post data lost when redirecting from http to https
Hi, I have an jsp page page1.jsp with a form form action=page2.jsp method=post.../form When page2.jsp is secured in web.xml via security-constraint - transport confidential, the posted data from page1.jsp is lost on submit (it's simply missing missing in the request). Without the constraint everything works, when changing action to https://server:port/page2.jsp it works too. I'm wondering whether this could be a tomcat bug? My tomcat's version is Server version: Apache Tomcat/6.0.9 Server built: Feb 1 2007 02:12:46 Server number: 6.0.9.0 Thanks a lot, regards Jan -- View this message in context: http://www.nabble.com/post-data-lost-when-redirecting-from-http-to-https-tp15799796p15799796.html Sent from the Tomcat - User mailing list archive at Nabble.com. - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: post data lost when redirecting from http to https
From: J. Zach [mailto:[EMAIL PROTECTED] I have an jsp page page1.jsp with a form form action=page2.jsp method=post.../form When page2.jsp is secured in web.xml via security-constraint - transport confidential, the posted data from page1.jsp is lost on submit (it's simply missing missing in the request). That's expected: - The page submits to http://server:port/page2.jsp - The server issues a 302 redirect to https://server:port/page2.jsp - before examining any page content to find out there's a POST. As your requirement is for confidentiality, this is correct - the server *must not* require any of the content to be sent before making the decision to redirect, or confidentiality could be broken. - The browser acts on the redirect and issues a GET for the redirected page, hence without the POST data. Without the constraint everything works, when changing action to https://server:port/page2.jsp it works too. Yes, as the intermediate redirect will be missing. I'm wondering whether this could be a tomcat bug? No, it's a feature of HTTP. Change your form action (or set the entire site to be SSL). - Peter - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: post data lost when redirecting from http to https
Yeah, like Peter says. The original form is what should be under SSL, presumably. Chad From: [EMAIL PROTECTED] To: users@tomcat.apache.org Date: Mon, 3 Mar 2008 09:17:31 + Subject: RE: post data lost when redirecting from http to https From: J. Zach [mailto:[EMAIL PROTECTED] I have an jsp page page1.jsp with a form form action=page2.jsp method=post.../form When page2.jsp is secured in web.xml via security-constraint - transport confidential, the posted data from page1.jsp is lost on submit (it's simply missing missing in the request). That's expected: - The page submits to http://server:port/page2.jsp - The server issues a 302 redirect to https://server:port/page2.jsp - before examining any page content to find out there's a POST. As your requirement is for confidentiality, this is correct - the server *must not* require any of the content to be sent before making the decision to redirect, or confidentiality could be broken. - The browser acts on the redirect and issues a GET for the redirected page, hence without the POST data. Without the constraint everything works, when changing action to https://server:port/page2.jsp it works too. Yes, as the intermediate redirect will be missing. I'm wondering whether this could be a tomcat bug? No, it's a feature of HTTP. Change your form action (or set the entire site to be SSL). - Peter - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] _ Shed those extra pounds with MSN and The Biggest Loser! http://biggestloser.msn.com/
Re: post data lost when redirecting from http to https
I would add if you are serious about customer confidence in your site, the form should be encrypted on SSL in addition to the form's target. I for one would simply go somewhere else if I was asked to enter payment info and the form page wasn't encrypted. --David Peter Crowther wrote: From: J. Zach [mailto:[EMAIL PROTECTED] I have an jsp page page1.jsp with a form form action=page2.jsp method=post.../form When page2.jsp is secured in web.xml via security-constraint - transport confidential, the posted data from page1.jsp is lost on submit (it's simply missing missing in the request). That's expected: - The page submits to http://server:port/page2.jsp - The server issues a 302 redirect to https://server:port/page2.jsp - before examining any page content to find out there's a POST. As your requirement is for confidentiality, this is correct - the server *must not* require any of the content to be sent before making the decision to redirect, or confidentiality could be broken. - The browser acts on the redirect and issues a GET for the redirected page, hence without the POST data. Without the constraint everything works, when changing action to https://server:port/page2.jsp it works too. Yes, as the intermediate redirect will be missing. I'm wondering whether this could be a tomcat bug? No, it's a feature of HTTP. Change your form action (or set the entire site to be SSL). - Peter - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Can pl anybody help me with org.apache.jasper.JasperException: /jsp/ballmember/Test.jsp(5,34) equal symbol expected
Open the jsp code in a programmers editor and check the syntax , specifically on the line number mentioned by the compiler. This looks like a syntax issue. -Sameer --- Sneha Manohar [EMAIL PROTECTED] wrote: org.apache.jasper.JasperException: /jsp/ballmember/Test.jsp(5,34) equal symbol expected org.apache.jasper.compiler.DefaultErrorHandler.jspError(DefaultErrorHandler.java:40) org.apache.jasper.compiler.ErrorDispatcher.dispatch(ErrorDispatcher.java:407) org.apache.jasper.compiler.ErrorDispatcher.jspError(ErrorDispatcher.java:88) org.apache.jasper.compiler.Parser.parseAttribute(Parser.java:195) org.apache.jasper.compiler.Parser.parseAttributes(Parser.java:150) org.apache.jasper.compiler.Parser.parseAttributes(Parser.java:162) org.apache.jasper.compiler.ParserController.getPageEncodingForJspSyntax(ParserController.java:451) org.apache.jasper.compiler.ParserController.determineSyntaxAndEncoding(ParserController.java:392) org.apache.jasper.compiler.ParserController.doParse(ParserController.java:173) org.apache.jasper.compiler.ParserController.parse(ParserController.java:103) org.apache.jasper.compiler.Compiler.generateJava(Compiler.java:153) org.apache.jasper.compiler.Compiler.compile(Compiler.java:314) org.apache.jasper.compiler.Compiler.compile(Compiler.java:294) org.apache.jasper.compiler.Compiler.compile(Compiler.java:281) org.apache.jasper.JspCompilationContext.compile(JspCompilationContext.java:566) org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:317) org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:337) org.apache.jasper.servlet.JspServlet.service(JspServlet.java:266) javax.servlet.http.HttpServlet.service(HttpServlet.java:803) - Did you know? You can CHAT without downloading messenger. Click here Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Tomcat on Windows in India and Poland
I have deployed a struts web application on Windows 2003 Server in Poland and India. Application needs to display Polish language coming from SAP. This is working in India on Windows 2003 Servers. But Messages are coming Question marks from Similar Configuration Server(language is polish) in Poland . Any advice on this?
RE: Tomcat on Windows in India and Poland
From: Raghuveer [mailto:[EMAIL PROTECTED] I have deployed a struts web application on Windows 2003 Server in Poland and India. Application needs to display Polish language coming from SAP. This is working in India on Windows 2003 Servers. But Messages are coming Question marks from Similar Configuration Server(language is polish) in Poland . Any advice on this? Sounds like another character set / encoding issue - I'd be checking the installed and configured character sets every step of the way through the system, on your two sets of servers. If one set is working and the other set is failing, you should be able to spot the difference fairly easily. Start at SAP's output character set and work your way through. - Peter - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Encoding at server level - apache-tomcat-5.5.23\conf\web.xml
I need to setup tomcat operating in central European region. All my Windows Systems Operate on Polish /PL language Default encoding ?xml version=1.0 encoding=ISO-8859-1? Modified encoding ?xml version=1.0 encoding=ISO-8859-2? Clarification 1 Does there will be any impact on my other applications if I change default encoding from ISO-8859-1 to ISO-8859-2 in \apache-tomcat-5.5.23\conf\web.xml
Re: Encoding at server level - apache-tomcat-5.5.23\conf\web.xml
First, that's the encoding used *only* for reading that specific xml file. All xml files have such processor directive. Second, ISO-8859-2 is not a standard java provided encoding. As such, you will most probably need to find third party libraries that provide that encoding to your jvm (see http://java.sun.com/j2se/1.4.2/docs/api/java/nio/charset/Charset.html for list of officially supported charset in java). As a response i tend to say, there will be absolutely no impact, considering, AFAIK, that this processor directive is not even considered by tomcat. En l'instant précis du 03/03/08 14:27, Raghuveer s'exprimait en ces termes: I need to setup tomcat operating in central European region. All my Windows Systems Operate on Polish /PL language Default encoding ?xml version=1.0 encoding=ISO-8859-1? Modified encoding ?xml version=1.0 encoding=ISO-8859-2? Clarification 1 Does there will be any impact on my other applications if I change default encoding from ISO-8859-1 to ISO-8859-2 in \apache-tomcat-5.5.23\conf\web.xml -- http://www.devlog.be (a belgian developer's logs) - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Tomcat on Windows in India and Poland
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Peter, Peter Crowther wrote: | From: Raghuveer [mailto:[EMAIL PROTECTED] | I have deployed a struts web application on Windows 2003 | Server in Poland and India. | | Application needs to display Polish language coming from SAP. | | This is working in India on Windows 2003 Servers. | | But Messages are coming Question marks from Similar Configuration | Server(language is polish) in Poland . | | Any advice on this? | | Sounds like another character set / encoding issue - I'd be checking | the installed and configured character sets every step of the way | through the system, on your two sets of servers. If one set is | working and the other set is failing, you should be able to spot the | difference fairly easily. Start at SAP's output character set and | work your way through. Don't bother. We've given him the answer many times (use UTF-8 throughout) and he just doesn't do it. Check the archives. :( - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.8 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkfMB1cACgkQ9CaO5/Lv0PA8lACdFDw83h4A90fTlIir7w0hjq4Z krkAnjcrrH/rWZFsCDw/jiJeijefPLwu =dber -END PGP SIGNATURE- - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Realms and Remote Address
And I thought I was just missing something obvious. Using the code from CVS and changing my authentication code to implement the FlexibleRealmInterface has worked. I hope there are no bugs in the version of code I have. Thanks again. Kerrin On 28/02/2008 at 20:12, in message [EMAIL PROTECTED], Christopher Schultz [EMAIL PROTECTED] wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kerrin, Kerrin Hardy wrote: | Thanks for all your help so far. No problem. | I have the Security Filter working now (I had never used filters | before, so I had a lot of reading to do), and my bespoke realm is now | inheriting from SimpleSecurityRealmBase instead of Realm, and is now | located in my application instead of in a jar in tomcat/server/lib). Good. | Although this still doesn't appear to give me access to the IP address. | I have tried to find the FlexibleRealmInterface you mentioned, but can | only find one mention of it on the entire internet, and that is in | another post you made on a different mailing list. | | Where do I get this? Aah, I see. FlexibleRealmInterface was only made available after the 2.0 release. You need to get the sources from CVS and build SF that way in order to get FlexibleRealmInterface. Oh course, you'll also need to use the JAR file you build from there in order to run your code (rather than the one you may have downloaded). We're working on a 2.1 release soonish so folks don't have to roll their own libraries to get the nice, new stuff. - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.8 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org ( http://enigmail.mozdev.org/ ) iEYEARECAAYFAkfHFZYACgkQ9CaO5/Lv0PB0BACguNrmdCzb9RgJxqE2NwA/PO3A esYAn2rWKyE6fu7cs1uUl+dE5foUDG6e =GGhl -END PGP SIGNATURE- - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: post data lost when redirecting from http to https
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Peter,
Peter Crowther wrote:
| From: J. Zach [mailto:[EMAIL PROTECTED]
|
| When page2.jsp is secured in web.xml via security-constraint
| - transport
| confidential, the posted data from page1.jsp is lost on
| submit (it's simply missing missing in the request).
|
| That's expected:
No, it's not. Tomcat goes out of its way to save the POST body.Here's
the code from FormAuthenticator (see
http://svn.apache.org/repos/asf/tomcat/tc6.0.x/trunk/java/org/apache/catalina/authenticator/FormAuthenticator.java):
~protected void saveRequest(Request request, Session session)
~throws IOException {
~// Create and populate a SavedRequest object for this request
~SavedRequest saved = new SavedRequest();
~Cookie cookies[] = request.getCookies();
~if (cookies != null) {
~for (int i = 0; i cookies.length; i++)
~saved.addCookie(cookies[i]);
~}
~Enumeration names = request.getHeaderNames();
~while (names.hasMoreElements()) {
~String name = (String) names.nextElement();
~Enumeration values = request.getHeaders(name);
~while (values.hasMoreElements()) {
~String value = (String) values.nextElement();
~saved.addHeader(name, value);
~}
~}
~Enumeration locales = request.getLocales();
~while (locales.hasMoreElements()) {
~Locale locale = (Locale) locales.nextElement();
~saved.addLocale(locale);
~}
~if (POST.equalsIgnoreCase(request.getMethod())) {
~ByteChunk body = new ByteChunk();
~body.setLimit(request.getConnector().getMaxSavePostSize());
~byte[] buffer = new byte[4096];
~int bytesRead;
~InputStream is = request.getInputStream();
~while ( (bytesRead = is.read(buffer) ) = 0) {
~body.append(buffer, 0, bytesRead);
~}
~saved.setContentType(request.getContentType());
~saved.setBody(body);
~}
~saved.setMethod(request.getMethod());
~saved.setQueryString(request.getQueryString());
~saved.setRequestURI(request.getRequestURI());
~// Stash the SavedRequest in our session for later use
~session.setNote(Constants.FORM_REQUEST_NOTE, saved);
~}
This method is called before the login form is shown. Note the special
case for POST requests.
There is a caveat: there is a maximum size for the POST request. Jan,
how big is the POST request that you are attempting to submit across the
authentication boundary?
The default maxPostSize for both the HTTP and AJP connectors is 2MiB.
Are you seeing any messages in your catalina.out when you lose this data?
It doesn't look like FormAuthenticator cares about HTTP versus HTTPS,
but the saved request goes into the session, so perhaps you are losing
your session during this process? Try adding some logging to make sure
that the session id is consistent.
- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.8 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iEYEARECAAYFAkfMDJ4ACgkQ9CaO5/Lv0PAAowCgon8oikEdG3AWbmJVE7pmrhSp
M58AnRNlOWcdEGU9GmMDUX5UCdhI1RRr
=f8pY
-END PGP SIGNATURE-
-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Compilation issue on solaris 10
Hi,
I am completely new to tomcat, so excuse my st00pid questions.
I have successfully installed tomcat using blastwave packages before,
however I require a custom build from source this time. I have hit a
problem.
I downloaded a source tarball from the website (version 5.5.26) and
initiated the build using ant (distributed with solaris 10
/usr/sfw/bin/ant).
It checks some bits out and builds some stuff, before eventually bombing
out with this:
---8---
build-catalina-core:
[javac] Compiling 319 source files to
/usr/local/tarballs/apache-tomcat-5.5.26-src/build/build/classes
[javac]
/usr/local/tarballs/apache-tomcat-5.5.26-src/container/catalina/src/share/org/apache/catalina/ant/BaseRedirectorHelperTask.java:29:
cannot find symbol
[javac] symbol : class Redirector
[javac] location: package org.apache.tools.ant.taskdefs
[javac] import org.apache.tools.ant.taskdefs.Redirector;
[javac] ^
[javac]
/usr/local/tarballs/apache-tomcat-5.5.26-src/container/catalina/src/share/org/apache/catalina/ant/BaseRedirectorHelperTask.java:30:
cannot find symbol
[javac] symbol : class RedirectorElement
[javac] location: package org.apache.tools.ant.types
[javac] import org.apache.tools.ant.types.RedirectorElement;
[javac] ^
[javac]
/usr/local/tarballs/apache-tomcat-5.5.26-src/container/catalina/src/share/org/apache/catalina/ant/BaseRedirectorHelperTask.java:58:
cannot find symbol
[javac] symbol : class Redirector
[javac] location: class
org.apache.catalina.ant.BaseRedirectorHelperTask
[javac] protected Redirector redirector = new Redirector(this);
[javac] ^
[javac]
/usr/local/tarballs/apache-tomcat-5.5.26-src/container/catalina/src/share/org/apache/catalina/ant/BaseRedirectorHelperTask.java:61:
cannot find symbol
[javac] symbol : class RedirectorElement
[javac] location: class
org.apache.catalina.ant.BaseRedirectorHelperTask
[javac] protected RedirectorElement redirectorElement = null;
[javac] ^
[javac]
/usr/local/tarballs/apache-tomcat-5.5.26-src/container/catalina/src/share/org/apache/catalina/ant/BaseRedirectorHelperTask.java:217:
cannot find symbol
[javac] symbol : class RedirectorElement
[javac] location: class
org.apache.catalina.ant.BaseRedirectorHelperTask
[javac] public void addConfiguredRedirector(RedirectorElement
redirectorElement) {
[javac] ^
[javac]
/usr/local/tarballs/apache-tomcat-5.5.26-src/container/catalina/src/share/org/apache/catalina/ant/BaseRedirectorHelperTask.java:58:
cannot find symbol
[javac] symbol : class Redirector
[javac] location: class
org.apache.catalina.ant.BaseRedirectorHelperTask
[javac] protected Redirector redirector = new Redirector(this);
[javac] ^
[javac] Note: Some input files use or override a deprecated API.
[javac] Note: Recompile with -Xlint:deprecation for details.
[javac] 6 errors
BUILD FAILED
file:/usr/local/tarballs/apache-tomcat-5.5.26-src/container/catalina/build.xml:616:
Compile failed; see the compiler error output for details.
Total time: 1 minute 11 seconds
---8---
Have I missed something?
My environment is solaris 10 update 4 for sparc with most recent patch
cluster applied. My java JRE is the standard one ditributed with the
operating system. The system has had the JASS hardening toolkit installed.
Thanks
--
Best Regards
Edd
http://students.dec.bmth.ac.uk/ebarrett
-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
RE: Compilation issue on solaris 10
From: Edd [mailto:[EMAIL PROTECTED] Subject: Compilation issue on solaris 10 I require a custom build from source this time. Why do you think that? Tomcat is pure Java (other than the APR bit, which you don't need), so the binary distribution runs on any platform with a viable JVM. The JVM that comes with Solaris 10 is certainly one of those. Just download the binary package from tomcat.apache.org - that's all you need. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: encoding - web.xml,struts struts-config.xml
Just a stab in the dark here since I don't know where Polish alphabet characters lie in the code charts, but you will probably want to use UTF-8 instead of ISO-8859. We've had plenty of issues with users cutting and pasting text from RTF applications (e.g. MS Word) into our web app's text areas only to see some of the characters not be encoded correctly. If you go this route, it's a multi-step process: you need to set the form encoding on your HTML forms (acceptCharset=UTF-8 enctype=application/x-www-form-urlencoded; charset=UTF-8), you will need to set the character encoding in your JSP pages (jsp:directive.page contentType=text/html; charset=UTF-8 pageEncoding=UTF-8/), and most importantly, you need a filter that sets the character encoding on each request (http://wiki.apache.org/tomcat/Tomcat/UTF-8) *BEFORE* you attempt to read any parameters. I don't know what the requirements of your web app will be regarding text input, but I've discovered that you must always assume that the user will do something you didn't expect. I've mucked around with this a bunch in resolving a ton of problems, so if you need any pointers, feel free to ask away. --adam Raghuveer wrote: I am working on i18n application that needs to be worked in English and Polish language. This application is working on Tomcat Servers on windows system In India, But getting Question Marks Polish language in Poland Windows System. Is there anything that needs to be handled in web.xml and struts-config.xml with encoding attribute? ?xml version=1.0 encoding=ISO-8859-1? I don't find any difference when modified to ISO-8859-2 ?xml version=1.0 encoding= ISO-8859-2? Any advice or suggestion ? - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Compilation issue on solaris 10
although JVM comes, with Solaris 10, you need, to set, JAVA_HOME , for that go to, open your, /etc/profiles files, ( as a root ), with any editor, then, add follwing, lines,there JAVA_HOME=/usr/java export JAVA_HOME and save, it, log out log in.. On Mon, Mar 3, 2008 at 9:12 PM, Caldarale, Charles R [EMAIL PROTECTED] wrote: From: Edd [mailto:[EMAIL PROTECTED] Subject: Compilation issue on solaris 10 I require a custom build from source this time. Why do you think that? Tomcat is pure Java (other than the APR bit, which you don't need), so the binary distribution runs on any platform with a viable JVM. The JVM that comes with Solaris 10 is certainly one of those. Just download the binary package from tomcat.apache.org - that's all you need. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] -- Regards Partha Goswami Solaris/Open solaris User Group www.solaris-user-group.org
Re: Compilation issue on solaris 10
On Mon, Mar 03, 2008 at 09:42:44AM -0600, Caldarale, Charles R wrote: From: Edd [mailto:[EMAIL PROTECTED] Subject: Compilation issue on solaris 10 I require a custom build from source this time. Why do you think that? Tomcat is pure Java (other than the APR bit, which you don't need), so the binary distribution runs on any platform with a viable JVM. The JVM that comes with Solaris 10 is certainly one of those. I did not realise that the apache project made binaries. I will try that. My initial trail of thought was that I did not want to install blastwave and all of the dependant packages. Just download the binary package from tomcat.apache.org - that's all you need. Yes will do, but either the build or my method is somewhat broken. -- Best Regards Edd http://students.dec.bmth.ac.uk/ebarrett - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Compilation issue on solaris 10
From: Edd [mailto:[EMAIL PROTECTED] Subject: Re: Compilation issue on solaris 10 My initial trail of thought was that I did not want to install blastwave and all of the dependant packages. In fact, you probably never want to install Tomcat from a 3rd-party repackaging; they're notorious for *almost* working. Use the real distributions from Apache. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Compilation issue on solaris 10
You can install coolstack package. On Mon, Mar 3, 2008 at 9:55 PM, Caldarale, Charles R [EMAIL PROTECTED] wrote: From: Edd [mailto:[EMAIL PROTECTED] Subject: Re: Compilation issue on solaris 10 My initial trail of thought was that I did not want to install blastwave and all of the dependant packages. In fact, you probably never want to install Tomcat from a 3rd-party repackaging; they're notorious for *almost* working. Use the real distributions from Apache. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] -- Regards Partha Goswami Solaris/Open solaris User Group www.solaris-user-group.org
Re: Compilation issue on solaris 10
Ed I see yaml, mysql and BerkeleyDB distro's listed at http://www.blastwave.org/cronlist/index.html could you enumerate the benefits of using blastwave over the originator's distros? feel free to ping me offline.. Thanks M- - Original Message - From: Edd [EMAIL PROTECTED] To: Tomcat Users List users@tomcat.apache.org Sent: Monday, March 03, 2008 11:08 AM Subject: Re: Compilation issue on solaris 10 On Mon, Mar 03, 2008 at 09:42:44AM -0600, Caldarale, Charles R wrote: From: Edd [mailto:[EMAIL PROTECTED] Subject: Compilation issue on solaris 10 I require a custom build from source this time. Why do you think that? Tomcat is pure Java (other than the APR bit, which you don't need), so the binary distribution runs on any platform with a viable JVM. The JVM that comes with Solaris 10 is certainly one of those. I did not realise that the apache project made binaries. I will try that. My initial trail of thought was that I did not want to install blastwave and all of the dependant packages. Just download the binary package from tomcat.apache.org - that's all you need. Yes will do, but either the build or my method is somewhat broken. -- Best Regards Edd http://students.dec.bmth.ac.uk/ebarrett - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Compilation issue on solaris 10
From: Partha Goswami [mailto:[EMAIL PROTECTED] Subject: Re: Compilation issue on solaris 10 You can install coolstack package. You can, but don't come here for help if you do. The first piece of advice given to anyone using any 3rd-party repackaged version of Tomcat is to throw it away and install a real one. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: mod_jk or mod_proxy_ajp - encryption benefits?
A hollow voice whispers, IPSec. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is intuitive he means the exact opposite. pgpXHb0gRtjuo.pgp Description: PGP signature
Re: Request.getContextPath() after RequestDispatcher.forward()
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 To whom it may concern, ciAnd7 wrote: | Context ... path=/ / Perhaps you meant: Context path= - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.8 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkfML38ACgkQ9CaO5/Lv0PCHoACeI3d+Ch7reozfQtAzsVINH6MT TTEAn35opET+yf75yVHO/0FfpnURyDFT =Uouv -END PGP SIGNATURE- - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Request.getContextPath() after RequestDispatcher.forward()
Hi! I am using tomcat 6.0.13 on linux. I try to deploy my application in to the root context. I.e. it should be available as root application on one of virtual host (http://vhost1/). So, I add Context ... path=/ / into the server.xml (I know, it is not recommended to do it in server.xml, but it is simple and I just want to do simple testing right now). The application works fine. But there is a problem with request.getContextPath() method. My Servlets use RequestDispatcher.forward() to JSP. And then, JSP use Request.getContextPath() to generate URLs (more precisely, getContextPath() used by JSTL`s c:url .. implementation). But getContextPath() returns /, so urls generated by c:url looks like //image/blah.gif - i.e. they have double leading slashes. As result - browser can`t process urls correctly. As I understand specification, getContextPath() should returns empty string in such case... (And JSTL`s implementation of c:url expects such behavior). If I deploy application under ordinal context path, all works correctly (getContextPath() returns string like /myapp). If my Servlet use RD.include() instead of forward(), all works fine: getContextPath() returns empty string. Could somebody help me with solution. Thanks. -- View this message in context: http://www.nabble.com/Request.getContextPath%28%29-after-RequestDispatcher.forward%28%29-tp15808317p15808317.html Sent from the Tomcat - User mailing list archive at Nabble.com. - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
View Servlets and JSP Examples
I have tomcat 6 installed on my machine. My localhost variable is c:\Program Files\Apache Software Foundation\Tomcat 6.0\webapps\ROOT When I type http://localhost, instead of getting the Tomcat Homepage index, I get the It Works page. I am wondering why this page renders when there is only one HTML page in the ROOT directory, which is index. Secondly, when I do navigate to the Tomcat Homepage, I am unable to view the Servlet and JSP examples Internet Explorer cannot display the Webpage. What extra configuration do I need to be able to view the Tomcat page under localhost and to be able to view the Servlet and JSP Examples? Appreciate any help. Richard. Looking for last minute shopping deals? Find them fast with Yahoo! Search. http://tools.search.yahoo.com/newsearch/category.php?category=shopping
RE: mod_jk or mod_proxy_ajp - encryption benefits?
Mark, Do you think that little hollow voice can clarify how IPSec would solve this problem by giving an example of a software that I could implement to accomplish this?Thanks,Jim Date: Mon, 3 Mar 2008 12:03:28 -0500 From: [EMAIL PROTECTED] To: users@tomcat.apache.org Subject: Re: mod_jk or mod_proxy_ajp - encryption benefits? A hollow voice whispers, IPSec. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is intuitive he means the exact opposite.
Configuring DataSourceRealm using Oracle
Hi, everybody: I was trying out the DataSourceRealm configuration by following the documentation included in the installation of Tomcat 5.5.23 on my machine but could not make it work. It would be very much appreciated if Tomcat gurus and veterans can spare some time reading my message and help me out. Before trying the DataSourceRealm == Before trying the DataSourceRealm, my test web application worked fine in user authentication using the default Realm element in %CATALINA_HOME%/conf/server.xml that came with the installation of Tomcat 5.5.23 and and the web.xml configuration described below. (1) In the server.xml file, the default Realm element is as follows, and has the scope for the Tomcat engine: Realm className=org.apache.catalina.realm.UserDatabaseRealm resourceName=UserDatabase/ (2) The pertinent elements in the web.xml for my application are cited below, which worked out fine for my test application: security-constraint web-resource-collection web-resource-name Restricted Area /web-resource-name url-pattern/*/url-pattern http-methodGET/http-method /web-resource-collection auth-constraint role-namemanager/role-name role-nametomcat/role-name /auth-constraint /security-constraint login-config auth-methodFORM/auth-method form-login-config form-login-page/Login.html/form-login-page form-error-page/Error.html/form-error-page /form-login-config /login-config security-role role-namemanager/role-name /security-role security-role role-nametomcat/role-name /security-role What I did in my attempt to set and use the DataSourceRealm === To setup DataSourceRealm, I am using Oracle database to set up the users and user_roles tables for user authentication, with the columns in the tables exactly as instructed in the documentation. However, when it comes down to writing the Realm element for the DataSourceRealm, the documentation gives an example for mySQL, not one for Oracle. In the server.xml, the commented-out examples are all for JDBCRealm only. First attempt: ++ I replaced the above-mentioned Realm element with the following one, mimicking the example for mySQL in the documentation: Realm className=org.apache.catalina.realm.DataSourceRealm dataSourceName=jdbc/webappDB userTable=users userNameCol=user_name userCredCol=user_pass userRoleTable=user_roles roleNameCol=role_name / and edited the web.xml, which becomes: security-constraint web-resource-collection web-resource-name Restricted Area /web-resource-name url-pattern/*/url-pattern http-methodGET/http-method /web-resource-collection auth-constraint role-nameadmin/role-name role-nameenduser/role-name /auth-constraint /security-constraint login-config auth-methodFORM/auth-method form-login-config form-login-page/Login.html/form-login-page form-error-page/Error.html/form-error-page /form-login-config /login-config security-role role-nameadmin/role-name /security-role security-role role-nameenduser/role-name /security-role Note that I change the role-name elements from managerand tomcat to admin and enduser, which are the values in the role_name column in the user_roles table. It did not surprise me that this did not work because I wondered how can Tomcat look up the users and user_roles tables if the url of the Oracle server is not even given in the Realm element's attributes. I was looking for the DTD for server.xml, but it is not spelled in the server.xml file. So I could only blindly fumble: Second attempt: I changed the Realm element in the server.xml file, and it became: Realm className=org.apache.catalina.realm.DataSourceRealm dataSourceName=jdbc/webappDB driverName=oracle.jdbc.OracleDriver connectionURL=jdbc:oracle:thin:@sb.lehman.cuny.edu:1521:idm0 connectionName=webappdb connectionPassword=GreenHorn userTable=users userNameCol=user_name userCredCol=user_pass userRoleTable=user_roles roleNameCol=role_name / where webappdb is the name of the account holding the users and user_roles tables on the Oracle server; and GreenHorn is its password. For the web.xmlfile, I am not sure if the realm-name sub-element for the login-config element is necessary and, even if it is necessary, what would be the value for it. I tried by adding realm-namejdbc/webappDB/realm-name. I re-started tomcat, closed and re-started the browser, and it did not work. I then commented out the realm-name element, thinking that since there is only one Realm element in server.xml (there are not any other Realm elements for any hosts or applications), tomcat might know which realm to look at. But it still did not work. Many thanks
Re: Configuring DataSourceRealm using Oracle
Jason Ling a écrit : I changed the Realm element in the server.xml file, and it became: Realm className=org.apache.catalina.realm.DataSourceRealm dataSourceName=jdbc/webappDB driverName=oracle.jdbc.OracleDriver connectionURL=jdbc:oracle:thin:@sb.lehman.cuny.edu:1521:idm0 connectionName=webappdb connectionPassword=GreenHorn userTable=users userNameCol=user_name userCredCol=user_pass userRoleTable=user_roles roleNameCol=role_name / your are using the datasourcerealm with parameters from the jdbcrealm, those are two separate realms. For datasource realm, you need to define a datasource that matches the one specified in dataSourceName=jdbc/webappDB To get more information on how to configure a datasource, please go there: http://tomcat.apache.org/tomcat-5.5-doc/jndi-datasource-examples-howto.html - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
mod_jk, lb cluster, multiple web servers
I have 3 physical servers, all 3 running tomcat6 and the 2 web applications (one for local, one for www) just fine. Two of these have apache web servers (local and www), both configured and running static content by themselves just fine. Ideally, I want the 3 tomcat6 instances to be a lb cluster for the two web servers. For reasons I don't understand, it isn't working. The 'local' web server will mount the lb cluster when I only have one tomcat6 instance listed in the cluster. The 'www' web server won't mount the cluster if it's 3 or 1 tomcat6 instance. It will mount a tomcat6 instance without the cluster. I seem to be lacking some understanding. Can multiple web servers connect to tomcat6 with mod_jk at the same time, or do I need to configure additional connectors for each connection? Servers are Apache2.2.3 Tomcat6.0.14 mod_jk-1.2.23-apache-2.2.x-linux-x86_64.so # workers.properties # # List workers worker.list=lb,jkstatus # # Define cartman worker.cartman.port=8009 worker.cartman.host=cartman.inside.msi worker.cartman.type=ajp13 worker.cartman.socket_timeout=300 worker.cartman.lbfactor=1 # # Define stan worker.stan.port=8009 worker.stan.host=stan.inside.msi worker.stan.type=ajp13 worker.stan.socket_timeout=300 worker.stan.lbfactor=1 # # Define kyle worker.kyle.port=8009 worker.kyle.host=kyle.inside.msi worker.kyle.type=ajp13 worker.kyle.socket_timeout=300 worker.kyle.lbfactor=1 # # # Define lb worker.lb.type=lb worker.lb.sticky_session=True worker.lb.sticky_session_force=False worker.lb.balance_workers=cartman # # Define a 'jkstatus' worker using status worker.jkstatus.type=status Apache config file mounts the local applications like: JkMount /localapp lb JkMount /localapp/* lb Apache config file mounts the www applications like: JkMount /wwwapp lb JkMount /wwwapp/* lb - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Tomcat and HugeTLB best practices for a 16GB machine
Hi all, I was wondering if anyone has played around with Tomcat and HugeTLB support on anything similar to the following hardware/software setup: * 2x Dual Core Xeon * 16 GB Ram * ISCSI attached root disks (Gentoo Linux based) If so, does anyone have any recommendations on how to go about tuning it to get the most bang for the buck so to speak? General HugeTLB related info would be helpful too, any ideas for figuring out the optimal settings, etc. I've read pretty much every bit of info I can on this thats Googlable, and I don't really see any information related to what (if anything) -Xms and -Xmx should be set to either, so if anyone has any suggestions there I'd be eternally grateful. :) Thanks! Derek - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Configuring DataSourceRealm using Oracle
On Mon, Mar 3, 2008 at 1:11 PM, David Delbecq [EMAIL PROTECTED] wrote: Jason Ling a écrit : I changed the Realm element in the server.xml file, and it became: Realm className=org.apache.catalina.realm.DataSourceRealm dataSourceName=jdbc/webappDB driverName=oracle.jdbc.OracleDriver connectionURL=jdbc:oracle:thin:@sb.lehman.cuny.edu:1521:idm0 connectionName=webappdb connectionPassword=GreenHorn userTable=users userNameCol=user_name userCredCol=user_pass userRoleTable=user_roles roleNameCol=role_name / your are using the datasourcerealm with parameters from the jdbcrealm, those are two separate realms. For datasource realm, you need to define a datasource that matches the one specified in dataSourceName=jdbc/webappDB To get more information on how to configure a datasource, please go there: http://tomcat.apache.org/tomcat-5.5-doc/jndi-datasource-examples-howto.html - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Request.getContextPath() after RequestDispatcher.forward()
Christopher Schultz-2 wrote: ciAnd7 wrote: | Context ... path=/ / Perhaps you meant: Context path= - -chris No. I mean ' path=/ '. I try empty string putting Context / in server.xml, and in app.war/META-INF/context.xml but without success: ROOT application from default host directory executed for '/' path on every virtual host. I found solution with 'path=/ ' and it seems to works except forward() gerContextPath(). -- View this message in context: http://www.nabble.com/Request.getContextPath%28%29-after-RequestDispatcher.forward%28%29-tp15808317p15812168.html Sent from the Tomcat - User mailing list archive at Nabble.com. - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Configuring DataSourceRealm using Oracle
On Mon, Mar 3, 2008 at 1:11 PM, David Delbecq [EMAIL PROTECTED] wrote: Jason Ling a écrit : I changed the Realm element in the server.xml file, and it became: Realm className=org.apache.catalina.realm.DataSourceRealm dataSourceName=jdbc/webappDB driverName=oracle.jdbc.OracleDriver connectionURL=jdbc:oracle:thin:@sb.lehman.cuny.edu:1521:idm0 connectionName=webappdb connectionPassword=GreenHorn userTable=users userNameCol=user_name userCredCol=user_pass userRoleTable=user_roles roleNameCol=role_name / your are using the datasourcerealm with parameters from the jdbcrealm, those are two separate realms. For datasource realm, you need to define a datasource that matches the one specified in dataSourceName=jdbc/webappDB To get more information on how to configure a datasource, please go there: http://tomcat.apache.org/tomcat-5.5-doc/jndi-datasource-examples-howto.html - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Configuring DataSourceRealm using Oracle
Thank you, David. Sorry, I sent this message two times, each time only the quoted message was sent, but not my reply. This is another try. Actually I did read the document you provided the link to. In that document (The Realm Component) the following attributes are listed for the DataSourceRealm: dataSourceName roleNameCol userCredCol userNameCol userRoleTable userTable and I actually used all of them in my first attempted configuration as shown in my original email: First attempt: ++ I replaced the above-mentioned Realm element with the following one, mimicking the example for mySQL in the documentation: Realm className=org.apache.catalina.realm.DataSourceRealm dataSourceName=jdbc/webappDB userTable=users userNameCol=user_name userCredCol=user_pass userRoleTable=user_roles roleNameCol=role_name / And that did not work out, you know, as I mentioned. I still do not know what was wrong with my configuration for DataSourceRealm. I still wonder how Tomcat would know where to go to look for the users table and the user_roles table, which are on the Oracle server which is sb.lehman.cuny.edu, and is not in any of the attributes listed above. Did I miss any components in the configuration that I tried? Jason On Mon, Mar 3, 2008 at 1:11 PM, David Delbecq [EMAIL PROTECTED] wrote: Jason Ling a écrit : I changed the Realm element in the server.xml file, and it became: Realm className=org.apache.catalina.realm.DataSourceRealm dataSourceName=jdbc/webappDB driverName=oracle.jdbc.OracleDriver connectionURL=jdbc:oracle:thin:@sb.lehman.cuny.edu:1521:idm0 connectionName=webappdb connectionPassword=GreenHorn userTable=users userNameCol=user_name userCredCol=user_pass userRoleTable=user_roles roleNameCol=role_name / your are using the datasourcerealm with parameters from the jdbcrealm, those are two separate realms. For datasource realm, you need to define a datasource that matches the one specified in dataSourceName=jdbc/webappDB To get more information on how to configure a datasource, please go there: http://tomcat.apache.org/tomcat-5.5-doc/jndi-datasource-examples-howto.html - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Configuring DataSourceRealm using Oracle
And, actually, you didn't do the part where you configure the datasource that your realm will use, information that is provided in the link i pointed you to. If you did actually configure the datasource (which is separate from the datasourcerealm), you wouldn't say I still wonder how Tomcat would know where to go moreover none of the configuration statements you pasted show any track of your datasource configuration, which agina is separate from the realm. Jason Ling a écrit : Thank you, David. Sorry, I sent this message two times, each time only the quoted message was sent, but not my reply. This is another try. Actually I did read the document you provided the link to. In that document (The Realm Component) the following attributes are listed for the DataSourceRealm: dataSourceName roleNameCol userCredCol userNameCol userRoleTable userTable and I actually used all of them in my first attempted configuration as shown in my original email: First attempt: ++ I replaced the above-mentioned Realm element with the following one, mimicking the example for mySQL in the documentation: Realm className=org.apache.catalina.realm.DataSourceRealm dataSourceName=jdbc/webappDB userTable=users userNameCol=user_name userCredCol=user_pass userRoleTable=user_roles roleNameCol=role_name / And that did not work out, you know, as I mentioned. I still do not know what was wrong with my configuration for DataSourceRealm. I still wonder how Tomcat would know where to go to look for the users table and the user_roles table, which are on the Oracle server which is sb.lehman.cuny.edu, and is not in any of the attributes listed above. Did I miss any components in the configuration that I tried? Jason On Mon, Mar 3, 2008 at 1:11 PM, David Delbecq [EMAIL PROTECTED] wrote: Jason Ling a écrit : I changed the Realm element in the server.xml file, and it became: Realm className=org.apache.catalina.realm.DataSourceRealm dataSourceName=jdbc/webappDB driverName=oracle.jdbc.OracleDriver connectionURL=jdbc:oracle:thin:@sb.lehman.cuny.edu:1521:idm0 connectionName=webappdb connectionPassword=GreenHorn userTable=users userNameCol=user_name userCredCol=user_pass userRoleTable=user_roles roleNameCol=role_name / your are using the datasourcerealm with parameters from the jdbcrealm, those are two separate realms. For datasource realm, you need to define a datasource that matches the one specified in dataSourceName=jdbc/webappDB To get more information on how to configure a datasource, please go there: http://tomcat.apache.org/tomcat-5.5-doc/jndi-datasource-examples-howto.html - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
mod_jk ERR/FRC
Hi I posted to the list our woes back around Christmas, today they seemed to get worse! Our site seems to have been pushed over today and fails to get back running smoothly after multiple restarts of Tomcat and the IIS in front of it. We are expecting a peak of traffic today, but nothing horrendous. Setup: TC 4.1.18, IIS5, mod_jk 1.2.25, JDK 1.3.1, Windows 2000 1 LB pointing to 1 worker TC, same server as IIS. Because of 3rd party license issues, we're stuck with using 1 TC only. Usually the tomcat runs with ~ 280 threads, but soon after a bounce its getting 400+ threads, and pretty soon I get errors such as this - [Error] ThreadPool- - Caught exception executing org.apache.jk.common.SocketAcceptor... java.lang.OutOfMemoryError unable to create new native thread Shortly after, mod_jk declares the worker to be in an Error state, and all my site serves is the 'Service Temporarily Unavailable' page. The isapi_redirect.log is dumping out hundreds of messages including 'all tomcat instances are busy or in error state'. This is like a couple of minutes after TC is restarted ! worker.properties has worker.wkr.connection_pool_size=200 worker.wkr.connection_pool_timeout=300 - When mod_jk shows a state of ERR/FRC, what exactly does the forced recovery attempt to do ? - Our webapp in TC works hard on startup to cache frequent content into memory. That means bouncing the Tomcat is painful for us during the day. I wonder anectdotally if the FRC messages from mod_jk are causing it hassle ? Moreover in the first ~15minutes of the webapp, response times will be longer than usual. Is this causing mod_jk to give up? If so whats the best tuning approach? - Is there a simple way in mod_jk to throttle traffic incident on tomcat ? - Lastly, can the 'Service Temporarily Unavailable' page be customised ? I'm presuming that its being served by mod_jk internals rather than IIS ? regards Tim
Re: Configuring DataSourceRealm using Oracle
Thank you, David. Now it works! I looked back into the documentation for DataSource, and then configured one in the server.xml file as a JNDI Resource. It seems to me that the Realm gets associated with the Resource by jdbc/webappDB, and that tells tomcat server where to find the Oracle server. Nevertheless, I still still have a few questions: What is the the realm-name sub-element of login-config for in the application's web.xml file, when and how is it used? Suppose I configure more than one Realm in server.xml, is that the scenario where I need to use the real-name tag to specify which Realm to use? In that case, realm-namewhat is the name/realm-name for the realm? Thanks a lot for your guide! Jason On Mon, Mar 3, 2008 at 3:11 PM, david delbecq [EMAIL PROTECTED] wrote: And, actually, you didn't do the part where you configure the datasource that your realm will use, information that is provided in the link i pointed you to. If you did actually configure the datasource (which is separate from the datasourcerealm), you wouldn't say I still wonder how Tomcat would know where to go moreover none of the configuration statements you pasted show any track of your datasource configuration, which agina is separate from the realm. Jason Ling a écrit : Thank you, David. Sorry, I sent this message two times, each time only the quoted message was sent, but not my reply. This is another try. Actually I did read the document you provided the link to. In that document (The Realm Component) the following attributes are listed for the DataSourceRealm: dataSourceName roleNameCol userCredCol userNameCol userRoleTable userTable and I actually used all of them in my first attempted configuration as shown in my original email: First attempt: ++ I replaced the above-mentioned Realm element with the following one, mimicking the example for mySQL in the documentation: Realm className=org.apache.catalina.realm.DataSourceRealm dataSourceName=jdbc/webappDB userTable=users userNameCol=user_name userCredCol=user_pass userRoleTable=user_roles roleNameCol=role_name / And that did not work out, you know, as I mentioned. I still do not know what was wrong with my configuration for DataSourceRealm. I still wonder how Tomcat would know where to go to look for the users table and the user_roles table, which are on the Oracle server which is sb.lehman.cuny.edu, and is not in any of the attributes listed above. Did I miss any components in the configuration that I tried? Jason On Mon, Mar 3, 2008 at 1:11 PM, David Delbecq [EMAIL PROTECTED] wrote: Jason Ling a écrit : I changed the Realm element in the server.xml file, and it became: Realm className=org.apache.catalina.realm.DataSourceRealm dataSourceName=jdbc/webappDB driverName=oracle.jdbc.OracleDriver connectionURL=jdbc:oracle:thin:@sb.lehman.cuny.edu:1521 :idm0 connectionName=webappdb connectionPassword=GreenHorn userTable=users userNameCol=user_name userCredCol=user_pass userRoleTable=user_roles roleNameCol=role_name / your are using the datasourcerealm with parameters from the jdbcrealm, those are two separate realms. For datasource realm, you need to define a datasource that matches the one specified in dataSourceName=jdbc/webappDB To get more information on how to configure a datasource, please go there: http://tomcat.apache.org/tomcat-5.5-doc/jndi-datasource-examples-howto.html - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Getting the URL of a DataSource
All, this may be a dumb question but I've exhausted my research and just wondering what other users out there are doing. I would like to get the URL for a DataSource to display for debugging and/or Informational reasons. I know I can get the URL after I get the DataSource and get a connection from the connection metadata. My problem is what if the Connection fails? It seems without the connection I can not get the URL for the DataSource. This is an application running under Tomcat 6.0.14. I guess I could get the URL from the JMX DataSource objects created by Tomcat (I can see them with jconsole). But is there another way? Am I missing something? I hope this question makes sense... Thanks for any and all comments. Regards, John. - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Configuring DataSourceRealm using Oracle
What is in the web.xml is not tomcat specific. The realm you see in web.xml is related to the notion of realm used by http protocol, that is a string showed to user when the login with http basic authentification, and which server for browser to seperate login in different realms for a same server (eg an admin realm, a shopping realm, a clerk realms) The link between a webapplication and a tomcat realm (that is, a source for users passwords and roles) is done in a context.xml file, which is tomcat specific. The file can be either located in META-INF/context.xml in your webapp for auto configuration or be put manually in tomcat config (conf/Catalina/host/webapp.xml) Jason Ling a écrit : Thank you, David. Now it works! I looked back into the documentation for DataSource, and then configured one in the server.xml file as a JNDI Resource. It seems to me that the Realm gets associated with the Resource by jdbc/webappDB, and that tells tomcat server where to find the Oracle server. Nevertheless, I still still have a few questions: What is the the realm-name sub-element of login-config for in the application's web.xml file, when and how is it used? Suppose I configure more than one Realm in server.xml, is that the scenario where I need to use the real-name tag to specify which Realm to use? In that case, realm-namewhat is the name/realm-name for the realm? Thanks a lot for your guide! Jason On Mon, Mar 3, 2008 at 3:11 PM, david delbecq [EMAIL PROTECTED] wrote: And, actually, you didn't do the part where you configure the datasource that your realm will use, information that is provided in the link i pointed you to. If you did actually configure the datasource (which is separate from the datasourcerealm), you wouldn't say I still wonder how Tomcat would know where to go moreover none of the configuration statements you pasted show any track of your datasource configuration, which agina is separate from the realm. Jason Ling a écrit : Thank you, David. Sorry, I sent this message two times, each time only the quoted message was sent, but not my reply. This is another try. Actually I did read the document you provided the link to. In that document (The Realm Component) the following attributes are listed for the DataSourceRealm: dataSourceName roleNameCol userCredCol userNameCol userRoleTable userTable and I actually used all of them in my first attempted configuration as shown in my original email: First attempt: ++ I replaced the above-mentioned Realm element with the following one, mimicking the example for mySQL in the documentation: Realm className=org.apache.catalina.realm.DataSourceRealm dataSourceName=jdbc/webappDB userTable=users userNameCol=user_name userCredCol=user_pass userRoleTable=user_roles roleNameCol=role_name / And that did not work out, you know, as I mentioned. I still do not know what was wrong with my configuration for DataSourceRealm. I still wonder how Tomcat would know where to go to look for the users table and the user_roles table, which are on the Oracle server which is sb.lehman.cuny.edu, and is not in any of the attributes listed above. Did I miss any components in the configuration that I tried? Jason On Mon, Mar 3, 2008 at 1:11 PM, David Delbecq [EMAIL PROTECTED] wrote: Jason Ling a écrit : I changed the Realm element in the server.xml file, and it became: Realm className=org.apache.catalina.realm.DataSourceRealm dataSourceName=jdbc/webappDB driverName=oracle.jdbc.OracleDriver connectionURL=jdbc:oracle:thin:@sb.lehman.cuny.edu:1521 :idm0 connectionName=webappdb connectionPassword=GreenHorn userTable=users userNameCol=user_name userCredCol=user_pass userRoleTable=user_roles roleNameCol=role_name / your are using the datasourcerealm with parameters from the jdbcrealm, those are two separate realms. For datasource realm, you need to define a datasource that matches the one specified in dataSourceName=jdbc/webappDB To get more information on how to configure a datasource, please go there: http://tomcat.apache.org/tomcat-5.5-doc/jndi-datasource-examples-howto.html - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Logging individual web applications
Hello i have configured log4j for system logging in Tomcat5.5 .Als othe log is rotating.. Now iwant to configure my individual web-apps using log4j i have copied log4j.jar and common-logging.jar and the Date-File-appender.jar files in the web-apps lib directory and also created log4j.properties file in the webapps classes directory.. how do i configure this log4j.properties? i used the following configuration, but nothing is being logged by my webapp.. log4j.rootLogger=DEBUG,S log4j.appender.S=biz.minaret.log4j.DatedFileAppender log4j.appender.S.layout=org.apache.log4j.PatternLayout log4j.appender.S.layout.ConversionPattern=%d [%t] %-5p %c - %m%n log4j.appender.S.Directory=/usr/share/tomcat5.5.25/webapps/sample/logs log4j.appender.S.Prefix=sample. # Suffix: The log file name suffix. log4j.appender.S.Suffix=.log Is some thing wrong in this? Thanks nEha Why delete messages? Unlimited storage is just a click away. Go to http://help.yahoo.com/l/in/yahoo/mail/yahoomail/tools/tools-08.html - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Configuring DataSourceRealm using Oracle
Jason Ling wrote: What is the the realm-name sub-element of login-config for in the application's web.xml file, when and how is it used? Suppose I configure more than one Realm in server.xml, is that the scenario where I need to use the real-name tag to specify which Realm to use? In that case, realm-namewhat is the name/realm-name for the realm? It gets passed to the browser which may display it when prompting the user for credentials. If you use DIGEST authentication, it gets used in the computation of the digest. Mark - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Configuring DataSourceRealm using Oracle
I got what you way: the realm-name and the Realm are not the same thing and not related in the security configuration I am trying to learn. I will try to find time to do some reading on http to understand that realm. My next goal is a JNDIRealm (LDAP). Thank you very much for your kind help, David! Jason On Mon, Mar 3, 2008 at 4:12 PM, david delbecq [EMAIL PROTECTED] wrote: What is in the web.xml is not tomcat specific. The realm you see in web.xml is related to the notion of realm used by http protocol, that is a string showed to user when the login with http basic authentification, and which server for browser to seperate login in different realms for a same server (eg an admin realm, a shopping realm, a clerk realms) The link between a webapplication and a tomcat realm (that is, a source for users passwords and roles) is done in a context.xml file, which is tomcat specific. The file can be either located in META-INF/context.xml in your webapp for auto configuration or be put manually in tomcat config (conf/Catalina/host/webapp.xml) Jason Ling a écrit : Thank you, David. Now it works! I looked back into the documentation for DataSource, and then configured one in the server.xml file as a JNDI Resource. It seems to me that the Realm gets associated with the Resource by jdbc/webappDB, and that tells tomcat server where to find the Oracle server. Nevertheless, I still still have a few questions: What is the the realm-name sub-element of login-config for in the application's web.xml file, when and how is it used? Suppose I configure more than one Realm in server.xml, is that the scenario where I need to use the real-name tag to specify which Realm to use? In that case, realm-namewhat is the name/realm-name for the realm? Thanks a lot for your guide! Jason On Mon, Mar 3, 2008 at 3:11 PM, david delbecq [EMAIL PROTECTED] wrote: And, actually, you didn't do the part where you configure the datasource that your realm will use, information that is provided in the link i pointed you to. If you did actually configure the datasource (which is separate from the datasourcerealm), you wouldn't say I still wonder how Tomcat would know where to go moreover none of the configuration statements you pasted show any track of your datasource configuration, which agina is separate from the realm. Jason Ling a écrit : Thank you, David. Sorry, I sent this message two times, each time only the quoted message was sent, but not my reply. This is another try. Actually I did read the document you provided the link to. In that document (The Realm Component) the following attributes are listed for the DataSourceRealm: dataSourceName roleNameCol userCredCol userNameCol userRoleTable userTable and I actually used all of them in my first attempted configuration as shown in my original email: First attempt: ++ I replaced the above-mentioned Realm element with the following one, mimicking the example for mySQL in the documentation: Realm className=org.apache.catalina.realm.DataSourceRealm dataSourceName=jdbc/webappDB userTable=users userNameCol=user_name userCredCol=user_pass userRoleTable=user_roles roleNameCol=role_name / And that did not work out, you know, as I mentioned. I still do not know what was wrong with my configuration for DataSourceRealm. I still wonder how Tomcat would know where to go to look for the users table and the user_roles table, which are on the Oracle server which is sb.lehman.cuny.edu, and is not in any of the attributes listed above. Did I miss any components in the configuration that I tried? Jason On Mon, Mar 3, 2008 at 1:11 PM, David Delbecq [EMAIL PROTECTED] wrote: Jason Ling a écrit : I changed the Realm element in the server.xml file, and it became: Realm className=org.apache.catalina.realm.DataSourceRealm dataSourceName=jdbc/webappDB driverName=oracle.jdbc.OracleDriver connectionURL=jdbc:oracle:thin:@sb.lehman.cuny.edu:1521 :idm0 connectionName=webappdb connectionPassword=GreenHorn userTable=users userNameCol=user_name userCredCol=user_pass userRoleTable=user_roles roleNameCol=role_name / your are using the datasourcerealm with parameters from the jdbcrealm, those are two separate realms. For datasource realm, you need to define a datasource that matches the one specified in dataSourceName=jdbc/webappDB To get more information on how to configure a datasource, please go there: http://tomcat.apache.org/tomcat-5.5-doc/jndi-datasource-examples-howto.html - To start a new
Re: Configuring DataSourceRealm using Oracle
Thank you Mark for your clue! Jason On Mon, Mar 3, 2008 at 4:14 PM, Mark Thomas [EMAIL PROTECTED] wrote: Jason Ling wrote: What is the the realm-name sub-element of login-config for in the application's web.xml file, when and how is it used? Suppose I configure more than one Realm in server.xml, is that the scenario where I need to use the real-name tag to specify which Realm to use? In that case, realm-namewhat is the name/realm-name for the realm? It gets passed to the browser which may display it when prompting the user for credentials. If you use DIGEST authentication, it gets used in the computation of the digest. Mark - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: mod_jk ERR/FRC
Hi Tim, [EMAIL PROTECTED] schrieb: Setup: TC 4.1.18, IIS5, mod_jk 1.2.25, JDK 1.3.1, Windows 2000 1 LB pointing to 1 worker TC, same server as IIS. Because of 3rd party license issues, we're stuck with using 1 TC only. Usually the tomcat runs with ~ 280 threads, but soon after a bounce its getting 400+ threads, and pretty soon I get errors such as this - [Error] ThreadPool- - Caught exception executing org.apache.jk.common.SocketAcceptor... java.lang.OutOfMemoryError unable to create new native thread OK, usually when you run OutOfMemory during thread creation, this will also mean, that your Tomcat doesn't accept any new connections any more. With the old style connector, whenever a new connection comes in, Tomcat accepts the connection on the thread, that waits for new connections and lets this thread work on the requests coming in via this connection. It then looks for another thread to again accept new connections. If the pool is empty and the maximum number of threads is not reached, it will try to create a new thread. If there is not enough memory for this, thread creation will fail and from that on, there will be no more thread accepting any new connection. This effectvely means, that Tomcat will still answer the open requests, but no more new requests are handeld - until Tomcat restart. That's the reson, why you should always limit the number of threads in the pool. It's better to not accept new connections, if your threads reahed the defined limit, than to create to many threads and by this break the service unrecoverable. How many threads will work? It depends on the OS. On Windows something between 400 and 500, on Linux it depends on 32/64 Bits and the thread library. On Solaris Sparc there is no such trouble. It's mostly a question of memory adressing for thread stacks. I would test, if 400 work, and then limit the pool to 400. How do you test? Simply configure the pool to 400 minimum and maximum and see, if you can start Tomcat and if all threads get created. Then you know, that your platform can create that many threads inside the JVM. So far this is totally independent of mod_jk/isapi plugin. Shortly after, mod_jk declares the worker to be in an Error state, and all my site serves is the 'Service Temporarily Unavailable' page. The isapi_redirect.log is dumping out hundreds of messages including 'all tomcat instances are busy or in error state'. This is like a couple of minutes after TC is restarted ! The cat, that you get many such errors, once your Tomcat isn't accepting any more connections seems normal. The fact, that *all* tomcats are busy seems normal too, since you only have one. Why will mod_jk put your Tomcat into error state. although it still has 400 working connections (but cannot open a new one): because that's the way it's implemented. If we try to open a new connection and we get an error (e.g. a network timeout), we declare the backend as broken (error state). worker.properties has worker.wkr.connection_pool_size=200 worker.wkr.connection_pool_timeout=300 Hmmm. This would mean, that the web server only opens up max. 200 connections to Tomcat. If we assume, that there is only one web server in front of Tomcat and no traffic is going to Tomcat from somewhere else (other connectors etc.), we should not see more than 200 and a few threads inside Tomcat. This contradicts your observations. It's possible, that old connections are not closed correctly on the Tomcat side, if a firewall between web server and Tomcat drops idle connections. Usually one uses a connectionTimeout on the Tomcat side together with the connection pool timeout on the mod_jk side. See: http://tomcat.apache.org/connectors-doc/generic_howto/timeouts.html - When mod_jk shows a state of ERR/FRC, what exactly does the forced recovery attempt to do ? If a balancer has to put all members into error state, it could either always return an error, or it could say: I've got no good backend, so lets try to use the bad ones anyhow. Force recovery means: no backend is OK, then use a bad one. In your case (one backend) it means, that although the backend goes into error, we still send the requests there. - Our webapp in TC works hard on startup to cache frequent content into memory. That means bouncing the Tomcat is painful for us during the day. Fix an upper thread limit. If your app behaves well, then you shouldn't have to restart. Of course if the problem is bad performance and your ressources are exhausted, that problm will only end, if the load decreases, or the performance gets better. But usually the container will then proceed as normal, without restart. In the case described abive, when the container could not start a new thread for socket acept, it will be broken and a restart is needed. I wonder anectdotally if the FRC messages from mod_jk are causing it hassle ? Moreover in the first ~15minutes of the webapp, response times
Re: Request.getContextPath() after RequestDispatcher.forward()
On Mon, Mar 3, 2008 at 11:49 AM, ciAnd7 [EMAIL PROTECTED] wrote: No. I mean ' path=/ '. Then that's the problem -- it's wrong. The path of the default webapp is the empty string . :-) -- Hassan Schroeder [EMAIL PROTECTED] - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: mod_jk, lb cluster, multiple web servers
Hi Tim, Tim Alberts schrieb: I have 3 physical servers, all 3 running tomcat6 and the 2 web applications (one for local, one for www) just fine. Two of these have apache web servers (local and www), both configured and running static content by themselves just fine. Ideally, I want the 3 tomcat6 instances to be a lb cluster for the two web servers. For reasons I don't understand, it isn't working. The By cluster here we mean a farm (i.e. multiple nodes carrying the same apps) but not session replication? 'local' web server will mount the lb cluster when I only have one tomcat6 instance listed in the cluster. The 'www' web server won't mount the cluster if it's 3 or 1 tomcat6 instance. It will mount a tomcat6 instance without the cluster. I seem to be lacking some understanding. Can multiple web servers connect to tomcat6 with mod_jk at the same time, or do I need to configure additional connectors for each connection? No, what you are trying to achieve is very normal. The below config tells us, that the URLs configured in JkMount are send to a load balancing woker lb, and although you defined three ajp13 workers, the lb only knows about one of them, cartman. So lb should send all requests to cartman. If you can reproduce your problem with single requests, then you can set your JkLogLevel to debug, restart the web server and send a single request. The log file will tell you, what mod_jk configured during startup, if it found a worker it will send the request to, and what it got back from the worker. I assume, that you already checked, if you have error messages in the JK log file? If you add the other two members to the list of members of lb, can you see them in the status worker? Just in case one of the two web servers uses an even more recent version of mod_jk: we made our vhost handling more strict. JkMounts now have to be inside the VirtualHost (if you use them) or you must use JkMountCopy to inherit mounts from the global server to a vhost. Regards, Rainer Servers are Apache2.2.3 Tomcat6.0.14 mod_jk-1.2.23-apache-2.2.x-linux-x86_64.so # workers.properties # # List workers worker.list=lb,jkstatus # # Define cartman worker.cartman.port=8009 worker.cartman.host=cartman.inside.msi worker.cartman.type=ajp13 worker.cartman.socket_timeout=300 worker.cartman.lbfactor=1 # # Define stan worker.stan.port=8009 worker.stan.host=stan.inside.msi worker.stan.type=ajp13 worker.stan.socket_timeout=300 worker.stan.lbfactor=1 # # Define kyle worker.kyle.port=8009 worker.kyle.host=kyle.inside.msi worker.kyle.type=ajp13 worker.kyle.socket_timeout=300 worker.kyle.lbfactor=1 # # # Define lb worker.lb.type=lb worker.lb.sticky_session=True worker.lb.sticky_session_force=False worker.lb.balance_workers=cartman # # Define a 'jkstatus' worker using status worker.jkstatus.type=status Apache config file mounts the local applications like: JkMount /localapp lb JkMount /localapp/* lb Apache config file mounts the www applications like: JkMount /wwwapp lb JkMount /wwwapp/* lb - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Tomcat and HugeTLB best practices for a 16GB machine
Google with java tlb gives an interesting first hit, a recent presentation from an Intel guy about joint Sun/Intel work: http://guermonprez.eu/paul/blog/public/images/voyage/sun_tech_days_2007/intel_java_sun_tech_days.pdf From what he writes, I guess he's mostly talking about Java 6. So don't take everything as given if you need to work with an older JVM. There is one slide about Windows and one about Linux in the presentation with some technical details about enabling large page support. According to this document, you only get 4MB page support though. It's much better than the default 4 or 8KB page size, but since there are only 64 entries with a reasonably big heap you still get tlb misses. Of course much less than with the default size. More recent Sparc processors support 256MB page size. Some Info is also on http://java.sun.com/javase/technologies/hotspot/largememory.jsp Concerning mx and ms: Once you know, how much memory you need, setting the equal will allocate one large chunk of memory during jvm startup, so chances are good, that you will use the TLB efficiently. 1.6.0 source also contains info on the following switches: bool UseLargePages - Use large page memory uintx LargePageSizeInBytes0 Large page size (0 to let VM choose the page size uintx LargePageHeapSizeThreshold 128*M Use large pages if max heap is at least this big Regards, Rainer Derek Fedel schrieb: Hi all, I was wondering if anyone has played around with Tomcat and HugeTLB support on anything similar to the following hardware/software setup: * 2x Dual Core Xeon * 16 GB Ram * ISCSI attached root disks (Gentoo Linux based) If so, does anyone have any recommendations on how to go about tuning it to get the most bang for the buck so to speak? General HugeTLB related info would be helpful too, any ideas for figuring out the optimal settings, etc. I've read pretty much every bit of info I can on this thats Googlable, and I don't really see any information related to what (if anything) -Xms and -Xmx should be set to either, so if anyone has any suggestions there I'd be eternally grateful. :) Thanks! Derek - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: mod_jk, lb cluster, multiple web servers
Rainer Jung wrote: Hi Tim, Tim Alberts schrieb: I have 3 physical servers, all 3 running tomcat6 and the 2 web applications (one for local, one for www) just fine. Two of these have apache web servers (local and www), both configured and running static content by themselves just fine. Ideally, I want the 3 tomcat6 instances to be a lb cluster for the two web servers. For reasons I don't understand, it isn't working. The By cluster here we mean a farm (i.e. multiple nodes carrying the same apps) but not session replication? Well I use the setting for 'sticky_session' in the load balancer. As I understand, it doesn't 'replicate' sessions on multiple servers, but checks the request URL to send a request from the same client to the same server throughout the session. What I remember when I researched my initial setup of the servers is, there was no 'session replication' so multiple tomcat servers know about every session simultaneously so request can go to any server without loosing the session. Has this changed, or am I just confused again? 'local' web server will mount the lb cluster when I only have one tomcat6 instance listed in the cluster. The 'www' web server won't mount the cluster if it's 3 or 1 tomcat6 instance. It will mount a tomcat6 instance without the cluster. I seem to be lacking some understanding. Can multiple web servers connect to tomcat6 with mod_jk at the same time, or do I need to configure additional connectors for each connection? No, what you are trying to achieve is very normal. The below config tells us, that the URLs configured in JkMount are send to a load balancing woker lb, and although you defined three ajp13 workers, the lb only knows about one of them, cartman. So lb should send all requests to cartman. I wasn't clear enough in my original post. The below configuration works for the www server. When I add the other 2 nodes to the lb (worker.lb.balance_workers=cartman,stan,kyle) I get internal server error (if I remember correctly). If you can reproduce your problem with single requests, then you can set your JkLogLevel to debug, restart the web server and send a single request. The log file will tell you, what mod_jk configured during startup, if it found a worker it will send the request to, and what it got back from the worker. I assume, that you already checked, if you have error messages in the JK log file? I am only at 'info' log level so I haven't seen anything in the log file that helped. I will up the setting and re-test. If you add the other two members to the list of members of lb, can you see them in the status worker? My first answer was yes, but now that you ask I don't remember, I'll have to retest that. Just in case one of the two web servers uses an even more recent version of mod_jk: we made our vhost handling more strict. JkMounts now have to be inside the VirtualHost (if you use them) or you must use JkMountCopy to inherit mounts from the global server to a vhost. All mod_jk are the same version. Regards, Rainer Servers are Apache2.2.3 Tomcat6.0.14 mod_jk-1.2.23-apache-2.2.x-linux-x86_64.so # workers.properties # # List workers worker.list=lb,jkstatus # # Define cartman worker.cartman.port=8009 worker.cartman.host=cartman.inside.msi worker.cartman.type=ajp13 worker.cartman.socket_timeout=300 worker.cartman.lbfactor=1 # # Define stan worker.stan.port=8009 worker.stan.host=stan.inside.msi worker.stan.type=ajp13 worker.stan.socket_timeout=300 worker.stan.lbfactor=1 # # Define kyle worker.kyle.port=8009 worker.kyle.host=kyle.inside.msi worker.kyle.type=ajp13 worker.kyle.socket_timeout=300 worker.kyle.lbfactor=1 # # # Define lb worker.lb.type=lb worker.lb.sticky_session=True worker.lb.sticky_session_force=False worker.lb.balance_workers=cartman # # Define a 'jkstatus' worker using status worker.jkstatus.type=status Apache config file mounts the local applications like: JkMount /localapp lb JkMount /localapp/* lb Apache config file mounts the www applications like: JkMount /wwwapp lb JkMount /wwwapp/* lb - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Request.getContextPath() after RequestDispatcher.forward()
On Mon, Mar 3, 2008 at 11:49 AM, ciAnd7 [EMAIL PROTECTED] wrote: No. I mean ' path=/ '. The real problem is refusal to do things the recommended way, which is to name your default webapp ROOT (case sensitive). If you'd simply done that, you wouldn't have to mess around trying to emulate Rube Goldberg. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: mod_jk, lb cluster, multiple web servers
Tim Alberts schrieb: By cluster here we mean a farm (i.e. multiple nodes carrying the same apps) but not session replication? Well I use the setting for 'sticky_session' in the load balancer. As I understand, it doesn't 'replicate' sessions on multiple servers, but checks the request URL to send a request from the same client to the same server throughout the session. What I remember when I researched my initial setup of the servers is, there was no 'session replication' so multiple tomcat servers know about every session simultaneously so request can go to any server without loosing the session. Has this changed, or am I just confused again? No change. Without special setup there is no session replication, and before you want to try that you first want to understand a stable sticky load balancing. I only wanted to be sure, we are only talking about sticky balancing. 'local' web server will mount the lb cluster when I only have one tomcat6 instance listed in the cluster. The 'www' web server won't mount the cluster if it's 3 or 1 tomcat6 instance. It will mount a tomcat6 instance without the cluster. I seem to be lacking some understanding. Can multiple web servers connect to tomcat6 with mod_jk at the same time, or do I need to configure additional connectors for each connection? No, what you are trying to achieve is very normal. The below config tells us, that the URLs configured in JkMount are send to a load balancing woker lb, and although you defined three ajp13 workers, the lb only knows about one of them, cartman. So lb should send all requests to cartman. I wasn't clear enough in my original post. The below configuration works for the www server. When I add the other 2 nodes to the lb (worker.lb.balance_workers=cartman,stan,kyle) I get internal server error (if I remember correctly). Internal server error sounds bad. Any info in the web server error log? If you are going to retest, I would consider downloading sources of mod_jk 1.2.26 and doing build by yourself. If you have the usual gcc tool chain on your Linux system, the build should be very simple and you'll have a binary that definitely fits your environment. Not saying, that your 1.2.23 binary is the cause of the problem, but starting with a local build rules out some possibilities. Also there were a number of bugs fixed between 1.2.23 and 1.2.26 (although none of them directly related to your observation). Regards, Rainer - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
APR-https failed (the server.xml is correct definitely)
Hi all, Anyone meets such issue before? Tomcat console shows: Mar 4, 2008 8:53:23 AM org.apache.coyote.http11.Http11AprProtocol start INFO: Starting Coyote HTTP/1.1 on http-8080 Mar 4, 2008 8:53:23 AM org.apache.coyote.http11.Http11AprProtocol start INFO: Starting Coyote HTTP/1.1 on http-443 And I'm sure I have generate private key, certification by OpenSSL and installed tcnative-1.dll under system32 correctly. I can't access the https://localhost:443 at all. The browser is pending there and then shows The connection was interrupted. Tomcat6/ JDK6/ WindowsXP/ latest OpenSSL B.R Han
Re: mod_jk or mod_proxy_ajp - encryption benefits?
On Mon, Mar 3, 2008 at 9:26 AM, James Ellis [EMAIL PROTECTED] wrote: Do you think that little hollow voice can clarify how IPSec would solve this problem by giving an example of a software that I could implement to accomplish this? Google IPSec and VPN and you will find your answer. -Dave - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: APR-https failed (the server.xml is correct definitely)
Hi guys, [ISSUE RESOLVED] I change back to Tomcat5.5 and everything works well now. write it here in case someone meet same issue in future. B.R Han -Original Message- From: Hanks Wang (hanwan) Sent: Tuesday, March 04, 2008 9:04 AM To: Tomcat Users List Subject: APR-https failed (the server.xml is correct definitely) Hi all, Anyone meets such issue before? Tomcat console shows: Mar 4, 2008 8:53:23 AM org.apache.coyote.http11.Http11AprProtocol start INFO: Starting Coyote HTTP/1.1 on http-8080 Mar 4, 2008 8:53:23 AM org.apache.coyote.http11.Http11AprProtocol start INFO: Starting Coyote HTTP/1.1 on http-443 And I'm sure I have generate private key, certification by OpenSSL and installed tcnative-1.dll under system32 correctly. I can't access the https://localhost:443 at all. The browser is pending there and then shows The connection was interrupted. Tomcat6/ JDK6/ WindowsXP/ latest OpenSSL B.R Han - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Exception handling Container property change
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Subject: Exception handling Container property change Everytime I load my app context, the log yields the following MBean exception. Mar 3, 2008 9:12:30 PM org.apache.catalina.mbeans.ServerLifecycleListener propertyChange SEVERE: Exception handling Container property change javax.management.MBeanException at org.apache.catalina.mbeans.MBeanUtils.createMBean(MBeanUtils.java:398) Look further in the logs - there should be a nested exception related to the one above with this text: ManagedBean is not found with mname The actual mname will tell you what MBean can't be created. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Exception handling Container property change
Env: Tomcat 6.0.14, Jre 1.6 Everytime I load my app context, the log yields the following MBean exception. What does this error indicate? Regards /U Mar 3, 2008 9:12:30 PM org.apache.catalina.mbeans.ServerLifecycleListener propertyChange SEVERE: Exception handling Container property change javax.management.MBeanException at org.apache.catalina.mbeans.MBeanUtils.createMBean(MBeanUtils.java:398) at org.apache.catalina.mbeans.ServerLifecycleListener.processContainerPropertyChange(ServerLifecycleListener.java:1091) at org.apache.catalina.mbeans.ServerLifecycleListener.propertyChange(ServerLifecycleListener.java:216) at java.beans.PropertyChangeSupport.firePropertyChange(PropertyChangeSupport.java:339) at java.beans.PropertyChangeSupport.firePropertyChange(PropertyChangeSupport.java:276) at org.apache.catalina.core.ContainerBase.setLoader(ContainerBase.java:373) at org.apache.catalina.core.StandardContext.setLoader(StandardContext.java:1323) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) at java.lang.reflect.Method.invoke(Method.java:597) at org.apache.tomcat.util.IntrospectionUtils.callMethod1(IntrospectionUtils.java:899) at org.apache.tomcat.util.digester.SetNextRule.end(SetNextRule.java:193) at org.apache.tomcat.util.digester.Rule.end(Rule.java:229) at org.apache.tomcat.util.digester.Digester.endElement(Digester.java:1058) at com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.endElement(AbstractSAXParser.java:601) - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Exception handling Container property change
Thanks! It looks like this is related to the long conversation we had about
using VirtualWebappClassLoader a couple of months ago.
I needed to use VirtualWebappLoader and hence chose to extend
WebappLoader (CustomWebappClassLoader) and install the class in
${CATALINA_BASE}/lib.
This classloader is used with multiple contexts but in loading
a specific context alone, Tomcat yields this error:
Caused by: java.lang.Exception: ManagedBean is not found with
CustomWebappClassLoader
at
org.apache.catalina.mbeans.MBeanUtils.createMBean(MBeanUtils.java:397)
... 46 more
Is my custom WebappLoader supposed to provide an MBean? If I choose not to,
would it be a fatal error (as in one which would abort the context)?
Regards,
/U
-- Original message --
From: Caldarale, Charles R [EMAIL PROTECTED]
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Subject: Exception handling Container property change
Everytime I load my app context, the log yields the following
MBean exception.
Mar 3, 2008 9:12:30 PM
org.apache.catalina.mbeans.ServerLifecycleListener propertyChange
SEVERE: Exception handling Container property change
javax.management.MBeanException
at
org.apache.catalina.mbeans.MBeanUtils.createMBean(MBeanUtils.java:398)
Look further in the logs - there should be a nested exception related to
the one above with this text:
ManagedBean is not found with mname
The actual mname will tell you what MBean can't be created.
- Chuck
THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you
received this in error, please contact the sender and delete the e-mail
and its attachments from all computers.
-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
