RE: AW: AW: tomcat-connectors-1.2.39-windows-x86_64-iis does not work
Sorry, I don't know how Windows internally resolves localhost. What I
wanted to say is, that the hosts file has not been modified on that
system - by default it does not contain any entries. This seems to have
changed since some Windows versions, as e.g. Windows Vista contains
127.0.0.1 localhost and ::1 localhost by default
in its hosts file, but starting with Windows 7, the hosts file only
contains comments by default, with the hint localhost name resolution
is handled within DNS itself.
I just wrote a small C# program to see how .Net resolves localhost:
private static void Main(string[] args) {
IPAddress[] addresses = Dns.GetHostAddresses(localhost);
foreach (IPAddress a in addresses) {
Console.WriteLine(a.ToString());
}
Console.ReadKey();
}
When I run it on the server machine, it prints the normal IPv4 and IPv6
loopback addresses:
::1
127.0.0.1
Perhaps this might be the reason why it doesn't work in my case - on our
servers and workstations ipv6 is disabled, the registry setting is
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\TCPIP6\Parameters]
DisabledComponents=dword:00ff
See the discussion on
http://social.technet.microsoft.com/Forums/en-US/d7bfc3f0-1ea7-43e9-aaae-7b1d5c0b5c51/how-to-disable-ipv6-in-registry?forum=windowsserver2008r2networking
about ff and
I'll try to check my settings with the C# program.
Regards,
Jessica
smime.p7s
Description: S/MIME cryptographic signature
RE: AW: AW: tomcat-connectors-1.2.39-windows-x86_64-iis does not work
I'll try to check my settings with the C# program. Ipv6 loopback is available: 127.0.0.1 ::1 See http://support.microsoft.com/kb/929852 However, I believe the disabled ipv6 might put us on the right track. Regards, Jessica smime.p7s Description: S/MIME cryptographic signature
Fwd: Unable to start tomcat as a service.
Hi, I downloaded *apache-tomcat-7.0.52-windows-x64.zip* from the apache website. I am running windows 7 64 bit operating system. I have setup the file setenv.bat file and apache starts without any problem when started using startup.bat script. To run apache as a windows service I did the following steps: 1. Extracted the zip to location C:\tmp 2. Opened command line in the said folder and ran command : tomcat7 //IS// 3. Then ran command : sc start tomcat7 Following was the output : C:\tmp\apache-tomcat-7.0.52\bintomcat7.exe //IS// C:\tmp\apache-tomcat-7.0.52\binsc start tomcat7 SERVICE_NAME: tomcat7 TYPE : 10 WIN32_OWN_PROCESS STATE : 2 START_PENDING (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN) WIN32_EXIT_CODE: 0 (0x0) SERVICE_EXIT_CODE : 0 (0x0) CHECKPOINT : 0x0 WAIT_HINT : 0x7d0 PID: 1848 FLAGS : C:\tmp\apache-tomcat-7.0.52\binsc query tomcat7 SERVICE_NAME: tomcat7 TYPE : 10 WIN32_OWN_PROCESS STATE : 1 STOPPED WIN32_EXIT_CODE: 1066 (0x42a) SERVICE_EXIT_CODE : 1 (0x1) CHECKPOINT : 0x0 WAIT_HINT : 0x0 C:\tmp\apache-tomcat-7.0.52\bin Am I missing anything. Please help. -- *Akshay Jain*
Re: SQLNestedException in Connection Pooling With Tomcat 7.0.39
On Fri, Apr 4, 2014 at 8:39 PM, Christopher Schultz ch...@christopherschultz.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Daniel, On 4/4/14, 8:57 AM, Daniel Mikusa wrote: On Apr 4, 2014, at 8:22 AM, Saurabh Saraswat ssaras...@pivotalindia.com wrote: Dear Dan, Thanks for your response! I have cross checked the user / password configuration. All is correct. If you're getting Access Denied exceptions, there is only one cause and that's bad credentials (or host + credentials, because MySQL can limit access based on the host). If you're not seeing these any more then, disregard. I've never tried this, but it could also be due to connection-limits on the server itself. Having root limited to a certain number of connections sounds like a terrible idea, but then again, so does connecting as root in the first place. As i mentioned that initially i am getting the object of connection but after some time (After few hits to database from application) my web app goes to slow and than it stops working i i got the below exception- *org.apache.tomcat.dbcp.dbcp.SQLNestedException: Cannot get a connection, pool error Timeout waiting for idle object* +1 to David's suggestion. You could be leaking connections or your queries are very slow. +1 Two suggestions: 1.) Enable the slow query log on your MySQL server and see if the queries are slow. Alternatively, login to your MySQL server and run 'show processlist. That will show you what queries are running. +1 2.) Enable DBCP's abandoned connection detection. See the removeAbandoned attribute. +10 With this (and logAbandoned), the pool will alert you when your application does not properly return connections to the pool. In development, I always recommend that you use maxActive=1 for your connection pools. This will expose any potential deadlocks you may have mistakenly coded into your application. - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1 Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBCAAGBQJTPssiAAoJEBzwKT+lPKRYTx4QAK8a4WJIx1i+yWyZquSrCnad RBNB69jnPmYG0Uzc/yKyHzOXvv2wt1vE22wYyp64b4FFVqQNBmEnnm6XI20PSR2i Yt9lm5wZ5/5fsCGvj39B8E11GCao5enzkhXUpa51spLnjHfw5k3o0gGmWAqhLVza nOfbG+rTjjjXCrr1Y6tz0g+35M+w02TIh87Z5xdkvboqv/NRfxbGKRIZB2e1zT0K USY4skgug3L1TpKiXgoRNv7g7gbxHB7AXgL1po+PI1T1mNXCakUE81O26Etv/wm2 1A/d15LfCLou0uWQSfHPqaoODGFVOTsRWwn8xiJdjo2Ah/y7OqXfzMQh41UBO8H7 jNmakIHlb6NYDJK6LiRFlGw5K9AEO+dNFJ9e6Gi4kELB4Kn6CGqFRD3aqTsVerOb EhEG844nDmVRzr7gwK58aXSICy8PURDOfmZ+IaXehz0MARnKQiog3cWBT+EKIHxq RUAc0T/YEG+Qm1jiZef5h+NuMZLrzczQIOXXGYkjcMwGcUxmjzBbbvYbr56g84jL 3ukIXp6bnOvyIdB8jnibbICoR/sj0Mg4zia7vTPkqdXbU3Ng2W6/lV9K2Mnm9aDL OcLocnWnFGZycukIDYtfbtZOY7wTAqk5fJsZauDQGeeA4M9UXu4dPgpaoahuK8Dq moJwtEq/5/JNXkctdS7n =RI4v -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org All, I have tested with configurations suggested by all of you.I am not getting exceptions now but still after certain time, the server gets hanged. Any suggestion please,still not able to rid out of this issue. Saurabh
Re: AW: AW: tomcat-connectors-1.2.39-windows-x86_64-iis does not work
Alten, Jessica-Aileen wrote: I'll try to check my settings with the C# program. Ipv6 loopback is available: 127.0.0.1 ::1 See http://support.microsoft.com/kb/929852 However, I believe the disabled ipv6 might put us on the right track. Anyway, Konstantin filed an issue in Bugzilla for this a few days ago already, it looks like there may indeed be a problem in the code, and the issue is being looked at. See: https://issues.apache.org/bugzilla/show_bug.cgi?id=56352 This looks like it may be tied to the absence of a line 127.0.0.1 localhost in the local system's hosts file ((windows)/system32/drivers/etc/hosts) So it would probably help if one of the Windows experts on this list confirmed that, by default, since version xyz of Windows, there is no longer such an entry in the hosts file. My (about to become unsupported but venerable) Windows XP laptop does have a localhost line. On the other hand, a Windows 7 workstation to which I have access has this in the hosts file : # localhost name resolution is handled within DNS itself. # 127.0.0.1 localhost # ::1 localhost note@jessica : It may be interesting to see what happens if you add a line like this in the server's hosts file : 127.0.0.1 localhost localtomcat and then try to use each of these names in your isapi configuration for the worker.host. (for a personal definition of interesting) - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Fwd: Unable to start tomcat as a service.
Am 08.04.2014 11:42, schrieb akshay jain: Hi, I downloaded *apache-tomcat-7.0.52-windows-x64.zip* from the apache website. I am running windows 7 64 bit operating system. Are you planning to leave it installed under c:\tmp ? Did you try to use service.bat install? What does the System Eventlog say? -- Christoph Kukulies I have setup the file setenv.bat file and apache starts without any problem when started using startup.bat script. To run apache as a windows service I did the following steps: 1. Extracted the zip to location C:\tmp 2. Opened command line in the said folder and ran command : tomcat7 //IS// 3. Then ran command : - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Unable to start tomcat as a service.
2014-04-08 13:42 GMT+04:00 akshay jain uniquejainaks...@gmail.com: Hi, I downloaded *apache-tomcat-7.0.52-windows-x64.zip* from the apache website. I am running windows 7 64 bit operating system. I have setup the file setenv.bat file and apache starts without any problem when started using startup.bat script. To run apache as a windows service I did the following steps: 1. Extracted the zip to location C:\tmp 2. Opened command line in the said folder and ran command : tomcat7 //IS// That just installs procrun (the service wrapper executable), but DOES NOT configure it. Procrun with an empty configuration does not know what Java application it launches and with what settings. (It does not know that it belongs to Tomcat, etc.) There is service.bat that both installs and configures it, but note that you either need to run the command prompt in as administrator mode, or use 7.0.53 or later due to http://issues.apache.org/bugzilla/show_bug.cgi?id=56143 3. Then ran command : sc start tomcat7 Following was the output : C:\tmp\apache-tomcat-7.0.52\bintomcat7.exe //IS// C:\tmp\apache-tomcat-7.0.52\binsc start tomcat7 (...) Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: AW: AW: tomcat-connectors-1.2.39-windows-x86_64-iis does not work
It may be interesting to see what happens if you add a line like this in the server's hosts file : 127.0.0.1 localhost localtomcat and then try to use each of these names in your isapi configuration for the worker.host. I tried the formerly commented out lines in the hosts file after a reboot: 127.0.0.1 localhost ::1 localhost Unfortunately this doesn't work either: localhost doesn't work in the workers.properties file. The error log is the same as the previous one. Regards, Jessica smime.p7s Description: S/MIME cryptographic signature
How to monitor performance of tomcat
We have an application which has JBoss as the application server with Tomcat as the web server, our application has Oracle 11g as the database. I would give some further background to the issue we are facing, since the last 1 1/2 months, the application slows down. Sometimes it comes back to normal, specially on week-ends. But other times we restart JBoss Tomcat to bring back the application to normal. We have been using jconsole to monitor tomcat like jconsole 10.101.17.79:8891 which monitors our tomcat for a work order system. If the memory usage does not show spike and shows constant reading, the GC button is clicked to invoke the garbage collector. I checked out on the net and got some clue as below: 1) Javamelody - It seems to be a 3rd party tool which is not recommended. 2) There is a command mentioned to see the admin console, http://IP:port/ but it is not displaying the required page. Please give your inputs whether jconsole should be a help in the right direction or some other way to monitor the performance of Tomcat. Regards -- *STL Disclaimer:* The content of this message may be legally privileged and confidential and are for the use of the intended recipient(s) only. It should not be read, copied and used by anyone other than the intended recipient(s). If you have received this message in error, please immediately notify the sender, preserve its confidentiality and delete it. Before opening any attachments please check them for viruses and defects. No employee or agent is authorised to conclude any binding agreement on behalf of Sterlite Technologies Limited with another party by email without express written confirmation by authorised person. Visit us at www.sterlitetechnologies.com Please consider environment before printing this email !
Re: How to monitor performance of tomcat
2014-04-08 15:05 GMT+04:00 Randhir Singh randhir.si...@sterlite.com: We have an application which has JBoss as the application server with Tomcat as the web server, our application has Oracle 11g as the database. I would give some further background to the issue we are facing, since the last 1 1/2 months, the application slows down. Sometimes it comes back to normal, specially on week-ends. But other times we restart JBoss Tomcat to bring back the application to normal. We have been using jconsole to monitor tomcat like jconsole 10.101.17.79:8891 which monitors our tomcat for a work order system. If the memory usage does not show spike and shows constant reading, the GC button is clicked to invoke the garbage collector. I checked out on the net and got some clue as below: 1) Javamelody - It seems to be a 3rd party tool which is not recommended. 2) There is a command mentioned to see the admin console, http://IP:port/ but it is not displaying the required page. Please give your inputs whether jconsole should be a help in the right direction or some other way to monitor the performance of Tomcat. Have you tried 1) FAQ 2) archives of this mailing list? - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: AW: AW: tomcat-connectors-1.2.39-windows-x86_64-iis does not work
Alten, Jessica-Aileen wrote: It may be interesting to see what happens if you add a line like this in the server's hosts file : 127.0.0.1 localhost localtomcat and then try to use each of these names in your isapi configuration for the worker.host. I tried the formerly commented out lines in the hosts file after a reboot: 127.0.0.1 localhost ::1 localhost Unfortunately this doesn't work either: localhost doesn't work in the workers.properties file. The error log is the same as the previous one. Hi. Ok, there is apparently a bug in the isapi-redirector, and the developers are working on it. What I am trying to do, is to see if there is not some alternative in-between solution for you, other than using worker.ajp13w.host=127.0.0.1 (which is kind of not elegant) What you did above (uncommenting *both* lines), still leaves the possibility that isapi would be trying to use the ::1 IPv6 translation, and hitting a problem due to IPv6 being disabled on that system. To eliminate that, could you try precisely the following : 1) re-comment the 2 lines in the hosts file 2) add this line : 127.0.0.1 localtomcat 3) in your properties file : worker.ajp13w.host=localtomcat Note that this is basically intellectual curiosity on my part. You can also decide to wait for the bug correction. I would try this myself to assuage my curiosity, but I do not have an advanced enough Windows server at my disposal right now. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: SQLNestedException in Connection Pooling With Tomcat 7.0.39
On Apr 8, 2014, at 5:46 AM, Saurabh Saraswat ssaras...@pivotalindia.com wrote: On Fri, Apr 4, 2014 at 8:39 PM, Christopher Schultz ch...@christopherschultz.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Daniel, On 4/4/14, 8:57 AM, Daniel Mikusa wrote: On Apr 4, 2014, at 8:22 AM, Saurabh Saraswat ssaras...@pivotalindia.com wrote: Dear Dan, Thanks for your response! I have cross checked the user / password configuration. All is correct. If you're getting Access Denied exceptions, there is only one cause and that's bad credentials (or host + credentials, because MySQL can limit access based on the host). If you're not seeing these any more then, disregard. I've never tried this, but it could also be due to connection-limits on the server itself. Having root limited to a certain number of connections sounds like a terrible idea, but then again, so does connecting as root in the first place. As i mentioned that initially i am getting the object of connection but after some time (After few hits to database from application) my web app goes to slow and than it stops working i i got the below exception- *org.apache.tomcat.dbcp.dbcp.SQLNestedException: Cannot get a connection, pool error Timeout waiting for idle object* +1 to David's suggestion. You could be leaking connections or your queries are very slow. +1 Two suggestions: 1.) Enable the slow query log on your MySQL server and see if the queries are slow. Alternatively, login to your MySQL server and run 'show processlist. That will show you what queries are running. +1 2.) Enable DBCP's abandoned connection detection. See the removeAbandoned attribute. +10 With this (and logAbandoned), the pool will alert you when your application does not properly return connections to the pool. In development, I always recommend that you use maxActive=1 for your connection pools. This will expose any potential deadlocks you may have mistakenly coded into your application. - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1 Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBCAAGBQJTPssiAAoJEBzwKT+lPKRYTx4QAK8a4WJIx1i+yWyZquSrCnad RBNB69jnPmYG0Uzc/yKyHzOXvv2wt1vE22wYyp64b4FFVqQNBmEnnm6XI20PSR2i Yt9lm5wZ5/5fsCGvj39B8E11GCao5enzkhXUpa51spLnjHfw5k3o0gGmWAqhLVza nOfbG+rTjjjXCrr1Y6tz0g+35M+w02TIh87Z5xdkvboqv/NRfxbGKRIZB2e1zT0K USY4skgug3L1TpKiXgoRNv7g7gbxHB7AXgL1po+PI1T1mNXCakUE81O26Etv/wm2 1A/d15LfCLou0uWQSfHPqaoODGFVOTsRWwn8xiJdjo2Ah/y7OqXfzMQh41UBO8H7 jNmakIHlb6NYDJK6LiRFlGw5K9AEO+dNFJ9e6Gi4kELB4Kn6CGqFRD3aqTsVerOb EhEG844nDmVRzr7gwK58aXSICy8PURDOfmZ+IaXehz0MARnKQiog3cWBT+EKIHxq RUAc0T/YEG+Qm1jiZef5h+NuMZLrzczQIOXXGYkjcMwGcUxmjzBbbvYbr56g84jL 3ukIXp6bnOvyIdB8jnibbICoR/sj0Mg4zia7vTPkqdXbU3Ng2W6/lV9K2Mnm9aDL OcLocnWnFGZycukIDYtfbtZOY7wTAqk5fJsZauDQGeeA4M9UXu4dPgpaoahuK8Dq moJwtEq/5/JNXkctdS7n =RI4v -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org All, I have tested with configurations suggested by all of you.I am not getting exceptions now but still after certain time, the server gets hanged. Any suggestion please,still not able to rid out of this issue. Saurabh 1.) Include your updated Resource tag. We’ll want to see what you’re working with now. 2.) When the server ‘hangs’, take some thread dumps and see what it’s doing. That will hopefully provide more information about what the server is doing at the time. http://wiki.apache.org/tomcat/HowTo#How_do_I_obtain_a_thread_dump_of_my_running_webapp_.3F Dan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Catalina start problem
Guys, On 4 April 2014 20:05, Christopher Schultz ch...@christopherschultz.netwrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Neeraj, On 4/4/14, 3:46 AM, Neeraj Sinha wrote: On 3 April 2014 23:06, Christopher Schultz ch...@christopherschultz.netwrote: Neeraj, On 4/2/14, 4:23 AM, Neeraj Sinha wrote: I am trying to start tomcat on linux and I am getting LifecycleException exception whose snippet is below: Apr 2, 2014 8:33:53 AM org.apache.catalina.core.AprLifecycleListener init INFO: The APR based Apache Tomcat Native library which allows optimal performance in production environments was not found on the java.library.path: /usr/java/jdk1.6.0_38/jre/lib/amd64/server:/usr/java/jdk1.6.0_38/jre/lib/amd64:/usr/java/jdk1.6.0_38/jre/../lib/amd64:/usr/java/packages/lib/amd64:/usr/lib64:/lib64:/lib:/usr/lib Apr 2, 2014 8:33:53 AM org.apache.coyote.AbstractProtocol init INFO: Initializing ProtocolHandler [http-bio-8080] Apr 2, 2014 8:33:53 AM org.apache.coyote.AbstractProtocol init INFO: Initializing ProtocolHandler [ajp-bio-8009] Apr 2, 2014 8:33:53 AM org.apache.catalina.startup.Catalina load INFO: Initialization processed in 890 ms Apr 2, 2014 8:33:53 AM org.apache.catalina.startup.Catalina start SEVERE: Catalina.start: org.apache.catalina.LifecycleException: Failed to start component [StandardServer[8005]] at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:154) at org.apache.catalina.startup.Catalina.start(Catalina.java:684) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) at java.lang.reflect.Method.invoke(Method.java:597) at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:322) at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:451) Caused by: java.lang.NoSuchMethodError: org.apache.naming.NamingContext.setExceptionOnFailedWrite(Z)V at org.apache.catalina.core.NamingContextListener.lifecycleEvent(NamingContextListener.java:264) at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:119) at org.apache.catalina.util.LifecycleBase.fireLifecycleEvent(LifecycleBase.java:90) at org.apache.catalina.core.StandardServer.startInternal(StandardServer.java:724) at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150) ... 7 more Apr 2, 2014 8:33:53 AM org.apache.catalina.startup.Catalina start INFO: Server startup in 6 ms One reason I could guess for this is that Tomcat jar may not be proper but I have checked that and that looks fine to me. Appreciated if somebody could help me. What version of Tomcat are you trying to run? Have you modified your Tomcat installation other than changes to server.xml and adding web applications to it? Do any of your web applications have any Tomcat JAR files in them? Thanks. I am using version 7.0.34. I have not modified anything in tomcat installation but I have added JBoss client jars in /tomcat/lib which is required for web apps to access EJB services. This is almost certainly the problem. Which JARs did you add? Actually, I have this tomcat installed and running in few other environments also without any problem. I am trying to setup this on a new system where I copied the complete tomcat and apache files from one of the environment and modified their configuration files for domain and host configuration. Apart from this no other changes. You really shouldn't mix libraries from other containers into Tomcat's lib/ directory. JBoss uses Tomcat internally as its servlet container, so mixing those libraries can seriously confuse things -- as you've seen. Yesterday, I tried to install from a fresh tomcat build and I started getting the earlier mentioned exceptions when I added the required Jboss client jars. So, this means that Jboss jars might have same class which catalina.jar have but I am wondering howcome same setup is working fine for other environments. I'm just going to go ahead and say that this is not a supported configuration and leave it at that. It could take a while to figure out the exact combination of offending libraries and classes, but it's just not worth it: you need to change the way you deploy. If you need EJB and don't want to use JBoss, consider using TomEE: it uses Tomcat as its servlet container and provider DJB support using OpenEJB. So if you're looking for something lighter than JBoss, take a look at TomEE. - -chris Thanks for your suggestion. The issue is fixed. There were few additional Jboss jars apart from Jboss-client jars which was causing the issue. readme.txt file of Jbossall-client.jar suggest what all jars should be used as
Re: SQLNestedException in Connection Pooling With Tomcat 7.0.39
Dear Dan, Thanks for taking time to respond me. My updated Resource Tag is - Resource name=jdbc/MaxDB auth=Container type=javax.sql.DataSource maxActive=100 maxIdle=30 maxWait=1 username=usrname password=password driverClassName=com.mysql.jdbc.Driver url=jdbc:MySQL://localhost:3306/MaxDB?zeroDateTimeBehavior=convertToNull validationQuery=Select 1 removeAbandoned=true removeAbandonedTimeout=1000 logAbandoned=false/ I have also cross checked my code. I am closing the connection properly in finally block. Also have set the max_connection=250 in etc/my.cnf for MySql. Even now i am not getting any Exception but my Application gets Hanged after a certain time (after Certain hits to the database from application). Have tested pooling with different ways like after setting - factory=org.apache.tomcat.jdbc.pool.DataSourceFactory. Conclusion is that i am not able to find satisfactory solution. Thanking You! *Best Regards,* *Saurabh Sarasvat* On Tue, Apr 8, 2014 at 5:26 PM, Daniel Mikusa dmik...@gopivotal.com wrote: On Apr 8, 2014, at 5:46 AM, Saurabh Saraswat ssaras...@pivotalindia.com wrote: On Fri, Apr 4, 2014 at 8:39 PM, Christopher Schultz ch...@christopherschultz.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Daniel, On 4/4/14, 8:57 AM, Daniel Mikusa wrote: On Apr 4, 2014, at 8:22 AM, Saurabh Saraswat ssaras...@pivotalindia.com wrote: Dear Dan, Thanks for your response! I have cross checked the user / password configuration. All is correct. If you're getting Access Denied exceptions, there is only one cause and that's bad credentials (or host + credentials, because MySQL can limit access based on the host). If you're not seeing these any more then, disregard. I've never tried this, but it could also be due to connection-limits on the server itself. Having root limited to a certain number of connections sounds like a terrible idea, but then again, so does connecting as root in the first place. As i mentioned that initially i am getting the object of connection but after some time (After few hits to database from application) my web app goes to slow and than it stops working i i got the below exception- *org.apache.tomcat.dbcp.dbcp.SQLNestedException: Cannot get a connection, pool error Timeout waiting for idle object* +1 to David's suggestion. You could be leaking connections or your queries are very slow. +1 Two suggestions: 1.) Enable the slow query log on your MySQL server and see if the queries are slow. Alternatively, login to your MySQL server and run 'show processlist. That will show you what queries are running. +1 2.) Enable DBCP's abandoned connection detection. See the removeAbandoned attribute. +10 With this (and logAbandoned), the pool will alert you when your application does not properly return connections to the pool. In development, I always recommend that you use maxActive=1 for your connection pools. This will expose any potential deadlocks you may have mistakenly coded into your application. - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1 Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBCAAGBQJTPssiAAoJEBzwKT+lPKRYTx4QAK8a4WJIx1i+yWyZquSrCnad RBNB69jnPmYG0Uzc/yKyHzOXvv2wt1vE22wYyp64b4FFVqQNBmEnnm6XI20PSR2i Yt9lm5wZ5/5fsCGvj39B8E11GCao5enzkhXUpa51spLnjHfw5k3o0gGmWAqhLVza nOfbG+rTjjjXCrr1Y6tz0g+35M+w02TIh87Z5xdkvboqv/NRfxbGKRIZB2e1zT0K USY4skgug3L1TpKiXgoRNv7g7gbxHB7AXgL1po+PI1T1mNXCakUE81O26Etv/wm2 1A/d15LfCLou0uWQSfHPqaoODGFVOTsRWwn8xiJdjo2Ah/y7OqXfzMQh41UBO8H7 jNmakIHlb6NYDJK6LiRFlGw5K9AEO+dNFJ9e6Gi4kELB4Kn6CGqFRD3aqTsVerOb EhEG844nDmVRzr7gwK58aXSICy8PURDOfmZ+IaXehz0MARnKQiog3cWBT+EKIHxq RUAc0T/YEG+Qm1jiZef5h+NuMZLrzczQIOXXGYkjcMwGcUxmjzBbbvYbr56g84jL 3ukIXp6bnOvyIdB8jnibbICoR/sj0Mg4zia7vTPkqdXbU3Ng2W6/lV9K2Mnm9aDL OcLocnWnFGZycukIDYtfbtZOY7wTAqk5fJsZauDQGeeA4M9UXu4dPgpaoahuK8Dq moJwtEq/5/JNXkctdS7n =RI4v -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org All, I have tested with configurations suggested by all of you.I am not getting exceptions now but still after certain time, the server gets hanged. Any suggestion please,still not able to rid out of this issue. Saurabh 1.) Include your updated Resource tag. We'll want to see what you're working with now. 2.) When the server 'hangs', take some thread dumps and see what it's doing. That will hopefully provide more information about what the server is doing at the time. http://wiki.apache.org/tomcat/HowTo#How_do_I_obtain_a_thread_dump_of_my_running_webapp_.3F Dan
Re: SQLNestedException in Connection Pooling With Tomcat 7.0.39
On Apr 8, 2014, at 8:22 AM, Saurabh Saraswat ssaras...@pivotalindia.com wrote: Dear Dan, Thanks for taking time to respond me. My updated Resource Tag is - Resource name=jdbc/MaxDB auth=Container type=javax.sql.DataSource maxActive=100 maxIdle=“30 As Chris mentioned, set maxActive 1 in your dev environment. That will help you find the problem more quickly. maxWait=1 username=usrname password=password driverClassName=com.mysql.jdbc.Driver url=jdbc:MySQL://localhost:3306/MaxDB?zeroDateTimeBehavior=convertToNull validationQuery=Select 1 removeAbandoned=true removeAbandonedTimeout=“1000 This is in seconds, so 1000 is 16.667 minutes, and is probably way to high. For the purposes of debugging, try something much lower like 10 seconds. That way you’ll get feedback quick feedback. logAbandoned=false”/ Set this to true, otherwise you’re not going to know when it detects an abandoned connection. I have also cross checked my code. I am closing the connection properly in finally block. If you have not done so already, run something like FindBugs on your code. Also have set the max_connection=250 in etc/my.cnf for MySql. Even now i am not getting any Exception but my Application gets Hanged after a certain time (after Certain hits to the database from application). Have tested pooling with different ways like after setting - factory=org.apache.tomcat.jdbc.pool.DataSourceFactory. Conclusion is that i am not able to find satisfactory solution. Try the changes above and take some thread dumps. I think that will get you pointed in the right direction. Dan Thanking You! *Best Regards,* *Saurabh Sarasvat* On Tue, Apr 8, 2014 at 5:26 PM, Daniel Mikusa dmik...@gopivotal.com wrote: On Apr 8, 2014, at 5:46 AM, Saurabh Saraswat ssaras...@pivotalindia.com wrote: On Fri, Apr 4, 2014 at 8:39 PM, Christopher Schultz ch...@christopherschultz.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Daniel, On 4/4/14, 8:57 AM, Daniel Mikusa wrote: On Apr 4, 2014, at 8:22 AM, Saurabh Saraswat ssaras...@pivotalindia.com wrote: Dear Dan, Thanks for your response! I have cross checked the user / password configuration. All is correct. If you're getting Access Denied exceptions, there is only one cause and that's bad credentials (or host + credentials, because MySQL can limit access based on the host). If you're not seeing these any more then, disregard. I've never tried this, but it could also be due to connection-limits on the server itself. Having root limited to a certain number of connections sounds like a terrible idea, but then again, so does connecting as root in the first place. As i mentioned that initially i am getting the object of connection but after some time (After few hits to database from application) my web app goes to slow and than it stops working i i got the below exception- *org.apache.tomcat.dbcp.dbcp.SQLNestedException: Cannot get a connection, pool error Timeout waiting for idle object* +1 to David's suggestion. You could be leaking connections or your queries are very slow. +1 Two suggestions: 1.) Enable the slow query log on your MySQL server and see if the queries are slow. Alternatively, login to your MySQL server and run 'show processlist. That will show you what queries are running. +1 2.) Enable DBCP's abandoned connection detection. See the removeAbandoned attribute. +10 With this (and logAbandoned), the pool will alert you when your application does not properly return connections to the pool. In development, I always recommend that you use maxActive=1 for your connection pools. This will expose any potential deadlocks you may have mistakenly coded into your application. - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1 Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBCAAGBQJTPssiAAoJEBzwKT+lPKRYTx4QAK8a4WJIx1i+yWyZquSrCnad RBNB69jnPmYG0Uzc/yKyHzOXvv2wt1vE22wYyp64b4FFVqQNBmEnnm6XI20PSR2i Yt9lm5wZ5/5fsCGvj39B8E11GCao5enzkhXUpa51spLnjHfw5k3o0gGmWAqhLVza nOfbG+rTjjjXCrr1Y6tz0g+35M+w02TIh87Z5xdkvboqv/NRfxbGKRIZB2e1zT0K USY4skgug3L1TpKiXgoRNv7g7gbxHB7AXgL1po+PI1T1mNXCakUE81O26Etv/wm2 1A/d15LfCLou0uWQSfHPqaoODGFVOTsRWwn8xiJdjo2Ah/y7OqXfzMQh41UBO8H7 jNmakIHlb6NYDJK6LiRFlGw5K9AEO+dNFJ9e6Gi4kELB4Kn6CGqFRD3aqTsVerOb EhEG844nDmVRzr7gwK58aXSICy8PURDOfmZ+IaXehz0MARnKQiog3cWBT+EKIHxq RUAc0T/YEG+Qm1jiZef5h+NuMZLrzczQIOXXGYkjcMwGcUxmjzBbbvYbr56g84jL 3ukIXp6bnOvyIdB8jnibbICoR/sj0Mg4zia7vTPkqdXbU3Ng2W6/lV9K2Mnm9aDL OcLocnWnFGZycukIDYtfbtZOY7wTAqk5fJsZauDQGeeA4M9UXu4dPgpaoahuK8Dq moJwtEq/5/JNXkctdS7n =RI4v -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail:
RE: Windows tcnative openssl ciphers question
-Original Message- From: Ognjen Blagojevic [mailto:ognjen.d.blagoje...@gmail.com] Sent: Monday, April 07, 2014 5:27 PM To: Tomcat Users List Subject: Re: Windows tcnative openssl ciphers question Jeffrey, EECDH/ECDHE is disabled in tcnative-1.dll. There is already a request to enable it. Take a look at: https://issues.apache.org/bugzilla/show_bug.cgi?id=55915 -Ognjen Thanks, thought that might have been the case, but was unsure, since the openssl lib that comes with it has it explicitly available. Outside of downloading source and building myself, even if I knew what to do, appears to be the only way to enable it at the moment. I'd like to urge all posters on here to please go vote for the bug. It only has 1 vote at the moment. Jeff
RE: Unable to start tomcat as a service.
-Original Message- From: Konstantin Kolinko [mailto:knst.koli...@gmail.com] Sent: Tuesday, April 08, 2014 5:24 AM To: Tomcat Users List Subject: Re: Unable to start tomcat as a service. 2014-04-08 13:42 GMT+04:00 akshay jain uniquejainaks...@gmail.com: Hi, I downloaded *apache-tomcat-7.0.52-windows-x64.zip* from the apache website. I am running windows 7 64 bit operating system. I have setup the file setenv.bat file and apache starts without any problem when started using startup.bat script. To run apache as a windows service I did the following steps: 1. Extracted the zip to location C:\tmp 2. Opened command line in the said folder and ran command : tomcat7 //IS// That just installs procrun (the service wrapper executable), but DOES NOT configure it. Procrun with an empty configuration does not know what Java application it launches and with what settings. (It does not know that it belongs to Tomcat, etc.) There is service.bat that both installs and configures it, but note that you either need to run the command prompt in as administrator mode, or use 7.0.53 or later due to http://issues.apache.org/bugzilla/show_bug.cgi?id=56143 3. Then ran command : sc start tomcat7 Following was the output : C:\tmp\apache-tomcat-7.0.52\bintomcat7.exe //IS// C:\tmp\apache-tomcat-7.0.52\binsc start tomcat7 (...) Best regards, Konstantin Kolinko You know, it still baffles me why folks still go this route on Windows when there's a perfectly good installer package that will take care of all the fiddly-bits for you. The only reason I can think of is they are trying to install on the GUI-less version of the Server OS, for which the service.bat file is a necessity. Jeff - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: How to monitor performance of tomcat
-Original Message- From: Randhir Singh [mailto:randhir.si...@sterlite.com] Sent: Tuesday, April 08, 2014 6:05 AM To: users@tomcat.apache.org Subject: How to monitor performance of tomcat We have an application which has JBoss as the application server with Tomcat as the web server, our application has Oracle 11g as the database. I would give some further background to the issue we are facing, since the last 1 1/2 months, the application slows down. Sometimes it comes back to normal, specially on week-ends. But other times we restart JBoss Tomcat to bring back the application to normal. We have been using jconsole to monitor tomcat like jconsole 10.101.17.79:8891 which monitors our tomcat for a work order system. If the memory usage does not show spike and shows constant reading, the GC button is clicked to invoke the garbage collector. I checked out on the net and got some clue as below: 1) Javamelody - It seems to be a 3rd party tool which is not recommended. 2) There is a command mentioned to see the admin console, http://IP:port/ but it is not displaying the required page. Please give your inputs whether jconsole should be a help in the right direction or some other way to monitor the performance of Tomcat. Jconsole and JVisualVm are quite useful tools for basic monitoring, if you understand how to use them and their limitations. Why did you get the impression that JavaMelody is not recommended? It does offer an awful lot of monitoring/debugging information, but you need to careful in setting it up. Under Tomcat 7, it will autodeploy with no security by default and expose a lot of potentially confidential information to whomever connects using the well-known context for it (which can't be changed). If you want to use it, I suggest limiting it to your development environment only, or reading up on how to secure it as best as possible. Jeff - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: How to monitor performance of tomcat
Hi. We use JavaMelody for moment performance checks on test box and Zabbix monitoring system to have whole history. Zabbix can use JMX connection to Tomcat instance and have set of included teamplates, for example - number of threads, current memory usage, gzip usage and so on. Main virtue of Zabbix ++ JMX is that it store all data in database + can draw graphs. 2014-04-08 18:00 GMT+03:00 Jeffrey Janner jeffrey.jan...@polydyne.com: -Original Message- From: Randhir Singh [mailto:randhir.si...@sterlite.com] Sent: Tuesday, April 08, 2014 6:05 AM To: users@tomcat.apache.org Subject: How to monitor performance of tomcat We have an application which has JBoss as the application server with Tomcat as the web server, our application has Oracle 11g as the database. I would give some further background to the issue we are facing, since the last 1 1/2 months, the application slows down. Sometimes it comes back to normal, specially on week-ends. But other times we restart JBoss Tomcat to bring back the application to normal. We have been using jconsole to monitor tomcat like jconsole 10.101.17.79:8891 which monitors our tomcat for a work order system. If the memory usage does not show spike and shows constant reading, the GC button is clicked to invoke the garbage collector. I checked out on the net and got some clue as below: 1) Javamelody - It seems to be a 3rd party tool which is not recommended. 2) There is a command mentioned to see the admin console, http://IP:port/ but it is not displaying the required page. Please give your inputs whether jconsole should be a help in the right direction or some other way to monitor the performance of Tomcat. Jconsole and JVisualVm are quite useful tools for basic monitoring, if you understand how to use them and their limitations. Why did you get the impression that JavaMelody is not recommended? It does offer an awful lot of monitoring/debugging information, but you need to careful in setting it up. Under Tomcat 7, it will autodeploy with no security by default and expose a lot of potentially confidential information to whomever connects using the well-known context for it (which can't be changed). If you want to use it, I suggest limiting it to your development environment only, or reading up on how to secure it as best as possible. Jeff - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: How to monitor performance of tomcat
How about http://www.moskito.org ? It has everything you need including full control of jmx beans, memory management, threads, your beans/pojos/classes, filters, urls, what not... regards Leon On Tue, Apr 8, 2014 at 1:05 PM, Randhir Singh randhir.si...@sterlite.comwrote: We have an application which has JBoss as the application server with Tomcat as the web server, our application has Oracle 11g as the database. I would give some further background to the issue we are facing, since the last 1 1/2 months, the application slows down. Sometimes it comes back to normal, specially on week-ends. But other times we restart JBoss Tomcat to bring back the application to normal. We have been using jconsole to monitor tomcat like jconsole 10.101.17.79:8891 which monitors our tomcat for a work order system. If the memory usage does not show spike and shows constant reading, the GC button is clicked to invoke the garbage collector. I checked out on the net and got some clue as below: 1) Javamelody - It seems to be a 3rd party tool which is not recommended. 2) There is a command mentioned to see the admin console, http://IP:port/ but it is not displaying the required page. Please give your inputs whether jconsole should be a help in the right direction or some other way to monitor the performance of Tomcat. Regards -- *STL Disclaimer:* The content of this message may be legally privileged and confidential and are for the use of the intended recipient(s) only. It should not be read, copied and used by anyone other than the intended recipient(s). If you have received this message in error, please immediately notify the sender, preserve its confidentiality and delete it. Before opening any attachments please check them for viruses and defects. No employee or agent is authorised to conclude any binding agreement on behalf of Sterlite Technologies Limited with another party by email without express written confirmation by authorised person. Visit us at www.sterlitetechnologies.com Please consider environment before printing this email !
Re: [OT] timeout
If you want to learn never hesitate to ask a question no mater how dumb it is . As long as owners of this forum have no problem with my question , i will continue to ask .I dont have to listen to you. On Mon, Apr 7, 2014 at 10:44 PM, Hassan Schroeder hassan.schroe...@gmail.com wrote: On Sun, Apr 6, 2014 at 9:24 PM, Vicky B vickyb2...@gmail.com wrote: The question i asked was generic one every firewall have some common fucntionality . For someone who previously had no clue that firewall would drop the connection you assert that with a great deal of certainty. In any case, the docs for *your firewall* remains the best place to find the answer to your question. I hope you have control on your tongue next time you reply. I hope you stop asking unanswerably vague questions. Yet I suspect disappointment lies over that horizon. -- Hassan Schroeder hassan.schroe...@gmail.com http://about.me/hassanschroeder twitter: @hassan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org -- *Thanks Regards Vickyb*
Re: [OT] timeout
On 08/04/2014 09:39, Vicky B wrote: If you want to learn never hesitate to ask a question no mater how dumb it is . As long as owners of this forum have no problem with my question , i will continue to ask .I dont have to listen to you. No, you don't have to listen to the advice you have been given. Neither do the other folks on this forum have to answer your questions. If you want to increase the chances of getting quality, timely answers to your questions I'd suggest that you read the following before posting your next question: http://www.catb.org/esr/faqs/smart-questions.html Mark - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Does the HeartBleed vulnerability affect Apache Tomcat servers using Tomcat Native?
Are Apache Tomcat servers using Tomcat Native APR vulnerable to the HeartBleed OpenSSL bug, or does this layer insulate them? http://heartbleed.com/ I've also posted this question here if you wish to provide an answer on security.stackexchange: http://security.stackexchange.com/questions/55139/does-the-heartbleed-vulnerability-affect-apache-tomcat-servers-using-tomcat-nati Thanks, Arlo - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Apache Tomcat 7/8 installation folder on Mac OSX
Hi, I see different folder options for installing Apache Tomcat 7/8 on a Mac: /opt, /usr/local and /Applications. What is the recommended folder to install it on Mac OSX? Thanks.
Re: Does the HeartBleed vulnerability affect Apache Tomcat servers using Tomcat Native?
On 8.4.2014 18:48, Arlo White wrote: Are Apache Tomcat servers using Tomcat Native APR vulnerable to the HeartBleed OpenSSL bug, or does this layer insulate them? http://heartbleed.com/ They are vulnerable. There is no layer to insulate. You may test with: http://filippo.io/Heartbleed/ I tested with Tomcat 8.0.5 with tcnative 1.1.29, which includes OpenSSL 1.0.1e, on Windows 7 64-bit, and it confirms the vulnerability. JSSE Connectors are not vulnerables so, one possible workaround is to swich to NIO or BIO connector until patched version of tcnative is available. -Ognjen - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
ColdFusion10 custom mod_jk difference
We're moving from ColdFusion8 to CF10 where I work and ran into a strange issue. We tried using mod_jk-1.2.39 and it compiled fine. We were able to get the communication working, but ran into strange errors like below. Adobe provides their own customized version of mod_jk which appears to be built from 1.2.32. When I compiled their version from the source they provide our errors went away. I downloaded the source from here if anyone's interested: http://helpx.adobe.com/coldfusion/kb/rhel-connector-configuration.html. I'd like to avoid using their custom version as I don't know how it will play if other non-ColdFusion based apps want to use AJP in the future. Does anyone have any recommendations on how I might be able to figure out what was changed? I'm not a developer so I don't know much at the code level. [Fri Apr 04 15:22:49 2014] [9753:139964571830064] [debug] ajp_send_request::jk_ajp_common.c (1713): (cfusion) request body to send 0 - request body to resend 0 [Fri Apr 04 15:22:49 2014] [9753:139964571830064] [debug] ajp_connection_tcp_get_message::jk_ajp_common.c (1403): received from ajp13 pos=0 len=14 max=65536 [Fri Apr 04 15:22:49 2014] [9753:139964571830064] [debug] ajp_connection_tcp_get_message::jk_ajp_common.c (1403): 0F 00 0A 2F 69 6E 64 65 78 2E 68 74 6D 00 00 00 - .../index.htm ... [Fri Apr 04 15:22:49 2014] [9753:139964571830064] [error] ajp_process_callback::jk_ajp_common.c (2071): Unknown AJP protocol code: 0F [Fri Apr 04 15:22:49 2014] [9753:139964571830064] [info] ajp_service::jk_ajp_common.c (2669): (cfusion) sending request to tomcat failed (recoverable), because of server error (attempt=2) [Fri Apr 04 15:22:49 2014] [9753:139964571830064] [debug] jk_shutdown_socket::jk_connect.c (840): About to shutdown socket 25 [ 172.16.113.55:49315 - 10.9.49.245:51010] [Fri Apr 04 15:22:49 2014] [9753:139964571830064] [debug] jk_is_input_event::jk_connect.c (1287): timeout during poll on socket 25 [ 172.16.113.55:49315 - 10.9.49.245:51010] (timeout=2) [Fri Apr 04 15:22:49 2014] [9753:139964571830064] [debug] jk_shutdown_socket::jk_connect.c (922): Shutdown socket 25 [ 172.16.113.55:49315 - 10.9.49.245:51010] and read 23848 lingering bytes in 0 sec. [Fri Apr 04 15:22:49 2014] [9753:139964571830064] [error] ajp_service::jk_ajp_common.c (2689): (cfusion) connecting to tomcat failed. [Fri Apr 04 15:22:49 2014] [9753:139964571830064] [debug] ajp_reset_endpoint::jk_ajp_common.c (810): (cfusion) resetting endpoint with socket -1 (socket shutdown) [Fri Apr 04 15:22:49 2014] [9753:139964571830064] [debug] ajp_done::jk_ajp_common.c (3140): recycling connection pool for worker cfusion and socket -1 [Fri Apr 04 15:22:49 2014] [9753:139964571830064] [info] jk_handler::mod_jk.c (2806): Service error=-3 for worker=cfusion
Re: ColdFusion10 custom mod_jk difference
Recommendation: Switch away from Adobe CF 10 to Railo (www.getrailo.org). On Tue, Apr 8, 2014 at 2:44 PM, Doug Strick douglas.str...@gmail.comwrote: We're moving from ColdFusion8 to CF10 where I work and ran into a strange issue. We tried using mod_jk-1.2.39 and it compiled fine. We were able to get the communication working, but ran into strange errors like below. Adobe provides their own customized version of mod_jk which appears to be built from 1.2.32. When I compiled their version from the source they provide our errors went away. I downloaded the source from here if anyone's interested: http://helpx.adobe.com/coldfusion/kb/rhel-connector-configuration.html. I'd like to avoid using their custom version as I don't know how it will play if other non-ColdFusion based apps want to use AJP in the future. Does anyone have any recommendations on how I might be able to figure out what was changed? I'm not a developer so I don't know much at the code level. [Fri Apr 04 15:22:49 2014] [9753:139964571830064] [debug] ajp_send_request::jk_ajp_common.c (1713): (cfusion) request body to send 0 - request body to resend 0 [Fri Apr 04 15:22:49 2014] [9753:139964571830064] [debug] ajp_connection_tcp_get_message::jk_ajp_common.c (1403): received from ajp13 pos=0 len=14 max=65536 [Fri Apr 04 15:22:49 2014] [9753:139964571830064] [debug] ajp_connection_tcp_get_message::jk_ajp_common.c (1403): 0F 00 0A 2F 69 6E 64 65 78 2E 68 74 6D 00 00 00 - .../index.htm ... [Fri Apr 04 15:22:49 2014] [9753:139964571830064] [error] ajp_process_callback::jk_ajp_common.c (2071): Unknown AJP protocol code: 0F [Fri Apr 04 15:22:49 2014] [9753:139964571830064] [info] ajp_service::jk_ajp_common.c (2669): (cfusion) sending request to tomcat failed (recoverable), because of server error (attempt=2) [Fri Apr 04 15:22:49 2014] [9753:139964571830064] [debug] jk_shutdown_socket::jk_connect.c (840): About to shutdown socket 25 [ 172.16.113.55:49315 - 10.9.49.245:51010] [Fri Apr 04 15:22:49 2014] [9753:139964571830064] [debug] jk_is_input_event::jk_connect.c (1287): timeout during poll on socket 25 [ 172.16.113.55:49315 - 10.9.49.245:51010] (timeout=2) [Fri Apr 04 15:22:49 2014] [9753:139964571830064] [debug] jk_shutdown_socket::jk_connect.c (922): Shutdown socket 25 [ 172.16.113.55:49315 - 10.9.49.245:51010] and read 23848 lingering bytes in 0 sec. [Fri Apr 04 15:22:49 2014] [9753:139964571830064] [error] ajp_service::jk_ajp_common.c (2689): (cfusion) connecting to tomcat failed. [Fri Apr 04 15:22:49 2014] [9753:139964571830064] [debug] ajp_reset_endpoint::jk_ajp_common.c (810): (cfusion) resetting endpoint with socket -1 (socket shutdown) [Fri Apr 04 15:22:49 2014] [9753:139964571830064] [debug] ajp_done::jk_ajp_common.c (3140): recycling connection pool for worker cfusion and socket -1 [Fri Apr 04 15:22:49 2014] [9753:139964571830064] [info] jk_handler::mod_jk.c (2806): Service error=-3 for worker=cfusion
RE: Does the HeartBleed vulnerability affect Apache Tomcat servers using Tomcat Native?
Ognjen, Has anyone entered a bugzilla request for this one? Jeff -Original Message- From: Ognjen Blagojevic [mailto:ognjen.d.blagoje...@gmail.com] Sent: Tuesday, April 08, 2014 3:02 PM To: Tomcat Users List Subject: Re: Does the HeartBleed vulnerability affect Apache Tomcat servers using Tomcat Native? On 8.4.2014 18:48, Arlo White wrote: Are Apache Tomcat servers using Tomcat Native APR vulnerable to the HeartBleed OpenSSL bug, or does this layer insulate them? http://heartbleed.com/ They are vulnerable. There is no layer to insulate. You may test with: http://filippo.io/Heartbleed/ I tested with Tomcat 8.0.5 with tcnative 1.1.29, which includes OpenSSL 1.0.1e, on Windows 7 64-bit, and it confirms the vulnerability. JSSE Connectors are not vulnerables so, one possible workaround is to swich to NIO or BIO connector until patched version of tcnative is available. -Ognjen - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Does the HeartBleed vulnerability affect Apache Tomcat servers using Tomcat Native?
-Original Message- From: Jeffrey Janner [mailto:jeffrey.jan...@polydyne.com] Sent: Tuesday, April 08, 2014 5:14 PM To: 'Tomcat Users List' Subject: RE: Does the HeartBleed vulnerability affect Apache Tomcat servers using Tomcat Native? Ognjen, Has anyone entered a bugzilla request for this one? Jeff Answering myself: https://issues.apache.org/bugzilla/show_bug.cgi?id=56363 Might I suggest folks please go vote this one up big time!
Re: Does the HeartBleed vulnerability affect Apache Tomcat servers using Tomcat Native?
What would the Tomcat code change be? I suppose it'd be nice if Tomcat refused to boot and logged an ERROR with a vulnerable SSL version? Is that what you were thinking? On 04/08/2014 03:13 PM, Jeffrey Janner wrote: Ognjen, Has anyone entered a bugzilla request for this one? Jeff -Original Message- From: Ognjen Blagojevic [mailto:ognjen.d.blagoje...@gmail.com] Sent: Tuesday, April 08, 2014 3:02 PM To: Tomcat Users List Subject: Re: Does the HeartBleed vulnerability affect Apache Tomcat servers using Tomcat Native? On 8.4.2014 18:48, Arlo White wrote: Are Apache Tomcat servers using Tomcat Native APR vulnerable to the HeartBleed OpenSSL bug, or does this layer insulate them? http://heartbleed.com/ They are vulnerable. There is no layer to insulate. You may test with: http://filippo.io/Heartbleed/ I tested with Tomcat 8.0.5 with tcnative 1.1.29, which includes OpenSSL 1.0.1e, on Windows 7 64-bit, and it confirms the vulnerability. JSSE Connectors are not vulnerables so, one possible workaround is to swich to NIO or BIO connector until patched version of tcnative is available. -Ognjen - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: ColdFusion10 custom mod_jk difference
I completely agree with you, but unfortunately am stuck with CF as the developers won't switch and the company already made an investment in licenses. On Tue, Apr 8, 2014 at 3:08 PM, john Matlock johndmatl...@gmail.com wrote: Recommendation: Switch away from Adobe CF 10 to Railo (www.getrailo.org)
Re: Apache Tomcat 7/8 installation folder on Mac OSX
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Guy, On 4/8/14, 1:40 PM, Guy Dillen wrote: I see different folder options for installing Apache Tomcat 7/8 on a Mac: /opt, /usr/local and /Applications. What is the recommended folder to install it on Mac OSX? I think it's really a matter of personal preference. /usr/local is kind of a Linux-ism, while most other *NIXs tend to use /opt for extra software installed for all users. While /Applications may seem like a logical choice in Mac, I don't think it is such a choice because it's not a user application: it's intended to be run as a server. On my Mac for development, I have both CATALINA_HOME and any CATALINA_BASEs underneath my own user directory (/Users/chris). - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1 Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBCAAGBQJTRITFAAoJEBzwKT+lPKRYrWoQAL7cPaOSAtykSJR3udDDjewF /IvUXJ9N9H+5wAi4igPYKxcWAwI0UlnPfeJWpgDCndyeAzbfelaQldUMBog9fnsM djueeYelSN0wk+rleXahA+S/puMxysLlVFoFMIUlwAxDBdiyX3WOrPxEXsHWMqTj axIi0bIG2JkLORGbXkPBcJ7/IAurd09yAGdYeRM/Zku1Y0sUjudx2Iom34rFnqIv u9xaW4aGdntQ8jO3+/zaaaumOK8nTHMEyNyp0Jn8vH4ZRBiSZd+Xjlrwfg5b6Zsq 7f0DAz678EhhDR2EXtvKnYwUUanIdQZCdgR1RzupOm87oi9MrRX9jWGTtXxL6P5H DbkPYpVTzhwPFQ+yvLqsmDPSlDrD4dQLQovnpESpWjGw2KrwRmEGuEaNVXTZAGSz 4/ldx0wPa91XEUgw7vAy/Y71r3pKQeqXOq2H9qqtH3bi5dUJtFAA/SrhEGxqdhtD VXxkWvQrxBrYNODfRHqiTzIG/4y8MmflboFj0RckHoQkXpnDOuEAnjSg200gwiPG SXrsde77RkLOVJsAID37zlqlmY1hS7ZQYg4a70MaIb2bVOdg7KBPjh1RQmvnMfPg G32tAB9qYJllsUvEsJisQtiKxL/5yI/eoI2vF4aQ6K1rONEumAtgAb4AslZQqnP4 omax9jngiU63YYIaRHYE =UyVM -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: How to monitor performance of tomcat
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Randir, On 4/8/14, 5:05 AM, Randhir Singh wrote: We have an application which has JBoss as the application server with Tomcat as the web server, our application has Oracle 11g as the database. I would give some further background to the issue we are facing, since the last 1 1/2 months, the application slows down. Sometimes it comes back to normal, specially on week-ends. But other times we restart JBoss Tomcat to bring back the application to normal. We have been using jconsole to monitor tomcat like jconsole 10.101.17.79:8891 which monitors our tomcat for a work order system. If the memory usage does not show spike and shows constant reading, the GC button is clicked to invoke the garbage collector. You should really never have to invoke the gc yourself. It gc isn't working properly by itself, you have a big problem. I checked out on the net and got some clue as below: 1) Javamelody - It seems to be a 3rd party tool which is not recommended. Javamelody is just fine. What makes you think it's not recommended? 2) There is a command mentioned to see the admin console, http://IP:port/ but it is not displaying the required page. Please give your inputs whether jconsole should be a help in the right direction or some other way to monitor the performance of Tomcat. I suspect there's no chance you are in Denver for ApacheCon right now, are you? I'm giving a presentation on it tomorrow. I'll post the slides later in the afternoon MDT. - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1 Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBCAAGBQJTRIU6AAoJEBzwKT+lPKRYs2sP/2+u7t/qlCW36i9x99cUz0oi 1bSvQ4KxDlldSOOAIi3AwjowksRhOV7jKkQCg8B7Qap8WRNlpMEOMqr2KT8Is4rc U3355dG5hMBtf/I+et+fag5VZzRaAjjm4iUQYZxeLzkEaLZspPI8S9hq8hLUsKIo Jel4wLDasJWdbeiksym017qvmWQv39BDwBoy+canzeUKTp106+RmgkUFiqZe0gI0 dHVuQK48ifdDkWL4LHZknSMojBZkjYxfUPqBf/3TmgG/jr0YGBJK6hHdpV9K+mN2 W29igs5pvIR6cZRDuIuAgIdfRxUBzXLuCmC0KLIFVVU6da7aeg8/C0oYduS3PmJh crtsXY3zLF+FdklP70uJTSBCgldfl9VimOtyXEu47hig/Mmmb/AWXz48ytY0c745 5LBSsVoxHFel1P5AFO0WeHkjsQP5yrzhhIgZ5CXCZiZ0q5971eHj9ODf5fw5Yujy DcFpeuhBj1wHCZsSKtTqyMgBLn9t26SUfK52g5Ij/PskRaeyDyxgXZGpbjd2aZVN PJOTXUdrU87QC8ipg0jlbnMOT6Magsd/YQwHYo3HzVqXns+T0sMOujcibIPC8KXY 6ALqte9xo7NxIRbjB2rg8q/B3FrEKcdeS1+cGyJJ1nlQuvehCqMUzzB9ufHGgX6t cirQD4cW1yoZ0oDj866a =19Kg -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Windows tcnative openssl ciphers question
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jeffrey, On 4/7/14, 4:07 PM, Jeffrey Janner wrote: Ok, this is a question for the native libs builders (or whoever knows the answer). Environment: Windows Server 2008 R2, Tomcat 7.0.50 w/APR 1.1.29, Java 1.7.0_51 (all 64-bit) I'm trying to set up a ciphers list that will get me an A rating on Qualys' SSL testing tool. Did you read their guide? Certain factors limit your rating to B no matter what else happens. Lots of those factors are quite common in real-world deployments. I'm using the latest list suggested by MozillaWiki: ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA:AES128:AES256:RC4-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!3DES:!MD5:!PSK However, when I run the test tool, it reports that the server is only supporting the following list: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 TLS_DHE_RSA_WITH_AES_128_CBC_SHA TLS_DHE_RSA_WITH_AES_256_CBC_SHA TLS_RSA_WITH_AES_256_GCM_SHA384 TLS_RSA_WITH_AES_128_GCM_SHA256 TLS_RSA_WITH_AES_128_CBC_SHA256 TLS_RSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_AES_256_CBC_SHA256 TLS_RSA_WITH_AES_256_CBC_SHA TLS_RSA_WITH_RC4_128_SHA TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA TLS_RSA_WITH_CAMELLIA_256_CBC_SHA TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA TLS_RSA_WITH_CAMELLIA_128_CBC_SHA Notice, none of the ECDHE-based ciphers are showing up in the list. This is apparently what is keeping me from getting that perfect score, as IE wants those ciphers for Forward Security. It ends up taking one of the lower ciphers on the list. Does anyone know, is there a setting that needs to be made to enable those ciphers? Were they turned off in the dev stage? Is it related to my certificate? Running the openssl.exe that comes with the APR binary download shows the ECDHE ciphers in the list. Any help appreciated. Did you set-up the Elliptic-curve parameters? If not, you can't use those ciphers. - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1 Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBCAAGBQJTRIWzAAoJEBzwKT+lPKRYsWkQAIscikdYUe69O+hsv1DF6XWA ics6yqljr7FVcL/6rmG5EXc1KG9e8SWgm+q8R5ol2TNLp1TTQ9CUHhteqNXsQua6 km+r9EimP/stC1SKwUC/idA85FJv+UOC1hxb8G9z3Rvy58ZEJ6JlVVO5qMs4iXVs 4vABiBKK89wKXG4Okx7Hv/DfTJnw/g4lTwvxycX3qx+F3ftSYyjsS/kRXY+M5jYM y2UunmzqQo8EO7zhUqesh/wgTMaCCC1IdmB7giCip9DrYIPgAL4Aa6TXH4sZpkQ3 6v6HfRMQHi0XiY0KMV2GL6P4VD4e3dtsiOrd9zWKSHdEQF6swKIiE6oZUyUGj4gI iDu1JheqDNbEBiOxI1NopFWJ4TCnuVlc/mjefzyjhVxUhjrUEqcnneQUo0vOzqKb cIv/S+YRbwHSFTXQZ/I9xMkrBsAy5jkIM0g1CIL8vm5Eq8WLM9EdR59kD047jNDu pu9FYVTasodp/0lgmDZ493NEEdpSmhsrj924BhsjmsIO0/+/6kSvgC63pBmosIkQ tsgOvoh6D4jDBD0BbwIH94XiI8X0rwDW9UsDKEy/sIY+yw1c1Rt/9cBeDT6dvTHU LHmaLX09j8C0dR25c7wFc7DnN3SJjbxuAea2RojVBCOJxNV8qYhVvyfkzja8okPo p2EyaFpoD9bgkt1BLTCh =+oS7 -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Does the HeartBleed vulnerability affect Apache Tomcat servers using Tomcat Native?
After updating OpenSSL I simply restarted Tomcat to eliminate the vulnerability. (Checked http://filippo.io/Heartbleed before and after) I built APR and Tomcat Native from source on the server, so I assume it's doing dynamic library loading. Is the binary build staticly linked? Otherwise, I'm not sure it's necessary to redo the builds. On 04/08/2014 03:30 PM, Jeffrey Janner wrote: -Original Message- From: Jeffrey Janner [mailto:jeffrey.jan...@polydyne.com] Sent: Tuesday, April 08, 2014 5:14 PM To: 'Tomcat Users List' Subject: RE: Does the HeartBleed vulnerability affect Apache Tomcat servers using Tomcat Native? Ognjen, Has anyone entered a bugzilla request for this one? Jeff Answering myself: https://issues.apache.org/bugzilla/show_bug.cgi?id=56363 Might I suggest folks please go vote this one up big time! - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Apache Tomcat 7/8 installation folder on Mac OSX
On Tue, Apr 8, 2014 at 4:22 PM, Christopher Schultz ch...@christopherschultz.net wrote: I see different folder options for installing Apache Tomcat 7/8 on a Mac: /opt, /usr/local and /Applications. What is the recommended folder to install it on Mac OSX? I think it's really a matter of personal preference. /usr/local is kind of a Linux-ism, while most other *NIXs tend to use /opt for extra software installed for all users. From an older (archaeological!) perspective, /usr/local is more a BSD Unix standard vs /opt from System V Unix. But yes, personal preference -- I put things in /usr/local on all my servers so I do the same on my Mac for consistency. Keeps me from having to pointlessly genericize shell scripts and whatnot. -- Hassan Schroeder hassan.schroe...@gmail.com http://about.me/hassanschroeder twitter: @hassan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Does the HeartBleed vulnerability affect Apache Tomcat servers using Tomcat Native?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Ognjen, On 4/8/14, 2:02 PM, Ognjen Blagojevic wrote: On 8.4.2014 18:48, Arlo White wrote: Are Apache Tomcat servers using Tomcat Native APR vulnerable to the HeartBleed OpenSSL bug, or does this layer insulate them? http://heartbleed.com/ They are vulnerable. There is no layer to insulate. You may test with: http://filippo.io/Heartbleed/ I tested with Tomcat 8.0.5 with tcnative 1.1.29, which includes OpenSSL 1.0.1e, on Windows 7 64-bit, and it confirms the vulnerability. JSSE Connectors are not vulnerables so, one possible workaround is to swich to NIO or BIO connector until patched version of tcnative is available. - -1 Switching to JSSE only stops the hemorrhaging. You should consider all your server keys compromised if OpenSSL 1.0.1 was used (prior to g patch level). If you switch to JSSE, your key may already have been compromised, so the switch does not protect you. If you were lucky enough to have been ignored by Internet miscreants, then switching will protect you, but it's a bad bet. The better bet is to upgrade ASAP to a 1.0.1g version of OpenSSL and then re-key everything. Then change all your passwords. :( - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1 Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBCAAGBQJTRNkrAAoJEBzwKT+lPKRYOy8P/jrcbHmsXqAVGhZbYvE8Bpxy BJyWM2Cs0jt7yifNGVj6X3KPczQp1OEGk/sWQdNrb96It/8Y8Wf4ACWcgdHy8buS gk/RznsFsE5n3KoN9nxlLbw7Zzqxbx4OtpFuH2wh1aC31xbNvRtNLv639Y9ydLOY w+2R5DcASFVbh0t5aUHozULHwXwkylfqZlkX/KGtOVlr6InG9EJtJTwtW/JpbUdB TvHDI/djmKdoR1RCnjwWpg0NiX+8luQh+CKPE6vyZAX8vypOhMNJ9QEbfQbTtsUT 0Hah/dY/QQBrI6FliSPKHzMunlPZe6eRH5m2fJrWPKjnH3932qLFBnFByKDQdb52 KcQ5SNPOEUV4YL7kXd0uz3n6ejV/UrcLuMj0zJN3ySYBNmfzzqXDiOF9BHHe5hKj fjFzIgi9FEnmPxUpUlAdqenNGWbEffmaSmeaMtUSPW60NpswEs8OWRl+oyQEB3eC 9azb25FDsQHS4I4aj9JYFxlKzTpt8jDz2O7ddNaS5ql6m26iAPlWWAfU/r6+T2oj M8SWvGFO4FyfINngfDQl6NHbYvhrwuoEGPXNZyskrT5PpUZl/OkHrmM1iXXjigS/ jkyGt5JCZUO0tb3psxpfv0Zq/O25Qyg+H3vipemwC2mmlKJsZInNXhecy40LDbwL 3yPI60zrlr8yKEbULjTS =C7kz -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Does the HeartBleed vulnerability affect Apache Tomcat servers using Tomcat Native?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Arlo, On 4/8/14, 5:36 PM, Arlo White wrote: After updating OpenSSL I simply restarted Tomcat to eliminate the vulnerability. - -1 You must re-key your server, and get a new cert from your CA. You have stopped the bleeding but your key should still be considered compromised. (Checked http://filippo.io/Heartbleed before and after) I built APR and Tomcat Native from source on the server, so I assume it's doing dynamic library loading. Is the binary build staticly linked? Otherwise, I'm not sure it's necessary to redo the builds. The ASF only provides binaries for win32, and yes, they are statically-linked. Users without the expertise to build their own tcnative binary will have to wait for the tcnative team to roll a new release. - -chris On 04/08/2014 03:30 PM, Jeffrey Janner wrote: -Original Message- From: Jeffrey Janner [mailto:jeffrey.jan...@polydyne.com] Sent: Tuesday, April 08, 2014 5:14 PM To: 'Tomcat Users List' Subject: RE: Does the HeartBleed vulnerability affect Apache Tomcat servers using Tomcat Native? Ognjen, Has anyone entered a bugzilla request for this one? Jeff Answering myself: https://issues.apache.org/bugzilla/show_bug.cgi?id=56363 Might I suggest folks please go vote this one up big time! - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org -BEGIN PGP SIGNATURE- Version: GnuPG v1 Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBCAAGBQJTRNmkAAoJEBzwKT+lPKRYvAIQAL3KZI8JhuzFNCYA9DNLK7Fy Su6+c3NtIXcHd6vqIiQxsEDLd6s/hRs8lTZuIEqNGY+1OjjoYTTRr/aJDQeX+hQn 7cL8NcG+N5G+6br0IORfjorTgzoONI+RHN90RNhNWMtHfPrzw6AHxN187iLhYCxT uj0TanotVsoVHLqyFLFRHw9E55sec2w+foXEbcKAZeLNqsbfGSKKHlc2LzOi0XNX OkQ5cEvJO93uPgJoMhbBCQIvvEXYpOwNgqBfami8/vVlc1WEN9kxYhF/kTxRVgUn D0P9Ur5JquUglwk72qXDCuaqSzGBgR8VhCEqVgwY0gT+cIamkxntg0smVnhxCZVp XJnZz5m51+LmnfHdzasVPegVe1br7RLMWFrnI9CvQ44rJ7wDdbNL7zyWKrEdUAQj fEyacnXSk+VsO4ohtGk6a0RvXSWTOQd26xGtEHp9w/xgSFxKr3K2q9V/jy27vnfb /qLDVVnVBPJIYr5srref26sP4OqHAd/d8F/0pPEKGjUY3oAYvMpHiFXr0hxj9iob gTCNFOli+PTW+htQg5iVnVA2+fwnB7D/NLcY1LuIe9JTfDVQxCq56T78GaXbWrel lA4gYiZHR9xw1lZWy+JClUkmxgQtjzaJH7HocFGfXkwfU9Lmqybqhw3HAygDs27i BYiCM83vAmo5L81x0YZa =fHHn -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Fwd: Unable to start tomcat as a service.
On Tue, Apr 8, 2014 at 3:35 PM, Christoph P.U. Kukulies k...@kukulies.orgwrote: Am 08.04.2014 11:42, schrieb akshay jain: Hi, I downloaded *apache-tomcat-7.0.52-windows-x64.zip* from the apache website. I am running windows 7 64 bit operating system. Are you planning to leave it installed under c:\tmp ? No. It was for trial only. I am actually writing an installer for my web application, which takes the apache zip and extracts it to the Programs folder of windows. It also configures a couple of things of apache like port and all. Did you try to use service.bat install? I am able to install it using service.bat intall command and the service is running fine. But I want apache to use a particular jre which my installer would be copying to the system while installing. I found that setting JRE_HOME variable in setenv.bat doesn't work if service.bat install is used to install the service. What does the System Eventlog say? -- Christoph Kukulies I have setup the file setenv.bat file and apache starts without any problem when started using startup.bat script. To run apache as a windows service I did the following steps: 1. Extracted the zip to location C:\tmp 2. Opened command line in the said folder and ran command : tomcat7 //IS// 3. Then ran command : - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org -- *Akshay Jain* B-Tech. Computer (*College of Engineering, Pune*)
