Re: Sample program for testing http DELETE or PUT method in tomcat

2009-06-19 Thread André Warnier

cleegt wrote:

Dear All,

Because of the security reason imposed by my company, I disabled http
DELETE, PUT methods from the tomcat based on some suggested method mentioned
on the internet. Now, I need to test whether the fix is working or not. So,
I am looking for a sample testing program to test the DELETE and PUT
methods. Is there anyone know where I can find those programs?

If perl is installed on your system (and otherwise just install it), 
look at the lwp-request program.


lwp-request -m (method) URL

There are a bunch of options that will allow you to see the request 
content and response details.


I'm sure there's also a couple of utilities Unix/Linux-side which do 
similar things.  Maybe curl ?




-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



APR Native library on tomcat 6

2009-06-19 Thread lmk

Hi all,

I have installed apr native library, open ssl; using :./configure:

./configure --with-apr=/usr/local/apr 
--with-java-home=/usr/java/jdk1.5.0_11  --with-ssl=/usr/local/ssl 
--prefix=/usr/tomcat/apache-tomcat-6.0.18

I added to catalina_opts  java.library definition:

export CATALINA_OPTS=$CATALINA_OPTS -Djava.library.path=/usr/local/apr/lib

And I still get the error:

The APR based Apache Tomcat Native library which allows optimal performance
in production environments was not found on the java.library.path:

any idea about this issue?

thanks.
-- 
View this message in context: 
http://www.nabble.com/APR-Native-library-on-tomcat-6-tp24107914p24107914.html
Sent from the Tomcat - User mailing list archive at Nabble.com.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



RE: Cookies handling issue

2009-06-19 Thread Rowe, Ciaran
Hi,

This issue probably won't be given a great deal of attention. There's conflict 
between what the spec says, and what has actually been going on in the 
development world. The de facto reality is that people have been using = 
characters in cookies despite them being prohibited for a long time.

If you want this netscape style cookie to be valid and not quoted by tomcat, 
you should revert to the ServerCookie  Cookies code 
(org.apache.tomcat.util.http.*) from an earlier revision of the 5.5.x series 
(5.5.17 works - 
http://svn.apache.org/repos/asf/tomcat/connectors/tags/tc5.5.x/TOMCAT_5_5_17/util/java/org/apache/tomcat/util/http/)

Be vigilant w.r.t. any bugs/security issues logged against that version. 

-Ciarán


-Original Message-
From: mateo-jl [mailto:mateo...@orange.fr]
Sent: 18 June 2009 14:07
To: users@tomcat.apache.org
Subject: Cookies handling issue

Hi everybody,

recently i've reported a problem, which wasn't a new one, related to the
encoding base64 within cookies (= separator ... only at reading :
request.getCookies) .
I was responded that this problem will probably be corrected  with
Tomcat 6.0.19 or 6.0.20 and 5.5.28. The last one is not yet released and
in the 6.0.20 I do not see any patch for this problem.
Do you think that it will be corrected ?

Thank you

JLM

--
NOTICE: If received in error, please destroy and notify sender. Sender does not 
intend to waive confidentiality or privilege. Use of this email is prohibited 
when received in error. Morgan Stanley may monitor and store emails to the 
extent permitted by applicable law.


RE: MemoryLeak Problem with ThreadWithAttributes

2009-06-19 Thread ultan ocarroll

Hi,

Please help !

I'm having exactly the same issue here, with 5.5.27, in a production 
application, and close to pulling my hair out now !


I see the ThreadWithAttributes filled with 5m xalan ElementImpl objects 
(my UI is generated using XSL) in one heap dump I have. Like Patrick, 
the OoM happens randomly, with no predictability. Not related to volume, 
load or input params or content as far as I can tell.


I cant tell from the last message whether the resolution, if any, is to 
move to TC6, or to get off AJP.


Was there a resolution to this problem to do with Tomcat version or 
configuration, or was it application code ?


Ultan O'Carroll


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Sample program for testing http DELETE or PUT method in tomcat

2009-06-19 Thread Mark Thomas
cleegt wrote:
 Dear All,
 
 Because of the security reason imposed by my company, I disabled http
 DELETE, PUT methods from the tomcat based on some suggested method mentioned
 on the internet. Now, I need to test whether the fix is working or not. So,
 I am looking for a sample testing program to test the DELETE and PUT
 methods. Is there anyone know where I can find those programs?

I assume you realise those methods are disabled in Tomcat by default anyway?

Mark



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Cookies handling issue

2009-06-19 Thread Mark Thomas
mateo-jl wrote:
 Hi everybody,
 
 recently i've reported a problem, which wasn't a new one, related to the 
 encoding base64 within cookies (= separator ... only at reading : 
 request.getCookies) .
 I was responded that this problem will probably be corrected  with Tomcat 
 6.0.19 or 6.0.20 and 5.5.28. The last one is not yet released and in the 
 6.0.20 I do not see any patch for this problem.
 Do you think that it will be corrected ?

As per the change log, it is fixed in 6.0.20

Mark



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Cookies handling issue

2009-06-19 Thread mateo-jl
Hello Mark,

i do not have any doubt about the fix but i've read all the bugs at the 
ChangeLog (http://tomcat.apache.org/tomcat-6.0-doc/changelog.html) and I did 
not see the one related to this problem. 
Maybe there are not all recorded.

Thank you for the response

JLM




 Message du 19/06/09 13:53
 De : Mark Thomas 
 A : Tomcat Users List 
 Copie à : 
 Objet : Re: Cookies handling issue
 
 
 mateo-jl wrote:
  Hi everybody,
  
  recently i've reported a problem, which wasn't a new one, related to the 
  encoding base64 within cookies (= separator ... only at reading : 
  request.getCookies) .
  I was responded that this problem will probably be corrected with Tomcat 
  6.0.19 or 6.0.20 and 5.5.28. The last one is not yet released and in the 
  6.0.20 I do not see any patch for this problem.
  Do you think that it will be corrected ?
 
 As per the change log, it is fixed in 6.0.20
 
 Mark
 
 
 
 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org
 
 
 


Re: Cookies handling issue

2009-06-19 Thread Mark Thomas
mateo-jl wrote:
 Hello Mark,
 
 i do not have any doubt about the fix but i've read all the bugs at the 
 ChangeLog (http://tomcat.apache.org/tomcat-6.0-doc/changelog.html) and I did 
 not see the one related to this problem. 

You need to read further down the page. They are all there.

 Maybe there are not all recorded.

The spec compliance changes were made in 6.0.15

The workaround for apps using '=' (automatically switching invalid v0
cookies to v1 and quoting them) went in to 6.0.16.

There was an IE related workaround in 6.0.17

Some sync issues were fixed in 6.0.19, httpOnly support was added, a
workaround for an IE/Safari bug was added

The biggest problem with all of this was getting to a cookie
implementation that was:
a) spec compliant (easy)
b) worked with all the major browsers (hard)

I believe we are there now.

Mark


 
 Thank you for the response
 
 JLM
 
 
 
 
 Message du 19/06/09 13:53
 De : Mark Thomas 
 A : Tomcat Users List 
 Copie à : 
 Objet : Re: Cookies handling issue


 mateo-jl wrote:
 Hi everybody,

 recently i've reported a problem, which wasn't a new one, related to the 
 encoding base64 within cookies (= separator ... only at reading : 
 request.getCookies) .
 I was responded that this problem will probably be corrected with Tomcat 
 6.0.19 or 6.0.20 and 5.5.28. The last one is not yet released and in the 
 6.0.20 I do not see any patch for this problem.
 Do you think that it will be corrected ?
 As per the change log, it is fixed in 6.0.20

 Mark



 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org



 



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



RE: Sample program for testing http DELETE or PUT method in tomcat

2009-06-19 Thread Martin Gainty

Andre-

apache has implemented method handling by hardcoded parameters in 
/include/httpd.h
#define M_GET   0   /* RFC 2616: HTTP */
#define M_PUT   1   /*  : */
#define M_POST  2
#define M_DELETE3
#define M_CONNECT   4
#define M_OPTIONS   5
#define M_TRACE 6   /* RFC 2616: HTTP */
#define M_PATCH 7   /* no rfc(!)  ### remove this one? */
#define M_PROPFIND  8   /* RFC 2518: WebDAV */
#define M_PROPPATCH 9   /*  :   */
#define M_MKCOL 10
#define M_COPY  11
#define M_MOVE  12
#define M_LOCK  13
#define M_UNLOCK14  /* RFC 2518: WebDAV */
#define M_VERSION_CONTROL   15  /* RFC 3253: WebDAV Versioning */
#define M_CHECKOUT  16  /*  :  */
#define M_UNCHECKOUT17
#define M_CHECKIN   18
#define M_UPDATE19
#define M_LABEL 20
#define M_REPORT21
#define M_MKWORKSPACE   22
#define M_MKACTIVITY23
#define M_BASELINE_CONTROL  24
#define M_MERGE 25
#define M_INVALID   26  /* RFC 3253: WebDAV Versioning */

where the modules/http/http_protocol.c binds each of the aforementioned methods 
AP_DECLARE(void) ap_method_registry_init(apr_pool_t *p)
{
methods_registry = apr_hash_make(p);
apr_pool_cleanup_register(p, NULL,
  ap_method_registry_destroy,
  apr_pool_cleanup_null);

/* put all the standard methods into the registry hash to ease the
   mapping operations between name and number */
register_one_method(p, GET, M_GET);
register_one_method(p, PUT, M_PUT);
register_one_method(p, POST, M_POST);
register_one_method(p, DELETE, M_DELETE);
register_one_method(p, CONNECT, M_CONNECT);
register_one_method(p, OPTIONS, M_OPTIONS);
register_one_method(p, TRACE, M_TRACE);
register_one_method(p, PATCH, M_PATCH);
register_one_method(p, PROPFIND, M_PROPFIND);
register_one_method(p, PROPPATCH, M_PROPPATCH);
register_one_method(p, MKCOL, M_MKCOL);
register_one_method(p, COPY, M_COPY);
register_one_method(p, MOVE, M_MOVE);
register_one_method(p, LOCK, M_LOCK);
register_one_method(p, UNLOCK, M_UNLOCK);
register_one_method(p, VERSION-CONTROL, M_VERSION_CONTROL);
register_one_method(p, CHECKOUT, M_CHECKOUT);
register_one_method(p, UNCHECKOUT, M_UNCHECKOUT);
register_one_method(p, CHECKIN, M_CHECKIN);
register_one_method(p, UPDATE, M_UPDATE);
register_one_method(p, LABEL, M_LABEL);
register_one_method(p, REPORT, M_REPORT);
register_one_method(p, MKWORKSPACE, M_MKWORKSPACE);
register_one_method(p, MKACTIVITY, M_MKACTIVITY);
register_one_method(p, BASELINE-CONTROL, M_BASELINE_CONTROL);
register_one_method(p, MERGE, M_MERGE);
}

//even if you comment out these hardcoded method assignments you still have to 
put a patch in for /modules/generators/mod_cgi.c
static int log_script(request_rec *r, cgi_server_conf * conf, int ret,
  char *dbuf, const char *sbuf, apr_bucket_brigade *bb, 
  apr_file_t *script_err)
..
if ((r-method_number == M_POST || r-method_number == M_PUT) 
*dbuf) {
apr_file_printf(f, \n%s\n, dbuf);
}
.

ping me offline as this is definitely not related to TC 
but allows one to compare requisite functionality between TC and Apache

Martin 
__ 
Verzicht und Vertraulichkeitanmerkung/Note de déni et de confidentialité
 
Diese Nachricht ist vertraulich. Sollten Sie nicht der vorgesehene Empfaenger 
sein, so bitten wir hoeflich um eine Mitteilung. Jede unbefugte Weiterleitung 
oder Fertigung einer Kopie ist unzulaessig. Diese Nachricht dient lediglich dem 
Austausch von Informationen und entfaltet keine rechtliche Bindungswirkung. 
Aufgrund der leichten Manipulierbarkeit von E-Mails koennen wir keine Haftung 
fuer den Inhalt uebernehmen.
Ce message est confidentiel et peut être privilégié. Si vous n'êtes pas le 
destinataire prévu, nous te demandons avec bonté que pour satisfaire informez 
l'expéditeur. N'importe quelle diffusion non autorisée ou la copie de ceci est 
interdite. Ce message sert à l'information seulement et n'aura pas n'importe 
quel effet légalement obligatoire. Étant donné que les email peuvent facilement 
être sujets à la manipulation, nous ne pouvons accepter aucune responsabilité 
pour le contenu fourni.




 Date: Fri, 19 Jun 2009 08:20:47 +0200
 From: a...@ice-sa.com
 To: users@tomcat.apache.org
 Subject: Re: Sample program for testing http DELETE or PUT method in tomcat
 
 cleegt wrote:
  Dear All,
  
  Because of the security reason imposed by my company, I disabled http
  DELETE, PUT 

Re: Custom valve, how to change role?

2009-06-19 Thread Bruce Edge
On Thu, Jun 18, 2009 at 3:28 PM, Caldarale, Charles R 
chuck.caldar...@unisys.com wrote:

  From: Bruce Edge [mailto:bruce.e...@gmail.com]
  Subject: Custom valve, how to change role?
 
  ...or am I completely off in left field and should scrap
  this before someone gets hurt and just use securityfilter?

 If you really insist on differentiating internal and external requests,
 then quite likely you should just use securityfilter - it should be a *lot*
 easier.  Writing a custom valve ties you into Tomcat, and possibly a
 particular version of Tomcat, since valves are not part of the servlet spec
 (filters are).

 If you really want to write a valve, look at the source for something that
 is related to what you want, such as:
  org/apache/catalina/authenticator/SingleSignOn.java
 and related files.

 Personally, I'd just have the internal requests authenticate like everyone
 else.


I'm starting to agree with you. This was a relatively simple thing back when
I was using gSOAP. Since everything else is so much easier in the java world
I assumed this would be too. In any case, thanks for all the pointers.

-Bruce



  - Chuck


 THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
 MATERIAL and is thus for use only by the intended recipient. If you received
 this in error, please contact the sender and delete the e-mail and its
 attachments from all computers.


 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org




RE: APR Native library on tomcat 6

2009-06-19 Thread Caldarale, Charles R
 From: lmk [mailto:lotf...@yahoo.fr]
 Subject: APR Native library on tomcat 6
 
 export CATALINA_OPTS=$CATALINA_OPTS -
 Djava.library.path=/usr/local/apr/lib

Show us what's actually in /usr/local/apr/lib.

 And I still get the error:
 
 The APR based Apache Tomcat Native library which allows optimal
 performance in production environments was not found on the 
 java.library.path:

Show us the next line so we can see what the JVM thinks the value of 
java.library.path is.

 any idea about this issue?

Are you mixing 32- and 64-bit modes?  If you're running a 64-bit JVM, you'll 
need a 64-bit .so file (and vice versa).

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Jsp working fine from tomcat, but displaying source when accessed through apache (Only on Firefox)

2009-06-19 Thread newToMina

Mark,

I changed JKMount as you suggested. But firefox is still displaying the
source when accessing through apache. Direct tomcat access displays fine.
Firefox is rendering the page as follows:

Direct from tomcat (http://server:8080/appname/servlet/Controller)
Type : text/html
Render Mode: Standards compliance mode

Access tomcat through apache (http://server/appname/servlet/Controller)
Type : text/plain
Render Mode: Quirks mode

Could any one please help me with this?


markt-2 wrote:
 
 newToMina wrote:
 Mark, could you please explain it a little more detail and provide an
 example
 of the proper JKmount entries. Thanks in advance ...
 
 Replace what you have previously with:
 
 JkMount /appname/* tomcat5
 JkMount /appname   tomcat5
 
 Note this means you do not use the Alias or Directory settings you had
 previously.
 
 Mark
 
 
 
 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org
 
 
 

-- 
View this message in context: 
http://www.nabble.com/Jsp-working-fine-from-tomcat%2C-but-displaying-source-when-accessed-through-apache-%28Only-on-Firefox%29-tp22931646p24111800.html
Sent from the Tomcat - User mailing list archive at Nabble.com.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



RE: APR Native library on tomcat 6

2009-06-19 Thread lmk

here tomcat log:

INFO: The APR based Apache Tomcat Native library which allows optimal
performance in production environments was not found on the
java.library.path:
/usr/java/jdk1.5.0_11/jre/lib/i386/server:/usr/java/jdk1.5.0_11/jre/lib/i386:/usr/java/jdk1.5.0_11/jre/../lib/i386:/usr/local/apr/lib:
19 juin 2009 11:48:55 org.apache.coyote.http11.Http11Protocol init


I complied apr sources, I dont used binnaries.



Caldarale, Charles R wrote:
 
 From: lmk [mailto:lotf...@yahoo.fr]
 Subject: APR Native library on tomcat 6
 
 export CATALINA_OPTS=$CATALINA_OPTS -
 Djava.library.path=/usr/local/apr/lib
 
 Show us what's actually in /usr/local/apr/lib.
 
 And I still get the error:
 
 The APR based Apache Tomcat Native library which allows optimal
 performance in production environments was not found on the 
 java.library.path:
 
 Show us the next line so we can see what the JVM thinks the value of
 java.library.path is.
 
 any idea about this issue?
 
 Are you mixing 32- and 64-bit modes?  If you're running a 64-bit JVM,
 you'll need a 64-bit .so file (and vice versa).
 
  - Chuck
 
 
 THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
 MATERIAL and is thus for use only by the intended recipient. If you
 received this in error, please contact the sender and delete the e-mail
 and its attachments from all computers.
 
 
 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org
 
 
 

-- 
View this message in context: 
http://www.nabble.com/APR-Native-library-on-tomcat-6-tp24107914p24112085.html
Sent from the Tomcat - User mailing list archive at Nabble.com.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



RE: APR Native library on tomcat 6

2009-06-19 Thread Caldarale, Charles R
 From: lmk [mailto:lotf...@yahoo.fr]
 Subject: RE: APR Native library on tomcat 6
 
 INFO: The APR based Apache Tomcat Native library which allows optimal
 performance in production environments was not found on the
 java.library.path:
 /usr/java/jdk1.5.0_11/jre/lib/i386/server:/usr/java/jdk1.5.0_11/jre/lib
 /i386:/usr/java/jdk1.5.0_11/jre/../lib/i386:/usr/local/apr/lib:

Ok, that looks reasonable, but you still didn't show us what's actually in 
/usr/local/apr/lib.

 I complied apr sources, I dont used binnaries.

Not really relevant.  If you are running a 64-bit JVM, then you must compile 
APR for 64-bit mode; likewise, if you are running a 32-bit JVM, you must 
compile APR for 32-bit mode.  Doing java -version (without the quotes) will 
show you the mode the JVM is running in.

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



RE: APR Native library on tomcat 6

2009-06-19 Thread lmk

 
apr.exp
  libapr-1.a 
that's all:
 
libapr-1.la
  libapr-1.so 
 libapr-1.so.0  
libapr-1.so.0.3.5 
 pkgconfig




Caldarale, Charles R wrote:
 
 From: lmk [mailto:lotf...@yahoo.fr]
 Subject: RE: APR Native library on tomcat 6
 
 INFO: The APR based Apache Tomcat Native library which allows optimal
 performance in production environments was not found on the
 java.library.path:
 /usr/java/jdk1.5.0_11/jre/lib/i386/server:/usr/java/jdk1.5.0_11/jre/lib
 /i386:/usr/java/jdk1.5.0_11/jre/../lib/i386:/usr/local/apr/lib:
 
 Ok, that looks reasonable, but you still didn't show us what's actually in
 /usr/local/apr/lib.
 
 I complied apr sources, I dont used binnaries.
 
 Not really relevant.  If you are running a 64-bit JVM, then you must
 compile APR for 64-bit mode; likewise, if you are running a 32-bit JVM,
 you must compile APR for 32-bit mode.  Doing java -version (without the
 quotes) will show you the mode the JVM is running in.
 
  - Chuck
 
 
 THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
 MATERIAL and is thus for use only by the intended recipient. If you
 received this in error, please contact the sender and delete the e-mail
 and its attachments from all computers.
 
 
 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org
 
 
 

-- 
View this message in context: 
http://www.nabble.com/APR-Native-library-on-tomcat-6-tp24107914p24112425.html
Sent from the Tomcat - User mailing list archive at Nabble.com.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



RE: APR Native library on tomcat 6

2009-06-19 Thread Caldarale, Charles R
 From: lmk [mailto:lotf...@yahoo.fr]
 Subject: RE: APR Native library on tomcat 6
 
 apr.exp
   libapr-1.a
 that's all:
 
 libapr-1.la
   libapr-1.so
  libapr-1.so.0
 libapr-1.so.0.3.5
  pkgconfig

The above is rather cryptic; which of the above are regular files, which are 
directories?  What is the indentation you're using supposed to represent?  What 
does that's all mean?  What is the full path to libapr-1.so?  (I don't have a 
Linux system readily available at the moment to experiment with, so you're 
going to need to be precise.)

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: APR Native library on tomcat 6

2009-06-19 Thread Thomas Chabaud

lmk a écrit :

Hi all,

I have installed apr native library, open ssl; using :./configure:

./configure --with-apr=/usr/local/apr 
--with-java-home=/usr/java/jdk1.5.0_11  --with-ssl=/usr/local/ssl 
--prefix=/usr/tomcat/apache-tomcat-6.0.18


I added to catalina_opts  java.library definition:

export CATALINA_OPTS=$CATALINA_OPTS -Djava.library.path=/usr/local/apr/lib

And I still get the error:

The APR based Apache Tomcat Native library which allows optimal performance
in production environments was not found on the java.library.path:

any idea about this issue?

thanks.


Have you tried an /sbin/ldconfig, then restart Tomcat ?




Ce message est protégé par les règles relatives au secret des correspondances. 
Il est donc établi à destination exclusive de son destinataire. Celui-ci peut 
donc contenir des informations confidentielles. La divulgation de ces 
informations est à ce titre rigoureusement interdite. Si vous avez reçu ce 
message par erreur, merci de le renvoyer à l'expéditeur dont l'adresse e-mail 
figure ci-dessus et de détruire le message ainsi que toute pièce jointe.

This message is protected by the secrecy of correspondence rules. Therefore, 
this message is intended solely for the attention of the addressee. This 
message may contain privileged or confidential information, as such the 
disclosure of these informations is strictly forbidden. If, by mistake, you 
have received this message, please return this message to the addressser whose 
e-mail address is written above and destroy this message and all files attached.



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



RE: APR Native library on tomcat 6

2009-06-19 Thread lmk


$ls /usr/local/apr/lib 

apr.exp  libapr-1.a  libapr-1.la  libapr-1.so  libapr-1.so.0 
libapr-1.so.0.3.5  pkgconfig

only pkgconfig is a directory

hop its more clear..



Caldarale, Charles R wrote:
 
 From: lmk [mailto:lotf...@yahoo.fr]
 Subject: RE: APR Native library on tomcat 6
 
 apr.exp
   libapr-1.a
 that's all:
 
 libapr-1.la
   libapr-1.so
  libapr-1.so.0
 libapr-1.so.0.3.5
  pkgconfig
 
 The above is rather cryptic; which of the above are regular files, which
 are directories?  What is the indentation you're using supposed to
 represent?  What does that's all mean?  What is the full path to
 libapr-1.so?  (I don't have a Linux system readily available at the moment
 to experiment with, so you're going to need to be precise.)
 
  - Chuck
 
 
 THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
 MATERIAL and is thus for use only by the intended recipient. If you
 received this in error, please contact the sender and delete the e-mail
 and its attachments from all computers.
 
 
 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org
 
 
 

-- 
View this message in context: 
http://www.nabble.com/APR-Native-library-on-tomcat-6-tp24107914p24112938.html
Sent from the Tomcat - User mailing list archive at Nabble.com.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Jsp working fine from tomcat, but displaying source when accessed through apache (Only on Firefox)

2009-06-19 Thread André Warnier

newToMina wrote:

Mark,

I changed JKMount as you suggested. But firefox is still displaying the
source when accessing through apache. Direct tomcat access displays fine.
Firefox is rendering the page as follows:

Direct from tomcat (http://server:8080/appname/servlet/Controller)
Type : text/html
Render Mode: Standards compliance mode

Access tomcat through apache (http://server/appname/servlet/Controller)
Type : text/plain
Render Mode: Quirks mode

Could any one please help me with this?

Somehow, I get the feeling that you have done what you should /never/ 
do, which is to allow Apache to access the Tomcat files directly.

Where does your Apache DocumentRoot point to ?
Or what Alias(es) have you used ?
To prove this point :
- turn off Tomcat
- re-try your URL http://server/appname/servlet/Controller...

are you still getting something ?


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: APR Native library on tomcat 6

2009-06-19 Thread Mladen Turk

lmk wrote:

Hi all,

I have installed apr native library, open ssl; using :./configure:

./configure --with-apr=/usr/local/apr 
--with-java-home=/usr/java/jdk1.5.0_11  --with-ssl=/usr/local/ssl 
--prefix=/usr/tomcat/apache-tomcat-6.0.18


I added to catalina_opts  java.library definition:

export CATALINA_OPTS=$CATALINA_OPTS -Djava.library.path=/usr/local/apr/lib



You are missing the openssl library path as well
Adding to the java.library.path is not enough, try:

export LD_LIBRARY_PATH=/usr/local/apr/lib:/usr/local/ssl/lib
./catalina.sh run

Regards
--
^(TM)

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: APR Native library on tomcat 6

2009-06-19 Thread lmk

yes but nothing changes.




Thomas Chabaud-3 wrote:
 
 lmk a écrit :
 Hi all,
 
 I have installed apr native library, open ssl; using :./configure:
 
 ./configure --with-apr=/usr/local/apr 
 --with-java-home=/usr/java/jdk1.5.0_11  --with-ssl=/usr/local/ssl 
 --prefix=/usr/tomcat/apache-tomcat-6.0.18
 
 I added to catalina_opts  java.library definition:
 
 export CATALINA_OPTS=$CATALINA_OPTS
 -Djava.library.path=/usr/local/apr/lib
 
 And I still get the error:
 
 The APR based Apache Tomcat Native library which allows optimal
 performance
 in production environments was not found on the java.library.path:
 
 any idea about this issue?
 
 thanks.
 
 Have you tried an /sbin/ldconfig, then restart Tomcat ?
 
 
 
 
 Ce message est protégé par les règles relatives au secret des
 correspondances. Il est donc établi à destination exclusive de son
 destinataire. Celui-ci peut donc contenir des informations
 confidentielles. La divulgation de ces informations est à ce titre
 rigoureusement interdite. Si vous avez reçu ce message par erreur, merci
 de le renvoyer à l'expéditeur dont l'adresse e-mail figure ci-dessus et de
 détruire le message ainsi que toute pièce jointe.
 
 This message is protected by the secrecy of correspondence rules.
 Therefore, this message is intended solely for the attention of the
 addressee. This message may contain privileged or confidential
 information, as such the disclosure of these informations is strictly
 forbidden. If, by mistake, you have received this message, please return
 this message to the addressser whose e-mail address is written above and
 destroy this message and all files attached.
 
 
 
 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org
 
 
 

-- 
View this message in context: 
http://www.nabble.com/APR-Native-library-on-tomcat-6-tp24107914p24113296.html
Sent from the Tomcat - User mailing list archive at Nabble.com.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: APR Native library on tomcat 6

2009-06-19 Thread lmk

nothing changes even using LD_LIBRARY_PATH




mturk wrote:
 
 lmk wrote:
 Hi all,
 
 I have installed apr native library, open ssl; using :./configure:
 
 ./configure --with-apr=/usr/local/apr 
 --with-java-home=/usr/java/jdk1.5.0_11  --with-ssl=/usr/local/ssl 
 --prefix=/usr/tomcat/apache-tomcat-6.0.18
 
 I added to catalina_opts  java.library definition:
 
 export CATALINA_OPTS=$CATALINA_OPTS
 -Djava.library.path=/usr/local/apr/lib
 
 
 You are missing the openssl library path as well
 Adding to the java.library.path is not enough, try:
 
 export LD_LIBRARY_PATH=/usr/local/apr/lib:/usr/local/ssl/lib
 ./catalina.sh run
 
 Regards
 -- 
 ^(TM)
 
 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org
 
 
 

-- 
View this message in context: 
http://www.nabble.com/APR-Native-library-on-tomcat-6-tp24107914p24113862.html
Sent from the Tomcat - User mailing list archive at Nabble.com.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat Comet and threading?

2009-06-19 Thread Filip Hanik - Dev Lists

You can do the actions on the worker thread or on your on thread.
You can read non blocking when you receive a READ event by calling 
available()0 before you do a read.
Writes are blocking when the TCP send buffer fills up, just like a 
regular servlet


Filip

Chris Markle wrote:

Say I am running the NIO connector and using Comet by my servlet
implementing CometProcessor... What is the relationship between my
servlet, threading and what is blocking vs. non-blocking? I am trying
to understand this better so I can see where I might want to use my
own threads or not. If I hit my servlet with a lot of requests, will
my event() method always be running on a single thread? If it runs on
multiple threads, what configuration parameter if any controls how
many of those threads there are? I presume writes from the servlet
back to the client may block - is this correct?

Thanks in advance...

Chris

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


  



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: APR Native library on tomcat 6

2009-06-19 Thread Brian Millett
On Fri, 2009-06-19 at 02:05 -0700, lmk wrote:
 --prefix=/usr/tomcat/apache-tomcat-6.0.18


I'd look where you told it to go. 
-- 
Brian Millett - [ Sinclair (re: The Line), The Gathering]
The sky was full of stars and every star an exploding ship...one of ours.



signature.asc
Description: This is a digitally signed message part


Re: Reading POSTed data

2009-06-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

André,

As fun as beating a dead horse is...

On 6/17/2009 6:28 PM, André Warnier wrote:
 My point (awaiting a more expert opinion still), is that I believe that
 the way the servlet spec is written, you may very well get away with it
 under one servlet container, but not under another.

The servlet spec is very clear about when the request is consumed to
fulfill a getParameter call and when the request is specifically /not/
consumed.

 As an aside : in your case, there is also not much stopping you from
 sending your XML body in a way guaranteed to work in all cases.
 You could send it as
 name= all your XML, properly URL-encoded ..

If you have huge documents, this is a bad idea, because it requires that
the entire XML document be loaded into a single string in memory in
order to be manipulated. If you have a multi-megabyte document coming
in, reading it into a single String is a sure way to make your
application unstable.

A better way is to stream the XML document through a SAX parser, doing
whatever processing is necessary. This is /not possible/ if you force
the container to load the entire string via getParameter.

 Then it would work also with getParameters().

Note that Kyle was never trying to use getParameter. He was always
trying to read the body himself. He was just doing it wrong :)

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAko77tEACgkQ9CaO5/Lv0PDbEwCgp0KagaG8ravHan0/oFISPQp1
DO4AoL215X+2bSaa+VfIHeE5Wx1HDoeu
=WCaV
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Reading POSTed data

2009-06-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

André,

On 6/17/2009 6:42 PM, André Warnier wrote:
 .. just don't do any getParameter() with your stuff.
 That, I believe, /may/ still get you in trouble.
 But I'm sure by now Chuck is already checking the Tomcat code of
 getParameter(), to see if that's the case.

Still no problem: the spec says that if the Content-Type is
application/xml (or whatever /isn't/ application/x-www-form-urlencoded),
the request body will be ignored and available for the servlet to read.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAko777gACgkQ9CaO5/Lv0PCtCACfXCaHl9snXTYSx2D0cCojEfMK
bN4AnApmbvvRicpbrt3+FB8Mmde6i0YE
=v0RX
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



RE: Reading POSTed data

2009-06-19 Thread Caldarale, Charles R
 From: Christopher Schultz [mailto:ch...@christopherschultz.net]
 Subject: Re: Reading POSTed data
 
 The servlet spec is very clear about when the request is consumed to
 fulfill a getParameter call and when the request is specifically /not/
 consumed.

What I find problematic is that the spec gives no hint about how to process 
POST data that is not parameterized.  Lack of mentioning any alternative gives 
the impression that parameterization is the only way of handling it, whereas 
real-world practice is quite different.

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.



Re: Serving images from classes directory

2009-06-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Susan,

On 6/18/2009 10:57 AM, Susan G. Conger wrote:
 I actually was thinking about doing it that way.  But I was wondering about
 the overhead.  I wish I knew how they were serving up the .html files in the
 class package.

Just follow the code: you have everything you need to know right there
in your HTML files and your web.xml. What is the URL you use to retrieve
an HTML file from the server? What does the mapping in web.xml say will
handle that URL?

You only have two mappings: /servlet/* (calls invoker, which will
translate the URL into a package + class that will be invoked... note
that this is considered insecure and rarely used by competent webapp
designers these days) and /servletToJsp (God only knows what that one does).

If the URL doesn't match either of those patterns, then it's being
served by the DefaultServlet, which just served static pages and won't
allow you to serve content from META-INF/* or WEB-INF/*. So, either you
have a crazy URL to access those files (and can probably use another
crazy URL to access /your/ files), or you are confused about which
web.xml file applies to your webapp, or you're just totally lying.

I suspect the first or second possibilities are most likely.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAko78ZUACgkQ9CaO5/Lv0PBDTwCgi3FwWpSalKXoQ2NPOlKMAlUU
QL4AoKyokJkc1V2M4J2L+B5L6mCUFJNI
=uHIx
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat Comet and threading?

2009-06-19 Thread Chris Markle
Filip,

Thanks for the reply.

 You can do the actions on the worker thread or on your own thread.

Can you clarify your terminology here please? Is the worker thread
then one where the event() method is running? Can there be more than
one of those threads that are running the event() method for one
servlet, so that under load I'll see my one servlet's event() method
running on more than one thread? If this is the case, what
configuration items control this threading?

 You can read non blocking when you receive a READ event by calling 
 available()0 before you do a read.

When handling READ events, can I do one read before checking
available()0 or is it possible that READ may have fired but
available()==0? I ask because I think I saw at least one sample where
one read is done before checking available()0...

Thanks in advance!

Chris

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Serving images from classes directory

2009-06-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Susan,

On 6/18/2009 8:13 AM, Susan G. Conger wrote:
 This is a windows box so I can't just
 put links in the other area.

mklink.exe? Why does nobody think that NTFS supports links?

 I actually have to move or copy the pieces.
 Having multiple copies of the same objects is not a fix because they have to
 be kept up to date.

rsync?

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAko78hsACgkQ9CaO5/Lv0PArNACfTFGqvGA0cXiuSFMrrcuDkhVb
KmsAnjSC4B9D4o3CYj00NuQfXCjnMVjN
=Wt3v
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Reading POSTed data

2009-06-19 Thread Alan Chaney



Caldarale, Charles R wrote:

From: Christopher Schultz [mailto:ch...@christopherschultz.net]
Subject: Re: Reading POSTed data

The servlet spec is very clear about when the request is consumed to
fulfill a getParameter call and when the request is specifically /not/
consumed.


What I find problematic is that the spec gives no hint about how to process 
POST data that is not parameterized.  Lack of mentioning any alternative gives 
the impression that parameterization is the only way of handling it, whereas 
real-world practice is quite different.

 - Chuck

I have an application which extensively uses message data in POST 
requests so I was a bit concerned by your comment above.



However, P36 of my copy of the 2.4 servlet spec (sec SRV 4.1.1) says
If [the POST Form data conditions] are not met and the post form data 
is not included in the parameter set, the post data must still be 
available to the servet via the request object's input stream.


I don't want to appear picky, but that doesn't actually seem that 
problematic. If you don't set the content type as 
application/x-ww-form-urlencoded then you should be able to read it via 
the input stream


Regards

Alan Chaney





THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.


!DSPAM:4a3bf2e676342136417547!



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Redeploy application

2009-06-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Timo,

On 6/18/2009 4:44 AM, Timo Meinen | mindmatters wrote:
 !-- Starts Tomcat --
 !-- Variable 'server.missing' has to be set via 'tomcat-alive'--
 target name=tomcat-start depends=tomcat-alive if=server.missing

I like mine better:

exec os=Linux executable=${app.tomcat-home}/bin/catalina.sh
  env key=JAVA_HOME value=${app.java-home} /
  env key=CATALINA_BASE value=${app.home.dir} /

  arg value=start /
/exec

!-- Separate script for win32 --
exec os=Windows 2000, Windows XP
 executable=${app.tomcat-home}/bin/catalina.bat
  env key=JAVA_HOME value=${app.java-home} /
  env key=CATALINA_BASE value=${app.home.dir} /

  arg value=start /
/exec

Why bother setting all those jvmargs that catalina.sh/bat already knows
how to do?

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAko7/KEACgkQ9CaO5/Lv0PDYngCeO/xJAt/9MmTWCGVlIeGyd3EL
pm8An1d/maqeKm1BYMheP9K1AS4yXT6E
=zBVS
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



RE: net stop tomcat6 service hangs on Windows 2008 (64-bit)

2009-06-19 Thread Matt Sullivan
 Ok, rules that out.  Do any of your webapps make use of JNI?  Might want
to use Process Explorer to see what's still going on inside Tomcat.
 
  - Chuck

No JNI.

The process dump immediately below shows JVM still loaded, etc.  I then
drill into some of the threads via Process Explorer further down.  Sorry for
length of this post, not sure what would help / not help, but I didn't spot
anything obvious...

1548 tomcat6.exe 
   CWD: C:\Program Files\Apache Software Foundation\Tomcat 6.0\
   CmdLine: C:\Program Files\Apache Software Foundation\Tomcat
6.0\bin\tomcat6.exe //RS//Tomcat6
   VirtualSize:   2079048 KB   PeakVirtualSize:   2088660 KB
   WorkingSetSize:817876 KB   PeakWorkingSetSize:818400 KB
   NumberOfThreads: 34
   4740 Win32StartAddr:0x LastErr:0x State:Waiting   
   2548 Win32StartAddr:0x LastErr:0x State:Waiting   
   1124 Win32StartAddr:0x LastErr:0x State:Waiting   
   5936 Win32StartAddr:0x LastErr:0x State:Waiting   
   6004 Win32StartAddr:0x LastErr:0x State:Waiting   
   7148 Win32StartAddr:0x LastErr:0x State:Waiting   
   4880 Win32StartAddr:0x LastErr:0x State:Waiting   
   7152 Win32StartAddr:0x LastErr:0x State:Waiting   
   5764 Win32StartAddr:0x LastErr:0x State:Waiting   
   2320 Win32StartAddr:0x LastErr:0x State:Waiting   
   4820 Win32StartAddr:0x LastErr:0x0057 State:Waiting   
   5604 Win32StartAddr:0x LastErr:0x State:Waiting   
   5572 Win32StartAddr:0x LastErr:0x State:Waiting   
   6996 Win32StartAddr:0x LastErr:0x State:Waiting   
   6992 Win32StartAddr:0x LastErr:0x State:Waiting   
   6916 Win32StartAddr:0x LastErr:0x State:Waiting   
   7004 Win32StartAddr:0x LastErr:0x State:Waiting   
   7016 Win32StartAddr:0x LastErr:0x State:Waiting   
   6900 Win32StartAddr:0x LastErr:0x State:Waiting   
   1212 Win32StartAddr:0x LastErr:0x State:Waiting   
   4584 Win32StartAddr:0x LastErr:0x State:Waiting   
   4764 Win32StartAddr:0x LastErr:0x State:Waiting   
   2592 Win32StartAddr:0x LastErr:0x State:Waiting   
   7144 Win32StartAddr:0x LastErr:0x State:Waiting   
   1864 Win32StartAddr:0x LastErr:0x State:Waiting   
   6692 Win32StartAddr:0x LastErr:0x State:Waiting   
   2944 Win32StartAddr:0x LastErr:0x State:Waiting   
   5588 Win32StartAddr:0x LastErr:0x State:Waiting   
   1464 Win32StartAddr:0x LastErr:0x State:Waiting   
   2604 Win32StartAddr:0x LastErr:0x State:Waiting   
   6388 Win32StartAddr:0x LastErr:0x State:Waiting   
   2116 Win32StartAddr:0x LastErr:0x State:Waiting   
   1984 Win32StartAddr:0x LastErr:0x State:Waiting   
   5716 Win32StartAddr:0x LastErr:0x0057 State:Waiting   
2.0.4.0 shp  0x0040  C:\Program Files\Apache Software
Foundation\Tomcat 6.0\bin\tomcat6.exe
 6.0.6001.18000 shp  0x773F  C:\Windows\system32\ntdll.dll
 6.0.6001.18215 shp  0x771F  C:\Windows\system32\kernel32.dll
 6.0.6001.18000 shp  0x7732  C:\Windows\system32\USER32.dll
 6.0.6001.18159 shp  0x07FEFF18  C:\Windows\system32\GDI32.dll
 6.0.6001.22181 shp  0x07FEFF40  C:\Windows\system32\ADVAPI32.dll
 6.0.6001.18247 shp  0x07FEFDF6  C:\Windows\system32\RPCRT4.dll
 7.0.6001.18000 shp  0x07FEFE10  C:\Windows\system32\msvcrt.dll
 6.0.6001.18167 shp  0x07FEFE52  C:\Windows\system32\SHELL32.dll
 6.0.6001.18000 shp  0x07FEFDB4  C:\Windows\system32\SHLWAPI.dll
 6.0.6001.18000 shp  0x07FEFDF3  C:\Windows\system32\IMM32.DLL
 6.0.6001.18000 shp  0x07FEFF24  C:\Windows\system32\MSCTF.dll
 6.0.6001.18000 shp  0x07FEFDC2  C:\Windows\system32\LPK.DLL
 1.626.6001.18000 s  0x07FEFE48  C:\Windows\system32\USP10.dll
 6.10.6001.18000 sh  0x07FEFC24
C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6
.0.6001.18000_none_152e7382f3bd50c6\comctl32.dll
  14.0.0.16 shp  0x6D89  C:\Program
Files\Java\jdk1.6.0_14\jre\bin\server\jvm.dll
 6.0.6001.18000 shp  0x07FEFBA3  C:\Windows\system32\WINMM.dll
 6.0.6001.18000 shp  0x07FEFF51  C:\Windows\system32\ole32.dll
 6.0.6001.18000 shp  0x07FEFE3A  C:\Windows\system32\OLEAUT32.dll
 4.2.5406.0 shp  0x07FEFB92  C:\Windows\system32\OLEACC.dll
  6.0.140.8 shp  0x6D80  C:\Program
Files\Java\jdk1.6.0_14\jre\bin\verify.dll
  6.0.140.8 shp  0x6D45  C:\Program
Files\Java\jdk1.6.0_14\jre\bin\java.dll
  6.0.140.8 shp  0x6D3B  C:\Program
Files\Java\jdk1.6.0_14\jre\bin\hpi.dll
 

RE: Reading POSTed data

2009-06-19 Thread Caldarale, Charles R
 From: Alan Chaney [mailto:a...@compulsivecreative.com]
 Subject: Re: Reading POSTed data
 
 I don't want to appear picky, but that doesn't actually 
 seem that problematic. If you don't set the content type
 as application/x-ww-form-urlencoded then you should be
 able to read it via the input stream

Agreed; I must have missed that sentence when I originally went exploring when 
the question came up.

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.



Re: Pointers on diagnosing session and thread hangs

2009-06-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Pete,

On 6/18/2009 10:52 AM, Pete Helgren wrote:
 Thanks.  Looking at the dump I can see there is an issue with a DB
 manager we wrote (Blocking).  I'll investigate further.

It's amazing what you can learn just from looking at a few thread dumps
of your running application. You may have already identified a big
problem (contended resource is stalling) which may be contributing to
your observations. On the other hand, it could be an entirely different
problem.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAko7/hkACgkQ9CaO5/Lv0PCvEwCgmMTtC8ajD4VUoh0SeFCbzTuR
5pQAoKf9xUGevrvAvRFhldgRnpkk+uLf
=mWok
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Session replication fails on ReplicationValve invocation

2009-06-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

David,

On 6/18/2009 12:03 AM, David Nillesen wrote:
 I think I may have sorted the problem. Would that have occurred if I
 was asking for a webpage without a context? i.e. just hitting some
 undefined area?

All requests are handled by /some/ context. If the URL doesn't match any
context, it will be handled by the ROOT context. If no ROOT context is
deployed, Tomcat will give you a Bad Request response code (IIRC).

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAko7/n0ACgkQ9CaO5/Lv0PB/mACeIBPpCjlxFDOfCC1qcUTRi/cT
vQMAn3hMJCV+Y87dPneB9CtJb/zMEYJv
=NjdT
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Stranded Threads in Standalone Tomcat 5.5.25 Server

2009-06-19 Thread Bontempi, Chris
I know this problem sounds familiar, but I can't find anything in the
archives that quite fits what's going on.  We're running a 5.5.25 Tomcat
server on HP/UX 11.11.  We have several installations like this, and
they are all functioning properly, without this particular problem,
except one.  Our installation process is comprehensive, so it's unlikely
there's a minor piece that is different, but we believe anything is
possible; however, we're completely stuck on what to look at that we
haven't already looked at, and we believe we have run through everything
we can think of.
 
The problem is a steadily increasing number of threads in the tomcat
server, all executing the same Axis 2.0 service -- a know service we
wrote, the exact same code that works properly on many other servers on
a total of three different platforms.  That service is exactly the same
on every system we have installed it on, the Java versions (HP/UX JVM
1.4.2_13) and operating system versions, the Tomcat versions and the
Axis 2 versions are all the same.  But only on one server do threads
linger, until the limit is reached and the server stops accepting
connections.  The ports they are accessing appear in varying states,
including ESTABLISHED, TIME_WAIT and FIN_WAIT_2, although we have
managed to reduce the last state by implementing a 60-second timeout for
the FIN_WAIT_2 state.  If we bump maxThreads in server.xml, it only
delays the limit being reached.  Changing connectionTimeout has no
effect, as most threads live far beyond the default setting anyway.
 
Again, we have checked HP/UX, Tomcat, Java, Axis2 and our application
software, and these things are all the same on every system.  We have
also tried replacing Tomcat, Axis2 and our software with known fresh
installs, but the behavior hasn't changed.  We can't find anything that
fits on this list archive, nor with google.  Can anyone think of what
other parts of the system I can look at, or what else I can try in order
to diagnose the issue here?  We have tried looking at Tomcat with lsof,
but I can't find anything helpful there.  I have read about thread
dumps, but I'm not sure how to do that or what to make of them, but I'm
going to read up on that next.  Again, this does not sound like a known
problem, because we're not using Apache or AJP.
 
Please send any constructive responses to chris.bonte...@mckesson.com
mailto:chris.bonte...@mckesson.com 
 
Thanks and regards,
 
Chris
 
Chris Bontempi
Resource Management Solutions
McKesson Provider Technologies
Hamden Home Office (203) 288-3491
Hadley Office (413) 587-6529
 
Confidentiality Notice: This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure, or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.
 


Access to configuration values

2009-06-19 Thread Oliver Block
Hello everybody,

I started to use Tomcat 6 for a mail web application - which is coded in php 
at the moment. I followed the JNDI-Resources HOW-TO to make use of JavaMail 
Sessions. As recommended under 3. Configure Tomcat's Resource Factory I 
copied the Resource tag to my context.xml in the web application project. 

Resource name=mail/Session auth=Container
type=javax.mail.Session
mail.smtp.host=localhost/

How cat I make use of mail.smtp.host in my code, in oder to avoid hard-coding 
the hostname?

And, is it also ok to specify an imap store in the resource descriptor? If so, 
would it be 'mail.imap.store' ?

Best Regards,

Oliver Block


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



How does Tomcat handle a slow HTTP DoS?

2009-06-19 Thread Brett
It is described here:

http://ha.ckers.org/slowloris/

Basically the attacker invokes thousands of connections, slowly sending
header after header until the server has exhausted resources, most
likely threads. Can tomcat use nio to process the headers then create a
thead and execute the webapp?



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org