You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Alexander Diedler <ad...@tecracer.de> on 2011/10/05 09:16:05 UTC
ISAPI Redicect - Request Entitiy too large
Hello @ll,
I have installed a new Windows 2008 R2 x64 Server with IIS7 and Tomcat
6.0.32 x64 Edition. We use SSO Authentication from IIS to the Tomcat.
Suddenly, we got on some clients, but not on every client (that´s stupid!)
the following error:
Request Entity Too large!
The HTTP method does not allow the data transmitted, or the data volume
exceeds the capacity limit.
Jakarata/ISAPI/isapi_redirector/1.2.32 ()
The isapi.log contains the following messages in debug mode:
[Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
find_match::jk_uri_worker_map.c (863): Found a wildchar match
'/jci/*=worker1'
[Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
HttpFilterProc::jk_isapi_plugin.c (1978): check if [/jci/] points to the
web-inf directory
[Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
HttpFilterProc::jk_isapi_plugin.c (1994): [/jci/] is a servlet url - should
redirect to worker1
[Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
HttpFilterProc::jk_isapi_plugin.c (2034): fowarding escaped URI [/jci/]
[Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug] wc_maintain::jk_worker.c
(339): Maintaining worker worker1
[Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3022): Reading extension header
HTTP_TOMCATWORKER0000000180000000: worker1
[Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3023): Reading extension header
HTTP_TOMCATWORKERIDX0000000180000000: 3
[Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3024): Reading extension header
HTTP_TOMCATURI0000000180000000: /jci/
[Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3025): Reading extension header
HTTP_TOMCATQUERY0000000180000000: (null)
[Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3085): Applying service extensions
[Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
Connection : Keep-Alive
[Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
Content-Length : 0
[Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header Accept
: */*
[Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
Accept-Encoding : gzip, deflate
[Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
Accept-Language : de-DE
[Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3309):
[Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header Host :
b0621s008
[Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
User-Agent : Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64;
Trident/4.0; SLCC2; .NET CLR 2.0.50727)
[Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3344): Service protocol=HTTP/1.1
method=GET host=fe80::3d83:4ce1:6ac:83dd%11 addr=fe80::3d83:4ce1:6ac:83dd%11
name=b0621s008 port=80 auth=Negotiate user=DOMAIN\USERNAME uri=/jci/
[Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3356): Service request headers=8
attributes=0 chunked=no content-length=0 available=0
[Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
wc_get_worker_for_name::jk_worker.c (116): found a worker worker1
[Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
HttpExtensionProc::jk_isapi_plugin.c (2228): got a worker for name worker1
[Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
ajp_get_endpoint::jk_ajp_common.c (3161): acquired connection pool slot=0
after 0 retries
[Fri Sep 30 15:06:08.460 2011] [3456:1540] [error]
ajp_marshal_into_msgb::jk_ajp_common.c (469): failed appending the header
value
[Fri Sep 30 15:06:08.460 2011] [3456:1540] [info]
ajp_service::jk_ajp_common.c (2431): Creating AJP message failed, without
recovery
[Fri Sep 30 15:06:08.460 2011] [3456:1540] [error]
HttpExtensionProc::jk_isapi_plugin.c (2261): service() failed with http
error 413
[Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
ajp_reset_endpoint::jk_ajp_common.c (807): (worker1) resetting endpoint with
socket -1 (socket shutdown)
[Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug] ajp_done::jk_ajp_common.c
(3078): recycling connection pool slot=0 for worker worker1
Re: ISAPI Redicect - Request Entitiy too large
Posted by Cédric Couralet <ce...@gmail.com>.
2014-07-21 6:42 GMT+02:00 Mikey <mi...@gmail.com>:
> Alexander Diedler <adiedler <at> tecracer.de> writes:
>
>>
>>
>> Hello <at> ll,
>> I have installed a new Windows 2008 R2 x64 Server with IIS7 and Tomcat
> 6.0.32 x64 Edition. We use SSO Authentication from IIS to the Tomcat.
> Suddenly, we got on some clients, but not on every client (that´s stupid!)
> the following error:
>>
>> Request Entity Too large!
>> The HTTP method does not allow the data transmitted, or the data volume
> exceeds the capacity limit.
>>
>> Jakarata/ISAPI/isapi_redirector/1.2.32 ()
>>
>> The isapi.log contains the following messages in debug mode:
>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
> find_match::jk_uri_worker_map.c (863): Found a wildchar match
> '/jci/*=worker1'
>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
> HttpFilterProc::jk_isapi_plugin.c (1978): check if [/jci/] points to the
> web-inf directory
>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
> HttpFilterProc::jk_isapi_plugin.c (1994): [/jci/] is a servlet url - should
> redirect to worker1
>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
> HttpFilterProc::jk_isapi_plugin.c (2034): fowarding escaped URI [/jci/]
>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
> wc_maintain::jk_worker.c (339): Maintaining worker worker1
>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3022): Reading extension header
> HTTP_TOMCATWORKER0000000180000000: worker1
>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3023): Reading extension header
> HTTP_TOMCATWORKERIDX0000000180000000: 3
>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3024): Reading extension header
> HTTP_TOMCATURI0000000180000000: /jci/
>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3025): Reading extension header
> HTTP_TOMCATQUERY0000000180000000: (null)
>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3085): Applying service extensions
>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
> Connection : Keep-Alive
>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
> Content-Length : 0
>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header Accept
> : */*
>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header Accept-
> Encoding : gzip, deflate
>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header Accept-
> Language : de-DE
>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3309):
>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header Host :
> b0621s008
>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header User-
> Agent : Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64;
> Trident/4.0; SLCC2; .NET CLR 2.0.50727)
>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3344): Service protocol=HTTP/1.1
> method=GET host=fe80::3d83:4ce1:6ac:83dd%11 addr=fe80::3d83:4ce1:6ac:83dd%11
> name=b0621s008 port=80 auth=Negotiate user=DOMAIN\USERNAME uri=/jci/
>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3356): Service request headers=8
> attributes=0 chunked=no content-length=0 available=0
>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
> wc_get_worker_for_name::jk_worker.c (116): found a worker worker1
>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
> HttpExtensionProc::jk_isapi_plugin.c (2228): got a worker for name worker1
>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
> ajp_get_endpoint::jk_ajp_common.c (3161): acquired connection pool slot=0
> after 0 retries
>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [error]
> ajp_marshal_into_msgb::jk_ajp_common.c (469): failed appending the header
> value
>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [info]
> ajp_service::jk_ajp_common.c (2431): Creating AJP message failed, without
> recovery
>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [error]
> HttpExtensionProc::jk_isapi_plugin.c (2261): service() failed with http
> error 413
>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
> ajp_reset_endpoint::jk_ajp_common.c (807): (worker1) resetting endpoint with
> socket -1 (socket shutdown)
>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
> ajp_done::jk_ajp_common.c (3078): recycling connection pool slot=0 for
> worker worker1
>>
>> Attachment (smime.p7s): application/pkcs7-signature, 5183 bytes
>
> After 18+ months of dealing with this issue - with IIS6, IIS7, IIS7.5 - I
> fixed it by removing 'Negotiate' from the Windows Authentication providers,
> just leaving 'NTLM'. Hope this helps, as I've been bashing my head against
> a brick wall for so long over this!!
>
>
Hi,
Wasn't the problem caused by a too big kerberos ticket ?
AIUI, that ticket contains all the groups SID of the member (which
would explain why only certain members are affected).
I am asking because I recently read (on http WG) that kerberos ticket
in header could be very large in size, even larger than 16K. Tomcat
default limits of 8K could explain your error (don't know if it
applies to AJP).
This is all very speculative, but as you do the auth on IIS, maybe
another solution would be to not transfer the Authenticate header.
Not really important as you solved your problem, just my 2 cts.
Cédric
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: ISAPI Redicect - Request Entitiy too large
Posted by Mikey <mi...@gmail.com>.
Alexander Diedler <adiedler <at> tecracer.de> writes:
>
>
> Hello <at> ll,
> I have installed a new Windows 2008 R2 x64 Server with IIS7 and Tomcat
6.0.32 x64 Edition. We use SSO Authentication from IIS to the Tomcat.
Suddenly, we got on some clients, but not on every client (that´s stupid!)
the following error:
>
> Request Entity Too large!
> The HTTP method does not allow the data transmitted, or the data volume
exceeds the capacity limit.
>
> Jakarata/ISAPI/isapi_redirector/1.2.32 ()
>
> The isapi.log contains the following messages in debug mode:
> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
find_match::jk_uri_worker_map.c (863): Found a wildchar match
'/jci/*=worker1'
> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
HttpFilterProc::jk_isapi_plugin.c (1978): check if [/jci/] points to the
web-inf directory
> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
HttpFilterProc::jk_isapi_plugin.c (1994): [/jci/] is a servlet url - should
redirect to worker1
> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
HttpFilterProc::jk_isapi_plugin.c (2034): fowarding escaped URI [/jci/]
> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
wc_maintain::jk_worker.c (339): Maintaining worker worker1
> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3022): Reading extension header
HTTP_TOMCATWORKER0000000180000000: worker1
> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3023): Reading extension header
HTTP_TOMCATWORKERIDX0000000180000000: 3
> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3024): Reading extension header
HTTP_TOMCATURI0000000180000000: /jci/
> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3025): Reading extension header
HTTP_TOMCATQUERY0000000180000000: (null)
> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3085): Applying service extensions
> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
Connection : Keep-Alive
> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
Content-Length : 0
> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header Accept
: */*
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header Accept-
Encoding : gzip, deflate
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header Accept-
Language : de-DE
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3309):
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header Host :
b0621s008
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header User-
Agent : Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64;
Trident/4.0; SLCC2; .NET CLR 2.0.50727)
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3344): Service protocol=HTTP/1.1
method=GET host=fe80::3d83:4ce1:6ac:83dd%11 addr=fe80::3d83:4ce1:6ac:83dd%11
name=b0621s008 port=80 auth=Negotiate user=DOMAIN\USERNAME uri=/jci/
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3356): Service request headers=8
attributes=0 chunked=no content-length=0 available=0
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
wc_get_worker_for_name::jk_worker.c (116): found a worker worker1
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
HttpExtensionProc::jk_isapi_plugin.c (2228): got a worker for name worker1
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
ajp_get_endpoint::jk_ajp_common.c (3161): acquired connection pool slot=0
after 0 retries
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [error]
ajp_marshal_into_msgb::jk_ajp_common.c (469): failed appending the header
value
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [info]
ajp_service::jk_ajp_common.c (2431): Creating AJP message failed, without
recovery
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [error]
HttpExtensionProc::jk_isapi_plugin.c (2261): service() failed with http
error 413
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
ajp_reset_endpoint::jk_ajp_common.c (807): (worker1) resetting endpoint with
socket -1 (socket shutdown)
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
ajp_done::jk_ajp_common.c (3078): recycling connection pool slot=0 for
worker worker1
>
> Attachment (smime.p7s): application/pkcs7-signature, 5183 bytes
After 18+ months of dealing with this issue - with IIS6, IIS7, IIS7.5 - I
fixed it by removing 'Negotiate' from the Windows Authentication providers,
just leaving 'NTLM'. Hope this helps, as I've been bashing my head against
a brick wall for so long over this!!
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: ISAPI Redicect - Request Entitiy too large
Posted by André Warnier <aw...@ice-sa.com>.
Rainer Jung wrote:
> On 06.10.2011 10:17, Alexander Diedler wrote:
>> Yes, that´s it. We changed the size to 12k and everything works fine.
>> It is a lot tricky, that the default value is not fitting in a default
>> environment.
Increasing the max_packet_size beyond what is normally needed in most cases, probably
causes some additional memory overhead, which is why the default size is what it is.
Yours is not really a "default environment". I have many servers running within a similar
environment (large company, Windows Domain authentication, IIS/Apache + AJP + Tomcat,
default mod_jk/isapi_redirect settings) which do not experience that problem.
(And some of your clients do not experience it either).
In this particular case, some of your clients experience the problem because (as Chris
pointed out) their particular user-id triggers a very large "Authorization:" header.
This being said, Chris's comment was very informative, because I also did not know that
the user's group membership may be a factor in that header size. That is the kind of
information that may save a lot of time some day. Thanks, Chris.
>> Thanks to all for your help.
>
> I improved logging in this situation a bit for the next release, e.g.
> giving size and name of the failing header and adding a hint for
> max_packet_size.
That's a very good idea, because right now, what heppens is that prcisely the header which
causes the problem does not appear in the log, even at the highest log setting.
;-)
The problem is not unusual, so a hint about the likely
> cause is appropriate.
>
> See: http://svn.apache.org/viewvc?view=revision&revision=1179533
>
> Will be in 1.2.33.
>
Thanks.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: ISAPI Redicect - Request Entitiy too large
Posted by Rainer Jung <ra...@kippdata.de>.
On 06.10.2011 10:17, Alexander Diedler wrote:
> Yes, that´s it. We changed the size to 12k and everything works fine.
> It is a lot tricky, that the default value is not fitting in a default
> environment.
> Thanks to all for your help.
I improved logging in this situation a bit for the next release, e.g.
giving size and name of the failing header and adding a hint for
max_packet_size. The problem is not unusual, so a hint about the likely
cause is appropriate.
See: http://svn.apache.org/viewvc?view=revision&revision=1179533
Will be in 1.2.33.
Regards,
Rainer
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
AW: AW: ISAPI Redicect - Request Entitiy too large
Posted by Alexander Diedler <ad...@tecracer.de>.
Yes, that´s it. We changed the size to 12k and everything works fine.
It is a lot tricky, that the default value is not fitting in a default
environment.
Thanks to all for your help.
BR
Alex
-----Ursprüngliche Nachricht-----
Von: cjderham@gmail.com [mailto:cjderham@gmail.com] Im Auftrag von chris
derham
Gesendet: Mittwoch, 5. Oktober 2011 12:53
An: Tomcat Users List
Betreff: Re: AW: ISAPI Redicect - Request Entitiy too large
Alexander,
If you are using authorisation header, then you are using SPNGEO. This
header encodes the users group membership in the authorisation header. By
default tomcat has an 8k maximum header, whilst users belonging to many
groups can have an authorisation token that can swell to larger than this
size. This explains why you see some people can login and others can't.
Just change the maxHttpHeaderSize to something larger than the default 8k
and you should be set. We used 32k
Chris
Re: ISAPI Redicect - Request Entitiy too large
Posted by Rainer Jung <ra...@kippdata.de>.
On 05.10.2011 12:53, chris derham wrote:
> Alexander,
>
> If you are using authorisation header, then you are using SPNGEO. This
> header encodes the users group membership in the authorisation header. By
> default tomcat has an 8k maximum header, whilst users belonging to many
> groups can have an authorisation token that can swell to larger than this
> size. This explains why you see some people can login and others can't.
>
> Just change the maxHttpHeaderSize to something larger than the default 8k
> and you should be set. We used 32k
Makes sense. But in this case the communication between IIS and Tomcat
is via AJP, not HTTP.
Look for max_packet_size on
http://tomcat.apache.org/connectors-doc/reference/workers.html and read
don't forget to read the comment about also changing the Tomcat
configuration.
Regards,
Rainer
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: AW: ISAPI Redicect - Request Entitiy too large
Posted by chris derham <ch...@derham.me.uk>.
Alexander,
If you are using authorisation header, then you are using SPNGEO. This
header encodes the users group membership in the authorisation header. By
default tomcat has an 8k maximum header, whilst users belonging to many
groups can have an authorisation token that can swell to larger than this
size. This explains why you see some people can login and others can't.
Just change the maxHttpHeaderSize to something larger than the default 8k
and you should be set. We used 32k
Chris
AW: AW: ISAPI Redicect - Request Entitiy too large
Posted by Alexander Diedler <ad...@tecracer.de>.
Hello,
Please find below the full loglevel from isapi with level debug for the
single request to access a url/jci/
Yes, you are right. In the header will only be the username and domain
passed to the application. In the application we make a request to query the
NTLM with the given username and the current logged in user credentials.
So no password will be transferred from browser to IIS resp. Tomcat.
[Fri Sep 30 15:06:06.320 2011] [3456:1540] [debug]
jk_set_time_fmt::jk_util.c (459): Pre-processed log time stamp format is
'[%a %b %d %H:%M:%S.000 %Y] '
[Fri Sep 30 15:06:06.320 2011] [3456:1540] [info] init_jk::jk_isapi_plugin.c
(2602): Starting Jakarta/ISAPI/isapi_redirector/1.2.32 ()
[Fri Sep 30 15:06:06.320 2011] [3456:1540] [debug]
init_jk::jk_isapi_plugin.c (2620): Detected IIS version 7.5
[Fri Sep 30 15:06:06.320 2011] [3456:1540] [debug]
init_jk::jk_isapi_plugin.c (2622): Using ini file
D:\tecracer\software\tomcat\isapi\isapi_redirect.properties.
[Fri Sep 30 15:06:06.320 2011] [3456:1540] [debug]
init_jk::jk_isapi_plugin.c (2628): Using log file
d:\tecracer\software\tomcat\logs\isapi_redirect.log.
[Fri Sep 30 15:06:06.320 2011] [3456:1540] [debug]
init_jk::jk_isapi_plugin.c (2629): Using log level 1.
[Fri Sep 30 15:06:06.320 2011] [3456:1540] [debug]
init_jk::jk_isapi_plugin.c (2630): Using log rotation time 0 seconds.
[Fri Sep 30 15:06:06.320 2011] [3456:1540] [debug]
init_jk::jk_isapi_plugin.c (2631): Using log file size 0 bytes.
[Fri Sep 30 15:06:06.320 2011] [3456:1540] [debug]
init_jk::jk_isapi_plugin.c (2633): Using extension uri
/tomcat/isapi_redirect.dll.
[Fri Sep 30 15:06:06.320 2011] [3456:1540] [debug]
init_jk::jk_isapi_plugin.c (2634): Using worker file
d:\tecracer\software\tomcat\conf\workers.properties.
[Fri Sep 30 15:06:06.320 2011] [3456:1540] [debug]
init_jk::jk_isapi_plugin.c (2635): Using worker mount file
d:\tecracer\software\tomcat\conf\uriworkermap.properties.
[Fri Sep 30 15:06:06.320 2011] [3456:1540] [debug]
init_jk::jk_isapi_plugin.c (2637): Using rewrite rule file .
[Fri Sep 30 15:06:06.320 2011] [3456:1540] [debug]
init_jk::jk_isapi_plugin.c (2639): Using uri select 3.
[Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug]
init_jk::jk_isapi_plugin.c (2640): Using no chunked encoding.
[Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug]
init_jk::jk_isapi_plugin.c (2642): Using notification event
SF_NOTIFY_AUTH_COMPLETE (0x04000000)
[Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug]
init_jk::jk_isapi_plugin.c (2652): Using uri header
TOMCATURI0000000180000000:.
[Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug]
init_jk::jk_isapi_plugin.c (2653): Using query header
TOMCATQUERY0000000180000000:.
[Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug]
init_jk::jk_isapi_plugin.c (2654): Using worker header
TOMCATWORKER0000000180000000:.
[Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug]
init_jk::jk_isapi_plugin.c (2655): Using worker index
TOMCATWORKERIDX0000000180000000:.
[Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug]
init_jk::jk_isapi_plugin.c (2656): Using translate header
TOMCATTRANSLATE0000000180000000:.
[Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug]
init_jk::jk_isapi_plugin.c (2657): Using a default of 250 connections per
pool.
[Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug]
jk_map_read_property::jk_map.c (491): Adding property '/admin/*' with value
'worker1' to map.
[Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug]
jk_map_read_property::jk_map.c (491): Adding property '/manager/*' with
value 'worker1' to map.
[Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug]
jk_map_read_property::jk_map.c (491): Adding property '/examples/*' with
value 'worker1' to map.
[Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug]
jk_map_read_property::jk_map.c (491): Adding property '/jci/*' with value
'worker1' to map.
[Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug]
uri_worker_map_load::jk_uri_worker_map.c (1102): Loading urimaps from
d:\tecracer\software\tomcat\conf\uriworkermap.properties with reload check
interval 60 seconds
[Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug]
uri_worker_map_add::jk_uri_worker_map.c (720): wildchar rule
'/admin/*=worker1' source 'uriworkermap' was added
[Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug]
uri_worker_map_add::jk_uri_worker_map.c (720): wildchar rule
'/manager/*=worker1' source 'uriworkermap' was added
[Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug]
uri_worker_map_add::jk_uri_worker_map.c (720): wildchar rule
'/examples/*=worker1' source 'uriworkermap' was added
[Fri Sep 30 15:06:06.351 2011] [3456:1540] [debug]
uri_worker_map_add::jk_uri_worker_map.c (720): wildchar rule
'/jci/*=worker1' source 'uriworkermap' was added
[Fri Sep 30 15:06:06.351 2011] [3456:1540] [debug]
uri_worker_map_dump::jk_uri_worker_map.c (171): uri map dump after file
load: index=0
file='d:\tecracer\software\tomcat\conf\uriworkermap.properties'
reject_unsafe=0 reload=60 modified=1317371602 checked=1317387966
[Fri Sep 30 15:06:06.351 2011] [3456:1540] [debug]
uri_worker_map_dump::jk_uri_worker_map.c (176): generation 0: size=0
nosize=0 capacity=0
[Fri Sep 30 15:06:06.351 2011] [3456:1540] [debug]
uri_worker_map_dump::jk_uri_worker_map.c (176): generation 1: size=4
nosize=0 capacity=4
[Fri Sep 30 15:06:06.351 2011] [3456:1540] [debug]
uri_worker_map_dump::jk_uri_worker_map.c (186): NEXT (1) map #0:
uri=/examples/* worker=worker1 context=/examples/* source=uriworkermap
type=Wildchar len=11
[Fri Sep 30 15:06:06.351 2011] [3456:1540] [debug]
uri_worker_map_dump::jk_uri_worker_map.c (186): NEXT (1) map #1:
uri=/manager/* worker=worker1 context=/manager/* source=uriworkermap
type=Wildchar len=10
[Fri Sep 30 15:06:06.351 2011] [3456:1540] [debug]
uri_worker_map_dump::jk_uri_worker_map.c (186): NEXT (1) map #2:
uri=/admin/* worker=worker1 context=/admin/* source=uriworkermap
type=Wildchar len=8
[Fri Sep 30 15:06:06.351 2011] [3456:1540] [debug]
uri_worker_map_dump::jk_uri_worker_map.c (186): NEXT (1) map #3: uri=/jci/*
worker=worker1 context=/jci/* source=uriworkermap type=Wildchar len=6
[Fri Sep 30 15:06:06.351 2011] [3456:1540] [debug]
jk_map_read_property::jk_map.c (491): Adding property 'worker.list' with
value 'worker1' to map.
[Fri Sep 30 15:06:06.351 2011] [3456:1540] [debug]
jk_map_read_property::jk_map.c (491): Adding property 'worker.worker1.host'
with value 'localhost' to map.
[Fri Sep 30 15:06:06.351 2011] [3456:1540] [debug]
jk_map_read_property::jk_map.c (491): Adding property 'worker.worker1.port'
with value '8009' to map.
[Fri Sep 30 15:06:06.351 2011] [3456:1540] [debug]
jk_map_read_property::jk_map.c (491): Adding property 'worker.worker1.type'
with value 'ajp13' to map.
[Fri Sep 30 15:06:06.351 2011] [3456:1540] [debug]
jk_map_resolve_references::jk_map.c (779): Checking for references with
prefix worker. with wildcard (recursion 1)
[Fri Sep 30 15:06:06.351 2011] [3456:1540] [debug]
jk_shm_calculate_size::jk_shm.c (132): shared memory will contain 1 ajp
workers of size 320 and 0 lb workers of size 320 with 0 members of size
384+320
[Fri Sep 30 15:06:06.351 2011] [3456:1540] [debug] jk_shm_open::jk_shm.c
(254): Initialized shared memory JKISAPISHMEM_B0621S008_1 size=448 free=320
addr=0x3e0000
[Fri Sep 30 15:06:06.351 2011] [3456:1540] [debug] jk_map_dump::jk_map.c
(589): Dump of map: 'worker.list' -> 'worker1'
[Fri Sep 30 15:06:06.351 2011] [3456:1540] [debug] jk_map_dump::jk_map.c
(589): Dump of map: 'worker.worker1.host' -> 'localhost'
[Fri Sep 30 15:06:06.351 2011] [3456:1540] [debug] jk_map_dump::jk_map.c
(589): Dump of map: 'worker.worker1.port' -> '8009'
[Fri Sep 30 15:06:06.367 2011] [3456:1540] [debug] jk_map_dump::jk_map.c
(589): Dump of map: 'worker.worker1.type' -> 'ajp13'
[Fri Sep 30 15:06:06.367 2011] [3456:1540] [debug]
build_worker_map::jk_worker.c (242): creating worker worker1
[Fri Sep 30 15:06:06.367 2011] [3456:1540] [debug]
wc_create_worker::jk_worker.c (146): about to create instance worker1 of
ajp13
[Fri Sep 30 15:06:06.367 2011] [3456:1540] [debug]
wc_create_worker::jk_worker.c (159): about to validate and init worker1
[Fri Sep 30 15:06:06.367 2011] [3456:1540] [debug]
ajp_validate::jk_ajp_common.c (2672): worker worker1 contact is
'localhost:8009'
[Fri Sep 30 15:06:06.367 2011] [3456:1540] [debug] ajp_init::jk_ajp_common.c
(2868): setting endpoint options:
[Fri Sep 30 15:06:06.367 2011] [3456:1540] [debug] ajp_init::jk_ajp_common.c
(2871): keepalive: 0
[Fri Sep 30 15:06:06.367 2011] [3456:1540] [debug] ajp_init::jk_ajp_common.c
(2875): socket timeout: 0
[Fri Sep 30 15:06:06.367 2011] [3456:1540] [debug] ajp_init::jk_ajp_common.c
(2879): socket connect timeout: 0
[Fri Sep 30 15:06:06.367 2011] [3456:1540] [debug] ajp_init::jk_ajp_common.c
(2883): buffer size: 0
[Fri Sep 30 15:06:06.367 2011] [3456:1540] [debug] ajp_init::jk_ajp_common.c
(2887): pool timeout: 0
[Fri Sep 30 15:06:06.367 2011] [3456:1540] [debug] ajp_init::jk_ajp_common.c
(2891): ping timeout: 10000
[Fri Sep 30 15:06:06.367 2011] [3456:1540] [debug] ajp_init::jk_ajp_common.c
(2895): connect timeout: 0
[Fri Sep 30 15:06:06.367 2011] [3456:1540] [debug] ajp_init::jk_ajp_common.c
(2899): reply timeout: 0
[Fri Sep 30 15:06:06.367 2011] [3456:1540] [debug] ajp_init::jk_ajp_common.c
(2903): prepost timeout: 0
[Fri Sep 30 15:06:06.367 2011] [3456:1540] [debug] ajp_init::jk_ajp_common.c
(2907): recovery options: 0
[Fri Sep 30 15:06:06.367 2011] [3456:1540] [debug] ajp_init::jk_ajp_common.c
(2911): retries: 2
[Fri Sep 30 15:06:06.382 2011] [3456:1540] [debug] ajp_init::jk_ajp_common.c
(2915): max packet size: 8192
[Fri Sep 30 15:06:06.382 2011] [3456:1540] [debug] ajp_init::jk_ajp_common.c
(2919): retry interval: 100
[Fri Sep 30 15:06:06.382 2011] [3456:1540] [debug]
ajp_create_endpoint_cache::jk_ajp_common.c (2729): setting connection pool
size to 250 with min 125 and acquire timeout 200
[Fri Sep 30 15:06:06.382 2011] [3456:1540] [debug]
wc_get_worker_for_name::jk_worker.c (116): found a worker worker1
[Fri Sep 30 15:06:06.382 2011] [3456:1540] [debug]
wc_get_name_for_type::jk_worker.c (293): Found worker type 'ajp13'
[Fri Sep 30 15:06:06.382 2011] [3456:1540] [debug]
uri_worker_map_ext::jk_uri_worker_map.c (512): Checking extension for worker
0: worker1 of type ajp13 (2)
[Fri Sep 30 15:06:06.382 2011] [3456:1540] [debug]
wc_get_worker_for_name::jk_worker.c (116): found a worker worker1
[Fri Sep 30 15:06:06.382 2011] [3456:1540] [debug]
wc_get_name_for_type::jk_worker.c (293): Found worker type 'ajp13'
[Fri Sep 30 15:06:06.398 2011] [3456:1540] [debug]
uri_worker_map_ext::jk_uri_worker_map.c (512): Checking extension for worker
1: worker1 of type ajp13 (2)
[Fri Sep 30 15:06:06.398 2011] [3456:1540] [debug]
wc_get_worker_for_name::jk_worker.c (116): found a worker worker1
[Fri Sep 30 15:06:06.398 2011] [3456:1540] [debug]
wc_get_name_for_type::jk_worker.c (293): Found worker type 'ajp13'
[Fri Sep 30 15:06:06.398 2011] [3456:1540] [debug]
uri_worker_map_ext::jk_uri_worker_map.c (512): Checking extension for worker
2: worker1 of type ajp13 (2)
[Fri Sep 30 15:06:06.398 2011] [3456:1540] [debug]
wc_get_worker_for_name::jk_worker.c (116): found a worker worker1
[Fri Sep 30 15:06:06.398 2011] [3456:1540] [debug]
wc_get_name_for_type::jk_worker.c (293): Found worker type 'ajp13'
[Fri Sep 30 15:06:06.398 2011] [3456:1540] [debug]
uri_worker_map_ext::jk_uri_worker_map.c (512): Checking extension for worker
3: worker1 of type ajp13 (2)
[Fri Sep 30 15:06:06.398 2011] [3456:1540] [debug]
uri_worker_map_dump::jk_uri_worker_map.c (171): uri map dump after extension
stripping: index=0
file='d:\tecracer\software\tomcat\conf\uriworkermap.properties'
reject_unsafe=0 reload=60 modified=1317371602 checked=1317387966
[Fri Sep 30 15:06:06.398 2011] [3456:1540] [debug]
uri_worker_map_dump::jk_uri_worker_map.c (176): generation 0: size=0
nosize=0 capacity=0
[Fri Sep 30 15:06:06.398 2011] [3456:1540] [debug]
uri_worker_map_dump::jk_uri_worker_map.c (176): generation 1: size=4
nosize=0 capacity=4
[Fri Sep 30 15:06:06.398 2011] [3456:1540] [debug]
uri_worker_map_dump::jk_uri_worker_map.c (186): NEXT (1) map #0:
uri=/examples/* worker=worker1 context=/examples/* source=uriworkermap
type=Wildchar len=11
[Fri Sep 30 15:06:06.398 2011] [3456:1540] [debug]
uri_worker_map_dump::jk_uri_worker_map.c (186): NEXT (1) map #1:
uri=/manager/* worker=worker1 context=/manager/* source=uriworkermap
type=Wildchar len=10
[Fri Sep 30 15:06:06.398 2011] [3456:1540] [debug]
uri_worker_map_dump::jk_uri_worker_map.c (186): NEXT (1) map #2:
uri=/admin/* worker=worker1 context=/admin/* source=uriworkermap
type=Wildchar len=8
[Fri Sep 30 15:06:06.398 2011] [3456:1540] [debug]
uri_worker_map_dump::jk_uri_worker_map.c (186): NEXT (1) map #3: uri=/jci/*
worker=worker1 context=/jci/* source=uriworkermap type=Wildchar len=6
[Fri Sep 30 15:06:06.398 2011] [3456:1540] [debug]
uri_worker_map_switch::jk_uri_worker_map.c (482): Switching uri worker map
from index 0 to index 1
[Fri Sep 30 15:06:06.398 2011] [3456:1540] [info] init_jk::jk_isapi_plugin.c
(2781): Jakarta/ISAPI/isapi_redirector/1.2.32 () initialized
[Fri Sep 30 15:06:08.429 2011] [3456:1540] [debug]
HttpFilterProc::jk_isapi_plugin.c (1891): Filter started
[Fri Sep 30 15:06:08.429 2011] [3456:1540] [debug]
map_uri_to_worker_ext::jk_uri_worker_map.c (1036): Attempting to map URI
'/b0621s008/jci/' from 4 maps
[Fri Sep 30 15:06:08.429 2011] [3456:1540] [debug]
find_match::jk_uri_worker_map.c (850): Attempting to map context URI
'/examples/*=worker1' source 'uriworkermap'
[Fri Sep 30 15:06:08.429 2011] [3456:1540] [debug]
find_match::jk_uri_worker_map.c (850): Attempting to map context URI
'/manager/*=worker1' source 'uriworkermap'
[Fri Sep 30 15:06:08.429 2011] [3456:1540] [debug]
find_match::jk_uri_worker_map.c (850): Attempting to map context URI
'/admin/*=worker1' source 'uriworkermap'
[Fri Sep 30 15:06:08.429 2011] [3456:1540] [debug]
find_match::jk_uri_worker_map.c (850): Attempting to map context URI
'/jci/*=worker1' source 'uriworkermap'
[Fri Sep 30 15:06:08.429 2011] [3456:1540] [debug]
find_match::jk_uri_worker_map.c (850): Attempting to map context URI
'/examples/*=worker1' source 'uriworkermap'
[Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
find_match::jk_uri_worker_map.c (850): Attempting to map context URI
'/manager/*=worker1' source 'uriworkermap'
[Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
find_match::jk_uri_worker_map.c (850): Attempting to map context URI
'/admin/*=worker1' source 'uriworkermap'
[Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
find_match::jk_uri_worker_map.c (850): Attempting to map context URI
'/jci/*=worker1' source 'uriworkermap'
[Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
find_match::jk_uri_worker_map.c (863): Found a wildchar match
'/jci/*=worker1'
[Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
HttpFilterProc::jk_isapi_plugin.c (1978): check if [/jci/] points to the
web-inf directory
[Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
HttpFilterProc::jk_isapi_plugin.c (1994): [/jci/] is a servlet url - should
redirect to worker1
[Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
HttpFilterProc::jk_isapi_plugin.c (2034): fowarding escaped URI [/jci/]
[Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug] wc_maintain::jk_worker.c
(339): Maintaining worker worker1
[Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3022): Reading extension header
HTTP_TOMCATWORKER0000000180000000: worker1
[Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3023): Reading extension header
HTTP_TOMCATWORKERIDX0000000180000000: 3
[Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3024): Reading extension header
HTTP_TOMCATURI0000000180000000: /jci/
[Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3025): Reading extension header
HTTP_TOMCATQUERY0000000180000000: (null)
[Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3085): Applying service extensions
[Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
Connection : Keep-Alive
[Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
Content-Length : 0
[Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header Accept
: */*
[Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
Accept-Encoding : gzip, deflate
[Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
Accept-Language : de-DE
[Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3309):
[Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header Host :
b0621s008
[Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
User-Agent : Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64;
Trident/4.0; SLCC2; .NET CLR 2.0.50727)
[Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3344): Service protocol=HTTP/1.1
method=GET host=fe80::3d83:4ce1:6ac:83dd%11 addr=fe80::3d83:4ce1:6ac:83dd%11
name=b0621s008 port=80 auth=Negotiate user=EUBATT\bamelas uri=/jci/
[Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
init_ws_service::jk_isapi_plugin.c (3356): Service request headers=8
attributes=0 chunked=no content-length=0 available=0
[Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
wc_get_worker_for_name::jk_worker.c (116): found a worker worker1
[Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
HttpExtensionProc::jk_isapi_plugin.c (2228): got a worker for name worker1
[Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
ajp_get_endpoint::jk_ajp_common.c (3161): acquired connection pool slot=0
after 0 retries
[Fri Sep 30 15:06:08.460 2011] [3456:1540] [error]
ajp_marshal_into_msgb::jk_ajp_common.c (469): failed appending the header
value
[Fri Sep 30 15:06:08.460 2011] [3456:1540] [info]
ajp_service::jk_ajp_common.c (2431): Creating AJP message failed, without
recovery
[Fri Sep 30 15:06:08.460 2011] [3456:1540] [error]
HttpExtensionProc::jk_isapi_plugin.c (2261): service() failed with http
error 413
[Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
ajp_reset_endpoint::jk_ajp_common.c (807): (worker1) resetting endpoint with
socket -1 (socket shutdown)
[Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug] ajp_done::jk_ajp_common.c
(3078): recycling connection pool slot=0 for worker worker1
-----Ursprüngliche Nachricht-----
Von: André Warnier [mailto:aw@ice-sa.com]
Gesendet: Mittwoch, 5. Oktober 2011 11:44
An: Tomcat Users List
Betreff: Re: AW: ISAPI Redicect - Request Entitiy too large
Addendum : can you increase the log level of isapi_redirect on the IIS
server, and try again ? it may show us a bit more about what is happening.
André Warnier wrote:
> Alexander Diedler wrote:
>> Hello,
>> We use the IIS integrated (Windows) domain authentication, which is
>> passed
>> to the Tomcat and then we check the given String with our user
>> database in
>> the app and if username and password match, the user was "automatically"
>> logged in (SSO).
>>
>
> Ok, basically thanks. I just wanted to know if the NTLM authentication
> dialog could explain some extra-large headers.
> But in this case, apparently not, since the authentication dialog
> happens between the browser and IIS, and should not even be seen in
Tomcat.
> (Apart from the final "Authorization:" header).
>
> One item in your above explanation does not fit : "username and
> password" cannot be. There is no way that the IIS authentication would
> produce a user password that you can pass on to Tomcat. Userid yes,
> password no.
> (But it does not matter for the current issue).
>
> Anyway, what about a difference between the workstations for which it
> happens, and the ones for which it does not ? any visible OS/browser
> difference ?
>
>
>> Greetings
>> Alexander
>> -----Ursprüngliche Nachricht-----
>> Von: André Warnier [mailto:aw@ice-sa.com] Gesendet: Mittwoch, 5.
>> Oktober 2011 10:15
>> An: Tomcat Users List
>> Betreff: Re: ISAPI Redicect - Request Entitiy too large
>>
>> Alexander Diedler wrote:
>>> Hello @ll,
>>>
>>> I have installed a new Windows 2008 R2 x64 Server with IIS7 and Tomcat
>>> 6.0.32 x64 Edition. We use SSO Authentication from IIS to the Tomcat.
>>
>> Which SSO mechanism ?
>>
>>> Suddenly, we got on some clients, but not on every client (that´s
>>> stupid!) the following error:
>>>
>>>
>>>
>>> Request Entity Too large!
>>
>> which does look strange, considering that there is a "Content-length: 0"
>> header below.
>>
>> It looks a bit as if a HTTP *header* in the request was too large.
>>
>> Repeat question : can you be a bot more specific about the authentication
>> mechanism used ?
>> Also, if you can determine a difference, what is the difference
>> between the
>> clients where it happens, and the ones where it does not ?
>>
>>
>>> The HTTP method does not allow the data transmitted, or the data volume
>>> exceeds the capacity limit.
>>>
>>>
>>> Jakarata/ISAPI/isapi_redirector/1.2.32 ()
>>>
>>>
>>>
>>> The isapi.log contains the following messages in debug mode:
>>>
>>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
>>> find_match::jk_uri_worker_map.c (863): Found a wildchar match
>>> '/jci/*=worker1'
>>>
>>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
>>> HttpFilterProc::jk_isapi_plugin.c (1978): check if [/jci/] points to the
>>> web-inf directory
>>>
>>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
>>> HttpFilterProc::jk_isapi_plugin.c (1994): [/jci/] is a servlet url -
>> should
>>> redirect to worker1
>>>
>>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
>>> HttpFilterProc::jk_isapi_plugin.c (2034): fowarding escaped URI [/jci/]
>>>
>>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
>> wc_maintain::jk_worker.c
>>> (339): Maintaining worker worker1
>>>
>>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
>>> init_ws_service::jk_isapi_plugin.c (3022): Reading extension header
>>> HTTP_TOMCATWORKER0000000180000000: worker1
>>>
>>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
>>> init_ws_service::jk_isapi_plugin.c (3023): Reading extension header
>>> HTTP_TOMCATWORKERIDX0000000180000000: 3
>>>
>>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
>>> init_ws_service::jk_isapi_plugin.c (3024): Reading extension header
>>> HTTP_TOMCATURI0000000180000000: /jci/
>>>
>>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
>>> init_ws_service::jk_isapi_plugin.c (3025): Reading extension header
>>> HTTP_TOMCATQUERY0000000180000000: (null)
>>>
>>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
>>> init_ws_service::jk_isapi_plugin.c (3085): Applying service extensions
>>>
>>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
>>> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
>>> Connection : Keep-Alive
>>>
>>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
>>> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
>>> Content-Length : 0
>>>
>>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
>>> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
>> Accept
>>> : */*
>>>
>>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
>>> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
>>> Accept-Encoding : gzip, deflate
>>>
>>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
>>> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
>>> Accept-Language : de-DE
>>>
>>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
>>> init_ws_service::jk_isapi_plugin.c (3309):
>>>
>>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
>>> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
>>> Host
>> :
>>> b0621s008
>>>
>>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
>>> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
>>> User-Agent : Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64;
>>> Trident/4.0; SLCC2; .NET CLR 2.0.50727)
>>>
>>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
>>> init_ws_service::jk_isapi_plugin.c (3344): Service protocol=HTTP/1.1
>>> method=GET host=fe80::3d83:4ce1:6ac:83dd%11
>> addr=fe80::3d83:4ce1:6ac:83dd%11
>>> name=b0621s008 port=80 auth=Negotiate user=DOMAIN\USERNAME uri=/jci/
>>>
>>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
>>> init_ws_service::jk_isapi_plugin.c (3356): Service request headers=8
>>> attributes=0 chunked=no content-length=0 available=0
>>>
>>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
>>> wc_get_worker_for_name::jk_worker.c (116): found a worker worker1
>>>
>>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
>>> HttpExtensionProc::jk_isapi_plugin.c (2228): got a worker for name
>>> worker1
>>>
>>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
>>> ajp_get_endpoint::jk_ajp_common.c (3161): acquired connection pool
>>> slot=0
>>> after 0 retries
>>>
>>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [error]
>>> ajp_marshal_into_msgb::jk_ajp_common.c (469): failed appending the
>>> header
>>> value
>>>
>>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [info]
>>> ajp_service::jk_ajp_common.c (2431): Creating AJP message failed,
>>> without
>>> recovery
>>>
>>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [error]
>>> HttpExtensionProc::jk_isapi_plugin.c (2261): service() failed with http
>>> error 413
>>>
>>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
>>> ajp_reset_endpoint::jk_ajp_common.c (807): (worker1) resetting endpoint
>> with
>>> socket -1 (socket shutdown)
>>>
>>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
>> ajp_done::jk_ajp_common.c
>>> (3078): recycling connection pool slot=0 for worker worker1
>>>
>>>
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>> For additional commands, e-mail: users-help@tomcat.apache.org
>>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: AW: ISAPI Redicect - Request Entitiy too large
Posted by André Warnier <aw...@ice-sa.com>.
Addendum : can you increase the log level of isapi_redirect on the IIS server, and try
again ? it may show us a bit more about what is happening.
André Warnier wrote:
> Alexander Diedler wrote:
>> Hello,
>> We use the IIS integrated (Windows) domain authentication, which is
>> passed
>> to the Tomcat and then we check the given String with our user
>> database in
>> the app and if username and password match, the user was "automatically"
>> logged in (SSO).
>>
>
> Ok, basically thanks. I just wanted to know if the NTLM authentication
> dialog could explain some extra-large headers.
> But in this case, apparently not, since the authentication dialog
> happens between the browser and IIS, and should not even be seen in Tomcat.
> (Apart from the final "Authorization:" header).
>
> One item in your above explanation does not fit : "username and
> password" cannot be. There is no way that the IIS authentication would
> produce a user password that you can pass on to Tomcat. Userid yes,
> password no.
> (But it does not matter for the current issue).
>
> Anyway, what about a difference between the workstations for which it
> happens, and the ones for which it does not ? any visible OS/browser
> difference ?
>
>
>> Greetings
>> Alexander
>> -----Ursprüngliche Nachricht-----
>> Von: André Warnier [mailto:aw@ice-sa.com] Gesendet: Mittwoch, 5.
>> Oktober 2011 10:15
>> An: Tomcat Users List
>> Betreff: Re: ISAPI Redicect - Request Entitiy too large
>>
>> Alexander Diedler wrote:
>>> Hello @ll,
>>>
>>> I have installed a new Windows 2008 R2 x64 Server with IIS7 and Tomcat
>>> 6.0.32 x64 Edition. We use SSO Authentication from IIS to the Tomcat.
>>
>> Which SSO mechanism ?
>>
>>> Suddenly, we got on some clients, but not on every client (that´s
>>> stupid!) the following error:
>>>
>>>
>>>
>>> Request Entity Too large!
>>
>> which does look strange, considering that there is a "Content-length: 0"
>> header below.
>>
>> It looks a bit as if a HTTP *header* in the request was too large.
>>
>> Repeat question : can you be a bot more specific about the authentication
>> mechanism used ?
>> Also, if you can determine a difference, what is the difference
>> between the
>> clients where it happens, and the ones where it does not ?
>>
>>
>>> The HTTP method does not allow the data transmitted, or the data volume
>>> exceeds the capacity limit.
>>>
>>>
>>> Jakarata/ISAPI/isapi_redirector/1.2.32 ()
>>>
>>>
>>>
>>> The isapi.log contains the following messages in debug mode:
>>>
>>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
>>> find_match::jk_uri_worker_map.c (863): Found a wildchar match
>>> '/jci/*=worker1'
>>>
>>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
>>> HttpFilterProc::jk_isapi_plugin.c (1978): check if [/jci/] points to the
>>> web-inf directory
>>>
>>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
>>> HttpFilterProc::jk_isapi_plugin.c (1994): [/jci/] is a servlet url -
>> should
>>> redirect to worker1
>>>
>>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
>>> HttpFilterProc::jk_isapi_plugin.c (2034): fowarding escaped URI [/jci/]
>>>
>>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
>> wc_maintain::jk_worker.c
>>> (339): Maintaining worker worker1
>>>
>>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
>>> init_ws_service::jk_isapi_plugin.c (3022): Reading extension header
>>> HTTP_TOMCATWORKER0000000180000000: worker1
>>>
>>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
>>> init_ws_service::jk_isapi_plugin.c (3023): Reading extension header
>>> HTTP_TOMCATWORKERIDX0000000180000000: 3
>>>
>>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
>>> init_ws_service::jk_isapi_plugin.c (3024): Reading extension header
>>> HTTP_TOMCATURI0000000180000000: /jci/
>>>
>>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
>>> init_ws_service::jk_isapi_plugin.c (3025): Reading extension header
>>> HTTP_TOMCATQUERY0000000180000000: (null)
>>>
>>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
>>> init_ws_service::jk_isapi_plugin.c (3085): Applying service extensions
>>>
>>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
>>> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
>>> Connection : Keep-Alive
>>>
>>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
>>> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
>>> Content-Length : 0
>>>
>>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
>>> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
>> Accept
>>> : */*
>>>
>>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
>>> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
>>> Accept-Encoding : gzip, deflate
>>>
>>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
>>> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
>>> Accept-Language : de-DE
>>>
>>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
>>> init_ws_service::jk_isapi_plugin.c (3309):
>>>
>>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
>>> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
>>> Host
>> :
>>> b0621s008
>>>
>>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
>>> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
>>> User-Agent : Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64;
>>> Trident/4.0; SLCC2; .NET CLR 2.0.50727)
>>>
>>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
>>> init_ws_service::jk_isapi_plugin.c (3344): Service protocol=HTTP/1.1
>>> method=GET host=fe80::3d83:4ce1:6ac:83dd%11
>> addr=fe80::3d83:4ce1:6ac:83dd%11
>>> name=b0621s008 port=80 auth=Negotiate user=DOMAIN\USERNAME uri=/jci/
>>>
>>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
>>> init_ws_service::jk_isapi_plugin.c (3356): Service request headers=8
>>> attributes=0 chunked=no content-length=0 available=0
>>>
>>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
>>> wc_get_worker_for_name::jk_worker.c (116): found a worker worker1
>>>
>>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
>>> HttpExtensionProc::jk_isapi_plugin.c (2228): got a worker for name
>>> worker1
>>>
>>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
>>> ajp_get_endpoint::jk_ajp_common.c (3161): acquired connection pool
>>> slot=0
>>> after 0 retries
>>>
>>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [error]
>>> ajp_marshal_into_msgb::jk_ajp_common.c (469): failed appending the
>>> header
>>> value
>>>
>>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [info]
>>> ajp_service::jk_ajp_common.c (2431): Creating AJP message failed,
>>> without
>>> recovery
>>>
>>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [error]
>>> HttpExtensionProc::jk_isapi_plugin.c (2261): service() failed with http
>>> error 413
>>>
>>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
>>> ajp_reset_endpoint::jk_ajp_common.c (807): (worker1) resetting endpoint
>> with
>>> socket -1 (socket shutdown)
>>>
>>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
>> ajp_done::jk_ajp_common.c
>>> (3078): recycling connection pool slot=0 for worker worker1
>>>
>>>
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>> For additional commands, e-mail: users-help@tomcat.apache.org
>>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: AW: ISAPI Redicect - Request Entitiy too large
Posted by André Warnier <aw...@ice-sa.com>.
Alexander Diedler wrote:
> Hello,
> We use the IIS integrated (Windows) domain authentication, which is passed
> to the Tomcat and then we check the given String with our user database in
> the app and if username and password match, the user was "automatically"
> logged in (SSO).
>
Ok, basically thanks. I just wanted to know if the NTLM authentication dialog could
explain some extra-large headers.
But in this case, apparently not, since the authentication dialog happens between the
browser and IIS, and should not even be seen in Tomcat.
(Apart from the final "Authorization:" header).
One item in your above explanation does not fit : "username and password" cannot be.
There is no way that the IIS authentication would produce a user password that you can
pass on to Tomcat. Userid yes, password no.
(But it does not matter for the current issue).
Anyway, what about a difference between the workstations for which it happens, and the
ones for which it does not ? any visible OS/browser difference ?
> Greetings
> Alexander
>
> -----Ursprüngliche Nachricht-----
> Von: André Warnier [mailto:aw@ice-sa.com]
> Gesendet: Mittwoch, 5. Oktober 2011 10:15
> An: Tomcat Users List
> Betreff: Re: ISAPI Redicect - Request Entitiy too large
>
> Alexander Diedler wrote:
>> Hello @ll,
>>
>> I have installed a new Windows 2008 R2 x64 Server with IIS7 and Tomcat
>> 6.0.32 x64 Edition. We use SSO Authentication from IIS to the Tomcat.
>
> Which SSO mechanism ?
>
>> Suddenly, we got on some clients, but not on every client (that´s
>> stupid!) the following error:
>>
>>
>>
>> Request Entity Too large!
>
> which does look strange, considering that there is a "Content-length: 0"
> header below.
>
> It looks a bit as if a HTTP *header* in the request was too large.
>
> Repeat question : can you be a bot more specific about the authentication
> mechanism used ?
> Also, if you can determine a difference, what is the difference between the
> clients where it happens, and the ones where it does not ?
>
>
>> The HTTP method does not allow the data transmitted, or the data volume
>> exceeds the capacity limit.
>>
>>
>>
>> Jakarata/ISAPI/isapi_redirector/1.2.32 ()
>>
>>
>>
>> The isapi.log contains the following messages in debug mode:
>>
>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
>> find_match::jk_uri_worker_map.c (863): Found a wildchar match
>> '/jci/*=worker1'
>>
>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
>> HttpFilterProc::jk_isapi_plugin.c (1978): check if [/jci/] points to the
>> web-inf directory
>>
>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
>> HttpFilterProc::jk_isapi_plugin.c (1994): [/jci/] is a servlet url -
> should
>> redirect to worker1
>>
>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
>> HttpFilterProc::jk_isapi_plugin.c (2034): fowarding escaped URI [/jci/]
>>
>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
> wc_maintain::jk_worker.c
>> (339): Maintaining worker worker1
>>
>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
>> init_ws_service::jk_isapi_plugin.c (3022): Reading extension header
>> HTTP_TOMCATWORKER0000000180000000: worker1
>>
>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
>> init_ws_service::jk_isapi_plugin.c (3023): Reading extension header
>> HTTP_TOMCATWORKERIDX0000000180000000: 3
>>
>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
>> init_ws_service::jk_isapi_plugin.c (3024): Reading extension header
>> HTTP_TOMCATURI0000000180000000: /jci/
>>
>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
>> init_ws_service::jk_isapi_plugin.c (3025): Reading extension header
>> HTTP_TOMCATQUERY0000000180000000: (null)
>>
>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
>> init_ws_service::jk_isapi_plugin.c (3085): Applying service extensions
>>
>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
>> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
>> Connection : Keep-Alive
>>
>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
>> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
>> Content-Length : 0
>>
>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
>> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
> Accept
>> : */*
>>
>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
>> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
>> Accept-Encoding : gzip, deflate
>>
>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
>> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
>> Accept-Language : de-DE
>>
>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
>> init_ws_service::jk_isapi_plugin.c (3309):
>>
>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
>> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header Host
> :
>> b0621s008
>>
>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
>> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
>> User-Agent : Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64;
>> Trident/4.0; SLCC2; .NET CLR 2.0.50727)
>>
>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
>> init_ws_service::jk_isapi_plugin.c (3344): Service protocol=HTTP/1.1
>> method=GET host=fe80::3d83:4ce1:6ac:83dd%11
> addr=fe80::3d83:4ce1:6ac:83dd%11
>> name=b0621s008 port=80 auth=Negotiate user=DOMAIN\USERNAME uri=/jci/
>>
>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
>> init_ws_service::jk_isapi_plugin.c (3356): Service request headers=8
>> attributes=0 chunked=no content-length=0 available=0
>>
>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
>> wc_get_worker_for_name::jk_worker.c (116): found a worker worker1
>>
>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
>> HttpExtensionProc::jk_isapi_plugin.c (2228): got a worker for name worker1
>>
>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
>> ajp_get_endpoint::jk_ajp_common.c (3161): acquired connection pool slot=0
>> after 0 retries
>>
>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [error]
>> ajp_marshal_into_msgb::jk_ajp_common.c (469): failed appending the header
>> value
>>
>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [info]
>> ajp_service::jk_ajp_common.c (2431): Creating AJP message failed, without
>> recovery
>>
>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [error]
>> HttpExtensionProc::jk_isapi_plugin.c (2261): service() failed with http
>> error 413
>>
>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
>> ajp_reset_endpoint::jk_ajp_common.c (807): (worker1) resetting endpoint
> with
>> socket -1 (socket shutdown)
>>
>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
> ajp_done::jk_ajp_common.c
>> (3078): recycling connection pool slot=0 for worker worker1
>>
>>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
AW: ISAPI Redicect - Request Entitiy too large
Posted by Alexander Diedler <ad...@tecracer.de>.
Hello,
We use the IIS integrated (Windows) domain authentication, which is passed
to the Tomcat and then we check the given String with our user database in
the app and if username and password match, the user was "automatically"
logged in (SSO).
Greetings
Alexander
-----Ursprüngliche Nachricht-----
Von: André Warnier [mailto:aw@ice-sa.com]
Gesendet: Mittwoch, 5. Oktober 2011 10:15
An: Tomcat Users List
Betreff: Re: ISAPI Redicect - Request Entitiy too large
Alexander Diedler wrote:
> Hello @ll,
>
> I have installed a new Windows 2008 R2 x64 Server with IIS7 and Tomcat
> 6.0.32 x64 Edition. We use SSO Authentication from IIS to the Tomcat.
Which SSO mechanism ?
> Suddenly, we got on some clients, but not on every client (that´s
> stupid!) the following error:
>
>
>
> Request Entity Too large!
which does look strange, considering that there is a "Content-length: 0"
header below.
It looks a bit as if a HTTP *header* in the request was too large.
Repeat question : can you be a bot more specific about the authentication
mechanism used ?
Also, if you can determine a difference, what is the difference between the
clients where it happens, and the ones where it does not ?
>
> The HTTP method does not allow the data transmitted, or the data volume
> exceeds the capacity limit.
>
>
>
> Jakarata/ISAPI/isapi_redirector/1.2.32 ()
>
>
>
> The isapi.log contains the following messages in debug mode:
>
> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
> find_match::jk_uri_worker_map.c (863): Found a wildchar match
> '/jci/*=worker1'
>
> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
> HttpFilterProc::jk_isapi_plugin.c (1978): check if [/jci/] points to the
> web-inf directory
>
> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
> HttpFilterProc::jk_isapi_plugin.c (1994): [/jci/] is a servlet url -
should
> redirect to worker1
>
> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
> HttpFilterProc::jk_isapi_plugin.c (2034): fowarding escaped URI [/jci/]
>
> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
wc_maintain::jk_worker.c
> (339): Maintaining worker worker1
>
> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3022): Reading extension header
> HTTP_TOMCATWORKER0000000180000000: worker1
>
> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3023): Reading extension header
> HTTP_TOMCATWORKERIDX0000000180000000: 3
>
> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3024): Reading extension header
> HTTP_TOMCATURI0000000180000000: /jci/
>
> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3025): Reading extension header
> HTTP_TOMCATQUERY0000000180000000: (null)
>
> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3085): Applying service extensions
>
> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
> Connection : Keep-Alive
>
> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
> Content-Length : 0
>
> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
Accept
> : */*
>
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
> Accept-Encoding : gzip, deflate
>
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
> Accept-Language : de-DE
>
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3309):
>
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header Host
:
> b0621s008
>
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
> User-Agent : Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64;
> Trident/4.0; SLCC2; .NET CLR 2.0.50727)
>
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3344): Service protocol=HTTP/1.1
> method=GET host=fe80::3d83:4ce1:6ac:83dd%11
addr=fe80::3d83:4ce1:6ac:83dd%11
> name=b0621s008 port=80 auth=Negotiate user=DOMAIN\USERNAME uri=/jci/
>
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3356): Service request headers=8
> attributes=0 chunked=no content-length=0 available=0
>
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
> wc_get_worker_for_name::jk_worker.c (116): found a worker worker1
>
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
> HttpExtensionProc::jk_isapi_plugin.c (2228): got a worker for name worker1
>
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
> ajp_get_endpoint::jk_ajp_common.c (3161): acquired connection pool slot=0
> after 0 retries
>
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [error]
> ajp_marshal_into_msgb::jk_ajp_common.c (469): failed appending the header
> value
>
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [info]
> ajp_service::jk_ajp_common.c (2431): Creating AJP message failed, without
> recovery
>
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [error]
> HttpExtensionProc::jk_isapi_plugin.c (2261): service() failed with http
> error 413
>
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
> ajp_reset_endpoint::jk_ajp_common.c (807): (worker1) resetting endpoint
with
> socket -1 (socket shutdown)
>
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
ajp_done::jk_ajp_common.c
> (3078): recycling connection pool slot=0 for worker worker1
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: ISAPI Redicect - Request Entitiy too large
Posted by André Warnier <aw...@ice-sa.com>.
Alexander Diedler wrote:
> Hello @ll,
>
> I have installed a new Windows 2008 R2 x64 Server with IIS7 and Tomcat
> 6.0.32 x64 Edition. We use SSO Authentication from IIS to the Tomcat.
Which SSO mechanism ?
> Suddenly, we got on some clients, but not on every client (that´s stupid!)
> the following error:
>
>
>
> Request Entity Too large!
which does look strange, considering that there is a "Content-length: 0" header below.
It looks a bit as if a HTTP *header* in the request was too large.
Repeat question : can you be a bot more specific about the authentication mechanism used ?
Also, if you can determine a difference, what is the difference between the clients where
it happens, and the ones where it does not ?
>
> The HTTP method does not allow the data transmitted, or the data volume
> exceeds the capacity limit.
>
>
>
> Jakarata/ISAPI/isapi_redirector/1.2.32 ()
>
>
>
> The isapi.log contains the following messages in debug mode:
>
> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
> find_match::jk_uri_worker_map.c (863): Found a wildchar match
> '/jci/*=worker1'
>
> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
> HttpFilterProc::jk_isapi_plugin.c (1978): check if [/jci/] points to the
> web-inf directory
>
> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
> HttpFilterProc::jk_isapi_plugin.c (1994): [/jci/] is a servlet url - should
> redirect to worker1
>
> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
> HttpFilterProc::jk_isapi_plugin.c (2034): fowarding escaped URI [/jci/]
>
> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug] wc_maintain::jk_worker.c
> (339): Maintaining worker worker1
>
> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3022): Reading extension header
> HTTP_TOMCATWORKER0000000180000000: worker1
>
> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3023): Reading extension header
> HTTP_TOMCATWORKERIDX0000000180000000: 3
>
> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3024): Reading extension header
> HTTP_TOMCATURI0000000180000000: /jci/
>
> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3025): Reading extension header
> HTTP_TOMCATQUERY0000000180000000: (null)
>
> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3085): Applying service extensions
>
> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
> Connection : Keep-Alive
>
> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
> Content-Length : 0
>
> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header Accept
> : */*
>
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
> Accept-Encoding : gzip, deflate
>
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
> Accept-Language : de-DE
>
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3309):
>
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header Host :
> b0621s008
>
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header
> User-Agent : Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64;
> Trident/4.0; SLCC2; .NET CLR 2.0.50727)
>
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3344): Service protocol=HTTP/1.1
> method=GET host=fe80::3d83:4ce1:6ac:83dd%11 addr=fe80::3d83:4ce1:6ac:83dd%11
> name=b0621s008 port=80 auth=Negotiate user=DOMAIN\USERNAME uri=/jci/
>
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
> init_ws_service::jk_isapi_plugin.c (3356): Service request headers=8
> attributes=0 chunked=no content-length=0 available=0
>
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
> wc_get_worker_for_name::jk_worker.c (116): found a worker worker1
>
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
> HttpExtensionProc::jk_isapi_plugin.c (2228): got a worker for name worker1
>
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
> ajp_get_endpoint::jk_ajp_common.c (3161): acquired connection pool slot=0
> after 0 retries
>
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [error]
> ajp_marshal_into_msgb::jk_ajp_common.c (469): failed appending the header
> value
>
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [info]
> ajp_service::jk_ajp_common.c (2431): Creating AJP message failed, without
> recovery
>
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [error]
> HttpExtensionProc::jk_isapi_plugin.c (2261): service() failed with http
> error 413
>
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug]
> ajp_reset_endpoint::jk_ajp_common.c (807): (worker1) resetting endpoint with
> socket -1 (socket shutdown)
>
> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug] ajp_done::jk_ajp_common.c
> (3078): recycling connection pool slot=0 for worker worker1
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org