session persistence across application redeploy

2013-01-30 Thread Aggarwal, Ajay
Does session persistence work across application redeploy? I am on tomcat 7.0.26. And for me session persistence is working across tomcat restarts, but not when I redeploy my application. I am not using any special configuration for session persistence (i.e. using the standard manager).

RE: session persistence across application redeploy

2013-01-30 Thread Aggarwal, Ajay
-path/sessions.ser/ /Context -Original Message- From: Aggarwal, Ajay [mailto:ajay.aggar...@stratus.com] Sent: Wednesday, January 30, 2013 4:52 PM To: users@tomcat.apache.org Subject: session persistence across application redeploy Does session persistence work across application redeploy

server.xml hostname from ServletContext

2012-10-01 Thread Aggarwal, Ajay
Is the configured hostname available in ServletContext? I see it in debugger, but I don't see any method to access it from ServletContext class. I am using virtual hosts and need this value inside my ServletContextListener ::contextInitialized() call back. Thanks. -Ajay

RE: mixing authentication schemes

2012-06-22 Thread Aggarwal, Ajay
. -Original Message- From: Pid [mailto:p...@pidster.com] Sent: Thursday, June 21, 2012 7:01 PM To: Tomcat Users List Subject: Re: mixing authentication schemes On 21/06/2012 20:34, Aggarwal, Ajay wrote: Sorry about the poor formatting of my message. Research OAuth. p -Original

mixing authentication schemes

2012-06-21 Thread Aggarwal, Ajay
CURRENT ENVIRONMENT Our device is managed via a tomcat 6 based web-server that runs on the device. We have a proprietary XML/JSON API that web based UI client uses to talk to web-server. We are NOT using container managed security. Instead our application has implemented its own

RE: mixing authentication schemes

2012-06-21 Thread Aggarwal, Ajay
Sorry about the poor formatting of my message. -Original Message- From: Aggarwal, Ajay [mailto:ajay.aggar...@stratus.com] Sent: Thursday, June 21, 2012 3:27 PM To: users@tomcat.apache.org Subject: mixing authentication schemes CURRENT ENVIRONMENT Our device is managed via a tomcat 6

HttpSessionActivationListener sessionDidActivate not getting called

2011-04-08 Thread Aggarwal, Ajay
This is strange. I did some work few months ago for my application to manage my sessions using a combination of HttpSessionActivationListener and HttpSessionListener (not going into the details here as to why I needed this). When I did that work HttpSessionActivationListener was working fine and

RE: HttpSessionActivationListener sessionDidActivate not getting called

2011-04-08 Thread Aggarwal, Ajay
[mailto:chuck.caldar...@unisys.com] Sent: Friday, April 08, 2011 2:05 PM To: Tomcat Users List Subject: RE: HttpSessionActivationListener sessionDidActivate not getting called From: Aggarwal, Ajay [mailto:ajay.aggar...@stratus.com] Subject: HttpSessionActivationListener sessionDidActivate not getting

RE: HttpSessionActivationListener sessionDidActivate not getting called

2011-04-08 Thread Aggarwal, Ajay
] 2011-04-08 15:05:40,464 org.apache.catalina.session.ManagerBase - Creating custom object input stream for class loader DEBUG [main] 2011-04-08 15:05:40,470 org.apache.catalina.session.ManagerBase - Loading 0 persisted sessions -Original Message- From: Aggarwal, Ajay [mailto:ajay.aggar

RE: HttpSessionActivationListener sessionDidActivate not getting called

2011-04-08 Thread Aggarwal, Ajay
] did any data actually get written to /shared/httpd/tomcat_sessions It could be that there is a permission problem best Filip On 4/8/2011 1:20 PM, Aggarwal, Ajay wrote: I enabled logging, created 1 session and restarted tomcat. This is what I see in the logs. Is there anything suspicious

IOException: Invalid chunk header

2010-12-22 Thread Aggarwal, Ajay
I am using standard HTTP 1.1 connector. This is what I see from tomcat output Ø INFO [main] 2010-12-22 07:43:03,071 org.apache.coyote.http11.Http11Protocol - Initializing Coyote HTTP/1.1 on http-9080 And here is the connector configuration element from server.xml Connector

RE: IOException: Invalid chunk header

2010-12-22 Thread Aggarwal, Ajay
) since it is your application receiving this data, any idea of when it happens ? at the beginning of the 50 GB, in the middle, at the end ? Aggarwal, Ajay wrote: I am using standard HTTP 1.1 connector. This is what I see from tomcat output Ø INFO [main] 2010-12-22 07:43:03,071

RE: enforcing SSL only for external clients

2010-12-09 Thread Aggarwal, Ajay
: Christopher Schultz [mailto:ch...@christopherschultz.net] -BEGIN PGP SIGNED MESSAGE- Ajay, On 12/8/2010 5:24 PM, Aggarwal, Ajay wrote: Most of the application will be over SSL for external clients. There is one part where the clients may upload or download a huge file over HTTP which I

RE: enforcing SSL only for external clients

2010-12-09 Thread Aggarwal, Ajay
significantly more stress on my server for these large file transfers were wrong. -Original Message- From: André Warnier [mailto:a...@ice-sa.com] Sent: Wednesday, December 08, 2010 5:58 PM To: Tomcat Users List Subject: Re: enforcing SSL only for external clients Aggarwal, Ajay wrote

RE: enforcing SSL only for external clients

2010-12-08 Thread Aggarwal, Ajay
Thanks to all who have given different suggestions. Binding HTTP (port 80) to 127.0.0.1 and HTTPS (port 443) to external/public IP will not work for me. My situation is slightly more complicated. For external clients, I want to enforce SSL only on part of my application (certain URLs) not all.

RE: enforcing SSL only for external clients

2010-12-08 Thread Aggarwal, Ajay
: Aggarwal, Ajay wrote: For external clients, I want to enforce SSL only on part of my application (certain URLs) not all. I will look into URL Rewrite as suggested by Nicholas. Mixing SSL and non-SSL parts within the same application is - in my humble view - a recipe for a lot

RE: Questions about installing APR

2010-12-07 Thread Aggarwal, Ajay
-Original Message- From: Aggarwal, Ajay [mailto:ajay.aggar...@stratus.com] Thanks for your help. That worked. -Original Message- From: Mark Eggers [mailto:its_toas...@yahoo.com] In RedHat-based Linux distributions (maybe in others), you'll need to install the development packages

enforcing SSL only for external clients

2010-12-07 Thread Aggarwal, Ajay
My tomcat application (running on a linux host) has 2 types of clients. Local clients coming on localhost (127.0.0.1) and external clients coming on external interfaces. I want to enforce use of SSL only for external clients. How do I do that? If I use security-constraint I am assuming it will

RE: enforcing SSL only for external clients

2010-12-07 Thread Aggarwal, Ajay
to the internet with an interface having a public IP. -Original Message- From: André Warnier [mailto:a...@ice-sa.com] Sent: Tuesday, December 07, 2010 2:27 PM To: Tomcat Users List Subject: Re: enforcing SSL only for external clients Aggarwal, Ajay wrote: My tomcat application (running

APR/Native: when to use it?

2010-12-02 Thread Aggarwal, Ajay
Couple of APR related questions: 1. Is it always advisable to use APR if tomcat is the main web server? Does it provide better performance for core tomcat engine or do you need to write code to take advantage of it? What are the pros and cons of using it? Are there cons? 2. Will

Questions about installing APR

2010-12-02 Thread Aggarwal, Ajay
My OS is centos 5.5, which has APR 1.2.7 pre-installed on it. # rpm -qa | grep apr apr-1.2.7-11.el5_3.1 apr-util-1.2.7-11.el5 I am using Tomcat version 6.0.20 and I located tomcat-native.tar.gz under tomcat/bin folder. I extracted the contents and now I am in

RE: APR/Native: when to use it?

2010-12-02 Thread Aggarwal, Ajay
Thanks for your quick response, but I still don't know when should I use APR. That comparison table doesn't help me much (perhaps my ignorance here). -Original Message- Is it always advisable to use APR if tomcat is the main web server? No. Does it provide better performance for

RE: Questions about installing APR

2010-12-02 Thread Aggarwal, Ajay
/ - Original Message From: Aggarwal, Ajay ajay.aggar...@stratus.com To: Tomcat Users List users@tomcat.apache.org Sent: Thu, December 2, 2010 1:08:38 PM Subject: Questions about installing APR My OS is centos 5.5, which has APR 1.2.7 pre-installed on it. # rpm -qa | grep apr apr-1.2.7-11

how to keep session alive on the server side

2010-11-23 Thread Aggarwal, Ajay
I have a situation where client enters a long duration request and I need to keep the session alive for the client while this long duration request is going on. Since this long duration request could be hours, I do not want to change the default HTTP session timeout value. I also do not want to

RE: how to keep session alive on the server side

2010-11-23 Thread Aggarwal, Ajay
)... or some other trick. -Original Message- From: André Warnier [mailto:a...@ice-sa.com] Sent: Tuesday, November 23, 2010 2:47 PM To: Tomcat Users List Subject: Re: how to keep session alive on the server side Aggarwal, Ajay wrote: I have a situation where client what kind of client ? enters

RE: how to keep session alive on the server side

2010-11-23 Thread Aggarwal, Ajay
SIGNED MESSAGE- Hash: SHA1 Chuck, On 11/23/2010 1:46 PM, Caldarale, Charles R wrote: From: Aggarwal, Ajay [mailto:ajay.aggar...@stratus.com] Subject: how to keep session alive on the server side I have a situation where client enters a long duration request and I need to keep the session

filter order question

2010-11-04 Thread Aggarwal, Ajay
From reading the doc, it seems the filters are invoked in the order in which they appear in filter-mapping in web.xml. However I have a situation where I have 2 filters one mapped using servlet-name and other one mapped using url-pattern and they are not being invoked in the right order. Below

RE: filter order question

2010-11-04 Thread Aggarwal, Ajay
Thank you so much Konstantin for pointing to these specs! -Original Message- From: Konstantin Kolinko [mailto:knst.koli...@gmail.com] Sent: Thursday, November 04, 2010 12:35 PM To: Tomcat Users List Subject: Re: filter order question 2010/11/4 Aggarwal, Ajay ajay.aggar...@stratus.com

session listener and tomcat restart

2010-11-03 Thread Aggarwal, Ajay
My requirements: 1) to be able to get the session given a JSESSIONID 2) to persist active sessions across tomcat restart (which is default tomcat behavior) Since there is no way in tomcat (for security reasons?) to obtain the session object given a JSESSIONID, I have implemented my

RE: session listener and tomcat restart

2010-11-03 Thread Aggarwal, Ajay
-Original Message- From: Aggarwal, Ajay [mailto:ajay.aggar...@stratus.com] Sent: Wednesday, November 03, 2010 11:34 AM To: Tomcat Users List Subject: session listener and tomcat restart My requirements: 1) to be able to get the session given a JSESSIONID 2) to persist active

RE: deploying as ROOT application

2010-10-27 Thread Aggarwal, Ajay
Thank you. That's exactly what I was looking for. -Original Message- From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] And look here, for step-by-step instructions: http://wiki.apache.org/tomcat/HowTo#How_do_I_make_my_web_application_be_ the_Tomcat_default_application_.3F

deploying as ROOT application

2010-10-26 Thread Aggarwal, Ajay
Where is the official Tomcat documentation on how to make your application a ROOT application? I am using Tomcat 6.0 and can't seem to locate the section on deploying as ROOT application. -Ajay

RE: Re: deploying as ROOT application

2010-10-26 Thread Aggarwal, Ajay
: Simon Funnell [mailto:simon.funn...@propositum.biz] Sent: Tuesday, October 26, 2010 3:42 PM To: users@tomcat.apache.org Subject: Fwd: Re: deploying as ROOT application On 26/10/10 20:31, Aggarwal, Ajay wrote: Where is the official Tomcat documentation on how to make your application a ROOT

RE: Re: deploying as ROOT application

2010-10-26 Thread Aggarwal, Ajay
Well, I was assuming these filters are global to Tomcat instance and not specific to an application. I haven't looked at available implementations of these filters yet. Based on your response I take it that my assumption is wrong. In that case, you are right, making my application as ROOT is a

RE: Re: deploying as ROOT application

2010-10-26 Thread Aggarwal, Ajay
fronting tomcat with something else? Like Apache httpd? I wouldn't classify deploying a ROOT application as experimental either way... -Original Message- From: Aggarwal, Ajay [mailto:ajay.aggar...@stratus.com] Sent: Tuesday, October 26, 2010 4:13 PM To: Tomcat Users List Subject: RE: Re

RE: Source Address based Realms

2010-10-21 Thread Aggarwal, Ajay
. From: Aggarwal, Ajay ajay.aggar...@stratus.com To: Tomcat Users List users@tomcat.apache.org Sent: Wed, October 20, 2010 12:53:42 PM Subject: RE: Source Address based Realms bump... looking for ideas... anybody? -Original Message- From: Aggarwal, Ajay [mailto:ajay.aggar

RE: Source Address based Realms

2010-10-21 Thread Aggarwal, Ajay
Thanks for the pointers! -Original Message- From: André Warnier [mailto:a...@ice-sa.com] Sent: Thursday, October 21, 2010 3:55 AM To: Tomcat Users List Subject: Re: Source Address based Realms Aggarwal, Ajay wrote: bump... looking for ideas... anybody? If the question finally

RE: Source Address based Realms

2010-10-20 Thread Aggarwal, Ajay
bump... looking for ideas... anybody? -Original Message- From: Aggarwal, Ajay [mailto:ajay.aggar...@stratus.com] Sent: Tuesday, October 19, 2010 10:29 AM To: Tomcat Users List Subject: RE: Source Address based Realms Sorry. I meant... Is there another way to achieve this, i.e. without

Source Address based Realms

2010-10-19 Thread Aggarwal, Ajay
I need to treat my clients differently depending on where they came from. I need to trust all requests coming locally (i.e. from 127.0.0.1/localhost) and not require them to authentication. However all external requests need to go through authentication. Is there a way to configure Realms in

RE: Source Address based Realms

2010-10-19 Thread Aggarwal, Ajay
Sorry. I meant... Is there another way to achieve this, i.e. without using Realms or mixing valve/filters with Realms? -Original Message- From: Aggarwal, Ajay [mailto:ajay.aggar...@stratus.com] Sent: Tuesday, October 19, 2010 9:45 AM To: users@tomcat.apache.org Subject: Source Address

RE: Source Address based Realms

2010-10-19 Thread Aggarwal, Ajay
: Source Address based Realms Aggarwal, Ajay wrote: I need to treat my clients differently depending on where they came from. I need to trust all requests coming locally (i.e. from 127.0.0.1/localhost) and not require them to authentication. However all external requests need to go through

tomcat shutdown: catalina.sh STOP vs SIGTERM

2010-03-08 Thread Aggarwal, Ajay
Sometimes on a busy system I have seen that catalina.sh stop does take a long time to shutdown tomcat. We are running another monitoring service on the system that monitors tomcat and few other system services. After issuing catalina.sh and waiting for some time (up to 25 seconds) it loses

RE: tomcat shutdown: catalina.sh STOP vs SIGTERM

2010-03-08 Thread Aggarwal, Ajay
...@christopherschultz.net] Sent: Monday, March 08, 2010 1:33 PM To: Tomcat Users List Subject: Re: tomcat shutdown: catalina.sh STOP vs SIGTERM -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ajay, On 3/8/2010 12:53 PM, Aggarwal, Ajay wrote: Sometimes on a busy system I have seen that catalina.sh stop