Dear all,

On both xibe01|02.app.xibe … , the complete „proxy“ mechanism has been disabled. We had errors due to segfaults in heartbeat module, see email below.

Kind Regards

Gunnar


Details:

/etc/httpd/conf.modules.d/00-proxy.conf

Before:
LoadModule proxy_module modules/mod_proxy.so
LoadModule lbmethod_bybusyness_module modules/mod_lbmethod_bybusyness.so
LoadModule lbmethod_byrequests_module modules/mod_lbmethod_byrequests.so
LoadModule lbmethod_bytraffic_module modules/mod_lbmethod_bytraffic.so
LoadModule lbmethod_heartbeat_module modules/mod_lbmethod_heartbeat.so
LoadModule proxy_ajp_module modules/mod_proxy_ajp.so
LoadModule proxy_balancer_module modules/mod_proxy_balancer.so
LoadModule proxy_connect_module modules/mod_proxy_connect.so
LoadModule proxy_express_module modules/mod_proxy_express.so
LoadModule proxy_fcgi_module modules/mod_proxy_fcgi.so
LoadModule proxy_fdpass_module modules/mod_proxy_fdpass.so
LoadModule proxy_ftp_module modules/mod_proxy_ftp.so
LoadModule proxy_http_module modules/mod_proxy_http.so
LoadModule proxy_scgi_module modules/mod_proxy_scgi.so
LoadModule proxy_wstunnel_module modules/mod_proxy_wstunnel.so

After:
#LoadModule proxy_module modules/mod_proxy.so
#LoadModule lbmethod_bybusyness_module modules/mod_lbmethod_bybusyness.so
#LoadModule lbmethod_byrequests_module modules/mod_lbmethod_byrequests.so
#LoadModule lbmethod_bytraffic_module modules/mod_lbmethod_bytraffic.so
#LoadModule lbmethod_heartbeat_module modules/mod_lbmethod_heartbeat.so
#LoadModule proxy_ajp_module modules/mod_proxy_ajp.so
#LoadModule proxy_balancer_module modules/mod_proxy_balancer.so
#LoadModule proxy_connect_module modules/mod_proxy_connect.so
#LoadModule proxy_express_module modules/mod_proxy_express.so
#LoadModule proxy_fcgi_module modules/mod_proxy_fcgi.so
#LoadModule proxy_fdpass_module modules/mod_proxy_fdpass.so
#LoadModule proxy_ftp_module modules/mod_proxy_ftp.so
#LoadModule proxy_http_module modules/mod_proxy_http.so
#LoadModule proxy_scgi_module modules/mod_proxy_scgi.so
#LoadModule proxy_wstunnel_module modules/mod_proxy_wstunnel.so

We do not use the http servers as reverse proxy so this should be safe.

-- 

Mit freundlichen Grüßen

Gunnar Mann 

- Systemadministration - 
________________________________________________________ 

TraSo GmbH

Nonnenstraße 42
D-04229 Leipzig

Tel.: +49 341 355 740 76 
Fax: +49 341 355 740 21 
E-Mail: g.mann@traso.de 


________________________________________________________
Geschäftsführer: Haiko Gerdes
Handelsregister: Amtsgericht Leipzig, HRB 21850

Anfang der weitergeleiteten Nachricht:

Von: Stefan Rank-Kunitz <s.rank-kunitz@traso.de>
Betreff: [Hotfix] Restart Apache for xIBE02
Datum: 12. April 2020 um 20:40:56 MESZ
An: hotfix@lists.traso.de
Antwort an: hotfix@lists.traso.de

Signierter PGP-Teil
Moin,

Nagios mentioned Apache server at xibe02 to be critical. I restartet
service => systemctl start httpd

@Admins: Please make nagios checks for Apache @ xibe01/02 more
frequently! And please try to find out why it crashed (see logs below).

Verantwortlicher: SRK

Zeitpunkt: 2020-04-12 20:35Uhr

Kunden: all xIBE customers (AAA, Tourini, Tropo.de)

Info:
[Sun Apr 12 18:35:01.956383 2020] [core:notice] [pid 32540] AH00094:
Command line: '/usr/sbin/httpd -D FOREGROUND'
[Sun Apr 12 19:35:01.473252 2020] [mpm_prefork:notice] [pid 32540]
AH00171: Graceful restart requested, doing restart
httpd: threads.c:395: krb5int_key_delete: Assertion
`destructors_set[keynum] == 1' failed.
httpd: threads.c:395: krb5int_key_delete: Assertion
`destructors_set[keynum] == 1' failed.
httpd: threads.c:395: krb5int_key_delete: Assertion
`destructors_set[keynum] == 1' failed.
httpd: threads.c:395: krb5int_key_delete: Assertion
`destructors_set[keynum] == 1' failed.
httpd: threads.c:395: krb5int_key_delete: Assertion
`destructors_set[keynum] == 1' failed.
[Sun Apr 12 19:35:01.621149 2020] [lbmethod_heartbeat:notice] [pid
32540] AH02282: No slotmem from mod_heartmonitor
Assertion failure: 0 == rv, at
../../.././nspr/pr/src/pthreads/ptthread.c:973
[Sun Apr 12 19:35:01.775067 2020] [core:notice] [pid 32540] AH00060: seg
fault or similar nasty error detected in the parent process
httpd: threads.c:395: krb5int_key_delete: Assertion
`destructors_set[keynum] == 1' failed.
[Sun Apr 12 20:34:15.619853 2020] [core:notice] [pid 17071] SELinux
policy enabled; httpd running as context system_u:system_r:httpd_t:s0
[Sun Apr 12 20:34:15.622636 2020] [suexec:notice] [pid 17071] AH01232:
suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)

VG Stefan Rank-Kunitz

Mit freundlichen Grüßen

Stefan Rank-Kunitz
- Technical Director -
________________________________________________________
TraSo GmbH

Nonnenstraße 42
D-04229 Leipzig
Tel.: +49 341 355 740 - 43

E-Mail: s.rank-kunitz@traso.de
________________________________________________________
Handelsregister: Amtsgericht Leipzig, HRB 21850