You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2007/05/23 18:39:49 UTC

DO NOT REPLY [Bug 42498] New: - LDAP induced Internal Server Error returned to IE browser

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=42498>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=42498

           Summary: LDAP induced Internal Server Error returned to IE
                    browser
           Product: Apache httpd-2
           Version: 2.2.4
          Platform: HP
        OS/Version: Windows XP
            Status: NEW
          Severity: major
          Priority: P3
         Component: mod_authn_ldap
        AssignedTo: bugs@httpd.apache.org
        ReportedBy: ron.cozad@toro.com


Found 2 cases that cause internal server errors to be returned and the error in 
the log file
[LDAP: ldap_simple_bind_s() failed][Unavailable]

If you do a refresh in either case all is well for awhile.

Case 1:  If the user is idle for 10 minutes, the next page request results in 
the error.  Do a page refresh, all is well until the next idle time exceeds 10 
minutes.

Case 2:  Most if not all new users to this application get the error upon first 
login.  Do a refresh it is fine.  And most logins in after that are fine.

Clarification:  I am actually using mod_authnz_ldap [not available in the 
component pulldown]

I am specifying the directives in a location tag in http.conf.  I did not 
specify any mod_ldap directives for cache, left to the defaults.

Using Basic Authentication with the browser providing the login challenge.

Most of the time having to do a refresh is confusing and just a nusiance.  But 
if the form takes longer than 10 minutes to fill out because of interruptions, 
it fails.  Less than happy campers at that point.

I would like to stay with 2.2.x and not back down to 2.0.x and switch to muquit 
ldap like they have done on other apps here.

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


DO NOT REPLY [Bug 42498] - LDAP induced Internal Server Error returned to IE browser

Posted by bu...@apache.org.
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=42498>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=42498





------- Additional Comments From trawick@apache.org  2007-05-24 10:57 -------
sounds like a defect independent of your specific configuration; if an ldap
operation is attempted on an old connection and we find that the connection is
broken, we must clean it up and try a new connection; only if the new connection
failed would the user receive an error

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


DO NOT REPLY [Bug 42498] - LDAP induced Internal Server Error returned to IE browser

Posted by bu...@apache.org.
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=42498>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=42498


moz@liebesgedichte.siteware.ch changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |moz@liebesgedichte.siteware.
                   |                            |ch




------- Additional Comments From moz@liebesgedichte.siteware.ch  2007-05-25 11:07 -------
Yes, bug 39095 is also about this very issue.

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


DO NOT REPLY [Bug 42498] - LDAP induced Internal Server Error returned to IE browser

Posted by bu...@apache.org.
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=42498>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=42498





------- Additional Comments From ron.cozad@toro.com  2007-05-24 07:59 -------
I found additional information from our infrastructure team.  I was not going 
directly against the Sun One Directories.  I was going against an F5 load 
balancer.  Further it was configured as "observer-member", which means it was 
not supporting persistent connections.

For now I am by-passing the F5 and going directly to the Sun Ones and mod_ldap 
is working very well.

We will be putting a persistence profile into the F5 for LDAP connections and 
check if mod_ldap is fine.

I will leave it to you whether it is a bug that mod_ldap connection pool 
misbehaved with a F5 load balancer without persistence.  If you say no, then 
close.  If you say yes I will be glad to help you test a solution.

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org