[mpm-itk] ITK 2.2.11-02 and ISA server

Marijn Otte marijn at e-active.nl
Fri Jul 24 16:17:57 CEST 2009

Hello Steinar,

It took some time to get access to the network behind the ISA server, so I could test some things myself. It seems the problem only occurs when two sites on the same server, running with different user names, are opened behind each other. I think the ISA server (which functions as a proxy server) keeps the connection alive: when a new request to same IP address is made it uses the same connection and the error occurs.  The strange thing is that the ITK version in Debian stable does not have this problem.

I made two dumps with tcpdump: one problem request and one OK request: http://cluster24.e-active.nl/dump.zip.

With the problem request the error.log says:
 [crit] [client] (13)Permission denied: /home/atexcongres/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable

Kind regards,

Marijn Otte

-----Oorspronkelijk bericht-----
Van: Steinar H. Gunderson [mailto:sgunderson at bigfoot.com] 
Verzonden: donderdag 28 mei 2009 15:47
Aan: Marijn Otte
CC: mpm-itk at err.no
Onderwerp: Re: [mpm-itk] ITK 2.2.11-02 and ISA server

On Thu, May 28, 2009 at 03:45:14PM +0200, Marijn Otte wrote:
> Yes, it's a web proxy server:
> http://www.microsoft.com/forefront/edgesecurity/isaserver/en/us/default.aspx 
> We have not been able to find a difference between the requests. If we do a
> request with the same request headers as the ISA server there is no problem
> at all. It seems to have something to do with the way the proxy server
> connects.

That's pretty weird. Do you think you could send a tcpdump
(something like "tcpdump -i eth0 -s 0 -w dumpfile tcp port 80") from two
equal requests that work and don't work? Be aware that the dump will record
both the request and the response, so don't include confidential data. :-)

/* Steinar */
Homepage: http://www.sesse.net/

More information about the mpm-itk mailing list