Re: Tomcat with IIS
18 Dec 2023 05:31:24 Mohammed Ramadan Ghallab : Hello I’m using tomcat and I want to create a virtual directory but I can’t do that if it isn’t possible can you please tell me how to integrate tomcat with IIS https://tomcat.apache.org/connectors-doc/webserver_howto/iis.html Tested and confirmed working with all currently supported (by Microsoft) versions of Windows. And probably working with a lot of the out of support versions too. Mark - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Tomcat with IIS
Hello I’m using tomcat and I want to create a virtual directory but I can’t do that if it isn’t possible can you please tell me how to integrate tomcat with IIS thank you ***DISCLAIMER* This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed to.If you are not the intended recipient, please notify the sender immediately by e-mail and delete this e-mail from your system. You are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited. Statement and opinions expressed in this email are those of the sender, and do not necessarily reflect those of Al Ain City Municipality. The recipient should check this email and any attachments for the presence of viruses. Al Ain City Municipality and the sender accept no liability for any damage caused by any virus transmitted by this email.
Re: Tomcat behind IIS on windows 2012
On 2018-03-02 20:59, rich...@xentu.com wrote: If I want to have IIS act as an intermediary between Tomcat and the outside world, if I've understood it correctly, there seem to be two choices. Either add something called HttpPlatformHandler into IIS https://www.iis.net/downloads/microsoft/httpplatformhandler or, use the Apache Tomcat Connectors https://archive.apache.org/dist/tomcat/tomcat-connectors/jk/binaries/win64/jk-1.2.30/ia64/ Is either considered best practice, to be preferred over the other? Regards Richard ps: I posted this same question over at javaranch a week or so back, but with no responses as yet. I'll copy any answer here over to that forum. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org Mark & Andre, Thank you for your responses. Useful. Regards Richard - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Tomcat behind IIS on windows 2012
On 05.03.2018 14:21, Mark Thomas wrote: On 02/03/18 20:59, rich...@xentu.com wrote: If I want to have IIS act as an intermediary between Tomcat and the outside world, if I've understood it correctly, there seem to be two choices. Either add something called HttpPlatformHandler into IIS https://www.iis.net/downloads/microsoft/httpplatformhandler or, use the Apache Tomcat Connectors https://archive.apache.org/dist/tomcat/tomcat-connectors/jk/binaries/win64/jk-1.2.30/ia64/ That is the Itanium build. Are you sure that is the version you want? Also, 1.2.30 is 8+ years old. The latest version is 1.2.42 (with 1.2.43 currently being voted on for release). Get the latest version from: https://tomcat.apache.org/download-connectors.cgi Is either considered best practice, to be preferred over the other? I've never used HttpPlatformHandler so it is hard to comment. This community is more likely to be able to support the ISAPI redirector (the IIS component of Tomcat Connectors). Generally it looks as if the pros/cons of HTTP proxy vs AJP proxy would apply. Which usually boils down to: - if you want to proxy over a TLS connection use an HTTP proxy - else if you want to expose client info to the back-end easily use AJP - else choose whichever you are more familiar / comfortable with A difference may also be, if you intend/plan/foresee to have some day multiple Tomcats sharing the load between them, as a cluster. The Isapi/AJP redirector can work as a load-balancer in such a case. The HttpPlatformHandler (which I have also never used/looked at) may also be able to do that, or not. A little graphic often helps : browser <--(1)--> webserver front-end <--(3)--> Tomcat + (4) + proxy/redirector module (2) In the absolute : (1) can be a HTTP or HTTPS connection (2) can be Apache httpd, IIS, or any webserver (3) can be a HTTP, HTTPS or AJP connection (AJP is a different protocol than HTTP/S, but it can carry the same information back and forth, only in a different format. AJP is not encrypted.) (4) the that you configure in Tomcat, must match the protocol used for (3) To connect the front-end webserver with a Tomcat back-end via AJP, you MUST use a specific proxy/redirector module at the front-end level : - if the front-end is IIS, you must use the "Isapi redirector" (available from the Tomcat website under "Connectors") - if the front-end is Apache httpd, you can use either mod_proxy_ajp (available from the Apache httpd website) or mod_jk (available from the Tomcat website) To connect the front-end webserver with a Tomcat back-end via either HTTP or HTTPS, you can use any front-end proxy module capable of doing HTTP or HTTPS. Under IIS, this could be HttpPlatformHandler (I guess). Under Apache httpd, this could be mod_proxy_http. Performance-wise, there is probably nowadays not a very big difference between the various options. The AJP connection is probably a bit more tricky to set up and configure, but it provides a number of options which the HTTP(S) connection do not provide (or not as readily). An AJP connection is not encrypted, which means that in theory someone could listen in the middle and know what is being exchanged. But if the connection between the front-end and the back-end is relatively private (such as when both run on the same host), it probably does not matter. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Tomcat behind IIS on windows 2012
On 02/03/18 20:59, rich...@xentu.com wrote: > If I want to have IIS act as an intermediary between Tomcat and the > outside world, if I've understood it correctly, there seem to be two > choices. > > Either add something called HttpPlatformHandler into IIS > > https://www.iis.net/downloads/microsoft/httpplatformhandler > > or, use the Apache Tomcat Connectors > > https://archive.apache.org/dist/tomcat/tomcat-connectors/jk/binaries/win64/jk-1.2.30/ia64/ That is the Itanium build. Are you sure that is the version you want? Also, 1.2.30 is 8+ years old. The latest version is 1.2.42 (with 1.2.43 currently being voted on for release). Get the latest version from: https://tomcat.apache.org/download-connectors.cgi > Is either considered best practice, to be preferred over the other? I've never used HttpPlatformHandler so it is hard to comment. This community is more likely to be able to support the ISAPI redirector (the IIS component of Tomcat Connectors). Generally it looks as if the pros/cons of HTTP proxy vs AJP proxy would apply. Which usually boils down to: - if you want to proxy over a TLS connection use an HTTP proxy - else if you want to expose client info to the back-end easily use AJP - else choose whichever you are more familiar / comfortable with Mark - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Tomcat behind IIS on windows 2012
If I want to have IIS act as an intermediary between Tomcat and the outside world, if I've understood it correctly, there seem to be two choices. Either add something called HttpPlatformHandler into IIS https://www.iis.net/downloads/microsoft/httpplatformhandler or, use the Apache Tomcat Connectors https://archive.apache.org/dist/tomcat/tomcat-connectors/jk/binaries/win64/jk-1.2.30/ia64/ Is either considered best practice, to be preferred over the other? Regards Richard ps: I posted this same question over at javaranch a week or so back, but with no responses as yet. I'll copy any answer here over to that forum. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Tomcat vs IIS download speed - configuration suggestions?
On 10 Jan 2013, at 20:20, Daniel Mikusa dmik...@vmware.com wrote: On Jan 10, 2013, at 3:10 PM, Linoma DevTeam wrote: Thank you everyone for the responses/suggestions. I did ensure that those were the same during the tests, but had removed that from the server.xml before sending. Both servers had negotiated the equivalent of TLS_RSA_WITH_AES_128_CBC_SHA with the client during testing. Also, i've verified the JVM is in server mode, and I'm currently using 1.6.0_14. This is pretty old, you might also try the latest 1.6.0_x release and/or the latest 17.0_x release. Those could have some performance improvements which would narrow the gap. +1 Don't underestimate the impact of that. p Dan At times i can hit increased speeds of 10.8MB/s for IIS (about as fast as this server's network card can handle), with tomcat running close to 7.8 MB/s. (I'm just thinking out loud here) Assuming this is a normal difference with tomcat running at 72% the speed of IIS, and if the system was congested to the point of slowing down the downloads from the servers, then I would expect tomcat to run at 2.5 MB/s if IIS was serving files at 3.5 MB/s. It however looks like tomcat is serving data at a consistent 3.0 MB/s slower than IIS (not percentage based), which is why i saw 350 KB/s against the 3.5 MB/s from IIS? Anyway, I will try the APR connector and let you know. Thanks again for your comments! On Thu, Jan 10, 2013 at 8:31 AM, David kerber dcker...@verizon.net wrote: On 1/10/2013 8:56 AM, Linoma DevTeam wrote: Hi everyone, I'm running some comparison tests with tomcat 6.0.35 and IIS running in parallel on Windows Server 2008 R2. Now I would expect Tomcat to be somewhat slower, given the extra JVM layer, but in some situations, i'm seeing differences that are tough to swallow. What JVM are you running under? Is it running the client or server version? I've found huge performance improvements in some kind of operations under a server JVM compared to client ones. D Downloads IIS ~3.7 MB/s Tomcat ~350 KB/s Test Details: I placed a ~500MB file in the document root of the web app on tomcat and set up an HTTPS connector. Then I set up IIS with the same file and an HTTPS listener. I configured the cipher suite in tomcat to be the same one that was negotiated between IIS and my Chrome browser. Finally, I set the JVM max memory to 1024MB with a min of 900MB to reduce the impact of the GC and the memory allocation. I'm using HTTP/1.1 connectors with pretty standard configuration: Server port=9005 shutdown=SHUTDOWN Service name=admin Connector port=9080 / Connector port=9443 protocol=HTTP/1.1 SSLEnabled=true enableLookups=false disableUploadTimeout=true scheme=https secure=true clientAuth=false sslProtocol=TLS algorithm=SunX509 keystoreFile=C:\temp\sample_**keystore.jks keystorePass=password keyAlias=sample-key keystoreType=JKS truststoreFile=C:\temp\**sample_truststore.jks truststorePass=password truststoreType=JKS / Engine name=admin defaultHost=localhost Host name=localhost appBase=webapps errorReportValveClass=com.**company.**CustomErrorReportValve Context path=/sample docBase=C:\temp\application\**WebRoot reloadable=false Loader delegate=true / /Context /Host /Engine /Service /Server So, I extend the question of, why would tomcat only be able to reach 10% of the speed IIS is able to server when running parallel tests? Any suggestions on configurations that I could adjust on Tomcat, the JVM, or operating system that improve that download speed? Thanks in advance! --**--**- To unsubscribe, e-mail: users-unsubscribe@tomcat.**apache.orgusers-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Tomcat vs IIS download speed - configuration suggestions?
On 1/10/2013 8:56 AM, Linoma DevTeam wrote: Hi everyone, I'm running some comparison tests with tomcat 6.0.35 and IIS running in parallel on Windows Server 2008 R2. Now I would expect Tomcat to be somewhat slower, given the extra JVM layer, but in some situations, i'm seeing differences that are tough to swallow. Are you using tcnative? Downloads IIS ~3.7 MB/s Tomcat ~350 KB/s Test Details: I placed a ~500MB file in the document root of the web app on tomcat and set up an HTTPS connector. Then I set up IIS with the same file and an HTTPS listener. I configured the cipher suite in tomcat to be the same one that was negotiated between IIS and my Chrome browser. Finally, I set the JVM max memory to 1024MB with a min of 900MB to reduce the impact of the GC and the memory allocation. I'm using HTTP/1.1 connectors with pretty standard configuration: Server port=9005 shutdown=SHUTDOWN Service name=admin Connector port=9080 / Connector port=9443 protocol=HTTP/1.1 SSLEnabled=true enableLookups=false disableUploadTimeout=true scheme=https secure=true clientAuth=false sslProtocol=TLS algorithm=SunX509 keystoreFile=C:\temp\sample_keystore.jks keystorePass=password keyAlias=sample-key keystoreType=JKS truststoreFile=C:\temp\sample_truststore.jks truststorePass=password truststoreType=JKS / Engine name=admin defaultHost=localhost Host name=localhost appBase=webapps errorReportValveClass=com.company.CustomErrorReportValve Context path=/sample docBase=C:\temp\application\WebRoot reloadable=false Loader delegate=true / /Context /Host /Engine /Service /Server So, I extend the question of, why would tomcat only be able to reach 10% of the speed IIS is able to server when running parallel tests? Any suggestions on configurations that I could adjust on Tomcat, the JVM, or operating system that improve that download speed? Thanks in advance! - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Tomcat vs IIS download speed - configuration suggestions?
On 10/01/2013 14:02, David kerber wrote: On 1/10/2013 8:56 AM, Linoma DevTeam wrote: Hi everyone, I'm running some comparison tests with tomcat 6.0.35 and IIS running in parallel on Windows Server 2008 R2. Now I would expect Tomcat to be somewhat slower, given the extra JVM layer, but in some situations, i'm seeing differences that are tough to swallow. Are you using tcnative? Clearly not from the configuration information below. Switching to the APR/native connector is the obvious first step to try. After that, check that the same / comparable encryption algorithms are being used. Mark Downloads IIS ~3.7 MB/s Tomcat ~350 KB/s Test Details: I placed a ~500MB file in the document root of the web app on tomcat and set up an HTTPS connector. Then I set up IIS with the same file and an HTTPS listener. I configured the cipher suite in tomcat to be the same one that was negotiated between IIS and my Chrome browser. Finally, I set the JVM max memory to 1024MB with a min of 900MB to reduce the impact of the GC and the memory allocation. I'm using HTTP/1.1 connectors with pretty standard configuration: Server port=9005 shutdown=SHUTDOWN Service name=admin Connector port=9080 / Connector port=9443 protocol=HTTP/1.1 SSLEnabled=true enableLookups=false disableUploadTimeout=true scheme=https secure=true clientAuth=false sslProtocol=TLS algorithm=SunX509 keystoreFile=C:\temp\sample_keystore.jks keystorePass=password keyAlias=sample-key keystoreType=JKS truststoreFile=C:\temp\sample_truststore.jks truststorePass=password truststoreType=JKS / Engine name=admin defaultHost=localhost Host name=localhost appBase=webapps errorReportValveClass=com.company.CustomErrorReportValve Context path=/sample docBase=C:\temp\application\WebRoot reloadable=false Loader delegate=true / /Context /Host /Engine /Service /Server So, I extend the question of, why would tomcat only be able to reach 10% of the speed IIS is able to server when running parallel tests? Any suggestions on configurations that I could adjust on Tomcat, the JVM, or operating system that improve that download speed? Thanks in advance! - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Tomcat vs IIS download speed - configuration suggestions?
2013/1/10 Linoma DevTeam linoma...@gmail.com: Hi everyone, I'm running some comparison tests with tomcat 6.0.35 and IIS running in parallel on Windows Server 2008 R2. Now I would expect Tomcat to be somewhat slower, given the extra JVM layer, but in some situations, i'm seeing differences that are tough to swallow. Downloads IIS ~3.7 MB/s Tomcat ~350 KB/s Test Details: I placed a ~500MB file in the document root of the web app on tomcat and set up an HTTPS connector. Then I set up IIS with the same file and an HTTPS listener. I configured the cipher suite in tomcat to be the same one that was negotiated between IIS and my Chrome browser. Really? I do not see any cipher configuration in your configuration below. (...) I'm using HTTP/1.1 connectors with pretty standard configuration: Server port=9005 shutdown=SHUTDOWN Service name=admin Connector port=9080 / Connector port=9443 protocol=HTTP/1.1 SSLEnabled=true enableLookups=false disableUploadTimeout=true scheme=https secure=true clientAuth=false sslProtocol=TLS algorithm=SunX509 keystoreFile=C:\temp\sample_keystore.jks keystorePass=password keyAlias=sample-key keystoreType=JKS truststoreFile=C:\temp\sample_truststore.jks truststorePass=password truststoreType=JKS / Engine name=admin defaultHost=localhost Host name=localhost appBase=webapps errorReportValveClass=com.company.CustomErrorReportValve Context path=/sample docBase=C:\temp\application\WebRoot reloadable=false Loader delegate=true / /Context /Host /Engine /Service /Server - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Tomcat vs IIS download speed - configuration suggestions?
On 1/10/2013 8:56 AM, Linoma DevTeam wrote: Hi everyone, I'm running some comparison tests with tomcat 6.0.35 and IIS running in parallel on Windows Server 2008 R2. Now I would expect Tomcat to be somewhat slower, given the extra JVM layer, but in some situations, i'm seeing differences that are tough to swallow. What JVM are you running under? Is it running the client or server version? I've found huge performance improvements in some kind of operations under a server JVM compared to client ones. D Downloads IIS ~3.7 MB/s Tomcat ~350 KB/s Test Details: I placed a ~500MB file in the document root of the web app on tomcat and set up an HTTPS connector. Then I set up IIS with the same file and an HTTPS listener. I configured the cipher suite in tomcat to be the same one that was negotiated between IIS and my Chrome browser. Finally, I set the JVM max memory to 1024MB with a min of 900MB to reduce the impact of the GC and the memory allocation. I'm using HTTP/1.1 connectors with pretty standard configuration: Server port=9005 shutdown=SHUTDOWN Service name=admin Connector port=9080 / Connector port=9443 protocol=HTTP/1.1 SSLEnabled=true enableLookups=false disableUploadTimeout=true scheme=https secure=true clientAuth=false sslProtocol=TLS algorithm=SunX509 keystoreFile=C:\temp\sample_keystore.jks keystorePass=password keyAlias=sample-key keystoreType=JKS truststoreFile=C:\temp\sample_truststore.jks truststorePass=password truststoreType=JKS / Engine name=admin defaultHost=localhost Host name=localhost appBase=webapps errorReportValveClass=com.company.CustomErrorReportValve Context path=/sample docBase=C:\temp\application\WebRoot reloadable=false Loader delegate=true / /Context /Host /Engine /Service /Server So, I extend the question of, why would tomcat only be able to reach 10% of the speed IIS is able to server when running parallel tests? Any suggestions on configurations that I could adjust on Tomcat, the JVM, or operating system that improve that download speed? Thanks in advance! - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Tomcat vs IIS download speed - configuration suggestions?
On Thu, Jan 10, 2013 at 9:31 AM, David kerber dcker...@verizon.net wrote: On 1/10/2013 8:56 AM, Linoma DevTeam wrote: Hi everyone, I'm running some comparison tests with tomcat 6.0.35 and IIS running in parallel on Windows Server 2008 R2. Now I would expect Tomcat to be somewhat slower, given the extra JVM layer, but in some situations, i'm seeing differences that are tough to swallow. What JVM are you running under? Is it running the client or server version? I've found huge performance improvements in some kind of operations under a server JVM compared to client ones. Interesting response. My environment is almost the same as Linoma, but right now, my JSF web application is running on Windows Server 2003 32bit 4GB RAM and TomEE 1.5.2 SNAPSHOT (Tomcat 7.0.34). I am quite/very satisfied/pleased with the performance of the app (have no complaints at all), but I do like having the best performance possible, so David's response caused me to do some research (via google and stackoverflow.com) on this 'server JVM' topic. No changes made (yet), but this 'server JVM' is good to know. Thanks!
Re: Tomcat vs IIS download speed - configuration suggestions?
Thank you everyone for the responses/suggestions. I did ensure that those were the same during the tests, but had removed that from the server.xml before sending. Both servers had negotiated the equivalent of TLS_RSA_WITH_AES_128_CBC_SHA with the client during testing. Also, i've verified the JVM is in server mode, and I'm currently using 1.6.0_14. At times i can hit increased speeds of 10.8MB/s for IIS (about as fast as this server's network card can handle), with tomcat running close to 7.8 MB/s. (I'm just thinking out loud here) Assuming this is a normal difference with tomcat running at 72% the speed of IIS, and if the system was congested to the point of slowing down the downloads from the servers, then I would expect tomcat to run at 2.5 MB/s if IIS was serving files at 3.5 MB/s. It however looks like tomcat is serving data at a consistent 3.0 MB/s slower than IIS (not percentage based), which is why i saw 350 KB/s against the 3.5 MB/s from IIS? Anyway, I will try the APR connector and let you know. Thanks again for your comments! On Thu, Jan 10, 2013 at 8:31 AM, David kerber dcker...@verizon.net wrote: On 1/10/2013 8:56 AM, Linoma DevTeam wrote: Hi everyone, I'm running some comparison tests with tomcat 6.0.35 and IIS running in parallel on Windows Server 2008 R2. Now I would expect Tomcat to be somewhat slower, given the extra JVM layer, but in some situations, i'm seeing differences that are tough to swallow. What JVM are you running under? Is it running the client or server version? I've found huge performance improvements in some kind of operations under a server JVM compared to client ones. D Downloads IIS ~3.7 MB/s Tomcat ~350 KB/s Test Details: I placed a ~500MB file in the document root of the web app on tomcat and set up an HTTPS connector. Then I set up IIS with the same file and an HTTPS listener. I configured the cipher suite in tomcat to be the same one that was negotiated between IIS and my Chrome browser. Finally, I set the JVM max memory to 1024MB with a min of 900MB to reduce the impact of the GC and the memory allocation. I'm using HTTP/1.1 connectors with pretty standard configuration: Server port=9005 shutdown=SHUTDOWN Service name=admin Connector port=9080 / Connector port=9443 protocol=HTTP/1.1 SSLEnabled=true enableLookups=false disableUploadTimeout=true scheme=https secure=true clientAuth=false sslProtocol=TLS algorithm=SunX509 keystoreFile=C:\temp\sample_**keystore.jks keystorePass=password keyAlias=sample-key keystoreType=JKS truststoreFile=C:\temp\**sample_truststore.jks truststorePass=password truststoreType=JKS / Engine name=admin defaultHost=localhost Host name=localhost appBase=webapps errorReportValveClass=com.**company.**CustomErrorReportValve Context path=/sample docBase=C:\temp\application\**WebRoot reloadable=false Loader delegate=true / /Context /Host /Engine /Service /Server So, I extend the question of, why would tomcat only be able to reach 10% of the speed IIS is able to server when running parallel tests? Any suggestions on configurations that I could adjust on Tomcat, the JVM, or operating system that improve that download speed? Thanks in advance! --**--**- To unsubscribe, e-mail: users-unsubscribe@tomcat.**apache.orgusers-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Tomcat vs IIS download speed - configuration suggestions?
On Jan 10, 2013, at 3:10 PM, Linoma DevTeam wrote: Thank you everyone for the responses/suggestions. I did ensure that those were the same during the tests, but had removed that from the server.xml before sending. Both servers had negotiated the equivalent of TLS_RSA_WITH_AES_128_CBC_SHA with the client during testing. Also, i've verified the JVM is in server mode, and I'm currently using 1.6.0_14. This is pretty old, you might also try the latest 1.6.0_x release and/or the latest 17.0_x release. Those could have some performance improvements which would narrow the gap. Dan At times i can hit increased speeds of 10.8MB/s for IIS (about as fast as this server's network card can handle), with tomcat running close to 7.8 MB/s. (I'm just thinking out loud here) Assuming this is a normal difference with tomcat running at 72% the speed of IIS, and if the system was congested to the point of slowing down the downloads from the servers, then I would expect tomcat to run at 2.5 MB/s if IIS was serving files at 3.5 MB/s. It however looks like tomcat is serving data at a consistent 3.0 MB/s slower than IIS (not percentage based), which is why i saw 350 KB/s against the 3.5 MB/s from IIS? Anyway, I will try the APR connector and let you know. Thanks again for your comments! On Thu, Jan 10, 2013 at 8:31 AM, David kerber dcker...@verizon.net wrote: On 1/10/2013 8:56 AM, Linoma DevTeam wrote: Hi everyone, I'm running some comparison tests with tomcat 6.0.35 and IIS running in parallel on Windows Server 2008 R2. Now I would expect Tomcat to be somewhat slower, given the extra JVM layer, but in some situations, i'm seeing differences that are tough to swallow. What JVM are you running under? Is it running the client or server version? I've found huge performance improvements in some kind of operations under a server JVM compared to client ones. D Downloads IIS ~3.7 MB/s Tomcat ~350 KB/s Test Details: I placed a ~500MB file in the document root of the web app on tomcat and set up an HTTPS connector. Then I set up IIS with the same file and an HTTPS listener. I configured the cipher suite in tomcat to be the same one that was negotiated between IIS and my Chrome browser. Finally, I set the JVM max memory to 1024MB with a min of 900MB to reduce the impact of the GC and the memory allocation. I'm using HTTP/1.1 connectors with pretty standard configuration: Server port=9005 shutdown=SHUTDOWN Service name=admin Connector port=9080 / Connector port=9443 protocol=HTTP/1.1 SSLEnabled=true enableLookups=false disableUploadTimeout=true scheme=https secure=true clientAuth=false sslProtocol=TLS algorithm=SunX509 keystoreFile=C:\temp\sample_**keystore.jks keystorePass=password keyAlias=sample-key keystoreType=JKS truststoreFile=C:\temp\**sample_truststore.jks truststorePass=password truststoreType=JKS / Engine name=admin defaultHost=localhost Host name=localhost appBase=webapps errorReportValveClass=com.**company.**CustomErrorReportValve Context path=/sample docBase=C:\temp\application\**WebRoot reloadable=false Loader delegate=true / /Context /Host /Engine /Service /Server So, I extend the question of, why would tomcat only be able to reach 10% of the speed IIS is able to server when running parallel tests? Any suggestions on configurations that I could adjust on Tomcat, the JVM, or operating system that improve that download speed? Thanks in advance! --**--**- To unsubscribe, e-mail: users-unsubscribe@tomcat.**apache.orgusers-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
: setting tomcat in iis
Hi everyone, I think there was a guide that explain how to set tomcat 6 with IIS but iv seem to lost the link, does anyone have it? Thanks Ricardo Simões Description: C:\Users\Ricardo\AppData\Roaming\Microsoft\Stationery\logo.gif Coimbra Coordinating Centre for Clinical Research AIBILI - Association for Innovation and Biomedical Research on Light and Image Azinhaga de Santa Comba, Celas . 3000-548 Coimbra . Portugal Tel: +351 239 480 141 Fax: +351 239 480 117 E-mail: rsim...@aibili.pt Url: www.aibili.pt Este e-mail e todos os arquivos anexos são confidenciais e deverão ser lidos unicamente pelo indivíduo ou entidade a quem são dirigidos. Se não for o receptor original, todo o uso, disseminação, reenvio, impressão, ou cópia deste e-mail é estritamente proibido. Se receber este e-mail por engano, notifique por favor o remetente. This e-mail and any files transmitted with it are confidential and are intended solely for the use of the individual or entity to which they are addressed. If you are not the original recipient, any use, dissemination, forwarding, printing, or copying of this e-mail is strictly prohibited. If you received this e-mail in error, please notify the originator.
Re: : setting tomcat in iis
http://lmgtfy.com/?q=tomcat+6+iis Med venlig hilsen/Kind regards Casper W. Schmidt Den 05-07-2012 14:48, Ricardo Simões skrev: Hi everyone, I think there was a guide that explain how to set tomcat 6 with IIS but iv seem to lost the link, does anyone have it? Thanks Ricardo Simões Description: C:\Users\Ricardo\AppData\Roaming\Microsoft\Stationery\logo.gif /Coimbra Coordinating Centre for Clinical Research AIBILI - Association for Innovation and Biomedical Research on Light and I//mage Azinhaga de Santa Comba, Celas . 3000-548 Coimbra . Portugal/ Tel:/+351 239 480 141/ Fax:/+351 239 480 117/ E-mail: /rsim...@aibili.pt/ Url: /www.aibili.pt www.aibili.pt/4c_about.php/ Este e-mail e todos os arquivos anexos são confidenciais e deverão ser lidos unicamente pelo indivíduo ou entidade a quem são dirigidos. Se não for o receptor original, todo o uso, disseminação, reenvio, impressão, ou cópia deste e-mail é estritamente proibido. Se receber este e-mail por engano, notifique por favor o remetente. This e-mail and any files transmitted with it are confidential and are intended solely for the use of the individual or entity to which they are addressed. If you are not the original recipient, any use, dissemination, forwarding, printing, or copying of this e-mail is strictly prohibited. If you received this e-mail in error, please notify the originator.
RE: : setting tomcat in iis
Thanks, I've done a previous search but couldn't find what I was looking. Also I explain my self badly I need to use openclinica that runs in Tomcat and I'm installing it on a windows server 2008 r2 with iis7, iv installed tomcat and it works great with iis closed, I've tried some of the configurations on the web they dont seem to work. Isn't there a way that I would create a website and point it to tomcat statup? thanks -Original Message- From: Casper Wandahl Schmidt [mailto:kalle.pri...@gmail.com] Sent: quinta-feira, 5 de Julho de 2012 13:52 To: users@tomcat.apache.org Subject: Re: : setting tomcat in iis http://lmgtfy.com/?q=tomcat+6+iis Med venlig hilsen/Kind regards Casper W. Schmidt Den 05-07-2012 14:48, Ricardo Simões skrev: Hi everyone, I think there was a guide that explain how to set tomcat 6 with IIS but iv seem to lost the link, does anyone have it? Thanks Ricardo Simões Description: C:\Users\Ricardo\AppData\Roaming\Microsoft\Stationery\logo.gif /Coimbra Coordinating Centre for Clinical Research AIBILI - Association for Innovation and Biomedical Research on Light and I//mage Azinhaga de Santa Comba, Celas . 3000-548 Coimbra . Portugal/ Tel:/+351 239 480 141/ Fax:/+351 239 480 117/ E-mail: /rsim...@aibili.pt/ Url: /www.aibili.pt www.aibili.pt/4c_about.php/ Este e-mail e todos os arquivos anexos são confidenciais e deverão ser lidos unicamente pelo indivíduo ou entidade a quem são dirigidos. Se não for o receptor original, todo o uso, disseminação, reenvio, impressão, ou cópia deste e-mail é estritamente proibido. Se receber este e-mail por engano, notifique por favor o remetente. This e-mail and any files transmitted with it are confidential and are intended solely for the use of the individual or entity to which they are addressed. If you are not the original recipient, any use, dissemination, forwarding, printing, or copying of this e-mail is strictly prohibited. If you received this e-mail in error, please notify the originator. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: : setting tomcat in iis
2012/7/5 Ricardo Simões rsim...@aibili.pt: Thanks, I've done a previous search but couldn't find what I was looking. You can limit your search by adding site:tomcat.apache.org See tomcat.apache.org - Documentation - Tomcat Connectors - IIS. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Tomcat 5.5 IIS 7.5 2008 64bit
It is getting 404.0 error. I verified all steps. even added IIS_IUSR to the ISAPI folder. On Mon, Mar 12, 2012 at 3:07 PM, Mladen Turk mt...@apache.org wrote: On 03/12/2012 05:37 PM, Bradford Matthews wrote: Here is my steps that I used to install tomcat isapi connector. 5. EditTomcat-install-folder\conf\server.xml to allow localhost on port 8009 by adding address=127.0.0.1: !-- Define an AJP 1.3 Connector on port 8009 -- Connector port=8009 address=127.0.0.1 enableLookups=false redirectPort=8443 protocol=AJP/1.3 To test the connector: From a supported browser, enter the following URL: https://localhost/tomcat-docs The Apache Tomcat Documentation page is displayed. Requested URL https://localhost:443/docs/ Any suggestions? Seems you are requesting this over ssl so you will probably need to add scheme=https to the AJP/1.3 connector Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Tomcat 5.5 IIS 7.5 2008 64bit
On 03/16/2012 06:15 PM, Bradford Matthews wrote: It is getting 404.0 error. I verified all steps. even added IIS_IUSR to the ISAPI folder. well are you or are you not using http:// or https://? Requested URL https://localhost:443/docs/ Any suggestions? Seems you are requesting this over ssl so you will probably need to add scheme=https to the AJP/1.3connector Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Tomcat 5.5 IIS 7.5 2008 64bit
https. I went and used the 32 bit isapi, downgraded java to 1.5jdk and it now works On Fri, Mar 16, 2012 at 5:21 PM, Mladen Turk mt...@apache.org wrote: On 03/16/2012 06:15 PM, Bradford Matthews wrote: It is getting 404.0 error. I verified all steps. even added IIS_IUSR to the ISAPI folder. well are you or are you not using http:// or https://? Requested URL https://localhost:443/docs/ Any suggestions? Seems you are requesting this over ssl so you will probably need to add scheme=https to the AJP/1.3connector Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Tomcat 5.5 IIS 7.5 2008 64bit
Here is my steps that I used to install tomcat isapi connector. To install Jakarta ISAPI redirector on IIS 7, follow these steps: 1. Under the Tomcat installation folder, for example, create a folder ISAPI 2. Copy isapi_redirect-1.2.28.dll file (or the latest one) to the ISAPI folder from your Tomcat installation folder and rename it to isapi_redirect.dll. 3. Create isapi_redirect.properties file in the same location and type the given lines: #configuration file for the jakarta ISAPI redirector #The path to the ISAPI redirector Extension, relative to the website # This must be in a virtual directory with execute privileges extension_uri=/jakarta/isapi_redirect.dll #Full path to the log file for the ISAPI redirector log_file=C:\Program Files\Apache Software Foundation\Tomcat 5.5\logs\isapi_redirect.log log_level=info worker_file=C:\Program Files\Apache Software Foundation\Tomcat 5.5\conf\workers.properties worker_mount_file=C:\Program Files\Apache Software Foundation\Tomcat 5.5\conf\uriworkermap.properties 4. Under the Tomcat installation folder in conf directory, create workers.properties file and uriworkermap.properties file. For uriworkermap.properties: # uriworkermap.properties - IIS /*=ajp13w For workers.properties: # workers.properties # # This file provides minimal jk configuration properties needed to # connect to Tomcat. # # The workers that jk should create and work with # worker.list=ajp13w,jkstatus # # Defining a worker named ajp13w and of type ajp13 # Note that the name and the type do not have to match. # worker.ajp13w.type=ajp13 worker.ajp13w.host=localhost worker.ajp13w.port=8009 # # Define status worker # worker.jkstatus.type=status 5. Edit Tomcat-install-folder\conf\server.xml to allow localhost on port 8009 by adding address=127.0.0.1: !-- Define an AJP 1.3 Connector on port 8009 -- Connector port=8009 address=127.0.0.1 enableLookups=false redirectPort=8443 protocol=AJP/1.3 6. Open IIS Manager: a. In the left pane, Under Server node Sites Default Web Site select Add Virtual Directory node. b. Type jakarta in the Alias text box.and specify the location of the isapi_redirect.dll file in the Physical path. c. Under Default Web Site, double-click on ISAPI Filters. d. In ISAPI Filters window, right-click and select Add button, give Jakarta as the filter name. e. Click Browse, select the isapi_redirect.dll and click OK. f. Click OK 7. Under Default Host name, Double-click ISAPI CGI Restrictions: a. In the ISAPI and CGI Restrictions window, right-click and select Add. b. Click Browse and select isapi_redirect.dll. c. Provide Jakarta in the Description text box. d. Select Allow extension path to execute option and click OK. 8. Under Default Web Site, select the virtual directory Jakarta: a. In the right pane, double-click Handler Mappings. b. In the Handler Mappings window, right-click and select Edit Features Permissions. c. Select the Execute checkbox and click OK. 9. Stop Tomcat 10. Restart IIS 11. Start Tomcat To test the connector: From a supported browser, enter the following URL: https://localhost/tomcat-docs The Apache Tomcat Documentation page is displayed. Now following this steps I get: Error Summary HTTP Error 500.0 - Internal Server Error The page cannot be displayed because an internal server error has occurred. Detailed Error Information Module IsapiFilterModule NotificationAuthenticateRequest Handler StaticFile Error Code 0x80070001 Requested URL https://localhost:443/docs/ Physical Path C:\inetpub\wwwroot\docs\ Logon MethodAnonymous Logon User Anonymous Any suggestions? - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Tomcat 5.5 IIS 7.5 2008 64bit
On 03/12/2012 05:37 PM, Bradford Matthews wrote: Here is my steps that I used to install tomcat isapi connector. 5. EditTomcat-install-folder\conf\server.xml to allow localhost on port 8009 by adding address=127.0.0.1: !-- Define an AJP 1.3 Connector on port 8009 -- Connector port=8009 address=127.0.0.1 enableLookups=false redirectPort=8443 protocol=AJP/1.3 To test the connector: From a supported browser, enter the following URL: https://localhost/tomcat-docs The Apache Tomcat Documentation page is displayed. Requested URL https://localhost:443/docs/ Any suggestions? Seems you are requesting this over ssl so you will probably need to add scheme=https to the AJP/1.3 connector Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Tomcat 6.0.18/ IIS 6.0 /SSL
Significant would mean that I notice how slow the page loads (painfully - 10 to 20 times longer) compared to hitting the web application on 8080. I had ServletExec AS running on our server and did not experience these issues. We are required to use Single Sign On when accessing web applications from our secure web server. Has anyone successfully configured Tomcat-IIS that is using a secure web server? -Original Message- From: André Warnier [mailto:a...@ice-sa.com] Sent: Monday, August 09, 2010 6:30 PM To: Tomcat Users List Subject: Re: Tomcat 6.0.18/ IIS 6.0 /SSL Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 wrote: Chuck, I was able to get everything working on my end. There is a *significant* performance decrease when running my application through IIS and Tomcat using the isapi_redirect.dll, as opposed to port 8080. No way to know what you mean by significant, but from the tone of it I guess you mean humanly perceptible. In that case, it is not normal. The overhead introduced by isapi_redirect itself may be in the order of the millisecond. Are you sure that the extra delay is not due to something happening in IIS, like the user authentication e.g. ? - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org smime.p7s Description: S/MIME cryptographic signature
RE: Tomcat 6.0.18/ IIS 6.0 /SSL
Rainer, I've gone through the install of 6.0.28, I can successfully launch my webapp from localhost. When I try accessing using the AJP/1.3, I am getting HTTP:404 errors The page cannot be found. I have not seen error messages in my isapi_redirect.log, any help would be great. Seems as though the application is not even being seen as a valid URL when trying to hit on port 8009, eventhough it's listening. -Original Message- From: Rainer Jung [mailto:rainer.j...@kippdata.de] Sent: Friday, August 06, 2010 2:39 PM To: Tomcat Users List Subject: Re: Tomcat 6.0.18/ IIS 6.0 /SSL Just in case you didn't yet realize: the changelog is public: http://tomcat.apache.org/tomcat-6.0-doc/changelog.html 6.0.29 has only 5 changes that were relevant for the changelog. Three of them link to an issue that can be viewed publicly, one is a pure enhancement, and the one fix without a link to bugzilla doesn't even have an issue link, because it wasn't observed as a problem in the wild. It is not to hard to check the three issue links to get a better basis for your decision of using 6.0.28 instead of 6.0.29 and to recognize faster in cse you run into one of the few fixed problems. Regards, Rainer On 06.08.2010 17:56, Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 wrote: Chuck, Besides the latest version, is there one that you recommend? -Original Message- From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] Sent: Friday, August 06, 2010 11:50 AM To: Tomcat Users List Subject: RE: Tomcat 6.0.18/ IIS 6.0 /SSL From: Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 [mailto:jason.t.hansel@navy.mil] Subject: RE: Tomcat 6.0.18/ IIS 6.0 /SSL Well good news, 6.0.28 was JUST approved...WooHOO!!! There was one regression in 6.0.28 that you should be aware of: https://issues.apache.org/bugzilla/show_bug.cgi?id=49598 Its existence prompted the rapid release of 6.0.29, where the problem is fixed. - Chuck - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org smime.p7s Description: S/MIME cryptographic signature
RE: Tomcat 6.0.18/ IIS 6.0 /SSL
Chuck, I was able to get everything working on my end. There is a *significant* performance decrease when running my application through IIS and Tomcat using the isapi_redirect.dll, as opposed to port 8080. -Original Message- From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] Sent: Friday, August 06, 2010 11:50 AM To: Tomcat Users List Subject: RE: Tomcat 6.0.18/ IIS 6.0 /SSL From: Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 [mailto:jason.t.hansel@navy.mil] Subject: RE: Tomcat 6.0.18/ IIS 6.0 /SSL Well good news, 6.0.28 was JUST approved...WooHOO!!! There was one regression in 6.0.28 that you should be aware of: https://issues.apache.org/bugzilla/show_bug.cgi?id=49598 Its existence prompted the rapid release of 6.0.29, where the problem is fixed. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org smime.p7s Description: S/MIME cryptographic signature
Re: Tomcat 6.0.18/ IIS 6.0 /SSL
Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 wrote: Chuck, I was able to get everything working on my end. There is a *significant* performance decrease when running my application through IIS and Tomcat using the isapi_redirect.dll, as opposed to port 8080. No way to know what you mean by significant, but from the tone of it I guess you mean humanly perceptible. In that case, it is not normal. The overhead introduced by isapi_redirect itself may be in the order of the millisecond. Are you sure that the extra delay is not due to something happening in IIS, like the user authentication e.g. ? - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Tomcat 6.0.18/ IIS 6.0 /SSL
Andre, Thanks for all of the help and literature. When I tried to launch my application today, I'm getting a 404 error. At This point I am going to uninstall, per you recommendation and reinstall. Question for you: Would it be better to install the 32-bit if our IIS is running as 32-bit? I did this with the isapi_redirect.dll -Original Message- From: André Warnier [mailto:a...@ice-sa.com] Sent: Thursday, August 05, 2010 5:36 PM To: Tomcat Users List Subject: Re: Tomcat 6.0.18/ IIS 6.0 /SSL Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 wrote: Charles, I was just putting that protocol in there to prevent the 8080 from being hit, I've actually commented it out. I got this server.xml file from the install (Note:that not everything is on here). I can load my webapp now, but the page takes a little while to load using the isapi_redirect.dll (which I was referring to below as the redirect file...sorry my in head language) I believe that at this point, you may want to : a) save your web application somewhere else; also save the isapi configuration files if they are located under the Tomcat installation directory. (*) b) de-install the Tomcat you have, and remove all its files (and specially the logfiles) c) download a new Tomcat from the Tomcat website, and re-install it Then restore your application under (tomcat_install_dir)/webapps. All the above will take only 5 minutes, and you will at least have a clean Tomcat. Then try it, both directly using HTTP to port 8080, and through IIS and isapi_redirect using whatver SSL port you use for that. With the part under IIS (including isapi_redirect) apparently being fine (as shown before by your previous logs), the downloaded Tomcat should work out of the box, through IIS and all. THEN, when you have verified that the above is working, comment out all Connector tags you do not want, except the one for the AJP Connector on port 8009, and restart Tomcat. And check the Tomcat logfiles if you have any problem. Apart from the ones which Chuck mentioned earlier, your pasted server.xml had a couple of additional mistakes which make it really hard for us to figure out what is really going on. (Or it was your cut and paste which was not accurate, but anyway we can't follow what's happening on the base of inaccurate information). In any case, with a correct configuration, the difference in access time between a direct access to Tomcat via HTTP port 8080, and an indirect access through IIS and isapi_redirector, should be so small as to be humanly indistinguishable. (We are talking 1 millisecond or so). Unless it is IIS which for some reason is introducing the delay. (*) This by the way would be illogical, as these files belong really to IIS and its add-on module isapi_redirect.dll, and not to Tomcat. The only part of Tomcat which plays a role here, is the AJP Connector on port 8009. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org smime.p7s Description: S/MIME cryptographic signature
RE: Tomcat 6.0.18/ IIS 6.0 /SSL
From: Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 [mailto:jason.t.hansel@navy.mil] Subject: RE: Tomcat 6.0.18/ IIS 6.0 /SSL Would it be better to install the 32-bit if our IIS is running as 32-bit? Other than the optional APR connector and service wrapper, Tomcat is pure Java and uses the TCP/IP stack to communicate with IIS, so it doesn't matter which you use to with IIS. What does matter is that you install the same modes of APR and service wrapper as the mode of the JVM you have. So if you're using a 64-bit JVM, you must use the 64-bit version of Tomcat. Likewise, if you have a 32-bit JVM, you must use the 32-bit version of Tomcat. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Tomcat 6.0.18/ IIS 6.0 /SSL
Chuck, I am going to install version 6.0.18, are there preferred versions of JVM you recommend, or is the latest and greatest sufficient? Thanks again for your help. -Original Message- From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] Sent: Friday, August 06, 2010 11:07 AM To: Tomcat Users List Subject: RE: Tomcat 6.0.18/ IIS 6.0 /SSL From: Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 [mailto:jason.t.hansel@navy.mil] Subject: RE: Tomcat 6.0.18/ IIS 6.0 /SSL Would it be better to install the 32-bit if our IIS is running as 32-bit? Other than the optional APR connector and service wrapper, Tomcat is pure Java and uses the TCP/IP stack to communicate with IIS, so it doesn't matter which you use to with IIS. What does matter is that you install the same modes of APR and service wrapper as the mode of the JVM you have. So if you're using a 64-bit JVM, you must use the 64-bit version of Tomcat. Likewise, if you have a 32-bit JVM, you must use the 32-bit version of Tomcat. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org smime.p7s Description: S/MIME cryptographic signature
RE: Tomcat 6.0.18/ IIS 6.0 /SSL
From: Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 [mailto:jason.t.hansel@navy.mil] Subject: RE: Tomcat 6.0.18/ IIS 6.0 /SSL I am going to install version 6.0.18 Much better to use 6.0.29 - stay current. are there preferred versions of JVM you recommend 6u21b07 (the latest) seems to be fine. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Tomcat 6.0.18/ IIS 6.0 /SSL
Well I'd like to but 6.0.18 is the most recent version approved on our network. I installed the 6.0.18 version by running the .exe from the Archive. -Original Message- From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] Sent: Friday, August 06, 2010 11:14 AM To: Tomcat Users List Subject: RE: Tomcat 6.0.18/ IIS 6.0 /SSL From: Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 [mailto:jason.t.hansel@navy.mil] Subject: RE: Tomcat 6.0.18/ IIS 6.0 /SSL I am going to install version 6.0.18 Much better to use 6.0.29 - stay current. are there preferred versions of JVM you recommend 6u21b07 (the latest) seems to be fine. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org smime.p7s Description: S/MIME cryptographic signature
RE: Tomcat 6.0.18/ IIS 6.0 /SSL
From: Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 [mailto:jason.t.hansel@navy.mil] Subject: RE: Tomcat 6.0.18/ IIS 6.0 /SSL Well I'd like to but 6.0.18 is the most recent version approved on our network. You might want the powers that be to review the fixes that have gone in over the last two years - including some significant security-related ones. 6.0.18 is rather sadly out of date. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Tomcat 6.0.18/ IIS 6.0 /SSL
I had this same issue at my workplace, and was actually able to strong arm them and force them to let me use 6.0.26! : ) -Original Message- From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] Sent: Friday, August 06, 2010 10:40 AM To: Tomcat Users List Subject: RE: Tomcat 6.0.18/ IIS 6.0 /SSL From: Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 [mailto:jason.t.hansel@navy.mil] Subject: RE: Tomcat 6.0.18/ IIS 6.0 /SSL Well I'd like to but 6.0.18 is the most recent version approved on our network. You might want the powers that be to review the fixes that have gone in over the last two years - including some significant security-related ones. 6.0.18 is rather sadly out of date. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Tomcat 6.0.18/ IIS 6.0 /SSL
Well good news, 6.0.28 was JUST approved...WooHOO!!! -Original Message- From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] Sent: Friday, August 06, 2010 11:40 AM To: Tomcat Users List Subject: RE: Tomcat 6.0.18/ IIS 6.0 /SSL From: Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 [mailto:jason.t.hansel@navy.mil] Subject: RE: Tomcat 6.0.18/ IIS 6.0 /SSL Well I'd like to but 6.0.18 is the most recent version approved on our network. You might want the powers that be to review the fixes that have gone in over the last two years - including some significant security-related ones. 6.0.18 is rather sadly out of date. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org smime.p7s Description: S/MIME cryptographic signature
RE: Tomcat 6.0.18/ IIS 6.0 /SSL
From: Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 [mailto:jason.t.hansel@navy.mil] Subject: RE: Tomcat 6.0.18/ IIS 6.0 /SSL Well good news, 6.0.28 was JUST approved...WooHOO!!! There was one regression in 6.0.28 that you should be aware of: https://issues.apache.org/bugzilla/show_bug.cgi?id=49598 Its existence prompted the rapid release of 6.0.29, where the problem is fixed. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Tomcat 6.0.18/ IIS 6.0 /SSL
Alright! -Original Message- From: Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 [mailto:jason.t.hansel@navy.mil] Sent: Friday, August 06, 2010 10:45 AM To: Tomcat Users List Subject: RE: Tomcat 6.0.18/ IIS 6.0 /SSL Well good news, 6.0.28 was JUST approved...WooHOO!!! -Original Message- From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] Sent: Friday, August 06, 2010 11:40 AM To: Tomcat Users List Subject: RE: Tomcat 6.0.18/ IIS 6.0 /SSL From: Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 [mailto:jason.t.hansel@navy.mil] Subject: RE: Tomcat 6.0.18/ IIS 6.0 /SSL Well I'd like to but 6.0.18 is the most recent version approved on our network. You might want the powers that be to review the fixes that have gone in over the last two years - including some significant security-related ones. 6.0.18 is rather sadly out of date. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Tomcat 6.0.18/ IIS 6.0 /SSL
Chuck, Besides the latest version, is there one that you recommend? -Original Message- From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] Sent: Friday, August 06, 2010 11:50 AM To: Tomcat Users List Subject: RE: Tomcat 6.0.18/ IIS 6.0 /SSL From: Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 [mailto:jason.t.hansel@navy.mil] Subject: RE: Tomcat 6.0.18/ IIS 6.0 /SSL Well good news, 6.0.28 was JUST approved...WooHOO!!! There was one regression in 6.0.28 that you should be aware of: https://issues.apache.org/bugzilla/show_bug.cgi?id=49598 Its existence prompted the rapid release of 6.0.29, where the problem is fixed. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org smime.p7s Description: S/MIME cryptographic signature
Re: Tomcat 6.0.18/ IIS 6.0 /SSL
On 6 Aug 2010, at 16:56, Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 jason.t.hansel@navy.mil wrote: Chuck, Besides the latest version, is there one that you recommend? You want Chuck to recommend a version that has *less* bug fixes than the most recent two? p -Original Message- From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] Sent: Friday, August 06, 2010 11:50 AM To: Tomcat Users List Subject: RE: Tomcat 6.0.18/ IIS 6.0 /SSL From: Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 [mailto:jason.t.hansel@navy.mil] Subject: RE: Tomcat 6.0.18/ IIS 6.0 /SSL Well good news, 6.0.28 was JUST approved...WooHOO!!! There was one regression in 6.0.28 that you should be aware of: https://issues.apache.org/bugzilla/show_bug.cgi?id=49598 Its existence prompted the rapid release of 6.0.29, where the problem is fixed. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Tomcat 6.0.18/ IIS 6.0 /SSL
From: Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 [mailto:jason.t.hansel@navy.mil] Subject: RE: Tomcat 6.0.18/ IIS 6.0 /SSL Besides the latest version, is there one that you recommend? Not really. Many other fixes are in 6.0.28; whether or not the one regression is important to you depends on what your webapp code is doing. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Tomcat 6.0.18/ IIS 6.0 /SSL
Cool, thanks Chuck. I need to provide justification to the powers that be. -Original Message- From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] Sent: Friday, August 06, 2010 12:19 PM To: Tomcat Users List Subject: RE: Tomcat 6.0.18/ IIS 6.0 /SSL From: Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 [mailto:jason.t.hansel@navy.mil] Subject: RE: Tomcat 6.0.18/ IIS 6.0 /SSL Besides the latest version, is there one that you recommend? Not really. Many other fixes are in 6.0.28; whether or not the one regression is important to you depends on what your webapp code is doing. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org smime.p7s Description: S/MIME cryptographic signature
Re: Tomcat 6.0.18/ IIS 6.0 /SSL
Just in case you didn't yet realize: the changelog is public: http://tomcat.apache.org/tomcat-6.0-doc/changelog.html 6.0.29 has only 5 changes that were relevant for the changelog. Three of them link to an issue that can be viewed publicly, one is a pure enhancement, and the one fix without a link to bugzilla doesn't even have an issue link, because it wasn't observed as a problem in the wild. It is not to hard to check the three issue links to get a better basis for your decision of using 6.0.28 instead of 6.0.29 and to recognize faster in cse you run into one of the few fixed problems. Regards, Rainer On 06.08.2010 17:56, Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 wrote: Chuck, Besides the latest version, is there one that you recommend? -Original Message- From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] Sent: Friday, August 06, 2010 11:50 AM To: Tomcat Users List Subject: RE: Tomcat 6.0.18/ IIS 6.0 /SSL From: Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 [mailto:jason.t.hansel@navy.mil] Subject: RE: Tomcat 6.0.18/ IIS 6.0 /SSL Well good news, 6.0.28 was JUST approved...WooHOO!!! There was one regression in 6.0.28 that you should be aware of: https://issues.apache.org/bugzilla/show_bug.cgi?id=49598 Its existence prompted the rapid release of 6.0.29, where the problem is fixed. - Chuck - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Tomcat 6.0.18/ IIS 6.0 /SSL
] jk_ajp_common.c (1585): (worker1) connecting to backend failed. Tomcat is probably not started or is listening on the wrong port (errno=61) [Thu Aug 05 09:12:52.311 2010] [10216:8452] [info] jk_ajp_common.c (2540): (worker1) sending request to tomcat failed (recoverable), because of error during request sending (attempt=2) [Thu Aug 05 09:12:52.327 2010] [10216:8452] [error] jk_ajp_common.c (2559): (worker1) connecting to tomcat failed. [Thu Aug 05 09:12:52.342 2010] [10216:8452] [error] jk_isapi_plugin.c (2195): service() failed with http error 503 [Thu Aug 05 09:12:52.374 2010] [10216:8452] [debug] jk_ajp_common.c (757): (worker1) resetting endpoint with sd = 4294967295 (socket shutdown) [Thu Aug 05 09:12:52.389 2010] [10216:8452] [debug] jk_ajp_common.c (3010): recycling connection pool slot=0 for worker worker1 -Original Message- From: Rainer Jung [mailto:rainer.j...@kippdata.de] Sent: Thursday, August 05, 2010 4:13 AM To: Tomcat Users List Subject: Re: Tomcat 6.0.18/ IIS 6.0 /SSL See below On 04.08.2010 22:17, Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 wrote: Rainer, Do you have a suggestion? Do I need to change my worker.properties? Sorry, I'm new to Tomcat, I appreciate your help. -Original Message- From: Rainer Jung [mailto:rainer.j...@kippdata.de] Sent: Wednesday, August 04, 2010 4:09 PM To: Tomcat Users List Subject: Re: Tomcat 6.0.18/ IIS 6.0 /SSL On 04.08.2010 21:50, Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 wrote: I did read your post and I changed the Port Number. Connector port=8009 protocol=AJP/1.3 redirectPort=8443 / This connector should be used depending on your redirector config which we haven't seen yet Here is my workers.properties: worker.list=worker1 worker.worker1.type=ajp13 worker.worker1.host=127.0.0.1 worker.worker1.port=8009 Here is my uriworkermap.properties: /geoportal|/*=worker1 This didn't work, since the log snippet said it tried to use a worker named ajp13, not worker1. This = uriworkermap.properties. So what did you do to let IIS find your uriworkermap.properties? Can we be sure that works? Does your redirector debug log file indicate - that it finds and reads the right uriworkermap.properties file - that it finds the right map in there and thus tries to use a worker named worker1 - is your request URL actually starting with /geoportal/ or equal to geoportal? What is the URL you are testing with? Regards, Rainer -Original Message- From: Rainer Jung [mailto:rainer.j...@kippdata.de] Sent: Wednesday, August 04, 2010 3:40 PM To: Tomcat Users List Subject: Re: Tomcat 6.0.18/ IIS 6.0 /SSL On 04.08.2010 20:58, Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 wrote: Jung, I'm still getting the errors. Why shouldn't you? Did you actually read my post? Which parts didn't you understand? Connector port=8080 protocol=Java HTTP What protocol should I use here (do not want to expose) connectionTimeout=2 redirectPort=80 / This connector is *not* involved when using Browser - IIS/Redirector - Tomcat Connector port=8443 protocol=HTTP/1.1 SSLEnabled=true -Does this look right? maxThreads=150 scheme=https secure=true clientAuth=false sslProtocol=TLSv1 keystoreFile=C:\Program Files (x86)\Apache Software Foundation\Tomcat 6.0\conf\cert.pfx keystorePass=password keystoreType=pkcs12 / This one neither. Connector port=8009 protocol=AJP/1.3 redirectPort=8443 / -Is this where my actual authentication is taking place? This connector should be used depending on your redirector config which we haven't seen yet. The error message you provided doesn't have to do with authentication. Authentication problems might show up after you solved your worker configuration problem. Until now your IIS doesn't even talk to Tomcat. Regards, Rainer -Original Message- From: Rainer Jung [mailto:rainer.j...@kippdata.de] Sent: Wednesday, August 04, 2010 1:38 PM To: Tomcat Users List Subject: Re: Tomcat 6.0.18/ IIS 6.0 /SSL On 04.08.2010 18:07, Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 wrote: I am trying to get Tomcat and IIS configured on my secure web server (SSL) so that I can access my deployed web application via https and NOT over http. Connection to non-SSL works, but I cannot have that connection due to security. I want to run Tomcat through IIS, and I have configured it using the isapi_redirect.dll (thanks to Electronjockey). However, when I try and hit my https://site/geoportalhttps://site/geoportalmy credentials do not carry me through to the web application, instead I receive Internet Explorer Cannot Display Webpage. Can someone help me out on how to configure my server.xml and interpretting my log files please? I have even tried to export my server certificate
Re: Tomcat 6.0.18/ IIS 6.0 /SSL
See inline On 05.08.2010 15:15, Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 wrote: Rainer, Thanks again for being patient with me. I've seen some different behavior this morning. When I am trying to access my page, I get Service Temporary Unavailable, which is better than what I was receiving. [Thu Aug 05 09:12:49.655 2010] [10216:8452] [debug] jk_uri_worker_map.c (1036): Attempting to map URI '/geoweb1b.eims.local/geoportal' from 2 maps [Thu Aug 05 09:12:49.686 2010] [10216:8452] [debug] jk_uri_worker_map.c (850): Attempting to map context URI '/geoportal/*=worker1' source 'uriworkermap' [Thu Aug 05 09:12:49.702 2010] [10216:8452] [debug] jk_uri_worker_map.c (850): Attempting to map context URI '/geoportal=worker1' source 'uriworkermap' [Thu Aug 05 09:12:49.733 2010] [10216:8452] [debug] jk_uri_worker_map.c (850): Attempting to map context URI '/geoportal/*=worker1' source 'uriworkermap' [Thu Aug 05 09:12:49.749 2010] [10216:8452] [debug] jk_uri_worker_map.c (850): Attempting to map context URI '/geoportal=worker1' source 'uriworkermap' [Thu Aug 05 09:12:49.764 2010] [10216:8452] [debug] jk_uri_worker_map.c (873): Found an exact match '/geoportal=worker1' OK, uriworkermap.proprties worked, it found a match and wants to use the worker named worker1. [Thu Aug 05 09:12:49.780 2010] [10216:8452] [debug] jk_isapi_plugin.c (1916): check if [/geoportal] points to the web-inf directory [Thu Aug 05 09:12:49.795 2010] [10216:8452] [debug] jk_isapi_plugin.c (1932): [/geoportal] is a servlet url - should redirect to worker1 [Thu Aug 05 09:12:49.811 2010] [10216:8452] [debug] jk_isapi_plugin.c (1972): fowarding escaped URI [/geoportal] [Thu Aug 05 09:12:49.827 2010] [10216:8452] [debug] jk_worker.c (339): Maintaining worker worker1 [Thu Aug 05 09:12:49.842 2010] [10216:8452] [debug] jk_isapi_plugin.c (2792): Reading extension header HTTP_TOMCATWORKER6A6B: worker1 [Thu Aug 05 09:12:49.858 2010] [10216:8452] [debug] jk_isapi_plugin.c (2793): Reading extension header HTTP_TOMCATWORKERIDX6A6B: 1 [Thu Aug 05 09:12:49.889 2010] [10216:8452] [debug] jk_isapi_plugin.c (2794): Reading extension header HTTP_TOMCATURI6A6B: /geoportal [Thu Aug 05 09:12:49.905 2010] [10216:8452] [debug] jk_isapi_plugin.c (2795): Reading extension header HTTP_TOMCATQUERY6A6B: (null) [Thu Aug 05 09:12:49.920 2010] [10216:8452] [debug] jk_isapi_plugin.c (2850): Applying service extensions [Thu Aug 05 09:12:49.936 2010] [10216:8452] [debug] jk_isapi_plugin.c (2930): Client Certificate encoding:1 sz:1022 flags:1 [Thu Aug 05 09:12:49.952 2010] [10216:8452] [debug] jk_isapi_plugin.c (3108): Service protocol=HTTP/1.1 method=GET host=150.xxx.xx.xx addr=150.xxx.xx.xx name=myserver.server.local port=443 auth=SSL/PCT user=EIMS\john.doe uri=/geoportal [Thu Aug 05 09:12:49.967 2010] [10216:8452] [debug] jk_isapi_plugin.c (3120): Service request headers=8 attributes=9 chunked=no content-length=0 available=0 [Thu Aug 05 09:12:49.983 2010] [10216:8452] [debug] jk_worker.c (116): found a worker worker1 [Thu Aug 05 09:12:49.999 2010] [10216:8452] [debug] jk_isapi_plugin.c (2162): got a worker for name worker1 [Thu Aug 05 09:12:50.030 2010] [10216:8452] [debug] jk_ajp_common.c (3093): acquired connection pool slot=0 after 0 retries [Thu Aug 05 09:12:50.045 2010] [10216:8452] [debug] jk_ajp_common.c (605): ajp marshaling done [Thu Aug 05 09:12:50.061 2010] [10216:8452] [debug] jk_ajp_common.c (2376): processing worker1 with 2 retries [Thu Aug 05 09:12:50.077 2010] [10216:8452] [debug] jk_ajp_common.c (1579): (worker1) all endpoints are disconnected. [Thu Aug 05 09:12:50.092 2010] [10216:8452] [debug] jk_connect.c (480): socket TCP_NODELAY set to On [Thu Aug 05 09:12:50.108 2010] [10216:8452] [debug] jk_connect.c (604): trying to connect socket 712 to 127.0.0.1:8009 Here it tries to open a new connction to the address 127.0.0.1 and port 8009 (as configured for the worker named worker1 in workers.properties). [Thu Aug 05 09:12:51.061 2010] [10216:8452] [info] jk_connect.c (622): connect to 127.0.0.1:8009 failed (errno=61) It fails to open a TCP connection. Error is 61, which means winsock 10061, which is Connection refused. So either your Tomcat isn't started or not listening on port 8009 on localhost, or something else (Firewal etc.) blocks access to that port. Check whether you can see Tomcat listening on 8009 using netstat -ano. You should see *:8009 in status LISTEN and the pid would be the process ID of your Tomcat Java process. If it is there, you can try whether you can connect to that port using telnet. As long as you can't connect, the redirector can't either. If Tomcat is running on some other system, you need to adjust worker.worker1.host in workers.properties accordingly. [Thu Aug 05 09:12:51.061 2010] [10216:8452] [info] jk_ajp_common.c (959): Failed opening socket to (127.0.0.1:8009) (errno=61) [Thu Aug 05 09:12:51.092 2010] [10216:8452] [error] jk_ajp_common.c (1585): (worker1) connecting to backend
Re: Tomcat 6.0.18/ IIS 6.0 /SSL
Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 wrote: Rainer, Thanks again for being patient with me. I've seen some different behavior this morning. When I am trying to access my page, I get Service Temporary Unavailable, which is better than what I was receiving. Yes, that looks good, from the point of view of IIS and isapi_redirect. Unfortunately, there does not seem to be a Tomcat listening on AJP port 8009. Can you run the following command in a command window on the server and paste the result here : netstat -anob -p tcp Thanks - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Tomcat 6.0.18/ IIS 6.0 /SSL
Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 wrote: Tomcat is not listening on Port 8009 using the AJP/1.3 protocol. I can change this line of code (just did it as a test) to reference port 8009 and I can see it's listening, however this Is not the protocol I am wanting. Connector port=8009 protocol=HTTP/1.1 connectionTimeout=2 redirectPort=443 / No, you don't want to do that. Leave that one to the port 8080 or so like it was before (or totally delete/comment it if you do not want Tomcat to offer a HTTP interface. I have the isapi_redirect.dll deployed under 'Default' Websites in IIS with a Green Arrow. I used the 32-bit because we are running 32-bit as 64-bit. Seems that this connector is not even being read: !-- Define an AJP 1.3 Connector on port 8009 -- Connector port=8009 protocol=AJP/1.3 redirectPort=8443 / Verify : 1) that this Connector tag is not somehow being commented-out. 2) that in server.xml, it is located between the Service name=Catalina tag, and the tag Engine name=Catalina defaultHost=localhost (If it is in the wrong section, it will be ignored). Then restart Tomcat and try the netstat command again. If it now shows Tomcat listebing on port 8009, then try to access it again through IIS. I also suggest that when you start Tomcat, you have a look at its logfiles, to see if any bad-looking message shows up. It may be easier to stop Tomcat, delete all the logfiles in (tomcat_dir)/logs, then start Tomcat again. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Tomcat 6.0.18/ IIS 6.0 /SSL
Andre, I created a folder within the Tomcat 6.0 directory called 'connector'. That is where all of my redirect files are locared. Here is my server.xml Service name=Catalina !--The connectors can use a shared executor, you can define one or more named thread pools-- !-- Executor name=tomcatThreadPool namePrefix=catalina-exec- maxThreads=150 minSpareThreads=4/ -- !-- A Connector represents an endpoint by which requests are received and responses are returned. Documentation at : Java HTTP Connector: /docs/config/http.html (blocking non-blocking) Java AJP Connector: /docs/config/ajp.html APR (HTTP/AJP) Connector: /docs/apr.html Define a non-SSL HTTP/1.1 Connector on port 8080 -- Connector port=8080 protocol=Java HTTP connectionTimeout=2 redirectPort=80 / !-- A Connector using the shared thread pool-- !-- Connector executor=tomcatThreadPool port=8443 protocol=HTTP/1.1 connectionTimeout=2 redirectPort=443 / -- !-- Define a SSL HTTP/1.1 Connector on port 8443 This connector uses the JSSE configuration, when using APR, the connector should be using the OpenSSL style configuration described in the APR documentation -- Connector port=8443 protocol=HTTP/1.1 SSLEnabled=true maxThreads=150 scheme=https secure=true clientAuth=false sslProtocol=TLSv1 !-- Define an AJP 1.3 Connector on port 8009 -- Connector port=8009 protocol=AJP/1.3 redirectPort=443 / !-- An Engine represents the entry point (within Catalina) that processes every request. The Engine implementation for Tomcat stand alone analyzes the HTTP headers included with the request, and passes them on to the appropriate Host (virtual host). Documentation at /docs/config/engine.html -- !-- You should set jvmRoute to support load-balancing via AJP ie : Engine name=Standalone defaultHost=localhost jvmRoute=jvm1 -- Engine name=Catalina defaultHost=localhost -Original Message- From: André Warnier [mailto:a...@ice-sa.com] Sent: Thursday, August 05, 2010 11:44 AM To: Tomcat Users List Subject: Re: Tomcat 6.0.18/ IIS 6.0 /SSL Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 wrote: Tomcat is not listening on Port 8009 using the AJP/1.3 protocol. I can change this line of code (just did it as a test) to reference port 8009 and I can see it's listening, however this Is not the protocol I am wanting. Connector port=8009 protocol=HTTP/1.1 connectionTimeout=2 redirectPort=443 / No, you don't want to do that. Leave that one to the port 8080 or so like it was before (or totally delete/comment it if you do not want Tomcat to offer a HTTP interface. I have the isapi_redirect.dll deployed under 'Default' Websites in IIS with a Green Arrow. I used the 32-bit because we are running 32-bit as 64-bit. Seems that this connector is not even being read: !-- Define an AJP 1.3 Connector on port 8009 -- Connector port=8009 protocol=AJP/1.3 redirectPort=8443 / Verify : 1) that this Connector tag is not somehow being commented-out. 2) that in server.xml, it is located between the Service name=Catalina tag, and the tag Engine name=Catalina defaultHost=localhost (If it is in the wrong section, it will be ignored). Then restart Tomcat and try the netstat command again. If it now shows Tomcat listebing on port 8009, then try to access it again through IIS. I also suggest that when you start Tomcat, you have a look at its logfiles, to see if any bad-looking message shows up. It may be easier to stop Tomcat, delete all the logfiles in (tomcat_dir)/logs, then start Tomcat again. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org smime.p7s Description: S/MIME cryptographic signature
RE: Tomcat 6.0.18/ IIS 6.0 /SSL
From: Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 [mailto:jason.t.hansel@navy.mil] Subject: RE: Tomcat 6.0.18/ IIS 6.0 /SSL I created a folder within the Tomcat 6.0 directory called 'connector'. That is where all of my redirect files are locared. For curiosity's sake, what are you referring to with the term redirect file? Connector port=8080 protocol=Java HTTP connectionTimeout=2 redirectPort=80 / Exactly what did you have in mind with that value for the protocol attribute? Do you see it anywhere in the Tomcat documentation? Connector port=8443 protocol=HTTP/1.1 SSLEnabled=true maxThreads=150 scheme=https secure=true clientAuth=false sslProtocol=TLSv1 And right here you have a problem - badly formed XML. You might want to syntax check your server.xml, since it looks really broken from here. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Tomcat 6.0.18/ IIS 6.0 /SSL
Rainer, Good news amigo, I am connecting to my web application. Looks like the uncommented SSL section was causing my isapi_redirect.dll to not work. The one thing I have noticed though is that it's kind of slow, any pointers w/respect to speed? Thanks man. -Original Message- From: Rainer Jung [mailto:rainer.j...@kippdata.de] Sent: Thursday, August 05, 2010 10:31 AM To: Tomcat Users List Subject: Re: Tomcat 6.0.18/ IIS 6.0 /SSL See inline On 05.08.2010 15:15, Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 wrote: Rainer, Thanks again for being patient with me. I've seen some different behavior this morning. When I am trying to access my page, I get Service Temporary Unavailable, which is better than what I was receiving. [Thu Aug 05 09:12:49.655 2010] [10216:8452] [debug] jk_uri_worker_map.c (1036): Attempting to map URI '/geoweb1b.eims.local/geoportal' from 2 maps [Thu Aug 05 09:12:49.686 2010] [10216:8452] [debug] jk_uri_worker_map.c (850): Attempting to map context URI '/geoportal/*=worker1' source 'uriworkermap' [Thu Aug 05 09:12:49.702 2010] [10216:8452] [debug] jk_uri_worker_map.c (850): Attempting to map context URI '/geoportal=worker1' source 'uriworkermap' [Thu Aug 05 09:12:49.733 2010] [10216:8452] [debug] jk_uri_worker_map.c (850): Attempting to map context URI '/geoportal/*=worker1' source 'uriworkermap' [Thu Aug 05 09:12:49.749 2010] [10216:8452] [debug] jk_uri_worker_map.c (850): Attempting to map context URI '/geoportal=worker1' source 'uriworkermap' [Thu Aug 05 09:12:49.764 2010] [10216:8452] [debug] jk_uri_worker_map.c (873): Found an exact match '/geoportal=worker1' OK, uriworkermap.proprties worked, it found a match and wants to use the worker named worker1. [Thu Aug 05 09:12:49.780 2010] [10216:8452] [debug] jk_isapi_plugin.c (1916): check if [/geoportal] points to the web-inf directory [Thu Aug 05 09:12:49.795 2010] [10216:8452] [debug] jk_isapi_plugin.c (1932): [/geoportal] is a servlet url - should redirect to worker1 [Thu Aug 05 09:12:49.811 2010] [10216:8452] [debug] jk_isapi_plugin.c (1972): fowarding escaped URI [/geoportal] [Thu Aug 05 09:12:49.827 2010] [10216:8452] [debug] jk_worker.c (339): Maintaining worker worker1 [Thu Aug 05 09:12:49.842 2010] [10216:8452] [debug] jk_isapi_plugin.c (2792): Reading extension header HTTP_TOMCATWORKER6A6B: worker1 [Thu Aug 05 09:12:49.858 2010] [10216:8452] [debug] jk_isapi_plugin.c (2793): Reading extension header HTTP_TOMCATWORKERIDX6A6B: 1 [Thu Aug 05 09:12:49.889 2010] [10216:8452] [debug] jk_isapi_plugin.c (2794): Reading extension header HTTP_TOMCATURI6A6B: /geoportal [Thu Aug 05 09:12:49.905 2010] [10216:8452] [debug] jk_isapi_plugin.c (2795): Reading extension header HTTP_TOMCATQUERY6A6B: (null) [Thu Aug 05 09:12:49.920 2010] [10216:8452] [debug] jk_isapi_plugin.c (2850): Applying service extensions [Thu Aug 05 09:12:49.936 2010] [10216:8452] [debug] jk_isapi_plugin.c (2930): Client Certificate encoding:1 sz:1022 flags:1 [Thu Aug 05 09:12:49.952 2010] [10216:8452] [debug] jk_isapi_plugin.c (3108): Service protocol=HTTP/1.1 method=GET host=150.xxx.xx.xx addr=150.xxx.xx.xx name=myserver.server.local port=443 auth=SSL/PCT user=EIMS\john.doe uri=/geoportal [Thu Aug 05 09:12:49.967 2010] [10216:8452] [debug] jk_isapi_plugin.c (3120): Service request headers=8 attributes=9 chunked=no content-length=0 available=0 [Thu Aug 05 09:12:49.983 2010] [10216:8452] [debug] jk_worker.c (116): found a worker worker1 [Thu Aug 05 09:12:49.999 2010] [10216:8452] [debug] jk_isapi_plugin.c (2162): got a worker for name worker1 [Thu Aug 05 09:12:50.030 2010] [10216:8452] [debug] jk_ajp_common.c (3093): acquired connection pool slot=0 after 0 retries [Thu Aug 05 09:12:50.045 2010] [10216:8452] [debug] jk_ajp_common.c (605): ajp marshaling done [Thu Aug 05 09:12:50.061 2010] [10216:8452] [debug] jk_ajp_common.c (2376): processing worker1 with 2 retries [Thu Aug 05 09:12:50.077 2010] [10216:8452] [debug] jk_ajp_common.c (1579): (worker1) all endpoints are disconnected. [Thu Aug 05 09:12:50.092 2010] [10216:8452] [debug] jk_connect.c (480): socket TCP_NODELAY set to On [Thu Aug 05 09:12:50.108 2010] [10216:8452] [debug] jk_connect.c (604): trying to connect socket 712 to 127.0.0.1:8009 Here it tries to open a new connction to the address 127.0.0.1 and port 8009 (as configured for the worker named worker1 in workers.properties). [Thu Aug 05 09:12:51.061 2010] [10216:8452] [info] jk_connect.c (622): connect to 127.0.0.1:8009 failed (errno=61) It fails to open a TCP connection. Error is 61, which means winsock 10061, which is Connection refused. So either your Tomcat isn't started or not listening on port 8009 on localhost, or something else (Firewal etc.) blocks access to that port. Check whether you can see Tomcat listening on 8009 using netstat -ano. You should see *:8009 in status LISTEN and the pid would be the process ID
RE: Tomcat 6.0.18/ IIS 6.0 /SSL
Charles, I was just putting that protocol in there to prevent the 8080 from being hit, I've actually commented it out. I got this server.xml file from the install (Note:that not everything is on here). I can load my webapp now, but the page takes a little while to load using the isapi_redirect.dll (which I was referring to below as the redirect file...sorry my in head language) -Original Message- From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] Sent: Thursday, August 05, 2010 3:45 PM To: Tomcat Users List Subject: RE: Tomcat 6.0.18/ IIS 6.0 /SSL From: Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 [mailto:jason.t.hansel@navy.mil] Subject: RE: Tomcat 6.0.18/ IIS 6.0 /SSL I created a folder within the Tomcat 6.0 directory called 'connector'. That is where all of my redirect files are locared. For curiosity's sake, what are you referring to with the term redirect file? Connector port=8080 protocol=Java HTTP connectionTimeout=2 redirectPort=80 / Exactly what did you have in mind with that value for the protocol attribute? Do you see it anywhere in the Tomcat documentation? Connector port=8443 protocol=HTTP/1.1 SSLEnabled=true maxThreads=150 scheme=https secure=true clientAuth=false sslProtocol=TLSv1 And right here you have a problem - badly formed XML. You might want to syntax check your server.xml, since it looks really broken from here. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org smime.p7s Description: S/MIME cryptographic signature
Re: Tomcat 6.0.18/ IIS 6.0 /SSL
Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 wrote: Charles, I was just putting that protocol in there to prevent the 8080 from being hit, I've actually commented it out. I got this server.xml file from the install (Note:that not everything is on here). I can load my webapp now, but the page takes a little while to load using the isapi_redirect.dll (which I was referring to below as the redirect file...sorry my in head language) I believe that at this point, you may want to : a) save your web application somewhere else; also save the isapi configuration files if they are located under the Tomcat installation directory. (*) b) de-install the Tomcat you have, and remove all its files (and specially the logfiles) c) download a new Tomcat from the Tomcat website, and re-install it Then restore your application under (tomcat_install_dir)/webapps. All the above will take only 5 minutes, and you will at least have a clean Tomcat. Then try it, both directly using HTTP to port 8080, and through IIS and isapi_redirect using whatver SSL port you use for that. With the part under IIS (including isapi_redirect) apparently being fine (as shown before by your previous logs), the downloaded Tomcat should work out of the box, through IIS and all. THEN, when you have verified that the above is working, comment out all Connector tags you do not want, except the one for the AJP Connector on port 8009, and restart Tomcat. And check the Tomcat logfiles if you have any problem. Apart from the ones which Chuck mentioned earlier, your pasted server.xml had a couple of additional mistakes which make it really hard for us to figure out what is really going on. (Or it was your cut and paste which was not accurate, but anyway we can't follow what's happening on the base of inaccurate information). In any case, with a correct configuration, the difference in access time between a direct access to Tomcat via HTTP port 8080, and an indirect access through IIS and isapi_redirector, should be so small as to be humanly indistinguishable. (We are talking 1 millisecond or so). Unless it is IIS which for some reason is introducing the delay. (*) This by the way would be illogical, as these files belong really to IIS and its add-on module isapi_redirect.dll, and not to Tomcat. The only part of Tomcat which plays a role here, is the AJP Connector on port 8009. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Tomcat 6.0.18/ IIS 6.0 /SSL
Maybe to avoid further meandering in what should or should not work, here is a short tutorial of how all this stuff works. At the end of the chain, you have a Tomcat Engine. This engine processes HTTP requests which it receives in some internal Tomcat format. The requests are processed by forwarding them to web applications within Tomcat, who process the request and generate a response. On top of the Tomcat engine are sitting one or more Connector's. Each of these Connector's is at the same time a TCP socket listening on some port, and a sophisticated translation engine. Each Connector translates the requests received on its port, from the external communications protocol format used (e.g. HTTP or HTTPS or AJP) into the common internal Tomcat request format, and then passes it to the Tomcat engine. Graphically, it looks like this : Connector 1 Connector 2Connector 3 HTTP AJPHTTPS \ | / Tomcat engine / | \ webapp1 webapp2 webapp3 You can send a request (using the appropriate format) through any of the enabled Connector's. For Tomcat in the end it does not matter. It will send the response via the same Connector, which will perform the appropriate reverse translation according to its protocol. Now imagine a front-end server, like IIS. For reasons of your own, you want to send the request to IIS first, and would like IIS to determine if this request is to handle locally by itself, or to be forwarded to a back-end Tomcat, and to do that if needed. That is where the IIS add-on module isapi_redirect comes into play. IIS gives it the URL of a request just received. isapi_redirect, in function of its configuration, decides if this request is for a back-end Tomcat or not. (That is what uriworkermap helps in doing). If it decides that this URL is not for Tomcat, it returns to IIS saying sorry, not for me, and IIS looks for other ways to satisfy this request. If isapi_redirect decides that this request is for a back-end Tomcat, then it checks for which one. For isapi_redirect, each back-end Tomcat to which it can redirect requests is called a worker. (In a simple case, there is only one.). (Here is where the workers.properties settings matter) When isapi_redirect has determined to which worker it should pass the request, it tries to set up a TCP channel with this worker (Tomcat), on a port which understands the AJP protocol (aka, an AJP Connector of that Tomcat). If this does not work (because the worker is not configured properly or the corresponding Tomcat is simply not running), isapi_redirect will return an error to IIS. If it works, then isapi_redirect encodes the request according to the requirements of the AJP protocol, and sends it to Tomcat through this TCP channel. isapi_redirect then waits for the response, on the same TCP channel. When it gets the response, it returns it to IIS, which returns it to the browser. So the full graphic now looks like this : browser | TCP channel (SSL/HTTPS) | IIS | isapi_redirector | TCP channel (non-SSL) | Connector 1 Connector 2Connector 3 HTTP AJPHTTPS \ | / Tomcat engine / | \ webapp1 webapp2 webapp3 Of course, Tomcat can deal with HTTPS all on its own, so you do not necessarily need an IIS in front for that. You could also have the browsers use HTTPS to talk directly to Tomcat. Then the configuration would be this : browser | TCP channel (SSL/HTTPS) | Connector 1 Connector 2Connector 3 HTTP AJPHTTPS \ | / Tomcat engine / | \ webapp1 webapp2 webapp3 and as far as Tomcat is concerned, it will not make much difference (except that now the Tomcat HTTPS Connector will be doing more work, and the AJP Connector less work). There are good reasons to use a front-end Apache httpd, or IIS, in front of Tomcat. There are also bad reasons, such as a simple lack of information. If your only reason to put IIS/isapi_redirect in front of Tomcat is to handle HTTPS connections, then it is not a very good reason, and it makes the setup more complicated than it could be.
Tomcat 6.0.18/ IIS 6.0 /SSL
I am trying to get Tomcat and IIS configured on my secure web server (SSL) so that I can access my deployed web application via https and NOT over http. Connection to non-SSL works, but I cannot have that connection due to security. I want to run Tomcat through IIS, and I have configured it using the isapi_redirect.dll (thanks to Electronjockey). However, when I try and hit my https://site/geoportal my credentials do not carry me through to the web application, instead I receive Internet Explorer Cannot Display Webpage. Can someone help me out on how to configure my server.xml and interpretting my log files please? I have even tried to export my server certificate, and call it using the keystore:, still not working. I'm a Tomcat green horn, any help would be awesome. Isapi_redirect.log file: Looks like some sort of authentication is being passed, then the ajp13 is not found? [Wed Aug 04 11:51:15.901 2010] [10712:8360] [debug] jk_isapi_plugin.c (3108): Service protocol=HTTP/1.1 method=GET host=150.125.174.70 addr=150.125.174.70 name=mywebsite port=443 auth=SSL/PCT user=EIMS\john.doe uri=/jakarta/isapi_redirect.dll [Wed Aug 04 11:51:15.916 2010] [10712:8360] [debug] jk_isapi_plugin.c (3120): Service request headers=5 attributes=9 chunked=no content-length=0 available=0 [Wed Aug 04 11:51:15.932 2010] [10712:8360] [debug] jk_worker.c (116): did not find a worker ajp13 [Wed Aug 04 11:51:15.948 2010] [10712:8360] [debug] jk_isapi_plugin.c (2162): could not get a worker for name ajp13 [Wed Aug 04 11:51:15.979 2010] [10712:8360] [error] jk_isapi_plugin.c (2210): could not get a worker for name ajp13 Here is the meat of my server.xml (pretty sure it's wrong): !-- A Connector represents an endpoint by which requests are received and responses are returned. Documentation at : Java HTTP Connector: /docs/config/http.html (blocking non-blocking) Java AJP Connector: /docs/config/ajp.html APR (HTTP/AJP) Connector: /docs/apr.html Define a non-SSL HTTP/1.1 Connector on port 8080 -- Connector port=8080 protocol=HTTP/1.1 connectionTimeout=2 redirectPort=80 / !-- A Connector using the shared thread pool-- Connector executor=tomcatThreadPool port=8009 protocol=HTTP/1.1 connectionTimeout=2 redirectPort=443 / !-- Define a SSL HTTP/1.1 Connector on port 8443 This connector uses the JSSE configuration, when using APR, the connector should be using the OpenSSL style configuration described in the APR documentation -- Connector port=8443 protocol=HTTP/1.1 SSLEnabled=true maxThreads=150 scheme=https secure=true clientAuth=false sslProtocol=TLSv1 keystoreFile=C:\Program Files (x86)\Apache Software Foundation\Tomcat 6.0\conf\cert.pfx keystorePass=mypassword keystoreType=pkcs12 / !-- Define an AJP 1.3 Connector on port 8009 -- Connector port=8009 protocol=AJP/1.3 redirectPort=8443 / Thanks Jason. smime.p7s Description: S/MIME cryptographic signature
Re: Tomcat 6.0.18/ IIS 6.0 /SSL
On 04.08.2010 18:07, Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 wrote: I am trying to get Tomcat and IIS configured on my secure web server (SSL) so that I can access my deployed web application via https and NOT over http. Connection to non-SSL works, but I cannot have that connection due to security. I want to run Tomcat through IIS, and I have configured it using the isapi_redirect.dll (thanks to Electronjockey). However, when I try and hit my https://site/geoportal https://site/geoportal my credentials do not carry me through to the web application, instead I receive Internet Explorer Cannot Display Webpage. Can someone help me out on how to configure my server.xml and interpretting my log files please? I have even tried to export my server certificate, and call it using the keystore:, still not working. I'm a Tomcat green horn, any help would be awesome. Isapi_redirect.log file: Looks like some sort of authentication is being passed, then the ajp13 is not found? [Wed Aug 04 11:51:15.901 2010] [10712:8360] [debug] jk_isapi_plugin.c (3108): Service protocol=HTTP/1.1 method=GET host=150.125.174.70 addr=150.125.174.70 name=mywebsite port=443 auth=SSL/PCT user=EIMS\john.doe uri=/jakarta/isapi_redirect.dll [Wed Aug 04 11:51:15.916 2010] [10712:8360] [debug] jk_isapi_plugin.c (3120): Service request headers=5 attributes=9 chunked=no content-length=0 available=0 [Wed Aug 04 11:51:15.932 2010] [10712:8360] [debug] jk_worker.c (116): did not find a worker ajp13 [Wed Aug 04 11:51:15.948 2010] [10712:8360] [debug] jk_isapi_plugin.c (2162): could not get a worker for name ajp13 [Wed Aug 04 11:51:15.979 2010] [10712:8360] [error] jk_isapi_plugin.c (2210): could not get a worker for name ajp13 Hard to tell without knowing the version of the isapi redirector, not having your configuration. This looks like: - it is trying to use a worker named ajp13 to connect to Tomcat. Lile y you have configured the redirector to use this worker within your uriworkermap.properties file - the redirector doesn't know how to use this worker. Either you are missing the workers.properties configuration file or there is no definition for a worker named ajp13 in the file. A good starting point for a workers.properties file is the example file contained in the source distribution of version 1.2.30. Please do also use this version of the redirector. Note: from the point of view of Tomcat it doesn't really matter whether you are talking http or https in the browser. This protocol is only used between the browser and IIS. Between IIS and Tomcat when using the isapi redirector the protocol is always AJP13 (it is just coincidence, that this is the same name as the name of the worker in your logs). The protocol is similar to HTTP but binary and it transports the information whether the browser used http or https, so Tomcat is aware of this. This protocol does not use the http or https connectors in server.xml, only the AJP13 connector. Here is the meat of my server.xml (pretty sure it's wrong): !-- A Connector represents an endpoint by which requests are received and responses are returned. Documentation at : Java HTTP Connector: /docs/config/http.html (blocking non-blocking) Java AJP Connector: /docs/config/ajp.html APR (HTTP/AJP) Connector: /docs/apr.html Define a non-SSL HTTP/1.1 Connector on port 8080 -- Connector port=8080 protocol=HTTP/1.1 connectionTimeout=2 redirectPort=80 / !-- A Connector using the shared thread pool-- Connector executor=tomcatThreadPool port=8009 protocol=HTTP/1.1 connectionTimeout=2 redirectPort=443 / !-- Define a SSL HTTP/1.1 Connector on port 8443 This connector uses the JSSE configuration, when using APR, the connector should be using the OpenSSL style configuration described in the APR documentation -- Connector port=8443 protocol=HTTP/1.1 SSLEnabled=true maxThreads=150 scheme=https secure=true clientAuth=false sslProtocol=TLSv1 keystoreFile=C:\Program Files (x86)\Apache Software Foundation\Tomcat 6.0\conf\cert.pfx keystorePass=mypassword keystoreType=pkcs12 / !-- Define an AJP 1.3 Connector on port 8009 -- Connector port=8009 protocol=AJP/1.3 redirectPort=8443 / Two connectors, both on port 8009, will not work. Use the latter one. Regards, Rainer - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Tomcat 6.0.18/ IIS 6.0 /SSL
Jung, I'm still getting the errors. Connector port=8080 protocol=Java HTTP What protocol should I use here (do not want to expose) connectionTimeout=2 redirectPort=80 / Connector port=8443 protocol=HTTP/1.1 SSLEnabled=true -Does this look right? maxThreads=150 scheme=https secure=true clientAuth=false sslProtocol=TLSv1 keystoreFile=C:\Program Files (x86)\Apache Software Foundation\Tomcat 6.0\conf\cert.pfx keystorePass=password keystoreType=pkcs12 / Connector port=8009 protocol=AJP/1.3 redirectPort=8443 / -Is this where my actual authentication is taking place? -Original Message- From: Rainer Jung [mailto:rainer.j...@kippdata.de] Sent: Wednesday, August 04, 2010 1:38 PM To: Tomcat Users List Subject: Re: Tomcat 6.0.18/ IIS 6.0 /SSL On 04.08.2010 18:07, Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 wrote: I am trying to get Tomcat and IIS configured on my secure web server (SSL) so that I can access my deployed web application via https and NOT over http. Connection to non-SSL works, but I cannot have that connection due to security. I want to run Tomcat through IIS, and I have configured it using the isapi_redirect.dll (thanks to Electronjockey). However, when I try and hit my https://site/geoportal https://site/geoportal my credentials do not carry me through to the web application, instead I receive Internet Explorer Cannot Display Webpage. Can someone help me out on how to configure my server.xml and interpretting my log files please? I have even tried to export my server certificate, and call it using the keystore:, still not working. I'm a Tomcat green horn, any help would be awesome. Isapi_redirect.log file: Looks like some sort of authentication is being passed, then the ajp13 is not found? [Wed Aug 04 11:51:15.901 2010] [10712:8360] [debug] jk_isapi_plugin.c (3108): Service protocol=HTTP/1.1 method=GET host=150.125.174.70 addr=150.125.174.70 name=mywebsite port=443 auth=SSL/PCT user=EIMS\john.doe uri=/jakarta/isapi_redirect.dll [Wed Aug 04 11:51:15.916 2010] [10712:8360] [debug] jk_isapi_plugin.c (3120): Service request headers=5 attributes=9 chunked=no content-length=0 available=0 [Wed Aug 04 11:51:15.932 2010] [10712:8360] [debug] jk_worker.c (116): did not find a worker ajp13 [Wed Aug 04 11:51:15.948 2010] [10712:8360] [debug] jk_isapi_plugin.c (2162): could not get a worker for name ajp13 [Wed Aug 04 11:51:15.979 2010] [10712:8360] [error] jk_isapi_plugin.c (2210): could not get a worker for name ajp13 Hard to tell without knowing the version of the isapi redirector, not having your configuration. This looks like: - it is trying to use a worker named ajp13 to connect to Tomcat. Lile y you have configured the redirector to use this worker within your uriworkermap.properties file - the redirector doesn't know how to use this worker. Either you are missing the workers.properties configuration file or there is no definition for a worker named ajp13 in the file. A good starting point for a workers.properties file is the example file contained in the source distribution of version 1.2.30. Please do also use this version of the redirector. Note: from the point of view of Tomcat it doesn't really matter whether you are talking http or https in the browser. This protocol is only used between the browser and IIS. Between IIS and Tomcat when using the isapi redirector the protocol is always AJP13 (it is just coincidence, that this is the same name as the name of the worker in your logs). The protocol is similar to HTTP but binary and it transports the information whether the browser used http or https, so Tomcat is aware of this. This protocol does not use the http or https connectors in server.xml, only the AJP13 connector. Here is the meat of my server.xml (pretty sure it's wrong): !-- A Connector represents an endpoint by which requests are received and responses are returned. Documentation at : Java HTTP Connector: /docs/config/http.html (blocking non-blocking) Java AJP Connector: /docs/config/ajp.html APR (HTTP/AJP) Connector: /docs/apr.html Define a non-SSL HTTP/1.1 Connector on port 8080 -- Connector port=8080 protocol=HTTP/1.1 connectionTimeout=2 redirectPort=80 / !-- A Connector using the shared thread pool-- Connector executor=tomcatThreadPool port=8009 protocol=HTTP/1.1 connectionTimeout=2 redirectPort=443 / !-- Define a SSL HTTP/1.1 Connector on port 8443 This connector uses the JSSE configuration, when using APR, the connector should be using the OpenSSL style configuration described in the APR documentation -- Connector port=8443 protocol=HTTP/1.1 SSLEnabled=true maxThreads=150 scheme=https secure=true clientAuth=false sslProtocol=TLSv1 keystoreFile=C:\Program Files (x86)\Apache Software Foundation\Tomcat 6.0\conf
Re: Tomcat 6.0.18/ IIS 6.0 /SSL
On 04.08.2010 20:58, Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 wrote: Jung, I'm still getting the errors. Why shouldn't you? Did you actually read my post? Which parts didn't you understand? Connector port=8080 protocol=Java HTTP What protocol should I use here (do not want to expose) connectionTimeout=2 redirectPort=80 / This connector is *not* involved when using Browser - IIS/Redirector - Tomcat Connector port=8443 protocol=HTTP/1.1 SSLEnabled=true -Does this look right? maxThreads=150 scheme=https secure=true clientAuth=false sslProtocol=TLSv1 keystoreFile=C:\Program Files (x86)\Apache Software Foundation\Tomcat 6.0\conf\cert.pfx keystorePass=password keystoreType=pkcs12 / This one neither. Connector port=8009 protocol=AJP/1.3 redirectPort=8443 / -Is this where my actual authentication is taking place? This connector should be used depending on your redirector config which we haven't seen yet. The error message you provided doesn't have to do with authentication. Authentication problems might show up after you solved your worker configuration problem. Until now your IIS doesn't even talk to Tomcat. Regards, Rainer -Original Message- From: Rainer Jung [mailto:rainer.j...@kippdata.de] Sent: Wednesday, August 04, 2010 1:38 PM To: Tomcat Users List Subject: Re: Tomcat 6.0.18/ IIS 6.0 /SSL On 04.08.2010 18:07, Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 wrote: I am trying to get Tomcat and IIS configured on my secure web server (SSL) so that I can access my deployed web application via https and NOT over http. Connection to non-SSL works, but I cannot have that connection due to security. I want to run Tomcat through IIS, and I have configured it using the isapi_redirect.dll (thanks to Electronjockey). However, when I try and hit my https://site/geoportalhttps://site/geoportal my credentials do not carry me through to the web application, instead I receive Internet Explorer Cannot Display Webpage. Can someone help me out on how to configure my server.xml and interpretting my log files please? I have even tried to export my server certificate, and call it using the keystore:, still not working. I'm a Tomcat green horn, any help would be awesome. Isapi_redirect.log file: Looks like some sort of authentication is being passed, then the ajp13 is not found? [Wed Aug 04 11:51:15.901 2010] [10712:8360] [debug] jk_isapi_plugin.c (3108): Service protocol=HTTP/1.1 method=GET host=150.125.174.70 addr=150.125.174.70 name=mywebsite port=443 auth=SSL/PCT user=EIMS\john.doe uri=/jakarta/isapi_redirect.dll [Wed Aug 04 11:51:15.916 2010] [10712:8360] [debug] jk_isapi_plugin.c (3120): Service request headers=5 attributes=9 chunked=no content-length=0 available=0 [Wed Aug 04 11:51:15.932 2010] [10712:8360] [debug] jk_worker.c (116): did not find a worker ajp13 [Wed Aug 04 11:51:15.948 2010] [10712:8360] [debug] jk_isapi_plugin.c (2162): could not get a worker for name ajp13 [Wed Aug 04 11:51:15.979 2010] [10712:8360] [error] jk_isapi_plugin.c (2210): could not get a worker for name ajp13 Hard to tell without knowing the version of the isapi redirector, not having your configuration. This looks like: - it is trying to use a worker named ajp13 to connect to Tomcat. Lile y you have configured the redirector to use this worker within your uriworkermap.properties file - the redirector doesn't know how to use this worker. Either you are missing the workers.properties configuration file or there is no definition for a worker named ajp13 in the file. A good starting point for a workers.properties file is the example file contained in the source distribution of version 1.2.30. Please do also use this version of the redirector. Note: from the point of view of Tomcat it doesn't really matter whether you are talking http or https in the browser. This protocol is only used between the browser and IIS. Between IIS and Tomcat when using the isapi redirector the protocol is always AJP13 (it is just coincidence, that this is the same name as the name of the worker in your logs). The protocol is similar to HTTP but binary and it transports the information whether the browser used http or https, so Tomcat is aware of this. This protocol does not use the http or https connectors in server.xml, only the AJP13 connector. Here is the meat of my server.xml (pretty sure it's wrong): !-- A Connector represents an endpoint by which requests are received and responses are returned. Documentation at : Java HTTP Connector: /docs/config/http.html (blocking non-blocking) Java AJP Connector: /docs/config/ajp.html APR (HTTP/AJP) Connector: /docs/apr.html Define a non-SSL HTTP/1.1 Connector on port 8080 -- Connector port=8080 protocol=HTTP/1.1 connectionTimeout=2 redirectPort=80 / !-- A Connector using the shared thread pool
RE: Tomcat 6.0.18/ IIS 6.0 /SSL
I did read your post and I changed the Port Number. Connector port=8009 protocol=AJP/1.3 redirectPort=8443 / This connector should be used depending on your redirector config which we haven't seen yet Here is my workers.properties: worker.list=worker1 worker.worker1.type=ajp13 worker.worker1.host=127.0.0.1 worker.worker1.port=8009 Here is my uriworkermap.properties: /geoportal|/*=worker1 -Original Message- From: Rainer Jung [mailto:rainer.j...@kippdata.de] Sent: Wednesday, August 04, 2010 3:40 PM To: Tomcat Users List Subject: Re: Tomcat 6.0.18/ IIS 6.0 /SSL On 04.08.2010 20:58, Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 wrote: Jung, I'm still getting the errors. Why shouldn't you? Did you actually read my post? Which parts didn't you understand? Connector port=8080 protocol=Java HTTP What protocol should I use here (do not want to expose) connectionTimeout=2 redirectPort=80 / This connector is *not* involved when using Browser - IIS/Redirector - Tomcat Connector port=8443 protocol=HTTP/1.1 SSLEnabled=true -Does this look right? maxThreads=150 scheme=https secure=true clientAuth=false sslProtocol=TLSv1 keystoreFile=C:\Program Files (x86)\Apache Software Foundation\Tomcat 6.0\conf\cert.pfx keystorePass=password keystoreType=pkcs12 / This one neither. Connector port=8009 protocol=AJP/1.3 redirectPort=8443 / -Is this where my actual authentication is taking place? This connector should be used depending on your redirector config which we haven't seen yet. The error message you provided doesn't have to do with authentication. Authentication problems might show up after you solved your worker configuration problem. Until now your IIS doesn't even talk to Tomcat. Regards, Rainer -Original Message- From: Rainer Jung [mailto:rainer.j...@kippdata.de] Sent: Wednesday, August 04, 2010 1:38 PM To: Tomcat Users List Subject: Re: Tomcat 6.0.18/ IIS 6.0 /SSL On 04.08.2010 18:07, Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 wrote: I am trying to get Tomcat and IIS configured on my secure web server (SSL) so that I can access my deployed web application via https and NOT over http. Connection to non-SSL works, but I cannot have that connection due to security. I want to run Tomcat through IIS, and I have configured it using the isapi_redirect.dll (thanks to Electronjockey). However, when I try and hit my https://site/geoportalhttps://site/geoportal my credentials do not carry me through to the web application, instead I receive Internet Explorer Cannot Display Webpage. Can someone help me out on how to configure my server.xml and interpretting my log files please? I have even tried to export my server certificate, and call it using the keystore:, still not working. I'm a Tomcat green horn, any help would be awesome. Isapi_redirect.log file: Looks like some sort of authentication is being passed, then the ajp13 is not found? [Wed Aug 04 11:51:15.901 2010] [10712:8360] [debug] jk_isapi_plugin.c (3108): Service protocol=HTTP/1.1 method=GET host=150.125.174.70 addr=150.125.174.70 name=mywebsite port=443 auth=SSL/PCT user=EIMS\john.doe uri=/jakarta/isapi_redirect.dll [Wed Aug 04 11:51:15.916 2010] [10712:8360] [debug] jk_isapi_plugin.c (3120): Service request headers=5 attributes=9 chunked=no content-length=0 available=0 [Wed Aug 04 11:51:15.932 2010] [10712:8360] [debug] jk_worker.c (116): did not find a worker ajp13 [Wed Aug 04 11:51:15.948 2010] [10712:8360] [debug] jk_isapi_plugin.c (2162): could not get a worker for name ajp13 [Wed Aug 04 11:51:15.979 2010] [10712:8360] [error] jk_isapi_plugin.c (2210): could not get a worker for name ajp13 Hard to tell without knowing the version of the isapi redirector, not having your configuration. This looks like: - it is trying to use a worker named ajp13 to connect to Tomcat. Lile y you have configured the redirector to use this worker within your uriworkermap.properties file - the redirector doesn't know how to use this worker. Either you are missing the workers.properties configuration file or there is no definition for a worker named ajp13 in the file. A good starting point for a workers.properties file is the example file contained in the source distribution of version 1.2.30. Please do also use this version of the redirector. Note: from the point of view of Tomcat it doesn't really matter whether you are talking http or https in the browser. This protocol is only used between the browser and IIS. Between IIS and Tomcat when using the isapi redirector the protocol is always AJP13 (it is just coincidence, that this is the same name as the name of the worker in your logs). The protocol is similar to HTTP but binary and it transports the information whether
Re: Tomcat 6.0.18/ IIS 6.0 /SSL
On 04.08.2010 21:50, Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 wrote: I did read your post and I changed the Port Number. Connector port=8009 protocol=AJP/1.3 redirectPort=8443 / This connector should be used depending on your redirector config which we haven't seen yet Here is my workers.properties: worker.list=worker1 worker.worker1.type=ajp13 worker.worker1.host=127.0.0.1 worker.worker1.port=8009 Here is my uriworkermap.properties: /geoportal|/*=worker1 This didn't work, since the log snippet said it tried to use a worker named ajp13, not worker1. Regards, Rainer -Original Message- From: Rainer Jung [mailto:rainer.j...@kippdata.de] Sent: Wednesday, August 04, 2010 3:40 PM To: Tomcat Users List Subject: Re: Tomcat 6.0.18/ IIS 6.0 /SSL On 04.08.2010 20:58, Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 wrote: Jung, I'm still getting the errors. Why shouldn't you? Did you actually read my post? Which parts didn't you understand? Connector port=8080 protocol=Java HTTP What protocol should I use here (do not want to expose) connectionTimeout=2 redirectPort=80 / This connector is *not* involved when using Browser - IIS/Redirector - Tomcat Connector port=8443 protocol=HTTP/1.1 SSLEnabled=true -Does this look right? maxThreads=150 scheme=https secure=true clientAuth=false sslProtocol=TLSv1 keystoreFile=C:\Program Files (x86)\Apache Software Foundation\Tomcat 6.0\conf\cert.pfx keystorePass=password keystoreType=pkcs12 / This one neither. Connector port=8009 protocol=AJP/1.3 redirectPort=8443 / -Is this where my actual authentication is taking place? This connector should be used depending on your redirector config which we haven't seen yet. The error message you provided doesn't have to do with authentication. Authentication problems might show up after you solved your worker configuration problem. Until now your IIS doesn't even talk to Tomcat. Regards, Rainer -Original Message- From: Rainer Jung [mailto:rainer.j...@kippdata.de] Sent: Wednesday, August 04, 2010 1:38 PM To: Tomcat Users List Subject: Re: Tomcat 6.0.18/ IIS 6.0 /SSL On 04.08.2010 18:07, Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 wrote: I am trying to get Tomcat and IIS configured on my secure web server (SSL) so that I can access my deployed web application via https and NOT over http. Connection to non-SSL works, but I cannot have that connection due to security. I want to run Tomcat through IIS, and I have configured it using the isapi_redirect.dll (thanks to Electronjockey). However, when I try and hit my https://site/geoportalhttps://site/geoportal my credentials do not carry me through to the web application, instead I receive Internet Explorer Cannot Display Webpage. Can someone help me out on how to configure my server.xml and interpretting my log files please? I have even tried to export my server certificate, and call it using the keystore:, still not working. I'm a Tomcat green horn, any help would be awesome. Isapi_redirect.log file: Looks like some sort of authentication is being passed, then the ajp13 is not found? [Wed Aug 04 11:51:15.901 2010] [10712:8360] [debug] jk_isapi_plugin.c (3108): Service protocol=HTTP/1.1 method=GET host=150.125.174.70 addr=150.125.174.70 name=mywebsite port=443 auth=SSL/PCT user=EIMS\john.doe uri=/jakarta/isapi_redirect.dll [Wed Aug 04 11:51:15.916 2010] [10712:8360] [debug] jk_isapi_plugin.c (3120): Service request headers=5 attributes=9 chunked=no content-length=0 available=0 [Wed Aug 04 11:51:15.932 2010] [10712:8360] [debug] jk_worker.c (116): did not find a worker ajp13 [Wed Aug 04 11:51:15.948 2010] [10712:8360] [debug] jk_isapi_plugin.c (2162): could not get a worker for name ajp13 [Wed Aug 04 11:51:15.979 2010] [10712:8360] [error] jk_isapi_plugin.c (2210): could not get a worker for name ajp13 Hard to tell without knowing the version of the isapi redirector, not having your configuration. This looks like: - it is trying to use a worker named ajp13 to connect to Tomcat. Lile y you have configured the redirector to use this worker within your uriworkermap.properties file - the redirector doesn't know how to use this worker. Either you are missing the workers.properties configuration file or there is no definition for a worker named ajp13 in the file. A good starting point for a workers.properties file is the example file contained in the source distribution of version 1.2.30. Please do also use this version of the redirector. Note: from the point of view of Tomcat it doesn't really matter whether you are talking http or https in the browser. This protocol is only used between the browser and IIS. Between IIS and Tomcat when using the isapi redirector the protocol is always AJP13 (it is just coincidence, that this is the same name as the name
RE: Tomcat 6.0.18/ IIS 6.0 /SSL
Rainer, Do you have a suggestion? Do I need to change my worker.properties? Sorry, I'm new to Tomcat, I appreciate your help. -Original Message- From: Rainer Jung [mailto:rainer.j...@kippdata.de] Sent: Wednesday, August 04, 2010 4:09 PM To: Tomcat Users List Subject: Re: Tomcat 6.0.18/ IIS 6.0 /SSL On 04.08.2010 21:50, Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 wrote: I did read your post and I changed the Port Number. Connector port=8009 protocol=AJP/1.3 redirectPort=8443 / This connector should be used depending on your redirector config which we haven't seen yet Here is my workers.properties: worker.list=worker1 worker.worker1.type=ajp13 worker.worker1.host=127.0.0.1 worker.worker1.port=8009 Here is my uriworkermap.properties: /geoportal|/*=worker1 This didn't work, since the log snippet said it tried to use a worker named ajp13, not worker1. Regards, Rainer -Original Message- From: Rainer Jung [mailto:rainer.j...@kippdata.de] Sent: Wednesday, August 04, 2010 3:40 PM To: Tomcat Users List Subject: Re: Tomcat 6.0.18/ IIS 6.0 /SSL On 04.08.2010 20:58, Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 wrote: Jung, I'm still getting the errors. Why shouldn't you? Did you actually read my post? Which parts didn't you understand? Connector port=8080 protocol=Java HTTP What protocol should I use here (do not want to expose) connectionTimeout=2 redirectPort=80 / This connector is *not* involved when using Browser - IIS/Redirector - Tomcat Connector port=8443 protocol=HTTP/1.1 SSLEnabled=true -Does this look right? maxThreads=150 scheme=https secure=true clientAuth=false sslProtocol=TLSv1 keystoreFile=C:\Program Files (x86)\Apache Software Foundation\Tomcat 6.0\conf\cert.pfx keystorePass=password keystoreType=pkcs12 / This one neither. Connector port=8009 protocol=AJP/1.3 redirectPort=8443 / -Is this where my actual authentication is taking place? This connector should be used depending on your redirector config which we haven't seen yet. The error message you provided doesn't have to do with authentication. Authentication problems might show up after you solved your worker configuration problem. Until now your IIS doesn't even talk to Tomcat. Regards, Rainer -Original Message- From: Rainer Jung [mailto:rainer.j...@kippdata.de] Sent: Wednesday, August 04, 2010 1:38 PM To: Tomcat Users List Subject: Re: Tomcat 6.0.18/ IIS 6.0 /SSL On 04.08.2010 18:07, Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 wrote: I am trying to get Tomcat and IIS configured on my secure web server (SSL) so that I can access my deployed web application via https and NOT over http. Connection to non-SSL works, but I cannot have that connection due to security. I want to run Tomcat through IIS, and I have configured it using the isapi_redirect.dll (thanks to Electronjockey). However, when I try and hit my https://site/geoportalhttps://site/geoportal my credentials do not carry me through to the web application, instead I receive Internet Explorer Cannot Display Webpage. Can someone help me out on how to configure my server.xml and interpretting my log files please? I have even tried to export my server certificate, and call it using the keystore:, still not working. I'm a Tomcat green horn, any help would be awesome. Isapi_redirect.log file: Looks like some sort of authentication is being passed, then the ajp13 is not found? [Wed Aug 04 11:51:15.901 2010] [10712:8360] [debug] jk_isapi_plugin.c (3108): Service protocol=HTTP/1.1 method=GET host=150.125.174.70 addr=150.125.174.70 name=mywebsite port=443 auth=SSL/PCT user=EIMS\john.doe uri=/jakarta/isapi_redirect.dll [Wed Aug 04 11:51:15.916 2010] [10712:8360] [debug] jk_isapi_plugin.c (3120): Service request headers=5 attributes=9 chunked=no content-length=0 available=0 [Wed Aug 04 11:51:15.932 2010] [10712:8360] [debug] jk_worker.c (116): did not find a worker ajp13 [Wed Aug 04 11:51:15.948 2010] [10712:8360] [debug] jk_isapi_plugin.c (2162): could not get a worker for name ajp13 [Wed Aug 04 11:51:15.979 2010] [10712:8360] [error] jk_isapi_plugin.c (2210): could not get a worker for name ajp13 Hard to tell without knowing the version of the isapi redirector, not having your configuration. This looks like: - it is trying to use a worker named ajp13 to connect to Tomcat. Lile y you have configured the redirector to use this worker within your uriworkermap.properties file - the redirector doesn't know how to use this worker. Either you are missing the workers.properties configuration file or there is no definition for a worker named ajp13 in the file. A good starting point for a workers.properties file is the example file contained
Problem sending PDF from Tomcat thru IIS (mod_jk)
I have a java servlet the sends the PDF-file. Works fine when I browsing directly to Tomcat but not when trying to get the PDF thru IIS. IIS 6.0 Tomcat 6.0 isapi_redirect-1.2.28 MS Windows Server 2003 - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Problem sending PDF from Tomcat thru IIS (mod_jk)
ronnie.furus...@knowit.se wrote: I have a java servlet the sends the PDF-file. Works fine when I browsing directly to Tomcat but not when trying to get the PDF thru IIS. IIS 6.0 Tomcat 6.0 isapi_redirect-1.2.28 MS Windows Server 2003 http://catb.org/~esr/faqs/smart-questions.html - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Connector Issue - Tomcat 6.0/IIS 6.0
I can see the problem, but I don't yet have a solution. Usually the filter part of the redirector hecks whether to forward, saves the URL and sets the special URL /jakarta/isapi_redirect.dll. Then IIS calls the extension part of the redirector, which extracts the saved URL and does the forwarding. In your case IIS doesn't call the extension part with the special URL /jakarta/isapi_redirect.dll, instead it calls again the filter. I need to think about that. Just to make sure: - your redirector dll is actually has the file name isapi_redirect.dll? - check once more, whether you did this step correctly: Using the IIS management console, add a new virtual directory to your web site. The name of the virtual directory must be jakarta. Its physical path should be the directory where you placed isapi_redirect.dll. While creating this new virtual directory assign it with execute access. In case I find some time to try to reproduce: anything special about your IIS setup? Regards, Rainer On 07.05.2009 16:05, samr wrote: Accessing the same url from localhost:8080 displays the page without any problem. I have attached the IIS_Redirect log when accessing the url :http://localhost/examples/jsp/jsp2/el/basic-arithmetic.jsp The IIS Log from W3SVC for the same is: #Software: Microsoft Internet Information Services 6.0 #Version: 1.0 #Date: 2009-05-07 14:02:08 #Fields: date time s-sitename s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status 2009-05-07 14:02:08 W3SVC1 127.0.0.1 GET /examples/jsp/jsp2/el/basic-arithmetic.jsp - 80 - 127.0.0.1 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.4506.2152;+.NET+CLR+3.5.30729) 200 0 0 Rainer Jung-3 wrote: Your log snippet indicates, that the request was successfully forwarded to Tomcat and Tomcat returned with 404. Since you left out to much from the log, we can't say for sure, whether thew request in the redirector log is the same, as the 200 request in the IIS log. If you can provide access to more of the log, we can check that. Try to access the same URL that gives you a 404 directly via the HTTP port of Tomcat (usually 8080). If you get the same result there, then you first need to correct your Tomcat installation. If that works, but not via IIS, then provide the full redirector log of the startup and the single request that doesn't work for you. Regards, Rainer On 06.05.2009 23:43, samr wrote: Following are the versions of software I have installed on Windows2003 Server SP2 Tomcat-6.0.18 Java - Version 6 Update 13 IIS - 6.0 Tomcat Connector - 1.2.28 I have done the configuration consulting the tomcat site.Here is how isapi_redirect.properties looks like: extension_uri=/jakarta/isapi_redirect.dll log_file=c:\Tomcat\logs\iis_redirect.log log_level=debug worker_file=C:\Tomcat\conf\workers.properties worker_mount_file=C:\Tomcat\conf\uriworkermap.properties Workers.properties worker.list=ajp13 worker.ajp13.host=localhost worker.ajp13.port = 8009 worker.ajp13.type = ajp13 uriworkermap.properties /examples/*=ajp13 When I try to access a jsp page using IIS(http://localhost/examples/jsp/jsp2/el/basic-arithmetic.jsp) I get a Http Status 404 eror from Tomcat The IIS_Redirect log with 400 error is here(I am just pasting a few lines that are relevant, the redirect calls happen fine) [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_util.c (455): Pre-processed log time stamp format is '[%a %b %d %H:%M:%S.000 %Y] ' [Wed May 06 16:31:04.662 2009] [9352:9452] [info] jk_isapi_plugin.c (2398): Starting Jakarta/ISAPI/isapi_redirector/1.2.28 [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2416): Detected IIS version 6.0 [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2418): Using ini file C:\Tomcat\ISAPI\isapi_redirect.properties. [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2424): Using log file c:\Tomcat\logs\iis_redirect.log. [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2425): Using log level 1. [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2426): Using extension uri /jakarta/isapi_redirect.dll. [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2427): Using worker file C:\Tomcat\conf\workers.properties. [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2428): Using worker mount file C:\Tomcat\conf\uriworkermap.properties. [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2430): Using rewrite rule file . [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2432): Using uri select 3. [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2433): Using no chunked encoding. ... [Wed May 06 16:31:04.662 2009] [9352:9452] [debug
Re: Connector Issue - Tomcat 6.0/IIS 6.0
The redirect dll name is isapi_redirect.dll On the IIS: I am running IIS 6.0, .net Framework 3.5. I have a default website with several virtual directories. Most of them are asp.net sites. jakarta is also another virtual directory with execute access. The default App pool is configured to run with NetworkAccount. This is a part of the IIS_WPG user group. Also, Everyone has Read,Execute access on the ISAPI_REDIRECT.DLL physical folder. Thanks for your help. Samr Rainer Jung-3 wrote: I can see the problem, but I don't yet have a solution. Usually the filter part of the redirector hecks whether to forward, saves the URL and sets the special URL /jakarta/isapi_redirect.dll. Then IIS calls the extension part of the redirector, which extracts the saved URL and does the forwarding. In your case IIS doesn't call the extension part with the special URL /jakarta/isapi_redirect.dll, instead it calls again the filter. I need to think about that. Just to make sure: - your redirector dll is actually has the file name isapi_redirect.dll? - check once more, whether you did this step correctly: Using the IIS management console, add a new virtual directory to your web site. The name of the virtual directory must be jakarta. Its physical path should be the directory where you placed isapi_redirect.dll. While creating this new virtual directory assign it with execute access. In case I find some time to try to reproduce: anything special about your IIS setup? Regards, Rainer On 07.05.2009 16:05, samr wrote: Accessing the same url from localhost:8080 displays the page without any problem. I have attached the IIS_Redirect log when accessing the url :http://localhost/examples/jsp/jsp2/el/basic-arithmetic.jsp The IIS Log from W3SVC for the same is: #Software: Microsoft Internet Information Services 6.0 #Version: 1.0 #Date: 2009-05-07 14:02:08 #Fields: date time s-sitename s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status 2009-05-07 14:02:08 W3SVC1 127.0.0.1 GET /examples/jsp/jsp2/el/basic-arithmetic.jsp - 80 - 127.0.0.1 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.4506.2152;+.NET+CLR+3.5.30729) 200 0 0 Rainer Jung-3 wrote: Your log snippet indicates, that the request was successfully forwarded to Tomcat and Tomcat returned with 404. Since you left out to much from the log, we can't say for sure, whether thew request in the redirector log is the same, as the 200 request in the IIS log. If you can provide access to more of the log, we can check that. Try to access the same URL that gives you a 404 directly via the HTTP port of Tomcat (usually 8080). If you get the same result there, then you first need to correct your Tomcat installation. If that works, but not via IIS, then provide the full redirector log of the startup and the single request that doesn't work for you. Regards, Rainer On 06.05.2009 23:43, samr wrote: Following are the versions of software I have installed on Windows2003 Server SP2 Tomcat-6.0.18 Java - Version 6 Update 13 IIS - 6.0 Tomcat Connector - 1.2.28 I have done the configuration consulting the tomcat site.Here is how isapi_redirect.properties looks like: extension_uri=/jakarta/isapi_redirect.dll log_file=c:\Tomcat\logs\iis_redirect.log log_level=debug worker_file=C:\Tomcat\conf\workers.properties worker_mount_file=C:\Tomcat\conf\uriworkermap.properties Workers.properties worker.list=ajp13 worker.ajp13.host=localhost worker.ajp13.port = 8009 worker.ajp13.type = ajp13 uriworkermap.properties /examples/*=ajp13 When I try to access a jsp page using IIS(http://localhost/examples/jsp/jsp2/el/basic-arithmetic.jsp) I get a Http Status 404 eror from Tomcat The IIS_Redirect log with 400 error is here(I am just pasting a few lines that are relevant, the redirect calls happen fine) [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_util.c (455): Pre-processed log time stamp format is '[%a %b %d %H:%M:%S.000 %Y] ' [Wed May 06 16:31:04.662 2009] [9352:9452] [info] jk_isapi_plugin.c (2398): Starting Jakarta/ISAPI/isapi_redirector/1.2.28 [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2416): Detected IIS version 6.0 [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2418): Using ini file C:\Tomcat\ISAPI\isapi_redirect.properties. [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2424): Using log file c:\Tomcat\logs\iis_redirect.log. [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2425): Using log level 1. [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2426): Using extension uri /jakarta/isapi_redirect.dll. [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2427): Using worker file C:\Tomcat\conf
Re: Connector Issue - Tomcat 6.0/IIS 6.0
Your log snippet indicates, that the request was successfully forwarded to Tomcat and Tomcat returned with 404. Since you left out to much from the log, we can't say for sure, whether thew request in the redirector log is the same, as the 200 request in the IIS log. If you can provide access to more of the log, we can check that. Try to access the same URL that gives you a 404 directly via the HTTP port of Tomcat (usually 8080). If you get the same result there, then you first need to correct your Tomcat installation. If that works, but not via IIS, then provide the full redirector log of the startup and the single request that doesn't work for you. Regards, Rainer On 06.05.2009 23:43, samr wrote: Following are the versions of software I have installed on Windows2003 Server SP2 Tomcat-6.0.18 Java - Version 6 Update 13 IIS - 6.0 Tomcat Connector - 1.2.28 I have done the configuration consulting the tomcat site.Here is how isapi_redirect.properties looks like: extension_uri=/jakarta/isapi_redirect.dll log_file=c:\Tomcat\logs\iis_redirect.log log_level=debug worker_file=C:\Tomcat\conf\workers.properties worker_mount_file=C:\Tomcat\conf\uriworkermap.properties Workers.properties worker.list=ajp13 worker.ajp13.host=localhost worker.ajp13.port = 8009 worker.ajp13.type = ajp13 uriworkermap.properties /examples/*=ajp13 When I try to access a jsp page using IIS(http://localhost/examples/jsp/jsp2/el/basic-arithmetic.jsp) I get a Http Status 404 eror from Tomcat The IIS_Redirect log with 400 error is here(I am just pasting a few lines that are relevant, the redirect calls happen fine) [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_util.c (455): Pre-processed log time stamp format is '[%a %b %d %H:%M:%S.000 %Y] ' [Wed May 06 16:31:04.662 2009] [9352:9452] [info] jk_isapi_plugin.c (2398): Starting Jakarta/ISAPI/isapi_redirector/1.2.28 [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2416): Detected IIS version 6.0 [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2418): Using ini file C:\Tomcat\ISAPI\isapi_redirect.properties. [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2424): Using log file c:\Tomcat\logs\iis_redirect.log. [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2425): Using log level 1. [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2426): Using extension uri /jakarta/isapi_redirect.dll. [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2427): Using worker file C:\Tomcat\conf\workers.properties. [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2428): Using worker mount file C:\Tomcat\conf\uriworkermap.properties. [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2430): Using rewrite rule file . [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2432): Using uri select 3. [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2433): Using no chunked encoding. ... [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_map.c (490): Adding property '/examples/*' with value 'ajp13' to map. [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_uri_worker_map.c (1101): Loading urimaps from C:\Tomcat\conf\uriworkermap.properties with reload check interval 60 seconds [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_uri_worker_map.c (719): wildchar rule '/examples/*=ajp13' source 'uriworkermap' was added [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_uri_worker_map.c (171): [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_worker.c (242): creating worker ajp13 [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_worker.c (146): about to create instance ajp13 of ajp13 ... [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_uri_worker_map.c (171): uri map dump after extension stripping: index=0 file='C:\Tomcat\conf\uriworkermap.properties' reject_unsafe=0 reload=60 modified=1241645359 checked=1241645464 [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_uri_worker_map.c (176): generation 0: size=0 nosize=0 capacity=0 .. [Wed May 06 16:31:04.677 2009] [9352:9452] [debug] jk_ajp_common.c (2246): processing ajp13 with 2 retries [Wed May 06 16:31:04.677 2009] [9352:9452] [debug] jk_ajp_common.c (1461): (ajp13) all endpoints are disconnected. ... [Wed May 06 16:31:04.677 2009] [9352:9452] [debug] jk_ajp_common.c (1217): received from ajp13 pos=0 len=82 max=8192 ... [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2060): [/jakarta/isapi_redirect.dll] is not a servlet url . [Wed May 06 16:31:04.677 2009] [9352:9452] [debug] jk_ajp_common.c (660): status = 404 [Wed May 06 16:31:04.677 2009] [9352:9452] [debug] jk_ajp_common.c (1806): AJP13 protocol: Reuse is OK [Wed May 06 16:31:04.677 2009] [9352:9452] [debug] jk_isapi_plugin.c (2189): service
Re: Connector Issue - Tomcat 6.0/IIS 6.0
Accessing the same url from localhost:8080 displays the page without any problem. I have attached the IIS_Redirect log when accessing the url :http://localhost/examples/jsp/jsp2/el/basic-arithmetic.jsp The IIS Log from W3SVC for the same is: #Software: Microsoft Internet Information Services 6.0 #Version: 1.0 #Date: 2009-05-07 14:02:08 #Fields: date time s-sitename s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status 2009-05-07 14:02:08 W3SVC1 127.0.0.1 GET /examples/jsp/jsp2/el/basic-arithmetic.jsp - 80 - 127.0.0.1 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.4506.2152;+.NET+CLR+3.5.30729) 200 0 0 Rainer Jung-3 wrote: Your log snippet indicates, that the request was successfully forwarded to Tomcat and Tomcat returned with 404. Since you left out to much from the log, we can't say for sure, whether thew request in the redirector log is the same, as the 200 request in the IIS log. If you can provide access to more of the log, we can check that. Try to access the same URL that gives you a 404 directly via the HTTP port of Tomcat (usually 8080). If you get the same result there, then you first need to correct your Tomcat installation. If that works, but not via IIS, then provide the full redirector log of the startup and the single request that doesn't work for you. Regards, Rainer On 06.05.2009 23:43, samr wrote: Following are the versions of software I have installed on Windows2003 Server SP2 Tomcat-6.0.18 Java - Version 6 Update 13 IIS - 6.0 Tomcat Connector - 1.2.28 I have done the configuration consulting the tomcat site.Here is how isapi_redirect.properties looks like: extension_uri=/jakarta/isapi_redirect.dll log_file=c:\Tomcat\logs\iis_redirect.log log_level=debug worker_file=C:\Tomcat\conf\workers.properties worker_mount_file=C:\Tomcat\conf\uriworkermap.properties Workers.properties worker.list=ajp13 worker.ajp13.host=localhost worker.ajp13.port = 8009 worker.ajp13.type = ajp13 uriworkermap.properties /examples/*=ajp13 When I try to access a jsp page using IIS(http://localhost/examples/jsp/jsp2/el/basic-arithmetic.jsp) I get a Http Status 404 eror from Tomcat The IIS_Redirect log with 400 error is here(I am just pasting a few lines that are relevant, the redirect calls happen fine) [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_util.c (455): Pre-processed log time stamp format is '[%a %b %d %H:%M:%S.000 %Y] ' [Wed May 06 16:31:04.662 2009] [9352:9452] [info] jk_isapi_plugin.c (2398): Starting Jakarta/ISAPI/isapi_redirector/1.2.28 [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2416): Detected IIS version 6.0 [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2418): Using ini file C:\Tomcat\ISAPI\isapi_redirect.properties. [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2424): Using log file c:\Tomcat\logs\iis_redirect.log. [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2425): Using log level 1. [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2426): Using extension uri /jakarta/isapi_redirect.dll. [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2427): Using worker file C:\Tomcat\conf\workers.properties. [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2428): Using worker mount file C:\Tomcat\conf\uriworkermap.properties. [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2430): Using rewrite rule file . [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2432): Using uri select 3. [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2433): Using no chunked encoding. ... [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_map.c (490): Adding property '/examples/*' with value 'ajp13' to map. [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_uri_worker_map.c (1101): Loading urimaps from C:\Tomcat\conf\uriworkermap.properties with reload check interval 60 seconds [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_uri_worker_map.c (719): wildchar rule '/examples/*=ajp13' source 'uriworkermap' was added [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_uri_worker_map.c (171): [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_worker.c (242): creating worker ajp13 [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_worker.c (146): about to create instance ajp13 of ajp13 ... [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_uri_worker_map.c (171): uri map dump after extension stripping: index=0 file='C:\Tomcat\conf\uriworkermap.properties' reject_unsafe=0 reload=60 modified=1241645359 checked=1241645464 [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_uri_worker_map.c (176): generation 0: size=0
Connector Issue - Tomcat 6.0/IIS 6.0
Following are the versions of software I have installed on Windows2003 Server SP2 Tomcat-6.0.18 Java - Version 6 Update 13 IIS - 6.0 Tomcat Connector - 1.2.28 I have done the configuration consulting the tomcat site.Here is how isapi_redirect.properties looks like: extension_uri=/jakarta/isapi_redirect.dll log_file=c:\Tomcat\logs\iis_redirect.log log_level=debug worker_file=C:\Tomcat\conf\workers.properties worker_mount_file=C:\Tomcat\conf\uriworkermap.properties Workers.properties worker.list=ajp13 worker.ajp13.host=localhost worker.ajp13.port = 8009 worker.ajp13.type = ajp13 uriworkermap.properties /examples/*=ajp13 When I try to access a jsp page using IIS(http://localhost/examples/jsp/jsp2/el/basic-arithmetic.jsp) I get a Http Status 404 eror from Tomcat The IIS_Redirect log with 400 error is here(I am just pasting a few lines that are relevant, the redirect calls happen fine) [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_util.c (455): Pre-processed log time stamp format is '[%a %b %d %H:%M:%S.000 %Y] ' [Wed May 06 16:31:04.662 2009] [9352:9452] [info] jk_isapi_plugin.c (2398): Starting Jakarta/ISAPI/isapi_redirector/1.2.28 [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2416): Detected IIS version 6.0 [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2418): Using ini file C:\Tomcat\ISAPI\isapi_redirect.properties. [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2424): Using log file c:\Tomcat\logs\iis_redirect.log. [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2425): Using log level 1. [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2426): Using extension uri /jakarta/isapi_redirect.dll. [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2427): Using worker file C:\Tomcat\conf\workers.properties. [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2428): Using worker mount file C:\Tomcat\conf\uriworkermap.properties. [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2430): Using rewrite rule file . [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2432): Using uri select 3. [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2433): Using no chunked encoding. ... [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_map.c (490): Adding property '/examples/*' with value 'ajp13' to map. [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_uri_worker_map.c (1101): Loading urimaps from C:\Tomcat\conf\uriworkermap.properties with reload check interval 60 seconds [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_uri_worker_map.c (719): wildchar rule '/examples/*=ajp13' source 'uriworkermap' was added [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_uri_worker_map.c (171): [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_worker.c (242): creating worker ajp13 [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_worker.c (146): about to create instance ajp13 of ajp13 ... [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_uri_worker_map.c (171): uri map dump after extension stripping: index=0 file='C:\Tomcat\conf\uriworkermap.properties' reject_unsafe=0 reload=60 modified=1241645359 checked=1241645464 [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_uri_worker_map.c (176): generation 0: size=0 nosize=0 capacity=0 .. [Wed May 06 16:31:04.677 2009] [9352:9452] [debug] jk_ajp_common.c (2246): processing ajp13 with 2 retries [Wed May 06 16:31:04.677 2009] [9352:9452] [debug] jk_ajp_common.c (1461): (ajp13) all endpoints are disconnected. ... [Wed May 06 16:31:04.677 2009] [9352:9452] [debug] jk_ajp_common.c (1217): received from ajp13 pos=0 len=82 max=8192 ... [Wed May 06 16:31:04.662 2009] [9352:9452] [debug] jk_isapi_plugin.c (2060): [/jakarta/isapi_redirect.dll] is not a servlet url . [Wed May 06 16:31:04.677 2009] [9352:9452] [debug] jk_ajp_common.c (660): status = 404 [Wed May 06 16:31:04.677 2009] [9352:9452] [debug] jk_ajp_common.c (1806): AJP13 protocol: Reuse is OK [Wed May 06 16:31:04.677 2009] [9352:9452] [debug] jk_isapi_plugin.c (2189): service() returned OK [Wed May 06 16:31:04.677 2009] [9352:9452] [debug] jk_ajp_common.c (743): (ajp13) resetting endpoint with sd = 620 [Wed May 06 16:31:04.677 2009] [9352:9452] [debug] jk_ajp_common.c (2850): recycling connection pool slot=0 for worker ajp13 The IIS log from W3SVC shows that the get was o.k.(Code 200) #Software: Microsoft Internet Information Services 6.0 #Version: 1.0 #Date: 2009-05-06 21:31:04 #Fields: date time s-sitename s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status 2009-05-06 21:31:04 W3SVC1 127.0.0.1 GET /examples/jsp/jsp2/el/basic-arithmetic.jsp - 80 - 127.0.0.1 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.4506.2152;+.NET+CLR+3.5.30729) 200 0 0
RE: Redurect URL From Tomcat to IIS
From: akkad [mailto:ahmed.ak...@gmail.com] Subject: Redurect URL From Tomcat to IIS the tomcat server is directly connected to the internet and also it has dhcp which assign the IIS server IP address The above is not at all clear and is probably key to your issue. http://tomcatserver/index.html http://iisserver/index.html then tomcat Are you saying that both tomcatserver and iisserver resolve to the IP address of the Tomcat box? Why don't you simply correct your DNS entries to have iisserver resolve to the IIS box? - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Redurect URL From Tomcat to IIS
i have 2 web servers, one is apache tomcat v6, and the other is IIS v6, both are on the same network, the tomcat server is directly connected to the internet and also it has dhcp which assign the IIS server IP address, what am looking for is that when apache has an http request like http://tomcatserver/index.html then it will responses its index.html, but if it will receive a request like http://iisserver/index.html then tomcat should forward the request to the IIS server and then receive the response from the IIS and redirect it to client whom issued the request, so in short words, am wondering if tomcat is capable to translate the requested URLs and redirect them to a specific IP/Port, i read about connectors but am not sure if apache connectors is what really am looking for, any suggestions? -- View this message in context: http://www.nabble.com/Redurect-URL-From-Tomcat-to-IIS-tp23346521p23346521.html Sent from the Tomcat - User mailing list archive at Nabble.com. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Redurect URL From Tomcat to IIS
akkad wrote: i have 2 web servers, one is apache tomcat v6, and the other is IIS v6, both are on the same network, the tomcat server is directly connected to the internet and also it has dhcp which assign the IIS server IP address, what am looking for is that when apache has an http request like http://tomcatserver/index.html then it will responses its index.html, but if it will receive a request like http://iisserver/index.html then tomcat should forward the request to the IIS server and then receive the response from the IIS and redirect it to client whom issued the request, so in short words, am wondering if tomcat is capable to translate the requested URLs and redirect them to a specific IP/Port, i read about connectors but am not sure if apache connectors is what really am looking for, any suggestions? I don't really understand that bit above about ..and also it has dhcp which assign the IIS server... So ignoring for the moment the part about DHCP.. What it sounds like you want to do above, is make Tomcat act as a proxy server for the IIS server. I don't think Tomcat can do that (easily), and in any case it is not something that Tomcat is really optimised to do. What you should probably use in this case, is something else that sits in front of Tomcat /and/ IIS, and distributes the requests to the appropriate back-end. You could do that easily with an Apache httpd server. client -- Apache httpd -- tomcatserver/index.html ? -- Tomcat -- iisserver/index.html ? -- IIS In Apache, you could use mod_proxy to forward what needs to be forwarded. You could also turn things around, and have your IIS server in front, forwarding to Tomcat when needed. Apache/Tomcat connectors, or IIS/Tomcat connectors, are modules that sit at the level of a HTTP server front-end (Apache or IIS), and forward requests to Tomcat (back-end). The AJP redirector (for IIS), the mod_proxy_http and mod_proxy_ajp and mod_jk modules (for Apache) are such Connectors. For example, in the schema above, they are at the level where you see tomcatserver/index.html ?. But they do not redirect from Tomcat to something else, it's the opposite. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: windows 2k3 / Tomcat 6 / IIS configuration - randomlylosing sessions
On 22.04.2009 06:44, Caldarale, Charles R wrote:
From: Menachem Husarsky [mailto:husar...@hotmail.com] Subject: Re:
Re: windows 2k3 / Tomcat 6 / IIS configuration - randomlylosing
sessions
Do you have any suggestions for me for how to debug this in a
finer more controlled fashion?
Have you implemented an HttpSessionListener to track the comings and
goings? This, coupled with request/response logging, might at least
give you a better idea of which is the more likely of the two failure
scenarios you've considered.
You can also log %{Cookie}i, %{Set-Cookie}o and the actual session id in
your Tomcat access log. You need to activate it and replace the default
pattern common by something like e.g.
%h %l %u %t quot;%rquot; %s %b
quot;%{Cookie}iquot; quot;%{Set-Cookie}oquot; %S %D
(all on one line)
Regards,
Rainer
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
Re: windows 2k3 / Tomcat 6 / IIS configuration - randomly losing sessions
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Michael, On 4/22/2009 12:25 AM, Menachem Husarsky wrote: Christopher Schultz wrote: Are all your customers using Cookies? Yes. However, URL rewriting is disabled. Er.. how did you do this? Tomcat offers no way to disable URL rewriting. Or, did you implement one of those nasty jsessionid-stripping filters? When I turn off cookies in any of my browsers, our website's cart functionality will not work, so if customers are complaining about their cart's being purged in the middle of checkout it is not a cookie issue with their browsers. Okay. Do you ever switch hostnames during any of the website interactions? That would break your Cookie trail and you would observe the user's session disappearing. The same thing can happen if the session cookie was created using HTTPS and then you switch to HTTP. No we do not switch host names. customers start their sessions in HTTP and switch to HTTPS to complete checkout. Not the other way around. Good. The other way around is problematic. If you are instrumenting your application, you might consider logging the secure attribute of the session cookie being observed. If you find one marked as secure you could have a problem (and the solution is to only create session cookies in non-secure mode). Can you give us more information about the circumstances? Does it always happen during a particular page transition? What else do these failures have in common? It seems to happen during a transition from any one page to another, but losing sessions, primarily interests me when it occurs during the checkout process. we're recording the cart purge on various checkout pages. Is the session actively killed, or does the client just lose track of the session id (or cookie, or whatever)? I don't perceive any particular commonality. At first i thought it was a browser issue, because it was happening to people who use IE 7. However, recently I noticed it occurring to Mozilla Firefox users as well. I have ruled out a browser issue client side as the culprit, especially in light of the fact that this worked fine for years with resin. One thing I have noticed is sometimes, a particular customer would get their cart purged in the middle of a checkout session, and then it would happen to the same customer/IP a few minutes later. This is why i pursued the browser line of thinking, but it doesn't explain why things worked fine for years in resin. Just remember that you didn't just change-out Resin for Tomcat. Your OP said that you changed hosting environments, too, so other factors are likely at play. If you now went back to Resin (replaced TC with Resin, but stayed with your current environment), I would expect that Resin would fail in the same way. Right now I'm pursuing two lines of thinking: 1) somehow tomcat is in fact killing off the session, so on the next request the user get's a new session, thus purging their cart since our cart system uses sessions for storage. Tomcat will only kill the session if session.invalidate() is called, or if the session times out. I suspect you aren't explicitly setting your session timeouts, which means that they are getting the default timeout of 30 minutes. You can instrument your application by doing the following to see if the session is being killed by something during a request: 1. Write a Filter that... 2. wraps the HttpServletRequest with an object that... 3. intercepts calls to getSession and wraps the HttpSession object with... 4. an object that logs calls to the invalidate method Remember to log stack traces ;) 2) somehow amid page redirects, tomcat doesn't get the session ID from the browser and therefore issues to the browser a new session ID, so although the cart exists under the old session object, the user effectively loses their cart by receiving a new session. I would instrument the client using something like LiveHttpHeaders (when is Daniel going to support ff3.5?!) or IEHeaders (or whatever it is for MSIE) to see the chain of events that leads to session loss. Obviously, being able to reproduce this error is essential, so it's too bad that you haven't been able to do it yourself. If you have enough information in the web server logs, you can probably identify a problem case, then go back and look at their other requests to piece-together the chain of events. Note that Apache httpd can log cookie values if you ask it to do so, and I suspect that the AccessLogValve can do so, too. Do you have any suggestions for me for how to debug this in a finer more controlled fashion? Unfortunately, not being able to reproduce the problem is your biggest problem. Once you can do that, identifying and resolving the problem becomes *much* easier. Collecting more information when you identify these cases will certainly help with reproducibility. Good luck, - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (MingW32) Comment: Using
Re: windows 2k3 / Tomcat 6 / IIS configuration - randomly losing sessions
Christopher Schultz wrote: I would instrument the client using something like LiveHttpHeaders (when is Daniel going to support ff3.5?!) try HttpFox. or IEHeaders (or whatever it is for MSIE) Fiddler2 - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: windows 2k3 / Tomcat 6 / IIS configuration - randomly losing sessions
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Michael, On 4/19/2009 3:09 PM, Menachem Husarsky wrote: We have multiple sites on our old host that ran under IIS and Resin fine for years, we recently switched to a dedicated server using windows 2k3 [still using IIS with Tomcat 6.0.x connected with mod_jk's isapi redirector version 1.2.27]. [snip] The problem started from day one. each day across all our sites, some shoppers will randomly have their carts purged out right in the middle of their checkout process. Are all your customers using Cookies? If some people are using URL rewriting because cookies aren't supported, you might be losing the session id due to an accidentally non-encoded URL. But that would have had the same problem under Resin, so it's unlikely to be the problem. Do you ever switch hostnames during any of the website interactions? That would break your Cookie trail and you would observe the user's session disappearing. The same thing can happen if the session cookie was created using HTTPS and then you switch to HTTP. My only conclusion is somehow these customers are losing their sessions and being issued new ones. It seems to do this randomly and I can't seem to replicate the error myself, but I am recording how often it occurs to other people. Can you give us more information about the circumstances? Does it always happen during a particular page transition? What else do these failures have in common? I'm uncertain who is the culprit here (IIS or Tomcat or TomcatRedirector). It's unlikely to be IIS or the redirector... they just pass-through the session identification information to Tomcat. I have read other entries with people who have similar problems, but there doesn't seem to be much in the way of solutions. I think that's because these issues are often complex and the solutions are not very generalizable. The problem typically turns out to be the application itself or network configuration or something like that. There is no setting in Tomcat to make it stop losing your sessions (and if there were, I'm sure it would be on by default). - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAknuKX4ACgkQ9CaO5/Lv0PCKnwCfdwp3UXUckpV49KjOS5wUg27s ESkAoKWLl3Dl8owc8CvyrdHGsrIz3vNB =E4s5 -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Re: windows 2k3 / Tomcat 6 / IIS configuration - randomly losing sessions
Chris, Firstly, thanks for helping out. Here are my responses to your questions. Are all your customers using Cookies? Yes. However, URL rewriting is disabled. When I turn off cookies in any of my browsers, our website's cart functionality will not work, so if customers are complaining about their cart's being purged in the middle of checkout it is not a cookie issue with their browsers. Do you ever switch hostnames during any of the website interactions? That would break your Cookie trail and you would observe the user's session disappearing. The same thing can happen if the session cookie was created using HTTPS and then you switch to HTTP. No we do not switch host names. customers start their sessions in HTTP and switch to HTTPS to complete checkout. Not the other way around. Can you give us more information about the circumstances? Does it always happen during a particular page transition? What else do these failures have in common? It seems to happen during a transition from any one page to another, but losing sessions, primarily interests me when it occurs during the checkout process. we're recording the cart purge on various checkout pages. I don't perceive any particular commonality. At first i thought it was a browser issue, because it was happening to people who use IE 7. However, recently I noticed it occurring to Mozilla Firefox users as well. I have ruled out a browser issue client side as the culprit, especially in light of the fact that this worked fine for years with resin. One thing I have noticed is sometimes, a particular customer would get their cart purged in the middle of a checkout session, and then it would happen to the same customer/IP a few minutes later. This is why i pursued the browser line of thinking, but it doesn't explain why things worked fine for years in resin. Right now I'm pursuing two lines of thinking: 1) somehow tomcat is in fact killing off the session, so on the next request the user get's a new session, thus purging their cart since our cart system uses sessions for storage. 2) somehow amid page redirects, tomcat doesn't get the session ID from the browser and therefore issues to the browser a new session ID, so although the cart exists under the old session object, the user effectively loses their cart by receiving a new session. Do you have any suggestions for me for how to debug this in a finer more controlled fashion? Michael, _ Windows Live™ SkyDrive™: Get 25 GB of free online storage. http://windowslive.com/online/skydrive?ocid=TXT_TAGLM_WL_skydrive_042009
RE: Re: windows 2k3 / Tomcat 6 / IIS configuration - randomlylosing sessions
From: Menachem Husarsky [mailto:husar...@hotmail.com] Subject: Re: Re: windows 2k3 / Tomcat 6 / IIS configuration - randomlylosing sessions Do you have any suggestions for me for how to debug this in a finer more controlled fashion? Have you implemented an HttpSessionListener to track the comings and goings? This, coupled with request/response logging, might at least give you a better idea of which is the more likely of the two failure scenarios you've considered. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
windows 2k3 / Tomcat 6 / IIS configuration - randomly losing sessions
I'll start by giving a brief history: We have multiple sites on our old host that ran under IIS and Resin fine for years, we recently switched to a dedicated server using windows 2k3. Under IIS we installed the isapi connector tool from apache version 1.2.27, and we are currently using tomcat 6 for all our sites. The problem started from day one. each day across all our sites, some shoppers will randomly have their carts purged out right in the middle of their checkout process. I have determined this isn't a browser cookie issue, as they had a solid session going otherwise they wouldn't have been able to enter products into their cart and begin the checkout process. I also know customers are within the 30 timeout window as they have emailed us stating not 5 minutes after entering checkout they were sent back to their cart page with an empty cart message. My only conclusion is somehow these customers are losing their sessions and being issued new ones. It seems to do this randomly and I can't seem to replicate the error myself, but I am recording how often it occurs to other people. I'm uncertain who is the culprit here (IIS or Tomcat or TomcatRedirector). I have read other entries with people who have similar problems, but there doesn't seem to be much in the way of solutions. Can anyone please point me in the right direction as to figure out where to go from here? I've reached a dead end, and don't know how to proceed. Thank you for any help or advice anyone can offer me. Michael husar...@hotmail.com _ Rediscover Hotmail®: Now available on your iPhone or BlackBerry http://windowslive.com/RediscoverHotmail?ocid=TXT_TAGLM_WL_HM_Rediscover_Mobile2_042009
Fwd: Tomcat 6/IIS/Windows 2003 Server x64 (Intel E2180)
Hi all, I've been using tomcat and the isapi filter with win32 for years now. I recently tried to get tomcat 6 working on windows server 2003 x64 and have run into trouble. Using the Tomcat Connector 1.2.27 64-bit, I get the dreaded red arrow next to the ISAPI filter in IIS. I have tried both AMD and Intel versions of the connector, as well both using isapi_redirect.properties and registry settings to configure the dll. Nothing seems to work. No useful error messages or logging either. Has anyone ever managed to a setup like this working? I'm shocked that after all these years no windows guru has put together a comprehensive installer for IIS and tomcat that just works. Thanks! - Mark
AW: Tomcat 6/IIS/Windows 2003 Server x64 (Intel E2180)
Hi, Please excuse if this is a stupid idea in your case, but we had the same issue, until we realized that the hosting provider setup IIS x32. Did you check in task-manager if the IIS is actually running 64bits (without the asterisk)? We gave the 32bit dlls a try and - tada just works. With best regards, Thomas -Ursprüngliche Nachricht- Von: Mark Brocato [mailto:mvbroc...@biofortis.com] Gesendet: Dienstag, 3. Februar 2009 23:45 An: users@tomcat.apache.org Betreff: Fwd: Tomcat 6/IIS/Windows 2003 Server x64 (Intel E2180) Hi all, I've been using tomcat and the isapi filter with win32 for years now. I recently tried to get tomcat 6 working on windows server 2003 x64 and have run into trouble. Using the Tomcat Connector 1.2.27 64-bit, I get the dreaded red arrow next to the ISAPI filter in IIS. I have tried both AMD and Intel versions of the connector, as well both using isapi_redirect.properties and registry settings to configure the dll. Nothing seems to work. No useful error messages or logging either. Has anyone ever managed to a setup like this working? I'm shocked that after all these years no windows guru has put together a comprehensive installer for IIS and tomcat that just works. Thanks! - Mark -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: AW: Tomcat 6/IIS/Windows 2003 Server x64 (Intel E2180)
I actually installed the OS myself, so I'm sure it's 64-bit. - Mark On Feb 3, 2009, at 5:59 PM, Thomas Strauß wrote: Hi, Please excuse if this is a stupid idea in your case, but we had the same issue, until we realized that the hosting provider setup IIS x32. Did you check in task-manager if the IIS is actually running 64bits (without the asterisk)? We gave the 32bit dlls a try and - tada just works. With best regards, Thomas -Ursprüngliche Nachricht- Von: Mark Brocato [mailto:mvbroc...@biofortis.com] Gesendet: Dienstag, 3. Februar 2009 23:45 An: users@tomcat.apache.org Betreff: Fwd: Tomcat 6/IIS/Windows 2003 Server x64 (Intel E2180) Hi all, I've been using tomcat and the isapi filter with win32 for years now. I recently tried to get tomcat 6 working on windows server 2003 x64 and have run into trouble. Using the Tomcat Connector 1.2.27 64-bit, I get the dreaded red arrow next to the ISAPI filter in IIS. I have tried both AMD and Intel versions of the connector, as well both using isapi_redirect.properties and registry settings to configure the dll. Nothing seems to work. No useful error messages or logging either. Has anyone ever managed to a setup like this working? I'm shocked that after all these years no windows guru has put together a comprehensive installer for IIS and tomcat that just works. Thanks! - Mark -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Tomcat and IIS - I almost have it working, but...
Thanks for the help! The problem was a missing step in the configuration document (http://tomcat.apache.org/connectors-doc/webserver_howto/iis.html ) which I found in http://www.cflex.net/showFileDetails.cfm?ObjectID=296) - Next add a Web Service Extension. This needs to be done manually because the install works for IIS 5 and 6, but Web Service Extension only applies to IIS 6. Open the ... Administrative Tools, Internet Information Services console. In the tree on the left, click Web Service Extensions In the right hand pane, click Add a new Web Service Extension For the Extension Name, enter: Jakarta Tomcat Click the Add button. Browse and select C:\Program Files\Apache Software Foundation\Jakarta Isapi Redirector\bin\isapi_redirector.dll Click the Allow button. DO NOT MISS THIS STEP! From the Services MMC, restart IIS Admin If someone could update the document that would be great! Thanks again - Mike -Original Message- From: Rainer Jung [mailto:[EMAIL PROTECTED] Sent: Saturday, July 12, 2008 8:02 AM To: Tomcat Users List Subject: Re: Tomcat and IIS - I almost have it working, but... Michael Dubno schrieb: I have (as far as I can tell) an IIS 6.0 server configured to redirect requests to a Tomcat 4.1.24 server. Except it doesn't seem to actually send the forwarded URL to the Tomcat server. The configuration seems to be correct on the IIS server. Here is the isapi.log excerpt - ... [Tue Jul 08 15:23:10.926 2008] [7772:7804] [debug] jk_isapi_plugin.c (1336): fowarding escaped URI [/homeserver/servlet/Home] Even though the last line in the log says that it is forwarding an uscaped URI nothing seems to actually be forwarded to the Tomcat server. The Tomcat's log files show no activity but I know the ajp13 service is listening because if I telnet to port 8009 on the machine and type junk it appears as a hex dump in the log file. Here are the configuration files on the IIS server - So it looks to me like everything is running except for some reason the forwarded URI never makes it to the Tomcat server. All I get is page not found errors when I try using a browser. Any help to get this working would be greatly appreciated since I'm trying to move off of a dying linux box. I would expect, that something with the IIS setup is still not correct. The extension would log a line like Service protocol=%s method=%s host=%s addr=%s name=%s port=%d auth=%s user=%s uri=%s with log level debug, immediately before it actually tries to send somethin to Tomcat. There are some additional hints about the isapi plugin and IIS 6: http://marc.info/?l=tomcat-userm=121159642020411w=2 http://marc.info/?l=tomcat-userm=121154940112993w=2 Do they help? Regards, Rainer - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Tomcat and IIS - I almost have it working, but...
Michael Dubno schrieb: Thanks for the help! The problem was a missing step in the configuration document (http://tomcat.apache.org/connectors-doc/webserver_howto/iis.html ) which I found in http://www.cflex.net/showFileDetails.cfm?ObjectID=296) - Next add a Web Service Extension. This needs to be done manually because the install works for IIS 5 and 6, but Web Service Extension only applies to IIS 6. Open the ... Administrative Tools, Internet Information Services console. In the tree on the left, click Web Service Extensions In the right hand pane, click Add a new Web Service Extension For the Extension Name, enter: Jakarta Tomcat Click the Add button. Browse and select C:\Program Files\Apache Software Foundation\Jakarta Isapi Redirector\bin\isapi_redirector.dll Click the Allow button. DO NOT MISS THIS STEP! From the Services MMC, restart IIS Admin If someone could update the document that would be great! Thanks again - Mike Thanks for the information. We already got that feedback (didn't know though, that it triggers your symptom) and had the additional text in the latest docs version in the repository. But we usually publish the updated docs, when the next release is done. In this case, I now updated that single web page. It should be visible after the next sync in a few hours. Sorry for reacting so late and thanks for reassuring us, that this *is* a problem. Regards, Rainer -Original Message- From: Rainer Jung [mailto:[EMAIL PROTECTED] Sent: Saturday, July 12, 2008 8:02 AM To: Tomcat Users List Subject: Re: Tomcat and IIS - I almost have it working, but... Michael Dubno schrieb: I have (as far as I can tell) an IIS 6.0 server configured to redirect requests to a Tomcat 4.1.24 server. Except it doesn't seem to actually send the forwarded URL to the Tomcat server. The configuration seems to be correct on the IIS server. Here is the isapi.log excerpt - ... [Tue Jul 08 15:23:10.926 2008] [7772:7804] [debug] jk_isapi_plugin.c (1336): fowarding escaped URI [/homeserver/servlet/Home] Even though the last line in the log says that it is forwarding an uscaped URI nothing seems to actually be forwarded to the Tomcat server. The Tomcat's log files show no activity but I know the ajp13 service is listening because if I telnet to port 8009 on the machine and type junk it appears as a hex dump in the log file. Here are the configuration files on the IIS server - So it looks to me like everything is running except for some reason the forwarded URI never makes it to the Tomcat server. All I get is page not found errors when I try using a browser. Any help to get this working would be greatly appreciated since I'm trying to move off of a dying linux box. I would expect, that something with the IIS setup is still not correct. The extension would log a line like Service protocol=%s method=%s host=%s addr=%s name=%s port=%d auth=%s user=%s uri=%s with log level debug, immediately before it actually tries to send somethin to Tomcat. There are some additional hints about the isapi plugin and IIS 6: http://marc.info/?l=tomcat-userm=121159642020411w=2 http://marc.info/?l=tomcat-userm=121154940112993w=2 Do they help? Regards, Rainer - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Tomcat and IIS - I almost have it working, but...
I just checked the documentation on the website and the changes look great. Thanks for the quick update. - Mike -Original Message- From: Rainer Jung [mailto:[EMAIL PROTECTED] Sent: Wednesday, July 16, 2008 4:10 PM To: Tomcat Users List Subject: Re: Tomcat and IIS - I almost have it working, but... Michael Dubno schrieb: Thanks for the help! The problem was a missing step in the configuration document (http://tomcat.apache.org/connectors-doc/webserver_howto/iis.html ) which I found in http://www.cflex.net/showFileDetails.cfm?ObjectID=296) - Next add a Web Service Extension. This needs to be done manually because the install works for IIS 5 and 6, but Web Service Extension only applies to IIS 6. Open the ... Administrative Tools, Internet Information Services console. In the tree on the left, click Web Service Extensions In the right hand pane, click Add a new Web Service Extension For the Extension Name, enter: Jakarta Tomcat Click the Add button. Browse and select C:\Program Files\Apache Software Foundation\Jakarta Isapi Redirector\bin\isapi_redirector.dll Click the Allow button. DO NOT MISS THIS STEP! From the Services MMC, restart IIS Admin If someone could update the document that would be great! Thanks again - Mike Thanks for the information. We already got that feedback (didn't know though, that it triggers your symptom) and had the additional text in the latest docs version in the repository. But we usually publish the updated docs, when the next release is done. In this case, I now updated that single web page. It should be visible after the next sync in a few hours. Sorry for reacting so late and thanks for reassuring us, that this *is* a problem. Regards, Rainer -Original Message- From: Rainer Jung [mailto:[EMAIL PROTECTED] Sent: Saturday, July 12, 2008 8:02 AM To: Tomcat Users List Subject: Re: Tomcat and IIS - I almost have it working, but... Michael Dubno schrieb: I have (as far as I can tell) an IIS 6.0 server configured to redirect requests to a Tomcat 4.1.24 server. Except it doesn't seem to actually send the forwarded URL to the Tomcat server. The configuration seems to be correct on the IIS server. Here is the isapi.log excerpt - ... [Tue Jul 08 15:23:10.926 2008] [7772:7804] [debug] jk_isapi_plugin.c (1336): fowarding escaped URI [/homeserver/servlet/Home] Even though the last line in the log says that it is forwarding an uscaped URI nothing seems to actually be forwarded to the Tomcat server. The Tomcat's log files show no activity but I know the ajp13 service is listening because if I telnet to port 8009 on the machine and type junk it appears as a hex dump in the log file. Here are the configuration files on the IIS server - So it looks to me like everything is running except for some reason the forwarded URI never makes it to the Tomcat server. All I get is page not found errors when I try using a browser. Any help to get this working would be greatly appreciated since I'm trying to move off of a dying linux box. I would expect, that something with the IIS setup is still not correct. The extension would log a line like Service protocol=%s method=%s host=%s addr=%s name=%s port=%d auth=%s user=%s uri=%s with log level debug, immediately before it actually tries to send somethin to Tomcat. There are some additional hints about the isapi plugin and IIS 6: http://marc.info/?l=tomcat-userm=121159642020411w=2 http://marc.info/?l=tomcat-userm=121154940112993w=2 Do they help? Regards, Rainer - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Tomcat and IIS - I almost have it working, but...
Michael Dubno schrieb: I have (as far as I can tell) an IIS 6.0 server configured to redirect requests to a Tomcat 4.1.24 server. Except it doesn't seem to actually send the forwarded URL to the Tomcat server. The configuration seems to be correct on the IIS server. Here is the isapi.log excerpt - ... [Tue Jul 08 15:23:10.926 2008] [7772:7804] [debug] jk_isapi_plugin.c (1336): fowarding escaped URI [/homeserver/servlet/Home] Even though the last line in the log says that it is forwarding an uscaped URI nothing seems to actually be forwarded to the Tomcat server. The Tomcat's log files show no activity but I know the ajp13 service is listening because if I telnet to port 8009 on the machine and type junk it appears as a hex dump in the log file. Here are the configuration files on the IIS server - So it looks to me like everything is running except for some reason the forwarded URI never makes it to the Tomcat server. All I get is page not found errors when I try using a browser. Any help to get this working would be greatly appreciated since I'm trying to move off of a dying linux box. I would expect, that something with the IIS setup is still not correct. The extension would log a line like Service protocol=%s method=%s host=%s addr=%s name=%s port=%d auth=%s user=%s uri=%s with log level debug, immediately before it actually tries to send somethin to Tomcat. There are some additional hints about the isapi plugin and IIS 6: http://marc.info/?l=tomcat-userm=121159642020411w=2 http://marc.info/?l=tomcat-userm=121154940112993w=2 Do they help? Regards, Rainer - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Tomcat and IIS - I almost have it working, but...
I have (as far as I can tell) an IIS 6.0 server configured to redirect requests to a Tomcat 4.1.24 server. Except it doesn't seem to actually send the forwarded URL to the Tomcat server. The configuration seems to be correct on the IIS server. Here is the isapi.log excerpt - [Tue Jul 08 15:23:10.926 2008] [7772:7804] [debug] jk_isapi_plugin.c (1199): Filter started [Tue Jul 08 15:23:10.926 2008] [7772:7804] [debug] jk_uri_worker_map.c (682): Attempting to map URI '/192.168.2.74/homeserver/servlet/Home' from 1 maps [Tue Jul 08 15:23:10.926 2008] [7772:7804] [debug] jk_uri_worker_map.c (503): Attempting to map context URI '/homeserver/*=homeserver' source 'uriworkermap' [Tue Jul 08 15:23:10.926 2008] [7772:7804] [debug] jk_uri_worker_map.c (503): Attempting to map context URI '/homeserver/*=homeserver' source 'uriworkermap' [Tue Jul 08 15:23:10.926 2008] [7772:7804] [debug] jk_uri_worker_map.c (516): Found a wildchar match '/homeserver/*=homeserver' [Tue Jul 08 15:23:10.926 2008] [7772:7804] [debug] jk_isapi_plugin.c (1277): check if [/homeserver/servlet/Home] points to the web-inf directory [Tue Jul 08 15:23:10.926 2008] [7772:7804] [debug] jk_isapi_plugin.c (1294): [/homeserver/servlet/Home] is a servlet url - should redirect to homeserver [Tue Jul 08 15:23:10.926 2008] [7772:7804] [debug] jk_isapi_plugin.c (1336): fowarding escaped URI [/homeserver/servlet/Home] Even though the last line in the log says that it is forwarding an uscaped URI nothing seems to actually be forwarded to the Tomcat server. The Tomcat's log files show no activity but I know the ajp13 service is listening because if I telnet to port 8009 on the machine and type junk it appears as a hex dump in the log file. Here are the configuration files on the IIS server - uriworkermap.properties: /homeserver/*=homeserver workers.properties: # Define 1 real worker using ajp13 worker.list=homeserver # Set properties for homeserver (ajp13) worker.homeserver.type=ajp13 worker.homeserver.host=192.168.2.10 worker.homeserver.port=8009 Here is a snippet of catalina.out on the Tomcat server - === Ajp13Connector active threads=6 java.lang.ThreadGroup[name=Ajp13Connector[8009],maxpri=10] Thread[Ajp13Connector[8009],5,Ajp13Connector[8009]] Thread[Ajp13Processor[8009][0],5,Ajp13Connector[8009]] Thread[Ajp13Processor[8009][1],5,Ajp13Connector[8009]] Thread[Ajp13Processor[8009][2],5,Ajp13Connector[8009]] Thread[Ajp13Processor[8009][3],5,Ajp13Connector[8009]] Thread[Ajp13Processor[8009][4],5,Ajp13Connector[8009]] === And here is the server.xml on the Tomcat server - Server port=8005 shutdown=SHUTDOWN debug=0 Service name=Tomcat-Standalone Connector className=org.apache.coyote.tomcat4.CoyoteConnector port=8080 minProcessors=5 maxProcessors=75 enableLookups=true redirectPort=8443 acceptCount=100 debug=0 connectionTimeout=2 useURIValidationHack=false disableUploadTimeout=true / Connector className=org.apache.ajp.tomcat4.Ajp13Connector port=8009 minProcessors=5 maxProcessors=75 acceptCount=10 debug=2/ Engine name=Standalone defaultHost=localhost debug=0 Logger className=org.apache.catalina.logger.FileLogger prefix=catalina_log. suffix=.txt timestamp=true/ Realm className=org.apache.catalina.realm.MemoryRealm / Host name=localhost debug=0 appBase=webapps unpackWARs=true autoDeploy=true Logger className=org.apache.catalina.logger.FileLogger directory=logs prefix=localhost_log. suffix=.txt timestamp=true/ /Host /Engine /Service /Server So it looks to me like everything is running except for some reason the forwarded URI never makes it to the Tomcat server. All I get is page not found errors when I try using a browser. Any help to get this working would be greatly appreciated since I'm trying to move off of a dying linux box. Thanks - Mike
Problem with tomcat behind IIS and modjk using integrated windows authentication
Hello, I developed a webapplication with tomcat 6.0.14 behind IIS 6 (IIS5 isolation mode) using modJK (1.2.25) and integrated wíndows authentication. I configured IIS and modJK following the descriptions in the connectors documentation. For most of the users (~70%) it works without problems. The rest always gets service unavailable from IIS. Other ASP Applications which are using integrated windows authentication work for the affected users. I looked in the log files of IIS and modJK and found nothing. I think it must have something to do with the windows profile because when we delete the windows profile of the user (c:\Documents and Settings\user) and recreate it then all works well for this user. We don't no why this happens, we can't see a difference between working profiles and not working ones e.g. the IE settings are the same. The problem is we can not kill and recreate all the profiles of the affected users. Thanks in advance, Martin Virus checked by G DATA AntiVirusKit Version: AVKA 18.165 from 02.04.2008 Virus news: www.antiviruslab.com - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Problem with tomcat behind IIS and modjk using integrated windows authentication
Martin Grüneberg wrote: I think it must have something to do with the windows profile because when we delete the windows profile of the user (c:\Documents and Settings\user) and recreate it then all works well for this user. We don't no why this happens, we can't see a difference between working profiles and not working ones e.g. the IE settings are the same. The problem is we can not kill and recreate all the profiles of the affected users. In this scenario I would suggest using one of the following to look at the traffic so see what the difference is because there must be one: - ieHttpHeaders - TCPMon from the Apache Axis project Mark - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Tomcat 6/IIS 6 Connection Frustration
I think I solved my problem. For every context launched in Tomcat, I need to create a blank directory with the same name as the context. This has somehow stopped the 404.2 errors. I had put a directory in there for examples for a different exercise, and for some reason it works. I don't know why or how, but it does. That said, I feel somewhat unsatisfied with this. Creating a blank directory is a band-aid, and not fixing the problem. So I'm still up for any comments/suggestions. -- View this message in context: http://www.nabble.com/Tomcat-6-IIS-6-Connection-Frustration-tp15412852p15413436.html Sent from the Tomcat - User mailing list archive at Nabble.com. - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Tomcat and IIS losing their link
It appears that my problem with IIS losing its link with Tomcat was actually an application problem, as several of you suggested. The JMX thread dump (very helpful over terminal services) indicated that 100 threads were locked up with Hibernate trying to get a database connection from DBCP. Upon further research I learned that Hibernate (and probably everything else) works better with the c3p0 pooling API, so I switched all my applications over to c3p0 and all is well (for now). Thanks for all the help, Travis Haagen - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Tomcat and IIS losing their link
Thanks for the responses thus far. I've been trying to get more information about the problem, but haven't been very successfull. I can't seem to create thread dumps, because I have to use Terminal Services. Is there a way to get a thread dump even though I'm using Terminal Services? Tomcat keeps locking up every afternoon, during the work week, so its definitely related to server traffic. Sometimes it locks up twice in an afternoon. I found this article about IIS 6.0 application health monitoring and I was wondering if anyone know if the items listed in the section 'ISAPI Extensions Can Declare Themselves Unhealthy' are implemented in the ISAPI redirector? http://help.alentus.com/article.aspx?id=10958cNode=7F8F8Y Here's what the ISAPI redirector logs say (the following errors are simply repeated until Tomcat is restarted). My log level is currently set to 'WARN': Mon Dec 17 13:48:34.484 2007] [4340:5744] [error] jk_ajp_common.c (966): (ajp13w) can't receive the response message from tomcat, network problems or tomcat (127.0.0.1:8009) is down (errno=60) [Mon Dec 17 13:48:34.484 2007] [4340:5744] [error] jk_ajp_common.c (1658): (ajp13w) Tomcat is down or refused connection. No response has been sent to the client (yet) [Mon Dec 17 13:48:38.390 2007] [4340:3340] [error] jk_ajp_common.c (966): (ajp13w) can't receive the response message from tomcat, network problems or tomcat (127.0.0.1:8009) is down (errno=60) [Mon Dec 17 13:48:38.390 2007] [4340:3340] [error] jk_ajp_common.c (1658): (ajp13w) Tomcat is down or refused connection. No response has been sent to the client (yet) [Mon Dec 17 13:48:47.015 2007] [4340:5744] [error] jk_ajp_common.c (966): (ajp13w) can't receive the response message from tomcat, network problems or tomcat (127.0.0.1:8009) is down (errno=60) [Mon Dec 17 13:48:47.015 2007] [4340:5744] [error] jk_ajp_common.c (1658): (ajp13w) Tomcat is down or refused connection. No response has been sent to the client (yet) [Mon Dec 17 13:48:49.015 2007] [4340:5744] [error] jk_ajp_common.c (2097): (ajp13w) Connecting to tomcat failed. Tomcat is probably not started or is listening on the wrong port - Original Message - From: Rainer Jung [EMAIL PROTECTED] To: Tomcat Users List users@tomcat.apache.org Sent: Friday, December 14, 2007 9:20 AM Subject: Re: Tomcat and IIS losing their link Travis Haagen wrote: Hello, I've got IIS 6.0 linked with Tomcat 5.5.25 (with JDK 1.5.0_14-b03 and AJP dll) via the ISAPI connector (JK 1.2.25) on Windows 2003 Server, and during high traffic periods, the connection between IIS and Tomcat is being severed. This has been occurring in the mid-afternoon every day since this server went live and to get it running again, I've had to restart Tomcat. The peak connections to IIS during one of the days was just under 100, so this isn't really all that high of traffic. The isapi_redirect.log isn't much help. It has only been logging errors after the connection to Tomcat has been broken. Tomcat itself hasn't logged anything of relevance and I don't actually think that Tomcat is affected when the link is broken, but as I mentioned earlier, I have to restart Tomcat to get it to reconnect with IIS. Nevertheless at least i would be curious to know, what the exact contents of the isapi redirector log files are. We don't need all of it, but the first 100 lines or so could be interesting. What's you log level? Have a look at the other thread running on this list the last few days (ISAPI JK2 ran better than JK, how can that be?). To get a slightly better idea what's happening when, you could also introduce a load balancer and a status worker. Most likely it would help to take Java Thread Dumps and look inside the JVM, what your request threads are doing, when IIS gets stuck. Regards, Rainer - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Tomcat and IIS losing their link
Travis Haagen schrieb: Thanks for the responses thus far. I've been trying to get more information about the problem, but haven't been very successfull. I can't seem to create thread dumps, because I have to use Terminal Services. Is there a way to get a thread dump even though I'm using Terminal Services? There are a couple of not so nice ways of doing that. One example: - Install a JDK not only a JRE - enable JMX for your java process (adding the following flags to your service definition): -Dcom.sun.management.jmxremote.port=1090 -Dcom.sun.management.jmxremote.ssl=false -Dcom.sun.management.jmxremote.authenticate=false (Note: no authentication here) - search for the jar file FullThreadDump.jar, something like JDK_HOME\demo\management\FullThreadDump\FullThreadDump.jar - run java -cp PathToMyJar\FullThreadDump.jar FullThreadDump localhost:1090 C:\temp\ThreadDumps.log Tomcat keeps locking up every afternoon, during the work week, so its definitely related to server traffic. Sometimes it locks up twice in an afternoon. I found this article about IIS 6.0 application health monitoring and I was wondering if anyone know if the items listed in the section 'ISAPI Extensions Can Declare Themselves Unhealthy' are implemented in the ISAPI redirector? http://help.alentus.com/article.aspx?id=10958cNode=7F8F8Y Interesting, but not used at the moment in the isapi redirector. Here's what the ISAPI redirector logs say (the following errors are simply repeated until Tomcat is restarted). My log level is currently set to 'WARN': Those unfortunately don't give us more than what we already expect: that the problem lies inside your Tomcat instance. Try the above recipe for thread dumps. Regards, Rainer - Original Message - From: Rainer Jung [EMAIL PROTECTED] To: Tomcat Users List users@tomcat.apache.org Sent: Friday, December 14, 2007 9:20 AM Subject: Re: Tomcat and IIS losing their link Travis Haagen wrote: Hello, I've got IIS 6.0 linked with Tomcat 5.5.25 (with JDK 1.5.0_14-b03 and AJP dll) via the ISAPI connector (JK 1.2.25) on Windows 2003 Server, and during high traffic periods, the connection between IIS and Tomcat is being severed. This has been occurring in the mid-afternoon every day since this server went live and to get it running again, I've had to restart Tomcat. The peak connections to IIS during one of the days was just under 100, so this isn't really all that high of traffic. The isapi_redirect.log isn't much help. It has only been logging errors after the connection to Tomcat has been broken. Tomcat itself hasn't logged anything of relevance and I don't actually think that Tomcat is affected when the link is broken, but as I mentioned earlier, I have to restart Tomcat to get it to reconnect with IIS. Nevertheless at least i would be curious to know, what the exact contents of the isapi redirector log files are. We don't need all of it, but the first 100 lines or so could be interesting. What's you log level? Have a look at the other thread running on this list the last few days (ISAPI JK2 ran better than JK, how can that be?). To get a slightly better idea what's happening when, you could also introduce a load balancer and a status worker. Most likely it would help to take Java Thread Dumps and look inside the JVM, what your request threads are doing, when IIS gets stuck. Regards, Rainer - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Tomcat and IIS losing their link
Thanks for the reply Per... Tomcat and IIS are running on the same machine, with no external load balancer or firewall between IIS and Tomcat. When the connection is lost, IIS displays either service is unavailable or a 503 error message. I only have maxThreads=400, because I didn't think it would hurt anything. I was running with far fewer maxThreads and had the same problem. The machine is a quad-core CPU with 4 gigs of ram and the load is very light. I'll look into your other suggestions. Also, I noticed in my original post that the redirectPort was wrong and I fixed that :) Any other ideas out there? -Travis - Original Message - From: Per Johnsson [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, December 13, 2007 11:52 PM Subject: FW: Tomcat and IIS losing their link (Tomcat maillist bounced my mail so I send it to you directly./per) Hi! Some questions: - Is the tomcat and IIS running on the same machine? - What's the result when the connection is lost? Service unavaible from IIS? - Is there any loadbalancer, firewall between the IIS and tomcat? - You have maxThreads=400, are there 400 concurrant requests ever during high load? We had some similar issues and we didn't find any good solution for it but a lot of small adjustments made it better like: - Lower the maxthreads (we had very cpu consuming requests at some times) we went from like 300 to 20 I beleive. - Installing java 1.6 which is much more efficient. - Using the latest APR and Isapi dll. /Per Jonsson -Original Message- From: Travis Haagen [mailto:[EMAIL PROTECTED] Sent: den 14 december 2007 05:08 To: Tomcat Posts Subject: Tomcat and IIS losing their link Hello, I've got IIS 6.0 linked with Tomcat 5.5.25 (with JDK 1.5.0_14-b03 and AJP dll) via the ISAPI connector (JK 1.2.25) on Windows 2003 Server, and during high traffic periods, the connection between IIS and Tomcat is being severed. This has been occurring in the mid-afternoon every day since this server went live and to get it running again, I've had to restart Tomcat. The peak connections to IIS during one of the days was just under 100, so this isn't really all that high of traffic. The isapi_redirect.log isn't much help. It has only been logging errors after the connection to Tomcat has been broken. Tomcat itself hasn't logged anything of relevance and I don't actually think that Tomcat is affected when the link is broken, but as I mentioned earlier, I have to restart Tomcat to get it to reconnect with IIS. Most of my configuration settings came from this website: http://wiki.jboss.org/wiki/Wiki.jsp?page=OptimalMod_jk1.2Configuration Here are the relevant workers.properties settings: worker.ajp13w.type=ajp13 worker.ajp13w.host=localhost worker.ajp13w.port=8009 worker.ajp13w.lbfactor=1 worker.ajp13w.connect_timeout=1 worker.ajp13w.prepost_timeout=1 worker.ajp13w.socket_timeout=10 worker.ajp13w.connection_pool_timeout=600 worker.ajp13w.connection_pool_size=350 Here are the relevant server.xml settings: Connector port=8443 maxHttpHeaderSize=8192 maxThreads=400 minSpareThreads=50 maxSpareThreads=150 enableLookups=false disableUploadTimeout=true acceptCount=100 scheme=https secure=true SSLEngine=on SSLPassword=removed SSLCertificateFile=removed SSLCertificateKeyFile=removed / Connector port=8009 redirectPort=8444 protocol=AJP/1.3 connectionTimeout=60 enableLookups=false maxThreads=400 minSpareThreads=50 maxSpareThreads=150 / I just configured IIS 6.0 to run in IIS 5.0 isolation mode and that's the end of my ideas for fixing this issue. The only other ISAPI filters that I'm running are ASP.NET_1.1.4322.2307 and ISAPI_Rewrite3 (for URL rewriting). IIS web site connections is set to 'unlimited', connection timeout is 120 seconds, HTTP Keep-Alives is enabled. Until the crazy thing stops working, everything is fine. Any help will be greatly appreciated. Thanks, Travis - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Tomcat and IIS losing their link
Travis Haagen wrote: Hello, I've got IIS 6.0 linked with Tomcat 5.5.25 (with JDK 1.5.0_14-b03 and AJP dll) via the ISAPI connector (JK 1.2.25) on Windows 2003 Server, and during high traffic periods, the connection between IIS and Tomcat is being severed. This has been occurring in the mid-afternoon every day since this server went live and to get it running again, I've had to restart Tomcat. The peak connections to IIS during one of the days was just under 100, so this isn't really all that high of traffic. The isapi_redirect.log isn't much help. It has only been logging errors after the connection to Tomcat has been broken. Tomcat itself hasn't logged anything of relevance and I don't actually think that Tomcat is affected when the link is broken, but as I mentioned earlier, I have to restart Tomcat to get it to reconnect with IIS. Nevertheless at least i would be curious to know, what the exact contents of the isapi redirector log files are. We don't need all of it, but the first 100 lines or so could be interesting. What's you log level? Have a look at the other thread running on this list the last few days (ISAPI JK2 ran better than JK, how can that be?). To get a slightly better idea what's happening when, you could also introduce a load balancer and a status worker. Most likely it would help to take Java Thread Dumps and look inside the JVM, what your request threads are doing, when IIS gets stuck. Regards, Rainer - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Tomcat and IIS losing their link
Travis take a look at this excerpt from Tomcat committer Mladen Turk.. Just like Apache Web server for Windows, Microsoft IIS maintains a separate child process and thread pool for serving concurrent client connections. For non server products like Windows 2000 Professional or Windows XP the number of concurrent connections is limited to 10. This mean that you can not use workstation products for production servers unless the 10 connections limit will fulfil your needs. The server range of products does not impose that 10 connection limit, but just like Apache, the 2000 connections is a limit when the thread context switching will take its share and slow down the effective number of concurrent connections. If you need higher load you will need to deploy additional web servers and use Windows Network Load Balancer (WNLB) in front of Tomcat servers. http://people.apache.org/~mturk/docs/article/ftwai.html this means that Windows 2000 Pro or Windows XP has an artificial limit of 10..2 solutions another (more capable) OS existing OS with WindowsNetworkLoadBalancer Nota Bene: Any diagnosis is incomplete without looking at Java Thread Dumps as Rainier suggested earlier.. Martin- - Original Message - From: Rainer Jung [EMAIL PROTECTED] To: Tomcat Users List users@tomcat.apache.org Sent: Friday, December 14, 2007 12:20 PM Subject: Re: Tomcat and IIS losing their link Travis Haagen wrote: Hello, I've got IIS 6.0 linked with Tomcat 5.5.25 (with JDK 1.5.0_14-b03 and AJP dll) via the ISAPI connector (JK 1.2.25) on Windows 2003 Server, and during high traffic periods, the connection between IIS and Tomcat is being severed. This has been occurring in the mid-afternoon every day since this server went live and to get it running again, I've had to restart Tomcat. The peak connections to IIS during one of the days was just under 100, so this isn't really all that high of traffic. The isapi_redirect.log isn't much help. It has only been logging errors after the connection to Tomcat has been broken. Tomcat itself hasn't logged anything of relevance and I don't actually think that Tomcat is affected when the link is broken, but as I mentioned earlier, I have to restart Tomcat to get it to reconnect with IIS. Nevertheless at least i would be curious to know, what the exact contents of the isapi redirector log files are. We don't need all of it, but the first 100 lines or so could be interesting. What's you log level? Have a look at the other thread running on this list the last few days (ISAPI JK2 ran better than JK, how can that be?). To get a slightly better idea what's happening when, you could also introduce a load balancer and a status worker. Most likely it would help to take Java Thread Dumps and look inside the JVM, what your request threads are doing, when IIS gets stuck. Regards, Rainer - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Tomcat and IIS losing their link
Hello, I've got IIS 6.0 linked with Tomcat 5.5.25 (with JDK 1.5.0_14-b03 and AJP dll) via the ISAPI connector (JK 1.2.25) on Windows 2003 Server, and during high traffic periods, the connection between IIS and Tomcat is being severed. This has been occurring in the mid-afternoon every day since this server went live and to get it running again, I've had to restart Tomcat. The peak connections to IIS during one of the days was just under 100, so this isn't really all that high of traffic. The isapi_redirect.log isn't much help. It has only been logging errors after the connection to Tomcat has been broken. Tomcat itself hasn't logged anything of relevance and I don't actually think that Tomcat is affected when the link is broken, but as I mentioned earlier, I have to restart Tomcat to get it to reconnect with IIS. Most of my configuration settings came from this website: http://wiki.jboss.org/wiki/Wiki.jsp?page=OptimalMod_jk1.2Configuration Here are the relevant workers.properties settings: worker.ajp13w.type=ajp13 worker.ajp13w.host=localhost worker.ajp13w.port=8009 worker.ajp13w.lbfactor=1 worker.ajp13w.connect_timeout=1 worker.ajp13w.prepost_timeout=1 worker.ajp13w.socket_timeout=10 worker.ajp13w.connection_pool_timeout=600 worker.ajp13w.connection_pool_size=350 Here are the relevant server.xml settings: Connector port=8443 maxHttpHeaderSize=8192 maxThreads=400 minSpareThreads=50 maxSpareThreads=150 enableLookups=false disableUploadTimeout=true acceptCount=100 scheme=https secure=true SSLEngine=on SSLPassword=removed SSLCertificateFile=removed SSLCertificateKeyFile=removed / Connector port=8009 redirectPort=8444 protocol=AJP/1.3 connectionTimeout=60 enableLookups=false maxThreads=400 minSpareThreads=50 maxSpareThreads=150 / I just configured IIS 6.0 to run in IIS 5.0 isolation mode and that's the end of my ideas for fixing this issue. The only other ISAPI filters that I'm running are ASP.NET_1.1.4322.2307 and ISAPI_Rewrite3 (for URL rewriting). IIS web site connections is set to 'unlimited', connection timeout is 120 seconds, HTTP Keep-Alives is enabled. Until the crazy thing stops working, everything is fine. Any help will be greatly appreciated. Thanks, Travis
Re: Complex Tomcat and IIS configuration
No config, no log: no idea :( Tor Langehaug schrieb: I am running a web server with about 10 different virtually hosted sites. Tomcat is installed and functioning with http://localhost:8084/ (the default port of tomcat is used by another application), however I cannot access tomcat by this address away from the local machine. This is an http URL, so it would not make sense to try to reach this address and port via ipsapi redirector. The redirector uses ajp13 and has to point to an ajp13 connector port of tomcat (default: 8009). I'm not sure, if you've got a problem to reach tomcat directly via http (suggested by the url http://localhost:8004), what relevance localhost has here, or if the problem is, that it doesn't work via isapi redirector (or all of them). The isapi_redirect filter is installed and shows as working with the green arrow and I have a Jakarta virtual directory in the site I want to run my application on. IIS fails to serve the context defined within tomcat when it is requested. My project is supposed to be deployed within the next day or so. Help is greatly appreciated. Thanks, Tor Langehaug Regards, Rainer - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Installing Tomcat and IIS
Thanks again! Today I will try to install version 1.2. Maybe I'll get it to work. My other sites are OWA and a few Wikis (uses PHP). -Original Message- From: LiuYan 刘研 [mailto:[EMAIL PROTECTED] Sent: 19 décembre, 2006 21:51 To: users@tomcat.apache.org Subject: RE: Installing Tomcat and IIS I normally need to access http://localhost:9191/luntbuild to see my application. So in theory with that filter thing installed correctly I should be able to access it by going to http://localhost/luntbuild? Yes, that's our goal of integration. But for IIS, /luntbuild does not exist. How does it figure out that it is a Tomcat dir? Have you configured URI mapping ? I use jk1.2 (not jk2), I have a uriworkermap.properties file which saved from my former tomcat installtion. It seems that new version tomcat does not contained this file. Here is the original content in uriworkermap.properties file: # uriworkermap.properties - IIS # # This file provides sample mappings for example ajp13w # worker defined in workermap.properties.minimal # The general sytax for this file is: # [URL]=[Worker name] /servlet-examples/*=ajp13w # Optionally filter out all .jpeg files inside that context # For no mapping the url has to start with exclamation (!) !/servlet-examples/*.jpeg=ajp13w Maybe you need map the uri of your application (/luntbuild) to 'ajp13'. I simply mapped all uri (/*) to 'ajp13',. If you use jk2 which that article used, you can read the last paragraph of http://www.iis-resources.com/modules/AMS/article.php?storyid=485page=2 Also, I'm running a few websites on this server. Does this have an impact on the Tomcat/IIS integration? Does your websites use only 1 script language ? We have 3 websites on the same server, the main website only use ASP, the other two websites only use JSP, they works ok now. But when I try to installing 'awstats' which use PERL/CGI, I can't get PERL and JSP running at the same time. -- View this message in context: http://www.nabble.com/Installing-Tomcat-and-IIS-tf2821771.html#a7983783 Sent from the Tomcat - User mailing list archive at Nabble.com. - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
tomcat and iis connectivity almost working...
Hello, I've installed Tomcat 5.0 on port 8081 and redirected IIS 6 to it. It seems to work and you can try: http://www.seorally.com/jsp-examples/ But, I've deployed my own project I can see it in the tomcat manager, and activate it through tomcat(e.g., http://www.seorally.com:8081/Arvit/ - this wont work for ou cause 8081 is behind firewall, I tested it on the server), but not through IIS(e.g.,http://www.seorally.com/Arvit/). Ideas?(breaking my head on the wall for a day now :( ) Best Regards, Ziv Shalev Product Manager [EMAIL PROTECTED] www.cred-it.co.il
RE: Installing Tomcat and IIS
I normally need to access http://localhost:9191/luntbuild to see my application. So in theory with that filter thing installed correctly I should be able to access it by going to http://localhost/luntbuild? Yes, that's our goal of integration. But for IIS, /luntbuild does not exist. How does it figure out that it is a Tomcat dir? Have you configured URI mapping ? I use jk1.2 (not jk2), I have a uriworkermap.properties file which saved from my former tomcat installtion. It seems that new version tomcat does not contained this file. Here is the original content in uriworkermap.properties file: # uriworkermap.properties - IIS # # This file provides sample mappings for example ajp13w # worker defined in workermap.properties.minimal # The general sytax for this file is: # [URL]=[Worker name] /servlet-examples/*=ajp13w # Optionally filter out all .jpeg files inside that context # For no mapping the url has to start with exclamation (!) !/servlet-examples/*.jpeg=ajp13w Maybe you need map the uri of your application (/luntbuild) to 'ajp13'. I simply mapped all uri (/*) to 'ajp13',. If you use jk2 which that article used, you can read the last paragraph of http://www.iis-resources.com/modules/AMS/article.php?storyid=485page=2 Also, I'm running a few websites on this server. Does this have an impact on the Tomcat/IIS integration? Does your websites use only 1 script language ? We have 3 websites on the same server, the main website only use ASP, the other two websites only use JSP, they works ok now. But when I try to installing 'awstats' which use PERL/CGI, I can't get PERL and JSP running at the same time. -- View this message in context: http://www.nabble.com/Installing-Tomcat-and-IIS-tf2821771.html#a7983783 Sent from the Tomcat - User mailing list archive at Nabble.com. - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Installing Tomcat and IIS
I normally need to access http://localhost:9191/luntbuild to see my application. So in theory with that filter thing installed correctly I should be able to access it by going to http://localhost/luntbuild? But for IIS, /luntbuild does not exist. How does it figure out that it is a Tomcat dir? Also, I'm running a few websites on this server. Does this have an impact on the Tomcat/IIS integration? -Original Message- From: LiuYan 刘研 [mailto:[EMAIL PROTECTED] Sent: 17 décembre, 2006 21:12 To: users@tomcat.apache.org Subject: RE: Installing Tomcat and IIS Is the last two paragraphs of that article what you want? 1.start IIS, start Tomcat 2.browse http://localhost/servlets-examples/ or something else to test your installation Simon Renshaw-2 wrote: And once it is installed, how is it supposed to work? That part is missing from the article :) -Original Message- From: LiuYan 刘研 [mailto:[EMAIL PROTECTED] Sent: 14 décembre, 2006 23:22 To: users@tomcat.apache.org Subject: Re: Installing Tomcat and IIS That article is good, I've integrated Tomcat IIS successfully by following that article step by step. Step 5,6,7 are important - Step 5. Create the Tomcat Application Pool Step 6. Create the Virtual Directory Step 7. Create and Enable the Tomcat Web Service Extension - I have ever omitted step 7, and I can't get it run. Step 7 is important for IIS6. Simon Renshaw-2 wrote: Hi, Since it looks like my problems with Tomcat are caused by the firewall we're using, it is time to try Plan B. Plan B would be to install Tomcat on the same server where IIS is located and have both of them use port 80. I found a tutorial at http://www.iis-resources.com/modules/AMS/article.php?storyid=485page=0 that does that. Unfortunately, it is using something that hasn't been maintained in a year and the article is kinda confusing. Look like it is missing some information. Does anybody have experience with that? Pointers would be appreciated. Thanks, Simon - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] -- View this message in context: http://www.nabble.com/Installing-Tomcat-and-IIS-tf2821771.html#a7886051 Sent from the Tomcat - User mailing list archive at Nabble.com. - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] -- View this message in context: http://www.nabble.com/Installing-Tomcat-and-IIS-tf2821771.html#a7922672 Sent from the Tomcat - User mailing list archive at Nabble.com. - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Installing Tomcat and IIS
Is the last two paragraphs of that article what you want? 1.start IIS, start Tomcat 2.browse http://localhost/servlets-examples/ or something else to test your installation Simon Renshaw-2 wrote: And once it is installed, how is it supposed to work? That part is missing from the article :) -Original Message- From: LiuYan 刘研 [mailto:[EMAIL PROTECTED] Sent: 14 décembre, 2006 23:22 To: users@tomcat.apache.org Subject: Re: Installing Tomcat and IIS That article is good, I've integrated Tomcat IIS successfully by following that article step by step. Step 5,6,7 are important - Step 5. Create the Tomcat Application Pool Step 6. Create the Virtual Directory Step 7. Create and Enable the Tomcat Web Service Extension - I have ever omitted step 7, and I can't get it run. Step 7 is important for IIS6. Simon Renshaw-2 wrote: Hi, Since it looks like my problems with Tomcat are caused by the firewall we're using, it is time to try Plan B. Plan B would be to install Tomcat on the same server where IIS is located and have both of them use port 80. I found a tutorial at http://www.iis-resources.com/modules/AMS/article.php?storyid=485page=0 that does that. Unfortunately, it is using something that hasn't been maintained in a year and the article is kinda confusing. Look like it is missing some information. Does anybody have experience with that? Pointers would be appreciated. Thanks, Simon - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] -- View this message in context: http://www.nabble.com/Installing-Tomcat-and-IIS-tf2821771.html#a7886051 Sent from the Tomcat - User mailing list archive at Nabble.com. - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] -- View this message in context: http://www.nabble.com/Installing-Tomcat-and-IIS-tf2821771.html#a7922672 Sent from the Tomcat - User mailing list archive at Nabble.com. - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
