire in child *mod_proxy* error: [proxy:crit] [pid 43447] (13)Permission denied: AH02479: could not init proxy_mutex in child Not sure permissions of *what* are being denied as html in document root is being served just fine when these modules are disabled. I tried googling but found nothing but rubbish. Please help, this thing is making me crazy. httpd/APR on FreeBSD uses a file-based mutex (flock) by default. It looks like the mutex files are placed in a location where the httpd child processes don't have permission. You should be able to use 2.4's Mutex directive ( http://httpd.apache.org/docs/current/mod/core.html#mutex) to resolve the issue. Perhaps the necessary magic is Mutex file:/some/path/ default where /some/path is writable by httpd parent and child. I don't *think* this is some jail-specific issue, other than that child-writable paths in the jail may be different/more limited due to the way it is set up. -- Born in Roswell... married an alien... http://emptyhammock.com/
Re: [users@httpd] FreebSD jailed Apache 2.4 rewrite/proxy module errors
On Wed, Aug 13, 2014 at 8:05 AM, Goran Tepshic purpleri...@gmail.com wrote: Hmm, interesting tip Jedd. I now tried changing mutex (*commended by default*) to *sem *and those error logs stopped. Now, reading this page http://httpd.apache.org/docs/current/mod/core.html#mutex i see that there are couple of mutexes available (*i still don't know what that is and why do I need one*) and couple of them seems to remedy this issue. Not sure which one should i choose, which is stable and most performant. I'm by no means an expert, just a unix fan trying to set up a simple, secure VPS. Could you please shed some light on choosing the best solution? Safe: Follow the strength in numbers path. Use flock since that is the default for FreeBSD and presumably most httpd configurations there are still using it. But as you noticed originally the default path is not in a place where the child has permission to write to it, so see about that. (The path should default to ServerRoot / logs / ) dtruss/truss/whatever should be able to show what path can't be accessed in the jail. Fastest: Unless you want to benchmark your environment, I wouldn't worry about it. Some that may be theoretically faster have caveats listed in the documentation. Posixsem (which you might get with sem) is the one that most recently was found to have code bugs exposed in some httpd configurations (fixed in future releases of apr). ALso, HUGE thanks for your help! On Wed, Aug 13, 2014 at 1:10 PM, Jeff Trawick traw...@gmail.com wrote: On Wed, Aug 13, 2014 at 6:40 AM, Goran Tepshic purpleri...@gmail.com wrote: Just set up a FreeBSD jail to run httpd in it and all works good except these two, rewrite/proxy modules. *These are error logs excerpts:* *mod_rewrite* error: [rewrite:crit] [pid 43447] (13)Permission denied: AH00666: mod_rewrite: could not init rewrite_mapr_lock_acquire in child *mod_proxy* error: [proxy:crit] [pid 43447] (13)Permission denied: AH02479: could not init proxy_mutex in child Not sure permissions of *what* are being denied as html in document root is being served just fine when these modules are disabled. I tried googling but found nothing but rubbish. Please help, this thing is making me crazy. httpd/APR on FreeBSD uses a file-based mutex (flock) by default. It looks like the mutex files are placed in a location where the httpd child processes don't have permission. You should be able to use 2.4's Mutex directive ( http://httpd.apache.org/docs/current/mod/core.html#mutex) to resolve the issue. Perhaps the necessary magic is Mutex file:/some/path/ default where /some/path is writable by httpd parent and child. I don't *think* this is some jail-specific issue, other than that child-writable paths in the jail may be different/more limited due to the way it is set up. -- Born in Roswell... married an alien... http://emptyhammock.com/ -- Born in Roswell... married an alien... http://emptyhammock.com/ http://edjective.org/
Re: [users@httpd] stops listening to IP
On Tue, Aug 5, 2014 at 7:31 PM, Al a...@familysafeinternet.com wrote: Hi, On Aug 5, 2014, at 4:51 PM, Jeff Trawick wrote: On Tue, Aug 5, 2014 at 3:27 PM, Al a...@familysafeinternet.com wrote: Hi, I am running apache 2.4. We are now having a problem with the server, it stops answering requests on one IP. It goes down about every 45 minutes. I have since switched one of the websites to another IP and all it did was transfer the problem to the other IP. I am now using both IPs for that website and I have disabled keep alive. It now needs to be restarted every 5 hours. Does anyone have any ideas as to what is going on? operating system? Listen directives? any IPv6 interfaces? which MPM? anything in error log? anything in system log related to the interface that no longer works with httpd? I should have included this info. OS NetBSD 5.2, Listen 0.0.0.0:80 Listen 0.0.0.0:443, no IPv6, prefork, nothing in any of the logs that I can find. Thanks, Al APR had an issue with feature detection on FreeBSD 10 that led to outage symptoms, though I don't recall precisely how similar the symptoms were. Do you know if NetBSD 5.2 has the accept4 syscall? (doubtful) That issue for FreeBSD was fixed in apr-1.5.1. With those Listen directives, httpd should be immune from different behavior on different interfaces, even in the presence of bugs related to socket state, polling, etc. You could attach to children with gdb at the time of the outage and get backtraces so we can see if httpd is doing its best to handle new connections. If you can figure out how to trigger the issue, you could do so while running strace/truss/(similar tool) against the httpd child processes, which is trivial if you're using a threaded MPM and configure it to only have a single child. Other than that, I dunno. -- Born in Roswell... married an alien... http://emptyhammock.com/ http://edjective.org/
Re: [users@httpd] Windows Apache 2.4.9 restarts itself
On Thu, Aug 7, 2014 at 9:45 AM, Agnetta Kamugisha kamugis...@nccommunitycolleges.edu wrote: Jeff, Check this link. We had to implement this workaround. https://www.apachelounge.com/viewtopic.php?t=6037 FWIW, AH00344 after AH00356 shouldn't be interesting. The listening socket got closed as part of shutting down after the original problem. I hope to improve logging of that in the shutdown scenario so that people don't worry about that. This netsh winsock reset hint is interesting. With the report we have on 2.4.10, which tells us which handle goes bad (thus triggering AH00356), the bad handle is a rather generic handle. (CreateEvent(NULL, TRUE, FALSE, NULL);) When, or how often, do you need to use netsh winsock reset? Please confirm that you were seeing AH00356 without netsh winsock reset. (I can imagine that there are situations with third-party winsock layers where netsh winsock reset helps with the AH00344 error which doesn't come right after the AH00356 error.) Thanks!
Re: [users@httpd] Apache.org server-status
On Fri, Aug 8, 2014 at 10:56 AM, Rose, John B jbr...@utk.edu wrote: Looking at the apache.org server-status I do not see any of these … OPTIONS * HTTP/1.0 In the Request column While I see quite a few in ours. Why does apache.org not have any of these entries? thanks You're using prefork MPM and your configuration (MinSpareServers/MaxSpareServers/etc.) results in child processes being created and destroyed on a somewhat regular basis? The prefork MPM will wake up processes with an OPTIONS request as part of process management. apache.org runs the event MPM. -- Born in Roswell... married an alien... http://emptyhammock.com/ http://edjective.org/
Re: [users@httpd] Windows Apache 2.4.9 restarts itself
On Fri, Aug 8, 2014 at 10:21 AM, Jeff Trawick traw...@gmail.com wrote: On Thu, Aug 7, 2014 at 9:45 AM, Agnetta Kamugisha kamugis...@nccommunitycolleges.edu wrote: Jeff, Check this link. We had to implement this workaround. https://www.apachelounge.com/viewtopic.php?t=6037 FWIW, AH00344 after AH00356 shouldn't be interesting. The listening socket got closed as part of shutting down after the original problem. I hope to improve logging of that in the shutdown scenario so that people don't worry about that. This netsh winsock reset hint is interesting. With the report we have on 2.4.10, which tells us which handle goes bad (thus triggering AH00356), the bad handle is a rather generic handle. (CreateEvent(NULL, TRUE, FALSE, NULL);) When, or how often, do you need to use netsh winsock reset? Uhh, for those trying this, be aware that after doing that it says to restart the computer ;) Please confirm that you were seeing AH00356 without netsh winsock reset. (I can imagine that there are situations with third-party winsock layers where netsh winsock reset helps with the AH00344 error which doesn't come right after the AH00356 error.) Thanks! -- Born in Roswell... married an alien... http://emptyhammock.com/ http://edjective.org/
Re: [users@httpd] Apache 2.4 PHP 5.5
On Wed, Aug 6, 2014 at 10:57 AM, motty cruz motty.c...@gmail.com wrote: Hello, I just finished installing Apache 2.4 and PHP 5.5 on FreeBSD 10, but Apache 2.4 is not loading PHP. can someone help me with this issue? Thanks in advance error messages? -- Born in Roswell... married an alien... http://emptyhammock.com/ http://edjective.org/
Re: [users@httpd] Calls not hanging up
On Wed, Aug 6, 2014 at 2:28 PM, D'Arcy J.M. Cain da...@vex.net wrote:
This just started after upgrading to 11.11.0. After a call is
completed (both ends hang up) the call still shows as active.
# asterisk -x core show channels
Channel Location State Application(Data)
SIP/thinktel-000 (None) Up AppDial((Outgoing
Line)) SIP/4164251212-0 416555@LocalSets Up
Dial(SIP/thinktel/416555) 2 active channels
1 active call
1 call processed
I don't know what that software is, but it isn't supported here.
Good luck.
The 1212 number is mine and is hung up. I even rebooted my ATA to make
sure that it wasn't holding the line. My dialplan is extremely
simple. In fact, I even simplified it from what it was for this
testing. Here it is.
exten = 4164251212,1,Verbose(0, ${CALLERID(all)} Calling ${EXTEN})
same = n,Dial(SIP/4164251212,30)
same = n,VoiceMail(4164251212@LocalSets,u)
same = n,Hangup()
I can post any other log or config excerpts if someone thinks that they
are relevant but all of this was working under 11.10.2.
Thanks.
--
D'Arcy J.M. Cain
System Administrator, Vex.Net
http://www.Vex.Net/ IM:da...@vex.net
VoIP: sip:da...@vex.net
-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org
--
Born in Roswell... married an alien...
http://emptyhammock.com/
http://edjective.org/
Re: [users@httpd] Apache 2.4 PHP 5.5
On Wed, Aug 6, 2014 at 1:07 PM, Jeff Trawick traw...@gmail.com wrote: On Wed, Aug 6, 2014 at 10:57 AM, motty cruz motty.c...@gmail.com wrote: Hello, I just finished installing Apache 2.4 and PHP 5.5 on FreeBSD 10, but Apache 2.4 is not loading PHP. can someone help me with this issue? Thanks in advance error messages? I probably read too much into loading. What exactly is the symptom? Have you read this? http://php.net/manual/en/install.unix.apache2.php What is your configuration? With the LoadModule for php and FilesMatch \.php$ SetHandler application/x-httpd-php /FilesMatch it should be trivial to get some simple test.php working. (test.ph contains the classic ?php phpinfo(); ?
Re: [users@httpd] Windows Apache 2.4.9 restarts itself
) access_compat_module (shared) actions_module (shared) alias_module (shared) allowmethods_module (shared) asis_module (shared) auth_basic_module (shared) authn_core_module (shared) authn_file_module (shared) authz_core_module (shared) authz_groupfile_module (shared) authz_host_module (shared) authz_user_module (shared) autoindex_module (shared) cache_module (shared) cache_disk_module (shared) cgi_module (shared) deflate_module (shared) dir_module (shared) env_module (shared) expires_module (shared) filter_module (shared) headers_module (shared) include_module (shared) isapi_module (shared) log_config_module (shared) mime_module (shared) negotiation_module (shared) proxy_module (shared) proxy_connect_module (shared) proxy_http_module (shared) rewrite_module (shared) setenvif_module (shared) socache_shmcb_module (shared) ssl_module (shared) - apache works as a caching reverse proxy hope you can find out something that solves this issue ... thank you for your help! 2014-07-31 13:02 GMT+02:00 Jeff Trawick traw...@gmail.com: On Tue, Jul 29, 2014 at 7:40 AM, Jeff Trawick traw...@gmail.com wrote: On Tue, Jul 29, 2014 at 5:33 AM, Mar Imp marimp...@gmail.com wrote: Hi Jeff, After the first restart, apache restarted itself 2 more times yesterday. Good news: the additional information IS part of the logs: [Mon Jul 28 16:48:10.070355 2014] [mpm_winnt:crit] [pid 38752:tid 388] (OS 6)The handle is invalid. : AH02644: Child: Event handle #0 (8) is invalid does it help you to identify the issue? Unfortunately it does not immediately pinpoint the problem, but it can't hurt :) 8 is the value for the handle that suddenly went bad. I'll try to spend some real time on this over the weekend. This is a very interesting issue. - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org -- Born in Roswell... married an alien... http://emptyhammock.com/ http://edjective.org/
Re: [users@httpd] Windows Apache 2.4.9 restarts itself
On Tue, Aug 5, 2014 at 8:25 AM, Jeff Trawick traw...@gmail.com wrote: On Tue, Aug 5, 2014 at 6:35 AM, Mar Imp marimp...@gmail.com wrote: Hi Jeff, after 5 Days the next Apache restart it contains a new Error: [Tue Aug 05 01:36:30.138535 2014] [mpm_winnt:error] [pid 31884:tid 444] (OS 6)The handle is invalid. : AH00360: Child: Failure releasing the start mutex Logfile: [Tue Aug 05 01:36:29.137575 2014] [mpm_winnt:crit] [pid 31884:tid 444] (OS 6)The handle is invalid. : AH00356: Child: WAIT_FAILED -- shutting down server [Tue Aug 05 01:36:29.137575 2014] [mpm_winnt:crit] [pid 31884:tid 444] (OS 6)The handle is invalid. : AH02644: Child: Event handle #0 (8) is invalid [Tue Aug 05 01:36:29.925336 2014] [mpm_winnt:warn] [pid 31884:tid 536] (OS 10038)An operation was attempted on something that is not a socket. : AH00344: accept() failed. [Tue Aug 05 01:36:30.138535 2014] [mpm_winnt:error] [pid 31884:tid 444] (OS 6)The handle is invalid. : AH00360: Child: Failure releasing the start mutex [Tue Aug 05 01:36:45.466468 2014] [mpm_winnt:warn] [pid 31884:tid 5696] (OS 10038)An operation was attempted on something that is not a socket. : AH00344: accept() failed. [Tue Aug 05 01:37:01.077535 2014] [mpm_winnt:notice] [pid 31884:tid 444] AH00362: Child: Waiting 30 more seconds for 9 worker threads to finish. [Tue Aug 05 01:37:31.113122 2014] [mpm_winnt:notice] [pid 31884:tid 444] AH00362: Child: Waiting 0 more seconds for 6 worker threads to finish. [Tue Aug 05 01:37:31.213217 2014] [mpm_winnt:notice] [pid 31884:tid 444] AH00363: Child: Terminating 6 threads that failed to exit. [Tue Aug 05 01:37:31.213217 2014] [mpm_winnt:notice] [pid 31884:tid 444] AH00364: Child: All worker threads have exited. [Tue Aug 05 01:37:31.370367 2014] [mpm_winnt:notice] [pid 13424:tid 536] AH00428: Parent: child process 31884 exited with status 0 -- Restarting. [Tue Aug 05 01:37:32.213174 2014] [mpm_winnt:notice] [pid 13424:tid 536] AH00455: Apache/2.4.10 (Win64) OpenSSL/1.0.1h configured -- resuming normal operations [Tue Aug 05 01:37:32.213174 2014] [mpm_winnt:notice] [pid 13424:tid 536] AH00456: Apache Lounge VC11 Server built: Jul 17 2014 12:58:29 [Tue Aug 05 01:37:32.213174 2014] [core:notice] [pid 13424:tid 536] AH00094: Command line: 'C:\\Apache24\\bin\\httpd.exe -d C:/Apache24' [Tue Aug 05 01:37:32.214178 2014] [mpm_winnt:notice] [pid 13424:tid 536] AH00418: Parent: Created child process 31668 [Tue Aug 05 01:37:33.568475 2014] [mpm_winnt:notice] [pid 31668:tid 396] AH00354: Child: Starting 300 worker threads. Did you have time to investigate any further? Can I help in any way ? I am spending a modest amount of time on this. For now, keep posting when you see something different in the log at the time of failure. thx and kind regards Mar Imp 2014-07-31 15:44 GMT+02:00 Mar Imp marimp...@gmail.com: Hi, - the Apache server restarted itself again: [Wed Jul 30 22:15:21.604987 2014] [mpm_winnt:crit] [pid 34808:tid 464] (OS 6)The handle is invalid. : AH00356: Child: WAIT_FAILED -- shutting down server [Wed Jul 30 22:15:21.604987 2014] [mpm_winnt:crit] [pid 34808:tid 464] (OS 6)The handle is invalid. : AH02644: Child: Event handle #0 (8) is invalid [Wed Jul 30 22:15:23.026349 2014] [mpm_winnt:warn] [pid 34808:tid 4624] (OS 10038)An operation was attempted on something that is not a socket. : AH00344: accept() failed. [Wed Jul 30 22:15:39.956951 2014] [mpm_winnt:warn] [pid 34808:tid 3092] (OS 10038)An operation was attempted on something that is not a socket. : AH00344: accept() failed. [Wed Jul 30 22:15:53.544739 2014] [mpm_winnt:notice] [pid 34808:tid 464] AH00362: Child: Waiting 30 more seconds for 3 worker threads to finish. [Wed Jul 30 22:16:16.571534 2014] [mpm_winnt:notice] [pid 34808:tid 464] AH00364: Child: All worker threads have exited. [Wed Jul 30 22:16:16.687244 2014] [mpm_winnt:notice] [pid 13424:tid 536] AH00428: Parent: child process 34808 exited with status 0 -- Restarting. [Wed Jul 30 22:16:17.454981 2014] [mpm_winnt:notice] [pid 13424:tid 536] AH00455: Apache/2.4.10 (Win64) OpenSSL/1.0.1h configured -- resuming normal operations [Wed Jul 30 22:16:17.454981 2014] [mpm_winnt:notice] [pid 13424:tid 536] AH00456: Apache Lounge VC11 Server built: Jul 17 2014 12:58:29 [Wed Jul 30 22:16:17.454981 2014] [core:notice] [pid 13424:tid 536] AH00094: Command line: 'C:\\Apache24\\bin\\httpd.exe -d C:/Apache24' [Wed Jul 30 22:16:17.455982 2014] [mpm_winnt:notice] [pid 13424:tid 536] AH00418: Parent: Created child process 31884 [Wed Jul 30 22:16:18.727198 2014] [mpm_winnt:notice] [pid 31884:tid 444] AH00354: Child: Starting 300 worker threads. - There are no suspicious entries in other apache logfiles or in the windows event log. - you asked about loaded modules: C:\Apache24\binhttpd.exe -t -D DUMP_MODULES Loaded Modules: core_module (static) win32_module (static
Re: [users@httpd] stops listening to IP
On Tue, Aug 5, 2014 at 3:27 PM, Al a...@familysafeinternet.com wrote: Hi, I am running apache 2.4. We are now having a problem with the server, it stops answering requests on one IP. It goes down about every 45 minutes. I have since switched one of the websites to another IP and all it did was transfer the problem to the other IP. I am now using both IPs for that website and I have disabled keep alive. It now needs to be restarted every 5 hours. Does anyone have any ideas as to what is going on? operating system? Listen directives? any IPv6 interfaces? which MPM? anything in error log? anything in system log related to the interface that no longer works with httpd? Thanks, Al - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org -- Born in Roswell... married an alien... http://emptyhammock.com/ http://edjective.org/
Re: [users@httpd] debug httpd with windbg
On Sun, Aug 3, 2014 at 11:34 AM, Vadim Blumkin vadim.blum...@gmail.com wrote: Hi, Is there any way to debug httpd process with Windbg ? We have Apache installed on Windows x64 OS , when I can see two processes in the Task Manager . I want to debug the child process because it’s is actually handles all the requests . But Windbg cannot connected to the apache child process when I am trying to attach to the process. Lack of permission, such as httpd running as administrator/service and windbg not? Does anybody succeed to debug it with WinDbg ? Or what is the suggested way to debug apache ? If I start httpd in the console, I am able to attach with WinDbg or with Visual Studio. I don't know what happens when trying to debug a service. Thanks and regards, Vadim -- Born in Roswell... married an alien... http://emptyhammock.com/ http://edjective.org/
[users@httpd] FYI on mod_whatkilledus/mod_backtrace updates
http://emptyhammock.com/projects/httpd/diag/ (support for 64-bit Apache httpd on Windows, improvements all around) -- Born in Roswell... married an alien... http://emptyhammock.com/
Re: [users@httpd] Windows Apache 2.4.9 restarts itself
On Tue, Jul 29, 2014 at 7:40 AM, Jeff Trawick traw...@gmail.com wrote: On Tue, Jul 29, 2014 at 5:33 AM, Mar Imp marimp...@gmail.com wrote: Hi Jeff, After the first restart, apache restarted itself 2 more times yesterday. Good news: the additional information IS part of the logs: [Mon Jul 28 16:48:10.070355 2014] [mpm_winnt:crit] [pid 38752:tid 388] (OS 6)The handle is invalid. : AH02644: Child: Event handle #0 (8) is invalid does it help you to identify the issue? Unfortunately it does not immediately pinpoint the problem, but it can't hurt :) 8 is the value for the handle that suddenly went bad. I'll try to spend some real time on this over the weekend. This is a very interesting issue.
Re: [users@httpd] Windows Apache 2.4.9 restarts itself
:33.565195 2014] [mpm_winnt:warn] [pid 33896:tid 3404] (OS 10038)An operation was attempted on something that is not a socket. : AH00344: accept() failed. [Mon Jul 28 16:49:51.421208 2014] [mpm_winnt:notice] [pid 33896:tid 384] AH00362: Child: Waiting 30 more seconds for 4 worker threads to finish. [Mon Jul 28 16:50:21.455441 2014] [mpm_winnt:notice] [pid 33896:tid 384] AH00362: Child: Waiting 0 more seconds for 1 worker threads to finish. [Mon Jul 28 16:50:21.37 2014] [mpm_winnt:notice] [pid 33896:tid 384] AH00363: Child: Terminating 1 threads that failed to exit. [Mon Jul 28 16:50:21.37 2014] [mpm_winnt:notice] [pid 33896:tid 384] AH00364: Child: All worker threads have exited. [Mon Jul 28 16:50:21.667649 2014] [mpm_winnt:notice] [pid 13424:tid 536] AH00428: Parent: child process 33896 exited with status 0 -- Restarting. [Mon Jul 28 16:50:22.399347 2014] [mpm_winnt:notice] [pid 13424:tid 536] AH00455: Apache/2.4.10 (Win64) OpenSSL/1.0.1h configured -- resuming normal operations [Mon Jul 28 16:50:22.399347 2014] [mpm_winnt:notice] [pid 13424:tid 536] AH00456: Apache Lounge VC11 Server built: Jul 17 2014 12:58:29 [Mon Jul 28 16:50:22.399347 2014] [core:notice] [pid 13424:tid 536] AH00094: Command line: 'C:\\Apache24\\bin\\httpd.exe -d C:/Apache24' [Mon Jul 28 16:50:22.399347 2014] [mpm_winnt:notice] [pid 13424:tid 536] AH00418: Parent: Created child process 34808 [Mon Jul 28 16:50:23.736629 2014] [mpm_winnt:notice] [pid 34808:tid 464] AH00354: Child: Starting 300 worker threads. 2014-07-28 12:44 GMT+02:00 Mar Imp marimp...@gmail.com: Hi Jeff, I installed 2.4.10 on 22.07.2014 and it was running fine for 6 days. Today again a restart happened - again without the important row in logfile: these are the logs: Starting the Apache2.4 service [Tue Jul 22 12:18:26.942556 2014] [mpm_winnt:notice] [pid 13424:tid 536] AH00455: Apache/2.4.10 (Win64) OpenSSL/1.0.1h configured -- resuming normal operations^M [Tue Jul 22 12:18:26.942556 2014] [mpm_winnt:notice] [pid 13424:tid 536] AH00456: Apache Lounge VC11 Server built: Jul 17 2014 12:58:29^M [Tue Jul 22 12:18:26.942556 2014] [core:notice] [pid 13424:tid 536] AH00094: Command line: 'C:\\Apache24\\bin\\httpd.exe -d C:/Apache24'^M [Tue Jul 22 12:18:26.942556 2014] [mpm_winnt:notice] [pid 13424:tid 536] AH00418: Parent: Created child process 33168^M [Tue Jul 22 12:18:28.260820 2014] [mpm_winnt:notice] [pid 33168:tid 456] AH00354: Child: Starting 300 worker threads.^M The Apache2.4 service is running. [Mon Jul 28 12:12:32.738706 2014] [mpm_winnt:warn] [pid 33168:tid 5356] (OS 10022)An invalid argument was supplied. : AH00344: accept() failed. [Mon Jul 28 12:13:04.673283 2014] [mpm_winnt:notice] [pid 33168:tid 456] AH00362: Child: Waiting 30 more seconds for 8 worker threads to finish. [Mon Jul 28 12:13:34.708657 2014] [mpm_winnt:notice] [pid 33168:tid 456] AH00362: Child: Waiting 0 more seconds for 3 worker threads to finish. [Mon Jul 28 12:13:34.808754 2014] [mpm_winnt:notice] [pid 33168:tid 456] AH00363: Child: Terminating 3 threads that failed to exit. [Mon Jul 28 12:13:34.808754 2014] [mpm_winnt:notice] [pid 33168:tid 456] AH00364: Child: All worker threads have exited. [Mon Jul 28 12:13:34.928869 2014] [mpm_winnt:notice] [pid 13424:tid 536] AH00428: Parent: child process 33168 exited with status 0 -- Restarting. [Mon Jul 28 12:13:35.592504 2014] [mpm_winnt:notice] [pid 13424:tid 536] AH00455: Apache/2.4.10 (Win64) OpenSSL/1.0.1h configured -- resuming normal operations [Mon Jul 28 12:13:35.592504 2014] [mpm_winnt:notice] [pid 13424:tid 536] AH00456: Apache Lounge VC11 Server built: Jul 17 2014 12:58:29 [Mon Jul 28 12:13:35.592504 2014] [core:notice] [pid 13424:tid 536] AH00094: Command line: 'C:\\Apache24\\bin\\httpd.exe -d C:/Apache24' [Mon Jul 28 12:13:35.593505 2014] [mpm_winnt:notice] [pid 13424:tid 536] AH00418: Parent: Created child process 38752 [Mon Jul 28 12:13:36.854715 2014] [mpm_winnt:notice] [pid 38752:tid 388] AH00354: Child: Starting 300 worker threads. - I'm afraid the patch indeed introduced a bug. the shutting down server message is missing in the logfile. Any ideas? 2014-07-17 21:07 GMT+02:00 Jeff Trawick traw...@gmail.com: On Thu, Jul 17, 2014 at 10:07 AM, Mar Imp marimp...@gmail.com wrote: Hi Jeff, no, there is nothing before. error_20140716_00.log (yesterday) ends with: [Wed Jul 16 10:17:02.436304 2014] [mpm_winnt:notice] [pid 35212:tid 384] AH00354: Child: Starting 300 worker threads. The Apache2.4 service is running. and error_20140717_00.log (today) starts with: [Thu Jul 17 15:12:13.091225 2014] [mpm_winnt:notice] [pid 35212:tid 384] AH00362: Child: Waiting 30 more seconds for 16 worker threads to finish. :( I think you got cheated out of some log messages. The patch shouldn't hurt anyone barring a compiler bug (famous last words). It logs some extra
Re: [users@httpd] [proxy_http:error] [pid 13256:tid 47013272524544] (11)Resource temporarily unavailable: [client 172.31.0.142:21815] AH01110: error reading response
On Sat, Jul 26, 2014 at 10:58 AM, ulrich.her...@t-systems.com wrote: Hi, Is it possible that mod_deflate is configured, perhaps unexpectedly, to decompress the response from the backend via an input filter? ð Yes, for sure. mod_deflate is enabled and we compress the (uncompressed) response from the backend before sending to the clients. See http://httpd.apache.org/docs/current/mod/mod_deflate.html#deflateinflatelimitrequestbody (new with 2.4.10) ð So, you think, that our compressed body is too large sometimes, and we got “no space” because of this ? I think it is possible to get that error with proxy when a compressed response from a backend server is relatively large. Are you seeing any warning messages in the log from mod_deflate? What is the log level that applies to mod_deflate? (Or, what is your LogLevel directive if that doesn't make sense to you ;) ) You'd need to see log level warn to check this theory on mod_deflate. Another case is with the http layer returning ENOSPC when exceeding a similar limit when the body is not compressed. The log level for http must log info messages. If your log level is higher than info (e.g., error), try something like LogLevel error http:info deflate:warn to see log messages that could pinpoint exactly where the error comes from. Uli *Von:* Jeff Trawick [mailto:traw...@gmail.com] *Gesendet:* Freitag, 25. Juli 2014 17:10 *An:* users@httpd.apache.org *Betreff:* Re: [users@httpd] [proxy_http:error] [pid 13256:tid 47013272524544] (11)Resource temporarily unavailable: [client 172.31.0.142:21815] AH01110: error reading response On Fri, Jul 25, 2014 at 10:49 AM, Tom Evans tevans...@googlemail.com wrote: On Fri, Jul 25, 2014 at 11:37 AM, ulrich.her...@t-systems.com wrote: Hi, we have apaches as reverse proxies for some tomcat and wso2-application servers. We get this error message on a high-load-webserver: [proxy_http:error] [pid 13256:tid 47013272524544] (11)Resource temporarily unavailable: [client 172.31.0.142:21815] AH01110: error reading response And we have no clue, which resource is unavailable and what to do against it. Apache-2.4.10 / apr-1.5.1 Ulimit of apache-user: core file size (blocks, -c) 0 data seg size (kbytes, -d) unlimited scheduling priority (-e) 0 file size (blocks, -f) unlimited pending signals (-i) 4 max locked memory (kbytes, -l) 655360 max memory size (kbytes, -m) unlimited open files (-n) 655360 pipe size(512 bytes, -p) 8 POSIX message queues (bytes, -q) 819200 real-time priority (-r) 0 stack size (kbytes, -s) unlimited cpu time (seconds, -t) unlimited max user processes (-u) 655360 virtual memory (kbytes, -v) unlimited file locks (-x) unlimited $ cat /proc/sys/kernel/threads-max 2065067 So, I don’t see any visible shortage of anything. Any ideas how to find the reason for this error ? Uli Running out of shm? How are you proxying to tomcat (http/ajp/jk2)? The message comes from mod_proxy_http, so http it is. Looking at how to get the ENOSPC error in that particular context, I see that several pieces of code can return ENOSPC based on exceeding some configured limit, but most don't apply to the path where that message is issued. Is it possible that mod_deflate is configured, perhaps unexpectedly, to decompress the response from the backend via an input filter? See http://httpd.apache.org/docs/current/mod/mod_deflate.html#deflateinflatelimitrequestbody (new with 2.4.10) That is part of a fix to vulnerability CVE-2014-0118. Cheers Tom - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org -- Born in Roswell... married an alien... http://emptyhammock.com/ http://edjective.org/ -- Born in Roswell... married an alien... http://emptyhammock.com/ http://edjective.org/
Re: [users@httpd] Segmentation Fault - too many proxy balancers
On Fri, Jul 25, 2014 at 2:00 PM, Paul Beckett paul_beck...@outlook.com wrote: My apache server has started segmentation faulting all the time (seems to log a segmentation fault every few requests to the apache error log): [Fri Jul 25 06:25:42.046752 2014] [core:notice] [pid 11226:tid 140006078953216] AH00052: child pid 11715 exit signal Segmentation fault (11) Can you post a backtrace from the crash? This appears to be due to the number of proxy balancers I have configured (problem isn't related to any one specific proxy balancer, adding / removing any of the proxy balancers causes the problem to appear/disappear). I'm using Apache HTTPD as a reverse proxy for a lot of load-balanced (by apache httpd) application servers. My googling so far hasn't found any specific limit on the number of proxy, or how I can increase this. I am running Apache HTTPD 2.4.9, built from source on RHEL6. I would be very grateful if anyone can shed more light on this, and assuming I'm right about a limit: point my in the right direction as to how I can increase this. Thanks, Paul -- Born in Roswell... married an alien... http://emptyhammock.com/ http://edjective.org/
Re: [users@httpd] [proxy_http:error] [pid 13256:tid 47013272524544] (11)Resource temporarily unavailable: [client 172.31.0.142:21815] AH01110: error reading response
On Fri, Jul 25, 2014 at 10:49 AM, Tom Evans tevans...@googlemail.com wrote: On Fri, Jul 25, 2014 at 11:37 AM, ulrich.her...@t-systems.com wrote: Hi, we have apaches as reverse proxies for some tomcat and wso2-application servers. We get this error message on a high-load-webserver: [proxy_http:error] [pid 13256:tid 47013272524544] (11)Resource temporarily unavailable: [client 172.31.0.142:21815] AH01110: error reading response And we have no clue, which resource is unavailable and what to do against it. Apache-2.4.10 / apr-1.5.1 Ulimit of apache-user: core file size (blocks, -c) 0 data seg size (kbytes, -d) unlimited scheduling priority (-e) 0 file size (blocks, -f) unlimited pending signals (-i) 4 max locked memory (kbytes, -l) 655360 max memory size (kbytes, -m) unlimited open files (-n) 655360 pipe size(512 bytes, -p) 8 POSIX message queues (bytes, -q) 819200 real-time priority (-r) 0 stack size (kbytes, -s) unlimited cpu time (seconds, -t) unlimited max user processes (-u) 655360 virtual memory (kbytes, -v) unlimited file locks (-x) unlimited $ cat /proc/sys/kernel/threads-max 2065067 So, I don’t see any visible shortage of anything. Any ideas how to find the reason for this error ? Uli Running out of shm? How are you proxying to tomcat (http/ajp/jk2)? The message comes from mod_proxy_http, so http it is. Looking at how to get the ENOSPC error in that particular context, I see that several pieces of code can return ENOSPC based on exceeding some configured limit, but most don't apply to the path where that message is issued. Is it possible that mod_deflate is configured, perhaps unexpectedly, to decompress the response from the backend via an input filter? See http://httpd.apache.org/docs/current/mod/mod_deflate.html#deflateinflatelimitrequestbody (new with 2.4.10) That is part of a fix to vulnerability CVE-2014-0118. Cheers Tom - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org -- Born in Roswell... married an alien... http://emptyhammock.com/ http://edjective.org/
Re: [users@httpd] Linker error building apache with oracle dbd
On Wed, Jul 23, 2014 at 4:19 PM, Hrasch, Janet janet.a.hra...@siemens.com wrote: Hi All, I am trying to compile apache on Win7 via the Microsoft Windows SDK v7.1 command window. I have compile apache without any database utilities. I now want to compile with oracle. I have set the LIB, INCLUDE and PATH to include my oracle client library, include and dll. The link.exe is having problem linking. I am trying to determine which library is missing. Here is the output error. Can anyone help? D:\httpd-2.2.27\srclib\apr-util\dbdC:\Program Files (x86)\Microsoft Visual Studio 10.0\VC\Bin\nmake.exe -nologo -f apr_dbd_oracle.mak CFG=apr_dbd_oracle - Win32 Relea E=0 rc.exe /l 0x409 /fo.\Release\apr_dbd_oracle-1.res /i ../include /i ../../apr/include /i \httpd-2.4.4\srclib\apr-util /d DLL_NAME=apr_dbd_oracle /d NDEB U_VERSION_ONLY ..\libaprutil.rc Microsoft (R) Windows (R) Resource Compiler Version 6.1.7600.16385 Copyright (C) Microsoft Corporation. All rights reserved. cl.exe @C:\Users\hrasja20\AppData\Local\Temp\nm2F01.tmp apr_dbd_oracle.c link.exe @C:\Users\hrasja20\AppData\Local\Temp\nm30A7.tmp Creating library .\Release\apr_dbd_oracle-1.lib and object .\Release\apr_dbd_oracle-1.exp apr_dbd_oracle.obj : error LNK2019: unresolved external symbol _OCILobRead referenced in function _lob_bucket_read apr_dbd_oracle.obj : error LNK2019: unresolved external symbol _OCIDescriptorFree referenced in function _dbd_free_lobdesc apr_dbd_oracle.obj : error LNK2019: unresolved external symbol _OCIEnvCreate referenced in function _dbd_oracle_init apr_dbd_oracle.obj : error LNK2019: unresolved external symbol _OCIStmtFetch2 referenced in function _dbd_oracle_get_row apr_dbd_oracle.obj : error LNK2019: unresolved external symbol _OCIErrorGet referenced in function _dbd_oracle_error apr_dbd_oracle.obj : error LNK2019: unresolved external symbol _OCIHandleFree referenced in function _freeStatement apr_dbd_oracle.obj : error LNK2019: unresolved external symbol _OCIBindByPos referenced in function _dbd_oracle_bind apr_dbd_oracle.obj : error LNK2019: unresolved external symbol _OCIDefineByPos referenced in function _outputParams apr_dbd_oracle.obj : error LNK2019: unresolved external symbol _OCIDescriptorAlloc referenced in function _outputParams apr_dbd_oracle.obj : error LNK2019: unresolved external symbol _OCIAttrGet referenced in function _outputParams apr_dbd_oracle.obj : error LNK2019: unresolved external symbol _OCIParamGet referenced in function _outputParams apr_dbd_oracle.obj : error LNK2019: unresolved external symbol _OCIStmtExecute referenced in function _outputParams apr_dbd_oracle.obj : error LNK2019: unresolved external symbol _OCITransCommit referenced in function _dbd_oracle_end_transaction apr_dbd_oracle.obj : error LNK2019: unresolved external symbol _OCITransRollback referenced in function _dbd_oracle_end_transaction apr_dbd_oracle.obj : error LNK2019: unresolved external symbol _OCILobCharSetId referenced in function _dbd_oracle_get_entry apr_dbd_oracle.obj : error LNK2019: unresolved external symbol _OCILobCharSetForm referenced in function _dbd_oracle_get_entry apr_dbd_oracle.obj : error LNK2019: unresolved external symbol _OCILobGetLength referenced in function _dbd_oracle_get_entry apr_dbd_oracle.obj : error LNK2019: unresolved external symbol _OCIServerDetach referenced in function _dbd_oracle_close apr_dbd_oracle.obj : error LNK2019: unresolved external symbol _OCISessionEnd referenced in function _dbd_oracle_close apr_dbd_oracle.obj : error LNK2019: unresolved external symbol _OCIStmtPrepare referenced in function _dbd_oracle_prepare apr_dbd_oracle.obj : error LNK2019: unresolved external symbol _OCIHandleAlloc referenced in function _dbd_oracle_prepare apr_dbd_oracle.obj : error LNK2019: unresolved external symbol _OCITransStart referenced in function _dbd_oracle_start_transaction apr_dbd_oracle.obj : error LNK2019: unresolved external symbol _OCIAttrSet referenced in function _dbd_oracle_start_transaction apr_dbd_oracle.obj : error LNK2019: unresolved external symbol _OCISessionBegin referenced in function _dbd_oracle_open apr_dbd_oracle.obj : error LNK2019: unresolved external symbol _OCIServerAttach referenced in function _dbd_oracle_open .\Release\apr_dbd_oracle-1.dll : fatal error LNK1120: 25 unresolved externals Just an idea: Make sure that the Oracle library you're linking with matches the architecture (32-bit or 64-bit) of your httpd/APR build. IIRC, if you have that type of mismatch on Windows it will show up as unresolved symbol errors. NMAKE : fatal error U1077: 'C:\Program Files (x86)\Microsoft Visual Studio 10.0\VC\Bin\link.exe' : return code '0x460' Stop. NMAKE : fatal error U1077: 'for' : return code '0x2' Stop. NMAKE : fatal error U1077: 'C:\Program Files (x86)\Microsoft Visual Studio 10.0\VC\Bin\nmake.exe' : return code '0x2' Stop. Mit freundlichen Grüßen Janet
Re: [users@httpd] You don't have permission to access / on this server.
On Fri, Jul 18, 2014 at 7:57 PM, David Favor da...@davidfavor.com wrote: Jan Christoph Schatteburg wrote: Hi, i'm quite new to Apache and Servers in general and on my Wamp Server on a Windows 7 System using Apache 2.4.4 i get the following Error when trying to access localhost (from the Server machine of course ;)): -- Forbidden You don't have permission to access / on this server. -- My httpd.conf has the following entries: -- Directory / AllowOverride none Order Deny,Allow Allow from all /Directory Directory c:/wamp/www Options Indexes FollowSymLinks AllowOverride None Order Allow,Deny Allow from all /Directory -- I tried several different wordings like Require all granted instead of Order Allow,Deny Allow from all but nothing worked :( I would be happy if somebody could help me. Thanks, Jan Try changing... Order Deny,Allow Allow from all to... Require all granted It appears you're trying to use Apache-2.2.x syntax with an Apache-2.4.x install. Details here... http://httpd.apache.org/docs/trunk/upgrading.html Run-Time Configuration Changes httpd initializes, so mod_access_compat is loaded, but converting to Require is reasonable. The default setting should be Directory / AllowOverride none Require all denied /Directory The document root setting should be Directory c:/wamp/www Options Indexes FollowSymLinks AllowOverride None Require all granted /Directory But this itself probably won't fix anything. What is written to the error log at the time of the failed request? If nothing, change LogLevel to trace8 temporarily. -- Born in Roswell... married an alien... http://emptyhammock.com/ http://edjective.org/
Re: [users@httpd] Apache 2.4 - non adoption reasons??
On Fri, Jul 18, 2014 at 11:11 AM, David Favor da...@davidfavor.com wrote: Eric Covener wrote: On Fri, Jul 18, 2014 at 10:21 AM, David Favor da...@davidfavor.com wrote: Biggest problem is with Apache changing format of conf entries. What do you mean by the format? http://httpd.apache.org/docs/trunk/upgrading.html covers this... snippet... In this example, all requests are allowed. 2.2 configuration: Order allow,deny Allow from all 2.4 configuration: Require all granted This is what bricked everyone's Apache config. http://httpd.apache.org/docs/current/mod/mod_access_compat.html Also, as I recall, conf files also changed to require having a .conf suffix, which also meant every conf file had to be renamed + all old symlinks removed (from sites-enabled) + all domains re-enabled. Is that a Debian thing? Apache httpd didn't make any such change. Neither of these were a big deal + still make domains go dark. When I updated several 1000s of my client domains went dark. Till I figured out these niggling reasons... it was a very bad day... - David - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org -- Born in Roswell... married an alien... http://emptyhammock.com/ http://edjective.org/
Re: [users@httpd] Re: Apache 2.4 - non adoption reasons??
On Fri, Jul 18, 2014 at 1:36 PM, Edgar Pettijohn ed...@pettijohn.no-ip.biz wrote: Upgrades should be about new features and new codes/syntax but the old one should still work I agree 100% By and large, the developers who bring you Apache httpd for free are willing to maintain compatibility with a certain syntax and module API for only 8-10 years at a time. Some new features or architectural improvements require some degree of a fresh slate, and are reserved for the next major version where such changes have to be taken. On 07/18/2014 12:31 PM, Good Guy wrote: On 18/07/2014 15:35, Eric Covener wrote: On Fri, Jul 18, 2014 at 10:21 AM, David Favor da...@davidfavor.com wrote: Biggest problem is with Apache changing format of conf entries. What do you mean by the format? I think what he is talking about is that for each upgrades, apache becomes non-compliance with the previous version. So if you plan to use the same conf file to speed up the implementation then you are likely to be stuck because some entries in the conf file won't work and throw out errors. Upgrades should be about new features and new codes/syntax but the old one should still work. - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org -- Born in Roswell... married an alien... http://emptyhammock.com/ http://edjective.org/
Re: [users@httpd] HTTP request failed after listening on multiple ports or enabling SSL Module on my Linux Board
On Wed, Jul 16, 2014 at 7:17 AM, Ritesh Prajapati ritesh.prajap...@slscorp.com wrote: Hi All, I have one Custom Linux board on which I want to run apache web server (httpd) to test HTML and other web based pages. I have configured, cross compiled and installed httpd (2.2.24, 2.4.1, 2.4.4 and 2.4.9 packages) on my Linux PC (Ubuntu 12.04 LTS) as well as on my own custom Linux board. Then I have added support of SSL Module (mod_ssl) to test HTTP as well as HTTPS request. Both HTTP and HTTPS request works fine without any issue on my Linux PC (Ubuntu 12.04 LTS). But when I tried to execute same HTTP request on my Linux Board using httpd (2.4.4 and 2.4.9 with SSL Module Enabled) at that time browser page goes into loading state and can not be came out from that situation. Also I have seen that HTTPS request works fine at that time. Does it work on your Linux board with just one listening socket enabled? (Listen 0.0.0.0:80) I have also did some debugging task through wire-shark tool and found that connection is established successfully after sending request through HTTP but can not get response of that request. I have also found that response of that HTTP request received on wire-shark after closing that HTTP requested page from browser. Also, I can run HTTP and HTTPS requests successfully using httpd (2.2.24 and 2.2.27 with SSL Module enabled) on my Linux Board as well but failed to execute same request using httpd (2.4.X with SSL Module enabled) package. I have also changed some configurations by creating different virtual host for HTTP (Port 80) and HTTPS (Port 443) but still failed to execute that HTTP request. I have also tried to listen on different ports like (Listen 80 and Listen 8000) without SSL module (using httpd 2.4.4. and 2.4.9 ) at that time HTTP request goes into loading state. Does anyone has idea about this issue or help me to solve this type of issue? It might be a basic problem with the cross-compile -- syscalls used inappropriately due to wrong decisions made at configure time. Do you have strace or similar available on the Linux board? Configure it with the prefork MPM, start it with -DNO_DETACH -DONE_PROCESS arguments, strace -f against it, then send a request. -- Regards, Ritesh Prajapati, System Level Solutions (India) Pvt.Ltd. - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org -- Born in Roswell... married an alien... http://emptyhammock.com/ http://edjective.org/
Re: [users@httpd] Windows Apache 2.4.9 restarts itself
On Thu, Jul 17, 2014 at 9:33 AM, Mar Imp marimp...@gmail.com wrote: Hi, I got a new build from apachelounge. Yesterday I run the server, and today apache restarted itself. Unfortunately the logfile says even less than before: [Thu Jul 17 15:12:13.091225 2014] [mpm_winnt:notice] [pid 35212:tid 384] AH00362: Child: Waiting 30 more seconds for 16 worker threads to finish. Is there nothing before this message? [Thu Jul 17 15:12:26.333012 2014] [mpm_winnt:warn] [pid 35212:tid 4288] (OS 10038)An operation was attempted on something that is not a socket. : AH00344: accept() failed. [Thu Jul 17 15:12:43.127156 2014] [mpm_winnt:notice] [pid 35212:tid 384] AH00362: Child: Waiting 0 more seconds for 4 worker threads to finish. [Thu Jul 17 15:12:43.227264 2014] [mpm_winnt:notice] [pid 35212:tid 384] AH00363: Child: Terminating 4 threads that failed to exit. [Thu Jul 17 15:12:43.227264 2014] [mpm_winnt:notice] [pid 35212:tid 384] AH00364: Child: All worker threads have exited. [Thu Jul 17 15:12:43.344363 2014] [mpm_winnt:notice] [pid 36412:tid 536] AH00428: Parent: child process 35212 exited with status 0 -- Restarting. [Thu Jul 17 15:12:44.020013 2014] [mpm_winnt:notice] [pid 36412:tid 536] AH00455: Apache/2.4.9 (Win64) OpenSSL/1.0.1h configured -- resuming normal operations [Thu Jul 17 15:12:44.020013 2014] [mpm_winnt:notice] [pid 36412:tid 536] AH00456: Apache Lounge VC11 Server built: Jul 9 2014 14:14:36 [Thu Jul 17 15:12:44.020013 2014] [core:notice] [pid 36412:tid 536] AH00094: Command line: 'C:\\Apache24\\bin\\httpd.exe -d C:/Apache24' [Thu Jul 17 15:12:44.021014 2014] [mpm_winnt:notice] [pid 36412:tid 536] AH00418: Parent: Created child process 25540 [Thu Jul 17 15:12:45.335272 2014] [mpm_winnt:notice] [pid 25540:tid 384] AH00354: Child: Starting 300 worker threads. - the first line with the reason for the server restart (The handle is invalid. : AH00356: Child: WAIT_FAILED -- shutting down server) is not in the logfile at all! is there a new bug introduced? thx for your help 2014-07-09 13:48 GMT+02:00 Jeff Trawick traw...@gmail.com: On Wed, Jul 9, 2014 at 7:36 AM, Mar Imp marimp...@gmail.com wrote: hi, this is the answer I got from an apachelounge guy: Does not build with the patch at http://svn.apache.org/viewvc?view=revisionrevision=1606368 Error85error C2065: 'my_generation' : undeclared identifier E:\VC11\Win64\httpd-2.4.9\server\mpm\winnt\child.c1051 Error86error C2065: 'my_generation' : undeclared identifier E:\VC11\Win64\httpd-2.4.9\server\mpm\winnt\child.c1076 Interesting... It looks like they picked up other code from httpd trunk instead of just picking up that one patch. (my_generation is in trunk but not part of that patch.) As it turns out, the patch is now integrated into the 2.4.x branch for 2.4.10 (coming up in the next week or two). They can use this file unchanged/unpatched with 2.4.9: http://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/server/mpm/winnt/child.c?view=co or just wait for 2.4.10. Thanks for trying! 138IntelliSense: a value of type void * cannot be assigned to an entity of type core_server_config * e:\VC11\Win64\httpd-2.4.9\server\mpm\winnt\child.c315 139IntelliSense: a value of type void * cannot be assigned to an entity of type char * e:\VC11\Win64\httpd-2.4.9\server\mpm\winnt\child.c458 140IntelliSense: a value of type void * cannot be assigned to an entity of type sockaddr * e:\VC11\Win64\httpd-2.4.9\server\mpm\winnt\child.c632 141IntelliSense: a value of type void * cannot be assigned to an entity of type sockaddr * e:\VC11\Win64\httpd-2.4.9\server\mpm\winnt\child.c635 142IntelliSense: a value of type void * cannot be used to initialize an entity of type winnt_conn_ctx_t * e:\VC11\Win64\httpd-2.4.9\server\mpm\winnt\child.c789 143IntelliSense: a value of type PVOID cannot be assigned to an entity of type apr_bucket * e:\VC11\Win64\httpd-2.4.9\server\mpm\winnt\child.c 791 144IntelliSense: a value of type PVOID cannot be assigned to an entity of type apr_bucket * e:\VC11\Win64\httpd-2.4.9\server\mpm\winnt\child.c 842 145IntelliSense: a value of type HANDLE cannot be assigned to an entity of type HANDLE * e:\VC11\Win64\httpd-2.4.9\server\mpm\winnt\child.c1040 146IntelliSense: identifier my_generation is undefined e:\VC11\Win64\httpd-2.4.9\server\mpm\winnt\child.c1051 147IntelliSense: identifier my_generation is undefined e:\VC11\Win64\httpd-2.4.9\server\mpm\winnt\child.c1076 148IntelliSense: a value of type void * cannot be assigned to an entity of type int * e:\VC11\Win64\httpd-2.4.9\server\mpm\winnt\child.c 1082 149IntelliSense: a value of type void * cannot be assigned to an entity of type int
Re: [users@httpd] Windows Apache 2.4.9 restarts itself
On Thu, Jul 17, 2014 at 10:07 AM, Mar Imp marimp...@gmail.com wrote: Hi Jeff, no, there is nothing before. error_20140716_00.log (yesterday) ends with: [Wed Jul 16 10:17:02.436304 2014] [mpm_winnt:notice] [pid 35212:tid 384] AH00354: Child: Starting 300 worker threads. The Apache2.4 service is running. and error_20140717_00.log (today) starts with: [Thu Jul 17 15:12:13.091225 2014] [mpm_winnt:notice] [pid 35212:tid 384] AH00362: Child: Waiting 30 more seconds for 16 worker threads to finish. :( I think you got cheated out of some log messages. The patch shouldn't hurt anyone barring a compiler bug (famous last words). It logs some extra information in the error path you reported originally: [Fri May 23 07:53:58.344457 2014] [mpm_winnt:crit] [pid 42540:tid 380] (OS 6)The handle is invalid. : AH00356: Child: WAIT_FAILED -- shutting down server 2.4.10 will have the same logic for everyone on Windows. Hopefully we can get more information from someone. 2014-07-17 15:59 GMT+02:00 Jeff Trawick traw...@gmail.com: On Thu, Jul 17, 2014 at 9:33 AM, Mar Imp marimp...@gmail.com wrote: Hi, I got a new build from apachelounge. Yesterday I run the server, and today apache restarted itself. Unfortunately the logfile says even less than before: [Thu Jul 17 15:12:13.091225 2014] [mpm_winnt:notice] [pid 35212:tid 384] AH00362: Child: Waiting 30 more seconds for 16 worker threads to finish. Is there nothing before this message? [Thu Jul 17 15:12:26.333012 2014] [mpm_winnt:warn] [pid 35212:tid 4288] (OS 10038)An operation was attempted on something that is not a socket. : AH00344: accept() failed. [Thu Jul 17 15:12:43.127156 2014] [mpm_winnt:notice] [pid 35212:tid 384] AH00362: Child: Waiting 0 more seconds for 4 worker threads to finish. [Thu Jul 17 15:12:43.227264 2014] [mpm_winnt:notice] [pid 35212:tid 384] AH00363: Child: Terminating 4 threads that failed to exit. [Thu Jul 17 15:12:43.227264 2014] [mpm_winnt:notice] [pid 35212:tid 384] AH00364: Child: All worker threads have exited. [Thu Jul 17 15:12:43.344363 2014] [mpm_winnt:notice] [pid 36412:tid 536] AH00428: Parent: child process 35212 exited with status 0 -- Restarting. [Thu Jul 17 15:12:44.020013 2014] [mpm_winnt:notice] [pid 36412:tid 536] AH00455: Apache/2.4.9 (Win64) OpenSSL/1.0.1h configured -- resuming normal operations [Thu Jul 17 15:12:44.020013 2014] [mpm_winnt:notice] [pid 36412:tid 536] AH00456: Apache Lounge VC11 Server built: Jul 9 2014 14:14:36 [Thu Jul 17 15:12:44.020013 2014] [core:notice] [pid 36412:tid 536] AH00094: Command line: 'C:\\Apache24\\bin\\httpd.exe -d C:/Apache24' [Thu Jul 17 15:12:44.021014 2014] [mpm_winnt:notice] [pid 36412:tid 536] AH00418: Parent: Created child process 25540 [Thu Jul 17 15:12:45.335272 2014] [mpm_winnt:notice] [pid 25540:tid 384] AH00354: Child: Starting 300 worker threads. - the first line with the reason for the server restart (The handle is invalid. : AH00356: Child: WAIT_FAILED -- shutting down server) is not in the logfile at all! is there a new bug introduced? thx for your help 2014-07-09 13:48 GMT+02:00 Jeff Trawick traw...@gmail.com: On Wed, Jul 9, 2014 at 7:36 AM, Mar Imp marimp...@gmail.com wrote: hi, this is the answer I got from an apachelounge guy: Does not build with the patch at http://svn.apache.org/viewvc?view=revisionrevision=1606368 Error85error C2065: 'my_generation' : undeclared identifier E:\VC11\Win64\httpd-2.4.9\server\mpm\winnt\child.c1051 Error86error C2065: 'my_generation' : undeclared identifier E:\VC11\Win64\httpd-2.4.9\server\mpm\winnt\child.c1076 Interesting... It looks like they picked up other code from httpd trunk instead of just picking up that one patch. (my_generation is in trunk but not part of that patch.) As it turns out, the patch is now integrated into the 2.4.x branch for 2.4.10 (coming up in the next week or two). They can use this file unchanged/unpatched with 2.4.9: http://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/server/mpm/winnt/child.c?view=co or just wait for 2.4.10. Thanks for trying! 138IntelliSense: a value of type void * cannot be assigned to an entity of type core_server_config * e:\VC11\Win64\httpd-2.4.9\server\mpm\winnt\child.c315 139IntelliSense: a value of type void * cannot be assigned to an entity of type char * e:\VC11\Win64\httpd-2.4.9\server\mpm\winnt\child.c458 140IntelliSense: a value of type void * cannot be assigned to an entity of type sockaddr * e:\VC11\Win64\httpd-2.4.9\server\mpm\winnt\child.c632 141IntelliSense: a value of type void * cannot be assigned to an entity of type sockaddr * e:\VC11\Win64\httpd-2.4.9\server\mpm\winnt\child.c635
RE: [users@httpd] Interrupted system call: Failed to acquire SSL session cache lock
On Jul 15, 2014 8:46 PM, Tomlinson, Stuart st0...@intl.att.com wrote: [ please excuse the poor formatting due to email client ] From: Jeff Trawick [mailto:traw...@gmail.com] On Tue, Jul 15, 2014 at 4:55 PM, Tomlinson, Stuart st0...@intl.att.com wrote: Hello, We have experienced this warning/error a few times: [Thu Jul 03 20:17:15 2014] [warn] (4)Interrupted system call: Failed to acquire SSL session cache lock After this has occurred, the Apache ErrorLog is flooded with these errors: [Thu Jul 03 20:17:57 2014] [error] shmcb_subcache_retrieve internal error It looks like there is a bug in the APR library. It doesn't handle EINTR (Interrupted system call) in the POSIX semaphore implementation. Thanks for the superfast feedback. Should I file a bug for this? If so, should it be filed for Apache httpd-2 product or APR ? No need, I fixed it shortly after I saw your post ;) Otherwise, APR would be the answer... SSLMutex sem Use SSLMutex sysvsem instead. Are there any expected negative impacts from using sysvsem instead of sem (which I understand defaults to posixsem - described in the documentation as elegant, whereas sysvsem is merely somewhat elegant)? Funny developers... There is safety in numbers (i.e., use what other people on your platform use, unless you have a specific problem). sysvsem is the default on Linux. (I assume you are using Linux, but maybe that is not the case.) Using sysvsem on Solaris with the prefork MPM, you would likely have to increase the number of semaphore undo structures (at least in the old days; I can't find my normal go-to reference for AcceptMutex oddities; Eric?) Regards, Stu Tomlinson.
Re: [users@httpd] Interrupted system call: Failed to acquire SSL session cache lock
On Wed, Jul 16, 2014 at 7:20 AM, Yann Ylavic ylavic@gmail.com wrote: On Wed, Jul 16, 2014 at 12:49 PM, Jeff Trawick traw...@gmail.com wrote: On Jul 15, 2014 8:46 PM, Tomlinson, Stuart st0...@intl.att.com wrote: Are there any expected negative impacts from using sysvsem instead of sem (which I understand defaults to posixsem - described in the documentation as elegant, whereas sysvsem is merely somewhat elegant)? Funny developers... There is safety in numbers (i.e., use what other people on your platform use, unless you have a specific problem). sysvsem is the default on Linux. (I assume you are using Linux, but maybe that is not the case.) Using sysvsem on Solaris with the prefork MPM, you would likely have to increase the number of semaphore undo structures (at least in the old days; I can't find my normal go-to reference for AcceptMutex oddities; Eric?) SSLMutex/AcceptMutex pthread work very well on Linux, and have the advantage to be robust against children crashing while holding the lock (like sysvsem, unlike posixsem AFAICT), without system limits (unlike sysvsem). This is probably true for all unixes that HAVE_PTHREAD_MUTEX_ROBUST (ie. pthread_mutexattr_setrobust_np), but I can't verify that. Regards, Yann. I won't disagree with you at all Yann, but in the interest of promoting the idea that you don't actually have to use all the configuration httpd offers: If the poster had not made a change from the default based on some developer's silly comment in the documentation, they wouldn't have encountered a problem. It is best to leave the mutex type alone unless you have a specific issue. -- Born in Roswell... married an alien... http://emptyhammock.com/
Re: [users@httpd] Interrupted system call: Failed to acquire SSL session cache lock
On Tue, Jul 15, 2014 at 4:55 PM, Tomlinson, Stuart st0...@intl.att.com
wrote:
Hello,
We have experienced this warning/error a few times:
[Thu Jul 03 20:17:15 2014] [warn] (4)Interrupted system call: Failed to
acquire SSL session cache lock
After this has occurred, the Apache ErrorLog is flooded with these errors:
[Thu Jul 03 20:17:57 2014] [error] shmcb_subcache_retrieve internal error
It looks like there is a bug in the APR library. It doesn't handle EINTR
(Interrupted system call) in the POSIX semaphore implementation.
[Thu Jul 03 20:17:58 2014] [error] shmcb_subcache_retrieve internal error
[Thu Jul 03 20:17:58 2014] [error] shmcb_subcache_retrieve internal error
[Thu Jul 03 20:17:59 2014] [error] shmcb_subcache_retrieve internal error
Other symptoms as a result of this condition are significantly increased
CPU utilization (at least doubled), and increase in time to establish
connections when trying to use SSL session caching (tested with openssl
s_client -state -reconnect -connect server:port). Apache restart is
required to restore normal behavior.
I have been unable to find any details of what the cause of this condition
is, or how to prevent it having such undesirable consequences. Is this a
known issue, or does anyone have any suggestions on how to prevent it
happening again?
OS: RHEL 5.9
OpenSSL version: 1.0.0e
Apache httpd version: 2.2.21
Apache configure options used:
./configure --with-mpm=worker --with-included-apr \
--enable-static-support --enable-mods-shared=most \
--enable-proxy=shared --enable-proxy-connect=shared \
--enable-proxy-ftp=shared --enable-proxy-http=shared \
--enable-proxy-ajp=shared --enable-proxy-balancer=shared \
--enable-deflate --with-z=${PREFIX} \
--enable-ssl --with-ssl=${PREFIX} \
--prefix=${PREFIX}
SSL related configuration options:
SSLEngine on
SSLSessionCacheshmcb:/path/to/ssl_scache(512000)
SSLSessionCacheTimeout 300
SSLMutex sem
Use SSLMutex sysvsem instead.
SSLProtocol all -SSLv2
SSLCipherSuite
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP:-eNULL:-NULL
Regards,
Stu Tomlinson.
-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org
--
Born in Roswell... married an alien...
http://emptyhammock.com/
http://edjective.org/
Re: [users@httpd] tuning question
On Sat, Jul 12, 2014 at 1:25 PM, Miles Fidelman mfidel...@meetinghouse.net wrote: Hi Folks, Ever once in a while, a crawler comes along and starts indexing our site - and in the process pushes our server's load average through the roof. Short of blocking the crawlers, can anybody suggest some quick tuning adjustments to make, to reduce load (setting the max. number of servers and/or requests, renicing processes)? Use robots.txt to block access to dynamically generated resources which are expensive to generate and not necessary for search hits? Is it using a lot of concurrent requests, or is the main load issue due to the cost of the requests it is making? Yes - my next step is to go pour through manuals - but I expect others have done this enough to be able to point me at a few specific config file lines to change, and specific commands for identifying and renicing processes. Thanks very much, Miles Fidelman -- In theory, there is no difference between theory and practice. In practice, there is. Yogi Berra - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org -- Born in Roswell... married an alien... http://emptyhammock.com/
Re: [users@httpd] Apache cgid:error for HTML::Template::Pro templates larger than 8k
On Thu, Jul 10, 2014 at 11:20 AM, Tom Phan yachtus-apa...@yahoo.com.invalid wrote: My web server: FreeBSD 10.0, Apache 2.4, Perl 5.16, HTML::Template::Pro 0.9510 When I try to run any perl script calling HTML::Template::Pro templates larger than 8,191 bytes, I get following error in httpd: [cgid:error] malformed header from script 'test.pl': Bad header: !doctype html Running the script from command line does produce the expected output and no error, so I am assuming the cause of the error is related to Apache. Here is the simple perl script 'test.pl' that I tested with: #!/usr/bin/perl use strict; use HTML::Template::Pro; my $tmpl = HTML::Template::Pro - new(filename = 'test.tmpl'); print Content-Type: text/html\n\n; $tmpl - output(); ..and the HTML::Template::Pro template 'test.tmpl': !doctype html html body pblah blah/p /body /html I ran test.pl in the browser and everything was fine at first, no error. Then I started adding a lot of blah blahs to the template file until the size of the template file hit exactly 8,192 bytes, at which time it crashed with a 500 and with the above error logged in the httpd-error.log. If I delete even a single character from the template file so it goes below 8K, the script runs again. I have absolutely no idea why this happens. By the way, large html files do not crash Apache, nor do Perl scripts printing html code directly (without HTML::Template::Pro. I tried both to the extreme, creating MBs of html code and wasn't able to crash anything at all. If I switch to mod_cgi instead of mod_cgid, the error appears exactly when template file hits 4K in size. So it is 8K for mod_cgid and 4K for mod_cgi. What is it in Apache that imposes such limits on the size of my templates and how can I lift/increase them? Can you capture the output of the CGI process run under httpd at least up to the point of the !doctype html text? I'd guess you are suffering from buffering somehow, and the threshhold is a different value with mod_cgid vs mod_cgi. -- Born in Roswell... married an alien... http://emptyhammock.com/
Re: [users@httpd] HTTPS Proxy with Apache
On Thu, Jul 10, 2014 at 6:35 PM, fabio.schm...@4linux.com.br wrote: Hi ! I'm trying to use Apache 2.2 to proxy connections to a server that only listens with HTTPS (Citrix Secure Gateway, to be more precise) and keep the connection encrypted. I've already enabled the proxy, proxy_http and proxy_connect modules but when I access through my Apache server I got the message ERR_SSL_PROTOCOL_ERROR. Why proxy_connect? Are you trying to perform this common scenario? client --- HTTP over SSL/TLS --- httpd --- HTTP over SSL/TLS --- Citrix? Does the client specify the hostname of httpd AND httpd has a certificate for that hostname? What am I misunderstanding and if someone could explain to me the correct way to achieve a proxy with a HTTPSHTTPS connection I would really appreciate ! Here is my configuration: VirtualHost *:443 SSLEngine ON SSLProxyEngine ON ProxyPass / https://IP_OF_THE_CITRIX_SERVER/ ProxyPassReverse / https://IP_OF_THE_CITRIX_SERVER/ LogLevel debug ErrorLog /var/log/apache2/citrix-ssl-error.log TransferLog /var/log/apache2/citrix-ssl-access.log /VirtualHost Isn't ERR_SSL_PROTOCOL error displayed by Chrome for an error connecting to port 443 (i.e., nothing to do with the backend proxy connection)? Where's your certificate for client connections to port 443? This is the only VirtualHost for port 443 in your config, right? What is in /var/log/apache2/citrix-ssl-error.log when you fail to connect with a browser? Atenciosamente, Fabio S. Schmidt Consultor técnico Sênior 4linux - Open Software Specialists http://www.4linux.com.br - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org -- Born in Roswell... married an alien... http://emptyhammock.com/
Re: [users@httpd] tuning question
On Sat, Jul 12, 2014 at 5:06 PM, Miles Fidelman mfidel...@meetinghouse.net wrote: Jeff Trawick wrote: On Sat, Jul 12, 2014 at 1:25 PM, Miles Fidelman mfidel...@meetinghouse.net mailto:mfidel...@meetinghouse.net wrote: Hi Folks, Ever once in a while, a crawler comes along and starts indexing our site - and in the process pushes our server's load average through the roof. Short of blocking the crawlers, can anybody suggest some quick tuning adjustments to make, to reduce load (setting the max. number of servers and/or requests, renicing processes)? Use robots.txt to block access to dynamically generated resources which are expensive to generate and not necessary for search hits? Is it using a lot of concurrent requests, or is the main load issue due to the cost of the requests it is making? a bit of both If you want to limit concurrent requests just from web crawlers, try something like mod_qos. (See http://unix.stackexchange.com/questions/37481/throttling-web-crawlers) If it were me, I'd try to block needless, expensive requests with robots.txt too. http://www.robotstxt.org/robotstxt.html -- In theory, there is no difference between theory and practice. In practice, there is. Yogi Berra - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org -- Born in Roswell... married an alien... http://emptyhammock.com/
Re: [users@httpd] Windows Apache 2.4.9 restarts itself
On Wed, Jul 9, 2014 at 7:36 AM, Mar Imp marimp...@gmail.com wrote: hi, this is the answer I got from an apachelounge guy: Does not build with the patch at http://svn.apache.org/viewvc?view=revisionrevision=1606368 Error85error C2065: 'my_generation' : undeclared identifier E:\VC11\Win64\httpd-2.4.9\server\mpm\winnt\child.c1051 Error86error C2065: 'my_generation' : undeclared identifier E:\VC11\Win64\httpd-2.4.9\server\mpm\winnt\child.c1076 Interesting... It looks like they picked up other code from httpd trunk instead of just picking up that one patch. (my_generation is in trunk but not part of that patch.) As it turns out, the patch is now integrated into the 2.4.x branch for 2.4.10 (coming up in the next week or two). They can use this file unchanged/unpatched with 2.4.9: http://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/server/mpm/winnt/child.c?view=co or just wait for 2.4.10. Thanks for trying! 138IntelliSense: a value of type void * cannot be assigned to an entity of type core_server_config * e:\VC11\Win64\httpd-2.4.9\server\mpm\winnt\child.c315 139IntelliSense: a value of type void * cannot be assigned to an entity of type char * e:\VC11\Win64\httpd-2.4.9\server\mpm\winnt\child.c458 140IntelliSense: a value of type void * cannot be assigned to an entity of type sockaddr * e:\VC11\Win64\httpd-2.4.9\server\mpm\winnt\child.c632 141IntelliSense: a value of type void * cannot be assigned to an entity of type sockaddr * e:\VC11\Win64\httpd-2.4.9\server\mpm\winnt\child.c635 142IntelliSense: a value of type void * cannot be used to initialize an entity of type winnt_conn_ctx_t * e:\VC11\Win64\httpd-2.4.9\server\mpm\winnt\child.c789 143IntelliSense: a value of type PVOID cannot be assigned to an entity of type apr_bucket *e:\VC11\Win64\httpd-2.4.9\server\mpm\winnt\child.c 791 144IntelliSense: a value of type PVOID cannot be assigned to an entity of type apr_bucket *e:\VC11\Win64\httpd-2.4.9\server\mpm\winnt\child.c 842 145IntelliSense: a value of type HANDLE cannot be assigned to an entity of type HANDLE * e:\VC11\Win64\httpd-2.4.9\server\mpm\winnt\child.c1040 146IntelliSense: identifier my_generation is undefined e:\VC11\Win64\httpd-2.4.9\server\mpm\winnt\child.c1051 147IntelliSense: identifier my_generation is undefined e:\VC11\Win64\httpd-2.4.9\server\mpm\winnt\child.c1076 148IntelliSense: a value of type void * cannot be assigned to an entity of type int *e:\VC11\Win64\httpd-2.4.9\server\mpm\winnt\child.c 1082 149IntelliSense: a value of type void * cannot be assigned to an entity of type int *e:\VC11\Win64\httpd-2.4.9\server\mpm\winnt\child.c 1330 2014-06-28 17:06 GMT+02:00 Jeff Trawick traw...@gmail.com: On Fri, Jun 27, 2014 at 7:53 AM, Jeff Trawick traw...@gmail.com wrote: On Thu, Jun 26, 2014 at 4:18 AM, Mar Imp marimp...@gmail.com wrote: Hi, Thank you for the response! I looked into child.c, and see that the first line in Error log: (OS 6)The handle is invalid. : AH00356: Child: WAIT_FAILED -- shutting down server comes from: child.c Line 1125+: rv = WaitForMultipleObjects(num_events, (HANDLE *)child_events, FALSE, …… This is the place that causes the restart. Right... The other code I pointed out is what makes this call different than before. The second line in the error log: (OS 10038)An operation was attempted on something that is not a socket. : AH00344: accept() failed. comes from: child.c Line 641+: if (context-accept_socket == INVALID_SOCKET) I guess the second line in the error log is just a consequence of the server shutting down? I expect so. no, I can’t build httpd. It would be great if you could provide a patched version that I could install in _production_ environment. I can’t reproduce the error on a test server, I can just install the version on a productive server, and wait for the error to occur. The error occurs sporadically. It is essential that the patch included in the build doesn’t break things (particularly the ability of apache to restart when an error happens). The Apache Lounge folks would need to run the build for you to ensure that it has any patches you're currently using and that the toolchain is in sync. Right now I hope to make some permanent changes in the next couple of days to improve diagnostics in this area and commit the changes to httpd trunk. At that point you might be able to get the Apache Lounge folks to roll them into a special build. ??? Here are the diagnostic changes I added: http://svn.apache.org/viewvc?view=revisionrevision=1606368 Perhaps the Apache Lounge folks can get you a build of 2.4.9 with that in it. As you found out, I use the apachelounge-build atm. Thank you for your help! Kind regards Maria Imp 2014-06-24 15:59 GMT+02:00
Re: [users@httpd] ProxyPass and HA Singleton Applications
On Thu, Jul 3, 2014 at 9:57 AM, Federico Calì f.c...@tdnet.it wrote: Hi Roman, the mod_cluster is what we have actually in production. I want to change it, because the communication between Jboss and front-end sometimes fails with error 503. I would like to use ProxyPass in order to investigate if these kinds of errors will remain. It is very likely that you'll have the same problem, which is an issue, perhaps intermittent, with the backend server or application. Maybe one proxy implementation reacts a little better in your circumstance and/or can be configured to react better (e.g., recover more quickly), but you'll probably end up needing to diagnose the root cause either way. Federico Il 03/07/2014 15:15, Roman Jurkov ha scritto: Federico, since you are using JBoss, i would suggest to look into mod_cluster instead. http://mod-cluster.jboss.org -Roman. On Jul 3, 2014, at 8:58 AM, Federico Calì f.c...@tdnet.it wrote: Hi Eric, thanks for the hint but I think it's not what I need. Defining the standby node(s) in the balancer definition I might loss functionality for these reasons: - the JBoss cluster has both web applications deployed in HA Singleton that deployed in statndard classic [ie running on all nodes]; For the second kinds of applications each request can be served by all back-end node. - I can't know which node is the HA Singleton Master; - I might need to extend the jboss cluster adding new nodes (2,3,..) but only one will be the master for HA Singleton web applications; Federico Il 03/07/2014 13:59, Eric Covener ha scritto: On Thu, Jul 3, 2014 at 6:47 AM, Federico Calì f.c...@tdnet.it f.c...@tdnet.it wrote: I'd like use Apache ProxyPass, with balancer directives, to refer these web applications, but I need that no requests are sent to the stand-by back-end node. http://httpd.apache.org/docs/2.2/mod/mod_proxy.html Search for standby -- .: Federico Calì .: TD Group S.p.A. .: Via del Fischione 19 .: [Via Traversagna -Ingresso Zona C ] .: 56010 Migliarino Pisano (PI) .: 050-897406 .: 348-2886628 Nessun virus nel messaggio. Controllato da AVG - www.avg.com Versione: 2014.0.4592 / Database dei virus: 3986/7788 - Data di rilascio: 03/07/2014 -- .: Federico Calì .: TD Group S.p.A. .: Via del Fischione 19 .: [Via Traversagna -Ingresso Zona C ] .: 56010 Migliarino Pisano (PI) .: 050-897406 .: 348-2886628 -- Born in Roswell... married an alien... http://emptyhammock.com/ http://edjective.org/
Re: [users@httpd] mod_macro cause delay before virtual host sites available after graceful?
On Mon, Jun 30, 2014 at 2:54 PM, Rose, John B jbr...@utk.edu wrote: When we do a graceful restart there is a delay of 30-40 seconds each time accessing each of our virtual hosts. Accessing the server itself has no delay. We noticed this after we implemented mod_macro, but it affects all virtual hosts, not just the mod_macro sites. This had not been an issue previously, for several months. Any ideas? Slow DNS lookup perhaps? Run strace with timestamps against the httpd parent process before initiating graceful restart, and see if you can locate the delays between recognizable processing. -- Born in Roswell... married an alien... http://emptyhammock.com/ http://edjective.org/
Re: [users@httpd] Windows Apache 2.4.9 restarts itself
On Fri, Jun 27, 2014 at 7:53 AM, Jeff Trawick traw...@gmail.com wrote: On Thu, Jun 26, 2014 at 4:18 AM, Mar Imp marimp...@gmail.com wrote: Hi, Thank you for the response! I looked into child.c, and see that the first line in Error log: (OS 6)The handle is invalid. : AH00356: Child: WAIT_FAILED -- shutting down server comes from: child.c Line 1125+: rv = WaitForMultipleObjects(num_events, (HANDLE *)child_events, FALSE, …… This is the place that causes the restart. Right... The other code I pointed out is what makes this call different than before. The second line in the error log: (OS 10038)An operation was attempted on something that is not a socket. : AH00344: accept() failed. comes from: child.c Line 641+: if (context-accept_socket == INVALID_SOCKET) I guess the second line in the error log is just a consequence of the server shutting down? I expect so. no, I can’t build httpd. It would be great if you could provide a patched version that I could install in _production_ environment. I can’t reproduce the error on a test server, I can just install the version on a productive server, and wait for the error to occur. The error occurs sporadically. It is essential that the patch included in the build doesn’t break things (particularly the ability of apache to restart when an error happens). The Apache Lounge folks would need to run the build for you to ensure that it has any patches you're currently using and that the toolchain is in sync. Right now I hope to make some permanent changes in the next couple of days to improve diagnostics in this area and commit the changes to httpd trunk. At that point you might be able to get the Apache Lounge folks to roll them into a special build. ??? Here are the diagnostic changes I added: http://svn.apache.org/viewvc?view=revisionrevision=1606368 Perhaps the Apache Lounge folks can get you a build of 2.4.9 with that in it. As you found out, I use the apachelounge-build atm. Thank you for your help! Kind regards Maria Imp 2014-06-24 15:59 GMT+02:00 Jeff Trawick traw...@gmail.com: On Tue, Jun 24, 2014 at 9:36 AM, Mar Imp marimp...@gmail.com wrote: I face the problem, that Apache restarts itself unexpecteldy without obvious reason. - (OS 6)The handle is invalid. : AH00356: Child: WAIT_FAILED -- shutting down server - (OS 10038)An operation was attempted on something that is not a socket. : AH00344: accept() failed. Apache Version: * Problem occurs on 2.4.9, both VC10 and VC11 compiled ones * Problem does NOT occur on 2.4.4 Operating System: * Microsoft Windows Server 2012 Standard The problem occurs since the Apache upgrade from 2.4.4 to 2.4.9. At this moment I reverted to 2.4.4 again because the random restarts cause downtimes. Relevant configuration settings: ThreadsPerChild 300 AcceptFilter http none AcceptFilter https none EnableSendfile off EnableMMAP off Apache works as a caching reverse proxy (mod_cache_disk) Typical logfile fragment: [log] [Fri May 23 07:53:58.344457 2014] [mpm_winnt:crit] [pid 42540:tid 380] (OS 6)The handle is invalid. : AH00356: Child: WAIT_FAILED -- shutting down server [Fri May 23 07:54:03.757607 2014] [mpm_winnt:warn] [pid 42540:tid 4212] (OS 10038)An operation was attempted on something that is not a socket. : AH00344: accept() failed. [Fri May 23 07:54:30.288807 2014] [mpm_winnt:notice] [pid 42540:tid 380] AH00362: Child: Waiting 270 more seconds for 5 worker threads to finish. [Fri May 23 07:55:00.329552 2014] [mpm_winnt:notice] [pid 42540:tid 380] AH00362: Child: Waiting 240 more seconds for 1 worker threads to finish. [Fri May 23 07:55:30.370221 2014] [mpm_winnt:notice] [pid 42540:tid 380] AH00362: Child: Waiting 210 more seconds for 1 worker threads to finish. [Fri May 23 07:55:47.893020 2014] [mpm_winnt:notice] [pid 42540:tid 380] AH00364: Child: All worker threads have exited. [Fri May 23 07:55:48.010131 2014] [mpm_winnt:notice] [pid 36544:tid 516] AH00428: Parent: child process 42540 exited with status 0 -- Restarting. [Fri May 23 07:55:48.801890 2014] [mpm_winnt:notice] [pid 36544:tid 516] AH00455: Apache/2.4.9 (Win64) OpenSSL/1.0.1g configured -- resuming normal operations [Fri May 23 07:55:48.801890 2014] [mpm_winnt:notice] [pid 36544:tid 516] AH00456: Apache Lounge VC10 Server built: Mar 17 2014 12:11:31 [Fri May 23 07:55:48.801890 2014] [core:notice] [pid 36544:tid 516] AH00094: Command line: 'C:\\Apache24\\bin\\httpd.exe -d C:/Apache24' [Fri May 23 07:55:48.802891 2014] [mpm_winnt:notice] [pid 36544:tid 516] AH00418: Parent: Created child process 33888 [Fri May 23 07:55:50.263291 2014] [mpm_winnt:notice] [pid 33888:tid 380] AH00354: Child: Starting 300 worker threads. [Fri May 23 11:58:09.232804 2014] [mpm_winnt:crit] [pid 33888:tid 380] (OS 6)The handle is invalid. : AH00356: Child: WAIT_FAILED -- shutting
Re: [users@httpd] Windows Apache 2.4.9 restarts itself
On Thu, Jun 26, 2014 at 4:18 AM, Mar Imp marimp...@gmail.com wrote: Hi, Thank you for the response! I looked into child.c, and see that the first line in Error log: (OS 6)The handle is invalid. : AH00356: Child: WAIT_FAILED -- shutting down server comes from: child.c Line 1125+: rv = WaitForMultipleObjects(num_events, (HANDLE *)child_events, FALSE, …… This is the place that causes the restart. Right... The other code I pointed out is what makes this call different than before. The second line in the error log: (OS 10038)An operation was attempted on something that is not a socket. : AH00344: accept() failed. comes from: child.c Line 641+: if (context-accept_socket == INVALID_SOCKET) I guess the second line in the error log is just a consequence of the server shutting down? I expect so. no, I can’t build httpd. It would be great if you could provide a patched version that I could install in _production_ environment. I can’t reproduce the error on a test server, I can just install the version on a productive server, and wait for the error to occur. The error occurs sporadically. It is essential that the patch included in the build doesn’t break things (particularly the ability of apache to restart when an error happens). The Apache Lounge folks would need to run the build for you to ensure that it has any patches you're currently using and that the toolchain is in sync. Right now I hope to make some permanent changes in the next couple of days to improve diagnostics in this area and commit the changes to httpd trunk. At that point you might be able to get the Apache Lounge folks to roll them into a special build. ??? As you found out, I use the apachelounge-build atm. Thank you for your help! Kind regards Maria Imp 2014-06-24 15:59 GMT+02:00 Jeff Trawick traw...@gmail.com: On Tue, Jun 24, 2014 at 9:36 AM, Mar Imp marimp...@gmail.com wrote: I face the problem, that Apache restarts itself unexpecteldy without obvious reason. - (OS 6)The handle is invalid. : AH00356: Child: WAIT_FAILED -- shutting down server - (OS 10038)An operation was attempted on something that is not a socket. : AH00344: accept() failed. Apache Version: * Problem occurs on 2.4.9, both VC10 and VC11 compiled ones * Problem does NOT occur on 2.4.4 Operating System: * Microsoft Windows Server 2012 Standard The problem occurs since the Apache upgrade from 2.4.4 to 2.4.9. At this moment I reverted to 2.4.4 again because the random restarts cause downtimes. Relevant configuration settings: ThreadsPerChild 300 AcceptFilter http none AcceptFilter https none EnableSendfile off EnableMMAP off Apache works as a caching reverse proxy (mod_cache_disk) Typical logfile fragment: [log] [Fri May 23 07:53:58.344457 2014] [mpm_winnt:crit] [pid 42540:tid 380] (OS 6)The handle is invalid. : AH00356: Child: WAIT_FAILED -- shutting down server [Fri May 23 07:54:03.757607 2014] [mpm_winnt:warn] [pid 42540:tid 4212] (OS 10038)An operation was attempted on something that is not a socket. : AH00344: accept() failed. [Fri May 23 07:54:30.288807 2014] [mpm_winnt:notice] [pid 42540:tid 380] AH00362: Child: Waiting 270 more seconds for 5 worker threads to finish. [Fri May 23 07:55:00.329552 2014] [mpm_winnt:notice] [pid 42540:tid 380] AH00362: Child: Waiting 240 more seconds for 1 worker threads to finish. [Fri May 23 07:55:30.370221 2014] [mpm_winnt:notice] [pid 42540:tid 380] AH00362: Child: Waiting 210 more seconds for 1 worker threads to finish. [Fri May 23 07:55:47.893020 2014] [mpm_winnt:notice] [pid 42540:tid 380] AH00364: Child: All worker threads have exited. [Fri May 23 07:55:48.010131 2014] [mpm_winnt:notice] [pid 36544:tid 516] AH00428: Parent: child process 42540 exited with status 0 -- Restarting. [Fri May 23 07:55:48.801890 2014] [mpm_winnt:notice] [pid 36544:tid 516] AH00455: Apache/2.4.9 (Win64) OpenSSL/1.0.1g configured -- resuming normal operations [Fri May 23 07:55:48.801890 2014] [mpm_winnt:notice] [pid 36544:tid 516] AH00456: Apache Lounge VC10 Server built: Mar 17 2014 12:11:31 [Fri May 23 07:55:48.801890 2014] [core:notice] [pid 36544:tid 516] AH00094: Command line: 'C:\\Apache24\\bin\\httpd.exe -d C:/Apache24' [Fri May 23 07:55:48.802891 2014] [mpm_winnt:notice] [pid 36544:tid 516] AH00418: Parent: Created child process 33888 [Fri May 23 07:55:50.263291 2014] [mpm_winnt:notice] [pid 33888:tid 380] AH00354: Child: Starting 300 worker threads. [Fri May 23 11:58:09.232804 2014] [mpm_winnt:crit] [pid 33888:tid 380] (OS 6)The handle is invalid. : AH00356: Child: WAIT_FAILED -- shutting down server [Fri May 23 11:58:10.710220 2014] [mpm_winnt:warn] [pid 33888:tid 5008] (OS 10038)An operation was attempted on something that is not a socket. : AH00344: accept() failed. [Fri May 23 11:58:28.546422 2014] [mpm_winnt:warn] [pid 33888:tid
Re: [users@httpd] Left out .c on config file
On Thu, Jun 26, 2014 at 7:24 AM, Brent Clark brentgclarkl...@gmail.com wrote: Good day Guys I one of my apache config files, I left out the .c IfModule expires_module that's fine Does that mean apache will no see or use the module? not a problem Do I have to use IfModule expires_module.c no, not the right form You can use either of these forms: IfModule mod_expires.c (traditional form; goes back to Apache httpd 1.3) or IfModule expires_module(2.2 and above IIRC) Regards Brent - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org -- Born in Roswell... married an alien... http://emptyhammock.com/ http://edjective.org/
Re: [users@httpd] MaxClients exceeded error message
On Wed, Jun 25, 2014 at 8:52 AM, Robin Becker ro...@reportlab.com wrote: An apache 2.2 mpm prefork site which uses an external mod_fastcgi socket to django was experiencing slowdowns during a busy period. The main symptom seemed to be a connection delay of up to 10 seconds. At the time I saw the machine was not heavily loaded in cpu or memory, but there were a large number of apache processes; stupidly I didn't think to count them. Later I looked for an error message related to MaxClients exceeded or similar, but could not see any. It only appears once per generation, so it might have been days before you noticed the symptom. (Generation: each fresh start or restart of the server is a generation. This can be viewed from mod_status.) I have upped the MaxClients setting from 150 to 300 and in another busy period don't see the slowdown although monitoring the apache process count shows it can exceed the old limit. The django side of this is not especially fast and the single socket connection seems like it might be a choke point, but my understanding is that the django side of the fastcgi is also spawning children to handle the requests. What are the effects of MaxClient limit being exceeded? delays in processing new connections depending on load and MaxClients and ListenBacklogs, some new connections might even get rejected Should I have seen an error message if it was exceeded? once per generation --/-- It can be useful to log the response time in microseconds (%D in log format) in order to distinguish delays in the application (delay is reflected in value for %D) from delays before httpd starts processing it due to capacity tuning (delay not reflected in value for %D since it happened before processing started) -- Robin Becker - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org -- Born in Roswell... married an alien... http://emptyhammock.com/ http://edjective.org/
Re: [users@httpd] Windows Apache 2.4.9 restarts itself
On Tue, Jun 24, 2014 at 9:36 AM, Mar Imp marimp...@gmail.com wrote: I face the problem, that Apache restarts itself unexpecteldy without obvious reason. - (OS 6)The handle is invalid. : AH00356: Child: WAIT_FAILED -- shutting down server - (OS 10038)An operation was attempted on something that is not a socket. : AH00344: accept() failed. Apache Version: * Problem occurs on 2.4.9, both VC10 and VC11 compiled ones * Problem does NOT occur on 2.4.4 Operating System: * Microsoft Windows Server 2012 Standard The problem occurs since the Apache upgrade from 2.4.4 to 2.4.9. At this moment I reverted to 2.4.4 again because the random restarts cause downtimes. Relevant configuration settings: ThreadsPerChild 300 AcceptFilter http none AcceptFilter https none EnableSendfile off EnableMMAP off Apache works as a caching reverse proxy (mod_cache_disk) Typical logfile fragment: [log] [Fri May 23 07:53:58.344457 2014] [mpm_winnt:crit] [pid 42540:tid 380] (OS 6)The handle is invalid. : AH00356: Child: WAIT_FAILED -- shutting down server [Fri May 23 07:54:03.757607 2014] [mpm_winnt:warn] [pid 42540:tid 4212] (OS 10038)An operation was attempted on something that is not a socket. : AH00344: accept() failed. [Fri May 23 07:54:30.288807 2014] [mpm_winnt:notice] [pid 42540:tid 380] AH00362: Child: Waiting 270 more seconds for 5 worker threads to finish. [Fri May 23 07:55:00.329552 2014] [mpm_winnt:notice] [pid 42540:tid 380] AH00362: Child: Waiting 240 more seconds for 1 worker threads to finish. [Fri May 23 07:55:30.370221 2014] [mpm_winnt:notice] [pid 42540:tid 380] AH00362: Child: Waiting 210 more seconds for 1 worker threads to finish. [Fri May 23 07:55:47.893020 2014] [mpm_winnt:notice] [pid 42540:tid 380] AH00364: Child: All worker threads have exited. [Fri May 23 07:55:48.010131 2014] [mpm_winnt:notice] [pid 36544:tid 516] AH00428: Parent: child process 42540 exited with status 0 -- Restarting. [Fri May 23 07:55:48.801890 2014] [mpm_winnt:notice] [pid 36544:tid 516] AH00455: Apache/2.4.9 (Win64) OpenSSL/1.0.1g configured -- resuming normal operations [Fri May 23 07:55:48.801890 2014] [mpm_winnt:notice] [pid 36544:tid 516] AH00456: Apache Lounge VC10 Server built: Mar 17 2014 12:11:31 [Fri May 23 07:55:48.801890 2014] [core:notice] [pid 36544:tid 516] AH00094: Command line: 'C:\\Apache24\\bin\\httpd.exe -d C:/Apache24' [Fri May 23 07:55:48.802891 2014] [mpm_winnt:notice] [pid 36544:tid 516] AH00418: Parent: Created child process 33888 [Fri May 23 07:55:50.263291 2014] [mpm_winnt:notice] [pid 33888:tid 380] AH00354: Child: Starting 300 worker threads. [Fri May 23 11:58:09.232804 2014] [mpm_winnt:crit] [pid 33888:tid 380] (OS 6)The handle is invalid. : AH00356: Child: WAIT_FAILED -- shutting down server [Fri May 23 11:58:10.710220 2014] [mpm_winnt:warn] [pid 33888:tid 5008] (OS 10038)An operation was attempted on something that is not a socket. : AH00344: accept() failed. [Fri May 23 11:58:28.546422 2014] [mpm_winnt:warn] [pid 33888:tid 3320] (OS 10038)An operation was attempted on something that is not a socket. : AH00344: accept() failed. [Fri May 23 11:58:41.169814 2014] [mpm_winnt:notice] [pid 33888:tid 380] AH00362: Child: Waiting 270 more seconds for 8 worker threads to finish. [Fri May 23 11:59:11.208219 2014] [mpm_winnt:notice] [pid 33888:tid 380] AH00362: Child: Waiting 240 more seconds for 3 worker threads to finish. [Fri May 23 11:59:41.245781 2014] [mpm_winnt:notice] [pid 33888:tid 380] AH00362: Child: Waiting 210 more seconds for 1 worker threads to finish. [Fri May 23 12:00:11.277011 2014] [mpm_winnt:notice] [pid 33888:tid 380] AH00362: Child: Waiting 180 more seconds for 1 worker threads to finish. [Fri May 23 12:00:41.305795 2014] [mpm_winnt:notice] [pid 33888:tid 380] AH00362: Child: Waiting 150 more seconds for 1 worker threads to finish. [Fri May 23 12:01:11.335526 2014] [mpm_winnt:notice] [pid 33888:tid 380] AH00362: Child: Waiting 120 more seconds for 1 worker threads to finish. [Fri May 23 12:01:15.840009 2014] [mpm_winnt:notice] [pid 33888:tid 380] AH00364: Child: All worker threads have exited. [Fri May 23 12:01:15.953118 2014] [mpm_winnt:notice] [pid 36544:tid 516] AH00428: Parent: child process 33888 exited with status 0 -- Restarting. [Fri May 23 12:01:16.820952 2014] [mpm_winnt:notice] [pid 36544:tid 516] AH00455: Apache/2.4.9 (Win64) OpenSSL/1.0.1g configured -- resuming normal operations [Fri May 23 12:01:16.820952 2014] [mpm_winnt:notice] [pid 36544:tid 516] AH00456: Apache Lounge VC10 Server built: Mar 17 2014 12:11:31 [Fri May 23 12:01:16.820952 2014] [core:notice] [pid 36544:tid 516] AH00094: Command line: 'C:\\Apache24\\bin\\httpd.exe -d C:/Apache24' [Fri May 23 12:01:16.820952 2014] [mpm_winnt:notice] [pid 36544:tid 516] AH00418: Parent: Created child process 24388 [Fri May 23 12:01:18.308375 2014] [mpm_winnt:notice] [pid 24388:tid 376] AH00354: Child: Starting 300
Re: [users@httpd] Pound symbol encoding issue?
On Tue, Jun 24, 2014 at 9:19 AM, Morris, Andi amor...@cardiffmet.ac.uk wrote: Hi, We are having some authentication issues with Apache if a user has a £ symbol as part of their password. The error_log shows: (OS 1326)Logon failure: unknown user name or bad password When the same user removes the pound symbol from the password they are authenticated with no issues. The setup is: TMG publishes our Shibboleth server externally and present the user with a form for Forms Based Authentication. Shibboleth uses an Apache virtual server called Remote User to handle the authentication. The problem only occurs when the users login from outside our network, via TMG and the Apache Remote User vhost. The same TMG form is used to publish our sharepoint and other internal resources, and the issue does not occur there when using the same test user. The parts of the config that I can see that are relevant are: Location /idp/Authn/RemoteUser AuthName Identity Provider AuthType SSPI SSPIAuth On Have you checked with the mod_auth_sspi folks? (mailing list or bug db) I suspect that this is an issue with that third-party module. Perhaps someone here can help, but a resource specific to mod_auth_sspi would probably yield better results. If you can duplicate the error with some simple httpd-bundled authentication module (e.g., mod_authn_file), open a bug against httpd and provide the test case. SSPIAuthoritative On SSPIOfferBasic On SSPIOmitDomain On SSPIPerRequestAuth On SSPIUsernameCase lower require valid-user /Location I've read around about forcing the basic authentication using: SSPIBasicPreferred On So I'm going to give that a try overnight (I can only restart the apache service out of hours frustratingly). I'm happy to post up any obfuscated config files that might be required to help resolve this. I'm pretty new to Apache but willing to provide whatever is required. Does anyone have any suggestions for why the apache server doesn't seem to like the pound symbol? Cheers, Andi - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org -- Born in Roswell... married an alien... http://emptyhammock.com/ http://edjective.org/
Re: [users@httpd] How to apply Open SSL openssl-1.0.1h to Apache 2.2.22
On Mon, Jun 16, 2014 at 10:11 AM, Pooja Kulkarni p.kulka...@fbnbank.co.uk wrote: Hi Balaji, Thanks a lot for your prompt response. Yes we already have 0.9.8t shipped with apache applied on our server. You are right we are trying to apply the patch for June 5 so ensure we are on latest SSL and as the default mod_ssl is for 0.9.8t it throws an error. I guess as you said I would need to rebuild the mod_ssl myself as there is no formal release for the same support OpenSSL 1.0.1h as yet. Thanks again. If you need to get a binary build of Apache httpd for Windows, use Apache Lounge (not connected with ASF) or some other site. In the past, one of the httpd developers frequently made binaries available for Windows. That is no longer the case. Regards, Pooja +44 20 78264655 *From:* Balaji Katika [mailto:balaji.kat...@gmail.com] *Sent:* 16 June 2014 13:53 *To:* users@httpd.apache.org *Subject:* Re: [users@httpd] How to apply Open SSL openssl-1.0.1h to Apache 2.2.22 HI Pooja, Looks like you are trying to apply the patch for June 5 OpenSSL vulnerabilities for you httpd server mentioned at https://www.openssl.org/ But I think the mod_ssl shipped default by apache httpd uses the OpenSSL/0.9.8t. And hence, we might need to apply the relevant 0.9.8za available through the website... I suspect this could be the error in your case as you are attempting for OpenSSL 1.0.1h. Please rectify me if my analysis is not correct. Further, I think the fix is about replacing the mod_ssl.so file located in the modules folder with the fixed new version of the .so file that is linked with OpenSSL 0.9.8za. I have googled and figured out that mod_ssl didn't release the new patch for this. Mostly likely, it looks like we need to rebuild mod_ssl ourselves (Just like apache httpd does !!) as mod_ssl has not released the .so file in the recent time (http://www.modssl.org/) Regards Balaji Katika On Mon, Jun 16, 2014 at 6:07 PM, Pooja Kulkarni p.kulka...@fbnbank.co.uk wrote: Hi, We have Apache 2.2.22 (Win32) on a Windows 2008 64 bit server. It currently has OpenSSL 0.9.8. We are trying to apply the OpenSSL 1.0.1h on the same, after applying the open SSL and copying the relevant files to the bin directory of apache server, we are not able to start the server. It gives an mod_sso error. Can you please advice how can we achieve the same? Regards, Pooja +44 20 78264655 *Winner of the Global Trade Review award - Best Trade Finance Bank in West Africa 2009, 2010, 2011, 2012 2013 Best Local Trade Finance Bank in West Africa 2013* -- Internet communications are not secure and therefore FBN Bank (UK) Ltd does not accept legal responsibility for the contents of the message. Whilst FBN Bank (UK) Ltd operates anti virus software, it does not accept responsibility for any damage that is caused by viruses being passed. This message and any attachments are strictly confidential to the normal user of the e-mail address to which it was addressed and may also be privileged. If you are not the addressee, you may not forward, copy, disclose or use any part of the message or attachments. If you have received this message in error, please immediately notify the sender by return e-mail and permanently delete it from your system. Any opinions contained in this message are those of the author and are not provided or endorsed by FBN Bank (UK) Ltd unless clearly indicated and the authority of the author to so bind FBN Bank (UK) Ltd is duly verified. FBN Bank (UK) Limited is registered in England and Wales under company number 4459383 with its registered address at 28 Finsbury Circus, London EC2M 7DT. FBN Bank (UK) Ltd is authorised by the Prudential Regulation Authority and regulated by the Financial Conduct Authority and the Prudential Regulation Authority. -- -- Born in Roswell... married an alien... http://emptyhammock.com/ http://edjective.org/
Re: [users@httpd] Supported version of Apache on RHEL 6.5
On Mon, Jun 16, 2014 at 1:10 PM, Hisham omarjo1...@yahoo.com.invalid wrote: Hi, I am looking into the supported Apache version that comes with RHEL 6.5 and i am targeting Apache 2.2.26. The response I got was Apache 2.2.15-30. (Update 30) Can anyone please clarify the difference and what is meant by the update #?! Otherwise, does that mean I cant get Apache 2.2.26 from RHEL for release 6.5 Perhaps someone here will help; regardless, please note that you're asking questions about how Red Hat chooses to package and version Apache httpd for their platform; check RedHat FAQs or mailing lists for details. Thanks Alex - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org -- Born in Roswell... married an alien... http://emptyhammock.com/ http://edjective.org/
Re: [users] Building apr on win32
On Thu, Jun 12, 2014 at 5:42 PM, Christopher Schultz ch...@christopherschultz.net wrote: All, I'm hoping this is the right mailing list: the apr project seems to have a dev list but no user one. I'm happy to move if appropriate. If you're just trying to build APR components, d...@apr.apache.org is more appropriate. If you're trying to build httpd + all the various support libraries, this mailing list or a forum at http://www.apachelounge.com/ (not affiliated with the ASF) is okay. I'm trying to build apr on win32 from the command-line and I'm running into some resistance. I'm using Visual Studio 12 on Windows 8.1. I have installed the Windows SDK as well to try to help, but it doesn't seem to have improved things. I'm following the instructions found here: http://apr.apache.org/compiling_win32.html I have downloaded the ZIP files for apr, apr-util, and apr-iconv and put them into the requisite directories. I've run VS's VC\bin\vcvars32.bat to get the build tools in the path, but I don't have a setenv.bat anywhere (suggested in the above instructions). When I get to the step where I run msdev (which basically /does the build/), I can't find the msdev program: C:\Users\Me\Desktop\apr-utilmsdev aprutil.dsw /MAKE apriconv - Win32 Release 'msdev' is not recognized as an internal or external command, operable program or batch file. I'm no win32 build expert, but I have quite a bit of experience building on *NIX systems. Can anyone help me get things going on Windows? Thanks, -chris -- Born in Roswell... married an alien... http://emptyhammock.com/ http://edjective.org/
Re: [users] mod_proxy_fcgi with Plack, customizing script vars in general
On Mon, Jun 9, 2014 at 9:34 PM, Yehuda Katz yeh...@ymkatz.net wrote:
Plack requires SCRIPT_NAME to be instead of / (
https://github.com/plack/Plack/issues/308).
Is there a way to do this with Apache 2.4.7?
My current config is
ProxyPass / fcgi://localhost:9090/
- Y
I don't think it is possible to set SCRIPT_NAME to the empty string at
present, unless there is some way through this logic in ap_add_cgi_vars()
with values for r-uri which I don't anticipate:
else if (!r-path_info || !*r-path_info) {
apr_table_setn(e, SCRIPT_NAME, r-uri);
}
else {
int path_info_start = ap_find_path_info(r-uri, r-path_info);
apr_table_setn(e, SCRIPT_NAME,
apr_pstrndup(r-pool, r-uri, path_info_start));
apr_table_setn(e, PATH_INFO, r-path_info);
}
While this particular issue seems to be a strange requirement of Plack, in
general I think that configuring values/expressions for script variables
would help in a number of circumstances. I could see something like
SetScriptEnv SCRIPT_NAME|PATH_INFO|GATEWAY_INTERFACE|REQUEST_URI|...
expression
allowing you to override the logic in ap_add_cgi_vars() and
ap_add_common_vars() for specific variables. nginx has something similar
as the default mechanism for setting such variables, and the growing (and
sometimes near-exclusive within certain communities) use of nginx in this
space sometimes results in app|middleware expectations (good or bad) that
can be easily met with nginx but not so with httpd.
Any thoughts out there on a SetScriptEnv directive? I don't know the
.htaccess considerations here. On the one hand, an app is free to
ignore/override any or all values anyway, but if someone untrusted has the
ability to enable only trusted apps then this seems potentially dangerous.
--
Born in Roswell... married an alien...
http://emptyhammock.com/
http://edjective.org/
Re: [users] Re: Recommended practice for mitigating BREACH/CRIME attacks with Apache 2.4+, SSL/TLS-only sites, and use of mod_deflate?
On Fri, Jun 6, 2014 at 10:21 AM, Tom Browder tom.brow...@gmail.com wrote: On Tue, Jun 3, 2014 at 3:52 PM, Tom Browder tom.brow...@gmail.com wrote: I have several SSL/TLS-only virtual sites running under Apache 2.4.7. I haven't turned on compression because of all the warnings about CRIME and BREACH. However, when I run my sites against web site analyzers they always suggest turning on compression. So what is the consensus? Ping! Anyone? I think the free OpenSSL cookbook part of Ivan Ristić's guide addresses some of your question. There's also an Apache-specific chapter of the big book which I haven't looked at. See http://blog.ivanristic.com/2014/05/bulletproof-update-may-deployment-and-performance.html -Tom - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org -- Born in Roswell... married an alien... http://emptyhammock.com/ http://edjective.org/
Re: [users] question about mod_qos
On Thu, Jun 5, 2014 at 10:01 AM, absolutely_f...@libero.it absolutely_f...@libero.it wrote: Hi, is there a way to manage separately inbound and outbound connections with mod_qos? I need to bypass every limit for specific outbound traffic which starts from my server. I'm using Apache 2.2 Thank you very much. I don't recall any past mod_qos discussions here, though it is possible that someone can help. You'd probably have much better luck in the mod_qos discussion forum on Sourceforge, where that module is supported. - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org -- Born in Roswell... married an alien... http://emptyhammock.com/ http://edjective.org/
Re: [users@httpd] Trying to setup php-fpm with latest apache 2.4
You need mod_proxy_fcgi to interface with PHP-FPM. See http://wiki.apache.org/httpd/PHP-FPM (My previous attempts to post were rejected as suspected SPAM, so I'm trying again without including the original message.)
Re: [users@httpd] weblogic plugin 64-bit for apache2.2.7 64-bit
On Wed, Apr 30, 2014 at 2:50 PM, venu thangalapally when...@gmail.comwrote: Hello, Do we need to take any extra steps for configuring apache(compiled it in 64-bit) with weblogic server . i had to download 64-bit WLS plugin and place it under apache_root/modules apache started up fine with no issues... any other steps to be taken care of with weblogic configuration? Regards Venu The WebLogic plugin has to be loaded and configured to do anything. Find a WebLogic server forum at oracle.com and ask there, in case no one here has experiences to share. -- Born in Roswell... married an alien... http://emptyhammock.com/ http://edjective.org/
Re: [users@httpd] Apache Admin button on XAMPP Control Panel for non-80 port
On Fri, Apr 25, 2014 at 11:05 PM, Carl Hruska ca...@hal-pc.org wrote: Hello everyone, I have a small problem with the Admin button on the XAMPP Control Panel. Please read the following information pertaining to this problem and reply with suggestions (any suggestions; I'm not afraid to research.). Any help will be greatly appreciated. Try one of these forums: https://community.apachefriends.org/f/ The XAMPP control panel is not from the Apache HTTP Server project. Maybe someone on this list happens to know how to configure it, but a lot of us have our hands tied.
Re: [users@httpd] mod_ossl configuration for solaris 10
On Sat, Apr 26, 2014 at 7:33 PM, Chandrasekaran, Narasimhan (VDH) naras.chandraseka...@vdh.virginia.gov wrote: I downloaded the latest apache software but could not find the mod_ossl. Then i downloaded the openssl but now the c compiler on solaris is giving problem. Can someone please let me know how i should configure mod_ossl for solaris 10. At this time the apache/modules folder does not have any .so files except the http. Thanks. mod_ossl is part of Oracle HTTP Server. You have to get that from Oracle by downloading and installing their product.
Re: [users@httpd] mod_ossl configuration for solaris 10
On Sat, Apr 26, 2014 at 8:25 PM, Chandrasekaran, Narasimhan (VDH) naras.chandraseka...@vdh.virginia.gov wrote: sorry it is the mod_ssl for apache 2.4.9 that i want to configure on solaris 10 64 bit OS ok... What commands are you running and what errors do you get? What compiler is installed?
Re: [users@httpd] Apache Processes in Windows
On Fri, Apr 25, 2014 at 2:18 PM, Dino B. mypascal2...@gmail.com wrote: Hi Apache experts, This is my first post to an Apache group, so please bear with me. I am also new to Apache in general. My understanding is that under windows, there should be only 2 httpd processes once I start my Apache server (version 2.2). One parent and one child. The child then spawns multiple threads to handle incoming requests. However, I have seen cases where I had up to 8 or so httpd processes showing in Windows Task Manager. Are 7 a child of the same parent httpd.exe process? If you have MaxRequestsPerChild set to non-zero, you can have multiple children even on Windows, while older processes finish serving lengthy requests. I have been using an Apache module acting as server (written in Delphi) to service request from devices. Its always possible that third-party modules create their own child processes. mod_status might show helpful information, but ISTR that httpd 2.2 on Windows doesn't show the various process ids when there's more than one child. I'm not sure. Much appreciated _db_ -- Born in Roswell... married an alien... http://emptyhammock.com/ http://edjective.org/
Re: [users@httpd] apache 2.2.7 bit level info
On Fri, Apr 25, 2014 at 4:43 PM, venu thangalapally when...@gmail.comwrote: can you please provide more info how can i build it to 64-bit... apache 2.2 tar file from apache link does not say the bit level information Build apr, apr-util, and httpd with CC=cc -m64 ./configure ... Replace cc with gcc if necessary, or 64 with 32 if necessary. Replace cc with full path to Sun Studio compiler if it isn't found in path. You need matching versions of support libraries too. If you've never built on Solaris before, maybe you are missing different tools or libraries and maybe have a few uncomfortable tricks to learn about setting PATH to avoid bogus cc. Maybe http://sunfreeware.com/ is a good place to look for binaries. Regards Venu On Fri, Apr 25, 2014 at 3:41 PM, Eric Covener cove...@gmail.com wrote: On Fri, Apr 25, 2014 at 4:40 PM, venu thangalapally when...@gmail.com wrote: Guys.. do we have a 32-bit and 64-bit apache 2.2.27 http server ? for soalris ? You can build it either way. - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org -- Born in Roswell... married an alien... http://emptyhammock.com/ http://edjective.org/
Re: [users@httpd] Delete requests forbidden
On Thu, Apr 24, 2014 at 1:30 PM, Egidio Caprino w...@egidiocaprino.itwrote: Hello. I use Apache server on a Arch Linux machine. I have a big problem with the delete requests. Apache refuse all of them with the 403 response status code. I do not understand why. Can you please help me? Egidio Is your httpd configuration forbidding DELETE? http://stackoverflow.com/questions/11170377/apache-delete-request - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org -- Born in Roswell... married an alien... http://emptyhammock.com/ http://edjective.org/
Re: [users@httpd] mod ssl
On Sun, Apr 13, 2014 at 7:34 PM, John Iliffe john.ili...@iliffe.ca wrote: Well, after a weekend of absolute frustration I figured this one out. Because there is a paucity of documentation and given the importance of OpenSSL to the Apache community, I will give a full explanation as to what happened and why, and I hope that the Apache maintainers will be interested in putting some of this in the docs, even though some parts are really not Apache issues. Here I am assuming that you are not using the O/S supplied OpenSSL version and that you are either updating Apache or don't have OpenSSL linked dynamically. First, compile OpenSSL from source. You need to have AT LEAST the following two parameters in the configuration: --prefix=/path/to/new/OpenSSL share -- without this Apache will not link to OpenSSL add any other parameters required and make, make test, make install Now compile Apache as per the instructions in the INSTALL file and for OpenSSL you need: --enable-ssl --with-ssl=/path/to/new/OpenSSL -- this gets you the correct version of OpenSSL, not the one supplied by the O/S compile and install Apache and edit the configuration file httpd.conf to make sure that the LoadModule statement for SSL is not commented out. Now run httpd -t you will probably get an error saying can't open libssl.so.x.x.x, no such file or directory. The documentation in the Apache install implies that when you use the form with-xxx=(path) that the module will be made available (ie the path to the required libraries will be stored in the DSO) but this isn't the case. The library (found in the OpenSSL installation directory in the /bin/ subdirectory) must be copied to the SYSTEM's library directory. IMO it is best to avoid mixing stuff you built with system directories, especially when part of the installation is manual and easily forgotten. You could edit HTTPDINST/bin/envvars and update LD_LIBRARY_PATH to include /path/to/new/OpenSSL/lib so that httpd could find libssl.so.x.x.x. After that you need to always use apachectl args instead of httpd args so that envvars takes effect. (I don't know why the custom OpenSSL lib directory doesn't end up in rpath. Does anyone know?) In my case (Red Hat EL6) this is /usr/lib64/ but other distros may put it somewhere else. Be careful here; don't overlay any library with the same name. I give this warning because the library for OpenSSL-1.0.1g is named libssl.so.1.0.0 whereas previous releases named the library the same as the release (eg libssl.so.1.0.1e). Now run httpd -t again. You will probably get another error on libcrypto.so and have to copy in the library from the OpenSSL installation directory. Now try httpd -t and everything SHOULD work. Start Apache (apachectl -k start) and HTTPD should come up. Now do: head /path to logfiles/error_log and check that the start message shows that the correct version of OpenSSL started. It is shown on the first line of the new log, just ahead of the command line for the starting httpd. Folks, I know this is somewhat arcane and probably overkill, but I just spent two days that I really didn't have chasing things around and a slight enhancement of the installation instructions would have been very welcome. Regards, and thanks to those who replied to my two previous posts. John - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org -- Born in Roswell... married an alien... http://emptyhammock.com/ http://edjective.org/
Re: [users@httpd] mod ssl
On Sun, Apr 13, 2014 at 8:01 PM, John Iliffe john.ili...@iliffe.ca wrote: On Sunday 13 April 2014 19:44:11 Jeff Trawick wrote: On Sun, Apr 13, 2014 at 7:34 PM, John Iliffe john.ili...@iliffe.ca wrote: Well, after a weekend of absolute frustration I figured this one out. Because there is a paucity of documentation and given the importance of OpenSSL to the Apache community, I will give a full explanation as to what happened and why, and I hope that the Apache maintainers will be interested in putting some of this in the docs, even though some parts are really not Apache issues. Here I am assuming that you are not using the O/S supplied OpenSSL version and that you are either updating Apache or don't have OpenSSL linked dynamically. First, compile OpenSSL from source. You need to have AT LEAST the following two parameters in the configuration: --prefix=/path/to/new/OpenSSL share -- without this Apache will not link to OpenSSL add any other parameters required and make, make test, make install Now compile Apache as per the instructions in the INSTALL file and for OpenSSL you need: --enable-ssl --with-ssl=/path/to/new/OpenSSL -- this gets you the correct version of OpenSSL, not the one supplied by the O/S compile and install Apache and edit the configuration file httpd.conf to make sure that the LoadModule statement for SSL is not commented out. Now run httpd -t you will probably get an error saying can't open libssl.so.x.x.x, no such file or directory. The documentation in the Apache install implies that when you use the form with-xxx=(path) that the module will be made available (ie the path to the required libraries will be stored in the DSO) but this isn't the case. The library (found in the OpenSSL installation directory in the /bin/ subdirectory) must be copied to the SYSTEM's library directory. I completely agree Jeff. If I was a bit more of an Apache specialist I would have done what you suggest as it is obvious once it is pointed out! My immediate problem was to get our e-commerce web site back on the Inet and what I did resolved the problem. Maybe your suggestion would be best added to the docs? I'll think about this some more. Docs are fine, but I don't know why it doesn't just work, as when you install apr to some arbitrary place and it gets picked up by httpd automatically. IMO it is best to avoid mixing stuff you built with system directories, especially when part of the installation is manual and easily forgotten. You could edit HTTPDINST/bin/envvars and update LD_LIBRARY_PATH to include /path/to/new/OpenSSL/lib so that httpd could find libssl.so.x.x.x. After that you need to always use apachectl args instead of httpd args so that envvars takes effect. (I don't know why the custom OpenSSL lib directory doesn't end up in rpath. Does anyone know?) In my case (Red Hat EL6) this is /usr/lib64/ but other distros may put it somewhere else. Be careful here; don't overlay any library with the same name. I give this warning because the library for OpenSSL-1.0.1g is named libssl.so.1.0.0 whereas previous releases named the library the same as the release (eg libssl.so.1.0.1e). Now run httpd -t again. You will probably get another error on libcrypto.so and have to copy in the library from the OpenSSL installation directory. Now try httpd -t and everything SHOULD work. Start Apache (apachectl -k start) and HTTPD should come up. Now do: head /path to logfiles/error_log and check that the start message shows that the correct version of OpenSSL started. It is shown on the first line of the new log, just ahead of the command line for the starting httpd. Folks, I know this is somewhat arcane and probably overkill, but I just spent two days that I really didn't have chasing things around and a slight enhancement of the installation instructions would have been very welcome. Regards, and thanks to those who replied to my two previous posts. John - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org -- Born in Roswell... married an alien... http://emptyhammock.com/ http://edjective.org/
Re: [users@httpd] undefined symbol: apr_crypto_init
On Thu, Apr 10, 2014 at 2:05 PM, David Benfell benf...@parts-unknown.orgwrote: On Thu, Apr 10, 2014 at 01:38:00PM -0600, Eric Covener wrote: On Thu, Apr 10, 2014 at 4:35 AM, David Benfell benf...@parts-unknown.org wrote: apr_crypto_init This phrase alone in a search engine gets you a number of hits saying to upgrade APR. http://stackoverflow.com/questions/22048378/undefined-symbol-apr-crypto-init-during-apache-restart I have done so. It, and apr-util are the latest version. Maybe you built with the up-to-date apr-util (so httpd or some module thinks apr_crypto_init() exists) but an older level apr-util (system-provided?) is being used when you try to start httpd. As a test, try export LD_LIBRARY_PATH=/path/to/new/httpd/lib (or wherever you installed new apr-util) before starting httpd and see if that works. -- David Benfell benf...@parts-unknown.org See https://parts-unknown.org/node/2 if you don't understand the attachment. -- Born in Roswell... married an alien... http://emptyhammock.com/ http://edjective.org/
Re: [users@httpd] undefined symbol: apr_crypto_init
On Thu, Apr 10, 2014 at 3:33 PM, David Benfell benf...@parts-unknown.orgwrote: On Thu, Apr 10, 2014 at 02:14:02PM -0600, Jeff Trawick wrote: On Thu, Apr 10, 2014 at 2:05 PM, David Benfell [1]benf...@parts-unknown.org wrote: On Thu, Apr 10, 2014 at 01:38:00PM -0600, Eric Covener wrote: On Thu, Apr 10, 2014 at 4:35 AM, David Benfell [2]benf...@parts-unknown.org wrote: apr_crypto_init Maybe you built with the up-to-date apr-util (so httpd or some module thinks apr_crypto_init() exists) but an older level apr-util (system-provided?) is being used when you try to start httpd. As a test, try export LD_LIBRARY_PATH=/path/to/new/httpd/lib (or wherever you installed new apr-util) before starting httpd and see if that works. Progress of a sort: There was definitely some cruft lying about from a previous 2.2 build. I deleted it. I set the environment variable LD_LIBRARY_PATH=/usr/lib64/apr-util-1 and apachectl start at least starts the server (I have other problems but I think they're related to php). That apr-util-1 subdirectory is only used when loading apr-util extensions, and I thought apr-util could find those on its own once libaprutil-1 was loaded (but I may be wrong there). LD_LIBRARY_PATH generally is updated to point to the directory where libaprutil-1.so resides (when rpath can't help). But I guess that on your platform /usr/lib64 is in the default library search path, so you shouldn't need LD_LIBRARY_PATH at all. Without the old cruft, is your LD_LIBRARY_PATH setting actually necessary? I unfortunately missed your clear, earlier statement that you are using the provided RPM specs which install apr + apr-util as system libraries. IMO that is not a good idea for most people, in case you want to install arbitrary software from your system package repository and have it use the apr + apr-util it is built with and at the same time have your httpd use the apr + apr-util you selected for that particular purpose. I don't use the RPM builds myself, never install into system directories, and don't really know what the considerations are. Sorry. /etc/init.d/httpd start does not, even when I set the environment variable in the script right before the line that starts the daemon. Same error as before, or something different? Can you copy and paste the exact message? I don't think your current LD_LIBRARY_PATH actually changes anything. I'm thinking I ought to be able to substitute apachectl for the start script with a symbolic link. Would this work? Any reason I shouldn't? Where did you get /etc/init.d/httpd? Is that from an RPM build you did of httpd 2.4? Thanks! -- David Benfell benf...@parts-unknown.org See https://parts-unknown.org/node/2 if you don't understand the attachment. -- Born in Roswell... married an alien... http://emptyhammock.com/ http://edjective.org/
Re: [users@httpd] High CPU Usage in Amazon EC2
On Sat, Apr 5, 2014 at 3:18 PM, Christopher Schultz
ch...@christopherschultz.net wrote:
Igor,
On 4/4/14, 5:39 AM, Igor Cicimov wrote:
On 04/04/2014 1:05 AM, Christopher Schultz
ch...@christopherschultz.net mailto:ch...@christopherschultz.net
wrote:
All,
I'm having a problem in production I've never seem before. We are
running a pair of AWS EC2 m1.micro web servers where only one of them in
really in service at any given time. The httpd instance serves some
static content and forwards a great deal of traffic via stunnel to a
single back-end Tomcat server using mod_jk 1.2.37. We have been running
under this configuration for several years with no problems.
Enable the stunnel logs maybe they will reveal something?
I don't think stunnel has changed much. Besides, the stunnel processes
aren't eating up the CPU: it's the httpd processes that are.
Last weekend, we upgraded our OS to Amazon Linux 2014.03 (32-bit) from
Amazon's previous version (I can't remember which one), including the
package-refresh that comes with it for httpd. The current kernel version
is 3.10.34. The current httpd version is 2.2.26. The package name is
httpd-2.2.26-1.1.amzn1.i686 if anyone is interested. We are using a
prefork MPM with the following (default) settings:
StartServers 8
MinSpareServers5
MaxSpareServers 20
the range of spare servers here is 10% of your max (256), and if the load
changes by more than 10% httpd will have to kill a child or fork a new one
ServerLimit 256
MaxClients 256
MaxRequestsPerChild 4000
4000 is generally considered very low (needless termination/creation of
child processes.
See if you're getting frequent child process creation (server status
report, staring at ps outputs).
If so {
Get rid of it (set MaxSpareServers higher, set MaxRequestsPerChild very
high or disable it by setting it to 0).
Perhaps look at pages 39 and following in
https://blogs.oracle.com/trawick/resource/DeepDive/WebStackDeepDiveApache.pdf?
(Note that there is a StartServers/MinSpareServers blunder in there (should
be MaxSpareServers).)
}
What I can observe is that the CPU load average is rising from the usual
sub-2.0 value to sometimes as high as 70. That's seventy, not
seven-point-oh.
I see no errors in the log, and httpd doesn't seem to be dropping any
requests... just running very very slowly.
What if you increase the LogLevel to debug? Meaybe jkLogLevel too.
I could certainly do that, but the mod_jk binary is the same as before
the upgrade.
It seems to come in waves: the load will go up, and everything will slow
down, and then we'll get a reprieve.
Whats the memory usage at those times? If you have sysstat installed you
can run sar for some stats about disk cpu and memory.
I installed sysstat and am collecting data. Monday morning is when we'll
get killed, and I'll have the data then.
First thing i would do is move from prefork to mpm worker. You
should see significant improvement.
While that may be the case, something else must have changed. We had
been using the prefork MPM beforehand without a problem.
We've upgraded to Linux kernel 3.10.35 at the suggestion of the AWS
support folks, but things still look pretty ugly. I've resurrected an
old snapshot to compare the performance relative to the upgraded
instance. If the 3.10.35 instance falls-over on Monday, I'll switch-over
to the older kernel instance.
can you run oprofile or something similar in that environment?
Thanks,
-chris
--
Born in Roswell... married an alien...
http://emptyhammock.com/
http://edjective.org/
Re: [users@httpd] Apache 2.4.X on Freebsd 10 problem
On Tue, Apr 1, 2014 at 1:20 PM, Varda Zklir v...@yahoo.com wrote: Hello Gentlemen. I've trouble running Apache 2.4.X on Freebsd 10. Two test machines, one with FreebSD 9.2 default setup (most options automatic) other with FreeBSD 10 default setup (most options automatic), same configs, assigned same IP's. On both Apache 2.4.9 built from ports and byte to byte exact config. Starts first machine: uname -a FreeBSD server.localnetwork 9.2-STABLE FreeBSD 9.2-STABLE #0: Fri Dec 27 16:22:44 TMT 2013 admin@server.localnetwork:/usr/obj/usr/src-9/sys/GENERIC amd64 wget 192.168.0.251 --2014-04-01 21:31:44-- http://192.168.0.251/ Connecting to 192.168.0.251:80... connected. HTTP request sent, awaiting response... 200 OK Length: 45 [text/html] Saving to: `index.html' 100%[==] 45 --.-K/s in 0s 2014-04-01 21:31:44 (11.0 MB/s) - `index.html' saved [45/45] Everything went all right. Stops first machibe and start second: uname -a FreeBSD server.localnetwork 10.0-STABLE FreeBSD 10.0-STABLE #0: Sat Mar 15 23:58:49 TMT 2014 admin@server.localnetwork:/usr/obj/usr/src-10/sys/GENERIC amd64 wget 192.168.0.251 --2014-04-01 21:36:34-- http://192.168.0.251/ Connecting to 192.168.0.251:80... connected. HTTP request sent, awaiting response... Hangs forever until brake. With and without accf_data accf_http modules. Anybody can give some points to dig? You need to apply this fix on top of apr 1.5.0: http://svn.apache.org/viewvc/apr/apr/branches/1.5.x/network_io/unix/sockets.c?r1=1551672r2=1551671pathrev=1551672 If you're not using apr 1.5.0, you might be encountering something else. -- Born in Roswell... married an alien... http://emptyhammock.com/ http://edjective.org/
Re: [users@httpd] (Solved) Apache 2.4.X on Freebsd 10 problem
On Tue, Apr 1, 2014 at 2:03 PM, Varda Zklir v...@yahoo.com wrote: Patch suggested by Jeff Trawick helped and it works correctly now. Thank you Jeff !!! You're welcome. I meant to put out a new apr 1.5.1 release back in February to resolve this and a few other issues, but didn't. Thanks for the reminder :) -- Born in Roswell... married an alien... http://emptyhammock.com/ http://edjective.org/
Fwd: [users@httpd] Performance drop in 2.4.7 versus 2.4.6
Including d...@httpd.apache.org... -- Forwarded message -- From: Cedric Roijakkers cedric.roijakk...@qnh.nl Date: Fri, Feb 21, 2014 at 7:44 AM Subject: [users@httpd] Performance drop in 2.4.7 versus 2.4.6 To: users@httpd.apache.org users@httpd.apache.org Hi All, As most of you, we're running Apache in a production set-up for a rather large website. Happily, for a long time might I even add. Since business focus these days is on having a low as possible page load time, I was shocked when we upgraded to version 2.4.7, and our monitoring system started indicating that the time needed to serve pages has easily quadrupled... As soon as we noticed this, we rolled back, and tried to figure out what was going on. Searching the internet and this list did not result in any hits, so I might as well post my question here. Here is the situation: We host a website, with a lot of classic html files, server-side includes and a backend which is running on a Tomcat server which is proxied via mod_proxy_http via Apache. The site is full HTTPS, and anybody coming in via HTTP will be redirected to HTTPS. The server OS is Red Hat Enterprise Linux 5.9, OpenSSL is 1.0.1f. Both versions of Apache (2.4.6 and 2.4.7) are compiled with the same parameters, on the same machine. For the timings, I'm using check_http from Nagios, which prints the time to load the html page in milliseconds. Here are the results when running on 2.4.6: HTTP OK: Status line output matched 200 - 19091 bytes in 0.023 second response time |time=0.022968s;2.00;3.00;0.00 size=19091B;;;0 HTTP OK: Status line output matched 200 - 19091 bytes in 0.022 second response time |time=0.022035s;2.00;3.00;0.00 size=19091B;;;0 HTTP OK: Status line output matched 200 - 19091 bytes in 0.022 second response time |time=0.021548s;2.00;3.00;0.00 size=19091B;;;0 HTTP OK: Status line output matched 200 - 19091 bytes in 0.021 second response time |time=0.021477s;2.00;3.00;0.00 size=19091B;;;0 HTTP OK: Status line output matched 200 - 19091 bytes in 0.021 second response time |time=0.021362s;2.00;3.00;0.00 size=19091B;;;0 HTTP OK: Status line output matched 200 - 19091 bytes in 0.021 second response time |time=0.021429s;2.00;3.00;0.00 size=19091B;;;0 HTTP OK: Status line output matched 200 - 19091 bytes in 0.022 second response time |time=0.022411s;2.00;3.00;0.00 size=19091B;;;0 HTTP OK: Status line output matched 200 - 19091 bytes in 0.021 second response time |time=0.021276s;2.00;3.00;0.00 size=19091B;;;0 HTTP OK: Status line output matched 200 - 19091 bytes in 0.022 second response time |time=0.021756s;2.00;3.00;0.00 size=19091B;;;0 And here the results with 2.4.7: HTTP OK: Status line output matched 200 - 19091 bytes in 0.094 second response time |time=0.094451s;2.00;3.00;0.00 size=19091B;;;0 HTTP OK: Status line output matched 200 - 19091 bytes in 0.085 second response time |time=0.084865s;2.00;3.00;0.00 size=19091B;;;0 HTTP OK: Status line output matched 200 - 19091 bytes in 0.085 second response time |time=0.085055s;2.00;3.00;0.00 size=19091B;;;0 HTTP OK: Status line output matched 200 - 19091 bytes in 0.086 second response time |time=0.086268s;2.00;3.00;0.00 size=19091B;;;0 HTTP OK: Status line output matched 200 - 19091 bytes in 0.086 second response time |time=0.085889s;2.00;3.00;0.00 size=19091B;;;0 HTTP OK: Status line output matched 200 - 19091 bytes in 0.096 second response time |time=0.095538s;2.00;3.00;0.00 size=19091B;;;0 HTTP OK: Status line output matched 200 - 19091 bytes in 0.086 second response time |time=0.086159s;2.00;3.00;0.00 size=19091B;;;0 HTTP OK: Status line output matched 200 - 19091 bytes in 0.086 second response time |time=0.085750s;2.00;3.00;0.00 size=19091B;;;0 HTTP OK: Status line output matched 200 - 19091 bytes in 0.086 second response time |time=0.085835s;2.00;3.00;0.00 size=19091B;;;0 Page load went from 0.02 seconds to 0.09. DocumentRoot, configuration, used OpenSSL library are 100% identical in both cases. All I changed is the link to the installation of Apache. Is anybody else seeing the same behavior? Looking at the documentation, 2.4.7 has gained some performance improvements, but I'm seeing something different on my end. Greetings Cedric -- Born in Roswell... married an alien... http://emptyhammock.com/
