On 25/05/2022 12:08, Aditya Kumar wrote:
Thanks! Sorry I misread that article.

So I suppose it's the same for maxHttpRequestHeaderSize and
maxHttpResponseHeaderSize?

Correct.

Mark





On Wed, May 25, 2022 at 10:45 AM Mark Thomas <ma...@apache.org> wrote:

On 25/05/2022 10:33, Aditya Kumar wrote:
I'm sorry I'm not sure what you mean by Integer.MAX_VALUE?

https://docs.oracle.com/javase/8/docs/api/java/lang/Integer.html#MAX_VALUE

Looking at https://tomcat.apache.org/tomcat-9.0-doc/config/http.html
all I
see is this:-
"maxHttpHeaderSize

The maximum size of the request and response HTTP header, specified in
bytes. If not specified, this attribute is set to 8192 (8 KB)."
This does not explain possible values. Can you give me an actual number
for
the maximum?

See above.

The theoretical maximum is so far above any sensible value there is not
much point documenting it.

Also I saw in this article:

https://community.jaspersoft.com/wiki/how-pass-big-number-values-apache-tomcat-url-string

" A value of less than 0 means no limit."

That text is copied directly from the Tomcat documentation and is part
of the description for maxParameterCount, not maxHttpHeaderSize. What
makes you think it might apply to maxHttpHeaderSize?

Mark




On Wed, May 25, 2022 at 10:19 AM Mark Thomas <ma...@apache.org> wrote:

On 25/05/2022 09:51, Aditya Kumar wrote:
Hi

I'm using Tomcat 9.0.46 and I want to know what is the maximum possible
value for maxHttpHeaderSize

Integer.MAX_VALUE

I have Tomcat setup using kerberos authentication and for some users
the
Authorisation header is too large (too many AD groups).

I have seen various articles when googling but I want something from
official documentation to state what the possible values for this field
are. Is it true that setting a value of "-1" causes a limitless maximum
header size value?

Where did you read that? I don't see that in the documentation.

Mark

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org




---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org




---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to