Tomcat 6.0.18 Virtual Hosting and Log4J
Hello all, I have virtual hosting enabled in tomcat 6.0.18. But I can not forward logs into proper log files. I wants to have two log files, one for tomcat and one for virtual host. Following is my configuration: Server.xml -- Host name=a.localhost appBase=/full/path/to/appbase unpackWARs=true autoDeploy=true xmlValidation=false xmlNamespaceAware=false Context path= docBase=a override=true reloadable=true crossContext=true allowLinking=true / Valve className=org.apache.catalina.valves.FastCommonAccessLogValve directory=logs prefix=a_access_log. suffix=.txt pattern=common resolveHosts=false / /Host Log4j.properties (/tomcat/lib/log4j.properties) - log4j.rootLogger=ERROR, R log4j.appender.R=org.apache.log4j.RollingFileAppender log4j.appender.R.File=${catalina.home}/logs/tomcat.log log4j.appender.R.MaxFileSize=1MB log4j.appender.R.MaxBackupIndex=10 log4j.appender.R.layout=org.apache.log4j.PatternLayout log4j.appender.R.layout.ConversionPattern=%d - %5p (%C:%L) - %m%n # Logging for sbus log4j.appender.A=org.apache.log4j.RollingFileAppender log4j.appender.A.File=${catalina.home}/logs/a.log log4j.appender.A.MaxFileSize=1MB log4j.appender.A.MaxBackupIndex=1 log4j.appender.A.layout=org.apache.log4j.PatternLayout log4j.appender.A.layout.ConversionPattern=%d - %5p (%C:%L) - %m%n log4j.logger.org.apache.catalina.core.ContainerBase.[Catalina].[localhost]=INFO, R log4j.additivity.org.apache.catalina.core.ContainerBase.[Catalina].[localhost]=false log4j.logger.org.apache.catalina.core.ContainerBase.[Catalina].[a.localhost]=DEBUG, A log4j.additivity.org.apache.catalina.core.ContainerBase.[Catalina].[a.localhost]=false The problem: --- All 404 errors and other application errors from http://a.localhost goes to tomcat.log instead of a.log. a.log however does have messages when you start tomcat. Am I missing something? Thanks. Regards, Dhaval
Re: APR installation Question
Hi Richard, I made small tutorial about how to enable APR and SSL. I have it in word file. If you don't mind I can email it to you on your email. I have question for this mailing list about attaching document. I can generate small size PDF from it. But am I allowed to attach document on this list? I want to make that document available on this list as well so that everyone can able to see it. Thanks. Regards, Dhaval --- Richard Kaye [EMAIL PROTECTED] wrote: Hi I also get The Apache Tomcat Native library which allows optimal performance in production environments was not found on the java.library.path: I'm using tomcat 5.5 installed from debian debs, and I think I understand the instructions I have read so far and have all the prerequisites to compile the necessary libraries, but I have not got past stage 1 yet. The docs at http://tomcat.apache.org/tomcat-5.5-doc/apr.html tells me to look for tomcat-native.tar.gz which I have done. The result is I don't have this file or anything remotely similar, nor is it provided in any of the debs I think. So I can't unpack it and compile it. What should I do now? Richard On Fri, 2007-06-15 at 13:52 +0300, Ilja S. wrote: Hi Your tomcat should start with option: -Djava.library.path=/usr/local/apr/lib in this case APR libs are in /usr/local/apr/lib, change to wherever you got your libs Usually you add this line to tomcat startup script... * Best Regards Ilja Andre Prasetya wrote: I got this : The Apache Tomcat Native library which allows optimal performance in production environments was not found on the java.library.path: I already compiled the tcnative, where can i add the path to java.library.path ? - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Looking for a deal? Find great prices on flights and hotels with Yahoo! FareChase. http://farechase.yahoo.com/ - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Paths in CSS files
Hi Mike, Use relative address for images in your CSS. That's a quick way. The other way I can think of is to use redirect in web.xml of your webapp in such a way that all request to /image/* goes to context/image/* Hope it helps. Regards, D - Original Message From: Mike Quilleash [EMAIL PROTECTED] To: Tomcat Users List users@tomcat.apache.org Sent: Tuesday, March 27, 2007 9:21:38 AM Subject: Paths in CSS files Hi all, I have a question about accessing resources from within CSS files, images mainly. Take the following CSS snippet. .bt { background:url(/image/box.png) no-repeat 100% 0; margin:0 0 0 18px; height:17px; } Particularly the url /image/box.png. Potentially my Tomcat web application may be run with a context path so /image/ becomes /contextpath/image and all the CSS breaks. Is there a way round this? Or should I be placing the urls somewhere else? Thanks. Mike. This e-mail is bound by the terms and conditions described at http://www.subexazure.com/mail-disclaimer.html Get your own web address. Have a HUGE year through Yahoo! Small Business. http://smallbusiness.yahoo.com/domains/?p=BESTDEAL - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Paths in CSS files
This is like one of those choice questions. As other mentioned, you can rename css file to jsp file and use custom jsp tags. Personally I would not use it because I use dreamweaver when I design page. So I need preview while working on css. Also I would like to make css code clean as well. Anyway that's just me. Also if there are separate developers and designers in the team, designers will find themselves comfortable with this approach as they can use their design tool nicely and would save their time. Developers will also get happy as they see less questions/bugs from designers. As you have pointed out, redirect might cause interference with other application. To avoid that, you might have to put style, images, script, etc. in separate folder called assets or something. This way your design elements or extra files will be only in assets folder and your main web application structure will remain unchanged. Now you might have two images folder, one in your webapp as well as one inside assets. Those two folder serve different purpose. The one that is inside assets will only serve images that used by style and has only design meaning. Now the images folder on main webapp has images which have business meaning. For example, if you are selling some product, it has product images, etc. To me, it's just one decision which has to made. There are pros and cons of that but we we have to accept both. Regards, Dhaval - Original Message From: Mike Quilleash [EMAIL PROTECTED] To: Tomcat Users List users@tomcat.apache.org Sent: Tuesday, March 27, 2007 10:32:57 AM Subject: RE: Paths in CSS files Hi Dhaval, I'd prefer to avoid relative addressing but I've read that the paths are relative to the css, not the html (which would cause problems) that is loading it so it may work ok. Using a redirect in web.xml is an interesting option, however if my app has to co-exist with another application on the same webserver, which may be using the root context, then I might end up annoying the other application too. Would this even work (I'm no expert) but would the app web.xml even be considered for URL requests that do not fall inside the web app context path? Thanks. Mike. -Original Message- From: Dhaval Patel [mailto:[EMAIL PROTECTED] Sent: 27 March 2007 14:35 To: Tomcat Users List Subject: Re: Paths in CSS files Hi Mike, Use relative address for images in your CSS. That's a quick way. The other way I can think of is to use redirect in web.xml of your webapp in such a way that all request to /image/* goes to context/image/* Hope it helps. Regards, D - Original Message From: Mike Quilleash [EMAIL PROTECTED] To: Tomcat Users List users@tomcat.apache.org Sent: Tuesday, March 27, 2007 9:21:38 AM Subject: Paths in CSS files Hi all, I have a question about accessing resources from within CSS files, images mainly. Take the following CSS snippet. .bt { background:url(/image/box.png) no-repeat 100% 0; margin:0 0 0 18px; height:17px; } Particularly the url /image/box.png. Potentially my Tomcat web application may be run with a context path so /image/ becomes /contextpath/image and all the CSS breaks. Is there a way round this? Or should I be placing the urls somewhere else? Thanks. Mike. This e-mail is bound by the terms and conditions described at http://www.subexazure.com/mail-disclaimer.html Get your own web address. Have a HUGE year through Yahoo! Small Business. http://smallbusiness.yahoo.com/domains/?p=BESTDEAL - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] This e-mail is bound by the terms and conditions described at http://www.subexazure.com/mail-disclaimer.html - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Get your own web address. Have a HUGE year through Yahoo! Small Business. http://smallbusiness.yahoo.com/domains/?p=BESTDEAL - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Tomcat and Java6
Hi, I am running Tomcat 5.5.20 with JDK 6.0 on Windows XP perfectly fine. I am running it as service and it works as it suppose it. Would you provide log file or catalina.out so that we can see what's going on? Thanks. Regards, D - Original Message From: Kristian Rink [EMAIL PROTECTED] To: users@tomcat.apache.org Sent: Wednesday, January 31, 2007 8:34:41 AM Subject: Re: Tomcat and Java6 [Per Johnsson [EMAIL PROTECTED] @ Wed, 31 Jan 2007 14:20:13 +0100] Do you run on windows with the Tomcat Service? Did you do a clean install of tomcat after installing java 6? I have tried both the server and client jvm.dll in both the jre and jdk withouit luck. Ahh, no, our production systems are Linux and Solaris exclusively. Isn't there a way to also run tomcat without the service atop Win32? Just in order to figure out which piece of the setup is actually broken... Cheers, Kristian -- Kristian Rink * http://zimmer428.net * http://flickr.com/photos/z428/ jab: [EMAIL PROTECTED] * icq: 48874445 * fon: ++49 176 2447 2771 One dreaming alone, it will be only a dream; many dreaming together is the beginning of a new reality. (Hundertwasser) - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] It's here! Your new message! Get new email alerts with the free Yahoo! Toolbar. http://tools.search.yahoo.com/toolbar/features/mail/ - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: installing a web application on apache tomcat
Hi, There are couple of ways to do it. Following are few of them: (1) Using Tomcat manager application to upload .war file for your application. (2) You can put your web application folder inside Tomcat webapps (TOMCAT_HOME\webapps). But you have to make sure that you use WEB-INF\web.xml inside your application. My belief is WEB-INF\web.xml is recommend to use because it has properties related to your web application which are very important. I always use it. Since I don't know much about your application, I can't be specific. Feel free to write me your question at my email address. Hope it will make you going. Regards, D --- archana acharya [EMAIL PROTECTED] wrote: hello all, I am Archana Acharya, I am pursuing with final year BCA in India.As a part of my final term project I am required to install a web application in apache tomcat, by reading the documentation provided i understood that i have to set the context (specify the path) in a file called web.xml which is local to the application.I have previously worked on the basic installation and configuration of httpd (apache)server. I would be gratefull if someone could explain to me the step by step procedure for installing web applications on apache tomcat.I am currently using tomcat5. You can also mail me at my mail id:[EMAIL PROTECTED] Thanking you Yours faithfully Archana Acharya - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Don't pick lemons. See all the new 2007 cars at Yahoo! Autos. http://autos.yahoo.com/new_cars.html - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Web Statistics in Tomcat 5.5
How about Lambda Probe (http://www.lambdaprobe.org/) ? Regards, D --- Chetan Pandey [EMAIL PROTECTED] wrote: Hi All: I just want to know if there is any Free and Open Source Software for Tomcat 5.5 which will generate all the Web Statistics related to User Interaction with our Web-site. Preferably without requiring installation of Apache httpd. Thanks for your kind reponse(s). Chetan _ CHETAN PANDEY Executive - Technology Services BLUE, 1 Maritime Square, #13-02 Harbourfront Centre, Singapore 099253 DID +65-6212-0863 main line +65-6333-3336 fax +65 6336-6334 email mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] website http://www.bluesingapore.com/ www.BLUEsingapore.com _ BEIJING SHANGHAI LONDON TOKYO PALO ALTO SINGAPORE CONFIDENTIALITY STATEMENT: This email and its attachment(s) contain Privileged/Confidential information. If you are not the intended recipient, the distribution, use or replication of the information in this email is strictly prohibited. If you have received this email in error, please notify the sender immediately by return email, then delete this email and any attached documents. Any opinions, conclusions or views expressed in this email are those of the individual sender, except where he/she -- expressly and with authority -- states them to be the views of BLUE. __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: web application - student need help
Hi, Following is configuration for Tomcat Connection pool which you have to write in your context.xml. If you are using Tomcat Admin, you specify parameters in web GUI. Resource name=jdbc/mydbconn type=javax.sql.DataSource / ResourceParams name=jdbc/mydbconn parameter namemaxWait/name value5000/value /parameter parameter namemaxActive/name value10/value /parameter parameter nameurl/name value*JDBC URL*/value /parameter parameter namedriverClassName/name value*DRIVER CLASS*/value /parameter parameter namemaxIdle/name value2/value /parameter parameter nameusername/name value*DB USERNAME*/value /parameter parameter namepassword/name value*DB PASSWORD*/value /parameter /ResourceParams Please refer to documentation (http://tomcat.apache.org/tomcat-5.5-doc/jndi-datasource-examples-howto.html) if you want fine tune parameters like maxWait, maxActive, maxIdle, etc. and believe me you will find it very useful. Now how to use that connection in your application pages. Following is the code snippet that you can use it. Context init = new InitialContext(); Context ctx = (Context) init.lookup(java:comp/env); DataSource ds = (DataSource) ctx.lookup(jdbc/mydbconn); //BE CAREFUL ABOUT NAME - jdbc/mydbconn. public ... getData(...) { Connection conn = null; Statement stmt = null; ResultSet rs = null; try { conn = ds.getConnection(); stmt = conn.createStatement(); ... ... ... rs.close(); rs = null; stmt.close(); stmt = null; conn.close(); // Return to connection pool conn = null; } catch(SQLException e) { e.printStackTrace(); } finally { // Always make sure result sets and statements are closed, // and the connection is returned to the pool if (rs != null) { try { rs.close(); } catch (SQLException e) { ; } rs = null; } if (stmt != null) { try { stmt.close(); } catch (SQLException e) { ; } stmt = null; } if (conn != null) { try { conn.close(); } catch (SQLException e) { ; } conn = null; } } ... } Also you can write generic bean and use it in your JSP pages. This way it will ease your work. About making website faster, there are many parameters involved. Above thing will definitely gain speed if you fine tune it based upon your application and hardware. Now if you want more speed, you can go with better hardware or provide more memory to tomcat. But first try above snippet. I am sure you won't need another machine. Regards, D --- Michael Ni [EMAIL PROTECTED] wrote: great replies from everyone. even with connection pooling, how many connections are we looking at here? if my project works as intended, im predicting from 30 to 1000 poeple simultaneously hitting tomcat and sql server. i remember when websites like friendster.com came out, it was really slow. now it is much faster, do you guys know where does a student learn about how to handle high traffic web applications? is there any classes? From: Christopher Schultz [EMAIL PROTECTED] Reply-To: Tomcat Users List users@tomcat.apache.org To: Tomcat Users List users@tomcat.apache.org Subject: Re: web application - student need help Date: Fri, 05 Jan 2007 17:10:13 -0500 -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Michael, Michael Ni wrote: i don't get any error when there isn't that much traffic but i dont close my jdbc connections, could that be a problem? Oh, yeah. Failing to close connections is very likely to give you errors, as you will end up running out of memory, or the database server will cut you off when you reach the maximum number of connections. Someone else mentioned the use of a connection pool, which I highly recommend. You can use Tomcat to configure a connection pool and then obtain a JDBC DataSource through JNDI. Then, you can get a connection from that for use. It's not really as complicated as it sounds ;) try { DBConstants db = new DBConstants(); Class.forName(db.getDrivername()); Connection conn; conn = DriverManager.getConnection(jdbc:microsoft:sqlserver:// + db.getHostname() + , + db.getUsername() + , + db.getPassword() + ); Statement stmt = conn.createStatement(); ResultSet rs = stmt.executeQuery(queryStr);
Re: yet another SSL question
Try this: security-constraint web-resource-collection web-resource-nameSecure servlet/web-resource-name url-pattern/path/to/servlet/*/url-pattern http-methodGET/http-method http-methodPOST/http-method /web-resource-collection user-data-constraint transport-guaranteeCONFIDENTIAL/transport-guarantee /user-data-constraint /security-constraint Regards, D --- Jan Strauch [EMAIL PROTECTED] wrote: Hello world! My problem : I want some of my servlets to be accessible only when HTTPS is used: https:/path to servlet succeeds http:/path to servlet gives an error The first step seems to work, but when i have logged in into the secure area, load a page using https, delete the s and reload, the page is also loaded. How do i block the unsecured reload? I tried some of the hints for JSPs, but they seem not to work with servlets. My web.xml: web-app servlet servlet-namemyServlet/servlet-name servlet-classmyServlet/servlet-class /servlet ... more servlets... servlet-mapping servlet-namemyServlet/servlet-name url-patternpath to myServlet/url-pattern /servlet-mapping ... more servlets... /web-app What security-constraints do i need, and where do i have to put them? Thank you __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: run service in jdk 6
I just installed 5.5.20 with JDK 1.6.0 on Windows XP. Run smooth as service. No problem at all. Following is my configuration: (1) Install java in c:\jdk1.6.0. Also set JAVA_HOME (2) While installing tomcat, it detected jre from c:\Program Files\Java\jre1.6.0 and installed Tomcat in c:\Tomcat5.5 (3) Start menu tomcat entries created as they were. Everything works out of box. Though my service is manual. But I don't think that makes big difference. Hope it helps. Try reinstalling java. Also please check your java installation is correct. One good way to test is see if you can able to run Netbeans correctly. Regards, D --- Caldarale, Charles R [EMAIL PROTECTED] wrote: From: kkus [mailto:[EMAIL PROTECTED] Subject: How to run tomcat service in JDK6? Double-posting won't improve your chances of getting an answer, but it will annoy people. Has anyone used JDK 6 for 5.5.20? Any idea? I'm using it right now, with no problems. However, the JDK is installed in C:\jdk1.6.0, rather than a directory with spaces embedded in the name (another brilliant Microsoft innovation). - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Please help me to configure TOMCAT with APR connector Thanks
Hi, I would say two things: (1) Use JDK 1.5 for Tomcat 5.5.x. (2) Look at http://mail-archives.apache.org/mod_mbox/tomcat-users/200512.mbox/[EMAIL PROTECTED] for how to configure SSL + APR on windows. As far as your questions are concerned, someone will able to answer that. :) Regards, D --- Alla Winter [EMAIL PROTECTED] wrote: I would appreciate if you would answer on my questions. Thanks _ From: Alla Winter [mailto:[EMAIL PROTECTED] Sent: Friday, October 06, 2006 1:13 PM To: users@tomcat.apache.org Subject: Please help me to configure TOMCAT with APR connector Thanks I am trying to configure TOMCAT 5.5.17 JDK, 1.4.2.12 with APR on Windows 2000. I was able to start this version of tomcat without ssl configuration and my application is working OK with it. Here are the steps what I did: 1.I downloaded tcnative-1.dll into c\Cobra\nativeLib 2.I added a line in startup.bat :set LD_LIBRARY_PATH=c\Cobra\nativeLib 3.I put the working in production certificate and the key ( in production we currently using APACHE 2 and jk2 connector, I assume that the same certificate format is valid for OppenSSl) under c:/apache-tomcat-5.5.17/conf/ 4.I changed the server.xml (see the attached). Connector port=8443 maxHttpHeaderSize=8192 maxThreads=150 minSpareThreads=25 maxSpareThreads=75 enableLookups=false disableUploadTimeout=true acceptCount=100 scheme=https secure=true clientAuth=false sslProtocol=TLS SSLEngine=on SSLCertificateFile=c:/apache-tomcat-5.5.17/conf/mycobrasource.crt SSLCertificateKeyFile=c:/apache-tomcat-5.5.17/conf/mycobrasource.key / But due to whatever reason Tomcat is looking for keystore, the error message is SEVERE: Error initializing endpoint java.io.FileNotFoundException: C:\Documents and Settings\Alla.COBRASOURCE\.keystore What I am doing wrong? I also would appreciate if you would clarify for me a few things: the documentation says APR support requires three main native components to be installed: * APR library * JNI wrappers for APR used by Tomcat (libtcnative) * OpenSSL libraries And then we are referred to download compiled .dll which includes OpenSSL and APR., which is tcnative-1.dll Does that include JNI wrapper as well? And then it tells In security conscious production environments, it is recommended to use separate shared dlls for OpenSSL, APR, and libtcnative-1, Where the binaries for those separate dlls ( beside openSSL) can be found ? Many Windows users do not have C compiler to build it from scratch? It is also unclear what exactly instruct TOMCAT to use APR instead of JSSE? Also, in the example of server.xml configuration SSLCertificateFile keyword is referring to .crt file. While we have signed by Thawte .cer file. I just changed the extension of the file. Is that the same file? I would greatly appreciate your help. Thanks s !-- Example Server Configuration File -- !-- Note that component elements are nested corresponding to their parent-child relationships with each other -- !-- A Server is a singleton element that represents the entire JVM, which may contain one or more Service instances. The Server listens for a shutdown command on the indicated port. Note: A Server is not itself a Container, so you may not define subcomponents such as Valves or Loggers at this level. -- Server port=8005 shutdown=SHUTDOWN !-- Comment these entries out to disable JMX MBeans support used for the administration web application -- Listener className=org.apache.catalina.core.AprLifecycleListener / Listener className=org.apache.catalina.mbeans.ServerLifecycleListener / Listener className=org.apache.catalina.mbeans.GlobalResourcesLifecycleListener / Listener className=org.apache.catalina.storeconfig.StoreConfigLifecycleListener/ !-- Global JNDI resources -- GlobalNamingResources !-- Test entry for demonstration purposes -- Environment name=simpleValue type=java.lang.Integer value=30/ !-- Editable user database that can also be used by UserDatabaseRealm to authenticate users -- Resource name=UserDatabase auth=Container type=org.apache.catalina.UserDatabase description=User database that can be updated and saved factory=org.apache.catalina.users.MemoryUserDatabaseFactory pathname=conf/tomcat-users.xml / /GlobalNamingResources !-- A Service is a collection of one or more Connectors that share a single Container (and therefore the web applications visible within that Container). Normally, that Container is an Engine, but this is not required. Note: A Service is not itself a Container, so you may not define subcomponents such as Valves or Loggers at this level. --
Re: Tomcat monitoring
http://www.lambdaprobe.org --- [EMAIL PROTECTED] wrote: Hi; I attended to an Oracle IAS event and they presented their Enterprise Manager 10g, and they showed some great monitoring capabilities. Here I quote some of them from their document http://www.oracle.com/technology/products/oem/pdf/wp_aslm_10g.pdf: The tracing functionality provides an on-demand tool that lets administrators examine in detail all invocation paths of a transaction, and isolate the exact tier and location of a problem. All invocation paths of a transaction are traced and hierarchically broken down by servlet/JSP, EJB, JDBC/SQL times. Further drill-downs into each component identify response time breakouts by invocation path. Click-to-SQL drill-downs allow administrators to navigate down from a transaction view and examine the underlying SQL statements. (Page 6) URL processing time and load activity graphs provide administrators with information on the impact of server activity on response times. (Page 7) Enterprise Manager provides correlation of CPU utilization, memory, and I/O usage of all Web application components to help administrators determine where resources are constrained. (Page 8) Well, my question is if there is any way to do such (or any) monitoring with Tomcat 5.5.17. If not, is there any monitoring tool that you guys use to monitor and troubleshoot Tomcat? Maybe just tomcat/java commands that shows status/monitoring info. Actually we only graph URL response times and load keep an eye on the logs. Any info is welcome. Thanks a lot. Rafael Sarres de Almeida Seção de Gerenciamento de Rede Superior Tribunal de Justiça Tel: (61) 3319-9342 __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: how to use the mod_jk2?
Hi, If you are using Apache 2.0.x, then and then only mod_jk or mod_jk2 will help you. If you are using Apache 2.2.x, use mod_proxy_ajp. For mod_jk configuration, look at following two links: (1) Simple configuration - http://www.howtoforge.com/apache2_tomcat5_mod_jk_integration (2) Advanced configuration with Virtual hosts - http://www.howtoforge.com/apache2_tomcat5_mod_jk For mod_proxy_ajp, look at following link: (1) http://forgeftp.novell.com/lu4d/lu4d_lskd_mod_proxy_ajp.htm Above links uses different OSs (Debian and SuSE) for illustration but you can configure Apache based upon that. Let us know how it goes with you. Regards, D - Original Message From: Steve R Burrus [EMAIL PROTECTED] To: Tomcat Users List users@tomcat.apache.org Sent: Sunday, August 20, 2006 6:04:24 PM Subject: Re: how to use the mod_jk2? Okay you are right. So how do I go about setting up the mod_jk to be the connector between Tomcat and the Apache HTTP Server anyway? Mark Thomas wrote: Steve R Burrus wrote: hi I have ocassionally gotten/obtained the Apache http server to supposedly use with tomcat. I say supposedly because I have never been able to even start to connect the 2 servers thru the mod_jk2! Can someone please walk me through the whole procedure for doing this? Much thanx to anyone who can help me with this long time problem. Are you aware that mod_jk2 is deprecated and the mod_proxy_ajp and mod_jk are the currently supported methods of doing this? Mark - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Using java -server in Tomcat start-up script
Hi, I saw a performance gain by using java -server compared to java. I also searched on google and found that it increase performance of application by providing more resources to program (CPU, RAM, etc.) I was wonder why it is not used in starting up Tomcat (by default). Any one has experienced performace gain by doing that? Thanks. Regards, Dhaval __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: APR not found under Linux
Hi, I think your APR library is old. (You might have install using Yast). Tomcat 5.5 requires APR 1.2+. So you might have to compile it by yourself. (http://tomcat.apache.org/tomcat-5.5-doc/apr.html) I remembered that I had to compile APR for SuSE 10. Here is what I did: 1) Make sure you have Apache Devel. headers and library are installed. (YaST will help you) 2) Download APR from (http://apr.apache.org/). Follow the instruction to compile and make. Make sure that you remember the location of APR because you need that in Tomcat. 3) Go to TOMCAT_HOME\bin. Unpack tomcat-native.tar.gz. 4) Follow the instruction to build it. 5) Then you might have to use SetENV.sh. See above things works. I may able to help you if it does not work. Regards, Dhaval --- Stefan Wachter [EMAIL PROTECTED] wrote: Hi Rajeev, I changed the order of the directories to /usr/lib:/usr/local/apr/lib but I did not help. Cheers, --Stefan Rajeev N. Jha wrote: Try putting the ssl libs in front of apr/tcnative. Thanks - Rajeev. Stefan Wachter wrote: Hi all, I tried to run Tomcat using the APR under (Suse-)Linux but did not succeed. During startup there is still the well known message: The Apache Tomcat Native library which allows optimal performance in production environments was not found on the java.library.path: /java/jdk1.5.0_05/jre/lib/i386/client:/java/jdk1.5.0_05/jre/lib/i386:/java/jdk1.5.0_05/jre/../lib/i386:/usr/local/apr/lib:/usr/lib Yet, in the directory /usr/local/apr/lib there are the apr and tcnative libraries. This is the listing of that directory: -rw-r--r-- 1 root root7661 2006-06-30 09:56 apr.exp -rw-r--r-- 1 root root 1164070 2006-06-30 09:56 libapr-1.a -rwxr-xr-x 1 root root 831 2006-06-30 09:56 libapr-1.la lrwxrwxrwx 1 root root 17 2006-06-30 09:56 libapr-1.so - libapr-1.so.0.2.7 lrwxrwxrwx 1 root root 17 2006-06-30 09:56 libapr-1.so.0 - libapr-1.so.0.2.7 -rwxr-xr-x 1 root root 636499 2006-06-30 09:56 libapr-1.so.0.2.7 -rw-r--r-- 1 root root 1380234 2006-06-30 10:07 libtcnative-1.a -rwxr-xr-x 1 root root 912 2006-06-30 10:07 libtcnative-1.la lrwxrwxrwx 1 root root 22 2006-06-30 10:07 libtcnative-1.so - libtcnative-1.so.0.2.7 lrwxrwxrwx 1 root root 22 2006-06-30 10:07 libtcnative-1.so.0 - libtcnative-1.so.0.2.7 -rwxr-xr-x 1 root root 800108 2006-06-30 10:07 libtcnative-1.so.0.2.7 drwxr-xr-x 2 root root 104 2006-06-30 10:07 pkgconfig In addition the directory /usr/lib contains the openssl library: lrwxrwxrwx 1 root root 15 2005-11-01 14:39 libssl.so.0 - libssl.so.0.9.7 -rwxr-xr-x 1 root root 220153 2005-10-14 18:14 libssl.so.0.9.7 I also including these two directories in the LD_LIBRARY_PATH. For that purpose I created a setenv.sh with the line export LD_LIBRARY_PATH=/usr/local/apr/lib:/usr/lib Can anyone help me with this problem? Regards, --Stefan - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: APR not found under Linux
Hmm I read the BUILDING file of tomcat-native (the one that comes in TOMCAT\bin). It says something like: 2 - In bin/setenv.sh add the following: CATALINA_OPTS=$CATALINA_OPTS -Djava.library.path=tclib_location In my machine I am using: /home/jfclere/jakarta-tomcat-connectors/jni/native/.libs for tclib_location Did you try that? Right now I am at work and my all configurations are at home. If things do not work, I will try to rebuild it when I go home. See above helps. Regards, Dhaval --- Stefan Wachter [EMAIL PROTECTED] wrote: Hi Dhaval, I don't think, that an old APR is involved. I compiled the latest APR (version 1.2.7) using the sources from apr.apache.org. The created library was placed into /usr/local/apr/lib by make install. Yet, there is an old version of the APR installed on my system that came with httpd 2.0.x (named libapr-0). Do you think that libapr-0 does interfere with libapr-1? Cheers, --Stefan Dhaval Patel wrote: Hi, I think your APR library is old. (You might have install using Yast). Tomcat 5.5 requires APR 1.2+. So you might have to compile it by yourself. (http://tomcat.apache.org/tomcat-5.5-doc/apr.html) I remembered that I had to compile APR for SuSE 10. Here is what I did: 1) Make sure you have Apache Devel. headers and library are installed. (YaST will help you) 2) Download APR from (http://apr.apache.org/). Follow the instruction to compile and make. Make sure that you remember the location of APR because you need that in Tomcat. 3) Go to TOMCAT_HOME\bin. Unpack tomcat-native.tar.gz. 4) Follow the instruction to build it. 5) Then you might have to use SetENV.sh. See above things works. I may able to help you if it does not work. Regards, Dhaval --- Stefan Wachter [EMAIL PROTECTED] wrote: Hi Rajeev, I changed the order of the directories to /usr/lib:/usr/local/apr/lib but I did not help. Cheers, --Stefan Rajeev N. Jha wrote: Try putting the ssl libs in front of apr/tcnative. Thanks - Rajeev. Stefan Wachter wrote: Hi all, I tried to run Tomcat using the APR under (Suse-)Linux but did not succeed. During startup there is still the well known message: The Apache Tomcat Native library which allows optimal performance in production environments was not found on the java.library.path: /java/jdk1.5.0_05/jre/lib/i386/client:/java/jdk1.5.0_05/jre/lib/i386:/java/jdk1.5.0_05/jre/../lib/i386:/usr/local/apr/lib:/usr/lib Yet, in the directory /usr/local/apr/lib there are the apr and tcnative libraries. This is the listing of that directory: -rw-r--r-- 1 root root7661 2006-06-30 09:56 apr.exp -rw-r--r-- 1 root root 1164070 2006-06-30 09:56 libapr-1.a -rwxr-xr-x 1 root root 831 2006-06-30 09:56 libapr-1.la lrwxrwxrwx 1 root root 17 2006-06-30 09:56 libapr-1.so - libapr-1.so.0.2.7 lrwxrwxrwx 1 root root 17 2006-06-30 09:56 libapr-1.so.0 - libapr-1.so.0.2.7 -rwxr-xr-x 1 root root 636499 2006-06-30 09:56 libapr-1.so.0.2.7 -rw-r--r-- 1 root root 1380234 2006-06-30 10:07 libtcnative-1.a -rwxr-xr-x 1 root root 912 2006-06-30 10:07 libtcnative-1.la lrwxrwxrwx 1 root root 22 2006-06-30 10:07 libtcnative-1.so - libtcnative-1.so.0.2.7 lrwxrwxrwx 1 root root 22 2006-06-30 10:07 libtcnative-1.so.0 - libtcnative-1.so.0.2.7 -rwxr-xr-x 1 root root 800108 2006-06-30 10:07 libtcnative-1.so.0.2.7 drwxr-xr-x 2 root root 104 2006-06-30 10:07 pkgconfig In addition the directory /usr/lib contains the openssl library: lrwxrwxrwx 1 root root 15 2005-11-01 14:39 libssl.so.0 - libssl.so.0.9.7 -rwxr-xr-x 1 root root 220153 2005-10-14 18:14 libssl.so.0.9.7 I also including these two directories in the LD_LIBRARY_PATH. For that purpose I created a setenv.sh with the line export LD_LIBRARY_PATH=/usr/local/apr/lib:/usr/lib Can anyone help me with this problem? Regards, --Stefan - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
Re: Problems configuring SSL connector
Yes. Markus is right. When you add tcnative-1.dll, it means you are enabling APR support in tomcat, which is good. For detail instruction, visit: http://www.mail-archive.com/users%40tomcat.apache.org/msg02500.html There is only one problem in the steps described in above link. It works 100% correctly with self-signed certificate but it does not work with Versign/Thwatte signed certificate. People have tested it. So just read the link and follow the steps. It is not difficult at all and best of all it works. Let us know how it goes with you. Regards, D --- Markus Sch�nhaber [EMAIL PROTECTED] wrote: EddieE wrote: I'm using keystore files so I needed to add these to server.xml. I'm using native libraries since it appears that these are required if you want to use a non-default keystoreFile. No. With APR (the native libs) you'll have to configure the OpenSSL way: http://tomcat.apache.org/tomcat-5.5-doc/apr.html#HTTPS I added tcnative-1.dll and openssl.exe to the PATH. I tried both JDK 1.4 compatibility and 1.5 and get the same results. The server starts OK but the https connector will only work as http. I tried sslProtocol=TLS, SSL and leaving it out. What am I doing something wrong? You're mixing the .keystore config with the APR connector that uses OpenSSL. If you want to use the .keystore, don't use the native libs. If your keystore file is not in the default location, set the keystoreFile attribute of the Connector appropriately: http://tomcat.apache.org/tomcat-5.5-doc/config/http.html#SSL%20Support Regards � mks - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: SSL tomcat apache FAILURE
Before any suggestion, I have few question: 1) How do you run Tomcat? Standalone or as a service or as a JSP server behind IIS? 2) Are you 100% sure that port 8443 and 443 are free? 3) Do you have any failure entry in tomcat log when you start tomcat? If yes, what is that? By looking at exception, here any one can able to see what is going on. So try to see what is going wrong here. Regards, D --- Crom James B. [EMAIL PROTECTED] wrote: Anyone help! I have followed the directions precisely in http://tomcat.apache.org/tomcat-5.0-doc/ssl-howto.html , (yes we have tomcat 5.x) and cannot get port 8443 or 443 to respond at all via web browser or by a portscan. Running on a windows 2003 ent edition, apache-tomcat is the ONLY thing running on this box. Any advice would be appreciated Jim Crom Las Vegas Clark County Library __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Setting up to use 443
Hi, Couple of things: 1) Make sure you change 8443 to 443 on all places in server.xml (there are 2 places.) 2) Make sure that no other service running on 443 port. This way Tomcat can use that port. 3) What tomcat version you are running? Do you want to use APR? Now I dont know which version of tomcat you are running. If you are running tomcat with version 5.5.x, you might have to enable/disable APR to use SSL. For more information, please visit my post at : http://www.mail-archive.com/users%40tomcat.apache.org/msg02500.html Steps described in the link above WORK 100%. However steps ONLY work with self-signed certificate. It does not work with Versign/Thwatte Signed certificate. So just to keep that in mind. Let me know how it goes. --- David Shaw [EMAIL PROTECTED] wrote: Nothing shows up on the logs. On Mozilla, this alert is displayed - The connection to localhost has terminated unexpectedly. Some data may have been transferred. Not sure what data you want from TCPView, but accessing https shows a TIME_WAIT state for that process when it is using port 443. Original Message Follows From: David Smith [EMAIL PROTECTED] Reply-To: Tomcat Users List users@tomcat.apache.org To: Tomcat Users List users@tomcat.apache.org Subject: Re: Setting up to use 443 Date: Fri, 14 Apr 2006 14:28:35 -0400 Can you tell us the exact error? Internet Explorer throws up that error in a lot of situations. This could be the result of a firewall or another process on 443. Anything show up in the logs? Can you try it with Firefox for a better error display? TCPView from SysInternals can show open and connected ports as well. -- David David Shaw wrote: Sorry, I forgot to mention that I have root (or administrative) access and on an WindowsXP system. Original Message Follows From: Mike Sabroff [EMAIL PROTECTED] Reply-To: Tomcat Users List users@tomcat.apache.org To: Tomcat Users List users@tomcat.apache.org Subject: Re: Setting up to use 443 Date: Thu, 13 Apr 2006 20:05:16 -0500 run as root else nothing less than 1024 David Shaw wrote: I have troubled setting up server.xml to use port 443 - always report that The page cannot be displayed in IE. 8080 and 8443 works fine though. Using the same setting in server.xml and just changing the port to use 8443 instead of 443, I can access using https://localhost:8443. Any idea what I need to set in order to get 443 working? Thanks, David _ Don�t just search. Find. Check out the new MSN Search! http://search.msn.click-url.com/go/onm00200636ave/direct/01/ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] -- Mike Sabroff Web Services Developer [EMAIL PROTECTED] 920-568-8379 - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] _ On the road to retirement? Check out MSN Life Events for advice on how to get there! http://lifeevents.msn.com/category.aspx?cid=Retirement - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] -- David Smith Network Operations Supervisor Department of Entomology Cornell University 2132 Comstock Hall Ithaca, NY 14853 Phone: (607) 255-9571 Fax: (607) 255-0940 - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] _ Express yourself instantly with MSN Messenger! Download today - it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: HTTPS setup
Hi, Based upon your description, I think you are trying to use JSSE way to enable SSL. Tomcat 5.5 has two ways to enable SSL: 1) JSSE 2) OpenSSL. If you are trying with JSSE, please remove tcnative-1.dll from your TOMCAT_HOME\bin directory. It should work fine. If you want to know how to do with OpenSSL, please go to: http://www.mail-archive.com/users%40tomcat.apache.org/msg02500.html Steps described in above URL are 100% working when you don't have Versign/Thwate signed certificate. It is not case here I believe. :) Let us know how it goes. Regards, D --- Julie McCabe [EMAIL PROTECTED] wrote: Hi, Ive configure SSL support as per documentation - I created the keystore and a self - signed certificate with the default password, uncommented the 8443 connector for https in the conf/server.xml file. The problem is that I cannot connect to https://localhost:8443 via the browser, in the log file there are no errors and it appears as the 8443 port is open as: INFO: Starting Coyote HTTP/1.1 on http-8443 Nothing is logged to the log file when access to 8443 is attempted, the browser processes and eventually times out with the following alert: The connection to localhost:8443 has terminated unexpectedly. Some data may have been transferred. Environment: Java 1.5.0_04, Tomcat 5.5.12, Windows XP Regards, Julie. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: HTTPS setup
Hi, As I have told you before, those instructions are not working as expected against authority signed (not self-signed) certifcates. You might have to go through mail-archive of tomcat users list to find more ways to solve this. I am sure there is a solution for this. Tomcat gurus, please help !!! Regards, D --- Julie McCabe [EMAIL PROTECTED] wrote: Hello, Thanks for the advice, I had installed the APR as tomcat was failing to shutting down in Windows without it. Since my overall objective is to use an existing X509 certificate signed by an academic CA (not Versign or Thwate) I decided to try the openssl. I followed the steps outlined in the http://www.mail-archive.com/users%40tomcat.apache.org/msg02500.html I have an existing p12 file which is split into a key and a certificate, I only performed the openssl rsa -in userkey.pem -out server.key command to replace the passphrase from the private key. I edited the conf/server.xml file as directed and pointed the SSLCertificateFile to the usercert.pem file and the SSLCertificateKeyFile to the generated server.key file. I started tomcat - no errors in the logs and when I try to connect on https://localhost:8443 I receive the following alert: Could not establish an encrypted connection because the certificate presented by localhost is invalid or corrupted. Error Code: -8101 The CA root certificate whom has signed my certificate is loaded into the browser (along with my certificate). It seems like its a problem with my certificates? Thanks, Julie. On Wednesday 08 March 2006 13:31, Dhaval Patel wrote: Hi, Based upon your description, I think you are trying to use JSSE way to enable SSL. Tomcat 5.5 has two ways to enable SSL: 1) JSSE 2) OpenSSL. If you are trying with JSSE, please remove tcnative-1.dll from your TOMCAT_HOME\bin directory. It should work fine. If you want to know how to do with OpenSSL, please go to: http://www.mail-archive.com/users%40tomcat.apache.org/msg02500.html Steps described in above URL are 100% working when you don't have Versign/Thwate signed certificate. It is not case here I believe. :) Let us know how it goes. Regards, D --- Julie McCabe [EMAIL PROTECTED] wrote: Hi, Ive configure SSL support as per documentation - I created the keystore and a self - signed certificate with the default password, uncommented the 8443 connector for https in the conf/server.xml file. The problem is that I cannot connect to https://localhost:8443 via the browser, in the log file there are no errors and it appears as the 8443 port is open as: INFO: Starting Coyote HTTP/1.1 on http-8443 Nothing is logged to the log file when access to 8443 is attempted, the browser processes and eventually times out with the following alert: The connection to localhost:8443 has terminated unexpectedly. Some data may have been transferred. Environment: Java 1.5.0_04, Tomcat 5.5.12, Windows XP Regards, Julie. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Tomcat Administration Package installation
Hi, First download tomcat-admin package from website for appropriate OS. Then unzip it. When you unzip the tomcat-admin (both on linux as well as on windows), say you unzip into TEMP directory. Now open TEMP directory and take some time to view the directory structure there. Now go to your tomcat installation (TOMCAT_HOME) and copy files from TEMP directory to TOMCAT_HOME, preserving directory structure. This is one way. A little bit long but you know exactly, what you are doing. Other way is you can directly upzip tomcat-admin into TOMCAT_HOME directory provided whatever command/program you are using will take care of directory structure at time of unzipping. Hope it helps. Regards, Dhaval --- Biernesser, Beth [EMAIL PROTECTED] wrote: I have the same question ... And would appreciate any information on the installation instructions. I am working on a Linux server. Thanks so much. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Friday, February 24, 2006 6:02 PM To: users@tomcat.apache.org Subject: Tomcat Administration Package installation Hi All, I know that this is a very basic question, but I could not find any instruction on Tomcat's web site. I have Tomcat 5.5.15 installed on Windows 2003; it is not bundled with the Tomcat Administration Package anymore. I have downloaded the Administration Package. It is the apache-tomcat-5.5.15.zip. In which exact directory should I unbundle the file? The full path to my Tomcat installation is: C:\Program Files\Apache Software Foundation\Tomcat 5.5 Thank you in advance for your help. Nguessan - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Problems with web.xml file
Hi Mark, What kind of error do you get? 404? Is there any exception on catalina.out? Try this: security-constraint web-resource-collection web-resource-nameSecure Area/web-resource-name url-pattern/secure/*/url-pattern http-methodGET/http-method http-methodPOST/http-method /web-resource-collection user-data-constraint transport-guaranteeCONFIDENTIAL/transport-guarantee /user-data-constraint /security-constraint Regards, D --- Mark Whitby [EMAIL PROTECTED] wrote: Just to update you on this problem, I've now got the error page working (I needed /error.jsp and not just error.jsp) but I am still having problems with the security-constraint tag. When I try to use this I end up with the generic Tomcat 404 error page and can't load up a single page. Once I comment this out everything works fine. Any ideas why? Mark - Original Message - From: Mark Whitby [EMAIL PROTECTED] To: Tomcat Users List users@tomcat.apache.org Sent: Friday, February 17, 2006 3:55 PM Subject: Problems with web.xml file Hi there, I've set up a basic web.xml file to test that my ssl connection is working fine for the specified pages to be protected in this way and to test to see if my custom 404 error page works fine. I've got the certificate for my SSL page working fine and I've tested it before, but since I've customised the web.xml file I just keep getting the generic error page. I don't even get the error page I've set in my web.xml file. I'm using Tomcat 5.5.15 and jdk 1.5.0_05 so it's all the latest installations. My web.xml fille and the relevant part from my server.xml file are attached. If anyone can tell me why the error-page and security-constraint tags aren't working I'd be very grateful. Many thanks Mark Whitby Web.xml file: ?xml version=1.0 encoding=ISO-8859-1? !DOCTYPE web-app PUBLIC -//Sun Microsystems, Inc.//DTD Web Application 2.2//EN http://java.sun.com/j2ee/dtds/web-app_2_2.dtd; web-app !-- Specifies the first page that users will come to in the system -- welcome-file-list welcome-fileindex.jsp/welcome-file /welcome-file-list !-- Specifies the error page that will occur for 404 errors -- error-page error-code404/error-code locationerror.jsp/location /error-page !-- Specifies the security area within the system -- security-constraint web-resource-collection web-resource-nameSecure/web-resource-name url-pattern/secure/*/url-pattern /web-resource-collection user-data-contraint transport-guaranteeCONFIDENTIAL/transport-guarantee user-data-contraint /security-constraint /web-app server.xml file !-- Define a non-SSL HTTP/1.1 Connector on port 8080 -- Connector port=8080 maxHttpHeaderSize=8192 maxThreads=150 minSpareThreads=25 maxSpareThreads=75 enableLookups=false redirectPort=8443 acceptCount=100 connectionTimeout=2 disableUploadTimeout=true / !-- Note : To disable connection timeouts, set connectionTimeout value to 0 -- !-- Define a SSL HTTP/1.1 Connector on port 8443 -- Connector port=8443 maxHttpHeaderSize=8192 maxThreads=150 minSpareThreads=25 maxSpareThreads=75 enableLookups=false disableUploadTimeout=true acceptCount=100 scheme=https secure=true clientAuth=false sslProtocol=TLS keystoreFile=D:\FYPCode\keystore keystorePass=... / - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Problem with setting up an SSL secure page
Hi, I have setup small guide on SSL with Tomcat 5.5. You can find it at http://www.mail-archive.com/users%40tomcat.apache.org/msg02500.html But that guide is in Tomcat 5.5 with APR (Apache Portable Runtime). It works with self-generated certificates. (I think it does not work with Verisign certificates but I am not 100% sure) Try to follow the guide and you will be able to setup SSL. But make sure that you use Tomcat 5.5 because it has APR connector (tcnative-1.dll). Once you setup SSL, test it on https://localhost or https://localhost:port . Then use the following snippet to enable SSL in your web-app. security-constraint web-resource-collection web-resource-nameSecure/web-resource-name url-pattern/*/url-pattern http-methodGET/http-method http-methodPOST/http-method /web-resource-collection user-data-constraint transport-guaranteeCONFIDENTIAL/transport-guarantee /user-data-constraint /security-constraint For more information, visit: http://registry.paradigma.net/omar/registry/thin/doc/UsingHTTPS.html May be someone help you out with Tomcat 5.0 but since I know things are working with Tomcat 5.5 so I thought above instructions will make you move quickly. Let us know your experience. Regards, D --- Parsons Technical Services [EMAIL PROTECTED] wrote: What is in the logs? - Original Message - From: Mark Whitby [EMAIL PROTECTED] To: users@tomcat.apache.org Sent: Wednesday, February 08, 2006 11:02 AM Subject: Problem with setting up an SSL secure page Dear all, I am currently designing a final year project for my University course and I am having problems getting a working SSL connection. I have Tomcat set up and working fine, but when it comes to accessing a page over the https setup, I am having no luck. Firstly a few technical details. I am using Windows XP Home, with Internet Explorer 6.0.2900.2180. I am using the latest Java installation, jdk 1.5.0_05 and so the JSSE comes installed with that. I'm using Tomcat 5.0, the latest installation available (it's only been installed on my system for the last few weeks). I have McAffe Security Centre installed but the problem occurs even with this turned off. Now the problem. I have followed word by word the set up instructions in the Tomcat manual. I have created the certificate and verified it using the command line. I have altered the server.xml file to include the path keystorePath=D:/FYPCode/keystore where I have copied the keystore to. I've done everything. Yet when I type https://localhost:8443 in the browser window I get nothing. When using IE it takes ages to search for the page, then eventually I get This page cannot be displayed and in Mozilla I get a message after a couple of minutes saying the page has timed out and get left with a blank page. So I can't load the page up at all. I've tried everything I can think of to get it to work. I have 3 different books on this subject and I've followed the instructions in every one to try and get this to work. Nothing has worked. I did a Google search using as many different combinations of words I can think of but the only help I get is for Tomcat 3 and the old JSSE installation. So I'm lost. I did even think about installing the JSSE 1.3 to see if that had an effect, as I can't find any of the jar files that are mentionned in that area. However, I felt it best to ignore that as it says. So as you can see I've tried everything I can think of. Nothing as worked. If anyone can help me I would be extremely grateful. Many thanks Mark Whitby [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Problem with setting up an SSL secure page
Mark, I had trouble with verisign. I tried a few things then gave up. The instructions works with self-signed certificate. Trust me it works. You can try to follow instructions from scratch with fresh tomcat install. One more thing. When you use command keytool genkey -alias localhost -keyalg RSA, you are using JSSE and you can not use APR. While using JSSE, make sure you delete tcnative-1.dll from tomcat bin folder. Also try to use the Connector .../ same as I have written. See if you get success. These instructions have been tested many times and it works with self-signed certificates. Let me know your progress and we will get you going on your project. Regards, D --- Mark Whitby [EMAIL PROTECTED] wrote: Dhavel, I'm unable to get the certificate signed by someone like Verisign so I've been using self signed certificates. To do this all I've done is follow the advice on the help page, using the command keytool =genkey -alias localhost -keyalg RSA Once that's done I've linked from server.xml to the .keystore file created using this. Is this right or am I missing a step? Mark - Original Message - From: Dhaval Patel [EMAIL PROTECTED] To: Tomcat Users List users@tomcat.apache.org Sent: Wednesday, February 08, 2006 4:22 PM Subject: Re: Problem with setting up an SSL secure page Hi, I have setup small guide on SSL with Tomcat 5.5. You can find it at http://www.mail-archive.com/users%40tomcat.apache.org/msg02500.html But that guide is in Tomcat 5.5 with APR (Apache Portable Runtime). It works with self-generated certificates. (I think it does not work with Verisign certificates but I am not 100% sure) Try to follow the guide and you will be able to setup SSL. But make sure that you use Tomcat 5.5 because it has APR connector (tcnative-1.dll). Once you setup SSL, test it on https://localhost or https://localhost:port . Then use the following snippet to enable SSL in your web-app. security-constraint web-resource-collection web-resource-nameSecure/web-resource-name url-pattern/*/url-pattern http-methodGET/http-method http-methodPOST/http-method /web-resource-collection user-data-constraint transport-guaranteeCONFIDENTIAL/transport-guarantee /user-data-constraint /security-constraint For more information, visit: http://registry.paradigma.net/omar/registry/thin/doc/UsingHTTPS.html May be someone help you out with Tomcat 5.0 but since I know things are working with Tomcat 5.5 so I thought above instructions will make you move quickly. Let us know your experience. Regards, D --- Parsons Technical Services [EMAIL PROTECTED] wrote: What is in the logs? - Original Message - From: Mark Whitby [EMAIL PROTECTED] To: users@tomcat.apache.org Sent: Wednesday, February 08, 2006 11:02 AM Subject: Problem with setting up an SSL secure page Dear all, I am currently designing a final year project for my University course and I am having problems getting a working SSL connection. I have Tomcat set up and working fine, but when it comes to accessing a page over the https setup, I am having no luck. Firstly a few technical details. I am using Windows XP Home, with Internet Explorer 6.0.2900.2180. I am using the latest Java installation, jdk 1.5.0_05 and so the JSSE comes installed with that. I'm using Tomcat 5.0, the latest installation available (it's only been installed on my system for the last few weeks). I have McAffe Security Centre installed but the problem occurs even with this turned off. Now the problem. I have followed word by word the set up instructions in the Tomcat manual. I have created the certificate and verified it using the command line. I have altered the server.xml file to include the path keystorePath=D:/FYPCode/keystore where I have copied the keystore to. I've done everything. Yet when I type https://localhost:8443 in the browser window I get nothing. When using IE it takes ages to search for the page, then eventually I get This page cannot be displayed and in Mozilla I get a message after a couple of minutes saying the page has timed out and get left with a blank page. So I can't load the page up at all. I've tried everything I can think of to get it to work. I have 3 different books on this subject and I've followed the instructions in every one to try and get this to work. Nothing has worked. I did a Google search using as many different combinations of words I can think of but the only help I get is for Tomcat 3 and the old JSSE installation. So I'm lost. I did even think about installing the JSSE 1.3 to see if that had an effect, as I can't find any of the jar files that are mentionned
Re: how to configure the tomcat 5.5.12 for a port 80 in linux (Gentoo)??
Hi, For detail information about the problem and solution, visit: http://wiki.apache.org/tomcat/HowTo#head-18d1c3f3fa702a1be769340784515eecce6e0ac9 The quick solution is to to administer (start, stop, edit) tomcat only as a root. Hope it helps. Regards, D --- Iosev Perez Rivero [EMAIL PROTECTED] wrote: So, I have configure a tomcat for a port 8080 in Linux (Gentoo), but when I try chance this port to 80 this make mistaje of Permission in de logs What can I do? Thanks I�sev P�rez Rivero Estudiante 4to. A�o Universidad de las Ciencias Inform�ticas - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: how to enable SSL protocol with tomcat 5.5.12
http://www.mail-archive.com/users%40tomcat.apache.org/msg02500.html --- Iosev Perez Rivero [EMAIL PROTECTED] wrote: I use the tomcat�s documentation about that but I have an error, I need that someone explain to me how to that I�sev P�rez Rivero Estudiante 4to. A�o Universidad de las Ciencias Inform�ticas - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: how to change the APR protocol for may use keytool self-signed certificate
Hi, I hope you have read my post a while ago (in which I explained about configuring SSL with APR in Tomcat 5.5.12). If you haven't, http://www.mail-archive.com/users%40tomcat.apache.org/msg02500.html If you read that post fully, you will understand basics of SSL with Tomcat. If you want to learn more about it, just browse the mail-archive for Nov 2005 and Dec 2005 threads. There was a nice discussion on SSL with APR on Tomcat 5.5.12. One update. It does not work for Verisign/Thwate certificates (search the thread and you will find solution) but it does work for self-signed certificate. Based upon my knowledge, APR does not work while using keytool. keytool is part of JSSE and APR is designed to run with OpenSSL. OpenSSL is more standard in industry environment. (Tomcat gurus please correct this if I am wrong). One more thing. If you search the mail-archives, before posting message, it would be good for you. You will find solution by yourself which is nice. And many questions are answered in this forum. You just need time and patience to find right thing. Regards, D --- Iosev Perez Rivero [EMAIL PROTECTED] wrote: how to change the APR protocol for may use keytool self-signed certificate Iósev Pérez Rivero Estudiante 4to. Año Universidad de las Ciencias Informáticas __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: i need configure SSL protocolo (https) with tomcat 5.5.12
http://mail-archives.apache.org/mod_mbox/tomcat-users/200512.mbox/20051204175733.82684.qmail%40web50613.mail.yahoo.com --- Iosev Perez Rivero [EMAIL PROTECTED] wrote: i need configure SSL protocolo (https) with tomcat 5.5.12, but I don´t know configure, I used documentation of tomcat but I have a error, someone may explain me this process. Regrards. Iósev Pérez Rivero Estudiante 4to. Año Universidad de las Ciencias Informáticas __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: i need configure SSL protocolo (https) with tomcat 5.5.12
I am sorry. The link is http://www.mail-archive.com/users%40tomcat.apache.org/msg02500.html --- Dhaval Patel [EMAIL PROTECTED] wrote: http://mail-archives.apache.org/mod_mbox/tomcat-users/200512.mbox/20051204175733.82684.qmail%40web50613.mail.yahoo.com --- Iosev Perez Rivero [EMAIL PROTECTED] wrote: i need configure SSL protocolo (https) with tomcat 5.5.12, but I don´t know configure, I used documentation of tomcat but I have a error, someone may explain me this process. Regrards. Iósev Pérez Rivero Estudiante 4to. Año Universidad de las Ciencias Informáticas __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Getting list of all deployed web applications
Hi, Is there a way by which you can list of all web applications deployed? I know that if you go to manager webapp, you will see list of deployed applications. I want to achieve the same functionality but using jsp pages. I tried to understand the source of manager webapp but I could not find one thing. How do you get catalina.host object? Once I get the host, I can use the list(...) method of ManagerServlet.java into jsp page and thus can able to retrieve the list of deployed webapps (hopefully !! Correct me if I am wrong or suggest me something better). This is not for any production ready environment but for my own learning purpose. Thanks for your help. Regards, D __ Yahoo! for Good - Make a difference this year. http://brand.yahoo.com/cybergivingweek2005/ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Getting list of all deployed web applications
Hi Martin, Thanks for reply but I am looking at something different. System.getEnv(...) returns string which it supposed to. The method is for retriving environment variables (which are loaded from properties file, etc. while starting an application-tomcat) The host that I am talking about is org.apache.catalina.Host object. If you have tomcat 5.5.12 source, take a look at ManagerServlet.java . It has method called list(...) which is used to retrive list of deployed webapps. For your reading, it is as follows: protected void list(...) { org.apache.catalina.Host myHost = ?? Container[] contexts = myHost.findChildren(); for (int i = 0; i contexts.length; i++) { Context context = (Context) contexts[i]; if (context != null ) { //display context to page as link } } } Also one request to tomcat experts. If you know any other way of finding the list of depolyed web applications, please let me know Thanks. Regards, Dhaval --- Martin Gainty [EMAIL PROTECTED] wrote: If I'm not mistaken its an environment variable which can be obtained via java.lang.System.getEnv(HTTP_HOST); Take a look at http://java.sun.com/j2se/1.5.0/docs/api/ Martin- - Original Message - From: Dhaval Patel [EMAIL PROTECTED] To: users@tomcat.apache.org Sent: Wednesday, December 28, 2005 3:11 PM Subject: Getting list of all deployed web applications Hi, Is there a way by which you can list of all web applications deployed? I know that if you go to manager webapp, you will see list of deployed applications. I want to achieve the same functionality but using jsp pages. I tried to understand the source of manager webapp but I could not find one thing. How do you get catalina.host object? Once I get the host, I can use the list(...) method of ManagerServlet.java into jsp page and thus can able to retrieve the list of deployed webapps (hopefully !! Correct me if I am wrong or suggest me something better). This is not for any production ready environment but for my own learning purpose. Thanks for your help. Regards, D __ Yahoo! for Good - Make a difference this year. http://brand.yahoo.com/cybergivingweek2005/ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Yahoo! DSL Something to write home about. Just $16.99/mo. or less. dsl.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Which version of Tomcat on SuSE?
Hi Nigel, The answer of this question depends upon many aspects like, (1) What kind of web-application would you like to serve with Tomcat? (2) Which J2SE\J2RE version are you using? (3) Do you require any special things from Tomcat besides an application server? I mean does your application rely on certain code of Tomcat? Tomcat is independent from operating system. It can be configured to achieve highest performace differently in different environment. So if you can post little detail about your setup environment , may be Tomcat experts can answer the question easily on this forum. Hope it helps. Regards, Dhaval --- DeFreitas, Nigel [EMAIL PROTECTED] wrote: Which version of Tomcat should I use on SuSE Enterprise Server v9? Nigel DeFreitas Insurance Services Office 201 469 3939 __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: SSL InvalidKeystore Format?
) Edit the server.xml in Tomcat and make changes in SSL connector following way: Connector port=8443 maxHttpHeaderSize=8192 maxThreads=150 minSpareThreads=25 maxSpareThreads=75 enableLookups=false disableUploadTimeout=true scheme=https secure=true SSLEngine=on SSLCertificateFile=path_to_server.crt SSLCertificateKeyFile=path_to_server.key / Also you can customize the port number as I explained earlier. (f) Restart the tomcat and test SSL. --- Further reading: JSSE + OpenSSL Hybrid Approch: http://marc.theaimsgroup.com/?l=tomcat-userm=106293430225790w=2 Tomcat thread (Nate's messages about more explanation) http://www.mail-archive.com/users%40tomcat.apache.org/msg02402.html More detail information about key and cerficates (Nate's explanation) http://www.mail-archive.com/users%40tomcat.apache.org/msg02329.html Tomcat + OpenSSL Documentation http://tomcat.apache.org/tomcat-5.5-doc/index.html http://www.openssl.org Enabling SSL in Apahe as well as running openssl.exe (provied by tomcat APR binaries) on Windows machine http://www.fatofthelan.com/articles/articles.php?pid=12 Scott, since you are interested enableing APR, let's forget about keytool and JSSE for now and only concentrate/use OpenSSL. I think if you generate new key and csr using OpenSSL and request Verisign to issue new cerficate based upon that key and csr, they will give you new cerficate. Then you can use that cerficate (certificate.crt) with key in your tomcat configuration. Since you know that with self-signed certificate, things are working so they should work with Verisign-signed certificate also. Let us know how it goes. Regards, D -- --- Scott Purcell [EMAIL PROTECTED] wrote: Do you think Verisign should be able to supply me with a openSSL certificate? Maybe that would help. I just don't know enough about this to make any logical sense. I will email Verisign and see what they say. Thanks, Scott PS, did you have Nates earlier email you described below? If so could you email me it? Thanks - Original Message - From: Dhaval Patel [EMAIL PROTECTED] To: Tomcat Users List users@tomcat.apache.org Sent: Saturday, December 03, 2005 1:13 PM Subject: Re: SSL InvalidKeystore Format? Scott, You might have to use OpenSSL instead of keytool. OpenSSL is recommended in production environment. Also if you want to use APR+SSL, you might have to use OpenSSL (I am not sure about it). So you have to generate key using openssl and then supplied key to Verisign. If you have time, read my and Nate's previous messages. Nate's message explains a lot about key, certificate and encoding. I am not quite sure wheter this key+certificate will work with APR+SSL since they were generated using keytool. But you can try. Let us know if it works or not. Regards, D --- Scott Purcell [EMAIL PROTECTED] wrote: Just found this in my email mess: Thanks for responding: Here is what I supplied to verisign for my certificate: 1) Prepared the Keystore: keytool -genkey -keystore myKeystore -alias keystoreAlias (it asked for me for passwords, etc.); 2) Generated a CSR a) keytool -genkey -alias keystoreAlias -keyalg RSA -keystore myKeystore b) keytool -certreq -keyalg RSA -alias keystoreAlias -file certreq.csr -keystore myKeystore so it looks like I used keytool, and not openssl. Then they send me back a cert.cer file in my email: ### 2) I was not able to download it from anywhere, as it came in my email: 3) I was able to get the SSL running in a ssl format using the supplied link from fatofthelan.com article pid=12 and currently have a generic certificate running. Thanks, Scott - Original Message - From: Nate Rock [EMAIL PROTECTED] To: Tomcat Users List users@tomcat.apache.org Sent: Friday, December 02, 2005 8:50 AM Subject: RE: SSL InvalidKeystore Format? Dhaval your explincation was excellent! I think with a bit more information about how exactly Scott got his certificate from verisign, I think we can help him out a bit more. 1. What did you use to create your Certificate Request (csr) to verisign? -IIS -java keytool -openssl 2. after you received your signed certificate back from verisign, what format did you download it in? -PKCS7 - signed cert only - DER binary encoding -PEM - signed cert only 3. After you got the signed certificate what format is your keystore? -PKCS12 - pub/priv keys + signed certificate -JKS - pub/priv keys + signed certificate (sun specific format -PEM - single file with both PEM encoded (RSA formatted, non encrypted!) private key concatinated on to the PEM encoded signed cert -PEM - two files 1. one contain the PEM encoded (RSA formattd, non
Re: SSL InvalidKeystore Format?
Hi Scott, I am not tomcat expert as well as I can not help you about the error you are getting. After Remy's last message on SSL with APR, I finally got my windows xp + tomcat 5.5.12 + APR + SSL working. Following are the steps that I have followed: (1) Install Tomcat 5.5.12 and make sure it is working. (2) Download APR component (openssl.exe and tcnative-1.dll) and put it in %TOMCAT_HOME%\bin. (http://tomcat.heanet.ie/native/1.1.0/binaries/win32/) (3) I generated server.key and server.cert following guide at http://www.fatofthelan.com/articles/articles.php?pid=12 .I have put them in %TOMCAT_HOME%\bin only. (Make sure you follow the guide. I had trouble setting openssl.exe on windows xp. The answer is on that page only. You have to download openssl.cnf from google and place it in some folder and make a new environment OPENSSL_CONF pointing to that file. Trust me that link is very good.) (4) Change the server.xml in following way: Connector port=443 maxHttpHeaderSize=8192 maxThreads=150 minSpareThreads=25 maxSpareThreads=75 enableLookups=false disableUploadTimeout=true scheme=https secure=true SSLEngine=on SSLCertificateFile=C:\Tomcat5.5\bin\server.crt SSLCertificateKeyFile=C:\Tomcat5.5\bin\server.key / (5) Restart the tomcat and SSL is enabled. I dont know if you have did the same way and you have issues. If you want to try, you can follow the above steps on some other windows xp machine. It worked for me so it should work for you. If you start from scratch, it may take about 30-40 mins to setup above things. Let me know how it goes. Regards, D --- Scott Purcell [EMAIL PROTECTED] wrote: Well, after wasting much time trying to get the SSL running on 5.5.12, on XP, and finding out about the bad tcnative-1.dll, I thought I was out of the woods on my SSL configuration. But it appears I have one last issue (hopefully) Since I renamed the tcnative-1.dll, I am getting logs in regards to my SSL (I was not getting those prior, see earlier posts) and I am receiving this error: I believe I have a good keystore, because my public key from Verisign was happy with it, but for some reason, Tomcat is stikll not happy with it. Any ideas why this error may occur? Nov 30, 2005 10:44:53 PM org.apache.coyote.http11.Http11BaseProtocol init INFO: Initializing Coyote HTTP/1.1 on http-80 Nov 30, 2005 10:44:54 PM org.apache.coyote.http11.Http11BaseProtocol init SEVERE: Error initializing endpoint java.io.IOException: Invalid keystore format at sun.security.provider.JavaKeyStore.engineLoad(Unknown Source) at java.security.KeyStore.load(Unknown Source) at org.apache.tomcat.util.net.jsse.JSSESocketFactory.getStore(JSSESocketFactory.java:282) at org.apache.tomcat.util.net.jsse.JSSESocketFactory.getTrustStore(JSSESocketFactory.java:256) at org.apache.tomcat.util.net.jsse.JSSE14SocketFactory.getTrustManagers(JSSE14SocketFactory.java:174) at org.apache.tomcat.util.net.jsse.JSSE14SocketFactory.init(JSSE14SocketFactory.java:109) at org.apache.tomcat.util.net.jsse.JSSESocketFactory.createSocket(JSSESocketFactory.java:88) at org.apache.tomcat.util.net.PoolTcpEndpoint.initEndpoint(PoolTcpEndpoint.java:292) at org.apache.coyote.http11.Http11BaseProtocol.init(Http11BaseProtocol.java:137) at org.apache.catalina.connector.Connector.initialize(Connector.java:1016) at org.apache.catalina.core.StandardService.initialize(StandardService.java:580) at org.apache.catalina.core.StandardServer.initialize(StandardServer.java:762) at org.apache.catalina.startup.Catalina.load(Catalina.java:488) at org.apache.catalina.startup.Catalina.load(Catalina.java:508) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source) at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source) at java.lang.reflect.Method.invoke(Unknown Source) at org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:247) at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:412) Nov 30, 2005 10:44:54 PM org.apache.catalina.startup.Catalina load SEVERE: Catalina.start LifecycleException: Protocol handler initialization failed: java.io.IOException: Invalid keystore format at org.apache.catalina.connector.Connector.initialize(Connector.java:1018) at org.apache.catalina.core.StandardService.initialize(StandardService.java:580) at org.apache.catalina.core.StandardServer.initialize(StandardServer.java:762) at org.apache.catalina.startup.Catalina.load(Catalina.java:488) at org.apache.catalina.startup.Catalina.load(Catalina.java:508) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source) at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source) at java.lang.reflect.Method.invoke(Unknown Source) at
Re: SSL InvalidKeystore Format?
Hi Scott, Good to hear that it works. Thank also go to Remy and Nate Rock. You have purchased SSL. In this purchase process, did you submit Certificate Request (csr) to Verisign? As far as I know the process of getting signed SSL certificate is first you have to generate certificate request (csr), then you have to submit this csr to Verisign or Thawte, then they will give you actual signed certificate (.crt) and then you have to use that crt in this process. Based upon my knowledge,to incorporate Verisign certificate, steps are as follows: (Derived from http://www.fatofthelan.com/articles/articles.php?pid=12 ) (1) openssl req -new -out server.csr (This will generate csr and private key. Make sure you feel the values correctly on openssl command prompt. ) (2) openssl rsa -in privkey.pem -out server.key (This removes the passphrase from the private key. Also delete generated .rnd file) (3) Here there are two (either or) possibilities: (a) save the key and submit this csr to Verisign. They will sign it and give you the final certificate (.crt format may be). You may also need to give them key. (this is paid option but mostly used in production environment) (b) create self-signed certificate. openssl x509 -in server.csr -out server.crt -req -signkey server.key -days 365 (this is free but it can be used in production environment. You dont need to perform this step if you have certificate from Versign) Is the self signed certificate good? Yes and may be no. Yes. It is nearly same as Verisign certificate and if you use it, the SSL will be enabled as it is going to be enabled using Verisign. The only problem you will face, is when you open the website in any browser it will complain about authenticity of the certificate. Browser can not verify it and so it will ask user if he/she wants to proceed further or not. The communication is still SSL enabled and secure. This method is more preferred in testing environment. I have seen many web projects using it in production environment also. May be no. Again if you have good professional website, it is almost standard now that you use signed certificate from Verisign or Thawte. For example, if you do any online shopping from amazon or any store, you will visit the SSL page and they dont display any warning or anything. So the choice is in your hand. There is no harm involved in any of the above method. Again all of above explanation is based upon my reading. I would like users to comment about it so that I also can update myself and you have correct and better answer. Hope it helps you understanding SSL a bit further. Regards, D --- Scott Purcell [EMAIL PROTECTED] wrote: Hard to believe ... but Dhaval the below steps actually worked, and my site appears to have SSL. Thank you so much. But of course this draws me to another question. I had just purchased a Verisign certificate and do not know how to handle this? Can I just call the Verisign certificate when doing this: openssl x509 -in server.csr -out server.crt -req -signkey server.key -days 365 and using the one verisign gave me here? Also, is this a good certificate? Do I need the Verisign one? As you may be able to tell, I am very confused and could use a little explanation if possible. Thanks much Scott - Original Message - From: Dhaval Patel [EMAIL PROTECTED] To: Tomcat Users List users@tomcat.apache.org Sent: Thursday, December 01, 2005 2:08 PM Subject: RE: SSL InvalidKeystore Format? Hi, I should have mention that I am running tomcat as a standalone server. I mentioned the link (http://www.fatofthelan.com/articles/articles.php?pid=12) as a reference to generate self-signed certificate with OpenSSL on windows. Even though it is very nice article about how to setup SSL with Apache. I only applied part-3 (Generate a test certificate) from that article to my Tomcat+SSL procedure. One thing that I found intersting on that article is part-4 (Configuring Apache and mod_ssl). In this part, if you look at changes in httpd.conf, as mentioned below, SSLEngine o���n SSLCertificateFile conf/ssl/server.cert SSLCertificateKeyFile conf/ssl/server.key which is the same parameter that Remy has suggested. If I have found this article early, I may be able to solve the issue. But again since I figured it out, I like it now. Regards. D --- Scott Purcell [EMAIL PROTECTED] wrote: Hello Dhaval, I was reading the article below, and it looks you you are not running Tomcat as standalone? Are you running Apache behind the scenes? I was just curious. Scott -Original Message- From: Dhaval Patel [mailto:[EMAIL PROTECTED] Sent: Thursday, December 01, 2005 8:49 AM To: Tomcat Users List Subject: Re: SSL InvalidKeystore Format? Hi Scott, I am not tomcat expert as well as I can not help you about the error
Re: Tomcat 5.5.12- APR Connector - SSL configuration
Hi Nate, Welcome aboard. I am waiting for the answer of this problem since a long time. I have searched this mailing list but no body answered it correctly. You can search on the list archive of Nov. 2005, you will find my messages. I have searched on google about it, but could not find anything. I found that tomcat documentation is the only (and insuffiecient) source of this. You are third person that has this problem. Looks like there is bug. Hope we will get solution. Regards. D --- Nate Rock [EMAIL PROTECTED] wrote: Someone may have already posted this, but since I just joined the mailing list, I figured it might help someone else if it hasn't already been sent. I am having trouble getting an HTTPS connection to my tomcat server using the native APR connector under Tomcat 5.5.12. I am familiar with how to set up HTTPS connectors in 5.0.28 so I figured it would be easy to set up in 5.5.12 using the APR connector, but I think I am just missing something simple. Under Tomcat 5.0.28 here is what we were using: Connectorport=443 maxHttpHeaderSize=8192 maxThreads=150 minSpareThreads=25 maxSpareThreads=75 enableLookups=false disableUploadTimeout=true acceptCount=100 scheme=https secure=true clientAuth=false sslProtocol=SSL keystoreFile=c:\certs\server\server.p12 keystorePass=serverPassword keystoreType=PKCS12 / After reading the docs located at http://tomcat.apache.org/tomcat-5.5-doc/apr.html I took a stab at using the existing server.p12 file and exported the certificate in PEM encoding using Keystore Explorer 2.0 and saved it to c:\certs\server\server.cer When opening it in a text editor, I get the following which looks correct. -BEGIN CERTIFICATE- MIICqzCCAhSgAwIBAgIBAjANBgkqhkiG9w0BAQQFADCBgTEZMBcGA1UEAxMQcm9j a2hvd3NlLmljLm9yZzEYMBYGA1UEChMPSW5maW5pdGUgQ2FtcHVzMRMwEQYDVQQL EwpIb3N0aW5nIENBMRQwEgYDVQQHEwtBcmRlbiBIaWxsczESMBAGA1UECBMJTWlu bmVzb3RhMQswCQYDVQQGEwJVUzAeFw0wNTExMjkyMTQ1MTVaFw0wNjExMjQyMTQ1 MTVaMIGDMRkwFwYDVQQDExByb2NraG93c2UuaWMub3JnMRgwFgYDVQQKEw9JbmZp bml0ZSBDYW1wdXMxFTATBgNVBAsTDFNpdGUgTWFuYWdlcjEUMBIGA1UEBxMLQXJk ZW4gSGlsbHMxEjAQBgNVBAgTCU1pbm5lc290YTELMAkGA1UEBhMCVVMwgZ8wDQYJ KoZIhvcNAQEBBQADgY0AMIGJAoGBAKhU44dOUQAaHPokbNbcoFvQpleL4zCJ6xKH C3nP0bQzB9XoXHNp/ec4EKOGhwfITbo8eEhAdXrAZNNEcH0BQYtd7QaT1GMqyJrV bQbcNBBqJnu9N4l8jAfclKp+6kMy2V4i6PIJB2E1zxTgS9ourhg36NGc1RCbUazz 0ussu8nbAgMBAAGjLzAtMAwGA1UdEwQFMAMBAQAwHQYDVR0lBBYwFAYIKwYBBQUH AwIGCCsGAQUFBwMBMA0GCSqGSIb3DQEBBAUAA4GBAIGX1f3uCQgIpqa+rVJgZ2se FRRTPbZ576jpTqJtPlAARPCqBw2uM5tG36FV+dW9kVeWG3Y1GafLgpFUD5j/nl2p p47mUjYhQFqEzOkoW3WuNspKuDkd5TACn721vECdaUVTUEmpJ5XBb9Q710chv9ZO v6h8ZTNOoU2cvqJV3MhC -END CERTIFICATE- I then added the following connector to my server.xml Connector port=443 maxHttpHeaderSize=8192 maxThreads=150 minSpareThreads=25 maxSpareThreads=75 enableLookups=false disableUploadTimeout=true acceptCount=100 SSLCertificateFile=c:\certs\server\server.cer / But when I try to connect to the server using https://server/ the browser times out and I get a page cannot be found error. Thinking that it needed the private key as well I exported the primary key in PEM format and saved it to c:\certs\server\server.pem When I open it in a text editor, I get the following which also looks correct -BEGIN PRIVATE KEY- MIICdgIBADANBgkqhkiG9w0BAQEFAASCAmAwggJcAgEAAoGBAKhU44dOUQAaHPok bNbcoFvQpleL4zCJ6xKHC3nP0bQzB9XoXHNp/ec4EKOGhwfITbo8eEhAdXrAZNNE cH0BQYtd7QaT1GMqyJrVbQbcNBBqJnu9N4l8jAfclKp+6kMy2V4i6PIJB2E1zxTg S9ourhg36NGc1RCbUazz0ussu8nbAgMBAAECgYB5M8YwIn/IJwU+RwPnISyFb5KV 7q9Cv8t2p63no29G5Id7ybbnkyWyWngAhlirjdoJgojI3UC5hdYTGHA2UbUyzRe6 Fm5y26opOBYYfyLwu3hvVjYoIyhTX+QNfCRFcKNrIBKecmGmh+YIZwGGlru/1zHn fp4YmVodfJqEARRfIQJBANESeiK95X1EBXEwNIah3KuxvdJlMNc4oMLuCdLuGm7I 9ViBYI+3giiFKZjGvtwfeNHWyiU5s4PnnAOd48pJdHcCQQDOHWl+CkQ/OxRTrxI8 P+++Ucn35h/TsnVmTMfGYoiGYwYvx46rSZ3a++0TKwUDVn3KXEBzIMKslw61yiEU fyK9AkEAwZf3amYms3iiBW5apPQKjx21pLW4pQG1suqSRDPgXAdPUBX04P9O0dCE dQhLwS6PRNc8NX4ZoSF9EMhKHo0n/wJAcYnII7L6Fy6vKs3kqKW7pcYeEF2GqLHE c97VqVV7yTNhJA60a2x49TkTRhzLfSQ21LLumbyxICtx4ff/MvA5rQJAYOc1Dqmp kSl7vTrSeUuO4yRPi/R7ALRs6dqQQTtQ9egC1F+3sgIWb6rdJOBsdtEeFx0AGgfF +p3VdiyrJl2h5Q== -END PRIVATE KEY- I then modified the following connector in my server.xml Connector port=443 maxHttpHeaderSize=8192 maxThreads=150 minSpareThreads=25 maxSpareThreads=75 enableLookups=false disableUploadTimeout=true acceptCount=100
Re: How to set the admin console for 5.5.x
Hi Shridhar, Tomcat Admin (for 5.5) zip or rar.gz file has following two main contents: admin.xml admin (webapps) You have to put admin.xml inside $CATALINA_HOME/conf/Catalina/localhost and admin (webapps) inside $CATALINA_HOME/server/webapps . Also make sure that (which you already did but one more time) that there is a user in tomcat-users.xml which has admin role. Put everything in proper places and restart the tomcat. You will see results. Hope it helps. Regards, D --- N S, Shridhar [EMAIL PROTECTED] wrote: Hi Richard, Firstly, thanks for the reply. I have placed it under: $CATALINA_HOME/server/webapps folder as indicated. I get the login page for admin console, but after that I am getting the error message. Further help is appreciated. Thank you. Regards, Shridhar On 11/28/05, Richard Mixon [EMAIL PROTECTED] wrote: Shridhar, You have placed it in the wrong directory structure. Look at the paths in the zip/tar file - they show you the correct location. It is mostly under server/webapps - not webapps. HTH - Richard -Original Message- From: N S, Shridhar [mailto:[EMAIL PROTECTED] Sent: Monday, November 28, 2005 2:49 AM To: users@tomcat.apache.org Subject: How to set the admin console for 5.5.x Hi All, I am having trouble setting up the admin console for Apache Tomcat/5.5.12. I have downloaded the apache-tomcat-5.5.12-admin.zip file from Tomcat site. Unzipped it and placed the admin folder under C:\Tomcat55\server\webapps folder. When I try the below page: http://localhost/admin/ I get the admin log in page. I enter admin and admin as username/password as defined in tomcat-users.xml file. Next page displays: Tomcat's administration web application is no longer installed by default. Download and install the admin package to use it. Any hepl is greatly appreciated. Thank you. Regards, Shridhar - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Yahoo! Music Unlimited Access over 1 million songs. Try it free. http://music.yahoo.com/unlimited/ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Server push
Hi, I dont know about your environment. But I know few things about push that I would like to share. I researched push a while ago. Basically I was looking for server push. HTTP is not push enabled protocol. So the answer is you can not push from server to client using HTTP. Client has to poll server. (may be in low priority thread). J2ME (MIDP 2.0) has push capabalities. I am not sure whether all phones supports it the way it is written. :) You might want to take a look at pushlet (http://www.pushlets.com/) which may help you get going quickly. Hope about things help you. Regards, D --- Andrew.du [EMAIL PROTECTED] wrote: Can somebody tell me server push? -- [EMAIL PROTECTED] __ Start your day with Yahoo! - Make it your home page! http://www.yahoo.com/r/hs - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: enable log4j
Hi Nehal, Do you want to enable log4j in your application or you want to enable log4j inside tomcat? Inside tomcat means, tomcat uses log4j instead of J2SE logging utility so that you can configure tomcat loggin in log4j. Regards, D --- Nehal Sangoi [EMAIL PROTECTED] wrote: Hi, I want to enable log4j logger in one of my tomcat instances. I copied log4j-1.2.12.jar to my webapps - war file. This means, under WEB-INF/lib, copied jar file and under WEB-INF/classes, copied log4j.properties. Later, re-sreated warfile and started my tomcat instance. log4j.properties : log4j.rootLogger=debug, R log4j.appender.R=org.apache.log4j.RollingFileAppender log4j.appender.R.File=${catalina.base}/logs/tomcat.log log4j.appender.R.MaxFileSize=10MB log4j.appender.R.MaxBackupIndex=10 log4j.appender.R.layout=org.apache.log4j.PatternLayout log4j.appender.R.layout.ConversionPattern=%p %t %c - %m%n log4j.logger.org.apache.catalina=DEBUG, R Also, notice that i have tomcat 5.5.9 on solaris 10. But my jar file is log4j-1.2.12.jar. Is there anything 'm doing wrong or incomplete? Please help as soon as possible Thanks. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Yahoo! FareChase: Search multiple travel sites in one click. http://farechase.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: enable log4j
Hi Nehal, I dont know how to work with multiple tomcat instances. The way I configured my tomcat (single user) to use log4j is different then yours. I followed guide from http://tomcat.apache.org/tomcat-5.5-doc/logging.html . Basically it says, 1. Create a file called log4j.properties with the following content and save it into common/classes. (The one with yours is fine). 2. Place the log4j jar in $CATALINA_HOME/common/lib. (In our case, it is log4j-1.2.12.jar. Make sure you place it in common/lib rather than in any webapps.) 3. Place the commons-logging.jar (not commons-logging-api.jar) in $CATALINA_HOME/common/lib with the log4j jar. (Again it is common/lib not webapps) 4. Restart tomcat. I followed above steps and I could run my tomcat instance in debug mode. For customized debugging, you can read API documentation of Tomcat and may be you can able to find something. This way you can customize your log4j.properties. I will keep looking but I don't have that sort of environment here to play with. If I find any thing, I will let you know. I hope above things help a bit. Regards, D --- Nehal Sangoi [EMAIL PROTECTED] wrote: Hi Dhaval, I want to enable log4j in debug mode only for one of the tomcat instances which is running using different user -- i.e. other than tomcat-base. This means, i don't want to apply log4j on all tomcat instaces by implemeting it onto tomcat-base. -Original Message- From: Dhaval Patel [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 22, 2005 6:25 PM To: Tomcat Users List; [EMAIL PROTECTED] Subject: Re: enable log4j Hi Nehal, Do you want to enable log4j in your application or you want to enable log4j inside tomcat? Inside tomcat means, tomcat uses log4j instead of J2SE logging utility so that you can configure tomcat loggin in log4j. Regards, D --- Nehal Sangoi [EMAIL PROTECTED] wrote: Hi, I want to enable log4j logger in one of my tomcat instances. I copied log4j-1.2.12.jar to my webapps - war file. This means, under WEB-INF/lib, copied jar file and under WEB-INF/classes, copied log4j.properties. Later, re-sreated warfile and started my tomcat instance. log4j.properties : log4j.rootLogger=debug, R log4j.appender.R=org.apache.log4j.RollingFileAppender log4j.appender.R.File=${catalina.base}/logs/tomcat.log log4j.appender.R.MaxFileSize=10MB log4j.appender.R.MaxBackupIndex=10 log4j.appender.R.layout=org.apache.log4j.PatternLayout log4j.appender.R.layout.ConversionPattern=%p %t %c - %m%n log4j.logger.org.apache.catalina=DEBUG, R Also, notice that i have tomcat 5.5.9 on solaris 10. But my jar file is log4j-1.2.12.jar. Is there anything 'm doing wrong or incomplete? Please help as soon as possible Thanks. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Yahoo! FareChase: Search multiple travel sites in one click. http://farechase.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Yahoo! Mail - PC Magazine Editors' Choice 2005 http://mail.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: url to search mailing list
Hi, This is the site where you have all archives : http://mail-archives.apache.org/mod_mbox/ You can click on perticular email and you will get archives for that perticular email address. For example, http://mail-archives.apache.org/mod_mbox/tomcat-users/ For search, you can use google, SEARCH_TERM site:mail-archives.apache.org/mod_mbox/tomcat-users/ or, you can use http://www.mail-archive.com/ to find first archive list and then you can search mesasges. Hope it helps. Regards, D --- Scott Purcell [EMAIL PROTECTED] wrote: What is the url to search the mailing list? Thanks, - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Yahoo! FareChase: Search multiple travel sites in one click. http://farechase.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Sharing webapps between linux and windows on single computer
Hi Nix, Thanks for your response. After posting my question, I realized that the question is not that important. I read the documentation and figured the way that you suggest. My goal is to develop a web application and test it under Windows and Linux enviroment. I know Linux is much better (even I prefer that). But it just something to play around and clearing my doubts. Regards. Dhaval --- Nikola Milutinovic [EMAIL PROTECTED] wrote: Dhaval Patel wrote: My question is, is it possible to put only webapps on P_FAT32 while tomcat install files are in P_NTFS and P_RES and configured tomcat to read P_FAT32 webapps directory as appbase in host node of server.xml? Have anyone done anything like this before? Only thing I am confused of end of line character since it is different in windows and linux for any file. I mean can it work? I am going to try it but if anyone had done something like this, please guide me. Of course. For each VirtualHost in TC (including localhost), you can define appBase directory. Just let it point to your P_FAT32. Nix. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Yahoo! Mail - PC Magazine Editors' Choice 2005 http://mail.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Tomcat 5.5.12 + APR (Apache Portable Runtime) + SSL (OpenSSL) on Windows
Hello all, I am trying to configure HTTPS with Tomcat 5.5.12 on Windows XP. I am using J2SE 1.5.0_05. I am a student and I dont have signed certificate. I tried two methods which are mentioned on Tomcat documentation: (1) Using .keystore (generated by keytool) I followed the documentation (http://tomcat.apache.org/tomcat-5.5-doc/ssl-howto.html). Generted .keystore, put it in C:\, configure web.xml and restart the tomcat. It works as the way it suppose to. When you goto https://localhost:8443, you will get warning and it's working. Btw in this way, I am note using APR (Apache Portable Runtime). When I use those binray, I didnt get it to work. I put openssl.exe and tcnative-1.dll in my bin directory which I downloaed from website which apache documentation mentioned. I restarted the tomcat, I can see server status and things look fine on regular HTTP. But HTTPs does not work. I get request timed out from browser about https://localhost:8443 and it produces no error message. Then I read at some place that if you want APR you have do some extra configuration, which I followed in part 2. (2) Using OpenSSL. I installed OpenSSL. I read documentation about how to generate key and certificate in OpenSSL howto. Then did following: a) goto c:\Tomcat5.5\bin b) openssl genrsa -des3 -out privkey.pem 2048 (generate key) c) openssl req -new -key privkey.pem -out cert.csr (genrate certificate request) d) openssl req -new -x509 -key privkey.pem -out cacert.pem -days 1095 (create self signed certificate) e) followed APR config guide from tomcat 5.5 documentations. f) restart the tomcat. g) same error as I get before. request time out and no error in logs. I dont know how to make it working. I would like to know more about it. APR documentations says about APR Connectors configuration in which there are http, https and etc. I believe that is Connector port=8080 ... /, Connector port=8443 ... / and etc. Am I right? If I am right, then sslProtocol entry in two documentation (SSL and APR) are getting different entries (TLS vs. TLSv1). I dont know how to do it. Does anyone know how to do it using real certificate (signed by Verisign or something)? Does anyone know how to make it work with self signed certificate? Thank you in advance. Regards, Dhaval P.S. Forgive me for writing long, but I want to explain everything is full details. Thanks. __ Yahoo! FareChase: Search multiple travel sites in one click. http://farechase.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Tomcat 5.5.12 + APR (Apache Portable Runtime) + SSL (OpenSSL) on Windows
Thanks for your response Remy. But I didnt quite get it. I need help configuring SSL with Tomcat on Windows XP. I read the documentation that I found. I could not solve the problem that's why I posted on forum. I wrote what I did. How a newbie knows what is irrelevant and what is not. Thanks anyway. Regards, Dhaval --- Remy Maucherat [EMAIL PROTECTED] wrote: On 11/17/05, Dhaval Patel [EMAIL PROTECTED] wrote: Hello all, Then I read at some place that if you want APR you have do some extra configuration, which I followed in part 2. (2) Using OpenSSL. I installed OpenSSL. I read documentation about how to generate key and certificate in OpenSSL howto. Then did following: a) goto c:\Tomcat5.5\bin b) openssl genrsa -des3 -out privkey.pem 2048 (generate key) c) openssl req -new -key privkey.pem -out cert.csr (genrate certificate request) d) openssl req -new -x509 -key privkey.pem -out cacert.pem -days 1095 (create self signed certificate) e) followed APR config guide from tomcat 5.5 documentations. f) restart the tomcat. g) same error as I get before. request time out and no error in logs. I dont know how to make it working. I would like to know more about it. APR documentations says about APR Connectors configuration in which there are http, https and etc. I believe that is Connector port=8080 ... /, Connector port=8443 ... / and etc. Am I right? If I am right, then sslProtocol entry in two documentation (SSL and APR) are getting different entries (TLS vs. TLSv1). I dont know how to do it. Does anyone know how to do it using real certificate (signed by Verisign or something)? Does anyone know how to make it work with self signed certificate? Thank you in advance. Regards, Dhaval P.S. Forgive me for writing long, but I want to explain everything is full details. Thanks. I suppose giving the Connector element is an irrelevant detail (since you read the APR page, you probably noticed the attributes were not the same as for JSSE, as they resemble the ones used for mod_ssl) ;) -- x Rémy Maucherat Developer Consultant JBoss Group (Europe) SàRL x - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Yahoo! FareChase: Search multiple travel sites in one click. http://farechase.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Sharing webapps between linux and windows on single computer
Hi all, I have computer three partitions: Partition 1 : Windows XP (NTFS) - (aka P_NTFS) Partition 2 : SuSE Linux 10.0 (Reiser) - (aka P_RES) Partition 3 : Share (FAT32) - (aka P_FAT32) Tomcat 5.5.12 with J2SE 1.5.0_05 on both SuSE and Windows. I use P_FAT32 for sharing my data files between SuSE and Windows. Since P_FAT32 is FAT32 partition, SuSE reads it as noexec in the same way as it reads P_NTFS. (I found from message while booting to SuSE). Unlike to P_NTFS, P_FAT32 is writable from SuSE. P_FAT32 is read by SuSE as vfat. Things are working well. Somehow I am able to share my thunderbird offline emails and Firefox bookmarks. I was wondering if we can share Tomcat webapps in that way. I did few things to do that but could not have success. First I tried to put Tomcat on FAT32 and try to start server. Since SuSE can not able to execute anything (from no exec) flag, I could not able to run the server. Then I tried to run server from P_RES from SuSE. It run well. Things are fine. Then I tried to move webapps directory to P_FAT32 and create link in Tomcat about that tried to run it. No errors or anything but again no page is loading. The default page is fully blank. (I dont know why) I checked that Tomcat is running. Then I gave up. Windows somehow able to operate normally from Tomcat residing at P_FAT32 partition. My question is, is it possible to put only webapps on P_FAT32 while tomcat install files are in P_NTFS and P_RES and configured tomcat to read P_FAT32 webapps directory as appbase in host node of server.xml? Have anyone done anything like this before? Only thing I am confused of end of line character since it is different in windows and linux for any file. I mean can it work? I am going to try it but if anyone had done something like this, please guide me. Thanks in advance. Regards, D __ Yahoo! FareChase: Search multiple travel sites in one click. http://farechase.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Mod_jk Connector
Hi. Did you check about your installation? If you installed mod_jk correctly, can you able to see the log files of mod_jk inside tomcat logs directory. It looks like something is missing here. Give me little more details about your installation. I had similar problems like it but it turns out that I did not install mod_jk properly. Regards, Dhaval --- Goay Zee Ling (ACM/MIS) [EMAIL PROTECTED] wrote: Hi. I have similar problem but in different environment. I'm integrating IIS5.1 with tomcat5. I posted the question earlier, tomcat connector isapi_redirect.dll not available. I manage to get rid resource not available by reinstalling everything again. one thing that is different from my previous installation is that I downloaded the latest isapi_redirect.dll release in nov. Still not sure what goes wrong. -Original Message- From: Kaushal Shriyan [mailto:[EMAIL PROTECTED] Sent: Thursday, November 10, 2005 2:50 PM To: users@tomcat.apache.org Subject: Mod_jk Connector I have downloaded the following application httpd-2.0.49.tar.gz jakarta-tomcat-4.1.31.tar.gz jakarta-tomcat-connectors-1.2.15-src.tar.gz I am able to check http://localhost:8080/index.jsp and http://localhost But when I do http://localhost/examples it says Not Found The requested URL /examples was not found on this server. Apache/2.0.49 (Unix) mod_jk/1.2.15 Server at localhost Port 80 Please help me to resolve this issue Thanks and regards Kaushal Shriyan - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Yahoo! Mail - PC Magazine Editors' Choice 2005 http://mail.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Question regarding deployment
Hi, Based upon your talk I am assuming following: - You have directory c:\sample-dir which text files and other files. - You want to make something like http://ADDRESS/sample-dir which displays list of files (like online apache browsing). Here is the one way you can do it quickly: (1) Even though your application is not web-app, you still need to make it look like web-app to tomcat. For that create directory WEB-INF inside c:\sample-dir. Now create a web.xml inside WEB-INF as following: ?xml version=1.0 encoding=ISO-8859-1? web-app xmlns=http://java.sun.com/xml/ns/j2ee; xmlns:xsi=http://www.w3.org/2001/XMLSchema-instance; xsi:schemaLocation=http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd; version=2.4 servlet servlet-namedefault/servlet-name servlet-classorg.apache.catalina.servlets.DefaultServlet/servlet-class init-param param-namedebug/param-name param-value0/param-value /init-param init-param param-namelistings/param-name param-valuetrue/param-value /init-param load-on-startup1/load-on-startup /servlet /web-app I am running Tomcat 5.5 and I copied it from ROOT\WEB-INF\web.xml and I removed the contents between web-app .. and /web-app. You can refer to your tomcat installation. Basically all you need is the web-app node inside your web-xml. The servlet node is the default one. Make sure you set listings to true so that you can see the files. listings flag should be true by default. If it is true, you don't need servlet tag at all and web-app should be empty. (2) Now we have our sample-dir as a fake web application. Now we need to create context for it. There are two ways to do this: (A) Inside and detail way: Create the context file having name sample-dir.xml (why? because we want to call it as http://ADDRESS/samlple-dir. If you want to call it sample, make the filename sample.xml) ike this: Context docBase=c:\sample-dir privileged=true antiResourceLocking=false antiJARLocking=false /Context Where to put this xml? Depends upon your installation it should be inside conf. (probably conf\Catalina\localhost\). Just verify it and refer the documentation. It is very easy to find. (B) Easy way: Use admin webapplication of Tomcat to create context. It is very easy and it does above things for you. (3) Restart the tomcat on safe side and you should get the result on http://ADDRESS/sample-dir. Hope this helps. Let us know how it goes. Regards, Dhaval --- Smitha Murthy Krishna Nagesh [EMAIL PROTECTED] wrote: I have a directory of text files that is not deployed into the Tomcat server. It has some jsp's but certainly doesn't have the structure of a web application. I need to somehow point Tomcat to this directory so that the Tomcat can display the contents of these text files. Can you please provide pointers on how to do it? Which files need to be modified etc. Thanks, Smitha -- Smitha Murthy Krishna Nagesh Software RDE Ph: (650) 786-6328 - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Yahoo! Mail - PC Magazine Editors' Choice 2005 http://mail.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Question regarding deployment
Hi It's me again. I am sure about it. I think you want to point tomcat to some other directory then webapps. (like when you open http://ADDRESS:PORT/, instead of tomcat page you want to see your directory listing). To do that, create a new file called ROOT.xml inside TOMCAT_HOME/conf/Catalina/localhost (default context directory). Please cheak your tomcat documentation for specific context directory. ROOT.xml contains: ?xml version='1.0' encoding='utf-8'? Context docBase=C:/Sample-dir path= /Context That's it. Restart the tomcat and try http://ADDRESS:PORT/. You should see your listing. Hope I am right to understand your question this time. ;) Regards, Dhaval --- Dhaval Patel [EMAIL PROTECTED] wrote: Hi, Based upon your talk I am assuming following: - You have directory c:\sample-dir which text files and other files. - You want to make something like http://ADDRESS/sample-dir which displays list of files (like online apache browsing). Here is the one way you can do it quickly: (1) Even though your application is not web-app, you still need to make it look like web-app to tomcat. For that create directory WEB-INF inside c:\sample-dir. Now create a web.xml inside WEB-INF as following: ?xml version=1.0 encoding=ISO-8859-1? web-app xmlns=http://java.sun.com/xml/ns/j2ee; xmlns:xsi=http://www.w3.org/2001/XMLSchema-instance; xsi:schemaLocation=http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd; version=2.4 servlet servlet-namedefault/servlet-name servlet-classorg.apache.catalina.servlets.DefaultServlet/servlet-class init-param param-namedebug/param-name param-value0/param-value /init-param init-param param-namelistings/param-name param-valuetrue/param-value /init-param load-on-startup1/load-on-startup /servlet /web-app I am running Tomcat 5.5 and I copied it from ROOT\WEB-INF\web.xml and I removed the contents between web-app .. and /web-app. You can refer to your tomcat installation. Basically all you need is the web-app node inside your web-xml. The servlet node is the default one. Make sure you set listings to true so that you can see the files. listings flag should be true by default. If it is true, you don't need servlet tag at all and web-app should be empty. (2) Now we have our sample-dir as a fake web application. Now we need to create context for it. There are two ways to do this: (A) Inside and detail way: Create the context file having name sample-dir.xml (why? because we want to call it as http://ADDRESS/samlple-dir. If you want to call it sample, make the filename sample.xml) ike this: Context docBase=c:\sample-dir privileged=true antiResourceLocking=false antiJARLocking=false /Context Where to put this xml? Depends upon your installation it should be inside conf. (probably conf\Catalina\localhost\). Just verify it and refer the documentation. It is very easy to find. (B) Easy way: Use admin webapplication of Tomcat to create context. It is very easy and it does above things for you. (3) Restart the tomcat on safe side and you should get the result on http://ADDRESS/sample-dir. Hope this helps. Let us know how it goes. Regards, Dhaval --- Smitha Murthy Krishna Nagesh [EMAIL PROTECTED] wrote: I have a directory of text files that is not deployed into the Tomcat server. It has some jsp's but certainly doesn't have the structure of a web application. I need to somehow point Tomcat to this directory so that the Tomcat can display the contents of these text files. Can you please provide pointers on how to do it? Which files need to be modified etc. Thanks, Smitha -- Smitha Murthy Krishna Nagesh Software RDE Ph: (650) 786-6328 - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Yahoo! Mail - PC Magazine Editors' Choice 2005 http://mail.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Yahoo! FareChase: Search multiple travel sites in one click. http://farechase.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Help configuring mod_jk! Apache 2.0.54 + Tomcat 5.5.12 + SuSE Linux 10.0
Thank all of you for your advice. I solved the problem by doing following: (1) Remove previously installed Apache 2.0.54 which I installed using YaST. (2) Download Apache 2.0.54 from apache.org and configure, make, install. (3) Verify that it is working. (apachectl -k start) (4) Download jk-1.2.14_1 source from website. (5) Configure, make, install for connector jk-1.2.14-1. (6) Move mod_jk.so into modules. (7) Configure tomcat and restart it. Add line: Engine ... Listener className=org.apache.jk.config.ApacheConfig modJk=/path/to/mod_jk.so / /Engine (8) You should have mod_jk.conf in /path/to/tomcat/conf/auto directory. Add that path to httpd.conf: Include /path/to/tomcat/conf/jk/mod_jk.conf (9) Restart Apache. (10) :) Hope this helps to users. Regards, Dhaval --- George Sexton [EMAIL PROTECTED] wrote: Well, the easiest thing to do is to install the mod_jk binary that suse provides. Once you've done that, edit the /etc/sysconfig/apache2 file and add mod_jk to the list of modules. George Sexton MH Software, Inc. http://www.mhsoftware.com/ Voice: 303 438 9585 -Original Message- From: Dhaval Patel [mailto:[EMAIL PROTECTED] Sent: Saturday, November 05, 2005 10:06 PM To: users@tomcat.apache.org Subject: Help configuring mod_jk! Apache 2.0.54 + Tomcat 5.5.12 + SuSE Linux 10.0 Hello, I installed SuSE 10.0 via DVD. I have added this mirror (ftp://ftp-linux.cc.gatech.edu/pub/opensuse/distribution/SL-10 .0-OSS/inst-source) as the installation source in YaST so that I don't need DVD in future. I installed Apache2 (ver. 2.0.54), apache2-debuginfo, apache2-devel, apache2-doc, apache2-example-pages, apache2-prefork via YaST. I have downloaded Tomcat 5.5.12 from website. Btw. I am using J2SE 1.5.0_05. The problem that I have is installing mod_jk with above configuration. I downloaded the linux binary of Tomcat connector aka mod_jk from http://www.apache.org/dist/tomcat/tomcat-connectors/jk/binarie s/linux/jk-1.2.14/jakarta-tomcat-connectors-jk-1.2.14-linux- sles9-x86_64-prefork.so . I am assuming that is the correct connector. Then I renamed it to mod_jk.so. I tried two things: (A) Installation procedure-1 Followed guide from http://www.sitepoint.com/article/jsp-quick-start-guide-linux/4 with mod_jk.so in to /usr/lib/apache2/ directory. (B) Installation procedure-2 Followed guide from http://tomcat.apache.org/connectors-doc/howto/apache.html with mode_jk.so in /usr/lib/apache2/ directory. In both procedures, I get following error: Syntax error on line 4 of /usr/local/tomcat/conf/auto/mod_jk.conf: Cannot load /usr/lib/apache2/mod_jk.so into server: /usr/lib/apache2/mod_jk.so: cannot open shared object file: No such file or directory I verified that I have file on that location and file has proper access (chmod) attributes. I have tried above procedure with the directory /usr/lib/apache2-prefork directory. Same thing was repeated. I am very new to tomcat and apache configuration esp. mod_jk. This is first time I am installing mod_jk. I have seen it getting installed by my friends earlier (1-2 years ago). I showed the error to them. But they dont have any clue. They didnt do such things recently. I tried to search help on web and but could not find proper answer. Please help me solving this error. Thank you very much for your help. Regards, Dhaval __ Yahoo! FareChase: Search multiple travel sites in one click. http://farechase.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Yahoo! Mail - PC Magazine Editors' Choice 2005 http://mail.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Help configuring mod_jk! Apache 2.0.54 + Tomcat 5.5.12 + SuSE Linux 10.0
George, you are 100% right. I haven't thought of that way. Thank you very much for your kind advice. Now I am thinking of going back to the way you suggested. A little work but good learning experience. Thanks for your help. Regards, Dhaval --- George Sexton [EMAIL PROTECTED] wrote: Here's why you should use your distro's versions: Along about next Thursday some vulnerability is discovered in Apache. Apache revs the product to 2.0.56. You have to download the new version, recompile it, and also re-compile any custom modules (like mod_jk). If you use the distro release, they patch the current version, and you just let online_update install it and re-start it. The distribution version is best unless your needs are just so custom, that the standard version won't work. This is not the case you are in. George Sexton MH Software, Inc. http://www.mhsoftware.com/ Voice: 303 438 9585 -Original Message- From: Dhaval Patel [mailto:[EMAIL PROTECTED] Sent: Monday, November 07, 2005 10:11 AM To: Tomcat Users List Subject: RE: Help configuring mod_jk! Apache 2.0.54 + Tomcat 5.5.12 + SuSE Linux 10.0 Thanks again to all of you. First I was thinking about trying mod_jk via YaST. Then I looked up the version in YaST. It was something like 4.1.30 (mod_jk-ap20), which I wasn't sure whether it is suitable to my setup (Apache 2.0.54 + Tomcat 5.5.12). So I decided to build apache by myself. Few things I like about this. I learned the process. Now my apache files (modules, logs, htdocs, etc.) are in single location. YaST is the best if you want to use default server setup. I still have my old httpd conf files as backup for review. I will read it and try to achive it with my setup. Sometimes I like YaST but sometimes I want to go with hard way. Regards, Dhaval --- George Sexton [EMAIL PROTECTED] wrote: You really did it the hard way. Here are the steps for SuSE: 1)Install Apache 2.0 from Yast 2)Install mod_jk from yast 3)Add mod_jk to /etc/sysconfig/apache2 modules list 4)Add mod_jk commands to /etc/apache2/conf.d files, or /etc/apache2/vhosts.d files George Sexton MH Software, Inc. http://www.mhsoftware.com/ Voice: 303 438 9585 -Original Message- From: Dhaval Patel [mailto:[EMAIL PROTECTED] Sent: Monday, November 07, 2005 8:49 AM To: Tomcat Users List Subject: RE: Help configuring mod_jk! Apache 2.0.54 + Tomcat 5.5.12 + SuSE Linux 10.0 Thank all of you for your advice. I solved the problem by doing following: (1) Remove previously installed Apache 2.0.54 which I installed using YaST. (2) Download Apache 2.0.54 from apache.org and configure, make, install. (3) Verify that it is working. (apachectl -k start) (4) Download jk-1.2.14_1 source from website. (5) Configure, make, install for connector jk-1.2.14-1. (6) Move mod_jk.so into modules. (7) Configure tomcat and restart it. Add line: Engine ... Listener className=org.apache.jk.config.ApacheConfig modJk=/path/to/mod_jk.so / /Engine (8) You should have mod_jk.conf in /path/to/tomcat/conf/auto directory. Add that path to httpd.conf: Include /path/to/tomcat/conf/jk/mod_jk.conf (9) Restart Apache. (10) :) Hope this helps to users. Regards, Dhaval --- George Sexton [EMAIL PROTECTED] wrote: Well, the easiest thing to do is to install the mod_jk binary that suse provides. Once you've done that, edit the /etc/sysconfig/apache2 file and add mod_jk to the list of modules. George Sexton MH Software, Inc. http://www.mhsoftware.com/ Voice: 303 438 9585 -Original Message- From: Dhaval Patel [mailto:[EMAIL PROTECTED] Sent: Saturday, November 05, 2005 10:06 PM To: users@tomcat.apache.org Subject: Help configuring mod_jk! Apache 2.0.54 + Tomcat 5.5.12 + SuSE Linux 10.0 Hello, I installed SuSE 10.0 via DVD. I have added this mirror (ftp://ftp-linux.cc.gatech.edu/pub/opensuse/distribution/SL-10 .0-OSS/inst-source) as the installation source in YaST so that I don't need DVD in future. I installed Apache2 (ver. 2.0.54), apache2-debuginfo, apache2-devel, apache2-doc, apache2-example-pages, apache2-prefork via YaST. I have downloaded Tomcat 5.5.12 from website. Btw. I am using J2SE 1.5.0_05. The problem that I have is installing mod_jk with above configuration. I downloaded the linux binary of Tomcat connector aka mod_jk from http://www.apache.org/dist/tomcat/tomcat-connectors/jk/binarie s/linux/jk-1.2.14/jakarta-tomcat-connectors-jk-1.2.14-linux- sles9-x86_64-prefork.so . I
Help configuring mod_jk! Apache 2.0.54 + Tomcat 5.5.12 + SuSE Linux 10.0
Hello, I installed SuSE 10.0 via DVD. I have added this mirror (ftp://ftp-linux.cc.gatech.edu/pub/opensuse/distribution/SL-10.0-OSS/inst-source) as the installation source in YaST so that I don't need DVD in future. I installed Apache2 (ver. 2.0.54), apache2-debuginfo, apache2-devel, apache2-doc, apache2-example-pages, apache2-prefork via YaST. I have downloaded Tomcat 5.5.12 from website. Btw. I am using J2SE 1.5.0_05. The problem that I have is installing mod_jk with above configuration. I downloaded the linux binary of Tomcat connector aka mod_jk from http://www.apache.org/dist/tomcat/tomcat-connectors/jk/binaries/linux/jk-1.2.14/jakarta-tomcat-connectors-jk-1.2.14-linux-sles9-x86_64-prefork.so . I am assuming that is the correct connector. Then I renamed it to mod_jk.so. I tried two things: (A) Installation procedure-1 Followed guide from http://www.sitepoint.com/article/jsp-quick-start-guide-linux/4 with mod_jk.so in to /usr/lib/apache2/ directory. (B) Installation procedure-2 Followed guide from http://tomcat.apache.org/connectors-doc/howto/apache.html with mode_jk.so in /usr/lib/apache2/ directory. In both procedures, I get following error: Syntax error on line 4 of /usr/local/tomcat/conf/auto/mod_jk.conf: Cannot load /usr/lib/apache2/mod_jk.so into server: /usr/lib/apache2/mod_jk.so: cannot open shared object file: No such file or directory I verified that I have file on that location and file has proper access (chmod) attributes. I have tried above procedure with the directory /usr/lib/apache2-prefork directory. Same thing was repeated. I am very new to tomcat and apache configuration esp. mod_jk. This is first time I am installing mod_jk. I have seen it getting installed by my friends earlier (1-2 years ago). I showed the error to them. But they dont have any clue. They didnt do such things recently. I tried to search help on web and but could not find proper answer. Please help me solving this error. Thank you very much for your help. Regards, Dhaval __ Yahoo! FareChase: Search multiple travel sites in one click. http://farechase.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Help configuring mod_jk! Apache 2.0.54 + Tomcat 5.5.12 + SuSE Linux 10.0
Richard, Thank you so much for your quick response. I forgot to mention I am using 32 bit architecture. I have AMD Athlon XP 2000+ with SuSE 10 and Windows XP dual boot. I tried to compile the binaries but could not able to compile it. I found the document from http://tomcat.apache.org/connectors-doc/howto/apache.html but it does not have compilation intruction for linux. Can you able to provide me some instructions? I know it's little off topic to this forum but since you have already done it, it would be easy for you to guide me. Based upon your email, I reliazed that the .so that I used is for SuSE Liux Enterprise Server 9 (SLES) and that too for 64bit. Do jakarta have binary for 32 bit linux? I know they have nice .so files for Win32 and OSX. ( :( ) Thanks again. Regards, Dhaval --- Richard Mixon [EMAIL PROTECTED] wrote: Dhaval, I hope I can help - at least a bit. First, your assumption as to whether you have the correct mod_jk binar is probably correct - IF you are running x64 architecture hardware (an AMD64 or one of the Intel Xeon's with 64 bit extensions). I am running SuSE Enterprise Server 9 (SLES9) on our dual-Opteron servers. I ended up downloading jakarta-tomcat-connectors-1.2.14.1-src and compiling them. I usually prefer to search and search for an RPM, but in this case it was quite easy - once I figured out the maze of subdirectories under the expanded source package :) So ... for my situation mod_jk.so ends up in /usr/lib64/apache2/mod_jk.so. I'm just getting started with Open SuSE 10.0, so I am not sure if the location will be the same or not. If you are not using 64 bit hardware, then it would probably be /usr/lib/apache2/mod_jk.so (and you would need the 32bit module also). Hope this helps - Richard -Original Message- From: Dhaval Patel [mailto:[EMAIL PROTECTED] Sent: Saturday, November 05, 2005 10:06 PM To: users@tomcat.apache.org Subject: Help configuring mod_jk! Apache 2.0.54 + Tomcat 5.5.12 + SuSE Linux 10.0 Hello, I installed SuSE 10.0 via DVD. I have added this mirror (ftp://ftp-linux.cc.gatech.edu/pub/opensuse/distribution/SL-10.0-OSS/inst-so urce) as the installation source in YaST so that I don't need DVD in future. I installed Apache2 (ver. 2.0.54), apache2-debuginfo, apache2-devel, apache2-doc, apache2-example-pages, apache2-prefork via YaST. I have downloaded Tomcat 5.5.12 from website. Btw. I am using J2SE 1.5.0_05. The problem that I have is installing mod_jk with above configuration. I downloaded the linux binary of Tomcat connector aka mod_jk from http://www.apache.org/dist/tomcat/tomcat-connectors/jk/binaries/linux/jk-1.2 .14/jakarta-tomcat-connectors-jk-1.2.14-linux-sles9-x86_64-prefork.so . I am assuming that is the correct connector. Then I renamed it to mod_jk.so. I tried two things: (A) Installation procedure-1 Followed guide from http://www.sitepoint.com/article/jsp-quick-start-guide-linux/4 with mod_jk.so in to /usr/lib/apache2/ directory. (B) Installation procedure-2 Followed guide from http://tomcat.apache.org/connectors-doc/howto/apache.html with mode_jk.so in /usr/lib/apache2/ directory. In both procedures, I get following error: Syntax error on line 4 of /usr/local/tomcat/conf/auto/mod_jk.conf: Cannot load /usr/lib/apache2/mod_jk.so into server: /usr/lib/apache2/mod_jk.so: cannot open shared object file: No such file or directory I verified that I have file on that location and file has proper access (chmod) attributes. I have tried above procedure with the directory /usr/lib/apache2-prefork directory. Same thing was repeated. I am very new to tomcat and apache configuration esp. mod_jk. This is first time I am installing mod_jk. I have seen it getting installed by my friends earlier (1-2 years ago). I showed the error to them. But they dont have any clue. They didnt do such things recently. I tried to search help on web and but could not find proper answer. Please help me solving this error. Thank you very much for your help. Regards, Dhaval __ Yahoo! FareChase: Search multiple travel sites in one click. http://farechase.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Yahoo! Mail - PC Magazine Editors' Choice 2005 http://mail.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]