Hi, all:
After successfully testing of the CoSign proxy cookie on the test CoSign
server, we updated the production CoSign server with the same settings.
However, the proxy cookie files are not working now.
There are two major problems:
1. inside the /var/cosign/proxy/ folder on app server, the proxy cookie
file names are not in "cosign-<cosign service name>=<cosign cookie value>"
format, but rather consist of all digits. Furthermore the file sizes are
all zero.
*$ cd /var/cosign/proxy*
*$ ls -al*
*total 28*
*drwxr-xr-x. 2 ctools root 24576 Jan 6 11:09 .*
*drwxr-xr-x. 4 root root 4096 Nov 18 14:45 ..*
*-rw-r--r--. 1 ctools ctools 0 Jan 6 08:24 52caae876eb7b.28178*
*-rw-r--r--. 1 ctools ctools 0 Jan 6 11:09 52cad541e9632.32499*
*-rw-r--r--. 1 ctools ctools 0 Jan 6 11:09 52cad55379078.32498*
*2. *I found the following error messages from the Apache error log:
...
[Mon Jan 06 16:34:42 2014] [error] mod_cosign: netretr_proxy: 443 RETR:
(.+\\.mpathways|.+)\\.dsc\\.umich\\.edu cannot retrieve cookies.
[Mon Jan 06 16:34:42 2014] [error] mod_cosign: choose_conn: can't retrieve
proxy cookies
...
We have double checked the following settings are on all app servers:
CosignGetProxyCookies On
CosignProxyDB /var/cosign/proxy
------------------------------------------------------------
Any suggestions? Where is the netretr_proxy module located? I am curious as
for where the regular expression "(.+\\.mpathways|.+)\\.dsc\\.
umich\\.edu" is set?
Thanks,
- Zhen
------------------------------------------------------------------------------
Rapidly troubleshoot problems before they affect your business. Most IT
organizations don't have a clear picture of how application performance
affects their revenue. With AppDynamics, you get 100% visibility into your
Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro!
http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk
_______________________________________________
Cosign-discuss mailing list
Cosign-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/cosign-discuss
