Altering ServerInfo.properties in Tomcat = ClassNotFoundException
Dear all,
Altering ${catalina_home}/lib/org/apache/catalina/util/ServerInfo.properties
because of information disclosure concerns (TC version number)
in apache-tomcat-6.0.37, apache-tomcat-7.0.40, apache-tomcat-7.0.42 and Apache
Tomcat/8.0.0-RC1 as mentioned in the documentation
(http://tomcat.apache.org/tomcat-7.0-doc/security-howto.html,
http://tomcat.apache.org/tomcat-7.0-doc/security-howto.html)
leads to ClassNotFoundException and Tomcat cannot be started.
The older versions of Tomcat 6 and Tomcat 7 are not affected. Is this now
intended or did I miss something?
Error message (Tomcat 8):
java.lang.ClassNotFoundException: org.apache.catalina.startup.Catalina
at java.net.URLClassLoader$1.run(URLClassLoader.java:366)
at java.net.URLClassLoader$1.run(URLClassLoader.java:355)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:354)
at java.lang.ClassLoader.loadClass(ClassLoader.java:424)
at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
at org.apache.catalina.startup.Bootstrap.init(Bootstrap.java:271)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:461)
Tomcat:
apache-tomcat-6.0.37
apache-tomcat-7.0.40
apache-tomcat-7.0.42
Tomcat/8.0.0-RC1
JDK:
Oracle jdk1.7.0_25
OS:
SUSE Linux Enterprise Server 11 (x86_64)
VERSION = 11
PATCHLEVEL = 1
Thank you very much!
Tomcat error messages sent to client browsesr
Dear all, I am trying to find out if there is an alternative way of telling Tomcat not to send information to the client browser in a case of an error (Stack trace, Root Cause ...) in the application rather than by defining an error-page in web.xml. System information: +++ Linux 2.6.5-7.283-bigsmp Tomcat 6.0.18 Apache 2.0.63 Java jdk1.6.0 (jre) +++ Error message displayed in client browser: HTTP Status 500 - type Exception report message description The server encountered an internal error () that prevented it from fulfilling this request. exception Stacktrace: org.apache.jasper.servlet.JspServletWrapper.handleJspException(JspServle tWrapper.java:505) org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.ja va:416) org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:342) org.apache.jasper.servlet.JspServlet.service(JspServlet.java:267) javax.servlet.http.HttpServlet.service(HttpServlet.java:717) de.netbank.tools.persistence.HibernateFilter.doFilter(HibernateFilter.ja va:43) de.netbank.tools.tracking.TrackingFilter.doFilter(TrackingFilter.java:16 1) de.netbank.tools.CharsetFilter.doFilter(CharsetFilter.java:47) de.netbank.tools.XSSFilter.doFilter(XSSFilter.java:47) root cause java.lang.ArrayIndexOutOfBoundsException: 1 de.netbank.tools.fonds.FondsShopBean.parseWarenkorb(FondsShopBean.java:4 67) org.apache.jsp.fondsshop_005fanlagebetrag_jsp._jspService(fondsshop_005f anlagebetrag_jsp.java:533) org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70) javax.servlet.http.HttpServlet.service(HttpServlet.java:717) org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.ja va:374) org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:342) org.apache.jasper.servlet.JspServlet.service(JspServlet.java:267) javax.servlet.http.HttpServlet.service(HttpServlet.java:717) de.netbank.tools.persistence.HibernateFilter.doFilter(HibernateFilter.ja va:43) de.netbank.tools.tracking.TrackingFilter.doFilter(TrackingFilter.java:16 1) de.netbank.tools.CharsetFilter.doFilter(CharsetFilter.java:47) de.netbank.tools.XSSFilter.doFilter(XSSFilter.java:47) note The full stack trace of the root cause is available in the Apache Tomcat/6.0.18 logs. Apache Tomcat/6.0.18 +++ Solution I already implemented in web.xml: error-page exception-typejava.lang.Exception/exception-type location/page_not_foung.jsp/location /error-page error-page error-code500/error-code location/page_not_foung.jsp/location /error-page The above solution works fine. But what I am trying to find out is - if there is a way to tell Tomcat not to send error messages and Version Information to the client browser with out using the above mentioned error-page. Is this possible? If yes - I will be very thankful for any hint! With best regards, Aliye
AW: Tomcat hangs
Hi Philipp, try the following: Increase maxThreads in server.xml. A good value to start with is maxProcessors=100. Set connectionTimeout to a minute - connectionTimeout=6. Restart Tomcat. Hope this will help. Mit freundlichem Gruß / kind regards Dr. Aliye Edao -Ursprüngliche Nachricht- Von: Philipp Lehner [mailto:[EMAIL PROTECTED] Gesendet: Mittwoch, 15. November 2006 07:44 An: users@tomcat.apache.org Betreff: Tomcat hangs Hello, Since a few days Tomcat hangs on our production server every 20 - 24 hours. In the stderr.log I'm getting the following entry: 15.11.2006 00:54:08 org.apache.tomcat.util.threads.ThreadPool logFull SCHWERWIEGEND: All threads (75) are currently busy, waiting. Increase maxThreads (75) or check the servlet status 15.11.2006 01:05:13 org.apache.jk.server.JkCoyoteHandler action SCHWERWIEGEND: Error in action code java.net.SocketException: Connection reset by peer: socket write error at java.net.SocketOutputStream.socketWrite0(Native Method) at java.net.SocketOutputStream.socketWrite(Unknown Source) at java.net.SocketOutputStream.write(Unknown Source) at org.apache.jk.common.ChannelSocket.send(ChannelSocket.java:457) at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:654) at org.apache.jk.server.JkCoyoteHandler.action(JkCoyoteHandler.java:472) at org.apache.coyote.Response.action(Response.java:226) at org.apache.coyote.Response.finish(Response.java:348) at org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:329) at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:395) at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:673) at org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:615) at org.apache.jk.common.SocketConnection.runIt(ChannelSocket.java:786) at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:683) at java.lang.Thread.run(Unknown Source) I'm using the following configuration: Windows 2003 Server Tomcat 4.1 Can anyone help me please? Best Regards, Philipp ___ Telefonate ohne weitere Kosten vom PC zum PC: http://messenger.yahoo.de - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
AW: mod jk
Hi, The mod_jk you are using seems not to function properly. You can see that if you user the command: ldd /home/qrq/suds_20_dir/apache/libexec/mod_jk.so (you should get something like -- not found ... Recompile it or download a binary version suitable to your system form http://apache.speedbone.de/tomcat/tomcat-connectors/jk/binaries/ Mit freundlichem Gruß / kind regards Dr. Aliye Edao -Ursprüngliche Nachricht- Von: Kaushal Shriyan [mailto:[EMAIL PROTECTED] Gesendet: Montag, 6. März 2006 12:51 An: Tomcat Users List Betreff: Re: mod jk Thanks Warren Pace Its there I will paste u the httpd.conf file but while i restart [EMAIL PROTECTED]/apache/bin# ./apachectl start Syntax error on line 206 of /home/qrq/suds_20_dir/apache/conf/httpd.conf: Cannot load /home/qrq/suds_20_dir/apache/libexec/mod_jk.so into server: ld.so.1: /home/qrq/suds_20_dir/apache/bin/httpd: fatal: relocation error: file /home/qrq/suds_20_dir/apache/libexec/mod_jk.so: symbol dir_module: referenced symbol not found ./apachectl start: httpd could not be started Regards Kaushal On 3/6/06, Warren Pace [EMAIL PROTECTED] wrote: From: Kaushal Shriyan [EMAIL PROTECTED] Date: 2006/03/06 Mon AM 05:08:31 EST To: users@tomcat.apache.org, users@httpd.apache.org Subject: mod jk HI All I am getting [EMAIL PROTECTED]/apache/bin# ./apachectl start Syntax error on line 212 of /home/qrq/suds_20_dir/apache/conf/httpd.conf: Invalid command 'JkWorkersFile', perhaps mis-spelled or defined by a module not included in the server configuration ./apachectl start: httpd could not be started [EMAIL PROTECTED]/apache/bin# Please let me know where i am going wrong Are you loading mod_jk dynamically? The JkWorkersFile statement needs to appear after the LoadModule statement as such: LoadModule jk_module /usr/lib/apache2/mod_jk.so JkWorkersFile /etc/apache2/workers.properties Regards Kaushal - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
