Re: SPNEGO test configuration with Manager webapp

David Marsh wrote: Hi Mark, Thanks that would be great ! Do you have a good mechanism to test and ensure kerberos token is passed to tomcat and not NTLM token ? I believe that I can answer that. And the basic answer is no. First the basic principle, valid for this and many many other areas

Re: SPNEGO test configuration with Manager webapp

On 26/03/2015 00:36, David Marsh wrote: Still getting :- java.security.PrivilegedActionException: GSSException: Defective token detected (Mechanism level: G SSHeader did not find the right tag) Folks here mention lack of NegoEx support or bugs in GSS-APi ?

RE: SPNEGO test configuration with Manager webapp

Hi Mark, Thanks that would be great ! Do you have a good mechanism to test and ensure kerberos token is passed to tomcat and not NTLM token ? David Date: Thu, 26 Mar 2015 09:00:22 + From: ma...@apache.org To: users@tomcat.apache.org Subject: Re: SPNEGO test configuration with Manager

Re: org.apache.jasper.JasperException: The absolute uri: http://tiles.apache.org/tags-tiles cannot be resolved in either web.xml or the jar files deployed with this application

Hi, Hi Chris, Thanks a lot for the quick response. Please find inline answers. On 3/18/15 5:39 AM, Thusitha Thilina Dayaratne wrote: I'm in the process of migrating embedded tomcat 7.0.59 application to Tomcat 8.0.20. Tomcat is been bundle as a OSGI bundle. First I get a

Cannot create a secure XMLInputFactory

Hello, I've bumped to Cannot create a secure XMLInputFactory issue. The reason is probably this one (copied from stackoverflow): *** Since version 2.7.4, CXF added a feature in order to ensure that the XMLInputFactory is secured and loaded from woodstox (= 4.2.x packages, see

Tomcat 8 on Solaris 10/11

Hi, We are having a problem on our production servers where downloads of certain files are getting randomly truncated. This includes static Javascript files, file downloads via servlets, etc, where the file is more than about 100K. Most of the time the file downloads successfully, but some

RE: SPNEGO test configuration with Manager webapp

Hi Mark, Thanks for that, yes I've got 30 years windows experience, I can use Linux at a push but its not really my area expertise. I'm a Java / Windows programmer so I should be able to understand it, but not kerberos or Active Directory expert. I have used Waffle in the past with success

Re: SPNEGO test configuration with Manager webapp

David Marsh wrote: Hi Mark, Thanks for that, yes I've got 30 years windows experience, I can use Linux at a push but its not really my area expertise. I'm a Java / Windows programmer so I should be able to understand it, but not kerberos or Active Directory expert. I have used Waffle in the

Re: Tomcat 8 on Solaris 10/11

Am 26.03.2015 um 10:54 schrieb Andrew Seales: Hi, We are having a problem on our production servers where downloads of certain files are getting randomly truncated. This includes static Javascript files, file downloads via servlets, etc, where the file is more than about 100K. Most of the time

Why setUniqueId removed from ClusterMessage in Tomcat 8

Hi, Is there a specific reason to remove public void setUniqueId(String id); method from org.apache.catalina.ha.ClusterMessage.java in Tomcat 8.0.20? Thanks Best Regards /Thusitha -- Thusitha Dayaratne Software Engineer WSO2 Inc. - lean . enterprise . middleware | wso2.com Mobile

Re: java.lang.IllegalArgumentException: Page directive: invalid value for import

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Ryan, On 3/26/15 11:25 AM, Bonser, Ryan wrote: Hi, I have a webapp that has been working fine for years in Tomcat 5,6 and earlier releases of 7 up to 7.0.33. Deployed the same app into Tomcat 8.0.20 and receiving the following errors in the

Tomcat 7 upgrade from 7.0.28-4 to 7.0.56-1 causes application freeze

Following the update of the tomcat 7 version from 7.0.28-4 to 7.0.56-1 hoping to improve our application performances we experienced a quick freeze of the application under a standard load (that was handle by previous tomcat version without particular issue). Our application is behind a nginx

Chrome reports Tomcat hosted sites as using 'obsolete cryptography'

Hi, We're serving our web and API content using Tomcat 8.0.20 using an HTTPs connector that looks something like: *Connector port=443 protocol=org.apache.coyote.http11.Http11NioProtocol* *maxThreads=200 SSLEnabled=true scheme=https clientAuth=false sslProtocol=TLS* *compression=on

Re: Issue with Perl code deployment in Tomcat7.x

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Dwarak, On 3/26/15 10:54 AM, D, Dwarakesh wrote: We have deployed perl code in tomcat 7.0.27 Upgrade. There's bad stuff lurking in those old versions. 7.0.60! and when running the URL, we are getting the perl code displayed in the UI itself.

Re: Chrome reports Tomcat hosted sites as using 'obsolete cryptography'

On 3/26/2015 1:30 PM, Egor Philippov wrote: Hi, We're serving our web and API content using Tomcat 8.0.20 using an HTTPs connector that looks something like: *Connector port=443 protocol=org.apache.coyote.http11.Http11NioProtocol* *maxThreads=200 SSLEnabled=true scheme=https

Re: Chrome reports Tomcat hosted sites as using 'obsolete cryptography'

On 26/03/2015 17:30, Egor Philippov wrote: Anyone familiar with the warning or know whether it represents a real security problem? That depends on your definition of 'real'. I'm not aware of any viable attacks but general opinion is that now is the time to take action. Check your server

Re: Chrome reports Tomcat hosted sites as using 'obsolete cryptography'

On Thu, Mar 26, 2015 at 10:42 AM, David kerber dcker...@verizon.net wrote: On 3/26/2015 1:30 PM, Egor Philippov wrote: Hi, We're serving our web and API content using Tomcat 8.0.20 using an HTTPs connector that looks something like: *Connector port=443

Re: Chrome reports Tomcat hosted sites as using 'obsolete cryptography'

On 3/26/2015 2:10 PM, Egor Philippov wrote: On Thu, Mar 26, 2015 at 10:42 AM, David kerber dcker...@verizon.net wrote: On 3/26/2015 1:30 PM, Egor Philippov wrote: Hi, We're serving our web and API content using Tomcat 8.0.20 using an HTTPs connector that looks something like: *Connector

Re: Tomcat 8 on Solaris 10/11

As suggested by Rainer, I would try with the blocking connector and compare. Otherwise, it could be that your file is using very long lines (only 5 lines for more than 800k of data). Maybe a tomcat-dev could have a look on this. $ wc ext-datadownload-20150323_1157.js 5 7634 838044

Re: Chrome reports Tomcat hosted sites as using 'obsolete cryptography'

Egor, On 26.3.2015 21:23, Mark Thomas wrote: On 26/03/2015 17:30, Egor Philippov wrote: Anyone familiar with the warning or know whether it represents a real security problem? That depends on your definition of 'real'. I'm not aware of any viable attacks but general opinion is that now is

Re: ClassNotFoundError on context unload

Hi Chris, I know what is going on here (it is quite clear in the debugger). I'll take you through it one step at a time in this email, but the issue is complicated, so I'll try to be thorough. Would you be willing to try the newly-minted 8.0.21, or 8.0.20, to see if it makes a difference? Yes,

Issue with Perl code deployment in Tomcat7.x

Hello, We have deployed perl code in tomcat 7.0.27 and when running the URL, we are getting the perl code displayed in the UI itself. The below changes were made in tomcat: 1) ../tomcat/conf/Context.xml è Added Context privileged=true 2) ../tomcat/conf/web.xml è Uncommented the

java.lang.IllegalArgumentException: Page directive: invalid value for import

Hi, I have a webapp that has been working fine for years in Tomcat 5,6 and earlier releases of 7 up to 7.0.33. Deployed the same app into Tomcat 8.0.20 and receiving the following errors in the localhost log Mar 26, 2015 10:52:15 AM org.apache.catalina.core.ApplicationDispatcher invoke SEVERE:

Strange websocket status

Hi, on my server i have found a websocket with a status open but when i try to write on i get this exception : java.lang.IllegalStateException: The remote endpoint was in state [TEXT_PARTIAL_WRITING] which is an invalid state for called method at