[Deploying Sakai] [Building Sakai] 503 issues when using Forms

Steve Swinsburg steve.swinsburg at gmail.com
Tue Jul 26 08:18:40 PDT 2011


Thanks Earle, I'll pass that on to our sysadmins.

Much appreciated!



On 27/07/2011, at 1:15 AM, Earle Nietzel wrote:

> Hi Steve,
> 
> We are using mod_proxy_ajp as well on apache http 2.2.11.
> 
> I know there were issues with mod_prxy_ajp that were fixed in apache http 2.2.6.
> 
> I also noticed your not using the ProxyPass, but mod_rewrite instead?
> 
> Here is our config:
> 
>    DocumentRoot "/var/www/html"
>    ServerName ilearn.marist.edu
>    ProxyPass /icons !
>    ProxyPass /balancer-manager !
>    ProxyPass /awstats !
>    ProxyPass /error !
>    ProxyPass /library/editor/FCKeditor/editor/dialog/fck_spellerpages/spellerpages/server-scripts balancer://iLearnCluster/library/editor/FCKeditor/editor/dialog/fck_spellerpages/spellerpages/server-scripts/ stickysession=JSESSIONID nofailover=On keepalive=on
>    ProxyPass /library !
>    ProxyPass / balancer://iLearnCluster/ stickysession=JSESSIONID nofailover=On keepalive=on
> 
>    <Proxy balancer://iLearnCluster>
>           BalancerMember ajp://app02.ilearn.marist.edu:8009 route=app02 redirect=app05
>           BalancerMember ajp://app05.ilearn.marist.edu:8009 route=app05 redirect=app02
>    </Proxy>
> 
>    <Location /balancer-manager>
>           SetHandler balancer-manager
>           AuthType basic
>           AuthBasicProvider ldap
>           AuthzLDAPAuthoritative on
>           AuthLDAPBindDN xxxxxxx
>           AuthLDAPBindPassword xxxxxxxxxxx
>           AuthLDAPURL "ldap://my.ldap.org/ou=people?uid??(ou=Information*Technology)"
>           Require ldap-user user1 user2
>    </Location>
> 
>    ErrorLog logs/ilearn_marist_edu-error.log
>    TransferLog logs/ilearn_marist_edu-access.log
>    LogLevel warn
>    
>    SetEnvIf User-Agent ".*MSIE.*" \
>             nokeepalive ssl-unclean-shutdown \
>             downgrade-1.0 force-response-1.0
>    CustomLog logs/ilearn_marist_edu-ssl_request.log \
>              "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
> 
>    RewriteEngine on
>    RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)
>    RewriteRule .* - [F]
> 
> 
> Only using the rewrite engine to prevent certain types of attacks.
> We are also using mod_proxy_balancer as you can see which has a nice little web page to manage your application nodes.
> Been using this setup for years now with no issues or problems.
> 
> Be aware that if your web server is in one network typically public on the internet and your apps are on a local network, you could have your network dropping active connections. Add keepalive=on to the end of your ProxyPass directive.
> 
> Hope this helps,
> Earle
> 
> On Mon, Jul 25, 2011 at 10:04 PM, Steve Swinsburg <steve.swinsburg at gmail.com> wrote:
> > Hi all,
> >
> > We've are receiving constant 503 errors from Apache whenever users test Forms (Sakai 2.8). We have had a look through the catalina.out file but cannot determine what, if anything, is related. Apache logs themselves seem to indicate that Tomcat isn’t sending a valid response:
> >
> > [Mon Jul 25 19:29:24 2011] [error] ajp_read_header: ajp_ilink_receive failed
> > [Mon Jul 25 19:29:24 2011] [error] (120006)APR does not understand this error code: proxy: read response failed from (null) (*)
> >
> > Example of a 503 error being issued:
> > - - - [25/Jul/2011:19:26:56 +1000] "GET /portal/site/0d8834c6-b72a-45ef-907e-255abd36bd08 HTTP/1.1" 503 393 "https://sakai.server/portal/site/7f8fe41a-d277-4236-bd73-fdc4b4d1957e" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C)" sakai.app.server 10.229.4.242 60046902
> >
> > We are using mod_proxy_ajp. Below is the config.
> >
> > Any ideas what could be causing this? It seems to be ONLY Forms.
> >
> > thanks,
> > Steve
> >
> >
> > <VirtualHost *:80>
> >    ServerName  sakai.app.server
> >    ServerAlias sakai.server
> >    ServerAlias sakai.server.other.1
> >    ServerAlias sakai.server.other.2
> >
> >    DocumentRoot        /var/www/html
> >
> >    SetEnvIf client-ip ^NS$ REQ_FROM_LB
> >    SetEnvIf REQ_FROM_LB 1 DO_NOT_LOG
> >    SetEnvIf User-Agent nagios DO_NOT_LOG
> >
> >    LogFormat "%{client-ip}i %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\" %v %A %D" combined_plus
> >
> >    CustomLog "|cat >> /var/log/httpd/sakai-combined_log" combined_plus env=!DO_NOT_LOG
> >    ErrorLog "|cat >> /var/log/httpd/sakai-error_log"
> >
> >    AcceptPathInfo on
> >
> >    RedirectMatch permanent ^/$ https://sakai.server/portal
> >
> >    # pass all requests through to local Tomcat on 8009 via AJP
> >    RewriteEngine   On
> >    RewriteCond     %{REQUEST_URI}  !^/$
> >    RewriteRule     ^/(.*)          ajp://localhost:8009/$1 [P,L]
> >
> > </VirtualHost>
> >
> >
> > _______________________________________________
> > sakai-dev mailing list
> > sakai-dev at collab.sakaiproject.org
> > http://collab.sakaiproject.org/mailman/listinfo/sakai-dev
> >
> > TO UNSUBSCRIBE: send email to sakai-dev-unsubscribe at collab.sakaiproject.org with a subject of "unsubscribe"
> >
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://collab.sakaiproject.org/pipermail/production/attachments/20110727/562780a8/attachment-0001.html 


More information about the production mailing list