Re: nio ajp connector status

2010-09-06 Thread Mark Thomas
On 06/09/2010 03:34, Anthony J. Biacco wrote:
 Anybody know if there's any plans to make this connector
 production-ready in the near future for 6.x/7.x?
 Also, what the current major problems/gotchas are for it and the
 circumstances where it may be beneficial vs. APR AJP?

Nope. It was only ever experimental in 6.0.x and has been dropped from
Tomcat 7.

Mark

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: URL Rewrite

2010-09-06 Thread Pid
On 05/09/2010 23:40, Hassan Schroeder wrote:
 On Sun, Sep 5, 2010 at 3:23 PM, michel compu...@videotron.ca wrote:
 
 Or, uh, just don't *ever* use relative links, period.
 
 Sorry, but I don't understand why. In most cases relative links are great,
 simply because they are 'self-updating' when the page gets moved.
 
 ? Obviously not. If you move a page with relative links up or down
 a hierarchy (whether by actually moving it or referencing it from
 somewhere else, as in this case) it's broken. Period.

+1  Michel, you have this the wrong way round.

 Hard-coding is a last-resort solution.

I don't believe I used relative links anywhere in the last 7 or 8 years.

 No, it's the only sane way to write URLs. Sorry, I've spent too much
 time in the last 15 years fixing pointlessly broken stuff because other
 people thought the same thing.

+1

NB: if your best solution is to add the rarely* used base href=, then
you are, in effect, causing the links to behave as absolute ones.

* It's rare for a reason.


p


0x62590808.asc
Description: application/pgp-keys


signature.asc
Description: OpenPGP digital signature


Re: URL Rewrite

2010-09-06 Thread michel


- Original Message - 
From: Pid p...@pidster.com

To: Tomcat Users List users@tomcat.apache.org
Sent: Monday, September 06, 2010 5:02 AM
Subject: Re: URL Rewrite


On 05/09/2010 23:40, Hassan Schroeder wrote:

On Sun, Sep 5, 2010 at 3:23 PM, michel compu...@videotron.ca wrote:


Or, uh, just don't *ever* use relative links, period.


Sorry, but I don't understand why. In most cases relative links are 
great,

simply because they are 'self-updating' when the page gets moved.


? Obviously not. If you move a page with relative links up or down
a hierarchy (whether by actually moving it or referencing it from
somewhere else, as in this case) it's broken. Period.


+1  Michel, you have this the wrong way round.


Hard-coding is a last-resort solution.


I don't believe I used relative links anywhere in the last 7 or 8 years.


No, it's the only sane way to write URLs. Sorry, I've spent too much
time in the last 15 years fixing pointlessly broken stuff because other
people thought the same thing.


+1

NB: if your best solution is to add the rarely* used base href=, then
you are, in effect, causing the links to behave as absolute ones.

* It's rare for a reason.

PID, I would think that whatever method a person uses, it can bring 
problems. There is enough software out there to check a site for broken 
links, better to use them when making changes, even if they aren't totally 
reliable. Funny about them, one claimed I had 12 broken links and wanted $5 
to tell me what they are, while free ones found 1 or 2. A fourth software 
claimed 38 broken links and wanted a credit card number to tell me what they 
where. I am keeping my $5 and my credit card number.


Michel




-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: URL Rewrite

2010-09-06 Thread Wesley Acheson
On Mon, Sep 6, 2010 at 11:02 AM, Pid p...@pidster.com wrote:

 On 05/09/2010 23:40, Hassan Schroeder wrote:
  On Sun, Sep 5, 2010 at 3:23 PM, michel compu...@videotron.ca wrote:
 
  Or, uh, just don't *ever* use relative links, period.
 
  Sorry, but I don't understand why. In most cases relative links are
 great,
  simply because they are 'self-updating' when the page gets moved.
 
  ? Obviously not. If you move a page with relative links up or down
  a hierarchy (whether by actually moving it or referencing it from
  somewhere else, as in this case) it's broken. Period.

 +1  Michel, you have this the wrong way round.

  Hard-coding is a last-resort solution.

 I don't believe I used relative links anywhere in the last 7 or 8 years.

  No, it's the only sane way to write URLs. Sorry, I've spent too much
  time in the last 15 years fixing pointlessly broken stuff because other
  people thought the same thing.

 +1

 NB: if your best solution is to add the rarely* used base href=, then
 you are, in effect, causing the links to behave as absolute ones.

 * It's rare for a reason.


 p

Are we talking about absolute links like
http://example.com/test; or /test (as opposed to test).  If we are
talking about the former my advise would be pretty much opposite to others
advise. You pretty much prevent mirroring and deploying applications to
multiple environments becomes a pain if you specify the domain part of a url
for all URLS.

Much better when working on a team is to define what url syntax should be
used along with specific guidelines on how or why each part is used.

I've commonly run into problems where people have hard coded full absolute
urls into a deployable artifact (not java) alongside the the content it was
supposed to be pointing to.  After a while the company decides to no longer
host the resource and the website of everyone who has that artifact breaks.

Regards,

Wes


Re: URL Rewrite

2010-09-06 Thread Subrat Kumar Pattnaik
I can not login to Apache Tomcat 7 managerplease tell me the
configuration



On Mon, Sep 6, 2010 at 2:32 PM, Pid p...@pidster.com wrote:

 On 05/09/2010 23:40, Hassan Schroeder wrote:
  On Sun, Sep 5, 2010 at 3:23 PM, michel compu...@videotron.ca wrote:
 
  Or, uh, just don't *ever* use relative links, period.
 
  Sorry, but I don't understand why. In most cases relative links are
 great,
  simply because they are 'self-updating' when the page gets moved.
 
  ? Obviously not. If you move a page with relative links up or down
  a hierarchy (whether by actually moving it or referencing it from
  somewhere else, as in this case) it's broken. Period.

 +1  Michel, you have this the wrong way round.

  Hard-coding is a last-resort solution.

 I don't believe I used relative links anywhere in the last 7 or 8 years.

  No, it's the only sane way to write URLs. Sorry, I've spent too much
  time in the last 15 years fixing pointlessly broken stuff because other
  people thought the same thing.

 +1

 NB: if your best solution is to add the rarely* used base href=, then
 you are, in effect, causing the links to behave as absolute ones.

 * It's rare for a reason.


 p




-- 
Let everyday b a dream u can touch.
Let everyday b a luv u can feel.

Let everyday b a reason to live bcoz
life indeed is beautiful.

Have a Gud day.

Subrat P.
+91-9439518745


Re: URL Rewrite

2010-09-06 Thread Wesley Acheson
Please send a new email to the list rather than reply to an unrelated topic.

On Mon, Sep 6, 2010 at 12:09 PM, Subrat Kumar Pattnaik 
patnaik.sub...@gmail.com wrote:

 I can not login to Apache Tomcat 7 managerplease tell me the
 configuration



 On Mon, Sep 6, 2010 at 2:32 PM, Pid p...@pidster.com wrote:

  On 05/09/2010 23:40, Hassan Schroeder wrote:
   On Sun, Sep 5, 2010 at 3:23 PM, michel compu...@videotron.ca wrote:
  
   Or, uh, just don't *ever* use relative links, period.
  
   Sorry, but I don't understand why. In most cases relative links are
  great,
   simply because they are 'self-updating' when the page gets moved.
  
   ? Obviously not. If you move a page with relative links up or down
   a hierarchy (whether by actually moving it or referencing it from
   somewhere else, as in this case) it's broken. Period.
 
  +1  Michel, you have this the wrong way round.
 
   Hard-coding is a last-resort solution.
 
  I don't believe I used relative links anywhere in the last 7 or 8 years.
 
   No, it's the only sane way to write URLs. Sorry, I've spent too much
   time in the last 15 years fixing pointlessly broken stuff because other
   people thought the same thing.
 
  +1
 
  NB: if your best solution is to add the rarely* used base href=, then
  you are, in effect, causing the links to behave as absolute ones.
 
  * It's rare for a reason.
 
 
  p
 



 --
 Let everyday b a dream u can touch.
 Let everyday b a luv u can feel.

 Let everyday b a reason to live bcoz
 life indeed is beautiful.

 Have a Gud day.

 Subrat P.
 +91-9439518745



logging in problem in Tomcat 7

2010-09-06 Thread Subrat Kumar Pattnaik
 I can not login to Apache Tomcat 7 managerplease tell me the
configuration


Re: logging in problem in Tomcat 7

2010-09-06 Thread michel

Please specify the problem beyond I cannot login.

 



- Original Message - 
From: Subrat Kumar Pattnaik patnaik.sub...@gmail.com

To: Tomcat Users List users@tomcat.apache.org
Sent: Monday, September 06, 2010 6:51 AM
Subject: logging in problem in Tomcat 7



I can not login to Apache Tomcat 7 managerplease tell me the
configuration



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: logging in problem in Tomcat 7

2010-09-06 Thread Wesley Acheson
Have you followed the steps per:
http://tomcat.apache.org/tomcat-7.0-doc/manager-howto.html?

Regards,

Wesley Acheson



On Mon, Sep 6, 2010 at 12:58 PM, michel compu...@videotron.ca wrote:

 Please specify the problem beyond I cannot login.



 - Original Message - From: Subrat Kumar Pattnaik 
 patnaik.sub...@gmail.com
 To: Tomcat Users List users@tomcat.apache.org
 Sent: Monday, September 06, 2010 6:51 AM
 Subject: logging in problem in Tomcat 7



  I can not login to Apache Tomcat 7 managerplease tell me the
 configuration


 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org




Manager documentation.

2010-09-06 Thread Wesley Acheson
Hi is the documentation at
http://tomcat.apache.org/tomcat-7.0-doc/manager-howto.html correct. It seems
to mention manager as the role then manager-script.

particularly this excerpt


   - *MemoryRealm* - If you have not customized your
   $CATALINA_BASE/conf/server.xml to select a different one, Tomcat defaults
   to an XML-format file stored at $CATALINA_BASE/conf/tomcat-users.xml,
   which can be edited with any text editor. This file contains an XML
   user for each individual user, which might look something like this:

   user name=craigmcc password=secret roles=standard,manager-script /

   which defines the username and password used by this individual to log
   on, and the role names he or she is associated with. You can add the *
   manager* role to the comma-delimited roles attribute for one or more
   existing users, and/or create new users with that assigned role.
   - *JDBCRealm* - Your user and role information is stored in a database
   accessed via JDBC. Add the *manager-script* role to one or more existing
   users, and/or create one or more new users with this role assigned,
   following the standard procedures for your environment.
   - *JNDIRealm* - Your user and role information is stored in a directory
   server accessed via LDAP. Add the *manager-script* role to one or more
   existing users, and/or create one or more new users with this role assigned,
   following the standard procedures for your environment.

The first time you attempt to issue one of the Manager commands described in
the next section, you will be challenged to log on using BASIC
authentication. The username and password you enter do not matter, as long
as they identify a valid user in the users database who possesses the role *
manager*.


Re: logging in problem in Tomcat 7

2010-09-06 Thread Rainer Jung

On 06.09.2010 12:51, Subrat Kumar Pattnaik wrote:

  I can not login to Apache Tomcat 7 managerplease tell me the
configuration


See: http://tomcat.apache.org/migration.html#Manager_application

Regards,

Rainer

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Errant slow request

2010-09-06 Thread Rainer Jung

On 05.09.2010 22:36, Kevin wrote:

Hi Rainer,

On 9/5/2010 12:55 AM, Rainer Jung wrote:

Can you share the Java thread dumps?

If locking is involved, implementations are not necessarily fair. This
can lead to such behaviour, especially when locks start to become
overloaded.


Here is a ZIP of four javacores: http://www.filesavr.com/hThanGe4
These are from the IBM JVM.
The last javacore is taken after the test when no requests are active.
By the way, I've also noticed these ~10s requests sometimes return 200,
not just 500.


I can't find any thread being active in handling a request. I checked 
the first, second and last dump.


Regards,

Rainer

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Manager documentation.

2010-09-06 Thread Mark Thomas
On 06/09/2010 12:07, Wesley Acheson wrote:
 Hi is the documentation at
 http://tomcat.apache.org/tomcat-7.0-doc/manager-howto.html correct. It seems
 to mention manager as the role then manager-script.

There are a couple of places where manager hasn't been updated to
manager-script. I'll get those fixed for 7.0.3

Mark

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: URL Rewrite

2010-09-06 Thread Hassan Schroeder
On Mon, Sep 6, 2010 at 3:05 AM, Wesley Acheson wesley.ache...@gmail.com wrote:

 Are we talking about absolute links like
 http://example.com/test; or /test (as opposed to test).

/test, i.e. starts with a slash representing the app root

-- 
Hassan Schroeder  hassan.schroe...@gmail.com
twitter: @hassan

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



2 second delays in mod_jk while maintaining workers

2010-09-06 Thread John Baker
Hello,

I've discovered what appears to be a bug in mod_jk 1.2.27 and have also
tried 1.2.30 without success.  I'm using Apache 2.2.3 (on Redhat EL 5.4). 
The problem occurs after previous successful activity and causes a delay
in what looks like socket handling. I noticed bug was resolved in 1.2.30
with respect to sockets but this does not appear to have solved the
problem.

I've set the Jk logging to trace and you can see the debug statements and
the 2s delays:

[Mon Sep 06 15:05:12.121 2010] [24061:1404667232] [debug]
wc_get_worker_for_name::jk_worker.c (116): found a worker
lb-jboss51-integration
[Mon Sep 06 15:05:14.128 2010] [24061:1404667232] [debug]
wc_maintain::jk_worker.c (339): Maintaining worker lb-jboss51-integration
[Mon Sep 06 15:05:14.241 2010] [23945:1404667232] [debug]
wc_maintain::jk_worker.c (339): Maintaining worker lb-jboss51-integration
[Mon Sep 06 15:05:16.644 2010] [23944:1404667232] [debug]
wc_maintain::jk_worker.c (339): Maintaining worker lb-jboss51-integration
[Mon Sep 06 15:05:18.131 2010] [24061:1404667232] [debug]
init_ws_service::mod_jk.c (977): Service protocol=HTTP/1.1 method=GET
ssl=false host=(null) addr=10.117.112.1 name=xxx port=80 auth=(null)
user=(null) laddr=10.117.112.1 raddr=10.117.112.1 uri=/index.jsp
[Mon Sep 06 15:05:18.131 2010] [24061:1404667232] [debug]
get_most_suitable_worker::jk_lb_worker.c (997): found best worker
jboss51-integration2 (jboss51-integration2) using method 'Request'

Here's the workers.properties config:

worker.basic.connection_pool_timeout=90
worker.basic.connection_pool_size=1
worker.basic.socket_keepalive=1
worker.basic.socket_timeout=90
worker.basic.connect_timeout=1000
worker.basic.prepost_timeout=1000
worker.basic.reply_timeout=9
worker.basic.retries=1
worker.basic.recovery_options=27

worker.jboss51-integration1.reference=worker.basic
worker.jboss51-integration1.host=xx
worker.jboss51-integration1.port=13802
worker.jboss51-integration1.type=ajp13
worker.jboss51-integration1.lbfactor=1
worker.jboss51-integration2.reference=worker.basic
worker.jboss51-integration2.host=yy
worker.jboss51-integration2.port=13802
worker.jboss51-integration2.type=ajp13
worker.jboss51-integration2.lbfactor=1
worker.lb-jboss51-integration.type=lb
worker.lb-jboss51-integration.balance_workers=jboss51-integration1,jboss51-integration2
worker.lb-jboss51-integration.sticky_session=0
worker.list=lb-jboss51-integration

I've tried replacing connect_timeout, prepost_timeout and reply_timeout
with ping_timeout, but this does not resolve the matter.

I've tried commenting out various socket/connection settings, but have
come to no firm conclusion to what may be at fault.

The JBoss (5.1, but also a problem with 4.2.3) server.xml file has
connectionTimeout=9 set on the AJP connetor.

Can anyone offer some advice? Or if I need to provide more information,
please detail what is required.

Many thanks,


John




-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



what is the username and password

2010-09-06 Thread Subrat Kumar Pattnaik
Can any one tell me what is the user name and password for Tomcat 7


RE: what is the username and password

2010-09-06 Thread Caldarale, Charles R
 From: Subrat Kumar Pattnaik [mailto:patnaik.sub...@gmail.com] 
 Subject: what is the username and password

 Can any one tell me what is the user name and password for Tomcat 7

It's whatever the Tomcat administrator configures it to be; there is no default.

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: what is the username and password

2010-09-06 Thread Wesley Acheson
Assuming you mean for the manager application still then no we can't you
need to alter the tomcat-users.xml as in the links you were given
previously.

The role should be manager-script and the password is whatever you set in
the tomcat-users file.

Regards,

Wesley Acheson
On Mon, Sep 6, 2010 at 4:29 PM, Subrat Kumar Pattnaik 
patnaik.sub...@gmail.com wrote:

 Can any one tell me what is the user name and password for Tomcat 7



Re: what is the username and password

2010-09-06 Thread Subrat Kumar Pattnaik
I already gave my own username and password. But it is not working.Is there
any configuration for Tomcat 7 to run on my PC

On Mon, Sep 6, 2010 at 8:13 PM, Caldarale, Charles R 
chuck.caldar...@unisys.com wrote:

  From: Subrat Kumar Pattnaik [mailto:patnaik.sub...@gmail.com]
  Subject: what is the username and password

  Can any one tell me what is the user name and password for Tomcat 7

 It's whatever the Tomcat administrator configures it to be; there is no
 default.

  - Chuck


 THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
 MATERIAL and is thus for use only by the intended recipient. If you received
 this in error, please contact the sender and delete the e-mail and its
 attachments from all computers.


 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org




-- 
Let everyday b a dream u can touch.
Let everyday b a luv u can feel.

Let everyday b a reason to live bcoz
life indeed is beautiful.

Have a Gud day.

Subrat P.
+91-9439518745


RE: what is the username and password

2010-09-06 Thread Caldarale, Charles R
 From: Subrat Kumar Pattnaik [mailto:patnaik.sub...@gmail.com] 
 Subject: Re: what is the username and password

 I already gave my own username and password.

What precisely do you mean by that?

 Is there any configuration for Tomcat 7 to run on my PC

Download, install, run:
http://tomcat.apache.org/tomcat-7.0-doc/setup.html#Windows

Reading the docs first is always a good idea.

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: what is the username and password

2010-09-06 Thread Subrat Kumar Pattnaik
When I typed on my browser http://localhost:8080/; its open. But after that
whatever I want to do like Status, Tomcat Manager and Host Manager its
asking for my user name and password. But its not login to my Tomcat
manager. So please briefly tell me what to do for this

Thank You

On Mon, Sep 6, 2010 at 8:23 PM, Caldarale, Charles R 
chuck.caldar...@unisys.com wrote:

  From: Subrat Kumar Pattnaik [mailto:patnaik.sub...@gmail.com]
  Subject: Re: what is the username and password

  I already gave my own username and password.

 What precisely do you mean by that?

  Is there any configuration for Tomcat 7 to run on my PC

 Download, install, run:
 http://tomcat.apache.org/tomcat-7.0-doc/setup.html#Windows

 Reading the docs first is always a good idea.

  - Chuck


 THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
 MATERIAL and is thus for use only by the intended recipient. If you received
 this in error, please contact the sender and delete the e-mail and its
 attachments from all computers.


 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org




-- 
Let everyday b a dream u can touch.
Let everyday b a luv u can feel.

Let everyday b a reason to live bcoz
life indeed is beautiful.

Have a Gud day.

Subrat P.
+91-9439518745


RE: nio ajp connector status

2010-09-06 Thread Anthony J. Biacco
Thanks for that. Have a good holiday.

-Tony
---
Manager, IT Operations
Format Dynamics, Inc.
303-573-1800x27
abia...@formatdynamics.com
http://www.formatdynamics.com


 -Original Message-
 From: Mark Thomas [mailto:ma...@apache.org]
 Sent: Monday, September 06, 2010 1:18 AM
 To: Tomcat Users List
 Subject: Re: nio ajp connector status
 
 On 06/09/2010 03:34, Anthony J. Biacco wrote:
  Anybody know if there's any plans to make this connector
  production-ready in the near future for 6.x/7.x?
  Also, what the current major problems/gotchas are for it and the
  circumstances where it may be beneficial vs. APR AJP?
 
 Nope. It was only ever experimental in 6.0.x and has been dropped from
 Tomcat 7.
 
 Mark
 
 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: interaction between .forward() and security-constraint

2010-09-06 Thread Brian McBride
 Thanks to all who have responded.  The advice and comments have been 
very helpful.


For my application, the MIM vulnerability is a concern, so I expect to 
be using HTTPS for at least some of the traffic.  Next steps are to 
clarify my confidentiality requirements and see what I can find on the 
performance implications of using HTTPS, i.e. is it cheap enough that I 
don't have to worry about using it for all traffic.


Brian




On 04/09/2010 17:27, André Warnier wrote:

Brian McBride wrote:
...


Ok - now to figure out how to implement digest authentication ...

Digest authentication is not very popular, and rather a pain to 
implement yourself.
The reason why it is not very popular is that it is a bit of a halfway 
solution : it does avoid user passwords to be transmitted in clear 
over the net, but it is not safe for man-in-the-middle attacks 
(someone can record the digest, and use it to authenticate later as 
that user).  And it still leaves the subsequent conversation unencrypted.


If you really need security, then you should run your entire site 
under HTTPS.
This will also allow you to do Basic authentication, or form-based 
authentication, since the authentication dialog is encrypted anyway by 
the HTTPS connection.


Maybe also your needs would be a valid reason to use an Apache httpd 
front-end for your site, taking care of the HTTPS side and/or the 
authentication.  httpd can then authenticate the user (using pretty 
much any method of your choice, there are standard modules available 
for all), and just pass the already-authenticated user-id to Tomcat.

Tomcat can then just do the access-control part.
(or if you prefer, you could even do that at the Apache httpd level 
also).


In this case the added overhead would be minimal, because what you do 
at the httpd level, you do not need to do at the Tomcat level and 
vice-versa.


It is all basically a matter of preference.  Not being myself a Tomcat 
or Java guru, I prefer to do these things at the Apache httpd level, 
and keep the Tomcat side simple.

Your mileage may vary.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org




-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: what is the username and password

2010-09-06 Thread 王科选

 On 2010/9/6 22:58, Subrat Kumar Pattnaik wrote:

When I typed on my browser http://localhost:8080/; its open. But after that
whatever I want to do like Status, Tomcat Manager and Host Manager its
asking for my user name and password. But its not login to my Tomcat
manager. So please briefly tell me what to do for this

Thank You

1. open %tomcat_home%\conf\tomcat-users.xml, add this line:
role rolename=manager-gui/
user username=tomcat password=tomcat roles=manager-gui/

2. restart tomcat
3. login in as tomcat/tomcat

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Tomcat Connectors - Dynamic reloading of workers

2010-09-06 Thread Ruslan Gainutdinov
Hello!

I am trying to implement dynamic reloading of workers on top of mod_jk
1.2.30 + apache 2.2.
However, I am getting strange errors related to shared memory and others.

== Initial design decisions ==
- Reloading is checked during watchdog, wc_maintain phase. This way
all connections can be freed, and w_maintain call ensures it is single
run only.
- mtime is checked, just as in jk_uri_worker_map.c
- wc_close/wc_open calls is made, if mtime is changed.
- No JkWorker* directives must be allowed, except JkWorkerFile
- No JkMount directives must be allowed, except JkMountFile

== Errors ==
close_workers::jk_worker.c (252): Closing existing 4 workers
close_workers::jk_worker.c (260): close_workers will destroy worker SATURN-1
ajp_destroy::jk_ajp_common.c (2947): up to 64 endpoints to close
ajp_close_endpoint::jk_ajp_common.c (775): closing endpoint with sd =
4294967295 (socket shutdown)
... 64 lines (note  4294967295  == 0x, somehow such messages
does not occur during standard shutdown procedure)

build_worker_map::jk_worker.c (284): creating worker SATURN-1
wc_create_worker::jk_worker.c (185): about to create instance SATURN-1 of ajp13
ajp_worker_factory::jk_ajp_common.c (2929): allocating ajp worker
record from shared memory
wc_create_worker::jk_worker.c (190): factory for ajp13 failed for SATURN-1
build_worker_map::jk_worker.c (304): failed to create worker SATURN-1
close_workers::jk_worker.c (252): Closing existing 0 workers

wc_create_worker::jk_worker.c (190): factory for ajp13 failed for SATURN-1

this error is particularly confusing and afaik, occurs
in call to jk_shm_alloc_ajp_worker, which in turn fails in
jk_shm.c:768 -  jk_shm_alloc(p, JK_SHM_AJP_WORKER_SIZE);

i wonder,
maybe shared memory/or pool is readonly after initial setup phase?
is there other things I should watch for?

Here is the patch.
http://huksley.sdot.ru/wp-content/uploads/2010/09/mod_jk-1.2.30-reload-workers-patch.zip
I haven`t modified rest of source tree, related to IIS, Apache1X or
other webservers, so it wont compile.

With kindest personal regards,
Ruslan Gainutdinov
rusla...@gmail.com

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: URL Rewrite

2010-09-06 Thread Pid
On 06/09/2010 11:05, Wesley Acheson wrote:
 On Mon, Sep 6, 2010 at 11:02 AM, Pid p...@pidster.com wrote:
 
 On 05/09/2010 23:40, Hassan Schroeder wrote:
 On Sun, Sep 5, 2010 at 3:23 PM, michel compu...@videotron.ca wrote:

 Or, uh, just don't *ever* use relative links, period.

 Sorry, but I don't understand why. In most cases relative links are
 great,
 simply because they are 'self-updating' when the page gets moved.

 ? Obviously not. If you move a page with relative links up or down
 a hierarchy (whether by actually moving it or referencing it from
 somewhere else, as in this case) it's broken. Period.

 +1  Michel, you have this the wrong way round.

 Hard-coding is a last-resort solution.

 I don't believe I used relative links anywhere in the last 7 or 8 years.

 No, it's the only sane way to write URLs. Sorry, I've spent too much
 time in the last 15 years fixing pointlessly broken stuff because other
 people thought the same thing.

 +1

 NB: if your best solution is to add the rarely* used base href=, then
 you are, in effect, causing the links to behave as absolute ones.

 * It's rare for a reason.


 p

 Are we talking about absolute links like
 http://example.com/test; or /test (as opposed to test).  

To correct my imprecise terminology, 'site relative', rather than
'completely absolute', except where the domain changes, (perhaps obviously).

If we are
 talking about the former my advise would be pretty much opposite to others
 advise. You pretty much prevent mirroring and deploying applications to
 multiple environments becomes a pain if you specify the domain part of a url
 for all URLS.


 Much better when working on a team is to define what url syntax should be
 used along with specific guidelines on how or why each part is used.
 
 I've commonly run into problems where people have hard coded full absolute
 urls into a deployable artifact (not java) alongside the the content it was
 supposed to be pointing to.  After a while the company decides to no longer
 host the resource and the website of everyone who has that artifact breaks.

That's a product support fail.


p


0x62590808.asc
Description: application/pgp-keys


signature.asc
Description: OpenPGP digital signature


Re: URL Rewrite

2010-09-06 Thread michel


- Original Message - 
From: Pid p...@pidster.com

To: Tomcat Users List users@tomcat.apache.org
Sent: Monday, September 06, 2010 11:54 AM
Subject: Re: URL Rewrite


On 06/09/2010 11:05, Wesley Acheson wrote:

On Mon, Sep 6, 2010 at 11:02 AM, Pid p...@pidster.com wrote:


On 05/09/2010 23:40, Hassan Schroeder wrote:

On Sun, Sep 5, 2010 at 3:23 PM, michel compu...@videotron.ca wrote:


Or, uh, just don't *ever* use relative links, period.



Sorry, but I don't understand why. In most cases relative links are

great,

simply because they are 'self-updating' when the page gets moved.


? Obviously not. If you move a page with relative links up or down
a hierarchy (whether by actually moving it or referencing it from
somewhere else, as in this case) it's broken. Period.


+1  Michel, you have this the wrong way round.


Hard-coding is a last-resort solution.


I don't believe I used relative links anywhere in the last 7 or 8 years.


No, it's the only sane way to write URLs. Sorry, I've spent too much
time in the last 15 years fixing pointlessly broken stuff because other
people thought the same thing.


+1

NB: if your best solution is to add the rarely* used base href=, then
you are, in effect, causing the links to behave as absolute ones.

* It's rare for a reason.


p


Are we talking about absolute links like
http://example.com/test; or /test (as opposed to test).


To correct my imprecise terminology, 'site relative', rather than
'completely absolute', except where the domain changes, (perhaps obviously).

If we are

talking about the former my advise would be pretty much opposite to others
advise. You pretty much prevent mirroring and deploying applications to
multiple environments becomes a pain if you specify the domain part of a 
url

for all URLS.




Much better when working on a team is to define what url syntax should be
used along with specific guidelines on how or why each part is used.

I've commonly run into problems where people have hard coded full absolute
urls into a deployable artifact (not java) alongside the the content it 
was
supposed to be pointing to.  After a while the company decides to no 
longer
host the resource and the website of everyone who has that artifact 
breaks.


That's a product support fail.


--

I just tried out a broken-link software called XENU, and it did the best job 
of any at finding them.


I recommend it!



Michel


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



buffersize in tomcat 7

2010-09-06 Thread Anthony J. Biacco
Ok, got another simple question. I don't see bufferSize listed in the
tomcat 7 docs under the http/ajp connector..is it still supported?
Didn't see it deprecated in the changelog.

Thanks,

-Tony
---
Manager, IT Operations
Format Dynamics, Inc.
303-573-1800x27
abia...@formatdynamics.com
http://www.formatdynamics.com



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



RE: buffersize in tomcat 7

2010-09-06 Thread Caldarale, Charles R
 From: Anthony J. Biacco [mailto:abia...@formatdynamics.com] 
 Subject: buffersize in tomcat 7

 I don't see bufferSize listed in the tomcat 7 docs under 
 the http/ajp connector..is it still supported?

Hasn't been for ages.  It was deprecated quite some time ago, even in 5.5.

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: interaction between .forward() and security-constraint

2010-09-06 Thread Pid
On 06/09/2010 16:04, Brian McBride wrote:
  Thanks to all who have responded.  The advice and comments have been
 very helpful.
 
 For my application, the MIM vulnerability is a concern, so I expect to
 be using HTTPS for at least some of the traffic.  Next steps are to
 clarify my confidentiality requirements and see what I can find on the
 performance implications of using HTTPS, i.e. is it cheap enough that I
 don't have to worry about using it for all traffic.

Assuming you're not running on hamster powered servers, yes, with modern
software  hardware it's quite cheap.


p

 Brian
 
 
 
 
 On 04/09/2010 17:27, André Warnier wrote:
 Brian McBride wrote:
 ...

 Ok - now to figure out how to implement digest authentication ...

 Digest authentication is not very popular, and rather a pain to
 implement yourself.
 The reason why it is not very popular is that it is a bit of a halfway
 solution : it does avoid user passwords to be transmitted in clear
 over the net, but it is not safe for man-in-the-middle attacks
 (someone can record the digest, and use it to authenticate later as
 that user).  And it still leaves the subsequent conversation unencrypted.

 If you really need security, then you should run your entire site
 under HTTPS.
 This will also allow you to do Basic authentication, or form-based
 authentication, since the authentication dialog is encrypted anyway by
 the HTTPS connection.

 Maybe also your needs would be a valid reason to use an Apache httpd
 front-end for your site, taking care of the HTTPS side and/or the
 authentication.  httpd can then authenticate the user (using pretty
 much any method of your choice, there are standard modules available
 for all), and just pass the already-authenticated user-id to Tomcat.
 Tomcat can then just do the access-control part.
 (or if you prefer, you could even do that at the Apache httpd level
 also).

 In this case the added overhead would be minimal, because what you do
 at the httpd level, you do not need to do at the Tomcat level and
 vice-versa.

 It is all basically a matter of preference.  Not being myself a Tomcat
 or Java guru, I prefer to do these things at the Apache httpd level,
 and keep the Tomcat side simple.
 Your mileage may vary.


 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org

 
 
 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org
 



0x62590808.asc
Description: application/pgp-keys


signature.asc
Description: OpenPGP digital signature


Re: interaction between .forward() and security-constraint

2010-09-06 Thread André Warnier

Pid wrote:
...



Assuming you're not running on hamster powered servers, yes, with modern
software  hardware it's quite cheap.

I find this remark very discriminatory toward hamsters.  What makes you think that 
hamsters are worse than tomcats or penguins or even apples, he ?
We've got several parallel-multi-hamster servers here, and they are doing just fine, even 
with java.  They are also much quieter, more energy-efficient and easier to care for than 
tomcats or camels.



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



[OT] Re: interaction between .forward() and security-constraint

2010-09-06 Thread Pid
On 06/09/2010 17:51, André Warnier wrote:
 Pid wrote:
 ...
 

 Assuming you're not running on hamster powered servers, yes, with modern
 software  hardware it's quite cheap.

 I find this remark very discriminatory toward hamsters.  What makes you
 think that hamsters are worse than tomcats or penguins or even apples, he ?
 We've got several parallel-multi-hamster servers here, and they are
 doing just fine, even with java.  They are also much quieter, more
 energy-efficient and easier to care for than tomcats or camels.

Hamsters are fickle, unpredictable workers and are notorious for having
a short life.  A hamster wheel, contrary to your assertion, is not quiet.

N.B. An average sized camel won't fit inside the average sized server
chassis.


p


0x62590808.asc
Description: application/pgp-keys


signature.asc
Description: OpenPGP digital signature


how to deploy a external file on tomcat

2010-09-06 Thread Subrat Kumar Pattnaik
How can I manually deploy a file to my Tomcat 7 server

I tried like this

file:///path:/file_name

Is this correct path for deploying a file in Tomcat or any other way


Re: Tomcat Connectors - Dynamic reloading of workers

2010-09-06 Thread Mladen Turk

On 09/06/2010 05:54 PM, Ruslan Gainutdinov wrote:

Hello!


this error is particularly confusing and afaik, occurs
in call to jk_shm_alloc_ajp_worker, which in turn fails in
jk_shm.c:768 -  jk_shm_alloc(p, JK_SHM_AJP_WORKER_SIZE);

i wonder,
maybe shared memory/or pool is readonly after initial setup phase?
is there other things I should watch for?



You have run out of shared memory.
By default jk will create shm of size which is
enough to store the initial size of workers. If you
wish to add more, you will have to set JkShmSize
to some value greater then initial number of workers
plus some space that could be used for dynamic ones.

However the best would be to create a number
of disabled workers, and then fill them up with
the runtime data, but then it's already there and
usable.

What are you trying to accomplish?



Regards
--
^TM

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



RE: [OT] Re: interaction between .forward() and security-constraint

2010-09-06 Thread Caldarale, Charles R
 From: Pid [mailto:p...@pidster.com] 
 Subject: [OT] Re: interaction between .forward() and security-constraint

 An average sized camel won't fit inside the average 
 sized server chassis.

But it will fit on a stick.

Since we're completely off in the weeds, I'd like to point out that one of the 
new food items introduced at the Minnesota State Fair this year was 
camel-on-a-stick:

http://minnesota.publicradio.org/display/web/2010/08/30/fair-food/

(For those not familiar with US culture, deep-fried food on a stick is a 
mainstay of state fairs, especially midwestern ones.  Notable recent inventions 
include deep-fried butter on a stick, and deep-fried beer on a stick.  
Cholesterol is your friend...)

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: 2 second delays in mod_jk while maintaining workers

2010-09-06 Thread Mladen Turk

On 09/06/2010 04:16 PM, John Baker wrote:


I've set the Jk logging to trace and you can see the debug statements and
the 2s delays:



Do you use NFS share by any chance to store the
mod_jk log directory data?

What happens if you set
worker.lb-jboss51-integration.lock=O


Regards
--
^TM

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Errant slow request

2010-09-06 Thread Kevin

 Hi Rainer,

On 9/6/2010 4:21 AM, Rainer Jung wrote:
I can't find any thread being active in handling a request. I checked 
the first, second and last dump.


I couldn't either. At first I thought maybe it was Apache Bench timing 
out because I saturated Tomcat's thread pool/backlog, but the access log 
does show the request and that it took 10 seconds, so why wouldn't it 
show up in the javacores? Is there any recommended tracing to run?

Thanks.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: 2 second delays in mod_jk while maintaining workers

2010-09-06 Thread John Baker


On Monday 06 September 2010 18:56:20 you wrote:
 On 09/06/2010 04:16 PM, John Baker wrote:
 
  I've set the Jk logging to trace and you can see the debug statements and
  the 2s delays:
 
 
 Do you use NFS share by any chance to store the
 mod_jk log directory data?

Nope.  All log files are written to local disc, and they are very quick discs..

 What happens if you set
 worker.lb-jboss51-integration.lock=O

I'll get back to you and let you know.

By the way, there's a lot of activity on these Apache servers - do you suspect 
a file lock timeout?

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: [OT] Re: interaction between .forward() and security-constraint

2010-09-06 Thread André Warnier

Pid wrote:

On 06/09/2010 17:51, André Warnier wrote:

Pid wrote:
...


Assuming you're not running on hamster powered servers, yes, with modern
software  hardware it's quite cheap.


I find this remark very discriminatory toward hamsters.  What makes you
think that hamsters are worse than tomcats or penguins or even apples, he ?
We've got several parallel-multi-hamster servers here, and they are
doing just fine, even with java.  They are also much quieter, more
energy-efficient and easier to care for than tomcats or camels.


Hamsters are fickle, unpredictable workers and are notorious for having
a short life.  A hamster wheel, contrary to your assertion, is not quiet.

N.B. An average sized camel won't fit inside the average sized server
chassis.

Neither will a tomcat or a penguin.  I mean, they can be made to fit, but they clog the 
ventilation channels and that leads to severe overheating.
Chuck's stick option is interesting however, and I'll bring it up at the next hardware 
planning meeting.
To get back to hamsters, contrarily to what you assert they are very diligent and fast, 
and they compensate their limited memory with their built-in storage and pipelining 
capabilities; they easily fit into server racks (specially our Roborowskis), and they have 
a few other logistical advantages : they do not generate a lot of heat, so we don't need 
expensive cooling systems; their lifetime approximately matches those of Intel chips, so 
we haven't had to buy new processors in the last couple of years : we just breed them. 
This way we have a natural permanent upgrade process, with always at least 33% 
last-generation processors.
Their one real inconvenient is that they look like mice, so we have to keep them separate 
from our tomcats. But for that we use separate racks, with mod_jk connections.




-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat Connectors - Dynamic reloading of workers

2010-09-06 Thread Ruslan Gainutdinov
Thanks for info, I`ll check it out tomorrow.
AFAIK, on windows, it is not shared memory but some sort of pool.
Isn`t it dynamically grows when needed?

I am trying to create dynamic discovery of workers.
I know there is mod_cluster, however, it is not very stable in Tomcat.
And it does not give me direct control on which web server, which
node/cluster application I want to see.

The only thing missing from mod_jk is reloadable workers file (mounts
already reloaded).

If done properly and well tested, IMHO, reloadable workers file will
be good for everyone.

For example, right now, timeouts or activation can be either set at
startup time
or modified through jkmanager interface. However, when modified
through the jkmanager,
the same settings must be duplicated into workers file - this is
tedious and error-prone.

With kindest personal regards,
Ruslan Gainutdinov
rusla...@gmail.com

On Mon, Sep 6, 2010 at 9:34 PM, Mladen Turk mt...@apache.org wrote:
 On 09/06/2010 05:54 PM, Ruslan Gainutdinov wrote:

 Hello!


 this error is particularly confusing and afaik, occurs
 in call to jk_shm_alloc_ajp_worker, which in turn fails in
 jk_shm.c:768 -  jk_shm_alloc(p, JK_SHM_AJP_WORKER_SIZE);

 i wonder,
 maybe shared memory/or pool is readonly after initial setup phase?
 is there other things I should watch for?


 You have run out of shared memory.
 By default jk will create shm of size which is
 enough to store the initial size of workers. If you
 wish to add more, you will have to set JkShmSize
 to some value greater then initial number of workers
 plus some space that could be used for dynamic ones.

 However the best would be to create a number
 of disabled workers, and then fill them up with
 the runtime data, but then it's already there and
 usable.

 What are you trying to accomplish?



 Regards
 --
 ^TM

 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: [OT] Re: interaction between .forward() and security-constraint

2010-09-06 Thread Pid
On 06/09/2010 20:26, André Warnier wrote:
 Pid wrote:
 On 06/09/2010 17:51, André Warnier wrote:
 Pid wrote:
 ...

 Assuming you're not running on hamster powered servers, yes, with
 modern
 software  hardware it's quite cheap.

 I find this remark very discriminatory toward hamsters.  What makes you
 think that hamsters are worse than tomcats or penguins or even
 apples, he ?
 We've got several parallel-multi-hamster servers here, and they are
 doing just fine, even with java.  They are also much quieter, more
 energy-efficient and easier to care for than tomcats or camels.

 Hamsters are fickle, unpredictable workers and are notorious for having
 a short life.  A hamster wheel, contrary to your assertion, is not quiet.

 N.B. An average sized camel won't fit inside the average sized server
 chassis.

 Neither will a tomcat or a penguin.  I mean, they can be made to fit,
 but they clog the ventilation channels and that leads to severe
 overheating.
 Chuck's stick option is interesting however, and I'll bring it up at the
 next hardware planning meeting.
 To get back to hamsters, contrarily to what you assert they are very
 diligent and fast, and they compensate their limited memory with their
 built-in storage and pipelining capabilities; they easily fit into
 server racks (specially our Roborowskis), and they have a few other
 logistical advantages : they do not generate a lot of heat, so we don't
 need expensive cooling systems; their lifetime approximately matches
 those of Intel chips, so we haven't had to buy new processors in the
 last couple of years : we just breed them. This way we have a natural
 permanent upgrade process, with always at least 33% last-generation
 processors.

 Their one real inconvenient is that they look like mice, so we have to
 keep them separate from our tomcats. But for that we use separate racks,
 with mod_jk connections.

LOL


p


0x62590808.asc
Description: application/pgp-keys


signature.asc
Description: OpenPGP digital signature


Re: how to deploy a external file on tomcat

2010-09-06 Thread Pid
On 06/09/2010 18:21, Subrat Kumar Pattnaik wrote:
 How can I manually deploy a file to my Tomcat 7 server
 
 I tried like this
 
 file:///path:/file_name
 
 Is this correct path for deploying a file in Tomcat or any other way

Unfortunately, your question is extremely hard to understand.  Please
rephrase, supply more detail, put the detail in a suitable context, then
try again.


p


0x62590808.asc
Description: application/pgp-keys


signature.asc
Description: OpenPGP digital signature


Re: Best practice to upgrade (redeploy) .war files

2010-09-06 Thread Ruslan Gainutdinov
You can create ant task to handle this.
We do it this way.

1. We have cluster on apache2.2 using mod_jk
2. All sessions are sticky but nofailover=off means can migrate to
another server
3. Via jkmanager I disable (activation stopped) 2 out of 3 cluster nodes.
4. Wait for any AJP/HTTP thread activity to finish on this nodes
5. Every cluster node have separate webapps folder, e.g. webapps.NODE1
6. Copy war into webapps.NODE1, webapps.NODE2 folders
7. Wait for NODE1 and NODE2 to redeploy app and sessions synchronized.
8. Change activation for NODE1, NODE2 to online, NODE3 to stopped
9. Same as 4. for NODE3
10. Same as 6. for NODE3
11. Same as 7. for NODE3
12. Change activation for NODE3 to online

Looks complicated but actually it is 5 minutes per one apache.
Doing manually, haven`t found time to script it.
For jkmanager scripting - you can use connectors ant task
For 4. you can use jmx as suggested in older article

This way you do seamless migration. But your sessions must be thin
and not contain complex objects (no cache, no connections to db, etc).
Or you must be prepared to recreate them on next request.

p.s. Don`t use FarmWarDeployer - it is not reliable. Can`t handle
offline nodes when they become online,
and gets confused when war to deploy already in the temp folder.

With kindest personal regards,
Ruslan Gainutdinov
rusla...@gmail.com



On Fri, Sep 3, 2010 at 12:20 PM, Domenico Briganti dome...@gmail.com wrote:
 Il giorno ven, 03/09/2010 alle 08.53 +0200, Rainer Frey ha scritto:
 How
 do you actually upgrade deployed applications?

 There is a recent thread on this topic, see
 http://old.nabble.com/Best-practices-for-deployment-on-cluster-environment-td29532493.html

 If you need service continuity, you have to use at least 2 Tomcat
 instances

 Regards,
 Domenico


 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat Connectors - Dynamic reloading of workers

2010-09-06 Thread Rainer Jung

On 06.09.2010 22:04, Ruslan Gainutdinov wrote:

Thanks for info, I`ll check it out tomorrow.
AFAIK, on windows, it is not shared memory but some sort of pool.
Isn`t it dynamically grows when needed?


No. Until version 1.2.26 you had to configure a fixed max size, from 
which the needed memory was allocated, but we didn't give you any 
indication about how much you would need.


Starting with 1.2.27 we check how many load balancer and ajp workers are 
configured and allocate shared memory (or plain memory on Windows) of 
exactly the needed size.


As Mladen says: you can still set a size explicitely using JkShmSize, 
which should disable the automatic calculation. You will get a warning 
though, that you don't need to set JkShmSize (that's true for the 
current functionality in mod_jk).


Regards,

Rainer

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: 2 second delays in mod_jk while maintaining workers

2010-09-06 Thread Rainer Jung

On 06.09.2010 19:56, Mladen Turk wrote:

On 09/06/2010 04:16 PM, John Baker wrote:


I've set the Jk logging to trace and you can see the debug statements and
the 2s delays:



Do you use NFS share by any chance to store the
mod_jk log directory data?


I didn't look at the code now, but the 2 seconds remind me of the 
connection draining during socket shutdown, which could be related to 
jk_maintain?


Regards,

Rainer

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: 2 second delays in mod_jk while maintaining workers

2010-09-06 Thread John Baker
On Monday 06 September 2010 22:57:21 you wrote:
 I didn't look at the code now, but the 2 seconds remind me of the 
 connection draining during socket shutdown, which could be related to 
 jk_maintain?

What's jk_maintain?

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Best practice for running Tomcat on port 80

2010-09-06 Thread jan gestre
Hi Everyone,

I've Googled a lot with respect to the subject, and I wanted to
solicit your advice, basically I want to run Tomcat on port 80, some
already objected to the idea of proxying it via Apache, so I'm looking
at using jsvc or pound instead. I'm using the latest 6.0.29 binary
distribution, and I don't have an idea where to download jsvc, if it's
already included I don't know the location, could someone please
enlighten me on how to do this.

Many thanks!

Jan

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: how to deploy a external file on tomcat

2010-09-06 Thread Subrat Kumar Pattnaik
I want to deploy a directory which is available on another drive. But I
don't want to put that folder into the tomcat/webapps. So can you tell me
the path for that

On Tue, Sep 7, 2010 at 1:50 AM, Pid p...@pidster.com wrote:

 On 06/09/2010 18:21, Subrat Kumar Pattnaik wrote:
  How can I manually deploy a file to my Tomcat 7 server
 
  I tried like this
 
  file:///path:/file_name
 
  Is this correct path for deploying a file in Tomcat or any other way

 Unfortunately, your question is extremely hard to understand.  Please
 rephrase, supply more detail, put the detail in a suitable context, then
 try again.


 p




-- 
Let everyday b a dream u can touch.
Let everyday b a luv u can feel.

Let everyday b a reason to live bcoz
life indeed is beautiful.

Have a Gud day.

Subrat P.
+91-9439518745


Re: Best practice for running Tomcat on port 80

2010-09-06 Thread Wesley Acheson
On Tue, Sep 7, 2010 at 4:34 AM, jan gestre ipcopper...@gmail.com wrote:
 I'm using the latest 6.0.29 binary
 distribution, and I don't have an idea where to download jsvc, if it's
 already included I don't know the location, could someone please
 enlighten me on how to do this.

It can be downloaded as part of this bundle
http://commons.apache.org/daemon/download_daemon.cgi. Instructions are
here http://commons.apache.org/daemon/jsvc.html. Dunno how to use it
even after reading the instructions though.

Regards,

Wes

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Best practice for running Tomcat on port 80

2010-09-06 Thread jan gestre
On Tue, Sep 7, 2010 at 1:02 PM, Wesley Acheson wesley.ache...@gmail.com wrote:
 On Tue, Sep 7, 2010 at 4:34 AM, jan gestre ipcopper...@gmail.com wrote:
 I'm using the latest 6.0.29 binary
 distribution, and I don't have an idea where to download jsvc, if it's
 already included I don't know the location, could someone please
 enlighten me on how to do this.

 It can be downloaded as part of this bundle
 http://commons.apache.org/daemon/download_daemon.cgi. Instructions are
 here http://commons.apache.org/daemon/jsvc.html. Dunno how to use it
 even after reading the instructions though.

 Regards,

 Wes

 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org



Thanks Wes, I was able to locate that file earlier however even after
reading the instructions just like you've said I don't know what's
next.

Based on this -- http://www.dpawson.co.uk/tomcat/linux.html , the
commons-daemon.jar is already in $CATALINA_HOME/bin but inspite of the
author downloaded and compiled the aforementioned. I'm confused.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: 2 second delays in mod_jk while maintaining workers

2010-09-06 Thread Mladen Turk

On 09/06/2010 11:59 PM, John Baker wrote:

On Monday 06 September 2010 22:57:21 you wrote:

I didn't look at the code now, but the 2 seconds remind me of the
connection draining during socket shutdown, which could be related to
jk_maintain?


What's jk_maintain?



Function that maintains the workers
(closes excess connections inactive for a long time)

Anyhow, like Rainer said, if that's the case
you should have something like this in the log (DEBUG)

... Shutdown socket 123 and read 123 lingering bytes in 2 sec.



Regards
--
^TM

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org