RE: Enhancement request?

[Mcalexander, Jon J.]

It would be something that combines all 4 of your items below. I would be 
looking for something that can just give health status of Tomcat and the apps 
being hosted by that instance. This wouldn't/shouldn't have any "Admin" rights 
to do anything other than provide info. HTML is fine, but I think from an 
automation and dashboard reporting standpoint the json/xml stream/soap 
response/whatever would be best.

Now, in my possibly short sited view of the world, if wishes were fishes type 
of thing, to ME it would be awesome if this was automagically available via 
startup without having to do anything special in the server.xml to make that 
app available only to localhost on such and such port. Know what I mean? An 
instant statement of health localhost URL. 

Thanks,

Dream * Excel * Explore * Inspire
Jon McAlexander
Senior Infrastructure Engineer
Asst. Vice President
He/His

Middleware Product Engineering
Enterprise CIO | EAS | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.

> -Original Message-
> From: Christopher Schultz 
> Sent: Friday, September 8, 2023 3:46 PM
> To: users@tomcat.apache.org
> Subject: Re: Enhancement request?
> 
> Jon,
> 
> On 9/8/23 14:21, Mcalexander, Jon J. wrote:
> > In seeing the latest messages about the manager application, something
> that I and my team would LOVE to have is just a Status app that provides all
> the items status wise that the Manager app does, without any of the
> "Application Management" like restarting an app, etc. I know all the pieces
> are out there in Catalina.jar, but I don't have the developer knowledge to put
> it together in a separate servlet that just calls the items needed from
> Catalina.
> >
> > Is this something that any of the guru's have thought about putting
> together? I'm thinking it would be best to just be a web service, no gui, that
> you can call and get the json or xml output with the data so it can be
> incorporated into a dashboard.
> 
> Are you looking for...
> 
> 1. Something with more limited capabilities (for less-trusted admins, or to
> reduce the possibilities for hacking)
> 
> 2. Something with fewer distractions
> 
> 3. Something with a JSON/XML interface instead of HTML
> 
> 4. Something which has fewer lines of code
> 
> ?
> 
> Or some combination of the above, or something else?
> 
> -chris
> 
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Enhancement request?

[Christopher Schultz]

Jon,

On 9/8/23 14:21, Mcalexander, Jon J. wrote:

In seeing the latest messages about the manager application, something that I and my team 
would LOVE to have is just a Status app that provides all the items status wise that the 
Manager app does, without any of the "Application Management" like restarting 
an app, etc. I know all the pieces are out there in Catalina.jar, but I don't have the 
developer knowledge to put it together in a separate servlet that just calls the items 
needed from Catalina.

Is this something that any of the guru's have thought about putting together? 
I'm thinking it would be best to just be a web service, no gui, that you can 
call and get the json or xml output with the data so it can be incorporated 
into a dashboard.


Are you looking for...

1. Something with more limited capabilities (for less-trusted admins, or 
to reduce the possibilities for hacking)


2. Something with fewer distractions

3. Something with a JSON/XML interface instead of HTML

4. Something which has fewer lines of code

?

Or some combination of the above, or something else?

-chris

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Enhancement request?

[Mcalexander, Jon J.]

In seeing the latest messages about the manager application, something that I 
and my team would LOVE to have is just a Status app that provides all the items 
status wise that the Manager app does, without any of the "Application 
Management" like restarting an app, etc. I know all the pieces are out there in 
Catalina.jar, but I don't have the developer knowledge to put it together in a 
separate servlet that just calls the items needed from Catalina.

Is this something that any of the guru's have thought about putting together? 
I'm thinking it would be best to just be a web service, no gui, that you can 
call and get the json or xml output with the data so it can be incorporated 
into a dashboard.

Thanks,

Dream * Excel * Explore * Inspire
Jon McAlexander
Senior Infrastructure Engineer
Asst. Vice President
He/His

Middleware Product Engineering
Enterprise CIO | EAS | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.

Re: Strange problem involving the word "localhost"

[James H. H. Lampert]

On 9/8/23 8:34 AM, Ivano Luberti wrote:
I had similar problem with mod_security installed on servers and apache 
used as proxy.


mod_security intercept the request and if considers it suspicious 
generate a 403 error


Found it.

It's in the AWS WAF. A rule called 
"AWS#AWSManagedRulesCommonRuleSet#EC2MetaDataSSRF_BODY" seems to be the 
problem.


--
JHHL


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: question about tomcat manager Server Status page

[Ivano Luberti]

Thanks Christopher

Il 08/09/2023 17:51, Christopher Schultz ha scritto:

Ivano,

On 9/8/23 11:17, Ivano Luberti wrote:

Hi, looking at Server Status and Complete Server Status Page

I can see the following line:

Max threads: 200 Current thread count: 11 Current threads busy: 1 
Keep alive sockets count: 1


But looking at the thread list under the line I can count 24 lines.

So what is the number of thread currently instantiated by tomcat? 11 
or 24?


This is a good question. When I check my localhost Manager running 
8.5.x, I see this:


Max threads: -1 Current thread count: 4 Current threads busy: 1 Keep 
alive sockets count: 1


The number of threads shown in the http-nio-host-port section shows 5 
threads, 4 in the R state and one in the S state.


When running jstack against my JVM, I can see that there are only 4 
exec threads running.


So I think the claim that there are only 11 threads in your JVM is 
correct. I believe the 24 lines you are seeing are something buggy in 
the Manager's view. I'll see if I can play around with it a little bit 
to see what's happening.


-chris

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


--

Archimede Informatica tratta i dati personali in conformità a quanto
stabilito dal Regolamento UE n. 2016/679 (GDPR) e dal D. Lgs. 30 giugno 
2003 n. 196

per come modificato dal D.Lgs. 10 agosto 2018 n. 101.
Informativa completa 



dott. Ivano Mario Luberti

Archimede Informatica società cooperativa a r. l.
Via Gereschi 36, 56127 Pisa

tel.: +39 050/580959 | fax: +39 050/8932061

web: www.archicoop.it
linkedin: www.linkedin.com/in/ivanoluberti
facebook: www.facebook.com/archimedeinformaticapisa/

Re: question about tomcat manager Server Status page

[Christopher Schultz]

Ivano,

On 9/8/23 11:17, Ivano Luberti wrote:

Hi, looking at Server Status and Complete Server Status Page

I can see the following line:

Max threads: 200 Current thread count: 11 Current threads busy: 1 Keep 
alive sockets count: 1


But looking at the thread list under the line I can count 24 lines.

So what is the number of thread currently instantiated by tomcat? 11 or 24?


This is a good question. When I check my localhost Manager running 
8.5.x, I see this:


Max threads: -1 Current thread count: 4 Current threads busy: 1 Keep 
alive sockets count: 1


The number of threads shown in the http-nio-host-port section shows 5 
threads, 4 in the R state and one in the S state.


When running jstack against my JVM, I can see that there are only 4 exec 
threads running.


So I think the claim that there are only 11 threads in your JVM is 
correct. I believe the 24 lines you are seeing are something buggy in 
the Manager's view. I'll see if I can play around with it a little bit 
to see what's happening.


-chris

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Strange problem involving the word "localhost"

[Ivano Luberti]

I had similar problem with mod_security installed on servers and apache 
used as proxy.


mod_security intercept the request and if considers it suspicious 
generate a 403 error


Il 08/09/2023 17:25, James H. H. Lampert ha scritto:
Yesterday, I discovered that our Tomcat-based webapp (running on a 
Amazon AWS) doesn't like the word "localhost."


If I enter it in a text field, through the UI, it won't save the 
record, and if I feed it into our web services, it comes back with a 
403:Forbidden.


My primary hypothesis is that the 403 is coming from an AWS firewall 
rule, because that was the cause of our last 403 problem.


But is there anything in Tomcat that could be doing this?

--
JHHL

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


--

Archimede Informatica tratta i dati personali in conformità a quanto
stabilito dal Regolamento UE n. 2016/679 (GDPR) e dal D. Lgs. 30 giugno 
2003 n. 196

per come modificato dal D.Lgs. 10 agosto 2018 n. 101.
Informativa completa 



dott. Ivano Mario Luberti

Archimede Informatica società cooperativa a r. l.
Via Gereschi 36, 56127 Pisa

tel.: +39 050/580959 | fax: +39 050/8932061

web: www.archicoop.it
linkedin: www.linkedin.com/in/ivanoluberti
facebook: www.facebook.com/archimedeinformaticapisa/

Strange problem involving the word "localhost"

[James H. H. Lampert]

Yesterday, I discovered that our Tomcat-based webapp (running on a 
Amazon AWS) doesn't like the word "localhost."


If I enter it in a text field, through the UI, it won't save the record, 
and if I feed it into our web services, it comes back with a 403:Forbidden.


My primary hypothesis is that the 403 is coming from an AWS firewall 
rule, because that was the cause of our last 403 problem.


But is there anything in Tomcat that could be doing this?

--
JHHL

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

question about tomcat manager Server Status page

[Ivano Luberti]

Hi, looking at Server Status and Complete Server Status Page

I can see the following line:

Max threads: 200 Current thread count: 11 Current threads busy: 1 Keep 
alive sockets count: 1


But looking at the thread list under the line I can count 24 lines.

So what is the number of thread currently instantiated by tomcat? 11 or 24?



--

Archimede Informatica tratta i dati personali in conformità a quanto
stabilito dal Regolamento UE n. 2016/679 (GDPR) e dal D. Lgs. 30 giugno 
2003 n. 196

per come modificato dal D.Lgs. 10 agosto 2018 n. 101.
Informativa completa 



dott. Ivano Mario Luberti

Archimede Informatica società cooperativa a r. l.
Via Gereschi 36, 56127 Pisa

tel.: +39 050/580959 | fax: +39 050/8932061

web: www.archicoop.it
linkedin: www.linkedin.com/in/ivanoluberti
facebook: www.facebook.com/archimedeinformaticapisa/