Re: Secure AJP load balancing problem
Thanks Mark, I am working on parallely setting up another environment with Tomcat 6.x, however to clear an urgent audit I need to show the Apache connector uses secure protocol to exchange the data between Apache and tomcat. Both these servers are in DMZ and on different servers. Hello Chris, Thanks for your valuable advice, here is how my configuration looks like. *Apache conf:* ProxyPassMatch ^/(.*\.jsp|.*\.do)(;jsessionid=.*)?$ balancer://lb1/$1 *Balancer Conf:* Proxy balancer://lb1 BalancerMember https://tomcat02.us.rdigest.com:8443 BalancerMember https://tomcat02.us.rdigest.com:8543 ProxySet stickysession=JSESSIONID ProxySet nofailover=Off /Proxy *Tomcat conf:* Tomcat1: Connector port=8443 maxHttpHeaderSize=8192 maxThreads=150 minSpareThreads=25 maxSpareThreads=75 enableLookups=false disableUploadTimeout=true acceptCount=100 scheme=https secure=true clientAuth=false sslProtocol=TLS / Tomcat2: Connector port=8543 maxHttpHeaderSize=8192 maxThreads=150 minSpareThreads=25 maxSpareThreads=75 enableLookups=false disableUploadTimeout=true acceptCount=100 scheme=https secure=true clientAuth=false sslProtocol=TLS / Thanks again for your assistance extended. Regards, Arun Janarthanan On Wed, Jan 2, 2013 at 10:38 PM, Christopher Schultz ch...@christopherschultz.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Arun, On 1/2/13 4:45 PM, Arunkumar Janarthanan wrote: I have Apache 2.2.22 and Tomcat 5.5 running on SSL 8443, I have tried my balancer members to use HTTPS port So you are trying to use HTTPS over AJP? Did you mean APR? Please post your Connectors from server.xml and your relevant httpd configuration (e.g. ProxyPass). It would also be helpful if you were to describe any transport-guarantee that you may have in your web application(s). and finds the JSP pages doing ok for some reason the struts / action servlets would not accept secure protocol instead it redirects infinitely with the Tomcat server hostname and non-ssl port. Try a protocol trace using something like Mozilla Firefox's web console or similar tools for other web browsers. This will show you the request as sent by the browser and the response as seen by the browser: it should show the pattern you describe above with more detail. Anybody had similar experience try configuring secure connectors on such environment ? FWIW, I use stunnel to secure the back-channel between httpd and Tomcat (using an AJP connector). While I haven't actually performance-tested the two configurations against each other, my rationale for this configuration was to reduce the number of SSL handshakes that occur between httpd and Tomcat. Also, I've always used AJP to tunneling AJP made more sense for us than switching-over to HTTPS reverse-proxying. - -chris -BEGIN PGP SIGNATURE- Version: GnuPG/MacGPG2 v2.0.17 (Darwin) Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with undefined - http://www.enigmail.net/ iEYEAREIAAYFAlDk/TMACgkQ9CaO5/Lv0PAidwCgguSezH47shnxzVXOBF564rFm piIAnAy/8p0uTsF5Uxh2ViGVT7PFwgPY =sm58 -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: mod_proxy SSL protocol support for balancermember
Thanks for the response Gentlemen, I am not really particular about the AJP for secure communication as long as I can use https that should work for me, the reason for specific secure communication between Apache and Tomcat is the PCI compliance enforcing us not to have any other protocol other than https. Please let me know if you have any questions. Thanks, Arun Janarthanan On Fri, Dec 7, 2012 at 11:09 AM, André Warnier a...@ice-sa.com wrote: Vladimir, on this list, the rule is to not top post. Post your answer below the original message, or below the question to which it refers. This way, one can follow the conversation logically. - Original Message - From: Arunkumar Janarthanan arunkumar.webad...@gmail.com To: Tomcat Users List users@tomcat.apache.org Cc: Sent: Friday, December 7, 2012 5:49 PM Subject: mod_proxy SSL protocol support for balancermember Hi, I am using Apache 2.2.22 version on RHEL5 and there are instances runs for credit card data processing, now that the communication between Apache and Tomcat through proxy balancing uses AJP protocol for the communication and data tranfer. I was wondering if there is a way we can use HTTPS protocol in Apache balancer member after enabling SSL on tomcat engine. I did enable https on balancer configuration which doesn't work for me got a 500 error without any appropriate error message on Apache logs. Vladimir Girnet wrote: Here is my working configuration - httpd proxy (also on RHEL 5) -- SSLProxyEngine On Proxy balancer://tomcat_cluster BalancerMember https://10.10.10.11:8443 BalancerMember https://10.10.10.12:8443 /Proxy # Pass requests to balancer ProxyPass / balancer://tomcat_cluster/ ProxyPassReverse / balancer://tomcat_cluster/ - -- Yes, but this is not using the AJP protocol. The AJP protocol does not support SSL (so using mod_proxy_AJP will not work, and mod_jk neither) If you really need AJP, there are possibilities using SSL tunnels etc. Search the list archives for those. But maybe a question first : the usual setup with a front-end load-balancer is to use HTTPS between the client browser and the front-end, but terminate HTTPS at the front-end, and make a normal connection from the front-end to the back-end tomcats, which tend to be in the same local network as the front-end anyway. Having a first encryption-decryption and then a second encryption-decryption again introduces a significant overhead. So, do you have a specific reason for which you want to do this ? --**--**- To unsubscribe, e-mail: users-unsubscribe@tomcat.**apache.orgusers-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Tomcat error com.inet.tds.at: [TDS Driver]java.net.SocketException: Unrecognized Windows Sockets error: 0: JVM_Bind Windows 2008
I see similar issues / problem in my other Tomcat instances running on same server. On Tue, Apr 12, 2011 at 2:36 AM, André Warnier a...@ice-sa.com wrote: On the face of it, this has absolutely nothing to do with Tomcat. Why did you think it relates to tomcat ? Arunkumar Janarthanan wrote: Hi All, I have a scheduler application was running on win 2k fine, when we moved this application to windows 2008 there is an issue appearing the windows socket error. Apprently this seems the process / connection / sockets created by JVM not closed. Any idea if this appears to be know issue ? the version details below. Tomcat: 5.5.9 Java: 1.5.01_13 Windows 2008 X64 bit platform. Error details: Sandeep Singh/Consultants/IN/ReadersDigest 04/11/2011 08:38 AM To Arun Kumar Janarthanan/Consultants/IN/ReadersDigest@ReadersDigest, Leonard Labuschagne/US/ReadersDigest@ReadersDigest, Irving Murray/Consultants/US/ReadersDigest@ReadersDigest, Kshitij Shrivastava/Consultants/IN/ReadersDigest@ReadersDigest, Abbas Ali Khan/Consultants/IN/ReadersDigest@ReadersDigest, Vineet Gupta/Consultants/IN/ReadersDigest@ReadersDigest cc webops Subject Re: Need emergency restart on epipe server due to too many process initiated epipe scheduler Is there something in new windows server's registry which is causing this? Thanks for the update, please blog it and coordinate with Kshitij so that we make sure all services - crypt/decrypt, paymentech, mounted trust drive, schedular are bounced. Thanks. - Original Message - From: Arun Kumar Janarthanan Sent: 04/11/2011 08:23 AM EDT To: Leonard Labuschagne; Irving Murray; Sandeep Singh; Kshitij Shrivastava; Abbas Khan; Vineet Gupta Cc: webops Subject: Need emergency restart on epipe server due to too many process initiated epipe scheduler We need to restart the epipe server to clear the socket error, we noticed the epipe scheduler initated too many connections likely to be cause of this issue. *epipe scheduler:* INFO | jvm 1| 2011/04/10 21:02:01 | DBInit starts here.. INFO | jvm 1| 2011/04/10 21:02:01 | DBInit starts here.. INFO | jvm 1| 2011/04/10 21:02:06 | DBInit starts here.. INFO | jvm 1| 2011/04/10 21:02:06 | DBInit starts here.. INFO | jvm 1| 2011/04/10 21:02:06 | DBInit starts here.. INFO | jvm 1| 2011/04/10 21:02:06 | DBInit starts here.. INFO | jvm 1| 2011/04/10 21:02:06 | DBInit starts here.. INFO | jvm 1| 2011/04/10 21:02:10 | DBInit starts here.. INFO | jvm 1| 2011/04/10 21:02:10 | DatabaseFactory.getNewConnection(jdbc:inetdae7:205.230.46.190?, app, app_root, xpassx, conn) : CLIENTS = 127 : Failed to get connection from DriverManager : [TDS Driver]java.net.SocketException: Unrecognized Windows Sockets error: 0: JVM_Bind : SQL State : 08S01 : Stack Trace : com.inet.tds.at: [TDS Driver]java.net.SocketException: Unrecognized Windows Sockets error: 0: JVM_BindCause :java.net.SocketException: Unrecognized Windows Sockets error: 0: JVM_Bind INFO | jvm 1| 2011/04/10 21:02:10 | com.inet.tds.at: [TDS Driver]java.net.SocketException: Unrecognized Windows Sockets error: 0: JVM_Bind INFO | jvm 1| 2011/04/10 21:02:10 | at com.inet.tds.aq.a(Unknown Source) INFO | jvm 1| 2011/04/10 21:02:10 | at com.inet.tds.TdsDriver.connect(Unknown Source) INFO | jvm 1| 2011/04/10 21:02:10 | at java.sql.DriverManager.getConnection(DriverManager.java:525) INFO | jvm 1| 2011/04/10 21:02:10 | at java.sql.DriverManager.getConnection(DriverManager.java:171) INFO | jvm 1| 2011/04/10 21:02:10 | at com.readersdigest.util.DatabaseFactory.getNewConnection(DatabaseFactory.java:154) INFO | jvm 1| 2011/04/10 21:02:10 | at com.readersdigest.util.DatabaseFactory.getConnection(DatabaseFactory.java:98) INFO | jvm 1| 2011/04/10 21:02:10 | at com.readersdigest.util.Database.dbInit(Database.java:157) INFO | jvm 1| 2011/04/10 21:02:10 | at com.readersdigest.util.Database.dbInit(Database.java:111) INFO | jvm 1| 2011/04/10 21:02:10 | at com.readersdigest.util.ScheduleLogger.write(ScheduleLogger.java:70) INFO | jvm 1| 2011/04/10 21:02:10 | at com.readersdigest.util.PipelineStepProcessor.writeLog(PipelineStepProcessor.java:86) INFO | jvm 1| 2011/04/10 21:02:10 | at com.readersdigest.commerce.order.processor.SQLTransactionSender.run(SQLTransactionSender.java:125) INFO | jvm 1| 2011/04/10 21:02:10 | at com.readersdigest.util.ChannelPipeline.runSequence(ChannelPipeline.java:206) INFO | jvm 1| 2011/04/10 21:02:10 | at com.readersdigest.util.ChannelPipeline.runNextSequence(ChannelPipeline.java:251) INFO | jvm 1| 2011/04/10 21:02:10 | at com.readersdigest.util.PipelineStepProcessor.completed(PipelineStepProcessor.java:68) INFO | jvm 1| 2011/04/10 21:02:10 | at com.readersdigest.util.FileExtractBuilder.run
Tomcat error com.inet.tds.at: [TDS Driver]java.net.SocketException: Unrecognized Windows Sockets error: 0: JVM_Bind Windows 2008
Hi All, I have a scheduler application was running on win 2k fine, when we moved this application to windows 2008 there is an issue appearing the windows socket error. Apprently this seems the process / connection / sockets created by JVM not closed. Any idea if this appears to be know issue ? the version details below. Tomcat: 5.5.9 Java: 1.5.01_13 Windows 2008 X64 bit platform. Error details: Sandeep Singh/Consultants/IN/ReadersDigest 04/11/2011 08:38 AM To Arun Kumar Janarthanan/Consultants/IN/ReadersDigest@ReadersDigest, Leonard Labuschagne/US/ReadersDigest@ReadersDigest, Irving Murray/Consultants/US/ReadersDigest@ReadersDigest, Kshitij Shrivastava/Consultants/IN/ReadersDigest@ReadersDigest, Abbas Ali Khan/Consultants/IN/ReadersDigest@ReadersDigest, Vineet Gupta/Consultants/IN/ReadersDigest@ReadersDigest cc webops Subject Re: Need emergency restart on epipe server due to too many process initiated epipe scheduler Is there something in new windows server's registry which is causing this? Thanks for the update, please blog it and coordinate with Kshitij so that we make sure all services - crypt/decrypt, paymentech, mounted trust drive, schedular are bounced. Thanks. - Original Message - From: Arun Kumar Janarthanan Sent: 04/11/2011 08:23 AM EDT To: Leonard Labuschagne; Irving Murray; Sandeep Singh; Kshitij Shrivastava; Abbas Khan; Vineet Gupta Cc: webops Subject: Need emergency restart on epipe server due to too many process initiated epipe scheduler We need to restart the epipe server to clear the socket error, we noticed the epipe scheduler initated too many connections likely to be cause of this issue. *epipe scheduler:* INFO | jvm 1| 2011/04/10 21:02:01 | DBInit starts here.. INFO | jvm 1| 2011/04/10 21:02:01 | DBInit starts here.. INFO | jvm 1| 2011/04/10 21:02:06 | DBInit starts here.. INFO | jvm 1| 2011/04/10 21:02:06 | DBInit starts here.. INFO | jvm 1| 2011/04/10 21:02:06 | DBInit starts here.. INFO | jvm 1| 2011/04/10 21:02:06 | DBInit starts here.. INFO | jvm 1| 2011/04/10 21:02:06 | DBInit starts here.. INFO | jvm 1| 2011/04/10 21:02:10 | DBInit starts here.. INFO | jvm 1| 2011/04/10 21:02:10 | DatabaseFactory.getNewConnection(jdbc:inetdae7:205.230.46.190?, app, app_root, xpassx, conn) : CLIENTS = 127 : Failed to get connection from DriverManager : [TDS Driver]java.net.SocketException: Unrecognized Windows Sockets error: 0: JVM_Bind : SQL State : 08S01 : Stack Trace : com.inet.tds.at: [TDS Driver]java.net.SocketException: Unrecognized Windows Sockets error: 0: JVM_BindCause :java.net.SocketException: Unrecognized Windows Sockets error: 0: JVM_Bind INFO | jvm 1| 2011/04/10 21:02:10 | com.inet.tds.at: [TDS Driver]java.net.SocketException: Unrecognized Windows Sockets error: 0: JVM_Bind INFO | jvm 1| 2011/04/10 21:02:10 | at com.inet.tds.aq.a(Unknown Source) INFO | jvm 1| 2011/04/10 21:02:10 | at com.inet.tds.TdsDriver.connect(Unknown Source) INFO | jvm 1| 2011/04/10 21:02:10 | at java.sql.DriverManager.getConnection(DriverManager.java:525) INFO | jvm 1| 2011/04/10 21:02:10 | at java.sql.DriverManager.getConnection(DriverManager.java:171) INFO | jvm 1| 2011/04/10 21:02:10 | at com.readersdigest.util.DatabaseFactory.getNewConnection(DatabaseFactory.java:154) INFO | jvm 1| 2011/04/10 21:02:10 | at com.readersdigest.util.DatabaseFactory.getConnection(DatabaseFactory.java:98) INFO | jvm 1| 2011/04/10 21:02:10 | at com.readersdigest.util.Database.dbInit(Database.java:157) INFO | jvm 1| 2011/04/10 21:02:10 | at com.readersdigest.util.Database.dbInit(Database.java:111) INFO | jvm 1| 2011/04/10 21:02:10 | at com.readersdigest.util.ScheduleLogger.write(ScheduleLogger.java:70) INFO | jvm 1| 2011/04/10 21:02:10 | at com.readersdigest.util.PipelineStepProcessor.writeLog(PipelineStepProcessor.java:86) INFO | jvm 1| 2011/04/10 21:02:10 | at com.readersdigest.commerce.order.processor.SQLTransactionSender.run(SQLTransactionSender.java:125) INFO | jvm 1| 2011/04/10 21:02:10 | at com.readersdigest.util.ChannelPipeline.runSequence(ChannelPipeline.java:206) INFO | jvm 1| 2011/04/10 21:02:10 | at com.readersdigest.util.ChannelPipeline.runNextSequence(ChannelPipeline.java:251) INFO | jvm 1| 2011/04/10 21:02:10 | at com.readersdigest.util.PipelineStepProcessor.completed(PipelineStepProcessor.java:68) INFO | jvm 1| 2011/04/10 21:02:10 | at com.readersdigest.util.FileExtractBuilder.run(FileExtractBuilder.java:1184) INFO | jvm 1| 2011/04/10 21:02:10 | at com.readersdigest.util.ChannelPipeline.runSequence(ChannelPipeline.java:206) INFO | jvm 1| 2011/04/10 21:02:10 | at com.readersdigest.util.ChannelPipeline.runNextSequence(ChannelPipeline.java:251) INFO | jvm 1| 2011/04/10 21:02:10 | at
Re: Deploying a simple webservice for testing on tomcat gives HTTP 404
Have you checked the URL path from the Tomcat manager page is correct ? On Fri, Mar 26, 2010 at 6:59 PM, SM moni_spar...@yahoo.com wrote: Hi all, I developed a simple web service and deployed it on Tomcat 6.0.24 and when I debug on server it gives me http 404. There are no errors in the tomcat log. HTTP Status 404 - /Axis2WSTest/ type Status report message /Axis2WSTest/ description The requested resource (/Axis2WSTest/) is not available. Apache Tomcat/6.0.24 Please let me know how to debug this further. Thanks,Monisha
Re: sticky session failover
Len, Do you have a the nofailover parameter disabled ? this can help users continue served by the working tomcat instances in-case of the tomcat instance which cookie parameter set fails / not available. Proxy balancer://abc BalancerMember ajp://prod1:8081 route=app1 BalancerMember ajp://prod2:8081 route=app2 BalancerMember ajp://prod3:8081 route=app3 ProxySet stickysession=JSESSIONID ProxySet nofailover=Off /Proxy On Fri, Mar 26, 2010 at 5:21 PM, Len Takeuchi ltakeu...@jostleme.comwrote: Hello, I have apache load balancing a number of tomcat instances using mod_jk using sticky session. This is all working with the session id having the jvmRoute appended. I am storing the session using persistent manager using jdbc. I want to have failover for session as supported by JvmRouteBinderValve. Is this possible to set up in an environment where multicast is not supported? Do I need to set up a Cluster though I don't need session replication since I'm using persistent manager for session storage so all tomcat instances have access to session data? What I want is just the JvmRouteBinderValve behavior of changing the session id to the new jvmRoute and setting cookie when a tomcat instance receives a session request from a different jvmRoute. Regards, Len
SSL requests are getting timedout with the error
Hi, We noticed the below error when the SSL requests failed to complete. I have tomcat 5.5.9 running on Solaris 10 SPARC server with 16 Gig of Memory and 32 CPU. However the plain requests and SSL with just domain works ok. ex: https://www.abc.com. My sincere apologize for the minimal description, however is the below error is related any bug ? Kindly advice. SEVERE: Error decoding request java.io.IOException at org.apache.jk.common.JkInputStream.receive(JkInputStream.java:252) at org.apache.jk.common.HandlerRequest.decodeRequest(HandlerRequest.java:525) at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:363) at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:748) at org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:678) at org.apache.jk.common.SocketConnection.runIt(ChannelSocket.java:871) at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684) at java.lang.Thread.run(Thread.java:595) Mar 25, 2010 2:47:09 PM org.apache.jk.common.ChannelSocket processConnection Best Regards, Arun Janarthanan
Re: SSL requests are getting timedout with the error
Hi Chris, Very valid point the Tomcat to be upgraded, does the error makes any sense could be caused by SSL protocol ? Thanks for your advice. Best Regards, Arun J On Thu, Mar 25, 2010 at 11:34 PM, Caldarale, Charles R chuck.caldar...@unisys.com wrote: From: Arunkumar Janarthanan [mailto:arunkumar.webad...@gmail.com] Subject: SSL requests are getting timedout with the error I have tomcat 5.5.9 Happy fifth birthday to that version of Tomcat - which means it's very, very old, and many, many fixes for a variety of issues have gone into Tomcat, mod_jk, and httpd since then. Don't suppose you could try 5.5.28 to see if that makes a difference? Also, what versions of mod_jk and httpd are you using? And what JVM version? However the plain requests and SSL with just domain works ok. What does SSL with just domain mean? My sincere apologize for the minimal description, however is the below error is related any bug ? And the maximum possible answer given the minimal description is: maybe. The problem may well be in httpd or mod_jk, rather than Tomcat itself. Doubtful that anyone is terribly interested in searching through five years of changelogs for three different products looking for something vaguely corresponding to the description. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
JVMROUTE not showing on balancer-manager
Sorry for not providing clear description of my problem. I have had configured stickysession balancing across 4 tomcat instances as below. Proxy balancer://ccc1 BalancerMember ajp://App1:8509 route=app1_ccc1 BalancerMember ajp://App2.107:8509 route=app2_ccc1 BalancerMember ajp://App5:8509 route=app5_ccc1 BalancerMember ajp://App5:8609 route=app5_ccc2 ProxySet stickysession=JSESSIONID ProxySet nofailover=Off /Proxy However my balancer manager page shows only JVMROUTE on First balancer member is that ok ? *StickySession* *Timeout* *FailoverAttempts* *Method* JSESSIONID 0 1 byrequests *Worker URL* *Route* *RouteRedir* *Factor* *Set* *Status* *Elected* *To* *From* ajp://App1:8509http://10.100.106.21/balancer-manager?b=i3c1w=ajp://10.100.106.23:8509 app1_ccc1 1 0 Ok 1417 57K 34M ajp://App2:8509http://10.100.106.21/balancer-manager?b=i3c1w=ajp://10.100.106.107:8509 1 0 Ok 1343 55K 33M ajp://App5:8509http://10.100.106.21/balancer-manager?b=i3c1w=ajp://10.100.106.23:8509 1 0 Ok 1417 57K 34M ajp://App5:8509http://10.100.106.21/balancer-manager?b=i3c1w=ajp://10.100.106.107:8509 1 0 Ok 1343 55K 33M Please advice. Arun J On Mon, Feb 8, 2010 at 1:37 AM, Caldarale, Charles R chuck.caldar...@unisys.com wrote: From: Arunkumar Janarthanan [mailto:arunkumar.webad...@gmail.com] Subject: Critical Problem with Tomcat instances I am going through a critical problem that my payment system has 4 Tomcat instances and outofthem two instances simply redirecting to login page after user logged in into the application and trigger any action (even just clicking any link in the application) Not sure if this is application behavior while the same application doing on on other Two tomcat instances. Also the balancer manager page does not show JVMROUTE for more than one tomcat instance added int balancer.conf file, please help me to resolve this mysterious problem. Read your own message carefully - or better yet, have someone completely unfamiliar with your environment read it. Is there /any/ information in there that would help anyone actually understand the problem, let alone diagnose it? http://www.catb.org/~esr/faqs/smart-questions.htmlhttp://www.catb.org/%7Eesr/faqs/smart-questions.html - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Critical Problem with Tomcat instances
Hi Konstatin, Thanks for your reply, we are not running on cluster mode as it is simple proxypass balancing while other balancer configurations are showing all JVMRoute in balancer manager I could not see this particular instances of Tomcat are not being listed. Please advice. Arun J On Mon, Feb 8, 2010 at 6:46 AM, Konstantin Kolinko knst.koli...@gmail.comwrote: 2010/2/8 Arunkumar Janarthanan arunkumar.webad...@gmail.com: I am going through a critical problem that my payment system has 4 Tomcat instances and outofthem two instances simply redirecting to login page after user logged in into the application and trigger any action (even just clicking any link in the application) Not sure if this is application behavior while the same application doing on on other Two tomcat instances. Read through the docs, http://tomcat.apache.org/tomcat-6.0-doc/cluster-howto.html and make sure that 1. you have configured all properly 2. jvmRoute values for all 4 servers are different If you want us to point at your errors, you should post here your configuration files. Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Critical Problem with Tomcat instances
I am going through a critical problem that my payment system has 4 Tomcat instances and outofthem two instances simply redirecting to login page after user logged in into the application and trigger any action (even just clicking any link in the application) Not sure if this is application behavior while the same application doing on on other Two tomcat instances. Also the balancer manager page does not show JVMROUTE for more than one tomcat instance added int balancer.conf file, please help me to resolve this mysterious problem. Many thanks in Advance. Arun J
Re: Rerouting Traffic when number of connection increases
Nope, the servers are capable of managing upto 250k user loads , when it goes beyond it blows up. So we were thinking to have such mechanism that if user load goes more than such amount or if all Apache processing near to its maximum to have the load directed to another maintanance instances. Please advice. On Thu, Dec 10, 2009 at 4:51 PM, Pid p...@pidster.com wrote: On 10/12/2009 21:44, Arunkumar Janarthanan wrote: We have a 4 Apache Tomcat instances running on and trying to setup a custom message by redirecting user to different Apache instance with currently we are expereincing HIGH traffic, please visit later How this can be achieved ? Is there anyway I can find the total number of connections in all 4 web servers and reroute the traffic ? or this should be taken at load balancer or CDN level ? The latter? If the servers are experiencing high load and are unable to respond, I guess they aren't going to be able to display the alternative message. p Please advice. Arun J - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Rerouting Traffic when number of connection increases
We have a 4 Apache Tomcat instances running on and trying to setup a custom message by redirecting user to different Apache instance with currently we are expereincing HIGH traffic, please visit later How this can be achieved ? Is there anyway I can find the total number of connections in all 4 web servers and reroute the traffic ? or this should be taken at load balancer or CDN level ? Please advice. Arun J
Re: Customizing Default Error page when Webapp stopped Or not loaded
Thank you very much for the info Konstantin, is this applicable to Tomcat 5.5.9 ? that is the version we are using. However can we customize the class and make this internal error disappeared ? Please advice. On Sun, Nov 15, 2009 at 11:45 AM, Konstantin Kolinko knst.koli...@gmail.com wrote: 2009/11/15 Arunkumar Janarthanan arunkumar.webad...@gmail.com: I am having problem when thew webapp stopped or not loaded for some reason tomcat shows the default error page though I have error page configured in web.xml under application root. Do I have to modify *org.apache.catalina.valves.ErrorDispatcherValve* class file ? It is known as https://issues.apache.org/bugzilla/show_bug.cgi?id=41007 Could anyone please advice if anyone already have implemented such change in this class file ? I have not heard of any implementation yet, though it might be that some do exist. Contributions are welcome. Many thanks Arun Janarthanan Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Customizing Default Error page when Webapp stopped Or not loaded
Hi Konstantin, Thank you very much,I will look for the fix or an alternate option to fix the issue. Once again many thanks. Cheers, Arun Janarthanan On Mon, Nov 16, 2009 at 2:00 PM, Konstantin Kolinko knst.koli...@gmail.comwrote: 2009/11/16 Arunkumar Janarthanan arunkumar.webad...@gmail.com: Thank you very much for the info Konstantin, is this applicable to Tomcat 5.5.9 ? that is the version we are using. Sure, because this issue is an old one. I would even say that that is by design. Also, there might be a lot of other issues in 5.5.9, as well as those listed on http://tomcat.apache.org/security-5.html However can we customize the class On the conditions stated in the LICENSE and make this internal error disappeared ? I do not know, I have not tried it. They say your mileage may vary. Maybe a separate Valve can intercept this error and react appropriately. I do not see a need to change the default one. Contributions are welcome. Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Customizing Default Error page when Webapp stopped Or not loaded
I am having problem when thew webapp stopped or not loaded for some reason tomcat shows the default error page though I have error page configured in web.xml under application root. Do I have to modify *org.apache.catalina.valves.ErrorDispatcherValve* class file ? Could anyone please advice if anyone already have implemented such change in this class file ? Many thanks Arun Janarthanan
Re: connection Timeout
Have you tried *removeAbandonedTimeout* in connection pool settings ? this will help to get the connectionb closed if your DB connection waiting more than a specific amount of time. On Thu, Nov 12, 2009 at 4:02 AM, André Warnier a...@ice-sa.com wrote: vichi wrote: i want to close a connection if i don't get response back in specific time (let say in 30 sec) . is there any setting in tomcat for this purpose. please need an urgent help It might help if you explained what connection, to what. And as long as you are doing that, some information about tomcat version, platform etc would also be nice. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Tomcat Coyote HTTP11Protocol Pause
) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173) at com.application.servlet.filters.BlockXSSAttack.doFilter(BlockXSSAttack.java:99) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173) at com.application.servlet.filters.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:134) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148) at org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:307) at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:385) at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:748) at org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:678) at org.apache.jk.common.SocketConnection.runIt(ChannelSocket.java:871) at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684) at java.lang.Thread.run(Thread.java:595) Caused by: net.sf.hibernate.UnresolvableObjectException: No row with the given identifier exists: 1003916, of class: com.application.content.bean.Feature at net.sf.hibernate.UnresolvableObjectException.throwIfNull(UnresolvableObjectException.java:38) at net.sf.hibernate.impl.SessionImpl.internalLoad(SessionImpl.java:1964) at net.sf.hibernate.type.ManyToOneType.resolveIdentifier(ManyToOneType.java:69) at net.sf.hibernate.type.ManyToOneType.assemble(ManyToOneType.java:108) at net.sf.hibernate.collection.List.initializeFromCache(List.java:328) at net.sf.hibernate.impl.SessionImpl.initializeCollectionFromCache(SessionImpl.java:4024) at net.sf.hibernate.impl.SessionImpl.initializeCollection(SessionImpl.java:3309) at net.sf.hibernate.collection.PersistentCollection.initialize(PersistentCollection.java:195) ... 62 more # Regards, Arun J On Mon, Nov 9, 2009 at 9:04 PM, Caldarale, Charles R chuck.caldar...@unisys.com wrote: From: Arunkumar Janarthanan [mailto:arunkumar.webad...@gmail.com] Subject: Re: Tomcat Coyote HTTP11Protocol Pause There was no other error reported apart from sequence of Pause, stop destroyed messages from catalina. Something shut down Tomcat, and what you see is the normal result of that. If the shutdown was unexpected, then either someone sent the shutdown password over the shutdown port - or you've got a rogue webapp that's calling System.exit(). The latter can be prevented by employing a security manager, such as what's described here: https://www.securecoding.cert.org/confluence/display/java/EXC04-J.+Prevent+against+inadvertent+calls+to+System.exit%28%29+or+forced+shutdown - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Tomcat Coyote HTTP11Protocol Pause
Hi Pid, Thanks for throwing light on the issue and it is much appreciated, little keen to know what this error means cause my develoipers debating for a while now it is not the application problem. Could I know what is the Action page is trying to do and gets this exception, is this possible as this page is my application's Home page and crashes whole application itself ? Many thanks. Arun Janarthanan On Tue, Nov 10, 2009 at 10:06 AM, Pid p...@pidster.com wrote: On 10/11/2009 14:31, Arunkumar Janarthanan wrote: Hi Chuk, Thank you for the assistance, when we looked into the logs the Home page for this application throws the below exception followed by HTTP 500 error. Please advice. # # LEVEL: SEVERE SOURCE CLASS: com.application.rd.action.OpenLandingPageAction SOURCE METHOD: execute() DATE: Tue Nov 10 07:17:45 EST 2009 STACK TRACE: net.sf.hibernate.LazyInitializationException: Failed to lazily initialize a collection at snip Caused by: net.sf.hibernate.UnresolvableObjectException: No row with the given identifier exists: 1003916, of class: com.application.content.bean.Feature snip That'll be the problem then. p # Regards, Arun J On Mon, Nov 9, 2009 at 9:04 PM, Caldarale, Charles R chuck.caldar...@unisys.com wrote: From: Arunkumar Janarthanan [mailto:arunkumar.webad...@gmail.com] Subject: Re: Tomcat Coyote HTTP11Protocol Pause There was no other error reported apart from sequence of Pause, stop destroyed messages from catalina. Something shut down Tomcat, and what you see is the normal result of that. If the shutdown was unexpected, then either someone sent the shutdown password over the shutdown port - or you've got a rogue webapp that's calling System.exit(). The latter can be prevented by employing a security manager, such as what's described here: https://www.securecoding.cert.org/confluence/display/java/EXC04-J.+Prevent+against+inadvertent+calls+to+System.exit%28%29+or+forced+shutdown - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Tomcat Coyote HTTP11Protocol Pause
on tomcat server instances, they were giving below errors on all 3 machines. Below are the config details. Tomcat 5.5.9 java version 1.5.0_14 Java(TM) 2 Runtime Environment, Standard Edition (build 1.5.0_14-b03) Java HotSpot(TM) Server VM (build 1.5.0_14-b03, mixed mode) Solaris 10 Generic_137111-04 Nov 5, 2009 3:54:28 PM org.apache.jk.server.JkCoyoteHandler action INFO: Response already committed Nov 5, 2009 3:54:29 PM org.apache.jk.server.JkCoyoteHandler action INFO: Response already committed Nov 5, 2009 3:54:33 PM org.apache.coyote.http11.Http11Protocol pause INFO: Pausing Coyote HTTP/1.1 on http-8180 Nov 5, 2009 3:54:34 PM org.apache.catalina.core.StandardService stop INFO: Stopping service Catalina Nov 5, 2009 3:54:34 PM org.apache.catalina.core.StandardWrapper unload INFO: Waiting for 8 instance(s) to be deallocated Nov 5, 2009 3:54:35 PM org.apache.catalina.core.StandardWrapper unload INFO: Waiting for 8 instance(s) to be deallocated Nov 5, 2009 3:54:36 PM org.apache.catalina.core.StandardWrapper unload INFO: Waiting for 8 instance(s) to be deallocated Nov 5, 2009 3:54:36 PM org.apache.coyote.http11.Http11Protocol destroy INFO: Stopping Coyote HTTP/1.1 on http-8180 Nov 5, 2009 3:54:42 PM org.apache.catalina.loader.WebappClassLoader loadClass INFO: Illegal access: this web application instance has been stopped already. Could not load org.jboss.util.NestedException. The eventual following stack trace is caused by an error thrown for debugging purposes as well as to attempt to terminate the thread which caused the illegal access, and has no functional impact. Please advice. Arun Janarthanan
Re: Tomcat Coyote HTTP11Protocol Pause
There was no other error reported apart from sequence of Pause, stop destroyed messages from catalina. Please advice. Arun J On Mon, Nov 9, 2009 at 4:16 PM, Caldarale, Charles R chuck.caldar...@unisys.com wrote: From: Arunkumar Janarthanan [mailto:arunkumar.webad...@gmail.com] Subject: Tomcat Coyote HTTP11Protocol Pause on tomcat server instances, they were giving below errors on all 3 machines. What errors? All the messages are marked INFO. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
