{"action":"created","issue":{"url":"https://api.github.com/repos/pingidentity/mod_auth_openidc/issues/122","repository_url":"https://api.github.com/repos/pingidentity/mod_auth_openidc","labels_url":"https://api.github.com/repos/pingidentity/mod_auth_openidc/issues/122/labels{/name}","comments_url":"https://api.github.com/repos/pingidentity/mod_auth_openidc/issues/122/comments","events_url":"https://api.github.com/repos/pingidentity/mod_auth_openidc/issues/122/events","html_url":"https://github.com/pingidentity/mod_auth_openidc/issues/122","id":139959312,"number":122,"title":"Apache 2.4 \"did not send any data\" for mod_auth_openidc protected resource","user":{"login":"akrherz","id":210858,"avatar_url":"https://avatars.githubusercontent.com/u/210858?v=3","gravatar_id":"","url":"https://api.github.com/users/akrherz","html_url":"https://github.com/akrherz","followers_url":"https://api.github.com/users/akrherz/followers","following_url":"https://api.github.com/users/akrherz/following{/other_user}","gists_url":"https://api.github.com/users/akrherz/gists{/gist_id}","starred_url":"https://api.github.com/users/akrherz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/akrherz/subscriptions","organizations_url":"https://api.github.com/users/akrherz/orgs","repos_url":"https://api.github.com/users/akrherz/repos","events_url":"https://api.github.com/users/akrherz/events{/privacy}","received_events_url":"https://api.github.com/users/akrherz/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":19,"created_at":"2016-03-10T17:32:21Z","updated_at":"2016-03-10T22:25:58Z","closed_at":null,"body":"Yesterday, I attempted to setup RHEL7 Apache 2.4.6-40 with mod_auth_openidc-1.8.7-1.el7.centos.x86_64 provided by this repo.  I have had success getting this to work, but sometimes, like currently, the server does not respond with any data for a request sent to the apache server.  I enabled \"LogLevel debug\" for the protected location and it logs:\r\n\r\n```\r\nMar 10 11:02:34 iemvs100 httpd[8222]: [authz_core:debug] [pid 8222] mod_authz_core.c(809): [client 127.0.0.1:40084] AH01626: authorization result of Require valid-user : denied (no authenticated user yet)\r\nMar 10 11:02:34 iemvs100 httpd[8222]: [authz_core:debug] [pid 8222] mod_authz_core.c(809): [client 127.0.0.1:40084] AH01626: authorization result of <RequireAny>: denied (no authenticated user yet)\r\nMar 10 11:02:34 iemvs100 httpd[8222]: [auth_openidc:debug] [pid 8222] src/mod_auth_openidc.c(2392): [client 127.0.0.1:40084] oidc_check_user_id: incoming request: \"/cscap/?(null)\", ap_is_initial_req(r)=1\r\nMar 10 11:02:34 iemvs100 httpd[8222]: [auth_openidc:debug] [pid 8222] src/util.c(772): [client 127.0.0.1:40084] oidc_util_get_cookie: returning \"mod_auth_openidc_session\" = <null>\r\nMar 10 11:02:34 iemvs100 httpd[8222]: [auth_openidc:debug] [pid 8222] src/session.c(83): [client 127.0.0.1:40084] oidc_session_load: <null>\r\nMar 10 11:02:34 iemvs100 httpd[8222]: [auth_openidc:debug] [pid 8222] src/util.c(811): [client 127.0.0.1:40084] oidc_util_request_matches_url: comparing \"/cscap/\"==\"/cscap/redirect_uri\"\r\nMar 10 11:02:34 iemvs100 httpd[8222]: [auth_openidc:debug] [pid 8222] src/util.c(374): [client 127.0.0.1:40084] oidc_get_current_url: current URL 'https://myserver/cscap/'\r\nMar 10 11:02:34 iemvs100 httpd[8222]: [auth_openidc:debug] [pid 8222] src/mod_auth_openidc.c(1483): [client 127.0.0.1:40084] oidc_authenticate_user: enter\r\nMar 10 11:02:34 iemvs100 httpd[8222]: [auth_openidc:debug] [pid 8222] src/cache/memcache.c(185): [client 127.0.0.1:40084] oidc_cache_memcache_get: enter, section=\"provider\", key=\"https://accounts.google.com/.well-known/openid-configuration\"\r\n```\r\n\r\nIf I test my memcached backend, I seem to get data\r\n\r\n```\r\n# telnet memcached 11211\r\nTrying 192.168.1.249...\r\nConnected to memcached.\r\nEscape character is '^]'.\r\nget provider:https://accounts.google.com/.well-known/openid-configuration\r\nVALUE provider:https://accounts.google.com/.well-known/openid-configuration 0 1039\r\n{\r\n \"issuer\": \"https://accounts.google.com\",\r\n \"authorization_endpoint\": \"https://accounts.google.com/o/oauth2/v2/auth\",\r\n \"token_endpoint\": \"https://www.googleapis.com/oauth2/v4/token\",\r\n \"userinfo_endpoint\": \"https://www.googleapis.com/oauth2/v3/userinfo\",\r\n \"revocation_endpoint\": \"https://accounts.google.com/o/oauth2/revoke\",\r\n \"jwks_uri\": \"https://www.googleapis.com/oauth2/v3/certs\",\r\n \"response_types_supported\": [\r\n  \"code\",\r\n  \"token\",\r\n  \"id_token\",\r\n  \"code token\",\r\n  \"code id_token\",\r\n  \"token id_token\",\r\n  \"code token id_token\",\r\n  \"none\"\r\n ],\r\n \"subject_types_supported\": [\r\n  \"public\"\r\n ],\r\n \"id_token_signing_alg_values_supported\": [\r\n  \"RS256\"\r\n ],\r\n \"scopes_supported\": [\r\n  \"openid\",\r\n  \"email\",\r\n  \"profile\"\r\n ],\r\n \"token_endpoint_auth_methods_supported\": [\r\n  \"client_secret_post\",\r\n  \"client_secret_basic\"\r\n ],\r\n \"claims_supported\": [\r\n  \"aud\",\r\n  \"email\",\r\n  \"email_verified\",\r\n  \"exp\",\r\n  \"family_name\",\r\n  \"given_name\",\r\n  \"iat\",\r\n  \"iss\",\r\n  \"locale\",\r\n  \"name\",\r\n  \"picture\",\r\n  \"sub\"\r\n ],\r\n \"code_challenge_methods_supported\": [\r\n  \"plain\",\r\n  \"S256\"\r\n ]\r\n}\r\n\r\nEND\r\n```\r\n\r\nAny ideas what could be causing the Apache server not to respond?  If I restart Apache, it will start working again for a while."},"comment":{"url":"https://api.github.com/repos/pingidentity/mod_auth_openidc/issues/comments/195079105","html_url":"https://github.com/pingidentity/mod_auth_openidc/issues/122#issuecomment-195079105","issue_url":"https://api.github.com/repos/pingidentity/mod_auth_openidc/issues/122","id":195079105,"user":{"login":"akrherz","id":210858,"avatar_url":"https://avatars.githubusercontent.com/u/210858?v=3","gravatar_id":"","url":"https://api.github.com/users/akrherz","html_url":"https://github.com/akrherz","followers_url":"https://api.github.com/users/akrherz/followers","following_url":"https://api.github.com/users/akrherz/following{/other_user}","gists_url":"https://api.github.com/users/akrherz/gists{/gist_id}","starred_url":"https://api.github.com/users/akrherz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/akrherz/subscriptions","organizations_url":"https://api.github.com/users/akrherz/orgs","repos_url":"https://api.github.com/users/akrherz/repos","events_url":"https://api.github.com/users/akrherz/events{/privacy}","received_events_url":"https://api.github.com/users/akrherz/received_events","type":"User","site_admin":false},"created_at":"2016-03-10T22:25:58Z","updated_at":"2016-03-10T22:25:58Z","body":"Yes, my comment above had the trailing portion, here is it all\r\n```\r\n[Thu Mar 10 15:03:26.129952 2016] [authz_core:debug] [pid 5989] mod_authz_core.c(809): [client 127.0.0.1:59959] AH01626: authorization result of Require valid-user : denied (no authenticated user yet)\r\n[Thu Mar 10 15:03:26.129994 2016] [authz_core:debug] [pid 5989] mod_authz_core.c(809): [client 127.0.0.1:59959] AH01626: authorization result of <RequireAny>: denied (no authenticated user yet)\r\n[Thu Mar 10 15:03:26.130012 2016] [auth_openidc:debug] [pid 5989] src/mod_auth_openidc.c(2609): [client 127.0.0.1:59959] oidc_check_user_id: incoming request: \"/cscap/?(null)\", ap_is_initial_req(r)=1\r\n[Thu Mar 10 15:03:26.130121 2016] [auth_openidc:debug] [pid 5989] src/util.c(772): [client 127.0.0.1:59959] oidc_util_get_cookie: returning \"mod_auth_openidc_session\" = \"eb89265d-31f2-480e-b4b8-ab1e44018c3d\"\r\n[Thu Mar 10 15:03:26.130131 2016] [auth_openidc:debug] [pid 5989] src/cache/memcache.c(185): [client 127.0.0.1:59959] oidc_cache_memcache_get: enter, section=\"session\", key=\"eb89265d-31f2-480e-b4b8-ab1e44018c3d\"\r\n[Thu Mar 10 15:03:26.131144 2016] [auth_openidc:debug] [pid 5989] src/session.c(83): [client 127.0.0.1:59959] oidc_session_load: eb89265d-31f2-480e-b4b8-ab1e44018c3d\r\n[Thu Mar 10 15:03:26.131225 2016] [auth_openidc:debug] [pid 5989] src/util.c(811): [client 127.0.0.1:59959] oidc_util_request_matches_url: comparing \"/cscap/\"==\"/cscap/redirect_uri\"\r\n[Thu Mar 10 15:03:26.131235 2016] [auth_openidc:debug] [pid 5989] src/mod_auth_openidc.c(984): [client 127.0.0.1:59959] oidc_handle_existing_session: enter\r\n[Thu Mar 10 15:03:26.131258 2016] [auth_openidc:debug] [pid 5989] src/mod_auth_openidc.c(689): [client 127.0.0.1:59959] oidc_log_session_expires: session expires Fri, 11 Mar 2016 04:50:35 GMT (in 28029 secs from now)\r\n[Thu Mar 10 15:03:26.131268 2016] [auth_openidc:debug] [pid 5989] src/mod_auth_openidc.c(756): [client 127.0.0.1:59959] oidc_get_provider_from_session: enter\r\n[Thu Mar 10 15:03:26.131279 2016] [auth_openidc:debug] [pid 5989] src/mod_auth_openidc.c(202): [client 127.0.0.1:59959] oidc_provider_static_config: enter\r\n[Thu Mar 10 15:03:26.131284 2016] [auth_openidc:debug] [pid 5989] src/mod_auth_openidc.c(210): [client 127.0.0.1:59959] oidc_provider_static_config: cache->get\r\n[Thu Mar 10 15:03:26.131288 2016] [auth_openidc:debug] [pid 5989] src/cache/memcache.c(185): [client 127.0.0.1:59959] oidc_cache_memcache_get: enter, section=\"provider\", key=\"https://accounts.google.com/.well-known/openid-configuration\"\r\n[Thu Mar 10 15:03:26.131837 2016] [auth_openidc:debug] [pid 5989] src/mod_auth_openidc.c(215): [client 127.0.0.1:59959] oidc_provider_static_config: cache->get returned: {\\n \"issuer\": \"https://accounts.google.com\",\\n \"authorization_endpoint\": \"https://accounts.google.com/o/oauth2/v2/auth\",\\n \"token_endpoint\": \"https://www.googleapis.com/oauth2/v4/token\",\\n \"userinfo_endpoint\": \"https://www.googleapis.com/oauth2/v3/userinfo\",\\n \"revocation_endpoint\": \"https://accounts.google.com/o/oauth2/revoke\",\\n \"jwks_uri\": \"https://www.googleapis.com/oauth2/v3/certs\",\\n \"response_types_supported\": [\\n  \"code\",\\n  \"token\",\\n  \"id_token\",\\n  \"code token\",\\n  \"code id_token\",\\n  \"token id_token\",\\n  \"code token id_token\",\\n  \"none\"\\n ],\\n \"subject_types_supported\": [\\n  \"public\"\\n ],\\n \"id_token_signing_alg_values_supported\": [\\n  \"RS256\"\\n ],\\n \"scopes_supported\": [\\n  \"openid\",\\n  \"email\",\\n  \"profile\"\\n ],\\n \"token_endpoint_auth_methods_supported\": [\\n  \"client_secret_post\",\\n  \"client_secret_basic\"\\n ],\\n \"claims_supported\": [\\n  \"aud\",\\n  \"email\",\\n  \"email_verified\",\\n  \"exp\",\\n  \"family_name\",\\n  \"given_name\",\\n  \"iat\",\\n  \"iss\",\\n  \"locale\",\\n  \"name\",\\n  \"picture\",\\n  \"sub\"\\n ],\\n \"code_challenge_methods_supported\": [\\n  \"plain\",\\n  \"S256\"\\n ]\\n}\\n\r\n[Thu Mar 10 15:03:26.132014 2016] [auth_openidc:debug] [pid 5989] src/mod_auth_openidc.c(244): [client 127.0.0.1:59959] oidc_provider_static_config: oidc_metadata_provider_parse\r\n[Thu Mar 10 15:03:26.132044 2016] [auth_openidc:debug] [pid 5989] src/mod_auth_openidc.c(254): [client 127.0.0.1:59959] oidc_provider_static_config: oidc_metadata_provider_parse return\r\n[Thu Mar 10 15:03:26.775828 2016] [core:notice] [pid 5732] AH00051: child pid 5989 exit signal Aborted (6), possible coredump in /tmp\r\n```"}}