Re: jsvc degrades performance in production

2009-02-26 Thread Leon Rosenberg
just a question, if you are behind a loadbalancer, why wouldn't your just run it as non-root user on a non-privelleged port without jsvc? regards Leon On Thu, Feb 26, 2009 at 3:31 AM, B.V. Prasad hi...@yahoo.com wrote: I am running Tomcat 6 on a group of Linux servers behind a loadbalancer.

Re: jsvc degrades performance in production

2009-02-26 Thread Peter Stavrinides
Hi, I have read about similar issues in some old posts, and it appears to be related to the compilation of jsvc, you need to make sure it points to your JDK. Check what parameters you use when building jsvc. What version of Java are you using? its also possible that its picking up a jvm that

Re: how

2009-02-26 Thread Ognjen Blagojevic
nicumarius wrote: what should I do to not use port number when writting the address of a page on the Apache server? Do you want to use: http://server.com/app instead of http://server.com:8080/app ? If this is the case than you need to have a web server (either Apache HTTPD or Apache

Re: very slow class loading on initial JSP/servlet request after restart

2009-02-26 Thread André Warnier
Sam Hokin wrote: André Warnier wrote: What in this directory path is (are) a symlink(s) ? /home/sites/ims/jcms/webapps/ROOT/WEB-INF/classes/org/apache/jsp/test6_jsp.class There are no symlinks in that path. Then the question is : why is that thing doing lstat's ? (I mean in the trace list

problems solved restarting tomcat

2009-02-26 Thread Laura Bartolomé
Hi again... We have problems with our webpage, suddenly it doens't load and an error message appears (I can't told you the exact error showed cause I couldn't see it, but I have to believe the boss... ). If we restart Tomcat then it turns on again working correctly! We have Tomcat 6 like a

RE: tomcat restart remotely

2009-02-26 Thread Ilya Kazakevich
You can use VPN than:) But RDP (remote desktop) is better, because RPC calls used in all MMC (management consoles) are designed for local network and work pretty slow on the Internet. Remote desktop connection (mstsc) is the best solution, I think. -Original Message- From: Laura

RE: Using SSL tomcat

2009-02-26 Thread Ali Kassem
Hi, Do you know the complete cycle of how to configure and apache server with modSSL and openSSL to install and get the Certificates from a clients to the sever. Best regards, Ali Kassem Project Manager IT Dept. Banque Du Liban Email: akas...@bdl.gov.lb alikasse...@hotmail.com Phone: 961

Re: problems solved restarting tomcat

2009-02-26 Thread David Smith
It looks like your web application is trying to convert a string to a long (a type of number similar to an integer, but bigger) at line 49 in se.purpur.roach.web.pub.action.PublicArticleAction, but the string it's trying to convert is null. On a guess, this is related to a form submission and a

Re: problems solved restarting tomcat

2009-02-26 Thread Laura Bartolomé
Ok, and the question is: is possible than this error makes Tomcat doesn't work and we need to restart it??? Thanks for your help David Smith escribió: It looks like your web application is trying to convert a string to a long (a type of number similar to an integer, but bigger) at line 49 in

Re: problems solved restarting tomcat

2009-02-26 Thread David Smith
Normally no, but then again I don't know a lot about your software. Anything I suggest would be pure conjecture. --David Laura Bartolomé wrote: Ok, and the question is: is possible than this error makes Tomcat doesn't work and we need to restart it??? Thanks for your help David Smith

Re: problems solved restarting tomcat

2009-02-26 Thread Laura Bartolomé
ok... :( some idea of where can I get information about this problem? I mean the problem that leaves Tomcat without working David Smith escribió: Normally no, but then again I don't know a lot about your software. Anything I suggest would be pure conjecture. --David Laura Bartolomé wrote:

RE: problems solved restarting tomcat

2009-02-26 Thread Caldarale, Charles R
From: Laura Bartolomé [mailto:la...@secways.com] Subject: Re: problems solved restarting tomcat Ok, and the question is: is possible than this error makes Tomcat doesn't work and we need to restart it??? Probably not that error directly, but the failure in properly handling the request

Re: Request not forwarded to login page with security-constraint after session time-out

2009-02-26 Thread Gregor Schneider
Marcel, On Thu, Feb 26, 2009 at 12:16 AM, Marcel Stör mar...@frightanic.com wrote: [Problem] Upon session time-out the request is not forwarded to the login page (form based auth). Nothing happens on the UI. However, forwarding to the login page does work during the initially login into the

Re: Request not forwarded to login page with security-constraint after session time-out

2009-02-26 Thread Marcel Stör
Gregor Schneider wrote: Marcel, On Thu, Feb 26, 2009 at 12:16 AM, Marcel Stör mar...@frightanic.com wrote: [Problem] Upon session time-out the request is not forwarded to the login page (form based auth). Nothing happens on the UI. However, forwarding to the login page does work during the

Re: problems solved restarting tomcat

2009-02-26 Thread David Smith
Your options are pretty limited -- 1. Talk to the developer of your webapp, 2. Hire another developer if the original isn't available, or 3. Learn Java and web application development with Struts (that's the framework your webapp is using), then look at the source code and debug it yourself.

Re: very slow class loading on initial JSP/servlet request after restart

2009-02-26 Thread Sam Hokin
Caldarale, Charles R wrote: I'll poke around in the webapp classloader to see if I can find anything interesting, but in the meantime, is there a /net directory on the problematic server? If there is and it targets a remote file system, that might explain the long delay on these stat()

Re: very slow class loading on initial JSP/servlet request after restart

2009-02-26 Thread Sam Hokin
Sam Hokin wrote: Caldarale, Charles R wrote: I'll poke around in the webapp classloader to see if I can find anything interesting, but in the meantime, is there a /net directory on the problematic server? If there is and it targets a remote file system, that might explain the long delay on

session.isNew() not thread safe?

2009-02-26 Thread Jakob Ericsson
Hello, We are experiencing some thread/race condition problems with HttpSession isNew() for Tomcat 6 (specifically for 6.0.18 but we have seen the problem in prior versions too). We narrowed it down to a small example. The flow is quite simple. 1. Request first.jsp 2. Request second.jsp

RE: jsvc degrades performance in production

2009-02-26 Thread Anthony J. Biacco
In my experience using jsvc with a non-root user, you can't provide the -server argument. I tried it, because I too also thought I was running -clients, and even though it doesn't say it (unless you turn on debugging to see the actual processed startup switches), jsvc will use the server jvm

RE: very slow class loading on initial JSP/servlet request after restart

2009-02-26 Thread Caldarale, Charles R
From: Jorge Medina [mailto:jmed...@e-dialog.com] Subject: RE: very slow class loading on initial JSP/servlet request after restart Just for curiosity, Is / included in your classpath ? Note that the classpath of interest is the one JDT uses, not any global one or any associated with

Re: very slow class loading on initial JSP/servlet request after restart

2009-02-26 Thread Sam Hokin
Caldarale, Charles R wrote: Once you have your test Tomcat set up on the problematic server, try adding this line to the conf/logging.properties file: org.apache.jasper.level = ALL That will display a *lot* of information about what's going on during JSP compilation. One thing in particular

Re: very slow class loading on initial JSP/servlet request after restart

2009-02-26 Thread André Warnier
Sam Hokin wrote: Caldarale, Charles R wrote: Once you have your test Tomcat set up on the problematic server, try adding this line to the conf/logging.properties file: org.apache.jasper.level = ALL That will display a *lot* of information about what's going on during JSP compilation. One

Re: very slow class loading on initial JSP/servlet request after restart

2009-02-26 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mark, On 2/25/2009 4:42 AM, Mark Thomas wrote: Ok. To summarise when you include net.ims.jcms.* in your imports the page compiles quickly but takes ages to respond to the first request. I wonder if this is related to loading a specific class in

Re: very slow class loading on initial JSP/servlet request after restart

2009-02-26 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sam, On 2/26/2009 10:50 AM, Sam Hokin wrote: Caldarale, Charles R wrote: I'll poke around in the webapp classloader to see if I can find anything interesting, but in the meantime, is there a /net directory on the problematic server? If there is

RE: very slow class loading on initial JSP/servlet request afterrestart

2009-02-26 Thread Caldarale, Charles R
From: Sam Hokin [mailto:s...@ims.net] Subject: Re: very slow class loading on initial JSP/servlet request afterrestart Sure enough, / appears in the classpath for the ROOT webapp, So that appears to be the sole remaining question: why is there a / in JDT's classpath? Do you have a

Re: Problem with sessions on a fedora 10 machine

2009-02-26 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Noam, On 2/24/2009 5:22 PM, Noam Aigerman wrote: Hi Chris, I managed to isolate the issue - you were close with your last guess :) - in proxy_ajp.conf I mapped my webapp by doing: ProxyPass / ajp://localhost:8009/Noam So whoever comes to my

RE: very slow class loading on initial JSP/servlet request afterrestart

2009-02-26 Thread Caldarale, Charles R
From: Caldarale, Charles R Subject: RE: very slow class loading on initial JSP/servlet request afterrestart Do you have a CLASSPATH environment variable set for the Tomcat process? (You shouldn't.) Or is there a plain / in the -cp argument in the Tomcat startup script? Or has

Re: how

2009-02-26 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 GIYF: google tomcat not use port That would have been faster than signing up for the mailing list. On 2/25/2009 9:09 AM, nicumarius wrote: what should I do to not use port number when writting the address of a page on the Apache server? -BEGIN

Re: Using SSL tomcat

2009-02-26 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ali, On 2/26/2009 8:06 AM, Ali Kassem wrote: Do you know the complete cycle of how to configure and apache server with modSSL and openSSL to install and get the Certificates from a clients to the sever. 1. Don't hijack threads 2. Read the

Re: Request not forwarded to login page with security-constraint after session time-out

2009-02-26 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gregor, On 2/26/2009 9:59 AM, Gregor Schneider wrote: This looks a bit awkward to me (didn't know that this is possible), but I guess that's not the reason for your problem: role-name*/role-name This is fine. From the servlet spec SRV.13.3:

RE: how

2009-02-26 Thread Martin Gainty
in $TOMCAT_HOME/conf/server.xml set your Non-ssl HTTP connector port to 80 e.g. Connector port=80 protocol=HTTP/1.1 ... Martin might as well put 'wie' in the subject header __ Disclaimer and confidentiality note Everything in this e-mail and any

Re: Request not forwarded to login page with security-constraint after session time-out

2009-02-26 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marcel, On 2/26/2009 10:21 AM, Marcel Stör wrote: If I request a protected URL (manually clicking link, AJAX request, etc.) *after* the session has timed out I expect an automatic forwarding to the login page. As I could see while debugging, the

Re: Request not forwarded to login page with security-constraint after session time-out

2009-02-26 Thread Marcel Stör
On 26.02.2009, at 20:13, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marcel, On 2/26/2009 10:21 AM, Marcel Stör wrote: If I request a protected URL (manually clicking link, AJAX request, etc.) *after* the session has timed out I expect an automatic forwarding

RE: Request not forwarded to login page with security-constraint after session time-out

2009-02-26 Thread Caldarale, Charles R
From: Marcel Stör [mailto:mar...@frightanic.com] Subject: Re: Request not forwarded to login page with security-constraint after session time-out No, I only mentioned this because Tomcat throws an SQL exception because it tries to query a table called if I don't specify a role table in the

Re: Apache - Tomcat connection problem

2009-02-26 Thread Daryl Stultz
On Tue, Feb 24, 2009 at 7:40 PM, Rainer Jung rainer.j...@kippdata.dewrote: smaxEither 0 or 1. I would say 0 in order to get rid of idle connections. This is ignored for 2.2.2 (see https://issues.apache.org/bugzilla/show_bug.cgi?id=43371). connectiontimeout E.g. 5 or 10 This produces

Re: Apache - Tomcat connection problem

2009-02-26 Thread Daryl Stultz
It appears my last post didn't make it through some virus scanner (Antigen for Exchange found Body of Message infected with Exceeded Realtime Timeout virus.) Apologies if it made it to the list. On Tue, Feb 24, 2009 at 7:40 PM, Rainer Jung rainer.j...@kippdata.dewrote: smaxEither 0 or 1.

Re: Request not forwarded to login page with security-constraint after session time-out

2009-02-26 Thread Mark Thomas
Caldarale, Charles R wrote: From: Marcel Stör [mailto:mar...@frightanic.com] Subject: Re: Request not forwarded to login page with security-constraint after session time-out No, I only mentioned this because Tomcat throws an SQL exception because it tries to query a table called if I don't

remember me authentication?

2009-02-26 Thread Charl Gerber
Hi everyone, Does Tomcat provide default support in some way to implement a 'remember me' feature for form based authentication? This should not be dependent on a user's browser remembering the username/password, but by a checkbox you can check/clear on the logon jsp. If so, where do I find

Re: very slow class loading on initial JSP/servlet request afterrestart

2009-02-26 Thread Sam Hokin
Caldarale, Charles R wrote: Do you have a CLASSPATH environment variable set for the Tomcat process? (You shouldn't.) Or is there a plain / in the -cp argument in the Tomcat startup script? Or has conf/catalina.properties been modified to include the file system root? Any of those are a

RE: remember me authentication?

2009-02-26 Thread Anthony J. Biacco
Doesn't seem too hard to do cookies, googling it finds pages like http://www.roseindia.net/jsp/jspcookies.shtml which can probably help you out. -Tony --- Manager, IT Operations Format Dynamics, Inc. 303-573-1800x27 abia...@formatdynamics.com http://www.formatdynamics.com

Re: remember me authentication?

2009-02-26 Thread Serge Fonville
Does Tomcat provide default support in some way to implement a 'remember me' feature for form based authentication? This should not be dependent on a user's browser remembering the username/password, but by a checkbox you can check/clear on the logon jsp. if you google for 'jsp cookie' you

Re: remember me authentication?

2009-02-26 Thread Ken Bowen
If the app maintains sessions, then the logon page can read the cookie, install some sort of User bean as a session attribute, and then all other pages need only check for the presence of a non- null value under that attribute. This even works for a logon-optional/remember-me (low security)

RE: Request not forwarded to login page with security-constraint after session time-out

2009-02-26 Thread Caldarale, Charles R
From: Mark Thomas [mailto:ma...@apache.org] Subject: Re: Request not forwarded to login page with security-constraint after session time-out The spec is clearer than that. The * role == all roles defined in web.xml. Yes, but what it's not clear about is what happens when there are *no*

Re: Request not forwarded to login page with security-constraint after session time-out

2009-02-26 Thread Mark Thomas
Caldarale, Charles R wrote: From: Mark Thomas [mailto:ma...@apache.org] Subject: Re: Request not forwarded to login page with security-constraint after session time-out The spec is clearer than that. The * role == all roles defined in web.xml. Yes, but what it's not clear about is what

RE: Request not forwarded to login page with security-constraintafter session time-out

2009-02-26 Thread Caldarale, Charles R
From: Mark Thomas [mailto:ma...@apache.org] Subject: Re: Request not forwarded to login page with security-constraintafter session time-out If * is all roles defined and you have no roles defined then you are basically preventing anyone from accessing that resource That's not quite what it

Re: Request not forwarded to login page with security-constraint after session time-out

2009-02-26 Thread Marcel Stör
On 26.02.2009, at 23:44, Mark Thomas wrote: Caldarale, Charles R wrote: From: Mark Thomas [mailto:ma...@apache.org] Subject: Re: Request not forwarded to login page with security-constraint after session time-out The spec is clearer than that. The * role == all roles defined in web.xml.

Re: Request not forwarded to login page with security-constraintafter session time-out

2009-02-26 Thread Mark Thomas
Caldarale, Charles R wrote: From: Mark Thomas [mailto:ma...@apache.org] Subject: Re: Request not forwarded to login page with security-constraintafter session time-out If * is all roles defined and you have no roles defined then you are basically preventing anyone from accessing that

Re: Request not forwarded to login page with security-constraint after session time-out

2009-02-26 Thread Mark Thomas
Marcel Stör wrote: Not sure I can follow you guys on this...A few questions, my assumption is that the role-issue has nothing to do with the real problem: Correct. Chuck and I are off on our own little tangent. 1. Is the *-role issues even relevant in my context? After all, the security

Re: Apache - Tomcat connection problem

2009-02-26 Thread Rainer Jung
On 26.02.2009 22:35, Daryl Stultz wrote: It appears my last post didn't make it through some virus scanner (Antigen for Exchange found Body of Message infected with Exceeded Realtime Timeout virus.) Apologies if it made it to the list. On Tue, Feb 24, 2009 at 7:40 PM, Rainer

RE: Request not forwarded to login page with security-constraint after session time-out

2009-02-26 Thread Caldarale, Charles R
From: Mark Thomas [mailto:ma...@apache.org] Subject: Re: Request not forwarded to login page with security-constraint after session time-out What the spec is not explicit about is the combination of * with an empty or non-existant security-role list. I think it is quite clear. It means

Re: remember me authentication?

2009-02-26 Thread Rusty Wright
Plan C: go for the gusto and use Spring Security (aka Acegi). Learning Spring and Spring Security should keep you busy for the next year or so. Definitely looks good on the resume though. Charl Gerber wrote: Hi everyone, Does Tomcat provide default support in some way to implement a

Re: very slow class loading on initial JSP/servlet request after restart

2009-02-26 Thread Pieter Temmerman
I'm glad you got it solved Sam. It was an exciting topic to follow. I haven't been reading the mailinglist for a long time, but there might be a good chance you got the longest thread in the mailinglist history :) Cheers. Pieter On Thu, 2009-02-26 at 10:31 -0600, Sam Hokin wrote: Caldarale,

Re: Request not forwarded to login page with security-constraint after session time-out

2009-02-26 Thread Marcel Stör
Marcel Stör wrote: [...] 3. Why does it seem to be relevant that the request where auto-forwarding-to-login-after-session-timeout fails is an AJAX request? That was my last thought last night before I fell asleep...and my first this morning when I woke up. And then the scales fell from my