Product updates fail and the Apache Service becomes unresponsive
Last Modified: 2023-08-08 06:02:34 Etc/GMT
Affected Products
Languages:
This article is available in the following languages:
Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.
As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."
Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.
Trellix Advanced Research Center analyzes threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.
As of May 14, 2024, Knowledge Base (KB) articles will only be published and updated in our new Trellix Thrive Knowledge space.
Log in to the Thrive Portal using your OKTA credentials and start searching the new space. Legacy KB IDs are indexed and you will be able to find them easily just by typing the legacy KB ID.
Product updates fail and the Apache Service becomes unresponsive
Technical Articles ID:
KB93489
Last Modified: 2023-08-08 06:02:34 Etc/GMT Environment
ePolicy Orchestrator (ePO) 5.10.x, 5.9.x
Problem
The ePolicy Orchestrator Server (Apache) service becomes unresponsive. Systems are communicating with ePO, but while performing product updates, the following errors are observed: The Framework Service 10/1/2020 11:18:27 PM Info Unable to find a valid repository. The E #03240 MOD_EPOREPO mod_eporepo.cpp(301): Server had an error during initialization, cannot serve request. URI=/Software/SiteStat.xml?hash={ed4ab672-e5c7-11ea-0b87-9fe05c00f8e2} I #00328 MOD_EPOREPO Received request, uri=/Software/SiteStat.xml, remoteIP=10.1.1.6 E #00328 MOD_EPOREPO mod_eporepo.cpp(301): Server had an error during initialization, cannot serve request. URI=/Software/SiteStat.xml?hash={ed3d1882-e5c7-11ea-35c3-2fe1fd0088e3} I #00328 MOD_EPOREPO Received request, uri=/Software/SiteStat.xml, remoteIP=10.1.1.7 E #00328 MOD_EPOREPO mod_eporepo.cpp(301): Server had an error during initialization, cannot serve request. URI=/Software/SiteStat.xml?hash={ed3d1882-e5c7-11ea-35c3-2fe1fd0088e3}v I #04764 MOD_EPOREPO Received request, uri=/Software/SiteStat.xml, remoteIP=10.1.1.8 E #04764 MOD_EPOREPO mod_eporepo.cpp(301): Server had an error during initialization, cannot serve request. URI=/Software/SiteStat.xml?hash={ed5de936-e5c7-11ea-3b82-e7deb50040e1} I #00328 MOD_EPOREPO Received request, uri=/Software/SiteStat.xml, remoteIP=10.1.1.8 The Windows Application Event log records the following details:
The [mpm_winnt:notice] [pid 3740:tid 440] AH00364: Child: All worker threads have exited. [core:warn] [pid 3704:tid 452] AH00098: pid file D:/McAfee/ePolicy Orchestrator/Apache2/Logs/httpd.pid overwritten -- Unclean shutdown of previous Apache run? [ssl:warn] [pid 3704:tid 452] AH01873: Init: Session Cache is not configured [hint: SSLSessionCache] [mpm_winnt:notice] [pid 3704:tid 452] AH00455: Apache/2.4.28 (Win32) OpenSSL/1.0.2l configured -- resuming normal operations [mpm_winnt:notice] [pid 3704:tid 452] AH00456: Server built: Oct 6 2017 12:14:17 [core:notice] [pid 3704:tid 452] AH00094: Command line: 'D:\\McAfee\\ePolicy Orchestrator\\Apache2\\bin\\Apache.exe -d D:/McAfee/ePolicy Orchestrator/Apache2 -d D:\\McAfee\\ePolicy Orchestrator\\Apache2 -f D:\\McAfee\\ePolicy Orchestrator\\Apache2\\conf\\httpd.conf' [mpm_winnt:notice] [pid 3704:tid 452] AH00418: Parent: Created child process 3720 [ssl:warn] [pid 3720:tid 332] AH01873: Init: Session Cache is not configured [hint: SSLSessionCache] [mpm_winnt:notice] [pid 3720:tid 332] AH00354: Child: Starting 250 worker threads. [mpm_winnt:notice] [pid 3704:tid 452] AH00422: Parent: Received shutdown signal -- Shutting down the server. [core:warn] [pid 4012:tid 488] AH00098: pid file D:/McAfee/ePolicy Orchestrator/Apache2/Logs/httpd.pid overwritten -- Unclean shutdown of previous Apache run? [ssl:warn] [pid 4012:tid 488] AH01873: Init: Session Cache is not configured [hint: SSLSessionCache] [mpm_winnt:notice] [pid 4012:tid 488] AH00455: Apache/2.4.28 (Win32) OpenSSL/1.0.2l configured -- resuming normal operations [mpm_winnt:notice] [pid 4012:tid 488] AH00456: Server built: Oct 6 2017 12:14:17 [core:notice] [pid 4012:tid 488] AH00094: Command line: 'D:\\McAfee\\ePolicy Orchestrator\\Apache2\\bin\\Apache.exe -d D:/McAfee/ePolicy Orchestrator/Apache2 -d D:\\McAfee\\ePolicy Orchestrator\\Apache2 -f D:\\McAfee\\ePolicy Orchestrator\\Apache2\\conf\\httpd.conf' [mpm_winnt:notice] [pid 4012:tid 488] AH00418: Parent: Created child process 4092 [ssl:warn] [pid 4092:tid 344] AH01873: Init: Session Cache is not configured [hint: SSLSessionCache] [mpm_winnt:notice] [pid 4092:tid 344] AH00354: Child: Starting 250 worker threads. [authz_core:error] [pid 4092:tid 3136] [client 10.1.1.5:61064] AH01630: client denied by server configuration: D:/McAfee/ePolicy Orchestrator/DB/www/evidence$ [authz_core:error] [pid 4092:tid 3136] [client 10.1.1.6:61064] AH01630: client denied by server configuration: D:/McAfee/ePolicy Orchestrator/DB/www/evidence$ [authz_core:error] [pid 4092:tid 3136] [client 10.1.1.7:61064] AH01630: client denied by server configuration: D:/McAfee/ePolicy Orchestrator/DB/www/evidence$ [authz_core:error] [pid 4092:tid 3136] [client 10.1.1.7:61064] AH01630: client denied by server configuration: D:/McAfee/ePolicy Orchestrator/DB/www/evidence$ [mpm_winnt:error] [pid 4092:tid 6012] AH00326: Server ran out of threads to serve requests. Consider raising the ThreadsPerChild setting [authz_core:error] [pid 4092:tid 2916] [client 10.1.1.8:59644] AH01630: client denied by server configuration: D:/McAfee/ePolicy Orchestrator/DB/www/evidence$ Cause
The issue occurs when the domain user is configured with an incorrect password. The incorrect password can be in either of the following Data Loss Prevention (DLP) policy settings:
SolutionConfigure the domain user account with the correct password details. The change must be made in the DLP Settings, and under every DLP Windows Client Configuration policy.
Perform the following configuration:
Workaround
To resolve the Apache service issue temporarily:
Related InformationAffected ProductsLanguages:This article is available in the following languages: |
|