[Bug 908605] [NEW] mod_wsgi fails to log python errors

[Phil Stone]

Public bug reported:

mod_wsgi based python apps that generate python errors, like divide by
zero, should send a 500 error to the browser and log the python errors
in the applications' log.

In Ubuntu 11.10 a regression was introduce where the Apache VirtualHost
must be specified as *:80 for this expected behavior to still work.
Anything else sends the 500 error to the browser, but leaves nothing in
the apache log file.

Here are the 2 files needed to reproduce the problem...  
To reproduce you also need an entry in /etc/hosts for www.hello.loc to be 127.0.0.1,
and an otherwise working apache server.

---  The standard mod_wsgi Hello World App, modifed to force a divide by
zero error... ---

#!/usr/bin/python

def application(environ, start_response):

    a = 5/0   # This line added to induce a deliberate error.  Hide this
line to always see Hello World! in browser.

    status = '200 OK'
    output = 'Hello World!'

    response_headers = [('Content-type', 'text/plain'),
                        ('Content-Length', str(len(output)))]
    start_response(status, response_headers)

    return [output]

--- The Apache Configuration file for this same application ---

WSGIRestrictEmbedded On

<VirtualHost 127.0.0.1:80>

    ServerName www.hello.loc

    WSGIProcessGroup    hello.loc
    WSGIDaemonProcess   hello.loc processes=1 threads=10 display-name=%{GROUP}
    WSGIScriptAlias  /  /www/hello/website.py process-group=hello.loc application-group=${GLOBAL}

    LogLevel    warn
    ErrorLog    /www/hello/logs/error.log
    CustomLog   /www/hello/logs/access.log combined

</VirtualHost>

--- NOTES ---

The 2 files given above are SUPPOSED to generate an internal error to the browser (a 500 error)
AND log into the error log the python traceback showing the line and file where the divide by zero
error happened.  

It does not work because of the 127.0.0.1 in the VirtualHost...

Also broke are Named Virtual Hosts of any form, as in...

<VirtualHost local>

The work around is to use "*" instead, as in...

<VirtualHost *:80>

I found this bug on an upgrade of Ubuntu Server to 11.10.

Note that the form that works, <VirtualHost *:80> serves the site on all IP addresses on a
server.  This is the "toy" form of this command.  Real servers are often multi-homed.  
The parameter on the Virtual host when not *:80 is supposed to indicate the IP or named server that
is being used.

NOTE...  ONLY ERROR LOGGING is impacted by this bug, NOT normal display.

A website impacted by this bug, especially after a system upgrade to 11.10, will serve 
"Internal Server Errors" to client browsers and NOT log the error to the error logs 
for discovery later by an administrator.

(As I found out to my trouble on a much, much bigger system than this
example.)

Technically the work-around given above is a potential security issue depending on the networking 
involved, so be careful if you're reading this and hacking your server to get it working again.

** Affects: mod-wsgi (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to mod-wsgi in Ubuntu.
https://bugs.launchpad.net/bugs/908605

Title:
  mod_wsgi fails to log python errors

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/mod-wsgi/+bug/908605/+subscriptions