Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[EOL/EOE] guiSvrWebProxy.pid exists, but guiSvrWebProxy is off

0

0

Article ID: KB11746 KB Last Updated: 18 Mar 2021Version: 3.0
Summary:
Note: A product listed in this article has either reached hardware End of Life (EOL) OR software End of Engineering (EOE). 
Refer to End of Life Products & Milestones for the EOL, EOE, and End of Support (EOS) dates.

When trying to restart the guiSvrWebProxy, the status is showing as: guiSvrWebProxy.pid exists, but guiSvrWebProxy is off.  What is causing the issue and how can it be corrected?
Symptoms:
Customer tries to restart the guiSvrWebProxy but still displays the following:
 
[root@NSMXpress ~]# /etc/init.d/guiSvr status
nsm owner is nsm
Retrieving status...
guiSvrManager (pid 17430)..........................ON
guiSvrMasterController (pid 17604).................ON
guiSvrDirectiveHandler (pid 17758).................ON
guiSvrLicenseManager (pid 17935)...................ON
guiSvrStatusMonitor (pid 18073)....................ON
guiSvrWebProxy.pid exists, but guiSvrWebProxy is off

In the webproxy log, the following information is displayed:
###################################################################################
[04/23/2008 00:05:30.201] [ERROR] [main org.apache.coyote.http11.Http11BaseProtocol] - Error initializing endpoint
java.net.BindException: Permission denied:443
at org.apache.tomcat.util.net.PoolTcpEndpoint.initEndpoint(PoolTcpEndpoint.java:297)
at org.apache.coyote.http11.Http11BaseProtocol.init(Http11BaseProtocol.java:138)
at org.apache.catalina.connector.Connector.initialize(Connector.java:1016)
at org.apache.catalina.core.StandardService.initialize(StandardService.java:580)
at org.apache.catalina.core.StandardServer.initialize(StandardServer.java:791)
at org.apache.catalina.startup.Catalina.load(Catalina.java:503)
at org.apache.catalina.startup.Catalina.start(Catalina.java:543)
at net.juniper.webproxy.WebProxy.startServer(WebProxy.java:73)
at net.juniper.webproxy.WebProxy.main(WebProxy.java:55)
[04/23/2008 00:05:30.203] [ERROR] [main org.apache.catalina.startup.Catalina] - Catalina.start
LifecycleException: Protocol handler initialization failed: java.net.BindException: Permission denied:443
at org.apache.catalina.connector.Connector.initialize(Connector.java:1018)
at org.apache.catalina.core.StandardService.initialize(StandardService.java:580)
at org.apache.catalina.core.StandardServer.initialize(StandardServer.java:791)
at org.apache.catalina.startup.Catalina.load(Catalina.java:503)
at org.apache.catalina.startup.Catalina.start(Catalina.java:543)
at net.juniper.webproxy.WebProxy.startServer(WebProxy.java:73)
at net.juniper.webproxy.WebProxy.main(WebProxy.java:55)
#####################################################################################
Solution:
This information indicates the  Tomcat (web server) is not able to listen to port 443 as some other process is already listening on that port.
Check the install log and find following,
#####################################################################
20080423000005: START askquestion()...
20080423000005: QUESTION: Enter the https port for web server [8443]>|integer|1-65535|8443
20080423000005: QUESTIONTEXT: Enter the https port for web server [8443]>
20080423000005: QUESTIONTYPE: integer
20080423000005: QUESTIONCHOICES: 1-65535
20080423000005: QUESTIONDEFAULTANS: 8443
20080423000005: QUESTIONFREESPACE:
20080423000011: START integercheck()...
20080423000011: NUMBER: 443 <----------------------
20080423000011: MIN: 1
20080423000011: MAX: 65535
20080423000011: Param is valid integer and falls within range
20080423000011: END integercheck()...
20080423000011: ANSWER: 443 <----------------------
20080423000011: END askquestion()...
#####################################################################

 
The log indicates Port 443 is to be used by the guiSvrWebProxy.

To resolve the issue, upgrade again and use the default port of 8443 instead of 443.
  1. Edit file /usr/netscreen/GuiSvr/lib/webproxy/conf/server.xml as root.
    Important: Please back up the file first!!!
  2. Then, modify two lines as shown below; changing 443 to 8443:  
    ......
    <Connector port="8443" maxHttpHeaderSize="8192"
    ......
    enableLookups="false" redirectPort="8443" protocol="AJP/1.3" address="127.0.0.1" />
    ......
  3. Restart guiSvrWebProxy: /usr/netscreen/GuiSvr/bin/guiSvrWebProxy.sh restart

Problem is resolved.
Modification History:
2021-03-09: KB has been reviewed for Accuracy, no changes made.
Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search