Symptoms

WPB central instance is located on NG cluster.

All WPB-related tasks fail with:

Script execution failed: executing '/usr/bin/php -d open_basedir= -q configure.php' for APS application instance with id 204986 returned value '1' with output '<?xml version="1.1" encoding="utf-8"?>
<output xmlns="http://apstandard.com/ns/1/configure-output"><errors><error><message>Internal SiteBuilder error.</message><system>Zend_Http_Client_Exception: Unable to read response, or response is empty
file: /var/www/vhosts/19/174599/webspace/httpdocs//include/Zend/Http/Client.php
line: 849
code: 0
trace: #0 /var/www/vhosts/19/174599/webspace/httpdocs//include/SB/Aps/Configurator.php(77): Zend_Http_Client->request()
#1 /var/www/vhosts/19/174599/webspace/httpdocs//include/SB/Aps/Configurator.php(245): SB_Aps_Configurator->_requestToRestApi()
#2 /var/www/vhosts/19/174599/webspace/httpdocs//include/SB/Aps/Configurator.php(123): SB_Aps_Configurator->_setPublishSettings()
#3 /var/www/vhosts/19/174599/webspace/httpdocs//include/SB/Aps/Configurator/Abstract.php(126): SB_Aps_Configurator->_installCommand()
#4 /var/www/vhosts/19/174599/webspace/siteapps/ParallelsWebPresenceBuilder-204986/scripts/configure.php(90): SB_Aps_Configurator_Abstract->run()
#5 {main}
</system></error></errors></output>
' and errors ''.

Checking general webserver error log in /var/log/httpd/error_log, following is found:

[Tue Aug 19 15:53:18 2014] [error] [client <CLUSTER_IP>] ModSecurity: Access denied with connection close (phase 1). Match of "rx ^0$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/httpd/modsecurity.d/rules/10_asl_rules.
conf"] [line "93"] [id "392301"] [rev "6"] [msg "Atomicorp.com WAF Rules: Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [tag "no_ar"] [hostname "<HOSTNAME>"] [uri "<URI>"] [unique_id "<ID>"]

Cause

When WPB makes provisioning requests, it makes 2 calls - one is POST and one is PUT. For the POST call, the needed header is automatically appended, but for PUT request it is not. A request to change this behavior was created with id PPB-4328.

Resolution

Please tune mod_security to allow making PUT calls from NG Webcluster to itself without the header length.

Internal content