Re: [MVC] best practice: Filter or Controller?

2002-10-22 Thread Tim Funk
If your not knee deep in code yet - see struts. An MVC framework that does exactly this stuff. And it does it as a controller Servlet (no filters). Struts has its own user and dev mailing lists where you can get more help. garrett smith wrote: Hey, I am using a controller servlet. Maybe I

Re: Security RISK !

2002-10-22 Thread Tim Funk
You'll want to protect your WEB-INF directory as well as any properties files. You can do that by using by the following in your httpd.conf: (This should be the syntax) Files ~ \.properties$ Order allow,deny Deny from all Satisfy All /Files Directory ~ /WEB-INF/ Order

Re: Security RISK !

2002-10-24 Thread Tim Funk
) Veniamin Fichin wrote: Tim Funk wrote: You'll want to protect your WEB-INF directory as well as any properties files. You can do that by using by the following in your httpd.conf: (This should be the syntax) Files ~ \.properties$ Order allow,deny Deny from all Satisfy All /Files

Re: tomcat 4.1.12 compilation error

2002-10-25 Thread Tim Funk
Put your custom java classes in a package and recompile. Old class: Login New class: fooPackage.Login New location: webapps\myapp\WEB-INF\classes\fooPackage\Login.class Tomcat 4 doesn't looking for classes without a package. [EMAIL PROTECTED] wrote: Dear All, I am just newbie for tomcat

Re: plz help, I cannot determine why this is not working????

2002-10-25 Thread Tim Funk
See ... Root cause: java.lang.NullPointerException at jsp.portal_0002dproject.processviewfiles_dir_4._jspService(processviewfiles_dir_4.java:133) at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:119) You are getting a java.lang.NullPointerException Look for

Re: Tomcat standalone - traffic logs???

2002-10-30 Thread Tim Funk
Performance tip - keep resolveHosts=false. Otherwise your server will attempt to resolve all incoming addresses to their hostname. But on an intranet - this might not be much of an issue. -Tim Reynir Hübner wrote: Just have the following in the context of your webapp (in server.xml) :

Re: excluding logging

2002-11-01 Thread Tim Funk
You don't! Eventually you'll end up adding more monitoring to your systems and will have to come up with a better solution. What I do is I massage all my log files before passing them to the web analysis software. That way I can exclude certain User Agents (Like HP Openview), other monitoring

Re: Logging UserAgent (browser)

2002-11-06 Thread Tim Funk
Yes - use combined for your access log pattern. Ex: Valve className=org.apache.catalina.valves.AccessLogValve directory=logs prefix=localhost_access_log. suffix=.txt pattern=combined / neal wrote: Is it possible to instruct Tomcat to log the HTTP UserAgent (Aka which

Re: Logging User-Agent

2002-11-06 Thread Tim Funk
Use this instead ... Ex: Valve className=org.apache.catalina.valves.AccessLogValve directory=logs prefix=localhost_access_log. suffix=.txt pattern=combined / -Tim neal wrote: Does anyone know how to log the User-Agent (browser) in Tomcat access logs? I found this

Re: Suppress Servlet-Engine Info in HTTP Header

2002-11-06 Thread Tim Funk
See mod_headers: http://httpd.apache.org/docs/mod/mod_headers.html In particular, you probably want this: ## Header unset Servlet-Engine ## -Tim Chad Cannell wrote: I am trying to tighten up our Apache and Tomcat implementation.

Re: Suppress Servlet-Engine Info in HTTP Header

2002-11-06 Thread Tim Funk
directive. Have the modules added and loaded. LoadModule headers_module modules/mod_headers.so AddModule mod_headers.c Any other modules needed? Any other thoughts -Original Message- From: Tim Funk [mailto:funkman;joedog.org] Sent: Wednesday, November 06, 2002 11:18 AM To: Tomcat Users List

Re: Logging UserAgent (browser)

2002-11-06 Thread Tim Funk
. :( Thanks. Neal -Original Message- From: Tim Funk [mailto:funkman;joedog.org] Sent: Wednesday, November 06, 2002 4:14 AM To: Tomcat Users List Subject: Re: Logging UserAgent (browser) Yes - use combined for your access log pattern. Ex: Valve className=org.apache.catalina.valves.AccessLogValve

Re: Suppress Servlet-Engine Info in HTTP Header

2002-11-06 Thread Tim Funk
IVAi IVDi CONi OUR NOR IND ONL UNI COM NAV INT CNT STA PRE\ /Location -Tim Chad Cannell wrote: Would it be possible to see your module and add mod section of your httpd.conf file? Not the whole thing just the 2 mod sections. I must be missing a module. c -Original Message- From: Tim Funk

Re: Tomcat on HP-UX 11

2002-11-06 Thread Tim Funk
Yes hp's tar is bad like the other commercial unixes. You'll need to download/compile/install the GNU tar. Wendy Smoak wrote: We talked about Tomcat HP-UX a while ago and I was advised that I didn't have to wait for HP to get around to providing a version of Tomcat 4, that I should be able to

Re: Access log - single file, or multi day files

2002-11-06 Thread Tim Funk
The out of the box access log rotates daily. Thats it, nothing else. But you should be able to easily take the AccessLog valve - rename it to your own class (or extend it possibly) and have it rotate like as you wish. If you are using apache - can you just ignore your tomcat logs (or turn them

Re: Shutting down and restarting Tomcat

2002-11-08 Thread Tim Funk
Or if you have perl installed: REM -- sleep for 2 seconds perl -e 'sleep(2);' -Tim Turner, John wrote: As far as I know, there isn't one. You can only use PAUSE which waits for user input before continuing. That won't help you, though, if you're sitting at your keyboard tapping the spacebar

Re: memory and cpu jsp/servlets abuse

2002-11-11 Thread Tim Funk
You can always nice the untrusted JVMs. That way, even if the JVM is taking 100% - the system will give priority to any other process which is also not nice'd. -Tim Jose Antonio Martinez wrote: hi, i am thinking about developing a multidomain tomcat hosting with private jvm. One of the

Re: Serving PDF files gets different results from Tomcat 3.3 to 4.1

2002-11-15 Thread Tim Funk
Examine the HTTP headers coming back. It may be as easy as adding/removing a new header. How to look at headers coming back: telnet webserver.running.tomcat3 80 GET /myServet/givesme/pdfFile HTTP/1.1 Connection: Close Host: needsFilledIn Then repeat for your tomcat 4 version. -Tim Ralph

Re: Problem in Production

2002-11-20 Thread Tim Funk
We need lots more information. (tomcat version ...) Even then - it could be application specific which no one here can help you with. Have you stress tested your app? Have you looked at the access logs to see amount of traffic? Have you looked at any error logs (catalina.out ...) for interesting

Re: servlet communication

2002-11-20 Thread Tim Funk
Could you just rely on the manager application to reload the webapp? Then there is no code to maintain. Otherwise - your in a kludge. You can: - Put a status object in your application context - When a servlet is executed - it can first check its status instance locally stored against the

Re: servlet communication

2002-11-20 Thread Tim Funk
agree with him, but what can i do? :-) On Wed, 2002-11-20 at 11:22, Tim Funk wrote: Could you just rely on the manager application to reload the webapp? Then there is no code to maintain. Otherwise - your in a kludge. You can: - Put a status object in your application context - When a servlet

Re: Access Log valve

2002-11-20 Thread Tim Funk
There is no way unless you either: - extend AccessLogValve to do your bidding - Use cron and shell scripting to massage your files into a format you like -Tim Reynir Hübner wrote: Hi, I have configured an access log valve, it works ok, except it always makes one file per day, I would like to

Re: Logging the IP address

2002-11-21 Thread Tim Funk
This is doing via access logs. I'm not sure how 3.X does access logs but there is ample docs for 4.X. I'm sure there is for 3.X too. 4.X is also setup by default to write out access logs. For more info for 4.X - look for AccessLogValve Torben C G Jensen wrote: I want to log the IP address of

Re: change localhost_access_log to use . instead of -

2002-11-21 Thread Tim Funk
Nope ... AccessLogValve is hardcoded to use '-': --- dateFormatter = new SimpleDateFormat(-MM-dd); --- -Tim peter lin wrote: I just spent 45min looking through the docs and archive to see if there's an easy way to change the filename format for the access log. Anyone know of a quick way

Re: does tomcat automatically revert to url rewriting...

2002-11-21 Thread Tim Funk
To use URL rewriting all your URLS must first wrapped in response.encodeRedirectURL() That being said: response.encodeRedirectURL() will rewrite the URL to add jsessionid if there was no incoming session cookie. AFAIK - tomcat will not go through the effort of rewriting the URL if the session

Re: does tomcat automatically revert to url rewriting...

2002-11-21 Thread Tim Funk
jfc wrote: Tim Funk wrote: To use URL rewriting all your URLS must first wrapped in response.encodeRedirectURL() So does this mean that tomcat does not automatically do the encoding in the absence of cookies? If you use response.encodeRedirectURL(), it will. But if your URL's

Re: Servlet unavailable discussion

2002-12-01 Thread Tim Funk
Its a security hole. Look at the archives for a more in depth explanation. Personally, I hate the invoker servlet because - it exposes the class name being used. Much harder to refactor your system. - Doesn't require explicit definition of servlets. This makes maintenance very hard because there

Re: Why does encodeURL not include Session ID when switching betweenHTTP and HTTPS

2002-12-01 Thread Tim Funk
I think the question to ask is (which I can't answer): Will encodeURL() encode URLS if the request protocol [or for that matter, server] is different? You are switching from http to https. Since this is a different namespace, all bets may be off whether encodeURL will work like the way you

Re: Exception in R error

2002-12-02 Thread Tim Funk
Look at your trace: Root cause: java.lang.NullPointerException at ituNews.dbUtil.getDBResults(Compiled Code) at ituNews.content.getCurrentContentTitles(Compiled Code) at itu.index_1._jspService(Compiled Code) You have code which is throwing a NPE. To get lines numbers, run

Re: NullPointerException in Tomcat

2002-12-02 Thread Tim Funk
Nope - the NPE is here (line 1 of stack trace): org.netbeans.modules.web.monitor.server.MonitorFilter.recordServletData(MonitorFilter.java:979) -Tim Bradley Ward wrote: I am getting a NullPointerException, and the stack trace says it is down in the bowels of Tomcat somewhere. Can anyone give me

Re: OutOfMemoryError: cannot create new native thread

2002-12-05 Thread Tim Funk
OutOfMemoryError is a bad error description in java. It can mean any of the following: - Actually ran out of memory - Hit max # of threads allowed to run - Ran out of file handles - File handles include open files AND sockets - (?) Your JVM is bigger than the max process size allowed - Other

Re: Why run tomcat as root

2002-12-05 Thread Tim Funk
Run apache as one id (nobody?) Run tomcat as another id (tomcat?) Running as root ... dangerous. Sanjaya Singharage wrote: with respect to security what is the best way to run tomcat on linux? I am running tomcat3.2.3 with apache1.3.26 and mod_jk 1. Run as root? 2. Run as nobody? 3.Run as other

Re: session problem with mod_jk

2002-12-05 Thread Tim Funk
The session cookie is probably NOT being propogated in IE's new window. If that is the case, then you need to add the session id to the url. (Via response.encodeURL( ... ) or response.encodeRedirectURL( ... )) Matthias Erche wrote: Hi all, We have 2 webapps running in this environment: -

Re: Why run tomcat as root

2002-12-05 Thread Tim Funk
Apache doesn't completely downgrade itself. Apache still runs as root. But only as little code as possible runs as root for apache. Apache uses root for binding to the socket (80), (logging?) and the other socket happiness where its nice to be root. But apache has many child processes running

Re: Why run tomcat as root

2002-12-05 Thread Tim Funk
Follow cigar smoke, find fat man there Tim Funk [EMAIL PROTECTED] 05.12.2002 13:24 Please respond

Re: Security concerns over URL

2002-12-05 Thread Tim Funk
If you are using SSL - everything is encrypted across the wire. No problems. If you are worried about someone stealing the session id by (visual) site - make sure your application runs in a browser window where the URL cannot be diplayed. AFAIK - session ids are generated in such a way that

Re: Why run tomcat as root

2002-12-05 Thread Tim Funk
Tomcat is just a java class. (really a set of classes) It is like any other java application. If tomcat downgrades itself - all open sockets should be allowed to be continued to be used by it. Weblogic does this (in my observation of using it). Apache runs the way you describe below. (from my

Re: Apache and Tomcat with one access log?

2002-12-06 Thread Tim Funk
If apache gets all the requests and uses JK to proxy the requests to tomcat - you can ignore the tomcat access logs. Every request will be in the apache access log. Passing both logs to webtrends will give you the wrong stats since you will be double counting the same request. In fact - in

Re: Security constrant to force SSL works with apache+tomcat?

2002-12-07 Thread Tim Funk
Actually (hopefully I didn't snip you out of context) ... If a user switches from http to https - shouldn't a new session id be assigned? If not - an attacker can swipe the session id while the user was in http mode. Then the attacker can issue requests using https with the httpd session id.

Re: Tomcat and Avalon

2002-12-07 Thread Tim Funk
No Samuel Cheung wrote: Does Tomcat use Avalon(http://jakarta.apache.org/avalon/index.html) as its server framework? Thanks. -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]

Re: local machine access only?

2002-07-03 Thread Tim Funk
When declaring your connectors in server.xml add address=127.0.0.1. EG: Connector className=org.apache.catalina.connector.http.HttpConnector port=8080 minProcessors=5 maxProcessors=75 address=127.0.0.1 enableLookups=true redirectPort=8443 acceptCount=10 debug=0

Re: Tomcat and static content

2002-07-07 Thread Tim Funk
The apache access logs can tell you how long it took for a request to be served. All requests (whether they live in tomcat or not) are served by apache. So you'll need to check your access logs on the tomcat instance to see if only jsp's (or servlets are showing up) are being served by

Unable to load JAR files inside of webapps in 4.1.7

2002-07-09 Thread Tim Funk
With tomcat 4.1.7 - I am unable to load jar files in the WEB-INF/lib directory of my webapp. In 4.0.4 - this worked fine. Below is a snippet from the localhost_log file. I also added 2 extra debug statements ContextConfig.java and recompiled and became surprised by the output. I also had this

Re: Unable to load JAR files inside of webapps in 4.1.7

2002-07-09 Thread Tim Funk
I tried the install via exe and all worked OK. Is there a reason the tar.gz doesn't work, yet the install via .exe does? Tim Funk wrote: With tomcat 4.1.7 - I am unable to load jar files in the WEB-INF/lib directory of my webapp. In 4.0.4 - this worked fine. Below is a snippet from

Re: JDBC OCI driver + Tomcat 4.04

2002-07-11 Thread Tim Funk
I know this doesn't solve your problem, but is there a compelling reason to use OCI driver as compared to the type 4 driver? Rao Manekar wrote: I am having problem connecting to Oracle 9i database using JDBC OCI driver with Named Pipes through Tomcat 4.04. Connection works fine if I run the

Re: Do we need to use doCloseWithReadPending option on HPUX for tomcat4.0.3as well?

2002-07-12 Thread Tim Funk
When using HPUX - use the doCloseWithReadPending flag. If you are using and kind of JK connectivity(or if not but its still in your server.xml file) - they are sockets open waiting on a read request from apache to deliver the next pending request. If you are pooling db connections - the db

Re: Tomcat MySQL Run On Read-Only Media ..

2002-07-15 Thread Tim Funk
It sounds like the webapp is read only system (since it is going on a cd). If your UI is link based (no forms/sessions) - could you use a web sucker (like wget in recursive mode) and make a static copy of the site? Otherwise - flash is great for things like this. (But it is reinventing the

Re: Excapetion Handling in JSP

2002-07-16 Thread Tim Funk
yes (all you need is a try catch combo) Power-Netz (Schwarz) wrote: Is it possible for me to catch this exception inside a jsp? A simple yes or no is enough :) -- javax.servlet.ServletException:

Re: Problems with Tomcat 4.0.3 - JNDIRealms - LDAP - Netware 5

2002-07-16 Thread Tim Funk
If you need to bind as the user - that implementation is done in the 4.1.X branch. [EMAIL PROTECTED] wrote: Well, I got it working by making a new JNDIRealms object that when it checks the authentication it tries to connect as that user. Roles are still a problem but that should not be

Re: Problems with Tomcat 4.0.3 - JNDIRealms - LDAP - Netware 5

2002-07-16 Thread Tim Funk
It does provide a list of roles but I do not know if still solves your issue. (I use IPlanet) [EMAIL PROTECTED] wrote: Ah sonofa... Do you know if it handles the funny groupMembership rules and such now? -Original Message- From: funkman [mailto:[EMAIL PROTECTED]] Sent:

Re: How to do stop-start fast?

2002-07-17 Thread Tim Funk
You have a few alternatives: 1) Kill the java process and then you can run startup.sh immediatetly 2) Write a wrapper script which calls shutdown.sh, then does one of the following to verify tomcat is shutdown before calling startup.sh a) The process is non-existent b) The port is no taken

Re: How to do stop-start fast?

2002-07-17 Thread Tim Funk
Something like this may work (just a quick hack so there may be typos) --start cut here for script #!/bin/sh ### # restart.sh # restarts tomcat # usage: restart.sh ip port #ip - The ip address (or *) #port - Which tomcat listens on shutdown # # eg:

Re: How do I determine the error code

2002-07-17 Thread Tim Funk
Section 9.8 of Java Servlet Specification Version 2.3: A web application may specify that when errors occur, other resources in the application are used. These resources are specified in the deployment descriptor. If the location of the error handler is a servlet or a JSP, the following

Re: How do I determine the error code

2002-07-17 Thread Tim Funk
/error-page and hope that error.jsp gets caled for all error-code exception errors - Original Message - From: Tim Funk [EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Wednesday, July 17, 2002 3:17 PM Subject: Re: How do I determine the error code Section

Re: How to close a response?

2002-07-18 Thread Tim Funk
There is no need to synchronize the request object. It will not be used in multiple threads concurrently. What you really need is synchronization of the session to prevent processing of the double submit. If the user submits twice, then 2 different requests may be executed in different

Re: How do I Hide version specific information

2002-07-18 Thread Tim Funk
Change the source (don't know where) and recompile and give a bogus webserver name: Server: Happy Harry's webserver/1.1 (Commodore64) mod_squishy/-1.2 In reality - use best practices to secure your installation. Security through obsurity is not really a great practice. Kevin Passey wrote: I

Re: Is Tomcat affected by the Apache HTTP Server chunked encodingv ulnerability?

2002-07-18 Thread Tim Funk
No. Java applications cannot be victim to buffer overflow errors. Rinehart, Steve C wrote: I posted this once before but thought I'd give it one more try. Does anyone know if the Apache HTTP Server chunked encoding vulnerability in the Apache Web server is also present in Tomcat 3.2.1? See

[OT] Re: How do I Hide version specific information

2002-07-18 Thread Tim Funk
does? Find out - you may not need an entry or you may have it misconfigured. 4) Don't run as root 5) Turn off directory indexing (force a 404 if welcome file not present) Google would probably provide better info than above. [EMAIL PROTECTED] wrote: Tim Funk wrote: In reality - use best practices

Re: JNDIRealm config

2002-07-23 Thread Tim Funk
To use JNDIRealm with Netscape Directory server you need the 4.1.X series of tomcat and you need to bind as the user. So do not provide connectionName and connection password. In the 4.0.X series the passwords are compared in an incompatible manner with respect to Netscape Dir server. - -

Re: Apache + Tomcat sometimes pegs CPU

2002-08-02 Thread Tim Funk
Upgrade to 4.0.4. Earlier (4.0.X) versions have a problems with POST requests when the browser terminates before sending enough data. This caused an infinite loop between apache and tomcat. Here is the simple way to reproduce, (and watch your cpu go way up):

Re: Apache + Tomcat sometimes pegs CPU

2002-08-02 Thread Tim Funk
No. It was a bug in the connector. (Not checking eof) Jeff Larsen wrote: Thanks, I figured that I wasn't the first one to see this. Is my current mod_jk going to need upgrading also? Jeff - Original Message - From: Tim Funk [EMAIL PROTECTED] To: Tomcat Users List [EMAIL

Re: error in jsp??? Response has already been committed

2002-08-08 Thread Tim Funk
Sneaky sneaky - posting a JRun problem on the tomcat-user list :0 Anyhow - It appears you are trying to forward to another page but you can't because you (actually your servlet engine) have already sent data back to the client. (Why? I don't know. Maybe because you are using a JSP that has

Re: error in jsp??? Response has already been committed

2002-08-09 Thread Tim Funk
response has send back to client, does this mean that i have started writing html from jsp, and half way down i get the error and then i try to forward the request??? if this is correct i think i will have to modify the logic Ashish --- Tim Funk [EMAIL PROTECTED] wrote: Sneaky sneaky - posting

Re: JNDI Realm Help - (using iplanet)

2002-08-20 Thread Tim Funk
* * pstrongTODO/strong - Get rid of this class and use JNDIRealm. But * JNDIRealm needs patched because IPLanet returns Base64 SHA passwords * and the the current JNDIRealm doesn't handle that. * /p * * @author Tim Funk * @version $Revision: 1.1.1.1 $ $Date: 2002/06/26 18:21:21 $ */ public

Re: JNDI Realm Help - (using iplanet)

2002-08-20 Thread Tim Funk
if it fixes that base64 encoding problems. Do yo know if that base64 problem carries over into the JDBCRealm at all? (For using SHA with say - mysql?) Randy - Original Message - From: Tim Funk [EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Tuesday, August 20, 2002

Re: list volume

2002-08-21 Thread Tim Funk
Mozilla(1.0) can do a nice job of filtering too. It can also filter out noise, such as please, plz, urgent, multiple exclamation points, certain posters, and the word newbie. If you look at multiple lists - each list can be filtered into its own folder. Cox, Charlie wrote: outlook allows

Re: Order for starting WebApps

2002-08-22 Thread Tim Funk
If you are looking at loading a native Library - or other wacky initializations. Maybe using Startup classes would be better such as the LifeCycle Listeners. They are called in order of being parsed. http://jakarta.apache.org/tomcat/tomcat-4.0-doc/config/engine.html Turner, John wrote: You

Re: logging to file

2002-08-25 Thread Tim Funk
My assumption is wish to log events/activities - not debug stuff This is not portable to other containers but you could do this. Declare a common object name to go into your ServletRequest object ( like event.login, event.logout) so when things occur you could have in your code:

Re: logging to file

2002-08-25 Thread Tim Funk
, maybe I'm underestimating the way Catalina handles Valves? --G On Sun, Aug 25, 2002 at 02:12:14PM -0400, Tim Funk wrote: My assumption is wish to log events/activities - not debug stuff This is not portable to other containers but you could do this. Declare a common object name

Re: Using a Webapp on a network share

2002-08-27 Thread Tim Funk
Yup - I had my Win2K machine load a webapp on a HPUX samba share. But for some reason (for which I don't know or care) - the sharing was REAL slow with respect to performance. eg: (Assume drive O is mounted) Context path=/shmoopy docBase=O:/www/shmoopy debug=0/ Marc-Henri PAMISEUX wrote:

Re: Using a Webapp on a network share

2002-08-27 Thread Tim Funk
Instead of: docBase=N:\intranet\sites\ROOT try: docBase=N:\\intranet\\sites\\ROOT OR docBase=N:/intranet/sites/ROOT Marc-Henri PAMISEUX wrote: Tim Funk wrote: Yup - I had my Win2K machine load a webapp on a HPUX samba share. But for some reason (for which I don't know or care

Re: Does closing a Connection variable and setting it to null closeall of the ResultSet and Statements?

2002-08-27 Thread Tim Funk
It is not requried to close ResultSets, Statements, etc if you close the connection. (I think) The spec says if you close a connection - all associated resources for that connection will also be closed. If you are using a pool - the pool manager *should* be obeying this principal too.

Re: Wouldn't this be a security risk??

2002-08-28 Thread Tim Funk
Have apache deny the request. Very simple change to httpd.conf. For example: # No one in my WEB-INF directory Location /WEB-INF/ AllowOverride none deny from all /Location # No one look at my properties files Files ~ *.properties Order allow,deny Deny from all Satisfy All

Re: Global Logger-Cookie Problem

2002-08-28 Thread Tim Funk
If apache is doing your logging, the adding %{Cookie}i to your access log directive will do the trick. In apache 2.0 - the regular access log module can also write out specific cookies. (I think) If you logging via tomcat only - then you are out of luck. (Until a patch is submitted) Charles

Release date for 4.0.4

2002-06-07 Thread Tim Funk
Is there a FAQ that states when releases occur? I see there is a vote by committers, but no more information. In particular - I am interested in when Tomcat 4.0.4 final may be released. Or are there plans for a beta4 first? -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional

Re: About thread mod_jk: ajp13: cpu load problem with apache

2002-06-10 Thread Tim Funk
I got in this thread late - but there is a bug in in 4.0.3 tomcat connectors that did not do error checking on the size of POST requests. So if a browser doesn't send enough data in a POST request and terminates - the tomcat process will infinite loop - asking for more data from the httpd

Re: Customize Tomcat error pages

2002-06-11 Thread Tim Funk
Its part of the Servlet Specification and not unique to Tomcat. Place this snippet into web.xml to redirect page not found errors to /errorpage_404.jsp. error-page error-code404/error-code location/errorpage_404.jsp/location /error-page -Tim Markus Kirsten wrote: How do I configure

Re: Tomcat Unexplained Shutdown

2002-06-11 Thread Tim Funk
Quick stab in the dark - Since you are using an ODBC driver - I bet the driver is not thread safe. So if tomcat is trying to serve 2 different requests concurrently, it may be dying in native odbc code. -Tim Geoff Peters wrote: Here are the uncompiled servlets (the ones that would possibly

Re: Tomcat Unexplained Shutdown

2002-06-11 Thread Tim Funk
only one request may view/fax/whatever at a time. Or get a thread safe version of the odbc driver. After that - its out of my league. -Tim Geoff Peters wrote: What alternatives would I have to that ODBC driver as a testing option? -Original Message- From: Tim Funk [mailto:[EMAIL

Re: problem with connections not closing...

2002-06-11 Thread Tim Funk
finalize() gets called on garbage collection. Which may occur a long time from when your are done with your connection. Which isn't the time to close your db connections - it should be done much earlier. Here is code I typically use: Connection con = null; PreparedStatement stmt = null;

Re: Tomcat load estimates/load balancing question

2002-06-12 Thread Tim Funk
The bug is on occurs when a web browser does not POST the enough data. Apache is OK - but tomcat does not detect this error and goes into an infinite loop and takes the httpd process along for the ride. This is fixed in 4.0.4b3. -Tim Cammy Ng wrote: Hi Be careful on mod_jk, apache1.3.x

Re: Security - Attack

2002-06-13 Thread Tim Funk
Warning: this may start flame war - but its my opinion. What is the purpose of detecting and trying to prevent these attacks? If someone code reds (or similar) you - they get a 404 error. Why waste the extra processing power and extra config maintenance on something that does no harm. When

Re: Other question

2002-06-13 Thread Tim Funk
For what its worth - I created (and use) a LifecycleListener that runs on startup which logs the process ID into a file called tomcat.pid. Which is created by a shell script called writepid.sh. Below is all the code to get this to work. This code also assumes your current working directory is

Re: Other question

2002-06-13 Thread Tim Funk
http://jakarta.apache.org/tomcat/tomcat-4.0-doc/config/host.html I have mine in the Host, but it can also go other spots in conf/server.xml according to the docs. -Tim Laura wrote: Hi, your code seems very interesting, but I haven't understood one thing: you says Then add the

Re: testing tomcat

2002-06-14 Thread Tim Funk
Is lynx installed on the Solaris box? Use that to test the site - assuming your site works with a text browser. Or if you want to have lots of fun, the firewalls allow it, your machine is addressable, and Netscape is installed on the Solaris box - launch Netscape (or similar) on the Solaris

Re: Other question

2002-06-14 Thread Tim Funk
Welcome to PID hell! I have this working on HPUX, if you are trying this on another UNIX - I'm not sure what may happen but here are some hints to track things down. 1) Make sure the directory you are starting tomcat you are typing bin/startup.sh. This ensures you will write the the correct

Re: Null Pointer Exception - would you please take a look?

2002-06-18 Thread Tim Funk
This may be to much to ask for - but are you able to get this to work with a different DBMS? On first glance, it appears you (not literally) might be passing null to the JDBC driver's setString() method and the JDBC driver can't handle the null value. Consequently - things explode. If so -

Re: Servlet knowing its own URL

2002-06-25 Thread Tim Funk
A servlet can't know its URL at startup - because a servlet is mapped to a URL pattern. It is only at request time a servlet can know its URL using the methods in the HttpServletRequest object. But even these values can be misleading if the servlet is included and not explicitly requested.

Re: Database write delay?!?!?!?

2002-08-29 Thread Tim Funk
Wild guess, but it sounds like you are using a database pool and the connections that perform updates are not doing commits. Depending on how the connections are set up - other connections won't see the change until a commit. (Or you change driver settings - don't ask me what they are I don't

Re: logging to file

2002-08-29 Thread Tim Funk
, maybe I'm underestimating the way Catalina handles Valves? --G On Sun, Aug 25, 2002 at 02:12:14PM -0400, Tim Funk wrote: My assumption is wish to log events/activities - not debug stuff This is not portable to other containers but you could do this. Declare a common object name

Re: Tomcat shutdown does not kill java process

2002-08-30 Thread Tim Funk
Make sure you do not have any servlets or beans creating non-daemon threads. A java process will run while there exists at least 1 non-daemon thread. Perform a thread dump on your java process and see if this is the case. See previous threads (or google) on how to perform a thread dump. Jim

Re: Startup-Problems: Tomcat 4.0.4 binary on Linux w/J2SDK 1.3.1

2002-09-01 Thread Tim Funk
1) A java process in linux shows up many times with ps or top (because of multiple threads) 2) See logs/catalina.out for an error message. There is propably a misconfig in server.xml or another run time error the tomcat cannot recover from. In any case the logs/catalina.out captures

Re: Server memory usage

2002-09-02 Thread Tim Funk
In linux - threaded processes show up multiple times in top (or ps). Once entry for each thread. Summing the entries in top will yield an incorrect memory usage. Just take one of the entries to get the amount of memory used by java. (Unless you have multiple real java processes running, in

[OT] Re: Server memory usage

2002-09-02 Thread Tim Funk
I do not use GUI tools so I have no expertise in this area. Mihai Gheorghiu wrote: I checked with ps -Al and I understand what you wrote. I used Gnome System Monitor - Memory usage (resident). Is it making the same mistake? -Original Message- From: Tim Funk [EMAIL PROTECTED

Re: Replacement 401 pages

2002-09-04 Thread Tim Funk
See section 9.8 of the spec: A web application may specify that when errors occur, other resources in the application are used. These resources are specified in the deployment descriptor. If the location of the error handler is a servlet or a JSP, the following request attributes can be set: -

Re: Url Mapping with mod_jk

2002-09-04 Thread Tim Funk
Try something like this ... NameVirtualHost 172.16.24.99 VirtualHost schmoopy1 DocumentRoot /usr/local/schmoopy1/docs ServerName schmoopy1.joedog.org ServerAlias schmoopy1 JkMount /*.jsp sometomcat /VirtualHost VirtualHost schmoopy2 DocumentRoot /home/schmoopy2/stuff

Re: problems with browser cache

2002-09-04 Thread Tim Funk
Added a bogus parameter to the URL which guarantees a unique URL. ex: A HREF=foo.jsp?bogus=%System.currentTimeMillis()%Foo/A Christian J. Dechery wrote: How can I prevent the broswer from using the cache when loading a JSP with a 100% certainty? I'm experiencing a reaaally weird cache

Re: TOMCAT DIE ???

2002-09-06 Thread Tim Funk
Not a tomcat error: You have custom code calling native libraries and the native libraries are causing your woes. Look at the stack trace in your message to back trace the Native code that is being called. [EMAIL PROTECTED] wrote: Hi, We are running TOMCAT with Win 2000 is is our

Re: jsp includes in tomcat 4..........

2002-09-06 Thread Tim Funk
Tomcat 4.1 now checks included pages. (or at least one of the 4.1.x releases did - but I think it was temporarily yanked out - and I don't know if the functionality is back in yet or not) As for the force recompile everytime - this would be bad since there is a memory leak pre-1.4.1 JDK when

Re: Servlet multithreading design question

2002-09-09 Thread Tim Funk
What are the Multi-threaded isses? Regardless that the abstract class does implement SingleThreadModel - you would still have 2 instances of BaseServlet since it is extended by OneServlet and TwoServlet. Who will need to be more specific in you question. Mathew Pole wrote: If I create

  1   2   3   4   5   6   7   8   9   10   >