RE: Out of Memory exception (hotspot compilation)
From: Leon Kolchinsky [mailto:lkolc...@gmail.com] Subject: Re: Out of Memory exception (hotspot compilation) I'd like to file a bug report on similar issue I had. Can you please tell me where can I do it? Let's see what your original post had in it... Yesterday I've got this error in catalina.out and Tomcat died (I'm attaching hs_err_pid5460.log file): # # A fatal error has been detected by the Java Runtime Environment: # # java.lang.OutOfMemoryError: requested 2147483664 bytes for Chunk::new. Out of swap space? # # Internal Error (allocation.cpp:215), pid=5460, tid=1085901120 # Error: Chunk::new # # JRE version: 6.0_18-b07 # Java VM: Java HotSpot(TM) 64-Bit Server VM (16.0-b13 mixed mode linux-amd64 ) # An error report file with more information is saved as: # /tmp/hs_err_pid5460.log # # If you would like to submit a bug report, please visit: # http://java.sun.com/webapps/bugreport/crash.jsp Does that give you a hint? - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Problems after upgrading to Tomcat6
Hi Caldarale, Charles R Wrote: parent=gnu.gcj.runtime.SystemClassLoader You need to use a real JVM (HotSpot, JRockit, IBM), not a toy one. Remove gcj from your system as quickly as possible. It seems like jpackage.org packages is having dependency towards gcj. Do you know perhaps about another repertory that contains prebuilt packages for Centos 5? It seems strange dough, that jpackage.org should build packages that is designed not to work on the system the packages is build for. Are you certain that it isn't any more convenience way to do this than changing the JVM? Pid Wrote: Download a Tomcat binary from tomcat.apache.org and use that instead? Do you mean the deployer? Or just replacing some of the files? If you mean the deployer, could this overwrite other essential system files and mess up the system? Do tomcat.apache.org have rpm-packages? --- Sincerely David Karlsen - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Can I deploy war file to the running Tomcat, by using my web application?
Hi, I am using Tomcat 6.0.26. Manager user is enabled in my tomcat-users.xml file. Can I deploy war file to the running Tomcat, by using my web application? Could I get some examples about this? Thanks in advance. Best Regards, Ivan Mladenovic
Re: Problems after upgrading to Tomcat6
On 2 June 2010 09:13, David Karlsen dav...@delonic.no wrote: Caldarale, Charles R Wrote: parent=gnu.gcj.runtime.SystemClassLoader You need to use a real JVM (HotSpot, JRockit, IBM), not a toy one. Remove gcj from your system as quickly as possible. It seems like jpackage.org packages is having dependency towards gcj. Do you know perhaps about another repertory that contains prebuilt packages for Centos 5? It seems strange dough, that jpackage.org should build packages that is designed not to work on the system the packages is build for. Are you certain that it isn't any more convenience way to do this than changing the JVM? If you read jpackage.org's mission, it is to use FOSS packages wherever possible. Unfortunately, this means that they prefer GCJ (a toy, as Chuck says) over software that is available for $0 but not free-as-in-speech. This is an ideological choice, not a technical one. And, no, there's no more convenient way to fix this than to change the JVM to a real one. You don't have to use the Sun JVM; it looks like jpackage has details for both the BEA and IBM ones. - Peter
RE: JAAS Realm Authentication with Kerberos
Yes. You can (and should) have a list of roles - everything the user that just logged in has access to / every role he has. cheers dB. dB. @ dblock.org Moscow|Geneva|Seattle|New York -Original Message- From: geofrey rainey [mailto:geofr...@gmail.com] Sent: Tuesday, June 01, 2010 10:13 PM To: Tomcat Users List Subject: Re: JAAS Realm Authentication with Kerberos Right, so let me get this straight; Presently the KerberosLoginModule saves the role information (defined as u...@realm) as a Principal which is then compared against the literal string defined in web.xml. So what you're suggesting is modify the KerberosLoginModule so that, essentially, the credentials saved in the (Role) Principal should reflect exactly what's in (under the Role) web.xml? thank you for your help. On Tue, Jun 1, 2010 at 11:56 PM, dB. dbl...@dblock.org wrote: If you look at the KerberosLoginModule code, it wants to be modified to retrieve roles from somewhere in your system. For example a user database that says that u...@realm is manager. Then you can say auth-constraint ... manager / in web.xml rather than u...@realm. Listing individual users clearly isn't practical. Any authenticated user will be a member of Everyone or DOMAIN\Authenticated Users or DOMAIN\Users, etc. If you are using Active Directory on Windows, you're probably not getting what you want with Kerberos alone. To use web.xml for authorization, you want something like roles = AD groups (and local groups). Retrieving user groups by name from AD is going to yield the wrong result in any kind of real world deployment - you will have hard time getting nested groups or anything from trusted domains. If you're running on Windows and your goal is single sign-on, you may want to try http://waffle.codeplex.com. There're several options, including a login filter and a JAAS authenticator. All use SSPI to login (will do Kerberos and NTLM) and will return not just the user identity, but the user local and domain groups. Hope this helps, -dB. dB. @ dblock.org Moscow|Geneva|Seattle|New York -Original Message- From: geofrey rainey [mailto:geofr...@gmail.com] Sent: Tuesday, June 01, 2010 4:05 AM To: users@tomcat.apache.org Subject: JAAS Realm Authentication with Kerberos Hello, I've been following this fairly self-explanatory document on Kerberos authentication against an AD. If I hard-code the u...@realm in the web.xml file, authentication is successful. However obviously what one really wants is the actual user credentials as stored in the Principals class, javax.security.auth.kerberos.KerberosPrincipal, in the web.xml for each Subject authenticating, but I'm a bit lost as to how to get that information from the class into the web.xml. Any ideas would be appreciated? ( http://wiki.wsmoak.net/cgi-bin/wiki.pl?action=browsediff=1id=TomcatKerberosConfigOnly ) auth-constraint role-nameu...@realm/role-name /auth-constraint Regards, Geofrey. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Problems after upgrading to Tomcat6
Hi Problems fixed. It was a mismatch between JVM-versions. Upgrading Tomcat, did not automaticly upgrade JVM. Seems like when building the Tomcat packages, it did not take into account checking the JVM for wrong version. Upgrading the JVM to the latest GCJ version solved the problem. Thanks. --- Mvh David Karlsen Delonic Technology Group AS - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Problems after upgrading to Tomcat6
Peter Crowther wrote: On 2 June 2010 09:13, David Karlsen dav...@delonic.no wrote: Caldarale, Charles R Wrote: parent=gnu.gcj.runtime.SystemClassLoader You need to use a real JVM (HotSpot, JRockit, IBM), not a toy one. Remove gcj from your system as quickly as possible. It seems like jpackage.org packages is having dependency towards gcj. Do you know perhaps about another repertory that contains prebuilt packages for Centos 5? It seems strange dough, that jpackage.org should build packages that is designed not to work on the system the packages is build for. Are you certain that it isn't any more convenience way to do this than changing the JVM? If you read jpackage.org's mission, it is to use FOSS packages wherever possible. Unfortunately, this means that they prefer GCJ (a toy, as Chuck says) over software that is available for $0 but not free-as-in-speech. This is an ideological choice, not a technical one. And, no, there's no more convenient way to fix this than to change the JVM to a real one. You don't have to use the Sun JVM; it looks like jpackage has details for both the BEA and IBM ones. Let me add something to the above : I do not have specific experience with CentOS, but I do with Debian Linux. When you install Debian Linux, by default it will install and configure as default some specific java package (for example gcj or OpenJdk). When you then install Tomcat from a package, this Tomcat package will detect the installed java, and adapt all its links and references in function of that java package. If you then install the Sun or IBM java package, and make it be the default, that leaves these pre-configured Tomcat links partly wrong, and you get in lots of trouble. The right approach is thus : - de-install Tomcat (and use some purge option to purge all the links it built) - install a real JDK or JRE - configure this JDK/JRE in your OS as the default java. This is important. (For example under Debian this would be done with the command : update-alternatives --config java ) - then re-install Tomcat, so that it finds the correct libraries and creates the correct links, to the real JDK/JRE. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Can I deploy war file to the running Tomcat, by using my web application?
On 02/06/2010 09:30, Ivan Mladenović wrote: Hi, I am using Tomcat 6.0.26. Manager user is enabled in my tomcat-users.xml file. Can I deploy war file to the running Tomcat, by using my web application? Using the manager application you can deploy applications. Could I get some examples about this? http://tomcat.apache.org/tomcat-6.0-doc/manager-howto.html or: http://tomcat.apache.org/tomcat-6.0-doc/deployer-howto.html p Thanks in advance. Best Regards, Ivan Mladenovic signature.asc Description: OpenPGP digital signature
Re: Can I deploy war file to the running Tomcat, by using my web application?
Hi, Thank you for the replay. I solve the problem by using HTTP client. Best Regards, Ivan Mladenovic On Wed, Jun 2, 2010 at 1:06 PM, Pid p...@pidster.com wrote: On 02/06/2010 09:30, Ivan Mladenović wrote: Hi, I am using Tomcat 6.0.26. Manager user is enabled in my tomcat-users.xml file. Can I deploy war file to the running Tomcat, by using my web application? Using the manager application you can deploy applications. Could I get some examples about this? http://tomcat.apache.org/tomcat-6.0-doc/manager-howto.html or: http://tomcat.apache.org/tomcat-6.0-doc/deployer-howto.html p Thanks in advance. Best Regards, Ivan Mladenovic
Re: [OT] Re: problems at thejarbar.org
Hello, with all this confusion (and I am loving it) I will reveal what I am doing :p My website and webapp is to showcase my skills to get work and with a very long term goal of blogging about Java development and having a site to distribute stuff from. There was a question as to why I am using a realm and application based realm and I have no idea howcome people think I am not using only tomcat realm? I do access security stuff in application but only to determine if user is logged in to display in jsp as user is logged in as guest or not. I appreciate this forum and thank you all for replies. hibernate is not doing any security related stuff other than persisiting new users and thier credentials to mysql.Tomcat is only managing security and hibernate everything else... Hope this clears up discussion. :) -- From: Mark Eggers its_toas...@yahoo.com Sent: Tuesday, June 01, 2010 4:27 PM To: Tomcat Users List users@tomcat.apache.org Subject: [OT] Re: problems at thejarbar.org Chris, I think it all depends what you need your Realm to manage. In this instance (single application on Tomcat), then it probably doesn't matter if the Realm sits at the application, Host, or Engine level. Like you've pointed out before it's nice to have a self-contained application with all of the database configurations in one spot. Having some database configurations in META-INF/context.xml, and others in Tomcat's server.xml seems to be a maintenance / migration challenge waiting to happen. If you have multiple applications using the same Realm information, then it might make sense to move the Realm to a Host or Engine level. However I cannot think of a good use case off the top of my head to potentially run multiple hosts under one Engine with the same authentication Realm . . . . Maybe a better place to document all of this and some use case scenarios would be the Wiki. Since I'm thinking about this, I'll see what I can cobble up in the next few days. Thanks for the comments . . . . /mde/ --- On Tue, 6/1/10, Christopher Schultz ch...@christopherschultz.net wrote: From: Christopher Schultz ch...@christopherschultz.net Subject: Re: problems at thejarbar.org To: Tomcat Users List users@tomcat.apache.org Date: Tuesday, June 1, 2010, 3:03 PM -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mark, Yes, but honestly, I'd put the Resource and Realm. configuration into my webapp's META-INF/context.xml file (which requires that localDataSource=true be set on the Realm, btw). - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: [OT] Re: problems at thejarbar.org
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Yucca Nel, On 6/2/2010 8:27 PM, yucca...@live.co.za wrote: There was a question as to why I am using a realm and application based realm and I have no idea howcome people think I am not using only tomcat realm? It's not that we think you're using a non-Tomcat Realm: it's that we think you're using the /wrong/ Tomcat Realm. See... JDBCRealm uses its own set of credentials to connect to the database and uses a single Connection object, requiring lots of synchronization to protect that shared resource. Basically, it's not appropriate for production because of those two facts. Instead, we're suggesting that you set up a DataSource and then use a DataSourceRealm which will use a connection-per-authentication-attempt and is much more high-performance. hibernate is not doing any security related stuff other than persisiting new users and thier credentials to mysql. Tomcat is only managing security and hibernate everything else... Hope this clears up discussion. :) Is hibernate using a Tomcat-created DataSource? If not, you're making your life harder by placing database connection configuration in several places instead of just one. - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkwGW8IACgkQ9CaO5/Lv0PALlwCgwejhODA7bB92UMEbgpIPGb8R 3RoAn3BXDzQWZ5497EKzaSP1W84Mtqu2 =zCtF -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: possible to define/deploy a context but not start it?
I've been experimenting some more, and can't seem to find a solution to my situation. Deploying an app via JMX seems to be broken. Anybody have any ideas, or is this unworkable? Thanks. On 06/01/2010 01:20 PM, Caldarale, Charles R wrote: From: Jeff Ramin [mailto:jeff.ra...@singlewire.com] Subject: Re: possible to define/deploy a context but not start it? Yes, I've done this. However, I don't see a way to deploy/start my app. If I start jconsole when starting tomcat like this, the WebModule beans I would use to deploy/start my app are not present. That MBean doesn't get created until an app is deployed. Instead, you should be able to use the Catalina/Deployer MBean (but I haven't gotten it to work yet). This would be an acceptable solution. However, like you experienced, the deployer mBean doesn't seem to deploy my app. As a workaround, you could use the HTTP text interface to the manager webapp. I'm trying to avoid running the manager webapp, if at all possible. Thanks. -- Jeff Ramin Software Engineer Singlewire Software 2601 W Beltline Hwy #510 Madison, WI 53713 Phone Direct - 608.661.1172 www.singlewire.com - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Tomcat and Pluto
Hi. I am trying to use Pluto together with Tomcat. When I use the startup.bat I get a CATALINA_HOME problem: Environment variables not defined correctly. I cannot see any problems with my CATALINA_HOME (C:\Programmer\Apache Software Foundation\Tomcat 5.5) Any idears? Soren
Re: possible to define/deploy a context but not start it?
On 02/06/2010 16:28, Jeff Ramin wrote: I've been experimenting some more, and can't seem to find a solution to my situation. Deploying an app via JMX seems to be broken. Anybody have any ideas, or is this unworkable? What did you try and what log messages did you see? Were there any stacktrace errors? If there's a problem, we might be able to fix it if you provide some information. p Thanks. On 06/01/2010 01:20 PM, Caldarale, Charles R wrote: From: Jeff Ramin [mailto:jeff.ra...@singlewire.com] Subject: Re: possible to define/deploy a context but not start it? Yes, I've done this. However, I don't see a way to deploy/start my app. If I start jconsole when starting tomcat like this, the WebModule beans I would use to deploy/start my app are not present. That MBean doesn't get created until an app is deployed. Instead, you should be able to use the Catalina/Deployer MBean (but I haven't gotten it to work yet). This would be an acceptable solution. However, like you experienced, the deployer mBean doesn't seem to deploy my app. As a workaround, you could use the HTTP text interface to the manager webapp. I'm trying to avoid running the manager webapp, if at all possible. Thanks. signature.asc Description: OpenPGP digital signature
Re: Tomcat and Pluto
On 02/06/2010 16:35, Søren Blidorf wrote: Hi. I am trying to use Pluto together with Tomcat. When I use the startup.bat I get a CATALINA_HOME problem: Environment variables not defined correctly. I cannot see any problems with my CATALINA_HOME (C:\Programmer\Apache Software Foundation\Tomcat 5.5) How is the variable set and what does the set command (without arguments) say, when run in a DOS window? Can you try using a path without space characters in it? p Any idears? Soren signature.asc Description: OpenPGP digital signature
Re: possible to define/deploy a context but not start it?
When I run jconsole against my tomcat instance, the Catalina/Deployer/localhost/operations/manageApp button is broken. I assume this is the same behavior Charles mentioned below, when he said he was unable to get it to work. No stacktraces or log entries, as it doesn't seem possible from jconsole. Thanks. On 06/02/2010 11:29 AM, Pid wrote: On 02/06/2010 16:28, Jeff Ramin wrote: I've been experimenting some more, and can't seem to find a solution to my situation. Deploying an app via JMX seems to be broken. Anybody have any ideas, or is this unworkable? What did you try and what log messages did you see? Were there any stacktrace errors? If there's a problem, we might be able to fix it if you provide some information. p Thanks. On 06/01/2010 01:20 PM, Caldarale, Charles R wrote: From: Jeff Ramin [mailto:jeff.ra...@singlewire.com] Subject: Re: possible to define/deploy a context but not start it? Yes, I've done this. However, I don't see a way to deploy/start my app. If I start jconsole when starting tomcat like this, the WebModule beans I would use to deploy/start my app are not present. That MBean doesn't get created until an app is deployed. Instead, you should be able to use the Catalina/Deployer MBean (but I haven't gotten it to work yet). This would be an acceptable solution. However, like you experienced, the deployer mBean doesn't seem to deploy my app. As a workaround, you could use the HTTP text interface to the manager webapp. I'm trying to avoid running the manager webapp, if at all possible. Thanks. -- Jeff Ramin Software Engineer Singlewire Software 2601 W Beltline Hwy #510 Madison, WI 53713 Phone Direct - 608.661.1172 www.singlewire.com - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: possible to define/deploy a context but not start it?
2010/6/2 Jeff Ramin jeff.ra...@singlewire.com: I've been experimenting some more, and can't seem to find a solution to my situation. Deploying an app via JMX seems to be broken. The manager webapp uses JMX. So it should be working. (Maybe not the methods that you are trying to use -- I do not know which ones you are trying, but some others). Anybody have any ideas, or is this unworkable? I do not know what are those the WebModule beans that you mentioned and how they do work, are deployed etc. If the only thing that you need is that the incoming requests are not serviced but are replied with error 503 (as Tomcat 5.5 does) or error 404 (as Tomcat 6 does), you can write a Filter that replies with response.sendError() until it is switched into pass-through state with a JMX call or by other means. Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: possible to define/deploy a context but not start it?
On 06/02/2010 11:54 AM, Konstantin Kolinko wrote: I do not know what are those the WebModule beans that you mentioned and how they do work, are deployed etc. The WebModule stuff is available through jconsole when an app has been deployed. They can be used to start/stop a web app. However, they don't exist unless the app has been deployed. Unfortunately, deploying implies starting, which I don't want. If the only thing that you need is that the incoming requests are not serviced but are replied with error 503 (as Tomcat 5.5 does) or error 404 (as Tomcat 6 does), you can write a Filter that replies with response.sendError() until it is switched into pass-through state with a JMX call or by other means. Thanks for the idea, but our webapp must not run at all. It does some things upon initialization that I need to prevent from happening, which is why it must not be started. -- Jeff Ramin Software Engineer Singlewire Software 2601 W Beltline Hwy #510 Madison, WI 53713 Phone Direct - 608.661.1172 www.singlewire.com - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: possible to define/deploy a context but not start it?
If anybody has the time and is willing to give this a try, I'd like to know if it's possible to deploy a webapp via JMX/jconsole in either tomcat 5.5.x or 6.0.x. I can't seem to do it, although it's possible I have a configuration problem. Thanks. On 06/02/2010 11:54 AM, Konstantin Kolinko wrote: 2010/6/2 Jeff Raminjeff.ra...@singlewire.com: I've been experimenting some more, and can't seem to find a solution to my situation. Deploying an app via JMX seems to be broken. The manager webapp uses JMX. So it should be working. (Maybe not the methods that you are trying to use -- I do not know which ones you are trying, but some others). Anybody have any ideas, or is this unworkable? I do not know what are those the WebModule beans that you mentioned and how they do work, are deployed etc. If the only thing that you need is that the incoming requests are not serviced but are replied with error 503 (as Tomcat 5.5 does) or error 404 (as Tomcat 6 does), you can write a Filter that replies with response.sendError() until it is switched into pass-through state with a JMX call or by other means. Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org -- Jeff Ramin Software Engineer Singlewire Software 2601 W Beltline Hwy #510 Madison, WI 53713 Phone Direct - 608.661.1172 www.singlewire.com - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: possible to define/deploy a context but not start it?
2010/6/2 Jeff Ramin jeff.ra...@singlewire.com: If anybody has the time and is willing to give this a try, I'd like to know if it's possible to deploy a webapp via JMX/jconsole in either tomcat 5.5.x or 6.0.x. I can't seem to do it, although it's possible I have a configuration problem. Thanks. On 06/02/2010 11:54 AM, Konstantin Kolinko wrote: 2010/6/2 Jeff Raminjeff.ra...@singlewire.com: I've been experimenting some more, and can't seem to find a solution to my situation. Deploying an app via JMX seems to be broken. The manager webapp uses JMX. So it should be working. (Maybe not the methods that you are trying to use -- I do not know which ones you are trying, but some others). You may start with http://svn.apache.org/viewvc/tomcat/trunk/java/org/apache/catalina/manager/ManagerServlet.java?view=markup Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: possible to define/deploy a context but not start it?
Thanks Konstantin. However, that source code achieves deployment by copying/unpacking a war file to tomcat's webapps directory. What I want to be able to do is already have a context defined, and simply get it deployed/started. I would hope this is possible without resorting to file system operations. On 06/02/2010 01:34 PM, Konstantin Kolinko wrote: 2010/6/2 Jeff Raminjeff.ra...@singlewire.com: If anybody has the time and is willing to give this a try, I'd like to know if it's possible to deploy a webapp via JMX/jconsole in either tomcat 5.5.x or 6.0.x. I can't seem to do it, although it's possible I have a configuration problem. Thanks. You may start with http://svn.apache.org/viewvc/tomcat/trunk/java/org/apache/catalina/manager/ManagerServlet.java?view=markup Best regards, Konstantin Kolinko Jeff Ramin Software Engineer Singlewire Software 2601 W Beltline Hwy #510 Madison, WI 53713 Phone Direct - 608.661.1172 www.singlewire.com - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: [OT] Re: problems at thejarbar.org
Ok I appreciatethis big help. I am expecting a small amount of users though so does that mean that a datasource realm may be overkill? I am not implying that this is what was being said earlier, just trying to learn more. I have noticed though that forum posters seem to assume a lot at times, an example was that I need to learn maven which itself was a good headsup although I am familiar with it already. The sad thing is that with sun/oracle transition maven documentation is rotten and many of the plugins need a revamp, especially ones for full stack jee severs I learnt a little start of this year and everything was too fresh (jboss 6 not even released yet or is it?) or was very outdated for me as I started Java when JSE 6 was released so have little interest in knowing how to use maven in legacy systems unless I get employment in enterprise(hopefuly soon), Java is in a mess st the moment with no news on JSE7 and very little info from Oracle. I took it as a blessing in disguise an started getting to know JSF and hibernate and other stuff. PS can anyone confirm that there is firefox bug when selecting a different locale for i8n testing? I am able only to change locale few times. -- From: Christopher Schultz ch...@christopherschultz.net Sent: Wednesday, June 02, 2010 6:25 AM To: Tomcat Users List users@tomcat.apache.org Subject: Re: [OT] Re: problems at thejarbar.org -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Yucca Nel, On 6/2/2010 8:27 PM, yucca...@live.co.za wrote: There was a question as to why I am using a realm and application based realm and I have no idea howcome people think I am not using only tomcat realm? It's not that we think you're using a non-Tomcat Realm: it's that we think you're using the /wrong/ Tomcat Realm. See... JDBCRealm uses its own set of credentials to connect to the database and uses a single Connection object, requiring lots of synchronization to protect that shared resource. Basically, it's not appropriate for production because of those two facts. Instead, we're suggesting that you set up a DataSource and then use a DataSourceRealm which will use a connection-per-authentication-attempt and is much more high-performance. hibernate is not doing any security related stuff other than persisiting new users and thier credentials to mysql. Tomcat is only managing security and hibernate everything else... Hope this clears up discussion. :) Is hibernate using a Tomcat-created DataSource? If not, you're making your life harder by placing database connection configuration in several places instead of just one. - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkwGW8IACgkQ9CaO5/Lv0PALlwCgwejhODA7bB92UMEbgpIPGb8R 3RoAn3BXDzQWZ5497EKzaSP1W84Mtqu2 =zCtF -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: How can I get the user value in the request forwarded to my Tomcat in my Java app?
Savoy, Melinda wrote: I finally got my Windows 2003 development box setup with the Tomcat Connector and IIS 6.0. The following is my setup: In the server.xml file I have the following in the HOST element: !-- Define the default virtual host Note: XML Schema validation will not work with Xerces 2.2. -- Host name=localhost appBase=webapps unpackWARs=false autoDeploy=false xmlValidation=false xmlNamespaceAware=false !-- SingleSignOn valve, share authentication between web applications Documentation at: /docs/config/valve.html -- !-- Valve className=org.apache.catalina.authenticator.SingleSignOn / -- !-- Access log processes all example. Documentation at: /docs/config/valve.html -- !-- Valve className=org.apache.catalina.valves.AccessLogValve directory=logs prefix=localhost_access_log. suffix=.txt pattern=common resolveHosts=false/ -- /Host Host name=scmisdev appBase=scmisapp unpackWARs=true autoDeploy=false xmlValidation=false xmlNamespaceAware=false Aliasscmisdev/Alias not necessary, since this is already the hostname Aliasscmisdev.texashealth.org/Alias /Host Why this second Host anyway ? In my uriworkermap.properties file: /scmisdev/*=scmisWorker /scmisdev/*.jsp=scmisWorker /scmisdev/servlet/*=scmisWorker the first one covers the other 2, so why have them ? In my workers.properties file: # workers.properties from = http://onjava.com/pub/a/onjava/2002/12/18/tomcat.html # # This file provides minimal jk configuration properties needed to # connect to Tomcat. # # The workers that jk should create and work with worker.list=scmisWorker # # Defining a worker named ajp13w and of type ajp13 # Note that the name and the type do not have to match. # worker.scmisWorker.port=8009 worker.scmisWorker.host=localhost worker.scmisWorker.type=ajp13 In IIS I have the Default Web Site setup with: ISAPI Filters: jakarta and it points to C:\Server\Tomcat 6.0\bin\isapi_redirect.dll And the Directory Security is: Enable anonymous access (checked only) In IIS I have the jakarta virtual directory setup with: Where the local path is: C:\Server\Tomcat 6.0\bin And the Directory Security is: Integrated Windows authentication (checked only) In IIS I have the scmisdev virtual directory setup with: Where the local path is: C:\Server\Tomcat 6.0\scmisapp\ROOT\WEB-INF (points to WEB-INF directory) And the Directory Security is: Integrated Windows authentication (checked only) It seems that you have not learned a lot, or forgotten what you previously learned. Why do you need this last virtual directory in IIS ? The jakarta virtual directory will already re-direct (or rather proxy) all the calls to /scmisdev/* to Tomcat. You do not want IIS to go directly put its nose in the Tomcat directories. You want it to go through the isapi redirector for that, which you already do with the jakarta virtual directory setup. However my result when going to URL http://localhost/scmisdev is: HTTP Status 404 - /scmisdev/ Type Status report Message /scmisdev/ Description The requested resource (/scmisdev/) is not available. Any suggestions or direction would be greatly appreciated. Ok, what does this error page look like ? Does it look like a Tomcat error page ? Melinda, it seems that you are mixing two issues (again) : - the first is in the basic setup of IIS+Tomcat, and how to set things up so that the URLs which you are interested in are actually redirected to Tomcat in the proper way. - the second is, once the first one is working properly, to set things up so that IIS authenticates users which request these URLs, and that the isapi redirector forwards this authentication to Tomcat (which it does, by default). - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Error on startup catalina
Hi, Using recently Tomcat. So far I have used it on a Windows XP machine, and everything went well. I decided to install it on a machine Mac, Mac OS X Snow Leopard, but can not boot. I do not know how to solve the problem, and I need to use Tomcat. Please, help me. Here are some info on startup: *Using CATALINA_BASE: /Library/Tomcat/Home Using CATALINA_HOME: /Library/Tomcat/Home Using CATALINA_TMPDIR: /Library/Tomcat/Home/temp Using JRE_HOME: /Library/Java/Home Using CLASSPATH: /Library/Tomcat/Home/bin/bootstrap.jar at org.apache.catalina.startup.Bootstrap.clinit(Bootstrap.java:55) Caused by: java.lang.ClassNotFoundException: org.apache.juli.logging.LogFactory at java.net.URLClassLoader$1.run(URLClassLoader.java:200) at java.security.AccessController.doPrivileged(Native Method) at java.net.URLClassLoader.findClass(URLClassLoader.java:188) at sun.misc.Launcher$ExtClassLoader.findClass(Launcher.java:244) at java.lang.ClassLoader.loadClass(ClassLoader.java:315) at java.lang.ClassLoader.loadClass(ClassLoader.java:250) at java.lang.ClassLoader.loadClassInternal(ClassLoader.java:398) ... 1 more * Thanks in advance.
RE: Error on startup catalina
From: Sandro Gallo [mailto:sandro.gallo...@gmail.com] Subject: Error on startup catalina Using recently Tomcat. What version of Tomcat? What JVM level? How did you install Tomcat? What are you using to start Tomcat? - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Adding memory to Tomcat 6.0 as a service?
Hello - I am using Tomcat 6.0 on a Windows 2003 Server for the web server piece of our BI tool. We are continually running out of Java Heap Space and I'm trying to update the values but don't see where to do this. I was referred to this link: http://vegdave.wordpress.com/2008/04/04/configure-heap-size-for-tomcat-6 x/ But this link refers to the Catalina.bat file, which I don't seem to have in my version. The version of Tomcat (6.0) that I have installed does not appear to have a catalina.bat file in any of its subdirectories. It is running as a service. I was told that there might be some type of service configuration tool if you are running Tomcat as a service. Is this true? And, if so, what is it called and can I adjust java heap space there? How do I do this? And how do I verify that it is indeed using the new amount of java heap space? When my BI tool starts up, it shows memory allocated in its log only for the scheduler piece of the tool, which I've been told is a separate setting. Any help anyone can give is greatly appreciated! Thanks, Debbie
Re: Error on startup catalina
Sorry, I forgot a bit 'of informations. TOMCAT version: 6.0.26. java -version java version 1.6.0_17 Java(TM) SE Runtime Environment (build 1.6.0_17-b04-248) Java HotSpot(TM) 64-Bit Server VM (build 14.3-b01-101, mixed mode) The version of Java is already on Mac. I installed Tomcat by following this step: 1. download from site, 2. create folder /Library/Tomcat, 3. untar file in this new folder, 4. create simbolic link from /Library/Tomcat/apache-tomcat-6.0.26 to /Library/Tomcat/Home, 5. create env variables CATALINA_HOME, JAVA_HOME. All files in CATALINA_HOME/bin have exec permission. I start Tomcat from startup.sh I also tried with version 5.5, deleting everything and starting over again, and then again to 6.0: in all cases, Tomcat will not start. Thank you very much. Il 02/06/2010 23.37, Caldarale, Charles R ha scritto: From: Sandro Gallo [mailto:sandro.gallo...@gmail.com] Subject: Error on startup catalina Using recently Tomcat. What version of Tomcat? What JVM level? How did you install Tomcat? What are you using to start Tomcat? - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: How can I get the user value in the request forwarded to my Tomcat in my Java app?
Andre, First my apologies for forgetting my earlier setup within my Windows XP box and therefore as you say not learning what I had done previously. Second - this Windows 2003 server was already setup and the second host was created in order that the user could enter a URL of http://scmisdev and then get to the application which is how it has been working. In your comment: It seems that you have not learned a lot, or forgotten what you previously learned. Why do you need this last virtual directory in IIS ? The jakarta virtual directory will already re-direct (or rather proxy) all the calls to /scmisdev/* to Tomcat. You do not want IIS to go directly put its nose in the Tomcat directories. You want it to go through the isapi redirector for that, which you already do with the jakarta virtual directory setup. What do I put in the uriworkermap.properties file that redirects to where the JSP's are? The directory path in Tomcat as to where the app is located is: C:\Server\Tomcat 6.0\scmisapp\ROOT\WEB-INF You are correct that I'm probably mixing up 2 things but I'm trying retain all the info that you and Ranier have each given but sometimes it would appear to me to be confusing. Lastly, let me state again my apologies. It is NOT my intent to waste the time of you or anyone else on this list just trying to get some help. I will try again in the morning. Regards. From: André Warnier [...@ice-sa.com] Sent: Wednesday, June 02, 2010 16:29 To: Tomcat Users List Subject: Re: How can I get the user value in the request forwarded to my Tomcat in my Java app? Savoy, Melinda wrote: I finally got my Windows 2003 development box setup with the Tomcat Connector and IIS 6.0. The following is my setup: In the server.xml file I have the following in the HOST element: !-- Define the default virtual host Note: XML Schema validation will not work with Xerces 2.2. -- Host name=localhost appBase=webapps unpackWARs=false autoDeploy=false xmlValidation=false xmlNamespaceAware=false !-- SingleSignOn valve, share authentication between web applications Documentation at: /docs/config/valve.html -- !-- Valve className=org.apache.catalina.authenticator.SingleSignOn / -- !-- Access log processes all example. Documentation at: /docs/config/valve.html -- !-- Valve className=org.apache.catalina.valves.AccessLogValve directory=logs prefix=localhost_access_log. suffix=.txt pattern=common resolveHosts=false/ -- /Host Host name=scmisdev appBase=scmisapp unpackWARs=true autoDeploy=false xmlValidation=false xmlNamespaceAware=false Aliasscmisdev/Alias not necessary, since this is already the hostname Aliasscmisdev.texashealth.org/Alias /Host Why this second Host anyway ? In my uriworkermap.properties file: /scmisdev/*=scmisWorker /scmisdev/*.jsp=scmisWorker /scmisdev/servlet/*=scmisWorker the first one covers the other 2, so why have them ? In my workers.properties file: # workers.properties from = http://onjava.com/pub/a/onjava/2002/12/18/tomcat.html # # This file provides minimal jk configuration properties needed to # connect to Tomcat. # # The workers that jk should create and work with worker.list=scmisWorker # # Defining a worker named ajp13w and of type ajp13 # Note that the name and the type do not have to match. # worker.scmisWorker.port=8009 worker.scmisWorker.host=localhost worker.scmisWorker.type=ajp13 In IIS I have the Default Web Site setup with: ISAPI Filters: jakarta and it points to C:\Server\Tomcat 6.0\bin\isapi_redirect.dll And the Directory Security is: Enable anonymous access (checked only) In IIS I have the jakarta virtual directory setup with: Where the local path is: C:\Server\Tomcat 6.0\bin And the Directory Security is: Integrated Windows authentication (checked only) In IIS I have the scmisdev virtual directory setup with: Where the local path is: C:\Server\Tomcat 6.0\scmisapp\ROOT\WEB-INF (points to WEB-INF directory) And the Directory Security is: Integrated Windows authentication (checked only) It seems that you have not learned a lot, or forgotten what you previously learned. Why do you need this last virtual directory in IIS ? The jakarta virtual directory will already re-direct (or rather proxy) all the calls to /scmisdev/* to Tomcat. You do not want IIS to go directly put its nose in the Tomcat directories. You want it to go through the isapi redirector for that, which you already do with the jakarta virtual directory setup. However my result when going to URL http://localhost/scmisdev is: HTTP Status 404 - /scmisdev/ Type Status report Message /scmisdev/ Description The requested resource
Re: Adding memory to Tomcat 6.0 as a service?
2010/6/3 Debbie Shapiro dshap...@cardiacscience.com: Have you searched the list archives? It has to be answered a couple of times. The version of Tomcat (6.0) that I have installed For the future, the version is three numbers, x.y.z. I was told that there might be some type of service configuration tool if you are running Tomcat as a service. Is this true? That is bin/tomcat6w.exe Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: JAAS Realm Authentication with Kerberos
okay, thank you very much. On Wed, Jun 2, 2010 at 10:25 PM, dB. dbl...@dblock.org wrote: Yes. You can (and should) have a list of roles - everything the user that just logged in has access to / every role he has. cheers dB. dB. @ dblock.org Moscow|Geneva|Seattle|New York -Original Message- From: geofrey rainey [mailto:geofr...@gmail.com] Sent: Tuesday, June 01, 2010 10:13 PM To: Tomcat Users List Subject: Re: JAAS Realm Authentication with Kerberos Right, so let me get this straight; Presently the KerberosLoginModule saves the role information (defined as u...@realm) as a Principal which is then compared against the literal string defined in web.xml. So what you're suggesting is modify the KerberosLoginModule so that, essentially, the credentials saved in the (Role) Principal should reflect exactly what's in (under the Role) web.xml? thank you for your help. On Tue, Jun 1, 2010 at 11:56 PM, dB. dbl...@dblock.org wrote: If you look at the KerberosLoginModule code, it wants to be modified to retrieve roles from somewhere in your system. For example a user database that says that u...@realm is manager. Then you can say auth-constraint ... manager / in web.xml rather than u...@realm. Listing individual users clearly isn't practical. Any authenticated user will be a member of Everyone or DOMAIN\Authenticated Users or DOMAIN\Users, etc. If you are using Active Directory on Windows, you're probably not getting what you want with Kerberos alone. To use web.xml for authorization, you want something like roles = AD groups (and local groups). Retrieving user groups by name from AD is going to yield the wrong result in any kind of real world deployment - you will have hard time getting nested groups or anything from trusted domains. If you're running on Windows and your goal is single sign-on, you may want to try http://waffle.codeplex.com. There're several options, including a login filter and a JAAS authenticator. All use SSPI to login (will do Kerberos and NTLM) and will return not just the user identity, but the user local and domain groups. Hope this helps, -dB. dB. @ dblock.org Moscow|Geneva|Seattle|New York -Original Message- From: geofrey rainey [mailto:geofr...@gmail.com] Sent: Tuesday, June 01, 2010 4:05 AM To: users@tomcat.apache.org Subject: JAAS Realm Authentication with Kerberos Hello, I've been following this fairly self-explanatory document on Kerberos authentication against an AD. If I hard-code the u...@realm in the web.xml file, authentication is successful. However obviously what one really wants is the actual user credentials as stored in the Principals class, javax.security.auth.kerberos.KerberosPrincipal, in the web.xml for each Subject authenticating, but I'm a bit lost as to how to get that information from the class into the web.xml. Any ideas would be appreciated? ( http://wiki.wsmoak.net/cgi-bin/wiki.pl?action=browsediff=1id=TomcatKerberosConfigOnly ) auth-constraint role-nameu...@realm/role-name /auth-constraint Regards, Geofrey. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Adding memory to Tomcat 6.0 as a service?
2010/6/3 Konstantin Kolinko knst.koli...@gmail.com: 2010/6/3 Debbie Shapiro dshap...@cardiacscience.com: Have you searched the list archives? It has to be answered a couple of times. The version of Tomcat (6.0) that I have installed For the future, the version is three numbers, x.y.z. I was told that there might be some type of service configuration tool if you are running Tomcat as a service. Is this true? That is bin/tomcat6w.exe It you installed Tomcat as a service using an *.exe installer from tomcat.apache.org, you will have Configure Tomcat in the Apache Tomcat 6.0 folder in your programs menu. It runs tomcat6w.exe. Then, look here: http://www.zulutown.com/blog/tag/tomcat6w/ Ignore all the text, but look at the picture. See the Initial memory pool, Maximum memory pool input fields. You will put your values there. Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: question for singlesignon for vertical cluster
To experts
Could someone clarify if singlesignon or clustersinglesignon on tomcat
cluster upon failover ever worked before?
Tomcat 6.0.26 [64bit jdk1.6.0_20] on linux box
mod_proxy_ajp in httpd-2.2.3-43.el5. I may upgrade it to the latest if
singlesignon works upon failover. Otherwise, I may need to look for
another solution.
I have set up deltamanager as follows. But I do not see any
notification upon session replication in catalina.out, but only saw log
upon startup.
I made web.xml in /examples distributable and tested session
replication, and it looks worked upon failover, but do not see any log
upon session replication. /examples/servlets/servlet/SessionExample
I also changed conf/context.xml to make context attributes
distributable:
Context className=org.apache.catalina.ha.context.ReplicatedContext/
So, is anyone able to configure singlesignon or clustersinglesignon
under tomcat cluster and make it work upon failover?
I hope this is only my configuration issue, but it looks like tomcat
cluster always asks a user to re-login upon failover no matter how it is
configured with its own singlesignon feature.
Thanks,
Manager className=org.apache.catalina.ha.session.DeltaManager
expireSessionsOnShutdown=false
notifyListenersOnReplication=true/
Jun 2, 2010 3:16:32 PM org.apache.catalina.ha.session.DeltaManager
getAllClusterSessions
WARNING: Manager [], requesting session state from
org.apache.catalina.tribes.membership.MemberImpl[tcp://{127, 0, 0,
1}:4030,{127, 0, 0, 1},4030, alive=30163,id={76 67 -77 -124 -107 -117 74
90 -99 125 -34 19 64 98 -106 116 }, payload={}, command={}, domain={},
]. This operation will timeout if no session state has been received
within 60 seconds.
Jun 2, 2010 3:16:32 PM org.apache.catalina.ha.session.DeltaManager
waitForSendAllSessions
INFO: Manager []; session state send at 6/2/10 3:16 PM received in 103
ms.
Jun 2, 2010 3:16:32 PM org.apache.catalina.startup.HostConfig
deployDirectory
INFO: Deploying web application directory examples
Jun 2, 2010 3:16:32 PM org.apache.catalina.ha.session.DeltaManager start
INFO: Register manager /examples to cluster element Host with name
localhost
Jun 2, 2010 3:16:32 PM org.apache.catalina.ha.session.DeltaManager start
INFO: Starting clustering manager at /examples
Jun 2, 2010 3:16:32 PM org.apache.catalina.ha.session.DeltaManager
getAllClusterSessions
WARNING: Manager [/examples], requesting session state from
org.apache.catalina.tribes.membership.MemberImpl[tcp://{127, 0, 0,
1}:4030,{127, 0, 0, 1},4030, alive=30163,id={76 67 -77 -124 -107 -117 74
90 -99 125 -34 19 64 98 -106 116 }, payload={}, command={}, domain={},
]. This operation will timeout if no session state has been received
within 60 seconds.
Jun 2, 2010 3:16:32 PM org.apache.catalina.ha.session.DeltaManager
waitForSendAllSessions
-Original Message-
From: Pid [mailto:p...@pidster.com]
Sent: Wednesday, May 26, 2010 3:20 AM
To: Tomcat Users List
Subject: Re: question for singlesignon for vertical cluster
On 24/05/2010 00:36, Okubo, Yasushi (TSD) wrote:
Hi
I would like to enable singlesignon on vertical cluster environment
[multi-nodes on multiple hosts].
We are using clustersinglesignon under host element, and this works in
horizontal cluster, but does not work in vertical cluster environment.
How are you configuring the cluster in each case?
What have you tried?
p
Is there any way to make this work as part of tomcat configuration?
When the node goes down, and a user may be routed to the node located
in
a different host, it will ask a user to relogin again under the
current
setup. We would like to avoid a user for relogging to the
application.
Anyway, if tomcat does not provide singlesigeon solution for vertical
cluster, is there any other open source solutions available?
Thanks,
yasushi
OS: linux/redhat 5 - 64 bit
Jvm : 1.6.x
Tocmat : 6.0.24/26
Host name=localhost appBase=webapps
unpackWARs=true autoDeploy=true
xmlValidation=false xmlNamespaceAware=false
Valve
className=org.apache.catalina.ha.authenticator.ClusterSingleSignOn
/
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
Enabling CGIServlet causes SecurityException in Tomat 6
Hey All, We are using Tomcat 6 on a RedHat box. Today I installed AWStats and AWStats needs CGI. So I enabled the CGIServlet in the Tomcat's web.xml file. When I restarted Tomcat, I got the following error message: SEVERE: Error deploying web application directory docs java.lang.SecurityException: Servlet of class org.apache.catalina.servlets.CGIServlet is privileged and cannot be loaded by this web application How do I get around this issue? Please advise. Thanks for reading. Thank you, Joe Our Tomcat's server.xml file has two Virtual Hosts defined: Host name=localhost appBase=webapps unpackWARs=true autoDeploy=true xmlValidation=false xmlNamespaceAware=false /Host Host name=ourwebsite.com appBase=/home/hosts/ourwebsite/webapps unpackWARs=true autoDeploy=true xmlValidation=false xmlNamespaceAware=false Aliaswww.ourwebsite.com/Alias /Host /home/hosts/ourwebsiet/webapps/ROOT/META-INF/context.xml file is as follows: ?xml version=1.0 encoding=UTF-8? Context privileged=true loader delegate=false / ResourceLink global=jdbc/MySQLDatabase name=jdbc/MySQLDatabase type=javax.sql.DataSource / /Context - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Out of Memory exception (hotspot compilation)
Yep :) You're right Charles. Thanks, Leon On Wed, Jun 2, 2010 at 16:27, Caldarale, Charles R chuck.caldar...@unisys.com wrote: From: Leon Kolchinsky [mailto:lkolc...@gmail.com] Subject: Re: Out of Memory exception (hotspot compilation) I'd like to file a bug report on similar issue I had. Can you please tell me where can I do it? Let's see what your original post had in it... Yesterday I've got this error in catalina.out and Tomcat died (I'm attaching hs_err_pid5460.log file): # # A fatal error has been detected by the Java Runtime Environment: # # java.lang.OutOfMemoryError: requested 2147483664 bytes for Chunk::new. Out of swap space? # # Internal Error (allocation.cpp:215), pid=5460, tid=1085901120 # Error: Chunk::new # # JRE version: 6.0_18-b07 # Java VM: Java HotSpot(TM) 64-Bit Server VM (16.0-b13 mixed mode linux-amd64 ) # An error report file with more information is saved as: # /tmp/hs_err_pid5460.log # # If you would like to submit a bug report, please visit: # http://java.sun.com/webapps/bugreport/crash.jsp Does that give you a hint? - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Enabling CGIServlet causes SecurityException in Tomat 6
I moved the CGI servlet mapping from tomcat/conf/web.xml to /home/hosts/ourwebsite/webapps/ROOT/WEB-INF/web.xml and that did the trick! I figured that the privileged=true in Context.xml applies only to that particular web application and hence I need to move the Servlet Mapping to the webapplication's web.xml file. Thanks, Joe On Wed, Jun 2, 2010 at 5:07 PM, Joe Hansen joe.hansen...@gmail.com wrote: Hey All, We are using Tomcat 6 on a RedHat box. Today I installed AWStats and AWStats needs CGI. So I enabled the CGIServlet in the Tomcat's web.xml file. When I restarted Tomcat, I got the following error message: SEVERE: Error deploying web application directory docs java.lang.SecurityException: Servlet of class org.apache.catalina.servlets.CGIServlet is privileged and cannot be loaded by this web application How do I get around this issue? Please advise. Thanks for reading. Thank you, Joe Our Tomcat's server.xml file has two Virtual Hosts defined: Host name=localhost appBase=webapps unpackWARs=true autoDeploy=true xmlValidation=false xmlNamespaceAware=false /Host Host name=ourwebsite.com appBase=/home/hosts/ourwebsite/webapps unpackWARs=true autoDeploy=true xmlValidation=false xmlNamespaceAware=false Aliaswww.ourwebsite.com/Alias /Host /home/hosts/ourwebsiet/webapps/ROOT/META-INF/context.xml file is as follows: ?xml version=1.0 encoding=UTF-8? Context privileged=true loader delegate=false / ResourceLink global=jdbc/MySQLDatabase name=jdbc/MySQLDatabase type=javax.sql.DataSource / /Context - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
