You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Mark Dewey <md...@bath.ac.uk> on 2008/06/25 13:46:42 UTC

proxy_ajp

I am currently using proxy ajp successfully and very happy with the 
simplicity of configuration compared to my experiences a few years ago! 
I have run into a problem however.

I have two version of tomcat running on one of the servers. Here is the 
configuration -:

ProxyPass /tc1/ ajp://www.xxx.yyy.zzz:8009/
ProxyPass /tc2/ ajp://www.xxx.yyy.zzz:8007/

I believe the second tomcat is configured correctly in server.xml to use 
8007

I assumed it would be possible to use arbitrary ports, in this case 
8007, but it is refusing to work. Could anyone please tell me if there 
is a reason why this wont work or indeed if it should work.

>>>
[Wed Jun 25 13:04:22 2008] [error] (13)Permission denied: proxy: AJP: attempt to connect to www.xxx.yyy.zzz:8007 (www.xxx.yyy.zzz) failed
[Wed Jun 25 13:04:22 2008] [error] ap_proxy_connect_backend disabling worker for (www.xxx.yyy.zzz)
[Wed Jun 25 13:04:22 2008] [error] proxy: AJP: failed to make connection to backend: www.xxx.yyy.zzz
>>>

Thanks


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: proxy_ajp

Posted by Mikolaj Rydzewski <mi...@ceti.pl>.
Mark Dewey wrote:
> Hi yes I am.
>
> I get both over http and the usual white page for the ajp ports.
I'd play with <Location> configuration element and balancer 
configuration to see whether it will work.

http://httpd.apache.org/docs/2.2/mod/mod_proxy.html

-- 
Mikolaj Rydzewski <mi...@ceti.pl>


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: proxy_ajp

Posted by Mark Dewey <md...@bath.ac.uk>.
Hi yes I am.

I get both over http and the usual white page for the ajp ports.

Cheers,
Mark

Mikolaj Rydzewski wrote:
> Mark Dewey wrote:
>> [Wed Jun 25 *13*:04:22 2008] [error] (*13*)*Permission* *denied*: 
>> *proxy*: *AJP*: attempt to connect to www.xxx.yyy.zzz:8007 
>> (www.xxx.yyy.zzz) failed
>> [Wed Jun 25 *13*:04:22 2008] [error] ap_proxy_connect_backend 
>> disabling worker for (www.xxx.yyy.zzz)
>> [Wed Jun 25 *13*:04:22 2008] [error] *proxy*: *AJP*: failed to make 
>> connection to backend: www.xxx.yyy.zzz
>>
>> I have changed the shutdown port to 8003 and neither servers are 
>> using SSL
> Does the second Tomcat really work? Are you able to connect using http 
> connectors to both Tomcats?
>


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: proxy_ajp

Posted by Mikolaj Rydzewski <mi...@ceti.pl>.
Mark Dewey wrote:
> [Wed Jun 25 *13*:04:22 2008] [error] (*13*)*Permission* *denied*: 
> *proxy*: *AJP*: attempt to connect to www.xxx.yyy.zzz:8007 
> (www.xxx.yyy.zzz) failed
> [Wed Jun 25 *13*:04:22 2008] [error] ap_proxy_connect_backend 
> disabling worker for (www.xxx.yyy.zzz)
> [Wed Jun 25 *13*:04:22 2008] [error] *proxy*: *AJP*: failed to make 
> connection to backend: www.xxx.yyy.zzz
>
> I have changed the shutdown port to 8003 and neither servers are using 
> SSL
Does the second Tomcat really work? Are you able to connect using http 
connectors to both Tomcats?

-- 
Mikolaj Rydzewski <mi...@ceti.pl>


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: proxy_ajp

Posted by Mark Dewey <md...@bath.ac.uk>.
[Wed Jun 25 *13*:04:22 2008] [error] (*13*)*Permission* *denied*: 
*proxy*: *AJP*: attempt to connect to www.xxx.yyy.zzz:8007 
(www.xxx.yyy.zzz) failed
[Wed Jun 25 *13*:04:22 2008] [error] ap_proxy_connect_backend disabling 
worker for (www.xxx.yyy.zzz)
[Wed Jun 25 *13*:04:22 2008] [error] *proxy*: *AJP*: failed to make 
connection to backend: www.xxx.yyy.zzz

I have changed the shutdown port to 8003 and neither servers are using SSL

Regards,

Mark

Mikolaj Rydzewski wrote:
> Mark Dewey wrote:
>> I am currently using proxy ajp successfully and very happy with the 
>> simplicity of configuration compared to my experiences a few years 
>> ago! I have run into a problem however.
>>
>> I have two version of tomcat running on one of the servers. Here is 
>> the configuration -:
>>
>> ProxyPass /tc1/ ajp://www.xxx.yyy.zzz:8009/
>> ProxyPass /tc2/ ajp://www.xxx.yyy.zzz:8007/
>>
>> I believe the second tomcat is configured correctly in server.xml to 
>> use 8007
>>
>> I assumed it would be possible to use arbitrary ports, in this case 
>> 8007, but it is refusing to work. Could anyone please tell me if 
>> there is a reason why this wont work or indeed if it should work.
> What do the logs say? Did you change shutdown port as well?
>


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: proxy_ajp

Posted by Mikolaj Rydzewski <mi...@ceti.pl>.
Mark Dewey wrote:
> I am currently using proxy ajp successfully and very happy with the 
> simplicity of configuration compared to my experiences a few years 
> ago! I have run into a problem however.
>
> I have two version of tomcat running on one of the servers. Here is 
> the configuration -:
>
> ProxyPass /tc1/ ajp://www.xxx.yyy.zzz:8009/
> ProxyPass /tc2/ ajp://www.xxx.yyy.zzz:8007/
>
> I believe the second tomcat is configured correctly in server.xml to 
> use 8007
>
> I assumed it would be possible to use arbitrary ports, in this case 
> 8007, but it is refusing to work. Could anyone please tell me if there 
> is a reason why this wont work or indeed if it should work.
What do the logs say? Did you change shutdown port as well?

-- 
Mikolaj Rydzewski <mi...@ceti.pl>


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: proxy_ajp

Posted by Rainer Jung <ra...@kippdata.de>.
Christopher Schultz schrieb:
> Mark,
> 
> Mark Dewey wrote:
> |    <Connector port="8090" protocol="HTTP/1.1"
> |               connectionTimeout="20000"
> |               redirectPort="8444" />
> |    <Connector port="8007" protocol="AJP/1.3" redirectPort="8444" />
> 
> Is it possible that you have a firewall or iptables in the way? Can you
> telnet from the httpd machine to the app server over port 8007 (or 8009,
> depending on the server)?

He should definitely try that. But I find strange, that errno is "13", 
which is EACCESS. The failing call should be connect() inside 
apr_socket_connect(). man pages on my Linux/Unix systems consistently 
tell me for connect():

EACCES Search permission is denied for a component of the path prefix; 
or write access to the named socket is denied.

Hmmmm.

I guess this would be better discussed first on users@httpd.apache.org, 
and if no solution comes from there open an issue against httpd in the 
ASF bugzilla.

Regards,

Rainer

---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: proxy_ajp

Posted by Christopher Schultz <ch...@christopherschultz.net>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Mark,

Mark Dewey wrote:
|    <Connector port="8090" protocol="HTTP/1.1"
|               connectionTimeout="20000"
|               redirectPort="8444" />
|    <Connector port="8007" protocol="AJP/1.3" redirectPort="8444" />

Is it possible that you have a firewall or iptables in the way? Can you
telnet from the httpd machine to the app server over port 8007 (or 8009,
depending on the server)?

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkhiefUACgkQ9CaO5/Lv0PD//ACeIX0RPcO5RSbktFKHJwMnXhY4
Ny8An2IZe8Z0F591ljVIWnIVyVdpEwWE
=fH2k
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: proxy_ajp

Posted by Mark Dewey <md...@bath.ac.uk>.
Hi Mark,

server.xml is as follows -:

<?xml version='1.0' encoding='utf-8'?>
<Server port="8003" shutdown="SHUTDOWN">

  <Listener className="org.apache.catalina.core.AprLifecycleListener" 
SSLEngine="on" />
  <Listener className="org.apache.catalina.core.JasperListener" />
  <Listener 
className="org.apache.catalina.mbeans.ServerLifecycleListener" />
  <Listener 
className="org.apache.catalina.mbeans.GlobalResourcesLifecycleListener" />

  <GlobalNamingResources>

    <Resource name="UserDatabase" auth="Container"
              type="org.apache.catalina.UserDatabase"
              description="User database that can be updated and saved"
              factory="org.apache.catalina.users.MemoryUserDatabaseFactory"
              pathname="conf/tomcat-users.xml" />
  </GlobalNamingResources>

  <Service name="Catalina">
 
    <Connector port="8090" protocol="HTTP/1.1"
               connectionTimeout="20000"
               redirectPort="8444" />
    <Connector port="8007" protocol="AJP/1.3" redirectPort="8444" />


    <Engine name="Catalina" defaultHost="localhost">
      <Realm className="org.apache.catalina.realm.UserDatabaseRealm"
             resourceName="UserDatabase"/>
      <Host name="localhost"  appBase="webapps"
            unpackWARs="true" autoDeploy="true"
            xmlValidation="false" xmlNamespaceAware="false">
      </Host>
    </Engine>
  </Service>
</Server>

Cheers,

Mark

Mark Thomas wrote:
> Mark Dewey wrote:
>> I am currently using proxy ajp successfully and very happy with the 
>> simplicity of configuration compared to my experiences a few years 
>> ago! I have run into a problem however.
>>
>> I have two version of tomcat running on one of the servers. Here is 
>> the configuration -:
>>
>> ProxyPass /tc1/ ajp://www.xxx.yyy.zzz:8009/
>> ProxyPass /tc2/ ajp://www.xxx.yyy.zzz:8007/
>>
>> I believe the second tomcat is configured correctly in server.xml to 
>> use 8007
>
> That should be fine. Can you show us the connector config from 
> server.xml please?
>
> Mark
>
>
>
> ---------------------------------------------------------------------
> To start a new topic, e-mail: users@tomcat.apache.org
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: proxy_ajp

Posted by Mark Thomas <ma...@apache.org>.
Mark Dewey wrote:
> I am currently using proxy ajp successfully and very happy with the 
> simplicity of configuration compared to my experiences a few years ago! 
> I have run into a problem however.
> 
> I have two version of tomcat running on one of the servers. Here is the 
> configuration -:
> 
> ProxyPass /tc1/ ajp://www.xxx.yyy.zzz:8009/
> ProxyPass /tc2/ ajp://www.xxx.yyy.zzz:8007/
> 
> I believe the second tomcat is configured correctly in server.xml to use 
> 8007

That should be fine. Can you show us the connector config from server.xml 
please?

Mark



---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org