date:20140204


Mark Thomas wrote:

Cookie handling is fundamentally a complete mess. Specifications exist
but are not fully implemented, are not consistent with related
specifications, etc.

Having tried to sort this out the last time around and having read
Jeremy's great work on documenting where we stand at the present moment,
it often feels like it wouldn't be too hard to make a case that just
about any cookie name or value that isn't an token (as per RFC2616) is
either valid or invalid depending on which specification(s) you choose
to read.

I'd strongly encourage anyone thinking about commenting further on this
thread to take the time to read the wiki page [1] where the Tomcat
committers (and Jeremy in particular) are currently trying to figure out
exactly how Tomcat should handle cookies in the future.

Mark


[1] http://wiki.apache.org/tomcat/Cookies



Hi agree whith everything you say above.

About the Wiki, what seems to be missing is additional lines in the tables showing some 
examples of cookie values containing what English-speaking people often call additional 
or accented characters (and what other people just call characters).  For example, 
what happens when the cookie value is a string like ÄÖÜäöüéèîôâ (that's about the extent 
of what I can enter easily on this current German keyboard).


And let's also reflect on the fact that no matter what else we have been discussing here, 
we have still not provided the original OP of this thread with any useful and practical 
recommendation to resolve his problem, which seems to originate in a variation between how 
Tomcat 6 and Tomcat 7 handle cookies with accented characters in their value.



Otherwise, to generalise the debate, it is not just cookies, but just about anything which 
has to do with non-US-ASCII characters under HTTP and HTML which is a mess, and has been a 
mess for several years if not decades.  The current jumble of RFCs that deal with this 
issue is in the end more confusing than helpful.  And all the current solutions in terms 
of implementation (browser-side as well as server-side) resemble patches over patches over 
wooden legs.


I am not saying that resolving the issue is simple, nor that one can simply ignore the 
past and/or backward-compatibility issues.  But, despite the immense respect I have for 
people like Roy Fielding and their achievements, I cannot but slowly get the impression 
that the Internet RFC mechanism is, in that respect, slowly getting fossilised, and that 
nobody seems to have the energy and drive anymore to think radically, and tackle the issue 
from the top down.


Nobody nowadays discusses anymore that Unicode and UTF-8 provide a form of universal 
solution to most of the issues in terms of alphabets, character sets and encodings 
suitable for 99% of the human users of computers and of the Internet.  And nobody 
discusses anymore that 99% of currently in-use hardware and software can handle arbitrary 
sequences of bytes and bits perfectly fine.


Yet in terms of programming for the Internet, we still have to live with - and work 
around every day - a set of standards and recommendations based on a myriad of alphabets 
and encodings which can each properly represent only a tiny fraction of the languages that 
people worldwide speak and read.
And the issues related to encoding/decoding/transliterating between these different 
alphabets and encodings, are costing thousands of productive hours lost every day, 
independently of the confusions and aggravations that they generate.


Why is it exactly that we can come up with things like websockets and HTML-5 and SOAP and 
java annotations, but not with a new HTTP/HTML version which would make Unicode/UTF-8 the 
*default*, and everything else into exceptions ?


That for the sake of interoperability and mutual comprehension, things like HTTP header 
*names* would be restricted to sequences of printable characters in a limited range that 
is available on all human interface devices and universally readable is one thing; but why 
would HTTP header *values* or URI path or query-string components (which often have to 
carry real-world multilingual textual information) be similarly limited, and confusing and 
inconsistent ?  Why does it still have to be so difficult, in 2014, to create a web 
user-interface application which insures that people from different countries can enter 
their name and place of residence as they know it, and not have the server-side or 
client-side application mangle them ?


If someone were to take the text of RFC 2616 and replace any direct or indirect mention of 
US-ASCII and ISO-8859-1 in it, by Unicode/UTF-8, and present this as an RFC for HTTP 2.0, 
would the Internet instantly crumble ?

Hoe does one go about doing this ?



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: backupManager - backup on all nodes and slowly

2014-02-04 Thread Neven Cvetkovic

On Tue, Feb 4, 2014 at 4:08 AM, Ja kub jjaku...@gmail.com wrote:

 in Manager app I see:
 after
 ab  -k -n 100 -p post.txt http://localhost:18080/petclinic/session/fill

 on 18080 in petclinic 100 sessions
 on 28080 in petclinic 25 sessions
 on 38080 in petclinic 25 sessions
 on 48080 in petclinic 50 sessions  yes two times more

 after adding
 ab  -k -n 900 -p post.txt http://localhost:18080/petclinic/session/fill

 on 18080 in petclinic 1000 sessions
 on 28080 in petclinic 250 sessions
 on 38080 in petclinic 250 sessions
 on 48080 in petclinic 500 sessions    yes still two times more

 Is it not strange ?
 18080, 28080, 38080, 48080 have the same configuration.

 What can be the cause ?



Jakub,

Well, good thing is that all 100 sessions (+900 later) were
replicated/backed up (by the BackupManager) to other cluster members that
host the same application -- 25+25+50 = 100 and 250+250+500 = 1000.

What happens if you repeat the experiment, but without one of the servers,
e.g. 28080?

Can you send your full cluster configuration? How are you starting you
servers? Do they start with the same JVM parameters (-Xmx and -Xms)?

Cheers!
n.

Using different SSL-connector settings for various Context

2014-02-04 Thread Арсений Зинченко

Hi.

Task is - have ability to use HTTP/HTTPS without clientAuth for ROOT, but
enable two-factor auth (clientAuth=true and using trustedstore.jks) for
other Context.

Can somebody please any tips?

Re: Using different SSL-connector settings for various Context


Арсений Зинченко wrote:

Hi.

Task is - have ability to use HTTP/HTTPS without clientAuth for ROOT, but
enable two-factor auth (clientAuth=true and using trustedstore.jks) for
other Context.

Can somebody please any tips?



I don't know much about SSL, but isn't the answer right here ?

http://tomcat.apache.org/tomcat-7.0-doc/config/http.html#SSL_Support

clientAuth  

Set to true if you want the SSL stack to require a valid certificate chain from the client 
before accepting a connection. Set to want if you want the SSL stack to request a client 
Certificate, but not fail if one isn't presented. A false value (which is the default) 
will not require a certificate chain unless the client requests a resource protected by a 
security constraint that uses CLIENT-CERT authentication.


If I understand the above correctly, then setting clientAuth=false in the Connector, and 
then requesting a CLIENT-CERT authentication only in your other Context, should do the 
trick, no ?



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Versioned WAR Application

2014-02-04 Thread Ganeshh HariHaran

I do not want to build one, I am looking which already available
 

Best Regards,
Ganesh Hariharan


It is not the strongest of the species that survives, nor the most intelligent 
that survives. It is the one that is the most adaptable to change. 
— Charles Darwin



On Friday, January 31, 2014 4:30 PM, André Warnier a...@ice-sa.com wrote:
 
Ganeshh HariHaran wrote:

 Hi,
 
 Is there a place where we get a Java application real time with some dummy 
 data, essentially that application should connect to various J2EE conponents 
 like JDBC, JMS, SOAP etc
 
 I am not looking at the sample app comes with tomcat.
  
You mean like this ?

http://lmgtfy.com/?q=java+servlets+real+time+applications


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Using different SSL-connector settings for various Context

2014-02-04 Thread Арсений Зинченко

Yes, this is exactly what I'm want and I see this manual to.
But - how to specify different clientAuth= for different Context's ? I
found SSL Authenticator
Valvehttp://tomcat.apache.org/tomcat-7.0-doc/config/valve.html#SSL_Authenticator_Valve
- but there is nohting about how to do it... And I don't see any
possibility to make with any other Context
optionshttp://tomcat.apache.org/tomcat-7.0-doc/config/context.html#Context_Parameters...



2014-02-04 André Warnier a...@ice-sa.com:

 Арсений Зинченко wrote:

 Hi.

 Task is - have ability to use HTTP/HTTPS without clientAuth for ROOT, but
 enable two-factor auth (clientAuth=true and using trustedstore.jks) for
 other Context.

 Can somebody please any tips?


 I don't know much about SSL, but isn't the answer right here ?

 http://tomcat.apache.org/tomcat-7.0-doc/config/http.html#SSL_Support

 clientAuth

 Set to true if you want the SSL stack to require a valid certificate chain
 from the client before accepting a connection. Set to want if you want the
 SSL stack to request a client Certificate, but not fail if one isn't
 presented. A false value (which is the default) will not require a
 certificate chain unless the client requests a resource protected by a
 security constraint that uses CLIENT-CERT authentication.

 If I understand the above correctly, then setting clientAuth=false in
 the Connector, and then requesting a CLIENT-CERT authentication only in
 your other Context, should do the trick, no ?


 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Using different SSL-connector settings for various Context


Hi.

Please don't top post here. Respond below the text to which you are responding.
It's easier to read that way. See below.



2014-02-04 André Warnier a...@ice-sa.com:


Арсений Зинченко wrote:


Hi.

Task is - have ability to use HTTP/HTTPS without clientAuth for ROOT, but
enable two-factor auth (clientAuth=true and using trustedstore.jks) for
other Context.

Can somebody please any tips?



I don't know much about SSL, but isn't the answer right here ?

http://tomcat.apache.org/tomcat-7.0-doc/config/http.html#SSL_Support

clientAuth

Set to true if you want the SSL stack to require a valid certificate chain
from the client before accepting a connection. Set to want if you want the
SSL stack to request a client Certificate, but not fail if one isn't
presented. A false value (which is the default) will not require a
certificate chain unless the client requests a resource protected by a
security constraint that uses CLIENT-CERT authentication.

If I understand the above correctly, then setting clientAuth=false in
the Connector, and then requesting a CLIENT-CERT authentication only in
your other Context, should do the trick, no ?




Арсений Зинченко wrote:
 Yes, this is exactly what I'm want and I see this manual to.
 But - how to specify different clientAuth= for different Context's ? I
 found SSL Authenticator
 
Valvehttp://tomcat.apache.org/tomcat-7.0-doc/config/valve.html#SSL_Authenticator_Valve
 - but there is nohting about how to do it... And I don't see any
 possibility to make with any other Context
 
optionshttp://tomcat.apache.org/tomcat-7.0-doc/config/context.html#Context_Parameters...


Sorry, as I mentioned earlier, I do not know much about SSL and cannot help you with the 
details.


One thing though : the setup of an SSL connection happens *before* Tomcat even knows to 
which application the browser wants to talk.  Some properties of that connection may not 
be changeable anymore, at the level of a Context.
You can just tell the Context to make use or not of some of these properties, not really 
change them.


In your case though, it seems that you want the following :
- clients connect via SSL
- some Context's then (later) require clientAuth
- and some other Context's (later) do not require clientAuth
That should be solvable just by the auth-requirements of each Context.

If you want some Context's to be accessible via HTTP/HTTPS, and others only via HTTPS, 
that also is a parameter that you can specify in each context's web.xml.

(transport-guarantee or something like that)



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Using different SSL-connector settings for various Context

2014-02-04 Thread Арсений Зинченко

 Please don't top post here. Respond below the text to which you are
responding.
It's easier to read that way. See below.

Sorry - it's Google formatting if press Answer.

 That should be solvable just by the auth-requirements of each Context.

I tried google it - but nothing... Can you please give liink to something
about it?

Plus some additional info.

Now - we use configuration via web.xml:

  security-constraint
web-resource-collection
  web-resource-name*/web-resource-name
  url-pattern/sourcename/*/url-pattern
/web-resource-collection
auth-constraint
  role-namecert/role-name
/auth-constraint
user-data-constraint
  transport-guaranteeCONFIDENTIAL/transport-guarantee
/user-data-constraint
  /security-constraint
  login-config
auth-methodCLIENT-CERT/auth-method
  /login-config
  security-role
role-namecert/role-name
  /security-role

And for ROOT - configuration described in server.xml:

   Context docBase=ROOT path=
 Valve className=org.apache.catalina.valves.SomeAuthValve
 FLDAPAppName=SOME
 FLDAPDebug=1
 FLDAPLogin=https://some; /
  /Context

So task is - create second context for 
url-pattern/sourcename/*/url-pattern with
auth-methodCLIENT-CERT/auth-method but in Context terminology.


2014-02-04 André Warnier a...@ice-sa.com:

 Hi.

 Please don't top post here. Respond below the text to which you are
 responding.
 It's easier to read that way. See below.



 2014-02-04 André Warnier a...@ice-sa.com:

  Арсений Зинченко wrote:

  Hi.

 Task is - have ability to use HTTP/HTTPS without clientAuth for ROOT,
 but
 enable two-factor auth (clientAuth=true and using trustedstore.jks)
 for
 other Context.

 Can somebody please any tips?


  I don't know much about SSL, but isn't the answer right here ?

 http://tomcat.apache.org/tomcat-7.0-doc/config/http.html#SSL_Support

 clientAuth

 Set to true if you want the SSL stack to require a valid certificate
 chain
 from the client before accepting a connection. Set to want if you want
 the
 SSL stack to request a client Certificate, but not fail if one isn't
 presented. A false value (which is the default) will not require a
 certificate chain unless the client requests a resource protected by a
 security constraint that uses CLIENT-CERT authentication.

 If I understand the above correctly, then setting clientAuth=false in
 the Connector, and then requesting a CLIENT-CERT authentication only in
 your other Context, should do the trick, no ?



 Арсений Зинченко wrote:
  Yes, this is exactly what I'm want and I see this manual to.
  But - how to specify different clientAuth= for different Context's ? I
  found SSL Authenticator
  Valvehttp://tomcat.apache.org/tomcat-7.0-doc/config/
 valve.html#SSL_Authenticator_Valve

  - but there is nohting about how to do it... And I don't see any
  possibility to make with any other Context
  optionshttp://tomcat.apache.org/tomcat-7.0-doc/config/
 context.html#Context_Parameters...
 
 
 Sorry, as I mentioned earlier, I do not know much about SSL and cannot
 help you with the details.

 One thing though : the setup of an SSL connection happens *before* Tomcat
 even knows to which application the browser wants to talk.  Some properties
 of that connection may not be changeable anymore, at the level of a Context.
 You can just tell the Context to make use or not of some of these
 properties, not really change them.

 In your case though, it seems that you want the following :
 - clients connect via SSL
 - some Context's then (later) require clientAuth
 - and some other Context's (later) do not require clientAuth
 That should be solvable just by the auth-requirements of each Context.

 If you want some Context's to be accessible via HTTP/HTTPS, and others
 only via HTTPS, that also is a parameter that you can specify in each
 context's web.xml.
 (transport-guarantee or something like that)




 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Using different SSL-connector settings for various Context


Арсений Зинченко wrote:
...



I tried google it - but nothing... Can you please give liink to something
about it?



I believe that this is all part of the Servlet Specification, which Tomcat only 
implements.  So the Tomcat docs will not repeat everything.

Look here for some pointers :

http://tomcat.apache.org/tomcat-7.0-doc/index.html
The specifications item points here :
http://wiki.apache.org/tomcat/Specifications#Java_Servlet_Specifications





-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Tomcat 7 / Java 7

2014-02-04 Thread Singh, Ragini

Thank you Christopher!! I understand that the message is just an INFO and not 
an error. Also, I haven’t installed tcnative as I am not using it. My question 
was regarding the difference in messages when I change JAVA version using 
JAVA_HOME. Is there a way I can find out which version of JAVA Tomcat is using?

Thank you,
-Ragini

-Original Message-
From: Christopher Schultz [mailto:ch...@christopherschultz.net] 
Sent: Monday, February 03, 2014 3:42 PM
To: Tomcat Users List
Subject: Re: Tomcat 7 / Java 7

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Ragini,

On 2/3/14, 4:19 PM, Singh, Ragini wrote:
 I upgraded Java 1.6.45 to Java 1.7.51 using
 java-1.7.0-oracle.x86_64 : Oracle Java Runtime Environment on RHEL 5. 
 Used the alternatives command to make the Java 7 as Java version. 
 Now in my custom startup script if I define JAVA_HOME as 
 JAVA_HOME=/usr/lib/jvm/java tomcat 7 recognizes the java as 1.6 ( 
 the previous version) and gives this message INFO: The APR based 
 Apache Tomcat Native library which allows optimal performance in 
 production environments was not found on the java.library.path:
 /usr/lib/jvm/java-1.6.0-sun-1.6.0.45
 .x86_64/jre/lib/amd64/server:/usr/lib/jvm/java-1.6.0-sun-1.6.0.45.x86_
 64/jre/lib/amd64:/usr/lib/jvm/java-1.6.0-sun-1.6.0.45.x86_64/jre/../li
 b/amd64:/usr/java/packages/lib/amd64:/usr/lib

 
64:/lib64:/lib:/usr/lib
 
 I modified the JAVA_HOME to
 JAVA_HOME=/usr/lib/jvm/jre-1.7.0-oracle.x86_64. Now tomcat starts 
 and gives the message as INFO: The APR based Apache Tomcat Native 
 library which allows optimal performance in production environments 
 was not found on the java.library.path:
 /usr/java/packages/lib/amd64:/usr/lib64:/lib64:/lib:/usr/lib
 
 I believe it is not recognizing the correct Java version which is 1.7. 
 Am I missing anything ?

Have you installed tcnative? Installing tcnative is a prerequisite for using 
tcnative.

Note that the above is an INFO message and not an error in any way.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=JVDD
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: [OT] cookie issue with Tomcat 7 - does not accept the character é

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

André,

On 2/4/14, 5:59 AM, André Warnier wrote:
 Why is it exactly that we can come up with things like websockets
 and HTML-5 and SOAP and java annotations, but not with a new
 HTTP/HTML version which would make Unicode/UTF-8 the *default*, and
 everything else into exceptions ?

Because the standards were written without the benefit of hindsight.

Talk to us in 10 years when Websocket looks like a rats-nest of
false-starts, failed standards, and divergent implementations.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQIcBAEBCAAGBQJS8RD8AAoJEBzwKT+lPKRYvmMP/iZNbLzx7xIAxUfcKSbbtRvc
9ZGiTJ2oi646lHcWj8DKyr7mEiNiiuptRMswOflsYyK6ZhvTYr0LZhhvoY7IPto0
DejnwnAO+ywMjMk5FuVChrO535QCAZWxlgyRo6aAyl4Kwppaf/7OPl4/MRlu2O4J
7GG+i4pnPQKzBpGy5o8X7l6miMNXjPjUHXrGlZSUyn8wj3zOLqBbgTkSzQQuCkYj
GL/evamN2L4AX6YNdRIXVWQfVWvv76qmznd5cIVntcx0+ryj+kJOcNcEjMah+OwK
6Qh6pfJS1BumWL+EavjhXc9TtM5W5wkemfmN3KxomfzmHqkkFfi9GwKvmCrl5JcB
F/G9rd+N23eamUXioK84bE+3JP33KfELSbjv7AVVFHP/zhkxf/Bl031hqVQ6XsKU
cBQ26tx4ATGpBhaKjrvrbDGEUkVszsH9LiWpPGrSlVRKupPvmrv54kOuTiGhgCZc
xoY3LlmEA8r3DQtyAGqUS045j0+QIo8VWByqSDloAqEvROBWHGJwZ6drTXRpd0yw
/pKtVluR4ECN3nByqvyB866HjgqoVkpl77hEqcK/4k7G9kDdmDAzV3/5r/377/Bf
YrIXC+HN5zSgycSfG+O+HLvNYL1lfJwRdMrjqzZC+jpVewalGgqUkgW/HUVTbWra
E1qpB0AEnfaF9KGuraJv
=I3X1
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Versioned WAR Application

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Ganeshh,

On 2/4/14, 7:08 AM, Ganeshh HariHaran wrote:
 I do not want to build one, I am looking which already available
 
  Best Regards, Ganesh
 Hariharan
 
 
 It is not the strongest of the species that survives, nor the most
 intelligent that survives. It is the one that is the most adaptable
 to change. — Charles Darwin
 
 
 
 On Friday, January 31, 2014 4:30 PM, André Warnier a...@ice-sa.com
 wrote:
 
 Ganeshh HariHaran wrote:
 
 Hi,
 
 Is there a place where we get a Java application real time with
 some dummy data, essentially that application should connect to
 various J2EE conponents like JDBC, JMS, SOAP etc
 
 I am not looking at the sample app comes with tomcat.
 
 You mean like this ?
 
 http://lmgtfy.com/?q=java+servlets+real+time+applications

Do you have any other requirements? There are literally hundreds of
freely-available Java-based applications available.

You have not defined real time, dummy data, or connects to J2EE
components.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQIcBAEBCAAGBQJS8RGNAAoJEBzwKT+lPKRYCuYQALfLRv9SbYvNsIgn03w1hFsj
7sofjgB9+wGL+Kjh54CRSCV22oENK5xW3QDMZ8kHw0nBRflSPUTOFPdn8EA53d89
SNYFbOIm8kI7nRecES2QHtdEs0LXHHEKQ/77KsV5Fg44jA9chFEme8xsVpiVWfv7
hU9VA7JIs+tRyExKTduULaesWW+dGDtaGu1AM/k2qAHcHko3RBfNYDBRFWSaGnV6
5cBqBUYygeGxkcRzJ5VlaUAA7BYNXFDthDlGoDUXS4avQVqwkSJKXZmfocHbMQrF
790s+ph1eSzH/XNeqqYUmrN73TW6SGUYj8q8Vf5PzIfdjsg6JF80bb0OisAvX0Ac
0cIft2wten+cZAad/ZjMOErVE8t+jkqmmGQzqk/jRrjX/58eGG76NJLHeZ/I1L/p
Ei//yCf15R4bBvtbhRfW6iTFPTvf/LZgU/vZ5PQbfRLBnG5kQMQWHn9RwLd6Vrkf
4PpDi22m33D6OZeOR7gcs+LcySatrDSyW0PNX3V0cxHI8ZYOS8ZsP/SwLj99LB9o
CcbySqhTqB9Jbth7V8edkEeU6pVaTR4cLoSDWwBiPfJuGZdYZn6W4KylL2+K03uA
3PzpelW46bRp8MqLuQEgnmhtm1iAygG6jPoKR6aubWlSmivOHr6U0lDwdtXS6s94
TfzJTBcE1AFQvxgcfSHM
=E1bl
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Using different SSL-connector settings for various Context

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Арсений,

On 2/4/14, 6:32 AM, Арсений Зинченко wrote:
 Hi.
 
 Task is - have ability to use HTTP/HTTPS without clientAuth for
 ROOT, but enable two-factor auth (clientAuth=true and using
 trustedstore.jks) for other Context.
 
 Can somebody please any tips?

You have two options:

1. Set clientAuth=want in the Connector and then set
auth-typeCLIENT-CERT/auth-type in your application's web.xml (this
will force the user to provide a certificate to authenticate to the
web application when necessary, but not until they hit a protected
resource).

2. Use more than one Connector with different clientAuth settings,
and map the connectors separately to your web application. Note that
Tomcat can't do this directly for you. Instead, you'd have to put
another network component (such as httpd) in front of Tomcat, like this:

HTTPS:443  -- httpd  --- 8443  --- /webappA
 |
 +--- 8444  --- /webappB

You don't have to use HTTPS between httpd and Tomcat; you can use AJP
which can send the client certificate over to Tomcat just fine.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=HzpO
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Tomcat 7 / Java 7

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Ragini,

On 2/4/14, 10:05 AM, Singh, Ragini wrote:
 Thank you Christopher!! I understand that the message is just an
 INFO and not an error. Also, I haven’t installed tcnative as I am
 not using it. My question was regarding the difference in messages
 when I change JAVA version using JAVA_HOME. Is there a way I can
 find out which version of JAVA Tomcat is using?

You can use jinfo pid but it only works within the same JVM:
you'll have to use the right JVM version to connect in the first place.

You can also connect via JMX or similar to inspect the JVM state. Take
a look at the system properties which will tell you what's going on.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=MlX8
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Tomcat 7 / Java 7

2014-02-04 Thread Mark Eggers


Please don't top post.

On 2/4/2014 7:05 AM, Singh, Ragini wrote:

Thank you Christopher!! I understand that the message is just an INFO and not 
an error. Also, I haven’t installed tcnative as I am not using it. My question 
was regarding the difference in messages when I change JAVA version using 
JAVA_HOME. Is there a way I can find out which version of JAVA Tomcat is using?

Thank you,
-Ragini

-Original Message-
From: Christopher Schultz [mailto:ch...@christopherschultz.net]
Sent: Monday, February 03, 2014 3:42 PM
To: Tomcat Users List
Subject: Re: Tomcat 7 / Java 7

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Ragini,

On 2/3/14, 4:19 PM, Singh, Ragini wrote:

I upgraded Java 1.6.45 to Java 1.7.51 using
java-1.7.0-oracle.x86_64 : Oracle Java Runtime Environment on RHEL 5.
Used the alternatives command to make the Java 7 as Java version.
Now in my custom startup script if I define JAVA_HOME as
JAVA_HOME=/usr/lib/jvm/java tomcat 7 recognizes the java as 1.6 (
the previous version) and gives this message INFO: The APR based
Apache Tomcat Native library which allows optimal performance in
production environments was not found on the java.library.path:
/usr/lib/jvm/java-1.6.0-sun-1.6.0.45
.x86_64/jre/lib/amd64/server:/usr/lib/jvm/java-1.6.0-sun-1.6.0.45.x86_
64/jre/lib/amd64:/usr/lib/jvm/java-1.6.0-sun-1.6.0.45.x86_64/jre/../li
b/amd64:/usr/java/packages/lib/amd64:/usr/lib



64:/lib64:/lib:/usr/lib


I modified the JAVA_HOME to
JAVA_HOME=/usr/lib/jvm/jre-1.7.0-oracle.x86_64. Now tomcat starts
and gives the message as INFO: The APR based Apache Tomcat Native
library which allows optimal performance in production environments
was not found on the java.library.path:
/usr/java/packages/lib/amd64:/usr/lib64:/lib64:/lib:/usr/lib

I believe it is not recognizing the correct Java version which is 1.7.
Am I missing anything ?


Have you installed tcnative? Installing tcnative is a prerequisite for using 
tcnative.

Note that the above is an INFO message and not an error in any way.

- -chris



Manager application shows the Java version at the bottom of the page.

/mde/

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Tomcat and Chunked Transfer-Encoding

2014-02-04 Thread javier_espana


I installed Tomcat v7.0.42 as a Windows server (I am running Windows 7).
When I attempt to start it, I get the following message
(Embedded image moved to file: pic54835.gif)

If I run the STARTUP.BAT batch file, it starts OK.

Has anyone run into that situation before?

Any help would be greatly appreciated.

Thank you

Javier España
Sr. Technical Analyst
Honda North American Services, LLC.
Information Services Division
ISD Applications
1919 Torrance Blvd.,
Torrance, CA 90501
(310) 781-4514
Email: javier_esp...@hna.honda.com
www.honda.com

***Beginning April 1, 2013 my email changed to javier_esp...@hna.honda.com.
Please update your contact information.
Thank you.***

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Tomcat and Chunked Transfer-Encoding

2014-02-04 Thread Mark Eggers


On 2/4/2014 10:59 AM, javier_esp...@hna.honda.com wrote:


I installed Tomcat v7.0.42 as a Windows server (I am running Windows 7).
When I attempt to start it, I get the following message
(Embedded image moved to file: pic54835.gif)

If I run the STARTUP.BAT batch file, it starts OK.

Has anyone run into that situation before?

Any help would be greatly appreciated.

Thank you

Javier España
Sr. Technical Analyst
Honda North American Services, LLC.
Information Services Division
ISD Applications
1919 Torrance Blvd.,
Torrance, CA 90501
(310) 781-4514
Email: javier_esp...@hna.honda.com
www.honda.com

***Beginning April 1, 2013 my email changed to javier_esp...@hna.honda.com.
Please update your contact information.
Thank you.***


Don't hijack threads. Instead of hitting 'reply' to start a new message, 
write a new message with a new subject.


The list strips most attachments, so it's difficult to tell what's going on.

Could be that you're trying to authenticate against a domain service 
account? I'm just guessing since we cannot see your image.


. . . . just my two cents.
/mde/

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

unable to start Tomcat through the Windows Services panel

2014-02-04 Thread javier_espana

Sorry for my previous attempt.

I installed Tomcat v7.0.42 as a Windows server (I am running Windows 7).
When I attempt to start it, I get the following message

Windows could not start the Tomcat7 on Local Computer. For more
information, review the System Event Log. If this is a non-Microsoft
service, contact the service vendor, and refer to service-specific error
code 4.

If I run the STARTUP.BAT batch file, it starts OK.

Any help would be greatly appreciated.

Thank you

Javier España
Sr. Technical Analyst
Honda North American Services, LLC.
Information Services Division
ISD Applications
1919 Torrance Blvd.,
Torrance, CA 90501
(310) 781-4514
Email: javier_esp...@hna.honda.com
www.honda.com

***Beginning April 1, 2013 my email changed to javier_esp...@hna.honda.com.
Please update your contact information.
Thank you.***


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Installing tomcat 6

Hi
I am a very beginner trying to get a VPS working with Centos 6.5 and Tomcat
6.0.39.  I already reinstalled the server 3 times and am almost desperate,
so am even willing to pay someone who helps me.

Tomcat 6 is required by openemm.org for a mailing lists and newsletters.
And I am ready with a Creative Commons newsletter.

Openemm.org provides an installation tutorial:
http://sourceforge.net/projects/openemm/files/OpenEMM%20documentation/Documentation%20%28latest%20versions%29/OpenEMM-2013_InstallAdminGuide_1.1.pdf/download

So I am following this tutorial that teaches how to install latest Java
JDK7 first and Tomcat after as follows:

Download the latest binary distribution of Tomcat release 6 from
http://tomcat.apache.org. The core package is sufficient. The
examples here use Tomcat 6.0.32  you should adapt them to the latest
version of Tomcat 6 as needed:

mkdir -p /opt/openemm
cp apache-tomcat-6.0.32.tar.gz /opt/openemm
cd /opt/openemm
tar -xvzf apache-tomcat-6.0.32.tar.gz
ln -s apache-tomcat-6.0.32 tomcat
If you want to make sure that Tomcat works, enter the following commands:

export JAVA_HOME=/opt/openemm/java
cd tomcat
bin/startup.sh

this command gives for me:
[root@ns3098622 tomcat]# bin/startup.sh
Using CATALINA_BASE:   /opt/openemm/tomcat
Using CATALINA_HOME:   /opt/openemm/tomcat
Using CATALINA_TMPDIR: /opt/openemm/tomcat/temp
Using JRE_HOME:/opt/openemm/java
Using CLASSPATH:   /opt/openemm/tomcat/bin/bootstrap.jar
[root@ns3098622 tomcat]#

Then I am supposed to test it with http://localhost:8080 which in my case
should be the address of my VPS I suppose: 94.23.44.200:8080 which is not
reachable.

Then the tutorial suggests to shutdown Tomcat with
bin/shutdown.sh:

[root@ns3098622 tomcat]# bin/shutdown.sh
Using CATALINA_BASE:   /opt/openemm/tomcat
Using CATALINA_HOME:   /opt/openemm/tomcat
Using CATALINA_TMPDIR: /opt/openemm/tomcat/temp
Using JRE_HOME:/opt/openemm/java
Using CLASSPATH:   /opt/openemm/tomcat/bin/bootstrap.jar
/opt/openemm/tomcat/bin/catalina.sh: line 421:
/opt/openemm/java/bin/java: No such file or directory

So here I am getting an error, but am confused with this error.

So please help me.
If it is of any relevance the step before Tomcat was to install Java, that
worked as expected from the tutorial:

mkdir -p /opt/openemm
cp jdk-7u25-linux-i586.tar.gz /opt/openemm
cd /opt/openemm
tar -xvzf jdk-7u25-linux-i586.tar.gz
ln -s jdk1.7.0_25 java

Then, to test the JDK:
/opt/openemm/java/bin/java -version
I get:
java version 1.7.0_25
Java(TM) SE Runtime Environment (build 1.7.0_25-b15)
Java HotSpot(TM) Server VM (build 23.25-b01, mixed mode)
So Java works as expected.

best
Franz

Re: Installing tomcat 6

2014-02-04 Thread Mark Thomas

On 04/02/2014 20:04, Franz wrote:

 export JAVA_HOME=/opt/openemm/java
 cd tomcat
 bin/startup.sh

At this point use:
bin/catalina.sh run

rather than
bin/startup.sh

and report here what output you get.

Mark


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Installing tomcat 6

On Tue, Feb 4, 2014 at 6:08 PM, Mark Thomas ma...@apache.org wrote:

 On 04/02/2014 20:04, Franz wrote:

  export JAVA_HOME=/opt/openemm/java
  cd tomcat
  bin/startup.sh

 At this point use:
 bin/catalina.sh run

 rather than
 bin/startup.sh

 and report here what output you get.


[root@ns3098622 tomcat]# bin/catalina.sh run
Using CATALINA_BASE:   /opt/openemm/tomcat
Using CATALINA_HOME:   /opt/openemm/tomcat
Using CATALINA_TMPDIR: /opt/openemm/tomcat/temp
Using JRE_HOME:/opt/openemm/java
Using CLASSPATH:   /opt/openemm/tomcat/bin/bootstrap.jar
bin/catalina.sh: line 305:
/opt/openemm/tomcat//opt/openemm/java/bin/java: No such file or directory
bin/catalina.sh: line 305: exec:
/opt/openemm/tomcat//opt/openemm/java/bin/java: cannot execute: No such
file or directory

thanks
franz

Re: Installing tomcat 6

On Tue, Feb 4, 2014 at 6:13 PM, Franz 169...@gmail.com wrote:




 On Tue, Feb 4, 2014 at 6:08 PM, Mark Thomas ma...@apache.org wrote:

 On 04/02/2014 20:04, Franz wrote:

  export JAVA_HOME=/opt/openemm/java
  cd tomcat
  bin/startup.sh

 At this point use:
 bin/catalina.sh run

 rather than
 bin/startup.sh

 and report here what output you get.


 [root@ns3098622 tomcat]# bin/catalina.sh run

 Using CATALINA_BASE:   /opt/openemm/tomcat
 Using CATALINA_HOME:   /opt/openemm/tomcat
 Using CATALINA_TMPDIR: /opt/openemm/tomcat/temp
 Using JRE_HOME:/opt/openemm/java
 Using CLASSPATH:   /opt/openemm/tomcat/bin/bootstrap.jar
 bin/catalina.sh: line 305:
 /opt/openemm/tomcat//opt/openemm/java/bin/java: No such file or directory
 bin/catalina.sh: line 305: exec:
 /opt/openemm/tomcat//opt/openemm/java/bin/java: cannot execute: No such
 file or directory

 thanks


But I do not understand what this error means and what I should do now
best
Franz

Re: Installing tomcat 6

2014-02-04 Thread Daniel Mikusa

On Feb 4, 2014, at 3:23 PM, Franz 169...@gmail.com wrote:

 On Tue, Feb 4, 2014 at 6:13 PM, Franz 169...@gmail.com wrote:
 
 
 
 
 On Tue, Feb 4, 2014 at 6:08 PM, Mark Thomas ma...@apache.org wrote:
 
 On 04/02/2014 20:04, Franz wrote:
 
 export JAVA_HOME=/opt/openemm/java
 cd tomcat
 bin/startup.sh
 
 At this point use:
 bin/catalina.sh run
 
 rather than
 bin/startup.sh
 
 and report here what output you get.
 
 
 [root@ns3098622 tomcat]# bin/catalina.sh run
 
 Using CATALINA_BASE:   /opt/openemm/tomcat
 Using CATALINA_HOME:   /opt/openemm/tomcat
 Using CATALINA_TMPDIR: /opt/openemm/tomcat/temp
 Using JRE_HOME:/opt/openemm/java
 Using CLASSPATH:   /opt/openemm/tomcat/bin/bootstrap.jar
 bin/catalina.sh: line 305:
 /opt/openemm/tomcat//opt/openemm/java/bin/java: No such file or directory
 bin/catalina.sh: line 305: exec:
 /opt/openemm/tomcat//opt/openemm/java/bin/java: cannot execute: No such
 file or directory
 
 thanks
 
 
 But I do not understand what this error means and what I should do now

You’re setting JAVA_HOME as “/opt/openemm/java”, quotes included.  Try setting 
it without quotes.

Ex:  export JAVA_HOME=/opt/openemm/java

Also make sure that you can run the command /opt/openemm/java/bin/java 
-version”.  You should get the version info for your JVM.

Dan

 best
 Franz


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Installing tomcat 6

2014-02-04 Thread Neven Cvetkovic

On Tue, Feb 4, 2014 at 3:13 PM, Franz 169...@gmail.com wrote:

 On Tue, Feb 4, 2014 at 6:08 PM, Mark Thomas ma...@apache.org wrote:

  On 04/02/2014 20:04, Franz wrote:
 
   export JAVA_HOME=/opt/openemm/java
   cd tomcat
   bin/startup.sh
 
 
 Using CLASSPATH:   /opt/openemm/tomcat/bin/bootstrap.jar
 bin/catalina.sh: line 305:
 /opt/openemm/tomcat//opt/openemm/java/bin/java: No such file or directory
 bin/catalina.sh: line 305: exec:
 /opt/openemm/tomcat//opt/openemm/java/bin/java: cannot execute: No such
 file or directory


Franz,

I assume you followed instructions for installation:
http://sourceforge.net/projects/openemm/files/OpenEMM%20documentation/Documentation%20(latest%20versions)

Did you test if Java (JDK) was properly set: (pg 4/27 of the installation
guide), e.g.

  /opt/openemm/java/bin/java -version

You need to make sure JDK is installed properly, because Tomcat needs it :)

Daniel already pointed out you are probably not properly setting up
JAVA_HOME, try without quotes (pg 5/27 of manual suggests using quotes),
e.g.

  export JAVA_HOME=/opt/openemm/java
  /opt/openemm/tomcat/bin/catalina.sh run

(CTRL+C to stop the process)

What does the output say? Was it successfully loaded?

After you get it working with catalina.sh run, you probably want to do the
following as well:
1) setup JAVA_HOME somewhere in the profile scripts (e.g. create
/etc/profile.d/java.sh file)
2) configure tomcat as a centos service (chkconfig+rc.d script), so it
starts up automatically when you reboot your system.


Good luck!

Re: unable to start Tomcat through the Windows Services panel

2014-02-04 Thread Mark Eggers


On 2/4/2014 11:25 AM, javier_esp...@hna.honda.com wrote:

Sorry for my previous attempt.

I installed Tomcat v7.0.42 as a Windows server (I am running Windows 7).
When I attempt to start it, I get the following message

Windows could not start the Tomcat7 on Local Computer. For more
information, review the System Event Log. If this is a non-Microsoft
service, contact the service vendor, and refer to service-specific error
code 4.

If I run the STARTUP.BAT batch file, it starts OK.

Any help would be greatly appreciated.

Thank you


I suspect that you're logged into a domain and the service is trying to 
use the domain service account for which you don't have access.


I'm not a Windows person, so the above may be a bit muddled.

At any rate, go into the services properties and try running the service 
with your user account and password.


The change is made on the Log On tab by clicking the This account 
radio button and filling in the appropriate text fields.


. . . . just my two cents.
/mde/


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: unable to start Tomcat through the Windows Services panel

2014-02-04 Thread javier_espana

Thank you Mark, but it did not make a difference.  Any other idea?

Javier España
Sr. Technical Analyst
Honda North American Services, LLC.
Information Services Division
ISD Applications
1919 Torrance Blvd.,
Torrance, CA 90501
(310) 781-4514
Email: javier_esp...@hna.honda.com
www.honda.com

***Beginning April 1, 2013 my email changed to javier_esp...@hna.honda.com.
Please update your contact information.
Thank you.***





From:   Mark Eggers its_toas...@yahoo.com
To: Tomcat Users List users@tomcat.apache.org,
Date:   02/04/2014 01:14 PM
Subject:Re: unable to start Tomcat through the Windows Services panel



On 2/4/2014 11:25 AM, javier_esp...@hna.honda.com wrote:
 Sorry for my previous attempt.

 I installed Tomcat v7.0.42 as a Windows server (I am running Windows 7).
 When I attempt to start it, I get the following message

 Windows could not start the Tomcat7 on Local Computer. For more
 information, review the System Event Log. If this is a non-Microsoft
 service, contact the service vendor, and refer to service-specific error
 code 4.

 If I run the STARTUP.BAT batch file, it starts OK.

 Any help would be greatly appreciated.

 Thank you

I suspect that you're logged into a domain and the service is trying to
use the domain service account for which you don't have access.

I'm not a Windows person, so the above may be a bit muddled.

At any rate, go into the services properties and try running the service
with your user account and password.

The change is made on the Log On tab by clicking the This account
radio button and filling in the appropriate text fields.

. . . . just my two cents.
/mde/


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org




-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

request.getAttribute(javax.servlet.request.X509Certificate) returns NULL with APR connector on Tomcat 7.0.47 when using FireFox 26

2014-02-04 Thread John Palmer

Our installations have been working fine for several years, but we're
having to replace the existing 32-bit Windows servers with 64-bit Windows
servers,
and I'm trying to take advantage of this effort to simply the
configuration...
we inherited this with IIS in front of Tomcat, using the Jakarta ISAPI
Filter , with no good reason given for doing it this way. (the majority of
our content is served from a java app, no need to have a more robust web
server in front of this for static content that I can see)
by removing IIS so Tomcat stands alone.


Getting the default (none APR) connector working has been pretty
easy...we've had some other projects needing similar (.jks cert file)
setups for the server certs, CA certs etc...

However, I've been concerned that client cert revocation checks would
contribute to network congestion as it appears that ONLY CRLs are available
to use with this connector

Apparently the APR connector also supports OCSP  checks
I've tried configuring this as an APR connector..  after some time with
this I seem to have the certs in the correct format for both the server
cert and the client cert CA's - connections occur, no errors.

HOWEVER - I have code  in several JSP files (eg, server-side) using
request.getAttribute(javax.servlet.request.X509Certificate)

this is working fine using IE 8 and IE 9, but not with FireFox 26.0 - where
it returns NULL.

Using Wireshark, I don't see any noticable difference in the server's
response to the browser... and the browser responds in each case, with the
client cert I select as well as it's issuer. (I currently have only the two
Root certs in the SSLCACertificateFile and this seems to be working fine).

After fighting this for a while, I retreated...

set up IIS 7.5 and the 64-bit Jakarta ISAPI Filter and have this working,
but again, I'd prefer to dump IIS, so I've returned to this;

Still works fine with IE 9 (and presumably  IE 8).

SOMETIMES, selecting one of my two available certs results in
request.getAttribute returning the cert information... (FireFox 26, WIndows
7, ActivCard client), but usually not.

Wireshark on both server and workstation hasn't helped me...

 I thought perhaps certificate revocation checking was failing - in fact,
the only place I see this happening is on FireFox, where apparently it
issues an OCSP request back to the tomcat server (I would have thought it
would go directly to the URL listed in the cert for OCSP or CRL checks) and
receives a GOOD response. I don't seem to see ANY OCSP requests issued by
the server... or any CRL requests...
I don't know if any additional configuration is needed to enable OCSP
checking in Tomcat with the APR connector..

I've enabled logging with tomcat's logging.properties without seeing
anything interesting... don't see how to log what the APR stuff is doing,
but looking at the source, it appears there isn't much logging code in
there...

from the server.xml file (each entry on it's own line here to make it more
readable):

!-- APR SSL Coyote HTTP/1.1 Connector --

Connector
protocol=org.apache.coyote.http11.Http11AprProtocol
port=443
scheme=https
secure=true
URIEncoding=UTF-8
connectionTimeout=2
maxThreads=200
minSpareThreads=25
SSLEnabled=true
SSLCertificateFile=./conf/crt.pem
SSLCertificateKeyFile=./conf/key.pem
SSLPassword=xxx
SSLCACertificateFile=./conf/ca-roots.pem
SSLProtocol=TLSv1
SSLVerifyClient=require
SSLVerifyDepth=10
/

Any ideas?

Re: Installing tomcat 6

On Tue, Feb 4, 2014 at 6:43 PM, Daniel Mikusa dmik...@gopivotal.com wrote:

 On Feb 4, 2014, at 3:23 PM, Franz 169...@gmail.com wrote:

  On Tue, Feb 4, 2014 at 6:13 PM, Franz 169...@gmail.com wrote:
 
 
 
 
  On Tue, Feb 4, 2014 at 6:08 PM, Mark Thomas ma...@apache.org wrote:
 
  On 04/02/2014 20:04, Franz wrote:
 
  export JAVA_HOME=/opt/openemm/java
  cd tomcat
  bin/startup.sh
 
  At this point use:
  bin/catalina.sh run
 
  rather than
  bin/startup.sh
 
  and report here what output you get.
 
 
  [root@ns3098622 tomcat]# bin/catalina.sh run
 
  Using CATALINA_BASE:   /opt/openemm/tomcat
  Using CATALINA_HOME:   /opt/openemm/tomcat
  Using CATALINA_TMPDIR: /opt/openemm/tomcat/temp
  Using JRE_HOME:/opt/openemm/java
  Using CLASSPATH:   /opt/openemm/tomcat/bin/bootstrap.jar
  bin/catalina.sh: line 305:
  /opt/openemm/tomcat//opt/openemm/java/bin/java: No such file or
 directory
  bin/catalina.sh: line 305: exec:
  /opt/openemm/tomcat//opt/openemm/java/bin/java: cannot execute: No
 such
  file or directory
 
  thanks
 
 
  But I do not understand what this error means and what I should do now

 You're setting JAVA_HOME as /opt/openemm/java, quotes included.  Try
 setting it without quotes.

 Ex:  export JAVA_HOME=/opt/openemm/java


Yes, it works!! This was the problem: the quotes! Many thanks


 Also make sure that you can run the command /opt/openemm/java/bin/java
 -version.  You should get the version info for your JVM.


Yes this works too
best Franz

Re: Installing tomcat 6

On Tue, Feb 4, 2014 at 7:08 PM, Neven Cvetkovic
neven.cvetko...@gmail.comwrote:

On Tue, Feb 4, 2014 at 3:13 PM, Franz 169...@gmail.com wrote:

On Tue, Feb 4, 2014 at 6:08 PM, Mark Thomas ma...@apache.org wrote:

On 04/02/2014 20:04, Franz wrote:

export JAVA_HOME=/opt/openemm/java
cd tomcat
bin/startup.sh

Using CLASSPATH: /opt/openemm/tomcat/bin/bootstrap.jar
bin/catalina.sh: line 305:
/opt/openemm/tomcat//opt/openemm/java/bin/java: No such file or
directory
bin/catalina.sh: line 305: exec:
/opt/openemm/tomcat//opt/openemm/java/bin/java: cannot execute: No such
file or directory

Franz,

I assume you followed instructions for installation:

http://sourceforge.net/projects/openemm/files/OpenEMM%20documentation/Documentation%20(latest%20versions)

Did you test if Java (JDK) was properly set: (pg 4/27 of the installation
guide), e.g.

/opt/openemm/java/bin/java -version

You need to make sure JDK is installed properly, because Tomcat needs it :)

Yes this works.

Daniel already pointed out you are probably not properly setting up
JAVA_HOME, try without quotes (pg 5/27 of manual suggests using quotes),
e.g.

export JAVA_HOME=/opt/openemm/java
/opt/openemm/tomcat/bin/catalina.sh run

(CTRL+C to stop the process)

What does the output say? Was it successfully loaded?

Yes everything works many thanks. I am able to access the page with the
browser. You guys are very helpful.

After you get it working with catalina.sh run, you probably want to do the
following as well:
1) setup JAVA_HOME somewhere in the profile scripts (e.g. create
/etc/profile.d/java.sh file)

yes, unfortunately openemm tutorial says nothing about that. Now there is
not java.sh file there. So you mean creating a java.sh file with inside
only:

export JAVA_HOME=/opt/openemm/java

and what does it? Does it setup JAVA_HOME once and for all?

2) configure tomcat as a centos service (chkconfig+rc.d script), so it
starts up automatically when you reboot your system.

This seems complicated too. Does it means preparing a file tomcat.sh in
/etc/rc.d containing:

/opt/openemm/tomcat/bin/startup.sh

many thanks again
Franz

Re: Installing tomcat 6

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Dan,

On 2/4/14, 3:43 PM, Daniel Mikusa wrote:
 On Feb 4, 2014, at 3:23 PM, Franz 169...@gmail.com wrote:
 
 On Tue, Feb 4, 2014 at 6:13 PM, Franz 169...@gmail.com wrote:
 
 
 
 
 On Tue, Feb 4, 2014 at 6:08 PM, Mark Thomas ma...@apache.org
 wrote:
 
 On 04/02/2014 20:04, Franz wrote:
 
 export JAVA_HOME=/opt/openemm/java cd tomcat 
 bin/startup.sh
 
 At this point use: bin/catalina.sh run
 
 rather than bin/startup.sh
 
 and report here what output you get.
 
 
 [root@ns3098622 tomcat]# bin/catalina.sh run
 
 Using CATALINA_BASE:   /opt/openemm/tomcat Using CATALINA_HOME:
 /opt/openemm/tomcat Using CATALINA_TMPDIR:
 /opt/openemm/tomcat/temp Using JRE_HOME:
 /opt/openemm/java Using CLASSPATH:
 /opt/openemm/tomcat/bin/bootstrap.jar bin/catalina.sh: line
 305: /opt/openemm/tomcat//opt/openemm/java/bin/java: No such
 file or directory bin/catalina.sh: line 305: exec: 
 /opt/openemm/tomcat//opt/openemm/java/bin/java: cannot
 execute: No such file or directory
 
 thanks
 
 
 But I do not understand what this error means and what I should
 do now
 
 You’re setting JAVA_HOME as “/opt/openemm/java”, quotes included.
 Try setting it without quotes.

Quotes should be fine, as long as you are using plain-old
double-quotes and not smart (aka dumb) quotes.

 Ex:  export JAVA_HOME=/opt/openemm/java
 
 Also make sure that you can run the command 
 /opt/openemm/java/bin/java -version”.  You should get the version 
 info for your JVM.

+1

I suspect Java is not actually installed in /opt/openemm/java

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=Pu8H
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Installing tomcat 6

2014-02-04 Thread Neven Cvetkovic

On Tue, Feb 4, 2014 at 6:22 PM, Franz 169...@gmail.com wrote:

  I assume you followed instructions for installation:
 
 
 http://sourceforge.net/projects/openemm/files/OpenEMM%20documentation/Documentation%20(latest%20versions)
 

 
  After you get it working with catalina.sh run, you probably want to do
 the
  following as well:
  1) setup JAVA_HOME somewhere in the profile scripts (e.g. create
  /etc/profile.d/java.sh file)
 

 yes, unfortunately openemm tutorial says nothing about that.  Now there is
 not java.sh file there. So you mean creating a java.sh file with inside
 only:

 export JAVA_HOME=/opt/openemm/java


Yes, something along those lines.

Edit a new file in /etc/profile.d/java.sh, e.g.

#
# /etc/profile.d/java.sh
#
export JAVA_HOME=/opt/openemm/java
export PATH=${PATH}:${JAVA_HOME}/bin

- This script does two things:
1) sets $JAVA_HOME for your JDK
2) updates $PATH so your $JAVA_HOME/bin is on the PATH (i.e. Java can be
invoked from any directory)


 and what does it? Does it setup JAVA_HOME once and for all?

 2) configure tomcat as a centos service (chkconfig+rc.d script), so it
  starts up automatically when you reboot your system.
 

 This seems complicated too.   Does it means preparing a file tomcat.sh in
 /etc/rc.d containing:

 /opt/openemm/tomcat/bin/startup.sh


Yes, something like that ...

1. Create /etc/rc.d/init.d/tomcat.sh  (I will see to find some examples),
here's a minimal example:

#!/bin/bash
#
# /etc/rc.d/init.d/tomcat.sh
#
# description: Tomcat Startup, Stop, Restart Script
# processname: tomcat
# chkconfig: 234 20 80

# Test if JAVA_HOME is already set
if [ x$JAVA_HOME = x ]
then
  export JAVA_HOME=/opt/openemm/java
  export PATH=$PATH:$JAVA_HOME/bin
fi

# Set Tomcat home directory
CATALINA_HOME=/opt/openemm/tomcat

case $1 in
start)
sh $CATALINA_HOME/bin/startup.sh
;;
stop)
sh $CATALINA_HOME/bin/shutdown.sh
;;
restart)
sh $CATALINA_HOME/bin/shutdown.sh
sh $CATALINA_HOME/bin/startup.sh
;;
esac
exit 0

- here you would probably want to add a more sophisticated script that adds
/var/run/tomcat/id PID file, kills process if it hangs, etc...
- Can anyone else provide some of their example scripts?

2. Add a tomcat service, e.g.

  chkconfig -add tomcat
  chkconfig tomcat on

3. Test your service, e.g.

service tomcat stop
service tomcat start
service tomcat restart

Re: Installing tomcat 6