Re: Need an answer for below query _ high critical for Middleware end in my team

[Rob Sargent]

On 11/4/22 08:10, Ganesan, Prabu wrote:


Hi team

Can you please help me with following:

What purpose does the values in the Environment tags and the values 
inside context.xml serve?


What purpose does the WatchedResource tags and the values inside the 
context.xml serve?


(Explain how the Tomcat components and different context settings are 
related (in the underlying packages)




1. Patience, please
2. Which parts of the relevant documentation are not clear?

Re: Need an answer for below query _ high critical for Middleware end in my team

[Ganesan, Prabu]

Hi team


Can you please help me with following:

What purpose does the values in the Environment tags and the values inside 
context.xml serve?

What purpose does the WatchedResource tags and the values inside the 
context.xml serve?



(Explain how the Tomcat components and different context settings are related 
(in the underlying packages)



Please can anybody answer  for this

Thanks
PrabuGanesan

From: Ganesan, Prabu
Sent: Friday, November 4, 2022 12:48 PM
To: users@tomcat.apache.org 
Subject: Need an answer for below query _ high critical for Middleware end in 
my team


Hi guys anyone help me on this below query.



Can you please help me with following:

What purpose does the values in the Environment tags and the values inside 
context.xml serve?

What purpose does the WatchedResource tags and the values inside the 
context.xml serve?



(Explain how the Tomcat components and different context settings are related 
(in the underlying packages)



Please can anybody answer  for this



Thanks & Regards,

_[Email_CBE.gif]

PrabuGanesan

Consultant|MS-Nordics

capgemini India Pvt. Ltd. | Bangalore

Contact: +91 8526554535

Email: prabhu.c.gane...@capgemini.com



www.capgemini.com

People matter, results count.

__

Connect with Capgemini:
[cid:image002.gif@01D8F04B.A90D3C60][cid:image003.gif@01D8F04B.A90D3C60][cid:image004.gif@01D8F04B.A90D3C60][cid:image005.gif@01D8F04B.A90D3C60][cid:image006.gif@01D8F04B.A90D3C60][cid:image007.gif@01D8F04B.A90D3C60]



Please consider the environment and do not print this email unless absolutely 
necessary.

Capgemini encourages environmental awareness.


This message contains information that may be privileged or confidential and is 
the property of the Capgemini Group. It is intended only for the person to whom 
it is addressed. If you are not the intended recipient, you are not authorized 
to read, print, retain, copy, disseminate, distribute, or use this message or 
any part thereof. If you receive this message in error, please notify the 
sender immediately and delete all copies of this message.

Re: setenv.sh not loaded

[Zero]

If I look how the service is defined in Arch Linux (for tomcat 10)


it defines a service file for Systemd, 
usr/lib/systemd/system/tomcat10.service


Looking in that file it calls jsvc.

In the parameters you then can define additional class path entries in 
parameter -cp and java runtime options in CATALINA_OPTS.


The idea there seems to be to change the tomcat10.service file instead 
of changing the setenv.sh file.


HTH
~Z

On 11/4/22 12:57, Ivano Luberti wrote:

I follow with the conclusion on this matter.

Installing Tomcat with yum and epel repository,so doing

yum install epel-release

yum install tomcat

leads to a tomcat installation with no catalina.sh present in either 
usr/share/tomcat or var/lib/tomcat


Consequently tomcat is installed as a service with a service file that 
launches tomcat without reference to catalina.sh and instead loads a 
configuration file in  etc/tomcat/ (not sure about this dir but it has 
been erased and I can't verify)  where you can put your JAVA_OPTS



Il 02/11/2022 14:08, Ivano Luberti ha scritto:


Tomcat ahas benne installed using yum

I cannot find any catalina.sh file on the system.

So I have to check with the sysadmin how  he configured tomcat.

Il 02/11/2022 13:46, Olaf Kock ha scritto:


On 02.11.22 12:43, Ivano Luberti wrote:
Hi, I have been given an Oracle Linux instance with tomcat 9.0.65 
installed as a service.


Tomcat is running correctly

I have tried to create a setenv.sh file to tune the JVM, but using 
the tomcat manager application and the catalina.log file it seems 
that my java configuration is not loaded.


Any suggestion on how to debug this?


You're saying "installed as a service". This might mean that 
tomcat/bin/catalina.sh is also never executed, or that it has been 
altered from the default.


Ivano's suggestion is great already. On top, you might want to

* check how Tomcat is started by the system (e.g. does it go through 
catalina.sh at all?)


* check if anything in its installation directory is altered from 
default. Just inspect a diff between stock 9.0.65 and what you find 
in your installation.


Olaf 



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: setenv.sh not loaded

[Ivano Luberti]

I follow with the conclusion on this matter.

Installing Tomcat with yum and epel repository,so doing

yum install epel-release

yum install tomcat

leads to a tomcat installation with no catalina.sh present in either 
usr/share/tomcat or var/lib/tomcat


Consequently tomcat is installed as a service with a service file that 
launches tomcat without reference to catalina.sh and instead loads a 
configuration file in  etc/tomcat/ (not sure about this dir but it has 
been erased and I can't verify)  where you can put your JAVA_OPTS



Il 02/11/2022 14:08, Ivano Luberti ha scritto:


Tomcat ahas benne installed using yum

I cannot find any catalina.sh file on the system.

So I have to check with the sysadmin how  he configured tomcat.

Il 02/11/2022 13:46, Olaf Kock ha scritto:


On 02.11.22 12:43, Ivano Luberti wrote:
Hi, I have been given an Oracle Linux instance with tomcat 9.0.65 
installed as a service.


Tomcat is running correctly

I have tried to create a setenv.sh file to tune the JVM, but using 
the tomcat manager application and the catalina.log file it seems 
that my java configuration is not loaded.


Any suggestion on how to debug this?


You're saying "installed as a service". This might mean that 
tomcat/bin/catalina.sh is also never executed, or that it has been 
altered from the default.


Ivano's suggestion is great already. On top, you might want to

* check how Tomcat is started by the system (e.g. does it go through 
catalina.sh at all?)


* check if anything in its installation directory is altered from 
default. Just inspect a diff between stock 9.0.65 and what you find 
in your installation.


Olaf








-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


--

Archimede Informatica tratta i dati personali in conformità a quanto
stabilito dal Regolamento UE n. 2016/679 (GDPR) e dal D. Lgs. 30 
giugno 2003 n. 196

per come modificato dal D.Lgs. 10 agosto 2018 n. 101.
Informativa completa 



dott. Ivano Mario Luberti

Archimede Informatica società cooperativa a r. l.
Via Gereschi 36, 56127 Pisa

tel.: +39 050/580959 | fax: +39 050/8932061

web: www.archicoop.it
linkedin: www.linkedin.com/in/ivanoluberti
facebook: www.facebook.com/archimedeinformaticapisa/


--

Archimede Informatica tratta i dati personali in conformità a quanto
stabilito dal Regolamento UE n. 2016/679 (GDPR) e dal D. Lgs. 30 giugno 
2003 n. 196

per come modificato dal D.Lgs. 10 agosto 2018 n. 101.
Informativa completa 



dott. Ivano Mario Luberti

Archimede Informatica società cooperativa a r. l.
Via Gereschi 36, 56127 Pisa

tel.: +39 050/580959 | fax: +39 050/8932061

web: www.archicoop.it
linkedin: www.linkedin.com/in/ivanoluberti
facebook: www.facebook.com/archimedeinformaticapisa/

Tomcat 9x NIO connector socket timeout

[Pawel Veselov]

Hello.

I was wondering what exact value does Tomcat 9x use for NIO connector
socket timeouts?
I.e., when the following exception occurs:

org.apache.catalina.connector.ClientAbortException
java.net.SocketTimeoutException
at 
org.apache.catalina.connector.OutputBuffer.realWriteBytes(OutputBuffer.java:353)
at 
org.apache.catalina.connector.OutputBuffer.flushByteBuffer(OutputBuffer.java:783)
at org.apache.catalina.connector.OutputBuffer.append(OutputBuffer.java:688)
at org.apache.catalina.connector.OutputBuffer.writeBytes(OutputBuffer.java:388)
at org.apache.catalina.connector.OutputBuffer.write(OutputBuffer.java:366)
at 
org.apache.catalina.connector.CoyoteOutputStream.write(CoyoteOutputStream.java:96)

, it means that the underlying socket's .setSoTimeout() has been set
to a positive value.

Reading https://tomcat.apache.org/tomcat-9.0-doc/config/http.html, I see:

socket.soTimeout - "This is equivalent to standard attribute
connectionTimeout". Does it mean that setting this property is the
same as setting connectionTimeout, or that in the absence of
socket.soTimeout being explicitly set, the value of connectionTimeout
is used?

"connectionTimeout" says that it's only about waiting for a request
line after a TCP connection is accepted.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

AW: TLS configuration TLS for JMX port

[Bärtschi , Markus-MGB]

On 04/11/2022 08:06, Bärtschi, Markus-MGB wrote:
>> How can I configure TSL for my JMX port without the keystore information 
>> showing up on the command line ?

> Don't use passwords. Rely on operating system file permissions to limit 
> access to the file to the Tomcat process (and root).

So you recommend to use a passwordless keystore and chmod 600 it to protect it ?

> Keep in mind that JMX has various security issues you can do very little 
> about including:
> - extremely coarse grained security (read-only or read/write)
> - no protection against brute force attacks
> - no logging to identify brute force attacks
> Note that Tomcat is implemented from the point of view that *any* JMX access 
> is equivalent to full administrative access.

I'm aware the JMX is not great from a security perspective. But we need a way 
to monitor what is going on.

> Mark
Thanks ! Markus

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: TLS configuration TLS for JMX port

[Mark Thomas]

On 04/11/2022 08:06, Bärtschi, Markus-MGB wrote:


I configured TLS for my JMX post, this is working alright.

But the keystore information, especially the passwords end up on the 
java/tomcat command line.
I did attempt to move the configuration items into catalina.properties, but 
this did not work.

How can I configure TSL for my JMX port without the keystore information 
showing up on the command line ?


Don't use passwords. Rely on operating system file permissions to limit 
access to the file to the Tomcat process (and root).


Keep in mind that JMX has various security issues you can do very little 
about including:


- extremely coarse grained security (read-only or read/write)
- no protection against brute force attacks
- no logging to identify brute force attacks

Note that Tomcat is implemented from the point of view that *any* JMX 
access is equivalent to full administrative access.


Mark

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Compatibility, 32 bit ..

[Mark Thomas]

On 03/11/2022 11:48, John Dale (DB2DOM) wrote:

Greetings - thanks for the pointer below.

Brought up some interesting questions below.

How do changes at Oracle affect Tomcat?  Has OpenJRE sufficiently
insulated the risk?


What changes at Oracle? What risk?

There isn't anything that i am particularly worried about at the moment.



What would you say is the best O/R M tool for tomcat that still keeps
coding hands-on with respect to connection management and MVC handler
deployment/logic?


Sorry, not a clue.


What are some good object databases (are there any) that work well with Tomcat?


Ditto.

Mark




On 11/3/22, Mark Thomas  wrote:

On 02/11/2022 18:51, Christopher Schultz wrote:

John,

On 11/2/22 14:32, John Dale (DB2DOM) wrote:

On 11/2/22, Christopher Schultz  wrote:

John,

On 11/2/22 12:44, John Dale (DB2DOM) wrote:

I'd like to continue to invest in Raspberry Pi, but also try to put
together a functional 32bit build of my software for those poor old
neglected closeted towers (really, poor things!).

I should be able to do it, from the looks of this.

Are you guys doing any kind of pruned down version of Tomcat or maybe
a configurable Tomcat that will only include some bare bones stuff
like request parsing, connection pooling, and (obviously) threading?


You might be surprised to learn that Tomcat is pretty stripped-down
already. What do you imagine that Tomcat is doing that is beyond what
you have listed above?


Isn't there still a lot of J2E code allowing deployment and processing
of J2E standards that aren't necessarily needed?  What else?


Well, it supports a few things that you may not use in your
application(s), such as WebSocket, asynchronous I/O, JSP/EL, and JASPIC.
Maybe you don't use JSPs, so you can throw-out the JSP and EL
components. But if you don't use them, they are a few inert kilobytes of
data on the disk. Same with JASPIC. Removing them would be more work
than simply ignoring them.

Tomcat 10.1 requires Java 11 because the specs it follows say that's the
minimum required version, for whatever reason.

The official Tomcat binary releases will be built using Java 11 and thus
they must be run by Java 11 or later.

But there's nothing stopping you from trying to use the source to build
a Java-8-compatible build of Tomcat 10.1. I don't think we are using any
source-level features of Java that actually require anything past Java
8. But if it vomits at runtime because something is missing because you
actually /do/ need Java 11, then we're gonna tell you "don't do that."


There are a few things that will break - and some of them are fairly
fundamental.

The simplest way to see what is going to break is to look at the
org.apache.tomcat.util.compat package. Then you need to look at the
JreNCompat classes that have been removed as a result of the increase in
minimum Java version. For 10.0.x to 10.1.x that is Jre9Compat.

If you want to run 10.1.x on Java 8, in theory you could revert the
commit that removed Jre9Compat but as Chris says you are very much on
your own in terms of support if things go wrong.

Mark

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org




-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Compatibility, 32 bit ..

[Mark Thomas]

On 03/11/2022 12:29, John Dale (DB2DOM) wrote:

Is Tomcat's HTTP/S processing libraries modular and portable?


That depends on how you define "HTTP/S processing libraries", "modular" 
and "portable".


Can you take then and use them with something else where you just need 
HTTP/S and no servlet API? Not easily.


Are they portable? Yes, they are as portable as Java is.

Are they modular? The classes are all in a single JAR but it is 
structured so it easy to extend with new implementations.


Tomcat uses JSSE for TLS. When using OpenSSL, it is wrapped so it looks 
like a JSSE implementation.


Mark





On 11/3/22, Mark Thomas  wrote:

On 02/11/2022 18:51, Christopher Schultz wrote:

John,

On 11/2/22 14:32, John Dale (DB2DOM) wrote:

On 11/2/22, Christopher Schultz  wrote:

John,

On 11/2/22 12:44, John Dale (DB2DOM) wrote:

I'd like to continue to invest in Raspberry Pi, but also try to put
together a functional 32bit build of my software for those poor old
neglected closeted towers (really, poor things!).

I should be able to do it, from the looks of this.

Are you guys doing any kind of pruned down version of Tomcat or maybe
a configurable Tomcat that will only include some bare bones stuff
like request parsing, connection pooling, and (obviously) threading?


You might be surprised to learn that Tomcat is pretty stripped-down
already. What do you imagine that Tomcat is doing that is beyond what
you have listed above?


Isn't there still a lot of J2E code allowing deployment and processing
of J2E standards that aren't necessarily needed?  What else?


Well, it supports a few things that you may not use in your
application(s), such as WebSocket, asynchronous I/O, JSP/EL, and JASPIC.
Maybe you don't use JSPs, so you can throw-out the JSP and EL
components. But if you don't use them, they are a few inert kilobytes of
data on the disk. Same with JASPIC. Removing them would be more work
than simply ignoring them.

Tomcat 10.1 requires Java 11 because the specs it follows say that's the
minimum required version, for whatever reason.

The official Tomcat binary releases will be built using Java 11 and thus
they must be run by Java 11 or later.

But there's nothing stopping you from trying to use the source to build
a Java-8-compatible build of Tomcat 10.1. I don't think we are using any
source-level features of Java that actually require anything past Java
8. But if it vomits at runtime because something is missing because you
actually /do/ need Java 11, then we're gonna tell you "don't do that."


There are a few things that will break - and some of them are fairly
fundamental.

The simplest way to see what is going to break is to look at the
org.apache.tomcat.util.compat package. Then you need to look at the
JreNCompat classes that have been removed as a result of the increase in
minimum Java version. For 10.0.x to 10.1.x that is Jre9Compat.

If you want to run 10.1.x on Java 8, in theory you could revert the
commit that removed Jre9Compat but as Chris says you are very much on
your own in terms of support if things go wrong.

Mark

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org




-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: any plans for tomcat-native 1.2.36

[Mark Thomas]

On 03/11/2022 19:41, Усманов Азат Анварович wrote:

Hi Everyone!

I'm wondering if there are plans to release the next version of tomcat 
native 1.2 branch?I've scheduled a big server migration as well as 
tomcat upgrade 7.0.92 to -9.0.48   (everything seems to work  on 
test-enviroment) at $work on weekend(Oct 5th-6th) .I usually build 
openssl,tomcat-native  manually, currently using openssl 3.03 and tomcat 
native 1.2.33. it would be nice to upgrade both openssl and tomcat 
native at the same time during scheduled downtime. I did see a vote on a 
dev list for next release of 2.0 branch of tomcat native. any plans for 
tomcat -native 1.2.36?


No plans at all since there have been no changes to the code base since 
1.2.35.


Mark


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

TLS configuration TLS for JMX port

[Bärtschi , Markus-MGB]

I configured TLS for my JMX post, this is working alright.

But the keystore information, especially the passwords end up on the 
java/tomcat command line.
I did attempt to move the configuration items into catalina.properties, but 
this did not work.

How can I configure TSL for my JMX port without the keystore information 
showing up on the command line ?

Markus Baertschi, Migros, Switzerland

AW: Need an answer for below query _ high critical for Middleware end in my team

[Thomas Hoffmann (Speed4Trade GmbH)]

Hello,

I suggest to not mix topics in one thread.
One thread, one topic.
I think most of the mentioned questions are found at the documentation, e. G.
https://tomcat.apache.org/tomcat-10.0-doc/config/context.html

The watched ressources are observed for changes and can trigger reloads of the 
application. A context is usually used for one application which is accessible 
via a url e. G. /mysampleapp

Greetings, Thomas

Von: Ganesan, Prabu 
Gesendet: Freitag, 4. November 2022 07:59:04
An: Усманов Азат Анварович; users@tomcat.apache.org
Betreff: Need an answer for below query _ high critical for Middleware end in 
my team

Hi guys anyone help me on this below query.

Can you please help me with following:
What purpose does the values in the Environment tags and the values inside 
context.xml serve?
What purpose does the WatchedResource tags and the values inside the 
context.xml serve?

(Explain how the Tomcat components and different context settings are related 
(in the underlying packages)

Please can anybody ans for this



From: Усманов Азат Анварович 
Sent: Friday, November 4, 2022 1:11 AM
To: users@tomcat.apache.org 
Subject: any plans for tomcat-native 1.2.36

***This mail has been sent by an external source***

Hi Everyone!

I'm wondering if there are plans to release the next version of tomcat
native 1.2 branch?I've scheduled a big server migration as well as
tomcat upgrade 7.0.92 to -9.0.48   (everything seems to work  on
test-enviroment) at $work on weekend(Oct 5th-6th) .I usually build
openssl,tomcat-native  manually, currently using openssl 3.03 and tomcat
native 1.2.33. it would be nice to upgrade both openssl and tomcat
native at the same time during scheduled downtime. I did see a vote on a
dev list for next release of 2.0 branch of tomcat native. any plans for
tomcat -native 1.2.36?

Sincerely, Azat Usmanov

P.S. Our servers run on RHEL6


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

This message contains information that may be privileged or confidential and is 
the property of the Capgemini Group. It is intended only for the person to whom 
it is addressed. If you are not the intended recipient, you are not authorized 
to read, print, retain, copy, disseminate, distribute, or use this message or 
any part thereof. If you receive this message in error, please notify the 
sender immediately and delete all copies of this message.

Need an answer for below query _ high critical for Middleware end in my team

[Ganesan, Prabu]

Hi guys anyone help me on this below query.



Can you please help me with following:

What purpose does the values in the Environment tags and the values inside 
context.xml serve?

What purpose does the WatchedResource tags and the values inside the 
context.xml serve?



(Explain how the Tomcat components and different context settings are related 
(in the underlying packages)



Please can anybody answer  for this


Thanks & Regards,
_[Email_CBE.gif]
PrabuGanesan
Consultant|MS-Nordics
capgemini India Pvt. Ltd. | Bangalore
Contact: +91 8526554535
Email: prabhu.c.gane...@capgemini.com

www.capgemini.com
People matter, results count.
__
Connect with Capgemini:
[cid:image002.gif@01D8F04B.A90D3C60][cid:image003.gif@01D8F04B.A90D3C60][cid:image004.gif@01D8F04B.A90D3C60][cid:image005.gif@01D8F04B.A90D3C60][cid:image006.gif@01D8F04B.A90D3C60][cid:image007.gif@01D8F04B.A90D3C60]

Please consider the environment and do not print this email unless absolutely 
necessary.
Capgemini encourages environmental awareness.

This message contains information that may be privileged or confidential and is 
the property of the Capgemini Group. It is intended only for the person to whom 
it is addressed. If you are not the intended recipient, you are not authorized 
to read, print, retain, copy, disseminate, distribute, or use this message or 
any part thereof. If you receive this message in error, please notify the 
sender immediately and delete all copies of this message.

Need an answer for below query _ high critical for Middleware end in my team

[Ganesan, Prabu]

Hi guys anyone help me on this below query.

Can you please help me with following:
What purpose does the values in the Environment tags and the values inside 
context.xml serve?
What purpose does the WatchedResource tags and the values inside the 
context.xml serve?

(Explain how the Tomcat components and different context settings are related 
(in the underlying packages)

Please can anybody ans for this



From: Усманов Азат Анварович 
Sent: Friday, November 4, 2022 1:11 AM
To: users@tomcat.apache.org 
Subject: any plans for tomcat-native 1.2.36

***This mail has been sent by an external source***

Hi Everyone!

I'm wondering if there are plans to release the next version of tomcat
native 1.2 branch?I've scheduled a big server migration as well as
tomcat upgrade 7.0.92 to -9.0.48   (everything seems to work  on
test-enviroment) at $work on weekend(Oct 5th-6th) .I usually build
openssl,tomcat-native  manually, currently using openssl 3.03 and tomcat
native 1.2.33. it would be nice to upgrade both openssl and tomcat
native at the same time during scheduled downtime. I did see a vote on a
dev list for next release of 2.0 branch of tomcat native. any plans for
tomcat -native 1.2.36?

Sincerely, Azat Usmanov

P.S. Our servers run on RHEL6


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

This message contains information that may be privileged or confidential and is 
the property of the Capgemini Group. It is intended only for the person to whom 
it is addressed. If you are not the intended recipient, you are not authorized 
to read, print, retain, copy, disseminate, distribute, or use this message or 
any part thereof. If you receive this message in error, please notify the 
sender immediately and delete all copies of this message.