Public bug reported:
mod_wsgi based python apps that generate python errors, like divide by
zero, should send a 500 error to the browser and log the python errors
in the applications' log.
In Ubuntu 11.10 a regression was introduce where the Apache VirtualHost
must be specified as *:80 for this expected behavior to still work.
Anything else sends the 500 error to the browser, but leaves nothing in
the apache log file.
Here are the 2 files needed to reproduce the problem...
To reproduce you also need an entry in /etc/hosts for www.hello.loc to be
127.0.0.1,
and an otherwise working apache server.
--- The standard mod_wsgi Hello World App, modifed to force a divide by
zero error... ---
#!/usr/bin/python
def application(environ, start_response):
a = 5/0 # This line added to induce a deliberate error. Hide this
line to always see Hello World! in browser.
status = '200 OK'
output = 'Hello World!'
response_headers = [('Content-type', 'text/plain'),
('Content-Length', str(len(output)))]
start_response(status, response_headers)
return [output]
--- The Apache Configuration file for this same application ---
WSGIRestrictEmbedded On
<VirtualHost 127.0.0.1:80>
ServerName www.hello.loc
WSGIProcessGroup hello.loc
WSGIDaemonProcess hello.loc processes=1 threads=10 display-name=%{GROUP}
WSGIScriptAlias / /www/hello/website.py process-group=hello.loc
application-group=${GLOBAL}
LogLevel warn
ErrorLog /www/hello/logs/error.log
CustomLog /www/hello/logs/access.log combined
</VirtualHost>
--- NOTES ---
The 2 files given above are SUPPOSED to generate an internal error to the
browser (a 500 error)
AND log into the error log the python traceback showing the line and file where
the divide by zero
error happened.
It does not work because of the 127.0.0.1 in the VirtualHost...
Also broke are Named Virtual Hosts of any form, as in...
<VirtualHost local>
The work around is to use "*" instead, as in...
<VirtualHost *:80>
I found this bug on an upgrade of Ubuntu Server to 11.10.
Note that the form that works, <VirtualHost *:80> serves the site on all IP
addresses on a
server. This is the "toy" form of this command. Real servers are often
multi-homed.
The parameter on the Virtual host when not *:80 is supposed to indicate the IP
or named server that
is being used.
NOTE... ONLY ERROR LOGGING is impacted by this bug, NOT normal display.
A website impacted by this bug, especially after a system upgrade to 11.10,
will serve
"Internal Server Errors" to client browsers and NOT log the error to the error
logs
for discovery later by an administrator.
(As I found out to my trouble on a much, much bigger system than this
example.)
Technically the work-around given above is a potential security issue depending
on the networking
involved, so be careful if you're reading this and hacking your server to get
it working again.
** Affects: mod-wsgi (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to mod-wsgi in Ubuntu.
https://bugs.launchpad.net/bugs/908605
Title:
mod_wsgi fails to log python errors
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/mod-wsgi/+bug/908605/+subscriptions
--
Ubuntu-server-bugs mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
