Large File Uploads Fail with Web Agent on Apache

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On

Issue/Introduction

Single Sign On Web Agent is protecting resources on an Apache reverse proxy.  Small file uploads to the back end application are working as expected, but users get a 502 error for large file uploads (>40MB).  The Web Agent logs show no errors.

Environment

Apache 2.4 servers acting as reverse proxy

Cause

The default proxy timeout in Apache was insufficient.

Resolution

Increase the timeout value in the proxypass directive in Apache's ssl.conf file (the 'timeout' parameter may need to be added if it is not already present). Sample proxypass line with 10 minute timeout:

ProxyPass / ajp://localhost:8009/ timeout=600

Additional Information

As this solution is entirely outside of the CA software, please consult your Apache vendor for additional documentation around the proxypass settings.