Re: Problem redirecting requests from IIS to Tomcat by isapi_redirect.dll
On 15/03/2010 22:50, mirkocal wrote: Thanks for your answers, but maybe I have not been enaugh clear. What I want is that my web application can be launched asking for www.myapp.it and, in the future, deploy other web apps on the same physical machine under Tomcat, each one responding to a diffferent URL (all pointing to the IP address of my machine). Are you talking about virtual hosts, or multiple webapps in the same host? Please provide some example URLs so we know what you mean. I've tried to do this using IIS and Tomcat communication mechanism, but it doesn't work. You haven't really explained what doesn't work actually means. Any other suggest? Drop IIS and just use Tomcat? p - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: How to surpress The requested resource XYZ is not available - response
On 16/03/2010 02:01, Song Thuy Nguyen wrote: The thing is, I'm using the failover behaviour in Apache Synapse (Enterprise Service Bus). I can give Synapse a list of web service endpoints that have the same interface. One is the primary service endpoint and the others are the backups in case the primary endpoint become unavailable for some reason. Actually there are only 2 general reasons: the (application) server that provides the services is not running, so the port (lets say port 80) is closed. Or the second case: the application server is still running, but the service is made inactive. That means the application server still listens at port 80 but can't serve request to the mentioned service and answers with the 404 The requested resource XYZ is not available response. Now the problem: Synapse gets this http-404 response, eventhough it can't find the SOAP envelop it expects it doesn't see the endpoint as faulty and forwards the 404 message to the caller (web service consumer). The fail-over mechanism doesn't kick in :( But actually it should because the service is not available anymore, so the request should be send to the backup endpoints. Ofcourse I tried to make Synapse understand that a 404-response should be treated the same as a failure. But it can't easily be done. So I thought I could make Tomcat to receive calls to inactive services, but just drop them without answering. After some time... synapse will trigger timeout and tries to call the backup endpoints. It doesn't matter if the http/tcp connection has been established or not. So why try to fake a timeout? Presumably there is an error code that Synapse will recognise as meaning that the service is unavailable, find out what that is and send that instead. E.g. 503. You could employ a custom ErrorValve, if you are able to check/intercept the 404 status that would be returned in the normal case and override it. p -Original Message- From: Len Popp [mailto:len.p...@gmail.com] Sent: Tuesday, March 16, 2010 1:50 AM To: Tomcat Users List Subject: Re: How to surpress The requested resource XYZ is not available - response I don't think you can do that. After Tomcat accepts the HTTP connection and decides whether to respond, it's too late to pretend there's no server there. The user's web browser displays a different error message for no server (something like can't establish a connection) vs. server timeout (something like the server took too long to respond) or dropping the connection (the connection was reset). So you might as well just customize the 404 error page to say There's no server here - it'd fool people just as well. :-) Or just return an empty error page. -- Len On Mon, Mar 15, 2010 at 19:26, Song Thuy Nguyenprogramm...@biaqua.de wrote: Hello, usually you will get a The requested resource /XYZ is not available response when you call an unavailable web service on Apache Tomcat. However, for a special use case I don't want Tomcat to answer to requests for a unknown/unavailable web service. I just want Tomcat to ignore it and keep quiet, resulting that the caller will get a timeout and therefore knows that there is no service behind this URL. How can I achieve such behaviour? Best Regards, Song Thuy Nguyen - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: JMX authentication failure
On 16/03/2010 05:22, Mercy wrote:
JMX does not need to authenticate for access.
No, it doesn't, but that's what you're trying to configure isn't it?
My question that is how to enable authentication on Tomcat.
You asked how to configure authentication for JMX and Gurkan answered
you. Read what he wrote more carefully.
http://tomcat.apache.org/tomcat-6.0-doc/monitoring.html
You posted the following:
-Dcom.sun.management.jmxremote.ssl=$JMX_SSL_ENABLED
-Dcom.sun.management.jmxremote.authenticate=$JMX_SSL_ENABLED
You have used the same variable for both of these settings, instead of
using the separately defined $JMX_AUTHENTICATE
p
Regards,
Mercy
Paolo Santarsiero wrote:
Is your system firewalled?
On 15 March 2010 14:17, Gurkan Erdogdu cgurkanerdo...@gmail.com wrote:
then you answer question :)
2010/3/15 Mercy techme...@gmail.com
Hi Gurkan,
it's false;
regards,
Mercy
Gurkan Erdogdu wrote:
-Dcom.sun.management.jmxremote.authenticate=$JMX_SSL_ENABLED
what is the $JMX_SSL_ENABLED value?
Thanks;
2010/3/15 Mercy techme...@gmail.com
Hi there,
I'd like to enable JMX on Tomcat 6.0.16/Linux, export environment
variables :
* # JMX authenticate
export JMX_AUTHENTICATE=true
echo Is JMX authenticated ? $JMX_AUTHENTICATE
# JMX password file
export JMX_PASSWORD_FILE=$JMX_HOME/jmxremote.password
echo The location of password file of JMX : $JMX_PASSWORD_FILE
# JMX access file
export JMX_ACCESS_FILE=$ETC_DIR/tomcat/jmx/jmxremote.access
echo The location of access file of JMX : $JMX_ACCESS_FILE
export CATALINA_OPTS=-Dcom.sun.management.jmxremote
-Dcom.sun.management.jmxremote.port=$JMX_PORT
-Dcom.sun.management.jmxremote.ssl=$JMX_SSL_ENABLED
-Dcom.sun.management.jmxremote.authenticate=$JMX_SSL_ENABLED
-Djava.rmi.server.hostname=$JMX_HOST_NAME
-Dcom.sun.management.jmxremote.password.file=$JMX_PASSWORD_FILE
-Dcom.sun.management.jmxremote.access.file=$JMX_ACCESS_FILE
$CATALINA_OPTS*
The console outputs:
*...
**Is JMX authenticated ? true
The location of password file of JMX :
/home/mercy/workspace/website/etc/tomcat/jmx/jmxremote.password
...*
The password(/owner read-only privilege/) and access file are
existed,
*me...@workspace:~/workspace/website/etc/tomcat/jmx$ pwd
/home/mercy/workspace/website/etc/tomcat/jmx
me...@workspace:~/workspace/website/etc/tomcat/jmx$ ls -ls
total 8
4 -rw-r--r-- 1 mercy mercy 160 2010-03-11 20:35 jmxremote.access
4 -rw--- 1 mercy mercy 153 2010-03-11 19:45 jmxremote.password
*
The content of jmxremote.access:
*# Author : Mercy
# Date : 11 Mar 2010
# This is a password file of JMX, whose format is like this:
# ${USER_NAME} ${PRIVILEGE}
mercy readonly
admin readwrite*
jmxremote.password:
*# Author : Mercy
# Date : 11 Mar 2010
# This is a password file of JMX, whose format is like this:
# ${USER_NAME} ${PASSWORD}
mercy mercy
admin admin*
I run the JConsole to connect JMX on Tomcat after lunching it , it
allows
to access whether there is an authentication info or not.
Please tell me how to enable authentication, thanks in advance.
Kind regards,
Mercy
--
Gurkan Erdogdu
http://gurkanerdogdu.blogspot.com
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Problem setting up multiple hosts
Hi Chuck I have also tried this option whitout the context path and with different appBase Host name=localhost appBase=webapps/OpenClinica unpackWARs=true autoDeploy=true xmlValidation=false xmlNamespaceAware=false /Host Host name=oc3.signifikans.dk appBase=webapps/OpenClinica3 unpackWARs=true autoDeploy=true xmlValidation=false xmlNamespaceAware=false /Host With this option i get 404 error on the first site and blank page on the second site. I'm running on a Windows server if this has anything to say. Also tried with \ instead of / with any luck. n828cl wrote: From: puttea [mailto:putt...@gmail.com] Subject: Re: Problem setting up multiple hosts These informations have made me create the example I posted in the first post. But this doesn't work. Because you didn't follow the instructions. Please read my other post. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org -- View this message in context: http://old.nabble.com/Problem-setting-up-multiple-hosts-tp27905530p27915509.html Sent from the Tomcat - User mailing list archive at Nabble.com. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Can't connect remotely to Tomcat via JMX on Windows
I want to monitor the Tomcat server remotley with jconsole. I added the properties described in http://tomcat.apache.org/tomcat-6.0-doc/monitoring.html set CATALINA_OPTS=-Dcom.sun.management.jmxremote -Dcom.sun.management.jmxremote.port=8050-Dcom.sun.management.jmxremote.ssl=false -Dcom.sun.management.jmxremote.authenticate=false there is no exception (cmd / log) but i can’t remote connect with jconsole (i tried service:jmx:rmi:///jndi/rmi://localhost:/jmxrmi and localhost:8050) when i connect to the local process, i can see the right VM arguments in the VM summary tab when i use netstat, the tomcat process is listening on 8080 and 8009 but not on 8050 the same configuration works with linux (same tomcat version) Apache Tomcat 6.0.24 (also tested with 5.5.28, same thing) JDK 1.6.0.18 Windows Vista Business Thanks in advance - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Tomcat 6 on RHEL3
On 16 March 2010 10:02, Ningappa Koneri ningappa.kon...@comviva.com wrote: Dear All, I have an issue with tomcat 6 Version? which is deployed under RHEL3 with JDK5 Version? , the problem is tomcat is taking hell lot of time in deploying the war files when started. It's so busy that not responding back with home page also, what could be the problem ? How long is hell lot? The log message should tell you Tomcat started in ms. What's the spec of the machine on which you're running Tomcat? How much heap and permspace have you allocated to the Java virtual machine in which Tomcat is running, and how much memory is it using? (top will tell you how much memory it's using; it will be more than heap+permspace due to other operating system structures) Is the machine busy during all this time? If so, what is the limiting factor - disk i/o, memory or CPU? Run top to get an idea of CPU usage, vmstat (I use vmstat 5 until I have a better idea) to get an idea of disk i/o. How large is the war file? If you unzip the war files (a war file is just a zip file with a different extension) on the same machine, how long does it take? Lots of questions, but we need more information to be able to answer. - Peter
AW: Comet Request identification
Hi I am using a ConcurrentHashMap on event.getHttpServletRequest() and this works quite well. - I am not sure, if this is by occasion or by design though. Regards, Steffen -Ursprüngliche Nachricht- Von: Animesh Sonkar [mailto:akson...@gmail.com] Gesendet: Montag, 15. März 2010 15:30 An: users@tomcat.apache.org Betreff: Comet Request identification Hi, I create a comet connection using sockets and sending a post request. To prevent the server from terminating the request (calling END event) i am sending some heartbeat messages as chunked data on the same socket/request connection. Is there a way in comet to identify, that the heartbeat message came from an existing connection/request. So here is a case: 1. I send a post request over a socket with transfer-encoding chunked and Connection:keep alive headers. 2. The CometProcessor receives a BEGIN and a READ event. I save the request and response objects. 3. After some time i send a chunked data over the same socket to keep request alive 4. The CometProcessor receives a READ event. Now in step 4 : is it possible to recognize that the chunked data came for the same connection. My main problem is to identify that on a END event, which connnection got terminated. Thanks, Animesh Sorry about blabberring my thoughts.. smime.p7s Description: S/MIME cryptographic signature
RE: Tomcat 6 on RHEL3
Sorry forgot to mention, it's apache tomcat 6.0.20. Regards, Ningappa Koneri mLifestyle | www.comviva.com -Original Message- From: peter.crowth...@googlemail.com [mailto:peter.crowth...@googlemail.com] On Behalf Of Peter Crowther Sent: Tuesday, March 16, 2010 3:39 PM To: Tomcat Users List Subject: Re: Tomcat 6 on RHEL3 On 16 March 2010 10:02, Ningappa Koneri ningappa.kon...@comviva.com wrote: Dear All, I have an issue with tomcat 6 Version? which is deployed under RHEL3 with JDK5 Version? , the problem is tomcat is taking hell lot of time in deploying the war files when started. It's so busy that not responding back with home page also, what could be the problem ? How long is hell lot? The log message should tell you Tomcat started in ms. What's the spec of the machine on which you're running Tomcat? How much heap and permspace have you allocated to the Java virtual machine in which Tomcat is running, and how much memory is it using? (top will tell you how much memory it's using; it will be more than heap+permspace due to other operating system structures) Is the machine busy during all this time? If so, what is the limiting factor - disk i/o, memory or CPU? Run top to get an idea of CPU usage, vmstat (I use vmstat 5 until I have a better idea) to get an idea of disk i/o. How large is the war file? If you unzip the war files (a war file is just a zip file with a different extension) on the same machine, how long does it take? Lots of questions, but we need more information to be able to answer. - Peter This e-mail and all material transmitted with it are for the use of the intended recipient(s) ONLY and contains confidential and/or privileged information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies and the original message. Any unauthorized review, use, disclosure, dissemination, forwarding, printing or copying of this email or any action taken pursuant to the contents of the present e-mail is strictly prohibited and is unlawful. The recipient acknowledges that Comviva Technologies Limited or its management or directors, are unable to exercise control or ensure the integrity over /of the contents of the information contained in e-mail. Any views expressed herein are those of the individual sender only and no binding nature of the contents shall be implied or assumed unless the sender does so expressly with due authority of Comviva Technologies Limited. E-mail and any contents transmitted with it are prone to viruses and related defects despite all efforts to avoid such by Comviva Technologies Limited. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Can't connect remotely to Tomcat via JMX on Windows
try service:jmx:rmi:///jndi/rmi://localhost:8050/jmxrmi --Gurkan 2010/3/16 Richard John rich4rd.j...@gmail.com I want to monitor the Tomcat server remotley with jconsole. I added the properties described in http://tomcat.apache.org/tomcat-6.0-doc/monitoring.html set CATALINA_OPTS=-Dcom.sun.management.jmxremote -Dcom.sun.management.jmxremote.port=8050-Dcom.sun.management.jmxremote.ssl=false -Dcom.sun.management.jmxremote.authenticate=false there is no exception (cmd / log) but i can’t remote connect with jconsole (i tried service:jmx:rmi:///jndi/rmi://localhost:/jmxrmi and localhost:8050) when i connect to the local process, i can see the right VM arguments in the VM summary tab when i use netstat, the tomcat process is listening on 8080 and 8009 but not on 8050 the same configuration works with linux (same tomcat version) Apache Tomcat 6.0.24 (also tested with 5.5.28, same thing) JDK 1.6.0.18 Windows Vista Business Thanks in advance - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org -- Gurkan Erdogdu http://gurkanerdogdu.blogspot.com
Re: Can't connect remotely to Tomcat via JMX on Windows
Also remove from CATALINA_OPTS, like this set CATALINA_OPTS=-Dcom.sun.management.jmxremote -Dcom.sun.management.jmxremote.port=8050 -Dcom.sun.management.jmxremote.ssl=false -Dcom.sun.management.jmxremote.authenticate=false 2010/3/16 Gurkan Erdogdu cgurkanerdo...@gmail.com try service:jmx:rmi:///jndi/rmi://localhost:8050/jmxrmi --Gurkan 2010/3/16 Richard John rich4rd.j...@gmail.com I want to monitor the Tomcat server remotley with jconsole. I added the properties described in http://tomcat.apache.org/tomcat-6.0-doc/monitoring.html set CATALINA_OPTS=-Dcom.sun.management.jmxremote -Dcom.sun.management.jmxremote.port=8050-Dcom.sun.management.jmxremote.ssl=false -Dcom.sun.management.jmxremote.authenticate=false there is no exception (cmd / log) but i can’t remote connect with jconsole (i tried service:jmx:rmi:///jndi/rmi://localhost:/jmxrmi and localhost:8050) when i connect to the local process, i can see the right VM arguments in the VM summary tab when i use netstat, the tomcat process is listening on 8080 and 8009 but not on 8050 the same configuration works with linux (same tomcat version) Apache Tomcat 6.0.24 (also tested with 5.5.28, same thing) JDK 1.6.0.18 Windows Vista Business Thanks in advance - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org -- Gurkan Erdogdu http://gurkanerdogdu.blogspot.com -- Gurkan Erdogdu http://gurkanerdogdu.blogspot.com
Re: Problem redirecting requests from IIS to Tomcat by isapi_redirect.dll
Well, I need to install on the same physical machine multiple application running under Tomcat, let's say - MyApp1 - URL www.myapp1.it - MyApp2 - URL www.myapp2.it What I need is that both application can be launched simply asking for respectively www.myapp1.it and www.myapp2.it using port 80. I've tried to obtain this connecting IIS with Tomcat, but maybe I can use Virtual Hosting. Could you please explain me how to do it? Thanks -- View this message in context: http://old.nabble.com/Problem-redirecting-requests-from-IIS-to-Tomcat-by-isapi_redirect.dll-tp27893887p27916856.html Sent from the Tomcat - User mailing list archive at Nabble.com. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Can't connect remotely to Tomcat via JMX on Windows
was a typo, of course i tried port 8050, but removing the Quotation mark did the trick, thanks! Why are they in the documentation? - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Problem redirecting requests from IIS to Tomcat by isapi_redirect.dll
On 16/03/2010 12:18, mirkocal wrote: Well, I need to install on the same physical machine multiple application running under Tomcat, let's say - MyApp1 - URL www.myapp1.it - MyApp2 - URL www.myapp2.it What I need is that both application can be launched simply asking for respectively www.myapp1.it and www.myapp2.it using port 80. I've tried to obtain this connecting IIS with Tomcat, but maybe I can use Virtual Hosting. Could you please explain me how to do it? Your application should be called ROOT.war http://tomcat.apache.org/tomcat-6.0-doc/virtual-hosting-howto.html p - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
[OT] Sergey A. Yatcenko
Is currently winning the prize for most annoying list member. p - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: jvm exits without trace
With parent I meant the main JVM process as opposed to forked processes or threads, sorry to confuse you there. Stracing the threads generates too much data to store so I had to settle with the parent process. To answer your other questions. The code is 100% pure java, why it causes this messy crash is still unclear but development is working to figure it out. I'll follow up when we find out more, but I'm not sure if we're likely to dig into the root cause, working around it is more of a priority right now than debugging the jvm. On Mon, 2010-03-15 at 17:08 +0100, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Taylan, On 3/15/2010 10:19 AM, Taylan Develioglu wrote: The cause for the crashes was in our own application code, we're currently investigating the exact reason. Yeah, I'd like to second Chuck's question: was it native code? A strace of the parent process shows killed by sigsegv, why or how this can happen is still unclear. So, the parent was being killed? What was the parent of the JVM? Thanks to everyone that gave their assistance. Definitely follow-up to let us all know what you've uncovered... this was certainly a weird situation. - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkueW4wACgkQ9CaO5/Lv0PAdhgCfa32vlcsMI5ELCNcLSjjV+S/o FZEAnjvjXgAwxjejTXexGO//89TyeF+r =BPtZ -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Problem redirecting requests from IIS to Tomcat by isapi_redirect.dll
I've done this many times. First you need to configure IIS to handle host headers. You can do this one of two ways. You can (a) create multiple virtual sites in IIS or (b) use an ISAPI redirector to simulate virtual hosts. I recommend option (a). Next you have to decide if you can afford to have all of your tomcat apps down when you need to take tomcat offline. If you can then you can run one instance of Tomcat and make use of rewrite rules (uriworkermap.properties file). If you can't then you'll need multiple instances of Tomcat. The way I configured my intranet applications was to create multiple virtual hosts in IIS (and configured each with the tomcat connector). Each connected to the same one instance of Tomcat. I use a isapi_redirect.properties file instead of the registry for configuration. I then use the uriworkermap.properties file to handle mapping the IIS virtual host to the tomcat application. Unfortunately I don't have access at the moment to my uriworkermap.properties, but I'll see if I can't come up with a sample for you. Hope this gets you started. -Original Message- From: mirkocal mirko.cala...@gmail.com To : users@tomcat.apache.org Sent: Tue Mar 16 8:18:08 2010 Subject: Re: Problem redirecting requests from IIS to Tomcat by isapi_redirect.dll Well, I need to install on the same physical machine multiple application running under Tomcat, let's say - MyApp1 - URL www.myapp1.it - MyApp2 - URL www.myapp2.it What I need is that both application can be launched simply asking for respectively www.myapp1.it and www.myapp2.it using port 80. I've tried to obtain this connecting IIS with Tomcat, but maybe I can use Virtual Hosting. Could you please explain me how to do it? Thanks - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Problem redirecting requests from IIS to Tomcat by isapi_redirect.dll
From: Electronjockey [mailto:electronjoc...@hotmail.com] Subject: Re: Problem redirecting requests from IIS to Tomcat by isapi_redirect.dll First you need to configure IIS to handle host headers. Actually, the first thing to do is get rid of IIS, since it doesn't appear to be playing any useful role in the OP's environment, then configure Tomcat to use port 80, and follow the instructions at the link Pid provided. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Problem setting up multiple hosts
From: puttea [mailto:putt...@gmail.com] Subject: RE: Problem setting up multiple hosts Host name=localhost appBase=webapps/OpenClinica unpackWARs=true autoDeploy=true xmlValidation=false xmlNamespaceAware=false /Host Host name=oc3.signifikans.dk appBase=webapps/OpenClinica3 unpackWARs=true autoDeploy=true xmlValidation=false xmlNamespaceAware=false /Host You're not following the documentation; neither of the above is correct. Set the first appBase to webapps, the second to webapps3. Place the default webapp for the first Host in webapps/ROOT.war (or webapps/ROOT, if you're not using a .war file). Place the default webapp for the second Host in webapps3/ROOT.war. Note that ROOT must be all caps. DO NOT use the names OpenClinica or OpenClinica3 for your webapps; they must be named ROOT. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Can't connect remotely to Tomcat via JMX on Windows
From: Richard John [mailto:rich4rd.j...@gmail.com] Subject: Re: Can't connect remotely to Tomcat via JMX on Windows removing the Quotation mark did the trick, thanks! Why are they in the documentation? The erroneous quotes have been removed in the current doc: http://tomcat.apache.org/tomcat-6.0-doc/monitoring.html - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Problem redirecting requests from IIS to Tomcat by isapi_redirect.dll
Yes, my error, I just surmised that since he was using IIS with the Tomcat connector that he did in fact have a reason for using it. If that is not the case, then you are correct. The desired result can be achieved by disabling or removing IIS and reconfiguring Tomcat to respond on port 80 and configure virtual hosts. -Original Message- From: Caldarale, Charles R chuck.caldar...@unisys.com To : Tomcat Users List users@tomcat.apache.org Sent: Tue Mar 16 9:26:19 2010 Subject: Re: Problem redirecting requests from IIS to Tomcat by isapi_redirect.dll From: Electronjockey [mailto:electronjoc...@hotmail.com] Subject: Re: Problem redirecting requests from IIS to Tomcat by isapi_redirect.dll First you need to configure IIS to handle host headers. Actually, the first thing to do is get rid of IIS, since it doesn't appear to be playing any useful role in the OP's environment, then configure Tomcat to use port 80, and follow the instructions at the link Pid provided. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Can't connect remotely to Tomcat via JMX on Windows
The documentation was correct for Linux / Unix maybe the documentation should point out the difference between Windows and Linux configuration - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Sporadic errors during high load
Hi all!
We run a fairly large web application which we're currently trying to do some
load tests on but we're experiencing some sporadic errors which we can't find
the cause of.
We run a load test scenario using the Proxysniffer load testing tool on a
machine connected to the same switch as the server under load. The load test
simulates 3100 users looping over 27 pages of varying complexity. Each loop
takes 2175 seconds on average and the average response time per page is 0.16
seconds. The test runs for about 5 hours and after a while, normaly around 1
hour but sometimes as soon as after a little more than 30 minutes and sometimes
longer, there are occasional errors. The errors always come clustered with a
bunch on each occurance. After each occurance everything runs fine for a lenght
of time until the next occurance.
Proxysniffer reports all errors as Network Connection aborted by Server but
when we look at each error in detail we can see that they don't all occur at
the same stage in the request cycle. Some occur on transmit http request,
some on open network connection, some on wait for server response, but all
within the same second.
On one of the tests we had a total of more than 300 requests and had only
14 errors divided over 2 occations during the 5 hour test.
The problem is 100% reproducable with the current setup and the setups we've
tested but the errors occur with some randomness.
The application logs show nothing unusual. The access logs show nothing
unusual. We've included the session ids in the tomcat logs and the failing urls
doesn't show up in the access log at all for the given session id (cookies are
shown in the error report).
During the test the machine is under some load, but I wouldn't call it heavy
load. The application is quite database intensive so postgres works a lot
harder than java/tomcat.
At first we used apache 2.2 with mod_jk to in front of tomcat and the errors
were more numerous at that time and we got a bunch of errors in the mod_jk.log
stating apache could not connect to tomcat. To be able to pinpoint the problem
we've now excluded apache httpd and run only tomcat with the NIO HTTP
connector. We also tried the vanilla HTTP connector.
We've tried to use both the default garbage collector with default settings and
the flags -XX:+UseConcMarkSweepGC -XX:+UseParNewGC -XX:+CMSIncrementalMode.
No significant difference in times and errors with both settings.
We've been able to match some of the errors with full collections reported by
the flags -verbose:gc -XX:+PrintGCDetails -XX:+PrintGCTimeStamps but some
errors occur where there are no full GC occuring.
I'm running out of ideas here... What am I missing? What am I doing wrong? What
could I try?
The full JVM flags are:
# general options
JAVA_OPTS=-server -Dbuild.compiler.emacs=true
# Memory limits (we've tried both higher and lower values here)
JAVA_OPTS=${JAVA_OPTS} -XX:MaxPermSize=192m -Xmx1800m -Xms1800m
# GC logging
JAVA_OPTS=${JAVA_OPTS} -verbose:gc -XX:+PrintGCDetails -XX:+PrintGCTimeStamps
# GC engine (Tried with excluding this and usinging the default values)
#JAVA_OPTS=${JAVA_OPTS} -XX:+UseConcMarkSweepGC -XX:+UseParNewGC
-XX:+CMSIncrementalMode
# GC tuning (tried with excluding these as well)
#JAVA_OPTS=${JAVA_OPTS} -Xmn2g -XX:ParallelGCThreads=8 -XX:SurvivorRatio=8
-XX:TargetSurvivorRatio=90 -XX:MaxTenuringThreshold=31
# JVM options
JAVA_OPTS=${JAVA_OPTS} -Dfile.encoding=utf-8 -Djava.awt.headless=true
Software involved:
FreeBSD 8.0-RELEASE-p2 with diablo-jdk1.6.0 (we also tried openjdk6). Tomcat
6.0.26 (previously 6.0.20 with same problem). The application uses
org.apache.commons.dbcp.BasicDataSource to connect to postgresql 8.4.2 on the
same machine. Most part of the application uses hibernate and ehcache to access
the database but some part use vanilla jdbc and some older parts still use a
homebrew connection pool. We use spring for transaction management and
autowiring of some handler/service objects.
Hardware:
16 CPU cores (Intel(R) Xeon(R) X5550 @ 2.67GHz)
32 GB RAM
Thanks in advance,
Patrik Kudo
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Sporadic errors during high load
Thanks for a comprehensive statement of the problem - so many people don't
include the basics, let alone the details!
A few thoughts inline.
On 16 March 2010 13:58, Patrik Kudo k...@pingpong.net wrote:
We run a load test scenario using the Proxysniffer load testing tool on a
machine connected to the same switch as the server under load. The load test
simulates 3100 users
Why this number? What happens if you increase it - does the incidence of
the problem increase? This might make it easier to track down.
looping over 27 pages of varying complexity.
Again, can you force the issue by tuning which pages are requested?
Proxysniffer reports all errors as Network Connection aborted by Server
but when we look at each error in detail we can see that they don't all
occur at the same stage in the request cycle. Some occur on transmit http
request, some on open network connection, some on wait for server
response, but all within the same second.
It'd be interesting to run (say) Wireshark and sniff the TCP connections.
In particular, that sounds like TCP RSTs coming off the server but it would
be good to verify that and to see at which points in the negotiation they
happen.
The application logs show nothing unusual. The access logs show nothing
unusual. We've included the session ids in the tomcat logs and the failing
urls doesn't show up in the access log at all for the given session id
(cookies are shown in the error report).
That's interesting; I'll leave better-qualified people to comment on what
code paths this eliminates.
We've been able to match some of the errors with full collections reported
by the flags -verbose:gc -XX:+PrintGCDetails -XX:+PrintGCTimeStamps but
some errors occur where there are no full GC occuring.
How long do your full GCs take?
# Memory limits (we've tried both higher and lower values here)
JAVA_OPTS=${JAVA_OPTS} -XX:MaxPermSize=192m -Xmx1800m -Xms1800m
That's a small part of a 32G machine, but you're seeing no out of memory
errors so it's a sign of good design and coding ;-).
FreeBSD 8.0-RELEASE-p2 with diablo-jdk1.6.0 (we also tried openjdk6).
Can you tell us *exactly* which versions of the JDKs?
http://www.freebsd.org/java/ tells me 1.6.0-7 is current - sorry, I'm not as
well up on FreeBSD Java versions as some other OSs.
- Peter
Re: jvm exits without trace
Taylan, I have had a similar problem that is yet unsolved (see the thread 'Tomcat dies suddenly'.) In my case, the death left a core file which showed the JVM stopped with a seg fault. A week ago yesterday, we switched to the Sun 1.6.0_7 JVM (from 1.6.0_17 and 1.6.0_17) (Chuck suggested this) and so far, it is running even though we have had loads and usages similar to those that caused crashes in the past. Therefore, you might consider trying that JVM. Hope I haven't jinxed myself by saying it is still up. Thanks, Carl - Original Message - From: Taylan Develioglu tdevelio...@ebuddy.com To: Tomcat Users List users@tomcat.apache.org Sent: Tuesday, March 16, 2010 7:41 AM Subject: Re: jvm exits without trace With parent I meant the main JVM process as opposed to forked processes or threads, sorry to confuse you there. Stracing the threads generates too much data to store so I had to settle with the parent process. To answer your other questions. The code is 100% pure java, why it causes this messy crash is still unclear but development is working to figure it out. I'll follow up when we find out more, but I'm not sure if we're likely to dig into the root cause, working around it is more of a priority right now than debugging the jvm. On Mon, 2010-03-15 at 17:08 +0100, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Taylan, On 3/15/2010 10:19 AM, Taylan Develioglu wrote: The cause for the crashes was in our own application code, we're currently investigating the exact reason. Yeah, I'd like to second Chuck's question: was it native code? A strace of the parent process shows killed by sigsegv, why or how this can happen is still unclear. So, the parent was being killed? What was the parent of the JVM? Thanks to everyone that gave their assistance. Definitely follow-up to let us all know what you've uncovered... this was certainly a weird situation. - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkueW4wACgkQ9CaO5/Lv0PAdhgCfa32vlcsMI5ELCNcLSjjV+S/o FZEAnjvjXgAwxjejTXexGO//89TyeF+r =BPtZ -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Tomcat httpd - Avoiding Session Fixation Attacks by using Identity Confirmation
I'm trying to avoid session fixation attacks by using Identity Confirmation (invalidating the user's session and creating a new one when they sign in). This works fine when just using Tomcat, however when httpd is handling the requests and forwarding through mod_jk the post signin JSESSIONID is the same as before the user signed in. I'm using Spring 3.0, which should handle the session invalidation and creation automatically, however it is spitting out the following message: org.springframework.security.web.authentication.session.SessionFixationP rotectionStrategy - Your servlet container did not change the session ID when a new session was created. You will not be adequately protected against session-fixation attacks I'm using Apache 2.2 and Tomcat 6.0.18. Has anyone come across this problem? My hunch is that it lies with mod_jk or Apache httpd configuration. This closest thread I found was http://markmail.org/thread/ya5qojmhb5bzmull but it covers only attacks where JSESSIONID was passed in as a parameter, and does not use Identity Confirmation. Cheers, Richard - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Setting HTTP Response Headers Through Tomcat Configurations
Hello, I wanted to poll this group to know if there are any settings/configurations in Tomcat (version 5.5.27) that can set default HTTP response headers, fir example Cache-Control? I know this can be done through application specific code using HttpServletResponsehttp://java.sun.com/products/servlet/2.3/javadoc/javax/servlet/http/HttpServletResponse.html but if possible I would like to do this though some built in configurations. Thank you for your time. Regards Anurag -- Anurag Kapur Associate - Technology, Sapient Corporation. http://www.linkedin.com/in/anuragkapur http://www.google.com/profiles/anuragkapur --
Re: [OT] Sergey A. Yatcenko
On 16/03/2010 12:27, Pid wrote: Is currently winning the prize for most annoying list member. Working on it... Mark - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
[OT] Re: jvm exits without trace
Hi, Tomcat dies suddenly thread was exciting almost as Prison Break TV series. I couldn't wait to find out what would be solution to the problem, and I must admit that just downgrading to lower sub-sub-sub version JVM left me a bit disappointed. :) Regards, Ognjen Carl wrote: Taylan, I have had a similar problem that is yet unsolved (see the thread 'Tomcat dies suddenly'.) In my case, the death left a core file which showed the JVM stopped with a seg fault. A week ago yesterday, we switched to the Sun 1.6.0_7 JVM (from 1.6.0_17 and 1.6.0_17) (Chuck suggested this) and so far, it is running even though we have had loads and usages similar to those that caused crashes in the past. Therefore, you might consider trying that JVM. Hope I haven't jinxed myself by saying it is still up. Thanks, Carl - Original Message - From: Taylan Develioglu tdevelio...@ebuddy.com To: Tomcat Users List users@tomcat.apache.org Sent: Tuesday, March 16, 2010 7:41 AM Subject: Re: jvm exits without trace With parent I meant the main JVM process as opposed to forked processes or threads, sorry to confuse you there. Stracing the threads generates too much data to store so I had to settle with the parent process. To answer your other questions. The code is 100% pure java, why it causes this messy crash is still unclear but development is working to figure it out. I'll follow up when we find out more, but I'm not sure if we're likely to dig into the root cause, working around it is more of a priority right now than debugging the jvm. On Mon, 2010-03-15 at 17:08 +0100, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Taylan, On 3/15/2010 10:19 AM, Taylan Develioglu wrote: The cause for the crashes was in our own application code, we're currently investigating the exact reason. Yeah, I'd like to second Chuck's question: was it native code? A strace of the parent process shows killed by sigsegv, why or how this can happen is still unclear. So, the parent was being killed? What was the parent of the JVM? Thanks to everyone that gave their assistance. Definitely follow-up to let us all know what you've uncovered... this was certainly a weird situation. - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkueW4wACgkQ9CaO5/Lv0PAdhgCfa32vlcsMI5ELCNcLSjjV+S/o FZEAnjvjXgAwxjejTXexGO//89TyeF+r =BPtZ -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: [OT] Re: jvm exits without trace
Ognjen Blagojevic wrote: Hi, Tomcat dies suddenly thread was exciting almost as Prison Break TV series. I couldn't wait to find out what would be solution to the problem, and I must admit that just downgrading to lower sub-sub-sub version JVM left me a bit disappointed. :) Well, I wouldn't call that a true solution; more of a workaround. At some point, they're going to have to be able to update to a more current version. I'd love to see what the root cause is, if it's ever truly determined... D - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
apache responds with 413 for duplicate http header
Hello, I have apache installed on redhat linux. The version is below Server version: Apache/2.2.11 (Unix) This server is basically accepting requests on port 80. However if the incoming requests has duplicate http headers for the same requests the apache responds with a 413 error. In the example below the client has two Content-Length headers and as shown the response from apache is 413. All the header information is not included below for obvious reasons. Is there any config changes that can be applied to apache to ignore the duplicate headers POST http://example.com HTTP/1.1 Host:example.net.net:80 User-Agent: .1 Content-Length: 70 Content-length: 70 Content-Type: application/x-www-form-urlencoded ACTION=searchCUID=7QCJVqZNuujgdluDNZTXTA%3d%3dCATALOG=HOMEGCLIENT=PHTTP/1.1 413 Request Entity Too Large Date: Tue, 16 Mar 2010 15:39:37 GMT Connection: close Content-Type: text/html; charset=iso-8859-1 !DOCTYPE HTML PUBLIC -//IETF//DTD HTML 2.0//EN htmlhead title413 Reques Thanks in Advance Prabhat - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: apache responds with 413 for duplicate http header
Prabhat Karki wrote: Hello, I have apache installed on redhat linux. The version is below Server version: Apache/2.2.11 (Unix) This server is basically accepting requests on port 80. However if the incoming requests has duplicate http headers for the same requests the apache responds with a 413 error. In the example below the client has two Content-Length headers and as shown the response from apache is 413. All the header information is not included below for obvious reasons. Is there any config changes that can be applied to apache to ignore the duplicate headers POST http://example.com HTTP/1.1 Host:example.net.net:80 User-Agent: .1 Content-Length: 70 Content-length: 70 Content-Type: application/x-www-form-urlencoded ACTION=searchCUID=7QCJVqZNuujgdluDNZTXTA%3d%3dCATALOG=HOMEGCLIENT=PHTTP/1.1 413 Request Entity Too Large Date: Tue, 16 Mar 2010 15:39:37 GMT Connection: close Content-Type: text/html; charset=iso-8859-1 !DOCTYPE HTML PUBLIC -//IETF//DTD HTML 2.0//EN htmlhead title413 Reques Thanks in Advance Prabhat Where does Tomcat figure into this question? D - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: apache responds with 413 for duplicate http header
There are lots of Apache projects. You want the mailing list for Apache httpd; this is the mailing list for Apache Tomcat. Try re-posting on a more appropriate list :-) - Peter On 16 March 2010 18:30, Prabhat Karki bruno...@yahoo.com wrote: Hello, I have apache installed on redhat linux. The version is below Server version: Apache/2.2.11 (Unix) This server is basically accepting requests on port 80. However if the incoming requests has duplicate http headers for the same requests the apache responds with a 413 error. In the example below the client has two Content-Length headers and as shown the response from apache is 413. All the header information is not included below for obvious reasons. Is there any config changes that can be applied to apache to ignore the duplicate headers POST http://example.com HTTP/1.1 Host:example.net.net:80 User-Agent: .1 Content-Length: 70 Content-length: 70 Content-Type: application/x-www-form-urlencoded ACTION=searchCUID=7QCJVqZNuujgdluDNZTXTA%3d%3dCATALOG=HOMEGCLIENT=PHTTP/1.1 413 Request Entity Too Large Date: Tue, 16 Mar 2010 15:39:37 GMT Connection: close Content-Type: text/html; charset=iso-8859-1 !DOCTYPE HTML PUBLIC -//IETF//DTD HTML 2.0//EN htmlhead title413 Reques Thanks in Advance Prabhat - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Unable to compile APR (tomcat-native-1.1.20) on Debian Lenny
Hi guys,
long time no see ;)
I hope somebody can shed some light here since meanwhile I'm running
out of ideas:
I set up a Vanilla Debian Lenny and downloaded the latest Tomcat
6.0.26 from tomcat.apache.org.
I've also installed libapr1, libapr1-dev, openssl and libssl-dev
I untared tomcat-native-1.1.20, went into jni/native and issued
./configure --with-apr=/usr/bin/apr-1-config
--with-java-home=$JAVA_HOME --with-ssl=yes
However, I got the following output:
checking build system type... i686-pc-linux-gnu
checking host system type... i686-pc-linux-gnu
checking target system type... i686-pc-linux-gnu
checking for a BSD-compatible install... /usr/bin/install -c
checking for working mkdir -p... yes
Tomcat Native Version: 1.1.20
checking for chosen layout... tcnative
checking for APR... yes
setting CC to i486-linux-gnu-gcc
setting CPP to i486-linux-gnu-gcc -E
checking for a BSD-compatible install... /usr/bin/install -c
checking for JDK location (please wait)... /usr/lib/jvm/java-6-sun
checking Java platform... checking Java platform...
checking for sablevm... NONE
adding -I/usr/lib/jvm/java-6-sun/include to TCNATIVE_PRIV_INCLUDES
checking os_type directory... linux
adding -I/usr/lib/jvm/java-6-sun/include/linux to TCNATIVE_PRIV_INCLUDES
checking for gcc... i486-linux-gnu-gcc
checking for C compiler default output file name...
configure: error: in
`/home/cluster/tomcat/current/bin/tomcat-native-1.1.20-src/jni/native':
configure: error: C compiler cannot create executables
See `config.log' for more details.
The config.log:
===[cut]=
This file contains any messages produced by compilers while
running configure, to aid debugging if configure makes a mistake.
It was created by configure, which was
generated by GNU Autoconf 2.63. Invocation command line was
$ ./configure --with-apr=/usr/bin/apr-1-config
--with-java-home=/usr/lib/jvm/java-6-sun --with-ssl=yes
## - ##
## Platform. ##
## - ##
hostname = someHost
uname -m = i686
uname -r = 2.6.32-trunk-686
uname -s = Linux
uname -v = #1 SMP Sun Jan 10 06:32:16 UTC 2010
/usr/bin/uname -p = unknown
/bin/uname -X = unknown
/bin/arch = unknown
/usr/bin/arch -k = unknown
/usr/convex/getsysinfo = unknown
/usr/bin/hostinfo = unknown
/bin/machine = unknown
/usr/bin/oslevel = unknown
/bin/universe = unknown
PATH: /usr/local/sbin
PATH: /usr/local/bin
PATH: /usr/sbin
PATH: /usr/bin
PATH: /sbin
PATH: /bin
## --- ##
## Core tests. ##
## --- ##
configure:2024: checking build system type
configure:2042: result: i686-pc-linux-gnu
configure:2064: checking host system type
configure:2079: result: i686-pc-linux-gnu
configure:2101: checking target system type
configure:2116: result: i686-pc-linux-gnu
configure:2158: checking for a BSD-compatible install
configure:2226: result: /usr/bin/install -c
configure:2244: checking for working mkdir -p
configure:2260: result: yes
configure:2353: checking for chosen layout
configure:2355: result: tcnative
configure:2512: checking for APR
configure:2597: result: yes
configure:2667: checking for a BSD-compatible install
configure:2735: result: /usr/bin/install -c
configure:2750: checking for JDK location (please wait)
configure:2778: result: /usr/lib/jvm/java-6-sun
configure:2861: checking Java platform
configure:2886: checking Java platform
configure:2893: result:
configure:2903: checking for sablevm
configure:2934: result: NONE
configure:3011: checking os_type directory
configure:3135: checking for gcc
configure:3162: result: i486-linux-gnu-gcc
configure:3394: checking for C compiler version
configure:3402: i486-linux-gnu-gcc --version 5
./configure: line 3404: i486-linux-gnu-gcc: command not found
configure:3406: $? = 127
configure:3413: i486-linux-gnu-gcc -v 5
./configure: line 3415: i486-linux-gnu-gcc: command not found
configure:3417: $? = 127
configure:3424: i486-linux-gnu-gcc -V 5
./configure: line 3426: i486-linux-gnu-gcc: command not found
configure:3428: $? = 127
configure:3451: checking for C compiler default output file name
configure:3473: i486-linux-gnu-gccconftest.c 5
./configure: line 3475: i486-linux-gnu-gcc: command not found
configure:3477: $? = 127
configure:3515: result:
configure: failed program was:
| /* confdefs.h. */
| #define PACKAGE_NAME
| #define PACKAGE_TARNAME
| #define PACKAGE_VERSION
| #define PACKAGE_STRING
| #define PACKAGE_BUGREPORT
| /* end confdefs.h. */
|
| int
| main ()
| {
|
| ;
| return 0;
| }
configure:3521: error: in
`/home/cluster/tomcat/current/bin/tomcat-native-1.1.20-src/jni/native':
configure:3524: error: C compiler cannot create executables
See `config.log' for more details.
## ##
## Cache variables. ##
## ##
ac_cv_build=i686-pc-linux-gnu
ac_cv_env_CC_set=
ac_cv_env_CC_value=
ac_cv_env_CFLAGS_set=
ac_cv_env_CFLAGS_value=
ac_cv_env_CPPFLAGS_set=
ac_cv_env_CPPFLAGS_value=
ac_cv_env_LDFLAGS_set=
ac_cv_env_LDFLAGS_value=
Re: Unable to compile APR (tomcat-native-1.1.20) on Debian Lenny
On 03/16/2010 07:57 PM, 2smart4u wrote: Hi guys, long time no see ;) And we were all sick of worrying what's going on with you ;) configure:3135: checking for gcc configure:3162: result: i486-linux-gnu-gcc configure:3394: checking for C compiler version configure:3402: i486-linux-gnu-gcc --version5 ./configure: line 3404: i486-linux-gnu-gcc: command not found configure:3406: $? = 127 Seems to me like a compiler problem. Have you tried to run buildconf.sh Might be some autotools incompatibility. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Unable to compile APR (tomcat-native-1.1.20) on Debian Lenny
Mabye a little piece of infor which might be helpful: excerpt from config.log (not working): configure:3402: i486-linux-gnu-gcc --version 5 ./configure: line 3404: i486-linux-gnu-gcc: command not found in config.log (working) the output is configure:2737: i486-linux-gnu-gcc --version /dev/null 5 i486-linux-gnu-gcc (GCC) 4.1.2 20061115 (prerelease) (Debian 4.1.1-21) Copyright (C) 2006 Free Software Foundation, Inc. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. Strange thing is, that I do have a c-compiler installed: gcc --version gcc (GCC) 4.1.3 20080704 (prerelease) (Debian 4.1.2-27) Copyright (C) 2006 Free Software Foundation, Inc. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. However, on Debia Etch, I've got version 4.1.2, in Lenny it's 4.1.3 - might that be the cause of the problem? TIA Gregor -- just because you're paranoid, don't mean they're not after you... gpgp-fp: 79A84FA526807026795E4209D3B3FE028B3170B2 gpgp-key available @ http://pgpkeys.pca.dfn.de:11371 @ http://pgp.mit.edu:11371/ skype:rc46fi - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: [OT] Re: jvm exits without trace
Ognjen Blagojevic wrote: Hi, Tomcat dies suddenly thread was exciting almost as Prison Break TV series. I couldn't wait to find out what would be solution to the problem, and I must admit that just downgrading to lower sub-sub-sub version JVM left me a bit disappointed. :) +1 It sounds quite like the standard tech support solution for Windows problems : de-install, re-install; and if that does not help, push the reset button. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: apache responds with 413 for duplicate http header
Peter Crowther wrote: There are lots of Apache projects. You want the mailing list for Apache httpd; this is the mailing list for Apache Tomcat. Try re-posting on a more appropriate list :-) And apart from that : fix the client. It is not the server which is the problem here. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: [OT] Re: jvm exits without trace
My approach is to get something (a JVM) that works and then gradually change until it breaks. Then, I know what is causing the problem. To date, I haven't been able to get a JVM that works. In my case, it might be something in my application that is causing the crash on 64 bit Slackware as there are many people running 64 bit on Linux without a problem. If it is my application, then any 64 bit JVM I throw at it should crash. On the other hand, if the 1.6.0_7 JVM works, then it is likely a bug in one of the changes that brings the JVM to the current version. Time will tell. Thanks, Carl - Original Message - From: André Warnier a...@ice-sa.com To: Tomcat Users List users@tomcat.apache.org Sent: Tuesday, March 16, 2010 3:20 PM Subject: Re: [OT] Re: jvm exits without trace Ognjen Blagojevic wrote: Hi, Tomcat dies suddenly thread was exciting almost as Prison Break TV series. I couldn't wait to find out what would be solution to the problem, and I must admit that just downgrading to lower sub-sub-sub version JVM left me a bit disappointed. :) +1 It sounds quite like the standard tech support solution for Windows problems : de-install, re-install; and if that does not help, push the reset button. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
mod_jk - apache to tomcat using SSL
I have a web server and an application server. I use mod_jk to communicate between apache2.0 and tomcat 6. I don't believe the communication between apache and tomcat is secured by default. Is there a way to have it send the information in a secure way. Thanks, Lance Campbell Software Architect/DBA/Project Manager Web Services at Public Affairs 217-333-0382
Re: [OT] Re: jvm exits without trace
Carl wrote: My approach is to get something (a JVM) that works and then gradually change until it breaks. Then, I know what is causing the problem. To date, I haven't been able to get a JVM that works. I think we understand that, and agree. Our remarks were tongue in cheek, if that is the right expression. At the bottom of things, finding a bug in the most recent JVM would be much more globally important than finding it in your applications, particularly a bug that can cause the JVM to segfault. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: mod_jk - apache to tomcat using SSL
Campbell, Lance wrote: I have a web server and an application server. I use mod_jk to communicate between apache2.0 and tomcat 6. I don't believe the communication between apache and tomcat is secured by default. Is there a way to have it send the information in a secure way. Taking your question strictly as phrased, I don't think so, because the mod_jk/Tomcat AJP protocol is not encrypted. If you really needed to do this, you could use an SSH tunnel however. If you really needed to and the physical constraints allow it, you could also link your Apache with the back-end Tomcat with a dedicated LAN, and avoid the overhead of SSL. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: mod_jk - apache to tomcat using SSL
On 16/03/2010 21:07, André Warnier wrote: Campbell, Lance wrote: I have a web server and an application server. I use mod_jk to communicate between apache2.0 and tomcat 6. I don't believe the communication between apache and tomcat is secured by default. Is there a way to have it send the information in a secure way. Taking your question strictly as phrased, I don't think so, because the mod_jk/Tomcat AJP protocol is not encrypted. If you really needed to do this, you could use an SSH tunnel however. If you really needed to and the physical constraints allow it, you could also link your Apache with the back-end Tomcat with a dedicated LAN, and avoid the overhead of SSL. mod_proxy_http configured to use https is usually an easier way to do this. Mark - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: mod_jk - apache to tomcat using SSL
What group is responsible for the Tomcat AJP protocol? Is there a way to request a feature to add SSL encryption to the protocol? Thanks, Lance Campbell Software Architect/DBA/Project Manager Web Services at Public Affairs 217-333-0382 -Original Message- From: André Warnier [mailto:a...@ice-sa.com] Sent: Tuesday, March 16, 2010 4:08 PM To: Tomcat Users List Subject: Re: mod_jk - apache to tomcat using SSL Campbell, Lance wrote: I have a web server and an application server. I use mod_jk to communicate between apache2.0 and tomcat 6. I don't believe the communication between apache and tomcat is secured by default. Is there a way to have it send the information in a secure way. Taking your question strictly as phrased, I don't think so, because the mod_jk/Tomcat AJP protocol is not encrypted. If you really needed to do this, you could use an SSH tunnel however. If you really needed to and the physical constraints allow it, you could also link your Apache with the back-end Tomcat with a dedicated LAN, and avoid the overhead of SSL. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: mod_jk 1.2.30 error problem after upgrade
On 03/16/2010 10:07 PM, Anthony J. Biacco wrote: The errors are: [debug] ajp_connection_tcp_send_message::jk_ajp_common.c (1152): sending to ajp13 pos=4 len=4 max=8192 [debug] ajp_connection_tcp_send_message::jk_ajp_common.c (1152): 12 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 - .4.. Do you have browser stop sending data, no need to recover message before those two? This looks like empty POST message caused by client cheating C-L header. Anyhow post the log snippet for the ajp_connection_tcp_send_message callee. [debug] jk_is_input_event::jk_connect.c (986): error event during poll on socket sd = 65 (event=24) It means that Tomcat closed the connection (POLLHUP | POLLERR) Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: mod_jk - apache to tomcat using SSL
On 03/16/2010 10:23 PM, Campbell, Lance wrote: What group is responsible for the Tomcat AJP protocol? Is there a way to request a feature to add SSL encryption to the protocol? You can try, but the answer will be no. Like people already said, use either tunnelling or mod_proxy_http Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: mod_jk - apache to tomcat using SSL
Campbell, Lance wrote: I have a web server and an application server. I use mod_jk to communicate between apache2.0 and tomcat 6. I don't believe the communication between apache and tomcat is secured by default. Is there a way to have it send the information in a secure way. I do not presume to know the sensitivity of the data passing between your webserver and your application server, not the physical topology of your network, nor the real possibility of the data being compromised, nor the real capabilities of your servers. But if you were to make an SSL connection between the front-end and the back-end, you would more than double the encryption overhead. Supposedly, the clients already connect to Apache via HTTPS, and Apache has to decrypt the data on the way in, and encrypt it on the way out to/from the client. That will remain the case anyway. But if Apache has to communicate with the Tomcat back-end via SSL, it will need to do the same encryption/decryption for all the data a second time, and Tomcat at its end also. That is true no matter which method you would use, tunnel or HTTPS proxy. It may be a necessity, and it may be affordable, but it should not be a decision taken lightly thinking it is free of consequences. A crossover cable is less exciting, but may be much cheaper. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Setting HTTP Response Headers Through Tomcat Configurations
2010/3/16 Anurag Kapur anuragka...@gmail.com: I wanted to poll this group to know if there are any settings/configurations in Tomcat (version 5.5.27) that can set default HTTP response headers, fir example Cache-Control? There is none. You can either implement a Filter [1] (inside a web application), see the Java Servlet specification [2] for details, or a Valve [3] (at any Tomcat container level). If you will be using a Filter, I would recommend to look at UrlRewriteFilter by Paul Tuckey [4]. [1] http://tomcat.apache.org/tomcat-5.5-doc/servletapi/javax/servlet/Filter.html [2] http://java.sun.com/products/servlet/reference/index.html [3] http://tomcat.apache.org/tomcat-5.5-doc/catalina/docs/api/org/apache/catalina/Valve.html [4] http://tuckey.org/urlrewrite/ Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: DB connection error -Tomcat 6 config
Well, I'm at a loss. After even downloading 6.0.24 with the Windows Installer service and cleaning up the context.xml and web.xml files in the respective places: /webapps/META-INF/context.xml And /webapps/WEB-INF/web.xml Still, the errors I get: javax.servlet.ServletException: javax.naming.NameNotFoundException: Name jdbc is not bound in this Context org.apache.jasper.runtime.PageContextImpl.doHandlePageException(PageContextImpl.java:862) org.apache.jasper.runtime.PageContextImpl.handlePageException(PageContextImpl.java:791) org.apache.jsp.chgctrl_005fdetails_jsp._jspService(chgctrl_005fdetails_jsp.java:942) org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70) javax.servlet.http.HttpServlet.service(HttpServlet.java:717) org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:377) org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:313) org.apache.jasper.servlet.JspServlet.service(JspServlet.java:260) javax.servlet.http.HttpServlet.service(HttpServlet.java:717) root cause javax.naming.NameNotFoundException: Name jdbc is not bound in this Context org.apache.naming.NamingContext.lookup(NamingContext.java:770) org.apache.naming.NamingContext.lookup(NamingContext.java:153) org.apache.naming.factory.ResourceLinkFactory.getObjectInstance(ResourceLinkFactory.java:97) javax.naming.spi.NamingManager.getObjectInstance(Unknown Source) org.apache.naming.NamingContext.lookup(NamingContext.java:793) org.apache.naming.NamingContext.lookup(NamingContext.java:140) org.apache.naming.NamingContext.lookup(NamingContext.java:781) org.apache.naming.NamingContext.lookup(NamingContext.java:153) My META-INF/context.xml file's contents: Context Resource name=jdbc/myoracle auth=Container type=javax.sql.DataSource factory=org.apache.tomcat.dbcp.DataSourceConnectionFactory driverClassName=oracle.jdbc.driver.OracleDriver maxActive=125 maxIdle=15 maxWait=7 removeAbandoned=true removeAbandonedTimeout=300 logAbandoned=true username=usernm password=pwd url=jdbc:oracle:thin:@servername100:1526:SID minEvictableIdleTimeMillis=5000 timeBetweenEvictionRunsMillis = 1 testWhileIdle=true / /Context And WEB-INF/web.xml resource-ref descriptionChange Ctrl App/description res-ref-namejdbc/myoracle/res-ref-name res-ref-typejavax.sql.DataSource/res-ref-type res-authContainer/res-auth /resource-ref In addition to the previous servlet mappings that were on there before with version 4.1.31 How/why would it not find the naming context? Ughhh!! -Original Message- From: Propes, Barry L [GCG-NAOT] Sent: Thursday, February 25, 2010 3:53 PM To: 'Tomcat Users List' Subject: RE: DB connection error -Tomcat 6 config I'll totally remove factory. It was necessary in my 4.1 build. I'll also tweak the other ms time settings, and the WhileIdle - to borrow, like you suggest and see if that works better, of if at all. I'll also try removing the resource-ref and see what occurs. Thanks, Chris. -Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Thursday, February 25, 2010 3:26 PM To: Tomcat Users List Subject: Re: DB connection error -Tomcat 6 config -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Barry, On 2/25/2010 3:45 PM, Propes, Barry L wrote: Should be noted: for the factory type in the params below, I tried both factory=org.apache.commons.dbcp.BasicDataSourceFactory and factory=org.apache.dbcp.BasicDataSourceFactory, each to no avail. How about either factory=org.apache.tomcat.dbcp.BasicDataSourceFactory or specifying no factory at all and accepting the default (which is that shown above)? I removed the commons ref to test out since there's no commons/lib dir in TC 6.0.24, unlike in TC 4.1.31 Right: common/lib, server/lib, and shared/lib are essentially all merged into a single /lib in Tomcat 6. You can play with catalina.properties and make all kinds of ClassLoader hierarchies, but it's usually not worth it. Context !-- omitting - factory=oracle.jdbc.pool.OracleDataSourceFactory below-- Resource name=jdbc/myoracle auth=Container type=javax.sql.DataSource factory=org.apache.commons.dbcp.BasicDataSourceFactory maxActive=125 maxIdle=15 maxWait=7000 removeAbandoned=true removeAbandonedTimeout=30 logAbandoned=true username=user_name password=pass_word driverClassName=oracle.jdbc.OracleDriver url=jdbc:oracle:thin:@159.177.102.100:1526:MYSID minEvictableIdleTimeMillis=5000 timeBetweenEvictionRunsMillis = 1 testWhileIdle=true / /Context All that looks okay to me, although 700ms isn't a long time to wait for a connection to come back from the pool: my guess is that you'd rather wait for a while for a connection and give the user a complete, if late, response rather than just giving them an error screen.
RE: DB connection error -Tomcat 6 config
And I should have added the proper path(s) was/were /webapps/chngctrl/META-INF/context.xml And /webapps/chngctrl/WEB-INF/web.xml Regards, Barry -Original Message- From: Propes, Barry L [GCG-NAOT] Sent: Tuesday, March 16, 2010 6:04 PM To: 'Tomcat Users List' Subject: RE: DB connection error -Tomcat 6 config Well, I'm at a loss. After even downloading 6.0.24 with the Windows Installer service and cleaning up the context.xml and web.xml files in the respective places: /webapps/META-INF/context.xml And /webapps/WEB-INF/web.xml Still, the errors I get: javax.servlet.ServletException: javax.naming.NameNotFoundException: Name jdbc is not bound in this Context org.apache.jasper.runtime.PageContextImpl.doHandlePageException(PageContextImpl.java:862) org.apache.jasper.runtime.PageContextImpl.handlePageException(PageContextImpl.java:791) org.apache.jsp.chgctrl_005fdetails_jsp._jspService(chgctrl_005fdetails_jsp.java:942) org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70) javax.servlet.http.HttpServlet.service(HttpServlet.java:717) org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:377) org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:313) org.apache.jasper.servlet.JspServlet.service(JspServlet.java:260) javax.servlet.http.HttpServlet.service(HttpServlet.java:717) root cause javax.naming.NameNotFoundException: Name jdbc is not bound in this Context org.apache.naming.NamingContext.lookup(NamingContext.java:770) org.apache.naming.NamingContext.lookup(NamingContext.java:153) org.apache.naming.factory.ResourceLinkFactory.getObjectInstance(ResourceLinkFactory.java:97) javax.naming.spi.NamingManager.getObjectInstance(Unknown Source) org.apache.naming.NamingContext.lookup(NamingContext.java:793) org.apache.naming.NamingContext.lookup(NamingContext.java:140) org.apache.naming.NamingContext.lookup(NamingContext.java:781) org.apache.naming.NamingContext.lookup(NamingContext.java:153) My META-INF/context.xml file's contents: Context Resource name=jdbc/myoracle auth=Container type=javax.sql.DataSource factory=org.apache.tomcat.dbcp.DataSourceConnectionFactory driverClassName=oracle.jdbc.driver.OracleDriver maxActive=125 maxIdle=15 maxWait=7 removeAbandoned=true removeAbandonedTimeout=300 logAbandoned=true username=usernm password=pwd url=jdbc:oracle:thin:@servername100:1526:SID minEvictableIdleTimeMillis=5000 timeBetweenEvictionRunsMillis = 1 testWhileIdle=true / /Context And WEB-INF/web.xml resource-ref descriptionChange Ctrl App/description res-ref-namejdbc/myoracle/res-ref-name res-ref-typejavax.sql.DataSource/res-ref-type res-authContainer/res-auth /resource-ref In addition to the previous servlet mappings that were on there before with version 4.1.31 How/why would it not find the naming context? Ughhh!! -Original Message- From: Propes, Barry L [GCG-NAOT] Sent: Thursday, February 25, 2010 3:53 PM To: 'Tomcat Users List' Subject: RE: DB connection error -Tomcat 6 config I'll totally remove factory. It was necessary in my 4.1 build. I'll also tweak the other ms time settings, and the WhileIdle - to borrow, like you suggest and see if that works better, of if at all. I'll also try removing the resource-ref and see what occurs. Thanks, Chris. -Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Thursday, February 25, 2010 3:26 PM To: Tomcat Users List Subject: Re: DB connection error -Tomcat 6 config -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Barry, On 2/25/2010 3:45 PM, Propes, Barry L wrote: Should be noted: for the factory type in the params below, I tried both factory=org.apache.commons.dbcp.BasicDataSourceFactory and factory=org.apache.dbcp.BasicDataSourceFactory, each to no avail. How about either factory=org.apache.tomcat.dbcp.BasicDataSourceFactory or specifying no factory at all and accepting the default (which is that shown above)? I removed the commons ref to test out since there's no commons/lib dir in TC 6.0.24, unlike in TC 4.1.31 Right: common/lib, server/lib, and shared/lib are essentially all merged into a single /lib in Tomcat 6. You can play with catalina.properties and make all kinds of ClassLoader hierarchies, but it's usually not worth it. Context !-- omitting - factory=oracle.jdbc.pool.OracleDataSourceFactory below-- Resource name=jdbc/myoracle auth=Container type=javax.sql.DataSource factory=org.apache.commons.dbcp.BasicDataSourceFactory maxActive=125 maxIdle=15 maxWait=7000 removeAbandoned=true removeAbandonedTimeout=30 logAbandoned=true username=user_name password=pass_word driverClassName=oracle.jdbc.OracleDriver url=jdbc:oracle:thin:@159.177.102.100:1526:MYSID minEvictableIdleTimeMillis=5000
RE: DB connection error -Tomcat 6 config
From: Propes, Barry L [mailto:barry.l.pro...@citi.com] Subject: RE: DB connection error -Tomcat 6 config Still, the errors I get: Have you looked in the logs? Resource name=jdbc/myoracle auth=Container type=javax.sql.DataSource factory=org.apache.tomcat.dbcp.DataSourceConnectionFactory The factory name is incorrect; as you were told before, just remove it and let Tomcat use the default. (The actual name is org.apache.tomcat.dbcp.dbcp.DataSourceConnectionFactory.) - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
How to set SSL session timeout in Tomcat 5.5.16
May I know how to set the SSL session timeout in Tomcat 5.5.16. I am running JDK 1.5.0 update 7 on RedHat Enterprise. Thank you. Regards, SamKong Goo - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: How to set SSL session timeout in Tomcat 5.5.16
From: Goo Sam Kong [mailto:skgo...@gmail.com] Subject: How to set SSL session timeout in Tomcat 5.5.16 May I know how to set the SSL session timeout in Tomcat 5.5.16. The session timeout value is independent of the session security, and set by the session-timeout value in the webapp's WEB-INF/web.xml file or programatically. See the servlet spec for details. BTW, your tomcat version is four years old - you should seriously consider moving up to a newer version that contains numerous fixes, including security-related ones. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: How to set SSL session timeout in Tomcat 5.5.16
Hi Chuck, I am referring to invalidate SSL session. My application is using client certificate authentication, the XML-RPC client is using USB token as a keystore during SSL session, we want to force client to re-authenticate with my application on every XML-RPC request to prevent user remove the token during the client execution. The client will run infinitely. From the client, I noticed it cached first authenticated SSL session and reuse it for the subsequent calls... Can I invalidate the SSL session on server side? Thank you. Regards, SamKong Goo On 17 March 2010 09:20, Caldarale, Charles R chuck.caldar...@unisys.com wrote: From: Goo Sam Kong [mailto:skgo...@gmail.com] Subject: How to set SSL session timeout in Tomcat 5.5.16 May I know how to set the SSL session timeout in Tomcat 5.5.16. The session timeout value is independent of the session security, and set by the session-timeout value in the webapp's WEB-INF/web.xml file or programatically. See the servlet spec for details. BTW, your tomcat version is four years old - you should seriously consider moving up to a newer version that contains numerous fixes, including security-related ones. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
log rotation of locahost,manager,jakarta,stdout, and stderr files on windows
Running tomcat-6.0.26 on Windows XP out of the box. Is there a way to rotate the stdout, stderr, localhost, manager, jarkata log files that get created under the logs directory when tomcat gets started up via the windows service ? Currently one is forced to stop the service, and restart it to rotate these particular logs. I noticed catalina does get rotated. Thanks, ~Fi Yan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: How to set SSL session timeout in Tomcat 5.5.16
From: Goo Sam Kong [mailto:skgo...@gmail.com] Subject: Re: How to set SSL session timeout in Tomcat 5.5.16 Can I invalidate the SSL session on server side? Look at the servlet API doc: http://tomcat.apache.org/tomcat-5.5-doc/servletapi/javax/servlet/http/HttpSession.html#invalidate() Again, whether the session was established via HTTP or HTTPS is not pertinent here. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: How to set SSL session timeout in Tomcat 5.5.16
Hi Chuck, I attempted that, that is HTTP Session not SSL session. I modified XML-RPC client to include code below to terminate client's SSL session, it worked but we preferred server to terminate SSL session instead. SSLContext.getClientSessionContext().setSessionTimeout(seconds); Do you know how to do/configure to invalidate SSL session? Thank you. Regards, SamKong Goo On 17 March 2010 10:30, Caldarale, Charles R chuck.caldar...@unisys.com wrote: From: Goo Sam Kong [mailto:skgo...@gmail.com] Subject: Re: How to set SSL session timeout in Tomcat 5.5.16 Can I invalidate the SSL session on server side? Look at the servlet API doc: http://tomcat.apache.org/tomcat-5.5-doc/servletapi/javax/servlet/http/HttpSession.html#invalidate() Again, whether the session was established via HTTP or HTTPS is not pertinent here. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: How to set SSL session timeout in Tomcat 5.5.16
From: Goo Sam Kong [mailto:skgo...@gmail.com] Subject: Re: How to set SSL session timeout in Tomcat 5.5.16 I attempted that, that is HTTP Session not SSL session. Depending on how your webapp is configured, you may have two HttpSession objects - one protected, and one not. Make sure you're invalidating the protected session from servlet code associated with a protected resource, not from an unprotected reference. You could also turn off keep-alives in the HTTPS Connector (set maxKeepAliveRequests=1). Renegotiating the SSL handshake on each request might be a noticeable performance hit, however. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
