RE: OutOfMemoryError: PermGen space

2016-07-22 Thread Berneburg, Cris J. - US
Mark (Eggers) and Mark (Thomas) BLUF: I might not have set up the necessary Log4J shutdown procedures. Please (especially) see my responses flagged by ***. -Original Message- From: Mark Eggers [mailto:its_toas...@yahoo.com.INVALID] Sent: Thursday, July 21, 2016 8:32 PM To: Tomcat

OutOfMemoryError: PermGen space

2016-07-14 Thread Berneburg, Cris J. - US
Hi Folks I got this error from the Tomcat Web Application Manager after having stopped and started one of the applications multiple times. (This was after repeatedly deploying the application manually to attempt to find a bug that I could not reproduce in my IDE.) Once the error occurred,

RE: OutOfMemoryError: PermGen space - SOLVED

2016-07-25 Thread Berneburg, Cris J. - US
Hi Guido -Original Message- From: Guido Jäkel [mailto:g.jae...@dnb.de] Sent: Saturday, July 23, 2016 8:38 AM To: Tomcat Users List Subject: Re: OutOfMemoryError: PermGen space - SOLVED On 22.07.2016 19:15, Berneburg, Cris wrote: > > The OutOfMemoryError in Tomcat Manager was caused by

RE: OutOfMemoryError: PermGen space

2016-07-22 Thread Berneburg, Cris J. - US
Mark (Eggers) and Mark (Thomas) BLUF: Memory leak found and fixed. I did not set up the necessary Log4J shutdown procedures. Please see below. -Original Message- From: Mark Eggers [mailto:its_toas...@yahoo.com.INVALID] Sent: Thursday, July 21, 2016 8:32 PM To: Tomcat Users List

RE: OutOfMemoryError: PermGen space - SOLVED

2016-07-22 Thread Berneburg, Cris J. - US
Mark (Thomas), Román, Guido, and Mark (Eggers) Thank you all for your suggestions, assistance, and patience. With your help and encouragement I learned how to perform heap dumps using Java VisualVM, analyze them using Eclipse Memory Analyzer, and follow instructions. ;-) The OutOfMemoryError

RE: OutOfMemoryError: PermGen space - SOLVED

2016-07-25 Thread Berneburg, Cris J. - US
Mark (Eggers) -Original Message- From: Mark Eggers [mailto:its_toas...@yahoo.com.INVALID] Sent: Friday, July 22, 2016 1:28 PM To: Tomcat Users List Subject: Re: OutOfMemoryError: PermGen space - SOLVED > Cris, > > On 7/22/2016 10:15 AM, Berneburg, Cris wrote: > > Mark (Thomas), Román,

RE: OutOfMemoryError: PermGen space - SOLVED

2016-07-25 Thread Berneburg, Cris J. - US
Mark/T, Román, Guido, and Mark/DE -Original Message- From: Mark Thomas [mailto:ma...@apache.org] Sent: Friday, July 22, 2016 4:54 PM To: Tomcat Users List Subject: Re: OutOfMemoryError: PermGen space - SOLVED On 22/07/2016 19:15, Berneburg, Cris wrote: > > Mark (Thomas), Román, Guido,

RE: OutOfMemoryError: PermGen space

2016-07-21 Thread Berneburg, Cris J. - US
Mark Thanks again for taking the time to assist with the OutOfMemoryError. BLUF, it looks like Log4J2 is the culprit. Will you please check my work below to see if I have interpreted correctly? -Original Message- From: Mark Thomas [mailto:ma...@apache.org] Sent: Wednesday, July 20,

RE: OutOfMemoryError: PermGen space

2016-07-19 Thread Berneburg, Cris J. - US
monitor on the > Visual VM the behavior, if you consistently run out of memory, then > you may have a leak. > > Of course that you would be constrained by the fact of running a > 32-bit or 64-bit Tomcat / Java environment. > > > On Fri, Jul 15, 2016 at 2:26 AM, Berneburg

RE: OutOfMemoryError: PermGen space

2016-07-19 Thread Berneburg, Cris J. - US
Mark Thanks for taking the time to answer my questions. Please see my response and questions below. -Original Message- From: Mark Thomas [mailto:ma...@apache.org] Sent: Thursday, July 14, 2016 2:58 PM To: Tomcat Users List Subject: Re: OutOfMemoryError: PermGen space > On 14/07/2016

RE: OutOfMemoryError: PermGen space

2016-07-20 Thread Berneburg, Cris J. - US
Hi Guido Thanks for taking the time to answer my questions and make suggestions. My replies below. -Original Message- From: Jäkel, Guido [mailto:g.jae...@dnb.de] Sent: Tuesday, July 19, 2016 10:31 AM To: 'Tomcat Users List' Subject: RE: OutOfMemoryError: PermGen space >> In Visual

RE: OutOfMemoryError: PermGen space

2016-07-20 Thread Berneburg, Cris J. - US
libraries for comparison purposes. -Original Message- From: Mark Thomas [mailto:ma...@apache.org] Sent: Tuesday, July 19, 2016 3:15 PM To: Tomcat Users List Subject: Re: OutOfMemoryError: PermGen space > On 19/07/2016 17:19, Berneburg, Cris J. - US wrote: > > > > >

RE: OutOfMemoryError: PermGen space

2016-07-22 Thread Berneburg, Cris J. - US
Mark BLUF: Thanks for your explanations and assistance. I plan to follow up with the Log4J2 group. My simple responses below. -Original Message- From: Mark Thomas [mailto:ma...@apache.org] Sent: Thursday, July 21, 2016 3:47 PM To: Tomcat Users List Subject: Re: OutOfMemoryError:

RE: OutOfMemoryError: PermGen space

2016-07-22 Thread Berneburg, Cris J. - US
Guido Thanks for following up with me: -Original Message- From: Jäkel, Guido [mailto:g.jae...@dnb.de] Sent: Friday, July 22, 2016 4:31 AM To: Berneburg, Cris Subject: RE: OutOfMemoryError: PermGen space > >-Original Message- > >From: Berneburg, Cris [mailto:cberneb...@caci.com]

RE: TomcatCon @ ApacheCon

2017-01-16 Thread Berneburg, Cris J. - US
Mark > "What topic(s) need to be covered in a Tomcat conference to make it > as easy as possible to get your employer to pay for you to attend?" OK, you asked for it. :-) - The best and worst moments in Tomcat history. Specific examples. Memorable events. Could be just for the year so the

RE: JreMemoryLeakPreventionListener docs example

2016-09-29 Thread Berneburg, Cris J. - US
Chris and Mark -Original Message- From: Mark Thomas [mailto:ma...@apache.org] Sent: Wednesday, September 28, 2016 2:21 PM To: Tomcat Users List Subject: Re: JreMemoryLeakPreventionListener docs example [SNIP] >>> attach it to a Bugzilla ticket describing what you are >>> trying to do

RE: JreMemoryLeakPreventionListener docs example

2016-09-29 Thread Berneburg, Cris J. - US
-Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Wednesday, September 28, 2016 4:43 PM To: Tomcat Users List Subject: Re: JreMemoryLeakPreventionListener docs example It's a slippery slope, my friend. After this, I'll be pressuring you

RE: JreMemoryLeakPreventionListener docs example

2016-09-22 Thread Berneburg, Cris J. - US
Chris >> So, could we add a small example server.xml snippet >> to the JreMemoryLeakPreventionListener documentation >> to make it clear to newbies how to add the >> classesToInitialize option? Something like: >> >> > className="org.apache.catalina.core. >> JreMemoryLeakPreventionListener" >>

JreMemoryLeakPreventionListener docs example

2016-09-20 Thread Berneburg, Cris J. - US
Around 9/6/16 Chris Schultz replied to the "WAR isolation lifecycle" thread with: > There are some libraries that don't shut down well, or the applications > that use them don't properly shut them down. The solution is to either > fix the library (ask them!), or use Tomcat's "leak prevention

RE: JreMemoryLeakPreventionListener docs example

2016-09-28 Thread Berneburg, Cris J. - US
Chris -Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Saturday, September 24, 2016 11:55 AM To: Tomcat Users List Subject: Re: JreMemoryLeakPreventionListener docs example [SNIP] So, could we add a small example server.xml snippet to the

RE: JreMemoryLeakPreventionListener docs example

2016-09-28 Thread Berneburg, Cris J. - US
Chris -Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Saturday, September 24, 2016 11:55 AM To: Tomcat Users List Subject: Re: JreMemoryLeakPreventionListener docs example > Once you are happy with your edits, do this: While I can't say that

RE: java.lang.OutOfMemoryError: PermGen space

2016-10-21 Thread Berneburg, Cris J. - US
Hi Jon -Original Message- From: Moore, Jon, Vodafone UK [mailto:jon.mo...@vodafone.com] Sent: Thursday, October 20, 2016 6:00 AM To: users@tomcat.apache.org Subject: java.lang.OutOfMemoryError: PermGen space > I have a problem where our customers application server stops > working

RE: Migration

2017-03-22 Thread Berneburg, Cris J. - US
Osama > I have been asked by a company to update their existing working > tomcat 5 application, which is working on an old Windows 2003 > platform and accessing SQL 2005. The new servers are Windows and > SQL 2012. I downloaded and installed Tomcat 8.5.12. So, what I > need to do for migrating

RE: Using Log4J2 2.8 (via the 1.2 API Bridge) for Tomcat8 Internal Logging - RollingFileAppender does not (cannot?) create new Log File

2017-04-11 Thread Berneburg, Cris J. - US
Ankit -Original Message- From: Ankit Agarwal [mailto:ankit_agarwal@...] Sent: Monday, April 10, 2017 3:24 PM To: users@tomcat.apache.org Subject: Using Log4J2 2.8 (via the 1.2 API Bridge) for Tomcat8 Internal Logging - RollingFileAppender does not (cannot?) create new Log File > Hi, >

RE: Using Log4J2 2.8 (via the 1.2 API Bridge) for Tomcat8 Internal Logging - RollingFileAppender does not (cannot?) create new Log File

2017-04-13 Thread Berneburg, Cris J. - US
Hi Ankit -Original Message- From: Ankit Agarwal [mailto:ankit_agarwal@...] Sent: Tuesday, April 11, 2017 12:28 PM To: Tomcat Users List Subject: Re: Using Log4J2 2.8 (via the 1.2 API Bridge) for Tomcat8 Internal Logging - RollingFileAppender does not (cannot?) create new Log File > Hi

RE: Using Log4J2 2.8 (via the 1.2 API Bridge) for Tomcat8 Internal Logging - RollingFileAppender does not (cannot?) create new Log File

2017-04-13 Thread Berneburg, Cris J. - US
Ankit -Original Message- From: Berneburg, Cris J. - US Sent: Thursday, April 13, 2017 10:35 AM To: Tomcat Users List Subject: RE: Using Log4J2 2.8 (via the 1.2 API Bridge) for Tomcat8 Internal Logging - RollingFileAppender does not (cannot?) create new Log File >> The only p

RE: getRealPath is a bad idea?

2017-03-09 Thread Berneburg, Cris J. - US
Chris >> BTW, why doesn't getRealPath return the full path to the >> folder that the WAR file is in instead of null? > > You mean for a call like getRealPath("/")? Yes, exactly! > Well, that would require a path to be returned to the "root" of > the application. Let's say that ROOT.war is in >

RE: getRealPath is a bad idea?

2017-03-10 Thread Berneburg, Cris J. - US
Chris Thanks for taking the time to help me out. I appreciate it. Sorry, my response is kinda wordy. :-P > If you really REALLY want a file path, you could use the catalina.base system > property or the tmpdir and go from there. The former is Tomcat-specific, of > course, and the tmpdir

RE: getRealPath is a bad idea?

2017-03-10 Thread Berneburg, Cris J. - US
Chuck >> How do you all configure the location of a special folder that is not >> part of the deployment package itself? A site-specific config file perhaps? > > Take a look at this: > http://tomcat.apache.org/tomcat-8.5-doc/config/resources.html > > A element within allows specification of

RE: getRealPath is a bad idea?

2017-03-07 Thread Berneburg, Cris J. - US
[SNIP] >> chris S>>> getRealPath is a bad idea. <<< >> >> For my education's sake, would you please explain that? [SNIP] > > There is no guarantee it will return a non-null value. The typical reason > is if the app is running from a packed WAR. Using it reduces the portability > of your

RE: Debugging

2017-03-02 Thread Berneburg, Cris J. - US
Al You may or may not find this helpful... -Original Message- From: Al Grant [mailto:bigal...@gmail.com] Sent: Sunday, February 26, 2017 8:34 PM To: users@tomcat.apache.org Subject: Debugging > Hello, > > System: Windows 10 > Tomcat Var: 8.5.4 > IDE: Intellij Ultimate > Java: v1.8 > >

getRealPath is a bad idea?

2017-03-02 Thread Berneburg, Cris J. - US
Chris -Original Message- From: Christopher Schultz [mailto:chris@...] Sent: Friday, February 24, 2017 [multiple] To: Tomcat Users List Subject: Re: Getting application root path before servlet is initialized? [SNIP] Martin K> In order to avoid hard coding that path, Martin K> I need a

RE: [OT] Unable to install Tomcat 9 on Windows 10

2017-07-26 Thread Berneburg, Cris J. - US
Hey Chris > From: Christopher Schultz [mailto:chris@...] > Sent: Friday, July 21, 2017 1:02 PM > To: users@tomcat.apache.org > Subject: Re: [OT] Unable to install Tomcat 9 on Windows 10 [SNIP] > I'm not such a miserable bastard as this thread would indicate Sounds like a great sig for you.

RE: 8.5 - multiple host configuration question

2017-09-11 Thread Berneburg, Cris J. - US
Chris and Chris (but not Chris) -Original Message- From: Chris Cheshire [mailto:yahoono...@gmail.com] Sent: Friday, September 08, 2017 9:16 PM To: Tomcat Users List Subject: Re: 8.5 - multiple host configuration question On Thu, Sep 7, 2017 at 5:29 PM,

RE: diff tomcat versions share the same CATALINA_BASE?

2017-12-18 Thread Berneburg, Cris J. - US
Chris Thanks again taking the time to help. Please see below. >>> So I would recommend a separate CATALINA_BASE for each application's >>> support for a major Tomcat version. Note that you are welcome to >>> share WAR files for an application. >>> >>> Example: >>> >>> Tomcat 6

diff tomcat versions share the same CATALINA_BASE?

2017-12-15 Thread Berneburg, Cris J. - US
I'm thinking about upgrading our tomcat from version 6.x to 8.5.x. Yeah, it's overdue. :-) In our test environment, I would like to install 8.5 in parallel with 6 for side-by-side comparison testing. Having never done it before, I'm also thinking about splitting the tomcat and document

RE: diff tomcat versions share the same CATALINA_BASE?

2017-12-15 Thread Berneburg, Cris J. - US
Chris Thanks for taking the time to explain this to me. I'm still trying to absorb it all. More below. > > My question is this. Is it even possible or simply not recommended > > for both tomcat instances to share the same CATALINA_BASE? The work > > folder with compiled cache is buried in

RE: tomcat 6 vulnerability scan default error page help

2018-05-07 Thread Berneburg, Cris J. - US
-Original Message- From: Mark Thomas [mailto:ma...@apache.org] Sent: Wednesday, May 2, 2018 4:01 PM To: users@tomcat.apache.org Subject: Re: tomcat 6 vulnerability scan default error page help > On 02/05/18 20:51, Leon Rosenberg wrote: > > Hi Mark, > > > > I agree with you that the

RE: tomcat 6 vulnerability scan default error page help

2018-05-07 Thread Berneburg, Cris J. - US
Leon, Mark, and Alejandro Thanks for your time and suggestions. I appreciate it. cjb> We are getting dinged by a vulnerability scan for the default cjb> not-found error page being returned by Tomcat for a Status 404. cjb> [...] cjb> However, I can't find where the error-page for 404 is defined.

RE: tomcat 6 vulnerability scan default error page help

2018-05-07 Thread Berneburg, Cris J. - US
Mark Thanks for taking the time to help. Again, I appreciate it. cjb> We are getting dinged by a vulnerability scan for the default cjb> not-found error page being returned by Tomcat for a Status 404. cjb> [...] cjb> And we're using Tomcat 6.0.37 (ahem). MT> And you are worried about returning

RE: Tomcat 9 ;jsessionid

2018-04-27 Thread Berneburg, Cris J. - US
Hi Greg -Original Message- From: Greg Huber [mailto:gregh3...@gmail.com] Sent: Thursday, April 26, 2018 4:53 AM To: Tomcat Users List Subject: Tomcat 9 ;jsessionid > Hello, > > One thing I have noticed with Tomcat 9.0.x I get alot > ;jsessionid=xxx appended to

tomcat 6 vulnerability scan default error page help

2018-05-02 Thread Berneburg, Cris J. - US
We are getting dinged by a vulnerability scan for the default not-found error page being returned by Tomcat for a Status 404. On my dev server when requesting an invalid URL, Tomcat returns a Status 404 page that displays the Tomcat version. Right, I need to do something about that. However,

RE: TomCat service is running but not responding

2017-10-23 Thread Berneburg, Cris J. - US
Darin > From: dbol...@dsginc.biz [mailto:dbol...@dsginc.biz] > Sent: Friday, October 20, 2017 9:47 AM > To: users@tomcat.apache.org > Subject: TomCat service is running but not responding > > I have a TomCat 8.5.23 service running on a Windows 2008 server. > The service would be running fine but

RE: tomcat 7.0 resurrecting directory while service is installed - running in command line mode?

2018-01-15 Thread Berneburg, Cris J. - US
Christoph While my response is late, and you seemed to have solved your problem, if you don't mind, I would like to attempt to clarify about quotes and spaces in Windows. -Original Message- From: Christoph P.U. Kukulies [mailto:k...@kukulies.org] Sent: Wednesday, January 10, 2018 6:39

how to prevent user access to JSP pages?

2018-08-16 Thread Berneburg, Cris J. - US
Due to security concerns and general fussiness on my part, I'd like to prevent users from requesting JSP pages directly, except for the login page. I want all requests to be handled by servlets. That way I can legitimately claim that all requests are being validated, input scrubbed, JSP's

RE: how to prevent user access to JSP pages?

2018-08-20 Thread Berneburg, Cris J. - US
Hi Woonsan Thanks for providing an "option C". :-) There is still much for me to learn. cjb> Due to security concerns and general fussiness on my part, I'd like cjb> to prevent users from requesting JSP pages directly [...]. That cjb> way I can legitimately claim that all requests are being

RE: how to prevent user access to JSP pages?

2018-08-20 Thread Berneburg, Cris J. - US
Hi Mark Thanks for taking the time to reply. :-) cjb> Due to security concerns and general fussiness on my part, I'd like cjb> to prevent users from requesting JSP pages directly [...]. That cjb> way I can legitimately claim that all requests are being validated, cjb> input scrubbed, JSP's

RE: how to prevent user access to JSP pages?

2018-08-20 Thread Berneburg, Cris J. - US
Hi Louis Thanks for replying to my request for help. :-) cjb> Due to security concerns and general fussiness on my part, I'd like cjb> to prevent users from requesting JSP pages directly [...]. That cjb> way I can legitimately claim that all requests are being validated, cjb> input

RE: how to prevent user access to JSP pages?

2018-08-20 Thread Berneburg, Cris J. - US
David Thanks for taking the time to reply. :-) cjb> Due to security concerns and general fussiness on my part, I'd like to cjb> prevent users from requesting JSP pages directly [...]. That way I can cjb> legitimately claim that all requests are being validated, input scrubbed, cjb> JSP's

RE: how to prevent user access to JSP pages?

2018-08-20 Thread Berneburg, Cris J. - US
Hi Chris Thanks for your insight and reply. cjb> I'd like to prevent users from requesting JSP pages directly, cjb> except for the login page. cs> Why except for the login page? I would include the login page cs> as something that should be fronted with a (non-JSP) servlet, cs> even if that

RE: how to prevent user access to JSP pages?

2018-08-20 Thread Berneburg, Cris J. - US
Chris (and Mark) Bingo! cjb> Due to security concerns and general fussiness on my part, I'd like cjb> to prevent users from requesting JSP pages directly [...]. That cjb> way I can legitimately claim that all requests are being validated, cjb> input scrubbed, JSP's cannot be taken advantage

RE: how to prevent user access to JSP pages?

2018-08-22 Thread Berneburg, Cris J. - US
Chris [combining messages] cjb> Am I mistaken, but does vulnerability scanning software cjb> seem to feed on that sort of thing? cs> Most vulnerability scanners just try to detect your server's cs> version and look-up any publicly-reported vulnerabilities in cs> e.g. NVD. They are really stupid

RE: how to prevent user access to JSP pages?

2018-08-22 Thread Berneburg, Cris J. - US
Hi Woonsan cjb> I'd like to prevent users from requesting JSP pages directly cjb> a. [...] adding a for each folder. cjb> b. [...] JSP files under the WEB-INF folder. wk> c. Implement a servlet filter which is mapped to /* with wk> dispatcher options: REQUEST, INCLUDE, FORWARD. The filter

RE: Training material is now on-line

2018-04-19 Thread Berneburg, Cris J. - US
Thanks Mark for making that available! My questions below. -Original Message- From: Mark Thomas [mailto:ma...@apache.org] Sent: Wednesday, April 11, 2018 6:32 PM To: Tomcat Users List Subject: Training material is now on-line > Hi all, > > Thanks to the magic

RE: Training material is now on-line

2018-04-23 Thread Berneburg, Cris J. - US
Thanks Mark [lots of snippage] MT> https://apache.github.io/tomcat-training/ cjb> Should "Client" actually be "Server" in Step 12: ChangeCipherSpec? cjb> Or did you already know about that? MT> It should and I didn't. I've just committed the fix. It should be MT> live in a few minutes. Thanks

RE: [OT] Want help understanding missing piece in architecture

2018-03-05 Thread Berneburg, Cris J. - US
Thanks Chris for taking the time to provide such a detailed and educational answer. cjb> Now let's say that we want the Tomcat application to only do cjb> rendering. It connects to a different server, X, and no longer to the cjb> DB. The X server connects to the DB. Requests and data flow

[OT] Want help understanding missing piece in architecture

2018-03-02 Thread Berneburg, Cris J. - US
Hi Folks There's a concept I'm trying to wrap my brain around. It's similar to MVC, separating responsibilities between the display and model/controller layers. In terms of coding, I know how to make that happen. However, in terms of server architecture, I do not. For the purposes of

RE: Security of AJP

2018-02-28 Thread Berneburg, Cris J. - US
Chris and Chris -Original Message- > From: Cheltenham, Chris [mailto:ccheltenham-...@philasd.org] > Sent: Wednesday, February 28, 2018 8:40 AM > To: Tomcat Users List > Subject: RE: Security of AJP > > Since AJP is not really needed by Tomcat; If I comment out

RE: [OT] Oracle Java 11 discussion?

2018-10-17 Thread Berneburg, Cris J. - US
Thanks Mark mt> The argument for a JRE vs a JDK is that the JDK includes mt> a compiler. The only reason Tomcat can run on a JRE and mt> still support JSPs (which require compilation) is that mt> Tomcat includes a Java compiler. I don't think the mt> security argument holds much water. I had not

RE: [OT] Oracle Java 11 discussion?

2018-10-17 Thread Berneburg, Cris J. - US
Thanks Igal mt> OpenJDK is very close to the Oracle JDK these days. I regularly run mt> Tomcat's unit tests with the latest OpenJDK and have yet to find an mt> issue that is OpenJDK specific. is> I asked Gil Tene about this a couple of weeks ago. Gil is a co- is> founder of Azul Systems, an

RE: [OT] Oracle Java 11 discussion?

2018-10-19 Thread Berneburg, Cris J. - US
Chris cjb> large bureaucracy [...] I would not be cjb> surprised if there is a policy against dev kits and IDE's on cjb> production servers for security sake. Tomcat (whisper: with built-in cjb> compiler) is approved, but is the JDK allowed? Guess I can ask. cjb> Yeah, it's potentially a

RE: [OT] Oracle Java 11 discussion?

2018-10-19 Thread Berneburg, Cris J. - US
Thanks Igal is> p.s. So happy to see that you finally moved from Tomcat 6 to 8.5. is> Perhaps you can share that experience in a separate thread and let is> others know if you ran into any major problems during that process. Will do. So far we've only run into 3 minor issues. -- Cris Berneburg

RE: [OT] Oracle Java 11 discussion?

2018-10-19 Thread Berneburg, Cris J. - US
Hey Chris cjb> RAMBLE: Too bad there can't be an Apache OpenJRE umbrella project, cjb> with specific Apache OpenJRE [version X] sub-projects, that maintain cjb> JRE [version X]'s indefinitely. One source (Apache) for all the cjb> different JRE's for the Java community at large, rather than

[OT] Oracle Java 11 discussion?

2018-10-15 Thread Berneburg, Cris J. - US
Hi Folks What has anyone been thinking about the upcoming Oracle Java 11 release / support stuff? Frankly, I'm confused by it all and am still trying to wrap my brain around it. I have concerns about the potential implications for my little project, and also wonder about Tomcat at large.

reinstall TC service after java upgrade?

2018-11-02 Thread Berneburg, Cris J. - US
Hi Folks I upgraded Java from 8u181 to 8u191 on our dev (JDK) and test (JRE) Windows 2012 servers today. After doing so, the Tomcat 8.5(.32) Windows services would no longer start. Removing and re-adding the service fixed the service. I don't remember having to re-install the TC Windows

RE: reinstall TC service after java upgrade?

2018-11-07 Thread Berneburg, Cris J. - US
Thanks Mark cjb> I upgraded Java from 8u181 to 8u191 on our dev (JDK) and test (JRE) cjb> Windows 2012 servers today. After doing so, the Tomcat 8.5(.32) cjb> Windows services would no longer start. Removing and re-adding cjb> the service fixed the service. I don't remember having to

RE: reinstall TC service after java upgrade?

2018-11-09 Thread Berneburg, Cris J. - US
Thanks André cjb> I upgraded Java from 8u181 to 8u191 on our dev (JDK) and test cjb> (JRE) Windows 2012 servers today. After doing so, the Tomcat cjb> 8.5(.32) Windows services would no longer start. Removing and cjb> re-adding the service fixed the service. mt> You need to reconfigure

RE: Apache failed to initialize connector

2018-10-04 Thread Berneburg, Cris J. - US
Hi Gael >> >> >> On 03/10/18 12:28, Gael REYNOARD wrote: >> >> >>> Hello everybody, >> >> >>> >> >> >>> OS : Windows 7 Pro x64 >> >> >>> Tomcat : 8.5.31 >> >> >>> >> >> >>> On a test bench, I reboot Windows to test one of our C# >> applications. >> >> >>> Sometimes after starting the OS, my

RE: JasperException in production

2018-10-04 Thread Berneburg, Cris J. - US
Mark cjb> getting the dreaded JasperException in production. cjb> Don't know what changed to start causing this. Same cjb> thing happened in the test environment 9/4/18. We cjb> got around the problem in test by upgrading to Java cjb> 8u181 and Tomcat 8.5.30. cjb> cjb> JRE 8u171, 32 bit cjb>

RE: TC 8.5 cachingAllowed=false ramifications?

2018-10-04 Thread Berneburg, Cris J. - US
Thanks Mark cjb> Anyone have advice on, experience with, or cjb> info about setting cachingAllowed=false? cjb> [...] cjb> In our testing of TC 8.5.32 on Java 8u181, cjb> report output Excel files won't load cjb> (immediately). An error is displayed to cjb> the user. These Stack Overflow topics

RE: TC 8.5 cachingAllowed=false ramifications?

2018-10-09 Thread Berneburg, Cris J. - US
Thanks Chris cjb> of TC 8.5.32 on Java 8u181, report output Excel cjb> files won't load (immediately). An error is cjb> displayed to the user. [...] cjb> 1. What are the ramifications of disabling the cache? cjb> IOW, what are the potential side-effects? [...] cjb> 2. Is there a "better" way to

RE: TC 8.5 cachingAllowed=false ramifications?

2018-10-09 Thread Berneburg, Cris J. - US
Mark cjb> RAMBLE: The thing is, it worked in TC 6.0 cjb> but not 8.5. Is it possible a major change cjb> [...] Did TC 6.0 not cache files? mt> The resources implementation was completely mt> re-written for 8.x [...] I'm fairly sure mt> not found results weren't cached in 6.0.x. OK, thanks for

TC 8.5 cachingAllowed=false ramifications?

2018-10-04 Thread Berneburg, Cris J. - US
Hi Folks Anyone have advice on, experience with, or info about setting cachingAllowed=false? BACKGROUND: Our customer is suddenly getting a JasperException in production. To solve, we're planning to upgrade Tomcat to 8.5.x. In our testing of TC 8.5.32 on Java 8u181, report output Excel

JasperException in production

2018-10-04 Thread Berneburg, Cris J. - US
OK, now we're getting the dreaded JasperException in production. Don't know what changed to start causing this. Same thing happened in the test environment 9/4/18. We got around the problem in test by upgrading to Java 8u181 and Tomcat 8.5.30. JRE 8u171, 32 bit Tomcat 6.0.32, 32 bit

RE: TC 8.5 cachingAllowed=false ramifications [and potential Resource CacheSelector specification]?

2018-10-09 Thread Berneburg, Cris J. - US
Mark cjb> SPECIFIC: The Excel files are [...] accessed only cjb> once. They don't need to be cached. Is it cjb> possible to declare only the Excel reports output cjb> folder as non-cache-able but leave the (default) cjb> context cache setting as-is so everything else cjb> can be cached in the

Re: help with org.apache.jasper.compiler.JDTCompiler issue?

2018-09-20 Thread Berneburg, Cris J. - US
I just remembered something. cjb> After reverting Java and our app, the app still cjb> won't run and still throws compilation errors. cjb> * Staging Server - after rollback cjb> JRE 8u171, 32 bit cjb> Tomcat 6.0.32, 32 bit (unchanged) cjb> App v3.3.2 cjb> * Partial stack trace: cjb>

Re: help with org.apache.jasper.compiler.JDTCompiler issue?

2018-09-20 Thread Berneburg, Cris J. - US
Konstantin Thanks for jumping in to help out. :-) cjb> After reverting Java and our app, the app still cjb> won't run and still throws compilation errors. cjb> * Staging Server - after rollback cjb> JRE 8u171, 32 bit cjb> Tomcat 6.0.32, 32 bit (unchanged) cjb> App v3.3.2 kk> My guess is that

Re: help with org.apache.jasper.compiler.JDTCompiler issue?

2018-09-20 Thread Berneburg, Cris J. - US
Konstantin, et al Well, it's all a moot point now. :-) cjb> After reverting Java and our app, the app still cjb> won't run and still throws compilation errors. cjb> * Staging Server - after rollback cjb> JRE 8u171, 32 bit cjb> Tomcat 6.0.32, 32 bit (unchanged) cjb> App v3.3.2 kk> My guess is

help with org.apache.jasper.compiler.JDTCompiler issue?

2018-09-19 Thread Berneburg, Cris J. - US
Hi Folks We can't figure out what's wrong with our staging server. After upgrading Java and our application, Tomcat started logging "Compilation error" exceptions. The login JSP page did not display. After reverting Java and our app, the app still won't run and still throws compilation

RE: [slightly OT] Re: Tomcat 9 does not work with Java 11

2018-12-12 Thread Berneburg, Cris J. - US
Hi Andi am> Another try on a third Windows Server 2008 R2 that never contained Java or Tomcat. am> I am logged in as local administrator. am> Installed Java 11 and Tomcat 9. am> And again same error :( am> I would really appreciate any help. Sorry you are going through all this trouble. I have

RE: tomcat Finding!

2018-12-26 Thread Berneburg, Cris J. - US
Hi Danyaal dh> I'm encountering following scan finding errors dh> and couldn't find way to mitigate this. dh> Tomcat 8.5.32 dh> 12085 dh> Apache Tomcat Default Files dh> The following default files were found dh> :/nessus-check/default-404-error-page.html dh> Delete the default index page and

RE: [slightly OT] Re: Tomcat 9 does not work with Java 11

2018-12-03 Thread Berneburg, Cris J. - US
Hi Ralf am> What I did now: am> - removed Tomcat services by service.bat am> - uninstalled all Tomcats (7 and 9) am> - uninstalled all Java (was only Version 11) am> - server reboot am> - Installed Java 11 (File: jdk-11.0.1_windows-x64_bin.exe) am> - reboot am> - Installed Tomcat 9 (File:

[OT?] RE: Tomcat 8.5.13 - random issue with HTTPS (blank page) - working good with HTTP

2019-03-11 Thread Berneburg, Cris J. - US
Hi Youness Please see my comments below -Original Message- From: youness.dakk...@bnpparibasfortis.com Sent: Wednesday, March 6, 2019 7:55 AM To: Tomcat Users List Subject: RE: Tomcat 8.5.13 - random issue with HTTPS (blank page) - working good with HTTP > This is the content of the

RE: 4 Apache Events in 2019: DC Roadshow soon [etc]

2019-03-19 Thread Berneburg, Cris J. - US
-- Christopher Schultz (cs) wrote 3/12/19: -- Rich Bowen (rb) wrote 3/6/19: rb> * Apache Roadshow DC is in [2] weeks. Register now at rb> https://apachecon.com/usroadshowdc19/ cs> I'll be speaking at this event, and I'd love to meet some cs> local Tomcat-ers. It's $25 to attend; schedule

RE: [OT] TLSv1.3 in TC8.5 + Azul Java 8

2019-08-06 Thread Berneburg, Cris J. - US
-Original Message- From: Christopher Schultz > "things to look into when I retire and my house is totally clean and > my kids are finally out of the house" so of course, I'll never get around to > it. +1 :-) -- Cris Berneburg CACI Lead Software Engineer

RE: Security vulnerabilities with tomcat 9

2019-07-24 Thread Berneburg, Cris J. - US
Hi Sumit Please see my response below your question. -Original Message- From: Sumit Bhardwaj Sent: Saturday, July 20, 2019 8:48 AM To: Tomcat Users List Subject: Security vulnerabilities with tomcat 9 > Hi, > > We are using tomcat 9 and getting following two vulnerabilities in

RE: Security audit raises questions (Tomcat 7.0.93)

2020-03-18 Thread Berneburg, Cris J. - US
Hi JHHL > security audit on the Tomcat server we maintain My condolences. :-) We're gone through several scans over the past couple years too. Yeah, it's a pain. If you can get the report details, it may provide enough info to pinpoint the exact problems. Checkmarx scanning software does,

RE: [OT] RE: How to get the tag name from within a taglib class ?

2020-09-15 Thread Berneburg, Cris J. - US
Thanks Chris! CS> IMO, the JSP effort was a stepping-stone on a path to better CS> technologies like Velocity, FreeMarker, and others. If I were CS> king, JSP would just go away. Just my POV of course [...] cjb> what do you like better about Velocity, FreeMarker, etc. cjb> more than JSP? CS> I

RE: How to get the tag name from within a taglib class ?

2020-09-14 Thread Berneburg, Cris J. - US
Rony RF> If possible I would like to write a single tagclass, but use it RF> for two or more different tags, as the implementation would share RF> quite a lot of code. Besides, it might be helpful for debugging. CS> Feel free to build a base class with the shared code and then implement CS> the

[OT] RE: How to get the tag name from within a taglib class ?

2020-09-14 Thread Berneburg, Cris J. - US
Hey Chris CS> IMO, the JSP effort was a stepping-stone on a path to better CS> technologies like Velocity, FreeMarker, and others. If I were CS> king, JSP would just go away. Just my POV of course, you are CS> welcome to fall in love with JSP. :) Seeing as I am ever on the trailing edge of

RE: Low throughput with HTTP2

2020-09-23 Thread Berneburg, Cris J. - US
Hi Mark Thanks for taking the time to explain that to me. :-) A few more questions, if you don't mind. cjb> TC thinks the stream should be closed when the client cjb> thinks the stream is still open? Basically RST_STREAM cjb> is a keep-alive? mt> No. The stream closed cleanly. The client is

RE: Low throughput with HTTP2

2020-09-25 Thread Berneburg, Cris J. - US
Thanks again Mark :-) mt> how that Map is pruned (it is currently too aggressive) mt> if Tomcat is processing 10k req/s just keeping track of mt> the last 30s is potentially 300k streams. How to do that mt> efficiently for all usage patterns is a problem that mt> needs some thought. Sounds a

RE: Low throughput with HTTP2

2020-09-22 Thread Berneburg, Cris J. - US
Hi Mark As with most topics here, I struggle to understand what is being discussed. :-) So please bear with me. > improving how Tomcat handles traffic like this. > > Looks like Tomcat could prune the closed streams > less aggressively. > > At the moment it waits until there are >

RE: Strange error with JSP

2021-06-07 Thread Berneburg, Cris J. - US
Chris [major snippage] CS> app/work/Catalina/localhost/[$context]/org/apache/jsp/admin/ CS> SessionSnooper_jsp.java exist and have file-dates from way back CS> in 2016. (No recent changes) CS> This is Tomcat 8.5.65 from a stock ASF-distrubuted tarball, CS> launched using "catalina.sh start".

temp folder?

2021-05-05 Thread Berneburg, Cris J. - US
Hi Folks Sometimes we get strange errors after deployments to our test server. We just "solved" some weirdness by manually cleaning out the TC temp folder(s) - again. Googling confirms what I thought about the TC work versus temp folder: * "work stores compiled JSPs and other assets". * "temp

RE: temp folder?

2021-05-07 Thread Berneburg, Cris J. - US
Hi Mark Thanks for getting back with me. :-) markt> What is the setting for unpackWARs for Host? These are the host settings in server.xml: name="localhost" appBase="webapps" unpackWARs="true" autoDeploy="true" deployOnStartup="false" markt> Running directly from a WAR (with

[OT] web app big memory usage?

2021-05-27 Thread Berneburg, Cris J. - US
Hi Folks :-) One of our web apps is using a "lot" of memory, specifically a big user query. We'd like to find out why. The Tomcat Web Application Manager Find leaks button said that "No web applications appear to have triggered a memory leak on stop, reload or undeploy." Tomcat Manager

RE: Strange error with JSP

2021-06-03 Thread Berneburg, Cris J. - US
Hi Chris cs> This is a relatively simple JSP. There are no tag libraries in use and cs> there are 3 imports of JSPs which contain some static utility functions. Sorry, no technical suggestions, but some questions... Can you load those 3 dependent JSP's in a browser via URL (or are they

RE: [OT] web app big memory usage?

2021-06-03 Thread Berneburg, Cris J. - US
Thanks Chris [snip, snip, snippety-snip] CS> What's the database? And the driver? Oracle 19, oracle.jdbc.OracleDriver - jdbc:oracle:thin. CS> MySQL Connector/J used to (still does?) read 100% of the results CS> into the heap before Statement.executeQuery() returns unless you CS> specifically

RE: [OT] web app big memory usage?

2021-05-28 Thread Berneburg, Cris J. - US
Hi Amit :-) cb> 1. Is there a way to analyze uncollected garbage? cb> 2. Is that a reasonable way to identify potential memory usage problems? ap> Have you enabled the " Enable 'keep unreachable objects'" setting of MAT? ap> https://blog.gceasy.io/2015/12/11/eclipse-mat-titbits/ No, I had not

  1   2   >