RE: IIS Redirector - Not Refreshing

2003-07-07 Thread John Roth
After changing uriworkermap.properties, you must stop/start IIS (if the
redirector is configured on the 'master' website) or the specific site
instance (if the redirector is configured on the specific web instance).

This also applies to workers.properties.  Keep in mind that it is
isapi_redirect.dll that reads these files.

Hope this helps.

-- John


-Original Message-
From: John Turner [mailto:[EMAIL PROTECTED] 
Sent: Monday, July 07, 2003 8:23 AM
To: Tomcat Users List
Subject: Re: IIS Redirector - Not Refreshing



You are saying that stopping Tomcat and stopping IIS, without rebooting 
Windows, has no effect?

John

On Fri, 4 Jul 2003 10:45:02 +0100, [EMAIL PROTECTED] wrote:

 Hi,

 I'm using IIS redirector with Tomcat 4.1.24 and everything works fine.
 However,
 when I modify the uriworkermap.properties file, the modifications
are 
 not
 recognized unless I reboot Windoz! Am I missing something?

 Thanks,

 - Yagiz




 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]





-- 
Using M2, Opera's revolutionary e-mail client: http://www.opera.com/m2/

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: Tomcat IP help

2003-05-29 Thread John Roth
IIS always starts on all IP addresses (0.0.0.0), port 80 by default.
Verify that IIS is set to use address A.A.A.A and that the TC
connector address=B.B.B.B port=whatever.

You can verify which addresses are being used by the following:
1. Stop Tomcat and IIS
2. From a DOS prompt, run the following: netstat -an | find :80
   - see if anything is listening
3. Start IIS
4. From a DOS prompt, run the following: netstat -an | find :80 
   - If there is now a listener on address 0.0.0.0 port 80, IIS is using
all ports.
5. Stop IIS, start Tomcat.
6. From a DOS prompt, run the following: netstat -an | find :80 
   - If there is now a listener on address 0.0.0.0 port 80, Tomcat is
using all ports (look for errors in stdout.log).
...etc.,

Hope this helps.

John

-Original Message-
From: Christian Fredrickson [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, May 28, 2003 10:26 AM
To: Tomcat
Subject: Tomcat IP help


I have a Tomcat server (v. 4) running on a Windows 2000 server.

It has 2 NICs with separate IP addresses.

It also runs IIS. I have set IIS to run on one address and Tomcat on
another. I used the Server.xml file and set the connector tags with a
address=n.n.n.n value in order to have it start on the correct
address. It seems no matter what I do, Tomcat always wants to start on
all IP addresses and fails to start if the IIS web server is started.

Any help in solving this would be appreciated.

Chris


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: Help! Anyone successfully install a purchased certificate?

2003-02-24 Thread John Roth
Sorry about the delay, but I had to go play in Vegas for a few days.
Similar to Richards post, here are the actual steps I went through to get
our Verisign cert installed into Tomcat.  The only big caveat here was that
this is based on JSSE for the 1.3 JDK, where JDK1.4 has integrated this.

Sorry about the length, but this is just some quick and dirty documentation.

A. JSSE Stuff:
 1. Obtain jsse package from Sun [sorry, no link...]
 2. Be sure to place jsse.jar, jcert.jar, jnet.jar in
/%JAVA_HOME%/jre/lib/ext

B. Original Cert:
 Note: being my typical retentive self, I wanted the keystore file(s) in the
same
   'context' as my app, so I created the keystore in a directory and
specifically
   reference it wherever required.  I don't remember where the JSSE
default folder is.
1. Created Keystore directory on d:\code\production\conf\Keystore, moved to
that directory
2. keytool -genkey -dname CN=secure.mydomain.com, OU=DataCenter,
O=Company Name, L=Tampa, ST=Florida, C=US -alias production -keypass
some_password -storepass some_password -keystore
d:\code\staging\conf\keystore\.keystore -keyalg RSA
3. keytool -certreq -file certreq.txt -keystore .keystore -keypass
some_password -alias production
4. Submitted certreq.txt to Verisign, accepted and issued cert.cer
5. keytool -import -file cert.cer -alias production -keypass
some_password -keyalg RSA -keystore .keystore -trustcacerts
   Enter keystore password:  some_password
   Certificate reply was installed in keystore
6. Certificate successfully installed.

C2: Sample from server.xml:
snip
Connector className=org.apache.catalina.connector.http.HttpConnector
   address=x.x.x.x
   port=443
   minProcessors=50
   maxProcessors=200
   enableLookups=false
   acceptCount=10
   scheme=https
   secure=true
  Factory className=org.apache.catalina.net.SSLServerSocketFactory
   keystoreFile=d:\code\production\conf\keystore\.keystore
   keystorePass=some_password
   clientAuth=false
   protocol=TLS/
  /Connector

D. Renewing the certificate:
1. Copied d:\code\production\conf\keystore\.keystore to .keystore2 for
backup.  Will perform new work on .keystore2
2. Generated a Certificate Request as follows:
   - keytool -certreq -file certreq_2003.txt -keystore .keystore -keypass
some_password -alias production
3. Received certificate (cert_2003.cer) from Verisign
4. keytool -import -file cert_2003.cer -alias production -keypass
ankspassword -keyalg RSA -keystore .keystore2 -trustcacerts
 Enter keystore password:  some_password
 Certificate reply was installed in keystore
5. Copied .keystore2 over .keystore:
 copy .keystore backup_20030107.keystore
 copy .keystore2 .keystore
6. Loaded website, change is not yet viewable, will wait for restart
tonight.

E: Random Notes and troubleshooting:
D:\code\staging\conf\keystorekeytool -genkey -dname
CN=secure.mydomain.com, OU=DataCenter, O=Company Name, L=Tampa,
ST=Florida, C=US -alias staging -keypass some_password -storepass
some_password -keystore d:\code\staging\conf\keystore\.keystore -keyalg
RSA
D:\code\staging\conf\keystorekeytool -certreq -file certreq.txt -keystore
.keys -keypass some_password
- submitted successfully to Verisign, awaiting reply

*Importing certificate:
D:\code\staging\conf\keystorekeytool -keystore .keystore -alias
staging -keypass some_password -import -file cert.cer -keyalg RSA
Enter keystore password:  some_password
keytool error: java.security.cert.CertificateException: Unsupported
encoding

Note: Added a CR/LF to the end of the certificate, get new error:
D:\code\staging\conf\keystorekeytool -import -file
cert.cer -trustcacerts -alias staging -keypass some_password -keyalg
RSA -keystore .keystore
Enter keystore password:  some_password
keytool error: java.lang.Exception: Failed to establish chain from reply

Note: First had to import CA Test Certificate:
D:\code\staging\conf\keystorekeytool -import -file
getcacert.cer -keyalg RSA -keystore .keystore
Enter keystore password:  some_password
Owner: OU=For VeriSign authorized testing only. No assurances (C)VS1997,
OU=www.verisign.com/repository/TestCPS Incorp. By Ref. Liab. LTD.,
O=VeriSign, Inc
Issuer: OU=For VeriSign authorized testing only. No assurances
(C)VS1997, OU=www.verisign.com/repository/TestCPS Incorp. By Ref. Liab.
LTD., O=VeriSign, Inc
Serial number: 52a9f424da674c9daf4f537852abef6e
Valid from: Sat Jun 06 20:00:00 EDT 1998 until: Tue Jun 06 19:59:59 EDT
2006
Certificate fingerprints:
 MD5:  40:06:..
 SHA1: 93:71:.
Trust this certificate? [no]:  y
Certificate was added to keystore

Then the certificate could be properly added:
D:\code\staging\conf\keystorekeytool -import -file cert.cer -alias
staging -keypass some_password -keyalg RSA -keystore .keystore
Enter keystore 

RE: Tomcat Windows 2000 / IIS 5 installation

2003-02-13 Thread John Roth
Good reference at
http://members.ozemail.com.au/~lampante/howto/tomcat/iisnt/index.html

Only suggestions I would make is to download the newest isap_redirect.dll
from
http://jakarta.apache.org/builds/jakarta-tomcat-connectors/jk/release/v1.2.2
/bin/win32/
- this redirector allows you to use an isapi.redirect.properties files
instead of registry entries
- fixes some problems with ajp13 and SSL

In addition, I add the redirector to the individual sites, instead of the
overall IIS instance.  Allows
better control for logging, troubleshooting, etc.  Steps are the same, just
add it in the website instance instead
of the web server instance.


John


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Thursday, February 13, 2003 9:18 AM
To: [EMAIL PROTECTED]
Subject: Tomcat Windows 2000 / IIS 5 installation


Hi
I installing Tomat 4.0.4 on WIndows 2000 running IIS 5 to demo a Documentum
product to the company and the jsps on the server are not running, after
following the installation procedure in the readme.txt files/

Is there anything else I need to do, like:

Install isapi_redirect.dll

Edit registry

Where can I find this information?

Many thanks

Jon

__
Jonathan Harding
Senior Web Analyst
SITA IS
Phone: +1 514 982 4301
CVS: 7 225 4301
[EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




RE: Tomcat Windows 2000 / IIS 5 installation

2003-02-13 Thread John Roth
Sorry, some spelling errors:
... download the newest isapi_redirect.dll
^

... allows you to use an isapi_redirect.properties file
  ^
Should probably fire my secretary huh?  (oh wait, that's me)
John

-Original Message-
From: John Roth [mailto:[EMAIL PROTECTED]]
Sent: Thursday, February 13, 2003 9:27 AM
To: 'Tomcat Users List'
Subject: RE: Tomcat Windows 2000 / IIS 5 installation


Good reference at
http://members.ozemail.com.au/~lampante/howto/tomcat/iisnt/index.html

Only suggestions I would make is to download the newest isap_redirect.dll
from
http://jakarta.apache.org/builds/jakarta-tomcat-connectors/jk/release/v1.2.2
/bin/win32/
- this redirector allows you to use an isapi.redirect.properties files
instead of registry entries
- fixes some problems with ajp13 and SSL

In addition, I add the redirector to the individual sites, instead of the
overall IIS instance.  Allows
better control for logging, troubleshooting, etc.  Steps are the same, just
add it in the website instance instead
of the web server instance.


John


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Thursday, February 13, 2003 9:18 AM
To: [EMAIL PROTECTED]
Subject: Tomcat Windows 2000 / IIS 5 installation


Hi
I installing Tomat 4.0.4 on WIndows 2000 running IIS 5 to demo a Documentum
product to the company and the jsps on the server are not running, after
following the installation procedure in the readme.txt files/

Is there anything else I need to do, like:

Install isapi_redirect.dll

Edit registry

Where can I find this information?

Many thanks

Jon

__
Jonathan Harding
Senior Web Analyst
SITA IS
Phone: +1 514 982 4301
CVS: 7 225 4301
[EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




RE: IIS and uriworkermap.properties

2003-02-13 Thread John Roth
All you have to do is include the URL patterns you want passed to tomcat in
the uriworkermap.properties files.

For Example:
snippet of uriworkermap.properties
 # Example URL  URI combination
 /demo.somesite.com/ams/*.jsp=$(default.worker)

 # Example URI only
 /ams/*.jsp=$(default.worker)
 # Example pass everything
 /ams/reports/=$(default.worker)
 /ams/reports/*=$(default.worker)

 # Example, pass specific document only to a specific named instance
 #   where named instance is defined in workers.properties
 /content.jsp=public
/snippet

Everything else (ie: /ams/images/some.gif) should be served out of the IIS
structure (ie: wwwroot/ams/images)

Hope this helps!

John

cute, pithy quote removed for the benefit of others


-Original Message-
From: Dan Egan [mailto:[EMAIL PROTECTED]]
Sent: Thursday, February 13, 2003 2:55 PM
To: [EMAIL PROTECTED]
Subject: IIS and uriworkermap.properties


Hi,

I am still new to Tomcat but was hoping someone could provide some insight
on how this properties file is used and how I can eliminate all the calls to
Tomcat for static data.  I still do not have a complete grasp of contexts
but I would like to direct any incoming URL-Path patterns to Tomcat only if
they handle JSP or Servlets.  I have been reading the Tomcat IIS howto but
it is limited at best.  I am using Tomcat 3.2.4 with IIS.  Any insight would
be appreciated.

Thanks,

Daniel Egan
Phone 401-421-7740 X396
Email [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




RE: preview of webapp of Tomcat Performance book

2003-02-11 Thread John Roth
Ditto here! Will you post it (or a URL), or will you be sending it to
individuals?

-Original Message-
From: Cox, Charlie [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, February 11, 2003 12:56 PM
To: 'Tomcat Users List'
Subject: RE: preview of webapp of Tomcat Performance book


yes, I would like to see it.

Charlie

 -Original Message-
 From: Peter Lin [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, February 11, 2003 8:59 AM
 To: Tomcat Users List
 Subject: preview of webapp of Tomcat Performance book



 I plan on releasing the webapp and utilities for
 Tomcat Performance Handbook Remy and I are writing in
 the next few days. I'd like to know if tomcat-users
 find that appealing?

 peter lin


 __
 Do you Yahoo!?
 Yahoo! Shopping - Send Flowers for Valentine's Day
 http://shopping.yahoo.com

 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




RE: tomcat NT service memory

2003-02-03 Thread John Roth
I had to bump up the default memory size as well, and didn't get consistent
results from CATALINA_OPTS (for example, which user was used to start the
service, etc), so I changed wrapper.properties, and hard-coded the memory
stuff in.  Example:

snippet
wrapper.cmd_line=$(wrapper.javabin) -Xrs -Xms128m -Xmx256m {remainder of
default line}
/snippet

I used jk_service_nt to create the service because that was available when
we first started using TC.  Even though I have upgraded, I still use the
same service, etc, not what comes as part of the newer installation routine.
Not sure if the newer routine still uses wrapper.properties or not...

John


-Original Message-
From: Vladimer Shioshvili [mailto:[EMAIL PROTECTED]]
Sent: Monday, February 03, 2003 11:34 AM
To: Tomcat Users List
Subject: tomcat NT service memory


Hi,

I am experiencing problems with Tomcat because of default JVM memory size
and want to let it use more memory. The only way i know is to change/add
environmental variable for the service in the registry
(CATALINA_OPTS=-Xmx256m)... However, i am not sure if this is the
best/correct way. Could anyone either confirm that this is the correct
approach, or give me suggestions.

Thanks,
Vlad



Vladimer Shioshvili

QRC Division of Macro International Inc.
7315 Wisconsin Avenue, Suite 400W
Bethesda, MD 20814

Phone: (301) 657 3077 ext. 155


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




RE: Tool for HTTP Request Stress Test

2003-01-17 Thread John Roth
I have successfully used JMeter
(http://jakarta.apache.org/jmeter/index.html).  It takes a little while to
get a test plan set up, but works pretty well.

A couple of suggestions:
1. Run it from a machine with 'lots' of horsepower (memory, processor,
bandwidth) as it does tend to drag the workstation down.
2. The swing component is (as usual) a hog.  I would suggest creating your
test plan using the GUI, then bump up the threads/iterations, save the test
plan, and run the final JMeter test from the command line.

I recently used JMeter to do some load testing between two Tomcat servers
(one on Linux, one on W2K).  I found I got better results when I ran them
from a high horsepower box instead of my workstation, as my PC couldn't keep
up with the threads.

Just my two cents.

John


-Original Message-
From: randie ursal [mailto:[EMAIL PROTECTED]]
Sent: Thursday, January 16, 2003 9:37 PM
To: A mailing list about TOMCAT; A mailing list for discussion about Sun
Microsystem's Java Servlet API Technology.
Subject: Tool for HTTP Request Stress Test


Hi,

   can anyone suggest an HTTP Stress Test tool.

   coz i wanna stress test my web application which is deployed
   on Tomcat.

thanks.





--
To unsubscribe, e-mail:
mailto:[EMAIL PROTECTED]
For additional commands, e-mail:
mailto:[EMAIL PROTECTED]


--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




RE: HTTPS to HTTP

2003-01-10 Thread John Roth
Is there an FTP connector for Tomcat?  If so, I would be very interested in
it.

Thanks,
John


-Original Message-
From: Shah, Sanjay [mailto:[EMAIL PROTECTED]]
Sent: Thursday, January 09, 2003 1:03 PM
To: 'Tomcat Users List'
Cc: 'Craig R. McClanahan'
Subject: RE: HTTPS to HTTP



Hello Craig:

I was reading one of your post in tomcat user archive regarding
implementation of FTP protocol under Catalina.
One of my requirement is exactly the same.

In my case the FTP security and processing needs to be managed on a per
customer basis, however this tends to be closely coupled to the web-app
side. Infect my FTP processing would re-use underlying classes contained in
the client's existing web-app. Hence I would prefer to have a logical
mapping between host-customer. Your mapping approach seems like the way to
go.

Could you please let me know if you were successful in your effort and if
so, can you give me some details about settings FtpConnector, FtpRequest,
FtpResponse etc.?

Your response is greatly appreciated.

Thanks

--
To unsubscribe, e-mail:
mailto:[EMAIL PROTECTED]
For additional commands, e-mail:
mailto:[EMAIL PROTECTED]


--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




RE: How well does tomcat 4.0.03 work as a HTTP server?

2002-06-12 Thread John Roth

I agree with Trevor.  Here are a few things to think about as well:
1. Tomcat performance vs. dedicated web server (Apache or IIS):  Tomcat
(supposedly) is not as efficient at serving static content.  We switched off
of IIS/Tomcat because of a problem with SSL and large file uploads to Tomcat
standalone.  Because our app is 90% dynamic content, our tests showed no
change in performance.  If your app is highly static, a dedicated web server
offers some better 'tweaking' capabilities (such as cacheing static images,
etc).  Try it  measure your differences.
2. Using Tomcat in standalone mode does take a layer of complexity out of
the configuration.
3. Drawback: inability to use any other scripting languages in addition to
jsps, such as CGI, PHP, ASP

Just some food for thought!

John


-Original Message-
From: Trevor Nielsen [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, June 12, 2002 2:08 AM
To: Tomcat Users List
Subject: Re: How well does tomcat 4.0.03 work as a HTTP server?



Tomcat works fine as a regular HTTP server, but does not server
up pages as well as a dedicated HTTP server like Apache.  It also
does not allow for the fine-tuning and advanced features of a
dedicated HTTP server (this is the reason that many people use
Tomcat to serve jsps/servlets from behind Apache). As long as your
are only planning to serve up pages to a small load and in the most
basic configuration, Tomcat should be fine.

Trevor.


- Original Message -
From: S W [EMAIL PROTECTED]
To: Tomcat Users List [EMAIL PROTECTED]
Sent: Wednesday, June 12, 2002 2:23 PM
Subject: How well does tomcat 4.0.03 work as a HTTP server?


 HI Everyone,

 I'm curious has anyone used Tomcat as a regular http
 server, and would you recommend it?

 The reason I'm asking this quesion is because I'm not
 sure if it would be better to use IIS to redirect the
 Java pages to the Tomcat server or if it would be
 better to serve the htm pages straight from the Tomcat
 server.

 My concerns:
 - Adding IIS ads another layer leaving more chances
 for errors to occur
 - My knowledge of tomcat is limited at the moment as
 this is the first website I'm setting up using tomcat.


 Thank you any advice would be greatly appreciated.


 __
 Do You Yahoo!?
 Yahoo! - Official partner of 2002 FIFA World Cup
 http://fifaworldcup.yahoo.com

 --
 To unsubscribe, e-mail:
mailto:[EMAIL PROTECTED]
 For additional commands, e-mail:
mailto:[EMAIL PROTECTED]






--
To unsubscribe, e-mail:
mailto:[EMAIL PROTECTED]
For additional commands, e-mail:
mailto:[EMAIL PROTECTED]


--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




Redirect port 80 requests to 443

2002-06-07 Thread John Roth

This seems simple, but ...

I am running Tomcat 4.0.3, standalone on w2k.  I would like all requests to
http://oursite/ to be automatically redirected to https://oursite/ but am
not finding an elegant/simple solution.  Below is a snippet from server.xml:

Connector className=org.apache.catalina.connector.http.HttpConnector
port=80 minProcessors=2 redirectPort=443 maxProcessors=15
enableLookups=false acceptCount=10/
Connector className=org.apache.catalina.connector.http.HttpConnector
port=443 minProcessors=2 maxProcessors=15 enableLookups=false
acceptCount=10 scheme=https secure=true
  Factory className=org.apache.catalina.net.SSLServerSocketFactory
keystoreFile=***.keystore keystorePass=*
clientAuth=false protocol=TLS/
  /Connector

Any ideas/pointers?

Thanks,
John Roth, Director net.Media
Provider Solutions Corp.


--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




RE: Redirect port 80 requests to 443

2002-06-07 Thread John Roth

Actually, I took it a step further:  I wanted to be sure that anyone who
goes to http: gets redirected.  With just a simple redirection page, someone
could still go http://oursite/ourapp and get by without using SSL.

Here's what I did:
1. added a new Service with the http connector (port 80) and a single app
with 1 page (index.html) and web.xml.
2. The index.html redirects them to https:
3. Snippets of code from server.xml:

Service name=Tomcat-(Redirector)
   Connector className=org.apache.catalina.connector.http.HttpConnector
address=x.x.x.x port=80 {remainder removed for ease}/
Engine name=Redirector defaultHost=localhost
Host name=localhost debug=4 appBase=webapps
unpackWARs=true
Context path= docBase=e:/staging/wwwroot/Redirector
reloadable=false/
/Host
/Engine
/Service
  Service name=Tomcat-(Staging)
Connector className=org.apache.catalina.connector.http.HttpConnector
address=x.x.x.x port=443 {remainder removed}
Factory className=org.apache.catalina.net.SSLServerSocketFactory
{remaining SSL Factory stuff}/
  /Connector
Engine name=Standalone defaultHost=localhost
... remainder of server.xml ...

Thanks,
John

-Original Message-
From: Richard S. Huntrods [mailto:[EMAIL PROTECTED]]
Sent: Friday, June 07, 2002 3:38 PM
To: [EMAIL PROTECTED]
Subject: RE: Redirect port 80 requests to 443


John Roth said:

This seems simple, but ...

I am running Tomcat 4.0.3, standalone on w2k.  I would like all requests
to
http://oursite/ to be automatically redirected to https://oursite/ but
am
not finding an elegant/simple solution.  Below is a snippet from
server.xml:


Why not simply create a web page that automatically redirects the
request to the https page?  That is what I did and it works fine.

-Richard


--
To unsubscribe, e-mail:
mailto:[EMAIL PROTECTED]
For additional commands, e-mail:
mailto:[EMAIL PROTECTED]


--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




RE: Multiple server.xml files with Tomcat 4.0.3??

2002-05-22 Thread John Roth

I run a similar environment, but even though we don't use tomcat.exe to
start a service (we use jk_nt_service.exe to create, which uses
wrapper.properties to start) the start parameters should be the same.  There
are a couple of choices:

1. add another parameter to the command below: -Dcatalina.base={environment
var pointing to the appropriate directory, or hard coded path}
or 
2. add -config parameter to startup pointing to the specific server.xml (or
whatever name you want)

Example: (from my wrapper.properties)
wrapper.cmd_line=$(wrapper.javabin) -Xrs -Xms128m -Xmx256m
-Djava.security.policy==$(wrapper.tomcat_policy)
-Dcatalina.base=$(wrapper.tomcat_base)
-Dcatalina.home=$(wrapper.tomcat_home) -classpath $(wrapper.class_path)
$(wrapper.startup_class) -config $(wrapper.server_xml) start

Notes: 
- when setting up multiple environments, especially on the same machine, pay
close attention to the addresses/ports in use.  You will have to change the
individual shutdown ports for each instance, as the listen on 0.0.0.0.
Adding an address=x.x.x.x to each connector will force each connector to
listen on a specific address instead of 0.0.0.0, so all instances can use
the default :8080 port.
- using catalina.base has some additional benefits/(or drawbacks, depending
on your opinion):  each environment I have set up uses it's own directory
structure for webapps, works, etc., so that all environments can have their
own data, deployment processes, etc.  Like you, I have specific instances
for dev, qa, staging, demo and production, ranging across 2/3/4 machines
(depending on what is going on). Another advantage is the fact that I can
move an instance to another machine, and have it running in a few minutes
simply by removing/adding the specific IP address for the instance, and
copying the entire directory structure over.

Hope this helps,
John


-Original Message-
From: Miller, Andy [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, May 22, 2002 12:42 PM
To: Tomcat Users List
Subject: Multiple server.xml files with Tomcat 4.0.3??


I'm pretty new to Tomcat so please be patient with me if this is an
obvious question.  I'm trying to port our dev environment over to Tomact
from Resin and have come across a slight roadblock.  We have different
environments for local development, dev server, qa server, and
production.  Each environment requires different db connection pools, as
well as a few other minor tweaks in the server.xml from environment to
environment.  With resin, i can pass in a -conf parameter when i start
it up to give it the name of the appropriate config to use for that
environment (-conf resin-local.conf, -conf resin-qa.conf, etc).  Is
there a similar functionality with Tomcat 4.0.3 and it's server.xml
config file?  I really can't find much documenation on this.
 
Also, for note, i'm running tomcat as a service with the tomcat.exe
-install paramater which works great, not sure if that makes a
difference to what can be passed via the command line but my bat file to
set this up is as follows:
 
tomcat.exe -install %SERVICENAME% %JAVA_HOME%\jre\bin\server\jvm.dll
-Djava.class.path=%JAVACLASSPATH% -Dcatalina.home=%TOMCAT_HOME% -Xrs
-start org.apache.catalina.startup.Bootstrap -params start -stop
org.apache.catalina.startup.Bootstrap -params stop -out
%TOMCAT_HOME%\logs\stdout.log -err %TOMCAT_HOME%\logs\stderr.log
 
 
Thanks,
 
Andy Miller
[EMAIL PROTECTED]



winmail.dat
Description: application/ms-tnef

--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]


RE: Map network drive automatically

2002-04-23 Thread John Roth

Also, Java does support UNC's (sometimes a little glitchy, you will need to
test well).  We use all UNC's now due to problems attaching to remote
drives, ensuring the drive is mapped correctly on startup, etc. UNC's have
worked well for us.

John

-Original Message-
From: Phillip Morelock [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, April 23, 2002 3:39 PM
To: Tomcat Users List
Subject: Re: Map network drive automatically


check out the

net use

command -- you can just use a batch file (.bat)




On 4/23/02 12:21 PM, Jack Li [EMAIL PROTECTED] wrote:

 Hello All,
 Does anybody know how to map a network drive by writing a java program or
 other program languages? My OS is w2k and web server is IIS and Tomcat 4.


 Thanks,
 Jack Li



--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]


--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]




RE: How many SSL certificates are needed for Tomcat with IIS?

2002-04-18 Thread John Roth

Exactly:  Only the service that provides SSL needs the certificate, in the
case of IIS/Isapi_redirect, only IIS needs the certificate.  IIS does the
encryption/decryption, and passes the clear text data to Tomcat.  TC still
knows that it was encrypted, and is passed the cert info, but doesn't need
to know anything about SSL.

Thanks,
john


-Original Message-
From: Hawkins, Keith (Keith) [mailto:[EMAIL PROTECTED]]
Sent: Thursday, April 18, 2002 11:29 AM
To: John Roth
Cc: Tomcat Users List
Subject: RE: How many SSL certificates are needed for Tomcat with IIS?


John,

Thanks for your reply to my post.

If I understand you correctly, I may not need to bother with the keystore at
all.  If IIS is the web server, and I have an SSL certificate installed in
IIS, then I don't need to have an additional certificate stored in a
keystore file for Tomcat to use. True?

Does this hold true when I am using the isapi_redirector to have Tomcat
serve servlets/JSP pages?

Thanks,
Keith

-Original Message-
From: John Roth [mailto:[EMAIL PROTECTED]]
Sent: Monday, April 15, 2002 9:24 AM
To: 'Tomcat Users List'; 'Hugh Brien'
Subject: RE: How many SSL certificates are needed for Tomcat with IIS?


Also, each server sends a machine+server specific character set to Verisign
(or any other certifier).  For example: a keystore generated CertRequest
will create a different request than an IIS generated CertRequest, all other
things being equal (IP address, domain name, etc.).

In a normal Web Server/Tomcat (App) Server environment, the Web Server is
what is responsible for SSL encryption.  This is the same regardless of the
web server (IIS, Apache, Netscape, or any other).  In some environments
Tomcat is the web server, hence the SSL support in Tomcat.

Summary:
Only the web server needs the certificate.  If this is IIS, you must
generate the request via IIS.  If the web server is going to be Tomcat, via
the HTTPConnector, use keystore to generate the request.

John

-Original Message-
From: Hugh Brien [mailto:[EMAIL PROTECTED]]
Sent: Sunday, April 14, 2002 12:44 AM
To: Tomcat Users List
Subject: Re: How many SSL certificates are needed for Tomcat with IIS?


What was the error?  Did you search for the error code to see if anyone had
the same problem?  Certs are based on 509 however there are extensions that
different vendors support.
r,
Hugh

- Original Message -
From: Hawkins, Keith (Keith) [EMAIL PROTECTED]
To: tomcat-user [EMAIL PROTECTED]
Sent: Friday, April 12, 2002 5:46 PM
Subject: How many SSL certificates are needed for Tomcat with IIS?



I generated CSR via Sun's keytool, sent it to verisign, and imported the
resulting certificate into a keystore file.
I tried to get IIS to import this certificate, but it rejects it.  Do I have
to request the certificate from IIS?  Do I need to
have two certificates, one for tomcat and one for IIS?

Thanks,
Keith




--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]


--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]


--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]



winmail.dat
Description: application/ms-tnef

--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]


RE: How many SSL certificates are needed for Tomcat with IIS?

2002-04-18 Thread John Roth

Correct.  You won't need any of the SSL info in server.xml.

John

-Original Message-
From: Hawkins, Keith (Keith) [mailto:[EMAIL PROTECTED]]
Sent: Thursday, April 18, 2002 1:03 PM
To: John Roth
Cc: Tomcat Users List
Subject: RE: How many SSL certificates are needed for Tomcat with IIS?



John,
Thanks for clarifying this for me.  Makes the SSL integration much simpler. 
I assume that if IIS is providing the SSL that I should leave the SSL
connector section of
the Tomcat server.xml file commented out.  Correct?

Thanks again for your help!
-Keith


-Original Message-
From: John Roth [mailto:[EMAIL PROTECTED]]
Sent: Thursday, April 18, 2002 11:43 AM
To: 'Tomcat Users List'
Cc: Hawkins, Keith (Keith)
Subject: RE: How many SSL certificates are needed for Tomcat with IIS?


Exactly:  Only the service that provides SSL needs the certificate, in the
case of IIS/Isapi_redirect, only IIS needs the certificate.  IIS does the
encryption/decryption, and passes the clear text data to Tomcat.  TC still
knows that it was encrypted, and is passed the cert info, but doesn't need
to know anything about SSL.

Thanks,
john


-Original Message-
From: Hawkins, Keith (Keith) [mailto:[EMAIL PROTECTED]]
Sent: Thursday, April 18, 2002 11:29 AM
To: John Roth
Cc: Tomcat Users List
Subject: RE: How many SSL certificates are needed for Tomcat with IIS?


John,

Thanks for your reply to my post.

If I understand you correctly, I may not need to bother with the keystore at
all.  If IIS is the web server, and I have an SSL certificate installed in
IIS, then I don't need to have an additional certificate stored in a
keystore file for Tomcat to use. True?

Does this hold true when I am using the isapi_redirector to have Tomcat
serve servlets/JSP pages?

Thanks,
Keith

-Original Message-
From: John Roth [mailto:[EMAIL PROTECTED]]
Sent: Monday, April 15, 2002 9:24 AM
To: 'Tomcat Users List'; 'Hugh Brien'
Subject: RE: How many SSL certificates are needed for Tomcat with IIS?


Also, each server sends a machine+server specific character set to Verisign
(or any other certifier).  For example: a keystore generated CertRequest
will create a different request than an IIS generated CertRequest, all other
things being equal (IP address, domain name, etc.).

In a normal Web Server/Tomcat (App) Server environment, the Web Server is
what is responsible for SSL encryption.  This is the same regardless of the
web server (IIS, Apache, Netscape, or any other).  In some environments
Tomcat is the web server, hence the SSL support in Tomcat.

Summary:
Only the web server needs the certificate.  If this is IIS, you must
generate the request via IIS.  If the web server is going to be Tomcat, via
the HTTPConnector, use keystore to generate the request.

John

-Original Message-
From: Hugh Brien [mailto:[EMAIL PROTECTED]]
Sent: Sunday, April 14, 2002 12:44 AM
To: Tomcat Users List
Subject: Re: How many SSL certificates are needed for Tomcat with IIS?


What was the error?  Did you search for the error code to see if anyone had
the same problem?  Certs are based on 509 however there are extensions that
different vendors support.
r,
Hugh

- Original Message -
From: Hawkins, Keith (Keith) [EMAIL PROTECTED]
To: tomcat-user [EMAIL PROTECTED]
Sent: Friday, April 12, 2002 5:46 PM
Subject: How many SSL certificates are needed for Tomcat with IIS?



I generated CSR via Sun's keytool, sent it to verisign, and imported the
resulting certificate into a keystore file.
I tried to get IIS to import this certificate, but it rejects it.  Do I have
to request the certificate from IIS?  Do I need to
have two certificates, one for tomcat and one for IIS?

Thanks,
Keith




--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]


--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]


--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]

--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]



winmail.dat
Description: application/ms-tnef

--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]


RE: How many SSL certificates are needed for Tomcat with IIS?

2002-04-15 Thread John Roth

Also, each server sends a machine+server specific character set to Verisign
(or any other certifier).  For example: a keystore generated CertRequest
will create a different request than an IIS generated CertRequest, all other
things being equal (IP address, domain name, etc.).

In a normal Web Server/Tomcat (App) Server environment, the Web Server is
what is responsible for SSL encryption.  This is the same regardless of the
web server (IIS, Apache, Netscape, or any other).  In some environments
Tomcat is the web server, hence the SSL support in Tomcat.

Summary:
Only the web server needs the certificate.  If this is IIS, you must
generate the request via IIS.  If the web server is going to be Tomcat, via
the HTTPConnector, use keystore to generate the request.

John

-Original Message-
From: Hugh Brien [mailto:[EMAIL PROTECTED]]
Sent: Sunday, April 14, 2002 12:44 AM
To: Tomcat Users List
Subject: Re: How many SSL certificates are needed for Tomcat with IIS?


What was the error?  Did you search for the error code to see if anyone had
the same problem?  Certs are based on 509 however there are extensions that
different vendors support.
r,
Hugh

- Original Message -
From: Hawkins, Keith (Keith) [EMAIL PROTECTED]
To: tomcat-user [EMAIL PROTECTED]
Sent: Friday, April 12, 2002 5:46 PM
Subject: How many SSL certificates are needed for Tomcat with IIS?



I generated CSR via Sun's keytool, sent it to verisign, and imported the
resulting certificate into a keystore file.
I tried to get IIS to import this certificate, but it rejects it.  Do I have
to request the certificate from IIS?  Do I need to
have two certificates, one for tomcat and one for IIS?

Thanks,
Keith




--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]


--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]




RE: REPOST: XXX Assert failed, buff too small -- Help!!

2002-04-15 Thread John Roth

Still troubleshooting, about ready to give up and regretfully move this
portion of our application to Active Server Pages.  If anyone out there has
any advice or suggestions, they would be greatly appreciated.

Here is the latest round of discoveries:
1. After modifying AJP*.class, we found that the character encoding has no
effect.
2. Different browsers break at different points, but with the same exact
problem:
  IE (5.0, 5.5, 6.x) all break on the 1365th AJP packet.
  NS (4.x) breaks on the 55th AJP packet.
  Opera (6.0) breaks on the 11th AJP packet.
  - nothing I change in any of the browsers changes the number, even in
Opera where you can set the browser description to IE5.5, etc.
  - In all browser cases, normal AJP packets (8186 bytes of data, 8192 total
packet size) move fine until at the break point, AJP tries to interpret a
packet size of 65,311, and breaks.

The saga continues.

PS: if anyone is reading this, please acknowlege.  I'm starting to develop a
complex here ;)

John

-Original Message-
From: John Roth [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002 5:14 PM
To: 'Tomcat Users List'
Subject: RE: REPOST: XXX Assert failed, buff too small -- Help!!


Another day of troubleshooting, more information:

- We wrote a JSP that takes form data and displays it (simple text field,
POSTing to a JSP).  I can upload huge amounts without the same problem.  The
upload even exceeds the 1365 AJP packets that the file upload has been
limited to.

Questions:
1. The file upload uses multipart/form-data for the encoding type, the
text form does not.  Multipart/form-data is used by the O'Reilly servlet to
handle uploading binary.  Anyone have any specific knowlege on this
encoding?
2. Has anyone else run into problems uploading large binary files?
3. Is anyone out there getting these messages ;) ?  Frustration is running
rampant here.
4. Is there anymore information I can provide that would help troubleshoot
this?  Can anyone think of a different series of actions to identify the
root cause of this problem?


Thanks,
john


-Original Message-
From: John Roth [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002 10:31 AM
To: 'Tomcat Users List'
Subject: REPOST: XXX Assert failed, buff too small -- Help!!


I am *still* troubleshooting this issue, and am in dire need of help.  Is
anyone out there uploading large files via SSL/HTTPS?

New discoveries:
1. Added some debugging code to Ajp13.class to output buff, length, etc.,
results are as follows:
   JR: Array: buff(from)=[B@7f92f5, pos(fromIndex)=6, dest(to)=[B@9505f,
0(toIndex), length(count)=8186
   JR: Buff: length=8186, Buff: 8192

   ... repeats for all 1364 correct AJP packets, then ...

   JR: Array: buff(from)=[B@7f92f5, pos(fromIndex)=6, dest(to)=[B@9505f,
0(toIndex), length(count)=8186
   JR: Buff: length=65311, Buff: 8192
   XXX Assert failed, buff too small: length=65311, Buff: 8192
   JR: Array: buff(from)=[B@7f92f5, pos(fromIndex)=6, dest(to)=[B@9505f,
0(toIndex), length(count)=65311
   ... then the AIOOB exception in the application log.
2. Have upgraded Tomcat from 4.0.1 to 4.0.3
3. Have upgraded to yet the latest ISAPI_REDIRECT(or).dll
4. Have explored all IIS registry settings without being able to change the
results at all.
5. Tried other servlets besides O'Reilly with the same result (not
surprising, the error occurs in AJP or isapi_redirect - still can't narrow
down chain of events).
6. ASP pages used for upload do not have this problem (albeit they are
considerably slower).

Desparately looking for help or advice!!

Thanks,
John Roth, Director net.Media
Provider Solutions Corp.

-Original Message-
From: John Roth [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 03, 2002 3:40 PM
To: Tomcat User Group (E-mail)
Subject: RE: XXX Assert failed, buff too small


After two weeks, I am still troubleshooting the same problem uploading files
via https where the filesize is greater than 10.7MB.  I am not having much
luck determining the order in which to problem flows, but the following
things are happening:

1. stdout.log records XXX Assert failed, buff too small after which
ajp13Packet.class exceptions with AIOOBE.
2. isapi_redirect gets a ReadClient failed, followed shortly by
ServerSupportFunction failed.
3. IIS sends a reset flag to the client.
4. Socket timeout as client acks the reset flag.

I am not able to determine the chain of events, ie: IIS reset/Client
reset-ReadClient fails-AIOOBE or AIOOBE-ReadClient fails-IIS
reset/Client reset.
We are using the O'Reilly multipart upload servlet, and it has been upgraded
to the latest version.  The same thing happens when testing with other JSP
based solutions (such as JSPSmartUpload) but not with ASP-based uploads.

The next series of questions is this:
1. I noticed that 4.0.3 includes a significantly changed ajp connector.  Had
anyone been using is successfully or know if the changes address this issue?
2. Any ideas on how to more closely

REPOST: XXX Assert failed, buff too small -- Help!!

2002-04-10 Thread John Roth

I am *still* troubleshooting this issue, and am in dire need of help.  Is
anyone out there uploading large files via SSL/HTTPS?

New discoveries:
1. Added some debugging code to Ajp13.class to output buff, length, etc.,
results are as follows:
   JR: Array: buff(from)=[B@7f92f5, pos(fromIndex)=6, dest(to)=[B@9505f,
0(toIndex), length(count)=8186
   JR: Buff: length=8186, Buff: 8192

   ... repeats for all 1364 correct AJP packets, then ...

   JR: Array: buff(from)=[B@7f92f5, pos(fromIndex)=6, dest(to)=[B@9505f,
0(toIndex), length(count)=8186
   JR: Buff: length=65311, Buff: 8192
   XXX Assert failed, buff too small: length=65311, Buff: 8192
   JR: Array: buff(from)=[B@7f92f5, pos(fromIndex)=6, dest(to)=[B@9505f,
0(toIndex), length(count)=65311
   ... then the AIOOB exception in the application log.
2. Have upgraded Tomcat from 4.0.1 to 4.0.3
3. Have upgraded to yet the latest ISAPI_REDIRECT(or).dll
4. Have explored all IIS registry settings without being able to change the
results at all.
5. Tried other servlets besides O'Reilly with the same result (not
surprising, the error occurs in AJP or isapi_redirect - still can't narrow
down chain of events).
6. ASP pages used for upload do not have this problem (albeit they are
considerably slower).

Desparately looking for help or advice!!

Thanks,
John Roth, Director net.Media
Provider Solutions Corp.

-Original Message-
From: John Roth [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 03, 2002 3:40 PM
To: Tomcat User Group (E-mail)
Subject: RE: XXX Assert failed, buff too small


After two weeks, I am still troubleshooting the same problem uploading files
via https where the filesize is greater than 10.7MB.  I am not having much
luck determining the order in which to problem flows, but the following
things are happening:

1. stdout.log records XXX Assert failed, buff too small after which
ajp13Packet.class exceptions with AIOOBE.
2. isapi_redirect gets a ReadClient failed, followed shortly by
ServerSupportFunction failed.
3. IIS sends a reset flag to the client.
4. Socket timeout as client acks the reset flag.

I am not able to determine the chain of events, ie: IIS reset/Client
reset-ReadClient fails-AIOOBE or AIOOBE-ReadClient fails-IIS
reset/Client reset.
We are using the O'Reilly multipart upload servlet, and it has been upgraded
to the latest version.  The same thing happens when testing with other JSP
based solutions (such as JSPSmartUpload) but not with ASP-based uploads.

The next series of questions is this:
1. I noticed that 4.0.3 includes a significantly changed ajp connector.  Had
anyone been using is successfully or know if the changes address this issue?
2. Any ideas on how to more closely determine to order of the described
order of events? Some of the logs reports milliseconds, most don't, so I
can't seem to absolutely determine the order of events.
3. I have adjusted several TCP parameters in the Windows registry, but
nothing seems to change the fact that the error always occurs on the 1365th
AJP packet.  None of the buffers within isapi_redirect.dll appear to
correlate to this number.  Anyone familiar with the inner workings of
isapi_redirect (dated feb 14, 2002)?

Any desperately needed help would be appreciated.

Thanks,
john


-Original Message-
From: John Roth [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, March 20, 2002 4:39 PM
To: Tomcat User Group (E-mail)
Subject: XXX Assert failed, buff too small


We are having a problem with Tomcat using an upload servlet to upload
potentially large files (up to 100MB).  The servlet works fine for all file
sizes in the following instances:
http://servername/app/UploadFiles.jsp
http://servername:8080/app/UploadFiles.jsp
but when using https (ie: https://servername/app/UploadFiles.jsp, we get
'Page Cannot Be Displayed'.  A summary of the error logs is below:

IIS_Redirect.Log

 [Wed Mar 20 15:49:20 2002]  [jk_ajp13_worker.c (206)]: sending to ajp13
#8192
 [Wed Mar 20 15:49:20 2002]  [jk_ajp13_worker.c (258)]: received from ajp13
#3
 [Wed Mar 20 15:49:20 2002]  [jk_isapi_plugin.c (426)]: Into
jk_ws_service_t::read
 [Wed Mar 20 15:49:20 2002]  [jk_isapi_plugin.c (426)]: Into
jk_ws_service_t::read

 ... this repeats 1364 times, everytime, before the following: ...

 [Wed Mar 20 15:49:20 2002]  [jk_ajp13_worker.c (206)]: sending to ajp13
#8192
 [Wed Mar 20 15:49:20 2002]  [jk_ajp13_worker.c (258)]: received from ajp13
#3
 [Wed Mar 20 15:49:20 2002]  [jk_isapi_plugin.c (426)]: Into
jk_ws_service_t::read
 [Wed Mar 20 15:49:20 2002]  [jk_isapi_plugin.c (426)]: Into
jk_ws_service_t::read
 [Wed Mar 20 15:49:20 2002]  [jk_isapi_plugin.c (460)]:
jk_ws_service_t::read, ReadClient failed

stdout.log
--
 Starting service Tomcat-Standalone-(Staging)
 Apache Tomcat/4.0.1
 [Ajp13] bad read: -103
 XXX Assert failed, buff too small

Note: Yes, I have been following the list, and I don't know what causes -103
either, but with the exception of this servlet, our app has been running

RE: REPOST: XXX Assert failed, buff too small -- Help!!

2002-04-10 Thread John Roth

Another day of troubleshooting, more information:

- We wrote a JSP that takes form data and displays it (simple text field,
POSTing to a JSP).  I can upload huge amounts without the same problem.  The
upload even exceeds the 1365 AJP packets that the file upload has been
limited to.

Questions:
1. The file upload uses multipart/form-data for the encoding type, the
text form does not.  Multipart/form-data is used by the O'Reilly servlet to
handle uploading binary.  Anyone have any specific knowlege on this
encoding?
2. Has anyone else run into problems uploading large binary files?
3. Is anyone out there getting these messages ;) ?  Frustration is running
rampant here.
4. Is there anymore information I can provide that would help troubleshoot
this?  Can anyone think of a different series of actions to identify the
root cause of this problem?


Thanks,
john


-Original Message-
From: John Roth [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002 10:31 AM
To: 'Tomcat Users List'
Subject: REPOST: XXX Assert failed, buff too small -- Help!!


I am *still* troubleshooting this issue, and am in dire need of help.  Is
anyone out there uploading large files via SSL/HTTPS?

New discoveries:
1. Added some debugging code to Ajp13.class to output buff, length, etc.,
results are as follows:
   JR: Array: buff(from)=[B@7f92f5, pos(fromIndex)=6, dest(to)=[B@9505f,
0(toIndex), length(count)=8186
   JR: Buff: length=8186, Buff: 8192

   ... repeats for all 1364 correct AJP packets, then ...

   JR: Array: buff(from)=[B@7f92f5, pos(fromIndex)=6, dest(to)=[B@9505f,
0(toIndex), length(count)=8186
   JR: Buff: length=65311, Buff: 8192
   XXX Assert failed, buff too small: length=65311, Buff: 8192
   JR: Array: buff(from)=[B@7f92f5, pos(fromIndex)=6, dest(to)=[B@9505f,
0(toIndex), length(count)=65311
   ... then the AIOOB exception in the application log.
2. Have upgraded Tomcat from 4.0.1 to 4.0.3
3. Have upgraded to yet the latest ISAPI_REDIRECT(or).dll
4. Have explored all IIS registry settings without being able to change the
results at all.
5. Tried other servlets besides O'Reilly with the same result (not
surprising, the error occurs in AJP or isapi_redirect - still can't narrow
down chain of events).
6. ASP pages used for upload do not have this problem (albeit they are
considerably slower).

Desparately looking for help or advice!!

Thanks,
John Roth, Director net.Media
Provider Solutions Corp.

-Original Message-
From: John Roth [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 03, 2002 3:40 PM
To: Tomcat User Group (E-mail)
Subject: RE: XXX Assert failed, buff too small


After two weeks, I am still troubleshooting the same problem uploading files
via https where the filesize is greater than 10.7MB.  I am not having much
luck determining the order in which to problem flows, but the following
things are happening:

1. stdout.log records XXX Assert failed, buff too small after which
ajp13Packet.class exceptions with AIOOBE.
2. isapi_redirect gets a ReadClient failed, followed shortly by
ServerSupportFunction failed.
3. IIS sends a reset flag to the client.
4. Socket timeout as client acks the reset flag.

I am not able to determine the chain of events, ie: IIS reset/Client
reset-ReadClient fails-AIOOBE or AIOOBE-ReadClient fails-IIS
reset/Client reset.
We are using the O'Reilly multipart upload servlet, and it has been upgraded
to the latest version.  The same thing happens when testing with other JSP
based solutions (such as JSPSmartUpload) but not with ASP-based uploads.

The next series of questions is this:
1. I noticed that 4.0.3 includes a significantly changed ajp connector.  Had
anyone been using is successfully or know if the changes address this issue?
2. Any ideas on how to more closely determine to order of the described
order of events? Some of the logs reports milliseconds, most don't, so I
can't seem to absolutely determine the order of events.
3. I have adjusted several TCP parameters in the Windows registry, but
nothing seems to change the fact that the error always occurs on the 1365th
AJP packet.  None of the buffers within isapi_redirect.dll appear to
correlate to this number.  Anyone familiar with the inner workings of
isapi_redirect (dated feb 14, 2002)?

Any desperately needed help would be appreciated.

Thanks,
john


-Original Message-
From: John Roth [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, March 20, 2002 4:39 PM
To: Tomcat User Group (E-mail)
Subject: XXX Assert failed, buff too small


We are having a problem with Tomcat using an upload servlet to upload
potentially large files (up to 100MB).  The servlet works fine for all file
sizes in the following instances:
http://servername/app/UploadFiles.jsp
http://servername:8080/app/UploadFiles.jsp
but when using https (ie: https://servername/app/UploadFiles.jsp, we get
'Page Cannot Be Displayed'.  A summary of the error logs is below:

IIS_Redirect.Log

 [Wed Mar 20 15:49:20 2002

RE: XXX Assert failed, buff too small

2002-04-03 Thread John Roth

After two weeks, I am still troubleshooting the same problem uploading files
via https where the filesize is greater than 10.7MB.  I am not having much
luck determining the order in which to problem flows, but the following
things are happening:

1. stdout.log records XXX Assert failed, buff too small after which
ajp13Packet.class exceptions with AIOOBE.
2. isapi_redirect gets a ReadClient failed, followed shortly by
ServerSupportFunction failed.
3. IIS sends a reset flag to the client.
4. Socket timeout as client acks the reset flag.

I am not able to determine the chain of events, ie: IIS reset/Client
reset-ReadClient fails-AIOOBE or AIOOBE-ReadClient fails-IIS
reset/Client reset.
We are using the O'Reilly multipart upload servlet, and it has been upgraded
to the latest version.  The same thing happens when testing with other JSP
based solutions (such as JSPSmartUpload) but not with ASP-based uploads.

The next series of questions is this:
1. I noticed that 4.0.3 includes a significantly changed ajp connector.  Had
anyone been using is successfully or know if the changes address this issue?
2. Any ideas on how to more closely determine to order of the described
order of events? Some of the logs reports milliseconds, most don't, so I
can't seem to absolutely determine the order of events.
3. I have adjusted several TCP parameters in the Windows registry, but
nothing seems to change the fact that the error always occurs on the 1365th
AJP packet.  None of the buffers within isapi_redirect.dll appear to
correlate to this number.  Anyone familiar with the inner workings of
isapi_redirect (dated feb 14, 2002)?

Any desperately needed help would be appreciated.

Thanks,
john


-Original Message-
From: John Roth [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, March 20, 2002 4:39 PM
To: Tomcat User Group (E-mail)
Subject: XXX Assert failed, buff too small


We are having a problem with Tomcat using an upload servlet to upload
potentially large files (up to 100MB).  The servlet works fine for all file
sizes in the following instances:
http://servername/app/UploadFiles.jsp
http://servername:8080/app/UploadFiles.jsp
but when using https (ie: https://servername/app/UploadFiles.jsp, we get
'Page Cannot Be Displayed'.  A summary of the error logs is below:

IIS_Redirect.Log

 [Wed Mar 20 15:49:20 2002]  [jk_ajp13_worker.c (206)]: sending to ajp13
#8192
 [Wed Mar 20 15:49:20 2002]  [jk_ajp13_worker.c (258)]: received from ajp13
#3
 [Wed Mar 20 15:49:20 2002]  [jk_isapi_plugin.c (426)]: Into
jk_ws_service_t::read
 [Wed Mar 20 15:49:20 2002]  [jk_isapi_plugin.c (426)]: Into
jk_ws_service_t::read

 ... this repeats 1364 times, everytime, before the following: ...

 [Wed Mar 20 15:49:20 2002]  [jk_ajp13_worker.c (206)]: sending to ajp13
#8192
 [Wed Mar 20 15:49:20 2002]  [jk_ajp13_worker.c (258)]: received from ajp13
#3
 [Wed Mar 20 15:49:20 2002]  [jk_isapi_plugin.c (426)]: Into
jk_ws_service_t::read
 [Wed Mar 20 15:49:20 2002]  [jk_isapi_plugin.c (426)]: Into
jk_ws_service_t::read
 [Wed Mar 20 15:49:20 2002]  [jk_isapi_plugin.c (460)]:
jk_ws_service_t::read, ReadClient failed

stdout.log
--
 Starting service Tomcat-Standalone-(Staging)
 Apache Tomcat/4.0.1
 [Ajp13] bad read: -103
 XXX Assert failed, buff too small

Note: Yes, I have been following the list, and I don't know what causes -103
either, but with the exception of this servlet, our app has been running
great for months, with several dozen -103's a day.  The XXX Assert Failed is
new.

tomcat_log.log
--
2002-03-20 15:34:02 UploadFiles: init
2002-03-20 15:34:15 jsp: init
2002-03-20 15:34:15 Ajp13Processor[8009][6] process: invoke
java.net.SocketException: Connection aborted by peer: socket write error
at java.net.SocketOutputStream.socketWrite(Native Method)
at java.net.SocketOutputStream.write(SocketOutputStream.java:83)
at org.apache.ajp.Ajp13.send(Ajp13.java:959)
at org.apache.ajp.Ajp13.finish(Ajp13.java:808)
at
org.apache.ajp.tomcat4.Ajp13Response.finishResponse(Ajp13Response.java:192)
at org.apache.ajp.tomcat4.Ajp13Processor.process(Ajp13Processor.java:373)
at org.apache.ajp.tomcat4.Ajp13Processor.run(Ajp13Processor.java:424)
at java.lang.Thread.run(Thread.java:484)

Application Log
---
2002-03-20 15:34:03,253 [Ajp13Processor[8009][6]] DEBUG
com.psc.ams.servlets.PSCUploadFilesByExtension - clearing dir
e://staging\jroth
2002-03-20 15:34:03,253 [Ajp13Processor[8009][6]] DEBUG
com.psc.ams.servlets.PSCUploadFilesByExtension - attempting to delete file
e:\\staging\jroth\11MB.txt
2002-03-20 15:34:15,190 [Ajp13Processor[8009][6]] ERROR
com.psc.ams.servlets.PSCUploadFilesByExtension - Unexpected Exception
occured in PSCUploadFiles.doPost().
java.lang.ArrayIndexOutOfBoundsException
at java.lang.System.arraycopy(Native Method)
at org.apache.ajp.Ajp13Packet.getBytes(Ajp13Packet.java:459)
at org.apache.ajp.Ajp13

RE: Tomcat service-- command line restart

2002-03-27 Thread John Roth

You can do:
net stop Tomcat
net start Tomcat

- assuming, of course that Tomcat is your service name.  I have multiple
instances on each server, so my names vary by which instance.

John



-Original Message-
From: Stephen Clarke [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, March 27, 2002 8:08 AM
To: tomcat
Subject: Tomcat service-- command line restart


Hi,
Does any kind person happen to have on the tip of his tongue the command
line to restart Tomcat as a service in win2k?
Many thanks.
--
Best,
Stephen Clarke


--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]


--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]




XXX Assert failed, buff too small

2002-03-20 Thread John Roth
)
at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.ja
va:201)
at
org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:5
66)
at
org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:472)
at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:943)
at
org.apache.catalina.core.StandardContext.invoke(StandardContext.java:2344)
at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:164
)
at
org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:5
66)
at
org.apache.catalina.valves.ErrorDispatcherValve.invoke(ErrorDispatcherValve.
java:170)
at
org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:5
64)
at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:170
)
at
org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:5
64)
at
org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:462)
at
org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:5
64)
at
org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:472)
at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:943)
at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java
:163)
at
org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:5
66)
at
org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:472)
at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:943)
at org.apache.ajp.tomcat4.Ajp13Processor.process(Ajp13Processor.java:371)
at org.apache.ajp.tomcat4.Ajp13Processor.run(Ajp13Processor.java:424)
at java.lang.Thread.run(Thread.java:484)

Environment:

- Win2000 Server, patched up to latest levels
- Tomcat 4.0.1 Binary distribution, running as a service
- IIS 5.0, using ISAPI_Redirect.dll dated 12/08/01 (Thank you Henri Gomez!)
- SSL Enabled through IIS
- I have several servers with similar environments.  Some servers have
multiple logical web servers with multiple Tomcat instances.  This
particular server has only one instance of each.  However, the same behavior
is observed on any server/instance with SSL.

Facts:
--
1] This only happens on https://, all other forms work fine.
2] This only happens on files larger than just under 11MB (11,172,378 bytes,
plus or minus a few bytes for filename payload).
3] The Assert Failed error comes from Ajp13.java, Ajp13Packet.java, or
MsgAjp.java.  I am not a Java programmer (yes, another one of those
'systems' guys), but was able to dig throught the source to find the actual
system.out lines.
4] 11,172,378 / 1364 = 8191+-, the same size as the ajp packet.  Why 1364
ajp packets?  Anything smaller works fine.
5] Any help will result in the helper receiving a free drink from the helpee
next time the helper is in Tampa, FL!

Thanks in advance,
John Roth, Director net.Media
Provider Solutions Corp.


--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]




RE: Where's my fish? How do I go fishing? (Tomcat 4.0)

2002-03-20 Thread John Roth

In esrver.xml:

Context path=/yourcontextpath docBase=yourdocbase reloadable=true


-Original Message-
From: Ilya Khandamirov [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, March 20, 2002 5:53 PM
To: 'Tomcat Users List'
Subject: RE: Where's my fish? How do I go fishing? (Tomcat 4.0)


Forgive me, but I am not sure what tag to use to set reloadable

file: %CATALINA_HOME%\conf\server.xml (or
$CATALINA_HOME/conf/server.xml)
tag: Context ...

Regards,
Ilya




--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]


--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]