You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2006/07/28 12:52:00 UTC
DO NOT REPLY [Bug 40134] New: - multiple set cookie in mod_proxy doesn't work anymore compare to httpd-2.2.0
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=40134>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=40134
Summary: multiple set cookie in mod_proxy doesn't work anymore
compare to httpd-2.2.0
Product: Apache httpd-2
Version: 2.2.2
Platform: PC
OS/Version: Linux
Status: NEW
Severity: regression
Priority: P2
Component: mod_proxy
AssignedTo: bugs@httpd.apache.org
ReportedBy: fred.bregier@free.fr
We used httpd-2.2.0 as a reverse proxy in MPM mode.
Behind the reverse proxy are :
- first one Alteon (load balancer) which sets one cookie
(mode cookie-insert to keep the session on the same web server behind
for one particular user)
- second (after the Alteon) several web servers (Apache+PHP)
which are setting too a cookie (PHP_SESSID).
Everything works fine in apache 2.2.0.
When we upgrade to apache 2.2.2 (due to one referenced bug of apache 2.2.0
of segmentation fault every 2 to 3 hours in MPM mode),
we lost the first cookie (Alteon cookie) but still have the
PHP cookie. Of course, our users had a big problem since
due to the lack of this Alteon cookie, they changed for every page
of PHP server, so not getting the sticky session as supposed.
We got back to the apache 2.2.0 and everything is working well
(exactly the same configuration, except the level of binary).
I presume it is a regression capability of apache 2.2.2 compares
to apache 2.2.0.
Frederic
--
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
DO NOT REPLY [Bug 40134] - multiple set cookie in mod_proxy doesn't work anymore compare to httpd-2.2.0
Posted by bu...@apache.org.
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=40134>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=40134
------- Additional Comments From rpluem@apache.org 2007-01-24 14:04 -------
Please provide a network sniff when accessing your second alteon directly
(http://second-alteon:80/). This is important for trying to reproduce the issue.
>From first glance the changes between 2.2.0 and 2.2.2 give me no idea why this
could happen.
--
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
DO NOT REPLY [Bug 40134] - multiple set cookie in mod_proxy doesn't work anymore compare to httpd-2.2.0
Posted by bu...@apache.org.
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=40134>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=40134
fred.bregier@free.fr changed:
What |Removed |Added
----------------------------------------------------------------------------
Severity|regression |critical
Version|2.2.2 |2.2.4
------- Additional Comments From fred.bregier@free.fr 2007-01-24 07:09 -------
I test against 2.2.2, 2.2.3 and 2.2.4, the same error is
still there. The synoptic is as follow :
1) First Alteon (load balancer) for proxy servers using a cookie
for affinity session (named PROXYCOOKIE).
2) Proxy server
Here is the configuration for all proxy server :
<VirtualHost *:8080>
ServerName aristote
DocumentRoot /tmp/
ProxyRequests off
ProxyBadHeader StartBody
ProxyPreserveHost On
ProxyTimeout 300
ProxyPass / http://second-alteon:80/
ProxyPassReverse / http://second-alteon:80/
</VirtualHost>
3) The second alteon load balance between PHP Servers,
setting a new cookie named PHPCOOKIE
4) The PHP server set a new cookie (PHPSESSID).
I see the first cookie (PROXYCOOKIE), the last one (PHPSESSID),
but never the second one (PHPCOOKIE). The problem is therefore
the second alteon change the web server from time to time,
broken the session affinity and the applications behind.
When I use apache 2.2.0, everything is OK (3 cookies from
the first time).
--
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
DO NOT REPLY [Bug 40134] - multiple set cookie in mod_proxy doesn't work anymore compare to httpd-2.2.0
Posted by bu...@apache.org.
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=40134>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=40134
------- Additional Comments From fred.bregier@free.fr 2006-07-29 08:38 -------
I didn't have access right now to my config but here is what I can write:
I used a tool (IBM Page Detailer) which traces the headers of the
requests. The construction is as follow :
- first a reverse proxy 2.2.x with compression enable
- passing to a reverse proxy cache 2.0.x
- passing to a load balancer (Alteon) which sets a cookie
- passing to one of the PHP web servers (1.3.x)
The reason of the first 2 proxies is that the first proxy is using
compression for all applications, and some of them do not accept
cache (different proxy conf) and some does, so the chaining.
Also we wanted to be able to change one conf without stopping
everything.
We used apache 2.2.x for compression since we need to use the mod_filter
to check if we are allowed to compress the message proxified
(for instance bug of IE when we compressed a PDF dynamic page).
We start 2 years ago with the mod_filter applied to apache 2.0.x,
then 2.1.x and now 2.2.x. Everything is ok there.
The conf of the reverse proxy is as follow and very standard (except the
compression part which makes it different than a standard reverse proxy) :
(mode MPM_Worker)
<VirtualHost default:80>
# Reverse proxy definition
ProxyRequests Off
ProxyPreserveHost On
ProxyBadHeader Ignore
ProxyPass / http://foo.example.com/
ProxyPassReverse / http://foo.example.com/
# Compression part (I don't have the code to read but the spirit is here)
FilterDeclare gzip CONTENT_SET
FilterProvider gzip resp=Content-Type $text/html
FilterChain gzip
</VirtualHost>
Then the trace from IBM Page Detailer is as follow :
- accessing directly to the load Balancer of PHP Web server:
"set-cookie ALTEONPHP=xxx" and "set-cookie PHP_SESSID=xxx"
OK
- accessing to cache reverse proxy (apache 2.0.x) (-> alteon next)
"set-cookie ALTEONPHP=xxx" and "set-cookie PHP_SESSID=xxx"
OK
- accessing to compression reverse proxy (apache 2.2.0) (-> cache RP next)
"set-cookie ALTEONPHP=xxx" and "set-cookie PHP_SESSID=xxx"
OK
- accessing to compression reverse proxy (apache 2.2.2) (-> cache RP next)
"set-cookie PHP_SESSID=xxx" only
KO since the user will change every time of PHP web server
so the lack of affinity session.
The configuration for apache 2.2.0 and apache 2.2.2 are exactly the
same, same option for building, ...
We had 2 years ago a similar problem (not with apache)
with a open source software based on perl. Its function
is to serve as a web portal with authentification wich makes
a reverse proxy with a single sign on feature.
This product was not able to accept more than 1 set-cookie
at a time. An upgrade of version just correct this situation.
At the time writing, I don't have any clue except the
change of version from 2.2.0 to 2.2.2.
Getting back to 2.2.0 just make the service back.
I have also tested with 2.1.0 and it is ok too.
Frederic
--
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
DO NOT REPLY [Bug 40134] - multiple set cookie in mod_proxy doesn't work anymore compare to httpd-2.2.0
Posted by bu...@apache.org.
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=40134>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=40134
------- Additional Comments From fred.bregier@free.fr 2007-01-26 01:24 -------
Created an attachment (id=19467)
--> (http://issues.apache.org/bugzilla/attachment.cgi?id=19467&action=view)
Network trace from Http sniffer (IBM Page detailer) to Alteon2 without httpd
2.2.4 : Status OK
Trace when access to first PHP page using the following network path :
alteon 2 -> 1 of the Apache+PHP.
2 set-cookie are visible :
Set-Cookie: PHPSESSID=a7a1d5f639f81daa131a1942817b5f36; path=/
Set-Cookie: PHPMONTREUIL=php2; path=/
This is OK.
So it confirms a bug in httpd 2.2.4 (also true for httpd 2.2.2 and 2.2.3).
--
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
DO NOT REPLY [Bug 40134] - multiple set cookie in mod_proxy doesn't work anymore compare to httpd-2.2.0
Posted by bu...@apache.org.
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=40134>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=40134
------- Additional Comments From fred.bregier@free.fr 2007-01-26 01:18 -------
Created an attachment (id=19464)
--> (http://issues.apache.org/bugzilla/attachment.cgi?id=19464&action=view)
Network trace from Http sniffer (IBM Page detailer) to Alteon1 with httpd 2.2.0
: Status OK
Trace when access to first PHP page using the following network path :
alteon1 -> 1 of the RP httpd 2.2.0 -> alteon 2 -> 1 of the Apache+PHP.
3 set-cookie are visible :
Set-Cookie: PHPSESSID=1dc60dea0ed60e4f6951f69fb9fbf7c6; path=/
Set-Cookie: PHPMONTREUIL=php2; path=/
Set-Cookie: RPMONTREUIL=rp1; path=/
This is OK.
--
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
DO NOT REPLY [Bug 40134] - multiple set cookie in mod_proxy doesn't work anymore compare to httpd-2.2.0
Posted by bu...@apache.org.
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=40134>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=40134
------- Additional Comments From nick@webthing.com 2007-09-08 08:48 -------
I've gone through all proxy changes in SVN between 2.0 and 2.2, and fail to see
any change that even touches the response headers. This leads me wonder if
there's something else happening in your proxy.
Does 2.2.6 work for you?
--
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
DO NOT REPLY [Bug 40134] - multiple set cookie in mod_proxy doesn't work anymore compare to httpd-2.2.0
Posted by bu...@apache.org.
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=40134>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=40134
------- Additional Comments From fred.bregier@free.fr 2007-01-26 01:22 -------
Created an attachment (id=19466)
--> (http://issues.apache.org/bugzilla/attachment.cgi?id=19466&action=view)
Network trace from Http sniffer (IBM Page detailer) to Alteon1 with httpd 2.2.4
: Status KO
Trace when access to first PHP page using the following network path :
alteon1 -> 1 of the RP httpd 2.2.4 -> alteon 2 -> 1 of the Apache+PHP.
2 set-cookie are visible :
Set-Cookie: PHPSESSID=1bd7f35c2b376125ca614390792b4d43; path=/
Set-Cookie: RPMONTREUIL=rp1; path=/
This is KO.
When I use a PHP application with a context, from time to time,
the second alteon change from one PHP server to another,
thus cancelling the session affinity and cancelling the application session.
--
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
DO NOT REPLY [Bug 40134] - multiple set cookie in mod_proxy doesn't work anymore compare to httpd-2.2.0
Posted by bu...@apache.org.
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=40134>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=40134
------- Additional Comments From fred.bregier@free.fr 2007-02-08 06:40 -------
Created an attachment (id=19546)
--> (http://issues.apache.org/bugzilla/attachment.cgi?id=19546&action=view)
Network trace from Http sniffer (IBM Page detailer) to Alteon1 with httpd 2.3.0
: Status OK
Network trace from Http sniffer (IBM Page detailer) to Alteon1 with httpd 2.3.0
: Status OK
Trace when access to first PHP page using the following network path :
alteon1 -> 1 of the RP httpd 2.3.0 -> alteon 2 -> 1 of the Apache+PHP.
3 set-cookie are visible :
Set-Cookie: PHPSESSID=1dc60dea0ed60e4f6951f69fb9fbf7c6; path=/
Set-Cookie: PHPMONTREUIL=php2; path=/
Set-Cookie: RPMONTREUIL=rp1; path=/
This is OK. So the bug is not in devel version 2.3.0 but still in 2.2.4.
There must be a patch applied in 2.3 that corrects the problem ?
--
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
DO NOT REPLY [Bug 40134] - multiple set cookie in mod_proxy doesn't work anymore compare to httpd-2.2.0
Posted by bu...@apache.org.
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=40134>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=40134
------- Additional Comments From fred.bregier@free.fr 2007-01-26 01:19 -------
Created an attachment (id=19465)
--> (http://issues.apache.org/bugzilla/attachment.cgi?id=19465&action=view)
Network trace from Http sniffer (IBM Page detailer) to Alteon2 with httpd 2.2.0
: Status OK
Trace when access to first PHP page using the following network path :
alteon 2 -> 1 of the Apache+PHP.
2 set-cookie are visible :
Set-Cookie: PHPSESSID=8aaec7f61126e08833f0dceecc6ced85; path=/
Set-Cookie: PHPMONTREUIL=php1; path=/
This is OK.
--
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
DO NOT REPLY [Bug 40134] - multiple set cookie in mod_proxy doesn't work anymore compare to httpd-2.2.0
Posted by bu...@apache.org.
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=40134>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=40134
rpluem@apache.org changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |NEEDINFO
------- Additional Comments From rpluem@apache.org 2006-07-28 13:28 -------
Can you please do a network sniff between your reverse proxy and your
loadbalancer with 2.2.2 (or better 2.2.3 if possible) running and a network
sniff between your client and your reverse proxy? Furthermore your configuration
(especially the proxy part) would be helpful.
--
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org