Here's another one. The first line, [info] Initial (No.1) HTTPS request received for child 1 (server dev.company.com:443), ALWAYS appears before the error occurs from what i can see in the logs. ************************* 140295168-[Mon Jan 19 20:53:28 2009] [info] Initial (No.1) HTTPS request received for child 1 (server dev.company.com:443) 140295279-[Mon Jan 19 20:53:28 2009] [debug] mod_authnz_ldap.c(373): [client 86.132.127.13] [21424] auth_ldap authenticate: using URL ldap://10.1.37.250:389/OU=Users,OU=Company LLP,DC=company,DC=local?sAMAccountName?sub?(objectClass=*) 140295501:[Mon Jan 19 20:53:28 2009] [warn] [client 86.132.127.13] [21424] auth_ldap authenticate: user a.nother authentication failed; URI /trac/technical [LDAP: ldap_simple_bind_s() failed][Can't contact LDAP server] 140295714-[Mon Jan 19 20:53:28 2009] [debug] ssl_engine_kernel.c(1770): OpenSSL: Write: SSL negotiation finished successfully 140295830-[Mon Jan 19 20:53:28 2009] [info] [client 86.132.127.13] Connection closed to child 1 with standard shutdown (server dev.company.com:443) ************************** -----Original Message----- From: Eric Covener [mailto:covener@xxxxxxxxx] Sent: 19 January 2009 21:02 To: users@xxxxxxxxxxxxxxxx Subject: Re: Sudden "Can't Contact LDAP Server" On Mon, Jan 19, 2009 at 3:56 PM, Oliver Marshall <oliver.marshall@xxxxxxxxxxxxx> wrote: > Eric, > > Reproducing it is possible, you just have to keep hitting f5, but it occurs at random. Maybe once ever hour, maybe once every ten mins. I would say that rebuilding the httpd server with a patch may be beyond me, certainly beyond my sanity level at the moment. > > I may look at setting up a packet trace tomorrow if I have time. > > In your opinion though, there's nothing up with the setup or the configuration bits I posted? > I don't think you have any kind of config problem, and it even looks like the connection pool is not a problem since this is your first request being handled. When it fails, is it always preceded by that "first connection for child" msg? -- Eric Covener covener@xxxxxxxxx --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|