Documentation on 'e' and 's' in execution=eXsY

[Jeff Chapin]

Strange. I am getting the following in my apache logs, which sits in front
of Tomcat:
AH00971: ajp_marshal_into_msgb: Error appending the header value
AH00988: ajp_send_header: ajp_marshal_into_msgb failed

The timestamp of this error corresponds to the time users are reporting
errors -- *AND* the URL of the error is the IDP host, and appears to be a
HTTPD error -- not shib or Tomcat. My assumption was that *something* --
the SP, the httpd proxy, the load balancer, or something I can't even think
of was causing something to append headers. We have seen similar errors in
the past when one of our SPs was trying to append a *VERY* long header,
which was longer than the default header length, so I may have jumped to a
false conclusion.

On Thu, Feb 2, 2023 at 8:19 AM Cantor, Scott <cantor.2 at osu.edu> wrote:

> > Thanks, I was guessing it was a loop -- and I think I even found what
> causes it to
> > end -- each time through the loop, they appear to be appending more
> header
> > information, until apache, which we are using as a reverse proxy,
> finally chokes
> > on it.
>
> If you mean the IdP is proxied, it doesn't accumulate anything like that
> between itself and the client. Loops generally won't break unless they
> break on the SP side or something is done on the IdP to do it (like the
> feature I added to detect them).
>
> -- Scott
>
>
>
>

-- 

Jeff Chapin,

Panther eSports Adviser
Systems/Applications Administrator
ITS-IS, University of Northern Iowa
Phone: 319-273-3162 Email: Jeff.Chapin at uni.edu
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230202/0f4a412a/attachment.htm>