Pete's questions

I've got some files that aren't being served on a site, and assuming it was a permissions issue I ran ls -Z but keep seeing ? in place of the security context:

-rw-rw-r--  pete pete ?                                index.cfm

I get this running sudo as well. Can anyone explain what the ? means or what I need to do to fix the file?

I've tried using sudo chcon system_u:object_r:httpd_config_t:s0 index.cfm to match the other permissions of files in the folder, but that doesn't help. Also if I try to recreate the file I get the ? again

cat index.cfm > index.bkp
sudo ls -Z
-rw-rw-r--  pete pete ?                                index.bkp
-rwxrwxrwx. pete pete system_u:object_r:httpd_config_t:s0 index.cfm
mv index.bkp index.cfm
-rw-rw-r--  pete pete ?                                index.cfm

I have an .htaccess file in a /reports/ folder with the following rule:

RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^(.*)$ index.cfm?path=$1 [L,QSA]

There is an index.cfm in the /reports/ folder that loads a list of all manufacturers, if one is not specified in ?path=

This is the error received when visiting one of the pages with /make/ in the URL

HTTP Status 403 – Forbidden
Type Status Report
Description The server understood the request but refuses to authorize it.
Apache Tomcat/9.0.21

I'm on CentOS 7 with Apache 2.4.

I have another site on the server that uses a RewriteRule in the vhost.conf file and that works fine in dev, staging and production.

If I change the RewriteRule to this, it redirects fine.

RewriteRule ^(.*)$ https://google.co.uk [L,QSA]

If I visit the page directly (/reports/?path=BMW/) the page loads fine.

The only thing I've been able to find is the mod_jk.log has this error when I try to load the BMW (or any other) report:

[warn] ajp_process_callback::jk_ajp_common.c (2245): (cfusion) AJP13 protocol: Reuse is set to false

This error occurs on CF Update 10 but not on Update 5 (my dev/staging servers needed updating from 5, and when I did they aslo started failing like the production server). Does anyone have any idea what "Reuse is set to false" means? And if that's related to something that would stop my RewriteRule from working?

I've tried searching the Tomcat source code and I can't find "reuse is set to false"

I've found a "DisableReuse" flag in the Tomcat docs, but I can't find mention of that on dev, staging or production servers.

I tried setting JkOptions -DisableReuse in /etc/httpd/conf/mod_jk.conf and restarted Apache, that made no difference.

I can't find the difference between the 2 working servers and the one failing to rewrite to CFM pages, other that the "reuse is set to false" log entry.

• Coldfusion 2018,0,10,320417
• Amazon Coretto (Java) 11.0.8
• Tomcat 9.0.21.0
• Apache 2.4.6
• Centos 7.7.1908

I've just updated a CF server to apply the latest hotfixes, via the CF administrator, restarted the server, all the sites back up, lovely.

But now I can't get into the CFIDE folder.

It's locked by IP to my location, I checked the neo-security.xml file and that had been reset to 10.*.*.* so I deleted the IP, restarted CF again - I seem to remember doing this opens the restriction up so I can re-add the IP inside the administrator

Sites all came back up again, lovely, still no access to the CFIDE folder, sad times.

In my apache conf directly, in the mod_jk.conf file I have this line commented out so that CFIDE is not accessible from all the sites we host:

#Alias /CFIDE "/PATH/TO/DEFAULT/SITE/CFIDE"

In my default site I've got a symlink set up to point /CFIDE to the CFROOT/cfusion/wwwroot/cfide directory and I've got an apache conf file set to only allow access to the CFIDE folder from my IP

So it's all tied down by IP and CFIDE can only be reached using a specific URL which is only set up in local hosts files.

This was all working fine, until I applied the CF updates.

If I visit example.com/CFIDE I get a 403, which is fine.

If I visit example.com/CFIDE/administrator I get a 404, which is not-fine, it should be serving the index.cfm file.

If I visit example.com/CFIDE/administrator/index.cfm I get a 404, same as above. I get the same if I put in paths to other CFM files.

If I visit example.com/CFIDE/administrator/index.html after creating a simple Hello World file, that serves without a problem.

So it seems that updating to the latest CF hotfix has stopped .cfm files from being rendered when I try to access them in the browser.

Anyone got any ideas where I can go from here?

See attached picture of Fusion Reactor, showing pages that just keep on running. Times have gone up into the millions and I've left them to see if they'd complete but that was when there were just 2 or 3.

Now I'm getting dozens of pages that just never finish. And it's different queries, I can't see any huge pattern except it only seems to apply to 3 of my 7 databases.

top shows coldfusion CPU usage around 70-120%, and digging deeper into the Fusion Reactor details pages shows all the time building up is spent solely on Mysql queries.

show processlist returns nothing unusual, execpt 10 - 20 connections in sleep state.

During this time many pages do complete, but as the the number of pages hanging builds up and they never seem to finish the server eventually just returns white pages.

The only short term solution seems to be restarting Coldfusion, which is far from ideal.

A Node.js script was recently added that runs every 5 minutes and checks for batch csv files to process, I wondered if that was causing a problem with stealing all the MySQL connections so I've disabled that (the script has no connection.end() method in it) but that's just a quick guess.

No idea where to start, can anyone help?

The worst part is the pages NEVER time out, if they did it wouldn't be so bad, but after a while nothing gets served.

I'm running a CentOS LAMP stack with Coldfusion and NodeJS as my primary scripting languages

UPDATE BEFORE ACTUALLY POSTING

During the time it took to write this post, which I started after disabling the Node script and restarting Coldfusion, the problem seems to have gone away.

But I'd still like some help identifying exactly why the pages woudlnt' time out and confirming that the Node script needs something like connection.end()

Also it might only happen under load, so I'm not 100% sure it has gone away

UPDATE

Still having issues, I've just copied one of the queries that is currently up to 70 seconds in Fusion Reactor, and run it manually in the database and it completed in a few milliseconds. The queries themselves don't seem to be a problem.

ANOTHER UPDATE

Stack trace of one of the pages still going. Server hasn't stopped serving pages in a while, all Node scripts currently disabled

http://pastebin.com/D6ycJf3X

MORE UPDATES

I had a few more of these today - they actually finished and I spotted this error in FusionReactor:

Error Executing Database Query. The last packet successfully received from the server was 7,200,045 milliseconds ago. The last packet sent successfully to the server was 7,200,041 milliseconds ago. is longer than the server configured value of 'wait_timeout'. You should consider either expiring and/or testing connection validity before use in your application, increasing the server configured values for client timeouts, or using the Connector/J connection property 'autoReconnect=true' to avoid this problem.

EVEN MORE UPDATES

Digging around the code, I tried looking for "2 h", "120" and "7200" as I felt the 7200000ms timeout was too much of a coincidence.

I found this code:

// 3 occurrences of this
createObject( "java", "coldfusion.tagext.lang.SettingTag" ).setRequestTimeout( javaCast( "double", 7200 ) );

// 1 occurrence of this 
<cfsetting requestTimeOut="7200">

The 4 pages that reference those lines of code are run very rarely, have never shown up in the logs with the 2h+ time outs and are in a password protected area so can't be scraped (they were for file uploads and CSV processing, now moved to nodejs).

Is it possible that these settings could somehow be set by one page but exist in the server, and affect other requests?

I can't login to any of my PHP applications now (phpmyadmin, mediaWiki) after using yum to update PHP to 5.3.3

I've looked at other posts but there doesn't seem to be a general fix to the problem, lots of individual fixes and I've not had any luck with them.

I'm running CentOS 6.5, these are my session vars as listed by php -i

session.auto_start => Off => Off
session.bug_compat_42 => Off => Off
session.bug_compat_warn => Off => Off
session.cache_expire => 180 => 180
session.cache_limiter => nocache => nocache
session.cookie_domain => no value => no value
session.cookie_httponly => Off => Off
session.cookie_lifetime => 0 => 0
session.cookie_path => / => /
session.cookie_secure => Off => Off
session.entropy_file => no value => no value
session.entropy_length => 0 => 0
session.gc_divisor => 1000 => 1000
session.gc_maxlifetime => 1440 => 1440
session.gc_probability => 1 => 1
session.hash_bits_per_character => 5 => 5
session.hash_function => 0 => 0
session.name => PHPSESSID => PHPSESSID
session.referer_check => no value => no value
session.save_handler => files => files
session.save_path => /var/lib/php/session => /var/lib/php/session
session.serialize_handler => php => php
session.use_cookies => On => On
session.use_only_cookies => On => On
session.use_trans_sid => 0 => 0

And these are the permissions on the session folder:

$ ls -la  /var/lib/php
drwxrwxr-x   2 root apache 4096 Jan 14 11:28 session

And I've emptied that folder out as I'd read that older sessions could cause a problem.

I haven't actively changed any of these or the other php.ini settings, sessions just stopped working after the update.

UPDATE: I get this error when I run tail -f /var/log/httpd/error_log, when I try to log into mediawiki

[Wed Jan 14 13:57:55 2015] [error] [client 82.35.29.174] PHP Warning:  
    Unknown: open(/var/lib/php/session/sess_dcd2969717a424ac082cab71376423f6, O_RDWR) 
    failed: Permission denied (13) in Unknown on line 0, 
    referer: [REMOVED BY OP]

[Wed Jan 14 13:57:55 2015] [error] [client 82.35.29.174] PHP Warning:  
    Unknown: Failed to write session data (files). Please verify that the current 
    setting of session.save_path is correct (/var/lib/php/session) in Unknown on line 0, 
    referer: [REMOVED BY OP]

I need help clarifying memory usage on a CentOS server running Coldfusion/Apache.

I've got a script that reads a file into memory and process it line by line, inserts into DB and deletes the file. Not the best process, working on it, but it'll have to do for now.

When the file is read it takes up loads of memory, it was causing the server to use the swap file and it was really unresponsive - total RAM usage in TOP was 3.9/3.9 GB and swap was 1.5/1.9

I had to reboot it, total used RAM dropped to about 2GB, I ran the script and it went back up to 3GB. It's slowly increased over the last few hours to 3.3GB - I've still got some space and the sites are all responsive but memory isn't being freed.

Also since rebooting, FusionReactor shows my Max and Allocated Heap as 3.93GB, and Used ranging from 0.3GB to 1GB - which is inconsistent with what TOP says, which is CF9 on 58% of 3.9, which is around 2.25GB

The script imports data overnight, so I'm guessing when it runs later, it'll spill into the swap and slow the site down overnight (low traffic overnight but still needs fixing - I'll have to disable for now)

So the 2 things I don't understand:

• why isn't the RAM dropping back from 3 -> 2 when the file has been read, and the script has finished (missing a fileClose - too many CFCs?)
• why does my FusionReactor Memory Used Heap show a max of 1GB, when TOP shows 58% of 3.9GB (2.25GB) for CF9

UPDATE - jvm.config, less most of it's comments

# Where to find JVM
java.home=/opt/coldfusion9/runtime/jre/

# Arguments to VM
java.args=-server  -Djava.awt.headless=true -Xms4096m -Xmx4096m 
    -Dsun.io.useCanonCaches=false -XX:ParallelGCThreads=2 -XX:PermSize=64m 
    -XX:+UseConcMarkSweepGC -XX:NewSize=1024m -XX:MaxNewSize=1024m -XX:SurvivorRatio=4
    -XX:+UseParNewGC -XX:MaxPermSize=192m -Dcoldfusion.rootDir={application.home}/../ 
    -Dcoldfusion.libPath={application.home}/../lib -Dcoldfusion.classPath=
    {application.home}/../lib/updates,{application.home}/../lib,
    {application.home}/../gateway/lib/,{application.home}/../wwwroot/WEB-INF/flex/jars,
    {application.home}/../wwwroot/WEB-INF/cfform/jars -
    javaagent:/opt/fusionreactor/instance/coldfusion.CF9Standalone.cc02/                 
    fusionreactor.jar=name=coldfusion.CF9Standalone.cc02,address=8088

# commas will be converted to platform specific separator and the result will be passed
# as -Djava.ext.dirs= to the VM
java.ext.dirs={jre.home}/lib/ext

# where to find shared libraries
java.library.path={application.home}/../lib
system.path.first=false

# set the current working directory
java.user.dir={application.home}/../../lib

# JVM classpath
java.class.path={application.home}/servers/lib,{application.home}/../lib/
    macromedia_drivers.jar,        
    {application.home}/lib/cfmx_mbean.jar,{application.home}/../lib/oosdk/classes,
    {application.home}/../lib/oosdk/lib,{application.home}/lib

I'm trying to run Rsync to move static files from our Dedicated server to our new cloud server.

The following command works but when it runs it is stopping any web pages being served

rsync -azP --delete -e 'ssh -p 1234' 
    /var/www/vhosts/example.com/httpdocs/images/20* 
    user@server:/var/www/vhosts/example.com/httpdocs/images/.

So I've tried using nice and ionice to lower the CPI and I/O priority, and using a different cipher over SSH - I'd found posts suggesting this will lower the server load:

nice -n19 ionice -c2 -n7 rsync -azP --delete --rsh="ssh -c arcfour" -e 'ssh -p 1234' 
    /var/www/vhosts/example.com/httpdocs/images/20* 
    user@server:/var/www/vhosts/example.com/httpdocs/images/.

But this does not make a difference, as soon as the script runs pages on http://example.com stop serving, and once I use CTRL+C to kill the Rsync the command the pages start serving again.

I could put this in a crontab job to run when site traffic is low, but I'd like to be able to sync the servers through the day.

Is there a way of getting Rsync to stop blocking apache or is there another way I can transfer the data?

I've also tried making a tar.gz archive and transferring via scp, but the file is 2.5GB and I just get the same problem.

We will be moving all our static content onto Amazon S3 - but that's a much larger job and I'm hoping I can just get the static content moved across in the meantime to kill off the old machine

I'm aware there are many other similar questions but the solutions from those questions I feel I've already got in place.

I've got 3 sites running locally on a VirtualBox Ubuntu 12.04.4 LTS Server, I'm using nginx and php-fpm.

They are configured to run on ports 9001 -> 9003:

server:/etc/php5/fpm/pool.d$ grep 900 *
my-app-deploy.conf:listen = 127.0.0.1:9002
my-app-dev.conf:listen = 127.0.0.1:9001
my-web.conf:listen = 127.0.0.1:9003

server:/etc/nginx/conf.d$ grep 900 *
my-app-deploy.conf:                fastcgi_pass   127.0.0.1:9002;
my-app-dev.conf:                fastcgi_pass   127.0.0.1:9001;
my-app-web.conf:                fastcgi_pass   127.0.0.1:9003;

I've restarted both php-fpm and nginx successfully:

server:$ sudo service nginx restart
 * Restarting nginx nginx
   ...done.
server:$ sudo service php5-fpm restart
 * Restarting PHP5 FastCGI Process Manager php5-fpm
   ...done.

But if I look at what ports are being listened to, I only see 9002 and 9003:

server:$ sudo lsof -i | grep 900
php5-fpm  1020     root    7u  IPv4   8557      0t0  TCP localhost:9002 (LISTEN)
php5-fpm  1020     root    8u  IPv4   8558      0t0  TCP localhost:9003 (LISTEN)
php5-fpm  1021 www-data    0u  IPv4   8557      0t0  TCP localhost:9002 (LISTEN)
php5-fpm  1022 www-data    0u  IPv4   8557      0t0  TCP localhost:9002 (LISTEN)
php5-fpm  1023 www-data    0u  IPv4   8557      0t0  TCP localhost:9002 (LISTEN)
php5-fpm  1024 www-data    0u  IPv4   8557      0t0  TCP localhost:9002 (LISTEN)
php5-fpm  1025 www-data    0u  IPv4   8558      0t0  TCP localhost:9003 (LISTEN)
php5-fpm  1026 www-data    0u  IPv4   8558      0t0  TCP localhost:9003 (LISTEN)
php5-fpm  1027 www-data    0u  IPv4   8558      0t0  TCP localhost:9003 (LISTEN)
php5-fpm  1028 www-data    0u  IPv4   8558      0t0  TCP localhost:9003 (LISTEN)

And I get the following error from nginx:

server:~/vhosts/my-app/logs$ tail -n 1 nginx/error.log 
2014/06/20 11:07:36 [error] 2434#0: *4 connect() failed 
    (111: Connection refused) while connecting to upstream, client: 192.168.0.10,
    server: my.app.dev, request: "GET /api/test.php HTTP/1.1", upstream:
    "fastcgi://127.0.0.1:9001", host: "my.app.dev"

I'm hoping I've just missed something really basic, but when I added the site on 9002 I don't remember having to do anything else apart from add the new port number to both the conf files

UPDATE The site root is actually serving, it's only the api/test.php page that is returning 502

UPDATE I moved the ports around, I swapped web and dev around so dev is now on the 9001 port, but that's made no difference. I've updated the question to reflect this.

All 3 ports are serving content - I think it's something to do with redirects I've got setup for the API section.

Here is a diff between the dev and deploy PHP and nginx configs:

server:/etc/nginx/conf.d$ diff my-app-dev.conf my-app-deploy.conf 
3c3
<         server_name my.app.dev;
---
>         server_name my.app.deploy;
10c10
<         root /var/www/vhosts/my-app/public_html/mobile;
---
>         root /var/www/vhosts/my-app/public_html/mobile_deploy;
47c47
<                 fastcgi_pass   127.0.0.1:9001;
---
>                 fastcgi_pass   127.0.0.1:9002;

server:/etc/php5/fpm/pool.d$ diff my-app-dev.conf my-app-deploy.conf
33c33
< listen = 127.0.0.1:9001
---
> listen = 127.0.0.1:9002
384c384
< php_admin_value[doc_root] = /var/www/vhosts/my-app/public_html/mobile
---
> php_admin_value[doc_root] = /var/www/vhosts/my-app/public_html/mobile_deploy

And here is the complete conf file for the dev site, on port 9001, that is giving me the 502

server {
        listen 80;
        server_name my.app.dev;

        error_log  /var/www/vhosts/logs/my-app/nginx/error.log;
        access_log /var/www/vhosts/logs/my-app/nginx/access.log  main;

        error_page 404 /404;

        root /var/www/vhosts/my-app/public_html/mobile;
        index index.html index.php;

        client_max_body_size 10M;

        proxy_read_timeout 180s;

        # deny any attempt to access hidden files
        location ~ /\. { deny all; }

        # disable logging for favicon
        location = /favicon.ico {
                log_not_found off;
        }

        location ~* \/api\/[0-9]\/.*\.zip {
                try_files $uri /api/3/nomarket.data.zip;
        }

        location ~* \/api\/picture\/[a-z]+\/? {
                if (!-e $request_filename) {
                        rewrite ^/api/picture/([a-z]+)/? /api/picture.php?type=$1 last; break;
                }
        }

        location /api {
                if (!-e $request_filename) {
                        rewrite ^/api/(.*)$ /api/router.php?rest_data=$1 last; break;
                }
        }

         # allow php files to be executed
        location ~ \.php$ {
                # only call php if the file exists. Very important for security!
                try_files  $uri =404;
                include /etc/nginx/fastcgi_params;
                fastcgi_pass   127.0.0.1:9001;
                fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
                fastcgi_index  index.php;
        }

        # just serve static files, please.
        location / { }
}

I've got a page, I'm not using redirects, just going directly to /invite/index.php?code=f13dc6c9be in the browser and it serves up about 50% of the time.

The rest of the time the browser displays "No input file specified" and the logs show:

2014/02/25 11:21:24 [error] 5231#0: *1 FastCGI sent in stderr: 
  "Unable to open primary script: 
  /var/www/vhosts/app.web/public_html/invite/index.php (No such file or directory)"
  while reading response header from upstream, client: 192.168.0.2, 
  server: app.web, request: "GET /invite/index.php?code=f13dc6c9be HTTP/1.1", 
  upstream: "fastcgi://127.0.0.1:9000", host: "app.web"

I know similar questions have been asked before, and on Stack Overflow as well, but mostly they are all addressing this problem coming up consistently.

The only one that comes close is this: https://stackoverflow.com/questions/7004161/random-no-input-files-specified-in-nginx-and-php-fpm

But that rlimit_files solution doesn't help, and it's on my local development server and I'm the only person hitting the page.

I'm using Ubuntu 12.04 and nginx 1.4.5, and the pages are being served through php-fpm

Any ideas why it would only be working about every other request? I'm just hitting CTRL + R, no POST or GET, no change in URL. Just refreshing, and the error comes and goes.

I've got a working nginx rewrite for a location, but in the case of a specific request I want to rewrite to a different location.

location /api {
    if (!-e $request_filename){
        rewrite "^/api/.{2}\.zip" /api/general.zip last; break;
        rewrite ^/api/(.*)$ /api/router.php?rest_data=$1 last; break;
     }
}

So if someone requests /api/uk.zip then it downloads fine, but /api/fr.zip doesn't exist, so it should redirect to /api/general.zip

I've tried 2 location blocks, I get a duplicate location error, and I've tried using 2 if statements, but the second one gets ignored.

If the request is for something else, like /api/events then it should forward to the router page.

I've got a Ubuntu 10.04.4 LTS cloud server running the default LAMP stack.

My website is serving my PHP pages, the images and CSS to go with them, and most of my JS is loading, but there is a particular folder that is not loading the javascript files.

If I visit my site, site.com/javascript/search.js then I get a 404. If I visit site.com/includes/formvalidation.js then the JS file loads.

This shows the permissions on the includes and javascript folder:

user@server~site/httpdocs$ ls -la | grep includes
drwxr-xr-x  5 user www-data    4096 Jun 14 23:53 includes

user@server~site/httpdocs$ ls -la includes | grep .js
-rwxr-xr-x  1 user www-data 20974 Mar  2 22:33 formvalidation.js

user@server~site/httpdocs$ ls -la | grep javascript
drwxr-xr-x  3 user www-data    4096 Jun  3 11:03 javascript

user@server~site/httpdocs$ ls -la javascript | grep .js
-rwxrw-r-x  1 user www-data  7276 Mar  2 22:33 calendar.js
-rwxrw-r-x  1 user www-data 33321 Jun  3 11:03 cookieControl-5.1.min.js
-rwxrw-r-x  1 user www-data 15552 Mar  2 22:33 image_display.js
-rwxrw-r-x  1 user www-data 21130 Mar  2 22:33 popcalendar.js
-rwxrw-r-x  1 user www-data 67956 Mar  2 22:33 search.js
-rwxrw-r-x  1 user www-data   555 Mar 31 00:15 sell.js
-rwxrw-r-x  1 user www-data   318 Mar 31 00:15 sign_in.js
-rwxrw-r-x  1 user www-data   142 Mar 31 00:15 update.js

So the file is uploaded, it has the same permissions as other files in includes, and the includes and javascript folder both have the same permission.

There's no .htaccess file, and this works fine locally on my Dev server, it's only when I push live I get a problem.

UPDATE: I made a file, test.js and put it at the root. This could be viewed at site.com/test.js. I moved that, `mv test.js javascript/* and visiting site.com/javascript/test.js gives a 404

UPDATE: Checking /var/log/apache2/error.log shows File does not exist: /usr/share/javascript/search.js

UPDATE: I've searched for javscript in my /etc/apache2 folder and found this:

user@site:/etc/apache2$ grep -iR javascript ./       
./mods-available/deflate.conf: AddOutputFilterByType DEFLATE application/x-javascript application/javascript  application/ecmascript    
./mods-enabled/deflate.conf: AddOutputFilterByType DEFLATE application/x-javascript application/javascript application/ecmascript
./conf.d/javascript-common.conf:Alias /javascript /usr/share/javascript/
./conf.d/javascript-common.conf:<Directory "/usr/share/javascript/">

Coldfusion is automatically restarting, a lot. It comes in waves, everything seems fine for a while then the server struggles for a few minutes, restarts a lot then settles down again.

I have Fusion Reactor installed, but when CF goes down FR stops logging so it's not really helping. Looking through the archived logs just shows gaps in the logs.

These are all the occourances of the phrase "Coldfusion started" today.

[root@server2 logs]# grep -i "Coldfusion started" server.log | grep "11/27/12"
"Information","main","11/27/12","01:49:35",,"ColdFusion started"
"Information","main","11/27/12","01:50:46",,"ColdFusion started"
"Information","main","11/27/12","01:52:39",,"ColdFusion started"
"Information","main","11/27/12","01:54:08",,"ColdFusion started"
"Information","main","11/27/12","01:55:12",,"ColdFusion started"
"Information","main","11/27/12","01:56:29",,"ColdFusion started"
"Information","main","11/27/12","01:57:36",,"ColdFusion started"
"Information","main","11/27/12","01:58:57",,"ColdFusion started"
"Information","main","11/27/12","01:59:56",,"ColdFusion started"
"Information","main","11/27/12","02:01:38",,"ColdFusion started"
"Information","main","11/27/12","02:03:11",,"ColdFusion started"
"Information","main","11/27/12","02:04:41",,"ColdFusion started"
"Information","main","11/27/12","02:07:53",,"ColdFusion started"
"Information","main","11/27/12","02:10:45",,"ColdFusion started"
"Information","main","11/27/12","02:11:49",,"ColdFusion started"
"Information","main","11/27/12","02:13:09",,"ColdFusion started"
"Information","main","11/27/12","02:14:18",,"ColdFusion started"
"Information","main","11/27/12","02:15:44",,"ColdFusion started"
"Information","main","11/27/12","02:17:06",,"ColdFusion started"
"Information","main","11/27/12","02:34:19",,"ColdFusion started"
"Information","main","11/27/12","03:01:20",,"ColdFusion started"
"Information","main","11/27/12","05:25:59",,"ColdFusion started"
"Information","main","11/27/12","06:30:48",,"ColdFusion started"
"Information","main","11/27/12","06:36:20",,"ColdFusion started"
"Information","main","11/27/12","09:34:07",,"ColdFusion started"
"Information","main","11/27/12","09:35:39",,"ColdFusion started"
"Information","main","11/27/12","09:36:41",,"ColdFusion started"
"Information","main","11/27/12","09:39:15",,"ColdFusion started"
"Information","main","11/27/12","09:40:42",,"ColdFusion started"
"Information","main","11/27/12","09:42:55",,"ColdFusion started"
"Information","main","11/27/12","09:44:23",,"ColdFusion started"
"Information","main","11/27/12","09:46:18",,"ColdFusion started"
"Information","main","11/27/12","09:47:35",,"ColdFusion started"
"Information","main","11/27/12","09:48:53",,"ColdFusion started"
"Information","main","11/27/12","09:50:04",,"ColdFusion started"
"Information","main","11/27/12","09:51:51",,"ColdFusion started"
"Information","main","11/27/12","09:53:05",,"ColdFusion started"
"Information","main","11/27/12","09:54:24",,"ColdFusion started"
"Information","main","11/27/12","09:55:28",,"ColdFusion started"
"Information","main","11/27/12","09:56:38",,"ColdFusion started"
"Information","main","11/27/12","09:58:03",,"ColdFusion started"
"Information","main","11/27/12","09:59:03",,"ColdFusion started"
"Information","main","11/27/12","10:04:37",,"ColdFusion started"
"Information","main","11/27/12","12:04:02",,"ColdFusion started"

I've been looking at the live server metrics in FR on a second screen all day, the CPU, Memory and requests all seemed fine about 12 midday, then the server rebooted.

Looking at the logs for the hour between 9am and 10am (more than 15 restarts in the hour), the CPU never went over 44% usage and the Memory never exceeded 53% usage - in the recorded stats at least.

There is no JDBC tracking at the moment, so I'll add that to tracking and see if it's MySQL causing a problem, but can anyone help me narrow down the problem, what would cause Cold Fusion to auto restart, and I'm assuming the auto restart is only happening because Fusion Reactor is installed.

It's a Red Hat 5 LAMP stack running Coldfusion 9 and Fusion Reactor 4.5.2

I know this question has been asked, but I'm certain I've done what all the other answers suggest.

Machine A:

• used keygen -t rsa to create id_rsa.pub in ~/.ssh/
• copied Machine A's id_rsa.pub to Machine B user's home directory
• Made the file permissions of id_rsa.pub 600

Machine B

• added Machine A's pub key to authorised_keys and authorised_keys2: cat ~/id_rsa.pub >> ~/.ssh/authorised_keys2
• made the file permissions of id_rsa.pub 600

I've also ensured both the .ssh directories have the permission 700 on both machine A and B.

If I try to login to machine B from machine A, I get asked for the password, not the ssh pass phrase.

I've got the root users on both machines to talk to each other using password-less ssh, but I can't get a normal user to do it.

Do the user names have to be the same on both sides? Or is there some setting else where I've missed.

Machine A is a Ubuntu 10.04 virtual machine running inside VirtualBox on a Windows 7 PC, Machine B is a dedicated Ubuntu 9.10 server

UPDATE : I've run ssh with the option -vvv, which provides many many lines of output, but this is the last few commands:

debug3: check_host_in_hostfile: filename /home/pete/.ssh/known_hosts
debug3: check_host_in_hostfile: match line 1
debug1: Host '192.168.1.19' is known and matches the RSA host key.
debug1: Found key in /home/pete/.ssh/known_hosts:1
debug2: bits set: 504/1024
debug1: ssh_rsa_verify: signature correct
debug2: kex_derive_keys
debug2: set_newkeys: mode 1
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug3: Wrote 16 bytes for a total of 1015
debug2: set_newkeys: mode 0
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug3: Wrote 48 bytes for a total of 1063
debug2: service_accept: ssh-userauth
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug2: key: /home/pete/.ssh/identity ((nil))
debug2: key: /home/pete/.ssh/id_rsa (0x7ffe1baab9d0)
debug2: key: /home/pete/.ssh/id_dsa ((nil))
debug3: Wrote 64 bytes for a total of 1127
debug1: Authentications that can continue: publickey,password
debug3: start over, passed a different list publickey,password
debug3: preferred gssapi-keyex,gssapi-with-mic,gssapi,publickey,keyboard-interactive,password
debug3: authmethod_lookup publickey
debug3: remaining preferred: keyboard-interactive,password
debug3: authmethod_is_enabled publickey
debug1: Next authentication method: publickey
debug1: Trying private key: /home/pete/.ssh/identity
debug3: no such identity: /home/pete/.ssh/identity
debug1: Offering public key: /home/pete/.ssh/id_rsa
debug3: send_pubkey_test
debug2: we sent a publickey packet, wait for reply
debug3: Wrote 368 bytes for a total of 1495
debug1: Authentications that can continue: publickey,password
debug1: Trying private key: /home/pete/.ssh/id_dsa
debug3: no such identity: /home/pete/.ssh/id_dsa
debug2: we did not send a packet, disable method
debug3: authmethod_lookup password
debug3: remaining preferred: ,password
debug3: authmethod_is_enabled password
debug1: Next authentication method: password

I've just tried reinstalling a CF9 server, but the installer finishes with "11 NonFatalErrors", and there is no /cf-root/bin directory.

This means I can't run /cf-root/bin/coldfusion start so I can't run the server. I've tried installing it twice and had no luck.

I installed as root from /opt/, to /opt/coldfusion9, using the ColdFusion_9_WWE_linux64.bin file downloaded from Adobe today, and with permissions set to 777 on the file.

The /cf-root/coldfusion9 folder is missing other directories as well, for example there is no logs directory. There also seems to be coldfusion and cfinfo files in the cf-root folder, these look like they should be in the bin folder.

So I have the following:

/cf-root/coldfusion9/coldfusion
/cf-root/coldfusion9/cfinfo
/cf-root/coldfusion9/cfstat

Instead of

/cf-root/coldfusion9/bin/coldfusion
/cf-root/coldfusion9/bin/cfinfo
/cf-root/coldfusion9/bin/cfstat

I'm sure I need to post more data here if anyone's going to help but I'm not sure where to look next.

I'm running Red Hat Enterprise Linux Server release 5.6 (Tikanga)

I'm part way through setting up a Railo server, running alongside Apache on a Ubuntu Rackpspace cloud server.

I've got Apache working fine, it will server PHP pages, I've got subdomains set up as well, that's all fine.

I've installed Railo, and I briefly got to look at the Railo administrator, but as soon as I added DirectorIndex index.cfm to the config files in /etc/apache/sites-available the Railo administrator stopped working, and all of my CFML domains just seem to load infinitely in the browser.

They never time out, and they never load. I don't understand what I've done wrong?

I've got an entry in my server.xml file like this:

    <Host name="dev.willshawmedia.com" appBase="webapps">
            <Context path="" docBase="/var/www/vhosts/willshawmedia.com/subdomains/dev/httpdocs/" />
    </Host>

And an file in /sites-available/ with the following:

<VirtualHost *:80>
    ServerAdmin [email protected]

    ServerName dev.willshawmedia.com

    DocumentRoot /var/www/vhosts/willshawmedia.com/subdomains/dev/httpdocs
    DirectoryIndex index.cfm
    <Directory />
            Options FollowSymLinks
            AllowOverride None
    </Directory>
    <Directory /var/www/vhosts/willshawmedia.com/subdomains/dev/httpdocs>
            Options FollowSymLinks MultiViews
            AllowOverride None
            Order allow,deny
            allow from all
    </Directory>
</VirtualHost>

I've run a2ensite willshawmedia.com, and that's working becuase http://willshawmedia.com is displaying an old php page.

But I just can't get railo to work. Any ideas?

Have a look at http://dev.willshawmedia.com

EDIT: I've made some progress. I'm using the mod_jk connector, and the mod_jk.log file is saying tomcat is probably listening on the wrong port.

I'm also getting a service error=-3 for worker=ajp13_worker

I've got an Oracle VM VirtualBox running Ubuntu 9.10, and also a pysical DELL server running Ubuntu 9.10

I can use putty to connect to both the VM and the DELL. From either I can ssh into the other, albeit using an IP address.

ssh [email protected]

Then on both machines, I've got a git repo set up: VM as a clone of DELL - I managed to successfully use git clone [email protected]:/path/to/repo/on/DELL

So VM has DELL as a remote repo called origin, and DELL has VM as a remote repo called siteVM

I've made some changes in the VM, and commited them.

But if I try to do a fetch from the DELL repo, I get the following:

git fetch siteVM
ssh: connect to host 192.169.1.X port 22: Connection timed out
fatal: The remote end hung up unexpectedly

So I'm lost. SSH is working fine, and I cloned the DELL repo onto the VM without any problems at all.

What's stopping SSH working via git fetch?

UPDATE: Completely and utterly my own stupid fault. I've put the IP in wrong in my git remote add command - I've put 169 instead of 168.