Re: [ANN] JK 1.2.10 Released
Hi Mladen, Thank you for this release. Some questions : - Why don't you provide any more a binary release for linux (since 1.2.6) ? - I've not found any documentation on the status worker (and web page) and the ability to reload jk configuration without a reload of apache. Can you tell me more about these new features (or give me a link I missed) ? Thanks in advance. Regards. On Thu, 31 Mar 2005 08:52:31 +0200 Mladen Turk [EMAIL PROTECTED] wrote: The Apache Jakarta Tomcat team is proud to announce the immediate availability of Jakarta Tomcat Connectors 1.2.10. The release contains a significant number of bug fixes and new features. Please see the http://jakarta.apache.org/tomcat/connectors-doc/changelog.html for a full list of changes. With release 1.2.10 the JkShmFile property has been added for Apache 1.3.x and Apache 2.x web servers on UNIX and LINUX platforms. Load balancer will not work properly if this directive is not present. Please refer to the change log for the list of changes: http://jakarta.apache.org/tomcat/connectors-doc/changelog.html Sources can be found at: http://www.apache.org/dist/jakarta/tomcat-connectors/jk/source/jk-1.2.10/ Binaries can be found at: http://www.apache.org/dist/jakarta/tomcat-connectors/jk/binaries/ For now there is only a set of win32 binaries: http://www.apache.org/dist/jakarta/tomcat-connectors/jk/binaries/win32/jk-1.2.10/ If you find any bugs while using this release, please fill in the http://issues.apache.org/bugzilla/enter_bug.cgi?product=Tomcat%205 Bug Report. When entering bug select Native:JK Component. The Jakarta Tomcat Connectors Team. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
How could I autodeploy my webapps onto arbitrary path -s?
Hi, Formerly, with Tomcat 4.1, I was able to dynamically create small xml files (e.g. context-foo-editor.xml), which I dropped into the appBase directory. The files contained some Context elements like: Context path=/company/foo/editor docBase=/... Then a could access my application via: http://www...com/company/foo/editor/ In 5.5.7, the path= parameter is forbidden with these context xml files. The path will be derived from the file name. Subdirectories are not processed, not even in the $CATALINA_HOME/conf/[enginename]/[hostname] folder. How could I autodeploy my webapps onto arbitrary path -s? Thanks for the help. Zoltan - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [ANN] JK 1.2.10 Released
Lionel Farbos wrote: Some questions : - Why don't you provide any more a binary release for linux (since 1.2.6) ? It's up to the contributors (jk committers). Now, my company (JBoss) has invested a great deal of money to provide me with hardware and software needed for such tasks, but you'll have to wait couple of weeks before I set that all systems up and running, so we can have binaries for all the major linux distributions. Again, having all of them covered would be simply impossible, because there are jut too many kernel/cpu/distro/apache combinations that would satisfy all. I mean I can for sure predict a question: Why the hell my favorite XXX distribution does not have binary? Regards, Mladen. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
remove stack-trace from public web
Hi! Is there anyway to make tomcat not print the stack trace when jsp fails? -- Andreas Andersson IT Dept. Travelstart Nordic [EMAIL PROTECTED] http://www.travelstart.se - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
start/stop-script from source dist
Is there a start/stop-script in the source distribution thats suitable to run from /etc/init.d on linux? Or is there a way to make one automatically? -- Andreas Andersson IT Dept. Travelstart Nordic [EMAIL PROTECTED] http://www.travelstart.se - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: remove stack-trace from public web
Write stuff like this into your app's web.xml file. error-page error-code404/error-code location/common/notFound.html/location /error-page error-page error-code403/error-code location/common/file.html/location /error-page error-page error-code500/error-code location/common/error.html/location /error-page Viorel Dragomir . .. --- - Original Message - From: Andreas Andersson To: Tomcat Users List Sent: Thursday, March 31, 2005 13:22 Subject: remove stack-trace from public web Hi! Is there anyway to make tomcat not print the stack trace when jsp fails? -- Andreas Andersson IT Dept. Travelstart Nordic [EMAIL PROTECTED] http://www.travelstart.se - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: remove stack-trace from public web
You can use an error page to display when an exception occurs. This can be configured in web.xml. for eg. error-page exception-typejava.lang.Exception/exception-type location/internalError.html/location /error-page it can be used with HTTP error status also. The following displays invalidpage.html if a page is not found. error-page error-code404/error-code location/invalidpage.html/location /error-page On Thu, 31 Mar 2005 13:22:40 +0200, Andreas Andersson [EMAIL PROTECTED] wrote: Hi! Is there anyway to make tomcat not print the stack trace when jsp fails? -- Andreas Andersson IT Dept. Travelstart Nordic [EMAIL PROTECTED] http://www.travelstart.se - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] -- rgds Antony Paul http://www.geocities.com/antonypaul24/ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Closed Input Stream across firewall
The firewall is not the problem. If you are using ServletRequest.getInputStream() - you cannot use ServletRequest.getParameter(). Odds are something is calling getParameter() which in turn getParameter() reads the input stream and makes it unavailable. -Tim Vineet Chopra wrote: I am using a web application deployed on Tomcat 4.0 to receive and route incoming XML messages to destination web application also deployed on Tomcat 4.0. A firewall exists between these servers. All firewall policies are enabled for incoming and outgoing traffic. The ServletInputStream is already closed before I use it to create an object of InputStreamReader. Thus I am not able to read the stream. I did a snoop on the ports of these server which displayed the relay of request XML reaching the destination port and invoking the servlet in the destination web application but failing to read the XML since the input stream has been closed. Can you give me any leads as to how to debug the problem. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Installing Tomcat service: Unable to manually insert values for JvmMx and JvmMs in registry
Lakshmi Narayanan K. wrote: Hi Mladen, Now, my question is, can I roll out only this executable as that of Tomcat version 5.0.28? Or do I need to roll out some other files as well? Sure you can. Tomcat5.exe and Tomcat5w.exe are not part of tomcat, but rather jakarta-commons/daemon project. The name of the binaries are just mimicking the default service name, and that is Tomcat5. So you can even for your use case rename them to: OvTomcatA.exe and OvTomcatAw.exe and use: 'OvTomcatA.exe //US// --JvmSs 256' So, simply replace the binaries on deployment, or use more recent Tomcat distributions that has the newest binaries included. I would suggest that you do that at first place. Regards, Mladen. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: start/stop-script from source dist
Check for RPM/deb distributions. This one is useful. http://www.raibledesigns.com/tomcat/boot-howto.html . I hadnt tried it yet. On Thu, 31 Mar 2005 13:27:16 +0200, Andreas Andersson [EMAIL PROTECTED] wrote: Is there a start/stop-script in the source distribution thats suitable to run from /etc/init.d on linux? Or is there a way to make one automatically? -- Andreas Andersson IT Dept. Travelstart Nordic [EMAIL PROTECTED] http://www.travelstart.se - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] -- rgds Antony Paul http://www.geocities.com/antonypaul24/ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Réf. : start/stop-script from source dist
Andreas, If your need is to restart a webapp, you can use ant to access the following URL (assuming you run the command on the same server than tomcat) : here is the target in the build.xml file target name=reload get src =http://{tomcatserver}:{port}/manager/html/stop?path/{webappname}; dest =/dev/null usetimestamp=true username={your user name} password ={your admin password} ignoreerrors=true / get src =http://{tomcatserver}:{port}/manager/html/start?path/{webappname}; dest =/dev/null usetimestamp=true username={your user name} password ={your admin password} ignoreerrors=true / /target then run the script with : ant reload That's the way we do that. Cyril ZEKSER Andreas AnderssonPour : Tomcat Users List tomcat-user@jakarta.apache.org [EMAIL PROTECTED] cc : tart.se Objet : start/stop-script from source dist 31/03/2005 13:27 Veuillez répondre à Tomcat Users List Is there a start/stop-script in the source distribution thats suitable to run from /etc/init.d on linux? Or is there a way to make one automatically? -- Andreas Andersson IT Dept. Travelstart Nordic [EMAIL PROTECTED] http://www.travelstart.se - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Apache as front-end for several tomcat
There are 3 backend servers, 2 servers run one Tomcat on standard ports and 1 server runs two Tomcat on different ports (see file workers.porperties). For the log file, I have only 1 log file for all the workers defined in mod_jk.conf by the following line : # Where to put jk logs JkLogFile logs/mod_jk.log So I don't have any info about the other workers. If you are talking about the other tomcat, I can access them directly via their IP and port with a browser on the LAN. So I can say all the tomcat servers are up and running. The strange thing is that this setup works fine with mod_JK2. But I would like to have a setup with JK1 since JK2 is not supported anymore. Regards, Christophe On 31-mars-05, at 01:28, Montz, James C. (James Tower) wrote: Are the Tomcat instance running on the same physical server and you are just using IP Aliases, or are the workers running on 3 sperate backend machines? You apache config looks OK, so I don't believe its an issue with Apache Virtual Host configuration. I believe all work in being forwarded to Demo1 only. I believe you can have multiple instances of tomcat listening on the same port by specifying an IP address in the connector. But I find it much easier just to congigure each instance to listen on a different port. If you check your other 2 workers log files, you will probably see an error similar to Bind address already in use. Modify each Tomcat instance to the SHUTDOWN and AJP listener are each on unique ports; For example, In each respective instance server.xml use; Demo1 Shutdown: 8001 Demo1 HTTP: 8081 Demo1 AJP Listener: 8101 Demo2 Shutdown: 8002 Demo2 HTTP: 8082 Demo2 AJP Listeer: 8102 Demo3 Shutdown: 8003 Demo3 HTTP: 8083 Demo3 AJP Listern: 8103 Restart each instance (check the catalina.out for errors) Modify your workers.properties file to relect the new AJP listen ports Restart Apache -Original Message- From: Dan Barron [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 30, 2005 3:48 PM To: Tomcat Users List; Tomcat Users List Subject: Re: Apache as front-end for several tomcat If you are running multiple instances of Tomcat, from what I understand and from my configuration (i run two Tomcat/mod_jk2 with Apache) you would then need each of them to listen on a different port. Right now the only instance that will receive requests via the worker is the instance that is using port 8009. At 01:33 PM 3/30/2005, Christophe Lemaire wrote: Not sure. I have seen several config of name based virtual hosts that listen on the same port. On 30-mars-05, at 23:02, Didier McGillis wrote: would it be the fact that your sending the requests through the same port number? From: Christophe Lemaire [EMAIL PROTECTED] Reply-To: Tomcat Users List tomcat-user@jakarta.apache.org To: tomcat-user@jakarta.apache.org Subject: Apache as front-end for several tomcat Date: Wed, 30 Mar 2005 22:12:27 +0200 Hello, I would like to setup a Apache 2.0.53 as front-end for several Tomcat 5.0.19. I use JK1.2.8 as connector. I have defined one worker per tomcat server. I use three name based virtual hosts in the apache config. The problem is only the first virtual host works. In the mod_jk.log, I can see that every request sent to the apache are checked with the JkMount from the first virtual host only. Here are my config files : workers.properties --- worker.list=demo1,demo2,demo3,stat worker.demo1.type=ajp13 worker.demo1.host=192.168.0.1 worker.demo1.port=8009 worker.demo2.type=ajp13 worker.demo2.host=192.168.0.2 worker.demo2.port=8009 worker.demo3.type=ajp13 worker.demo3.host=192.168.0.3 worker.demo3.port=8009 worker.stat.type=ajp13 worker.stat.host=192.168.0.3 worker.stat.port=7201 - end of workers.properties --- In the httpd.conf file, I include the file mod_jk.conf (no other virtual hosts are defined in httpd.conf): mod_jk.conf --- # Load mod_jk module LoadModule jk_module modules/mod_jk.so # Where to find workers.properties JkWorkersFile conf/workers.properties # Where to put jk logs JkLogFile logs/mod_jk.log # Set the jk log level [debug/error/info] JkLogLevel debug # Select the log format JkLogStampFormat [%a %b %d %H:%M:%S %Y] # JkRequestLogFormat set the request format JkRequestLogFormat %w %V %T NameVirtualHost *:81 VirtualHost *:81 ServerName demo1.myweb.org JkMount /*/tracking/* stat JkMount /tracking/* stat JkMount /web/* demo1 JkMount /ald/* demo1 JkMount /htmleditor/* demo1 JkMount /* demo1 /VirtualHost VirtualHost *:81 ServerName demo2.myweb.org JkMount /*/tracking/* stat JkMount /* demo2 /VirtualHost VirtualHost *:81 ServerName demo3.myweb.org JkMount /*/tracking/* stat JkMount /* demo3 /VirtualHost - end of mod_jk.conf --- Extract from mod_jk.log : URL typed in the browser : http://demo3.myweb.org:81/ [Wed Mar 30 22:15:46 2005] [12762:8192] [debug]
Re: Apache as front-end for several tomcat
Oh, I forgot to say I can't see which virtual host is used in the access_log. How can I do that? Here is what I have in the access log : 194.78.221.136 - - [31/Mar/2005:13:41:11 +0200] GET / HTTP/1.1 401 942 194.78.221.136 - - [31/Mar/2005:13:41:11 +0200] GET / HTTP/1.1 401 942 Christophe There are 3 backend servers, 2 servers run one Tomcat on standard ports and 1 server runs two Tomcat on different ports (see file workers.porperties). For the log file, I have only 1 log file for all the workers defined in mod_jk.conf by the following line : # Where to put jk logs JkLogFile logs/mod_jk.log So I don't have any info about the other workers. If you are talking about the other tomcat, I can access them directly via their IP and port with a browser on the LAN. So I can say all the tomcat servers are up and running. The strange thing is that this setup works fine with mod_JK2. But I would like to have a setup with JK1 since JK2 is not supported anymore. Regards, Christophe On 31-mars-05, at 01:28, Montz, James C. (James Tower) wrote: Are the Tomcat instance running on the same physical server and you are just using IP Aliases, or are the workers running on 3 sperate backend machines? You apache config looks OK, so I don't believe its an issue with Apache Virtual Host configuration. I believe all work in being forwarded to Demo1 only. I believe you can have multiple instances of tomcat listening on the same port by specifying an IP address in the connector. But I find it much easier just to congigure each instance to listen on a different port. If you check your other 2 workers log files, you will probably see an error similar to Bind address already in use. Modify each Tomcat instance to the SHUTDOWN and AJP listener are each on unique ports; For example, In each respective instance server.xml use; Demo1 Shutdown: 8001 Demo1 HTTP: 8081 Demo1 AJP Listener: 8101 Demo2 Shutdown: 8002 Demo2 HTTP: 8082 Demo2 AJP Listeer: 8102 Demo3 Shutdown: 8003 Demo3 HTTP: 8083 Demo3 AJP Listern: 8103 Restart each instance (check the catalina.out for errors) Modify your workers.properties file to relect the new AJP listen ports Restart Apache -Original Message- From: Dan Barron [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 30, 2005 3:48 PM To: Tomcat Users List; Tomcat Users List Subject: Re: Apache as front-end for several tomcat If you are running multiple instances of Tomcat, from what I understand and from my configuration (i run two Tomcat/mod_jk2 with Apache) you would then need each of them to listen on a different port. Right now the only instance that will receive requests via the worker is the instance that is using port 8009. At 01:33 PM 3/30/2005, Christophe Lemaire wrote: Not sure. I have seen several config of name based virtual hosts that listen on the same port. On 30-mars-05, at 23:02, Didier McGillis wrote: would it be the fact that your sending the requests through the same port number? From: Christophe Lemaire [EMAIL PROTECTED] Reply-To: Tomcat Users List tomcat-user@jakarta.apache.org To: tomcat-user@jakarta.apache.org Subject: Apache as front-end for several tomcat Date: Wed, 30 Mar 2005 22:12:27 +0200 Hello, I would like to setup a Apache 2.0.53 as front-end for several Tomcat 5.0.19. I use JK1.2.8 as connector. I have defined one worker per tomcat server. I use three name based virtual hosts in the apache config. The problem is only the first virtual host works. In the mod_jk.log, I can see that every request sent to the apache are checked with the JkMount from the first virtual host only. Here are my config files : workers.properties --- worker.list=demo1,demo2,demo3,stat worker.demo1.type=ajp13 worker.demo1.host=192.168.0.1 worker.demo1.port=8009 worker.demo2.type=ajp13 worker.demo2.host=192.168.0.2 worker.demo2.port=8009 worker.demo3.type=ajp13 worker.demo3.host=192.168.0.3 worker.demo3.port=8009 worker.stat.type=ajp13 worker.stat.host=192.168.0.3 worker.stat.port=7201 - end of workers.properties --- In the httpd.conf file, I include the file mod_jk.conf (no other virtual hosts are defined in httpd.conf): mod_jk.conf --- # Load mod_jk module LoadModule jk_module modules/mod_jk.so # Where to find workers.properties JkWorkersFile conf/workers.properties # Where to put jk logs JkLogFile logs/mod_jk.log # Set the jk log level [debug/error/info] JkLogLevel debug # Select the log format JkLogStampFormat [%a %b %d %H:%M:%S %Y] # JkRequestLogFormat set the request format JkRequestLogFormat %w %V %T NameVirtualHost *:81 VirtualHost *:81 ServerName demo1.myweb.org JkMount /*/tracking/* stat JkMount /tracking/* stat JkMount /web/* demo1 JkMount /ald/* demo1 JkMount /htmleditor/* demo1 JkMount /* demo1 /VirtualHost VirtualHost *:81 ServerName demo2.myweb.org JkMount /*/tracking/* stat JkMount /* demo2 /VirtualHost
Webdav Webfolder issue when container security enabled
Using Windows XP SP 2 , Net Framework 1.1,MSDAIPP.DLL 11.0.5510.0 Tomcat version 4.1.21 5.5.7 JDK version 1.4.2_06 I cannot open pdf files, zip files, . (with office files, image files. it works fine) inside webfolders when basic authentication is enabled. I have the same problem using tomcat's webdav app; in such case I can read, at server's console, the following: [Fatal Error] :-1:-1: Premature end of file. The problem arise when I try to open recently uploaded files. Disabling container's security all works fine I don't know if line breaks in the response could affect webfolder client. In the following example file I have found several diffs when auth is enabled. Mime types, content-length etc all OK in both responses. Example PDF file - authentication disabled. All works %PDF-1.3 % 340 0 obj /Linearized 1 . . . 353 0 obj /S 1720 /Filter /FlateDecode /Length 354 0 R - authentication disabled. All works - authentication enabled. Fails %PDF-1.3 % 340 0 obj /Linearized 1 . . . 353 0 obj /S 1 720 /Filter /FlateDecode /Length 354 0 R - authentication enabled. Fails Thanks in advance
Re: How could I autodeploy my webapps onto arbitrary path -s?
On Wed, Mar 30, 2005 at 06:11:38PM +0200, Zoltan Kanizsai wrote: : In 5.5.7, the path= parameter is forbidden with these : context xml files. The path will be derived from the : file name. Subdirectories are not processed, not even in : the $CATALINA_HOME/conf/[enginename]/[hostname] folder. : : How could I autodeploy my webapps onto arbitrary path -s? There was a recent thread on just this subject. You have to put special chars in the filename, which are interpreted as / characters as the file is processed. I don't recall the exact character, but you should be able to find it in the archives. -QM -- software -- http://www.brandxdev.net/ tech news -- http://www.RoarNetworX.com/ code scan -- http://www.JxRef.org/ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Apache as front-end for several tomcat
Use one Logger per apache Virtual Host; something like that : VirtualHost demo1.myweb.org:81 ServerName demo1.myweb.org CustomLog /var/log/demo1_vhost_access.log combined JkMount / demo1 ... /VirtualHost VirtualHost demo2.myweb.org:81 ServerName demo2.myweb.org CustomLog /var/log/demo2_vhost_access.log combined JkMount / demo2 ... /VirtualHost ... And, I think you have to have a config with a JkMount on / Regards On Thu, 31 Mar 2005 13:50:15 +0200 Christophe Lemaire [EMAIL PROTECTED] wrote: Oh, I forgot to say I can't see which virtual host is used in the access_log. How can I do that? Here is what I have in the access log : 194.78.221.136 - - [31/Mar/2005:13:41:11 +0200] GET / HTTP/1.1 401 942 194.78.221.136 - - [31/Mar/2005:13:41:11 +0200] GET / HTTP/1.1 401 942 Christophe There are 3 backend servers, 2 servers run one Tomcat on standard ports and 1 server runs two Tomcat on different ports (see file workers.porperties). For the log file, I have only 1 log file for all the workers defined in mod_jk.conf by the following line : # Where to put jk logs JkLogFile logs/mod_jk.log So I don't have any info about the other workers. If you are talking about the other tomcat, I can access them directly via their IP and port with a browser on the LAN. So I can say all the tomcat servers are up and running. The strange thing is that this setup works fine with mod_JK2. But I would like to have a setup with JK1 since JK2 is not supported anymore. Regards, Christophe On 31-mars-05, at 01:28, Montz, James C. (James Tower) wrote: Are the Tomcat instance running on the same physical server and you are just using IP Aliases, or are the workers running on 3 sperate backend machines? You apache config looks OK, so I don't believe its an issue with Apache Virtual Host configuration. I believe all work in being forwarded to Demo1 only. I believe you can have multiple instances of tomcat listening on the same port by specifying an IP address in the connector. But I find it much easier just to congigure each instance to listen on a different port. If you check your other 2 workers log files, you will probably see an error similar to Bind address already in use. Modify each Tomcat instance to the SHUTDOWN and AJP listener are each on unique ports; For example, In each respective instance server.xml use; Demo1 Shutdown: 8001 Demo1 HTTP: 8081 Demo1 AJP Listener: 8101 Demo2 Shutdown: 8002 Demo2 HTTP: 8082 Demo2 AJP Listeer: 8102 Demo3 Shutdown: 8003 Demo3 HTTP: 8083 Demo3 AJP Listern: 8103 Restart each instance (check the catalina.out for errors) Modify your workers.properties file to relect the new AJP listen ports Restart Apache -Original Message- From: Dan Barron [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 30, 2005 3:48 PM To: Tomcat Users List; Tomcat Users List Subject: Re: Apache as front-end for several tomcat If you are running multiple instances of Tomcat, from what I understand and from my configuration (i run two Tomcat/mod_jk2 with Apache) you would then need each of them to listen on a different port. Right now the only instance that will receive requests via the worker is the instance that is using port 8009. At 01:33 PM 3/30/2005, Christophe Lemaire wrote: Not sure. I have seen several config of name based virtual hosts that listen on the same port. On 30-mars-05, at 23:02, Didier McGillis wrote: would it be the fact that your sending the requests through the same port number? From: Christophe Lemaire [EMAIL PROTECTED] Reply-To: Tomcat Users List tomcat-user@jakarta.apache.org To: tomcat-user@jakarta.apache.org Subject: Apache as front-end for several tomcat Date: Wed, 30 Mar 2005 22:12:27 +0200 Hello, I would like to setup a Apache 2.0.53 as front-end for several Tomcat 5.0.19. I use JK1.2.8 as connector. I have defined one worker per tomcat server. I use three name based virtual hosts in the apache config. The problem is only the first virtual host works. In the mod_jk.log, I can see that every request sent to the apache are checked with the JkMount from the first virtual host only. Here are my config files : workers.properties --- worker.list=demo1,demo2,demo3,stat worker.demo1.type=ajp13 worker.demo1.host=192.168.0.1 worker.demo1.port=8009 worker.demo2.type=ajp13 worker.demo2.host=192.168.0.2 worker.demo2.port=8009 worker.demo3.type=ajp13 worker.demo3.host=192.168.0.3 worker.demo3.port=8009 worker.stat.type=ajp13 worker.stat.host=192.168.0.3 worker.stat.port=7201 - end of workers.properties --- In the httpd.conf file, I include the file mod_jk.conf (no other virtual hosts are defined in httpd.conf):
Embedded tomcat ussage
Hello All! I have a question concerning embedded tomcat. How to make it even more embedded as it is? I.e. do not extract war file somewhere but getting a files from it directly? Is there any standart way to acomplish it? BR Renat - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
hosting in Croatia
Don't really know why I'm writing in english :), but here goes... Tomcat/jetty/jboss hosting in Croatia seems to be much more of a problem than I anticipated, so I need advice on how to proceed. Just go with the flow and develop for .net :) or is there something I've missed? Is hosting an issue anywhere else? Oh, right: I want to host a couple of tapestry applications (more are on the way, too) - are there possibilities outside the realm of tomcat, jetty and jboss? Do I have other possibilities? Tomislav - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Locked jar during Ant undeploy on Tomcat 5.5.3
Hi, I'm experiencing a similar problem, I read the Tomcat docs and this thread first before submitting. In my case, on freshly unzipped Tomcat versions 5.0.25, 5.0.28 and 5.5.4 the catalina ant task 'undeploy' encounters a locked jar-file situation. I suspect the jar-file is locked because the webapp's web.xml file specifies configuration files from that jar-file (n.b. for Spring context loading). The Tomcat production version I want to undeploy on is 5.0.25. Also, the logs indicated Tomcat tries to redeploy the webapp after executing the undeploy task : INFO: Server startup in 12359 ms 31-Mar-2005 17:07:37 org.apache.catalina.core.ContainerBase log INFO: Removing web application at context path /mywebapp 31-Mar-2005 17:07:46 org.apache.catalina.core.StandardHostDeployer install INFO: Installing web application at context path /mywebapp from URL file:C:\webservers\jakarta-tomcat-5.0.28\webapps\mywebapp 31-Mar-2005 17:07:46 org.apache.catalina.startup.ContextConfig applicationConfig INFO: Missing application web.xml, using defaults only StandardEngine[Catalina].StandardHost[localhost].StandardContext[/mywebapp] Various options seem open to me, I want to try this list first because I can imagine this problem is common and goes beyond simple configuration errors ... Kind regards, Q -Original Message- From: Derek Mahar [mailto:[EMAIL PROTECTED] Sent: 14 October 2004 20:15 To: tomcat-user@jakarta.apache.org Subject: Re: Locked jar during Ant undeploy on Tomcat 5.5.3 Thank you for pointing out these redundant attributes. I applied these changes to the context, but got the same results. If I have time, I'll put together a small application that demonstrates the problem and send that to you. If the issue is real, then I think there will be someone to provide a webapp. Yes, and that person's me! :) I just sent a test WAR that demonstrates the problem directly to your Gmail address. As I'm using Gmane, and Gmane does not allow attachments, I could not attach the WAR to this message. Derek - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [ANN] JK 1.2.10 Released
Lionel Farbos wrote: - I've not found any documentation on the status worker (and web page) and the ability to reload jk configuration without a reload of apache. Can you tell me more about these new features (or give me a link I missed) ? I second this request. -- Chris Egolf http://www.ugholf.net cegolf [AT] ugholf [DOT] net - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: hosting in Croatia
t.n.a. wrote: Don't really know why I'm writing in english :), but here goes... Da, mozda bi bilo bolje da si pitao neku lokalnu grupu, recimo hr.fido.java. Tomcat/jetty/jboss hosting in Croatia seems to be much more of a problem than I anticipated, so I need advice on how to proceed. Just go with the flow and develop for .net :) or is there something I've missed? Is hosting an issue anywhere else? I suppose It's like everywhere, but I don't understand why did you post that question to the Tomcat users list ? There are lots of providers in Croatia that offer Tomcat as part of their hosting. There are some that will give you a full server on your own, but like everywhere it all depends how much money you are willing to spend. Also, why would you care where the physical location of the box is? Regards, Mladen. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Tomcat Hang on Linux (hangs the entire system)
Hi, One thing I have found helpful in the past is to looks at sar statistics leading up to a system lockup. If it doesn't occur too quickly you might catch something building up on the system. You must have the sysstat package installed. See man sar. I check things like process creation, memory, swapping, etc. Jim T. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Thursday, March 31, 2005 1:44 AM To: Tomcat Users List Subject: Re: Tomcat Hang on Linux (hangs the entire system) Hi, You can try the following step by step approach 1) Check whether you are able to run the examples application in tomcat. If you are not able to run that there's a problem with tomcat configuration or the JVM. 2) If that runs smoothly without any problems, check your application and ensure that it doesn't go into any infinite loops etc, since that's one runaway thing that can bring down the whole machine consuming lot of cpu and perhaps even memory leaving no room for anything else. 3) If your application is OK, make sure no other application is consuming lot of CPU or memory. -- Original Message -- On 31 Mar 2005, 04:43:10 PM, Viorel Dragomir writes: It might be a hardware related problem. Try to change the memory. Viorel Dragomir . .. --- - Original Message - From: Steve Vanspall To: tomcat-user@jakarta.apache.org Sent: Thursday, March 31, 2005 09:38 Subject: Tomcat Hang on Linux (hangs the entire system) Hi there, I am posting this in a few areas because I cannot pinpoint where the problem stems from. I have a standard Pentium III bases pc running linux. It has only 380 meg (or therabouts) of ram Using IBM JVM 1.4.1 and tomcat 4.1.18 (I know there are later version, but they all hang) I have 2 webapps running. One of them uses Apache to translate two different domain to the right ibay for it's content but uses the same code base. The second webapp is accessed, currently, using http://www.mycomapny.com:8080/MyApp style URL. The webapp just hangs. It will not load any pages, and when it hangs, both webapps hang. So I think this is a Tomcat or Java or Linux error. Once the hang occurs I cannot do a ps -ef as this also hangs. My only option is to reboot the machine. But it hangs half way and has to be physically powered off. We are going to put a new, more powerful computer in there, but for now I wanted to see if anyone else had experienced such a problem. Can you give me some pointers as to where to look for the source of the problem. This has happened before, and I got no information about it. I know it's a pretty vague explanation, but I don't know what more informationI can give you. The log files do not show any errors, and it never happens at the same point in the web application. At first I thought it happen when concurrent users logged in, but that's not the case either, and I have trimmed down the sychornicity management when accesing Singletons in my web app. Now I have been through all my code, and cannot find anything that should be causing an error. I have run the code under a number of different cirsumstances on my development machine (Windows 2000) and everything runs without a problem. Any help would be appreciated Regards Steve - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [ANN] JK 1.2.10 Released
Chris Egolf wrote: Lionel Farbos wrote: - I've not found any documentation on the status worker (and web page) and the ability to reload jk configuration without a reload of apache. Can you tell me more about these new features (or give me a link I missed) ? I second this request. Yes, seems we simply did not catch the time to finish all the docs. I'll try to write something ASP and put it onto: http://jakarta.apache.org/tomcat/connectors-doc/ For now: To be able to use the new load balancer manager for mod_jk you will need to use the shared memory if using non-windows operating system. Also the status worker will show and be able to manage only load balancer workers and its members. Inside your httpd.conf add the following directive to the rest of mod_jk directives: IfModule mod_jk.c ... JkShmFile logs/mod_jk.shm ... /IfModule ... Location /jkstatus/ JkMount status Order deny,allow Deny from all Allow from 127.0.0.1 /Location Inside your workers.properties you will need to add the status worker. The status worker needs to be present inside worker.list, like any other worker that has uri mapping. # workers.properties ... worker.list=status,... ... worker.status.type=status # You can add your own custom .css # Uncoment and use the apache manual stylesheet # worker.status.css=/manual/style/css/manual.css Now open your browser to the localhost/jkstatus/ and enjoy :). Hope this helps a bit. Regards, Mladen. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [ANN] JK 1.2.10 Released
Return Receipt Your Re: [ANN] JK 1.2.10 Released document: wasIlya Nabedrik/PHIL/FRS received by: at:03/31/2005 12:21:47 PM - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Tomcat -- port 80 for Linux
configure apache with tomcat ( if u have some static files in your webapp then performance becomes faster ) use mod_jk connector runing go to apache.org ( go to tomcat ... go to connector and READ and have fun vaneet -Original Message- From: FRANCOIS Dufour [mailto:[EMAIL PROTECTED] Sent: Wed 3/30/2005 2:50 PM To: tomcat-user@jakarta.apache.org Cc: Subject: RE: Tomcat -- port 80 for Linux somwere your going to see this in your server xml under /conf of your tomcat_home folder if there you say 80 it will run on 80 exept if there is alredy somting on port 80? Define a non-SSL HTTP/1.1 Connector on port 8080- Connector className=org.apache.catalina.connector.http.HttpConnector port=8080- [EMAIL PROTECTED] administrateur http://monteregiechat.org From: Jury Levykin [EMAIL PROTECTED] Reply-To: Tomcat Users List tomcat-user@jakarta.apache.org To: tomcat-user@jakarta.apache.org Subject: Tomcat -- port 80 for Linux Date: Wed, 30 Mar 2005 14:24:36 +0400 Hello! I use tomcat 5.5 as main web server at Linux host. Me need run tomcat in port 80. To solve this task I see two way: 1. Running tomcat as daemon in port 80 by jsvc command. 2. Running apache in port 80 and use mod_jk to redirect users request to tomcat. What way is most secure? - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Vaneet Sharma executive manager iDeasTank Limited an iwg business dolphins' court po 388 valletta, m-malta/europe mobile: +356 9943 8263 skype: CALLVANEET fax: +356 9952 phone: +356 9942 [EMAIL PROTECTED] call me on www.skype.com - my ID is CALLVANEET Want a signature like this? - www.plaxo.com\signature iwg is a global e-mobile company creating, building and growing new businesses. iwg founders are pioneers in creating multi-billion dollar mobile and Internet businesses in Europe, Asia and the US. www.iWG.info www.countryprofiler.com/iWG www.visitmalta.com www.mfc.com.mt Privileged/Confidential Information may be contained in this message. If you are not the addressee indicated in this message (or responsible for delivery of the message to such person), you may not copy or deliver this message to anyone. In such case, you should destroy this message and kindly notify the sender by reply email. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
SSL configuration question
Solaris 8, Tomcat 5.0.28 I've configured my tomcat installation with my SSL key from Entrust and it is working (sort of). 1. It is not correctly configured. It shows my organization as both issued to and issue by when I view the certificate information. Could someone explain what I have done wrong and how to correct it. 2. It must be run on port 8443 because I need to run it as a user other than root. How can I bypass this limitation and run it on the standard 443 port? Thanks, -Mark - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: SSL configuration question
Answer to number 2 is edit your server.xml change 8443 to 443 in the ssl section also check that the the normal port redirects to 443. Where you see 8443 change to 443. 2 changes in your server.xml. - Original Message - From: Faine, Mark [EMAIL PROTECTED] To: tomcat-user@jakarta.apache.org Sent: Thursday, March 31, 2005 7:44 PM Subject: SSL configuration question Solaris 8, Tomcat 5.0.28 I've configured my tomcat installation with my SSL key from Entrust and it is working (sort of). 1. It is not correctly configured. It shows my organization as both issued to and issue by when I view the certificate information. Could someone explain what I have done wrong and how to correct it. 2. It must be run on port 8443 because I need to run it as a user other than root. How can I bypass this limitation and run it on the standard 443 port? Thanks, -Mark - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Fwd: Apache as front-end for several tomcat
Hello, I have configured an access log per Virtual Host. Only the first virtual host receives the requests. :-( That doesn't look right, does it? I dont think I need to add a JkMount / ... since I have a JkMount /* However I have tried but it doesn't work better. Regards, Christophe On 31-mars-05, at 15:03, Lionel Farbos wrote: Use one Logger per apache Virtual Host; something like that : VirtualHost demo1.myweb.org:81 ServerName demo1.myweb.org CustomLog /var/log/demo1_vhost_access.log combined JkMount / demo1 ... /VirtualHost VirtualHost demo2.myweb.org:81 ServerName demo2.myweb.org CustomLog /var/log/demo2_vhost_access.log combined JkMount / demo2 ... /VirtualHost ... And, I think you have to have a config with a JkMount on / Regards On Thu, 31 Mar 2005 13:50:15 +0200 Christophe Lemaire [EMAIL PROTECTED] wrote: Oh, I forgot to say I can't see which virtual host is used in the access_log. How can I do that? Here is what I have in the access log : 194.78.221.136 - - [31/Mar/2005:13:41:11 +0200] GET / HTTP/1.1 401 942 194.78.221.136 - - [31/Mar/2005:13:41:11 +0200] GET / HTTP/1.1 401 942 Christophe There are 3 backend servers, 2 servers run one Tomcat on standard ports and 1 server runs two Tomcat on different ports (see file workers.porperties). For the log file, I have only 1 log file for all the workers defined in mod_jk.conf by the following line : # Where to put jk logs JkLogFile logs/mod_jk.log So I don't have any info about the other workers. If you are talking about the other tomcat, I can access them directly via their IP and port with a browser on the LAN. So I can say all the tomcat servers are up and running. The strange thing is that this setup works fine with mod_JK2. But I would like to have a setup with JK1 since JK2 is not supported anymore. Regards, Christophe On 31-mars-05, at 01:28, Montz, James C. (James Tower) wrote: Are the Tomcat instance running on the same physical server and you are just using IP Aliases, or are the workers running on 3 sperate backend machines? You apache config looks OK, so I don't believe its an issue with Apache Virtual Host configuration. I believe all work in being forwarded to Demo1 only. I believe you can have multiple instances of tomcat listening on the same port by specifying an IP address in the connector. But I find it much easier just to congigure each instance to listen on a different port. If you check your other 2 workers log files, you will probably see an error similar to Bind address already in use. Modify each Tomcat instance to the SHUTDOWN and AJP listener are each on unique ports; For example, In each respective instance server.xml use; Demo1 Shutdown: 8001 Demo1 HTTP: 8081 Demo1 AJP Listener: 8101 Demo2 Shutdown: 8002 Demo2 HTTP: 8082 Demo2 AJP Listeer: 8102 Demo3 Shutdown: 8003 Demo3 HTTP: 8083 Demo3 AJP Listern: 8103 Restart each instance (check the catalina.out for errors) Modify your workers.properties file to relect the new AJP listen ports Restart Apache -Original Message- From: Dan Barron [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 30, 2005 3:48 PM To: Tomcat Users List; Tomcat Users List Subject: Re: Apache as front-end for several tomcat If you are running multiple instances of Tomcat, from what I understand and from my configuration (i run two Tomcat/mod_jk2 with Apache) you would then need each of them to listen on a different port. Right now the only instance that will receive requests via the worker is the instance that is using port 8009. At 01:33 PM 3/30/2005, Christophe Lemaire wrote: Not sure. I have seen several config of name based virtual hosts that listen on the same port. On 30-mars-05, at 23:02, Didier McGillis wrote: would it be the fact that your sending the requests through the same port number? From: Christophe Lemaire [EMAIL PROTECTED] Reply-To: Tomcat Users List tomcat-user@jakarta.apache.org To: tomcat-user@jakarta.apache.org Subject: Apache as front-end for several tomcat Date: Wed, 30 Mar 2005 22:12:27 +0200 Hello, I would like to setup a Apache 2.0.53 as front-end for several Tomcat 5.0.19. I use JK1.2.8 as connector. I have defined one worker per tomcat server. I use three name based virtual hosts in the apache config. The problem is only the first virtual host works. In the mod_jk.log, I can see that every request sent to the apache are checked with the JkMount from the first virtual host only. Here are my config files : workers.properties --- worker.list=demo1,demo2,demo3,stat worker.demo1.type=ajp13 worker.demo1.host=192.168.0.1 worker.demo1.port=8009 worker.demo2.type=ajp13 worker.demo2.host=192.168.0.2 worker.demo2.port=8009 worker.demo3.type=ajp13 worker.demo3.host=192.168.0.3 worker.demo3.port=8009 worker.stat.type=ajp13 worker.stat.host=192.168.0.3 worker.stat.port=7201 - end of workers.properties --- In the httpd.conf file, I include the
Re: Fwd: Apache as front-end for several tomcat
Hi, First of all you will need to learn how to quote ;) I do not understand what is your question? First of all make sure your apache configuration is working for vitual hosts, and then add mod_jk mappings. The easiest way is to create a simple separate index.html page for each vitual host and see if that works at the first place. Regards, Mladen Christophe Lemaire wrote: Hello, - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: SSL configuration question
Thanks, I tried that before and got a permission error, but it works now. -Mark -Original Message- From: Hein Behrens [mailto:[EMAIL PROTECTED] Sent: Thursday, March 31, 2005 12:41 PM To: Tomcat Users List Subject: Re: SSL configuration question Answer to number 2 is edit your server.xml change 8443 to 443 in the ssl section also check that the the normal port redirects to 443. Where you see 8443 change to 443. 2 changes in your server.xml. - Original Message - From: Faine, Mark [EMAIL PROTECTED] To: tomcat-user@jakarta.apache.org Sent: Thursday, March 31, 2005 7:44 PM Subject: SSL configuration question Solaris 8, Tomcat 5.0.28 I've configured my tomcat installation with my SSL key from Entrust and it is working (sort of). 1. It is not correctly configured. It shows my organization as both issued to and issue by when I view the certificate information. Could someone explain what I have done wrong and how to correct it. 2. It must be run on port 8443 because I need to run it as a user other than root. How can I bypass this limitation and run it on the standard 443 port? Thanks, -Mark - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
session management
Hi all, I want to set session in httpservletresponse object, Is there any way to do it. Otherthan response.addCookie(), or response.encodeURL(); Is there any way to set the Jsession In headers, So that it gets that in the next Jsp by request object, If I use addCookie of response object, It fails if any where encodeURL is used. If i user encodeURL, every JSP needs to updated with that method. Please if anybody knows tell the way that can be done. Thanks, Jagadeesha T - Do you Yahoo!? Better first dates. More second dates. Yahoo! Personals
Need Help w. Servlet Images.
Can someone/somebody please tell me just how exactly I go about viewing an image using both of the FileInputStream and the FileOutputStream classes in connection with the method getRealPath()?? I have been failing to view the images due to always getting a java.lang.NullPointerException every time that I try to see the images in my browser. ___ Join Excite! - http://www.excite.com The most personalized portal on the Web! - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Changing .systemPrefs location
All: I'm running various Tomcat instances on the same system, using the same JDK. One problem I'm running into is: * One web app is running as user1 * Another web app is running as user2 * Both web apps use the same JDK * Both web apps use system preferences * When one web app is started, it writes .system.lock, and .systemRootModFile, and won't allow the other web app to start cleanly because those files are not writable. Is there a way to tell one Tomcat instance to use /a/.systemPrefs, and the other to use /b/.systemPrefs to avoid this deadlock? Thanks. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: SSL configuration question
It shows both issued to and issue by because it is a self signed certificate. when you get you certificate authorized by some one like verisign, and then import that certificate into your keystore, you'll get issued by as that certifying authority's name. - Original Message - From: Faine, Mark [EMAIL PROTECTED] To: 'Tomcat Users List' tomcat-user@jakarta.apache.org Sent: Thursday, March 31, 2005 1:13 PM Subject: RE: SSL configuration question Thanks, I tried that before and got a permission error, but it works now. -Mark -Original Message- From: Hein Behrens [mailto:[EMAIL PROTECTED] Sent: Thursday, March 31, 2005 12:41 PM To: Tomcat Users List Subject: Re: SSL configuration question Answer to number 2 is edit your server.xml change 8443 to 443 in the ssl section also check that the the normal port redirects to 443. Where you see 8443 change to 443. 2 changes in your server.xml. - Original Message - From: Faine, Mark [EMAIL PROTECTED] To: tomcat-user@jakarta.apache.org Sent: Thursday, March 31, 2005 7:44 PM Subject: SSL configuration question Solaris 8, Tomcat 5.0.28 I've configured my tomcat installation with my SSL key from Entrust and it is working (sort of). 1. It is not correctly configured. It shows my organization as both issued to and issue by when I view the certificate information. Could someone explain what I have done wrong and how to correct it. 2. It must be run on port 8443 because I need to run it as a user other than root. How can I bypass this limitation and run it on the standard 443 port? Thanks, -Mark - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: SSL configuration question
I have never done this and I was wondering, now that we are talking about this. When you create the .csr and the .key files what do you sendto the CA to get a certificate. And the certificate where to do you put it on your server? Thanks, Nestor :-) Néstor Alberto Flórez Torres [EMAIL PROTECTED] 3/31/2005 12:43:10 PM It shows both issued to and issue by because it is a self signed certificate. when you get you certificate authorized by some one like verisign, and then import that certificate into your keystore, you'll get issued by as that certifying authority's name. - Original Message - From: Faine, Mark [EMAIL PROTECTED] To: 'Tomcat Users List' tomcat-user@jakarta.apache.org Sent: Thursday, March 31, 2005 1:13 PM Subject: RE: SSL configuration question Thanks, I tried that before and got a permission error, but it works now. -Mark -Original Message- From: Hein Behrens [mailto:[EMAIL PROTECTED] Sent: Thursday, March 31, 2005 12:41 PM To: Tomcat Users List Subject: Re: SSL configuration question Answer to number 2 is edit your server.xml change 8443 to 443 in the ssl section also check that the the normal port redirects to 443. Where you see 8443 change to 443. 2 changes in your server.xml. - Original Message - From: Faine, Mark [EMAIL PROTECTED] To: tomcat-user@jakarta.apache.org Sent: Thursday, March 31, 2005 7:44 PM Subject: SSL configuration question Solaris 8, Tomcat 5.0.28 I've configured my tomcat installation with my SSL key from Entrust and it is working (sort of). 1. It is not correctly configured. It shows my organization as both issued to and issue by when I view the certificate information. Could someone explain what I have done wrong and how to correct it. 2. It must be run on port 8443 because I need to run it as a user other than root. How can I bypass this limitation and run it on the standard 443 port? Thanks, -Mark - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: SSL configuration question
The certificate I imported was not self-signed (or should not be). It is what I received back from Entrust after submitting a CSR. It was already in use on Apache before I decided not to use Apache anymore. It worked before on Apache. I shut down apache and was intending to use the cert on only Tomcat. Thanks, -Mark -Original Message- From: Sasisekar S Sundaram [mailto:[EMAIL PROTECTED] Sent: Thursday, March 31, 2005 2:43 PM To: Tomcat Users List Subject: Re: SSL configuration question It shows both issued to and issue by because it is a self signed certificate. when you get you certificate authorized by some one like verisign, and then import that certificate into your keystore, you'll get issued by as that certifying authority's name. - Original Message - From: Faine, Mark [EMAIL PROTECTED] To: 'Tomcat Users List' tomcat-user@jakarta.apache.org Sent: Thursday, March 31, 2005 1:13 PM Subject: RE: SSL configuration question Thanks, I tried that before and got a permission error, but it works now. -Mark -Original Message- From: Hein Behrens [mailto:[EMAIL PROTECTED] Sent: Thursday, March 31, 2005 12:41 PM To: Tomcat Users List Subject: Re: SSL configuration question Answer to number 2 is edit your server.xml change 8443 to 443 in the ssl section also check that the the normal port redirects to 443. Where you see 8443 change to 443. 2 changes in your server.xml. - Original Message - From: Faine, Mark [EMAIL PROTECTED] To: tomcat-user@jakarta.apache.org Sent: Thursday, March 31, 2005 7:44 PM Subject: SSL configuration question Solaris 8, Tomcat 5.0.28 I've configured my tomcat installation with my SSL key from Entrust and it is working (sort of). 1. It is not correctly configured. It shows my organization as both issued to and issue by when I view the certificate information. Could someone explain what I have done wrong and how to correct it. 2. It must be run on port 8443 because I need to run it as a user other than root. How can I bypass this limitation and run it on the standard 443 port? Thanks, -Mark - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: SSL configuration question
The certificate I imported was not self-signed (or should not be). It is what I received back from Entrust after submitting a CSR. It was already in use on Apache before I decided not to use Apache anymore. It worked before on Apache. I shut down apache and was intending to use the cert on only Tomcat. You can't easily import the certificate that was generated for Apache into Tomcat -- you need to have the prvite key part in your keystore and your private key is in your Apache. There must be a way to get the key from Apache and move it to Tomcat, but I'm not sure what it is. This might help: http://kb.thawte.com/thawte/thawte/esupport.asp?id=vs24694 Thanks, -Mark -Original Message- From: Sasisekar S Sundaram [mailto:[EMAIL PROTECTED] Sent: Thursday, March 31, 2005 2:43 PM To: Tomcat Users List Subject: Re: SSL configuration question It shows both issued to and issue by because it is a self signed certificate. when you get you certificate authorized by some one like verisign, and then import that certificate into your keystore, you'll get issued by as that certifying authority's name. - Original Message - From: Faine, Mark [EMAIL PROTECTED] To: 'Tomcat Users List' tomcat-user@jakarta.apache.org Sent: Thursday, March 31, 2005 1:13 PM Subject: RE: SSL configuration question Thanks, I tried that before and got a permission error, but it works now. -Mark -Original Message- From: Hein Behrens [mailto:[EMAIL PROTECTED] Sent: Thursday, March 31, 2005 12:41 PM To: Tomcat Users List Subject: Re: SSL configuration question Answer to number 2 is edit your server.xml change 8443 to 443 in the ssl section also check that the the normal port redirects to 443. Where you see 8443 change to 443. 2 changes in your server.xml. - Original Message - From: Faine, Mark [EMAIL PROTECTED] To: tomcat-user@jakarta.apache.org Sent: Thursday, March 31, 2005 7:44 PM Subject: SSL configuration question Solaris 8, Tomcat 5.0.28 I've configured my tomcat installation with my SSL key from Entrust and it is working (sort of). 1. It is not correctly configured. It shows my organization as both issued to and issue by when I view the certificate information. Could someone explain what I have done wrong and how to correct it. 2. It must be run on port 8443 because I need to run it as a user other than root. How can I bypass this limitation and run it on the standard 443 port? Thanks, -Mark - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
build problem
I'm sure it's something simple, but I'm getting the following error when I try to build tomcat: BUILD FAILED /home/mfay/jakarta-tomcat-5.5.7-src/build.xml:94: The cvs task doesn't support the compression attribute. I've searched the Jakarta website to see if there was something on this, but I haven't found anything. Do I need to make some change to the build.properties or something?
5.0.30 Manager app returns 'OK' before app is deployed
We've run into an unexpected troublesome behavior in Tomcat 5.0.30. We have an installation script that uses the HTTP interface of the Manager App to install a number of Web applications in one go. What we've found is that in some cases the Manager app returns OK to the caller, claiming that the app has been deployed, even though it isn't actually visible or available yet. If you ask the Manager to list all apps immediately after the installation script has been run, one or more will sometimes be missing from the list, though they show up at a later time. This is problematic for us because what follows the app installations depends on the apps having actually been installed. This seems like a bug. What's actually happening here? At what point is an installed app actually installed, and is there any way to get the synchronous behavior that we need from the Manager App, so that we know that an installed app is actually available at its context path? - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Webdav Webfolder issue when container security enabled
I have done some testing with the latest TC4.1.x source from CVS, WinXP SP2, and tcpmon from the Axis project so I can look at the request and responses. I have a web folder and IE open on http://localhost:8080/webdav As a result of my tests I noted the following: 1. If I drag a .pdf to the web folder, I can then view it in IE. 2. If I drag the .pdf from the web folder to my desktop I can then open it using Acrobat. 3. I can't open the .pdf using Acrobat directly from the web folder. 4. Authentication seems to make no difference to behaviour. Given 1 2, I don't believe Tomcat is corrupting the file. Given 4, I think authentication is a red herring. 3. The MS webdav client seems to be copying the file to the temp internet files directory and then opening it. Maybe Acrobat doesn't like something about this. Notepad, Paint and OpenOffice don't seem to mind even with similar sized documents to the .pdf I was using. The webdav servlet hasn't changed significantly since 4.1.31 so I suggest trying 4.1.31 and seeing what results you get. Mark Fernando Salazar de Paz wrote: Using Windows XP SP 2 , Net Framework 1.1,MSDAIPP.DLL 11.0.5510.0 Tomcat version 4.1.21 5.5.7 JDK version 1.4.2_06 I cannot open pdf files, zip files, . (with office files, image files. it works fine) inside webfolders when basic authentication is enabled. I have the same problem using tomcat's webdav app; in such case I can read, at server's console, the following: [Fatal Error] :-1:-1: Premature end of file. The problem arise when I try to open recently uploaded files. Disabling container's security all works fine I don't know if line breaks in the response could affect webfolder client. In the following example file - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Embedded tomcat ussage
On Thu, Mar 31, 2005 at 03:18:30PM +0200, Renat Zubairov wrote: : I have a question concerning embedded tomcat. : How to make it even more embedded as it is? : I.e. do not extract war file somewhere but getting a files from it directly? : Is there any standart way to acomplish it? It depends on what you mean by extract war file: 1/ did you specify unpackWars=true in server.xml? If so, Tomcat will unpack the WAR file because you asked it to. Set that attribute to false and see what happens. 2/ or do you mean that Tomcat unpacks certain files to a temporary space? I don't think there's a way around this; so just specify (a subdirectory of) java.io.tmpdir as the work directory, and that should (sort of) cover you. -QM -- software -- http://www.brandxdev.net/ tech news -- http://www.RoarNetworX.com/ code scan -- http://www.JxRef.org/ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Need Help w. Servlet Images.
On Thu, Mar 31, 2005 at 02:42:10PM -0500, Steve R. Burrus wrote: : Can someone/somebody please tell me just how exactly I go about viewing an image using both of the FileInputStream and the FileOutputStream classes in connection with the method getRealPath()?? Share your code, and we can help point out bugs. Better yet: what does the stack trace indicate is the source of the error? : I have been failing to view the images due to always getting a java.lang.NullPointerException every time that I try to see the images in my browser. I recall getRealPath() doesn't work quite well inside packed WAR files, if that's how you're running. If you're streaming images, why not place them outside of the webapp? That lets the images and the webapp vary independently. -QM -- software -- http://www.brandxdev.net/ tech news -- http://www.RoarNetworX.com/ code scan -- http://www.JxRef.org/ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Single Sign On not working (Tomcat 5.5.7)
Guys, Please help me... I'm really struggling with implemting SSO for my 2 webapps... I've done all that is said in the documentation pages of tomcat. For some reason, tomcat is not linking the 2 web-apps with SSO. When I try to reach from one web-app to the other, its repeatedly showing the login screen. Please help... This is my server.xml file... Server port=8005 shutdown=SHUTDOWN Service name=Catalina Connector port=8080 /Engine name=Catalina defaultHost=localhost Realm className=org.apache.catalina.realm.JDBCRealm driverName=org.gjt.mm.mysql.Driver connectionURL=jdbc:mysql://localhost/authority connectionName=root connectionPassword=password userTable=users userNameCol=user_name userCredCol=user_pass userRoleTable=user_roles roleNameCol=role_name / Host name=localhost appBase=webapps Valve className=org.apache.catalina.authenticator.SingleSignOn debug=2/ Context displayName=Brown-SSO Application docBase=brown-sso path=/brown-sso workDir=work\Catalina\localhost\brown-sso /ContextContext displayName=Blue-SSO Application docBase=blue-sso path=/blue-sso workDir=work\Catalina\localhost\blue-sso /Context/Host /Engine /Service/Server I'm using two simple struts web-apps named brown-sso and blue-sso. kind regards, Skely - Yahoo! Messenger Show us what our next emoticon should look like. Join the fun.
Apply single login (NTLM) on Tomcat
Hi All, We intend to use single user login using Windows NT for the Tomcat. so that the user can use the same user-id with his NT user to login into our web application. Does anyone have experiences on how to apply it ? TIA
Re: Closed Input Stream across firewall
I am not calling getParameter method, instead request.getInputStream() to read the incoming XML is the first line of code after a few logging statements. Code for the sender servlet is as follows - URL url = new URL(destinationURL); URLConnection conn = url.openConnection(); conn.setDoInput(true); conn.setDoOutput(true); PrintWriter writer = new PrintWriter(conn.getOutputStream()); writer.println(data.toString()); writer.flush(); writer.close(); BufferedReader reader = new BufferedReader(new InputStreamReader(conn.getInputStream())); String aLine; StringBuffer strBuf = null; if(reader!=null){ strBuf = new StringBuffer(); while( (aLine = reader.readLine() )!= null){ strBuf.append(readline); } reader.close(); } Code for the receiver servlet - protected void doGet(HttpServletRequest request,HttpServletResponse response) throws ServletException, IOException { StringBuffer xmlData = new StringBuffer(); try{ BufferedReader reader=new BufferedReader(new InputStreamReader(request.getInputStream())); String aLine = ; while((aLine=reader.readLine())!=null){ xmlData.append(aLine); } //exception thrown here. reader.close(); PrintWriter writer = null; String rmessage = null; //build responseXML and assigned to rmessage if(rmessage!=null){ writer = new PrintWriter(response.getOutputStream()); writer.println(rmessage); writer.flush(); writer.close(); } }catch(Exception exp){ exp.printStackTrace(); } } --- It all started with getting an IOException: Cannot close the same input stream twice at line statement : reader.close(). This was raised because we were using Tomcat 4.0 which uses the deprecated http connector. But the root of the problem is that the ServletInputStream itself is closed, even before building a InputStreamReader object. Dilemma is that alls working well in the development environment and only production is giving the problem, thus suspected the firewall. On Mar 31, 2005 5:02 PM, Tim Funk [EMAIL PROTECTED] wrote: The firewall is not the problem. If you are using ServletRequest.getInputStream() - you cannot use ServletRequest.getParameter(). Odds are something is calling getParameter() which in turn getParameter() reads the input stream and makes it unavailable. -Tim Vineet Chopra wrote: I am using a web application deployed on Tomcat 4.0 to receive and route incoming XML messages to destination web application also deployed on Tomcat 4.0. A firewall exists between these servers. All firewall policies are enabled for incoming and outgoing traffic. The ServletInputStream is already closed before I use it to create an object of InputStreamReader. Thus I am not able to read the stream. I did a snoop on the ports of these server which displayed the relay of request XML reaching the destination port and invoking the servlet in the destination web application but failing to read the XML since the input stream has been closed. Can you give me any leads as to how to debug the problem. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: build problem
What version of Ant you are using ?. It seems that Ant is not supporting the attribute compression On Apr 1, 2005 3:48 AM, Fay, Michael [EMAIL PROTECTED] wrote: I'm sure it's something simple, but I'm getting the following error when I try to build tomcat: BUILD FAILED /home/mfay/jakarta-tomcat-5.5.7-src/build.xml:94: The cvs task doesn't support the compression attribute. I've searched the Jakarta website to see if there was something on this, but I haven't found anything. Do I need to make some change to the build.properties or something? -- rgds Antony Paul http://www.geocities.com/antonypaul24/ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Proper way to open threads in a servlet
Hi there, I am concerned that opening a thread in my serlvet using new Thread(Runnable) style code, is causing a massive hang in my system. Basically what the thread does is email people to notify them of a change in an order on the system. I want the emails to be sent in a separate thread so that the user doesn't have to wait for this to complete to return to the system. Basically the email is a non crucial part, the action has already been performed. I know this isn't specifically a Tomcat question, but I thought I would ask it anyway. The two ways this could work is that the email is placed in a queue, that is checked periodically, or just somehow the email(s) are sent in the background, but without opening a new thread using code. Can anyone give me some pointers on how to do this. Yes I have been searching around, but haven't found much information. Tahnks in advance Steve - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Intermittent error on Tomcat restart
Hi, We have strange error on our Tomcat 3.3.1a which is sometimes it can't find the login page that we use. This intermittent error only happened after we restarted the Tomcat. Sometimes we need to restart Tomcat for several times, then we can login properly again. Does anyone can help ? Thanks in advance. Th error in the Tomcat stdout log when the error occured is as follows : 2005-03-08 12:24:43 - Ctx(/epoint) : Class not found: TOMCAT/JSP/logonCRMManager.jsp
Re: SSL configuration question
I thought the two are not related my key is stored in the java keystore. I did everything with keytool, part of java. Tomcat only needs the password and name. The SSL certificate is not generated for or by tomcat. Hein - Original Message - From: Mikhail Kruk [EMAIL PROTECTED] To: Tomcat Users List tomcat-user@jakarta.apache.org Sent: Thursday, March 31, 2005 11:42 PM Subject: RE: SSL configuration question The certificate I imported was not self-signed (or should not be). It is what I received back from Entrust after submitting a CSR. It was already in use on Apache before I decided not to use Apache anymore. It worked before on Apache. I shut down apache and was intending to use the cert on only Tomcat. You can't easily import the certificate that was generated for Apache into Tomcat -- you need to have the prvite key part in your keystore and your private key is in your Apache. There must be a way to get the key from Apache and move it to Tomcat, but I'm not sure what it is. This might help: http://kb.thawte.com/thawte/thawte/esupport.asp?id=vs24694 Thanks, -Mark -Original Message- From: Sasisekar S Sundaram [mailto:[EMAIL PROTECTED] Sent: Thursday, March 31, 2005 2:43 PM To: Tomcat Users List Subject: Re: SSL configuration question It shows both issued to and issue by because it is a self signed certificate. when you get you certificate authorized by some one like verisign, and then import that certificate into your keystore, you'll get issued by as that certifying authority's name. - Original Message - From: Faine, Mark [EMAIL PROTECTED] To: 'Tomcat Users List' tomcat-user@jakarta.apache.org Sent: Thursday, March 31, 2005 1:13 PM Subject: RE: SSL configuration question Thanks, I tried that before and got a permission error, but it works now. -Mark -Original Message- From: Hein Behrens [mailto:[EMAIL PROTECTED] Sent: Thursday, March 31, 2005 12:41 PM To: Tomcat Users List Subject: Re: SSL configuration question Answer to number 2 is edit your server.xml change 8443 to 443 in the ssl section also check that the the normal port redirects to 443. Where you see 8443 change to 443. 2 changes in your server.xml. - Original Message - From: Faine, Mark [EMAIL PROTECTED] To: tomcat-user@jakarta.apache.org Sent: Thursday, March 31, 2005 7:44 PM Subject: SSL configuration question Solaris 8, Tomcat 5.0.28 I've configured my tomcat installation with my SSL key from Entrust and it is working (sort of). 1. It is not correctly configured. It shows my organization as both issued to and issue by when I view the certificate information. Could someone explain what I have done wrong and how to correct it. 2. It must be run on port 8443 because I need to run it as a user other than root. How can I bypass this limitation and run it on the standard 443 port? Thanks, -Mark - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]