This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

ACC 2.2 Becomes Unavailable

Posted in another thread, but it happened again today, and I noticed no one had responded to the thread previously:

The new problem is that when attempting to connect to the gateway manager site, I sometimes get a 500 server not available error. I SSH in, the load is low (


This thread was automatically locked due to age.
Parents
  • Hi Bruce,

    until we further can debug or reproduce the issue, this might help if the Gateway Manager gets stuck again:

    # /etc/init.d/httpd restart


    Please note, this will also restart the WebAdmin GUI, but it sure beats the time required for a reboot.

    Could you grant us access to some logfiles or the machine itself?

    Regards,
    Henning
  • I've found that a reboot is not necessary; I just have to retry access a couple of times after it's been "idle" and access starts working again.

    As for access, sure.  Just shoot me a PM as to where I should send access info.  I'll also indicate what times I got this to happen so you can take a look at the log files for the right time frame.  Once it's no longer "asleep" it works fine.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Sophos Platinum Partner

    --------------------------------------

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Reply
  • I've found that a reboot is not necessary; I just have to retry access a couple of times after it's been "idle" and access starts working again.

    As for access, sure.  Just shoot me a PM as to where I should send access info.  I'll also indicate what times I got this to happen so you can take a look at the log files for the right time frame.  Once it's no longer "asleep" it works fine.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Sophos Platinum Partner

    --------------------------------------

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Children
  • Here are what I believe are the pertinent httpd logfile entries when this happens:

    2010:08:09-08:28:33 myacc httpd[30618]: [error] [client 10.x.x.x] FastCGI: comm with server "/var/acc/index.plx" aborted: idle timeout (30 sec)
    2010:08:09-08:28:33 myacc httpd[30618]: [error] [client 10.x.x.x] FastCGI: incomplete headers (0 bytes) received from server "/var/acc/index.plx"
    2010:08:09-08:28:37 myacc httpd: 10.x.x.x - - [09/Aug/2010:08:28:02 -0400] "GET / HTTP/1.1" 500 525
    2010:08:09-08:30:58 myacc httpd[30522]: [error] [client 10.x.x.x] FastCGI: server "/var/acc/index.plx" stderr: Use of uninitialized value in concatenation (.) or string at (eval 230) line 20.


    After these logs, everything appears to be normal, after my second request.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Sophos Platinum Partner

    --------------------------------------

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • Hello Bruce,

    what are the system resources available to ACC? 
    Have they changed between 2.1 and 2.2?

    The number of concurrent Gateway Manager sessions is based on the available system memory. For every 128 MB you get an extra session. It might take a minute for previously used sessions to become available again. So, depending on the number of concurrent users, we recommend at least 1 GB of system memory for usage with ACC.

    Will chew on the logfile snippet in the meantime.

    Thanks and regards,
    Henning
  • No system resources have changed; it's on a VM (on a Xeon VMWare server by itself, no other VMs running) with 2GB of RAM allocated to the VM.  Same machine as before.  I've sent the login info you requested via support.

    No large number of concurrent users (1 or 2 tops); in fact the issue only occurs after no one has accessed gateway manager for a while (not sure how long, but it definitely happens at the beginning of every day).

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Sophos Platinum Partner

    --------------------------------------

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.