Tomcat startup exception

2009-11-09 Thread Milan Tomic
I got this excpetion while starting Tomcat 6.0.20: INFO: Starting service Catalina 9.11.2009 9:22:50 org.apache.catalina.core.StandardEngine start INFO: Starting Servlet Engine: Apache Tomcat/6.0.20 java.lang.reflect.InvocationTargetException     at

A question about mod_jk 1.2.28 configuration

2009-11-09 Thread thomas2004
I newly installed the mod_jk 1.2.28 and since then got problem (see below). ** We have a web application deployed on Jboss (RH Linux OS). The access to the web application is via a Apache Httpd Web Server. One of the function of this web application is one can online generate

Re: errno 110 in mod_jk

2009-11-09 Thread Rainer Jung
On 09.11.2009 03:13, Mohit Anchlia wrote: Thanks. Looks like we are hitting the same bug. I am still looking for an answer to one of my questions that I posted earlier. To narrow down I just left one node running and started the test. When I look at JkStatus worker I see that even though

Re: Tomcat startup exception

2009-11-09 Thread Pid
On 09/11/2009 09:40, Milan Tomic wrote: I got this excpetion while starting Tomcat 6.0.20: INFO: Starting service Catalina 9.11.2009 9:22:50 org.apache.catalina.core.StandardEngine start INFO: Starting Servlet Engine: Apache Tomcat/6.0.20 java.lang.reflect.InvocationTargetException

Re: Tomcat startup exception

2009-11-09 Thread Milan Tomic
Hi Pid, Post the full stacktrace please. At the end of this mail. Your server.xml with comments removed At the end of this mail. Is this a vanilla install? I have just installed it and moved some apps from tomcat 5.0. On which OS/version? Windows 2003 Server Thank you! :) LOG: Using

Re: Tomcat startup exception

2009-11-09 Thread Milan Tomic
Oh, I have missed this line: Caused by: java.lang.NoClassDefFoundError: org/apache/commons/logging/LogFactory it seems that Log4J is missing. Best regards, Milan - Original Message From: Milan Tomic tomicmi...@yahoo.com To: Tomcat Users List users@tomcat.apache.org Sent: Mon,

Deploying and building a war file

2009-11-09 Thread Ziggy
Hi all, I've got a query on the way web applications are deployed. I have an application that has several jsp files and serlvets that are in WEB-INF/classes. When i deploy the application all i do is do a checkout on CVS, make the changes, rebuild the war using ANT and redeploy manually. This

Re: Tomcat startup exception

2009-11-09 Thread Pid
On 09/11/2009 11:49, Milan Tomic wrote: Oh, I have missed this line: Caused by: java.lang.NoClassDefFoundError: org/apache/commons/logging/LogFactory it seems that Log4J is missing. Best regards, Milan - Original Message From: Milan Tomictomicmi...@yahoo.com To: Tomcat Users

RE: Deploying and building a war file

2009-11-09 Thread Martin Gainty
ant war task http://ant.apache.org/manual/CoreTasks/war.html or maven-war-plugin http://maven.apache.org/plugins/maven-war-plugin/examples/war-overlay.html (in the case of maven you MUST adhere to the directory layout suggested) either build environment will perform these tasks for you you can

RE: Tomcat startup exception

2009-11-09 Thread Martin Gainty
this is my log4j $CATALINA_HOME/lib 09/14/2006 06:04 AM 367,444 log4j-1.2.14.jar Martin Gainty __ Verzicht und Vertraulichkeitanmerkung/Note de déni et de confidentialité Diese Nachricht ist vertraulich. Sollten Sie nicht der

Nagios3 and Tomcat6 configuration under Apache2.2

2009-11-09 Thread Paolo Santarsiero
Hi, I have a Tomcat6 cluster under Apache2.2. I'd like to monitor the system and so I want to use nagios3 but I don't know how configure VirtualHosts for Tomcat and Nagios under Apache ( I use Ubuntu so I have /etc/apache2/ports.conf and /etc/apache2/sites-enabled/000-default). I hope you can

[SECURITY] CVE-2009-3548 Apache Tomcat Windows Installer insecure default administrative password

2009-11-09 Thread Mark Thomas
CVE-2009-3548: Apache Tomcat Windows Installer insecure default administrative password Severity: Low Vendor: The Apache Software Foundation Versions Affected: Tomcat 5.5.0 to 5.5.28 Tomcat 6.0.0 to 6.0.20 The unsupported Tomcat 3.x, 4.0.x, 4.1.x and 5.0.x versions may be also affected.

Re: Windows distribution vunerability

2009-11-09 Thread Mark Thomas
Tim Funk wrote: Confirmed. The docs are not in sync with what the installer does. We'll get this fixed in a future release. In future, please report possible security issues privately rather than publicly. -Tim To complete the thread, this was announced as CVE-2009-3548. Mark David

Re: Tomcat startup exception

2009-11-09 Thread Pid
On 09/11/2009 13:14, Martin Gainty wrote: this is my log4j $CATALINA_HOME/lib 09/14/2006 06:04 AM 367,444 log4j-1.2.14.jar My cat's name is Mittens. p Martin Gainty __ Verzicht und Vertraulichkeitanmerkung/Note de déni et de

Re: Nagios3 and Tomcat6 configuration under Apache2.2

2009-11-09 Thread Pid
On 09/11/2009 13:45, Paolo Santarsiero wrote: Hi, I have a Tomcat6 cluster under Apache2.2. I'd like to monitor the system and so I want to use nagios3 but I don't know how configure VirtualHosts for Tomcat and Nagios under Apache ( I use Ubuntu so I have /etc/apache2/ports.conf and

Re: Tomcat startup exception

2009-11-09 Thread André Warnier
Pid wrote: My cat's name is Mittens. and mimsy were the borogroves. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Nagios3 and Tomcat6 configuration under Apache2.2

2009-11-09 Thread André Warnier
Pid wrote: On 09/11/2009 13:45, Paolo Santarsiero wrote: Hi, I have a Tomcat6 cluster under Apache2.2. I'd like to monitor the system and so I want to use nagios3 but I don't know how configure VirtualHosts for Tomcat and Nagios under Apache ( I use Ubuntu so I have /etc/apache2/ports.conf and

Re: Tomcat startup exception

2009-11-09 Thread Pid
On 09/11/2009 15:46, André Warnier wrote: and mimsy were the borogroves Aha! You've employed the Inclined Sandle Variation presuming that will flummox me; but I have the perfect riposte: marmoset singlehat. I think you'll find you've been boxed. p

RE: Tomcat startup exception

2009-11-09 Thread Caldarale, Charles R
From: Pid [mailto:p...@pidster.com] Subject: Re: Tomcat startup exception I think you'll find you've been boxed. Goo goo g'joob. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received

[SECURITY] CVE-2009-3555 SSL Man-In-The-Middle attack

2009-11-09 Thread Mark Thomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 A vulnerability in the TLS protocol has recently been made public [1] that allows an attacker to inject arbitrary requests into an TLS stream. The current understanding of the Tomcat developers is as follows: BIO NIO connectors using JSSE These

How do I set the location of where catalina.out goes

2009-11-09 Thread Campbell, Lance
Tomcat 6 How do I set the location and file name of catalina.out? Thanks, Lance Campbell Project Manager/Software Architect/DBA Web Services at Public Affairs 217-333-0382

RE: How do I set the location of where catalina.out goes

2009-11-09 Thread Caldarale, Charles R
From: Campbell, Lance [mailto:la...@illinois.edu] Subject: How do I set the location of where catalina.out goes How do I set the location and file name of catalina.out? The catalina.out file is not used directly by Tomcat itself. Rather, it's a redirection of stdout and stderr set up by

RE: How do I set the location of where catalina.out goes

2009-11-09 Thread Campbell, Lance
It just occurred to me to use a symbolic link. That works great. Thanks, Lance Campbell Project Manager/Software Architect/DBA Web Services at Public Affairs 217-333-0382 -Original Message- From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] Sent: Monday, November 09,

Identifying Clients via SSL Certificates

2009-11-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 All, I've been playing around with client SSL certificates, not for authentication per se, but as a gateway to a relaxed authentication mechanism for one of our webapps. I have a client SSL cert working (see my previous thread mod_jk Client SSL

Re: Deploying and building a war file

2009-11-09 Thread Ken Bowen
If you use Eclipse (www.eclipse.org/ free; runs on Wins/Mac/Linux) with the web plugins, it records your deploy target, and allows you to deploy with either a war file, or in exploded form. In the latter case, you can usually leave your web server running, make a code change, save the

Re: Want to customise the tomcat's session logic

2009-11-09 Thread Martin Choma
Ok, i think i see what you mean. As far as I know there is no quickwin for that. Web application suffer with this disease - that mean sharing session over tabs. You have got three choices to deal with that. A) You dont mind :) B) You will prevent to work in multitabs over one session C) You choose

Re: A question about mod_jk 1.2.28 configuration

2009-11-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Thomas, On 11/9/2009 5:27 AM, thomas2004 wrote: We have a web application deployed on Jboss (RH Linux OS). The access to the web application is via a Apache Httpd Web Server. One of the function of this web application is one can online generate

Tomcat Coyote HTTP11Protocol Pause

2009-11-09 Thread Arunkumar Janarthanan
on tomcat server instances, they were giving below errors on all 3 machines. Below are the config details. Tomcat 5.5.9 java version 1.5.0_14 Java(TM) 2 Runtime Environment, Standard Edition (build 1.5.0_14-b03) Java HotSpot(TM) Server VM (build 1.5.0_14-b03, mixed mode) Solaris 10

Re: Tomcat startup exception

2009-11-09 Thread André Warnier
Caldarale, Charles R wrote: From: Pid [mailto:p...@pidster.com] Subject: Re: Tomcat startup exception I think you'll find you've been boxed. Goo goo g'joob. Sirs, you've got me smacked, two episodes ago already. In my defense, I'll quote Samuel Clemens : To any foreigner, English is

RE: Tomcat startup exception

2009-11-09 Thread Caldarale, Charles R
From: André Warnier [mailto:a...@ice-sa.com] Subject: Re: Tomcat startup exception Goo goo g'joob. Sirs, you've got me smacked, two episodes ago already. Hint: I am the Walrus (Lennon, not Carroll - although there are numerous similarities). - Chuck THIS COMMUNICATION MAY CONTAIN

RE: Tomcat Coyote HTTP11Protocol Pause

2009-11-09 Thread Caldarale, Charles R
From: Arunkumar Janarthanan [mailto:arunkumar.webad...@gmail.com] Subject: Tomcat Coyote HTTP11Protocol Pause on tomcat server instances, they were giving below errors on all 3 machines. What errors? All the messages are marked INFO. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL

WebappClassLoader and undeploy

2009-11-09 Thread Gerwood Stewart
I originally started down this path trying to find a memory leak (involving commons-logging etc). I now have a more general question: I've created an almost empty context. It contains 1 servlet which contains an arraylist (just to create a large object that is easier to see in memory graphs)

Re: WebappClassLoader and undeploy

2009-11-09 Thread Mark Thomas
Gerwood Stewart wrote: Tomact seems to have retained 1 on the WebappClassLoader instances. I have two questions at this point: 1. From the Javadocs both WebappClassLoader and WebappLoader are class loaders. What are the differences and why does Tomcat use both? WebappClassLoader is the

Re: Tomcat startup exception

2009-11-09 Thread Pid
On 09/11/2009 21:04, Caldarale, Charles R wrote: From: André Warnier [mailto:a...@ice-sa.com] Subject: Re: Tomcat startup exception Goo goo g'joob. Sirs, you've got me smacked, two episodes ago already. Hint: I am the Walrus (Lennon, not Carroll - although there are numerous

RE: Identifying Clients via SSL Certificates

2009-11-09 Thread Jorge Medina
OpenSSL hashes the subject name. This is used in OpenSSL to form an index to allow certificates in a directory to be looked up by subject name. but that seems weak. http://www.openssl.org/docs/apps/x509.html#http://www.openssl.org/docs/apps/verify.html# -Original Message-

Secure login only, not rest of app

2009-11-09 Thread Robert Denison
Hi all, I am trying to have setup my tomcat webapp to be secure for login only. It works as you'd expect if the security-constraint for /* is unsecure and if I make it secure (using CONFIDENTIAL) for /*. However if I try to make it secure only for the login page and unsecure elsewhere

Re: Want to customise the tomcat's session logic

2009-11-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Arvind, On 11/7/2009 11:35 PM, S Arvind wrote: is it possible to provide costume sessionid while creating session.? so that different time when session needs to be created i can create new sessionid and store it in cookie. No, you can't customize

Re: WebappClassLoader and undeploy

2009-11-09 Thread Elli Albek
Managing class loaders is done in the JVM. Tomcat cannot force the JVM to garbage collect class loaders, in the same way that it cannot force the JVM to garbage collect any object. If the class loader is unreachable, and all other objects that this class loader provided are also unreachable, then

RE: WebappClassLoader and undeploy

2009-11-09 Thread Jorge Medina
Does the JVM perform class unloading by default? I usually add the option -XX:+CMSClassUnloadingEnabled so that classes also get garbage collected. (Otherwise I was running into out of PermGen memory space) Would that solve your problem? -Original Message- From: Elli Albek

Re: Secure login only, not rest of app

2009-11-09 Thread Pid
On 09/11/2009 22:33, Robert Denison wrote: Hi all, I am trying to have setup my tomcat webapp to be secure for login only. It works as you'd expect if the security-constraint for /* is unsecure and if I make it secure (using CONFIDENTIAL) for /*. However if I try to make it secure only for the

RE: WebappClassLoader and undeploy

2009-11-09 Thread Caldarale, Charles R
From: Jorge Medina [mailto:jmed...@e-dialog.com] Subject: RE: WebappClassLoader and undeploy Does the JVM perform class unloading by default? Usually. However, the JVM version and the choice of GC algorithm may make it impossible to unload classes. For example, the concurrent collectors

RE: WebappClassLoader and undeploy

2009-11-09 Thread Gerwood Stewart
Mark 2. Why would Tomcat be cleaning up the WebappLoader instance everytime successfully but seems to 'hang-on' to the WebappClassLoader instance? My money is on it being JVM code rather than Tomcat code that is hanging onto the WebappClassLoader. Are you testing with JDK 1.6.0_15 or later by

RE: WebappClassLoader and undeploy

2009-11-09 Thread Gerwood Stewart
Elli I understand most of this. I do several things such as forcing a GC before doing the heap dump, from what you are say this may not be enough? Either way I'm not looking for an instance of the class to simply be there I'm looking at the GC Roots. I also tried an additional step of after

Re: WebappClassLoader and undeploy

2009-11-09 Thread Mark Thomas
Gerwood Stewart wrote: Mark 2. Why would Tomcat be cleaning up the WebappLoader instance everytime successfully but seems to 'hang-on' to the WebappClassLoader instance? My money is on it being JVM code rather than Tomcat code that is hanging onto the WebappClassLoader. Are you testing

Re: WebappClassLoader and undeploy

2009-11-09 Thread Mark Thomas
Gerwood Stewart wrote: Elli I understand most of this. I do several things such as forcing a GC before doing the heap dump, from what you are say this may not be enough? Either way I'm not looking for an instance of the class to simply be there I'm looking at the GC Roots. I also

RE: WebappClassLoader and undeploy

2009-11-09 Thread Gerwood Stewart
Mark Thanks. I suppose I'd better get back to identifying the real problems then. :D Gerwood From: Mark Thomas [ma...@apache.org] Sent: Tuesday, 10 November 2009 10:48 AM To: Tomcat Users List Subject: Re: WebappClassLoader and undeploy Gerwood Stewart

Re: WebappClassLoader and undeploy

2009-11-09 Thread Mark Thomas
Gerwood Stewart wrote: Mark Thanks. I suppose I'd better get back to identifying the real problems then. :D See my other mail - it has a fix for the problem you are seeing. The fix even has comments so you'll get an explanation too :) Mark Gerwood

Re: Tomcat Coyote HTTP11Protocol Pause

2009-11-09 Thread Arunkumar Janarthanan
There was no other error reported apart from sequence of Pause, stop destroyed messages from catalina. Please advice. Arun J On Mon, Nov 9, 2009 at 4:16 PM, Caldarale, Charles R chuck.caldar...@unisys.com wrote: From: Arunkumar Janarthanan [mailto:arunkumar.webad...@gmail.com] Subject:

Re: WebappClassLoader and undeploy

2009-11-09 Thread Elli Albek
Thomas, what is the issue with javax.imageio? Do they really use context class loader for loading static variables? - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail:

RE: Tomcat Coyote HTTP11Protocol Pause

2009-11-09 Thread Caldarale, Charles R
From: Arunkumar Janarthanan [mailto:arunkumar.webad...@gmail.com] Subject: Re: Tomcat Coyote HTTP11Protocol Pause There was no other error reported apart from sequence of Pause, stop destroyed messages from catalina. Something shut down Tomcat, and what you see is the normal result of that.

RE: Want to customise the tomcat's session logic

2009-11-09 Thread Caldarale, Charles R
From: Christopher Schultz [mailto:ch...@christopherschultz.net] Subject: Re: Want to customise the tomcat's session logic No, you can't customize the session id Well, you can, sort of. The StandardManager can be configured to use a specific algorithm for the message digest calculation. If

Re: [OT] Tomcat startup exception

2009-11-09 Thread André Warnier
Pid wrote: On 09/11/2009 21:04, Caldarale, Charles R wrote: From: André Warnier [mailto:a...@ice-sa.com] Subject: Re: Tomcat startup exception Goo goo g'joob. Sirs, you've got me smacked, two episodes ago already. Hint: I am the Walrus (Lennon, not Carroll - although there are numerous

Re: Want to customise the tomcat's session logic

2009-11-09 Thread André Warnier
Christopher Schultz wrote: I wish you'd tell us what the heck you're trying to do because I'm certain there's an easier way to do it. Like maybe just add an attribute to the session, containing the path where the session was begat ? (if I remember the original exposé correctly)

remote debug

2009-11-09 Thread maven apache
hi: I am so sorry to ask this problem again but I do can not make it work. I have seen the faq, and the doc pages,also I go to the goole to search but .. I am using tomcat6.0.zip,and my project is managed by maven,so the web module I do not know how to debug,although I know how to debug a

Re: Deploying and building a war file

2009-11-09 Thread Ziggy
Hi Ken, I do use eclipse but only for development. I cant really deploy from eclipse for several reasons. One of them being that the deployment server is a different machine from where i do the development. Thanks On Mon, Nov 9, 2009 at 7:12 PM, Ken Bowen kbo...@als.com wrote: If you use

Re: A question about mod_jk 1.2.28 configuration

2009-11-09 Thread thomas2004
Hi, -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Just to confirm: you have a single request that takes 20-40 minutes to fulfill? Or do you issue a request to generate the report and then, later, issue a request to retrieve the (already-generated) report? I issue a request to generate the