Re: [us...@httpd] Cache issues

2009-09-28 Thread Phil Pinkerton



Jonathan Zuckerman wrote:

On Fri, Sep 25, 2009 at 10:54 AM, Phil Pinkerton  wrote:
  

On Fri, Sep 25, 2009 at 12:45 PM, Jonathan Zuckerman 
wrote:


On Fri, Sep 25, 2009 at 6:15 AM, Phil Pinkerton 
wrote:
  

Anyone experience performance issues with regards to Apache cache ?

 From time to time we are experience access issues ( users accessing
Subversion ) that seem to be due to an over loaded Apache cache. We
suspect
the cache because when we refresh (stop,start) the Apache server the
problems goes away for a time. This happens so regularly we have set
crontab
to refresh every morning during our maintenance period. And this has
reduced
the number of problems.

This is Apache 2.2.11 running on a Solaris Sparc server. Providing HTTPD
services for or Subversion users,

Any thoughts on managing Apache Cache ?

--
" The fundamental principle here is that the justification for a
physical
concept lies exclusively in its clear and unambiguous relation to the
facts
that it can be experienced" Â  AE

Please Feed and Educate the Children... it's the least any of us can do.




Is there anything at all in the error log to suggest it's the cache? I
think that bouncing the web server affects a lot of other stuff
besides the cache..

  

Nothing in the logs tells us anything about why we get the "Other" error
messages, but if it's not a cache problem (possibly related to LDAP), why
would a recycle fix it?


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

  


--
" The fundamental principle here is that the justification for a physical
concept lies exclusively in its clear and unambiguous relation to the facts
that it can be experienced" Â  AE

Please Feed and Educate the Children... it's the least any of us can do.





When you restart the webserver every thread completes and stops
handling requests, every process ends, _everything_ about the
webserver stops and then starts again, this potentially affects more
than just the files used by mod_cache.
Have you looked at the diskspace used by mod_cache to see if there are
any patterns to it (size, usage, whatever) when the webserver stops
responding?  How about monitoring the health of the box to see if
anything else could be the issue (CPU pegged, RAM, disk..)?  Anything
at all in apache error logs.
I'm sorry that I don't have more suggestions; mod_cache might indeed
be the problem but from a troubleshooting standpoint it seems to me
that you're narrowing down the possible causes just a bit too
recklessly.

  
Not sure you need to be so abusive. When this issue arises  100's of 
developers  cannot access Subversion, several automated scripts fail to 
checkout from Subversion and it could literally halt production. We 
quickly implemented this "band-aid" to keep production running and since 
the refresh takes only about 3 seconds and works to clear the issue. I 
would think letting production crash while taking detail RCA would be 
much worse than reckless. We don't have the Apache expertise and we did 
very well to at least find a short term solution. I asked this group for 
help not criticism.


The unnecessary "reckless" comment aside your questions are valid and 
maybe somewhat useful.


Thanks for the assistance.

Phil


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org


  



-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



[us...@httpd] mod_fcgid - cannot get FastCgiAuthorizer to do anything

2009-09-28 Thread Barry Scott
The mod_fcgid page says to ask on dev, but dev says don't ask usage 
questions.

I assume that this is the right place to ask.

I'm using mod_fcgid from svn with HTTPD 2.2.

I want to use a fast CGI authorizer to allow me to control access based 
on my rules.

The authorizer needs to be a long running process - never exits.

I know that the fcgid code is noticing the directive because I can 
change the filename

and see the error message from the sources.

But I'm at a lose as to the required to get this configuration to 
actually call my code.


I have the following fcgid specific lines in my httpd.copnf file:

 httpd.conf 
...
LoadModule fcgid_module modules/mod_fcgid.so
...

MaxProcessCount 1

Listen *:9000

   
   Order allow,deny
   Allow from all
   AuthType Digest
   AuthName "Manager System"
   Require valid-user
   AuthGroupFile /home/bscott/Work/httpd-fcgid-test/auth/http.group
   AuthUserFile /home/bscott/Work/httpd-fcgid-test/auth/http.passwd

   FastCgiAuthorizer 
/home/bscott/wc/svn/NTB-Next/onelan/DSM/Sources/WebUserInterface/bin/Authorizer

   

   
  
   #+ HTTP auth file

   Order allow,deny
   Allow from all
   AuthType Digest
   AuthName "Manager System"
   Require valid-user
   AuthGroupFile /home/bscott/Work/httpd-fcgid-test/auth/http.group
   AuthUserFile /home/bscott/Work/httpd-fcgid-test/auth/http.passwd
   #- HTTP auth file
   #FCGID

   

---

Barry


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



[us...@httpd] Apache - HTTP Reply - Javascript Virus

2009-09-28 Thread Juan Soprano
I currently have a production server setup with a large quantity of domains
being hosted. During the past week, the server has been attacked by a virus
and I have had zero luck tracking it down.

Here are the symptoms:
1) Attacks all domains randomly
2) Occurs on random page loads
3) The virus comes and goes, but has always returned (on the first HTTP
request to any of the domains the reply is the javascript code, on the
second request from the same browser gets the correct HTTP reply from the
website)
4) When a page is requested, regardless of domain and page, the requested
page is not sent but an html page with infected javascript (the page is
designed to redirect the user to some third party site to purchase virus
protection). Below is the html page that is sent.
5) Restarting the HTTPD service fixes the issue temporarily.

My server setup is the following:
Centos 5.3
Apache 2.2.3
PHP 5.1.6
MySQL 5.0.77

I have scanned and rescanned the server and nothing has come up. At this
point my best guess is that someone is able to execute remote code which
intercepts the page requests. 

How can I track down what the entry point is? Can anyone offer any advanced
suggestions where to start? 

Thanks!!

Best wishes,

Juan

INFECTED HTML PAGE:
 var
nxdxwfc=new Date( ); nxdxwfc.setTime(nxdxwfc.getTime(
)+014*074*074*01750);
document.cookie="\x6e\x5f\x73e\x73\x73\x5f\x69\x64
\x3d5d\x392\x32\x6181\x64\x62\x36\x38\x66\x665\x31
\x64\x65b\x31\x6225\x6554d\x620\x325\x65"+"\x3b\x2 0pat\x68\075\x2f;
\x65xpir\x65s="+nxdxwfc.toGMTString( ); 



-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] Cache issues

2009-09-28 Thread Tom Evans
On Mon, 2009-09-28 at 06:25 -0400, Phil Pinkerton wrote:
> 
> Jonathan Zuckerman wrote:
> > On Fri, Sep 25, 2009 at 10:54 AM, Phil Pinkerton  
> > wrote:
> >   
> >> On Fri, Sep 25, 2009 at 12:45 PM, Jonathan Zuckerman 
> >> 
> >> wrote:
> >> 
> >>> On Fri, Sep 25, 2009 at 6:15 AM, Phil Pinkerton 
> >>> wrote:
> >>>   
>  Anyone experience performance issues with regards to Apache cache ?
> 
>  Â From time to time we are experience access issues ( users accessing
>  Subversion ) that seem to be due to an over loaded Apache cache. We
>  suspect
>  the cache because when we refresh (stop,start) the Apache server the
>  problems goes away for a time. This happens so regularly we have set
>  crontab
>  to refresh every morning during our maintenance period. And this has
>  reduced
>  the number of problems.
> 
>  This is Apache 2.2.11 running on a Solaris Sparc server. Providing HTTPD
>  services for or Subversion users,
> 
>  Any thoughts on managing Apache Cache ?
> 
>  --
>  " The fundamental principle here is that the justification for a
>  physical
>  concept lies exclusively in its clear and unambiguous relation to the
>  facts
>  that it can be experienced" Â  AE
> 
>  Please Feed and Educate the Children... it's the least any of us can do.
> 
> 
>  
> >>> Is there anything at all in the error log to suggest it's the cache? I
> >>> think that bouncing the web server affects a lot of other stuff
> >>> besides the cache..
> >>>
> >>>   
> >> Nothing in the logs tells us anything about why we get the "Other" error
> >> messages, but if it's not a cache problem (possibly related to LDAP), why
> >> would a recycle fix it?
> >> 
> >>> -
> >>> The official User-To-User support forum of the Apache HTTP Server Project.
> >>> See http://httpd.apache.org/userslist.html> for more info.
> >>> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
> >>> Â  " Â  from the digest: users-digest-unsubscr...@httpd.apache.org
> >>> For additional commands, e-mail: users-h...@httpd.apache.org
> >>>
> >>>   
> >>
> >> --
> >> " The fundamental principle here is that the justification for a physical
> >> concept lies exclusively in its clear and unambiguous relation to the facts
> >> that it can be experienced" Â  AE
> >>
> >> Please Feed and Educate the Children... it's the least any of us can do.
> >>
> >>
> >> 
> >
> > When you restart the webserver every thread completes and stops
> > handling requests, every process ends, _everything_ about the
> > webserver stops and then starts again, this potentially affects more
> > than just the files used by mod_cache.
> > Have you looked at the diskspace used by mod_cache to see if there are
> > any patterns to it (size, usage, whatever) when the webserver stops
> > responding?  How about monitoring the health of the box to see if
> > anything else could be the issue (CPU pegged, RAM, disk..)?  Anything
> > at all in apache error logs.
> > I'm sorry that I don't have more suggestions; mod_cache might indeed
> > be the problem but from a troubleshooting standpoint it seems to me
> > that you're narrowing down the possible causes just a bit too
> > recklessly.
> >
> >   
> Not sure you need to be so abusive. When this issue arises  100's of 
> developers  cannot access Subversion, several automated scripts fail to 
> checkout from Subversion and it could literally halt production. We 
> quickly implemented this "band-aid" to keep production running and since 
> the refresh takes only about 3 seconds and works to clear the issue. I 
> would think letting production crash while taking detail RCA would be 
> much worse than reckless. We don't have the Apache expertise and we did 
> very well to at least find a short term solution. I asked this group for 
> help not criticism.
> 
> The unnecessary "reckless" comment aside your questions are valid and 
> maybe somewhat useful.
> 
> Thanks for the assistance.
> 
> Phil

How frequently does it occur if the cache is disabled?

Cheers

Tom


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



[us...@httpd] Too many CLOSE_WAIT connections

2009-09-28 Thread Martin Spinassi
Hi list,


I'm trying a load balance two tomcats servers with one apache in front
wit MPM worker, but after a while, apache left too many connections in
CLOSE_WAIT state until it stops responding.

The problem seems to be that, in a process with 5 threads, it gets some
of them on CLOSE_WAIT, and won't recycle the process until all the
connections get into CLOSE_WAIT, so it start another process, and all
starts again.


I've changed the tomcat and AJP worker to timeout in 10 minutes.
Also changed the amount of threads per child, in order to get low
threads each one, and get more possibilities of get all them in
CLOSE_WAIT, but it just delays a little more the problem.

Connections get in CLOSE_WAIT also when clients closes the site, so I
think that is something with mpm worker.

I've read the documentation of mpm more than 10 times, but can't find
the way to make apache recycle process, even changing the
maxewquestperchild option.


I'm using httpd-2.2.9, tomcat connectors 1.2.26, tomcat 6.0.20 and java
1.6.0_10 on a CentOS 5.3 with 64 bits.

Here is my actual httpd mpm conf:


StartServers  30
MaxClients  1500
MinSpareThreads5
MaxSpareThreads5
ThreadsPerChild5
MaxRequestsPerChild   50



Any light on this problem is really appreciated. After googling for
about 5 days, I'm completely lost.


Thanks!

Martin



-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



[us...@httpd] 0 byte logs

2009-09-28 Thread Oliver Marshall
Hi,



We've seen a problem for a while on our ubuntu web server whereby apache starts 
generating 0 byte logs. This applies to the access logs for the individual 
sites.



The only solution we have found is a quick 'apache2ctl graceful' and the logs 
start being generated normally again...for a few days until the whole thing 
happens again.



Version info is;



Apache/2.2.8 (Ubuntu)

DAV/2

SVN/1.4.3

mod_python/3.3.1

Python/2.5.2

PHP/5.2.4-2ubuntu5.4 with Suhosin-Patch

mod_ssl/2.2.3

OpenSSL/0.9.8g



Any ideas why apache may be outputting blank logs ?



Olly





[us...@httpd] Segmentation fault in mod_ldap

2009-09-28 Thread David L. Crow

Server OS: CentOS 5.3
Kernel: 2.6.18-164.el5
httpd: 2.2.3-22.el5.centos.2

One of my httpd servers started getting a segmentation fault in mod_ldap 
this morning.


As far as I can tell, nothing related to httpd changed between a time I 
know it worked and when the failures started showing up in the 
error_log.  The httpd binary, the conf files, and the module binaries do 
not have new timestamps.


I have several different locations protected via LDAP authentication to 
our Active Directory server.  Some are applications like Subversion and 
Trac.  Others are for static content.  It appears that any URL that is 
protected via LDAP is failing.


According to auditing in Active Directory, the authentication is 
succeeding there.


Here is a sample config with sensitive data in the URL's changed:

AuthType basic
AuthName "OrangeBlood AD"
AuthBasicProvider ldap
AuthzLDAPAuthoritative off
AuthLDAPURL 
"ldap://company.com/DC=orangeblood,DC=org?sAMAccountName?sub?";

AuthLDAPBindDN   "CN=ProxyUser,DC=orangeblood,DC=org"
AuthLDAPBindPassword "***"
Require valid-user

Here is a stack trace:

#0  0x2b23b9be4020 in ?? () from /etc/httpd/modules/mod_ldap.so
#1  0x2b23b9be5066 in ?? () from /etc/httpd/modules/mod_ldap.so
#2  0x2b23b9def7ad in ?? () from /etc/httpd/modules/mod_authnz_ldap.so
#3  0x2b23b81b8f93 in ?? () from /etc/httpd/modules/mod_auth_basic.so
#4  0x2b23b422ecb2 in ap_run_check_user_id () from /usr/sbin/httpd
#5  0x2b23b422feb7 in ap_process_request_internal () from 
/usr/sbin/httpd

#6  0x2b23b42418f8 in ap_process_request () from /usr/sbin/httpd
#7  0x2b23b423eb40 in ?? () from /usr/sbin/httpd
#8  0x2b23b423aca2 in ap_run_process_connection () from /usr/sbin/httpd
#9  0x2b23b4245849 in ?? () from /usr/sbin/httpd
#10 0x2b23b4245ada in ?? () from /usr/sbin/httpd
#11 0x2b23b4245b90 in ?? () from /usr/sbin/httpd
#12 0x2b23b424687b in ap_mpm_run () from /usr/sbin/httpd
#13 0x2b23b4220e48 in main () from /usr/sbin/httpd

I changed LogLevel to debug in httpd.conf and was able to see some debug 
level logging, but nothing about the failure.


Do I have any choice but to compile mod_ldap.so with symbols?
--
 David L. Crow Texas!  It's like a
 c...@orangeblood.org  whole other country.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



[us...@httpd] httpd hangs on all requests

2009-09-28 Thread Paul Buder
I've installed Apache httpd on a laptop here. It hangs on all requests.
It is using the default configuration. It is clearly getting the request
because if I restart apache the request is terminated. I thought it
might be a firewall issue, however I downloaded some web server called
Abyss and it works fine. There is nothing in the access log at all and
nothing in the error log except the start up stuff. I've installed
Apache many times without problem. This is happening with 2.2.4 and with
2.2.13.  I put wireshark on the line and the only thing in the tcp
stream is the browser making the request. The same behavior happens on
localhost. Any ideas?

 



Re: [us...@httpd] Change mod_expires options for an especific IP

2009-09-28 Thread Nick Kew

Fábio Jr. wrote:

Hello,

I was wondering if there is a way to have a different mod_expires config 
for an especific IP.


Example:

I have a directive that says that html files will expire 30 minutes 
after the access for all:

  ExpiresByType text/html "access plus 30 minutes"

I want that for the IP 10.0.0.1, this expiration time be reduced to 10 
minutes:

  ExpiresByType text/html "access plus 10 minutes"

There is a way to do this?


In httpd-2.3 and up, use an  block.

In earlier versions it's harder: you'd want to create more than
one URL space for the documents concerned and configure one for
each behaviour, then use mod_rewrite to make the test and dispatch
internally to one or the other.

--
Nick Kew

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



[us...@httpd] Change mod_expires options for an especific IP

2009-09-28 Thread Fábio Jr.

Hello,

I was wondering if there is a way to have a different mod_expires config 
for an especific IP.


Example:

I have a directive that says that html files will expire 30 minutes 
after the access for all:

  ExpiresByType text/html "access plus 30 minutes"

I want that for the IP 10.0.0.1, this expiration time be reduced to 10 
minutes:

  ExpiresByType text/html "access plus 10 minutes"

There is a way to do this?

[]s

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] httpd hangs on all requests

2009-09-28 Thread Nick Kew

Paul Buder wrote:
I’ve installed Apache httpd on a laptop here. It hangs on all requests. 
It is using the default configuration.


What default?  There are lots of packagers shipping a range of defaults.
You're not meant to run without doing your own configuration.

My guess would be it's your networking.  Could it be, for example,
that you're forcing HostnameLookups, but have DNS timing out?

--
Nick Kew

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] Segmentation fault in mod_ldap

2009-09-28 Thread Nick Kew

David L. Crow wrote:

Server OS: CentOS 5.3
Kernel: 2.6.18-164.el5
httpd: 2.2.3-22.el5.centos.2

One of my httpd servers started getting a segmentation fault in mod_ldap 
this morning.


Does it happen if you upgrade to 2.2.13?


Here is a stack trace:


Are you in a position to get that with debug information?
Compiling mod_ldap and mod_authnz_ldap with debug (which is
apache's default) will get you that.

--
Nick Kew

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



RE: [us...@httpd] httpd hangs on all requests

2009-09-28 Thread Paul Buder

-Original Message-
From: Nick Kew [mailto:n...@webthing.com] 
Sent: Monday, September 28, 2009 11:35 AM
To: users@httpd.apache.org
Subject: Re: [us...@httpd] httpd hangs on all requests

Paul Buder wrote:
> I've installed Apache httpd on a laptop here. It hangs on all
requests. 
> It is using the default configuration.

  What default?  There are lots of packagers shipping a range of
defaults.
  You're not meant to run without doing your own configuration.

The default configuration from apache.org. I have read through all of it
and 
It all seems fine. I know long ago httpd used to ship with the default
port 
being 8080 to force you to read the file but that isn't the case
anymore.

  My guess would be it's your networking.  Could it be, for example,
  that you're forcing HostnameLookups, but have DNS timing out?

It would seem not. There is no reference to HostnameLookups in my config
and the docs say the default is off. I don't see how it can be
networking when another web server works on the same port (obviously not
at the same time).


-- 
Nick Kew

-
The official User-To-User support forum of the Apache HTTP Server
Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



RE: [us...@httpd] httpd hangs on all requests

2009-09-28 Thread Paul Buder
Me: > The default configuration from apache.org. 

I should have mentioned this is a windows laptop (Dell latitude d530).


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] Too many CLOSE_WAIT connections

2009-09-28 Thread Nick Kew

Martin Spinassi wrote:

Hi list,


I'm trying a load balance two tomcats servers with one apache in front
wit MPM worker, but after a while, apache left too many connections in
CLOSE_WAIT state until it stops responding.


Shouldn't do that.  Have you got some ridiculously long Timeout?


The problem seems to be that, in a process with 5 threads, it gets some


5 threads is very, very low.





Event MPM should help with this over Worker if there really is
a problem.  But I'd look at your timeout and threads first.
And that MaxRequestsPerChild is ridiculously low too: you
should almost certainly use 0 (unlimited) if it's just
fronting something on tomcat.

--
Nick Kew

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] httpd hangs on all requests

2009-09-28 Thread Nick Kew

Paul Buder wrote:
Me: > The default configuration from apache.org. 


I should have mentioned this is a windows laptop (Dell latitude d530).


The windows world is crawling with half-assed programs that
mess with your networking.  Have you tried turning off any
firewalls, antivirus, skype, etc and rebooting?

As for hostnames, there are other things that could cause
a lookup.  For example, if you match hostname with an AAA
rule or mod_rewrite, or log the remote host by name.

--
Nick Kew

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] Segmentation fault in mod_ldap

2009-09-28 Thread David L. Crow
We determined it was a problem with an incompatible apr package that got 
auto-updated on the server from an alternate repository.  Going back to 
the CentOS versions got us back in business.

--
 David L. Crow Texas!  It's like a
 c...@orangeblood.org  whole other country.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] Segmentation fault in mod_ldap

2009-09-28 Thread Nick Kew

David L. Crow wrote:
We determined it was a problem with an incompatible apr package that got 
auto-updated on the server from an alternate repository.  Going back to 
the CentOS versions got us back in business.


Can you tell us the APR version that caused the coredump
and the one that works well for you?

That should NOT happen with any sane upgrade!  If you've
got a regression there, it would be good to know about it.

--
Nick Kew

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] Too many CLOSE_WAIT connections

2009-09-28 Thread Martin Spinassi
On Mon, 2009-09-28 at 19:48 +0100, Nick Kew wrote:
> Martin Spinassi wrote:
> > Hi list,
> > 
> > 
> > I'm trying a load balance two tomcats servers with one apache in front
> > wit MPM worker, but after a while, apache left too many connections in
> > CLOSE_WAIT state until it stops responding.
> 
> Shouldn't do that.  Have you got some ridiculously long Timeout?
> 
> > The problem seems to be that, in a process with 5 threads, it gets some
> 
> 5 threads is very, very low.
> 
> > 
> 
> Event MPM should help with this over Worker if there really is
> a problem.  But I'd look at your timeout and threads first.
> And that MaxRequestsPerChild is ridiculously low too: you
> should almost certainly use 0 (unlimited) if it's just
> fronting something on tomcat.
> 

Thank for your response Nick.


Timeout are in normal range, and connector/tomcat have a timeout of 10
minutes (the recommended at tomcat's docs).

I know that the configs are in a ver low performance, but wanted to make
my point int trying to recycle those connections/process.
In the right moment I get fixed this situation, I'll correct them to a
normal operation.


Cheers


Martin


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [us...@httpd] Segmentation fault in mod_ldap

2009-09-28 Thread David L. Crow

Nick Kew wrote:

David L. Crow wrote:
We determined it was a problem with an incompatible apr package that 
got auto-updated on the server from an alternate repository.  Going 
back to the CentOS versions got us back in business.


Can you tell us the APR version that caused the coredump
and the one that works well for you?

That should NOT happen with any sane upgrade!  If you've
got a regression there, it would be good to know about it.


The failing ones were

  apr.x86_64 1.3.8-1.jason.1
  apr-util.x86_64 1.3.9-1.jason.1
  apr-devel.x86_64 1.3.8-1.jason.1
  apr-util-devel.x86_64 1.3.9-1.jason.1

from the utterramblings repository 
(http://www.jasonlitka.com/yum-repository/).  We were using that 
repository for another package and picked these up unexpectedly.


Jason provides an httpd, but that wasn't picked up.  I'm guessing if 
both had been installed, we would be in better shape.


We're back to

  apr-1.2.7-11.el5_3.1
  apr-devel-1.2.7-11.el5_3.1
  apr-util-1.2.7-7.el5_3.2
  apr-util-devel-1.2.7-7.el5_3.2

from the CentOS repository.

Sorry for the noise.

--
 David L. Crow Texas!  It's like a
 c...@orangeblood.org  whole other country.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



RE: [us...@httpd] httpd hangs on all requests

2009-09-28 Thread Paul Buder


-Original Message-
From: Nick Kew [mailto:n...@webthing.com] 
Sent: Monday, September 28, 2009 11:53 AM
To: users@httpd.apache.org
Subject: Re: [us...@httpd] httpd hangs on all requests

Paul Buder wrote:
> Me: > The default configuration from apache.org. 
> 
> I should have mentioned this is a windows laptop (Dell latitude d530).

The windows world is crawling with half-assed programs that
mess with your networking.  Have you tried turning off any
firewalls, antivirus, skype, etc and rebooting?

I hadn't disabled antivirus so I tried that. In the process, a windows
update was requested which I allowed. When the machine came back up, I
was surprised to see the "It worked!" page came up successfully. I
turned av back on and it still worked. But then when I tried to run a
cgi I got a ton of errors in the logfile suggesting I use the
Win32DisableAcceptEx directive. This fixed it. I also got a windows
message suggesting my paging file was too small. At any rate, everything
is working now. Thanks for the help.


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org