[Building Sakai] 503 issues when using Forms

[Earle Nietzel]

Hi Steve,

We are using mod_proxy_ajp as well on apache http 2.2.11.

I know there were issues with mod_prxy_ajp that were fixed in apache http
2.2.6.

I also noticed your not using the ProxyPass, but mod_rewrite instead?

Here is our config:

   DocumentRoot "/var/www/html"
   ServerName ilearn.marist.edu
   ProxyPass /icons !
   ProxyPass /balancer-manager !
   ProxyPass /awstats !
   ProxyPass /error !
   ProxyPass
/library/editor/FCKeditor/editor/dialog/fck_spellerpages/spellerpages/server-scripts
balancer://iLearnCluster/library/editor/FCKeditor/editor/dialog/fck_spellerpages/spellerpages/server-scripts/
stickysession=JSESSIONID nofailover=On keepalive=on
   ProxyPass /library !
   ProxyPass / balancer://iLearnCluster/ stickysession=JSESSIONID
nofailover=On keepalive=on

   <Proxy balancer://iLearnCluster>
          BalancerMember ajp://app02.ilearn.marist.edu:8009 route=app02
redirect=app05
          BalancerMember ajp://app05.ilearn.marist.edu:8009 route=app05
redirect=app02
   </Proxy>

   <Location /balancer-manager>
          SetHandler balancer-manager
          AuthType basic
          AuthBasicProvider ldap
          AuthzLDAPAuthoritative on
          AuthLDAPBindDN xxxxxxx
          AuthLDAPBindPassword xxxxxxxxxxx
          AuthLDAPURL "ldap://
my.ldap.org/ou=people?uid??(ou=Information*Technology)"
          Require ldap-user user1 user2
   </Location>

   ErrorLog logs/ilearn_marist_edu-error.log
   TransferLog logs/ilearn_marist_edu-access.log
   LogLevel warn

   SetEnvIf User-Agent ".*MSIE.*" \
            nokeepalive ssl-unclean-shutdown \
            downgrade-1.0 force-response-1.0
   CustomLog logs/ilearn_marist_edu-ssl_request.log \
             "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"

   RewriteEngine on
   RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)
   RewriteRule .* - [F]


Only using the rewrite engine to prevent certain types of attacks.
We are also using mod_proxy_balancer as you can see which has a nice little
web page to manage your application nodes.
Been using this setup for years now with no issues or problems.

Be aware that if your web server is in one network typically public on the
internet and your apps are on a local network, you could have your network
dropping active connections. Add keepalive=on to the end of your ProxyPass
directive.

Hope this helps,
Earle

On Mon, Jul 25, 2011 at 10:04 PM, Steve Swinsburg <steve.swinsburg at gmail.com>
wrote:
> Hi all,
>
> We've are receiving constant 503 errors from Apache whenever users test
Forms (Sakai 2.8). We have had a look through the catalina.out file but
cannot determine what, if anything, is related. Apache logs themselves seem
to indicate that Tomcat isn’t sending a valid response:
>
> [Mon Jul 25 19:29:24 2011] [error] ajp_read_header: ajp_ilink_receive
failed
> [Mon Jul 25 19:29:24 2011] [error] (120006)APR does not understand this
error code: proxy: read response failed from (null) (*)
>
> Example of a 503 error being issued:
> - - - [25/Jul/2011:19:26:56 +1000] "GET
/portal/site/0d8834c6-b72a-45ef-907e-255abd36bd08 HTTP/1.1" 503 393 "
https://sakai.server/portal/site/7f8fe41a-d277-4236-bd73-fdc4b4d1957e"
"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0;
SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media
Center PC 6.0; .NET4.0C)" sakai.app.server 10.229.4.242 60046902
>
> We are using mod_proxy_ajp. Below is the config.
>
> Any ideas what could be causing this? It seems to be ONLY Forms.
>
> thanks,
> Steve
>
>
> <VirtualHost *:80>
>    ServerName  sakai.app.server
>    ServerAlias sakai.server
>    ServerAlias sakai.server.other.1
>    ServerAlias sakai.server.other.2
>
>    DocumentRoot        /var/www/html
>
>    SetEnvIf client-ip ^NS$ REQ_FROM_LB
>    SetEnvIf REQ_FROM_LB 1 DO_NOT_LOG
>    SetEnvIf User-Agent nagios DO_NOT_LOG
>
>    LogFormat "%{client-ip}i %l %u %t \"%r\" %>s %b \"%{Referer}i\"
\"%{User-agent}i\" %v %A %D" combined_plus
>
>    CustomLog "|cat >> /var/log/httpd/sakai-combined_log" combined_plus
env=!DO_NOT_LOG
>    ErrorLog "|cat >> /var/log/httpd/sakai-error_log"
>
>    AcceptPathInfo on
>
>    RedirectMatch permanent ^/$ https://sakai.server/portal
>
>    # pass all requests through to local Tomcat on 8009 via AJP
>    RewriteEngine   On
>    RewriteCond     %{REQUEST_URI}  !^/$
>    RewriteRule     ^/(.*)          ajp://localhost:8009/$1 [P,L]
>
> </VirtualHost>
>
>
> _______________________________________________
> sakai-dev mailing list
> sakai-dev at collab.sakaiproject.org
> http://collab.sakaiproject.org/mailman/listinfo/sakai-dev
>
> TO UNSUBSCRIBE: send email to
sakai-dev-unsubscribe at collab.sakaiproject.org with a subject of
"unsubscribe"
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://collab.sakaiproject.org/pipermail/sakai-dev/attachments/20110726/be7768b8/attachment.html