topic Re: Failed to send AJP message in Alfresco Forum

Failed to send AJP message

mtsiak — Tue, 10 Oct 2017 14:46:35 GMT

I am getting the above exception: 2017-10-10 17:40:05,050 INFO [webscripts.connector.RemoteClient] [ajp-apr-8009-exec-7] Exception calling (GET) http://mydomain:8080/alfresco/s/api/task-instances?authority=testfaculty&properties=bpm_priority,bpm_status,bpm_dueDate,bpm_description&exclude=w

Re: Failed to send AJP message

douglascrp — Tue, 10 Oct 2017 19:25:33 GMT

Hello.

Are you sure you followed the right steps to perform the upgrade?

Do you have any customization on that server?

Re: Failed to send AJP message

mtsiak — Wed, 11 Oct 2017 06:19:26 GMT

We cannot seem to find any misfunctionalites for now. User's profiles are ok, documents, workflows work. our amps work.

For more info, below i am attaching parts of our configurations.

shared/classes/alfresco/web-extension/share-config-custom.xml
<connector>
   <id>alfrescoHeader</id>
   <name>Alfresco Connector</name>
    <description>Connects to an Alfresco instance using header and cookie-based authentication</description>
    <class>org.alfresco.web.site.servlet.SlingshotAlfrescoConnector</class>
    <userHeader>X-Alfresco-Remote-User</userHeader>
</connector>
...
<endpoint>
   <id>alfresco-api</id>
   <parent-id>alfresco</parent-id>
   <name>Alfresco Public API - user access</name>
   <description>Access to Alfresco Repository Public API that require user authentication.
               This makes use of the authentication that is provided by parent 'alfresco' endpoint.</description>
   <connector-id>alfrescoHeader</connector-id>
   <endpoint-url>http://mydomain:8080/alfresco/api</endpoint-url>
   <identity>user</identity>
   <external-auth>true</external-auth>
</endpoint>

We have set an apache2 as a proxy on 80, and 443, and external SSO authentication.

/etc/apache2/sites-enabled/mydomain-ssl.conf
Listen my.ip:443
<VirtualHost my.ip:443>
   ...
   ProxyPass /alfresco ajp://127.0.0.1:8009/alfresco connectiontimeout=1200 timeout=1200
   ProxyPassReverse /alfresco ajp://127.0.0.1:8009/alfresco
   ...
  <Location /alfresco>
     AuthType shibboleth
     ShibRequireSession On
     require valid-user
     RequestHeader set X-Alfresco-Remote-User %{uid}e
   </Location>
</VirtualHost>

The connectors

tomcat/conf/server.xml
<Connector port="8080" URIEncoding="UTF-8" protocol="HTTP/1.1" connectionTimeout="20000" 
   maxHttpHeaderSize="32768" />
<Connector port="8009" URIEncoding="UTF-8" protocol="AJP/1.3" tomcatAuthentication="false" 
   redirectPort="8443" packetSize="65536" maxHttpHeaderSize="32768" />
<Connector port="8443" URIEncoding="UTF-8" protocol="org.apache.coyote.http11.Http11Protocol" 
   SSLEnabled="true" maxThreads="150" scheme="https" 
   keystoreFile="/opt/alfresco-community/alf_data/keystore/ssl.keystore" 
   keystorePass="thepass" keystoreType="JCEKS" secure="true" connectionTimeout="240000" 
   truststoreFile="/opt/alfresco-community/alf_data/keystore/ssl.truststore" 
   truststorePass="thepass" truststoreType="JCEKS" clientAuth="want" 
   allowUnsafeLegacyRenegotiation="true" 
   maxHttpHeaderSize="32768" SSLProtocols="TLSv1" />

Hope to enlight you. How can we find how this request is produced?

Re: Failed to send AJP message

mtsiak — Wed, 11 Oct 2017 11:31:17 GMT

Also they all seem to come from the same authority. We use this authority for our tests, and the errors are still printed, although we are not doing something with this user.

Re: Failed to send AJP message

mtsiak — Thu, 12 Oct 2017 09:21:32 GMT

we restarted apache2 and tomcat, have not connected with this user and we get still the same error!

Below some properties related to the database:

db.pool.initial=10
db.pool.min=10
db.pool.idle=50
db.pool.validate.return=false
db.pool.validate.borrow=true
db.pool.evict.validate=false
db.pool.abandoned.detect=false
db.pool.abandoned.time=300
db.pool.abandoned.log=false
db.pool.max=275
db.pool.validate.query=SELECT 1
# credits to loftux: alfresco-ubuntu-install/alfresco-global.properties at master · loftuxab/alfresco-ubuntu-install · GitHub

Re: Failed to send AJP message

douglascrp — Thu, 19 Oct 2017 13:47:25 GMT

You can use the following sample file as a reference in order to check if you have all the endpoints set

alfresco-ubuntu-install/share-config-custom.xml at master · loftuxab/alfresco-ubuntu-install · GitHub