WebLogic proxy plugin: getPooledConn: No more connections in the pool

Hi,
We have weblogic proxy plugin installed in Sun One web server. but frequently we are getting following errors in proxy log:
<1670612410085901> attempt #0 out of a max of 5
<1670612410085901> Trying a pooled connection for '<IP>/<port>/<port>'
<1670612410085901> getPooledConn: No more connections in the pool for Host [<IP>] Port[<port>] SecurePort[<port>]
Can anybody please tell how this proxy plugin manages connection pools? I don't find any minimum / maximum number of conection to mention anywhere or how exactly it works?

Try increasing the "AcceptBackLog" settings on the weblogic server and then verify for any changed behavior.
Raise the Accept Backlog value from the default by 25 percent. Continue increasing the value by 25 percent until the messages cease to appear.
Link :[http://e-docs.bea.com/wls/docs81/perform/WLSTuning.html#1136287]

Similar Messages

GetPooledConn: No more connections in the pool for Host

We are receiving these types of errors in our NSAPI plugin debug logs:
Mon Dec 15 09:29:29 2008 <267131229354969494> trying connect to PRIMARY '172.16.81.45'/7141/7142
Mon Dec 15 09:29:29 2008 <267131229354969494> getPooledConn: No more connections in the pool for Host[172.16.81.45] Port[7141] SecurePort[7142]
Mon Dec 15 09:29:29 2008 <267131229354969494> Connect returns -1, and error no set to 150, msg 'Operation now in progress'
Mon Dec 15 09:29:29 2008 <267131229354969494> EINPROGRESS in connect() - selecting
How can we increase the number of connections in the pool so that these don't happen?

We are seeing a similar connection pool error captured in the WL proxy log doing load testing. Is there an answer to this question of how to increase this pool size?
Fri Jan 16 14:59:02 2009 <535212321359422334> Trying a pooled connection for '191.228.175.226/7003/0'
Fri Jan 16 14:59:02 2009 <535212321359422334> getPooledConn: No more connections in the pool for Host[191.228.175.226] Port[7003] SecurePort[0]
Fri Jan 16 14:59:02 2009 <535212321359422334> general list: trying connect to '191.228.175.226'/7003/0 at line 1319 for '/SIT-cccpol/PTGadget/SetCookies.jsp'
Fri Jan 16 14:59:02 2009 <535212321359422334> INFO: New NON-SSL URL
Fri Jan 16 14:59:02 2009 <535212321359422334> Connect returns -1, and error no set to 10035, msg 'Unknown error'
Fri Jan 16 14:59:02 2009 <535212321359422334> EINPROGRESS in connect() - selecting
Fri Jan 16 14:59:02 2009 <535212321359422334> Local Port of the socket is 2097
Fri Jan 16 14:59:02 2009 <535212321359422334> Remote Host 191.228.175.226 Remote Port 7003

How to resolve "getPooledConn: No more connections in the pool for Host"

I am using the wl9.1 proxy in a SunOne WebServer 6.1 (solaris), and I regularly get this error:
getPooledConn: No more connections in the pool for Host
I found several postings with this error, but no reactions on how to solve this.
in the proxy log, I see this info:
================New Request: [wls-app/page.do] =================
Tue Nov 13 13:05:30 2007 <18781194955530286> CookieName is deprecated and replaced by WLCookieName
Tue Nov 13 13:05:30 2007 <18781194955530286> Uri as read from rq (request) data structure /wls-app/page.do
Tue Nov 13 13:05:30 2007 <18781194955530286> Uri after pathTrim /wls-app/page.do
Tue Nov 13 13:05:30 2007 <18781194955530286> Uri resolved to /wls-app/page.do?page=messages
Tue Nov 13 13:05:30 2007 <18781194955530286> resolveRequest return code is [0]
Tue Nov 13 13:05:30 2007 <18781194955530286> URI=[wls-app/page.do?page=messages]
Tue Nov 13 13:05:30 2007 <18781194955530286> INFO: SSL is not configured
Tue Nov 13 13:05:30 2007 <18781194955530286> Found cookie from cookie header: wlsappCookie=H5TccKpNWGqfnvv2wG1znjmJkqNhMyhct0h93HDgfGnc7phpkdxW!-1488879380!864729474
Tue Nov 13 13:05:30 2007 <18781194955530286> Parsing cookie wlsappCookie=H5TccKpNWGqfnvv2wG1znjmJkqNhMyhct0h93HDgfGnc7phpkdxW!-1488879380!864729474
Tue Nov 13 13:05:30 2007 <18781194955530286> getpreferredServersFromCookie: [-1488879380!864729474]
Tue Nov 13 13:05:30 2007 <18781194955530286> primaryJVMID: [-1488879380]
secondaryJVMID: [864729474]
Tue Nov 13 13:05:30 2007 <18781194955530286> No of JVMIDs found in cookie: 2
Tue Nov 13 13:05:30 2007 <18781194955530286> Trying to locate Primary or Secondary using SrvrInfo with JVMID: -1488879380
Tue Nov 13 13:05:30 2007 <18781194955530286> getPreferredFromCookie: Found Primary 10.0.0.102:8514:0
Tue Nov 13 13:05:30 2007 <18781194955530286> Trying to locate Primary or Secondary using SrvrInfo with JVMID: 864729474
Tue Nov 13 13:05:30 2007 <18781194955530286> getPreferredFromCookie: Found Secondary 10.0.0.101:8514:0
Tue Nov 13 13:05:30 2007 <18781194955530286> getPreferredFromCookie: Found 2 servers
Tue Nov 13 13:05:30 2007 <18781194955530286> attempt #0 out of a max of 5
Tue Nov 13 13:05:30 2007 <18781194955530286> trying connect to PRIMARY '10.0.0.102'/8514/0
Tue Nov 13 13:05:30 2007 <18781194955530286> getPooledConn: No more connections in the pool for Host[10.0.0.102] Port[8514] SecurePort[0]
Tue Nov 13 13:05:30 2007 <18781194955530286> INFO: New NON-SSL URL
Tue Nov 13 13:05:30 2007 <18781194955530286> Connect returns -1, and error no set to 150, msg 'Operation now in progress'
Tue Nov 13 13:05:30 2007 <18781194955530286> EINPROGRESS in connect() - selecting
Tue Nov 13 13:05:30 2007 <18781194955530286> Local Port of the socket is 64242
Tue Nov 13 13:05:30 2007 <18781194955530286> Remote Host 10.0.0.102 Remote Port 8514
Tue Nov 13 13:05:30 2007 <18781194955530286> created a new connection to preferred server '10.0.0.102/8514' for '/wls-app/page.do?page=messages', Local port: 64242
Tue Nov 13 13:05:30 2007 <18781194955530286> WLS info : 10.0.0.102:8514 recycled? 0
Tue Nov 13 13:05:30 2007 <18781194955530286> Adding header for WLS 'WL-Proxy-Client-Cert: ###
---removed client cert info---
Tue Nov 13 13:10:30 2007 <18781194955530286> *******Exception type [READ_TIMEOUT] (no read after 300 seconds) raised at line 205 of Reader.cpp
Tue Nov 13 13:10:30 2007 <18781194955530286> caught exception in readStatus: READ_TIMEOUT [os error=0, line 205 of Reader.cpp]: no read after 300 seconds at line 822
Tue Nov 13 13:10:30 2007 <18781194955530286> PROTOCOL_ERROR: Backend Server not responding - isRecycled:0
Tue Nov 13 13:10:30 2007 <18781194955530286> *******Exception type [PROTOCOL_ERROR] (Backend Server not responding) raised at line 842 of URL.cpp
Tue Nov 13 13:10:30 2007 <18781194955530286> got PROTOCOL_ERROR exception in sendRequest phase at line 1364; Msg: PROTOCOL_ERROR [line 842 of URL.cpp]: Backend Server not responding
Tue Nov 13 13:10:30 2007 <18781194955530286> request [wls-app/page.do?page=messages] did NOT process successfully..................
Does anyone know how to resolve this issue ?
Thanks,
Cappaert Luc

We are seeing a similar connection pool error captured in the WL proxy log doing load testing. Is there an answer to this question of how to increase this pool size?
Fri Jan 16 14:59:02 2009 <535212321359422334> Trying a pooled connection for '191.228.175.226/7003/0'
Fri Jan 16 14:59:02 2009 <535212321359422334> getPooledConn: No more connections in the pool for Host[191.228.175.226] Port[7003] SecurePort[0]
Fri Jan 16 14:59:02 2009 <535212321359422334> general list: trying connect to '191.228.175.226'/7003/0 at line 1319 for '/SIT-cccpol/PTGadget/SetCookies.jsp'
Fri Jan 16 14:59:02 2009 <535212321359422334> INFO: New NON-SSL URL
Fri Jan 16 14:59:02 2009 <535212321359422334> Connect returns -1, and error no set to 10035, msg 'Unknown error'
Fri Jan 16 14:59:02 2009 <535212321359422334> EINPROGRESS in connect() - selecting
Fri Jan 16 14:59:02 2009 <535212321359422334> Local Port of the socket is 2097
Fri Jan 16 14:59:02 2009 <535212321359422334> Remote Host 191.228.175.226 Remote Port 7003

Plugin w/IIS and 'No more connections in the pool' msg in logs

I am using the proxy plugin with IIS 5.0. Its fronts 2 weblogic instances that require sticky as there is session information that is not replicated (too large to be replicated).
I am seeing occasions when the request is suddently sent to the wrong server, which of course causes application failure, since the session does not exist there. Whenever this occurs I see the following message in the proxy plugin log (with DEBUG on and set to ALL).
Note: This request occurs less than one second after previous requests from the same client so there should not be timeout related issues.
I would really appreciate if any knows why the 2 logs entries below exist, what they mean, and what could be the cause:


Wed Aug 31 16:09:02 2005 getPooledConn: No more connections in the pool for Host[sasuprdcce03.cce.hp.com] Port[12302] SecurePort[12302]
 
Wed Aug 31 16:09:02 2005 Connection refused, error = 10022

The server was in fact up and processing requests and was not backlogged, and the proxy did actually immediately reconnect for the same request:
Wed Aug 31 16:09:02 2005 general list: created a new connection to 'sasuprdcce03.cce.hp.com'/12302 for '/impressions_wtp/images/menu_tabs/tab_top_right.gif', Local port: 4427

However, when the new connection above occurs the Cookie has changed.
Thank you,
Darryl

Did you find a fix for this issue?

Weblogic proxy plugin closes keep-alive connections to clients randomly

In short we have following arhitecture:
clients ---> wl proxy plugin 1 ----> weblogic 1
clients ---> wl proxy plugin 2 ----> weblogic 2
Beacuse of the application/installation specific requirements, we are not using failover, one wl proxy always forwards requests to one weblogic (simple configuration).
Application is TR-069 protocol based (SOAP over HTTP) so it very much relays on persistence TCP connections (Connection: keep-alive). This TCP persistence has to work correctly in order that TR-069 messages are exchanged in required order, otherwise we have a error on application layer.
Here and there we've noticed applications errors which suggest that we have some problems in TCP connection between the client and the weblogic server. After sniffing, we've noticed that weblogic proxy plugin (Apache) randomly, or because of some other reason we do not know, decides to close TCP connection to client, even app on weblogic did not request so ???
As a result, client opens new connection to the server with new TR-069 session and it gets bounced beacuse it allready has one open on weblogic server.
We've sniffed, traced everything we could, we were searching for patterns in time, etc... but we can not find the reason why proxy plugin decides to close the connection to the client (not to the weblogic server).
Trace (replaced sensitive information):
Thu Apr 29 15:05:50 2010 <958012725463463784> URL::parseHeaders: CompleteStatusLine set to [HTTP/1.1 200 OK]
Thu Apr 29 15:05:50 2010 <958012725463463784> URL::parseHeaders: StatusLine set to [200 OK]
Thu Apr 29 15:05:50 2010 <958012725463463784> parsed all headers OK
Thu Apr 29 15:05:50 2010 <958012725463463784> sendResponse() : r->status = '200'
Thu Apr 29 15:05:50 2010 <958012725463463784> canRecycle: conn=1 status=200 isKA=1 clen=545 isCTE=0
Thu Apr 29 15:05:50 2010 <958012725463463784> closeConn: pooling for '$IP$/$PORT$'
Thu Apr 29 15:05:50 2010 <958012725463463784> request [$URL$] processed successfully..................
!!!! Now it closes the TCP connection and inserts "Connection: close" HTTP header !!!
WL proxy plugin conf params are:
WebLogicCluster $IP$:$PORT$
DynamicServerList OFF
KeepAliveTimeout 90
MaxKeepAliveRequests 0
KeepAliveSecs 55
Apache worker configuration is:
<IfModule mpm_worker_module>
PidFile var/run/httpd-worker.pid
LockFile var/run/accept-worker.lock
StartServers 2
MinSpareThreads 25
MaxSpareThreads 75
ThreadLimit 200
ThreadsPerChild 200
MaxClients 2000
MaxRequestsPerChild 0
AcceptMutex pthread
</IfModule>
Why weblogic proxy plugin ignores Keep-alive directive and decides to close connection to the client by itself?
Any help?

If a WebLogic Server instance listed in either the WebLogicCluster parameter or a dynamic cluster list returned from WebLogic Server fails, the failed server is marked as "bad" and the plug-in attempts to connect to the next server in the list.
MaxSkipTime sets the amount of time after which the plug-in will retry the server marked as "bad." The plug-in attempts to connect to a new server in the list each time a unique request is received (that is, a request without a cookie).
Note: The MaxSkips parameter has been deprecated as the MaxSkipTime parameter.
See also here: http://download-llnw.oracle.com/docs/cd/E13222_01/wls/docs81/plugins/plugin_params.html
You said the problem arises under significant load. Maybe, it is wise to tune the number file descriptor's on your operating system. HTTP connections are nothing more than TCP sockets on the operating system. All modern operating systems treat sockets as a specialized form of file access and use data structures called file descriptors to track open sockets and files for an operating system process. To control resource usage for processes on the machine, the operating system restricts the number of open file descriptors per process. You should be aware that all TCP connections that have been gracefully closed by an application will go into what is known as the TIME_WAIT state before being discarded by the operating system.
On most unix systems you can use netstat -a | grep TIME_WAIT | wc -l to detemine the number of socket in time_wait state. You have to check with your system adminstrator how to tune the tcp_time_wait_interval. On solaris you can use: /usr/sbin/ndd -set /dev/tcp tcp_time_wait_interval 60000

IP address lost in Weblogic proxy plugin

          Hi,
          We have 4 web servers that forward requests for jsps to 10 weblogic instances
          working in a cluster. The web servers have IPlanet with weblogic proxy plugin.
          One of the jsps has logic to retrieve the client's IP address and then return
          the name of the country to which the IP address belongs. But since the jsp always
          receives requests from one of the 4 web servers on the same LAN, it gets only
          the internal IP address of the web server and returns no country code. To retrieve
          the IP address of the caller in the jsp, I'm using
          ipAddress = request.getRemoteAddr();
          How can I make my jsp know the actual source IP address of the client (i.e the
          end user)?
          Any help would be appreciated.
          Dipak Jha


Try increasing the "AcceptBackLog" settings on the weblogic server and then verify for any changed behavior.
Raise the Accept Backlog value from the default by 25 percent. Continue increasing the value by 25 percent until the messages cease to appear.
Link :[http://e-docs.bea.com/wls/docs81/perform/WLSTuning.html#1136287]

SharePoint - Error_1_Error occurred in deployment step 'Add Solution': Timeout expired. The timeout period elapsed prior to obtaining a connection from the pool. This may have occurred because all pooled connections were in use and max pool size was rea

Hi,
I am Shanmugavel, SharePoint developer,
I am facing the below SharePoint 2013 deployment issue while deploying using VS2012.
If i will deploy the same wsp or existing wsp
(last build) using direct powershell deployment, the solution adding properly, but the same timeout exception coming while activation the features. Please find the below error.
I tried the below activists:
1. Restarted my dev server, DB server.
2. tried the same solution id different server
3. tried existing wsp file (last build version)
4. Deactivated all the features, including project Active deployment configuration.... but still i am facing the same issue.
I hope this is not coding level issue, because still my code is not start running, before that some problem coming.
Please help me any one..... Last two days i am struck because of this...

What you need to understand is the installation of a WSP does not do much. It just makes sure that you relevant solution files are deployed to the SharePoint farm.
Next comes the point when you activate the features. It is when the code which you have written to "Activate" certain features for your custom solution.
Regarding the error you are getting, it typically means that you have more connections (default is I guess 100) open for a SQL database then you are allowed to.
If you have a custom database and you are opening a connection, make sure you close it as well.
Look at the similar discussion here:
The timeout period elapsed prior to obtaining a connection from the pool. This may have occurred because all pooled connections were in use and max pool
size was reached[^]
I would suggest further to look at the
ULS logs[^] to get better insight.
Manas Bhardwaj's Stream : www.manasbhardwaj.net

How do I configure the number of connection in the pool for webservice axis

Hi
How do I configure the number of connection in the pool using xml.
We are using axis 1.4 and commons-httpclient-3.0.1Is there any way we can do it using the client-config.wsdd file.
We do not want to do any modification in the code for this.
Is it possible to set socket timeout also in the wsdd file.
Your resolution will be really helpful for us.
Thank You
Ottran

Export them at a smaller size:
File -> Export - not the options at 'Size'
Regards
TD

How to Destory connections from the Pool?

Hi,
I would like to know if it is possible to destroy/refresh a connection id from the DBPool using just a javacode that either refresh the whole pool or just one specific connection.
We are using a DB cluster environment and once one of the Database Servers goes down, the connection continues to point to the old DB Server. We are testing if the connection is still pointing to a valid DBServer (using a simple select getdate() statement (the DBMS is SQLServer 2000). The problem is that even if we close the connection object in the JavaCode, the physical connection still points to the old DB IP address, and we want to kill that connection from the DBPool.
We know that once the connection id is destoyed(using the DESTROY_CONN command of the J2EE engine), a new connection is created for the right DB Server.
We are using the following versio of EP:
6.0.2.37.0.Enterprise_Portal_Support_Package_2
Thanks.

Hi,
There is no difference in calling a transaction from module pool and report . The statement
Call transaction tranaction name works similarly in both the cases . The only thing you need to take care is your program flow in Module pool.
For calling transaction set the parameters of the transaction and on using the call transaction statement it will call the transaction withe the set values. use skip initial screen option to execute it from your program. This entire code needs to be written in PAI event where you will be handling your OK codes.
Hope this helps.

Round Robin was not happening for my cluster with WebLogic Proxy Plugin

 Hi,
 I configured my cluster with software load balancer, HTTPClusterServlet. By default,
 it is load balancing with Round Robin Algorithm. That means one HTTP request
 goes to server1, and the other HTTP request goes to server2. However, it is not
 what I can see no matter for the requests in one HTTP session or not.
 Say I open two browser, and log into my application with two different users,
 one is "cyang", the other is "xpression". Then the HTTP request (for servlet/jsp)
 from two browsers always go to the same server1, server2 is not invoked at all.
 I did see one time, with only one session (one browser with "xPression" user log
 in), the most requests go to server1, suddenly I am brough into log in page, then
 I noticed that the request for "xPression" moved to server2 although server1 is
 still alive. Therefore, at most, I can say it is "Random", rather than "Round
 Robin".
 What is the real meaning for HTTP servlet/jsp load balancing algorithm? Does
 Round Robin mean request go to each server in turns? Does it have to be different
 session or it can be within one session?


It should be sticky. If not, then bug / config error.
 Peace,
 Cameron Purdy
 Tangosol, Inc.
 http://www.tangosol.com/coherence.jsp
 Tangosol Coherence: Clustered Replicated Cache for Weblogic
 "Carole Yang" <[email protected]> wrote in message
 news:[email protected]...
 >
 > Thanks. Yeh, with two kind of browsers, I do see the request goes to
 different
 > servers.
 >
 > That goes back to the original question. Does "Round Robin" here fall
 into the
 > scope of a HTTP session. However, that is not always true for my tests.
 Sometimes,
 > HTTP request just randomly goes to another server while in the same HTTP
 session.
 > It is not sticky to one particular server during one session.
 >
 >
 >
 > --Carole
 >
 >
 > "Cameron Purdy" <[email protected]> wrote:
 > >Has to be different sessions to go to different machines.
 > >
 > >Best way to test is to run one session in IE and the other in Mozilla
 > >or
 > >Netscape.
 > >
 > >Peace,
 > >
 > >Cameron Purdy
 > >Tangosol, Inc.
 > >http://www.tangosol.com/coherence.jsp
 > >Tangosol Coherence: Clustered Replicated Cache for Weblogic
 > >
 > >
 > >"Carole Yang" <[email protected]> wrote in message
 > >news:[email protected]...
 > >>
 > >> Hi,
 > >>
 > >> I configured my cluster with software load balancer,
 HTTPClusterServlet.
 > >By default,
 > >> it is load balancing with Round Robin Algorithm. That means one HTTP
 > >request
 > >> goes to server1, and the other HTTP request goes to server2. However,
 > >it
 > >is not
 > >> what I can see no matter for the requests in one HTTP session or not.
 > >>
 > >> Say I open two browser, and log into my application with two different
 > >users,
 > >> one is "cyang", the other is "xpression". Then the HTTP request (for
 > >servlet/jsp)
 > >> from two browsers always go to the same server1, server2 is not invoked
 > >at
 > >all.
 > >>
 > >> I did see one time, with only one session (one browser with "xPression"
 > >user log
 > >> in), the most requests go to server1, suddenly I am brough into log
 > >in
 > >page, then
 > >> I noticed that the request for "xPression" moved to server2 although
 > >server1 is
 > >> still alive. Therefore, at most, I can say it is "Random", rather
 > >than
 > >"Round
 > >> Robin".
 > >>
 > >> What is the real meaning for HTTP servlet/jsp load balancing algorithm?
 > >Does
 > >> Round Robin mean request go to each server in turns? Does it have
 > >to be
 > >different
 > >> session or it can be within one session?
 > >
 > >
 >

Allows more connection then the profile values

I am using the below version.
Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - Prod
PL/SQL Release 10.2.0.1.0 - Production
CORE 10.2.0.1.0 Production
TNS for Linux: Version 10.2.0.1.0 - Production
NLSRTL Version 10.2.0.1.0 - Production
Here is the profile i am using for one of my schema.
CREATE PROFILE auditprofile LIMIT
SESSIONS_PER_USER 2
CPU_PER_SESSION UNLIMITED
CPU_PER_CALL UNLIMITED
CONNECT_TIME UNLIMITED
LOGICAL_READS_PER_SESSION DEFAULT
LOGICAL_READS_PER_CALL UNLIMITED
PRIVATE_SGA UNLIMITED
COMPOSITE_LIMIT UNLIMITED
idle_time unlimited
failed_login_attempts 10
password_life_time unlimited
password_reuse_time unlimited
password_reuse_max unlimited
password_lock_time unlimited
password_grace_time unlimited
still it allows to connect more then 2 session. Any explanation is highly appreciated...

Shrinika wrote:
I am using the below version.
Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - Prod
PL/SQL Release 10.2.0.1.0 - Production
CORE 10.2.0.1.0 Production
TNS for Linux: Version 10.2.0.1.0 - Production
NLSRTL Version 10.2.0.1.0 - Production
Here is the profile i am using for one of my schema.
CREATE PROFILE auditprofile LIMIT
SESSIONS_PER_USER 2
CPU_PER_SESSION UNLIMITED
CPU_PER_CALL UNLIMITED
CONNECT_TIME UNLIMITED
LOGICAL_READS_PER_SESSION DEFAULT
LOGICAL_READS_PER_CALL UNLIMITED
PRIVATE_SGA UNLIMITED
COMPOSITE_LIMIT UNLIMITED
idle_time unlimited
failed_login_attempts 10
password_life_time unlimited
password_reuse_time unlimited
password_reuse_max unlimited
password_lock_time unlimited
password_grace_time unlimited
still it allows to connect more then 2 session. Any explanation is highly appreciated...Did you set the parameter RESOURCE_LIMIT=TRUE at the system level before trying out?
alter system set resource_limit=true;HTH
Aman....

Problem with WebLogic 10.3.3, Apache 2.2.3 and WebLogic Apache proxy plugin

I have a problem with using Apache 2.2.3 as a WebLogic SSL proxy. I have Apache 2.2 running and successfully configured an SSL cert, config in ssl.conf is...
<VirtualHost secure.daftdonkey.com>
# Setup SSL for secure.daftdonkey.com
ServerName secure.daftdonkey.com
SSLEngine On
SSLCertificateFile /oracle/secure/secure.daftdonkey.com.crt
SSLCertificateKeyFile /oracle/secure/secure.daftdonkey.com.key
SSLCertificateChainFile /oracle/secure/gd_bundle.crt
</VirtualHost>
This works fine
Now I want Apache to proxy requests to my WebLogic Server and secure them over SSL as well
e.g. a request to https://secure.daftdonkey.com/service goes to https://weblogic.internal.site/service
I have downloaded and configured the weblogic module and tested it handling traffic for HTTP and that worked, then I switched the WebLogic module to use SSL.
LoadModule weblogic_module modules/mod_wl.so
<IfModule mod_weblogic.c>
WebLogicHost weblogic.internal.site
WebLogicPort 16101
Debug ALL
SecureProxy ON
WLSSLWallet /oracle/secure/my-wallet
WLLogFile /tmp/wl-proxy.log
</IfModule>
<Location /service>
SetHandler weblogic-handler
</Location>
Starting Apache throws the error. I think this is my main problem, i've searched support.oracle.com and not found anything.
[Mon Jun 07 23:00:48 2010] [crit] (20014)Internal error: WL SSL Init failed for server: (null) on 0
but Apache starts... I get this error when I make a request to https://secure.daftdonkey.com/service
Failure of server APACHE bridge:
No backend server available for connection: timed out after 10 seconds or idempotent set to OFF.
Looking into the log /tmp/wl-proxy.log I see....
Mon Jun 7 22:30:10 2010 <393212759749971> URLfactory Created
Mon Jun 7 22:30:10 2010 <393312759750102> ================New Request: [GET /service HTTP/1.1] =================
Mon Jun 7 22:30:10 2010 <393312759750102> INFO: SSL is configured
Mon Jun 7 22:30:10 2010 <393312759750102> Using Uri /service
Mon Jun 7 22:30:10 2010 <393312759750102> After trimming path: '/service'
Mon Jun 7 22:30:10 2010 <393312759750102> The final request string is '/service'
Mon Jun 7 22:30:10 2010 <393312759750102> parseServerList: Socket Address hostnames 'weblogic.internal.site:16101'
Mon Jun 7 22:30:10 2010 <393312759750102> Host extracted from serverlist is [weblogic.internal.site]
Mon Jun 7 22:30:10 2010 <393312759750102> parseServerList: IP from socket Address [192.168.100.15]
Mon Jun 7 22:30:10 2010 <393312759750102> Initializing lastIndex=0 for a list of length=1
Mon Jun 7 22:30:10 2010 <393312759750102> getListNode: created a new server node: id='weblogic.internal.site:16101' server_name='secure.daftdonkey.com', port='443'
Mon Jun 7 22:30:10 2010 <393312759750102> attempt #0 out of a max of 5
Mon Jun 7 22:30:10 2010 <393312759750102> Trying a pooled connection for '192.168.100.15/16101/16101'
Mon Jun 7 22:30:10 2010 <393312759750102> getPooledConn: found a host and port/securePort match
Mon Jun 7 22:30:10 2010 <393312759750102> getPooledConn: No more connections in the pool for Host[192.168.100.15] Port[16101] SecurePort[16101]
Mon Jun 7 22:30:10 2010 <393312759750102> general list: trying connect to '192.168.100.15'/16101/16101 at line 3188 for '/service'
Mon Jun 7 22:30:10 2010 <393312759750102> SSL is not configured for this connection
Mon Jun 7 22:30:10 2010 <393312759750102> Local Port of the socket is 45580
Mon Jun 7 22:30:10 2010 <393312759750102> Remote Host 192.168.100.15 Remote Port 16101
Mon Jun 7 22:30:10 2010 <393312759750102> URL::connect SSLConn for reader is not set as it is NULL
Mon Jun 7 22:30:10 2010 <393312759750102> general list: created a new connection to '192.168.100.15'/16101 for '/service', Local port:0
Mon Jun 7 22:30:10 2010 <393312759750102> Hdrs from clnt:[Host]=[secure.daftdonkey.com]
Mon Jun 7 22:30:10 2010 <393312759750102> Hdrs from clnt:[User-Agent]=[Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.9) Gecko/20100315 Firefox/3.5.9 ( .NET CLR 3.5.30729)]
Mon Jun 7 22:30:10 2010 <393312759750102> Hdrs from clnt:[Accept]=[text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8]
Mon Jun 7 22:30:10 2010 <393312759750102> Hdrs from clnt:[Accept-Language]=[en-us,en;q=0.5]
Mon Jun 7 22:30:10 2010 <393312759750102> Hdrs from clnt:[Accept-Encoding]=[gzip,deflate]
Mon Jun 7 22:30:10 2010 <393312759750102> Hdrs from clnt:[Accept-Charset]=[ISO-8859-1,utf-8;q=0.7,*;q=0.7]
Mon Jun 7 22:30:10 2010 <393312759750102> Hdrs from clnt:[Keep-Alive]=[300]
Mon Jun 7 22:30:10 2010 <393312759750102> Hdrs from clnt:[Connection]=[keep-alive]
Mon Jun 7 22:30:10 2010 <393312759750102> parse_header is done
Mon Jun 7 22:30:10 2010 <393312759750102> Method is GET
Mon Jun 7 22:30:10 2010 <393312759750102> About to call parseHeaders
Mon Jun 7 22:30:10 2010 <393312759750102> URL::parseHeaders: Value of parsedHeaders = [0]
Mon Jun 7 22:30:10 2010 <393312759750102> URL::sendHeaders(): meth='GET' file='/service' protocol='HTTP/1.1'
Mon Jun 7 22:30:10 2010 <393312759750102> Hdrs to WLS: [Host]=[secure.daftdonkey.com]
Mon Jun 7 22:30:10 2010 <393312759750102> Hdrs to WLS: [User-Agent]=[Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.9) Gecko/20100315 Firefox/3.5.9 ( .NET CLR 3.5.30729)]
Mon Jun 7 22:30:10 2010 <393312759750102> Hdrs to WLS: [Accept]=[text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8]
Mon Jun 7 22:30:10 2010 <393312759750102> Hdrs to WLS: [Accept-Language]=[en-us,en;q=0.5]
Mon Jun 7 22:30:10 2010 <393312759750102> Hdrs to WLS: [Accept-Encoding]=[gzip,deflate]
Mon Jun 7 22:30:10 2010 <393312759750102> Hdrs to WLS: [Accept-Charset]=[ISO-8859-1,utf-8;q=0.7,*;q=0.7]
Mon Jun 7 22:30:10 2010 <393312759750102> Hdrs to WLS: [Keep-Alive]=[300]
Mon Jun 7 22:30:10 2010 <393312759750102> Hdrs to WLS: [Connection]=[Keep-Alive]
Mon Jun 7 22:30:10 2010 <393312759750102> Hdrs to WLS: [WL-Proxy-SSL]=[true]
Mon Jun 7 22:30:10 2010 <393312759750102> Hdrs to WLS: [WL-Proxy-Client-IP]=[192.168.100.245]
Mon Jun 7 22:30:10 2010 <393312759750102> Hdrs to WLS: [Proxy-Client-IP]=[192.168.100.245]
Mon Jun 7 22:30:10 2010 <393312759750102> Hdrs to WLS: [X-Forwarded-For]=[192.168.100.245]
Mon Jun 7 22:30:10 2010 <393312759750102> Hdrs to WLS: [X-WebLogic-KeepAliveSecs]=[30]
Mon Jun 7 22:30:10 2010 <393312759750102> Hdrs to WLS: [X-WebLogic-Force-JVMID]=[unset]
Mon Jun 7 22:30:10 2010 <393312759750102> Reader::fill(): first=0 last=0 toRead=4096
Mon Jun 7 22:30:10 2010 <393312759750102> Reader::fill(): sysRecv returned -1
Mon Jun 7 22:30:10 2010 <393312759750102> *******Exception type [READ_ERROR_FROM_SERVER] (socket read failure) raised at line 251 of ../nsapi/Reader.cpp
Mon Jun 7 22:30:10 2010 <393312759750102> caught exception in readStatus: READ_ERROR_FROM_SERVER [os error=104, line 251 of ../nsapi/Reader.cpp]: socket read failure at line 963
Mon Jun 7 22:30:10 2010 <393312759750102> PROTOCOL_ERROR: Backend Server not responding - isRecycled:0
Mon Jun 7 22:30:10 2010 <393312759750102> Marking 192.168.100.15:16101 as bad
Mon Jun 7 22:30:10 2010 <393312759750102> got exception in sendRequest phase: Backend Server not responding at line 3702
Mon Jun 7 22:30:10 2010 <393312759750102> Failing over after sendRequest() exception: PROTOCOL_ERROR as Idempotent is set to ON
Mon Jun 7 22:30:10 2010 <393312759750102> attempt #1 out of a max of 5
However connecting directly to https://192.168.100.15:16101/irm_rights is successful.
Ouput from orapki seems to show a valid wallet.
[root@content my-wallet]# /oracle/install/bin/orapki wallet display -wallet /oracle/secure/my-wallet/
Oracle PKI Tool : Version 11.1.1.2.0
Copyright (c) 2004, 2009, Oracle and/or its affiliates. All rights reserved.
Requested Certificates:
User Certificates:
Trusted Certificates:
Subject: OU=Class 2 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Subject: OU=Secure Server Certification Authority,O=RSA Data Security\, Inc.,C=US
Subject: OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Subject: OU=Class 1 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Subject: CN=weblogic.internal.site,OU=FOR TESTING ONLY,O=MyOrganization,L=MyTown,ST=MyState,C=US
Subject: CN=GTE CyberTrust Global Root,OU=GTE CyberTrust Solutions\, Inc.,O=GTE Corporation,C=US
Also the apache log at /var/log/httpd/ssl_error_log shows.
[Mon Jun 07 23:59:03 2010] [error] [client 192.168.100.245] ap_proxy: trying GET /service/ at backend host '192.168.100.15/16101; got exception 'Backend Server not responding'
[Mon Jun 07 23:59:03 2010] [error] [client 192.168.100.245] ap_proxy: trying GET /service/ at backend host '192.168.100.15/16101; got exception 'Backend Server not responding'
[Mon Jun 07 23:59:03 2010] [error] [client 192.168.100.245] ap_proxy: trying GET /service/ at backend host '192.168.100.15/16101; got exception 'Backend Server not responding'
[Mon Jun 07 23:59:03 2010] [error] [client 192.168.100.245] ap_proxy: trying GET /service/ at backend host '192.168.100.15/16101; got exception 'Backend Server not responding'
[Mon Jun 07 23:59:03 2010] [error] [client 192.168.100.245] ap_proxy: trying GET /service/ at backend host '192.168.100.15/16101; got exception 'Backend Server not responding'
[Mon Jun 07 23:59:03 2010] [error] [client 192.168.100.245] ap_proxy: trying GET /service/ at backend host '192.168.100.15/16101; got exception 'Backend Server not responding'
Editing the httpd.conf and sending traffic from Apache to WebLogic over regular HTTP works, config is...
LoadModule weblogic_module modules/mod_wl.so
<IfModule mod_weblogic.c>
WebLogicHost weblogic.internal.site
WebLogicPort 16100
Debug ALL
# SecureProxy ON
# WLSSLWallet /oracle/secure/my-wallet
WLLogFile /tmp/wl-proxy.log
</IfModule>
Resulting detail from /tmp/wl-proxy.log
Mon Jun 7 23:20:50 2010 <415912759780351> URLfactory Created
Mon Jun 7 23:20:50 2010 <416012759780502> ================New Request: [GET /service/ HTTP/1.1] =================
Mon Jun 7 23:20:50 2010 <416012759780502> Using Uri /service/
Mon Jun 7 23:20:50 2010 <416012759780502> After trimming path: '/service/'
Mon Jun 7 23:20:50 2010 <416012759780502> The final request string is '/service/'
Mon Jun 7 23:20:50 2010 <416012759780502> parseServerList: Socket Address hostnames 'weblogic.internal.site:16100'
Mon Jun 7 23:20:50 2010 <416012759780502> Host extracted from serverlist is [weblogic.internal.site]
Mon Jun 7 23:20:50 2010 <416012759780502> parseServerList: IP from socket Address [192.168.100.15]
Mon Jun 7 23:20:50 2010 <416012759780502> Initializing lastIndex=0 for a list of length=1
Mon Jun 7 23:20:50 2010 <416012759780502> getListNode: created a new server node: id='weblogic.internal.site:16100' server_name='secure.daftdonkey.com', port='443'
Mon Jun 7 23:20:50 2010 <416012759780502> attempt #0 out of a max of 5
Mon Jun 7 23:20:50 2010 <416012759780502> Trying a pooled connection for '192.168.100.15/16100/16100'
Mon Jun 7 23:20:50 2010 <416012759780502> getPooledConn: found a host and port/securePort match
Mon Jun 7 23:20:50 2010 <416012759780502> getPooledConn: No more connections in the pool for Host[192.168.100.15] Port[16100] SecurePort[16100]
Mon Jun 7 23:20:50 2010 <416012759780502> general list: trying connect to '192.168.100.15'/16100/16100 at line 3188 for '/service/'
Mon Jun 7 23:20:50 2010 <416012759780502> SSL is not configured for this connection
Mon Jun 7 23:20:50 2010 <416012759780502> Local Port of the socket is 56647
Mon Jun 7 23:20:50 2010 <416012759780502> Remote Host 192.168.100.15 Remote Port 16100
Mon Jun 7 23:20:50 2010 <416012759780502> URL::connect SSLConn for reader is not set as it is NULL
Mon Jun 7 23:20:50 2010 <416012759780502> general list: created a new connection to '192.168.100.15'/16100 for '/service/', Local port:0
Mon Jun 7 23:20:50 2010 <416012759780502> Hdrs from clnt:[Host]=[secure.daftdonkey.com]
Mon Jun 7 23:20:50 2010 <416012759780502> Hdrs from clnt:[User-Agent]=[Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.9) Gecko/20100315 Firefox/3.5.9 ( .NET CLR 3.5.30729)]
Mon Jun 7 23:20:50 2010 <416012759780502> Hdrs from clnt:[Accept]=[text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8]
Mon Jun 7 23:20:50 2010 <416012759780502> Hdrs from clnt:[Accept-Language]=[en-us,en;q=0.5]
Mon Jun 7 23:20:50 2010 <416012759780502> Hdrs from clnt:[Accept-Encoding]=[gzip,deflate]
Mon Jun 7 23:20:50 2010 <416012759780502> Hdrs from clnt:[Accept-Charset]=[ISO-8859-1,utf-8;q=0.7,*;q=0.7]
Mon Jun 7 23:20:50 2010 <416012759780502> Hdrs from clnt:[Keep-Alive]=[300]
Mon Jun 7 23:20:50 2010 <416012759780502> Hdrs from clnt:[Connection]=[keep-alive]
Mon Jun 7 23:20:50 2010 <416012759780502> Hdrs from clnt:[Cookie]=[JSESSIONID=YF4nMNfZ3lJ5ZrVV9HGpKwj3hf12yRvlf4zksQf6pkKx2LhJ2ywY!34167467]
Mon Jun 7 23:20:50 2010 <416012759780502> parse_header is done
Mon Jun 7 23:20:50 2010 <416012759780502> Method is GET
Mon Jun 7 23:20:50 2010 <416012759780502> About to call parseHeaders
Mon Jun 7 23:20:50 2010 <416012759780502> URL::parseHeaders: Value of parsedHeaders = [0]
Mon Jun 7 23:20:50 2010 <416012759780502> URL::sendHeaders(): meth='GET' file='/service/' protocol='HTTP/1.1'
Mon Jun 7 23:20:50 2010 <416012759780502> Hdrs to WLS: [Host]=[secure.daftdonkey.com]
Mon Jun 7 23:20:50 2010 <416012759780502> Hdrs to WLS: [User-Agent]=[Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.9) Gecko/20100315 Firefox/3.5.9 ( .NET CLR 3.5.30729)]
Mon Jun 7 23:20:50 2010 <416012759780502> Hdrs to WLS: [Accept]=[text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8]
Mon Jun 7 23:20:50 2010 <416012759780502> Hdrs to WLS: [Accept-Language]=[en-us,en;q=0.5]
Mon Jun 7 23:20:50 2010 <416012759780502> Hdrs to WLS: [Accept-Encoding]=[gzip,deflate]
Mon Jun 7 23:20:50 2010 <416012759780502> Hdrs to WLS: [Accept-Charset]=[ISO-8859-1,utf-8;q=0.7,*;q=0.7]
Mon Jun 7 23:20:50 2010 <416012759780502> Hdrs to WLS: [Keep-Alive]=[300]
Mon Jun 7 23:20:50 2010 <416012759780502> Hdrs to WLS: [Cookie]=[JSESSIONID=YF4nMNfZ3lJ5ZrVV9HGpKwj3hf12yRvlf4zksQf6pkKx2LhJ2ywY!34167467]
Mon Jun 7 23:20:50 2010 <416012759780502> Hdrs to WLS: [Connection]=[Keep-Alive]
Mon Jun 7 23:20:50 2010 <416012759780502> Hdrs to WLS: [WL-Proxy-SSL]=[true]
Mon Jun 7 23:20:50 2010 <416012759780502> Hdrs to WLS: [WL-Proxy-Client-IP]=[192.168.100.245]
Mon Jun 7 23:20:50 2010 <416012759780502> Hdrs to WLS: [Proxy-Client-IP]=[192.168.100.245]
Mon Jun 7 23:20:50 2010 <416012759780502> Hdrs to WLS: [X-Forwarded-For]=[192.168.100.245]
Mon Jun 7 23:20:50 2010 <416012759780502> Hdrs to WLS: [X-WebLogic-KeepAliveSecs]=[30]
Mon Jun 7 23:20:50 2010 <416012759780502> Hdrs to WLS: [X-WebLogic-Force-JVMID]=[unset]
Mon Jun 7 23:20:50 2010 <416012759780502> Reader::fill(): first=0 last=0 toRead=4096
Mon Jun 7 23:20:50 2010 <416012759780502> Reader::fill(): sysRecv returned 568
Mon Jun 7 23:20:50 2010 <416012759780502> URL::parseHeaders: CompleteStatusLine set to [HTTP/1.1 302 Moved Temporarily]
Mon Jun 7 23:20:50 2010 <416012759780502> URL::parseHeaders: StatusLine set to [302 Moved Temporarily]
Mon Jun 7 23:20:50 2010 <416012759780502> Hdrs from WLS:[Date]=[Tue, 08 Jun 2010 06:20:50 GMT]
Mon Jun 7 23:20:50 2010 <416012759780502> Hdrs from WLS:[Transfer-Encoding]=[chunked]
Mon Jun 7 23:20:50 2010 <416012759780502> Hdrs from WLS:[Location]=[https://secure.daftdonkey.com/service/faces/LoginPage.jspx]
Mon Jun 7 23:20:50 2010 <416012759780502> Hdrs from WLS:[X-WebLogic-JVMID]=[34167467]
Mon Jun 7 23:20:50 2010 <416012759780502> Hdrs from WLS:[X-Powered-By]=[Servlet/2.5 JSP/2.1]
Mon Jun 7 23:20:50 2010 <416012759780502> parsed all headers OK
Mon Jun 7 23:20:50 2010 <416012759780502> done with sendRequest
Mon Jun 7 23:20:50 2010 <416012759780502> sendResponse() : r->status = '302'
Mon Jun 7 23:20:50 2010 <416012759780502> Hdrs to client (add):[Date]=[Tue, 08 Jun 2010 06:20:50 GMT]
Mon Jun 7 23:20:50 2010 <416012759780502> Hdrs to client (add):[Location]=[https://secure.daftdonkey.com/service/faces/LoginPage.jspx]
Mon Jun 7 23:20:50 2010 <416012759780502> for 192.168.100.15/16100/16100, updated JVMID: 34167467
Mon Jun 7 23:20:50 2010 <416012759780502> Hdrs to client (add):[X-Powered-By]=[Servlet/2.5 JSP/2.1]
Mon Jun 7 23:20:50 2010 <416012759780502> calling closeConn() with non-null URL* at 3826
Mon Jun 7 23:20:50 2010 <416012759780502> canRecycle: conn=1 status=302 isKA=1 clen=-1 isCTE=1
Mon Jun 7 23:20:50 2010 <416012759780502> closeConn: pooling for '192.168.100.15/16100'
Mon Jun 7 23:20:50 2010 <416012759780502> closeConn: pooling '0'
Mon Jun 7 23:20:50 2010 <416012759780502> request [irm_rights/] processed successfully..................
Mon Jun 7 23:20:50 2010 <415912759780351> Cleaning up the list node 'weblogic.internal.site:16100'list Length '1'

I found the answer to this. The documentation is not clear enough, LD_LIBRARY_PATH MUST be set and MUST have a pointer to the directory where the SSL .so modules are. I wrote up a blog article explaining the configuration and detailed this issue.
http://blogs.oracle.com/irm/2010/06/quick_guide_to_oracle_irm_11g_1.html

Weblogic Apache Plugins -Put/Delete Method

Hi ,
I need to find out if the weblogic plugin Apache supports the use of http PUT and DELETE operations (instead of GET and POST) and if so I need an example plugin configuration where the clients are using the "PUT" and "DELETE" operations. And, again assuming the plugin supports PUT and DELETE, are there any known issues with there use in conjunction with the plugin.

Hi ,
Here is the details about the HTTP Put/Delete Protocol :-
Supported :-
HTTP Put and Delete Protocol is supported in Weblogic and Weblogic Apache Plugin .
In Apache also these protocols are supported .
Configuration :-
If you want to configure it older version of Apache we have to use the (WebDav) of the apache .But you don't have do anything for newer version
as this module should be there and we have to do only configuration for Apache for this module .
Configuration of WebDab is here in newer version of Apache:-
http://www.serverwatch.com/tutorials/article.php/2176771/Enabling-WebDAV-on-Apache.htm
We don't have to do anything on Weblogic and Apache Weblogic Plugin side .As by default they support these protocols.
Usage :-
I tested this in my environment by sending a Put request to Weblogic Plugin using the Tool called "Fiddler".
I sent a request to Weblogic Plugin using this tool and it works . Even i checked on the Apache plugin log files also that it works.
There is good note from apache how to use the Put/Delete function in Apache .
Please follow this link for usage for Put/Delete for Apache for uploading files to server . How this make life easy .
http://www.apacheweek.com/features/put
http://stackoverflow.com/questions/1051004/how-to-send-put-delete-http-request-in-httpurlconnection
Security Risk :-
Please keep in mind that there is security risk when we use this protocol which is clearly explain in the note when we use this in the example above.
Here is a nice article also which explains the security concerns of Put :-
https://www.golemtechnologies.com/articles/http-put-security
Tested hitting localhost/console
Edited the request header GET /console/login/LoginForm.jsp HTTP/1.1 to PUT /console/login/LoginForm.jsp HTTP/1.1
Got the following in the apache log file
================New Request: [PUT /console/ HTTP/1.1] =================
Wed May 29 19:24:35 2013 <608013698698758> INFO: SSL is not configured
Wed May 29 19:24:35 2013 <608013698698758> Using Uri /console/
Wed May 29 19:24:35 2013 <608013698698758> After trimming path: '/console/'
Wed May 29 19:24:35 2013 <608013698698758> The final request string is '/console/'
Wed May 29 19:24:35 2013 <608013698698758> SEARCHING id=[10.157.153.243:7001] from current ID=[10.157.153.243:7001]
Wed May 29 19:24:35 2013 <608013698698758> The two ids matched
Wed May 29 19:24:35 2013 <608013698698758> @@@FOUND...id=[10.157.153.243:7001], server_name=[localhost], server_port=[80]
Wed May 29 19:24:35 2013 <608013698698758> attempt #0 out of a max of 5
Wed May 29 19:24:35 2013 <608013698698758> Trying a pooled connection for '10.157.153.243/7001/7001'
Wed May 29 19:24:35 2013 <608013698698758> getPooledConn: No more connections in the pool for Host[10.157.153.243] Port[7001] SecurePort[7001]
Wed May 29 19:24:35 2013 <608013698698758> general list: trying connect to '10.157.153.243'/7001/7001 at line 2716 for '/console/'
Wed May 29 19:24:35 2013 <608013698698758> INFO: New NON-SSL URL
Wed May 29 19:24:35 2013 <608013698698758> Connect returns -1, and error no set to 10035, msg 'Unknown error'
Wed May 29 19:24:35 2013 <608013698698758> EINPROGRESS in connect() - selecting
Wed May 29 19:24:35 2013 <608013698698758> Local Port of the socket is 3175
Wed May 29 19:24:35 2013 <608013698698758> Remote Host 10.157.153.243 Remote Port 7001
Wed May 29 19:24:35 2013 <608013698698758> general list: created a new connection to '10.157.153.243'/7001 for '/console/', Local port:3175
Wed May 29 19:24:35 2013 <608013698698758> Hdrs from clnt:[Host]=[localhost]
Wed May 29 19:24:35 2013 <608013698698758> Hdrs from clnt:[Connection]=[keep-alive]
Wed May 29 19:24:35 2013 <608013698698758> Hdrs from clnt:[Accept]=[text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8]
Wed May 29 19:24:35 2013 <608013698698758> Hdrs from clnt:[User-Agent]=[Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/27.0.1453.94 Safari/537.36]
Wed May 29 19:24:35 2013 <608013698698758> Hdrs from clnt:[Accept-Encoding]=[gzip,deflate,sdch]
Wed May 29 19:24:35 2013 <608013698698758> Hdrs from clnt:[Accept-Language]=[en-US,en;q=0.8]
Wed May 29 19:24:35 2013 <608013698698758> Hdrs from clnt:[Cookie]=[ADMINCONSOLESESSION=yQ7GRmLfKBhHdJrQ55t4X2v9y0v1NZCGj5qtfQdshz6w87nPc4nW!419247034]
Wed May 29 19:24:35 2013 <608013698698758> URL::sendHeaders(): meth='PUT' file='/console/' protocol='HTTP/1.1'
Wed May 29 19:24:35 2013 <608013698698758> Hdrs to WLS:[Host]=[localhost]
Wed May 29 19:24:35 2013 <608013698698758> Hdrs to WLS:[Accept]=[text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8]
Wed May 29 19:24:35 2013 <608013698698758> Hdrs to WLS:[User-Agent]=[Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/27.0.1453.94 Safari/537.36]
Wed May 29 19:24:35 2013 <608013698698758> Hdrs to WLS:[Accept-Encoding]=[gzip,deflate,sdch]
Wed May 29 19:24:35 2013 <608013698698758> Hdrs to WLS:[Accept-Language]=[en-US,en;q=0.8]
Wed May 29 19:24:35 2013 <608013698698758> Hdrs to WLS:[Cookie]=[ADMINCONSOLESESSION=yQ7GRmLfKBhHdJrQ55t4X2v9y0v1NZCGj5qtfQdshz6w87nPc4nW!419247034]
Wed May 29 19:24:35 2013 <608013698698758> Hdrs to WLS:[Connection]=[Keep-Alive]
Wed May 29 19:24:35 2013 <608013698698758> Hdrs to WLS:[WL-Proxy-SSL]=[false]
Wed May 29 19:24:35 2013 <608013698698758> Hdrs to WLS:[WL-Proxy-Client-IP]=[127.0.0.1]
Wed May 29 19:24:35 2013 <608013698698758> Hdrs to WLS:[Proxy-Client-IP]=[127.0.0.1]
Wed May 29 19:24:35 2013 <608013698698758> Hdrs to WLS:[X-Forwarded-For]=[127.0.0.1]
Wed May 29 19:24:35 2013 <608013698698758> Hdrs to WLS:[X-WebLogic-KeepAliveSecs]=[30]
Wed May 29 19:24:35 2013 <608013698698758> Hdrs to WLS:[X-WebLogic-Force-JVMID]=[419247034]
Wed May 29 19:24:35 2013 <608013698698758> URL::parseHeaders: CompleteStatusLine set to [HTTP/1.1 302 Moved Temporarily]
Wed May 29 19:24:35 2013 <608013698698758> URL::parseHeaders: StatusLine set to [302 Moved Temporarily]
Wed May 29 19:24:35 2013 <608013698698758> Hdrs from WLS:[Connection]=[close]
Wed May 29 19:24:35 2013 <608013698698758> Hdrs from WLS:[Date]=[Wed, 29 May 2013 23:24:35 GMT]
Wed May 29 19:24:35 2013 <608013698698758> Hdrs from WLS:[Transfer-Encoding]=[chunked]
Wed May 29 19:24:35 2013 <608013698698758> Hdrs from WLS:[Location]=[http://localhost/console/console.portal?_nfpb=true]
Wed May 29 19:24:35 2013 <608013698698758> Hdrs from WLS:[Content-Type]=[text/html; charset=UTF-8]
Wed May 29 19:24:35 2013 <608013698698758> Hdrs from WLS:[X-WebLogic-JVMID]=[419247034]
Wed May 29 19:24:35 2013 <608013698698758> Hdrs from WLS:[X-Powered-By]=[Servlet/2.5 JSP/2.1]
Wed May 29 19:24:35 2013 <608013698698758> parsed all headers OK
Wed May 29 19:24:35 2013 <608013698698758> sendResponse() : r->status = '302'
Wed May 29 19:24:35 2013 <608013698698758> Hdrs to client (add):[Date]=[Wed, 29 May 2013 23:24:35 GMT]
Wed May 29 19:24:35 2013 <608013698698758> Hdrs to client (add):[Location]=[http://localhost/console/console.portal?_nfpb=true]
Wed May 29 19:24:35 2013 <608013698698758> Hdrs to client (add):[X-Powered-By]=[Servlet/2.5 JSP/2.1]
Wed May 29 19:24:35 2013 <608013698698758> canRecycle: conn=1 status=302 isKA=0 clen=-1 isCTE=1
Wed May 29 19:24:35 2013 <608013698698758> closeConn: URL.canRecycle() returns false, deleting URL '10.157.153.243/7001'
Wed May 29 19:24:35 2013 <608013698698758> request [console/] processed successfully..................
Regards
Sahil Soni
------------------------------------------------------------------------------------------------------------------------------

Configuring Apache HTTP Server with Oracle Weblogic Server plugin

Hello friends,
I have a scenario of OIM 9.1.0.2 on Oracle Application Server 11g and Weblogic Server Apache HTTP Server.
Oracle WebLogic Server is configured in cluster (node1 and node2), also use the Oracle Weblogic Server plugin for integration with Apache.
One of the tests is to lose one of the nodes for the apache plugin redirects the node that has less overhead.
When the mode is node1 and node2 stop start mode and try to access the management console of Oracle Identity Manager, the plugin sometimes redirects to the other active node, and on another occasion shows the oracle management console identity manager without the colors of the basic look and feel.
Deputy of the Apache HTTP Server log, do you expect your comments to solve this case?
*************************************************log****************************************************
Server Details are:
OrigHostInfo [192.168.1.200]
isOrigHostInfoDNS [0]
Host [192.168.1.200]
Port [7002]
SecurePort [7004]
Mon Jan 30 22:10:43 2012 <2600713279794431> Initializing lastIndex=0 for a list of length=1
Mon Jan 30 22:10:43 2012 <2600713279794431> initJVMID: Trying to locate Primary or Secondary using SrvrInfo with JVMID [-872106207]
Mon Jan 30 22:10:43 2012 <2600713279794431> initJVMID: Found Primary 192.168.1.200:7002:7004
Mon Jan 30 22:10:43 2012 <2600713279794431> INFO: Closing SSL context
Mon Jan 30 22:10:43 2012 <2600713279794431> .....internal request /bea_wls_internal/WLDummyInitJVMIDs.....processed
Mon Jan 30 22:10:43 2012 <2600713279794431> getPreferredFromCookie: Found 1 servers
Mon Jan 30 22:10:43 2012 <2600713279794431> attempt #0 out of a max of 5
Mon Jan 30 22:10:43 2012 <2600713279794431> trying connect to PRIMARY '192.168.1.200'/7002/7004
Mon Jan 30 22:10:43 2012 <2600713279794431> getPooledConn: No more connections in the pool for Host[192.168.1.200] Port[7002] SecurePort[7004]
Mon Jan 30 22:10:43 2012 <2600713279794431> New SSL URL: match = 0 oid = 22
Mon Jan 30 22:10:43 2012 <2600713279794431> Connect returns -1, and error no set to 150, msg 'Operation now in progress'
Mon Jan 30 22:10:43 2012 <2600713279794431> EINPROGRESS in connect() - selecting
Mon Jan 30 22:10:43 2012 <2600713279794431> Setting peerID for new SSL connection
Mon Jan 30 22:10:43 2012 <2600713279794431> 0ae2 0436 0000 1b5c ...6...\
Mon Jan 30 22:10:43 2012 <2600713279794431> Local Port of the socket is 39186
Mon Jan 30 22:10:43 2012 <2600713279794431> Remote Host 192.168.1.200 Remote Port 7004
Mon Jan 30 22:10:43 2012 <2600713279794431> created a new connection to preferred server '192.168.1.200/7004' for '/xlWebApp/images/spacer.gif', Local port:39186
Mon Jan 30 22:10:43 2012 <2600713279794431> INFO: CA certificate missing basicConstraints, validation failed
Mon Jan 30 22:10:43 2012 <2600713279794431> ERROR: SSLWrite failed
Mon Jan 30 22:10:43 2012 <2600713279794431> SEND failed (ret=-1) at 793 of file ../nsapi/URL.cpp
Mon Jan 30 22:10:43 2012 <2600713279794431> *******Exception type [WRITE_ERROR_TO_SERVER] raised at line 794 of ../nsapi/URL.cpp
Mon Jan 30 22:10:43 2012 <2600713279794431> Marking 192.168.1.200:7004 as bad
Mon Jan 30 22:10:43 2012 <2600713279794431> got exception in sendRequest phase: WRITE_ERROR_TO_SERVER [os error=0, line 794 of ../nsapi/URL.cpp]: at line 3160
Mon Jan 30 22:10:43 2012 <2600713279794431> INFO: Closing SSL context
Mon Jan 30 22:10:43 2012 <2598413279794431>
================New Request: [GET /images/cab.gif HTTP/1.1] =================
Mon Jan 30 22:10:43 2012 <2598413279794431> INFO: SSL is configured
Mon Jan 30 22:10:43 2012 <2598413279794431> SSL Main Context not set. Calling InitSSL
Mon Jan 30 22:10:43 2012 <2598413279794431> INFO: SSL configured successfully
Mon Jan 30 22:10:43 2012 <2598413279794431> Using Uri /images/cab.gif
Mon Jan 30 22:10:43 2012 <2598413279794431> After trimming path: '/images/cab.gif'
Mon Jan 30 22:10:43 2012 <2598413279794431> adding prepend path: /xlWebApp/
Mon Jan 30 22:10:43 2012 <2598413279794431> The final request string is '/xlWebApp/images/cab.gif'
Mon Jan 30 22:10:43 2012 <2598413279794431> Host extracted from serverlist is [192.168.1.100]
Mon Jan 30 22:10:43 2012 <2598413279794431> Host extracted from serverlist is [192.168.1.200]
Mon Jan 30 22:10:43 2012 <2598413279794431> Initializing lastIndex=0 for a list of length=2
Mon Jan 30 22:10:43 2012 <2598413279794431> getListNode: created a new server node: id='192.168.1.100:7004,192.168.1.200:7004' server_name='OIMSERVER', port='443'
Mon Jan 30 22:10:43 2012 <2598413279794431> getPreferred: availcookie=[JSESSIONID=6RGCPnbTFRG7LBrTRpFnv1QLnQHkxkqr4pjGhhGJyrJWJ1rv86NK!-872106207!NONE]
Mon Jan 30 22:10:43 2012 <2598413279794431> Found cookie from cookie header: JSESSIONID=6RGCPnbTFRG7LBrTRpFnv1QLnQHkxkqr4pjGhhGJyrJWJ1rv86NK!-872106207!NONE
Mon Jan 30 22:10:43 2012 <2598413279794431> Parsing cookie JSESSIONID=6RGCPnbTFRG7LBrTRpFnv1QLnQHkxkqr4pjGhhGJyrJWJ1rv86NK!-872106207!NONE
Mon Jan 30 22:10:43 2012 <2598413279794431> getpreferredServersFromCookie: [-872106207!NONE]
Mon Jan 30 22:10:43 2012 <2598413279794431> primaryJVMID: [-872106207]
secondaryJVMID: [NONE]
Mon Jan 30 22:10:43 2012 <2598413279794431> No of JVMIDs found in cookie: 1
Mon Jan 30 22:10:43 2012 <2598413279794431> getPreferredFromCookie: Start Position is 0, listLen is 2
Mon Jan 30 22:10:43 2012 <2598413279794431> getPreferredFromCookie: Either JVMIDs not set or they are stale. Will try to get JVMIDs from WLS
Mon Jan 30 22:10:43 2012 <2598413279794431> initJVMID: Iterating SrvrList from position 0
Mon Jan 30 22:10:43 2012 <2598413279794431> ======internal request /bea_wls_internal/WLDummyInitJVMIDs======
initJVMID: Trying Host[192.168.1.100] Port[7004] SecurePort[7004] useSSL [1] ioTimeout [30] socketTimeout [2]
Mon Jan 30 22:10:43 2012 <2598413279794431> New SSL URL: match = 0 oid = 0
Mon Jan 30 22:10:43 2012 <2598413279794431> Connect returns -1, and error no set to 146, msg 'Connection refused'
Mon Jan 30 22:10:43 2012 <2598413279794431> Error connecting to host 192.168.1.100:7004
Mon Jan 30 22:10:43 2012 <2598413279794431> *******Exception type [CONNECTION_REFUSED] (Error connecting to host 192.168.1.100:7004 errno = 146) raised at line 1723 of ../nsapi/URL.cpp
Mon Jan 30 22:10:43 2012 <2598413279794431> initJVMID: Failed to retrieved JVMID for 192.168.1.100:7004:7004
Mon Jan 30 22:10:43 2012 <2598413279794431> initJVMID: Marked server as BAD
Mon Jan 30 22:10:43 2012 <2598413279794431> INFO: Closing SSL context
Mon Jan 30 22:10:43 2012 <2598413279794431> .....internal request /bea_wls_internal/WLDummyInitJVMIDs.....processed
Mon Jan 30 22:10:43 2012 <2598413279794431> ======internal request /bea_wls_internal/WLDummyInitJVMIDs======
initJVMID: Trying Host[192.168.1.200] Port[7004] SecurePort[7004] useSSL [1] ioTimeout [30] socketTimeout [2]
Mon Jan 30 22:10:43 2012 <2598413279794431> New SSL URL: match = 0 oid = 0
Mon Jan 30 22:10:43 2012 <2598413279794431> Connect returns -1, and error no set to 150, msg 'Operation now in progress'
Mon Jan 30 22:10:43 2012 <2598413279794431> EINPROGRESS in connect() - selecting
Mon Jan 30 22:10:43 2012 <2598413279794431> Setting peerID for new SSL connection
Mon Jan 30 22:10:43 2012 <2598413279794431> 0ae2 0436 0000 1b5c ...6...\
Mon Jan 30 22:10:43 2012 <2598413279794431> Local Port of the socket is 39188
Mon Jan 30 22:10:43 2012 <2598413279794431> Remote Host 192.168.1.200 Remote Port 7004
Mon Jan 30 22:10:43 2012 <2598413279794431> INFO: Certificate validation succeeded
Mon Jan 30 22:10:43 2012 <2598413279794431> INFO: Negotiated to cipher: 3
Mon Jan 30 22:10:43 2012 <2598413279794431> SSLWrite sent 171
Mon Jan 30 22:10:43 2012 <2598413279794431> SSLWrite completed, sent 171
Mon Jan 30 22:10:43 2012 <2598413279794431> Reader::fill() SSLRead returned: 0 290
Mon Jan 30 22:10:43 2012 <2598413279794431> URL::parseHeaders: CompleteStatusLine set to [HTTP/1.1 404 Not Found]
Mon Jan 30 22:10:43 2012 <2598413279794431> URL::parseHeaders: StatusLine set to [404 Not Found]
Mon Jan 30 22:10:43 2012 <2598413279794431> parsed all headers OK
Mon Jan 30 22:10:43 2012 <2598413279794431> Parsing cluster list: -872106207!182584374!7002!7004
Mon Jan 30 22:10:43 2012 <2598413279794431> parseJVMID: Parsing JVMID '-872106207!182584374!7002!7004'
Mon Jan 30 22:10:43 2012 <2598413279794431> parseJVMID: Actually parsing '-872106207!182584374!7002!7004'
Mon Jan 30 22:10:43 2012 <2598413279794431> ServerInfo struct for JVMID '-872106207' populated
Server Details are:
OrigHostInfo [192.168.1.200]
isOrigHostInfoDNS [0]
Host [192.168.1.200]
Port [7002]
SecurePort [7004]
Mon Jan 30 22:10:43 2012 <2598413279794431> Initializing lastIndex=0 for a list of length=1
Mon Jan 30 22:10:43 2012 <2598413279794431> initJVMID: Trying to locate Primary or Secondary using SrvrInfo with JVMID [-872106207]
Mon Jan 30 22:10:43 2012 <2598413279794431> initJVMID: Found Primary 192.168.1.200:7002:7004
Mon Jan 30 22:10:43 2012 <2598413279794431> INFO: Closing SSL context
Mon Jan 30 22:10:43 2012 <2598413279794431> .....internal request /bea_wls_internal/WLDummyInitJVMIDs.....processed
Mon Jan 30 22:10:43 2012 <2598413279794431> getPreferredFromCookie: Found 1 servers
Mon Jan 30 22:10:43 2012 <2598413279794431> attempt #0 out of a max of 5
Mon Jan 30 22:10:43 2012 <2598413279794431> trying connect to PRIMARY '192.168.1.200'/7002/7004
Mon Jan 30 22:10:43 2012 <2598413279794431> getPooledConn: No more connections in the pool for Host[192.168.1.200] Port[7002] SecurePort[7004]
Mon Jan 30 22:10:43 2012 <2598413279794431> New SSL URL: match = 0 oid = 22
Mon Jan 30 22:10:43 2012 <2598413279794431> Connect returns -1, and error no set to 150, msg 'Operation now in progress'
Mon Jan 30 22:10:43 2012 <2598413279794431> EINPROGRESS in connect() - selecting
Mon Jan 30 22:10:43 2012 <2598413279794431> Setting peerID for new SSL connection
Mon Jan 30 22:10:43 2012 <2598413279794431> 0ae2 0436 0000 1b5c ...6...\
Mon Jan 30 22:10:43 2012 <2598413279794431> Local Port of the socket is 39189
Mon Jan 30 22:10:43 2012 <2598413279794431> Remote Host 192.168.1.200 Remote Port 7004
Mon Jan 30 22:10:43 2012 <2598413279794431> created a new connection to preferred server '192.168.1.200/7004' for '/xlWebApp/images/cab.gif', Local port:39189
Mon Jan 30 22:10:43 2012 <2598413279794431> INFO: CA certificate missing basicConstraints, validation failed
Mon Jan 30 22:10:43 2012 <2598413279794431> ERROR: SSLWrite failed
Mon Jan 30 22:10:43 2012 <2598413279794431> SEND failed (ret=-1) at 793 of file ../nsapi/URL.cpp
Mon Jan 30 22:10:43 2012 <2598413279794431> *******Exception type [WRITE_ERROR_TO_SERVER] raised at line 794 of ../nsapi/URL.cpp
Mon Jan 30 22:10:43 2012 <2598413279794431> Marking 192.168.1.200:7004 as bad
Mon Jan 30 22:10:43 2012 <2598413279794431> got exception in sendRequest phase: WRITE_ERROR_TO_SERVER [os error=0, line 794 of ../nsapi/URL.cpp]: at line 3160
Mon Jan 30 22:10:43 2012 <2598413279794431> INFO: Closing SSL context
Thanks

"One of the tests is to lose one of the nodes for the apache plugin redirects the node that has less overhead."
Note that the plug-in does a round robin load balancing, for example, in the case of three server (1,2,3) it does 1-2-3-1-2-3-1...
with server 3 going down it does 1-2-1-2-1...
An example configuration (with SSL off) looks as follows:
LoadModule weblogic_module "/home/oracle/weblogic12.1.1/apache/modules/mod_wl.so"
<IfModule weblogic_module>
 ConnectTimeoutSecs 10
 ConnectRetrySecs 2
 DebugConfigInfo ON
 WLSocketTimeoutSecs 2
 WLIOTimeoutSecs 300
 Idempotent ON
 FileCaching ON
 KeepAliveSecs 20
 KeepAliveEnabled ON
 DynamicServerList ON
 WLProxySSL OFF
</IfModule>
<Location /LoadTest6>
 SetHandler weblogic-handler
 WebLogicCluster 172.31.0.175:7002,172.31.0.113:7003
</Location>Also see the complete example here: http://middlewaremagic.com/weblogic/?p=7795
"the plugin sometimes redirects to the other active node"
This is somewhat strange, do you have session binding turned off?
"and on another occasion shows the oracle management console identity manager without the colors of the basic look and feel."
This could happen due to mime types (not really sure just a hunch). Here is a general story on this concept: https://developer.mozilla.org/en/Properly_Configuring_Server_MIME_Types
and the apache module: http://httpd.apache.org/docs/2.2/mod/mod_mime.html

Hardware Load Balancers and Cluster WebLogic Proxy Plug-in setting

Documentation states that we need to enable the Cluster WebLogic Proxy Plug-in setting when there is a proxy plugin or HttpClusterServlet configured.
We used to have Weblogic Proxy plugin and the setting is still there, also the proxy was replaced by the hardware loadbalancer. Everything works normally and no one complained, but I would assume that WebLogic Proxy Plug-in setting should not be applicable any longer.
Is it possibly harmful to have that setting there? Does it mean that the loadbalancer emulates WebLogic Proxy Plug-in and also need this set?
Thank you

The Weblogic Proxy Plug-in Enabled flag only affects the behavior of a WL proxy module (such as if you were using Apache to proxy to WL via the mod_wl.so module). The value controls what IP address is returned when you call request.getRemoteAddr() from your application. If not enabled, you will get the IP address of the web server that proxied the request. If enabled, you will get the remote client IP address (instead of the proxy IP address) facilitated by the WL-Proxy-Client-IP header. If you are no longer using a plug-in module, the setting will have no affect. Hope this helps...

WebLogic proxy plugin: getPooledConn: No more connections in the pool

Similar Messages

Maybe you are looking for