{"action":"created","issue":{"url":"https://api.github.com/repos/pingidentity/mod_auth_openidc/issues/122","repository_url":"https://api.github.com/repos/pingidentity/mod_auth_openidc","labels_url":"https://api.github.com/repos/pingidentity/mod_auth_openidc/issues/122/labels{/name}","comments_url":"https://api.github.com/repos/pingidentity/mod_auth_openidc/issues/122/comments","events_url":"https://api.github.com/repos/pingidentity/mod_auth_openidc/issues/122/events","html_url":"https://github.com/pingidentity/mod_auth_openidc/issues/122","id":139959312,"number":122,"title":"Apache 2.4 \"did not send any data\" for mod_auth_openidc protected resource","user":{"login":"akrherz","id":210858,"avatar_url":"https://avatars.githubusercontent.com/u/210858?v=3","gravatar_id":"","url":"https://api.github.com/users/akrherz","html_url":"https://github.com/akrherz","followers_url":"https://api.github.com/users/akrherz/followers","following_url":"https://api.github.com/users/akrherz/following{/other_user}","gists_url":"https://api.github.com/users/akrherz/gists{/gist_id}","starred_url":"https://api.github.com/users/akrherz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/akrherz/subscriptions","organizations_url":"https://api.github.com/users/akrherz/orgs","repos_url":"https://api.github.com/users/akrherz/repos","events_url":"https://api.github.com/users/akrherz/events{/privacy}","received_events_url":"https://api.github.com/users/akrherz/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":15,"created_at":"2016-03-10T17:32:21Z","updated_at":"2016-03-10T21:22:28Z","closed_at":null,"body":"Yesterday, I attempted to setup RHEL7 Apache 2.4.6-40 with mod_auth_openidc-1.8.7-1.el7.centos.x86_64 provided by this repo.  I have had success getting this to work, but sometimes, like currently, the server does not respond with any data for a request sent to the apache server.  I enabled \"LogLevel debug\" for the protected location and it logs:\r\n\r\n```\r\nMar 10 11:02:34 iemvs100 httpd[8222]: [authz_core:debug] [pid 8222] mod_authz_core.c(809): [client 127.0.0.1:40084] AH01626: authorization result of Require valid-user : denied (no authenticated user yet)\r\nMar 10 11:02:34 iemvs100 httpd[8222]: [authz_core:debug] [pid 8222] mod_authz_core.c(809): [client 127.0.0.1:40084] AH01626: authorization result of <RequireAny>: denied (no authenticated user yet)\r\nMar 10 11:02:34 iemvs100 httpd[8222]: [auth_openidc:debug] [pid 8222] src/mod_auth_openidc.c(2392): [client 127.0.0.1:40084] oidc_check_user_id: incoming request: \"/cscap/?(null)\", ap_is_initial_req(r)=1\r\nMar 10 11:02:34 iemvs100 httpd[8222]: [auth_openidc:debug] [pid 8222] src/util.c(772): [client 127.0.0.1:40084] oidc_util_get_cookie: returning \"mod_auth_openidc_session\" = <null>\r\nMar 10 11:02:34 iemvs100 httpd[8222]: [auth_openidc:debug] [pid 8222] src/session.c(83): [client 127.0.0.1:40084] oidc_session_load: <null>\r\nMar 10 11:02:34 iemvs100 httpd[8222]: [auth_openidc:debug] [pid 8222] src/util.c(811): [client 127.0.0.1:40084] oidc_util_request_matches_url: comparing \"/cscap/\"==\"/cscap/redirect_uri\"\r\nMar 10 11:02:34 iemvs100 httpd[8222]: [auth_openidc:debug] [pid 8222] src/util.c(374): [client 127.0.0.1:40084] oidc_get_current_url: current URL 'https://myserver/cscap/'\r\nMar 10 11:02:34 iemvs100 httpd[8222]: [auth_openidc:debug] [pid 8222] src/mod_auth_openidc.c(1483): [client 127.0.0.1:40084] oidc_authenticate_user: enter\r\nMar 10 11:02:34 iemvs100 httpd[8222]: [auth_openidc:debug] [pid 8222] src/cache/memcache.c(185): [client 127.0.0.1:40084] oidc_cache_memcache_get: enter, section=\"provider\", key=\"https://accounts.google.com/.well-known/openid-configuration\"\r\n```\r\n\r\nIf I test my memcached backend, I seem to get data\r\n\r\n```\r\n# telnet memcached 11211\r\nTrying 192.168.1.249...\r\nConnected to memcached.\r\nEscape character is '^]'.\r\nget provider:https://accounts.google.com/.well-known/openid-configuration\r\nVALUE provider:https://accounts.google.com/.well-known/openid-configuration 0 1039\r\n{\r\n \"issuer\": \"https://accounts.google.com\",\r\n \"authorization_endpoint\": \"https://accounts.google.com/o/oauth2/v2/auth\",\r\n \"token_endpoint\": \"https://www.googleapis.com/oauth2/v4/token\",\r\n \"userinfo_endpoint\": \"https://www.googleapis.com/oauth2/v3/userinfo\",\r\n \"revocation_endpoint\": \"https://accounts.google.com/o/oauth2/revoke\",\r\n \"jwks_uri\": \"https://www.googleapis.com/oauth2/v3/certs\",\r\n \"response_types_supported\": [\r\n  \"code\",\r\n  \"token\",\r\n  \"id_token\",\r\n  \"code token\",\r\n  \"code id_token\",\r\n  \"token id_token\",\r\n  \"code token id_token\",\r\n  \"none\"\r\n ],\r\n \"subject_types_supported\": [\r\n  \"public\"\r\n ],\r\n \"id_token_signing_alg_values_supported\": [\r\n  \"RS256\"\r\n ],\r\n \"scopes_supported\": [\r\n  \"openid\",\r\n  \"email\",\r\n  \"profile\"\r\n ],\r\n \"token_endpoint_auth_methods_supported\": [\r\n  \"client_secret_post\",\r\n  \"client_secret_basic\"\r\n ],\r\n \"claims_supported\": [\r\n  \"aud\",\r\n  \"email\",\r\n  \"email_verified\",\r\n  \"exp\",\r\n  \"family_name\",\r\n  \"given_name\",\r\n  \"iat\",\r\n  \"iss\",\r\n  \"locale\",\r\n  \"name\",\r\n  \"picture\",\r\n  \"sub\"\r\n ],\r\n \"code_challenge_methods_supported\": [\r\n  \"plain\",\r\n  \"S256\"\r\n ]\r\n}\r\n\r\nEND\r\n```\r\n\r\nAny ideas what could be causing the Apache server not to respond?  If I restart Apache, it will start working again for a while."},"comment":{"url":"https://api.github.com/repos/pingidentity/mod_auth_openidc/issues/comments/195055146","html_url":"https://github.com/pingidentity/mod_auth_openidc/issues/122#issuecomment-195055146","issue_url":"https://api.github.com/repos/pingidentity/mod_auth_openidc/issues/122","id":195055146,"user":{"login":"akrherz","id":210858,"avatar_url":"https://avatars.githubusercontent.com/u/210858?v=3","gravatar_id":"","url":"https://api.github.com/users/akrherz","html_url":"https://github.com/akrherz","followers_url":"https://api.github.com/users/akrherz/followers","following_url":"https://api.github.com/users/akrherz/following{/other_user}","gists_url":"https://api.github.com/users/akrherz/gists{/gist_id}","starred_url":"https://api.github.com/users/akrherz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/akrherz/subscriptions","organizations_url":"https://api.github.com/users/akrherz/orgs","repos_url":"https://api.github.com/users/akrherz/repos","events_url":"https://api.github.com/users/akrherz/events{/privacy}","received_events_url":"https://api.github.com/users/akrherz/received_events","type":"User","site_admin":false},"created_at":"2016-03-10T21:22:28Z","updated_at":"2016-03-10T21:22:28Z","body":"And a current coredump\r\n```\r\nCore was generated by `/usr/sbin/httpd -DFOREGROUND'.\r\nProgram terminated with signal 6, Aborted.\r\n#0  0x00007fa3ec9025f7 in __GI_raise (sig=sig@entry=6)\r\n    at ../nptl/sysdeps/unix/sysv/linux/raise.c:56\r\n56\t  return INLINE_SYSCALL (tgkill, 3, pid, selftid, sig);\r\nMissing separate debuginfos, use: debuginfo-install httpd-2.4.6-40.el7.x86_64\r\n(gdb) bt full\r\n#0  0x00007fa3ec9025f7 in __GI_raise (sig=sig@entry=6)\r\n    at ../nptl/sysdeps/unix/sysv/linux/raise.c:56\r\n        resultvar = 0\r\n        pid = 5991\r\n        selftid = 5991\r\n#1  0x00007fa3ec903ce8 in __GI_abort () at abort.c:90\r\n        save_stage = 2\r\n        act = {__sigaction_handler = {sa_handler = 0x7fa3eca492d4, \r\n            sa_sigaction = 0x7fa3eca492d4}, sa_mask = {__val = {3, \r\n              140723513293707, 5, 140342026601639, 1, 140342026610323, 3, \r\n              140723513293684, 12, 140342026610327, 2, 140342026610327, 2, \r\n              140723513294496, 140723513294496, 140723513296256}}, \r\n          sa_flags = 20, sa_restorer = 0x7ffcbf0580a0}\r\n        sigs = {__val = {32, 0 <repeats 15 times>}}\r\n#2  0x00007fa3ec942317 in __libc_message (do_abort=do_abort@entry=2, \r\n    fmt=fmt@entry=0x7fa3eca4ba28 \"*** Error in `%s': %s: 0x%s ***\\n\")\r\n    at ../sysdeps/unix/sysv/linux/libc_fatal.c:196\r\n        ap = {{gp_offset = 40, fp_offset = 48, \r\n            overflow_arg_area = 0x7ffcbf058590, \r\n            reg_save_area = 0x7ffcbf0584a0}}\r\n        ap_copy = {{gp_offset = 16, fp_offset = 48, \r\n            overflow_arg_area = 0x7ffcbf058590, \r\n            reg_save_area = 0x7ffcbf0584a0}}\r\n        fd = 2\r\n        on_2 = <optimized out>\r\n        list = <optimized out>\r\n        nlist = <optimized out>\r\n        cp = <optimized out>\r\n        written = <optimized out>\r\n#3  0x00007fa3ec94a023 in malloc_printerr (ar_ptr=0x0, ptr=<optimized out>, \r\n    str=0x7fa3eca49114 \"free(): invalid pointer\", action=3) at malloc.c:5018\r\n        buf = \"00007fa3f0138b69\"\r\n        cp = <optimized out>\r\n        ar_ptr = 0x0\r\n        ptr = <optimized out>\r\n        str = 0x7fa3eca49114 \"free(): invalid pointer\"\r\n        action = 3\r\n#4  _int_free (av=0x0, p=<optimized out>, have_lock=0) at malloc.c:3842\r\n        size = <optimized out>\r\n        fb = <optimized out>\r\n        nextchunk = <optimized out>\r\n        nextsize = <optimized out>\r\n        nextinuse = <optimized out>\r\n        prevsize = <optimized out>\r\n        bck = <optimized out>\r\n        fwd = <optimized out>\r\n        errstr = 0x7fa3eca49114 \"free(): invalid pointer\"\r\n---Type <return> to continue, or q <return> to quit---\r\n        locked = <optimized out>\r\n#5  0x00007fa3dedff911 in json_delete () from /lib64/libjansson.so.4\r\nNo symbol table info available.\r\n#6  0x00007fa3df29717e in json_decref (json=<optimized out>)\r\n    at /usr/include/jansson.h:107\r\nNo locals.\r\n#7  oidc_provider_static_config (r=r@entry=0x7fa3f007d6d0, \r\n    c=c@entry=0x7fa3efa59160, provider=provider@entry=0x7ffcbf0586c0)\r\n    at src/mod_auth_openidc.c:256\r\n        j_provider = 0x7fa3f00dd8d0\r\n        s_json = 0x7fa3f01f38f0 \"{\\n \\\"issuer\\\": \\\"https://accounts.google.com\\\",\\n \\\"authorization_endpoint\\\": \\\"https://accounts.google.com/o/oauth2/v2/auth\\\",\\n \\\"token_endpoint\\\": \\\"https://www.googleapis.com/oauth2/v4/token\\\",\\n \\\"userinfo_endpo\"...\r\n        __FUNCTION__ = \"oidc_provider_static_config\"\r\n#8  0x00007fa3df298e29 in oidc_get_provider_for_issuer (\r\n    r=r@entry=0x7fa3f007d6d0, c=c@entry=0x7fa3efa59160, \r\n    issuer=0x7fa3f01f31f0 \"https://accounts.google.com\", \r\n    allow_discovery=0 '\\000') at src/mod_auth_openidc.c:271\r\n        provider = 0x7fa3f01e97a8\r\n#9  0x00007fa3df29bb38 in oidc_get_provider_from_session (\r\n    r=r@entry=0x7fa3f007d6d0, c=c@entry=0x7fa3efa59160, \r\n    session=session@entry=0x7fa3f01d17b8, \r\n    provider=provider@entry=0x7ffcbf058798) at src/mod_auth_openidc.c:767\r\n        __FUNCTION__ = \"oidc_get_provider_from_session\"\r\n        issuer = 0x7fa3f01f31f0 \"https://accounts.google.com\"\r\n        p = <optimized out>\r\n#10 0x00007fa3df29e27d in oidc_refresh_claims_from_userinfo_endpoint (\r\n    session=0x7fa3f01d17b8, cfg=0x7fa3efa59160, r=0x7fa3f007d6d0)\r\n    at src/mod_auth_openidc.c:937\r\n        access_token = 0x0\r\n        provider = 0x0\r\n        claims = 0x0\r\n        interval = <optimized out>\r\n#11 oidc_handle_existing_session (session=0x7fa3f01d17b8, cfg=0x7fa3efa59160, \r\n    r=0x7fa3f007d6d0) at src/mod_auth_openidc.c:1000\r\n        access_token = 0x7fa3f01f3498 \"1457671835531367\"\r\n        dir_cfg = 0x7fa3efa5c0c0\r\n        needs_save = <optimized out>\r\n        access_token_expires = 0x52dbeabf4b867 <Address 0x52dbeabf4b867 out of bounds>\r\n        interval = <optimized out>\r\n        now = <optimized out>\r\n        slack = <optimized out>\r\n#12 oidc_check_userid_openidc (c=0x7fa3efa59160, r=0x7fa3f007d6d0)\r\n    at src/mod_auth_openidc.c:2549\r\n        session = 0x7fa3f01d17b8\r\n---Type <return> to continue, or q <return> to quit---\r\n        dir_cfg = <optimized out>\r\n#13 oidc_check_user_id (r=0x7fa3f007d6d0) at src/mod_auth_openidc.c:2618\r\n        c = 0x7fa3efa59160\r\n        __FUNCTION__ = \"oidc_check_user_id\"\r\n#14 0x00007fa3ee404780 in ap_run_check_user_id ()\r\nNo symbol table info available.\r\n#15 0x00007fa3ee407762 in ap_process_request_internal ()\r\nNo symbol table info available.\r\n#16 0x00007fa3ee422af8 in ap_process_async_request ()\r\nNo symbol table info available.\r\n#17 0x00007fa3ee422de4 in ap_process_request ()\r\nNo symbol table info available.\r\n#18 0x00007fa3ee41f772 in ap_process_http_connection ()\r\nNo symbol table info available.\r\n#19 0x00007fa3ee417810 in ap_run_process_connection ()\r\nNo symbol table info available.\r\n#20 0x00007fa3e3de980f in child_main ()\r\n   from /etc/httpd/modules/mod_mpm_prefork.so\r\nNo symbol table info available.\r\n#21 0x00007fa3e3de9a55 in make_child ()\r\n   from /etc/httpd/modules/mod_mpm_prefork.so\r\nNo symbol table info available.\r\n#22 0x00007fa3e3dea1c1 in prefork_run ()\r\n   from /etc/httpd/modules/mod_mpm_prefork.so\r\nNo symbol table info available.\r\n#23 0x00007fa3ee3f45ae in ap_run_mpm ()\r\nNo symbol table info available.\r\n#24 0x00007fa3ee3edb36 in main ()\r\nNo symbol table info available.\r\n```"}}