el-api2.2 is not compatible with tomcat6 and jsp
Hi! Please see my post here: http://old.nabble.com/using-new-el-api-2.2-with-myfaces2.0-and-tomcat6-ts28649111.html and actually i saw here: http://old.nabble.com/JSP-2.2---EL-2.2-implementation-complete-ts27169437.html that is shoule be completed! could you please help? -- View this message in context: http://old.nabble.com/el-api2.2-is-not-compatible-with-tomcat6-and-jsp-tp28655022p28655022.html Sent from the Tomcat - User mailing list archive at Nabble.com. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: el-api2.2 is not compatible with tomcat6 and jsp
2010/5/24 deligeli odel...@sintecmedia.com: actually i saw here: http://old.nabble.com/JSP-2.2---EL-2.2-implementation-complete-ts27169437.html that is shoule be completed! The JSP 2.2 EL 2.2 implementation complete thread talks about Tomcat 7. Tomcat 6 implements JSP 2.1 only and cannot work with el-api2.2 Some candidate builds of Tomcat 7 are already available, but have not been released yet. You may participate in testing, see the dev@ list. http://marc.info/?l=tomcat-devm=127465909014120w=2 Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Javamelody
Hi, I have installed Javamelody version 1.15. In my catalina.out there appears error messages: GRAVE: Error filterStart 24-may-2010 13:46:13 org.apache.catalina.core.StandardContext start GRAVE: Falló en arranque del Contexto [/javamelody] debido a errores previos 24-may-2010 13:46:13 org.apache.catalina.loader.WebappClassLoader clearReferencesStopTimerThread GRAVE: A web application appears to have started a TimerThread named [javamelody javamelody] via the java.util.Timer API but has failed to stop it. To prevent a memory leak, the timer (and hence the associated thread) has been forcibly cancelled. What may be the problem? Thanks. Özgür Özdemircili http://www.acikkod.org Code so clean you could eat off it
Re: Javamelody
On 24/05/2010 12:48, Ozgur Ozdemircili wrote: Hi, I have installed Javamelody version 1.15. In my catalina.out there appears error messages: GRAVE: Error filterStart 24-may-2010 13:46:13 org.apache.catalina.core.StandardContext start GRAVE: Falló en arranque del Contexto [/javamelody] debido a errores previos For the previous errors, look in the localhost log 24-may-2010 13:46:13 org.apache.catalina.loader.WebappClassLoader clearReferencesStopTimerThread GRAVE: A web application appears to have started a TimerThread named [javamelody javamelody] via the java.util.Timer API but has failed to stop it. To prevent a memory leak, the timer (and hence the associated thread) has been forcibly cancelled. javamelody has a memory leak Mark - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Javamelody
On 24 May 2010 12:48, Ozgur Ozdemircili ozgur.ozdemirc...@gmail.com wrote: I have installed Javamelody version 1.15. In my catalina.out there appears error messages: [...] GRAVE: A web application appears to have started a TimerThread named [javamelody javamelody] via the java.util.Timer API but has failed to stop it. To prevent a memory leak, the timer (and hence the associated thread) has been forcibly cancelled. [...] Code so clean you could eat off it Your code may be clean, Javamelody's isn't ;-). Somewhere, it starts a timer thread and doesn't clear it up. Tomcat detects this case and cancels the timer, issuing a warning. You *could* leave this as-is, but it's difficult to know what else might be leaking within Javamelody. You might want to find out how to cancel Javamelody's timer thread, then use a lifecycle listener in your webapp to cancel the timer on appropriate lifecycle events. Or talk to the Javamelody team to find out how to cancel the timer at the appropriate time. - Peter
JAAS: why would I be getting a 403 after a Successfully passed all security constraints
I am trying to implement JAAS. I got a custom module written and it seems to work. FINE: Checking roles GenericPrincipal[dblock(Everyone,)] May 24, 2010 7:56:45 AM org.apache.catalina.realm.RealmBase hasRole FINE: Username dblock has role Everyone May 24, 2010 7:56:45 AM org.apache.catalina.realm.RealmBase hasResourcePermission FINE: Role found: Everyone May 24, 2010 7:56:45 AM org.apache.catalina.authenticator.AuthenticatorBase invoke FINE: Successfully passed all security constraints Nevertheless, I am still getting a 403 - Access to the specified resource (...) has been forbidden. Any ideas? Thx dB. dB. @ dblock.orghttp://www.dblock.org/ Moscow|Geneva|Seattle|New York
Re: Javamelody
For the record Just opened up a issue. Let`s see how it ends there: http://code.google.com/p/javamelody/issues/detail?id=25 Thanks. Özgür Özdemircili http://www.acikkod.org Code so clean you could eat off it On Mon, May 24, 2010 at 1:56 PM, Peter Crowther peter.crowt...@melandra.com wrote: On 24 May 2010 12:48, Ozgur Ozdemircili ozgur.ozdemirc...@gmail.com wrote: I have installed Javamelody version 1.15. In my catalina.out there appears error messages: [...] GRAVE: A web application appears to have started a TimerThread named [javamelody javamelody] via the java.util.Timer API but has failed to stop it. To prevent a memory leak, the timer (and hence the associated thread) has been forcibly cancelled. [...] Code so clean you could eat off it Your code may be clean, Javamelody's isn't ;-). Somewhere, it starts a timer thread and doesn't clear it up. Tomcat detects this case and cancels the timer, issuing a warning. You *could* leave this as-is, but it's difficult to know what else might be leaking within Javamelody. You might want to find out how to cancel Javamelody's timer thread, then use a lifecycle listener in your webapp to cancel the timer on appropriate lifecycle events. Or talk to the Javamelody team to find out how to cancel the timer at the appropriate time. - Peter
thread deadlock issue in WebappClassLoader (Tomcat 6.0.26)
Hi, We've been seeing the occasional deadlock in WebappClassLoader and upgraded to Tomcat 6.0.26 because of https://issues.apache.org/bugzilla/show_bug.cgi?id=48694. The fix in 48694 does not seem to have gotten rid of the deadlock altogether. Here are 2 threads that are deadlocked. Name: DefaultQuartzScheduler_Worker-10 State: BLOCKED on java.lang.str...@4352d9c0 owned by: DefaultQuartzScheduler_Worker-1 Total blocked: 17 Total waited: 152 Stack trace: org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader .java:1395) org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader .java:1361) java.lang.ClassLoader.loadClassInternal(ClassLoader.java:320) - locked org.apache.catalina.loader.webappclassloa...@7f1e1bbf java.lang.ClassLoader.defineClass1(Native Method) java.lang.ClassLoader.defineClass(ClassLoader.java:621) java.security.SecureClassLoader.defineClass(SecureClassLoader.java:124) org.apache.catalina.loader.WebappClassLoader.findClassInternal(WebappCla ssLoader.java:2527) - locked java.lang.str...@39f9e067 org.apache.catalina.loader.WebappClassLoader.findClass(WebappClassLoader .java:1010) org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader .java:1483) - locked java.lang.str...@39f9e067 org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader .java:1361) javax.mail.Session.getService(Session.java:765) javax.mail.Session.getStore(Session.java:579) javax.mail.Session.getStore(Session.java:541) javax.mail.Session.getStore(Session.java:520) com.capeclear.capeconnect.transports.email.server.AbstractMailProtocolRe ader.getStore(AbstractMailProtocolReader.java:138) com.capeclear.capeconnect.transports.email.server.AbstractMailProtocolRe ader.openFolder(AbstractMailProtocolReader.java:444) com.capeclear.capeconnect.transports.email.server.AbstractMailProtocolRe ader.getFolder(AbstractMailProtocolReader.java:181) com.capeclear.capeconnect.transports.email.server.AbstractMailProtocolRe ader.connect(AbstractMailProtocolReader.java:211) com.capeclear.capeconnect.transports.email.server.AbstractMailProtocolRe ader.connect(AbstractMailProtocolReader.java:194) com.capeclear.capeconnect.transports.email.server.MailReader.accessUnrea dMail(MailReader.java:48) com.capeclear.capeconnect.transport.email.EmailInScheduledServerTranspor t.execute(EmailInScheduledServerTransport.java:156) - locked com.capeclear.capeconnect.transport.email.EmailInScheduledServerTranspor t...@43fba7ed com.capeclear.scheduler.impl.QuartzJob.execute(QuartzJob.java:44) org.quartz.core.JobRunShell.run(JobRunShell.java:202) org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java :529) Name: DefaultQuartzScheduler_Worker-1 State: BLOCKED on org.apache.catalina.loader.webappclassloa...@7f1e1bbf owned by: DefaultQuartzScheduler_Worker-10 Total blocked: 26 Total waited: 153 Stack trace: java.lang.ClassLoader.checkCerts(ClassLoader.java:752) java.lang.ClassLoader.preDefineClass(ClassLoader.java:488) java.lang.ClassLoader.defineClass(ClassLoader.java:615) java.security.SecureClassLoader.defineClass(SecureClassLoader.java:124) org.apache.catalina.loader.WebappClassLoader.findClassInternal(WebappCla ssLoader.java:2527) - locked java.lang.str...@4352d9c0 org.apache.catalina.loader.WebappClassLoader.findClass(WebappClassLoader .java:1010) org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader .java:1483) - locked java.lang.str...@4352d9c0 org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader .java:1361) javax.mail.Session.getService(Session.java:765) javax.mail.Session.getStore(Session.java:579) javax.mail.Session.getStore(Session.java:541) javax.mail.Session.getStore(Session.java:520) com.capeclear.capeconnect.transports.email.server.AbstractMailProtocolRe ader.getStore(AbstractMailProtocolReader.java:138) com.capeclear.capeconnect.transports.email.server.AbstractMailProtocolRe ader.openFolder(AbstractMailProtocolReader.java:444) com.capeclear.capeconnect.transports.email.server.AbstractMailProtocolRe ader.getFolder(AbstractMailProtocolReader.java:181) com.capeclear.capeconnect.transports.email.server.AbstractMailProtocolRe ader.connect(AbstractMailProtocolReader.java:211) com.capeclear.capeconnect.transports.email.server.AbstractMailProtocolRe ader.connect(AbstractMailProtocolReader.java:194) com.capeclear.capeconnect.transports.email.server.MailReader.accessUnrea dMail(MailReader.java:48) com.capeclear.capeconnect.transport.email.EmailInScheduledServerTranspor t.execute(EmailInScheduledServerTransport.java:156) - locked com.capeclear.capeconnect.transport.email.EmailInScheduledServerTranspor t...@3ecddb79 com.capeclear.scheduler.impl.QuartzJob.execute(QuartzJob.java:44) org.quartz.core.JobRunShell.run(JobRunShell.java:202) org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java :529) The issue seems to be rare enough but the name.intern()
Re: thread deadlock issue in WebappClassLoader (Tomcat 6.0.26)
On 24.05.2010 14:08, PJ Fanning wrote: Hi, We've been seeing the occasional deadlock in WebappClassLoader and upgraded to Tomcat 6.0.26 because of https://issues.apache.org/bugzilla/show_bug.cgi?id=48694. The fix in 48694 does not seem to have gotten rid of the deadlock altogether. Could you please try the patch contained in http://svn.apache.org/viewvc?view=revisionrevision=941868, which was applied *after* 6.0.26? Regards, Rainer - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Question on workers.properties file
Ranier, Again, thanks for the reply below. Apparently I do not have something setup correctly because I cannot get a LOG file created when I execute a single request that is a valid login ID. I'm sure I've setup something incorrectly and any help/direction would be greatly appreciated. Here are my settings in the following files (server.xml, isapi_redirect.properties file, uriworkermap.properties file and workers.properties file): Server.xml: Service name=Catalina !--The connectors can use a shared executor, you can define one or more named thread pools-- !-- Executor name=tomcatThreadPool namePrefix=catalina-exec- maxThreads=150 minSpareThreads=4/ -- !-- A Connector represents an endpoint by which requests are received and responses are returned. Documentation at : Java HTTP Connector: /docs/config/http.html (blocking non-blocking) Java AJP Connector: /docs/config/ajp.html APR (HTTP/AJP) Connector: /docs/apr.html Define a non-SSL HTTP/1.1 Connector on port 8080 -- Connector port=9080 protocol=HTTP/1.1 connectionTimeout=2 redirectPort=8443 / !-- A Connector using the shared thread pool-- !-- Connector executor=tomcatThreadPool port=8080 protocol=HTTP/1.1 connectionTimeout=2 redirectPort=8443 / -- !-- Define a SSL HTTP/1.1 Connector on port 8443 This connector uses the JSSE configuration, when using APR, the connector should be using the OpenSSL style configuration described in the APR documentation -- !-- Connector port=8443 protocol=HTTP/1.1 SSLEnabled=true maxThreads=150 scheme=https secure=true clientAuth=false sslProtocol=TLS / -- !-- Define an AJP 1.3 Connector on port 8009 -- Connector port=8009 protocol=AJP/1.3 redirectPort=8443 tomcatAuthentication=false / !-- An Engine represents the entry point (within Catalina) that processes every request. The Engine implementation for Tomcat stand alone analyzes the HTTP headers included with the request, and passes them on to the appropriate Host (virtual host). Documentation at /docs/config/engine.html -- !-- You should set jvmRoute to support load-balancing via AJP ie : Engine name=Standalone defaultHost=localhost jvmRoute=jvm1 -- Engine name=Catalina defaultHost=localhost !--For clustering, please take a look at documentation at: /docs/cluster-howto.html (simple how to) /docs/config/cluster.html (reference documentation) -- !-- Cluster className=org.apache.catalina.ha.tcp.SimpleTcpCluster/ -- !-- The request dumper valve dumps useful debugging information about the request and response data received and sent by Tomcat. Documentation at: /docs/config/valve.html -- !-- Valve className=org.apache.catalina.valves.RequestDumperValve/ -- !-- This Realm uses the UserDatabase configured in the global JNDI resources under the key UserDatabase. Any edits that are performed against this UserDatabase are immediately available for use by the Realm. -- Realm className=org.apache.catalina.realm.UserDatabaseRealm resourceName=UserDatabase/ !-- Define the default virtual host Note: XML Schema validation will not work with Xerces 2.2. -- Host name=localhost appBase=webapps unpackWARs=true autoDeploy=true xmlValidation=false xmlNamespaceAware=false !-- SingleSignOn valve, share authentication between web applications Documentation at: /docs/config/valve.html -- !-- Valve className=org.apache.catalina.authenticator.SingleSignOn / -- !-- Access log processes all example. Documentation at: /docs/config/valve.html -- !-- Valve className=org.apache.catalina.valves.AccessLogValve directory=logs prefix=localhost_access_log. suffix=.txt pattern=common resolveHosts=false/ -- /Host /Engine /Service In my isapi_redirect.properties file: # Configuration file for the Jakarta ISAPI Redirector # The path to the ISAPI Redirector Extension, relative to the website # This must be in a virtual directory with executive privileges extension_uri=/jakarta/isapi_redirect.dll # Full path to the log file for the ISAPI Redirector log_file=c:\server\Tomcat 6.0\logs\iisapi.log # Log level (debug, info, warn, error or trace) log_level=trace # Full path to the workers.properties file worker_file=c:\server\Tomcat 6.0\conf\workers.properties # Full path to the uriworkermap.properties file worker_mount_file=c:\server\Tomcat 6.0\conf\uriworkermap.properties In my uriworkermap.properties file: #
Re: JAAS: why would I be getting a 403 after a Successfully passed all security constraints
On 24/05/2010 13:00, dB. wrote: I am trying to implement JAAS. I got a custom module written and it seems to work. FINE: Checking roles GenericPrincipal[dblock(Everyone,)] May 24, 2010 7:56:45 AM org.apache.catalina.realm.RealmBase hasRole FINE: Username dblock has role Everyone May 24, 2010 7:56:45 AM org.apache.catalina.realm.RealmBase hasResourcePermission FINE: Role found: Everyone May 24, 2010 7:56:45 AM org.apache.catalina.authenticator.AuthenticatorBase invoke FINE: Successfully passed all security constraints Nevertheless, I am still getting a 403 - Access to the specified resource (...) has been forbidden. Any ideas? At this point I would fire up your IDE's debugger and step through the Tomcat source code to see what is going on. Mark - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: thread deadlock issue in WebappClassLoader (Tomcat 6.0.26)
Thanks Rainer for the quick response. That code change looks like it will get rid of the deadlock issue. Do you have any idea if it affects performance in a marked way? Synchronizing on the class loader object instance should lead to a lot more contention. Still better than getting deadlocks. -Original Message- From: Rainer Jung [mailto:rainer.j...@kippdata.de] Sent: 24 May 2010 13:21 To: Tomcat Users List Subject: Re: thread deadlock issue in WebappClassLoader (Tomcat 6.0.26) On 24.05.2010 14:08, PJ Fanning wrote: Hi, We've been seeing the occasional deadlock in WebappClassLoader and upgraded to Tomcat 6.0.26 because of https://issues.apache.org/bugzilla/show_bug.cgi?id=48694. The fix in 48694 does not seem to have gotten rid of the deadlock altogether. Could you please try the patch contained in http://svn.apache.org/viewvc?view=revisionrevision=941868, which was applied *after* 6.0.26? Regards, Rainer - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: thread deadlock issue in WebappClassLoader (Tomcat 6.0.26)
On 24/05/2010 13:47, PJ Fanning wrote: Thanks Rainer for the quick response. That code change looks like it will get rid of the deadlock issue. Do you have any idea if it affects performance in a marked way? Synchronizing on the class loader object instance should lead to a lot more contention. Still better than getting deadlocks. Not that I could see in some quick tests. Keep in mind that the JDK class loaders all synchronize that method. Mark - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Re: intermittent SocketException on startup tomcat 5.5.28 and under JBOSS 4.2.3GA
From: ago...@libero.it [mailto:ago...@libero.it] Subject: R: Re: intermittent SocketException on startup tomcat 5.5.28 and under JBOSS 4.2.3GA ERROR [org.apache.tomcat.util.net.JIoEndpoint] Socket accept failed java.net.SocketException: socket closed This isn't really a problem with the Tomcat server - it usually means the client terminated the connection attempt before the socket on the server end could be created. If this is happening persistently, then something in between the client and Tomcat (e.g., a firewall or flakey router) is dropping the connection before it can be fully established. There's also a possibility that Windows is reaching some resource limit and preventing creation of the server end of the connection. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers.
RE: JAAS: why would I be getting a 403 after a Successfully passed all security constraints
Thanks. The problem was between the computer and the chair. I forgot to remove a security filter I was testing earlier that had an unfortunate side effect of eating an error. dB. @ dblock.org Moscow|Geneva|Seattle|New York -Original Message- From: Mark Thomas [mailto:ma...@apache.org] Sent: Monday, May 24, 2010 8:46 AM To: Tomcat Users List Subject: Re: JAAS: why would I be getting a 403 after a Successfully passed all security constraints On 24/05/2010 13:00, dB. wrote: I am trying to implement JAAS. I got a custom module written and it seems to work. FINE: Checking roles GenericPrincipal[dblock(Everyone,)] May 24, 2010 7:56:45 AM org.apache.catalina.realm.RealmBase hasRole FINE: Username dblock has role Everyone May 24, 2010 7:56:45 AM org.apache.catalina.realm.RealmBase hasResourcePermission FINE: Role found: Everyone May 24, 2010 7:56:45 AM org.apache.catalina.authenticator.AuthenticatorBase invoke FINE: Successfully passed all security constraints Nevertheless, I am still getting a 403 - Access to the specified resource (...) has been forbidden. Any ideas? At this point I would fire up your IDE's debugger and step through the Tomcat source code to see what is going on. Mark - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org No virus found in this incoming message. Checked by AVG - www.avg.com Version: 9.0.819 / Virus Database: 271.1.1/2892 - Release Date: 05/23/10 14:26:00 - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: set-cookie
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Banto, On 5/22/2010 12:01 PM, banto wrote: Hi Chuck, i have found out who is generating that in my code: dispatcher.forward(request, response); the response contains also the set cookie header...it is automatically done by tomcat... You can safely call RequestDispatcher.forward() without sending a Set-Cookie header. The code to your doPost method might be helpful, here. If you do any of the following, Tomcat will create a session for you and send a Set-Cookie header for the session: 1. directly call request.getSession() or request.getSession(true) 2. forward-to or include a JSP that does not have session=false declared in the %@ page % directive If you want to know what code it creating the session, write an HttpSessionListener, configure it in web.xml, and have your sessionCreated() method print the stack trace of the current thread. Hope that helps, - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkv6jkAACgkQ9CaO5/Lv0PCvngCggPq3JYga/w4O0yy8/1Vnua5t /QEAnjS1/bSZ87u1ie6aO2omXuWkzCim =Bf+a -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Question on workers.properties file
Hi. Your general settings look ok to me. See in text. Savoy, Melinda wrote: Ranier, Again, thanks for the reply below. Apparently I do not have something setup correctly because I cannot get a LOG file created when I execute a single request that is a valid login ID. What is the exact URL you are trying ? (just to check if it is supposed to go through the re-director) I'm sure I've setup something incorrectly and any help/direction would be greatly appreciated. Here are my settings in the following files (server.xml, isapi_redirect.properties file, uriworkermap.properties file and workers.properties file): Server.xml: Service name=Catalina !--The connectors can use a shared executor, you can define one or more named thread pools-- !-- Executor name=tomcatThreadPool namePrefix=catalina-exec- maxThreads=150 minSpareThreads=4/ -- !-- A Connector represents an endpoint by which requests are received and responses are returned. Documentation at : Java HTTP Connector: /docs/config/http.html (blocking non-blocking) Java AJP Connector: /docs/config/ajp.html APR (HTTP/AJP) Connector: /docs/apr.html Define a non-SSL HTTP/1.1 Connector on port 8080 -- Connector port=9080 protocol=HTTP/1.1 connectionTimeout=2 redirectPort=8443 / !-- A Connector using the shared thread pool-- !-- Connector executor=tomcatThreadPool port=8080 protocol=HTTP/1.1 connectionTimeout=2 redirectPort=8443 / -- !-- Define a SSL HTTP/1.1 Connector on port 8443 This connector uses the JSSE configuration, when using APR, the connector should be using the OpenSSL style configuration described in the APR documentation -- !-- Connector port=8443 protocol=HTTP/1.1 SSLEnabled=true maxThreads=150 scheme=https secure=true clientAuth=false sslProtocol=TLS / -- !-- Define an AJP 1.3 Connector on port 8009 -- Connector port=8009 protocol=AJP/1.3 redirectPort=8443 tomcatAuthentication=false / !-- An Engine represents the entry point (within Catalina) that processes every request. The Engine implementation for Tomcat stand alone analyzes the HTTP headers included with the request, and passes them on to the appropriate Host (virtual host). Documentation at /docs/config/engine.html -- !-- You should set jvmRoute to support load-balancing via AJP ie : Engine name=Standalone defaultHost=localhost jvmRoute=jvm1 -- Engine name=Catalina defaultHost=localhost !--For clustering, please take a look at documentation at: /docs/cluster-howto.html (simple how to) /docs/config/cluster.html (reference documentation) -- !-- Cluster className=org.apache.catalina.ha.tcp.SimpleTcpCluster/ -- !-- The request dumper valve dumps useful debugging information about the request and response data received and sent by Tomcat. Documentation at: /docs/config/valve.html -- !-- Valve className=org.apache.catalina.valves.RequestDumperValve/ -- !-- This Realm uses the UserDatabase configured in the global JNDI resources under the key UserDatabase. Any edits that are performed against this UserDatabase are immediately available for use by the Realm. -- Realm className=org.apache.catalina.realm.UserDatabaseRealm resourceName=UserDatabase/ !-- Define the default virtual host Note: XML Schema validation will not work with Xerces 2.2. -- Host name=localhost appBase=webapps unpackWARs=true autoDeploy=true xmlValidation=false xmlNamespaceAware=false !-- SingleSignOn valve, share authentication between web applications Documentation at: /docs/config/valve.html -- !-- Valve className=org.apache.catalina.authenticator.SingleSignOn / -- !-- Access log processes all example. Documentation at: /docs/config/valve.html -- !-- Valve className=org.apache.catalina.valves.AccessLogValve directory=logs prefix=localhost_access_log. suffix=.txt pattern=common resolveHosts=false/ -- /Host /Engine /Service In my isapi_redirect.properties file: # Configuration file for the Jakarta ISAPI Redirector # The path to the ISAPI Redirector Extension, relative to the website # This must be in a virtual directory with executive privileges extension_uri=/jakarta/isapi_redirect.dll # Full path to the log file for the ISAPI Redirector log_file=c:\server\Tomcat 6.0\logs\iisapi.log This probably works, but I personally dislike paths with spaces in them, because they always bite you in the end. Maybe you need
Connecting openBD via Tomcat to Apache2
Hi there! I am very new to tomcat and I have a little problem serving pages... After the installation of tomcat, mod_jk and openbd everything was fine. The manager worked and so on. Now I tried to connect a Domains via the vhost setting in apache2 to tomcat. When I go to the domain www.testdomain.org I can see the directoryindex of /var/www/www.testdomain.org/ but when I click on a file (doesn't matter if .jsp, .cfm or .html) I come to a 404 tomcat page... I have the logs down to debug but I cannot see in what directory the tomcat is searching for the files... And: clicking on a .css file brings the content throu apache2... but .html is not! (as i have only the .cfm, .jsp and that stuff given to tomcat part of my apache2.conf (debian) IfModule !mod_jk.c LoadModule jk_module /usr/lib/apache2/modules/mod_jk.so /IfModule IfModule mod_jk.c JkMount /*.cfm ajp13 JkMount /*.cfc ajp13 JkMount /*.do ajp13 JkMount /*.jsp ajp13 JkMount /*.cfchart ajp13 JkMount /*.cfres ajp13 JkMount /*.cfm/* ajp13 JkMount /*.cfml/* ajp13 JkMountCopy all JkLogLevel info JkLogFile /var/log/apache2/mod_jk/mod_jk.log /IfModule an my server.xml Host name=www.testdomain.org appBase=webapps unpackWARs=true autoDeploy=true xmlValidation=false xmlNamespaceAware=false Context path= docBase=/var/www/www.testdomain.org/htdocs/ allowLinking=true debug=9 reloadable=true / /Host I really need help! Thanks a lot Regards Christian
RE: Question on workers.properties file
Andre, Thanks for the reply. I was finally able to get my the LOG file created. I had NOT setup my virtual website, SCMIS, in addition to the JAKARTA virtual website in IIS and consequently I kept using Tomcat to authenticate instead of using IIS to do so and it was never hitting my website I think it has something to do with the settings in my IIS setting. I still cannot get the value from getRemoteUser() because the user is blank as is indicated in the log below. ANY help/direction would be greatly appreciated. The URL that I am using to access my SCMIS virtual website is: http://localhost/SCMIS/index.jsp In IIS I have the following: Default Web Site - Anonymous access checked and Integrated Windows authentication unchecked Jakarta - virtual web site and Anonymous access checked and Integrated Windows authentication unchecked SCMIS - virtual web site and Anonymous access unchecked and Integrated Windows authentication checked I have attached the entries in the log file that just happened: [Mon May 24 10:10:02.765 2010] [8124:7912] [debug] jk_isapi_plugin.c (1835): Filter started [Mon May 24 10:10:02.765 2010] [8124:7912] [trace] jk_uri_worker_map.c (951): enter [Mon May 24 10:10:02.765 2010] [8124:7912] [debug] jk_uri_worker_map.c (1168): File c:\server\Tomcat 6.0\conf\uriworkermap.properties is not modified [Mon May 24 10:10:02.765 2010] [8124:7912] [debug] jk_uri_worker_map.c (1036): Attempting to map URI '/localhost/SCMIS/index.jsp' from 3 maps [Mon May 24 10:10:02.781 2010] [8124:7912] [trace] jk_uri_worker_map.c (839): enter [Mon May 24 10:10:02.781 2010] [8124:7912] [debug] jk_uri_worker_map.c (850): Attempting to map context URI '/servlet/*=scmisWorker' source 'uriworkermap' [Mon May 24 10:10:02.781 2010] [8124:7912] [debug] jk_uri_worker_map.c (850): Attempting to map context URI '/*.jsp=scmisWorker' source 'uriworkermap' [Mon May 24 10:10:02.781 2010] [8124:7912] [debug] jk_uri_worker_map.c (863): Found a wildchar match '/*.jsp=scmisWorker' [Mon May 24 10:10:02.781 2010] [8124:7912] [trace] jk_uri_worker_map.c (866): exit [Mon May 24 10:10:02.781 2010] [8124:7912] [trace] jk_uri_worker_map.c (1065): exit [Mon May 24 10:10:02.781 2010] [8124:7912] [debug] jk_isapi_plugin.c (1916): check if [/SCMIS/index.jsp] points to the web-inf directory [Mon May 24 10:10:02.781 2010] [8124:7912] [debug] jk_isapi_plugin.c (1932): [/SCMIS/index.jsp] is a servlet url - should redirect to scmisWorker [Mon May 24 10:10:02.781 2010] [8124:7912] [debug] jk_isapi_plugin.c (1972): fowarding escaped URI [/SCMIS/index.jsp] [Mon May 24 10:10:02.781 2010] [8124:7912] [trace] jk_isapi_plugin.c (2109): enter [Mon May 24 10:10:02.781 2010] [8124:7912] [trace] jk_worker.c (311): enter [Mon May 24 10:10:02.781 2010] [8124:7912] [debug] jk_worker.c (339): Maintaining worker scmisWorker [Mon May 24 10:10:02.781 2010] [8124:7912] [trace] jk_ajp_common.c (3131): enter [Mon May 24 10:10:02.781 2010] [8124:7912] [trace] jk_ajp_common.c (3162): exit [Mon May 24 10:10:02.781 2010] [8124:7912] [trace] jk_worker.c (350): exit [Mon May 24 10:10:02.796 2010] [8124:7912] [trace] jk_isapi_plugin.c (2774): enter [Mon May 24 10:10:02.796 2010] [8124:7912] [debug] jk_isapi_plugin.c (2792): Reading extension header HTTP_TOMCATWORKER6A6B: scmisWorker [Mon May 24 10:10:02.796 2010] [8124:7912] [debug] jk_isapi_plugin.c (2793): Reading extension header HTTP_TOMCATWORKERIDX6A6B: 1 [Mon May 24 10:10:02.796 2010] [8124:7912] [debug] jk_isapi_plugin.c (2794): Reading extension header HTTP_TOMCATURI6A6B: /SCMIS/index.jsp [Mon May 24 10:10:02.796 2010] [8124:7912] [debug] jk_isapi_plugin.c (2795): Reading extension header HTTP_TOMCATQUERY6A6B: (null) [Mon May 24 10:10:02.796 2010] [8124:7912] [debug] jk_isapi_plugin.c (2850): Applying service extensions [Mon May 24 10:10:02.796 2010] [8124:7912] [debug] jk_isapi_plugin.c (3108): Service protocol=HTTP/1.1 method=GET host=127.0.0.1 addr=127.0.0.1 name=localhost port=80 auth= user= uri=/SCMIS/index.jsp [Mon May 24 10:10:02.796 2010] [8124:7912] [debug] jk_isapi_plugin.c (3120): Service request headers=8 attributes=0 chunked=no content-length=0 available=0 [Mon May 24 10:10:02.796 2010] [8124:7912] [trace] jk_isapi_plugin.c (3130): exit [Mon May 24 10:10:02.796 2010] [8124:7912] [trace] jk_worker.c (106): enter [Mon May 24 10:10:02.796 2010] [8124:7912] [debug] jk_worker.c (116): found a worker scmisWorker [Mon May 24 10:10:02.796 2010] [8124:7912] [trace] jk_worker.c (118): exit [Mon May 24 10:10:02.796 2010] [8124:7912] [debug] jk_isapi_plugin.c (2162): got a worker for name scmisWorker [Mon May 24 10:10:02.796 2010] [8124:7912] [trace] jk_ajp13_worker.c (69): enter [Mon May 24 10:10:02.796 2010] [8124:7912] [trace] jk_ajp_common.c (3040): enter [Mon May 24 10:10:02.812 2010] [8124:7912] [debug] jk_ajp_common.c (3093): acquired connection pool slot=0 after 0 retries [Mon May 24 10:10:02.812 2010] [8124:7912] [trace] jk_ajp_common.c (3096):
Re: Connecting openBD via Tomcat to Apache2
On 24/05/2010 16:12, Christian Adelbrecht wrote: Hi there! I am very new to tomcat and I have a little problem serving pages... After the installation of tomcat, mod_jk and openbd everything was fine. The manager worked and so on. Now I tried to connect a Domains via the vhost setting in apache2 to tomcat. When I go to the domain www.testdomain.org I can see the directoryindex of /var/www/www.testdomain.org/ but when I click on a file (doesn't matter if .jsp, .cfm or .html) I come to a 404 tomcat page... I have the logs down to debug but I cannot see in what directory the tomcat is searching for the files... And: clicking on a .css file brings the content throu apache2... but .html is not! (as i have only the .cfm, .jsp and that stuff given to tomcat part of my apache2.conf (debian) IfModule !mod_jk.c LoadModule jk_module /usr/lib/apache2/modules/mod_jk.so /IfModule IfModule mod_jk.c JkMount /*.cfm ajp13 JkMount /*.cfc ajp13 JkMount /*.do ajp13 JkMount /*.jsp ajp13 JkMount /*.cfchart ajp13 JkMount /*.cfres ajp13 JkMount /*.cfm/* ajp13 JkMount /*.cfml/* ajp13 JkMountCopy all JkLogLevel info JkLogFile /var/log/apache2/mod_jk/mod_jk.log /IfModule an my server.xml Host name=www.testdomain.org appBase=webapps unpackWARs=true autoDeploy=true xmlValidation=false xmlNamespaceAware=false Context path= docBase=/var/www/www.testdomain.org/htdocs/ allowLinking=true debug=9 reloadable=true / /Host What are the exact OS, JVM, Tomcat, HTTPD and mod_jk versions? p signature.asc Description: OpenPGP digital signature
Re: Javamelody
Hi Ozgur and others, Ok, I am here. Thanks for the issue about this log. I have tomcat 6.0.26 but I have not reproduced the issue yet. Yes there is a timer thread in javamelody, and it is correctly canceled in the destroy method as can be seen here in the http filter: http://code.google.com/p/javamelody/source/browse/trunk/javamelody-core/src/main/java/net/bull/javamelody/MonitoringFilter.java#303 I am available to see what is going on. See you in the issue: http://code.google.com/p/javamelody/issues/detail?id=25 bye, Emeric Le 24/05/2010 14:04, Ozgur Ozdemircili a écrit : For the record Just opened up a issue. Let`s see how it ends there: http://code.google.com/p/javamelody/issues/detail?id=25 Thanks. Özgür Özdemircili http://www.acikkod.org Code so clean you could eat off it On Mon, May 24, 2010 at 1:56 PM, Peter Crowtherpeter.crowt...@melandra.com wrote: On 24 May 2010 12:48, Ozgur Ozdemirciliozgur.ozdemirc...@gmail.com wrote: I have installed Javamelody version 1.15. In my catalina.out there appears error messages: [...] GRAVE: A web application appears to have started a TimerThread named [javamelody javamelody] via the java.util.Timer API but has failed to stop it. To prevent a memory leak, the timer (and hence the associated thread) has been forcibly cancelled. [...] Code so clean you could eat off it Your code may be clean, Javamelody's isn't ;-). Somewhere, it starts a timer thread and doesn't clear it up. Tomcat detects this case and cancels the timer, issuing a warning. You *could* leave this as-is, but it's difficult to know what else might be leaking within Javamelody. You might want to find out how to cancel Javamelody's timer thread, then use a lifecycle listener in your webapp to cancel the timer on appropriate lifecycle events. Or talk to the Javamelody team to find out how to cancel the timer at the appropriate time. - Peter - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Connecting openBD via Tomcat to Apache2
hi! What are the exact OS Linux 2.6.18-6-k7 , JVM, 1.6.0_16-b01 Tomcat, Apache Tomcat/6.0.20 HTTPD Apache 2.2.3 and mod_jk versions mod_jk 1.2.27 ? p
RE: Connecting openBD via Tomcat to Apache2
From: Christian Adelbrecht [mailto:christian.adelbre...@gmail.com] Subject: Re: Connecting openBD via Tomcat to Apache2 Tomcat, Apache Tomcat/6.0.20 HTTPD Apache 2.2.3 and mod_jk versions mod_jk 1.2.27 Don't suppose you'd consider upgrading those to a bit more recent versions? The httpd you've got is 4 years old, mod_jk is 1.5 years out of date, although your Tomcat is only a year out. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Connecting openBD via Tomcat to Apache2
On 24/05/2010 16:53, Christian Adelbrecht wrote: hi! What are the exact OS Linux 2.6.18-6-k7 , JVM, 1.6.0_16-b01 Tomcat, Apache Tomcat/6.0.20 HTTPD Apache 2.2.3 and mod_jk versions mod_jk 1.2.27 Note: there are more recent versions of all of these. You should particularly consider upgrading Tomcat and HTTPD. I will assume for now, that you have a sound reason for deploying HTTPD and Tomcat at the same time, rather than just letting Tomcat do all the work. If you'd like to know more, ask. IfModule !mod_jk.c LoadModule jk_module /usr/lib/apache2/modules/mod_jk.so /IfModule IfModule mod_jk.c JkMount /*.cfm ajp13 JkMount /*.cfc ajp13 JkMount /*.do ajp13 JkMount /*.jsp ajp13 JkMount /*.cfchart ajp13 JkMount /*.cfres ajp13 JkMount /*.cfm/* ajp13 JkMount /*.cfml/* ajp13 JkMountCopy all JkLogLevel info JkLogFile /var/log/apache2/mod_jk/mod_jk.log /IfModule an my server.xml Host name=www.testdomain.org appBase=webapps unpackWARs=true autoDeploy=true xmlValidation=false xmlNamespaceAware=false Context path= docBase=/var/www/www.testdomain.org/htdocs/ allowLinking=true debug=9 reloadable=true / /Host The above is very bad practice and likely to lead to you exposing data that you shouldn't. JSPs and other content should not be mixed in the same directory. Context should not be defined in server.xml. The debug attribute isn't used anymore. Read the following: http://tomcat.apache.org/tomcat-6.0-doc/appdev/index.html and: http://tomcat.apache.org/tomcat-6.0-doc/config/context.html If you have to use both HTTPD and Tomcat, construct a directory structure like this: All static content should go here: /var/www/www.testdomain.org/htdocs/ All java webapps should go here: /var/www/www.testdomain.org/webapps/ Servlet Spec webapps and other java applications are deployed, one each, in a directory inside the above. e.g. /var/www/www.testdomain.org/webapps/ROOT /var/www/www.testdomain.org/webapps/myapp /var/www/www.testdomain.org/webapps/another_app ROOT is the special name for the default application, which is what you were attempting to do with the path= attribute. p signature.asc Description: OpenPGP digital signature
Re: Connecting openBD via Tomcat to Apache2
2010/5/24 Pid p...@pidster.com On 24/05/2010 16:53, Christian Adelbrecht wrote: hi! What are the exact OS Linux 2.6.18-6-k7 , JVM, 1.6.0_16-b01 Tomcat, Apache Tomcat/6.0.20 HTTPD Apache 2.2.3 and mod_jk versions mod_jk 1.2.27 Note: there are more recent versions of all of these. You should particularly consider upgrading Tomcat and HTTPD. Apache 2.2.3 etch11 is the latest etch version as this tomcat was the version that came with the openbd-installer I want to try it with this one. (support for Dummies) I will assume for now, that you have a sound reason for deploying HTTPD and Tomcat at the same time, rather than just letting Tomcat do all the work. If you'd like to know more, ask. In some newsgroups I read, that tomcat is slower than apache, so thats why I wanted them both. Btw I am using a servermanager-tool, that cannot handle tomcat virtual hosts... IfModule !mod_jk.c LoadModule jk_module /usr/lib/apache2/modules/mod_jk.so /IfModule IfModule mod_jk.c JkMount /*.cfm ajp13 JkMount /*.cfc ajp13 JkMount /*.do ajp13 JkMount /*.jsp ajp13 JkMount /*.cfchart ajp13 JkMount /*.cfres ajp13 JkMount /*.cfm/* ajp13 JkMount /*.cfml/* ajp13 JkMountCopy all JkLogLevel info JkLogFile /var/log/apache2/mod_jk/mod_jk.log /IfModule and my server.xml Host name=www.testdomain.org appBase=webapps unpackWARs=true autoDeploy=true xmlValidation=false xmlNamespaceAware=false Context path= docBase=/var/www/www.testdomain.org/htdocs/ allowLinking=true debug=9 reloadable=true / /Host my new server.xml Host name=www.testdomain.org appBase=webapps unpackWARs=true autoDeploy=true xmlValidation=false xmlNamespaceAware=false /Host and my new context.xml.default in the tomcat conf hostname folder: Context path=/var/www/www.testdomain.org/webapps/http://www.testdomain.org/htdocs/ ROOT/ docBase=/var/www/www.testdomain.org/htdocs/ allowLinking=true reloadable=true / Better? The above is very bad practice and likely to lead to you exposing data that you shouldn't. JSPs and other content should not be mixed in the same directory. Context should not be defined in server.xml. The debug attribute isn't used anymore. If you have to use both HTTPD and Tomcat, construct a directory structure like this: All static content should go here: /var/www/www.testdomain.org/htdocs/ All java webapps should go here: /var/www/www.testdomain.org/webapps/ Servlet Spec webapps and other java applications are deployed, one each, in a directory inside the above. e.g. /var/www/www.testdomain.org/webapps/ROOT /var/www/www.testdomain.org/webapps/myapp /var/www/www.testdomain.org/webapps/another_app ROOT is the special name for the default application, which is what you were attempting to do with the path= attribute. as done above?! p Thanks a lot for your support! Regards Christian - I search the web using www.ecosia.org
Re: Way to record what URL an error originated from in my localhost file?
My needs are in my Tomcat/localhost log file, I would like as much information as possible to appear accompanying exceptions that get generated in there. At the least, I would like to have the request URI precede the error in the localhost log. Even though I have defined error pages in my web.xml file, that doesn't interact with the localhost log, right? So what options are available to me to put request URIs (and other info) into the localhost log? Thanks, - Dave Christopher Schultz-2 wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dave, On 5/21/2010 4:41 PM, laredotornado wrote: Thanks for this suggestion. Just to be sure I'm understanding correctly, the procedure would be 1. Add an error-page element to my xml doc that will be visited whenever an exception is generated from my JSP or servlet. 2. Configure valve to output a stack trace and the original request URI that generated the error. Is that right? I would choose one or the other: AccessLogValve /might/ be able to meet your needs, depending on what they are. If not, implement your own error page that logs whatever information you want to wherever you want it to go. Also is valve smart enough to understand that I don't want to see 500.jsp in my log file but rather something like search_results.jsp?category=1 ? I think the AccessLogValve only logs original requests -- that is, it won't log included or forwarded files like error pages. I must admit, though, that I don't really use the AccessLogValve -- I have Apache httpd doing my logging for me. - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkv3zjAACgkQ9CaO5/Lv0PAotACgwgcboVKDnFhtN6N/QRCxOKFR yAcAoJFQ+ARwsJ43xGbJfvS3xVlnF5sw =BNo0 -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org -- View this message in context: http://old.nabble.com/Way-to-record-what-URL-an-error-originated-from-in-my-localhost-file--tp28626297p28659165.html Sent from the Tomcat - User mailing list archive at Nabble.com. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Connecting openBD via Tomcat to Apache2
From: Christian Adelbrecht [mailto:christian.adelbre...@gmail.com] Subject: Re: Connecting openBD via Tomcat to Apache2 In some newsgroups I read, that tomcat is slower than apache Hasn't been true for several years. You should seriously consider simplifying your life by eliminating httpd (and installing a current Tomcat from tomcat.apache.org). my new server.xml Host name=www.testdomain.org appBase=webapps unpackWARs=true autoDeploy=true xmlValidation=false xmlNamespaceAware=false /Host Did you change the defaultHost attribute of the Engine to point to the above, or do you have another Host entry? If you have multiple Host entries, keep the appBase settings separate. and my new context.xml.default in the tomcat conf hostname folder: That's wrong - get rid of it. Your Context element should be located in conf/Catalina/www.testdomain.org/ROOT.xml. Context path=/var/www/www.testdomain.org/webapps/http://www.testdomain.org/ht docs/ ROOT/ The above is clearly wrong, since it's got an http: thingie buried inside it. docBase=/var/www/www.testdomain.org/htdocs/ Is that correct? Or should it be /var/www/www.testdomain.org/htdocs/ROOT? Better? Not a whole lot. If you'd just follow Pid's instructions, it would be. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Way to record what URL an error originated from in my localhost file?
From: laredotornado [mailto:laredotorn...@gmail.com] Subject: Re: Way to record what URL an error originated from in my localhost file? Even though I have defined error pages in my web.xml file, that doesn't interact with the localhost log, right? Correct; you have to write code in the servlets that handle the error pages to make log entries. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Remote Host Filter
Hello, I'm trying to implement the RemoteHostValve into my app configuration and getting a forbidden. In my META-INF/context.xml file in the manager folder, I changed from a RemoteAddrValve, filtered by IP address (which worked successfully) to the RemoteHostValve, using allow=\\machine43namefile://\\machine43name (machine43name as an alpha-numeric example). Our machine names are a mixture of alpha-numeric characters. I've looked in the logs but not seen anything discernable there. I looked up the regular expression syntax and thought I was doing this correctly. Has anyone else used this before with success? Any insight or tip as to where I'm going wrong would be greatly appreciated. I'm using Tomcat 6.0.26, JDK 1.6.0_18 on Win XP Pro. Thanks, Barry
RE: Remote Host Filter
From: Propes, Barry L [mailto:barry.l.pro...@citi.com] Subject: Remote Host Filter allow=\\machine43namefile://\\machine43name Why do you have a leading backwards slash on the allow? Why do you have a file: thingie buried in the allow? (Hint: send to the list in plain-text only, not HTML.) - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Remote Host Filter
On 24/05/2010 18:56, Caldarale, Charles R wrote: From: Propes, Barry L [mailto:barry.l.pro...@citi.com] Subject: Remote Host Filter allow=\\machine43namefile://\\machine43name Why do you have a leading backwards slash on the allow? That looks like Windows name. You need to use the DNS name. Mark Why do you have a file: thingie buried in the allow? (Hint: send to the list in plain-text only, not HTML.) - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Heap size for two container sharing single JVM
Hi, I am using Tomcat 5.5.27 core package on CentOS 5.3. I need to add tomcat-6 on the same machine and it will share the same JDK instance. Do I need to setup java heap space separately for both containers? For a single container I am adding heap space (Xmx) option to JAVA_OPTS in catalina.sh script. Do I need to add this option to second container again or set it somewhere else? Since it is a JDK option and not tomcat option, I am thinking it is a system-wide setting and not specific to each container. Am I correct? -- jM.
RE: Remote Host Filter
Sorry about thatHTML was the default setting -- let me switch it. I had the following: Valve className=org.apache.catalina.valves.RemoteHostValve allow=\\machine43name / like this. -Original Message- From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] Sent: Monday, May 24, 2010 12:56 PM To: Tomcat Users List Subject: RE: Remote Host Filter From: Propes, Barry L [mailto:barry.l.pro...@citi.com] Subject: Remote Host Filter allow=\\machine43namefile://\\machine43name Why do you have a leading backwards slash on the allow? Why do you have a file: thingie buried in the allow? (Hint: send to the list in plain-text only, not HTML.) - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: stuck confused an need help please
On Mon, May 24, 2010 at 11:37 AM, Yucca Nel yucca...@live.co.za wrote: I have been getting mysql SELECT privilege denied exception even though user has all access to database. There would seem to be a contradiction between the above statement and the first error in your log example :-) ERROR main org.apache.catalina.core.ContainerBase.[Catalina] - Exception opening database connection java.sql.SQLException: Access denied for user ' yucca123_tom'@'localhost' (using password: YES) at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:1055) I would try to fix that first, personally... -- Hassan Schroeder hassan.schroe...@gmail.com twitter: @hassan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Remote Host Filter
From: Propes, Barry L [mailto:barry.l.pro...@citi.com] Subject: RE: Remote Host Filter Valve className=org.apache.catalina.valves.RemoteHostValve allow=\\machine43name / like this. As Mark said, use the actual name as it appears in the HTTP header, not the Windows corruption of it. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: stuck confused an need help please
yes but I don't know why access I being denied? The credentials I am providing sre 100% correct sn the database user has ALL privileges so could anyone perhaps think o a possible reason why I am getting these errors? I have confirmed with hosting provider that user exists and credentials are correct and they also appear to be lost. I am using correct myswl driver located in WEB-INF/lib -- From: Hassan Schroeder hassan.schroe...@gmail.com Sent: Monday, May 24, 2010 8:53 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please On Mon, May 24, 2010 at 11:37 AM, Yucca Nel yucca...@live.co.za wrote: I have been getting mysql SELECT privilege denied exception even though user has all access to database. There would seem to be a contradiction between the above statement and the first error in your log example :-) ERROR main org.apache.catalina.core.ContainerBase.[Catalina] - Exception opening database connection java.sql.SQLException: Access denied for user ' yucca123_tom'@'localhost' (using password: YES) at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:1055) I would try to fix that first, personally... -- Hassan Schroeder hassan.schroe...@gmail.com twitter: @hassan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Heap size for two container sharing single JVM
From: Johan Martinez [mailto:jmart...@gmail.com] Subject: Heap size for two container sharing single JVM it will share the same JDK instance. All that means is that the same JDK is used as the process templates for the each JVM instance. Do I need to setup java heap space separately for both containers? Yes, they are completely independent. Make sure you have enough RAM to support the process space requirements for everything you're running on the system. For a single container I am adding heap space (Xmx) option to JAVA_OPTS in catalina.sh script. You should do that in setenv.sh, not catalina.sh; catalina.sh will call setenv.sh if it exists. Do I need to add this option to second container again or set it somewhere else? You need to create or modify the script in the second Tomcat instance. Since it is a JDK option and not tomcat option It's actually a running JVM option, not a JDK option. I am thinking it is a system-wide setting and not specific to each container. You are incorrect. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: stuck confused an need help please
I forgot to mention I am using myswl 5, and tomcat 6 -- From: Yucca Nel yucca...@live.co.za Sent: Monday, May 24, 2010 9:00 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please yes but I don't know why access I being denied? The credentials I am providing sre 100% correct sn the database user has ALL privileges so could anyone perhaps think o a possible reason why I am getting these errors? I have confirmed with hosting provider that user exists and credentials are correct and they also appear to be lost. I am using correct myswl driver located in WEB-INF/lib -- From: Hassan Schroeder hassan.schroe...@gmail.com Sent: Monday, May 24, 2010 8:53 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please On Mon, May 24, 2010 at 11:37 AM, Yucca Nel yucca...@live.co.za wrote: I have been getting mysql SELECT privilege denied exception even though user has all access to database. There would seem to be a contradiction between the above statement and the first error in your log example :-) ERROR main org.apache.catalina.core.ContainerBase.[Catalina] - Exception opening database connection java.sql.SQLException: Access denied for user ' yucca123_tom'@'localhost' (using password: YES) at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:1055) I would try to fix that first, personally... -- Hassan Schroeder hassan.schroe...@gmail.com twitter: @hassan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: stuck confused an need help please
On Mon, May 24, 2010 at 12:00 PM, Yucca Nel yucca...@live.co.za wrote: The credentials I am providing sre 100% correct Not according to the log file you sent. Are you saying that you have successfully logged in to MySQL from the command line on the server using those credentials? -- Hassan Schroeder hassan.schroe...@gmail.com twitter: @hassan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: stuck confused an need help please
Perhaps the real issue herw for mr personally (and I hope anyone using dailyrazor) could answer if it's normal to not be able to use mysql in a production environment where I DON't have to have my dailyrazor username prepended to everything related in mysql? Is this a norm in prodyction environments because I can not configure mysql to mimic my development environment because every name on the server has a stupid name prepended to it. -- From: Yucca Nel yucca...@live.co.za Sent: Monday, May 24, 2010 9:06 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please I forgot to mention I am using myswl 5, and tomcat 6 -- From: Yucca Nel yucca...@live.co.za Sent: Monday, May 24, 2010 9:00 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please yes but I don't know why access I being denied? The credentials I am providing sre 100% correct sn the database user has ALL privileges so could anyone perhaps think o a possible reason why I am getting these errors? I have confirmed with hosting provider that user exists and credentials are correct and they also appear to be lost. I am using correct myswl driver located in WEB-INF/lib -- From: Hassan Schroeder hassan.schroe...@gmail.com Sent: Monday, May 24, 2010 8:53 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please On Mon, May 24, 2010 at 11:37 AM, Yucca Nel yucca...@live.co.za wrote: I have been getting mysql SELECT privilege denied exception even though user has all access to database. There would seem to be a contradiction between the above statement and the first error in your log example :-) ERROR main org.apache.catalina.core.ContainerBase.[Catalina] - Exception opening database connection java.sql.SQLException: Access denied for user ' yucca123_tom'@'localhost' (using password: YES) at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:1055) I would try to fix that first, personally... -- Hassan Schroeder hassan.schroe...@gmail.com twitter: @hassan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Remote Host Filter
I believe that's my problem, there. A few years back I tried to use both .getRemoteAddr and .getRemoteHost in one of my servlets to retrieve those user agent variables (both IP and machine names), and both returned the IP address. So I'm probably stuck using the RemoteAddrValve filter. Thanks, though. -Original Message- From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] Sent: Monday, May 24, 2010 1:58 PM To: Tomcat Users List Subject: RE: Remote Host Filter From: Propes, Barry L [mailto:barry.l.pro...@citi.com] Subject: RE: Remote Host Filter Valve className=org.apache.catalina.valves.RemoteHostValve allow=\\machine43name / like this. As Mark said, use the actual name as it appears in the HTTP header, not the Windows corruption of it. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: stuck confused an need help please
there is no cli for myswl using cpanel. Only php mysql admin and I know I am using the credentials provided when I created the user in php admin -- From: Hassan Schroeder hassan.schroe...@gmail.com Sent: Monday, May 24, 2010 9:10 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please On Mon, May 24, 2010 at 12:00 PM, Yucca Nel yucca...@live.co.za wrote: The credentials I am providing sre 100% correct Not according to the log file you sent. Are you saying that you have successfully logged in to MySQL from the command line on the server using those credentials? -- Hassan Schroeder hassan.schroe...@gmail.com twitter: @hassan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: stuck confused an need help please
Oh and my hosting provider sent me a snipped of the cli where they logged in with my credentials so that is not the issue -- From: Yucca Nel yucca...@live.co.za Sent: Monday, May 24, 2010 9:14 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please there is no cli for myswl using cpanel. Only php mysql admin and I know I am using the credentials provided when I created the user in php admin -- From: Hassan Schroeder hassan.schroe...@gmail.com Sent: Monday, May 24, 2010 9:10 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please On Mon, May 24, 2010 at 12:00 PM, Yucca Nel yucca...@live.co.za wrote: The credentials I am providing sre 100% correct Not according to the log file you sent. Are you saying that you have successfully logged in to MySQL from the command line on the server using those credentials? -- Hassan Schroeder hassan.schroe...@gmail.com twitter: @hassan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: stuck confused an need help please
here is copy of email sent from hosting provider ... Dear Customer, We see no permisson problems with your database: # mysql --database=yucca123_thejarbar --user=yucca123_hiber --password=myPass Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Welcome to the MySQL monitor. Commands end with ; or \g. Your MySQL connection id is 10872472 Server version: 5.0.90-community MySQL Community Edition (GPL) Type 'help;' or '\h' for help. Type '\c' to clear the current input statement. mysql select * from usercomments; Empty set (0.00 sec) Please doublecheck your application configuration and make sure that you're using correct database login info. Also please note that Tomcat restart is required after each configuration update. Let us know if there any questions we can help you with, or confirm that we may close this ticket. Best regards, DailyRazor TechSupport Team. Ticket Details === Ticket ID: IWI-526778 Department: Technical Support Dept. Priority: High Status: Waiting for confirmation -- From: Yucca Nel yucca...@live.co.za Sent: Monday, May 24, 2010 9:14 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please there is no cli for myswl using cpanel. Only php mysql admin and I know I am using the credentials provided when I created the user in php admin -- From: Hassan Schroeder hassan.schroe...@gmail.com Sent: Monday, May 24, 2010 9:10 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please On Mon, May 24, 2010 at 12:00 PM, Yucca Nel yucca...@live.co.za wrote: The credentials I am providing sre 100% correct Not according to the log file you sent. Are you saying that you have successfully logged in to MySQL from the command line on the server using those credentials? -- Hassan Schroeder hassan.schroe...@gmail.com twitter: @hassan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: stuck confused an need help please
On Mon, May 24, 2010 at 12:11 PM, Yucca Nel yucca...@live.co.za wrote: Perhaps the real issue herw for mr personally (and I hope anyone using dailyrazor) could answer if it's normal to not be able to use mysql in a production environment where I DON't have to have my dailyrazor username prepended to everything related in mysql? I have utterly no idea what you're talking about now. there is no cli for myswl using cpanel. You don't have SSH access to your server? Good luck debugging, then; I would never use a hosting provider like that. Oh and my hosting provider sent me a snipped of the cli where they logged in with my credentials so that is not the issue Again, not what the log file is saying. Which, BTW, assuming is a straight copy/paste, includes an interesting space at the front of this ' yucca123_tom'@'localhost' string, which *ALSO* doesn't match the user name in your final example: # mysql --database=yucca123_thejarbar --user=yucca123_hiber -- Hassan Schroeder hassan.schroe...@gmail.com twitter: @hassan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: stuck confused an need help please
Perhapa somwonw can recommend me another hosting provider (will gladly refer them) and one where they don't add silly prefix names o everything done in mysql? -- From: Yucca Nel yucca...@live.co.za Sent: Monday, May 24, 2010 9:19 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please here is copy of email sent from hosting provider ... Dear Customer, We see no permisson problems with your database: # mysql --database=yucca123_thejarbar --user=yucca123_hiber --password=myPass Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Welcome to the MySQL monitor. Commands end with ; or \g. Your MySQL connection id is 10872472 Server version: 5.0.90-community MySQL Community Edition (GPL) Type 'help;' or '\h' for help. Type '\c' to clear the current input statement. mysql select * from usercomments; Empty set (0.00 sec) Please doublecheck your application configuration and make sure that you're using correct database login info. Also please note that Tomcat restart is required after each configuration update. Let us know if there any questions we can help you with, or confirm that we may close this ticket. Best regards, DailyRazor TechSupport Team. Ticket Details === Ticket ID: IWI-526778 Department: Technical Support Dept. Priority: High Status: Waiting for confirmation -- From: Yucca Nel yucca...@live.co.za Sent: Monday, May 24, 2010 9:14 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please there is no cli for myswl using cpanel. Only php mysql admin and I know I am using the credentials provided when I created the user in php admin -- From: Hassan Schroeder hassan.schroe...@gmail.com Sent: Monday, May 24, 2010 9:10 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please On Mon, May 24, 2010 at 12:00 PM, Yucca Nel yucca...@live.co.za wrote: The credentials I am providing sre 100% correct Not according to the log file you sent. Are you saying that you have successfully logged in to MySQL from the command line on the server using those credentials? -- Hassan Schroeder hassan.schroe...@gmail.com twitter: @hassan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: stuck confused an need help please
aplogies there are 2 users and both credentials are configured correct one for hibernate and one for tomcat what I maen is that my dailyraor username is eg. and everything in mysql gets prepended with xxx like xxx_mydatabase xxx_myusername xxx_mytable From: Hassan Schroeder hassan.schroe...@gmail.com Sent: Monday, May 24, 2010 9:23 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please On Mon, May 24, 2010 at 12:11 PM, Yucca Nel yucca...@live.co.za wrote: Perhaps the real issue herw for mr personally (and I hope anyone using dailyrazor) could answer if it's normal to not be able to use mysql in a production environment where I DON't have to have my dailyrazor username prepended to everything related in mysql? I have utterly no idea what you're talking about now. there is no cli for myswl using cpanel. You don't have SSH access to your server? Good luck debugging, then; I would never use a hosting provider like that. Oh and my hosting provider sent me a snipped of the cli where they logged in with my credentials so that is not the issue Again, not what the log file is saying. Which, BTW, assuming is a straight copy/paste, includes an interesting space at the front of this ' yucca123_tom'@'localhost' string, which *ALSO* doesn't match the user name in your final example: # mysql --database=yucca123_thejarbar --user=yucca123_hiber -- Hassan Schroeder hassan.schroe...@gmail.com twitter: @hassan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
IIS Authentication for Single-Signon
I started a post last week on the WORKERS.PROPERTIES file but that post got to be very long. After getting answers from those on this list to help me resolve the issue with the worker.properties file. I would like to submit another question on resolving IIS authentication in helping me retrieve the User ID via the getRemoteUser() method but I keep getting a NULL value. The IISAPI.LOG below shows that the user variable is NOT being populated however, when INTEGRATED WINDOWS AUTHENTICATION is checked in the Jakarta virtual website then I get prompted then the user variable is populated when I click cancel in the dialog box. Any help/direction would be greatly appreciated. If more info is required to help resolve this issue please let me know. THANKS. In my server.xml file I have the following connectors defined: Connector port=9080 protocol=HTTP/1.1 connectionTimeout=2 redirectPort=8443 / Connector port=8009 protocol=AJP/1.3 redirectPort=8443 tomcatAuthentication=false / In IIS I have the following defined: 1. Default Web Site - Anonymous access checked and Integrated Windows authentication unchecked 2. Jakarta - virtual web site and Anonymous access checked and Integrated Windows authentication unchecked 3. SCMIS - virtual web site and Anonymous access unchecked and Integrated Windows authentication checked Given the settings in IIS above I am getting the following in my log: [Mon May 24 13:33:57.578 2010] [8124:7912] [debug] jk_util.c (459): Pre-processed log time stamp format is '[%a %b %d %H:%M:%S.000 %Y] ' [Mon May 24 13:33:57.578 2010] [8124:7912] [info] jk_isapi_plugin.c (2403): Starting Jakarta/ISAPI/isapi_redirector/1.2.30 [Mon May 24 13:33:57.578 2010] [8124:7912] [debug] jk_isapi_plugin.c (2421): Detected IIS version 5.1 [Mon May 24 13:33:57.593 2010] [8124:7912] [debug] jk_isapi_plugin.c (2423): Using ini file C:\server\Tomcat 6.0\conf\isapi_redirect.properties. [Mon May 24 13:33:57.593 2010] [8124:7912] [debug] jk_isapi_plugin.c (2429): Using log file c:\server\Tomcat 6.0\logs\iisapi.log. [Mon May 24 13:33:57.593 2010] [8124:7912] [debug] jk_isapi_plugin.c (2430): Using log level 1. [Mon May 24 13:33:57.593 2010] [8124:7912] [debug] jk_isapi_plugin.c (2431): Using extension uri /jakarta/isapi_redirect.dll. [Mon May 24 13:33:57.593 2010] [8124:7912] [debug] jk_isapi_plugin.c (2432): Using worker file c:\server\Tomcat 6.0\conf\workers.properties. [Mon May 24 13:33:57.593 2010] [8124:7912] [debug] jk_isapi_plugin.c (2433): Using worker mount file c:\server\Tomcat 6.0\conf\uriworkermap.properties. [Mon May 24 13:33:57.593 2010] [8124:7912] [debug] jk_isapi_plugin.c (2435): Using rewrite rule file . [Mon May 24 13:33:57.593 2010] [8124:7912] [debug] jk_isapi_plugin.c (2437): Using uri select 3. [Mon May 24 13:33:57.593 2010] [8124:7912] [debug] jk_isapi_plugin.c (2438): Using no chunked encoding. [Mon May 24 13:33:57.593 2010] [8124:7912] [debug] jk_isapi_plugin.c (2440): Using notification event SF_NOTIFY_AUTH_COMPLETE (0x0400) [Mon May 24 13:33:57.593 2010] [8124:7912] [debug] jk_isapi_plugin.c (2450): Using uri header TOMCATURI6A6B:. [Mon May 24 13:33:57.609 2010] [8124:7912] [debug] jk_isapi_plugin.c (2451): Using query header TOMCATQUERY6A6B:. [Mon May 24 13:33:57.609 2010] [8124:7912] [debug] jk_isapi_plugin.c (2452): Using worker header TOMCATWORKER6A6B:. [Mon May 24 13:33:57.609 2010] [8124:7912] [debug] jk_isapi_plugin.c (2453): Using worker index TOMCATWORKERIDX6A6B:. [Mon May 24 13:33:57.609 2010] [8124:7912] [debug] jk_isapi_plugin.c (2454): Using translate header TOMCATTRANSLATE6A6B:. [Mon May 24 13:33:57.609 2010] [8124:7912] [debug] jk_isapi_plugin.c (2455): Using a default of 250 connections per pool. [Mon May 24 13:33:57.609 2010] [8124:7912] [debug] jk_map.c (491): Adding property '/*' with value 'scmisWorker' to map. [Mon May 24 13:33:57.609 2010] [8124:7912] [debug] jk_map.c (491): Adding property '/*.jsp' with value 'scmisWorker' to map. [Mon May 24 13:33:57.609 2010] [8124:7912] [debug] jk_map.c (491): Adding property '/servlet/*' with value 'scmisWorker' to map. [Mon May 24 13:33:57.609 2010] [8124:7912] [debug] jk_uri_worker_map.c (1102): Loading urimaps from c:\server\Tomcat 6.0\conf\uriworkermap.properties with reload check interval 60 seconds [Mon May 24 13:33:57.609 2010] [8124:7912] [debug] jk_uri_worker_map.c (720): wildchar rule '/*=scmisWorker' source 'uriworkermap' was added [Mon May 24 13:33:57.624 2010] [8124:7912] [debug] jk_uri_worker_map.c (720): wildchar rule '/*.jsp=scmisWorker' source 'uriworkermap' was added [Mon May 24 13:33:57.624 2010] [8124:7912] [debug] jk_uri_worker_map.c (720): wildchar rule '/servlet/*=scmisWorker' source 'uriworkermap' was added [Mon May 24 13:33:57.624 2010] [8124:7912] [debug] jk_uri_worker_map.c (171): uri map dump after file load: index=0 file='c:\server\Tomcat 6.0\conf\uriworkermap.properties'
Re: set-cookie
chris, useful info. however when i print the current thread stack trace with a HttpSessionListener i see few info; something like this Ljava.lang.STackTraceElement;@4313455 i´m using something like System.out.println(Thread.currentThread().getStackTrace()); in the sessionCreated(). any advice? thanks Christopher Schultz-2 wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Banto, On 5/22/2010 12:01 PM, banto wrote: Hi Chuck, i have found out who is generating that in my code: dispatcher.forward(request, response); the response contains also the set cookie header...it is automatically done by tomcat... You can safely call RequestDispatcher.forward() without sending a Set-Cookie header. The code to your doPost method might be helpful, here. If you do any of the following, Tomcat will create a session for you and send a Set-Cookie header for the session: 1. directly call request.getSession() or request.getSession(true) 2. forward-to or include a JSP that does not have session=false declared in the %@ page % directive If you want to know what code it creating the session, write an HttpSessionListener, configure it in web.xml, and have your sessionCreated() method print the stack trace of the current thread. Hope that helps, - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkv6jkAACgkQ9CaO5/Lv0PCvngCggPq3JYga/w4O0yy8/1Vnua5t /QEAnjS1/bSZ87u1ie6aO2omXuWkzCim =Bf+a -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org -- View this message in context: http://old.nabble.com/set-cookie-tp28639362p28661057.html Sent from the Tomcat - User mailing list archive at Nabble.com. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: stuck confused an need help please
it *is* important that you follow the directions provided to you as hassan mentioned you need to go to mysql command prompt and try to open the connection with the username/password mysqlconnect usern...@host mysqlsupply password if you cannot access ALL of the requested tables with each of the required DML operations(insert/update/delete/select) you will then need to run mysqladmin and either 1)create the user 2)grant the user the necessary access(insert/update/delete/select) access to the user you need as these questions are specific to mysql please ask mysql users list if you have any problems with these operations my...@lists.mysql.com Martin Gainty __ Verzicht und Vertraulichkeitanmerkung/Note de déni et de confidentialité Diese Nachricht ist vertraulich. Sollten Sie nicht der vorgesehene Empfaenger sein, so bitten wir hoeflich um eine Mitteilung. Jede unbefugte Weiterleitung oder Fertigung einer Kopie ist unzulaessig. Diese Nachricht dient lediglich dem Austausch von Informationen und entfaltet keine rechtliche Bindungswirkung. Aufgrund der leichten Manipulierbarkeit von E-Mails koennen wir keine Haftung fuer den Inhalt uebernehmen. Ce message est confidentiel et peut être privilégié. Si vous n'êtes pas le destinataire prévu, nous te demandons avec bonté que pour satisfaire informez l'expéditeur. N'importe quelle diffusion non autorisée ou la copie de ceci est interdite. Ce message sert à l'information seulement et n'aura pas n'importe quel effet légalement obligatoire. Étant donné que les email peuvent facilement être sujets à la manipulation, nous ne pouvons accepter aucune responsabilité pour le contenu fourni. From: yucca...@live.co.za To: users@tomcat.apache.org Subject: Re: stuck confused an need help please Date: Mon, 24 May 2010 21:06:13 +0200 I forgot to mention I am using myswl 5, and tomcat 6 -- From: Yucca Nel yucca...@live.co.za Sent: Monday, May 24, 2010 9:00 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please yes but I don't know why access I being denied? The credentials I am providing sre 100% correct sn the database user has ALL privileges so could anyone perhaps think o a possible reason why I am getting these errors? I have confirmed with hosting provider that user exists and credentials are correct and they also appear to be lost. I am using correct myswl driver located in WEB-INF/lib -- From: Hassan Schroeder hassan.schroe...@gmail.com Sent: Monday, May 24, 2010 8:53 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please On Mon, May 24, 2010 at 11:37 AM, Yucca Nel yucca...@live.co.za wrote: I have been getting mysql SELECT privilege denied exception even though user has all access to database. There would seem to be a contradiction between the above statement and the first error in your log example :-) ERROR main org.apache.catalina.core.ContainerBase.[Catalina] - Exception opening database connection java.sql.SQLException: Access denied for user ' yucca123_tom'@'localhost' (using password: YES) at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:1055) I would try to fix that first, personally... -- Hassan Schroeder hassan.schroe...@gmail.com twitter: @hassan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org _ The New Busy is not the old busy. Search, chat and e-mail from your inbox. http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_3
RE: set-cookie
From: banto [mailto:banto...@gmail.com] Subject: Re: set-cookie i´m using something like System.out.println(Thread.currentThread().getStackTrace()); What you got was a display of the array object - not very interesting. Either iterate through the array, displaying each entry, or just do this: Thread.currentThread().dumpStack(); - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers.
Additional comments: stuck confused an need help please
-- wrt: eApps, the user names are just whatever you make them -- it's really a virtual unix. -- wrt: You get what you pay for --- one of the ONLY exceptions to this that I've encountered in life is the Tomcat list!! --Ken Begin forwarded message: From: Ken Bowen kbo...@als.com Date: May 24, 2010 3:57:28 PM EDT To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please eApps.com provides a virtual system env; you ssh in and it looks/ feels like your own unix system (CentOS 5); in addition, there is a web-based control panel. They've been pretty supportive for me over the years. glancing at dailyrazor, I think you'll find the prices somewhat higher, but in this -- as in many things -- you largely get what you pay for. On May 24, 2010, at 3:23 PM, Yucca Nel wrote: Perhapa somwonw can recommend me another hosting provider (will gladly refer them) and one where they don't add silly prefix names o everything done in mysql? -- From: Yucca Nel yucca...@live.co.za Sent: Monday, May 24, 2010 9:19 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please here is copy of email sent from hosting provider ... Dear Customer, We see no permisson problems with your database: # mysql --database=yucca123_thejarbar --user=yucca123_hiber -- password=myPass Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Welcome to the MySQL monitor. Commands end with ; or \g. Your MySQL connection id is 10872472 Server version: 5.0.90-community MySQL Community Edition (GPL) Type 'help;' or '\h' for help. Type '\c' to clear the current input statement. mysql select * from usercomments; Empty set (0.00 sec) Please doublecheck your application configuration and make sure that you're using correct database login info. Also please note that Tomcat restart is required after each configuration update. Let us know if there any questions we can help you with, or confirm that we may close this ticket. Best regards, DailyRazor TechSupport Team. Ticket Details === Ticket ID: IWI-526778 Department: Technical Support Dept. Priority: High Status: Waiting for confirmation -- From: Yucca Nel yucca...@live.co.za Sent: Monday, May 24, 2010 9:14 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please there is no cli for myswl using cpanel. Only php mysql admin and I know I am using the credentials provided when I created the user in php admin -- From: Hassan Schroeder hassan.schroe...@gmail.com Sent: Monday, May 24, 2010 9:10 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please On Mon, May 24, 2010 at 12:00 PM, Yucca Nel yucca...@live.co.za wrote: The credentials I am providing sre 100% correct Not according to the log file you sent. Are you saying that you have successfully logged in to MySQL from the command line on the server using those credentials? -- Hassan Schroeder hassan.schroe...@gmail.com twitter: @hassan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: IIS Authentication for Single-Signon
Melinda; on the one hand you are right, this would have been a better title for your issue than workers.properties. But on the other hand, now you are creating confusion by starting another thread (that makes it 3 now). Which one should we answer now ? And, if this third one, then the first two will appear to end abruptly, and nobody will be the wiser. So I'll stick to the first one, which was entitled Question on workers.properties file. Savoy, Melinda wrote: I started a post last week on the WORKERS.PROPERTIES file but that post got to be very long. No problem with that. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Question on workers.properties file
Savoy, Melinda wrote: Andre, Thanks for the reply. I was finally able to get my the LOG file created. I had NOT setup my virtual website, SCMIS, in addition to the JAKARTA virtual website in IIS and consequently I kept using Tomcat to authenticate instead of using IIS to do so and it was never hitting my website I think it has something to do with the settings in my IIS setting. I still cannot get the value from getRemoteUser() because the user is blank as is indicated in the log below. ANY help/direction would be greatly appreciated. The URL that I am using to access my SCMIS virtual website is: http://localhost/SCMIS/index.jsp In IIS I have the following: Default Web Site - Anonymous access checked and Integrated Windows authentication unchecked Jakarta - virtual web site and Anonymous access checked and Integrated Windows authentication unchecked SCMIS - virtual web site and Anonymous access unchecked and Integrated Windows authentication checked I have attached the entries in the log file that just happened: I think the problem is right there, and in the worker mappings you mentioned earlier : /examples/*=scmisWorker /examples/*.jsp=scmisWorker /examples/servlet/*=scmisWorker Now in your logfile, you have : [Mon May 24 10:10:02.781 2010] [8124:7912] [debug] jk_uri_worker_map.c (850): Attempting to map context URI '/servlet/*=scmisWorker' source 'uriworkermap' [Mon May 24 10:10:02.781 2010] [8124:7912] [debug] jk_uri_worker_map.c (850): Attempting to map context URI '/*.jsp=scmisWorker' source 'uriworkermap' [Mon May 24 10:10:02.781 2010] [8124:7912] [debug] jk_uri_worker_map.c (863): Found a wildchar match '/*.jsp=scmisWorker' Assuming the mappings above, then why is it trying to match '/servlet/*=scmisWorker' and '/*.jsp=scmisWorker' ? That does not fit. Those mappings are not in your list above. Again, I am no expert on IIS or on the Jk redirector in conjunction with it, but my little finger tells me that there is something very wrong somewhere. I have the feeling that your problem is not really related to authentication (or the lack of it). It is that there is some confusion as to the proper setup of IIS and Tomcat together, and how IIS handles virtual websites. Maybe we should restart from the beginning, like here : When you look at the ...\Tomcat 6.0\webapps directory, what are the sub-directories located just below it ? And , just to gain time, out of these, which is the one that corresponds to the application which /should/ be authenticated ? - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
R: RE: Re: intermittent SocketException on startup tomcat 5.5.28 and under JBOSS 4.2.3GA
Thanks for suggestion. But i have win2008 with dual quad core processor, 4GB ram. The CPU usage is to 5% and ram is used to the 75% when error occours. What block the reload time of page (in presence of error all is more slow the IE page often is white)? What i can investigate when the error occours (i already seen process, TCP connection, firewall)? what can i do? Plese give me a help. Agostino Messaggio originale Da: chuck.caldar...@unisys.com Data: 24/05/2010 15.38 A: Tomcat Users Listusers@tomcat.apache.org, ago...@libero.it ago...@libero.it Ogg: RE: Re: intermittent SocketException on startup tomcat 5.5.28 and under JBOSS 4.2.3GA From: ago...@libero.it [mailto:ago...@libero.it] Subject: R: Re: intermittent SocketException on startup tomcat 5.5.28 and under JBOSS 4.2.3GA ERROR [org.apache.tomcat.util.net.JIoEndpoint] Socket accept failed java.net.SocketException: socket closed This isn't really a problem with the Tomcat server - it usually means the client terminated the connection attempt before the socket on the server end could be created. If this is happening persistently, then something in between the client and Tomcat (e.g., a firewall or flakey router) is dropping the connection before it can be fully established. There's also a possibility that Windows is reaching some resource limit and preventing creation of the server end of the connection. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
mod_jk stability issues
I am having some trouble keeping a mod_jk setup stable. At this point, I feel like I am too far into trial and error mode and would like some help figuring out how to identify the problem. My current setup involves, two linux (RHEL 5) server each running two tomcat instances (6.0.20). A third RHEL 5 box is running apache (2.2.3) with mod_jk(1.2.28). I am using terracotta to cluster the tomcat sessions. The problem that I am having is that under small load (and unfortunately, intermittently), I get random nodes that produce errors. Typically these errors indicate that mod_jk can no longer contact tomcat (see excerpts below). In most cases, the the user request just hangs (never returns). So, it also appears that the errors are not causing a session failover -- though I need to confirm that again after my recent round of changes. In most cases, these nodes that are in error recover on their own. However, during the failure event, I get a bunch of unhappy users. I am hoping to find a way to make the nodes more stable and then address the fail-over aspect. I have tried different mod_jk parameters and think I have settled on a decent set of them. I have all of the garbage collection information logging out and do not seem to have any gc events that are taking longer than the request timeout. I am gathering jvm and os stats and do not see a hardware constraint (memory, cpu, io). So, I am a bit of a loss on where to look. I am pasting in all of the relevant files/excerpts that I can think of. I appreciate any advice on what additional data to gather to shed light on this problem (outright solutions are welcome too :)). Please let me know if there is any other information that would be helpful. Thanx, LES * workers.properties ** # Define 1 real worker using ajp13 worker.list=lb,jkstatus,cas # Set properties for worker1 (ajp13) worker.template.type=ajp13 worker.template.retries=4 worker.template.lbfactor=1 worker.template.reply_timeout=30 worker.template.max_reply_timeouts=4 worker.template.connection_pool_timeout=60 worker.template.ping_mode=A #worker.template.socket_timeout=10 worker.template.socket_connect_timeout=10 worker.tomcat01-instance1.reference=worker.template worker.tomcat01-instance1.host=tomcat01.barnhardt.local worker.tomcat01-instance1.port=8009 worker.tomcat01-instance2.reference=worker.template worker.tomcat01-instance2.host=tomcat01.barnhardt.local worker.tomcat01-instance2.port=18009 worker.tomcat02-instance1.reference=worker.template worker.tomcat02-instance1.host=tomcat02.barnhardt.local worker.tomcat02-instance1.port=8009 worker.tomcat02-instance2.reference=worker.template worker.tomcat02-instance2.host=tomcat02.barnhardt.local worker.tomcat02-instance2.port=18009 worker.cas.type=ajp13 worker.cas.host=localhost worker.cas.port=8009 worker.cas.lbfactor=1 worker.cas.connection_pool_timeout=600 worker.cas.socket_keepalive=1 worker.cas.socket_timeout=60 # Set properties for lb which use the other workers worker.lb.type=lb #worker.lb.method=B worker.lb.sticky_session=True worker.lb.balance_workers=tomcat01-instance1,tomcat01-instance2,tomcat02-instance1,tomcat02-instance2 # Define a 'jkstatus' worker using status worker.jkstatus.type=status *** ** Errors from log *** //This particular error(info) seems to happen constantly - is it a normal operational thing? [Mon May 24 10:22:56 2010] [26131:4045374208] [info] ajp_send_request::jk_ajp_common.c (1496): (tomcat02-instance2) all endpoints are disconnected, detected by connect check (1), cping (0), send (0) [Mon May 24 11:55:21 2010] [2711:4045374208] [info] ajp_send_request::jk_ajp_common.c (1496): (tomcat02-instance1) all endpoints are disconnected, detected by connect check (1), cping (0), send (0) [Mon May 24 13:08:25 2010] [27439:4045374208] [info] ajp_send_request::jk_ajp_common.c (1496): (tomcat01-instance1) all endpoints are disconnected, detected by connect check (1), cping (0), send (0) This error happens intermittently and seems to cause some the the cluster problems I mentioned above [Mon May 24 07:19:21 2010] [27432:4045374208] [error] ajp_get_reply::jk_ajp_common.c (1926): (tomcat01-instance2) Timeout with waiting reply from tomcat. Tomcat is down, stopped or network problems (errno=110) [Mon May 24 07:19:23 2010] [27432:4045374208] [info] ajp_service::jk_ajp_common.c (2447): (tomcat01-instance2) sending request to tomcat failed (recoverable), because of reply timeout (attempt=1) [Mon May 24 07:24:23 2010] [27432:4045374208] [error] ajp_get_reply::jk_ajp_common.c (1926): (tomcat01-instance2) Timeout with waiting reply from tomcat. Tomcat is down, stopped or network problems (errno=110) [Mon May 24 07:24:25 2010] [27432:4045374208] [info] ajp_service::jk_ajp_common.c (2447): (tomcat01-instance2) sending request to tomcat failed (recoverable), because of reply timeout (attempt=2) I get this error occassionally, too
RE: Question on workers.properties file
Andre, Sorry for creating confusion on the other post. I will stick with this post as well. I made changes to the setting here: I think the problem is right there, and in the worker mappings you mentioned earlier : /examples/*=scmisWorker /examples/*.jsp=scmisWorker /examples/servlet/*=scmisWorker to /*=scmisWorker /*.jsp=scmisWorker /servlet/*=scmisWorker That is why in the log that I had sent stated it as such. I have looked on the Apache Tomcat website to find documentation on the setup of IIS with Tomcat. I made the change above because I had forgotten to change it from the example that I found in the documentation, again my apologies for that. Given the settings that I identified in IIS I can not get authenticated. That is why I think it is an authentication issue. I have gone back and checked each setting but cannot find a problem. That is why I sent my setting so that perhaps someone on this list might see something that I have overlooked. I'll keep trying. Thanks. From: André Warnier [...@ice-sa.com] Sent: Monday, May 24, 2010 15:49 To: Tomcat Users List Subject: Re: Question on workers.properties file Savoy, Melinda wrote: Andre, Thanks for the reply. I was finally able to get my the LOG file created. I had NOT setup my virtual website, SCMIS, in addition to the JAKARTA virtual website in IIS and consequently I kept using Tomcat to authenticate instead of using IIS to do so and it was never hitting my website I think it has something to do with the settings in my IIS setting. I still cannot get the value from getRemoteUser() because the user is blank as is indicated in the log below. ANY help/direction would be greatly appreciated. The URL that I am using to access my SCMIS virtual website is: http://localhost/SCMIS/index.jsp In IIS I have the following: Default Web Site - Anonymous access checked and Integrated Windows authentication unchecked Jakarta - virtual web site and Anonymous access checked and Integrated Windows authentication unchecked SCMIS - virtual web site and Anonymous access unchecked and Integrated Windows authentication checked I have attached the entries in the log file that just happened: I think the problem is right there, and in the worker mappings you mentioned earlier : /examples/*=scmisWorker /examples/*.jsp=scmisWorker /examples/servlet/*=scmisWorker Now in your logfile, you have : [Mon May 24 10:10:02.781 2010] [8124:7912] [debug] jk_uri_worker_map.c (850): Attempting to map context URI '/servlet/*=scmisWorker' source 'uriworkermap' [Mon May 24 10:10:02.781 2010] [8124:7912] [debug] jk_uri_worker_map.c (850): Attempting to map context URI '/*.jsp=scmisWorker' source 'uriworkermap' [Mon May 24 10:10:02.781 2010] [8124:7912] [debug] jk_uri_worker_map.c (863): Found a wildchar match '/*.jsp=scmisWorker' Assuming the mappings above, then why is it trying to match '/servlet/*=scmisWorker' and '/*.jsp=scmisWorker' ? That does not fit. Those mappings are not in your list above. Again, I am no expert on IIS or on the Jk redirector in conjunction with it, but my little finger tells me that there is something very wrong somewhere. I have the feeling that your problem is not really related to authentication (or the lack of it). It is that there is some confusion as to the proper setup of IIS and Tomcat together, and how IIS handles virtual websites. Maybe we should restart from the beginning, like here : When you look at the ...\Tomcat 6.0\webapps directory, what are the sub-directories located just below it ? And , just to gain time, out of these, which is the one that corresponds to the application which /should/ be authenticated ? - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org The information contained in this message and any attachments is intended only for the use of the individual or entity to which it is addressed, and may contain information that is PRIVILEGED, CONFIDENTIAL, and exempt from disclosure under applicable law. If you are not the intended recipient, you are prohibited from copying, distributing, or using the information. Please contact the sender immediately by return e-mail and delete the original message from your system. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Question on workers.properties file
I am curious whether you're using IIS for anything other than single sign-on / authentication? If you're not, check out http://waffle.codeplex.com - there's a new Negotiate (Kerberos + NTLM) authenticator. This could remove IIS from your entire picture. dB. @ dblock.org Moscow|Geneva|Seattle|New York -Original Message- From: Savoy, Melinda [mailto:melindasa...@texashealth.org] Sent: Monday, May 24, 2010 7:03 PM To: Tomcat Users List; Tomcat Users List Subject: RE: Question on workers.properties file Andre, Sorry for creating confusion on the other post. I will stick with this post as well. I made changes to the setting here: I think the problem is right there, and in the worker mappings you mentioned earlier : /examples/*=scmisWorker /examples/*.jsp=scmisWorker /examples/servlet/*=scmisWorker to /*=scmisWorker /*.jsp=scmisWorker /servlet/*=scmisWorker That is why in the log that I had sent stated it as such. I have looked on the Apache Tomcat website to find documentation on the setup of IIS with Tomcat. I made the change above because I had forgotten to change it from the example that I found in the documentation, again my apologies for that. Given the settings that I identified in IIS I can not get authenticated. That is why I think it is an authentication issue. I have gone back and checked each setting but cannot find a problem. That is why I sent my setting so that perhaps someone on this list might see something that I have overlooked. I'll keep trying. Thanks. From: André Warnier [...@ice-sa.com] Sent: Monday, May 24, 2010 15:49 To: Tomcat Users List Subject: Re: Question on workers.properties file Savoy, Melinda wrote: Andre, Thanks for the reply. I was finally able to get my the LOG file created. I had NOT setup my virtual website, SCMIS, in addition to the JAKARTA virtual website in IIS and consequently I kept using Tomcat to authenticate instead of using IIS to do so and it was never hitting my website I think it has something to do with the settings in my IIS setting. I still cannot get the value from getRemoteUser() because the user is blank as is indicated in the log below. ANY help/direction would be greatly appreciated. The URL that I am using to access my SCMIS virtual website is: http://localhost/SCMIS/index.jsp In IIS I have the following: Default Web Site - Anonymous access checked and Integrated Windows authentication unchecked Jakarta - virtual web site and Anonymous access checked and Integrated Windows authentication unchecked SCMIS - virtual web site and Anonymous access unchecked and Integrated Windows authentication checked I have attached the entries in the log file that just happened: I think the problem is right there, and in the worker mappings you mentioned earlier : /examples/*=scmisWorker /examples/*.jsp=scmisWorker /examples/servlet/*=scmisWorker Now in your logfile, you have : [Mon May 24 10:10:02.781 2010] [8124:7912] [debug] jk_uri_worker_map.c (850): Attempting to map context URI '/servlet/*=scmisWorker' source 'uriworkermap' [Mon May 24 10:10:02.781 2010] [8124:7912] [debug] jk_uri_worker_map.c (850): Attempting to map context URI '/*.jsp=scmisWorker' source 'uriworkermap' [Mon May 24 10:10:02.781 2010] [8124:7912] [debug] jk_uri_worker_map.c (863): Found a wildchar match '/*.jsp=scmisWorker' Assuming the mappings above, then why is it trying to match '/servlet/*=scmisWorker' and '/*.jsp=scmisWorker' ? That does not fit. Those mappings are not in your list above. Again, I am no expert on IIS or on the Jk redirector in conjunction with it, but my little finger tells me that there is something very wrong somewhere. I have the feeling that your problem is not really related to authentication (or the lack of it). It is that there is some confusion as to the proper setup of IIS and Tomcat together, and how IIS handles virtual websites. Maybe we should restart from the beginning, like here : When you look at the ...\Tomcat 6.0\webapps directory, what are the sub-directories located just below it ? And , just to gain time, out of these, which is the one that corresponds to the application which /should/ be authenticated ? - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org The information contained in this message and any attachments is intended only for the use of the individual or entity to which it is addressed, and may contain information that is PRIVILEGED, CONFIDENTIAL, and exempt from disclosure under applicable law. If you are not the intended recipient, you are prohibited from copying, distributing, or using the information. Please contact the sender immediately by return e-mail and delete the original message from your system.
Re: Javamelody
2010/5/24 Emeric Vernat ever...@free.fr: Looking at catalina.out that you attached in Comment 1 of http://code.google.com/p/javamelody/issues/detail?id=25 I see the following line: 24-may-2010 17:49:19 org.apache.catalina.core.StandardContext start GRAVE: Error filterStart So my guess is that MonitoringFilter.init() failed, and so MonitoringFilter.destroy() was not called, thus the timer was not canceled . Look into your localhost* log. The actual Throwable that was caught in o.a.c.core.StandardContext.filterStart() is written there. Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Question on workers.properties file
Yes. dB, we are a microsoft shop for all practical purposes. We were the first Java web app that was created here at our company and now since JCIFS is not NTLMv2 compliant we had thought we'd go ahead and use IIS that is being used for everything else internet and intranet wise. Thanks for the info again. I had actually emailed you last week asking if the web.xml setting were required and you stated they were not. I think I'm very close to getting this IIS-Tomcat integration resolved but if I cannot get it to work by the end of the week I'll probably try Waffle. There does not seem to be a lot of documentation on the IIS side to make this work so it seems to be more complicated than I had anticipated. I'm trying to recheck, as Andre suggested, again tomorrow and hope that I can get this to work. Regards. From: dB. [dbl...@dblock.org] Sent: Monday, May 24, 2010 18:09 To: Tomcat Users List Subject: RE: Question on workers.properties file I am curious whether you're using IIS for anything other than single sign-on / authentication? If you're not, check out http://waffle.codeplex.com - there's a new Negotiate (Kerberos + NTLM) authenticator. This could remove IIS from your entire picture. dB. @ dblock.org Moscow|Geneva|Seattle|New York -Original Message- From: Savoy, Melinda [mailto:melindasa...@texashealth.org] Sent: Monday, May 24, 2010 7:03 PM To: Tomcat Users List; Tomcat Users List Subject: RE: Question on workers.properties file Andre, Sorry for creating confusion on the other post. I will stick with this post as well. I made changes to the setting here: I think the problem is right there, and in the worker mappings you mentioned earlier : /examples/*=scmisWorker /examples/*.jsp=scmisWorker /examples/servlet/*=scmisWorker to /*=scmisWorker /*.jsp=scmisWorker /servlet/*=scmisWorker That is why in the log that I had sent stated it as such. I have looked on the Apache Tomcat website to find documentation on the setup of IIS with Tomcat. I made the change above because I had forgotten to change it from the example that I found in the documentation, again my apologies for that. Given the settings that I identified in IIS I can not get authenticated. That is why I think it is an authentication issue. I have gone back and checked each setting but cannot find a problem. That is why I sent my setting so that perhaps someone on this list might see something that I have overlooked. I'll keep trying. Thanks. From: André Warnier [...@ice-sa.com] Sent: Monday, May 24, 2010 15:49 To: Tomcat Users List Subject: Re: Question on workers.properties file Savoy, Melinda wrote: Andre, Thanks for the reply. I was finally able to get my the LOG file created. I had NOT setup my virtual website, SCMIS, in addition to the JAKARTA virtual website in IIS and consequently I kept using Tomcat to authenticate instead of using IIS to do so and it was never hitting my website I think it has something to do with the settings in my IIS setting. I still cannot get the value from getRemoteUser() because the user is blank as is indicated in the log below. ANY help/direction would be greatly appreciated. The URL that I am using to access my SCMIS virtual website is: http://localhost/SCMIS/index.jsp In IIS I have the following: Default Web Site - Anonymous access checked and Integrated Windows authentication unchecked Jakarta - virtual web site and Anonymous access checked and Integrated Windows authentication unchecked SCMIS - virtual web site and Anonymous access unchecked and Integrated Windows authentication checked I have attached the entries in the log file that just happened: I think the problem is right there, and in the worker mappings you mentioned earlier : /examples/*=scmisWorker /examples/*.jsp=scmisWorker /examples/servlet/*=scmisWorker Now in your logfile, you have : [Mon May 24 10:10:02.781 2010] [8124:7912] [debug] jk_uri_worker_map.c (850): Attempting to map context URI '/servlet/*=scmisWorker' source 'uriworkermap' [Mon May 24 10:10:02.781 2010] [8124:7912] [debug] jk_uri_worker_map.c (850): Attempting to map context URI '/*.jsp=scmisWorker' source 'uriworkermap' [Mon May 24 10:10:02.781 2010] [8124:7912] [debug] jk_uri_worker_map.c (863): Found a wildchar match '/*.jsp=scmisWorker' Assuming the mappings above, then why is it trying to match '/servlet/*=scmisWorker' and '/*.jsp=scmisWorker' ? That does not fit. Those mappings are not in your list above. Again, I am no expert on IIS or on the Jk redirector in conjunction with it, but my little finger tells me that there is something very wrong somewhere. I have the feeling that your problem is not really related to authentication (or the lack of it). It is that there is some confusion as to the proper setup of IIS and Tomcat together, and how IIS handles virtual websites.
