IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only

  • 1.  Apache httpd server fails to start after ssl certificate update

    Posted 09/26/22 08:27 AM

    Hello friends,

    I wanted to ask you what should I do after receiving errors on the httpd service and could not restart after I made a ssl certificate update..

    I used this tutorial: How to replace the SSL certificates in QRadar

    After updating the old certificates the qradar required services to be restarted.. The apache httpd service could not be restarted and now it can not be started also.. It says that i do not have enough memory on the device and could not create some files.. These are the errors that i get from the apache logs

    [Mon Sep 26 13:51:16.662084 2022] [mpm_prefork:notice] [pid 13104] AH00170: caught SIGWINCH, shutting down gracefully
    [Mon Sep 26 13:54:18.752324 2022] [core:emerg] [pid 4715] (28)No space left on device: AH00023: Couldn't create the rewrite-map mutex (file /etc/httpd/logs/rewrite-map.4715)
    AH00016: Configuration Failed
    [Mon Sep 26 13:55:09.959971 2022] [core:emerg] [pid 9087] (28)No space left on device: AH00023: Couldn't create the rewrite-map mutex (file /etc/httpd/logs/rewrite-map.9087)
    AH00016: Configuration Failed
    [Mon Sep 26 14:07:33.384426 2022] [core:emerg] [pid 15943] (28)No space left on device: AH00023: Couldn't create the rewrite-map mutex (file /etc/httpd/logs/rewrite-map.15943)
    AH00016: Configuration Failed
    [Mon Sep 26 14:08:24.658896 2022] [core:emerg] [pid 19174] (28)No space left on device: AH00023: Couldn't create the rewrite-map mutex (file /etc/httpd/logs/rewrite-map.19174)
    AH00016: Configuration Failed

    I read something that there is a problem with the automated cleaning and semaphores left by Apache..

    Can you please give a solution because i need my qradar running in a mean time.. 

    Thank you



    ------------------------------
    Slavcho Andreevski
    ------------------------------


  • 2.  RE: Apache httpd server fails to start after ssl certificate update

    Posted 09/27/22 02:17 PM

    If you have not done so, this needs to be logged as a case so we can confirm the issue and your version. This is a known Red Hat problem per: https://access.redhat.com/solutions/55914.

    However, we are going to want to confirm that services are running as expected.



    ------------------------------
    Jonathan Pechta
    QRadar Support Content Lead
    Support forums: ibm.biz/qradarforums
    jonathan.pechta1@ibm.com
    ------------------------------



  • 3.  RE: Apache httpd server fails to start after ssl certificate update

    Posted 09/27/22 02:33 PM
    Edited by Slavcho Andreevski 09/27/22 02:39 PM
    Ok, how do we do that - i mean to log this as a case? I checked the solution but it says that i have to have a subscription there.. Can you please help me. Thank you

    ------------------------------
    Slavcho Andreevski
    ------------------------------

    Original Message


  • 4.  RE: Apache httpd server fails to start after ssl certificate update

    Posted 09/29/22 05:00 AM
    Dear Jonathan, i have not heard from you for about 2-3 days.. Can you please help me to resolve that problem i have mentioned above.. So far i tried to register on the redhat linux forum and tried to register my product with the cli command "subscription-manager register" but now i have:

    Overall Status: Invalid

    Red Hat Enterprise Linux Server:
    - Not supported by a valid subscription.

    So i am not able to see the solution you provided me.. Can you please help me in order to solve my problem above.. Thank you again

    ------------------------------
    Slavcho Andreevski
    ------------------------------

    Original Message


Related Content