Netware Webserver - After a few weeks Apache stops listening on 443

Author

After a few weeks Apache stops listening on 443

Daniel Koepke

2007-11-21, 1:12 am

This is a Netware 6.5 sp6 server running GroupWise Webaccess 7.02 only in
the DMZ.

Everything starts good without errors in the logs or the logger screen.
Users can connect using https and access their email fine. LDAPs works fine
for user authentication. This has been working for almost a year.

Lately the apache has stopped responding to https requests and returns a
page not found error when users start a session. If they change to HTTP,
everything works fine, even LDAP login.

I first had the staff run PKIDIAG and tckeygen to correct corrupted key and
they rebooted and it worked fine.

But it occurred again today and I checked for errors in the logs and logger
screen and did not find any. Unload WebAccess and reloaded no errors and
still able to access http only.

Unload apache and tomcat and reloaded. Was able to access via HTTPS now.
Reviewed the log and still did not see any errors. Have to wait for the next
occurance to test agian

This problem is not following any time and seem to be a few weeks apart, we
are running up to 400 webaccess users can this be related to resources
needed for SSL by apache?

This server is stripped down and does not get a other processes run on it
that would grab 443 away from apache

What am I missing and what should I test the next time

Thanks

Daniel Koepke

Anders Gustafsson

2007-11-21, 1:11 pm

I have never seen that, but have you tried the latest apache NLMs from
www.apache.org?

- Anders Gustafsson (Sysop)
The Aaland Islands (N60 E20)

Discover the new Novell forums at http://forums.novell.com

Novell does not monitor these forums officially.
Enhancement requests for all Novell products may be made at
http://support.novell.com/enhancement

Guenter

2007-11-21, 7:11 pm

Hi Daniel,
"Daniel Koepke" <dkoepke@kovalconsulting.com> wrote in
news:8cN0j.2080$L42.194@kovat.provo.novell.com:

> What am I missing and what should I test the next time
I have seen this issue a few times, its my guess that the NTLS.NLM is the
culprit and / or Winsock; both were updated with SP7, and there's also a
post-SP6 Winsock update available.
If you cant solve the issue with an update you can also use mod_ssl instead -
but that requires that you have external certificates (= not in NDS); my
Apache builds contain mod_ssl:
http://www.gknw.net/phpbb/viewtopic.php?t=402
take the second link which includes a bunch of mods (also mod_edir).
Dont try to replace your existing Apache 2.0.59 with Apache 2.2.x, they are
incompatible! Instead install parallel, and load in protected space, see the
*.ncf files in :sys/apache22 when you have extracted.

Günter.