Can you run - on the tomcat server
if linux
netstat -tln

if anything else !
netstat -an | grep tcp | grep LISTEN

then we can see if you are actually listening on anything other than localhost :)

david




                                                                                       
                                                                                
                      "Peter Anning"                                                   
                                                                                
                      <[EMAIL PROTECTED]        To:       "'Tomcat Developers List'" 
<[EMAIL PROTECTED]>                                                    
                      g.com>                   cc:                                     
                                                                                
                                               Subject:  RE: mod_jk will only connect 
to tomcat on the localhost                                                       
                      23/12/2003 14:05                                                 
                                                                                
                      Please respond to                                                
                                                                                
                      "Tomcat                                                          
                                                                                
                      Developers List"                                                 
                                                                                
                                                                                       
                                                                                
                                                                                       
                                                                                




I have investigated this a bit already and am pretty sure there is no
firewall running on either machine:

iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

P

On Tue, 23 Dec 2003 07:25:45 -0700, George Sexton wrote
> Looks to me like you have a firewall running. What does iptables -L
> show?
>
> -----Original Message-----
> From: Peter Anning [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, December 23, 2003 6:29 AM
> To: [EMAIL PROTECTED]
> Subject: mod_jk will only connect to tomcat on the localhost
>
> Hi,
>
> I have configured Apache 1.3 with mod_jk on SuSE Linux SLES8 on a
> zSeries.
>
> mod_jk will only connect to tomcat on the localhost.
>
> <detail>
> One Linux instance runs the Web Server and one runs Tomcat 4.1.27
> In order to test the config I installed tomcat on the web server machine
> and
> mapped the application /examples/ to forward to the local tomcat.
> this works fine. However when changing the config to point to a
> remote machine (see
>
> config below) I always get an error in the mod_jk error log
> (ajp_connect_to_endpoint, failed errno = 111.) The full log file is
> below I
> have used
> tcpdump -i any 'dst port 8009' (see output below) and this always
> indicates
> that mod_jk is trying to connect to the localhost whatever I put in
> the workers.properties file.
>
> To test network connectivity I have used 'telnet 192.168.13.10 8009'
> and I can connect to tomcat and see the connection occur in the
> remote tomcat log files. I have also included a tcpdump of this
> below.
>
> Has anyone seen anything similar.
> Best Rgds
> Peter
>
> <config>
> mod_jk configured (workers.properties) as follows:
>
> worker.list=worker1
> worker.worker1.type=ajp13
> worker.worker1.host=192.168.13.10
> worker.worker1.port=8009
> worker.worker1.lbfactor=50
> worker.worker1.cachesize=10
> worker.worker1.cache_timeout=600
> worker.worker1.socket_keepalive=1
> worker.worker1.socket_timeout=300
> worker.worker1.local_worker=0
> ########################################################################
> ####
>
> apache mount points are configured in httpd.conf
>
> JkWorkersFile /etc/httpd/conf/workers.properties
> JkLogFile /var/log/mod_jk.log
>
> JkLogLevel debug
>
> JkMount /examples/* worker1
> JkMount /examples/*.jsp worker1
> ###########################################################
>
> tcpdump while accessing the /examples/
> www02:/etc # tcpdump -n -i any 'dst port 8009'
> 16:19:21.496621 127.0.0.1.33194 > 127.0.0.1.8009: S
> 3501290459:3501290459(0)
> win 32767 <mss 16396,sa
> ckOK,timestamp 9268978 0,nop,wscale 0> (DF)
> 16:19:21.497287 127.0.0.1.33195 > 127.0.0.1.8009: S
> 3497571144:3497571144(0)
> win 32767 <mss 16396,sa
> ckOK,timestamp 9268978 0,nop,wscale 0> (DF)
> 16:19:21.497733 127.0.0.1.33196 > 127.0.0.1.8009: S
> 3498859603:3498859603(0)
> win 32767 <mss 16396,sa
> ckOK,timestamp 9268978 0,nop,wscale 0> (DF)
>
> telnet 192.168.13.10 8009
>
> www02:/etc # tcpdump -n -i any 'dst port 8009'
> tcpdump: WARNING: Promiscuous mode not supported on the "any" device
> tcpdump: listening on any
> 16:19:07.631821 192.168.12.11.33193 > 192.168.13.10.8009: S
> 3495439382:3495439382(0) win 5840 <mss 1
> 460,sackOK,timestamp 9267591 0,nop,wscale 0> (DF) [tos 0x10]
> 16:19:07.635099 192.168.12.11.33193 > 192.168.13.10.8009: . ack
> 3495439509
> win 5840 <nop,nop,timesta
> mp 9267592 9396807> (DF) [tos 0x10]
> ########################################################################
> #####
> mod_jk log file
>
> [Mon Dec 22 16:19:21 2003]  [jk_worker.c (162)]: wc_create_worker, about
> to
> create instance worker1 of ajp13
> [Mon Dec 22 16:19:21 2003]  [jk_ajp13_worker.c (108)]: Into
> ajp13_worker_factory
>
> [Mon Dec 22 16:19:21 2003]  [jk_worker.c (171)]: wc_create_worker, about
> to
> validate and init worker1
> [Mon Dec 22 16:19:21 2003]  [jk_ajp_common.c (1178)]: Into
> jk_worker_t::validate
> [Mon Dec 22 16:19:21 2003]  [jk_ajp_common.c (1198)]: In
> jk_worker_t::validate for worker worker1 co
> ntact is 192.168.13.10:8009
> [Mon Dec 22 16:19:21 2003]  [jk_ajp_common.c (1226)]: Into
> jk_worker_t::init
>
> [Mon Dec 22 16:19:21 2003]  [jk_worker.c (187)]: wc_create_worker, done
> [Mon Dec 22 16:19:21 2003]  [jk_worker.c (238)]: build_worker_map,
> removing
> old worker1 worker
>
> [Mon Dec 22 16:19:21 2003]  [jk_worker.c (250)]: build_worker_map, done
> [Mon Dec 22 16:19:21 2003]  [jk_worker.c (111)]: wc_open, done 1
> [Mon Dec 22 16:20:18 2003]  [jk_uri_worker_map.c (460)]: Into
> jk_uri_worker_map_t::map_uri_to_worker
>
> [Mon Dec 22 16:20:18 2003]  [jk_uri_worker_map.c (477)]: Attempting
> to map URI '/examples/'
> [Mon Dec 22 16:20:18 2003]  [jk_uri_worker_map.c (502)]:
> jk_uri_worker_map_t::map_uri_to_worker, Fou nd a context match
> worker1 -> /examples/
> [Mon Dec 22 16:20:18 2003]  [jk_worker.c (132)]: Into
> wc_get_worker_for_name worker1
> [Mon Dec 22 16:20:18 2003]  [jk_worker.c (136)]:
> wc_get_worker_for_name,
>
> done  found a worker
> [Mon Dec 22 16:20:18 2003]  [jk_ajp_common.c (1355)]: Into
> jk_worker_t::get_endpoint
> [Mon Dec 22 16:20:18 2003]  [jk_ajp_common.c (1079)]: Into
> jk_endpoint_t::service
> [Mon Dec 22 16:20:18 2003]  [jk_ajp_common.c (280)]: Into
> ajp_marshal_into_msgb
> [Mon Dec 22 16:20:18 2003]  [jk_ajp_common.c (413)]:
> ajp_marshal_into_msgb -
> Done
> [Mon Dec 22 16:20:18 2003]  [jk_connect.c (116)]: Into jk_open_socket
>
> [Mon Dec 22 16:20:18 2003]  [jk_connect.c (123)]: jk_open_socket,
>  try to
>
> connect socket = 7
>
> [Mon Dec 22 16:20:18 2003]  [jk_connect.c (132)]: jk_open_socket,
>  after connect ret = -1
> [Mon Dec 22 16:20:18 2003]  [jk_connect.c (151)]: jk_open_socket,
>  connect() failed errno = 111
> [Mon Dec 22 16:20:18 2003]  [jk_ajp_common.c (599)]: In
> jk_endpoint_t::ajp_connect_to_endpoint, fail ed errno = 111
> [Mon Dec 22 16:20:18 2003]  [jk_ajp_common.c (844)]: Error
> connecting to the Tomcat process.
> [Mon Dec 22 16:20:18 2003]  [jk_ajp_common.c (1153)]: In
> jk_endpoint_t::service, ajp_send_request fa iled in send loop 0
> [Mon Dec 22 16:20:18 2003]  [jk_connect.c (116)]: Into jk_open_socket
> [Mon Dec 22 16:20:18 2003]  [jk_connect.c (123)]: jk_open_socket,
>  try to
>
> connect socket = 7
>
> [Mon Dec 22 16:20:18 2003]  [jk_connect.c (132)]: jk_open_socket,
>  after connect ret = -1
> [Mon Dec 22 16:20:18 2003]  [jk_connect.c (151)]: jk_open_socket,
>  connect() failed errno = 111
> [Mon Dec 22 16:20:18 2003]  [jk_ajp_common.c (599)]: In
> jk_endpoint_t::ajp_connect_to_endpoint, fail ed errno = 111
> [Mon Dec 22 16:20:18 2003]  [jk_ajp_common.c (844)]: Error
> connecting to the Tomcat process.
> [Mon Dec 22 16:20:18 2003]  [jk_ajp_common.c (1153)]: In
> jk_endpoint_t::service, ajp_send_request fa iled in send loop 1
> [Mon Dec 22 16:20:18 2003]  [jk_connect.c (116)]: Into jk_open_socket
> [Mon Dec 22 16:20:18 2003]  [jk_connect.c (123)]: jk_open_socket,
>  try to
>
> connect socket = 7
>
> [Mon Dec 22 16:20:18 2003]  [jk_connect.c (132)]: jk_open_socket,
>  after connect ret = -1
> [Mon Dec 22 16:20:18 2003]  [jk_connect.c (151)]: jk_open_socket,
>  connect() failed errno = 111
> [Mon Dec 22 16:20:18 2003]  [jk_ajp_common.c (599)]: In
> jk_endpoint_t::ajp_connect_to_endpoint, fail ed errno = 111
> [Mon Dec 22 16:20:18 2003]  [jk_ajp_common.c (844)]: Error
> connecting to the Tomcat process.
> [Mon Dec 22 16:20:18 2003]  [jk_ajp_common.c (1153)]: In
> jk_endpoint_t::service, ajp_send_request fa iled in send loop 2
> [Mon Dec 22 16:20:18 2003]  [jk_ajp_common.c (1339)]: Into
> jk_endpoint_t::done, closing connection 0
> [Mon Dec 22 16:20:18 2003]  [jk_ajp_common.c (536)]: In
jk_endpoint_t::ajp_close_endpoint
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]






--

This e-mail may contain confidential and/or privileged information. If you are not the 
intended recipient (or have received this e-mail in error) please notify the sender 
immediately and destroy this e-mail. Any unauthorized copying, disclosure or 
distribution of the material in this e-mail is strictly forbidden.



---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to