date:20090513

RE: Preventing OutOfMemoryError: Java heap space

2009-05-13 Thread Peter Crowther

 From: André Warnier [...@ice-sa.com]
 would it not be easier to catch the OOM exception and then return a
 sorry, server overloaded page to the browser ?

At that point, it's too late.  A thread, somewhere in the system, tried to 
allocate some memory for an object and couldn't.  This could happen anywhere!  
It might be while allocating the buffer to read the request, or the buffer to 
send the response, or even the socket instance from which to read the request.

There are then no guarantees.  You may be unable to send anything back to the 
client, as you may be unable to access the socket because the OOM was caused by 
trying to create that socket.  Or the thread that got the exception might be 
one of the threads processing incoming requests.  Once the system encounters an 
out-of-memory error, you pretty much have to stop the process and start again, 
as you generally have no idea what else has failed.  You can't even save any 
outstanding work to file, as there's no guarantee you can allocate the memory 
for the file object - if MS Word runs out of memory, you just lost your 
document!

This isn't unique to Java, by the way - if you want a coding nightmare, try to 
handle *all* malloc() fails in a reasonably sized C program.  Or kalloc() calls 
in a kernel :-).  When you realise that running out of memory means you can no 
longer guarantee to allocate any new memory for any purpose at all, the scale 
of the problem becomes apparent.

- Peter

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

ClassLoader issues in multithreaded webapp ? TC5.0

2009-05-13 Thread katepl


Hi

I'm using 5.0.28 (with java5 patch) running on java5 (SR9 AIX). My webapp is
running on axis 1.2.
When I start some threads to do the work in my web service, I'm getting
errors like:

Exception in thread Thread-33 java.lang.NoClassDefFoundError:
my.whatever.package.whatever.class

Caused by: java.lang.ClassNotFoundException:
my.whatever.package.whatever.class
at
org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader.java:1340)
at
org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader.java:1189)

Needless to say all the classes are in place and it works fine with single
thread webapp (heavily tested).
Using multiple threads, only one or two thread report this error while
others seem to work fine.

I would say I have a race condition with WebappClassLoader but why does it
complain only about my classes ( never throws CNFE for java.* classes ).

Any thoughts ?
Thanks in advance, Kate.

-- 
View this message in context: 
http://www.nabble.com/ClassLoader-issues-in-multithreaded-webapp---TC5.0-tp23515950p23515950.html
Sent from the Tomcat - User mailing list archive at Nabble.com.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Preventing OutOfMemoryError: Java heap space

2009-05-13 Thread Peter Crowther

 From: Todd Hivnor [mailto:spambox_98...@yahoo.com]
 One challenge with Peter's suggestion of tracking the
 number of sessions myself is that I have a collection
 of webapps. So I can't just set up a shared static counter;
 I need a counter which works across multiple webapps.
 The only way I know to do that is to use a text file,
 and take care about locking the file before updating it.
 Or perhaps I can use ServletContext.

Some classes can be shared across webapps, though the precise approach varies 
depending on the version.  See the Classloader how-to for your Tomcat version 
at http://tomcat.apache.org for details.  Pre-6.0, you could load a class 
through the common or shared classloaders; in 6.0, your options are reduced 
somewhat.  That class could keep a common integer.  It doesn't have to be a 
straight session count; you could weight it based on the relative sizes of the 
sessions.  A heavy session increments the counter by 10, a light one by 1.

- Peter

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: How to create a virtual host with war file without beeing created aROOT dir?

2009-05-13 Thread raistlink

Thank you for your answers, the versions is apache-tomcat-6.0.16, sorry.

I'll try to make the things as you say.

Thanks!!

awarnier wrote:

Caldarale, Charles R wrote:
From: raistlink [mailto:ela...@gmail.com]
Subject: How to create a virtual host with war file without beeing
created aROOT dir?

I've been developing an application with this structure of directories

Care to tell us the version of Tomcat you're using? Or should we just
guess?

The above is incorrect; set it up like this:

mydir/html/ROOT
mydir/html/ROOT/WEB-INF
mydir/html/ROOT/WEB-INF/classes
mydir/html/ROOT/WEB-INF/lib
mydir/html/ROOT/WEB-INF/web.xml

At server.xml I've included this host:

Host name=myhost.es appBase=/myhost/html unpackWARs=true
autoDeploy=true xmlValidation=false xmlNamespaceAware=false

With the above directory changes, your Host settings are o.k.

Context path= reloadable=true docBase=/myhost/html/

The Context is completely wrong:

1) Don't put Context elements in server.xml - that's extremely bad
practice unless you're using an ancient level of Tomcat.

2) The Context element should be in the webapp's META-INF/context.xml
file; in your case, that will be mydir/html/ROOT/META-INF/context.xml.

3) The docBase attribute (when used, which is rarely) must *never* be the
same as appBase.

4) For your case, the path and docBase attributes are not allowed when
the Context element is in the proper location; remove them.

And everything works fine.

Not really; there are bugs in certain versions of Tomcat that make it
appear to work. You're also getting double application deployment and
have serious security holes with your current setup.

What I've done es to take the directory mydir/html and create the
html.war.

Change the name to ROOT.war.

Then I changed the host by this one:
Host name=myhost.es appBase=/myhost unpackWARs=true
autoDeploy=true
xmlValidation=false xmlNamespaceAware=false

The above is o.k.

Context path= reloadable=true docBase=/myhost/html/

This is bad, for the reasons stated above. Correct it as noted above.

What I don't get in all this, is how it works, what with the application
located in /mydir/html and the Tomcat appBase in /myhost/html.

What version of Tomcat is that ? It's *really* smart.
;-)

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

--
View this message in context:
http://www.nabble.com/How-to-create-a-virtual-host-with-war-file-without-beeing-created-a-ROOT-dir--tp23504283p23518575.html
Sent from the Tomcat - User mailing list archive at Nabble.com.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: tomcat close_wait state and proxy error when connecting to my web application

2009-05-13 Thread Rainer Jung

On 12.05.2009 23:26, orahi001 wrote:
 Hi,
 
 I have apache web server running on one box as a proxy server
 tomcat running on another box.
 
 The apache server connects to application server (tomcat) via proxy passthru
 parameter. The server running tomcat was recently rebooted.  When it came
 back up I started tomcat but I can no longer connect to my web application
 over http.  I'm getting a proxy error in my browser window: error reading
 from the remote server.  The apache log shows the same message.
 
 On the server running tomcat, netstat -a shows the port running tomcat
 changes to a state of close_wait.
 
 however, if I telnet to the port (8980) from the server running apache I can
 connect and the port shows a state of established.
 
 Any ideas as to why I can no longer reach my web application?
 Whats causing this close_wait state?

CLOSE_WAIT is when the remote side of a connection closed it.

It seems your proxy tries to reuse an existing connection tha doesn't
work any more. So have a look at how to configure the proxy connection
pools, using timeouts etc.

Regards,

Rainer

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Preventing OutOfMemoryError: Java heap space

2009-05-13 Thread Rainer Jung

On 13.05.2009 08:07, Peter Crowther wrote:
 From: André Warnier [...@ice-sa.com] would it not be easier to catch
 the OOM exception and then return a sorry, server overloaded page
 to the browser ?
 
 At that point, it's too late.  A thread, somewhere in the system,
 tried to allocate some memory for an object and couldn't.  This could
 happen anywhere!  It might be while allocating the buffer to read the
 request, or the buffer to send the response, or even the socket
 instance from which to read the request.
 
 There are then no guarantees.  You may be unable to send anything
 back to the client, as you may be unable to access the socket because
 the OOM was caused by trying to create that socket.  Or the thread
 that got the exception might be one of the threads processing
 incoming requests.  Once the system encounters an out-of-memory
 error, you pretty much have to stop the process and start again, as
 you generally have no idea what else has failed.  You can't even save
 any outstanding work to file, as there's no guarantee you can
 allocate the memory for the file object - if MS Word runs out of
 memory, you just lost your document!
 
 This isn't unique to Java, by the way - if you want a coding
 nightmare, try to handle *all* malloc() fails in a reasonably sized C
 program.  Or kalloc() calls in a kernel :-).  When you realise that
 running out of memory means you can no longer guarantee to allocate
 any new memory for any purpose at all, the scale of the problem
 becomes apparent.

+1!

Another example for no more guarantees: after an OOME in heap, your
business logic might be broken in a very unexpected way! Don't let any
Java process do more work once it had an OOME in heap.

Regards,

Rainer

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Connector for diameter protocol

2009-05-13 Thread kramasundar


Hi,

I am trying to port our existing plain old java diameter (
http://en.wikipedia.org/wiki/Diameter_(protocol) Diameter wiki page ) server
on top of tomcat.

I am new to J2EE/Tomcat.

Since Diameter is quite different from HTTP it is bit difficult to get
started with doing things. As far as i have read, it seems that i need a
protocol handler for Diameter protocol and feed it into tomcat. Could any
one of you please direct me to some documents/references that describes how
to develop custom protocol handlers for non HTTP protocols like
Sip/Diameter/Radius.

Thanks,
Ramsundar
-- 
View this message in context: 
http://www.nabble.com/Connector-for-diameter-protocol-tp23519306p23519306.html
Sent from the Tomcat - User mailing list archive at Nabble.com.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Preventing OutOfMemoryError: Java heap space

2009-05-13 Thread Caldarale, Charles R

 From: Todd Hivnor [mailto:spambox_98...@yahoo.com]
 Subject: Re: Preventing OutOfMemoryError: Java heap space

 In my tests, as the RAM becomes depleted, the server 
 response becomes slower and slower.

That's because you're going through garbage collections at an ever increasing 
frequency, with little benefit.

 Yes of course I can throw more RAM at the problem.
 But I would still like to have a graceful response to the
 overloaded scenario. More RAM is just delaying the
 problem.

You need to size the system for the expected load, and refuse requests when you 
approach some arbitrary threshold.  You also need to check very carefully for 
memory leaks in your webapps, since your symptoms are typical of that kind of 
problem.  If you aren't doing so already, run in a 64-bit environment, allowing 
a much larger heap; your current setting of -Xmx256m is tiny in today's world.  
Just make sure you have enough RAM to support the heap, otherwise paging will 
kill your performance.

 - Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Form Based Authentication creates user session before it is authenticated?

2009-05-13 Thread Caldarale, Charles R

 From: umeshkavade [mailto:umeshkav...@yahoo.co.in]
 Subject: Re: Form Based Authentication creates user session before it
 is authenticated?

 P.S: BTW, is Tomcat planning to resolve this vulnerability in near
 future?

I'll bite: what vulnerability are you referring to?

 - Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: ClassLoader issues in multithreaded webapp ? TC5.0

2009-05-13 Thread Caldarale, Charles R

 From: katepl [mailto:klin...@poczta.fm]
 Subject: ClassLoader issues in multithreaded webapp ? TC5.0

 I'm using 5.0.28 (with java5 patch)

What's the java5 patch?

Note that Tomcat 5.0 is deprecated.  Can you reproduce the problem on a 
supported level?

I don't recall having seen these symptoms on any level, so it may be related to 
the JVM you're using.

 - Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: [OT] Performance with many small requests

2009-05-13 Thread Christopher Schultz

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Chuck,

On 5/12/2009 5:03 PM, Caldarale, Charles R wrote:
 From: David kerber [mailto:dcker...@verizon.net] Subject: Re:
 Performance with many small requests
 
 When (what java version) did those string operation optimizations 
 happen?  Sun's web page that talks about this (and explicitly says 
 that string buffers are usually faster than direct string
 operations) doesn't mention a specific java version.
 
 Don't confuse a StringBuffer (the recommended type) with a byte array
 (what Chris was talking about).

Right. People used to write code like this:

String s = ...;
char[] c = s.toCharArray();

for(int i=0; ic.length; ++i)
   if(c[i] == '\n')
  ...;

Instead of just:

String s = ...;
for(int i=0; is.length(); ++i)
  if(s.charAt(i) == '\n')
...;

Final method calls got a whole lot quicker at some point (like 1.2 or
1.3) and so the conversion to a char array (or even a byte array) merely
wastes time (for the constructor, memory allocation, etc.) /plus/ the
memory required to duplicate the String's character array. This
optimization quickly became a de-optimization.

My position has always been that you should write the code how it ought
to look. Only if it's really causing you performance pain should you
bother to do pinhole optimizations. The JVM authors are more likely to
have an effect on the performance of your code (through optimizations of
things like method calls and monitor lock acquisition) than pinhole
optimizations like the one shown above.

 Since a String object is immutable, one should always use a
 StringBuffer (preferably a StringBuilder, these days) when you are
 constructing strings in a piecemeal fashion, then convert to String
 when complete.

This advice is good when constructing a long string in a loop or across
a long series of statements. If you are just concatenating a bunch of
string together to make a big one in a single statement, go ahead and
use the + operator: the compiler is smart enough to convert the entire
thing into a StringBuilder (a non-synchronized replacement for
StringBuffer) expression that gets good performance without making your
code look like crap.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkoKxUcACgkQ9CaO5/Lv0PCo+gCgrlE7HabUgDG+zcba+GFPwZlP
TTEAn2l+hTciWmHGvHH5GSiybnxZfTbi
=nuGH
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: IE + Flash + mod_jk issue

2009-05-13 Thread Stephen More

On Tue, May 12, 2009 at 4:58 PM, Rainer Jung  wrote:
 On 12.05.2009 22:33, Stephen More wrote:
 I have a flash application ( Macromedia Breeze Presentation ) that is
 working fine when I access it directly from tomcat's port 8080.

 When I access it through apache using mod_jk, IE loads some of the
 flash files, but not all.
 The problem is only appearing with IE, it is working fine with Firefox.

 Here are my options:
 JkOptions     +ForwardKeySize +ForwardURICompat -ForwardDirectories

 Could this be a mod_jk issue or should I be looking at something else ?

I found a solution.

I needed to remove the following from my apache httpd config:
AddOutputFilterByType DEFLATE text/xml
AddOutputFilterByType DEFLATE text/html

I guess a better solution might be:
  http://www.robertswarthout.com/2007/05/ie-6-apache-mod_deflate-blank-pages/

-Steve

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: [OT] Performance with many small requests

2009-05-13 Thread David kerber


Christopher Schultz wrote:

...

Since a String object is immutable, one should always use a
StringBuffer (preferably a StringBuilder, these days) when you are
constructing strings in a piecemeal fashion, then convert to String
when complete.



This advice is good when constructing a long string in a loop or across
a long series of statements. If you are just concatenating a bunch of
string together to make a big one in a single statement, go ahead and
use the + operator: the compiler is smart enough to convert the entire
thing into a StringBuilder (a non-synchronized replacement for
StringBuffer) expression that gets good performance without making your
code look like crap.
  
I was wondering about that.  It certainly seemed like a good place for a 
smart compiler to fix things up, but didn't know if it actually did or 
not.  I don't do a lot of that, but enough of it that it becomes a style 
issue.


D





-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: How to configure Tomcat 6.0 with JAAS?

2009-05-13 Thread David Hoffer

Thanks, if possible could you/someone send some examples of how to configure
JAAS with JBoss?  I have it working with Tomcat but need the minimum
configuration to do the same for JBoss.

Note, I have a servlet that at startup sets the JAAS configuration, i.e.
Configuration.setConfiguration(configuration) which sets the LoginModule to
use.  I just need to know how to configure JBoss to work with this
LoginModule.

-Dave

On Tue, May 12, 2009 at 10:56 AM, Caldarale, Charles R 
chuck.caldar...@unisys.com wrote:

  From: Christopher Schultz [mailto:ch...@christopherschultz.net]
  Subject: Re: How to configure Tomcat 6.0 with JAAS?
 
  ... though JBoss uses Tomcat as its default servlet container

 Unfortunately, JBoss does not use Tomcat's authentication - it has its own.
  When we wrote JAAS modules for use on our proprietary OS, we had to do
 separate implemenations for JBoss and Tomcat.

  - Chuck


 THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
 MATERIAL and is thus for use only by the intended recipient. If you received
 this in error, please contact the sender and delete the e-mail and its
 attachments from all computers.

RE: Form Based Authentication creates user session before it is authenticated?

2009-05-13 Thread Martin Gainty


http://www.cafesoft.com/products/cams/tomcat-security.html

if you are asking how to overcome Man-in-the-middle fraudulent manipulation 
based on basic authentication?
and or Man-in-the middle fraudulent manipulation based on Form-based 
authentication which uses j_username 
and j_password 
and posts back to j_security_check using cleartext?

i would suggest implementation authentication using either Message-Digest or 
HTTPS
Message-Digest processes passwords with a Digest algorithm such as SHA, MD2, or 
MD5..  the receiving entity must agree on the digested contents for 
authentication to occur

HTTPS or HTTP on a SSL connection usually implemented with a known key stored 
in a keystore where access is controlled by CA (certificate authority) 
presentation of a certificate..
a good explanation of how Tomcat implements SSL details are available at
http://www.mbaworld.com/docs/ssl-howto.html

commercial vendors such as Verisign
have implemented CA servers which validate the requesting entity and the 
requestor to ensure both are indeed who they say they are.. client 
authenticating to CA authority is a new feature but prevents spoofed clients 
from order-execution and/or using spoofed credentials to effect fraudulent 
transactions..I would strongly suggest you enable authentication capability in 
both directions if using SSL
https://www.verisign.com/support/roots.html

security elements defined and configured by Tomcat:

Deployment descriptor 
security-constraint elements define 
the permissions and 
rules for the protected Tomcat resources and 
include the following 
XML elements:



web-resource-collection - A set 
of URL patterns 
and HTTP methods that describe a set of resources 
to be 
protected. All requests that contain a URL pattern matched 
in a web 
resource collection are subject to the constraint. auth-constraint - A set of 
security 
roles (one or 
more) to which a user must belong to be granted 
access to 
resources matched by the web resource collections (e.g. admin/manager) 
user-data-constraint - Describes 
integrity and 
confidentiality requirements for the transport layer 
of the client 
server.
an example of XSD which describes user-data-constraintType  would be
  xsd:complexType name=user-data-constraintType
xsd:annotation
  xsd:documentation
The user-data-constraintType is used to indicate how
data communicated between the client and container should be
protected.

Used in: security-constraint

  /xsd:documentation
/xsd:annotation

xsd:sequence
  xsd:element name=description
   type=j2ee:descriptionType
   minOccurs=0
   maxOccurs=unbounded/
  xsd:element name=transport-guarantee
   type=j2ee:transport-guaranteeType/
/xsd:sequence
xsd:attribute name=id type=xsd:ID/
  /xsd:complexType

namespace j2ee is assigned xmlns:j2ee=http://java.sun.com/xml/ns/j2ee;
where transport=guaranteeType can be NONE,INTEGRAL or CONFIDENTIAL
the latter 2 types imply use of SSL

Man in the middle fraud is a concern to all and one which should be dealt with 
the most secure and reliable algorithm
available

anyone else?
Martin Gainty 
__ 
Disclaimer and Confidentiality/Verzicht und Vertraulichkeitanmerkung/Note de 
déni et de confidentialité
This message is confidential. If you should not be the intended receiver, then 
we ask politely to report. Each unauthorized forwarding or manufacturing of a 
copy is inadmissible. This message serves only for the exchange of information 
and has no legal binding effect. Due to the easy manipulation of emails we 
cannot take responsibility over the the contents.
Diese Nachricht ist vertraulich. Sollten Sie nicht der vorgesehene Empfaenger 
sein, so bitten wir hoeflich um eine Mitteilung. Jede unbefugte Weiterleitung 
oder Fertigung einer Kopie ist unzulaessig. Diese Nachricht dient lediglich dem 
Austausch von Informationen und entfaltet keine rechtliche Bindungswirkung. 
Aufgrund der leichten Manipulierbarkeit von E-Mails koennen wir keine Haftung 
fuer den Inhalt uebernehmen.
Ce message est confidentiel et peut être privilégié. Si vous n'êtes pas le 
destinataire prévu, nous te demandons

Tomcat Cluster Deployment without WAR

2009-05-13 Thread Alexander Diedler

Hello,

It is possible to make a Cluster Deployment without WAR Files? 

WatchDir is F:\inetpub\wwwroot  if there is something changed, it should be
deployed to all other cluster nodes.

 

 

Mit freundlichen Grüßen

tecRacer GmbH  Co. KG
Alexander Diedler
Softwareentwicklung und Netzwerksicherheit

Vahrenwalder Str. 156
30165 Hannover

Telefon: 0511 59095-950
Durchwahl: 0511 59095-919
Fax: 0511 59095-590
Mobil: 0172 5134664

E-Mail: adied...@tecracer.de
Internet: http://www.tecracer.de http://www.tecracer.de/  
 
Registergericht Hannover HRA 200331 
Geschäftsführer: Markus P. Herrlich, Sven Ramuschkat, Torsten Höpfner 
Kompl: tecRacer Verwaltungs GmbH, Hannover HRB 200935 

* E-Mails sparen Zeit; sie nicht auszudrucken, spart Bäume.

 



smime.p7s
Description: S/MIME cryptographic signature

RE: Tomcat Cluster Deployment without WAR

2009-05-13 Thread Peter Crowther



 From: Alexander Diedler [mailto:adied...@tecracer.de]
 WatchDir is F:\inetpub\wwwroot  if there is something changed,
 it should be deployed to all other cluster nodes.

If you're on Windows, why not use the built-in file replication to replicate 
changes between the nodes rather than use Tomcat?

- Peter

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Preventing OutOfMemoryError: Java heap space

2009-05-13 Thread André Warnier


Thanks, Chuck and Peter, for the clarifications on OOM.
I believe that unconsciously, with my large object reservation theory, 
I was vaguely remembering something I had read some time in the past.
So I searched Google for java +parachute +memory and this is something 
I found :


http://mail-archives.apache.org/mod_mbox/tomcat-dev/200703.mbox/%3c20070325171940.34dae1a9...@eris.apache.org%3e

Does this have any bearing on the OP's issue ?

It is past me capacities to see if it is relevant or not (I don't mean 
the above post per se, but the idea).



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: tomcat close_wait state and proxy error when connecting to my web application

2009-05-13 Thread orahi001

Rainer Jung-3 wrote:

On 12.05.2009 23:26, orahi001 wrote:
Hi,

I have apache web server running on one box as a proxy server
tomcat running on another box.

The apache server connects to application server (tomcat) via proxy
passthru
parameter. The server running tomcat was recently rebooted. When it came
back up I started tomcat but I can no longer connect to my web
application
over http. I'm getting a proxy error in my browser window: error reading
from the remote server. The apache log shows the same message.

On the server running tomcat, netstat -a shows the port running tomcat
changes to a state of close_wait.

however, if I telnet to the port (8980) from the server running apache I
can
connect and the port shows a state of established.

Any ideas as to why I can no longer reach my web application?
Whats causing this close_wait state?

CLOSE_WAIT is when the remote side of a connection closed it.

It seems your proxy tries to reuse an existing connection tha doesn't
work any more. So have a look at how to configure the proxy connection
pools, using timeouts etc.

Regards,

Rainer

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Hi Rainer,

thanks for the reply,

I don't understand how the proxy connection would have changed. Nothing has
changed in the config files. I added the following in the httpd config file
and also increased the timeout in the tomcat config file.

SetEnv force-proxy-request-1.0 1
SetEnv proxy-nokeepalive 1

Still seeing the same results
--
View this message in context:
http://www.nabble.com/tomcat-close_wait-state-and-proxy-error-when-connecting-to-my-web-application-tp23510873p23523302.html
Sent from the Tomcat - User mailing list archive at Nabble.com.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Preventing OutOfMemoryError: Java heap space

2009-05-13 Thread Peter Crowther

 From: André Warnier [mailto:a...@ice-sa.com]
 Thanks, Chuck and Peter, for the clarifications on OOM.
 I believe that unconsciously, with my large object
 reservation theory,
 I was vaguely remembering something I had read some time in the past.
 So I searched Google for java +parachute +memory and this
 is something
 I found :

 http://mail-archives.apache.org/mod_mbox/tomcat-dev/200703.mbo
x/%3c20070325171940.34dae1a9...@eris.apache.org%3e

 Does this have any bearing on the OP's issue ?

 It is past me capacities to see if it is relevant or not (I don't mean
 the above post per se, but the idea).

Nice.

The idea's relevant... as long as you realise that all it's doing is defending 
a very few critical areas of Tomcat's code against some (not all) OOMEs.  
Another thread could allocate heap memory between lines in this code, leading 
to unexpected failures because the memory freed by the parachute has been used 
elsewhere; and it doesn't defend all areas of Tomcat's code (I think - Filip 
will no doubt correct me).

It's a great way of helping to make sure that, most of the time, it's at least 
possible to log an OOME - assuming the application passes it up the stack, 
which most will.  It's not a general solution without a lot more work; each 
webapp would have to do something similar at each point that it might allocate 
heap memory.

- Peter

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Tomcat not closing threads

2009-05-13 Thread Chetan Chheda

I guess I need to ask my question again. Im primarily an HP-UX 
administrator and recently inherited this web based application ...

We are having some issues in accomodating additional user load/functionality. 
While a part of the team is looking at optimizing code, I am responsible for 
infrastructure componants. 

One particular focus area for me is the mod_jk and tomcat configurations. 
1. Last of April saw one of the tomcat's stop processing requests. Looking at 
the mod_jk.log I saw the following errors 
Unable to get the free endpoint for worker XXX  from 37 slots  
I have setup the status servlet for mod_jk in which I saw that max slots were 
opened. Thinking that mod_jk needs more number of connections, I basically set 
it to ThreadsPerChild from worker MPM

2. Now we are randomly seeing that even a simple activity as user login causes 
a spike in used tomcat connector threads. Eventually all tomcat threads are 
used and no new requests can be serviced. 

So, long story short, is my apache, mod_jk and tomcat configuration in sync? 
Maxclients = 512 
ThreadsPerChild = 256 
So that means 2 server processes with 256 threads each. 

I have 2 worker threads in my worker.properties file with 
connection_pool_size=256. 
Does this mean that total number of connections into tomcat = 256 * 2(number of 
workers) * 2(number of server procs) = 1024 ?? 

Do I need to change the connection_pool_size to 120 . Which means 120*2 *2 = 
480 and that leaves the remainder of apache threads for static content?

3. I have worker.XXX.cache_timeout=900 and no connectionTimeout in server.xml . 
Is this why connections remain open?

Thanks,
Chetan



From: Caldarale, Charles R chuck.caldar...@unisys.com
To: Tomcat Users List users@tomcat.apache.org
Sent: Tuesday, May 12, 2009 10:47:00 PM
Subject: RE: Tomcat not closing threads

 From: Chetan Chheda [mailto:chetan_chh...@yahoo.com]
 Subject: Re: Tomcat not closing threads
 
 I managed to get a thread dump during one such tomcat hangs. Most of
 the threads are in the following status ...

The ones you show are simply waiting for input from httpd; that's a pretty 
normal state.  When looking at a thread dump, it's often the oddball thread 
that's not doing what the rest are that is causing a problem.  However, if all 
of the threads are just waiting to receive something from httpd, then you may 
have to look outside of Tomcat for the cause.

- Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Different resources for different user roles

2009-05-13 Thread Claudio80


Hi All,

I have a web application that communicate with a  DB2 Database. 
There are multiple users that need to authenitcate them before using the
application.
Each user has just a role and the are 3 roles.
I need to access to a DB2 database using those 3 different roles in order to
limite the access to some tables' rows. 
So i tried to use the PerUserPerUserPoolDataSource in order to use the
method getConnection(user,pass) not provided in the BasicDataSource but i
got some problem.

So i decided to define 3 Resource element in the context.xml (one for each
role) and when i need to create a specific datasource based on the role i
use cxt.lookup( jdbc/ + roleName )

I have 2 question:

1) Do you think it is a good solution
2) It is better have a DAO object with a list of datasource or a list of DAO
objects (one for each DataSource)

Thanks in advance,

Claudio
-- 
View this message in context: 
http://www.nabble.com/Different-resources-for-different-user-roles-tp23525487p23525487.html
Sent from the Tomcat - User mailing list archive at Nabble.com.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

General errors in virtual host setup

2009-05-13 Thread Dave Filchak

A few days ago, a number of you helped me get tomcat up and running with 
the example files shipped with the default install of tomcat. Just as a 
reminder, I am on CentOS 5.4/64 bit system using jdk1.6.1_13, apache 
tomcat 6.0.18.


I was going through this exercise because I was given a tomcat based 
site to host for the next while. Having never dealt with tomcat before, 
with the help of a few members of this list, I managed to get tomcat 
running. So then I came to the task of getting this site going. So, here 
is what I did an I hope if anyone sees anything off base (likely) they 
will point it out to me.


First I created a war file of the site pages using java -cvf exodus.war *
I then put the war file inside my webapps directory at 
/usr/opt/tomcat/webapps/ (this is the same directory for my default host)
I then restarted tomcat and it expanded the war file to create a 
directory under webapps called exodus
In this new directory, there is a WEB-INF directory and a META-INF 
directory.
I edited the web.xml file from inside WEB-INF to reflect the current 
server environment, which included the following:

   context-param
  param-nameroot/param-name
!--
  param-value/opt/tomcat/webapps/exodus/param-value
--
  param-value/usr/opt/tomcat/webapps/exodus/param-value
  description
 Path to where the system begins
  /description
/context-param

context-param
  param-namexmlprops/param-name
!--
  
param-value/opt/tomcat/webapps/exodus/WEB-INF/conf/environment.xml/param-v

alue
--
  
param-value/usr/opt/tomcat/webapps/exodus/WEB-INF/conf/environment.xml/par

am-value
  description
 Used to find path to local XML props file.
  /description
/context-param

This reflected the paths in the new server.

Inside WEB-INF, there is also a conf directory which holds an 
environment.xml file. This too I edited to reflect the current server 
environment, which included:


paths
 loginJSP/login.jsp/loginJSP
 parentControlJSP/parentControl.jsp/parentControlJSP

 baseRoot/usr/opt/tomcat/webapps/exodus/baseRoot
 dataRoot/data/dataRoot
 instanceFile/instanceFile
 
systemLogFolder/usr/opt/tomcat/webapps/exodus/WEB-INF/logs//systemLogFo

lder
 
systemArchiveFolder/usr/opt/tomcat/webapps/exodus/WEB-INF/logs/archive/

/systemArchiveFolder
 
logFile/usr/opt/tomcat/webapps/exodus/WEB-INF/logs/codelog.txt/logFile


 
cronLog/usr/opt/tomcat/webapps/exodus/WEB-INF/logs/scheduler.txt/cronLo

g
 
broadcastLog/usr/opt/tomcat/webapps/exodus/WEB-INF/logs/broadcast.txt/b

roadcastLog
 
memoryLog/usr/opt/tomcat/webapps/exodus/WEB-INF/logs/memory.txt/memoryL

og
 
securityLog/usr/opt/tomcat/webapps/exodus/WEB-INF/logs/security.txt/sec

urityLog
 
ipmanifestlog/usr/opt/tomcat/webapps/exodus/WEB-INF/logs/ipmanifest.txt

/ipmanifestlog
 
forumArchiveLog/usr/opt/tomcat/webapps/exodus/WEB-INF/logs/forum.txt/fo

rumArchiveLog
  /paths  


(Sorry if the above was not necessary to send but wanted to be thorough).

My server.xml file was edited to look like this:

?xml version='1.0' encoding='utf-8'?

Server port=8005 shutdown=SHUTDOWN

 !--APR library loader. Documentation at /docs/apr.html --
 Listener className=org.apache.catalina.core.AprLifecycleListener 
SSLEngine=on /
 !--Initialize Jasper prior to webapps are loaded. Documentation at 
/docs/jasper-howto.html --

 Listener className=org.apache.catalina.core.JasperListener /
 !-- JMX Support for the Tomcat server. Documentation at 
/docs/non-existent.html --
 Listener 
className=org.apache.catalina.mbeans.ServerLifecycleListener /
 Listener 
className=org.apache.catalina.mbeans.GlobalResourcesLifecycleListen

er /
 !-- Listener className=org.apache.ajp.tomcat.config.ApacheConfig 
modJk=/usr/local/apache2/modules/mod_jk.so / --


 !-- Global JNDI resources
  Documentation at /docs/jndi-resources-howto.html
 --
 GlobalNamingResources
   !-- Editable user database that can also be used by
UserDatabaseRealm to authenticate users
   --
   Resource name=UserDatabase auth=Container
 type=org.apache.catalina.UserDatabase
 description=User database that can be updated and saved
 factory=org.apache.catalina.users.MemoryUserDatabaseFactory
 pathname=conf/tomcat-users.xml /
 /GlobalNamingResources

 Service name=Catalina

   Connector port=8080 protocol=HTTP/1.1
  connectionTimeout=2
  redirectPort=8443 /

   !-- Define an AJP 1.3 Connector on port 8009 --
   Connector port=8009 protocol=AJP/1.3 redirectPort=8443 /


   Engine name=Catalina defaultHost=localhost
   Host name=localhost appBase=webapps
 unpackWARs=true autoDeploy=true
 xmlValidation=false xmlNamespaceAware=false
   /Host

   Host name=exodus.zuka.net appBase=webapps/exodus
   unpackWARs=true autoDeploy=true
   xmlValidation=false xmlNamespaceAware=false
   /Host

 Realm className=org.apache.catalina.realm.UserDatabaseRealm

58 matches

Mail list logo