Apache 2.4 producing 500 error when serving DirectoryIndex page from Shib SP protected areas

Cantor, Scott cantor.2 at osu.edu
Fri Oct 5 11:56:12 EDT 2012


On 10/5/12 9:58 AM, "Paul Beckett (ITCS)" <P.Beckett at uea.ac.uk> wrote:

>Scott,
>I wanted to make sure the different behaviour I was getting now, was
>definitely not due to some unintended config difference, from having
>rebuilt my server. So I reinstalled the unpatched version of Shibboleth
>SP 2.5.0 against Apache 2.4.3, and with my current shibboleth and apache
>config and got the exact same behaviour I previously reported (calling
>/secure/index.html explicitly worked, calling directory /secure/ ,
>relying on DirectoryIndex resulted in 500 error).

That's fine, I didn't expect anything different so I didn't want to put
extra work on you.

>My naive interpretation of this (as someone who doesn't understand the
>internals of Apache, or write C) is that it must be something in the
>apache/mod_shib.cpp patch that is resulting in Apache not returning the
>content at all whether calling /secure/ or /secure/index.html.

I haven't formulated a theory yet, but I think since it's hanging, there's
either a loop, or it's going off into memory somewhere.

> Is there any additional info / debugging that you would like me to run,
>that might help narrow down what is going on?

It's primarily on me to reproduce, but you could see if there's a sign of
CPU load when it hangs indicating there's a loop.

I'm at a conference this week, so I haven't had a chance to try and
reproduce this. And Windows was working for me, so I'll have to do a build
on something else.

>When I applied the mod_shib.cpp patch, I've assumed that it doesn't rely
>on any other files being updated (other SVN revisions post 2.5.0 release
>to other files).

No, it was a fix to the way my module's per-request configuration data is
created and when. The patch allows it to get created more on the fly
within functional hooks instead of relying on the post-read hook, because
Apache isn't running that hook when it says it will. Nothing else changed.

-- Scott




More information about the users mailing list