Hello,

we are running Apache 2.0.55 on Windows 2003 with the Bea Weblogic
module with mod_ssl. We have the problem that user often have to
request a page twice. After the first request the Browser shows a page
could not be displayed message. Mostly, after the second request the
page can be displayed. We are currently investigating how we could
solve the problem. Currently we have round about 500 user with 2000
page requests per hour. We expect up to 2000 User in the future. We
currently investigate in the configuration of ThreadsPerChild=250 and
MaxRequestsPerChild= 0. Is it possible that we have here too low
values? Our configuration looks like this:


################################################## ## http.conf
ServerRoot "C:/Program Files/Apache Group/Apache2"

PidFile logs/httpd.pid

Timeout 300

KeepAlive On

MaxKeepAliveRequests 100

<IfModule mpm_winnt.c>
ThreadsPerChild 250
MaxRequestsPerChild 0
</IfModule>

Listen 80

LoadModule access_module modules/mod_access.so
LoadModule actions_module modules/mod_actions.so
LoadModule alias_module modules/mod_alias.so
LoadModule asis_module modules/mod_asis.so
LoadModule auth_module modules/mod_auth.so
#LoadModule auth_anon_module modules/mod_auth_anon.so
#LoadModule auth_dbm_module modules/mod_auth_dbm.so
#LoadModule auth_digest_module modules/mod_auth_digest.so
LoadModule autoindex_module modules/mod_autoindex.so
#LoadModule cern_meta_module modules/mod_cern_meta.so
LoadModule cgi_module modules/mod_cgi.so
#LoadModule dav_module modules/mod_dav.so
#LoadModule dav_fs_module modules/mod_dav_fs.so
LoadModule dir_module modules/mod_dir.so
LoadModule env_module modules/mod_env.so
#LoadModule expires_module modules/mod_expires.so
#LoadModule file_cache_module modules/mod_file_cache.so
#LoadModule headers_module modules/mod_headers.so
LoadModule imap_module modules/mod_imap.so
LoadModule include_module modules/mod_include.so
#LoadModule info_module modules/mod_info.so
LoadModule isapi_module modules/mod_isapi.so
LoadModule log_config_module modules/mod_log_config.so
LoadModule mime_module modules/mod_mime.so
#LoadModule mime_magic_module modules/mod_mime_magic.so
#LoadModule proxy_module modules/mod_proxy.so
#LoadModule proxy_connect_module modules/mod_proxy_connect.so
#LoadModule proxy_http_module modules/mod_proxy_http.so
#LoadModule proxy_ftp_module modules/mod_proxy_ftp.so
LoadModule negotiation_module modules/mod_negotiation.so
LoadModule rewrite_module modules/mod_rewrite.so
LoadModule setenvif_module modules/mod_setenvif.so
#LoadModule speling_module modules/mod_speling.so
#LoadModule status_module modules/mod_status.so
#LoadModule unique_id_module modules/mod_unique_id.so
LoadModule userdir_module modules/mod_userdir.so
#LoadModule usertrack_module modules/mod_usertrack.so
#LoadModule vhost_alias_module modules/mod_vhost_alias.so
LoadModule ssl_module modules/mod_ssl.so
LoadModule weblogic_module modules/mod_wl_20.so

ServerAdmin admin@admin.com

ServerName our.domain.tdl:443

UseCanonicalName Off

DocumentRoot "C:/Program Files/Apache Group/Apache2/htdocs"

<Directory />
Options FollowSymLinks
AllowOverride None
</Directory>

<Directory "C:/Program Files/Apache Group/Apache2/htdocs">
Options Indexes FollowSymLinks
AllowOverride None
Order allow,deny
Allow from all
</Directory>

UserDir "My Documents/My Website"

DirectoryIndex index.html index.html.var

AccessFileName .htaccess

<FilesMatch "^\.ht">
Order allow,deny
Deny from all
</FilesMatch>

TypesConfig conf/mime.types

DefaultType text/plain

<IfModule mod_mime_magic.c>
MIMEMagicFile conf/magic
</IfModule>

HostnameLookups Off

ErrorLog logs/error.log

LogLevel warn

LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\"
\"%{User-Agent}i\"" combined
LogFormat "%h %l %u %t \"%r\" %>s %b" common
LogFormat "%{Referer}i -> %U" referer
LogFormat "%{User-agent}i" agent

CustomLog logs/access.log common

ServerTokens Full

ServerSignature On

Alias /icons/ "C:/Program Files/Apache Group/Apache2/icons/"

<Directory "C:/Program Files/Apache Group/Apache2/icons">
Options Indexes MultiViews
AllowOverride None
Order allow,deny
Allow from all
</Directory>

AliasMatch ^/manual(?:/(?:de|en|es|fr|ja|ko|ru))?(/.*)?$ "C:/Program
Files/Apache Group/Apache2/manual$1"

<Directory "C:/Program Files/Apache Group/Apache2/manual">
Options Indexes
AllowOverride None
Order allow,deny
Allow from all
<Files *.html>
SetHandler type-map
</Files>
SetEnvIf Request_URI ^/manual/(de|en|es|fr|ja|ko|ru)/
prefer-language=$1
RedirectMatch 301 ^/manual(?:/(de|en|es|fr|ja|ko|ru)){2,}(/.*)?$
/manual/$1$2
</Directory>

ScriptAlias /cgi-bin/ "C:/Program Files/Apache Group/Apache2/cgi-bin/"

<Directory "C:/Program Files/Apache Group/Apache2/cgi-bin">
AllowOverride None
Options None
Order allow,deny
Allow from all
</Directory>

IndexOptions FancyIndexing VersionSort

AddIconByEncoding (CMP,/icons/compressed.gif) x-compress x-gzip

AddIconByType (TXT,/icons/text.gif) text/*
AddIconByType (IMG,/icons/image2.gif) image/*
AddIconByType (SND,/icons/sound2.gif) audio/*
AddIconByType (VID,/icons/movie.gif) video/*

AddIcon /icons/binary.gif .bin .exe
AddIcon /icons/binhex.gif .hqx
AddIcon /icons/tar.gif .tar
AddIcon /icons/world2.gif .wrl .wrl.gz .vrml .vrm .iv
AddIcon /icons/compressed.gif .Z .z .tgz .gz .zip
AddIcon /icons/a.gif .ps .ai .eps
AddIcon /icons/layout.gif .html .shtml .htm .pdf
AddIcon /icons/text.gif .txt
AddIcon /icons/c.gif .c
AddIcon /icons/p.gif .pl .py
AddIcon /icons/f.gif .for
AddIcon /icons/dvi.gif .dvi
AddIcon /icons/uuencoded.gif .uu
AddIcon /icons/script.gif .conf .sh .shar .csh .ksh .tcl
AddIcon /icons/tex.gif .tex
AddIcon /icons/bomb.gif core

AddIcon /icons/back.gif ..
AddIcon /icons/hand.right.gif README
AddIcon /icons/folder.gif ^^DIRECTORY^^
AddIcon /icons/blank.gif ^^BLANKICON^^

DefaultIcon /icons/unknown.gif

ReadmeName README.html
HeaderName HEADER.html

IndexIgnore .??* *~ *# HEADER* README* RCS CVS *,v *,t

AddLanguage ca .ca
AddLanguage cs .cz .cs
AddLanguage da .dk
AddLanguage de .de
AddLanguage el .el
AddLanguage en .en
AddLanguage eo .eo
AddLanguage es .es
AddLanguage et .et
AddLanguage fr .fr
AddLanguage he .he
AddLanguage hr .hr
AddLanguage it .it
AddLanguage ja .ja
AddLanguage ko .ko
AddLanguage ltz .ltz
AddLanguage nl .nl
AddLanguage nn .nn
AddLanguage no .no
AddLanguage pl .po
AddLanguage pt .pt
AddLanguage pt-BR .pt-br
AddLanguage ru .ru
AddLanguage sv .sv
AddLanguage zh-CN .zh-cn
AddLanguage zh-TW .zh-tw

LanguagePriority en ca cs da de el eo es et fr he hr it ja ko ltz nl nn
no pl pt pt-BR ru sv zh-CN zh-TW

ForceLanguagePriority Prefer Fallback

AddCharset ISO-8859-1 .iso8859-1 .latin1
AddCharset ISO-8859-2 .iso8859-2 .latin2 .cen
AddCharset ISO-8859-3 .iso8859-3 .latin3
AddCharset ISO-8859-4 .iso8859-4 .latin4
AddCharset ISO-8859-5 .iso8859-5 .latin5 .cyr .iso-ru
AddCharset ISO-8859-6 .iso8859-6 .latin6 .arb
AddCharset ISO-8859-7 .iso8859-7 .latin7 .grk
AddCharset ISO-8859-8 .iso8859-8 .latin8 .heb
AddCharset ISO-8859-9 .iso8859-9 .latin9 .trk
AddCharset ISO-2022-JP .iso2022-jp .jis
AddCharset ISO-2022-KR .iso2022-kr .kis
AddCharset ISO-2022-CN .iso2022-cn .cis
AddCharset Big5 .Big5 .big5
# For russian, more than one charset is used (depends on client,
mostly):
AddCharset WINDOWS-1251 .cp-1251 .win-1251
AddCharset CP866 .cp866
AddCharset KOI8-r .koi8-r .koi8-ru
AddCharset KOI8-ru .koi8-uk .ua
AddCharset ISO-10646-UCS-2 .ucs2
AddCharset ISO-10646-UCS-4 .ucs4
AddCharset UTF-8 .utf8

AddCharset GB2312 .gb2312 .gb
AddCharset utf-7 .utf7
AddCharset utf-8 .utf8
AddCharset big5 .big5 .b5
AddCharset EUC-TW .euc-tw
AddCharset EUC-JP .euc-jp
AddCharset EUC-KR .euc-kr
AddCharset shift_jis .sjis

AddType application/x-compress .Z
AddType application/x-gzip .gz .tgz

AddHandler type-map var

BrowserMatch "Mozilla/2" nokeepalive
BrowserMatch "MSIE 4\.0b2;" nokeepalive downgrade-1.0
force-response-1.0
BrowserMatch "RealPlayer 4\.0" force-response-1.0
BrowserMatch "Java/1\.0" force-response-1.0
BrowserMatch "JDK/1\.0" force-response-1.0

BrowserMatch "Microsoft Data Access Internet Publishing Provider"
redirect-carefully
BrowserMatch "MS FrontPage" redirect-carefully
BrowserMatch "^WebDrive" redirect-carefully
BrowserMatch "^WebDAVFS/1.[0123]" redirect-carefully
BrowserMatch "^gnome-vfs" redirect-carefully
BrowserMatch "^XML Spy" redirect-carefully
BrowserMatch "^Dreamweaver-WebDAV-SCM1" redirect-carefully

<IfModule mod_ssl.c>
Include conf/ssl.conf
</IfModule>

Alias /maintenance/ "C:/Program Files/Apache
Group/Apache2/maintenance/"

<Directory "C:/Program Files/Apache Group/Apache2/maintenance">
Options Indexes FollowSymLinks
Order allow,deny
Allow from all
</Directory>

<VirtualHost *:80>
SSLEngine off
RewriteEngine on
# RewriteLog c:\rewrite.log
# RewriteLogLevel 9
RewriteRule ^/.*$ https://our.domain.tdl [R,L]
</VirtualHost>

<VirtualHost *:443>
SSLEngine On
<Location /ST >
<IfModule mod_weblogic.c>
SetHandler weblogic-handler
WebLogicHost 192.168.200.12
WebLogicPort 7001
ConnectTimeoutSecs 10
ErrorPage /maintenance/maintenance.html
FileCaching OFF
</IfModule>
</Location>
<Location /HG >
<IfModule mod_weblogic.c>
SetHandler weblogic-handler
WebLogicHost 192.168.200.12
WebLogicPort 7001
ConnectTimeoutSecs 10
ErrorPage /maintenance/maintenance.html
FileCaching OFF
</IfModule>
</Location>
<Location /ieapps >
<IfModule mod_weblogic.c>
SetHandler weblogic-handler
WebLogicHost 192.168.200.12
WebLogicPort 7001
ConnectTimeoutSecs 10
ErrorPage /maintenance/maintenance.html
FileCaching OFF
</IfModule>
</Location>
<Location /ieadmin >
<IfModule mod_weblogic.c>
SetHandler weblogic-handler
WebLogicHost 192.168.200.12
WebLogicPort 7001
ConnectTimeoutSecs 10
ErrorPage /maintenance/maintenance.html
FileCaching OFF
</IfModule>
</Location>
<Location /internet >
<IfModule mod_weblogic.c>
SetHandler weblogic-handler
WebLogicHost 192.168.200.12
WebLogicPort 7001
ConnectTimeoutSecs 10
ErrorPage /maintenance/maintenance.html
FileCaching OFF
</IfModule>
</Location>
<Location /maintenance>
SetHandler core
</Location>
<Location /offline>
SetHandler core
</Location>
</VirtualHost>
################################################## # http.conf

If you have any ideas what could be the problem, please let me know.

Thanks in advance,
Robert Mederer

On 17 Jan 2006 07:35:21 -0800, r.mederer@gmail.com wrote:

>Hello,
>
>we are running Apache 2.0.55 on Windows 2003 with the Bea Weblogic
>module with mod_ssl. We have the problem that user often have to
>request a page twice. After the first request the Browser shows a page
>could not be displayed message. Mostly, after the second request the
>page can be displayed. We are currently investigating how we could
>solve the problem. Currently we have round about 500 user with 2000
>page requests per hour. We expect up to 2000 User in the future. We
>currently investigate in the configuration of ThreadsPerChild=250 and
>MaxRequestsPerChild= 0. Is it possible that we have here too low
>values?

Are there any error messages in your
{apache2installpath}\logs\error.log?

What is the status of the failing requests in your
{apache2installpath}\logs\access.log?

>Our configuration looks like this:

[snip]
--
( Kees
)
c[_] if (isfunny(tagline)) steal(); else next_msg(); (#259)

Here is a snapshot of the error.log:

[Wed Jan 18 09:50:01 2006] [notice] Server built: Oct 17 2005 22:10:15
[Wed Jan 18 09:50:01 2006] [notice] Parent: Created child process 7244
[Wed Jan 18 09:50:01 2006] [notice] Child 7244: Child process is
running
[Wed Jan 18 09:50:02 2006] [notice] Child 7244: Acquired the start
mutex.
[Wed Jan 18 09:50:02 2006] [notice] Child 7244: Starting 500 worker
threads.
[Wed Jan 18 09:56:26 2006] [notice] Parent: Received restart signal --
Restarting the server.
[Wed Jan 18 09:56:26 2006] [notice] Child 7244: Exit event signaled.
Child process is ending.
[Wed Jan 18 09:56:26 2006] [error] (OS 5)Access is denied. : Cannot
create SSLSessionCache DBM file `C:/Program Files/Apache
Group/Apache2/logs/ssl_scache'
[Wed Jan 18 09:56:26 2006] [notice] Apache/2.0.55 (Win32)
mod_ssl/2.0.55 OpenSSL/0.9.8a configured -- resuming normal operations
[Wed Jan 18 09:56:26 2006] [notice] Server built: Oct 17 2005 22:10:15
[Wed Jan 18 09:56:26 2006] [notice] Parent: Created child process 8980
[Wed Jan 18 09:56:27 2006] [error] (OS 5)Access is denied. : Cannot
create SSLSessionCache DBM file `C:/Program Files/Apache
Group/Apache2/logs/ssl_scache'
[Wed Jan 18 09:56:27 2006] [error] (OS 5)Access is denied. : Cannot
create SSLSessionCache DBM file `C:/Program Files/Apache
Group/Apache2/logs/ssl_scache'
[Wed Jan 18 09:56:27 2006] [notice] Child 8980: Child process is
running
[Wed Jan 18 09:56:28 2006] [error] (OS 5)Access is denied. : Cannot
open SSLSessionCache DBM file `C:/Program Files/Apache
Group/Apache2/logs/ssl_scache' for writing (store)
[Wed Jan 18 09:56:29 2006] [error] (OS 5)Access is denied. : Cannot
open SSLSessionCache DBM file `C:/Program Files/Apache
Group/Apache2/logs/ssl_scache' for writing (store)
[Wed Jan 18 09:56:30 2006] [error] (OS 5)Access is denied. : Cannot
open SSLSessionCache DBM file `C:/Program Files/Apache
Group/Apache2/logs/ssl_scache' for scanning
[Wed Jan 18 09:56:30 2006] [error] (OS 5)Access is denied. : Cannot
open SSLSessionCache DBM file `C:/Program Files/Apache
Group/Apache2/logs/ssl_scache' for reading (fetch)
[Wed Jan 18 09:56:30 2006] [error] (OS 5)Access is denied. : Cannot
open SSLSessionCache DBM file `C:/Program Files/Apache
Group/Apache2/logs/ssl_scache' for writing (store)
[Wed Jan 18 09:56:31 2006] [error] (OS 5)Access is denied. : Cannot
open SSLSessionCache DBM file `C:/Program Files/Apache
Group/Apache2/logs/ssl_scache' for scanning
[Wed Jan 18 09:56:31 2006] [error] (OS 5)Access is denied. : Cannot
open SSLSessionCache DBM file `C:/Program Files/Apache
Group/Apache2/logs/ssl_scache' for reading (fetch)
[Wed Jan 18 09:56:31 2006] [error] (OS 5)Access is denied. : Cannot
open SSLSessionCache DBM file `C:/Program Files/Apache
Group/Apache2/logs/ssl_scache' for reading (fetch)
[Wed Jan 18 09:56:31 2006] [error] (OS 5)Access is denied. : Cannot
open SSLSessionCache DBM file `C:/Program Files/Apache
Group/Apache2/logs/ssl_scache' for reading (fetch)
[Wed Jan 18 09:56:31 2006] [error] (OS 5)Access is denied. : Cannot
open SSLSessionCache DBM file `C:/Program Files/Apache
Group/Apache2/logs/ssl_scache' for reading (fetch)
[Wed Jan 18 09:56:31 2006] [error] (OS 5)Access is denied. : Cannot
open SSLSessionCache DBM file `C:/Program Files/Apache
Group/Apache2/logs/ssl_scache' for writing (store)

On 18 Jan 2006 01:45:02 -0800, r.mederer@gmail.com wrote:

>Here is a snapshot of the error.log:
>
>[Wed Jan 18 09:50:01 2006] [notice] Server built: Oct 17 2005 22:10:15
>[Wed Jan 18 09:50:01 2006] [notice] Parent: Created child process 7244
>[Wed Jan 18 09:50:01 2006] [notice] Child 7244: Child process is
>running
>[Wed Jan 18 09:50:02 2006] [notice] Child 7244: Acquired the start
>mutex.
>[Wed Jan 18 09:50:02 2006] [notice] Child 7244: Starting 500 worker
>threads.
>[Wed Jan 18 09:56:26 2006] [notice] Parent: Received restart signal --
>Restarting the server.
>[Wed Jan 18 09:56:26 2006] [notice] Child 7244: Exit event signaled.
>Child process is ending.
>[Wed Jan 18 09:56:26 2006] [error] (OS 5)Access is denied. : Cannot
>create SSLSessionCache DBM file `C:/Program Files/Apache
>Group/Apache2/logs/ssl_scache'
>[Wed Jan 18 09:56:26 2006] [notice] Apache/2.0.55 (Win32)
>mod_ssl/2.0.55 OpenSSL/0.9.8a configured -- resuming normal operations
>[Wed Jan 18 09:56:26 2006] [notice] Server built: Oct 17 2005 22:10:15
>[Wed Jan 18 09:56:26 2006] [notice] Parent: Created child process 8980
>[Wed Jan 18 09:56:27 2006] [error] (OS 5)Access is denied. : Cannot
>create SSLSessionCache DBM file `C:/Program Files/Apache
>Group/Apache2/logs/ssl_scache'

[snip]

Well, doesn't this tell you something?
Apparently the account in which the Apache service runs isn't
allowed to create the ssl_cache file. There might be already one
with a lot of protection and another owner.

BTW, I'd never install Apache in a directory with spaces
anywhere in its name. There are still a few programs around
which don't handle that properly.

Hope this s
--
( Kees
)
c[_] The plural of 'Mongoose' is not 'Mongeese', it's
'Polygoose'. (The Hacker's Dictionary) (#214)

Your are right. I'm aware of the problem with the access is denied. But
this error occures only when many user want to access the apache. If we
run the apache with lower user count, we have no problem. The apache
restarts every 5 minutes. So we think it has something do do with
ThreadsPerChild=250 and MaxRequestsPerChild= 0. Do you know a good
configuration for windows 2003. Should we upgrade to a newer version of
apache?

On 18 Jan 2006 13:44:40 -0800, r.mederer@gmail.com wrote:

>Your are right. I'm aware of the problem with the access is denied. But
>this error occures only when many user want to access the apache. If we
>run the apache with lower user count, we have no problem. The apache
>restarts every 5 minutes. So we think it has something do do with
>ThreadsPerChild=250 and MaxRequestsPerChild= 0. Do you know a good
>configuration for windows 2003. Should we upgrade to a newer version of
>apache?

Just a thought, but i'm not a specialist on this:
With a low user count everything might be kept in memory. Once
the number of concurrent user session rises, ssl will overflow
from memory to disk. At that moment the cache file is needed.

I don't think the Apache version has much to do with it, your
version 2.0.55 is about as recent as can be.

You really have to look at the directory and file permissions of
the Windows account in which the Apache service logs in.
That will almost certainly solve your problems.

You could start to grant "all users" "unlimited access" to the
mentioned directoy and all files in it (you will have to login
as administrator to do that). Once it works try to restrict the
privileges to what ever is exactly needed in order to get more
protection.

Good luck!
--
( Kees
)
c[_] There is only one boss, the customer. And he can fire
everybody in the company from the chairman on down,
simply by spending his money somewhere else. (Sam Walton) (#34)