How to a Tomcat 5.0.18 with Optimal Security in Windows XP
I am having WindowsXP I installed Apache Tomcat Servlet container as a service. It's user guide says " For optimal security, the service should be run as a separate user, with reduced permissions (see the Windows Services administration tool and its documentation). " So I went to Control Panel-->Administrative Tools-->Services and selected and right clicked on Tomcat which was now installed to log on as a Local System service and selected properties. >From Properties-->Log On tab-->selected this account -->clicked the Browse Button-->Select user Dialog Box-->Advanced-->clicked the find user Button-->Selected Network service And came back to the log on tab of properties and entered a password and clicked OK button Then restarted Tomcat. But when I entered http://localhost:8080 in IE it keeps on waiting, the Tomcat home page never gets displayed. How can I run Tomcat under the Network Service Account? How can I find out the privileges allowed under the Network Service Account? When I am logged on as a administrator or in any other account, Is it possible to start a Service or another program which has rights granted under another account? I never created a Network Service or local service Account are they default accounts? How can I create an account which has adequate privileges to use a service with ensuring optimal security? The above described procedure is from the "To configure how a service is started" title which is Under the Services node of the Microsoft management Console which appears when the help menu for the Services Window is clicked. Help! Regards Varuna
RE: Proxy timeout error in Apache error log
Mark I have turned off Keep Alive and also set SetEnv force-proxy-request-1.0 1 SetEnv proxy-nokeepalive 1 This does not seem to have made a difference. Regards Michael > -Original Message- > From: Mark Thomas [mailto:[EMAIL PROTECTED] > Sent: 18 October 2008 20:01 > To: Tomcat Users List > Subject: Re: Proxy timeout error in Apache error log > > Michael Farah wrote: > > Hi all > > > > > > > > We have three Tomcat sites running on three different Tomcat > instances > > on a server (let's call it myserverA). One of the sites runs on > Tomcat > > 5.5 and two run on different instances of Tomcat 6. We then have > Apache > > 2.2 running on myserverB and we use mod_proxy_http as the connector. > We > > are regularly getting errors like the two lines below in our Apache > log > > file on all three sites; > > > > > > > > (70007)The timeout specified has expired: proxy: error reading status > > line from remote server myserverA.com, referer: http://www.site.com > > > > proxy: Error reading from remote server returned by > > /cache/Folder/image.jpg, referer: http://www.site.com > > > > > > > > Can anyone advise what the issue might be? > > Try turning off keep-alive? > > Mark > > > > > > > > > Regards > > > > Michael > > > > > > > > > > > - > To start a new topic, e-mail: users@tomcat.apache.org > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Building Tomcat With IcedTea
Chuck, That must be it (Even though the build instructions for Tomcat 6 say 1.5.x or later). Thanks again for the heads up. - Ole - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: JNDI Datasource works in unpacked war, not in packed war
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 John, John Cartwright wrote: > I have a problem where a Datasource is configured in > META-INF/context.xml and referenced in web.xml. If I install this > webapp unpacked, everything works fine. However, if I try to run this > webapp as a packed war, the datasource fails giving the exception: > > org.apache.tomcat.dbcp.dbcp.SQLNestedException: Cannot create JDBC > driver of class '' for connect URL 'null' Hmm. If you deploy a WAR file and then restart Tomcat, sometimes your context.xml will be copied into either conf/Catalina/localhost or work/somethingorother and it gets cached and not updated for various reasons. When you deploy the WAR file, are you just dropping it into your auto-deployment directory (usually CATALINA_BASE/webapps)? If so, Tomcat may not be triggering the re-load of the context.xml from your WAR file. You might want to try a few things: 1. Shutdown Tomcat and blow-away the entire 'work' directory. Make sure there is no exploded WAR file in your webapps directory. Re-start Tomcat with your WAR in place and make sure it gets auto-deployed. Hopefully this will work. 2. Use the manager application to re-deploy your WAR file. I don't use the manager app for anything, so I don't know if it will auto-update the on-disk, cached context.xml, but it's an easy check. 3. Always use exploded WAR files if all else fails. Honestly, if you can't get WAR files working, you should head back to the list and ask again. I'm sure that other folks have more ideas and understand Tomcat's exact behavior in these situations. > tomcat 5.5.17 This is quite an old version. Are you able to upgrade to a more recent 5.5.x version? I haven't checked the changelog, but it's possible that these types of behaviors have been tweaked since 5.5.17. - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkj6o3IACgkQ9CaO5/Lv0PC1SgCggYHM0Hs+q3TAjP9ZMC0AXRPo IjYAoK/kKbMYeGLQcVkITsiwF9vGEWVN =lbRQ -END PGP SIGNATURE- - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Controlling the order of classloading.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Vinay, Vinay Binny wrote: > I am using struts2 and > Oracle's XSU in one of our webapps. XSU has a tight dependency on its > own XML parser xmlparserv2.jar, when I drop this into the web-inf lib > folder, struts2 picks the classes in this jar to do its xml parsing > chore instead of picking its own xml parser, and fails. I don't believe S2 ships with an XML parser; it should just use whatever XML parser is available from the system. Is it possible that xmlparserv2.jar supplies an implementation that is not recent enough to work with S2 (which I think just uses commons-digester)? You might want to ask on the struts user list if there's a way to force S2 (or the digester) to use a particular implementation instead of the currently-loaded default XML parser implementation. - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkj6oSQACgkQ9CaO5/Lv0PC9IwCgnw7wfltIP6Np/NBssvUvFuux BWIAoK7bwE2pkb6A7imB/2qGYuyHuxgf =Kzl2 -END PGP SIGNATURE- - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: MySQL DBCP Connection Example?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Martin, Martin Gainty wrote: > getting tired ot correcting these emails..david i > >> From: [EMAIL PROTECTED] >> To: users@tomcat.apache.org >> Subject: Re: MySQL DBCP Connection Example? >> > David, > > David Smith wrote: As an alternative to storing webapps in tomcat's webapps directory, you could place a ... xml fragment in a file in conf/Catalina/localhost with docBase and path properly set. > docBase:yes > path:no > > It is illegal to set the path of a unless the context is >> MG>Perfectly LEGAL Not so, Martin. Please read the documentation for the "path" attribute on TC's documentation (http://tomcat.apache.org/tomcat-6.0-doc/config/context.html) which clearly states this legality. Just because TC doesn't complain if you set the path attribute (I would argue that it /should/) doesn't mean that it is legal. > -(dumbkopf) chris Martin, I'm not going to get into a flame war with you no matter how much you bait me. I will continue to try to help users of this list with helpful and correct information that can be backed up by the official documentation. - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkj6nXkACgkQ9CaO5/Lv0PACUACdGu/CFZcx5Jt5cSAHgXoArZy2 YqsAn3RYJy44hgMMfenEfsmBsPWZC6mB =KxdA -END PGP SIGNATURE- - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Tomcat6+ISAPI+IIS+Integrated Authentication+Large User
Scrumpy Jack schrieb: > Hi > I'm trying to resolve an issue with Integrated Authentication when a user > with a large Group Membership tries to access a site served by Tomcat via > IIS ISAPI Redirect. > > For all other users, access is fine. For users with 70+ Windows groups, they > are failing to be redirected and are getting a 500 error. Basic > Authentication works fine. > > Tomcat 6 > IIS 6.0 on Windows 2003 > ISAPI 1.2.26 > 32 bit > > Access to IIS for the same users (i.e. with no ISAPI filter) is fine. We > have explored various Kerberos package size options in initial > troubleshooting, but once we realized that IIS alone worked fine, it now > appears that whatever is being passed to the ISAPI filter via IIS as part of > the Authentication process is exceeding some buffer. The user is prompted > for credentials (but shouldn't be) and will fail to get access regardless of > what is typed. IE classifies site as Internet, when it isn't (And doesn't > get mistrated for other users - i.e. Shows as Local Intranet and no user > prompt appears) > > Can anyone point me in the direction of settings that increase buffer (?) > settings related to Integrated Authentication? Any ideas as to where I > should focus? (i.e. the ISAPI Filter config end, or Tomcat end?) If you can easily reproduce on a test system, set log_level to trace and reproduce with a single request. Then show us your log_file. It is possible, that the informagtion gets forwarded via http headers. The AJP protocol used between the isapi redirector and Tomcat needs to send all http headers in a single AJP packet. The default maximum size of the packet is 8KB. Recent versions of the redirector and of Tomcat are able to use a higher value. But let's first check, if this is actually the problem you are runnning into. Regards, Rainer - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: MySQL DBCP Connection Example?
Martin Gainty wrote: > getting tired ot correcting these emails..david i Chris is correct in this case. It is you who is in error Martin. >> From: [EMAIL PROTECTED] >> To: users@tomcat.apache.org >> Subject: Re: MySQL DBCP Connection Example? >> > David, > > David Smith wrote: As an alternative to storing webapps in tomcat's webapps directory, you could place a ... xml fragment in a file in conf/Catalina/localhost with docBase and path properly set. > docBase:yes > path:no > > It is illegal to set the path of a unless the context is >> MG>Perfectly LEGAL No. Chris is 100% correct. Path should only ever be used in a Context element when defined in server.xml and defining contexts in server.xml is a bad idea (as is made clear in the docs). >> comment out your manager context in /conf/Catalina/localhost > >> >> >> > >> and look at what I see in the log >> DEBUG main org.apache.catalina.session.ManagerBase - No persisted data file >> found > >> and you get 404 when accessing the manager app > defined in server.xml, which you shouldn't do. Tomcat will use the name > of the XML file as the context path (unless it's called ROOT, in which > case the context path with be ""). > > -(dumbkopf) chris There is no need for name calling even if Chris was wrong (which he isn't). Lets try and keep it professional. An apology would be a good place to start. Mark - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Tomcat6+ISAPI+IIS+Integrated Authentication+Large User
Hi I'm trying to resolve an issue with Integrated Authentication when a user with a large Group Membership tries to access a site served by Tomcat via IIS ISAPI Redirect. For all other users, access is fine. For users with 70+ Windows groups, they are failing to be redirected and are getting a 500 error. Basic Authentication works fine. Tomcat 6 IIS 6.0 on Windows 2003 ISAPI 1.2.26 32 bit Access to IIS for the same users (i.e. with no ISAPI filter) is fine. We have explored various Kerberos package size options in initial troubleshooting, but once we realized that IIS alone worked fine, it now appears that whatever is being passed to the ISAPI filter via IIS as part of the Authentication process is exceeding some buffer. The user is prompted for credentials (but shouldn't be) and will fail to get access regardless of what is typed. IE classifies site as Internet, when it isn't (And doesn't get mistrated for other users - i.e. Shows as Local Intranet and no user prompt appears) Can anyone point me in the direction of settings that increase buffer (?) settings related to Integrated Authentication? Any ideas as to where I should focus? (i.e. the ISAPI Filter config end, or Tomcat end?) Thanks!!! -- View this message in context: http://www.nabble.com/Tomcat6%2BISAPI%2BIIS%2BIntegrated-Authentication%2BLarge-User-tp20049325p20049325.html Sent from the Tomcat - User mailing list archive at Nabble.com. - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Timeout while stopping tomcat
> From: Thomas Manson [mailto:[EMAIL PROTECTED] > Subject: Re: Timeout while stopping tomcat > > I want a Apache 2 server to use PHP app's too with tomcat > apps using port 80. > > I think that's the only way of doing, isn't it ? Strictly speaking, it's not the only way, but it's certainly the most common. There are mechanisms for running PHP directly, such as the one recently described here: http://netwolfuk.wordpress.com/2008/09/03/php-and-mysql-in-tomcat-with-quercus/ - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Proxy timeout error in Apache error log
Michael Farah wrote: > Hi all > > > > We have three Tomcat sites running on three different Tomcat instances > on a server (let's call it myserverA). One of the sites runs on Tomcat > 5.5 and two run on different instances of Tomcat 6. We then have Apache > 2.2 running on myserverB and we use mod_proxy_http as the connector. We > are regularly getting errors like the two lines below in our Apache log > file on all three sites; > > > > (70007)The timeout specified has expired: proxy: error reading status > line from remote server myserverA.com, referer: http://www.site.com > > proxy: Error reading from remote server returned by > /cache/Folder/image.jpg, referer: http://www.site.com > > > > Can anyone advise what the issue might be? Try turning off keep-alive? Mark > > > > Regards > > Michael > > > > - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Programmatic instruct Tomcat to shutdown
On Fri, Oct 17, 2008 at 23:07, Christopher Schultz < [EMAIL PROTECTED]> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Maxim, > > Maxim Veksler wrote: > > I would like to forcefully cause my application server to fail once I > > discover a situation I can't recover from. We have HA that should handle > the > > situation from there. > > > > The best way I can see this happening is by issuing a shutdown > instruction > > to the container, but I can't find how to do this "peacefully". > > You should check out the code for the Bootstrap class: > > > http://svn.apache.org/repos/asf/tomcat/tc6.0.x/tags/TOMCAT_6_0_18/java/org/apache/catalina/startup/Bootstrap.java > > It calls o.a.c.s.Catalina.stopServer which you can read here: > > > http://svn.apache.org/repos/asf/tomcat/tc6.0.x/tags/TOMCAT_6_0_18/java/org/apache/catalina/startup/Catalina.java > > Basically, it makes a localhost socket connection and send the > "shutdown" command to the server. You could do this yourself to initiate > a graceful server shutdown. > I will do that, thank you Chris. > > - -chris > -BEGIN PGP SIGNATURE- > Version: GnuPG v1.4.9 (MingW32) > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org > > iEYEARECAAYFAkj4/qkACgkQ9CaO5/Lv0PCA7wCgouK/jWSeZODHtufCB6prywDS > v+kAoK3bBmoq86awNLxhw3SMhmBgjvmg > =98T3 > -END PGP SIGNATURE- > > - > To start a new topic, e-mail: users@tomcat.apache.org > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > -- Cheers, Maxim Veksler "Free as in Freedom" - Do u GNU ?
Re: Timeout while stopping tomcat
Thanks Charles, I want a Apache 2 server to use PHP app's too with tomcat apps using port 80. I think that's the only way of doing, isn't it ? Thomas On Sat, Oct 18, 2008 at 19:44, Caldarale, Charles R < [EMAIL PROTECTED]> wrote: > > From: Thomas Manson [mailto:[EMAIL PROTECTED] > > Subject: Re: Timeout while stopping tomcat > > > > If I want to build an link between my Apache2 and Tomcat 6, > > will I need the AJP connector ? > > Yes. > > > Also, which [ModJK/JK/JK2 or else] project is the correct to > > use with Tomcat 6 ? > > The mod_jk2 package has been deprecated for several years, so don't even > think about that. The mod_jk package is the current one; documentation is > here: > http://tomcat.apache.org/connectors-doc/ > > Unless you have a real need for putting httpd in front of Tomcat (and > serving static content doesn't qualify), you're better off without it from > both performance and maintainability aspects. > > - Chuck > > > THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY > MATERIAL and is thus for use only by the intended recipient. If you received > this in error, please contact the sender and delete the e-mail and its > attachments from all computers. > > - > To start a new topic, e-mail: users@tomcat.apache.org > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > >
RE: Timeout while stopping tomcat
> From: Thomas Manson [mailto:[EMAIL PROTECTED] > Subject: Re: Timeout while stopping tomcat > > If I want to build an link between my Apache2 and Tomcat 6, > will I need the AJP connector ? Yes. > Also, which [ModJK/JK/JK2 or else] project is the correct to > use with Tomcat 6 ? The mod_jk2 package has been deprecated for several years, so don't even think about that. The mod_jk package is the current one; documentation is here: http://tomcat.apache.org/connectors-doc/ Unless you have a real need for putting httpd in front of Tomcat (and serving static content doesn't qualify), you're better off without it from both performance and maintainability aspects. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Timeout while stopping tomcat
Ok, If I want to build an link between my Apache2 and Tomcat 6, will I need the AJP connector ? I don't know this part very well dispite I've use it some times. Also, which [ModJK/JK/JK2 or else] project is the correct to use with Tomcat 6 ? Thanks for your help, Thomas. On Sat, Oct 18, 2008 at 19:33, Caldarale, Charles R < [EMAIL PROTECTED]> wrote: > > From: Thomas Manson [mailto:[EMAIL PROTECTED] > > Subject: Timeout while stopping tomcat > > > > Tomcat starts correctly, but a timeout occurs when stopping > > Any idea of what's wrong ? > > Nothing's really wrong, but you can get rid of the error message by > commenting out the AJP connector that you're not using. Turn off the > element for port 8009 in conf/server.xml. > > - Chuck > > > THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY > MATERIAL and is thus for use only by the intended recipient. If you received > this in error, please contact the sender and delete the e-mail and its > attachments from all computers. > > - > To start a new topic, e-mail: users@tomcat.apache.org > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > >
RE: Timeout while stopping tomcat
> From: Thomas Manson [mailto:[EMAIL PROTECTED] > Subject: Timeout while stopping tomcat > > Tomcat starts correctly, but a timeout occurs when stopping > Any idea of what's wrong ? Nothing's really wrong, but you can get rid of the error message by commenting out the AJP connector that you're not using. Turn off the element for port 8009 in conf/server.xml. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Building Tomcat With IcedTea
> From: Ole Ersoy [mailto:[EMAIL PROTECTED] > Subject: Building Tomcat With IcedTea > > I'm trying to build tomcat with IcedTea. I get the following > types of errors while DBCP is being built: Are you using JDK 6 for your Tomcat builds? Tomcat must be built with JDK 5 due to incompatibilities introduced by Sun in JDK 6. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
I18N, HTTP 2.0 ?
Hi. I am sending this to both the Apache httpd and Tomcat users lists, in the hope that because together these HTTP servers cover a good fraction of the market, there might be a chance to reach the righ people. My hope is that someone who is aware of, and connected to, the process of RFC generation would pick this up, or else inform us if some process in the direction that I am indicating below is already under way. I apologise in advance if I am crashing an open door. If so, I would gladly accept to be informed about what the state of affairs is. (A Google search on the terms "HTTP" and "RFC" and "UTF-8" does not seem to yeld any relevant results.) Proposal : It is becoming urgent to create a new HTTP standard/version/revision, that would be organised around Unicode as a default character set, and UTF-8 as a default encoding. I believe that the spread and acceptance of Unicode and UTF-8 is now sufficient to warrant such an evolution. The current situation, where iso-8859-1 is the default in some areas, and some other areas are either unspecified or vague, creates a lot of confusion and inefficiencies, and creates barriers to the creation of truly international HTTP-based WWW applications. Here are some areas where these problems appear : - the encoding of URLs. - the encoding of HTTP headers. - the encoding of user credentials in browser-side Basic and Digest authentication dialogs, and their transmission to the server. - the encoding of input elements from html forms, as transmitted by a client to a server, and the interpretation of ditto data by the server I am quite sure that I am forgetting some aspects of the same issue. For each of the above, there are areas where there is no specification, or areas where there are vague specifications, or areas where there are multiple apparently-contradictory specifications. Consequently, there is a profusion of ad-hoc tricks and receipes, and there start to appear various "parameters" and "flags" and "settings" at the client and server level, which may help resolving the issues in some cases, but which in the long term create even more confusion and problems of interoperability. (example of a setting : "use body encoding for URL"). There might be some efforts under way to tackle one or the other aspect of the above (I have heard of a proposal regarding HTTP headers), but I honestly believe that this issue can only be resolved well "at the top", which seems to me the HTTP protocol itself. Thanks - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Timeout while stopping tomcat
Hi,
I've installed tomcat 6.0.18 on my ubuntu box (hardy heron server).
I've set the CATALINA_BASE in another place that the tomcat install. I
didn't modify any configuration files.
Tomcat starts correctly, but a timeout occurs when stopping (see logs at
the end of the mail).
I'm using the following command to start/stop tomcat
sudo service tomcat start;
sudo service tomcat stop;
the /etc/init.d script is
# Tomcat auto-start
#
# description: Auto-starts tomcat
# processname: tomcat
# pidfile: /var/run/tomcat.pid
JAVA_HOME=/usr/lib/jvm/java-6-sun; export JAVA_HOME
JAVA_OPTS="-server -Xms100m -Xmx512m"; export JAVA_OPTS
CATALINA_HOME=/usr/local/tomcat; export CATALINA_HOME
CATALINA_BASE=/home/special/tomcat;export CATALINA_BASE
case $1 in
start)
sh $CATALINA_HOME/bin/startup.sh
;;
stop)
sh $CATALINA_HOME/bin/shutdown.sh
;;
restart)
sh $CATALINA_HOME/bin/shutdown.sh
sh $CATALINA_HOME/bin/startup.sh
;;
*)
echo $"Usage: $0 {start|stop|restart}"
exit 1
esac
exit 0
[EMAIL PROTECTED]:/etc/init.d$ ll /home/special/tomcat
total 28
drwxr-xr-x 7 root root 4096 2008-10-18 17:51 .
drwxr-xr-x 4 thomas thomas 4096 2008-10-18 17:50 ..
drwxr-xr-x 2 root root 4096 2008-10-18 18:34 conf
drwxr-xr-x 2 root root 4096 2008-10-18 18:34 logs
drwxr-xr-x 2 root root 4096 2008-10-18 17:51 temp
drwxr-xr-x 2 root root 4096 2008-10-18 17:56 webapps
drwxr-xr-x 2 root root 4096 2008-10-18 17:51 work
[EMAIL PROTECTED]:/etc/init.d$ ll /usr/local/tomcat/
total 96
drwxr-xr-x 9 thomas thomas 4096 2008-07-22 02:01 .
drwxr-xr-x 11 root root4096 2008-10-18 15:29 ..
drwxr-xr-x 3 thomas thomas 4096 2008-10-18 18:31 bin
drwxr-xr-x 2 thomas thomas 4096 2008-10-18 18:25 conf
drwxr-xr-x 2 thomas thomas 4096 2008-07-22 02:01 lib
-rw-r--r-- 1 thomas thomas 37950 2008-07-22 02:01 LICENSE
drwxr-xr-x 2 thomas thomas 4096 2008-10-18 18:28 logs
-rw-r--r-- 1 thomas thomas 556 2008-07-22 02:01 NOTICE
-rw-r--r-- 1 thomas thomas 7317 2008-07-22 02:01 RELEASE-NOTES
-rw-r--r-- 1 thomas thomas 6587 2008-07-22 02:01 RUNNING.txt
drwxr-xr-x 2 thomas thomas 4096 2008-07-22 02:01 temp
drwxr-xr-x 7 thomas thomas 4096 2008-07-22 02:01 webapps
drwxr-xr-x 3 thomas thomas 4096 2008-10-18 18:25 work
Here is the log :
[EMAIL PROTECTED]:/home/special/tomcat/logs$ sudo service tomcat start; tail -f
catalina.out
Using CATALINA_BASE: /home/special/tomcat
Using CATALINA_HOME: /usr/local/tomcat
Using CATALINA_TMPDIR: /home/special/tomcat/temp
Using JRE_HOME: /usr/lib/jvm/java-6-sun
Oct 18, 2008 6:34:52 PM org.apache.catalina.core.AprLifecycleListener init
INFO: The APR based Apache Tomcat Native library which allows optimal
performance in production environments was not found on the
java.library.path:
/usr/lib/jvm/java-6-sun-1.6.0.07/jre/lib/amd64/server:/usr/lib/jvm/java-6-sun-1.6.0.07/jre/lib/amd64:/usr/lib/jvm/java-6-sun-1.6.0.07/jre/../lib/amd64:/usr/java/packages/lib/amd64:/lib:/usr/lib
Oct 18, 2008 6:34:52 PM org.apache.coyote.http11.Http11Protocol init
INFO: Initializing Coyote HTTP/1.1 on http-8080
Oct 18, 2008 6:34:52 PM org.apache.catalina.startup.Catalina load
INFO: Initialization processed in 699 ms
Oct 18, 2008 6:34:52 PM org.apache.catalina.core.StandardService start
INFO: Starting service Catalina
Oct 18, 2008 6:34:52 PM org.apache.catalina.core.StandardEngine start
INFO: Starting Servlet Engine: Apache Tomcat/6.0.18
Oct 18, 2008 6:34:52 PM org.apache.coyote.http11.Http11Protocol start
INFO: Starting Coyote HTTP/1.1 on http-8080
Oct 18, 2008 6:34:52 PM org.apache.jk.common.ChannelSocket init
INFO: JK: ajp13 listening on /0.0.0.0:8009
Oct 18, 2008 6:34:52 PM org.apache.jk.server.JkMain start
INFO: Jk running ID=0 time=0/53 config=null
Oct 18, 2008 6:34:52 PM org.apache.catalina.startup.Catalina start
INFO: Server startup in 168 ms
Oct 18, 2008 6:35:19 PM org.apache.coyote.http11.Http11Protocol pause
INFO: Pausing Coyote HTTP/1.1 on http-8080
Oct 18, 2008 6:38:28 PM org.apache.catalina.connector.Connector pause
SEVERE: Protocol handler pause failed
java.net.ConnectException: Connection timed out
at java.net.PlainSocketImpl.socketConnect(Native Method)
at java.net.PlainSocketImpl.doConnect(PlainSocketImpl.java:333)
at
java.net.PlainSocketImpl.connectToAddress(PlainSocketImpl.java:195)
at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:182)
at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:366)
at java.net.Socket.connect(Socket.java:519)
at java.net.Socket.connect(Socket.java:469)
at java.net.Socket.(Socket.java:366)
at java.net.Socket.(Socket.java:209)
at
org.apache.jk.common.ChannelSocket.unLockSocket(ChannelSocket.java:486)
at org.apache.jk.common.ChannelSocket.pause(ChannelSocket.java:283)
at org.apache.jk.server.JkMain.pause(JkMain.java:681)
at
org.apache.jk.server.
RE: Where to look for "connection refused" errors in Tomcat6.0.18 ?
Good Point- quick scan of laymans documentation located at http://en.wikipedia.org/wiki/Transmission_Control_Protocol SYN or SYNchronization request happens when an agent attempts To establish a connection, TCP uses a three-way handshake. Before a client attempts to connect with a server, the server must first bind to a port to open it up for connections: this is called a passive open. Once the passive open is established, a client may initiate an active open. To establish a connection, the three-way (or 3-step) handshake occurs: The active open is performed by the client sending a SYN to the server.In response, the server replies with a SYN-ACK.Finally the client sends an ACK back to the server.To quote the doc RST (Reset connection) happens when: A connection can be "half-open", in which case one side has terminated its end, but the other has not. The side that has terminated can no longer send any data into or receive any data from the connection, but the other side can (but generally if it tries, this should result in no acknowledgment and therefore a timeout, or else result in a positive RST, and either way thereby the destruction of the half-open socket). i'm reaching back 20 years when I took the comm class where the most current Text was Tannenbaum's Computer Networks ..I'm sure there is more current and uptodate info available Anyone? Thanks, Martin __ Disclaimer and confidentiality note Everything in this e-mail and any attachments relates to the official business of Sender. This transmission is of a confidential nature and Sender does not endorse distribution to any party other than intended recipient. Sender does not necessarily endorse content contained within this transmission. > To: users@tomcat.apache.org > Subject: RE: Where to look for "connection refused" errors in Tomcat6.0.18 ? > From: [EMAIL PROTECTED] > Date: Sat, 18 Oct 2008 15:54:38 +0530 > > Thanks Peter for your answer . you said : > > You *can never* see these errors in Tomcat, because Tomcat is never > > aware that the connection was received. The operating system's > > TCP/IP stack has received the incoming SYN, tried to queue the > > connection request on Tomcat's accept queue, failed, and simply > > sends a RST to close the connection. > > What do these jargons SYN and RST actually mean ? I do not know TCP IP > details . > > Regards, > > Subhrajyoti > Mobile: +919830079545 > Mail: [EMAIL PROTECTED] > Web: www.labware.com > > LabWare LIMS Solutions - Results Count > > Peter Crowther <[EMAIL PROTECTED]> wrote on 10/17/2008 06:45:13 > PM: > > > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > > > "If still more simultaneous requests are received, they are > > > stacked up inside the server socket created by the Connector, > > > up to the > > > configured maximum (the value of the acceptCount attribute. > > > Any further > > > simultaneous requests will receive "connection refused" errors, until > > > resources are available to process them. " So where can we > > > expect to see those errors in Tomcat? > > > > You *can never* see these errors in Tomcat, because Tomcat is never > > aware that the connection was received. The operating system's > > TCP/IP stack has received the incoming SYN, tried to queue the > > connection request on Tomcat's accept queue, failed, and simply > > sends a RST to close the connection. > > > > You *might* be able to monitor the total number of connection > > refusals at the OS level. Netstat on Windows will give you this, > > for example, though it combines refusals due to load and refusals > > due to no port being configured to accept a connection. > > > > - Peter > > > > - > > To start a new topic, e-mail: users@tomcat.apache.org > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > For additional commands, e-mail: [EMAIL PROTECTED] > > _ Stay organized with simple drag and drop from Windows Live Hotmail. http://windowslive.com/Explore/hotmail?ocid=TXT_TAGLM_WL_hotmail_102008
Re: Where to look for "connection refused" errors in Tomcat6.0.18 ?
[EMAIL PROTECTED] wrote: Thanks Peter for your answer . you said : You *can never* see these errors in Tomcat, because Tomcat is never aware that the connection was received. The operating system's TCP/IP stack has received the incoming SYN, tried to queue the connection request on Tomcat's accept queue, failed, and simply sends a RST to close the connection. What do these jargons SYN and RST actually mean ? I do not know TCP IP details . SYN and RST are two "types" of TCP/IP packets. Roughly : - a SYN packet is sent by a client to a server as the first packet, to open a new TCP/IP connection. - a RST packet is sent by either side to the other, to indicate the end of the connection. After sending this packet, the sender closes the socket, and when receiving the RST, the receiver should close the socket on its side. Between your client and Tomcat, there is, on each side, the TCP/IP "stack", which is the series of operating-system layers of software that manage the TCP/IP connection between them. On each side, the application (e.g. browser on one side, Tomcat on the other) sits "on top" of this TCP/IP stack. This "stack" is what allows an application to not have to worry about the underlying details of the connection, and see the connection as just an input or output stream to read from or write to. When the client wants to open a connection to the Tomcat server, it asks its own TCP/IP stack to open a TCP/IP connection to the Tomcat host system. The client's TCP/IP stack sends a SYN packet to the server. The TCP/IP stack on the server side receives this request, but notices that there are no more resources available to establish this connection, and so it answers directly to the TCP/IP stack of the sender : "impossible, sorry". It sends a RST packet to say that. The TCP/IP stack of the client receives this packet, telling it that the server refused to establish the connection. It then tells the client software (the browser) : "could not establish connection". So the client knows. But on the server, because this happened at the level of the server TCP/IP stack, Tomcat is not even aware that this has happened. So of course it cannot log it anywhere. - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Files in temp directory not reloaded on context reload
I am not sure if this is quite the right place to ask this question as I don't know if the problem is in my application, the Java Plugin Framework (JPF) or Tomcat. My web app has a plugin (managed by the JPF), that plugin is in the form of a .jar file and it unpacks and runs from $TOMCAT_HOME/temp directory. When I make a change to the plugin and re-load the context I can see the change appear in the JSP file in the temp directory but a refresh of the web browser does not pick up that change. The only way to get the change to display in a web browser is to do a full re-boot of Tomcat. Can anyone suggest a possible reason for this or even better, a possible solution? -- View this message in context: http://www.nabble.com/Files-in-temp-directory-not-reloaded-on-context-reload-tp20046159p20046159.html Sent from the Tomcat - User mailing list archive at Nabble.com. - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Where to look for "connection refused" errors in Tomcat6.0.18 ?
Thanks Peter for your answer . you said : > You *can never* see these errors in Tomcat, because Tomcat is never > aware that the connection was received. The operating system's > TCP/IP stack has received the incoming SYN, tried to queue the > connection request on Tomcat's accept queue, failed, and simply > sends a RST to close the connection. What do these jargons SYN and RST actually mean ? I do not know TCP IP details . Regards, Subhrajyoti Mobile: +919830079545 Mail: [EMAIL PROTECTED] Web: www.labware.com LabWare LIMS Solutions - Results Count Peter Crowther <[EMAIL PROTECTED]> wrote on 10/17/2008 06:45:13 PM: > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > > "If still more simultaneous requests are received, they are > > stacked up inside the server socket created by the Connector, > > up to the > > configured maximum (the value of the acceptCount attribute. > > Any further > > simultaneous requests will receive "connection refused" errors, until > > resources are available to process them. " So where can we > > expect to see those errors in Tomcat? > > You *can never* see these errors in Tomcat, because Tomcat is never > aware that the connection was received. The operating system's > TCP/IP stack has received the incoming SYN, tried to queue the > connection request on Tomcat's accept queue, failed, and simply > sends a RST to close the connection. > > You *might* be able to monitor the total number of connection > refusals at the OS level. Netstat on Windows will give you this, > for example, though it combines refusals due to load and refusals > due to no port being configured to accept a connection. > > - Peter > > - > To start a new topic, e-mail: users@tomcat.apache.org > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] >
Proxy timeout error in Apache error log
Hi all We have three Tomcat sites running on three different Tomcat instances on a server (let's call it myserverA). One of the sites runs on Tomcat 5.5 and two run on different instances of Tomcat 6. We then have Apache 2.2 running on myserverB and we use mod_proxy_http as the connector. We are regularly getting errors like the two lines below in our Apache log file on all three sites; (70007)The timeout specified has expired: proxy: error reading status line from remote server myserverA.com, referer: http://www.site.com proxy: Error reading from remote server returned by /cache/Folder/image.jpg, referer: http://www.site.com Can anyone advise what the issue might be? Regards Michael
Re: struts application not recognised in linux ,tomcat.
Raghu wrote: > Hi, > Sample struts applications also not working in linux system. > > JDk 1.5 > Tomcat 5.5 > Struts1.2.8 > > struts-exercise-taglib > servlets-examples > > I am getting following error on linux system. > > HTTP Status 500 - > > Description: The server encountered an internal error () that prevented it > from fulfilling this request. > > exception > > org.apache.jasper.JasperException: File "/tags/struts-logic" not found at > org.apache.jasper.compiler.DefaultErrorHandler.jspError(DefaultErrorHandler. > > java:105). What are the values for your appBase and docBase? Mark - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
struts application not recognised in linux ,tomcat.
Hi, Sample struts applications also not working in linux system. JDk 1.5 Tomcat 5.5 Struts1.2.8 struts-exercise-taglib servlets-examples I am getting following error on linux system. HTTP Status 500 - Description: The server encountered an internal error () that prevented it from fulfilling this request. exception org.apache.jasper.JasperException: File "/tags/struts-logic" not found at org.apache.jasper.compiler.DefaultErrorHandler.jspError(DefaultErrorHandler. java:105). Regards, Raghu
problem with call servlet by /servlet/ExampleServlet
Hi, i have a little problem, maybe you can help me. I use tomcat 6.0.18 and i've defined ExampleServlet in my web.xml like ExampleServlet my.servlets.ExampleServlet I use invoker for this of course (uncommented in tomcat web.xml) When i call it by: /servlet/ExampleServlet everything is ok it always works fine. But when i call it by /servlet//ExampleServlet sometimes it works sometimes not and i don't know why it works that way. That's the problem could You help mi with this. Thanks for your help. I've requests in my application by // (two slahes) and want to react on this problem. In logs i have: Sep 15, 2008 5:31:10 PM org.apache.catalina.core.ApplicationContext log SEVERE: invoker: Cannot allocate servlet instance for path /servlet//ExampleServlet javax.servlet.ServletException: Wrapper cannot find servlet class or a class it depends on at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1102) -- Regards, Michał 'Boban' Bidecki
