Re: Tomcat ssl connection to Oracle

2018-06-05 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Will,

On 6/5/18 11:14 AM, Will Nordmeyer wrote:
> Chris - that's why I'm here. :)  Why are my parameters that are
> set specifically for the connection being ignored.  The non-SSL
> version of this connection has worked in my web.xml for years.  It
> doesn't show up as a data source when I run Probe or other
> management interfaces, but it works for the application.

Whatever configures your DataSource must take those 
values and use them in a meaningful way.

What code reads those  values and configures your
DataSource? Go read that code and see whether it cares about the trust
store and other parameters you are trying to send it.

- -chris
-BEGIN PGP SIGNATURE-
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=MlNL
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: tomcat8/java8 "broken pipe" error

2018-06-05 Thread Suvendu Sekhar Mondal
On Tue, Jun 5, 2018, 8:34 PM Christopher Schultz <
ch...@christopherschultz.net> wrote:

> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
>
> Holly,
>
> On 6/5/18 7:23 AM, Lund, Holly (CONTR) wrote:
> >
> > Continuously receiving the below error after upgrade to Tomcat
> > 8.0.43 /java 1.8.0_162/Apache 2.4.25 from tomcat6/java6/apache2.2
> > on solaris 10 OS
> >
> > This only happens under load
> >
> >
> > 29-May-2018 11:30:22.677 WARNING [commons-pool-EvictionTimer]
> > org.apache.tomcat.dbcp.dbcp2.SwallowedExceptionLogger.onSwallowE
> > xception An internal object pool swallowed an Exception.
> > java.sql.SQLRecoverableException: IO Error: Broken pipe (Write
> > failed) at
> > oracle.jdbc.driver.T4CConnection.logon(T4CConnection.java:682) at
> > oracle.jdbc.driver.PhysicalConnection.(PhysicalConnection.java:7
> 11)
> >
> >
> at oracle.jdbc.driver.T4CConnection.(T4CConnection.java:385)
> > at
> > oracle.jdbc.driver.T4CDriverExtension.getConnection(T4CDriverExtension
> .java:30)
> >
> >
> at oracle.jdbc.driver.OracleDriver.connect(OracleDriver.java:558)
> > at
> > org.apache.tomcat.dbcp.dbcp2.DriverConnectionFactory.createConnection(
> DriverConnectionFactory.java:38)
> >
> >
> at
> org.apache.tomcat.dbcp.dbcp2.PoolableConnectionFactory.makeObject(Poolab
> leConnectionFactory.java:255)
> > at
> > org.apache.tomcat.dbcp.pool2.impl.GenericObjectPool.create(GenericObje
> ctPool.java:888)
> >
> >
> at
> org.apache.tomcat.dbcp.pool2.impl.GenericObjectPool.ensureIdle(GenericOb
> jectPool.java:952)
> > at
> > org.apache.tomcat.dbcp.pool2.impl.GenericObjectPool.ensureMinIdle(Gene
> ricObjectPool.java:931)
> >
> >
> at
> org.apache.tomcat.dbcp.pool2.impl.BaseGenericObjectPool$Evictor.run(Base
> GenericObjectPool.java:1047)
> > at java.util.TimerThread.mainLoop(Timer.java:555) at
> > java.util.TimerThread.run(Timer.java:505) Caused by:
> > java.net.SocketException: Broken pipe (Write failed) at
> > java.net.SocketOutputStream.socketWrite0(Native Method) at
> > java.net.SocketOutputStream.socketWrite(SocketOutputStream.java:111)
> >
> >
> at java.net.SocketOutputStream.write(SocketOutputStream.java:155)
> > at oracle.net.ns.DataPacket.send(DataPacket.java:209) at
> > oracle.net.ns.NetOutputStream.write(NetOutputStream.java:180) at
> > oracle.net.ns.NetOutputStream.write(NetOutputStream.java:136) at
> > oracle.net.ano.AnoComm.a(Unknown Source) at
> > oracle.net.ano.Ano.negotiation(Unknown Source) at
> > oracle.net.ns.NSProtocol.connect(NSProtocol.java:292) at
> > oracle.jdbc.driver.T4CConnection.connect(T4CConnection.java:1360)
> > at oracle.jdbc.driver.T4CConnection.logon(T4CConnection.java:486)
> > ... 12 more
> >
> >
> > It appears that tomcat is disconnecting from the database after 60
> > seconds  (from Oracle logs)
> >
> > Context.xml
> >
> >
> >  > type="javax.sql.DataSource"
> > driverClassName="oracle.jdbc.OracleDriver"
> > url="jdbc:oracle:thin:@//averna.doe.gov:11900/ataaps.averna.doe.gov"
> >
> >
> username="xxx" password="xx" maxTotal="-1"   maxIdle="100"
> minIdle="5"
> > maxWaitMillis="30" removeAbandonedOnMaintenance="true"
> > removeAbandonedTimeout="300" logAbandoned="false"
> > testOnBorrow="true" testOnReturn="false"
> > timeBetweenEvictionRunsMillis="30"
> > minEvictableIdleTimeMillis="12" defaultAutoCommit="true"
> > initialSize="5" testWhileIdle="false" numTestsPerEvictionRun="5"
> > validationQuery="SELECT 1 FROM dual"/>
>
> I would check the settings on any firewall you have between the
> application and the database. Perhaps there is a 60-second
> connection-time-limit being imposed there?
>
> Also perhaps check to see if the database has a connection-limit for
> the user you are using. maxTotal="-1" seems ... like a bad idea.
>
> - -chris
> -BEGIN PGP SIGNATURE-
> Comment: GPGTools - http://gpgtools.org
> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
>
> iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAlsWplwACgkQHPApP6U8
> pFjrhA/9FnQlYQ6yIyZhI+VJtnr+tO9JZJCX+kibFM9v9kLMKMhCDvoFvnuiJmDc
> nDlC2Al3uGqF8Py51CN8mkboZjqNORsr8yQzGpliLZTAyKkGLNq56tbejEwghLNF
> 6+g8HZDasz8V+8Yk0QL9QipNTW0+OinZORX38Bipvl6s7PtgYsSa1YlbEKpoO3gp
> ePpE+Iy8CePy3/uyx7UhL642ANE5fjh5pjP0q9DKbYC6dwH/vrYeRWoEqMnlm5oe
> MN3HvU6S2eIDil4XJ0nHPvGeIvfIS1fABu4JllOsWCobuzTVTFXlXXkHM5zfTf69
> Q3hnlO5HGR0jQPtJzpg9eSQZMFEh77xIyZ7lugyHweWGgyMBDar1fdo/wCuTCTdr
> X2Ec+NpY5MzZCfAWyJk/QVKN+a8ST8YQ+5FLfGcBqUVpxR6Od6Z05ZtHtw1iPcHE
> YRKMJLoV+Zf9dAruiS5HYuqC0fqi+k+mqtRKXmpFzLTyzAf29V+eXPL61DjSR7nh
> SvzLNPgSQssW0SYkTPItZBMC2Yq6hRnHLEXMBrAiQfNqeGOXEcUVOj/HwNc9qtRe
> DpcQSJ9qv3P2kbsDmQptz/7nn44OEQ1OtybG7OUIlsYdshnReL0WT9hhN2S+yiLO
> 1IkKJxSfyWaHa/W60c4lQ0kkFydfIFuzzpcpIJ1p18bMkSo6ffc=
> =OWPV
> -END PGP SIGNATURE-
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org


Holly,

That error generally indicates a connection failure. App was 

Re: Tomcat ssl connection to Oracle

2018-06-05 Thread Will Nordmeyer
On Tue, Jun 5, 2018 at 11:07 AM, Christopher Schultz
 wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
>
> Will,
>
> On 6/5/18 10:37 AM, Will Nordmeyer wrote:
>> I'm trying to configure an SSL Oracle connection.  I'm running on
>> CentOS7 (for my DB Server and my Web Server).
>>
>> Tomcat 7.0.76-6 from the CentOS Repository, httpd 2.4.6-80  from
>> the CentOS Repository on the Web Server Oracle 12.2.0.1 on the
>> Database Server
>>
>> I'm setting up the datasource in my web.xml - the 1521 port
>> connection works fine.  I change to 2484 and made the other
>> following parameters (javax.net.ssl.trustStore parameters):
>
> Tomcat doesn't configure JNDI DataSources in web.xml. What component
> are you configuring, here?
>
My Data Source.  It has worked for years as a 1521 based connection
configured in the web.xml.  I have the entire data source
configuration below.  Configured as 1521 without the additional
parameters of trustStore, trustStoreType & trustStorePassword.

>>  type
>> SIMPLE  
>> datasource
>> mydatasource 
>>  driver
>> oracle.jdbc.OracleDriver
>>   url 
>> jdbc:oracle:thin:@(DESCRIPTION=
>> (ADDRESS=(PROTOCOL=TCPS)(PORT=2484)(HOST=myserver.mydomain.com))(CONNE
> CT_DATA=(SERVICE_NAME=mydatasource.myserver.mydomain.com)))>
>>
>>
> 
>>  javax.net.ssl.trustStore
>> /usr/share/tomcat/conf/TrustStore.JKS
>>  
>> javax.net.ssl.trustStoreType
>> JKS  
>> javax.net.ssl.trustStorePassword
>> mypassword 
>
> This looks like you are trying to configure system properties from
> within web.xml.
>
>>  username
>> myuser  
>> mydbpass
>> apso11 
>>
>>
>> It fails with the following error:
>>
>> May 22 12:12:00 myserver server: Caused by:
>> sun.security.validator.ValidatorException: PKIX path building
>> failed: sun.security.provider.certpath.SunCertPathBuilderException:
>> unable to find valid certification path to requested target
>
> Your truststore is probably being ignored.
>
But why?

>> the TrustStore.JKS is in that directory.
>>
>> If I move the jafax.net.ssl.trustStore parameters to the JAVA_OPTS
>> line, in the startup, then it works.
>>
>>
>> JAVA_OPTS="-Xms1024m -Xmx2048m
>> -Djavax.net.ssl.trustStore=/usr/share/tomcat/conf/TrustStore.JKS
>> -Djjavax.net.ssl.trustStoreType=JKS
>> -Djavax.net.ssl.trustStorePassword=mypassword"
>
> Yes, that's because these are system properties and not
> servlet-context init-params which don't affect system properties.
>
> I'd recommend against setting a JVM-wide trust store. It's cleaner and
> safer if you configure each (type of) connection separately.
>
> - -chris

Chris - that's why I'm here. :)  Why are my parameters that are set
specifically for the connection being ignored.  The non-SSL version of
this connection has worked in my web.xml for years.  It doesn't show
up as a data source when I run Probe or other management interfaces,
but it works for the application.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat ssl connection to Oracle

2018-06-05 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Will,

On 6/5/18 10:37 AM, Will Nordmeyer wrote:
> I'm trying to configure an SSL Oracle connection.  I'm running on 
> CentOS7 (for my DB Server and my Web Server).
> 
> Tomcat 7.0.76-6 from the CentOS Repository, httpd 2.4.6-80  from
> the CentOS Repository on the Web Server Oracle 12.2.0.1 on the
> Database Server
> 
> I'm setting up the datasource in my web.xml - the 1521 port
> connection works fine.  I change to 2484 and made the other
> following parameters (javax.net.ssl.trustStore parameters):

Tomcat doesn't configure JNDI DataSources in web.xml. What component
are you configuring, here?

>  type 
> SIMPLE   
> datasource 
> mydatasource  
>  driver 
> oracle.jdbc.OracleDriver 
>   url 
> jdbc:oracle:thin:@(DESCRIPTION= 
> (ADDRESS=(PROTOCOL=TCPS)(PORT=2484)(HOST=myserver.mydomain.com))(CONNE
CT_DATA=(SERVICE_NAME=mydatasource.myserver.mydomain.com)))
>
> 

>  javax.net.ssl.trustStore 
> /usr/share/tomcat/conf/TrustStore.JKS 
>   
> javax.net.ssl.trustStoreType 
> JKS   
> javax.net.ssl.trustStorePassword 
> mypassword 

This looks like you are trying to configure system properties from
within web.xml.

>  username 
> myuser   
> mydbpass 
> apso11 
> 
> 
> It fails with the following error:
> 
> May 22 12:12:00 myserver server: Caused by: 
> sun.security.validator.ValidatorException: PKIX path building
> failed: sun.security.provider.certpath.SunCertPathBuilderException:
> unable to find valid certification path to requested target

Your truststore is probably being ignored.

> the TrustStore.JKS is in that directory.
> 
> If I move the jafax.net.ssl.trustStore parameters to the JAVA_OPTS 
> line, in the startup, then it works.
> 
> 
> JAVA_OPTS="-Xms1024m -Xmx2048m 
> -Djavax.net.ssl.trustStore=/usr/share/tomcat/conf/TrustStore.JKS 
> -Djjavax.net.ssl.trustStoreType=JKS 
> -Djavax.net.ssl.trustStorePassword=mypassword"

Yes, that's because these are system properties and not
servlet-context init-params which don't affect system properties.

I'd recommend against setting a JVM-wide trust store. It's cleaner and
safer if you configure each (type of) connection separately.

- -chris
-BEGIN PGP SIGNATURE-
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=k0H5
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: tomcat8/java8 "broken pipe" error

2018-06-05 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Holly,

On 6/5/18 7:23 AM, Lund, Holly (CONTR) wrote:
> 
> Continuously receiving the below error after upgrade to Tomcat
> 8.0.43 /java 1.8.0_162/Apache 2.4.25 from tomcat6/java6/apache2.2
> on solaris 10 OS
> 
> This only happens under load
> 
> 
> 29-May-2018 11:30:22.677 WARNING [commons-pool-EvictionTimer]
> org.apache.tomcat.dbcp.dbcp2.SwallowedExceptionLogger.onSwallowE 
> xception An internal object pool swallowed an Exception. 
> java.sql.SQLRecoverableException: IO Error: Broken pipe (Write
> failed) at
> oracle.jdbc.driver.T4CConnection.logon(T4CConnection.java:682) at
> oracle.jdbc.driver.PhysicalConnection.(PhysicalConnection.java:7
11)
>
> 
at oracle.jdbc.driver.T4CConnection.(T4CConnection.java:385)
> at
> oracle.jdbc.driver.T4CDriverExtension.getConnection(T4CDriverExtension
.java:30)
>
> 
at oracle.jdbc.driver.OracleDriver.connect(OracleDriver.java:558)
> at
> org.apache.tomcat.dbcp.dbcp2.DriverConnectionFactory.createConnection(
DriverConnectionFactory.java:38)
>
> 
at
org.apache.tomcat.dbcp.dbcp2.PoolableConnectionFactory.makeObject(Poolab
leConnectionFactory.java:255)
> at
> org.apache.tomcat.dbcp.pool2.impl.GenericObjectPool.create(GenericObje
ctPool.java:888)
>
> 
at
org.apache.tomcat.dbcp.pool2.impl.GenericObjectPool.ensureIdle(GenericOb
jectPool.java:952)
> at
> org.apache.tomcat.dbcp.pool2.impl.GenericObjectPool.ensureMinIdle(Gene
ricObjectPool.java:931)
>
> 
at
org.apache.tomcat.dbcp.pool2.impl.BaseGenericObjectPool$Evictor.run(Base
GenericObjectPool.java:1047)
> at java.util.TimerThread.mainLoop(Timer.java:555) at
> java.util.TimerThread.run(Timer.java:505) Caused by:
> java.net.SocketException: Broken pipe (Write failed) at
> java.net.SocketOutputStream.socketWrite0(Native Method) at
> java.net.SocketOutputStream.socketWrite(SocketOutputStream.java:111)
>
> 
at java.net.SocketOutputStream.write(SocketOutputStream.java:155)
> at oracle.net.ns.DataPacket.send(DataPacket.java:209) at
> oracle.net.ns.NetOutputStream.write(NetOutputStream.java:180) at
> oracle.net.ns.NetOutputStream.write(NetOutputStream.java:136) at
> oracle.net.ano.AnoComm.a(Unknown Source) at
> oracle.net.ano.Ano.negotiation(Unknown Source) at
> oracle.net.ns.NSProtocol.connect(NSProtocol.java:292) at
> oracle.jdbc.driver.T4CConnection.connect(T4CConnection.java:1360) 
> at oracle.jdbc.driver.T4CConnection.logon(T4CConnection.java:486) 
> ... 12 more
> 
> 
> It appears that tomcat is disconnecting from the database after 60
> seconds  (from Oracle logs)
> 
> Context.xml
> 
> 
>  type="javax.sql.DataSource"
> driverClassName="oracle.jdbc.OracleDriver" 
> url="jdbc:oracle:thin:@//averna.doe.gov:11900/ataaps.averna.doe.gov"
>
> 
username="xxx" password="xx" maxTotal="-1"   maxIdle="100"
minIdle="5"
> maxWaitMillis="30" removeAbandonedOnMaintenance="true"
> removeAbandonedTimeout="300" logAbandoned="false"
> testOnBorrow="true" testOnReturn="false" 
> timeBetweenEvictionRunsMillis="30"
> minEvictableIdleTimeMillis="12" defaultAutoCommit="true"
> initialSize="5" testWhileIdle="false" numTestsPerEvictionRun="5" 
> validationQuery="SELECT 1 FROM dual"/>

I would check the settings on any firewall you have between the
application and the database. Perhaps there is a 60-second
connection-time-limit being imposed there?

Also perhaps check to see if the database has a connection-limit for
the user you are using. maxTotal="-1" seems ... like a bad idea.

- -chris
-BEGIN PGP SIGNATURE-
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=OWPV
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Tomcat ssl connection to Oracle

2018-06-05 Thread Will Nordmeyer
I'm trying to configure an SSL Oracle connection.  I'm running on
CentOS7 (for my DB Server and my Web Server).

Tomcat 7.0.76-6 from the CentOS Repository, httpd 2.4.6-80  from the
CentOS Repository on the Web Server
Oracle 12.2.0.1 on the Database Server

I'm setting up the datasource in my web.xml - the 1521 port connection
works fine.  I change to 2484 and made the other following parameters
(javax.net.ssl.trustStore parameters):


type
SIMPLE


datasource
mydatasource


driver
oracle.jdbc.OracleDriver


url

jdbc:oracle:thin:@(DESCRIPTION=
(ADDRESS=(PROTOCOL=TCPS)(PORT=2484)(HOST=myserver.mydomain.com))(CONNECT_DATA=(SERVICE_NAME=mydatasource.myserver.mydomain.com)))


javax.net.ssl.trustStore
/usr/share/tomcat/conf/TrustStore.JKS


javax.net.ssl.trustStoreType
JKS


javax.net.ssl.trustStorePassword
mypassword


username
myuser


mydbpass
apso11



It fails with the following error:

May 22 12:12:00 myserver server: Caused by:
sun.security.validator.ValidatorException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to
find valid certification path to requested target


the TrustStore.JKS is in that directory.

If I move the jafax.net.ssl.trustStore parameters to the JAVA_OPTS
line, in the startup, then it works.


JAVA_OPTS="-Xms1024m -Xmx2048m
-Djavax.net.ssl.trustStore=/usr/share/tomcat/conf/TrustStore.JKS
-Djjavax.net.ssl.trustStoreType=JKS
-Djavax.net.ssl.trustStorePassword=mypassword"

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



tomcat8/java8 "broken pipe" error

2018-06-05 Thread Lund, Holly (CONTR)


Continuously receiving the below error after upgrade to Tomcat  8.0.43 /java 
1.8.0_162/Apache 2.4.25 from tomcat6/java6/apache2.2 on solaris 10 OS

This only happens under load 


29-May-2018 11:30:22.677 WARNING [commons-pool-EvictionTimer] 
org.apache.tomcat.dbcp.dbcp2.SwallowedExceptionLogger.onSwallowE
xception An internal object pool swallowed an Exception.
 java.sql.SQLRecoverableException: IO Error: Broken pipe (Write failed)
at oracle.jdbc.driver.T4CConnection.logon(T4CConnection.java:682)
at 
oracle.jdbc.driver.PhysicalConnection.(PhysicalConnection.java:711)
at oracle.jdbc.driver.T4CConnection.(T4CConnection.java:385)
at 
oracle.jdbc.driver.T4CDriverExtension.getConnection(T4CDriverExtension.java:30)
at oracle.jdbc.driver.OracleDriver.connect(OracleDriver.java:558)
at 
org.apache.tomcat.dbcp.dbcp2.DriverConnectionFactory.createConnection(DriverConnectionFactory.java:38)
at 
org.apache.tomcat.dbcp.dbcp2.PoolableConnectionFactory.makeObject(PoolableConnectionFactory.java:255)
at 
org.apache.tomcat.dbcp.pool2.impl.GenericObjectPool.create(GenericObjectPool.java:888)
at 
org.apache.tomcat.dbcp.pool2.impl.GenericObjectPool.ensureIdle(GenericObjectPool.java:952)
at 
org.apache.tomcat.dbcp.pool2.impl.GenericObjectPool.ensureMinIdle(GenericObjectPool.java:931)
at 
org.apache.tomcat.dbcp.pool2.impl.BaseGenericObjectPool$Evictor.run(BaseGenericObjectPool.java:1047)
at java.util.TimerThread.mainLoop(Timer.java:555)
at java.util.TimerThread.run(Timer.java:505)
Caused by: java.net.SocketException: Broken pipe (Write failed)
at java.net.SocketOutputStream.socketWrite0(Native Method)
at java.net.SocketOutputStream.socketWrite(SocketOutputStream.java:111)
at java.net.SocketOutputStream.write(SocketOutputStream.java:155)
at oracle.net.ns.DataPacket.send(DataPacket.java:209)
at oracle.net.ns.NetOutputStream.write(NetOutputStream.java:180)
at oracle.net.ns.NetOutputStream.write(NetOutputStream.java:136)
at oracle.net.ano.AnoComm.a(Unknown Source)
at oracle.net.ano.Ano.negotiation(Unknown Source)
at oracle.net.ns.NSProtocol.connect(NSProtocol.java:292)
at oracle.jdbc.driver.T4CConnection.connect(T4CConnection.java:1360)
at oracle.jdbc.driver.T4CConnection.logon(T4CConnection.java:486)
... 12 more


It appears that tomcat is disconnecting from the database after 60 seconds  
(from Oracle logs)

Context.xml









Holly Lund
Senior Unix Systems Administrator
Criterion Systems Inc  - Contractor to the OCIO IM-61
U. S. Department of Energy
1000 Independence Ave., SW
Washington, DC 20585
Phone: 202-586-4431 (Work) 301-905-6576 (Cell)
Email: holly.l...@hq.doe.gov



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org