®

IBM Software Group

Debugging HTTP 500 Response Code in

an IHS/Plugin/WebSphere Topology
Naveen Shetty ([email protected] )
Advisory Programmer
Date: April 10, 2013

WebSphere® Support Technical Exchange

 IBM Software Group

Agenda

Schematic of Plugin Fundamentals

Plugin related definitions

What is http 500

IHS/Plugin/WebSphere topology and some terms.

HTTP 500 from a client perspective.

Preliminary System Integrity Check

What to collect ? Diagnostics .

Conditions under which a HTTP 500 error is seen

Debug procedures for http 500?

Measures to address the issue

Sumary

WebSphere® Support Technical Exchange 2

 IBM Software Group

A Schematic of WebSphere Plugin Operation.

WebSphere® Support Technical Exchange 3

 IBM Software Group

Some Plugin Terms and Definitions

httpd.conf

Plugin

plugin-cfg.xml

Plugin Elements

ConnectTimeout

ServerIOTimeout

MaxConnections

Http Transport

Web Container & WebContainer related timeouts.

WebSphere® Support Technical Exchange 4

 IBM Software Group

What is a HTTP 5XX Error

The server failed to fulfill an apparently valid request.

Response status codes beginning with the digit "5" indicate

cases in which the server is aware that it has encountered
an error or is otherwise incapable of performing the
request.

The server should include an entity containing an

explanation of the error situation, and indicate whether it is
a temporary or permanent condition. Except when
responding to a HEAD request.

HTTP 500 is generic Internal Server Error

WebSphere® Support Technical Exchange 5

 IBM Software Group

HTTP 500 - From client browser perspective

1. Reload the web page.

2.Clear your browser's cache.

3.Delete your browser's cookies.

4.Troubleshoot as a 504 Gateway Timeout error

instead.

5.Contact the website directly.

6.Come back later.

WebSphere® Support Technical Exchange 6

 IBM Software Group

503–Service Temporarily Unavailable.

WebSphere® Support Technical Exchange 7

 IBM Software Group

Typical Http 500

WebSphere® Support Technical Exchange 8

 IBM Software Group

Variations of Http 500 exceptions

The 500 Internal Server Error message might be
seen in any number of ways because each website
is allowed to customize the message. Most
common format for http 500 exceptions are:

"500 Internal Server Error"

"HTTP 500 - Internal Server Error"

"Internal Server Error"

"HTTP 500 Internal Error"

"500 Error"

"HTTP Error 500"

WebSphere® Support Technical Exchange 9

 IBM Software Group

HTTP 500 – Causes

The http 500 internal server error can be generated at one of
the following components:


a> External web server - due to misconfiguration

 b> Internal web server -due to plugin misconfiguration or

because the connection broke between the plugin and
webcontainer.

 c> Application server error

 d> Application error (Java error)

WebSphere® Support Technical Exchange 10

 IBM Software Group

Check system integrity

When users receive HTTP 500 error codes and you know the
application at the root of the problem, the first thing to check
is the integrity of the following system components:

 Web server

 Webserver plug-in

 Application server

 Application

WebSphere® Support Technical Exchange 11

 IBM Software Group

Verify that the application server is started

To verify the health of the hosting application server:

1. Determine the server or cluster that hosts the
application.

2. Check the status of the application server.

3. The status of an application can be seen in the
administrative console. Select Applications →
Enterprise Applications.

4. Start the application server if it is not running.

WebSphere® Support Technical Exchange 12

 IBM Software Group

Verify that the application is started

The status of an application can be seen in the
administrative console. Select Applications →
Enterprise Applications.

A Started status means the application is running

If not started, select application and click start.

Make sure application starts up without exceptions

thrown in the SystemOut

WebSphere® Support Technical Exchange 13

 IBM Software Group

Example of Normal application startup messages

A normal Application startup should look something

as below

WebSphere® Support Technical Exchange 14

 IBM Software Group

Diagnostics/logs
Collect the following diagnostic data:

Errors displayed by the user browser, including the URL
that failed and the timestamp of the request.

Web server Access log and Debug level Error log

Trace Level plugin log

MustGather link

http://www-
01.ibm.com/support/docview.wss?uid=swg21141306

If your application is deployed to a cluster, you might need
to collect the WebContianer traces logs from each active
server in the cluster.

WebSphere® Support Technical Exchange 15

 IBM Software Group

Additonal Diagnostics/logs - From

Appserver Perspective:

MustGather: Channel Framework
http://www-
01.ibm.com/support/docview.wss?uid=swg21592086

Trace String (Static trace):

*=info:com.ibm.ws.webcontainer*=all:com.ibm.wsspi.webco
ntainer*=all:HTTPChannel=all:TCPChannel=all:GenericBN
F=all

TCPChannel trace must be taken statically i.e. with

server restart:

If not taken statically, TCPChannel will not capture “reads”
WebSphere® Support Technical Exchange 16
 IBM Software Group

When does plugin throw Http 500?

Failed to handle request

ConnectTimeout on connection to JVM

ServerIOTimeout marking all Cluster-members

down

MaxConnections Reached for all Cluster members

WebSphere® Support Technical Exchange 17

 IBM Software Group

ConnectTimeout fired.

It is the time taken for the plugin to establish connection
with the backend JVM

ConnectTimeout not listed or a value of “0” means it is
a blocking connect

ConnectTimeout=”10” means the plugin will wait for 10
seconds for the connection to succeed.

If no response in 10 seconds, then it will mark that JVM
as down

Request will move to the next in line JVM in cluster until
it finds a successful connection in the cluster or

Throws a failed to handle request.

Causing Internal Server Error
WebSphere® Support Technical Exchange 18
 IBM Software Group

Thread 0167004e 00000203

0167004e 00000203 - TRACE: ws_common:
websphereGetStream: Have a connect timeout of
5; Setting socket to not block for the connect

0167004e 00000203 - ERROR: ws_common:
websphereGetStream: Connect timeout fired

0167004e 00000203 - TRACE: ws_common:
websphereGetStream: socket 12 closed - failed
non-blocking connect

0167004e 00000203 - ERROR: ws_common:
websphereHandleRequest: Failed to handle
request

WebSphere® Support Technical Exchange 19

 IBM Software Group

ServerIOTimeout

Simply put, It is the time alloted for the request to complete
once a connection the JVM is established.

Plugin is able to find a route to the Appserver, makes a
connection and is waiting for the request to complete
successfully.

If the ServerIOTimeout is not adequately configured to
ensure successful request processing, a ServerIOTimeout
is fired.

JVM is marked down if ServerIOTimeout is set -ve

WebSphere® Support Technical Exchange 20

 IBM Software Group

Analysing the plug-in Trace

From Plugin Log parse all lines containing

lib_rio: wait_on_socket: ServerIOTimeout fired

Isolate entries based on ThreadID/ProcessID

Pick out the HTTP/1.1 500 code on the request.

Match the request with the 500 seen in Accesslog.

WebSphere® Support Technical Exchange 21

 IBM Software Group

Header info from threadID 0000095c

[Tue Mar 26 12:46:14 2013] 00000a2c 0000095c - DETAIL: GET /ToBigToFailBank/changed.login.authenticate.do HTTP/1.1

[Tue Mar 26 12:46:14 2013] 00000a2c 0000095c - DETAIL: Host: ToBigToFail.Bank.fantasyland.com

[Tue Mar 26 12:46:14 2013] 00000a2c 0000095c - DETAIL: Accept-Encoding: gzip, deflate

[Tue Mar 26 12:46:14 2013] 00000a2c 0000095c - DETAIL: User-Agent: Mozilla/5.0 (iPad; CPU OS 6_0_1 like Mac OS X)
AppleWebKit/536.26 (KHTML, like Gecko) Version/6.0 Mobile/10A523 Safari/8536.25

[Tue Mar 26 12:46:14 2013] 00000a2c 0000095c - DETAIL: Accept-Language: ar

[Tue Mar 26 12:46:14 2013] 00000a2c 0000095c - DETAIL: Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

[Tue Mar 26 12:46:14 2013] 00000a2c 0000095c - DETAIL: X-Forwarded-For: 77.30.XX.94

[Tue Mar 26 12:46:14 2013] 00000a2c 0000095c - DETAIL: $WSIS: false

[Tue Mar 26 12:46:14 2013] 00000a2c 0000095c - DETAIL: $WSSC: http

[Tue Mar 26 12:46:14 2013] 00000a2c 0000095c - DETAIL: $WSPR: HTTP/1.1

[Tue Mar 26 12:46:14 2013] 00000a2c 0000095c - DETAIL: $WSRA: XX.YY.ZZ.99

[Tue Mar 26 12:46:14 2013] 00000a2c 0000095c - DETAIL: $WSRH: XX.YY.ZZ.99

[Tue Mar 26 12:46:14 2013] 00000a2c 0000095c - DETAIL: $WSSN: ToBigToFail.Bank.fantasyland.com

[Tue Mar 26 12:46:14 2013] 00000a2c 0000095c - DETAIL: $WSSP: 80

[Tue Mar 26 12:46:14 2013] 00000a2c 0000095c - DETAIL: Surrogate-Capability: WS-ESI="ESI/1.0+"

[Tue Mar 26 12:46:14 2013] 00000a2c 0000095c - DETAIL: _WS_HAPRT_WLMVERSION: -1

[Tue Mar 26 12:46:14 2013] 00000a2c 0000095c - TRACE: ws_common: websphereExecute: Wrote the request; reading the
response

[Tue Mar 26 12:46:14 2013] 00000a2c 0000095c - DETAIL: lib_htresponse: htresponseRead: Reading the response: 686b9ac

[Tue Mar 26 12:46:36 2013] 00000a2c 0000095c - DETAIL: HTTP/1.1 500 Internal Server Error

[Tue Mar 26 12:46:36 2013] 00000a2c 0000095c - DETAIL: Content-Type: text/html;charset=ISO-8859-6

[Tue Mar 26 12:46:36 2013] 00000a2c 0000095c - DETAIL: Pragma: no-cache

[Tue Mar 26 12:46:36 2013] 00000a2c 0000095c - DETAIL: Expires: Thu, 01 Jan 1970 00:00:00 GMT

[Tue Mar 26 12:46:36 2013] 00000a2c 0000095c - DETAIL: $WSEP:

[Tue Mar 26 12:46:36 2013] 00000a2c 0000095c - DETAIL: Content-Language: en

[Tue Mar 26 12:46:36 2013] 00000a2c 0000095c - DETAIL: Content-Length: 2579

[Tue Mar 26 12:46:36 2013] 00000a2c 0000095c - TRACE: lib_htresponse: htresponseSetContentLength: Setting the content length |2579|

[Tue Mar 26 12:46:36 2013] 00000a2c 0000095c - DETAIL: Set-Cookie: JSESSIONID=0000BlahBigtofaillahrtKp5qGwmG:-1; Path=/

[Tue Mar 26 12:46:36 2013] 00000a2c 0000095c - DETAIL: Connection: Close

WebSphere® Support Technical Exchange 22

 IBM Software Group

MaxConnections

is used to gauge when a server is "starting to become
overwhelmed".

By Default the maxConnections is -1. Which means an
unlimited number of connections.

-1 maxConnection setting in a high load environment can
overwhelm an Appserver

ReachedMaxConnectionsLimit 0 or 1 checked on each
request.

MaxConnection does not mark a JVM down

But is a factor leading to the cluster being marked down.

Leading to Internal Server Error

WebSphere® Support Technical Exchange 23

 IBM Software Group

Sample plugin-cfg.xml snippet

ServerCluster CloneSeparatorChange="false" GetDWLMTable="false" IgnoreAffinityRequests="true" LoadBalance="Round Robin"
Name="clusterBB" PostBufferSize="64" PostSizeLimit="-1" RemoveSpecialHeaders="true" RetryInterval="60">

<Server CloneID="1795h8v8r" ConnectTimeout="0" ExtendedHandshake="false" LoadBalanceWeight="2" MaxConnections="-1"
Name="BigBangNodeA_server1" ServerIOTimeout="0" WaitForContinue="false">

<Transport Hostname="BigBang.courts.judiciary.state.nj.us" Port="10200" Protocol="http"/>

<Transport Hostname="BigBang.courts.judiciary.state.nj.us" Port="10201" Protocol="https">

<Property Name="keyring" Value="/APACHE/BBwasqa3_SSL_home/Plugins/config/BBapacheqa1_SSL/plugin-key.kdb"/>

<Property Name="stashfile" Value="/APACHE/BBwasqa3_SSL_home/Plugins/config/Bapacheqa1_SSL/plugin-key.sth"/>

</Transport>

</Server>

<Server CloneID="1795h5m2c" ConnectTimeout="5" ExtendedHandshake="false" LoadBalanceWeight="2" MaxConnections="-1"
Name="BigBangNodeA_server2" ServerIOTimeout="-60" WaitForContinue="false">

<Transport Hostname="BigBang.courts.judiciary.state.nj.us" Port="10100" Protocol="http"/>

<Transport Hostname="BigBang.courts.judiciary.state.nj.us" Port="10101" Protocol="https">

<Property Name="keyring" Value="/APACHE/BBwasqa3_SSL_home/Plugins/config/BBapacheqa1_SSL/plugin-key.kdb"/>

<Property Name="stashfile" Value="/APACHE/BBwasqa3_SSL_home/Plugins/config/BBapacheqa1_SSL/plugin-key.sth"/>

</Transport>

</Server>

<Server CloneID="1795hi3jq" ConnectTimeout="5" ExtendedHandshake="false" LoadBalanceWeight="2" MaxConnections="10"
Name="BigBang3NodeA_server3" ServerIOTimeout="60" WaitForContinue="false">

<Transport Hostname="BigBang.courts.judiciary.state.nj.us" Port="10300" Protocol="http"/>

<Transport Hostname="BigBang.courts.judiciary.state.nj.us" Port="10301" Protocol="https">

<Property Name="keyring" Value="/APACHE/BBwasqa3_SSL_home/Plugins/config/BBapacheqa1_SSL/plugin-key.kdb"/>

<Property Name="stashfile" Value="/APACHE/BBwasqa3_SSL_home/Plugins/config/BBapacheqa1_SSL/plugin-key.sth"/>

</Transport>

</Server>

<PrimaryServers>

<Server Name="BigBangNodeA_server1"/>

<Server Name="BigBangNodeA_server2"/>

<Server Name="BigBangNodeA_server3"/>

</PrimaryServers>

</ServerCluster>

WebSphere® Support Technical Exchange 24

 IBM Software Group

Stripped down ServerCluster stanza

ServerCluster Name="clusterBB" RetryInterval="60">
<Server CloneID="1795h8v8r" ConnectTimeout="0” MaxConnections="-1"
Name="BigBangNodeA_server1" ServerIOTimeout="0"
</Server>
<Server CloneID="1795h5m2c" ConnectTimeout="5” MaxConnections="-1"
Name="BigBangNodeA_server2" ServerIOTimeout="-60"
</Server>
<Server CloneID="1795hi3jq" ConnectTimeout="5" MaxConnections="10"
Name="BigBang3NodeA_server3" ServerIOTimeout="60"
</Server>
<PrimaryServers>
<Server Name="BigBangNodeA_server1"/>
<Server Name="BigBangNodeA_server2"/>
<Server Name="BigBangNodeA_server3"/>
</PrimaryServers>
</ServerCluster>

WebSphere® Support Technical Exchange 25

 IBM Software Group

Failed to Handle request

[Thu Mar 14 09:51:31 2013] 008300c6 00000203 -

ERROR: ws_common: websphereHandleRequest:
Failed to handle request

[Thu Mar 14 09:51:31 2013] 008300c6 00000203 -
TRACE: ws_common: websphereCloseConnection

WebSphere® Support Technical Exchange 26

 IBM Software Group

Analyze diagnostics

The URL that failed

Where the failure occurred (Web server, plug-in, application server)

Analyze the diagnostics in the following order:

1. The browser error display

2. WebServer Accesslog

3. Plugin Trace

4. Appserver log

WebSphere® Support Technical Exchange 27

 IBM Software Group

WebServer Accesslog - LogFormat

LogFormat variable settings determines the information
recorded.

Tweaking LogFormat settings might be necessary.

LogFormat "%h %l %u %t \"%r\" %>s %b %{RH}e %{WAS}e

9.37.242.147 - - [07/Nov/2006:14:19:59 -0500] "GET

/servlet/Silly/ HTTP/1.1" 500 418 (mod_was_ap20_http.c/-
2/handler) amadeus.rtp.raleigh.ibm.co:9080

http://httpd.apache.org/docs/2.2/mod/mod_log_config.html

%d, %t, %T, %X, modifiers etc.

WebSphere® Support Technical Exchange 28

 IBM Software Group

GSK Errors

Various GSKit errors in plugin can cause the appservers to be
marked down.

lib_stream: openStream: Failed in r_gsk_secure_soc_init:
GSK_ERROR_SOCKET_CLOSED(gsk rc = 420) PARTNER
CERTIFICATE DN=CN=jserver,OU=SWG,O=IBM,C=US,
Serial=3f:28:2c:f8

ws_common: websphereGetStream: Could not open stream

ws_common: websphereExecute: Failed to create the stream

ws_server: serverSetFailoverStatus: Marking
WC_academy_node_server3 down

This can potentially have a cascading effect and trigger the
other criteria for HTTP 500 in case of a single webserver.

WebSphere® Support Technical Exchange 29

 IBM Software Group

GSK err 414

GSK err 414 which is a bad certificate exception
seen in the plugin logs will manifest itself as a
HTTP 500 error in the Appserver logs.

The HTTP 500 in this case will be a JSSE

authentication exception at the application level
and the application will throw a HTTP 500

WebSphere® Support Technical Exchange 30

 IBM Software Group

500 in JVM logs

Common Cause of a 500 exceptioin - Timeout

4 Types of timeout

 Read
 Write
 Persist
 Connect

WebSphere® Support Technical Exchange 31

 IBM Software Group

JVM Timeouts can come in many flavors

 SRVE0133E: An error occurred while parsing parameters.

java.net.SocketTimeoutException: Async operation timed out

SRVE0133E: An error occurred while parsing parameters.

java.io.IOException: SRVE0216E: post body contains less
bytes than specified by content-length

Just two examples of what a read timeout could look like.

The root of the issue is still a SocketTimeoutException

Most times will look like this:

java.net.SocketTimeoutException: Async operation timed out

WebSphere® Support Technical Exchange 32

 IBM Software Group

Verify Web server plug-in is working correctly

Ensure that the Webserver plug-in was

regenerated and propagated to the Web server

Check other applications on the server

Access the application directly, bypassing the plug-

in.

Ensure that WebServer and Plug-in are the latest

fixpack level.

WebSphere® Support Technical Exchange 33

 IBM Software Group

Debug Web server plug-in problems

If you can access the application going directly to the
application server but not via the webserver, you are most
likely experiencing a problem with the Web server plug-in.

Review the Trace Level http_plugin logs for 500 exception.

Change timeout or connection values via AdminConsole

http://www-
01.ibm.com/support/docview.wss?uid=swg21460889

Regenerate the plug-in and propagate it to the Web server.

Restart the Web server or wait for the new configuration to be
activated.

WebSphere® Support Technical Exchange 34

 IBM Software Group

Summary


From IBM Http Server (IHS):


httpd.conf


error.log

access.log


From Plug-in:


plugin-cfg.xml

http_plugin.log <<<< Plug-in trace file


From WebSphere Application Server (WAS):

SystemOut.log

Trace.log (webContainer & Channel Traces)

WebSphere® Support Technical Exchange 35

 IBM Software Group

References:

LogFormat

http://httpd.apache.org/docs/2.2/mod/mod_log_config.html

MUSTGATHER http 500:

http://www-01.ibm.com/support/docview.wss?uid=swg21141306

Plugin LoadBalancing in a cluster environment

http://www-01.ibm.com/support/docview.wss?uid=swg21219567

Recommended values for plugin-cfg.xml

http://www-01.ibm.com/support/docview.wss?uid=swg21318463

WebSphere® Support Technical Exchange 36

 IBM Software Group

References
IHS Performance tuning guide

http://publib.boulder.ibm.com/httpserv/ihsdiag/ihs_performance.
html

Knowledge Collection – WebSphere Plugin

http://www-
01.ibm.com/support/docview.wss?uid=swg27021301

Web container problem determination

http://www.redbooks.ibm.com/redpapers/pdfs/redp4309.pdf

WebSphere 7.0 Infocenter

http://pic.dhe.ibm.com/infocenter/wasinfo/v7r0/index.jsp

WebSphere® Support Technical Exchange 37

 IBM Software Group

Some other WSTEs

Demystifying the IBM® Web Server Plug-in

http://www-01.ibm.com/support/docview.wss?uid=swg27014498

Introduction to Mod_Rewrite in IBM HTTP Server

https://www-
304.ibm.com/support/docview.wss?uid=swg27018905

Debugging HTTP 404 Response Code in an IHS/WebSphere

Topology

http://www-01.ibm.com/support/docview.wss?uid=swg27035752

WebSphere® Support Technical Exchange 38

 IBM Software Group

Additional WebSphere Product Resources

Learn about upcoming WebSphere Support Technical Exchange webcasts, and access
previously recorded presentations at:
http://www.ibm.com/software/websphere/support/supp_tech.html

Discover the latest trends in WebSphere Technology and implementation, participate in

technically-focused briefings, webcasts and podcasts at:
http://www.ibm.com/developerworks/websphere/community/

Join the Global WebSphere Community:
http://www.websphereusergroup.org

Access key product show-me demos and tutorials by visiting IBM® Education Assistant:
http://www.ibm.com/software/info/education/assistant

View a webcast replay with step-by-step instructions for using the Service Request (SR)
tool for submitting problems electronically:
http://www.ibm.com/software/websphere/support/d2w.html

Sign up to receive weekly technical My Notifications emails:
http://www.ibm.com/software/support/einfo.html

WebSphere® Support Technical Exchange 39

 IBM Software Group

Connect with us!

1. Get notified on upcoming webcasts

Send an e-mail to [email protected] with subject line “wste
subscribe” to get a list of mailing lists and to subscribe

2. Tell us what you want to learn

Send us suggestions for future topics or improvements about our
webcasts to [email protected]

3. Be connected!
Connect with us on Facebook
Connect with us on Twitter

WebSphere® Support Technical Exchange 40

 IBM Software Group

Questions and Answers

WebSphere® Support Technical Exchange 41