logo
Apache Lounge
Webmasters

 

About Forum Index Downloads Search Register Log in RSS X


Keep Server Online

If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.

or

Bitcoin

A donation makes a contribution towards the costs, the time and effort that's going in this site and building.

Thank You! Steffen

Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
Post new topic   Forum Index -> Apache View previous topic :: View next topic
Reply to topic   Topic: authz_core ... failed API-Call
Author
thor_pfosten



Joined: 18 Jan 2018
Posts: 1

PostPosted: Thu 18 Jan '18 17:30    Post subject: authz_core ... failed API-Call Reply with quote

Hallo,

on my webplattform (myownserver.com/calling server) I have some prob concerned with an API-Call (REST-Url).
It's a plattform e.g. addressed to learners of a computer language. on a particular HTML-input-formular
learners are supposed to paste in a source code snippet. By Clicking on an "OK"-Button of the formular
the snippet wil be sent to another server with a JUNIT Environment. The results of the UNIT-test
are transferred back to the calling server and are displayed on the aforementioned formular.

Unfortunately the Call to the JUNIT Server does not work. It does not reach the JUNIT-Server.
After Clicking on the ok Button the browsers displays a grey site mit the following error
message (little translation from German).


Quote:


This site does not work

myownserver.com kann cannot process this request.

HTTP ERROR 500



The corresponding Logs (Apache Error log) are:


Quote:

[Thu Jan 18 21:35:35.838893 2018] [ssl:trace3] [pid 18671] ssl_engine_kernel.c(2027): [client 1.2.3.4:51685] OpenSSL: Exit: error in SSLv2/v3 read client hello A

[Thu Jan 18 21:35:35.838945 2018] [ssl:debug] [pid 18671] ssl_engine_io.c(1308): (70014)End of file found: [client 1.2.3.4:51685] AH02007: SSL handshake interrupted by system [Hint: Stop button pressed in browser?!]

[Thu Jan 18 21:35:35.838955 2018] [ssl:info] [pid 18671] [client 1.2.3.4:51685] AH01998: Connection closed to child 7 with abortive shutdown (server myownserver.com:443)

[Thu Jan 18 21:35:36.162870 2018] [ssl:info] [pid 19007] [client 1.2.3.4:51694] AH01964: Connection to child 2 established (server myownserver.com:443)

[Thu Jan 18 21:35:36.162944 2018] [ssl:trace2] [pid 19007] ssl_engine_rand.c(126): Seeding PRNG with 656 bytes of entropy

[Thu Jan 18 21:35:36.163006 2018] [ssl:trace3] [pid 19007] ssl_engine_kernel.c(1989): [client 1.2.3.4:51694] OpenSSL: Handshake: start

[Thu Jan 18 21:35:36.163019 2018] [ssl:trace3] [pid 19007] ssl_engine_kernel.c(1998): [client 1.2.3.4:51694] OpenSSL: Loop: before/accept initialization

[Thu Jan 18 21:35:36.163093 2018] [ssl:debug] [pid 19007] ssl_engine_kernel.c(2115): [client 1.2.3.4:51694] AH02043: SSL virtual host for servername myownserver.com found

[Thu Jan 18 21:35:36.163113 2018] [ssl:debug] [pid 19007] ssl_engine_kernel.c(2115): [client 1.2.3.4:51694] AH02043: SSL virtual host for servername myownserver.com found

[Thu Jan 18 21:35:36.163118 2018] [core:debug] [pid 19007] protocol.c(2211): [client 1.2.3.4:51694] AH03155: select protocol from , choices=h2,http/1.1 for server myownserver.com

[Thu Jan 18 21:35:36.163124 2018] [ssl:trace3] [pid 19007] ssl_engine_kernel.c(1998): [client 1.2.3.4:51694] OpenSSL: Loop: unknown state

[Thu Jan 18 21:35:36.163132 2018] [ssl:trace3] [pid 19007] ssl_engine_kernel.c(1998): [client 1.2.3.4:51694] OpenSSL: Loop: unknown state

[Thu Jan 18 21:35:36.163194 2018] [ssl:trace3] [pid 19007] ssl_engine_kernel.c(1998): [client 1.2.3.4:51694] OpenSSL: Loop: unknown state

[Thu Jan 18 21:35:36.163218 2018] [ssl:trace3] [pid 19007] ssl_engine_kernel.c(1998): [client 1.2.3.4:51694] OpenSSL: Loop: unknown state

[Thu Jan 18 21:35:36.163260 2018] [ssl:trace3] [pid 19007] ssl_engine_kernel.c(1998): [client 1.2.3.4:51694] OpenSSL: Loop: unknown state

[Thu Jan 18 21:35:36.429827 2018] [ssl:info] [pid 18837] [client 1.2.3.4:51695] AH01964: Connection to child 1 established (server myownserver.com:443)

[Thu Jan 18 21:35:36.429901 2018] [ssl:trace2] [pid 18837] ssl_engine_rand.c(126): Seeding PRNG with 656 bytes of entropy

[Thu Jan 18 21:35:36.429977 2018] [ssl:trace3] [pid 18837] ssl_engine_kernel.c(1989): [client 1.2.3.4:51695] OpenSSL: Handshake: start

[Thu Jan 18 21:35:36.429993 2018] [ssl:trace3] [pid 18837] ssl_engine_kernel.c(1998): [client 1.2.3.4:51695] OpenSSL: Loop: before/accept initialization

[Thu Jan 18 21:35:36.496403 2018] [ssl:trace3] [pid 19007] ssl_engine_kernel.c(1998): [client 1.2.3.4:51694] OpenSSL: Loop: unknown state

[Thu Jan 18 21:35:36.496426 2018] [ssl:trace3] [pid 19007] ssl_engine_kernel.c(1993): [client 1.2.3.4:51694] OpenSSL: Handshake: done

[Thu Jan 18 21:35:36.496437 2018] [ssl:debug] [pid 19007] ssl_engine_kernel.c(2042): [client 1.2.3.4:51694] AH02041: Protocol: TLSv1.2, Cipher: ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)

[Thu Jan 18 21:35:36.498399 2018] [ssl:debug] [pid 19007] ssl_engine_kernel.c(366): [client 1.2.3.4:51694] AH02034: Initial (No.1) HTTPS request received for child 2 (server myownserver.com:443), referer: https://myownserver.com/question/preview.php?id=28838&courseid=237

[Thu Jan 18 21:35:36.498513 2018] [authz_core:debug] [pid 19007] mod_authz_core.c(809): [client 1.2.3.4:51694] AH01626: authorization result of Require all granted: granted, referer: https://myownserver.com/question/preview.php?id=28838&courseid=237

[Thu Jan 18 21:35:36.498522 2018] [authz_core:debug] [pid 19007] mod_authz_core.c(809): [client 1.2.3.4:51694] AH01626: authorization result of <RequireAny>: granted, referer: https://myownserver.com/question/preview.php?id=28838&courseid=237

[Thu Jan 18 21:35:36.498526 2018] [core:trace3] [pid 19007] request.c(304): [client 1.2.3.4:51694] request authorized without authentication by access_checker_ex hook: /question/preview.php, referer: https://myownserver.com/question/preview.php?id=28838&courseid=237

[Thu Jan 18 21:35:36.526446 2018] [http:trace3] [pid 19007] http_filters.c(1089): [client 1.2.3.4:51694] Response sent with status 500, referer: https://myownserver.com/question/preview.php?id=28838&courseid=237

[Thu Jan 18 21:35:36.526759 2018] [ssl:trace3] [pid 19007] ssl_engine_kernel.c(2008): [client 1.2.3.4:51694] OpenSSL: Write: SSL negotiation finished successfully

[Thu Jan 18 21:35:36.526863 2018] [ssl:debug] [pid 19007] ssl_engine_io.c(1044): [client 1.2.3.4:51694] AH02001: Connection closed to child 2 with standard shutdown (server myownserver.com:443)




Of interest is IMHO the part at the end, where the error code
"Response sent with status 500" is logged.
Before the Apache-Module "authz_core" coms into play. The authorisation process does not seem to work the
way I want it to:
"request authorized without authentication by access_checker_ex hook"

I just want to enable the the API-Call
So what can I do ?
Conf-settings ?
How can I configure the authz_core-Module in order to allow the call ...
other the steps ? Directory settings ?
How can I start here ?

Any help, how to etc on this would be super !

Thanks in advance for your help!



My System:
Quote:


OS:Debian


root@myownserver.com:/var/log/apache2# apachectl -M
[Thu Jan 18 22:16:18.955184 2018] [core:trace3] [pid 20326] core.c(3289): Setting LogLevel for all modules to trace3

Loaded Modules:
core_module (static)
so_module (static)
watchdog_module (static)
http_module (static)
log_config_module (static)
logio_module (static)
version_module (static)
unixd_module (static)
access_compat_module (shared)
alias_module (shared)
auth_basic_module (shared)
authn_core_module (shared)
authn_file_module (shared)
authz_core_module (shared)
authz_host_module (shared)
authz_user_module (shared)
autoindex_module (shared)
cgi_module (shared)
deflate_module (shared)
dir_module (shared)
env_module (shared)
filter_module (shared)
headers_module (shared)
mime_module (shared)
mpm_prefork_module (shared)
negotiation_module (shared)
php5_module (shared)
reqtimeout_module (shared)
rewrite_module (shared)
setenvif_module (shared)
socache_shmcb_module (shared)
ssl_module (shared)
h264_streaming_module (shared)
root@myownserver.com:/var/log/apache2#


root@myownserver.com:/var/log/apache2# apachectl -V
[Thu Jan 18 22:17:32.960351 2018] [core:trace3] [pid 20359] core.c(3289): Setting LogLevel for all modules to trace3
Server version: Apache/2.4.25 (Debian)
Server built: 2017-09-19T18:58:57
Server's Module Magic Number: 20120211:56
Server loaded: APR 1.5.2, APR-UTIL 1.5.4
Compiled using: APR 1.5.2, APR-UTIL 1.5.4
Architecture: 64-bit
Server MPM: prefork
threaded: no
forked: yes (variable process count)
Server compiled with....
-D APR_HAS_SENDFILE
-D APR_HAS_MMAP
-D APR_HAVE_IPV6 (IPv4-mapped addresses enabled)
-D APR_USE_SYSVSEM_SERIALIZE
-D APR_USE_PTHREAD_SERIALIZE
-D SINGLE_LISTEN_UNSERIALIZED_ACCEPT
-D APR_HAS_OTHER_CHILD
-D AP_HAVE_RELIABLE_PIPED_LOGS
-D DYNAMIC_MODULE_LIMIT=256
-D HTTPD_ROOT="/etc/apache2"
-D SUEXEC_BIN="/usr/lib/apache2/suexec"
-D DEFAULT_PIDLOG="/var/run/apache2.pid"
-D DEFAULT_SCOREBOARD="logs/apache_runtime_status"
-D DEFAULT_ERRORLOG="logs/error_log"
-D AP_TYPES_CONFIG_FILE="mime.types"
-D SERVER_CONFIG_FILE="apache2.conf"
root@myownserver.com:/var/log/apache2#



Best,

Thor
Back to top
Steffen
Moderator


Joined: 15 Oct 2005
Posts: 3049
Location: Hilversum, NL, EU

PostPosted: Wed 24 Jan '18 13:51    Post subject: Reply with quote

Best is to post your question at https://httpd.apache.org/userslist.html
Back to top
James Blond
Moderator


Joined: 19 Jan 2006
Posts: 7288
Location: Germany, Next to Hamburg

PostPosted: Thu 08 Feb '18 16:05    Post subject: Reply with quote

Please post the config for it. 500 is most often a configuration error.
Back to top


Reply to topic   Topic: authz_core ... failed API-Call View previous topic :: View next topic
Post new topic   Forum Index -> Apache