PHP / CGI problem?
Updated: 21 May 2010 | 7 comments
Over the summer, built up a new vanilla server with IIS. Got MR2 working and servicing external clients (within our organization). Due to lack of machine availability, this same server was assigned to host a forum using the vBulletin software. It uses PHP, Fast-CGI and MySQL. After some headaches, got the forum going. Unfortunately, it seems to have affected SEP. It won't register new clients nor can I access any of the reporting functions (including the home page dashboard). Both were working fine previously. I believe its due to the Fast-CGI, but was hoping others may have seen this problem and knew how to remedy it. Unfortunately, can't move the forum off this server, so the end goal is to get them both working. Any ideas?
Discussion Filed Under:
Comments
It is quite possible that a non-default php.ini file is being used to set environment variables for the SEPM Reporting website. Please check if you have multiple PHP versions are installed to the same web server.
Also, could you confirm if both these websites run on Default website or run Custom Website..
Piyush Jhunjhunwala
| Technical Support Analyst | Enterprise Support ( Endpoint Security) |
| Symantec Corporation | www.symantec.com |
Just the Default Website. Forum is a virtual directory off the root of Inetpub. Not exactly sure how to check for multiple PHP versions, but I do know there's 2 "instances" of it. One in the C:\PHP directory I set up to get the vBulletin software running, and in C:\Program Files\Symantec\Symantec Endpoint Protection Manager\Php
Ok, there were 2 php.ini files. I edited the one in C:\php to include the configuration settings that the Symantec one has. Still didn't seem to fix the problem, though.
I suspect that the problem lies with Fast-CGI.
Ok, fixed the reporting problems. Now I can get into the console and look at any report. However, still having troubles with new clients. I created a new package using 11.3001 and pushed it out to a new machine. It installs fine, but won't register nor will it receive Liveupdates. Ran SylinkMonitor, and here's the output:
12/16 14:33:05 [4140] <RegHeartbeatProc>====== Reg Heartbeat loop starts at 14:33:05 ======
12/16 14:33:05 [4140] HEARTBEAT: Check Point 1
12/16 14:33:05 [4140] HEARTBEAT: Check Point 2
12/16 14:33:05 [4140] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
12/16 14:33:05 [4140] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
12/16 14:33:05 [4140] HEARTBEAT: Check Point 3
12/16 14:33:05 [4140] <RegHeartbeatProc>Setting the session timeout on Profile Session (Registration) to 30000
12/16 14:33:05 [4140] HEARTBEAT: Check Point 4
12/16 14:33:05 [4140] <RegHeartbeatProc>===Registration STAGE===
12/16 14:33:05 [4140] <MakeRegisterData:>logon id (domain/user)=domain/user
read error, exit
12/16 14:33:05 [4140] <SendRegistrationRequest:>SMS return=404
12/16 14:33:05 [4140] <ParseHTTPStatusCode:>404=>404 Not Found
12/16 14:33:05 [4140] <SendRegistrationRequest:>Content Lenght => 1635
12/16 14:33:05 [4140] HTTP returns status code=404
12/16 14:33:05 [4140] <SendRegistrationRequest:>RECEIVE STAGE COMPLETED
12/16 14:33:05 [4140] <SendRegistrationRequest:>COMPLETED
12/16 14:33:05 [4140] HEARTBEAT: Check Point 5.1
12/16 14:33:05 [4140] <RegHeartbeatProc>switch to another server
12/16 14:33:05 [4140] HEARTBEAT: Check Point 9
12/16 14:33:05 [4140] HEARTBEAT: Check Point 8
12/16 14:33:05 [4140] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
12/16 14:33:05 [4140] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
Just curious how you resolved the php issue..Please let us know..
Do the clients have a green ball in system tray or on SEPM??
Try run http://localhost/secars/secars.dll?hello,secars on the SEPM server, if you have a client on SEPM server...this should come back as OK.
Please refer http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007101711103548 for communication troubleshooting.
Piyush Jhunjhunwala
| Technical Support Analyst | Enterprise Support ( Endpoint Security) |
| Symantec Corporation | www.symantec.com |
No green dot on the "shield" in the system tray. Switched the AppPool identity to Network Service, reset IIS. Still nothing. Tried to test the ODBC (as per the link you provided) but the Test Connection produces errors. Tried testing the ODBC connection on a different server that SEP works on, and that also produced the same error. Tried running http://localhost/secars/secars.dll?hello,secars and that returns an "OK".
I think the problem is here:
12/16 14:33:05 [4140] <MakeRegisterData:>logon id (domain/user)=domain/user
read error, exit
12/16 14:33:05 [4140] <SendRegistrationRequest:>SMS return=404
12/16 14:33:05 [4140] <ParseHTTPStatusCode:>404=>404 Not Found
12/16 14:33:05 [4140] <SendRegistrationRequest:>Content Lenght => 1635
12/16 14:33:05 [4140] HTTP returns status code=404
Can anyone shed a light on what's happening (or supposed to happen)?
Would you like to reply?
Login or Register to post your comment.