Re: session hijacking again

Do you use Java? We are a financial institution, we use a Java Framework based on servlets with SSL, but if you ask my opinion SSL is not the big issue. The vast majority of hacked sites are social engineering attacks. Secure your database (do not store clear text passwords in the database)

Cannot authenticate client with Tomcat 5.0.28

Hi everyone, I work for a municipality we need to implement a service that can log users(from a browser) by electronic identity card. I've installed a card reader, and created https connector for tomcat 5.5 that way: Connector port=7443 maxThreads=150

Re: Cannot authenticate client with Tomcat 5.0.28

[EMAIL PROTECTED] wrote: Hi everyone, I work for a municipality we need to implement a service that can log users(from a browser) by electronic identity card. I've installed a card reader, and created https connector for tomcat 5.5 that way: Connector port=7443

Tomcat not reading context path directive

HI there, I'm running Tomcat 5.5.12 (Red Hat Enterprise Linux stock packages). I am trying to set a Context path directive for /ejava/appname Tomcat is ignoring the Context path and instead taking the context from the xml file name (so it's reading the file and the docBase directive). The

Can servlets safely spawn threads?

Hi, I would be grateful is someone could answer these questions: * Can servlets safely spawn threads? * If so, under what conditions? I tried to find the answers searching the web, but found conflicting views. So I thought it worth asking about a specific servlet container implemention. I'm

Tomcat Production Date processing

Hi Guys, I am getting a very strange problem I have no idea where to start and I thought you guys might know, its possible its not may not be a tomcat problem... I am running netbeans 5.5(tomcat 5.5.17)/java 1.5/mysql connector 3.1.13 The production server has java 1.6/mysql connecter

Can't startup Tomcat properly, help!

New problem, although the one from the other day still exists about the IE issues with starting JSPWiki - just can't even attempt to sort this as now Tomcat won't start correctly! Basically, we installed SonicWall ViewPoint (Firewall software for creating reports of Internet usage etc) on Friday,

TCP Connection Aborted problems

As a followup from the http://www.nabble.com/mod_jk-replacement--tf3050993.html I am still looking for a working solution of the err=-53 (TCP Connection aborted) problem. To summarize what is happening: We have a Windows 2003 server (with Apache 2.0.59, mod_jk 1.2.20 and Tomcat 5.5.17). It

Re: Can't startup Tomcat properly, help!

You can only run two versions of tomcat if they are configured to use different network ports. Make sore both versions are using a different port. Best Regards, Jacob ICT Department wrote: New problem, although the one from the other day still exists about the IE issues with starting JSPWiki

Re: TCP Connection Aborted problems

I had a look at your log files. It really looks like something is wrong on the remote=tomcat side (or in between mod_jk and tomcat). Please do a couple of thread dumps for the tomcat JVM immediately after your stress test, during the time you cannot send request via mod_jk. Under Windows you

Re: Tomcat not reading context path directive

Alan Cooper wrote: I'm running Tomcat 5.5.12 (Red Hat Enterprise Linux stock packages). I am trying to set a Context path directive for /ejava/appname Tomcat is ignoring the Context path and instead taking the context from the xml file name (so it's reading the file and the docBase

Problem with static files served from NAS

Hi This is a side/follow-up thread to 'HTTP response code 200 - in access log'. One contributor hinted that files being served from a NAS could cause problems = files not being able to be read sometimes. This could yield the access log entries with HTTP code 200 but no content length ('200 -'),

Re: Tomcat Production Date processing

Jacob Rhoden wrote: Sql problem: java.sql.SQLException: Cannot convert value '2007-01-28 01:19:15' from column 5(2007-01-28 01:19:15 ) to DATE. For future reference, If you receive this error in your servlet, it can be resolved by upgrading the mysql connector to the latest version. Best

How do I increase performance on Tomcat?

Hi, I have an application that has been working fine for last half an year or so. Recently the load has started increasing and the time it takes to serve a request is going up significantly. When I look at the resource utilization(memory and CPU), it hardly shows an increase. Garbage

RE: How do I increase performance on Tomcat?

From: Gaurav Kushwaha [mailto:[EMAIL PROTECTED] I have an application that has been working fine for last half an year or so. Recently the load has started increasing and the time it takes to serve a request is going up significantly. When I look at the resource utilization(memory

Re: Can servlets safely spawn threads?

En l'instant précis du 01/29/07 11:33, Danny Ayers s'exprimait en ces termes: Hi, I would be grateful is someone could answer these questions: * Can servlets safely spawn threads? short answer, yes. They *can*. However that does not mean all spawned Threads are safe. * If so, under what

Jars of different webapps causing problem

Hi there, I have problem running two webapps deployed on my Tomcat 5.X, which otherwise works fine, when deployed separately. Both the webapps have the same jars related to visibroker (vbjorb and vbjsec). When I try running both the webapp together in the same tomcat instance, my first app

Tomcat bundled Hibernate MySQL

I create a JAR library with the business logic, I use Hibernate and MySQL. Everything work fine but when I try use the JAR from a WebApp using the bundled TomCat on NetBeans 5.5 I got an server error. I believe that the problem is that the server don't know about Hibernate and the MySQL drive. I

Re: Can servlets safely spawn threads?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Danny, David Delbecq wrote: 1) Your servlet must always take care to finish all Threads it has spawned. This mean when servlet gets unloaded, you must have provided a mecanism in your servlet to stop all running threads your servlet has created.

Tomcat and MySQL sync problems

Hello, I'm having a problem where it seems Tomcat and MySQL go out of sync and I am no longer able to connect to the MySQL database. The only way I've found to be able to reconnect to my database is to restart Tomcat. This generally seems to happen some time over the course of the night and I

Re: XML Parse problem in a webapp context.xml

Mark, here is the stacktrace. Hope that helps. -P Jan 26, 2007 1:01:51 PM org.apache.tomcat.util.digester.Digester endElement SEVERE: End event threw exception java.lang.reflect.InvocationTargetException at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at

Re: Tomcat and MySQL sync problems

Hi We had a simliar problem with Oracle and Tomcat 4.1.30 and a firewall in between and I don't remember the exact error message, so I'm not sure if this helps: The problem was that Tomcat held the DB connection open infinitely, and the firewall after a while decided it wanted to drop the

RE: Tomcat and MySQL sync problems

If I remember correctly, MySQL basically disconnects and shutdowns after a certain amount of time. I remember doing something with a reload=true in the datasource to prevent this. Hopefully someone else may clue you in better, but you may want to check the datasource props and see if this is

Re: Tomcat 6.0.8 JSF 1.2 RI

I found the reason a few days ago: I overlooked that I had the jsp lib in 2 different locations, so they were loaded in different classloaders. Thanks to all replies. martind wrote: I am able to use JSF 1.2_03 RI inside Tomcat 6.0.8. Ensure you have the JSTL 1.2 also loaded. Martin

Re: Can servlets safely spawn threads?

If you are spawning threads from your servlet, make sure that they are cleaned up when the servlet is destroyed. Otherwise, you will have a thread leak. I have ran into this problem when the webapp is reloaded without restarting the server. Each leaked thread has a reference to its

datasource-realm troubles

Hello, i have some trouble using a datasource realm in tomcat 5.5.20, jdk 1.5.0_09. In META-INF/Context.xml i defined a datasource: Resource name=jdbc/mangos auth=Container type=javax.sql.DataSource maxActive=10 maxIdle=2 maxWait=1 username= password=

Re: Tomcat and MySQL sync problems

It appears your code is holding on to a connection to the database. Bad design practice. Review your code for any place that might keep hold of a connection between requests and make sure the connection is closed. Also, If you haven't done so yet, use a database connection pool. If using

Re: Tomcat and MySQL sync problems

Sorry about this message but I'm a little despaired. I create a JAR library with the business logic, I use Hibernate and MySQL. Everything work fine but when I try use the JAR from a WebApp using the bundled TomCat on NetBeans 5.5 I got an server error. I believe that the problem is that the

Re: datasource-realm troubles

I would guess from the outset that your Context.xml file isn't being used. Where are your putting it and what are you naming it? What's the name of your webapp when deployed? Quick checks: 1. It has to be named to match your webapp if your are storing it in Catalina/localhost and deploying an

RE: How do I increase performance on Tomcat?

| From: Gaurav Kushwaha [mailto:[EMAIL PROTECTED] | Sent: Monday, 29 January, 2007 06:11 | | I have an application that has been working fine for last half an year | or so. Recently the load has started increasing and the time it takes to | serve a request is going up significantly. When I

AW: datasource-realm troubles

Hello David, thanks for the reply. We are talking about your 2. description. The file is named context.xml and it is stored in the war`s META-INF directory. The full error output is: 106627 [http-8080-Processor24] DEBUG com.jmangos.beans.LoginBean - Validating given password. 106627

Re: How do I increase performance on Tomcat?

On 1/29/07, Nelson, Tracy M. [EMAIL PROTECTED] wrote: | From: Gaurav Kushwaha [mailto:[EMAIL PROTECTED] | Sent: Monday, 29 January, 2007 06:11 | | I have an application that has been working fine for last half an year | or so. Recently the load has started increasing and the time it takes to

Re: TCP Connection Aborted problems

We'll repeat the stresstest with subsequent threaddump tomorrow morning. However, I just experienced the same TCP Connections aborted scenario on another test server running the same web service ('/demo-e/servlet'), and I managed to get a threaddump from there: [2007-01-29 17:21:07] [info]

Re: Tomcat and MySQL sync problems

Not sure if it is the same problem, but we had similar issue and resolved it by increasing value of wait_timeout in /etc/my.cnf: wait_timeout=2147483647 I am not sure if the issue we were seeing was tied wth Tomcat or not though. Martin On 1/29/07, Chris Long [EMAIL PROTECTED] wrote: Hello,

RE: HTTP PUT - HOW TO CONFIG?

Hi Robert, Thanks for your help. After I added that readonly into web.xml, I can put files into /webapps/incoming. Right now it is ok for me. Because user ONLY can put files under /webapps/incoming dir. Also, in this way, tomcat does not require userID and

Re: session hijacking again

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 John, John Caron wrote: We plan on using SSL to do the initial authentication, but then use session ids without SSL for the data transfer. Okay, thanks for clarifying that. This is definitely a good thing to do, and it appears that session

RE: HTTP PUT - HOW TO CONFIG?

-Original Message- From: Zhan, Jimmy [mailto:[EMAIL PROTECTED] Sent: Monday, January 29, 2007 3:20 PM To: Tomcat Users List Subject: RE: HTTP PUT - HOW TO CONFIG? Hi Robert, Thanks for your help. After I added that readonly into web.xml, I can put files into

Re: Tomcat 6.0.8 JSF 1.2 RI

I found that with Tomcat 6.0.8, I didn't need to initialize the JspRuntimeContext, however my ELResolver is never actually hit. I placed print outs in the constructor and all the overridden methods of my ELResolver to determine if they were ever called. Only the constructor is ever called. The

Re: Tomcat and MySQL sync problems

Luiz Siqueira wrote: Sorry about this message but I'm a little despaired. I create a JAR library with the business logic, I use Hibernate and MySQL. Everything work fine but when I try use the JAR from a WebApp using the bundled TomCat on NetBeans 5.5 I got an server error. I believe that

Apache2, Tomcat5.5, mod_jk and HTTP content-type

I'm trying to connect Apache2 with mod_jk to Tomcat5.5. Almost everything seems to work. However, if I have cookies disabled, Tomcat will rewrite all urls to include ;jsessionid=X (which is I want and expect). Unfortunately, it seems as though Apache2 insists on determining the

Re: session hijacking again

John and Peter SE seems definitely O/T so please email me offline on this topic of Social Engineering..Perhaps this is a project which the government never discloses? Admittedly I have no information as to the definition and or implications of such a plan Thanks, Martin--

HP-UX Tomcat refuses connections after boot

Effect: Right after booting from HP-UX PA-RISC, Tomcat refuses connections. Description: No startup error messages are logged and processes are up and running. Checking /etc/rc.log: Starting Tomcat server Output from /sbin/rc3.d/S998Tomcat start: