service() failed with http error 413 - error log message from isapi_redirect.log file
Hi, We are using HP Service Manager 9.2 system. The web client tier was set up using Windows 2008 R2 64-bit, IIS 7.5, Tomcat 6 and Isapi Redirector 1.2.30. The client is accessing the site by https because we had created a certificate and binded it to the IIS. Here are the steps that I used: 1. Go to IIS. 2. Go to Server Certificate. 3. Choose complete certificate request. 4. Upload the certificate file with the cer extension. 5. Go to Default Website. 6. Bind it to HTTPS and point it to the certificate that you just uploaded in #4. Everything is working fine. User can access the system through web. I noticed the following messages (attached fle ) from the isapi_redirect.log file. Would appreciate it if someone can provide additional information about the message and some ways/ideas on stopping them from occurring. My apologies if the information that I have provided is not complete. Let me know so I can add some more details. Thanks and regards! Ann[Sun Jul 15 21:12:23.658 2012] [696:2864] [error] ajp_marshal_into_msgb::jk_ajp_common.c (469): failed appending the header value [Sun Jul 15 21:12:23.705 2012] [696:2864] [error] HttpExtensionProc::jk_isapi_plugin.c (2195): service() failed with http error 413 [Sun Jul 15 21:12:23.861 2012] [696:2864] [error] ajp_marshal_into_msgb::jk_ajp_common.c (469): failed appending the header value [Sun Jul 15 21:12:23.877 2012] [696:2864] [error] HttpExtensionProc::jk_isapi_plugin.c (2195): service() failed with http error 413 [Sun Jul 15 21:12:27.543 2012] [696:2864] [error] ajp_marshal_into_msgb::jk_ajp_common.c (469): failed appending the header value [Sun Jul 15 21:12:27.558 2012] [696:2864] [error] HttpExtensionProc::jk_isapi_plugin.c (2195): service() failed with http error 413 [Sun Jul 15 21:12:27.621 2012] [696:2864] [error] ajp_marshal_into_msgb::jk_ajp_common.c (469): failed appending the header value [Sun Jul 15 21:12:27.668 2012] [696:2864] [error] HttpExtensionProc::jk_isapi_plugin.c (2195): service() failed with http error 413 [Sun Jul 15 21:12:33.081 2012] [696:2864] [error] ajp_marshal_into_msgb::jk_ajp_common.c (469): failed appending the header value [Sun Jul 15 21:12:33.128 2012] [696:2864] [error] HttpExtensionProc::jk_isapi_plugin.c (2195): service() failed with http error 413 [Sun Jul 15 21:12:33.221 2012] [696:2864] [error] ajp_marshal_into_msgb::jk_ajp_common.c (469): failed appending the header value [Sun Jul 15 21:12:33.237 2012] [696:2864] [error] HttpExtensionProc::jk_isapi_plugin.c (2195): service() failed with http error 413 [Mon Jul 16 12:50:51.388 2012] [3420:6708] [error] ajp_marshal_into_msgb::jk_ajp_common.c (588): failed appending attribute HTTPS_SERVER_ISSUER=C=AU, S=This Location, L=X, O=This Company, OU=Corporate IT, CN=Y, E=a...@z.com.au [Mon Jul 16 12:50:51.435 2012] [3420:6708] [error] HttpExtensionProc::jk_isapi_plugin.c (2195): service() failed with http error 413 [Mon Jul 16 13:00:55.576 2012] [3420:6632] [error] ajp_marshal_into_msgb::jk_ajp_common.c (588): failed appending attribute HTTPS_SERVER_ISSUER=C=AU, S=This Location, L=X, O=This Company, OU=Corporate IT, CN=Y, E=a...@z.com.au [Mon Jul 16 13:00:55.623 2012] [3420:6632] [error] HttpExtensionProc::jk_isapi_plugin.c (2195): service() failed with http error 413 [Mon Jul 16 13:02:55.587 2012] [3420:5152] [error] ajp_marshal_into_msgb::jk_ajp_common.c (588): failed appending attribute HTTPS_SERVER_ISSUER=C=AU, S=This Location, L=X, O=This Company, OU=Corporate IT, CN=Y, E=a...@z.com.au [Mon Jul 16 13:02:55.634 2012] [3420:5152] [error] HttpExtensionProc::jk_isapi_plugin.c (2195): service() failed with http error 413 [Mon Jul 16 13:03:15.477 2012] [3420:3164] [error] ajp_marshal_into_msgb::jk_ajp_common.c (588): failed appending attribute HTTPS_SERVER_ISSUER=C=AU, S=This Location, L=X, O=This Company, OU=Corporate IT, CN=Y, E=a...@z.com.au [Mon Jul 16 13:03:15.524 2012] [3420:3164] [error] HttpExtensionProc::jk_isapi_plugin.c (2195): service() failed with http error 413 [Mon Jul 16 13:03:16.585 2012] [3420:6708] [error] ajp_marshal_into_msgb::jk_ajp_common.c (588): failed appending attribute HTTPS_KEYSIZE=128 [Mon Jul 16 13:03:16.585 2012] [3420:3124] [error] ajp_marshal_into_msgb::jk_ajp_common.c (598): failed appending the message end [Mon Jul 16 13:03:16.616 2012] [3420:6708] [error] HttpExtensionProc::jk_isapi_plugin.c (2195): service() failed with http error 413 [Mon Jul 16 13:03:16.647 2012] [3420:3124] [error] HttpExtensionProc::jk_isapi_plugin.c (2195): service() failed with http error 413 [Mon Jul 16 15:19:37.365 2012] [3420:6708] [emerg] HttpFilterProc::jk_isapi_plugin.c (1921): [/sm9/dv/META-INF/services/javax.xml.transform.TransformerFactory] points to the web-inf or meta-inf directory. Somebody tries to hack into the site!!! [Mon Jul 16 16:23:27.508 2012] [3420:292] [error]
Re: service() failed with http error 413 - error log message from isapi_redirect.log file
Thanks Tim for your quick reply. I have already increased the max_packet_size to the maximum allowable value way way before and it still comes up: worker.wlb.max_packet_size=65536 Yeah, I noticed the message about the hacking thing. The website only runs internally. I found a good explanation of that message on the net, something about the HP SM software trying to access a file(s) directly under the WEB-INF folder. So I don't worry about that message for now. Just the Request Entity Too Large error is the one that I want to concentrate on at the moment. From: Tim Watts t...@cliftonfarm.org To: users@tomcat.apache.org Sent: Tuesday, 17 July 2012 2:06 PM Subject: Re: service() failed with http error 413 - error log message from isapi_redirect.log file Hi Ann, On Mon, 2012-07-16 at 19:18 -0700, ann ramos wrote: Hi, We are using HP Service Manager 9.2 system. The web client tier was set up using Windows 2008 R2 64-bit, IIS 7.5, Tomcat 6 and Isapi Redirector 1.2.30. The client is accessing the site by https because we had created a certificate and binded it to the IIS. Here are the steps that I used: 1. Go to IIS. 2. Go to Server Certificate. 3. Choose complete certificate request. 4. Upload the certificate file with the cer extension. 5. Go to Default Website. 6. Bind it to HTTPS and point it to the certificate that you just uploaded in #4. Everything is working fine. User can access the system through web. I noticed the following messages (attached fle ) from the isapi_redirect.log file. Would appreciate it if someone can provide additional information about the message and some ways/ideas on stopping them from occurring. As the log message suggests, 413 is a standard HTTP error code. Quote from http://www.faqs.org/rfcs/rfc2616.html: 10.4.14 413 Request Entity Too Large The server is refusing to process a request because the request entity is larger than the server is willing or able to process. The server MAY close the connection to prevent the client from continuing the request. If the condition is temporary, the server SHOULD include a Retry- After header field to indicate that it is temporary and after what time the client MAY try again. Based on messages like this from the log you attached: ajp_marshal_into_msgb::jk_ajp_common.c (469): failed appending the header value it sounds like you might need to bump 'max_packet_size' in your workers.properties. See http://tomcat.apache.org/connectors-doc/reference/workers.html for details. HOWEVER, did you notice this in the log? [Mon Jul 16 15:19:37.365 2012] [3420:6708] [emerg] HttpFilterProc::jk_isapi_plugin.c (1921): [/sm9/dv/META-INF/services/javax.xml.transform.TransformerFactory] points to the web-inf or meta-inf directory. Somebody tries to hack into the site!!! Someone may be trying to exploit buffer overruns on your site. My apologies if the information that I have provided is not complete. Let me know so I can add some more details. Thanks and regards! Ann - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Isapi redirector log file is always empty - IIS 7.5 - Tomcat 7.0.26 - Isapi 1.2.30 - Win2008 R2
Sorry about that. So here's what I did. I created a webapps folder for our application in Tomcat. We're using IIS as the webserver, used the isapi redirector to make IIS and Tomcat interact. Followed the steps here: http://tomcat.apache.org/connectors-doc/webserver_howto/iis.html So everything works fine. The user can access the application. I can see from the tomcat logs that our application is running. The only thing is my isapi log file is always empty. I never see any messages logged in there even though I set the log_level to debug. Regards. From: André Warnier a...@ice-sa.com To: Tomcat Users List users@tomcat.apache.org Sent: Friday, 18 May 2012 5:18 PM Subject: Re: Isapi redirector log file is always empty - IIS 7.5 - Tomcat 7.0.26 - Isapi 1.2.30 - Win2008 R2 ann ramos wrote: Hi, I have set up our system to do SSO. The setup works fine because whenever the user access the system, they are automatically logged in to the system. Following are the steps that I used to set up Isapi: 1. Manually created the folders Apache Software Foundation\Jakarta Isapi Redirector. Then inside those folders I created a sub folder bin, conf and log. 2. I manually created the registry entries. The set up works because the system functions as SSO. The only thing is that my isapi_redirect.log is always empty even though I set the log_level to debug. I tried searching the internet but I'm not getting anywhere. I would appreciate any thoughts and ideas that you can share so I can resolve my problem. Apart from your mention of Tomcat in the subject, it is not very clear so far if anything you're doing is accessing Tomcat through isapi_redirector (or even Tomcat at all). Can you be a bit more explicit about what you are doing ? And where the SSO part come into the picture here ? - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Isapi redirector log file is always empty - IIS 7.5 - Tomcat 7.0.26 - Isapi 1.2.30 - Win2008 R2
Alex, you're a life-saver. I checked my set up and I noticed that SERVICE is not included in the list of users with read/write access. I added them and now my isapi log file is not empty anymore. Thanks heaps for your silly question. Thanks to everyone who has spent time looking at my problem. From: Alex Samad - Yieldbroker alex.sa...@yieldbroker.com To: Tomcat Users List users@tomcat.apache.org; ann ramos ramos_mary...@yahoo.com Sent: Monday, 21 May 2012 9:42 AM Subject: RE: Isapi redirector log file is always empty - IIS 7.5 - Tomcat 7.0.26 - Isapi 1.2.30 - Win2008 R2 Silly question but does IIS have write permissions to the directory where you are writing the isapi log ? A -Original Message- From: ann ramos [mailto:ramos_mary...@yahoo.com] Sent: Monday, 21 May 2012 9:19 AM To: Tomcat Users List; Tomcat Users List Subject: Re: Isapi redirector log file is always empty - IIS 7.5 - Tomcat 7.0.26 - Isapi 1.2.30 - Win2008 R2 Sorry about that. So here's what I did. I created a webapps folder for our application in Tomcat. We're using IIS as the webserver, used the isapi redirector to make IIS and Tomcat interact. Followed the steps here: http://tomcat.apache.org/connectors-doc/webserver_howto/iis.html So everything works fine. The user can access the application. I can see from the tomcat logs that our application is running. The only thing is my isapi log file is always empty. I never see any messages logged in there even though I set the log_level to debug. Regards. From: André Warnier a...@ice-sa.com To: Tomcat Users List users@tomcat.apache.org Sent: Friday, 18 May 2012 5:18 PM Subject: Re: Isapi redirector log file is always empty - IIS 7.5 - Tomcat 7.0.26 - Isapi 1.2.30 - Win2008 R2 ann ramos wrote: Hi, I have set up our system to do SSO. The setup works fine because whenever the user access the system, they are automatically logged in to the system. Following are the steps that I used to set up Isapi: 1. Manually created the folders Apache Software Foundation\Jakarta Isapi Redirector. Then inside those folders I created a sub folder bin, conf and log. 2. I manually created the registry entries. The set up works because the system functions as SSO. The only thing is that my isapi_redirect.log is always empty even though I set the log_level to debug. I tried searching the internet but I'm not getting anywhere. I would appreciate any thoughts and ideas that you can share so I can resolve my problem. Apart from your mention of Tomcat in the subject, it is not very clear so far if anything you're doing is accessing Tomcat through isapi_redirector (or even Tomcat at all). Can you be a bit more explicit about what you are doing ? And where the SSO part come into the picture here ? - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Isapi redirector log file is always empty - IIS 7.5 - Tomcat 7.0.26 - Isapi 1.2.30 - Win2008 R2
Hi, I have set up our system to do SSO. The setup works fine because whenever the user access the system, they are automatically logged in to the system. Following are the steps that I used to set up Isapi: 1. Manually created the folders Apache Software Foundation\Jakarta Isapi Redirector. Then inside those folders I created a sub folder bin, conf and log. 2. I manually created the registry entries. The set up works because the system functions as SSO. The only thing is that my isapi_redirect.log is always empty even though I set the log_level to debug. I tried searching the internet but I'm not getting anywhere. I would appreciate any thoughts and ideas that you can share so I can resolve my problem. Thanks and regards. Peeves
