Re: tomcat service public key

if logging in as tomcat was possible there wouldn't have been any problem. I think Chuck is right.. its all about getting a known user id use ssh.. Abhinav Shah wrote: are you sure that the tomcat user is on the list of users allowed to do ssh on the svn server.. one way to check is login

Re: tomcat service public key

Why don't you add the tomcat user to the ssh list of users.. Gagan Malik wrote: if logging in as tomcat was possible there wouldn't have been any problem. I think Chuck is right.. its all about getting a known user id use ssh.. Abhinav Shah wrote: are you sure that the tomcat user is

Re: tomcat service public key

this is exactly the problem.. how do I generate a private/public key pair for the user 'tomcat'.. Abhinav Shah wrote: Why don't you add the tomcat user to the ssh list of users.. Gagan Malik wrote: if logging in as tomcat was possible there wouldn't have been any problem. I think

R: tomcat service public key

You can easily solve this problem with the following steps: #Create the .ssh key directory mkdir /usr/share/tomcat5/.ssh #Assign ownership to tomcat chown tomcat /usr/share/tomcat5/.ssh I don't think further steps are necessary... Leandro -Messaggio originale- Da: Gagan Malik

Re: Multi-Level Context Paths

Andy Ee wrote: Other 2 questions: 1) Can I exclude the META-INF/context.xml file in the war file? This context.xml that will be copied to conf/Catalina/localhost after deployment, so that I can be sure this is not the problem to the setup of multi-level context path? Yes, you can. 2) When

Re: Any way to make tomcat send the disable caching headers on all responses?

Epithemeus wrote: What is happening in practice is that: the xml file is indeed updated but the graph being displayed is an older version (corresponding to the older .xml file which has now been over-written). I gather that this means tomcat is caching the xml files. I have tried including

Re: Any way to make tomcat send the disable caching headers on all responses?

Thanks, Ognjen. It works like a charm now! As you said, with the new parameter (current time, in the case that I used) it forces the client to reload the xml file. And this updates the graph as well. Regards, Epithemeus Ognjen Blagojevic-3 wrote: Epithemeus wrote: What is happening in

Re: Request Help

R.Sriram wrote: I am trying to host my servlet based solution in Network Solutions shared hosting service. In order test if I can use it, I downloaded Hello.java from their environment and compiled in my environment as MyHello.class. I tested their Hello.class (Hello.class compiled in their

Re: Request Help

2009/8/18 Ognjen Blagojevic ogn...@etf.bg.ac.rs R.Sriram wrote: I am trying to host my servlet based solution in Network Solutions shared hosting service. In order test if I can use it, I downloaded Hello.java from their environment and compiled in my environment as MyHello.class. I

Re: Garbage collector

This can be quite informative. jstat -gc pid 5s Ronald. Op maandag, 17 augustus 2009 17:02 schreef hruesga lord_dyna...@hotmail.com: Listers: We are trying to enable the garbage collector log for jvm to see what happens with our leak memory issue, i've already try to export CATALINA_OPTS

Flag to avoid starting a webapp defined in server.xml???

Hi, I have a few applications that share the same server.xml and all of them start tomcat, but some use only a few webapps. I want to reduce the startup time for these applications that only use a couple of webapps, so I was wondering if there is any way to set a flag to tell tomcat not to

Re: Flag to avoid starting a webapp defined in server.xml???

javier.rivas wrote: Hi, I have a few applications that share the same server.xml and all of them start tomcat, but some use only a few webapps. I want to reduce the startup time for these applications that only use a couple of webapps, so I was wondering if there is any way to set a flag

Re: Tomcat Logs and console .

Mohamed Shah wrote: Sorry If this is not interesting. I couldn't find all of the console contents in log files. If not available in log files can I manage the console to read the full contents somehow?. FYI I use old tomcat bundled with liferay tomcat(5.0) and I cannot upgrade due to some

Re: tomcat service public key

vi /etc/ssh/sshd_config AllowUsers tomcat Restart sshd service. Gagan Malik wrote: this is exactly the problem.. how do I generate a private/public key pair for the user 'tomcat'.. Abhinav Shah wrote: Why don't you add the tomcat user to the ssh list of users.. Gagan Malik

Enabling Persisting Sessions Tomcat 6

Hi I am wondering if someone can help me with my persisting sessions problem. I have this so far yet i am confused about where it goes, ive also created the table in the database: Manager className=org.apache.catalina.session.PersistentManager debug=0 saveOnRestart=true minIdleSwap=900

Re: Enabling Persisting Sessions Tomcat 6

Dean Chester wrote: Hi I have this so far yet I am confused about where it goes. The Manager element should be placed inside a Context element. The usual place for a Context element is inside a file called context.xml placed in the META-INF directory in your WAR. Mark

tomcat server hacked

First post, sorry if I'm breaking protocol. I could really use help tightening up security with the tomcat web server I'm running. A hacker got in and trashed a bunch of files and I'm scared to death it will happen again. I've been setting up a tomcat web server with the native apr library on

Re: Tomcat Logs and console .

Hi Mohamed, Please, use mailing list, not private mail. Others might be interested too. Could you post the content of the logs? Regards, Ognjen Mohamed Shah wrote: I use win xp sp 2. In Logs I can find only very small info. Not the full stack trace. thanks -Original Message-

RE: Tomcat Logs and console .

Hi, Actually I posted this on Friday. So only I used private. This is my log Aug 18, 2009 4:44:34 AM org.apache.catalina.core.AprLifecycleListener init INFO: The APR based Apache Tomcat Native library which allows optimal performance in production environments was not found on the

Re: tomcat server hacked

Hello Nick, probably someone of the tomcat developers will comment this related to tomcat but -/etc/ssh/ssh_host_key.pub file was modified (one key added, another deleted) This is owned by root and only root have access to modify it. Are you sure your root account is compromised? Best

Re: tomcat server hacked

just a quick shot. Have you run your tomcat as root and what is your kernel version? If you don't run your tomcat as root and have a more or less uptodate kernel without local root exploits, its highly unprobable that you got hacked via tomcat. Do you have anything that proves it anyway? :-)

Re: Tomcat Logs and console .

Log file looks ok. It is dirty with duplicate listeners errors. Can you try to solve that first? Regards, Ognjen Mohamed Shah wrote: Aug 18, 2009 4:44:44 AM org.apache.catalina.core.StandardContext addApplicationListener INFO: The listener

RE: tomcat server hacked

What does your tomcat-users.xml look like? (sans the p/w of course) -Original Message- From: Nick Knol [mailto:nickk...@gmail.com] Sent: Tuesday, August 18, 2009 8:45 AM To: users@tomcat.apache.org Subject: tomcat server hacked First post, sorry if I'm breaking protocol. I could

SSL error certificate question

First of all, is there a specific extension required for SSL certificates on an Apache/Tomcat server? i.e. Does it have to be a crt or a cert or ? Seems like I read that it needs to be PEM-encoded - that's about all I could find. Also, my error log is showing the below... Where should I start

Re: tomcat server hacked

Nick Knol wrote: First post, sorry if I'm breaking protocol. I could really use help tightening up security with the tomcat web server I'm running. A hacker got in and trashed a bunch of files and I'm scared to death it will happen again. I've been setting up a tomcat web server with the

RE: tomcat server hacked

From: BJ Selman [mailto:bjsel...@travelhost.com] Subject: RE: tomcat server hacked What does your tomcat-users.xml look like? (sans the p/w of course) Note that using the toy tomcat-users.xml for authentication is inappropriate for a secure environment. - Chuck THIS COMMUNICATION MAY

RE: tomcat server hacked

From: Leon Rosenberg [mailto:rosenberg.l...@googlemail.com] Subject: Re: tomcat server hacked Have you run your tomcat as root and what is your kernel version? According to the first post, Tomcat runs via jsvc with the userid Tomcat. If you don't run your tomcat as root and have a more or

Re: SSL error certificate question

BJ Selman wrote: First of all, is there a specific extension required for SSL certificates on an Apache/Tomcat server? i.e. Does it have to be a crt or a cert or ? Seems like I read that it needs to be PEM-encoded - that's about all I could find. Also, my error log is showing the

RE: Multi-Level Context Paths

Dear all, I reported having problem deploying my war file with multi-level context path on Tomcat 6.0.20. Beside the sitemesh issue, is it possible that the problem be due to JDK 1.5 or Java 5, that has issue understanding the symbol '#' in war filename. Ref:

Re: Multi-Level Context Paths

Andy Ee wrote: I would appreciate if anybody can tell if he/she has successfully deployed with multi-level context path. Yep. Works like a charm in 6.0.18 and 6.0.20. I tried having the context element (given below) inside server.xml and the multi-level context path works! Context

Re: Request Help

Thanks Peter. I am trying to find out from Network Solution what JDK version they are using to compile. All they are telling me is they use JServ 1.1.2 and JDK compatible to that. Do you know what version of JDK that would map to. Also, it wouldnt matter if they are using Tomcat as the servlet

Re: SSL Using IP Addresses

Hello - We did this actually. But I can't be sure we did it correctly. We created a new key using the IP address as the host, and replaced the a1as aliased key in Glassfish. We loaded that certificate into the client. But we got the same error. I did not look at the certificate to see if

RE: Multi-Level Context Paths

Hi Mark, Thank you and I will try disabling both the autoDeploy and deployOnStartup. I actually created sg#server#test.xml under Catalina/localhost/ and points docBase=/usr/local/apache-tomcat/sg#server#test.war. After I started up Tomcat, it deployed the war file and created sg#server#test

Installing SSL connector for Tomcat on Linux/Debian

Hello everybody, I'm trying to set up a SSL transport layer, but I'm coming up against some difficulties. Specifically, I followed all the steps requires and specified as in the Tomcat guide - adding some suggestions I found around on several web site for the installation of APR libraries - but

Exception Initializing Page Context

Hello list. I am working in a Win2003/CentOS 5.3 environment and have run into a Java error today that has me baffled. It is the first time that anyone here has seen this particular error. It appears to be insinuating that a connection is being lost and then something is trying to close it

Increasing Heap Size and Max Perm Size

Hi all, I'm trying to increase the sizes of the heap and of the max perm by passing the options with the values (in catalina.sh) JAVA_OPTS=$JAVA_OPTS -Xmx=100m -XX:MaxPermSize=350m -Dfile.encoding=UTF-8 but the VM cannot be created and from the catalina.out file I get this printout: Invalid

(newbie question) missing classs file?

Hi, I am new to tomcat and jsp. I appologize in advance my lack of knowledge, but I would appreciate some poninters. I am running tomcat 6.0.14 on redhat linux. After reading a few pages of documentation, I tried: http://localhost:8080/sample It rendered what's in

Re: (newbie question) missing classs file?

Are you reloading the pages from the server with the shift key? The pages might be locally cached from your browser. Dan On Tue, Aug 18, 2009 at 7:48 PM, Tena Sakai tsa...@gallo.ucsf.edu wrote: Hi, I am new to tomcat and jsp. I appologize in advance my lack of knowledge, but I would

RE: (newbie question) missing classs file?

Hi Dan, Are you reloading the pages from the server with the shift key? The pages might be locally cached from your browser. Shift or no shift, it makes no difference. I told my browser to dump the cache then hit pages again. No difference. I doubt this is a cache issue. If that's the case,

How do I modify a UserDatabase Resource from my webapp?

Hi, I am using Tomcat 5.5.27 and java 1.5 on an old redhat Linux machine. I have a UserDatabase Resource and a UserDatabaseRealm set up in server.xml and logins are working as expected. I exposed my Resource under name=UserDatabase. In my webapp code I tried invoking an operation using an

Re: (newbie question) missing classs file?

Consider also that once the application is loaded is memory, even if you cancel the classes, the application still works. I doubt that the JVM maintains in memory all the classes, all the times, but if your current usage of the heap is not ridiculous big, probably your class remains loaded. Dan

Re: Request Help

2009/8/18 R.Sriram sri...@rstech.net I am trying to find out from Network Solution what JDK version they are using to compile. All they are telling me is they use JServ 1.1.2 and JDK compatible to that. Do you know what version of JDK that would map to. No, as there are several

Re: R: tomcat service public key

Thanks.. although just creation of the .ssh directory didn't help much, I copied the contents of the .shh of the current user to /usr/share/tomcat5/.ssh and it worked. Although its not the ideal solution, but works well.. Leandro Dardini-3 wrote: You can easily solve this problem with the

Re: tomcat service public key

this didn't help.. Abhinav Shah wrote: vi /etc/ssh/sshd_config AllowUsers tomcat Restart sshd service. Gagan Malik wrote: this is exactly the problem.. how do I generate a private/public key pair for the user 'tomcat'.. Abhinav Shah wrote: Why don't you add the tomcat

RE: (newbie question) missing classs file?

Hi Dan, Consider also that once the application is loaded is memory, even if you cancel the classes, the application still works. I doubt that the JVM maintains in memory all the classes, all the times, but if your current usage of the heap is not ridiculous big, probably your class remains

Re: (newbie question) missing classs file?

I believe once a servlet is initialized in memory, it stays in and is re-used over and over. After removing the class, you'd have to reload the webapp to make the change show. --David Daniele Development-ML wrote: Consider also that once the application is loaded is memory, even if you cancel

RE: (newbie question) missing classs file?

Hi David, you'd have to reload the webapp to make the change show. Would you mind telling me how I would do that? I just restarted tomcat and hit the same pages. No changes. I mean it shows double Hello! and I see no class file generated anywhere under $CATALINA_HOME/webapps/sample directory.

RE: (newbie question) missing classs file?

did you look at $TOMCAT_HOME/work/Catalina/localhost/WEBAPPNAME/org/apache/jsp/ JSPNAME_jsp.java JSPNAME_jsp.class Martin Gainty __ Verzicht und Vertraulichkeitanmerkung/Note de déni et de confidentialité Diese Nachricht ist vertraulich. Sollten

Re: Increasing Heap Size and Max Perm Size

the system actually gave you the answer: Invalid maximum heap size: -Xmx=100m Could not create the Java virtual machine. If you are going to give the PermSpace 350M, you must have a lot of memory, so giving half gb for heap won't heart: JAVA_OPTS=$JAVA_OPTS -Xmx=512m -XX:MaxPermSize=350m

RE: (newbie question) missing classs file?

Yeeeha! That is it! Thank you, Martin Gainty. Being a newbie, I had no idea such deep secret existed. Since the distribution contained a directory: $CATALINA_HOME/webapps/sample/WEB-INF/classes with a class file, I was completely blinded to look elsewhere. Regards, Tena Sakai

Re: Multi-Level Context Paths

Andy Ee wrote: Hi Mark, Thank you and I will try disabling both the autoDeploy and deployOnStartup. I actually created sg#server#test.xml under Catalina/localhost/ and points docBase=/usr/local/apache-tomcat/sg#server#test.war. After I started up Tomcat, it deployed the war file and

RE: Multi-Level Context Paths

Andy can you display contents of WEB-INF/sitemesh.xml thanks, Martin Gainty __ Verzicht und Vertraulichkeitanmerkung/Note de déni et de confidentialité Diese Nachricht ist vertraulich. Sollten Sie nicht der vorgesehene Empfaenger sein, so bitten

Re: Exception Initializing Page Context

Gwen Way wrote: java.lang.IllegalStateException: Cannot create a session after the response has been committed Seems pretty clear. Creating a session requires setting some headers (to send the session cookie to the client). You can't do that after the response has been committed (usually

how to host webapp via https

Hi, I'm hosting a webapp on tomcat5 via http. I've simply copied the .war file to the webapps folder. How can I host this via https? I'm running tomcat5 on RHEL.. -- View this message in context: http://www.nabble.com/how-to-host-webapp-via-https-tp25034284p25034284.html Sent from the Tomcat

Re: tomcat service public key

Gagan Malik wrote: this is exactly the problem.. how do I generate a private/public key pair for the user 'tomcat'.. A bit guessing here.. Your problem may be due to the fact that you cannot login as user tomcat to create its keys, because the user tomcat is disabled (not allowed to login)

Re: Tomcat Logs and console .

Ognjen Blagojevic wrote: Log file looks ok. It is dirty with duplicate listeners errors. Can you try to solve that first? Doesn't it also show that port 8080 is already in use by something else, and it cannot start because of that ? (or is that a byproduct of the other error ?)

Re: Increasing Heap Size and Max Perm Size

Daniele Development-ML wrote: Hi all, I'm trying to increase the sizes of the heap and of the max perm by passing the options with the values (in catalina.sh) JAVA_OPTS=$JAVA_OPTS -Xmx=100m -XX:MaxPermSize=350m -Dfile.encoding=UTF-8 Try without the = signs ? -Xmx100m

Re: how to host webapp via https

Hi, I'm hosting a webapp on tomcat5 via http. I've simply copied the .war file to the webapps folder. How can I host this via https? I'm running tomcat5 on RHEL.. Hi Gagan, Have you read the SSL documentation? This is the best place to start.

RE: Multi-Level Context Paths

Hi Martin, Under WEB-INF/sitemesh.xml: sitemesh property name=decorators-file value=/WEB-INF/decorators.xml/ excludes file=${decorators-file}/ page-parsers parser default=true class=com.opensymphony.module.sitemesh.parser.HTMLPageParser/ parser content-type=text/html

RE: Multi-Level Context Paths

did you check both of these files exist? /usr/local/apache-tomcat/webapps/sg/WEB-INF/sitemesh.xml/usr/local/apache-tomcat/webapps/sg/WEB-INF/decorators.xml if so please display contents of /usr/local/apache-tomcat/webapps/sg/WEB-INF/decorators.xml thanks, Martin Gainty

RE: Multi-Level Context Paths

Hi Martin, My sg#server#test.xml deployed the sg#server#test.war file and created the project dir as /webapps/sg#server#test/ instead of /webapps/sg#server#test/ Under /webapps/sg#server#test/WEB-INF/decorators.xml decorators defaultdir=/decorators excludes

RE: Multi-Level Context Paths

From: Andy Ee [mailto:and...@sysatwork.com] Subject: RE: Multi-Level Context Paths My sg#server#test.xml deployed the sg#server#test.war file and created the project dir as /webapps/sg#server#test/ instead of /webapps/sg#server#test/ I know my eyes are getting old, but those sure look the

RE: Multi-Level Context Paths

Hi Chunk, Sorry about it. I meant the project dir created /webapps/sg#server#test/ instead of /webapps/sg/server/test/ Anyways, I got the issues resolved by specifying context elements under server.xml and turned off startupDeploy to prevent double deployment. That is the best way out for me

RE: (newbie question) missing classs file?

From: Tena Sakai [mailto:tsa...@gallo.ucsf.edu] Subject: RE: (newbie question) missing classs file? Being a newbie, I had no idea such deep secret existed. It's not a deep secret. Look at the JSP doc: http://tomcat.apache.org/tomcat-6.0-doc/jasper-howto.html and at conf/web.xml for the JSP

RE: (newbie question) missing classs file?

From: Tena Sakai [mailto:tsa...@gallo.ucsf.edu] Subject: RE: (newbie question) missing classs file? That aside, can you tell me how I can clear what's in the heap? You can't, other than by restarting the JVM. As long as there's a reference to an object, it will stay in the heap. You can

RE: (newbie question) missing classs file?

From: Daniele Development-ML [mailto:daniele@googlemail.com] Subject: Re: (newbie question) missing classs file? I doubt that the JVM maintains in memory all the classes, all the times Once referenced, a servlet, listener, filter, valve, or realm class will remain loaded until the

RE: how to host webapp via https

From: Gagan Malik [mailto:gaganma...@dev.java.net] Subject: how to host webapp via https How can I host this via https? Besides reading Tomcat's SSL doc, you also need to read the security section of the servlet spec. Any areas of the webapp that you want protected by HTTPS need to have a

RE: (newbie question) missing classs file?

Hi Chuck, Thanks for your note, I think I understand. I preface the remark below once again, with being a newbie: I hadn't gotten around to read everything I should have, but I was getting confused by the fact that a class file was in $CATALINA_HOME/webapps/sample/WEB-INF/classes directory and

RE: (newbie question) missing classs file?

Hi Chuck, The Tomcat manager app is the easiest way. Perhaps, but that was beyond what a newbie meager brain could comprehend. When I delete the webapps/sample/WEB-INF/classes/mypackage/Hello.class file and restart Tomcat, any attempt to reference the servlet example fails with a 404 (as