RE: virtual hosts/certificates

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Bernhard Wraase [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, February 28, 2002 6:59 PM
> To: [EMAIL PROTECTED]
> Subject: virtual hosts/certificates
> 
> 
> Hello,
> 
> is it possible to use several certificates in one tomcat?
> I would like to configure a different cert for each virtual host.
> I.e.:
> cert A for virtual host 1
> cert B for virtual host 2
> cert C for virtual host 3
> As far as I understand the docs it is not possible.
> 
> Does anybody know a trick?

IMHO it isn't possible on SSL (TLS) specification layer.
AFAIK SSL protects connections on host basis.
You can do tricks only if your virtual hosts are real hosts with
different IPs.

> -- 
> Regards Bernhard
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Thread counts

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Moi [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, February 28, 2002 9:48 AM
> To: Tomcat Users List
> Subject: Thread counts
> 
> 
> To optimize my Tomcat4,I'd like to minimize number of thread counts ,for
>  example to 10.Because,when I see Linux processes with "ps axuw" it
> gives very long list.
> 
> What should I do?
> 

The best you can do is to relax :)
I don't think it'll be kind of optimization to reduce number of threads.
but of course it depends on
- how much TC instances are running
- how much connectors they're using
- how much applications are there
- how much threads are created by those applications
and so on.

> 
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Tomcat isn't running

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Yassel Omar Izquierdo Souchay [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, February 28, 2002 8:08 AM
> To: [EMAIL PROTECTED]
> Subject: Tomcat isn't running
> 
> 
> Hello
> i had installed tomcat 4.0 and when y try tu run startup it never finish
> because alwas says
> "Windows cannot find the file -Djava.endorsed.dirs=. Make sure you typed
> correctily..."
> what i have to do.

It looks like problem with your catalina.bat. It got corrupted somehow.
that "-Djava.endorsed.dirs=. " happened to be on a new line.
You can comment out "@echo off" there and, assuming your JAVA_HOME 
is set correctly, try "catalina start".
Hope it helps.

> I couldn't run my Servlets and my .jsp in my iis.
> If somebody know how i would be grateful
> 
> thanx in advance
> Yassel
> 
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Apache + Tomcat + SSL : Please help me on this

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, February 28, 2002 5:37 AM
> To: [EMAIL PROTECTED]
> Subject: Apache + Tomcat + SSL : Please help me on this
> 
> 
> Hi All,
> 
> I have a problem in configuring SSL. I basically have two questions.
> 
> 1. I'm trying to configure Apache to use Tomcat as a servlet 
> container. My Apche server is 1.3.14-3 and i'm using Tomcat 4.02 
> and mod_webapp.so to integrate using WebAppConnection. I 
> basically followed the steps given as in following article
> 
> http://dcb.sun.com/practices/howtos/tomcat_apache.jsp
> 
> It worked very well and I managed to get Apache passing request 
> to the Tomcat. All works fine.
> 
> Now my actual problem is SSL. How to get SSL work with Tomcat ? 
> Should I use Apaches SSL as recommended in Tomcat doc or Tomcats 
> SSL. What steps should I take ?
> 

Can't help here, sorry. You should consult with Apache docs. And you have
to use Apache SSL, in fact AFAIK you won't be able to use Tomcat one in
that configuration.

> 
> 2. In a another machine I have Tomcat running as a standalone. I 
> tried to configure Tomcat SSL by following the how to document in 
> Tomcat. I am getting following error thrown in stdout in logs directory.
> 
> Create Catalina server
> Exception during startup processing
> java.lang.reflect.InvocationTargetException: 
> java.lang.NoClassDefFoundError: javax/net/ServerSocketFactory
>  at java.lang.Class.forName0(Native Method)
>  at java.lang.reflect.Method.invoke(Native Method)
>  ... ... ...
>  at 
> org.apache.catalina.startup.BootstrapService.main(BootstrapService
> .java:428)
> 
> As with my knowledge I precisely followed the steps given in doc, 
> but still have problem. as I uncomment the SSL HTTP/1.1 Connector 
> on port 8443 in server.xml, I could not get Tomcat started and 
> hence getting the exception thrown in stdout. 
> 

It looks like you don't have JSSE installed in proper location.
It resides in $JAVA_HOME/jre/lib/ext in my case and
I believe it can live in $CATALINA_HOME/server/lib
or in $CATALINA_HOME/common/lib if your apps use it.

> 
> I would highly appreciate if anyone can help me on this as I'm 
> tightly held up to finish my project on due date.
> 
> Thank you,
> 
> Zaid.
> 
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: SSL Client authentication with standalone Tomcat

[Anton Brazhnyk]

Hi Wolfgang,

> -Original Message-
> From: Wolfgang Stein [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, February 26, 2002 3:19 PM
> To: [EMAIL PROTECTED]
> Subject: Re: SSL Client authentication with standalone Tomcat
> 
> 
> Imagine an online banking system with some thousand clients
> 
> I can't believe that you have to import each
> client cert into the keystore file.
> 
> If you start tomcat with the -Djavax.net.debug=all option
> you should be able to verify that tomcat initially sends a list 
> of trusted CAs taken from the cacert file. 
> This file should contain one CA (or more) that signed 
> a client certificat signing request (or groups of them).
> 
> But Anton Brazhnyk's suggestion could be an alternative way.
> If anybody succeeded in establishing the ssl client cert handhake
> after importing client certs into the keystore file only,
> please let us know.
> 

Actually I meant importaing server certificate, since there wasn't
"-trustcacerts" in statement with "-alias tomcat".

And, well, I'm not sure again... :)
Client cert should be signed with sertificate of the server
(not just with CA certificate)

> 
> Gru?,
> Wolfgang
>  
> 
> Anton Brazhnyk wrote
> > 
> > I'm not sure its necessary, but I'd import last certificate with 
> > following command:
> > 
> > keytool -import -trustcacerts -file my.crt -alias tomcat
> > 
> 
> 
> Wolfgang Stein wrote:
> > 
> > As far as i understand the client-auth handshake,
> > the server sends a list of trusted CAs to the client.
> >
> > This list is taken from
> > \lib\security\cacerts
> > So you have to import your CA-cert into that file,
> > instead of your .keystore .
> > There is no need to import the client cert into cacerts or keystore.
> > 
> 

Anton

--
To unsubscribe:   <mailto:[EMAIL PROTECTED]>
For additional commands: <mailto:[EMAIL PROTECTED]>
Troubles with the list: <mailto:[EMAIL PROTECTED]>

RE: SSL Client authentication with standalone Tomcat

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED]]On Behalf Of Brian Palmer
> Sent: Tuesday, February 26, 2002 12:58 PM
> To: [EMAIL PROTECTED]
> Subject: SSL Client authentication with standalone Tomcat
> 
> 
> I'm trying to set up for a simple project client-authentication and CA
> abilities, using standalone tomcat and openssl. I'm not having
> luck. The short version is, when I enable clientAuth, I am unable to
> connect to the server, getting various messages (in Mozilla 0.9.8, I
> get no error messages but the page will not load, using openssl
> s_client I get a write error). 
> 
> Forgive me in advance for this long message, but my hope is that by
> explicitly stating what I'm doing, it will be easy for someone more
> experienced to see where I'm going wrong. I've spent much of the last
> 2 days searching online for information and trying different
> approaches; most of the problems/solutions don't give a lot of details
> 
> I've done the following:
> 
> Step 1: Generate the tomcat request for certificate
> keytool -genkey -alias tomcat -keyalg RSA
> 
> keytool -certreq -alias tomcat -file my.csr
> 
> Step 2: Generate the ca certificate
> openssl req -new -newkey rsa:512 -nodes -out ca.req \
> -keyout ca.key
> 
> openssl x509 -trustout -signkey ca.key -days 365  \
>  -req -in ca.req -out ca.crt
> 
> Step 3: Sign the tomcat request to generate tomcat certificate 
> openssl x509 -CA ca.crt -CAkey ca.key -in my.csr \
>  -out my.crt -req -CAcreateserial
> 
> Step 4: Import both into my keystore
> keytool -import -file ca.crt -alias RootCert
> 
> keytool -import -file my.crt -alias tomcat
> 

I'm not sure its necessary, but I'd import last certificate with 
following command:

keytool -import -trustcacerts -file my.crt -alias tomcat

> I can then stop and restart tomcat, and non-client-authenticated https
> works. I then go on to
> 
> Step 5: Generate a client certificate
> openssl req -new -newkey rsa:512 -nodes \
> -out client.req -keyout client.key
> 
> openssl x509 -CA ca.crt -CAkey ca.key \
>  -req -in client.req \
>   -out client.crt
> 
> I then enable clientAuth="true", and try to connect to tomcat using
> the openssl s_client:
> openssl s_client -cert client.crt -key client.key \
>  -connect localhost:8443
> and get the following output:
> CONNECTED(0003)
> depth=1 /C=US/ST=California/L=Stanford/O=Stanford 
> University/OU=CSD/CN=UStorit [EMAIL PROTECTED]
> verify error:num=19:self signed certificate in certificate chain
> verify return:0
> write:errno=104
> 
> Any ideas? Or ideas on how to debug this? (I'm coming up against a
> deadline, so any hints much appreciated)
> 

And I bet client certificate should be signed in specific way.
Some guys mentioned that you can find some help at openSSL
site.

> -- 
> Brian Palmer
> "Whoever fights monsters should see to it that in the process he does
> not become a monster. And when you look long into an abyss, the abyss
> also looks into you"  - Nietzsche
> 
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Clarification: Same host multiple ports don't work?

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Anders Rundgren [mailto:[EMAIL PROTECTED]]
> Sent: Friday, February 22, 2002 8:28 PM
> To: Tomcat Users List
> Subject: Clarification: Same host multiple ports don't work?
> 
> 
> http://myhost:8000/app
> http://myhost:9000/app
> 
> Should be possible to configure independtly,  I.e. app could
> be different for the two ports.
> 
> But the Tomcat mapping schemes does not seem to include port and host.
> 

I believe you need different services in your server.xml
Service in TC is a set of Connectors and an Engine.
So, applications from one service should be independent
from each other and from other connectors.
It won't be easy, but I think its possible and the docs
contain almost all info you need. ;)

> /anders
> 
> 
> Hi,
> 
> In IIS I'm able to define virtual servers using the same host-name
> but different ports.   These virtual servers have independent paths
> (applications) as you would expect.
> 
> I can't see any similar functionality in Tomcat or am I just reading
> the config documents wrong???
> 
> regard,
> Anders R
> 
> 

Anton.

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Tomcat Servlet Setup (NEWBIE)

[Anton Brazhnyk]

Hi,

Tomcat4 doesn't use CLASSPATH to find libraries.
You have to put your classes12.jar either to
$CATALINA_HOME/common/lib or to WEB-INF/lib of
your web-application.
And one more thing it MUST be jar, so you have to
rename your classes12.zip to classes12.jar.

Anton


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, February 21, 2002 5:58 PM
> To: [EMAIL PROTECTED]
> Subject: Tomcat Servlet Setup (NEWBIE)
> 
> 
> 
> 
> I apologise in advance for asking this as it has probably been 
> covered countless
> times before, but I'm afraid I am a newbie who needs an answer 
> quickly and the
> List Archive is currently down!
> 
> I have modified the JdbcCheckup.java program so that it connects 
> to our Oracle
> server using the Oracle JDBC Driver.  This works perfectly well, 
> but ideally I
> want to prompt for the various parameters (username, password etc) via a
> webpage, so I'm trying to create a servlet version of my code.
> 
> The problem is that for some reason, the servlet version cannot 
> establish a
> connection to the DB, even though it is virtually identical to my 
> previous Java
> program.  The issue appears to be with the following line of code...
> 
> Class.forName ("oracle.jdbc.driver.OracleDriver");
> 
> ...which I assume means the program cannot find the JDBC Driver.
> 
> I realise this is almost certainly a classpath issue, and my classpath is
> defined under /root/.bash_profile as follows...
> 
> PATH=/usr/java/jdk1.3.1_02/bin:/usr/local/sbin:/usr/sbin:/sbin:$PA
> TH:$HOME/bin:/var/tomcat4/common/lib
> 
> BASH_ENV=$HOME/.bashrc
> USERNAME="root"
> CLASSPATH=/usr/java/jdk1.3.1_02/classes12.zip:/var/tomcat4/webapps
/james/:/var/tomcat4/common/lib/servlet.jar:/var/tomca
> 
> t4/common/lib/classes12.zip:/var/tomcat4/common/lib/zip/classes/:/
> usr/java/jdk1.3.1_02/lib/tools.jar
> 
> export USERNAME BASH_ENV PATH CLASSPATH
> 
> Can anyone see where I'm going wrong?  Please reply to me off-list.
> 
> Thanks in advance,
> 
> James
> 


--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: CA guidance

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Andrew [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, February 21, 2002 5:22 PM
> To: Tomcat Users List
> Subject: CA guidance
> 
> 
> Hi, I'm using jdk1.4 final and I want to use SSL with Tomcat for
> CLIENT-CERT authentification.
> I've created self-signed certificate by keytool but how I can issue
> certificates for my company based on this(without third party CA)?
> 

I posted the following at least three times after I had found it in
this list. Why don't you use archives?

keytool -genkey -alias tomcat -keyalg RSA
keytool -certreq -alias tomcat -file my.csr

paste this into the signing authority request, you get back a cert that
you paste into a new file, i.e. mySigned.cer
make sure the root CA cert in you keystore or cacerts file as a
trusted certificate.
e.g.

keytool -import -alias RootCert -file RootCertificate.cer

keytool -import -trustcacerts -alias tomcat -file mySigned.cer

> Thanks in advice.
> 
> 
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: CA guidance

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Andrew [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, February 20, 2002 2:08 PM
> To: Tomcat Users List
> Subject: CA guidance
> 
> 
>  Hi, I'm using jdk1.4 final and I want to use SSL with Tomcat for
> CLIENT-CERT authentification.
> I've created self-signed certificate by keytool but how I can issue
> certificates for my company based on this(without third party CA)?
> 

Did you try to search archives?
I read the following method in list and have already posted it here
several times.

keytool -genkey -alias tomcat -keyalg RSA
keytool -certreq -alias tomcat -file my.csr



make sure the root CA cert in you keystore or cacerts file as a
trusted certificate.
e.g.

keytool -import -alias RootCert -file RootCertificate.cer

keytool -import -trustcacerts -alias tomcat -file mySigned.cer

> Thanks in advice.
> 
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Problem loading images when servlet mapping used

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Donie Kelly [mailto:[EMAIL PROTECTED]]
> Sent: Monday, February 18, 2002 12:44 PM
> To: 'Tomcat Users List'
> Subject: Problem loading images when servlet mapping used
> 
> 
> Hi all
> 
> I have a mapping in web.xml that looks like
> 
>   
> mmsProxy
> /
>   
> 
> This is so that I can use a URL like http://host/mms/36123123
> 
> The servlet it's mapped to can then get the ID from the path. Simple and
> working fine :)
> 
> My problem is that I have a JSP pages in the context also which 
> have images.
> The url for the image would be http://host/mms/images/logo.gif
> 
> Problem here is that the URL is not mapped and the default mapping from
> above is forcing the request into my servlet. How can I set up a mapping
> without removing the one above which directs all picture requests to
> /mms/images and retrieves the right image
> 
> 

I didn't try but IMO it should work:

  
default
org.apache.catalina.servlets.DefaultServlet

  debug
  0


  listings
  true

  

  
default
/images/*
  


> 
> Thanks for the help
> Donie
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: The default servlet

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Markus Bengts [mailto:[EMAIL PROTECTED]]
> Sent: Saturday, February 16, 2002 3:11 PM
> To: Tomcat Users List
> Subject: RE: The default servlet
> 
> 
> On Sat, 16 Feb 2002, Anton Brazhnyk wrote:
> 
> > I bet you know you can turn of the
> > directory listing and I think it's all you can do with configs.
> > But you still can write your own default servlet either global
> > or just for your application, right?
> 
> Somebody must have done it already ;)
> 
> Is it really so rare to have apache serve static files and still have
> tomcat serve index.jsp as the welcome file for directories? This is
> probably very common. I would just feel more secure if could configure
> tomcat so that it would not be able to serve static files at all.
> 

I think you have two ways to do it.
1. Override default servlet and disable its serving of
static resources even if these requests pass through
mod_jk or mod_webapp. You still won't be able to return
such requests to Apache, you will have to return error (404?)
or redirect to some place out of web-app.
2. Move your static resources from web-app to directories 
served by Apache.

There was a small discussion about it about a couple months ago.
You can try to find it in archives. It had topic "mod_webapp and php".


>  Markus
> 
> 

Anton

--
To unsubscribe:   <mailto:[EMAIL PROTECTED]>
For additional commands: <mailto:[EMAIL PROTECTED]>
Troubles with the list: <mailto:[EMAIL PROTECTED]>

RE: The default servlet

[Anton Brazhnyk]

Hi Markus,

> -Original Message-
> From: Markus Bengts [mailto:[EMAIL PROTECTED]]
> Sent: Saturday, February 16, 2002 11:22 AM
> To: Tomcat Users List
> Subject: RE: The default servlet
> 
> 
> On Sat, 16 Feb 2002, Anton Brazhnyk wrote:
> 
> > You can disable "default" servlet in $CATALINA_HOME/conf/web.xml
> > and modify welcome-file-list either there or in your app's web.xml
> > I didn't try that, but there is no mentions about default 
> servlet's serving
> > of welcome-file-list, so I hope it works.
> >
> 
> I tried it. It doesn't work. The default servlet serves the welcome-files.
> This is from the distributed $CATALINA_HOME/conf/web.xml
> 
> 
> 
> 

Yep, sorry, I missed it. I bet you know you can turn of the
directory listing and I think it's all you can do with configs.
But you still can write your own default servlet either global
or just for your application, right?

>  Markus
> 
> 

Anton

--
To unsubscribe:   <mailto:[EMAIL PROTECTED]>
For additional commands: <mailto:[EMAIL PROTECTED]>
Troubles with the list: <mailto:[EMAIL PROTECTED]>

RE: Tomcat 4.0.1 StandAlone Web Server and SSL

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: John Echano [mailto:[EMAIL PROTECTED]]
> Sent: Saturday, February 16, 2002 2:36 AM
> To: [EMAIL PROTECTED]
> Subject: Tomcat 4.0.1 StandAlone Web Server and SSL
> 
> 
> We are interested in implementing SSL four our Apache Jakarta 
> Tomcat Server.
> We are running this as a standalone web server on Red Hat Linux 7.1.
> According to Tomcat's documentation, it currently operates on JKS format
> keystores (the Java's standard keystore format). Is this 
> something supported
> by well-known public CAs like Verisign or Thawte? For example, 
> Are we going
> to be able to generate a certificate request in a format that Thawte
> supports  and that the return certificate can be imported into
> the Tomcat Server? If yes, how? The ssl-howto only provides instruction on
> how to use a self-sign certificate.
> 

IMHO, its possible, but you'll have to become very familiar  (I wish I were)
with SSL, PKI, JSSE and so on.

> Thanks,
> 
> John
> 
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: The default servlet

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Markus Bengts [mailto:[EMAIL PROTECTED]]
> Sent: Saturday, February 16, 2002 12:32 AM
> To: [EMAIL PROTECTED]
> Subject: The default servlet
> 
> 
> 
> Is it possible to configure Tomcat 4 so that it serves index.jsp as the
> default for a directory, but still does not serve any static content?
> 
> I do not want it to send any files or directory listings. I only want it
> to serve jsp and servlets. And still I want it to serve index.jsp from the
> requested directory when a browser requests for a directory.
> 

You can disable "default" servlet in $CATALINA_HOME/conf/web.xml
and modify welcome-file-list either there or in your app's web.xml
I didn't try that, but there is no mentions about default servlet's serving
of welcome-file-list, so I hope it works.

> // Markus
> 
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Is this possible with TOMCAT-> host:8080 AND host:8585

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Luis Pinho [mailto:[EMAIL PROTECTED]]
> Sent: Friday, February 15, 2002 8:49 PM
> To: '[EMAIL PROTECTED]'
> Subject: Is this possible with TOMCAT-> host:8080 AND host:8585
> 
> 
> Hi There,
> 
> Is it possible to run TOMCAT at different ports, at the same time?
> 
> Like:
> 
> host:8080
> 
> and 
> 
> host:1234
> 
> 
> If yes, how is this done, and where do I put the HTML files (in 
> the disk...)
> 

Assuming you use TC4 (I'm not familiar with 3.x)
Yes, its possible. And it all up to you where to put your files.
All this staff is covered in tomcat docs.
http://jakarta.apache.org/tomcat/tomcat-4.0-doc/config/index.html

> Can I have two or more copies of TOMCAT in the PC running at the 
> same time,
> running at different port's and installed at different locations 
> of the HD?
> 

Yep, good way to start is RUNNING.txt under dir TC is installed.

> 
> Thanks
> 
> Pinho
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Problems with Manager reload, memory usage and garbage collection.

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Thomas ?hlen [mailto:[EMAIL PROTECTED]]
> Sent: Friday, February 15, 2002 4:11 PM
> To: Tomcat Users List
> Subject: Problems with Manager reload, memory usage and garbage
> collection.
> 
> 
> Each time I reload my application with the Manager servlet the 
> memory usage
> increase.
> 
> Spec: I have Tomcat 4.0.2 and JDK 1.3.1_02 running on a Windows2k machine.
> 
> I have located my problem using JProbe with Tomcat 4.0.2. Looking at the
> instance summary before and after a reload I see that there is one class
> that isn't GC'd. So after 10 reloads I have 10 instances of this 
> class. The
> class is a singelton and lookes something like this:
> 
> public class MySingelton
> {
> private static MySingelton singelton;
> 

Above is the reference that don't let your class to be GC'ed.
You should add something like close() to your class

public void close() {
singleton = null;
}
and then call it in your servlet's destroy()


> private Hashtable resources;
> 
> private MySingelton()
> {
> // Create a Hashtable with some resources here
> }
> 
> public static Object getResource( String name )
> {
>  return resources.get( name );
> }
> 
> public static synchronized void configure()
> {
> singelton= new MySingelton();
> }
> }
> 
> This Singelton are only called in the init method of my servlet; e.g.
> 
> public void init( ServletConfig config )
> throws ServletException
> {
> MySingelton.configure();
> }
> 
> 
> I guess that Tomcat sets up a new ClassLoader each time an application is
> reloaded. So why can't MySingelton be garabage collected? Somewhere there
> must still be a reference to it and it isn't in my code for sure.
> 
> Please anyone got a suggestion how to solve my problem?
> 

Hope it helps.

> Thanks!
> Thomas ?hl?n
> 
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: HTTPS client authentification

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Andrew [mailto:[EMAIL PROTECTED]]
> Sent: Friday, February 15, 2002 1:30 PM
> To: Tomcat Users List
> Subject: HTTPS client authentification
> 
> 
>  Hi, I 've a simple question. If I've configured some rules and 
> JDBCRealm as
> credentials store for may webapp+ set transport-guaratee to CONFIDENTIAL
> for some resources, how I must setup SSL connector that it 
> authentificate my
> users through client certificates.More concrete JDBCRealm is
> not used in this case but must be used PKI based authentification 
> mechanism
> instead? How I can setup my users for CLIENT-CERT?
> 

Well, you know it's not a simple question. It took me about 2 weeks
to find some clues and I still can't require client auth on application
level. It seems request can't pass to client through mod_jk. So,
I had to ask sysadmin to require certificate authentication with Apache.
I didn't try mod_webapp though.
Not very helpful answer, eh? Try with more specific questions and
I hope I'll be able to help.

BTW, there is no such word "authentiFIcation". It was surprise for me to. :)

> Thank you.
> 
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Configuring apache + tomcat on separate machines

[Anton Brazhnyk]

Hi,

I've done it. Its easy if you read docs carefully. I did it with
both mod_webapp and mod_jk. (RedHat 7/Apache 1.3.20 + Win2k/Tomcat 4.0.2)

All the steps are pretty straitforward except maybe workers.properties.
Here is mine:

ps=/

worker.list=AJP13

worker.AJP13.port=8009
worker.AJP13.host=192.168.3.20
worker.AJP13.type=ajp13
worker.AJP13.lbfactor=1

in httpd.conf you have to LoadModule mod_jk.so and add something like
following (end of file is working for me)

JkWorkersFile /etc/httpd/conf/workers.properties
JkLogFile logs/ajp.log
JkLogLevel error

JkMountCopy on

JkMount /tests/* AJP13
JkMount /tests AJP13

JkMount /manager/* AJP13
JkMount /manager AJP13

JkMount /tomcat-docs/* AJP13
JkMount /tomcat-docs AJP13

Hope it helps.


> -Original Message-
> From: Sharanya Vemu [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, February 14, 2002 6:28 PM
> To: Tomcat Users List
> Subject: RE: Configuring apache + tomcat on separate machines
> 
> 
> if any one hasnt done it , well the  question is can this be done 
> ?? at all
> , someone can surely reply for that atleast!!
> 
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, February 14, 2002 3:31 AM
> To: [EMAIL PROTECTED]
> Subject: Re: Configuring apache + tomcat on separate machines
> 
> 
> DOESEN'T ANYONE KNOW HOW TO DO THIS?
> SURELY SOMEONE MUST KNOW!
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: How to redirect port 8080 to port 443?

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Richard S. Huntrods [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, February 14, 2002 6:06 PM
> To: [EMAIL PROTECTED]
> Subject: How to redirect port 8080 to port 443?
> 
> 
> Greetings!
> 
> I am moving from an insecure to a secure server for Tomcat.  Currently,
> I have both ports 8080 (for http) and ports 443 (for https) enabled in
> my server.xml.file.
> 
> Now I have must remove port 8080 (insecure).
> 
> Is there a way to redirect port 8080 to port 443 within server.xml?  Is
> there an *easy* way?   (i.e. the setup is currently very stable and
> simple - I don't want to start trying to enable multiple virtual servers
> or contexts or anything like that - just a simple port redirection (if
> possible).
> 

Do you want to remove it or redirect it?
If you remove it you won't be able to access that port and thereof do
redirections. All you need is to remove or comment out Connector
with port="8080" attribute in server.xml
If you want to redirect requests from 8080 to 443 you have to
add/change the redirectPort attribute in that Connector and
add some SecurityConstraints to web.xml in your application.

These topics are covered in the SSL HOWTO of TC docs and
in Servlet Specification (Security)

> Thanks in advance for your assistance.
> 
> -Richard
> 
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: TC4 Realm Problem

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Mark Thill [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, February 14, 2002 5:05 PM
> To: [EMAIL PROTECTED]
> Subject: TC4 Realm Problem
> 
> 
> I just started testing realms with the default
> installation that comes with Tomcat 4.0.1, so I'm
> using the MemoryRealm.  I'm having an issue where if I
> place a servlet in a non-secure area and a jsp page in
> a secure area that I can use:
> 
> getServletContext().getRequestDispatcher(url).forward(request,
> response);
> 
> from the servlet to seemingly bypass the security
> addressed by the realm and forward right into the
> secure area without authenticating.  Can anyone tell
> me if this is by design, am I doing something wrong,
> or if this is maybe a bug.
> 

All you need to answer your question is Servlet Specification.


...
The security model applies to the static content part of the web application
and to servlets within the application that are requested by the client. The security
model does not apply when a servlet uses the RequestDispatcher to invoke a
static resource or servlet using a forward or an include.





> Thanks
> Mark T.
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: "Standard" filter implementations

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Attila Szegedi [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, February 14, 2002 12:45 PM
> To: Tomcat Users List
> Subject: "Standard" filter implementations
> 
> 
> People,
> 
> does anyone know if there are "standard" (open source, of course)
> implementations of a caching filter (one that would perform 
> content-caching
> on the server side) and a compression filter (one that would at least
> implement gzip and deflate transfer encodings  - since these 
> algorithms are
> readily available in Java). These filters have very common usage, 
> and I'd be
> surprised if no one actually took a stab at them already.
> 

Compression filter is bundled with TC4 in examples web-app.
so, its source should be in src package

> --
> Attila Szegedi
> home: http://www.szegedi.org
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Can't shut down Tomcat-4.0

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Galina K [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, February 14, 2002 2:31 AM
> To: [EMAIL PROTECTED]
> Subject: Can't shut down Tomcat-4.0
> 
> 
> Hi,
> I was able to start the Tomcat-4.0 ( it looked different from 
> tomcat-3.2.1, maybe it's normal ).
> When I try to shutdown, it does not and I'm getting this:
> 
> C:\jakarta-tomcat-4.0\bin>shutdown
> Using CATALINA_BASE: ..
> Using CATALINA_HOME: ..
> Using CLASSPATH: ..\bin\bootstrap.jar;C:jdk1.3\lib\tools.jar
> Using JAVA_HOME: C:jdk1.3
> Bad command or file name
> C:\jakarta-tomcat-4.0\bin>
> 
> It does find "shutdown.bat" but then tells "bad command or file name"
> 
> What am I doing wrong?
> 

Its possible your shutdown.bat or catalina.bat has been corrupted.
You can comment those "@echo off"  (the first line of files)
and see which command "is bad"

> Please, help.
> 
> Thanks,
> Galina
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: SSL port 8443 Netscape "No common encryption algorithms"

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Ryan Beckes [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, February 13, 2002 9:05 PM
> To: [EMAIL PROTECTED]
> Subject: SSL port 8443 Netscape "No common encryption algorithms"
> 
> 
> Hello,
> I am getting the following error when trying to
> connect to port 8443 (SSL port) via Netscape.
> 
> "Netscape and this server cannot communicate securely
> because they have no common encryption algorithm(s)."
> 

I got the same error when I had tried to use DSA keys (instead of RSA)
with Netscape. In IE you should probably turn TLS on 
(I believe its turned off by default).
All this security staff is rather complicated and here can be
a lot of reasons for it not to work.
Well, all we can do is "read the docs, try, guess, try, read again..."
until it works or we get crazy :)

> Internet Explorer gives a similar error. Checking the
> archives, I've seen some people with similar errors,
> but no real good explanation. I've checked various web
> sites with 128 bit SSL test pages and they all work,
> why won't mine?? If someone can enumerate reason's why
> this might happen, I would be extremely grateful.
> 
> Thanks,
> Ryan
>  
> 
> By the by, here's my Connector setup, nothing special
> except the CA cert location (personally signed created
> by keytool).
> 
>  className="org.apache.catalina.connector.http.HttpConnector"
>port="8443" minProcessors="5"
> maxProcessors="75"
>enableLookups="true"
>acceptCount="10" debug="99"
> scheme="https" secure="true">
>className="org.apache.catalina.net.SSLServerSocketFactory"
>   
> keystoreFile="/usr/local/java/jdk1.3.1/jre/lib/security/cacerts"
>clientAuth="false" protocol="TLS"/>
> 
> 
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: How can I tell who is connecting to the database?

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Brandon Cruz [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, February 13, 2002 6:22 PM
> To: Tomcat Users List
> Subject: RE: How can I tell who is connecting to the database?
> 
> 
> Is there a way to do it that is database independent?  Our 
> application needs
> to track this information for login purposes, and I would like to keep
> everything inside the actual java code.
> 

Well, I think it will require some coding. Just a suggestion:
You could wrap the operations you need to monitor and do
some logging in those wrappers.

> -Original Message-
> From: Dahnke, Eric [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, February 13, 2002 10:07 AM
> To: 'Tomcat Users List'
> Subject: RE: How can I tell who is connecting to the database?
> 
> 
> 
> You can turn on logging with MySQL with the -l flag. I'll assume you're
> running on a unix* system.
> 
> Where MySQL starts up add a -l flag to it. Below is how it is on 
> my machine
> (linux RPM install)
> 
> $bindir/safe_mysqld -l --datadir=$datadir --pid-file=$pid_file &
> 
> then your log file will be created in /var/lib/mysql/your_host_name.log
> 
> HTH
> 
> -Original Message-
> From: Brandon Cruz [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, February 13, 2002 10:59 AM
> To: Tomcat Users List
> Subject: RE: How can I tell who is connecting to the database?
> 
> 
> > -Original Message-
> > From: Brandon Cruz [mailto:[EMAIL PROTECTED]]
> > Sent: 13. febr?ar 2002 01:00
> > To: Tomcat Users List
> > Subject: How can I tell who is connecting to the database?
> >
> >
> > If several developers are connecting to the database using
> > tomcat 3.2.4 on
> > localhost, is there a way to tell which computer is actually
> > connecting?
> > When I try to get IP, it is always the same since they are at
> > localhost.
> >
> > Please help!!!
> >
> > Brandon
> >
> >

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Client certificate does not show in browser

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Henrik Schultz [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, February 13, 2002 10:26 AM
> To: Tomcat Users List
> Subject: Client certificate does not show in browser
> 
> 
> Greetings All,
> 
> I am trying to get client certificates to work with Tomcat 4. Basically I
> seem to almost have it working, as follows:
> 
> First the SSL setup:
> 
> - Installed JSSE
> - Created a self-signed server certificate, and installed in TC keystore
> - Defined SSL service in server.xml
> 
> This works fine, the server responds fine on port 443 and the browser asks
> if I wish to accept and install the server certificate in the trusted root
> keys keystore.
> 
> Then the client certificate setup:
> 
> - Installed OpenSSL to have finer control over key and certificate
> management
> - Generated self-signed CA certificate
> - Generated client certificate, and signed it using the CA certificate
> - Distributed CA certificate to browser (IE 5.5), which installed it fine
> in the trusted root keystore.
> - Distributed client certificate to browser, which also installs fine in
> the private keystore.
> 
> Finally modified Tomcat to use client certificates:
> 
> - Installed CA certificate in $JAVA_HOME/jre/lib/security/cacerts using
> keytool
> - Modified server.xml to request client certificate
> 
> Now... (drumroll please) ... when connecting to the server, IE shows a
> pop-up dialog asking me to choose a certificate.
> However, the list box is EMPTY, so here everything comes to a 
> grinding halt
> :-(
> 
> I've searched the FAQ's, and the good guys who wrote OpenSSL says that if
> this happens, it is likely because the server sends a list of trusted root
> CA's, and the browser then only list certificates that have been signed by
> one of these CA's. In other words,  unless your SSL enabled 
> server includes
> the certificate of the CA who signed the client certificate in the
> handshake, your personal cerificate will never show up.
> But, I DID install my CA certificate in the JRE cacerts file, and using
> OpenSSL's 's_client' option I can see that the server in fact includes my
> CA certificate in the SSL handshake.
> 

It makes sense, BTW could you please point me to that FAQ?
Though I have to say that it seems that advice isn't very usefull,
since my server sertificate and client sertificates are signed with 
the same root certificate and the "Choose cert..." is still empty.

I read about this procedure but it didn't work for me.
I managed to make the certificate chain with local MS certsrv (but it should 
work with other CA's)
Did I do something wrong?

1. Create self signed certificate and private key
keytool -genkey -alias tomcat -keyalg RSA

2. Make certificate request
keytool -certreq -alias tomcat -file request.txt

3. Request certificate chain with 'request.txt' passed to CA
and save it to mycert.cer

4. Get CA root certificate either downloading it from CA or 
exporting from mycert.cer and save it to root.cer

5. Install root certificate to the same 
(not $JAVA_HOME/jre/lib/security/cacerts) keystore
keytool -import -trustcaserts -alias root -file root.cer

6. Install sertificate chain
keytool -import -trustcaserts -alias tomcat -file mycaert.cer

>From this point IE doesn't complain about certificate, but
CLIENT_CERT auth still doesn't work.

> Anynone else have had succes with this, that could shed some 
> light on this,
> or perhaps suggest ways of double-checking the setup?
> 
> Best regards -
> 
> Henrik Schultz
> Senior Systems Architect
> Consultant to Maersk Data AS
> Tel.: +45 39 10 21 13
> Mobile: +45 22 12 24 29
> E-mail: [EMAIL PROTECTED]
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: listFiles() 500 errors

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Mark Symonds [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, February 12, 2002 10:00 PM
> To: Tomcat Users List
> Subject: Re: listFiles() 500 errors
> 
> 
> 
> - Original Message ----- 
> From: "Anton Brazhnyk" <[EMAIL PROTECTED]>
> To: "Tomcat Users List" <[EMAIL PROTECTED]>
> Sent: Tuesday, February 12, 2002 1:50 AM
> Subject: RE: listFiles() 500 errors
> 
> 
> > 
> > Check the version of JDK you use, File.listFiles() is marked "since 1.2"
> > 
> 
> arg ... 
> 
> puggy:~$ java -version
> java version "1.1.8"
> puggy:~$
> 
> > 
> > Hope it helps.
> > Anton
> >
> 
> Looks like you got it.  Thanks much!
> 
> -- 
> Mark (banging head against table ;)
> 

Hey, carefully. You can damage your head...
and the table as well ;)

> 
> 

Anton

--
To unsubscribe:   <mailto:[EMAIL PROTECTED]>
For additional commands: <mailto:[EMAIL PROTECTED]>
Troubles with the list: <mailto:[EMAIL PROTECTED]>

Client certificate request

[Anton Brazhnyk]

Hi,

Just one simple (I hope) question:
Will current mod_jk and Ajp13Connector from TC 4.0.2
pass authentication certificate request to Apache 
and further to a browser?

Thanks in advance.
Anton.

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: how to run multiple instances of a single application on a single tomcat.

[Anton Brazhnyk]

Hi,

Just one of many variants.
Copy it to another directory under webapps and 
if connection to database is configurable from web.xml
then change the configuration.
If connection parameters are hardcoded then you need
to change the code (I'd suggest to make it configurable)

Anton


> -Original Message-
> From: Deep Singh Bhau [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, February 12, 2002 10:42 AM
> To: Tomcat Users List
> Subject: RE: how to run multiple instances of a single 
> application on a single tomcat.
> 
> 
> Im stuck here.. someone please help me out..
> 
> 
> -Original Message-
> From: Deep Singh Bhau 
> Sent: Tuesday, February 12, 2002 12:21 PM
> To: [EMAIL PROTECTED]
> Subject: how to run multiple instances of a single application on a
> single tomcat.
> 
> Hi 
>  
> I'm new to this mailing list. Could anyone please tell me how to run
> multiple instances of application on a single tomcat. For example I have
> a application A which connects to a Database X. All I want is that the
> second instance of Application A should connect to a Database B.
>  
> Regards,
> Deep
> 
> --
> To unsubscribe:   
> For additional commands: 
> Troubles with the list: 

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Tomcat 4 SSL Connector

[Anton Brazhnyk]

Hi,

I think the answer is 'yes' if your factory implements
org.apache.catalina.net.ServerSocketFactory

Anton


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On 
> Behalf Of Trevor Nielsen
> Sent: Tuesday, February 12, 2002 3:39 AM
> To: [EMAIL PROTECTED]
> Subject: Tomcat 4 SSL Connector
> 
> 
> Hi,
> 
> I am currently trying to establish if I can specify
> my own security provider to be used by Tomcat 4.0.1
> instead of the one packaged.  I'm led to believe it
> may be possible (or may in the future be possible) by
> the server.xml file.  When you set up an SSL Connector,
> you have to specify the Factory classname as pointing
> to the tomcat SSLServerSocketFactory ie.
> 
> 
> port="8443" minProcessors="5" maxProcessors="75"
>enableLookups="true"
>acceptCount="10" debug="0" scheme="https" secure="true">
>   clientAuth="false" protocol="TLS"/>
> 
> 
> 
> That being the case, should I then be able to substitute
> SSL implementations by instead doing the following :-
> 
> 
>   clientAuth="false" protocol="TLS"/>
> 
> 
> Thanks.
> 
> 
> -- 
> Trevor Nielsen
> Software Engineer
> Wedgetail Communications Pty Ltd.
> Level 12 S Block
> Queensland University of Technology (Gardens Point)
> Brisbane QLD Australia, 4000
> email:  [EMAIL PROTECTED]
> phone:  3864 5121
> 
> --
> To unsubscribe:   
> For additional commands: 
> Troubles with the list: 

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Java.exe Memory Usage Crashes Tomcat

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Suzanne Holtham [mailto:[EMAIL PROTECTED]]
> Sent: Monday, February 11, 2002 9:45 PM
> To: [EMAIL PROTECTED]
> Subject: Java.exe Memory Usage Crashes Tomcat
> 
> 
> I am running Tomcat 3.3a on Windows 2000 Server.
> 
> I get approximately 1 hit per minute on the most
> popular JSPs.
> 
> After 4-5 hours the memory of the java.exe process
> maxes out and I get an Internal Server error.
> 

It's well known problem caused by memory leaks in javac,
I'm not familiar with jsps but you can try to precompile them
or AFAIK use other compiler (jikes? but I'm not sure)

> I have tried the following with no success:
> 
> 1) Turned the verbosity level to ERROR for logs.
> 2) Set session="false" in the JSPs.
> 3) Increased Xms and Xmx parameters.
> 
> Please help, I am a die hard Tomcat fan, and would
> really love to get this working on Tomcat.
> 
> Thanks,
> 
> Suzanne.
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: listFiles() 500 errors

[Anton Brazhnyk]

Hi,

Check the version of JDK you use, File.listFiles() is marked "since 1.2"


Hope it helps.
Anton

> -Original Message-
> From: Mark Symonds [mailto:[EMAIL PROTECTED]]
> Sent: Monday, February 11, 2002 9:10 PM
> To: [EMAIL PROTECTED]
> Subject: listFiles() 500 errors
> 
> 
> 
> Hi, 
> 
> We have tomcat installed and everything looks to 
> be OK (all of the examples work fine, and all of 
> our pages compile fine), except for one page which
> makes a call to listFiles().
> 
> Here is the code snippet:
> 
> [...]
> 
>  String ch = String.valueOf(request.getQueryString());
>  try{
>  File myfile = new File("/uploadedir/");
>  File file[] = new File[200];
>  file = myfile.listFiles();
>  String str = "";
>  if(ch.equals("all"))
> 
> [...]
> 
> And here is the error message:
> 
> Error: 500
> Location: /servlets/alphaOrder.jsp
> Internal Servlet Error:
> 
> org.apache.jasper.JasperException: Unable to compile 
> Found 1 semantic error compiling 
> "/var/cache/tomcat/DEFAULT/ROOT/servlets/alphaOrder_1.java":
> 
>116. file = myfile.listFiles();
><>
> *** Error: No method named "listFiles" was found in type "java/io/File".
> 
> 
> ... we're stumped because everything else is working fine,
> and if we comment out just that one line, it will work without
> the error message (but without listing the files, ofcourse).
> 
> The server is debian woody running a standard install, up
> to date as of a few minutes ago.
> 
> TIA,
> 
> -- 
> Mark
> 
> 


--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Database servlets

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: John Wadkin [mailto:[EMAIL PROTECTED]]
> Sent: Monday, February 11, 2002 4:34 PM
> To: 'Tomcat Users List'
> Subject: RE: Database servlets
> 
> 

I've looked through your servlet and it definitely shouldn't work with more 
than one simultaneous request. Take a look at that class instance variables

 private Statement stmt;
 private Connection dbCon;
 private HttpServletRequest req;
 private HttpServletResponse res;
 private PrintWriter out;

They can't be safely used in multithreaded environment. This servlet
can work only if implements SingleThreadModel.

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: SSL Connection between Apache and Tomcat

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Sasvari, Zsolt [mailto:[EMAIL PROTECTED]]
> Sent: Monday, February 11, 2002 12:52 PM
> To: 'Tomcat Users List' (E-mail)
> Subject: FW: SSL Connection between Apache and Tomcat
> 
> 
> How can I set a secure connection between Apache and Tomcat?
> As I see the Ajp connetor is not SSL enabled.
> Then how secure will be a system if Tomcat runs in different machine from
> Apache? Somebody said there is your firewall.
> But 90% of attackers come from inside thus it is not a good answer.
> Has anybody something idea?
> 

Don't like firewalls? ;)
Some more suggestions: VPN, IPSec?

> Thanks,
> Zsolt
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Error reading init-params

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Dominik Jednoralski [mailto:[EMAIL PROTECTED]]
> Sent: Sunday, February 10, 2002 6:50 PM
> To: [EMAIL PROTECTED]
> Subject: Error reading init-params
> 
> 
> Hey Guys,
> 
> I have a problem with getting my init-params from the web.xml-file. I'm
> using
> Tomcat 4, and these are the parameters I inserted into the
> webapps/root/web-inf/web.xml-file:
> 
> 
>   
> ShowMsg
> limeservlets.ShowMessage
> 
>   message
>   Nerv-Serv
> 
> 
>   repeats
>   5
> 
>   
> 
> 
> Now I failed to read these parameters with the follwing servlet:
> 
> 
> Does anyone know the reason for that? I for myself don't have a clue- I'm
> not really into configuring servers...
> 

You know, it works for me. Did you map your servlet. I believe it wouldn't
work with invoker.

> Dominik Jednoralski
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Session Management between IIS and Tomcat

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Pavel Brun [mailto:[EMAIL PROTECTED]]
> Sent: Saturday, February 09, 2002 6:48 PM
> To: Tomcat User
> Subject: Session Management between IIS and Tomcat
> 
> 
> I have already posted this question a while ago, but I was wondering if
> anybody knows
> of a mechanism for sharing an IIS session with Tomcat and vice versa? I
> would greatly
> appreciate any information anyone can give me. Even if there is 
> no solution,
> I would
> appreciate someone telling me that "it is not possible", or "it would be
> difficult".
> 

I think it's not possible in terms of servlet engine sessions.
Session is a java object and it's typically used to store some information 
in it. I bet IIS session's purpose is the same but with native windows code.
There is more: Cookie name and url-rewriting parameter name in TC are
called "jsessionid" and I doubt they're called that way in IIS.

But, I think it's still possible in general, though you'll have to do it 
by yourself at applications level. It won't be easy, but if you really 
need it...

> Even those answers will help me.
> 
> Thanks
> 
> Paul
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

Need help with CLIENT_CERT authentication

[Anton Brazhnyk]

Hi All,

I tried to get client authentication through certificate working.
No success so far. I had a hard time with a certificate chain and
it has finally worked. So server authentication is ok now.
I turned to client auth and here are some more troubles.

I've got couple "personal certs" installed in IE 5.5 but IE even
doesn't prompt to choose them. IE 6 does prompt to choose from 
empty list. Do that certs have to be signed in
specific way or have to contain specific extensions?

So, some questions:

1. What kind of certificates are considered client's one?
The "rfc2246 - The TLS Protocol.txt" looks pretty technical
and protocol related (I think it should be). Does somebody
find something about it (I tied to STW with no success).
So links or "success stories" would be highly appreciated.

2. I'm going to use certificate authentication with Apache, 
so does certificate go through mod_jk or mod_webapp?

3. Am I right that clientAuth in 
org.apache.catalina.net.SSLServerSocketFactory requires auth
from every connection made through associated connector. And web.xml
can require auth from certain requests even with clientAuth set to 
"false" in Factory?

Thanks in advance.

Anton.

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Tomcat + Apache lifecycle question

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Daniel Drasin [mailto:[EMAIL PROTECTED]]
> Sent: Friday, February 08, 2002 3:37 PM
> To: Tomcat Users List
> Subject: Tomcat + Apache lifecycle question
> 
> 
> I've set up Tomcat 4.x to work with Apache 1.3.x using the
> Warp connector stuff.  I followed the standard instructions for
> how to modify the httpd.conf file of apache, etc.  (All pretty 
> straightforward...)  My problem is that i need to have a certain
> activity occur when Tomcat starts up.  This activity is to initialize
> a certain set of java objects and make them available to servlets.
> Because of classpath issues (i.e. classloaders) i was unable to use
> the lifecycle hooks of the contexts and had to settle for the 
> (hackish) method of making a dummy servlet that only exists to
> have its  value set (excerpt from the web.xml is
> below).  This servlet has an init() definition that initializes the 
> objects in question (example definition below.)
> 
> The issue is that i need to have this activity occur once and only
> once - so i add a static flag into the init method to see if it's
> already run.  However, this doesn't work.  When i start tomcat,
> the initialization code runs and when i start apache, it runs 
> again - despite the flag.  (Output included below).
> 
> My guess is that the flag doesn't help because these init() calls
> are occuring in two different object spaces (class loaders) so the
> flag really is false both times.
> 
> So my question is - what's going on here.  Fundamentally, how can
> i achieve my goal outlined in paragraph 1.  At a deeper level, my
> question is - why do i get two calls to startup?  

Well, AFAIK yes. But by default there are two Services.
Standalone and Apache-Tomcat. So, you either have to choose one 
of them (since they're really different) or try to use JNDI for that purpose.

> Is tomcat starting
> a new context for apache?  If so, why doesn't it use the one that 
> it's already started?  Is there a way to surpress the starting of
> one of the contexts?  
> 
> Any help is appreciated
> 
> Dan


Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: REPOST: two web.xml?

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Madock Chiwenda [mailto:[EMAIL PROTECTED]]
> Sent: Friday, February 08, 2002 2:13 PM
> To: [EMAIL PROTECTED]
> Subject: REPOST: two web.xml?
> 
> 
> 
> 
> --- Start of forwarded message ---
> From: Madock Chiwenda <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Reply-To: "Tomcat Users List" <[EMAIL PROTECTED]>
> Subject: Fwd: two web.xml?
> Date: 06/02/02 14:45:03
> 
> How can a person specify default web.xml to be used at startup. I 
> would like to start tomcat accessing the jsp in two 
> different 
> modes: 
> 1. Accessing the source using WebDAV enabled editor.
> 2. Viewing the executed page content (HTML) using a browser. 
> 
> I think the source access can be achieved by disabling the JSP 
> servlet but I still want to preview it in the browser. I cant 
> see 
> any documentation for specifying web.xml to be used at startup or 
> by the server/engine/host or anywhere appropriate.
> 

Do you look for CATALINA_HOME/conf/web.xml ?

> Has someone tried to solve such problem?
> 
> Madock
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Default Servlet

[Anton Brazhnyk]

> -Original Message-
> From: Odo [mailto:[EMAIL PROTECTED]]
> Sent: Friday, February 08, 2002 12:27 PM
> To: Tomcat Users List
> Subject: Re: Default Servlet
> 
> 
> Yes Anton,in my case as you said it's enough to have only Tomcat4.
> But if I'll configure Tomcat4 running alone,listening port 80,
> what should i do to redirect all my requests directly (not using in 
> middle any html or jsp) to only one servlet Myservlet?
> Please give me some examples or links with examples?
> 

I wouldn't recommend you using invoker servlet 
(it usually used when you call something like /servlet/myServlet.
Assuming you will use ROOT application (to leave server.xml alone)
in your web.xml you can write something like:

  
name
package.YourServlet
  

  
name
/ 
  

One thing you need to be aware of, absolutely any request that
isn't mapped explicitly will go to your servlet (including
static resources e.g. http://host//index.html or /images/top.jpeg)

Somebody please correct me if I'm wrong, since I tried it long ago. :)

Anton


--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Default Servlet

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Odo [mailto:[EMAIL PROTECTED]]
> Sent: Friday, February 08, 2002 11:33 AM
> To: Tomcat Users List
> Subject: Default Servlet
> 
> 
> Dear gurus.
> I am running Apache+Tomcat4.
> 
> Please help me on the following:
> 1.How should I configure tomcat and apache to run on the same port 80.

No way, only one application can listen specific port on specific IP.

> 2.If both in port 80, How should I configure apache that every request
> like http://test.myserver.com will be redirected to only one servlet
> http://test.myserver.com/servlet/Myservlet not using web.xml's welcome?
> 

You should set your servlet as default one for default context.
You can define default context in server.xml or just use ROOT,
and you should map your servlet to "/" in your web.xml
Try with docs or ask again for xml samples.
And it looks like you don't need Apache at all if you want ALL requests
go to Tomcat.

> (In my case I ought not use web.xml because I want every request should
> passed to servlet Myservlet only directly!)
> 
> 
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Re[2]: Init method of servlet called twice?

[Anton Brazhnyk]

Hi Serge,

> -Original Message-
> From: Serge A. Redchuk [mailto:[EMAIL PROTECTED]]
> Sent: Friday, February 08, 2002 10:30 AM
> To: [EMAIL PROTECTED]
> Subject: Re[2]: Init method of servlet called twice?
> 
> 
> AB> This topic was discussed about a week ago, and Craig gave 
> perfect and clear
> AB> answer (as always). Try mail archives.
> AB> As far as I remember init() can be called multiple times if:
> AB> 1. TC4 and servlet implements SingleThreadModel
> AB> 2. servlet is called by invoker (something like 
> http://myhost/servlets/myServlet)
> AB> 3. init() throws exception (that I don't remember exactly)
> 
> Oh, yes. Craig answered to me as denoted above, but I still didn't solved
> this problem. Partially I did not returned to my problem yet, but I
> think that no any of 3 described reasons match my case.
> 
> 2: I've checked many times before I've asked that question. My init
> servlet is called _once_. There's only one reference to the init
> servlet class in _one_ of my web.xml files.
> 
> 3: init doesn't throws exceptions : log files is clear. Also there's
> a thread that starts from init(), and the thread remains alive (I
> think in case of exception this child thread must die).
> 
> 1: My init servlet is extended from the Struts init servlet,
> so it doesn't implements SingleThreadModel, as Craig said.
> 
> Moreover, I said, I declared a static variable in my init servlet
> class, and affected this variable, and traced this variable state into
> log file.
> And I certainly know: I have several instances of this variable !!!
> Each thread of init servlet has own static variable !!!
> 

Good idea, and it shows the problem. Your class gets loaded in different
class loaders. So, it looks like your servlet still defined in more then one place.

> Again:
> OS: RHL
> JDK: sun, 1.3
> 
> I'll show my configs and code if anybody will be so greatful to deep
> into.
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Tomcat 4.0.1 SSL experts, please help.

[Anton Brazhnyk]

Hi,

Just some guesses.
You can try to configure two HttpConnectors with SSL support, 
each with own address and Factory:
Hmm, I expected alias param in Factory. So you need two keystores.


   



  


I didn't try it, but it looks logical for me.

Anton.

> -Original Message-
> From: n [mailto:[EMAIL PROTECTED]]
> Sent: Friday, February 08, 2002 1:45 AM
> To: [EMAIL PROTECTED]
> Subject: Tomcat 4.0.1 SSL experts, please help. 
> 
> 
> I have two separate security certificates, one for each virtual host. The 
> tomcat documentation states, "... it is therefore not possible to assign 
> multiple certificates to a single IP address." However, this box that I 
> have tomcat on has two IP addresses. Therefore, I should be able to run 
> both virtual hosts with their own respective security 
> certificates together 
> in the same tomcat instance. I'm unsure of how I would configure my 
> server.xml file to bind each virtual host to it's own IP if it is at all 
> possible. Does anyone have an idea of how to do this without using Apache 
> to take care of SSL? Thanks for any help. Below is my current 
> server.xml file.
> 
> 
>  port="80" minProcessors="5" maxProcessors="75"
> enableLookups="true" redirectPort="443"
> acceptCount="10" debug="0" connectionTimeout="6"/>
>  port="443" minProcessors="5" maxProcessors="75"
> enableLookups="true"
> acceptCount="10" debug="0" scheme="https" secure="true">
>  clientAuth="false" protocol="TLS"/>
> 
> 
> 
> 
>  docBase="domain1"
> crossContext="true"
> debug="0"
> reloadable="false" >
> 
> 
> 
>  docBase="domain2"
> crossContext="true"
> debug="0"
> reloadable="false" >
> 
> 
> 
> 
> --
> To unsubscribe:   
> For additional commands: 
> Troubles with the list: 

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: WEB-INF/classes

[Anton Brazhnyk]

Hi Anja,

> -Original Message-
> From: Anja Falkner [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, February 07, 2002 11:37 PM
> To: Tomcat Users List
> Subject: WEB-INF/classes
> 
> 
> Hello,
> 
> at setting up a new context for Tomcat, I must have forgotten 
> something, because tomcat doesn't find my classes in 
> WEB-INF/classes. The following fault appears:
> 
> login_0005ftest$jsp.java:71: Class org.apache.jsp.DBSConnect not found.
>   DBSConnect connect 
> = new DBSConnect();
> 

I'm not familiar with JSP, but it looks like all you need is to import your DBSConnect,
I don't think it really in org.apache.jsp package. Right?

> Until now I thought: When Tomcat is restarted, it recognizes the 
> content in WEB-INF/classes. 
> 
> But perhaps I have to make some entries in server.xml or web.xml 
> referring to this classes?
> 
> Thank you for any help
> 
> Anja   
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Init method of servlet called twice?

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Donie Kelly [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, February 06, 2002 9:42 PM
> To: 'Tomcat Users List'
> Subject: Init method of servlet called twice?
> 
> 
> Hi all
> 
> Can anybody tell me why the init method can be called twice in a 
> servlet. I
> am loading the servlet on startup and init is first called there.
> 
> The first request to the servlet then calls the same init method again?
> Please help. I cannot init twice.
> 

This topic was discussed about a week ago, and Craig gave perfect and clear
answer (as always). Try mail archives.
As far as I remember init() can be called multiple times if:
1. TC4 and servlet implements SingleThreadModel
2. servlet is called by invoker (something like http://myhost/servlets/myServlet)
3. init() throws exception (that I don't remember exactly)

> Thanks
> Donie
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Verisign CSR generation for Tomcat

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Garske, Tom [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, February 06, 2002 9:13 PM
> To: [EMAIL PROTECTED]
> Subject: Verisign CSR generation for Tomcat
> 
> 
> 
> I've been trying to locate any documentation on how generate an 
> SSL certificate(CSR)that can be submitted to Verisign via tomcat, 
> however I've been unsuccessful in doing so.  The link below, only 
> shows how to create a keystore and this obviously cannot be 
> submitted to a CA. If someone could forward any links or examples 
> on how to do this, or if it's even possible, it would be much appreciated.
> http://jakarta.apache.org/tomcat/tomcat-3.2-doc/tomcat-ssl-howto.html
> 
> Thank you
> 

Looks like you need:

keytool -certreq -alias tomcat -file request.txt

Request certificate with content of request.txt from VeriSign


keytool -import -alias verisign -file CACert_from_Verisign

keytool -import -trustcacerts -alias tomcat -file cert_from_request


BTW, it looks like TC HttpConnector doesn't work with certificate chains,
or maybe I'm doing something wrong. I'm still investigating.

> 
> --
> To unsubscribe:   
> For additional commands: 
> Troubles with the list: 

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Error 200?

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On 
> Behalf Of Gary Lawrence Murphy
> Sent: Wednesday, February 06, 2002 5:48 PM
> To: Tomcat Users
> Subject: Error 200?
> 
> 
> 
> I have a client who wrote a bunch of JSP pages that all return a
> tomcat "Error 200" in the middle of the headers; because the error
> message is wrapped in blank lines, the message terminates the HTTP
> headers causing itself and any subsequent headers to be printed on
> the html page.
> 
> I search the archives and Google for this error and while I found
> no information about a potential cause, I did see many JSP pages
> which inadvertently got themselves indexed with this message as
> their very first line ;)
> 
> What is Error 200?
> 

Headers cant contain blank llines, and I have no idea what your client
wanted with that "Error 200". Tomcat uses HTTP status codes and
200 is OK (no error)

> -- 
> Gary Lawrence Murphy <[EMAIL PROTECTED]> TeleDynamics Communications Inc
> Business Innovations Through Open Source Systems: http://www.teledyn.com
> "Computers are useless.  They can only give you answers."(Pablo Picasso)
> 
> 

Anton.

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Tomcat 3.3 and 4.0, different behaviour when reloading the "web.xml"

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: WIPPERT,MAX (HP-Germany,ex1) [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, February 06, 2002 5:06 PM
> To: 'Tomcat Users List'
> Subject: RE: Tomcat 3.3 and 4.0, different behaviour when 
> reloading the "web.xml"
> 
> 
> Hi Remy, thanx for you answer.
> 
> Using the Manager App with start&stop or with reload reloads my Servlet,
> destroy() and init() are processed.
> Unfortunatly this does NOT force TC4.0 to reload the web.xml.
> I think I will have a look at the nighly build...
> 

Reload doesn't force TC to reload web.xml, its true.
But start&stop works just fine for me.
Anyway, looking at nightly build is always good idea :)

> Regards, Max
> 
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: apache + mod_SSL + tomcat

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Cressatti, Dominique [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, February 06, 2002 4:00 PM
> To: Tomcat Users List
> Subject: RE: apache + mod_SSL + tomcat
> 
> 
> Anton Brazhnyk answered it.
> I followed his advice.
> I basically commented out the "HttpConnector" running on port 8080
> and that was it.
> >From that point I can't an http connection on port 8080
> but I can still access my app on port 80 (normal http)
> and port 443 (https).
> 

So, do you want SSL-only for entire web application?
append something like following to your web.xml

  


  Entire application
  /*
  GET



  User data constraint description
  CONFIDENTIAL


  


> One point that was made by somebody else what
> about the connection between apache and tomcat?
> Either mod_jk on port 8009 (or 8007) or mod_webapp
> on port 8008. As far as I know those connectors are
> not ssl enabled. 
> 

These tasks are for your firewall :)

> Dom
> 

Anton

--
To unsubscribe:   <mailto:[EMAIL PROTECTED]>
For additional commands: <mailto:[EMAIL PROTECTED]>
Troubles with the list: <mailto:[EMAIL PROTECTED]>

RE: Tomcat 3.3 and 4.0, different behaviour when reloading the "web.xml"

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: WIPPERT,MAX (HP-Germany,ex1) [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, February 06, 2002 1:30 PM
> To: [EMAIL PROTECTED]
> Subject: Tomcat 3.3 and 4.0, different behaviour when reloading 
> the "web.xml"
> 
> 
> Hello everyone.
> 
> I'm new to this mailing List, and hopefully I don't bother anyone asking
> questions which have already been answered.
> 
> I'm using Tomcat 4.0 standalone on Win2K and Tomcat 3.3 on MPE. I 
> use Tomcat
> to run JavaServlets. 
> 
> On MPE (it includes an Posix-Shell, behaves similar to Unix), when change
> the "web.xml" in the Folder "WEB-INF" Tomcat 3.3 notices this, destroys
> every Servlet mentioned in the "web.xml" and if the Servlet gets accessed
> again ist is reloaded. Same happens if I only touch the "web.xml". This is
> visible becaus of some logging I coded in the init() and the destroy() of
> the Servlets.
> When do the same on my Win3K machine Tomcat 4.0 does NOT reload the
> "web.xml". He does not destroy the classes neither.
> 
> Has anyone an Idea how I can tell Tomcat4.0 to reload the 
> "web.xml"? I want
> him to read out the up-to-date Information I wrote into the web.xml.
>   ...snip...
>   
>   MyParameter
>   UseThisParameterValue
>   
>   ...snip...
> 

TC4 doesn't reload configuration from web.xml even when application has
been reloaded by Manager web-application. So, I have to start/stop application.
Manager is bundled with TC and quite useful especially when set up with
friendly interface.

> Best regards,
> thank you,
> Max Wippert
> 

Anton.

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: apache + mod_SSL + tomcat

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Cressatti, Dominique [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, February 05, 2002 7:38 PM
> To: Tomcat Users List
> Subject: apache + mod_SSL + tomcat
> 
> 
> Hi,
>  
> I've got apache + mod_SSL + tomcat working
> (I don't deserve that much credit as mod_ssl worked
> right out the box) but I wonder couldn't the security bypassed,
> like for example accessing the page on port 8080 instead of port
> 443 ?
>  

If you leave Tomcat listening on 8080 then yes it can be.
So, you just have to modify your server.xml and disable
HttpConnector.

> Dom
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Strange output stream behavior

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, February 05, 2002 5:46 PM
> To: [EMAIL PROTECTED]
> Subject: Strange output stream behavior
> 
> 
> Hi all,
> I'm seeing something strange in the output stream from Jakarta.  
> Here's the
> setup:
> Jakarta 4.0.1 (from zip file)
> Windows XP Professional
> JDK 1.3.1_02 and jsdk1.4rc (makes no difference in the output)
> 
> Here's the code I'm using:
> 
> res.setContentType("text/html");
> 
> PrintWriter out = res.getWriter();
> 
> out.println("");
> out.println("hello!");
> out.println("hello");
> 
> 
> and here's the output:
> **
> *
> HTTP/1.1 200 OK
> Content-Type: text/html
> Date: Tue, 05 Feb 2002 14:44:37 GMT
> Transfer-Encoding: chunked
> Server: Apache Tomcat/4.0.1 (HTTP/1.1 Connector)
> 
> 6
> 
> 2
> 
> 
> 22
> hello!
> 2
> 
> 
> 24
> hello
> 2
> 
> 
> 0
> **
> 
> 
> It looks like every call to println() is putting characters before and
> after.  This also happens with the write() and println() methods on the
> servletoutputstream.  Is this correct?  The strangest thing is that IE
> (6.0) displays the html correctly, and a view source has the extra numbers
> stripped out.
> 
> I'm pulling my hair out trying to figure this one out, can anyone point me
> in the correct direction?
> 

Its OK, put your hair back :)
Look at header above:
Transfer-Encoding: chunked
Any browser that supports HTTP 1.1 will understand it.

> Thanks!
> -Jake
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: JRE or JDK

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Ken Sanderson [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, February 05, 2002 1:45 AM
> To: [EMAIL PROTECTED]
> Subject: JRE or JDK
> 
> 
> 
> Hello all. I have installed tomcat on my NT machine, in order to run a
> software application that requires it. In the install 
> instructions it talks
> about setting the JAVA_HOME variable to the JDK bin folder. However, it

I think here is a problem. JAVA_HOME should point to JDK (not JDK bin)

> cannot find the necessary files it needs in that location. 
> Instead if I set
> the JAVA_HOME variable to my JRE bin folder, it works fine. Is 
> JDK supposed
> to be JRE?
> 
> Everything is working great with the JRE setup, however I noticed 
> that when
> I go to the log on window, tomcat is shut down. After some 
> research I found
> that the problem is my JDK, and I need to upgrade it to 1.3.1, 
> which I did.
> Now the question is, since my JAVA_HOME is pointing to the JRE, 
> is it really
> 1.3.1 of JRE I need, not the JDK?
> 

So, you need JDK with JAVA_HOME correctly set.

> Sorry thats probably confusing, thoughts appreciated.
> 
> Ken Sanderson
> 
> Miistakis Institute for the Rockies
> c/o Faculty of Environmental Design
> 2500 University Drive NW
> Calgary, Alberta
> T2N 1N4
> 
> t 1 (403) 220-8968
>   1 (403) 220-2573
> w www.rockies.ca
> 
> "facilitating ecosystem research & management in the Rocky Mountains"
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: applet works, https doesn't

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Dean Hiller [mailto:[EMAIL PROTECTED]]
> Sent: Saturday, February 02, 2002 10:57 PM
> To: [EMAIL PROTECTED]
> Subject: applet works, https doesn't
> 
> 
> I have an applet that connects back to the server on 8443 and it 
> works fine even without a certificate.  When I go to 
> https://localhost:8443 web page, I get a prompt with an unknown 
> certificate(certificate was created and self signed by me).  Why 
> don't I get this prompt with the applet, it is using port 8443?  
> Something is questionable here.
> 

There is no problem here. Applet doesn't check your certificate for
valid certificate chain and the browser does. The browser expects
the sertificate to be signed by some well-known CA (and some
other staff). You can install your sertificate (at least in MS IE) and
if the sign is the only problem then you get no more promts.

> Can anybody explain this to me?
> thanks,
> Dean
> 
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Problems with .exe install for NT

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Tom Bednarz [mailto:[EMAIL PROTECTED]]
> Sent: Friday, February 01, 2002 10:01 AM
> To: Tomcat Users List
> Subject: Re: Problems with .exe install for NT
> 
> 
> Hello Anton,
> 
> >
> > I've found a link at tomcat-dev
> > (JavaService -
> http://www.alexandriasc.com/software/JavaService/index.html)
> > I posted it here couple of days ago in that old thread you asked for it
> last time.
> > Mayby I should have posted it to you directly, sorry.
> >
> 
> Many thanks for that link! Unfortunately it seems the site is not 
> up. I get
> an under construction if I look at http://www.alexandriasc.com or 
> I get the
> photo of a baby! Probably the site belongs to a happy new daddy 
> which has no
> time to write software anymore!
> 

Sorry again, I couldn't check the link do to some "security" in out company.
I've got only couple of sites opened, and alexandriasc.com surely isn't in that list.

> Tom
> 
> 

Anton.

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Can I use the Hotspot JVM to run tomcat

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Antony Stace [mailto:[EMAIL PROTECTED]]
> Sent: Friday, February 01, 2002 2:57 AM
> To: Tomcat Users List
> Subject: Re: Can I use the Hotspot JVM to run tomcat
> 
> 
> With java included with JDK1.4 there is an option
> 
> -server
> 
> from the man page it says
> 
> -server Selects the Java HotSpot server VM.
> 
> In the file /etc/bin/dtomcat4 there is no mention of hotspot or 
> server, it has
> 
> 
> JPDA_OPTS="-classic -Xdebug -Xnoagent 
> -Xrunjdwp:transport=dt_socket,address=8000,server=y,suspend=n"
> 
> which I presume means that java is started with the "-classic" 
> option.  On inspection of the
> man page for java there is no mention of the option "classic". 
> Can someone please tell me what this
> "classic" option is doing?  Can I change this to "server" and it 
> will use the hotspot VM.
> 

I'm not familiar with JPDA, but AFAIK its all about debugging,
and since Hotspot VM isn't suitable for debugging and classic VM is
they use -classic.
If you use startup script without debug options Tomcat runs in 
default (Hotspot) VM.

> Cheers
> 
> Tony
> 
>  
> 
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: how to get changes to web.xml without restarting tomcat

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, January 31, 2002 6:17 PM
> To: [EMAIL PROTECTED]
> Subject: how to get changes to web.xml without restarting tomcat
> 
> 
> All,
> 
>  My dilemma as I understand it is this.  Tomcat is run at root level,
> requiring restarts of both Tomcat and Apache to be performed by the system
> administrator.  For changes to take effect in web.xml (so far as I can
> tell) Tomcat must be restarted.  This means, bugging the system
> administrator to restart Tomcat and then restart Apache.  Anytime an
> init-param changes I have to go through the sysadmin.  As I recently
> inherited a bunch of servlets, and they have migrated from 
> windows to Linux
> and from JWS to Tomcat, as you can imagine there are many changes to such
> parameters.  Is there a way to get around this at all?  Reloading class
> files is already transparent to the sysadmin, either through a reloadable
> context, or the manager application, but the web.xml changes are bringing
> me down.  Do I have to write a custom servlet?  It seems to me that Tomcat
> should allow for something basic like this.
> 

Yeap, I expected reloading to read and parse web.xml every time. But it doesn't.
So, I have to start/stop application from manager application.
Using HTMLManagerServlet its still pretty easy, just two clicks.

> Thanks to any who take the time to try to help.
> 
> Tim
> -
> Timothy DD Martin
> CSC - GreenTec IV
> (301) 794-2815
> [EMAIL PROTECTED]
> 
> 

Anton.

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Broken pipe

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Emerson [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, January 31, 2002 6:40 PM
> To: Tomcat Users List
> Subject: RE: Broken pipe
> 
> 
> Hi Anton
> 
> Take a look above, i marked the lines that appear my servlet code :
> 

Yeap, sorry. I noticed them when the letter had already been sent.
So, you should be able to catch it. And you could rollback 
the transactions made.
The only bad thing, AFAIK, you'll get the exception not earlier then 
you try to send data back to the user (using either Writer or OutputStream).
So, you cant stop the transaction in the middle of execution and 
your server will have to finnish the job nobody has already been 
interested in.
Isn't it "unnecessary resource drain" that RFC2616 (8.1.4) talks about?
Did I misunderstand it?

> 
> At 09:38 31/1/2002 +0200, you wrote:
> >Hi,
> >
> >> -Original Message-
> >> From: Emerson [mailto:[EMAIL PROTECTED]]
> >> Sent: Wednesday, January 30, 2002 7:36 PM
> >> To: Tomcat Users List
> >> Subject: RE: Broken pipe
> >> 
> >> 
> >> .java:162)
> from here:
> 
> >> at cadServlet.visualizaEstatiticas(cadServlet.java:690)
> >> at cadServlet.doGet(cadServlet.java:351)
> >> at cadServlet.doPost(cadServlet.java:408)
> 
> to here I can catch the exception, cadServlet is the name of the servlet
> 
> >> at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)
> >> at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
> >> at
> >> 
> >
> >Any mention about your own code, right? So, you can't catch it in your
> servlet
> >or jsp. Its internal for container. IMHO you'll have to hack 
> into TC to get
> >this IOException.
> >I've been trying to ask about this problem, or if its not a problem and I
> just
> >crazzy :)
> >I really want to get notified of connection closing event.
> >Nobody answered :(
> 
> Emerson Cargnin
> TRE-SC
> Setor de Desenvolvimento 
> Tel: (48) 251-3700 - Ramal 3134
> 

Anton.

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: multiple init() calls

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: David Rault [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, January 31, 2002 11:36 AM
> To: Tomcat Users List
> Subject: Re: multiple init() calls
> 
> 
> hi
> 
> i think there may be a misunderstanding (or i misunderstood your 
> message ?!)
> the servlet must create _only_ one instance of each servlet class per web
> application

I believe there is no such MUST in spec.

> then this instance must receive _one_ message init()
> at this point user request may be served
> for each user request, a thread is started and executes the service(...)
> method on the
> _shared_ instance
> 
> the singleThreadModel only tells the servlet engine not to serve several
> request simultaneously
> this is the behaviour required by the J2EE specs
> 
> as for your problem, i'm doing servlet for about 2 years now and 
> i never saw
> that kind of
> behaviour... may be a look at your code would help...
> 

So, lets turn to spec (Servlet 2.3)


SRV.14.2.20 SingleThreadModel
public interface SingleThreadModel
Ensures that servlets handle only one request at a time. This interface has no
methods.
If a servlet implements this interface, you are guaranteed that no two threads will
execute concurrently in the servlet?s service method. The servlet container can
make this guarantee by synchronizing access to a single instance of the servlet, or
by maintaining a pool of servlet instances and dispatching each new request to a
free servlet.
This interface does not prevent synchronization problems that result from servlets
accessing shared resources such as static class variables or classes outside the
scope of the servlet.


I believe TC (at least 4.0.2b2) chose the second variant. The pool of instances.
So any instance have to be properly initialized.

just an example

package webtests;

import javax.servlet.*;
import javax.servlet.http.*;
import java.io.*;
import java.util.*;

public class SingleThread extends HttpServlet implements SingleThreadModel {

private static int cnt = 0;

private static final String CONTENT_TYPE = "text/html; charset=windows-1251";

/**Initialize global variables*/
public void init() throws ServletException {
System.err.println("init at " + Thread.currentThread().toString());
System.err.println("Counter: " + (++cnt));
System.err.println("Instance: " + this.toString());
}

/**Process the HTTP Get request*/
public void doGet(HttpServletRequest request, HttpServletResponse response) throws 
ServletException, IOException {
response.setContentType(CONTENT_TYPE);
PrintWriter out = response.getWriter();
out.println("");
out.println("SingleThread");
out.println("");
out.println("The servlet has received a GET. This is the reply.");
out.println("");
}

}

and TC console:

init at Thread[HttpProcessor[8080][0],5,main]
Counter: 1
Instance: webtests.SingleThread@19dc16
init at Thread[HttpProcessor[8080][0],5,main]
Counter: 2
Instance: webtests.SingleThread@405d3b

BTW, I'm not sure but it looks like TC3.2 creates only one instance.
Sorry, cant use attachments due to some "security" restrictions. 
:E

> have fun!
> 
> David
> 

Anton.

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: multiple init() calls

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Serge A. Redchuk [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, January 31, 2002 10:34 AM
> To: [EMAIL PROTECTED]
> Subject: multiple init() calls
> 
> 
> Hi All !
> 
> I've encountered a problem with creating threads of init servlet.
> 
> Forgive me if I'm wrong.
> 
> As I think, catalina must call init() method of init servlet _once_.
> And then just must make only copies of init servlet instance for new
> user requests.
> 
> But I've encountered that the init() method called again and again !
> At every creation of new action router.
> 

Does your servlet implement SingleThreadModel?
If so you got what you wanted, AFAIK.

> It is not the thing that I need !!!
> 
> Platform: pc
> Os: linux
> JDK: IBM Java
> 
> web.xml:
> ...
>   
>   
> action
> .ActionRouterServlet
> 
>   application
>   ApplicationResources
> 
> 
> ...
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Problems with .exe install for NT

[Anton Brazhnyk]

Hi, Tom

> -Original Message-
> From: Tom Bednarz [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, January 31, 2002 9:20 AM
> To: Tomcat Users List
> Subject: Re: Problems with .exe install for NT
> 
> 
> John,
> 
> Type tomcat.exe /? for a help screen.
> 
> I have written some batch files to install and uninstall it as 
> service with
> apropriate settings for the VM. Here the exemples (all on one line please)
> 
>  snip 
> @echo on
> d:
> cd \Tomcat4.0\bin
> 
> tomcat.exe -install "Apache Tomcat"
> C:\JavaSoft\JRE\1.3.1_02\bin\hotspot\jvm.dll -jvm_option 
> -Djava.class.path=D
> :\Tomcat4.0\bin\bootstrap.jar -jvm_option 
> -Dcatalina.home=d:\tomcat4.0 -jvm_
> option -Xms64M -jvm_option -Xmx256M -start
> org.apache.catalina.startup.BootstrapService -params start -stop
> org.apache.catalina.startup.BootstrapService -params stop -out
> d:\tomcat4.0\logs\service.out -err d:\tomcat4.0\logs\service.err
> 
> - snip --
> 
> d:
> cd \Tomcat4.0\bin
> tomcat -uninstall "Apache Tomcat"
> 
> 
> 
> I'm still looking for the source code of the tomcat.exe and the 
> installation
> script. This seems to be a top secret issue since nobody answers 
> my request
> either here nor on the dev list Is this one not OPEN SOURCE ??
> 

I've found a link at tomcat-dev
(JavaService - http://www.alexandriasc.com/software/JavaService/index.html)
I posted it here couple of days ago in that old thread you asked for it last time.
Mayby I should have posted it to you directly, sorry.

> Thomas
> 
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Answers to LifecycleException Questions

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Bill Saur [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, January 30, 2002 11:10 PM
> To: [EMAIL PROTECTED]
> Subject: Answers to LifecycleException Questions
> 
> 
> Georg:
> 
> I tried twice to send this to your e-mail address and it came back as
> undeliverable both times(it said because: "User georg.burkhardt/ew/rbg/de
> ([EMAIL PROTECTED]) not listed in public Name & Address
> Book").
> 
> In answer to your question as to how to stop the IM program: it 
> runs in the
> system tray so you just have right click on the icon and choose exit from
> the list.  I can't run the IM program and Tomcat simultaneously or the IM
> program will interfere.
> 
> As Anton Brazhnyk suggested, I tried to telnet to the port to use 
> the Tomcat
> shutdown command and it would not even connect.  I ran  -a> and saw
> the IM program listed in there and suddenly a light bulb went on 
> in my head.
> As I mentioned in one of my Tomcat Users posts, at one point, using
>  I found the shutdown port (8005) in a TIME_WAIT mode. 
> It struck me
> that IM is the kind of software that is programmed to pursue and 
> hold onto a
> connection on a continuous basis, so I decided to try exiting the 
> IM program
> to see if that could be the source of the interference and sure enough it
> was.  I uninstalled and reinstalled Tomcat and ran it without the 
> IM program
> running and the problem was solved.  So there you have it.
> 

Do you like IM? I mean there is no need to give up on it.
You can just change port for TC to listen for shutdown command to.
Its in server.xml



> Regards,
> 
> Bill Saur
> Spokane, WA
> [EMAIL PROTECTED]
> 
> 

Anton.

--
To unsubscribe:   <mailto:[EMAIL PROTECTED]>
For additional commands: <mailto:[EMAIL PROTECTED]>
Troubles with the list: <mailto:[EMAIL PROTECTED]>

RE: Reload servlet

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Emerson [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, January 30, 2002 7:38 PM
> To: Tomcat Users List
> Subject: RE: Reload servlet
> 
> 
> Have you create a html manager???
> may you share that???
> 

No, I haven't created it. It shipped with TC.
All you need is to read comments in manager app web.xml.
It can be found in either CATALINA_HOME/webapps/manager or
CATALINA_HOME/server/webapps.

> Emerson Cargnin
> TRE-SC
> Setor de Desenvolvimento 
> Tel: (48) 251-3700 - Ramal 3134
> 

Anton.

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Broken pipe

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Emerson [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, January 30, 2002 7:36 PM
> To: Tomcat Users List
> Subject: RE: Broken pipe
> 
> 
> I haven't tried to get that exception, but i supposse it's 
> possible to pick
> it up.
> 
> look at my stacktrace :
> 
> java.io.IOException: Broken pipe
> at java.net.SocketOutputStream.socketWrite(Native Method)
> at java.net.SocketOutputStream.write(SocketOutputStream.java:83)
> at
> org.apache.tomcat.service.http.HttpResponseAdapter.endHeaders(Http
> ResponseAd
> apter.java:124)
> at
> org.apache.tomcat.core.BufferedServletOutputStream.sendHeaders(Buf
> feredServl
> etOutputStream.java:126)
> at
> org.apache.tomcat.core.BufferedServletOutputStream.reallyFlush(Buf
> feredServl
> etOutputStream.java:236)
> at 
> org.apache.tomcat.core.ResponseImpl.finish(ResponseImpl.java:215)
> at
> org.apache.tomcat.facade.RequestDispatcherImpl.doForward(RequestDi
> spatcherIm
> pl.java:243)
> at
> org.apache.tomcat.facade.RequestDispatcherImpl.forward(RequestDisp
> atcherImpl
> .java:162)
> at cadServlet.visualizaEstatiticas(cadServlet.java:690)
> at cadServlet.doGet(cadServlet.java:351)
> at cadServlet.doPost(cadServlet.java:408)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
> at
> org.apache.tomcat.core.ServletWrapper.doService(ServletWrapper.java:405)
> at org.apache.tomcat.core.Handler.service(Handler.java:287)
> at
> org.apache.tomcat.core.ServletWrapper.service(ServletWrapper.java:372)
> at
> org.apache.tomcat.core.ContextManager.internalService(ContextManag
> er.java:806)
> at
> org.apache.tomcat.core.ContextManager.service(ContextManager.java:752)
> at
> org.apache.tomcat.service.http.HttpConnectionHandler.processConnec
> tion(HttpC
> onnectionHandler.java:213)
> at
> org.apache.tomcat.service.TcpWorkerThread.runIt(PoolTcpEndpoint.java:416)
> at
> org.apache.tomcat.util.ThreadPool$ControlRunnable.run(ThreadPool.java:501)
> at java.lang.Thread.run(Thread.java:484)
> 

Any mention about your own code, right? So, you can't catch it in your servlet
or jsp. Its internal for container. IMHO you'll have to hack into TC to get
this IOException.
I've been trying to ask about this problem, or if its not a problem and I just
crazzy :)
I really want to get notified of connection closing event.
Nobody answered :(

> 
> At 15:49 30/1/2002 +0200, you wrote:
> >Hi,
> >
> >> -Original Message-
> >> From: Emerson [mailto:[EMAIL PROTECTED]]
> >> Sent: Tuesday, January 29, 2002 10:50 PM
> >> To: Tomcat Users List
> >> Subject: Broken pipe
> >> 
> >> 
> >> Is there any way of not throwing an exception 
> "java.io.IOException: Broken
> >> pipe" when the user reloads or cancel the request of a page 
> >> Or its good
> >> to get this exception to rollback all the transactions done already???
> >> 
> >
> >Is it possible to get that exception? I mean it's thrown to some internal
> TC classes.
> >I'd really want my application to be aware of reloading or cancel. Any
> suggestions?
> >
> >> Emerson Cargnin
> >> TRE-SC
> >> Setor de Desenvolvimento 
> >> Tel: (48) 251-3700 - Ramal 3134
> >> 
> >
> >Anton
> >
> >--
> >
> Emerson Cargnin
> TRE-SC
> Setor de Desenvolvimento 
> Tel: (48) 251-3700 - Ramal 3134
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: WebAppDeploy Vs WebAppMount

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Cressatti, Dominique [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, January 30, 2002 1:05 PM
> To: Tomcat Users List
> Subject: RE: WebAppDeploy Vs WebAppMount
> 
> 
> >>jakarta.apache.org it's there.
> sorry but I looked into
> http://jakarta.apache.org/builds/jakarta-tomcat-4.0/nightly/src/
> but I couldn't find anything related to mod_webapp
> 
> >>I think you specify this in web.xml of the web application.
> but web.xml will relate to port 8080 (or whichever port tomcat listen
> to). Frankly am rather confused how come web.xml wiil relate
> to something in WebAppDeploy.
> It seem to me that both can do servlet to URL mapping but while
> web.xml will be serving servlets on port 8080, Webappdeploy
> will do it on port 80 and that the 1 am interested.
> 

If all you need is port 80 then there is no need in mod_webapp.
You can just modify your server.xml to have TC listen to 80.

> Dom
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Reload servlet

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Harry Long [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, January 30, 2002 12:51 AM
> To: '[EMAIL PROTECTED]'
> Subject: Reload servlet
> 
> 
> Hi ,  I have a problem with servlet's reloadable.  I run Tomcat4.0 on
> Linux7.2 and connect to
> Apache using mod_webapps connector. I do set the reloadable="true" in the
> context. But It seems
> that It doesn't work at all. Every time I change something on the servlet
> and recompile it , I have to
> restart Tomcat to see my any updates.  Is my setting wrong or something I
> have missed ?
> 

don't know about that "reloadable", but the manager web-app works fine for me.
I changed ManagerServlet to HTMLManagerServlet so I can reload
an application with one click. No need to reload whole TC.

> Thanks a lot.
> 
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: send a mail

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Nancy Crisostomo Martinez [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, January 30, 2002 12:26 AM
> To: Tomcat Users List
> Subject: send a mail
> 
> 
> Hi  everybody!
> I'm having some troubles with sending an e-mail from a servlet I have
> running on Tomcat 3.3 and Solaris.
> 
> I have a servlet which use Java Mail API to send an e-mail, but when I
> press the button to send an e-mail  this error appear on console:
> 
>   javax.mail.NoSuchProviderException: No provider for 
> Address type:
> rfc822
> 
> 
> Could you tell me why does this message appear? and How can I fix it?
> Thank you in advance!!

Hmm, it's strange. Looks like you dont have all jars required even though
standart JavaMail is supposed to contain provider for rfc822.
Does standalone application work fine?

> Nancy.
> 
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Broken pipe

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Emerson [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, January 29, 2002 10:50 PM
> To: Tomcat Users List
> Subject: Broken pipe
> 
> 
> Is there any way of not throwing an exception "java.io.IOException: Broken
> pipe" when the user reloads or cancel the request of a page 
> Or its good
> to get this exception to rollback all the transactions done already???
> 

Is it possible to get that exception? I mean it's thrown to some internal TC classes.
I'd really want my application to be aware of reloading or cancel. Any suggestions?

> Emerson Cargnin
> TRE-SC
> Setor de Desenvolvimento 
> Tel: (48) 251-3700 - Ramal 3134
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Is this a stupid question or something? Why no nibbles?

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: August Detlefsen [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, January 29, 2002 8:09 PM
> To: Tomcat Users List
> Subject: Re: Is this a stupid question or something? Why no nibbles?
> 
> 
> This is actually the second time I posted this exact same config to the
> list. If someone tells me how to update the docs, I will put it there
> too. 
> 

I'm not sure but assuming you know what file you want to update
you could post new bug at bugzilla (http://nagoya.apache.org/bugzilla) 
with attached patch.

> -August
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Where is wrapper.properties in Tomcat 4.0.1?

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Tom Bednarz [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, January 23, 2002 5:12 PM
> To: Tomcat Users List
> Subject: RE: Where is wrapper.properties in Tomcat 4.0.1?
> 
> 
> Hi Anton,
> 
> No parameter does not work but tomcat /? works. I guess it must 
> be argc > 1 
> to get the usage displayed.
> 
> Do you know where I can get the sources for the Win32 service code. I am 
> currently writing a library which allows a generic way to implement java 
> programs as Win32 System Services. It seems that TOMCAT uses something 
> similar. It could save me some time if I could look at those sources. (It 
> must be a mixture of Java and C / C++ in conjunction with JNI)
> 

I've found a link at tomcat-dev
(JavaService - http://www.alexandriasc.com/software/JavaService/index.html)

> 
> Thomas
> 

Anton.

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: com.oreilly.servlet.MultipartRequest IO Error

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Brian Adams [mailto:[EMAIL PROTECTED]]
> Sent: Monday, January 28, 2002 8:41 PM
> To: 'Tomcat Users List'
> Subject: RE: com.oreilly.servlet.MultipartRequest IO Error
> 
> 
> I saw it in the past 6 weeks come across the list and I believe 
> it is in the
> Warp connector.  hte guy was saying that the file did not end or 
> start with
> (can't remember which) FF.
> 

Yes, it is WARP bug registered at
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=3534

> Maybe download from the CVS and build yourself...
> I'm sure someone else will have better memory.
> goodluck,
> B
> 
> 
> -Original Message-
> From: J S (l) [mailto:[EMAIL PROTECTED]]
> Sent: Monday, January 28, 2002 12:39 PM
> To: Tomcat Users List
> Subject: com.oreilly.servlet.MultipartRequest IO Error
> 
> 
> Please, anyone with information regarding the following error, either
> post a reply or email me asap.
> 
> We are attempting to allow users to upload image files via form on our
> jsp site.  We get the following error upon trying to parse the posted
> data:
> 
> java.io.IOException: unexpected end of part
> 
> We are running tomcat 4.0.1
> JDK 1.3.1
> modwebApp
> Apache 1.3.22
> 
> I have read where this might be a bug with either Tomcat itself or the
> WARP connector, but have been unable to find any responses to the bug
> report.
> Any assistance is greatly appreciated.
> 
> J Sears
> 
> 

Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: LifecycleException

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Bill Saur [mailto:[EMAIL PROTECTED]]
> Sent: Monday, January 28, 2002 8:29 PM
> To: [EMAIL PROTECTED]
> Subject: RE: LifecycleException
> 
> 
> Oliver and Anton, I understand the concept of what you are saying but I am
> in need of practical details.  I have checked the server.xml file and the
> ports shown there are the Tomcat defaults - 8005 for shutdown, 
> and 8080 for
> the HTTP port.  How do I go about checking further?  I am not 
> familiar with
> the command "netstat -a", is that a Tomcat command?  How do I go about
> implementing this command?  I think you guys are onto something, 

About that netstat command. Its not Tomcat one. Its standard command for
OSes that support TCP/IP. And Win2k surely do, so try
Start -> Run -> cmd
in the command window
netstat -a
You should see the list of ports your host is listening and so on.
You can try
telnet localhost 8005
and then type there shutdown command from server.xml 
(default is SHUTDOWN, all caps) to stop Tomcat.

And it usually takes some time for Tomcat to stop,
so if you're trying to start it before it released to port you're just getting
what you should get.

> I just need
> some practical elaboration on how to proceed.  Thanks again for 
> your help -
> I am looking to learn from this problem.
> 
> Bill Saur
> Spokane, WA
> [EMAIL PROTECTED]
> 

Hope it helps.
Anton.

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: About mod_webapp and php...

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Romain Bertucelli [mailto:[EMAIL PROTECTED]]
> Sent: Monday, January 28, 2002 1:47 PM
> To: Tomcat Users List
> Subject: About mod_webapp and php...
> 
> 
> Dear all,
> 
> I have just read the explanation of Craig R. McClanahan about the way
> mod_warp works. (mod_webapp and php)
> The following part of the README seems to indicate that the 
> mod_webapp will
> change
> 
> * Currently, mod_webapp forwards *all* requests under the specified
>   context path to Tomcat for processing.  When Tomcat 4.0 final 
> is released,
>   it will automatically configure itself to serve static resources
>   from Apache *unless* the resource is subject to filtering, or subject
>   to a security constraint, as defined in web.xml.  No extra configuration
>   in httpd.conf will be required.
> 
> 

This is a part of some old RELEASE-NOTES right? Course mod_webapp
"is configured based on the contents of the  web.xml file for your web application"
since Tomcat 4 beta 7.

> Actually, I run a webapp under tomcat 3.2.3 and mod_jk that I mount as
> /feedback.
> I also use php pages in the folder /feedback/chat. All is ok with mod_jk
> 
> I am now evaluating tomcat4 and mod_webapp. Mod_webapp configuration is
> REALLY excellent: I face many problems to run jetspeed with 
> tomcat3, it runs
> at the first time on tomcat 4 ! BUT php pages do not run anymore: the
> mod_webapp reads the php3 files directly instead of letting mod_php manage
> them. This is normal: it is how the "default" servlet works if I well
> understand what Craig has said.
> 

It seems that with equal configurations mod_jk should serve php3 the same way
as TC4 does, according to Craig's "the mod_jserv and mod_jk connectors have 
worked this way for around five years"

> I have tried first to change the global web.xml to add the mime 
> type for php
> but it was a bad idea. I also test the PHP Servlet SAPI, I still 
> hang on it
> but it does not seem to be a good idea for me.
> 

But it still looks like the right idea if you really
want phps inside your application.

> The very best solution, you will tell me is to put the php pages 
> elsewhere.
> True but far less "portable" when I have to replace the server or 
> to install
> another test server.
> Does the  jakarta-connectors's team plan include to correct this kind of
> mixt situation in some times or do I have to accept the idea to really
> separate PHP and Java ?
> 

Maybe to suggest a new directive to mod_webapp? Something like
WebAppIgnore?

Anton.

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: canno startup Tomcat 4.0.1 - how to nobble JSP?

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: David Hewlett [mailto:[EMAIL PROTECTED]]
> Sent: Saturday, January 26, 2002 11:33 PM
> To: Micael Padraig Og mac Grene
> Cc: Tomcat Users List
> Subject: Re: canno startup Tomcat 4.0.1 - how to nobble JSP?
> 
> 
> Micael,
> 
> Since i do not intend to use jsp at all(there is much better 
> technology e.g. 
> webmacro) ...Q How to disable the initilisation of JSP?
> 

You can comment out jsp related sections in CATALINA_HOME/conf/web.xml
(definition and mapping for jsp servlet)

> Thanks. for your support...
> 
> Regards,
> 
> David.
> 

Anton.

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: LifecycleException

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Bill Saur [mailto:[EMAIL PROTECTED]]
> Sent: Friday, January 25, 2002 11:12 PM
> To: [EMAIL PROTECTED]
> Subject: LifecycleException
> 
> 
> Hello:
> 
> I have just installed Tomcat 4.0.1 (Win2000 OS) and the program works one
> time and then once I shut it down and restart it I am getting the 
> following
> message:
> 
> "Catalina.start: LifecycleException: null.open: java.net.BindException:
> Address In use: JVM_Bind" - followed by a long list of addresses where
> JVM_Bind is
> in use.
> 

It seems somebody (possibly another Tomcat) is already listening
on the port Tomcat tries to bind. Check "netstat -a"

> Anyone have any ideas on what is going on here and how to fix this? Thanks
> in
> advance for your help.
> 
> Regards,
> Bill Saur
> Spokane, WA
> [EMAIL PROTECTED]
> 

Anton.

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Pooling database connections: best practices?

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Sean LeBlanc [mailto:[EMAIL PROTECTED]]
> Sent: Friday, January 25, 2002 10:58 PM
> To: Tomcat Users List; [EMAIL PROTECTED]
> Subject: Re: Pooling database connections: best practices?
> 
> 
> Is anyone here using it via a Singleton pattern? I'm trying to figure out
> the best way to use this...
> 
> Currently, we have an object that gets a database connection (with no
> pooling), and I'm trying to snap DbConnectionPool in with it. I have two
> static variables
> within the object now, one for db connection pool reference (that 
> only gets
> initialized once) and a variable for a connection (public). In the
> constructor of this object, I check to see if connection is null 
> or closed.
> If it is, I get another connection from dbpool.
> 
> When I do stress testing with Apache JMeter, I'm getting lots of 
> errors like
> this:
> 
> java.sql.SQLException: [Microsoft][ODBC SQL Server 
> Driver]Connection is busy
> with results for another hstmt
> 

It's not quite clear to me, what will your app do if
it gets another request before it has finnished with the
first one? I mean will it try to use the same connection,
since its not null and not closed.
If it is the case so connection is really busy.

> 
> Can you see holes in my logic? Should I just create a method that 
> doles out
> a connection, and another that calls freeConnection after I'm 
> done with it?
> The only reason I don't do this now is because all the changes 
> I'll have to
> make to accomodate this.
> 
> 
> TIA,
> 

Anton.

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: directory browsing

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Charles N. Harvey III [mailto:[EMAIL PROTECTED]]
> Sent: Friday, January 25, 2002 9:57 PM
> To: Tomcat Users List
> Subject: directory browsing
> 
> 
> I now that Ishould be able to find this out for myself but...
> I can't figure out how to turn off directory browsing.
> I a single app or in tomcat in general.  I will keep searching
> the docs but if someone could help me out I would be greatful.
> 

A good place to start is CATALINA_HOME/conf/web.xml 
(assuming you use TC4). Look at default servlet params.

> Charlie
> 

Anton.

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Apache 1.3.23 + Tomcat 4.0.2 Load balancing HOWTO

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Pascal Forget [mailto:[EMAIL PROTECTED]]
> Sent: Friday, January 25, 2002 5:20 PM
> To: Tomcat Users List
> Subject: Re: Apache 1.3.23 + Tomcat 4.0.2 Load balancing HOWTO
> 
> 
> Andrew Logan wrote:
> 
> My understanding was the warp connector is used in
> conjunction with mod_webapp, which currently forwards
> all requests to Tomcat, not just JSP and servlets; I
> wanted static content to be served by Apache.  I believe
> I also read somewhere that mod_webapp does not currently
> support load balancing.
> 

That's not quite right, mod_webapp do NOT redirect all requests,
it redirects only configured ones. And it DID redirect all of them
before TC4.0 was released as final.
But as far as I know web_app still doesn't support load balancing.

> 
> Cheers,
> 
> Pascal
> 

Anton.

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: READER to InputStream

[Anton Brazhnyk]

Hi,
I'd suggest to implement your own stream with

public int read() {
return underlyingReader.read();
}

it won't be so simple I think, but as starting point...
Advantage - no need in buffers (memory)

> > > -Original Message-
> > > From: Lauer, Oliver [mailto:[EMAIL PROTECTED]]
> > > Sent: Thursday, January 24, 2002 13:19
> > > To: 'Tomcat Users List'
> > > Subject: AW: READER to InputStream
> > >
> > >
> > > No, I've a Reader and need an InputStream, sounds silly but the
> > API needs
> > > so...:-(
> > >
> > > > AXA eSolutions GmbH
> > > > AXA Konzern AG Germany
> > > > Oliver Lauer
> > > > Web Architect
> > > > W?rthstra?e 34
> > > > D-50668 K?ln
> > > > Germany
> > > > Tel.: +49 221 148 31277
> > > > Fax: +49 221 148 43963
> > > > Mobil: +49 179 59 064 59
> > > > e-Mail: [EMAIL PROTECTED]
> > > > _
> > > >

Anton.

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Tomcat/Apache acces control

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED]]On Behalf Of Julien OIX
> Sent: Thursday, January 24, 2002 2:37 PM
> To: Tomcat list
> Subject: Tomcat/Apache acces control
> 
> 
> hi everybody,
> 
> I'd like that directories under my Virtual Host's DocumentRoot can't be
> browsed by an URL ...
> 
> I supposed that the Apache configuration could resolve this (in a
>  directive, put the line "Options -Indexes"), but it doesn't
> work ...(browsing is always enabled by the Tomcat/Apache service!!)
> 
> Is this with tomcat configuration (server.xml or web.xml) that I can
> control this stuff or do I have a problem with my httpd.conf ?
> 

I don't know about the way (if possible) to do it with Apache,
but you should be able to do it with Tomcat.
if you don't care about indexing in the apps other then yours
you could edit your CATALINA_BASE/conf/web.xml

  
default
org.apache.catalina.servlets.DefaultServlet

  debug
  0


  listings
  false   

  

or you could disable an indexing in your app only,
in its web.xml :

  
my_default
org.apache.catalina.servlets.DefaultServlet

  debug
  0


  listings
  false

  

  
my_default
/
  

> thanks in advance
> -- 
> Julien OIX
> Service Informatique de Gestion
> T?l: 02 40 99 83 65
> mail: [EMAIL PROTECTED]
> 

Hope it helps.
Anton.

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: setting classpath in TOMCAT 4.0

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Jeff Ong [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, January 24, 2002 12:47 PM
> To: Tomcat Users List
> Subject: setting classpath in TOMCAT 4.0
> 
> 
> hi all,
> 
> I faced problem when try to set CLASSPATH in TOMCAT. I have my own java
> beans and servlets which located in others path. Where should i set these
> path in order to let TOMCAT refer it in runtime?
> 

You just need to put your classes to WEB-INF/classes of your web-application
or to WEB-INF/lib if they're packaged as .jar
There are couple of places you could also use, just RTM :))

Anton.

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Sources for Tomcat 4.0.1 Win32 Service

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Tom Bednarz [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, January 23, 2002 6:35 PM
> To: [EMAIL PROTECTED]
> Subject: Sources for Tomcat 4.0.1 Win32 Service
> 
> 
> Hi,
> 
> More specifically I currently have the following problem:
> I have uninstalled the service to re-install it with special JVM 
> parameters. If I execute tomcat /? I get the following help:
> 
> D:\Tomcat4.0\bin>tomcat /?
> To install a service:
>  -install service_name jvm_library (jvm_option)*
>  -start start_class [-method start_method] [-params 
> (start_parameter)+]
>  [-stop start_class [-method stop_method] [-params 
> (stop_parameter)+]]
>  [-out out_log_file] [-err err_log_file]
>  [-current current_dir]
>  [-path extra_path]
> 
> To uninstall a service:
>  -uninstall service_name
> 
> Unfortunately I have no idea what the name of the start class is.  Also I 
> don't know if there are any more parameters.

Name of start class for me is org.apache.catalina.startup.BootstrapService,
it also a stop class too.
Here is me inst.bat for installing Tomcat as a service:
(all at one line)

@tomcat.exe -install Tom C:\jdk1.3\jre\bin\hotspot\jvm.dll 
-jvm_option -Djava.class.path=C:\tomcat.402b2\bin\bootstrap.jar 
-jvm_option -Dcatalina.home=C:\tomcat.402b2 -start 
org.apache.catalina.startup.BootstrapService 
-params start -stop org.apache.catalina.startup.BootstrapService 
-params stop -out C:\tomcat.402b2\logs\service.out -err 
C:\tomcat.402b2\logs\service.err

> I guess I should call something like:
> tomcat -install "Apache Tomcat 4.0" 
> "d:\javasoft\jre131\bin\hotspot\jvm.dll" "-Xms64M -Xmx512MB" 
> -start < LOTS 
> OF PARAMETERS I DON'T KNOW>
> 

You still can add -X or -server options but they should be after -jvm_option.

> Is there anywhere some documentation on this or can anybody help me?
> 
> Many thanks for your help!
> 
> Thomas
> 

Hope it helps.
Anton.

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Who starts tomcat??

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Emerson [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, January 23, 2002 8:42 PM
> To: Tomcat Users List
> Subject: RE: Who starts tomcat??
> 
> 
> does it (tomcat 4) have already a good user interface to the 
> manager webapp?
> 

Yeap, you just need to make some changes to web.xml of manager application,
like docs says :))

Anton.

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Where is wrapper.properties in Tomcat 4.0.1?

[Anton Brazhnyk]

Hi Tom,

> -Original Message-
> From: Tom Bednarz [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, January 23, 2002 5:12 PM
> To: Tomcat Users List
> Subject: RE: Where is wrapper.properties in Tomcat 4.0.1?
> 
> 
> Hi Anton,
> 
> No parameter does not work but tomcat /? works. I guess it must 
> be argc > 1 
> to get the usage displayed.

Oops, sorry, to lazy to check :)

> 
> Do you know where I can get the sources for the Win32 service code. I am 
> currently writing a library which allows a generic way to implement java 
> programs as Win32 System Services. It seems that TOMCAT uses something 
> similar. It could save me some time if I could look at those sources. (It 
> must be a mixture of Java and C / C++ in conjunction with JNI)
> 

Since Tomcat is open source I suggest you search in CVS at
http://cvs.apache.org/viewcvs/jakarta-tomcat-4.0/
There is folder
http://cvs.apache.org/viewcvs/jakarta-tomcat-4.0/service/src/native/windows/
but it looks like empty, so maybe it resides in Tomcat 3.2 or 3.3 repository.
I think you could try to get answers at tomcat-dev.
BTW, could you post the results of your search?

> Thanks for your input!
> 
> Thomas
> 

Anton.

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: multiple instance of tomcat4.0

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Ashish kulkarni [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, January 22, 2002 5:17 PM
> To: [EMAIL PROTECTED]
> Subject: multiple instance of tomcat4.0 
> 
> 
> Hi,
> I have tomcat4.0 on my win2000k and winnt server, i
> want to run multiple instance of it, like one instance
> for production, other for development, and the 3 for
> testing.
> so how can i do it??
> do i have to modify server.xml???

AFAIK, server.xml is config file for instance 
(and the root  there is singlton).
You should look through CATALINA_HOME and CATALINA_BASE
(try CATALINA_HOME/RUNNING.txt --- (4) Advanced configuration)
in your scripts (.bat files) or create several nt-services.


> if yes how?? 
> i would appreciate if some one has an example
> server.xml file for this purpose
> 
> Ashish
> 

Anton.

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: applet deployment/access

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: cazza [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, January 22, 2002 3:27 PM
> To: [EMAIL PROTECTED]
> Subject: applet deployment/access
> 
> 
> I have a servlet that generates html which contains a reference to the
> applet class under tomcat (the tomcat location is webapps/myapp/applet/)
> 
> I understand that MyApplet.class cannot be under the web-inf directory for
> security reasons, but I have two questions;

I don't know any security reasons for applets to be not allowed in WEB-INF,
there is only one reason for them: User won't be able to access them there.
Applets are executed on client side, so browser's JVM should download .class

> 1) The applet class relies on other classes that are under the
> web-inf/classes directory.  How should my applet get access to these
> classes?
> 

You should consider packing classes your applet needs and applet itself
to .jar and using appropriate syntax in 

> 2) MyApplet.class is also part of a package, which therefore builds under
> Tomcat to webapps/myapp/applet/com/companyname/packagename/MyApplet.class.
> I would like to set up a filter in the web.xml so that any reference to
> /applet loads the applet class.  Do I do it as follows?
> 
> Applet Filter
> 
> com.companyname.packagename.MyApplet.class
> 
> 
> Applet Filter
> /applet
> 
> 
> 

Why it should be filter, it looks like you need servlet or even just let Tomcat
serve it for you with default servlet (see answer on first question).
And you'd better use class name without .class in  anyway. :)

Anton.

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: mod_webapp and php

[Anton Brazhnyk]

Hi and thank you very much, Craig.

Actually I didn't expect such an complete answer.
I think it could replace that FIXME in (...)/tomcat-docs/config/warp.html

Would you answer one more question, please?
I have posted it here recently and then in dev-list.
It was about "Client connection closing".

I believe that situation is mentioned in 
RFC 2616 "HTTP 1.1 protocol"
and both sides of connection should watch if 
the connection is still alive.
As far as I understand server programmers should 
be able to detect connection closing (e.g. Stop button
in browser was pressed).
Did I get it right or, if not, where is my mistake?

BTW, I'm considering to do it myself and if it seems
useful to Tomcat users and developers I'd like to
discuss the way such feature should be done since
I don't see a way to find a place for it in the present specs.


> -Original Message-
> From: Craig R. McClanahan [mailto:[EMAIL PROTECTED]]
> Sent: Monday, January 21, 2002 7:58 PM
> To: Tomcat Users List
> Subject: RE: mod_webapp and php
> 
> 
> >
> > Thanks for clarification, Craig But then again, what if the static
> > content (e.g. some html pages) resides inside web-app, is it than
> > considered static? Will Apache serve it from there directly (I believe
> > not, cause it could be on a different host) or will mod_webapp pre-cache
> > it in some place Apache is aware of or will such content be served by
> > Tomcat? (that is what I think for now)
> >
> 
> Your impression of how it works seems to be inaccurate.  There is no
> caching going on anywhere.
> 
> Let's look at the Tomcat stand-alone case first, and then examine the
> combined case.
> 
> Technically, from the point of view of Tomcat 4 (details are slightly
> different in 3.3), there is no such thing as "static content" -- all
> requests are handled by a servlet.  If you look in the
> $CATALINA_HOME/conf/web.xml file, which defines default configuration
> settings for all webapps, you will see a servlet named "default" that is
> mapped to the URL pattern "/".  This pattern means, "use the 'default'
> servlet whenever no other servlet is matched by a particular request URI".
> So, requests for things like "index.html" and "logo.jpg" don't match any
> of your application servlets or JSP pages, so they are handled by the
> default servlet -- which simply serves the contents of the corresponding
> file back to the client.
> 
> Now, let's consider what happens when you put Apache and a web connector
> in front of Tomcat (the concepts apply equally to mod_jk and mod_webapp,
> only the configuration details differ).  Essentially, what people try to
> do is make Apache itself be the default file-serving servlet, instead of
> the one built in to Tomcat.
> 
> This is accomplished in your configuration directives, where you tell
> Apache which requests to forward (and by implication, all other requests
> are handled by Apache itself in the usual way).  Thus, when we add a
> diretive that says "forward all *.jsp requests to Tomcat", we are telling
> Apache that any request that ends with ".jsp" MUST be forwarded to Tomcat
> for processing.  Apache acts like a proxy server for these requests -- it
> just calls Tomcat and then copies back the response Tomcat creates to the
> original client.
> 
> If you do not have any such configuration directives for "*.html" and
> "*.jpg" patterns, then Apache serves them directly, based on your Apache
> configuration directives in httpd.conf.  It is NOT an issue of pre-caching
> or anything like that -- the request either gets forwarded to Tomcat or it
> doesn't.
> 
> Now, if you configure Apache so that the directory being served by the
> "/foo" request URI prefix is the same as the directory defined as the
> context root of the "/foo" web app in Tomcat, you've accomplished the goal
> -- Tomcat serves all the requests that Apache forwards to it, and Apache
> serves all the requests that it doesn't forward.  But your application
> code is identical in either case.
> 
> Keep in mind that the ACTUAL directory pathname of your webapp doesn't
> need to have anything at all to do with the "/foo" prefix on requiest
> URIs.  Both Apache (via the "Alias" directive) and Tomcat (via the
> "docBase" attribute of the  element) let you map that prefix to
> whatever real directory you want -- the secret is to make sure they both
> point at the same place.
> 
> Lastly, I want to emphasize again, NONE of this is new to mod_webapp --
> the mod_jserv and mod_jk connectors have worked this way for around five
> years.  The only new thing mod_webapp was supposed to bring to the table
> was automatic configuration of the httpd.conf directives that make all of
> this happen, instead of requiring the sysadmin to do it all yourself.
> 
> Craig
> 
> 


--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: basic servlet move doesn't work

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Cressatti, Dominique [mailto:[EMAIL PROTECTED]]
> Sent: Monday, January 21, 2002 5:53 PM
> To: Tomcat Users List
> Subject: basic servlet move doesn't work
> 
> 
> Hi,
>  
> I have a very simple example app.
> For testing purposes I moved the servlet into a subdirectory.
> So before the move I had
> /webapps/Wide_World/WEB-INFO/classes/ForwardServlet.class
> and after the move I had
> /webapps/Wide_World/WEB-INFO/classes/dir/ForwardServlet.class
>  
> according to the docs I've read I can do such a thing and reflect it
> I need edit /webapps/Wide_World/web.xml
>  
> from:
> forward
> ForwardServlet
>  
> to
> forward
> dir.ForwardServlet
>  
> which I did (and restated tomcat).
> However how such simple change doesn't work?
> Now when I try to access again the servlet I get:
> ...HTTP error status 500...
> Error allocating a servlet instance
> root cause
> java.lang.NoClassDefFoundError: dir/ForwardServlet (wrong name: 
> ForwardServlet)...
>  
> What's going on!
> 

well, directory structure reflects the package structure of java application,
so you need to include

package dir;

at the beginning of file and recompile.

 
> Thanks
> Dom
> 

Anton.

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Which SSLeay do I need...?

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Angel, Ronald J [mailto:[EMAIL PROTECTED]]
> Sent: Monday, January 21, 2002 5:30 PM
> To: 'Tomcat Users List'
> Subject: RE: Which SSLeay do I need...?
> 
> 
> > I think "SSL Config HOW-TO" is just for you. :))
>   Got it; read it; re-read it.  What am I missing here.
> > Did you do all it says about?
>   1) Downloaded & installed 3 jar files from JSSE.
>   2) Created a keystore - re-created it also - with specified
> password.
>   3) Updated server.xml as instructed.
>   4) restarted tomcat
> 
> 
>   The HOW-TO looks pretty straight forward.
> 
> > At least you need to generate a keystore with
> > aproprite sertificate.
> > 
> > > 
> > >   Question:
> > >  If I disable apache what (if anything else) do I need to do to
> > > Tomcat? 
> > > Any server.xml mods?
> > > Update /etc/services?   https is on port 443, change to 8443?
> > >   
> > 
> > The connector with SSL support is defined to listen on 8443 by default.
> > It's done by port attribute. Default port for https is 443.
> > So, if you want just https://yourHost/~yourUser you need to change port
> > attribute to 443 in server.xml Don't forget to change redirectPort in 
> > plain http connector.
> > 
>   The redirectPort still points to 8443, also.
> 
>   To my understanding only processes started by root may connect/bind
>   to ports below 1024.  I'm still starting tomcat as a non-root user,
> hence,
>   I'm using port 8443. 

Oops, sorry. I don't have much background about Linux/Unix.

> 
>   As soon as someone get in here today (quits playing in the snow ;) I
> find
>   out why were not running Tomcat as root.

Then it looks like not SSL related problem.
I think it would be better to start with plain http connector,
get your apps up and running and then add Factory for SSL.
If it won't help try to send your server.xml and tail of logs.

>   Ron
> 

Anton.

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Which SSLeay do I need...?

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Angel, Ronald J [mailto:[EMAIL PROTECTED]]
> Sent: Monday, January 21, 2002 4:49 PM
> To: 'Tomcat Users List'
> Subject: RE: Which SSLeay do I need...?
> 
> 
> 
>   Disclaimer,
> As I a previous e-mail, I'm not a Linux/Unix/Web admin.
> I'm a developer w/ a good bit of unix/linux experience who was
> asked to get SSL working on a current system.
> 
>   A few people here have a bit of experience with Apache/Tomcat/SSL,
>   but, mostly as a user/developer not as an admin.
> 
>   Anyways, I started installing open-ssl & apache-ssl (to be replaced
> w/mod-ssl)
>   on Friday, when someone (a co-worker) told me that wasn't necessary
> for our 
>   needs since we have little to no static content to worry about and
> therefore don't
>   even need Apache.  I was also told then that Tomcat was also a
> web-server, news to me.
> 
>   Today...
>  I've disabled Apache  (httpd stop) - no httpd processes running.
>  Review the changes to server.xml - basically just uncommenting
> the SSL connector.
>  Re-started Tomcat (as a non-root user) using for 8443.  (I'll try
> to find out today why
>  this isn't running as root)
> 
> However https://myHost/~myUser  (test page) fails with "The page
> cannot be displayed"
>   as does http://myHost/~myUser, http://myHost:8443/~myUser and
> https://myHost:8443/~myUser  
> 

I think "SSL Config HOW-TO" is just for you. :))
Did you do all it says about?
At least you need to generate a keystore with
aproprite sertificate.

> 
>   Question:
>  If I disable apache what (if anything else) do I need to do to
> Tomcat? 
> Any server.xml mods?
> Update /etc/services?   https is on port 443, change to 8443?
>   

The connector with SSL support is defined to listen on 8443 by default.
It's done by port attribute. Default port for https is 443.
So, if you want just https://yourHost/~yourUser you need to change port
attribute to 443 in server.xml Don't forget to change redirectPort in 
plain http connector.
  
> 
>   This can really drive ya nuts.
> 
>   I think I'll go play in the snow for a while & cool off  :)
> 

This is a nice idea too :))

> 
>   ThankX again,
> 
>   Ron
> 

Anton.

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: how do you start tomcat 4.0 from a java aplication?

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf 
> Of Martin Dudle
> Sent: Monday, January 21, 2002 4:25 PM
> To: [EMAIL PROTECTED]
> Subject: how do you start tomcat 4.0 from a java aplication?
> 
> 
> hello
> 
> i used to start tomcat from a java application by just creating a new
> instance of the Tomcat class. with 4.0 it seems this has changed. could
> anyone please point out how to properly start tomcat 4.0 from a java
> application?
> 

I think you should look through org.apache.catalina.sturtup.Embedded
either in Tomcat docs or in source.

> thanks,
> -martin dudle
> [EMAIL PROTECTED]
> 

Anton.

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Context in server.xml or not?

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Pablo Millet [mailto:[EMAIL PROTECTED]]
> Sent: Monday, January 21, 2002 1:11 PM
> To: Tomcat Users List
> Subject: Context in server.xml or not?
> 
> 
> Hi all.
> Very simple question... so I give it another try since my first 
> message didn't capture you'r intrest ;) please help.
> 
> I have my Tomcat4 up and running as Stand-Alone but it doesn't 
> want to deploy my .WAR files.
> All of the "Examles" application do work just fine...
> 
> >From what I understand reading the manuals AND surfing the web 
> for several days
> I must include my web.xml (descriptor) file into the WEB-INF dir.

Yes you must, and if you have serious intentions on Servlets than here is
link you should visit http://java.sun.com/products/servlet/
It is Servlet 2.3 Specification you can find more details about 
web applications and WEB-INF at.

> Well, i'm doing so and i'm ALSO adding my context in the server.xml.
> 
> Question:
> Must I have a context in server.xml AND a descriptor?

No, not necessary if you don't need to customize default behavior.

> When I do have both I get this error message in the logfile:
> 
> ###
> Error initializing resources: Document base 
> /usr/local/jakarta-tomcat-4.0.1/webapps/XXX does not exist or is 
> not a readable directory
> ###
> 
> When I remove the context entry from the server.xml it all works fine !!!
> 
> So my friends, wich is it... both or one of them?
> 

It looks like docBase attribute in your server.xml is set incorrectly.
So, try http://jakarta.apache.org/tomcat/tomcat-4.0-doc/config/context.html
or http://localhost:8080/tomcat-docs/config/context.html
to find how to setup Tomcat to search for your app in path that differs 
from default one.

> Many thanx.
> Cheers
> 

I hope it helps.
Anton.

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: mod_webapp and php

[Anton Brazhnyk]

> -Original Message-
> From: Craig R. McClanahan [mailto:[EMAIL PROTECTED]]
> Sent: Friday, January 18, 2002 7:52 PM
> To: Tomcat Users List
> Subject: Re: mod_webapp and php
> 
> 
> > I cannot fathom how they plan to do that, since it would violate the
> > view of a "web application" as a sealed component on the "servlet
> > container". I mean suppose you have a WELCOME.GIF file in your web
> > application, how is Apache supposed to serve it, other than through
> > WARP? Pre-caching of all static content upon "Warp Deployment"?
> >
> 
> The original design goal was to make a decision based on the incoming
> request URI of each request, by asking the following questions:
> * Is this request URI matched by a filter mapping?
> * Is this request URI matched by a servlet mapping?
> * Is this request URI matched by a security constraint?
> If the answer to any of these questions is YES, the request must be served
> by Tomcat, to maintain the semantics required by the servlet
> specification.
> 
> On the other hand, if the answer to all of these questions is NO, there is
> no semantic problem with allowing Apache to serve this resource, instead
> of the default file-serving servlet in Tomcat.
> 

Thanks for clarification, Craig
But then again, what if the static content (e.g. some html pages) resides inside 
web-app, 
is it than considered static?
Will Apache serve it from there directly (I believe not, cause it could be on a 
different host)
or will mod_webapp pre-cache it in some place Apache is aware of
or will such content be served by Tomcat? (that is what I think for now)


Anton

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: running *.jsp at DocumentRoot of Apache

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Blaine Berger [mailto:[EMAIL PROTECTED]]
> Sent: Friday, January 18, 2002 8:22 PM
> To: Tomcat Users List
> Subject: Re: running *.jsp at DocumentRoot of Apache 
> 
> 
> Are you saying that running *.jsp in the DocumentRoot of Apache isn't 
> allowed by spec. or that WebAppDeploy doesn't support it?
> 
> I'm just trying to understand how to duplicate a previously functioning 
> server by using WebAppDeploy. 
> 

I mean that Apache has his DocumentRoot for documents served by itself.
Apache cant and shouldn't process .jsp, that's what Tomcat should and can do.
So Apache needs to be properly configured to delegate those requests to Tomcat.
I'm not familiar with Apache configs (I'm developer, not sysadmin)
but basic idea is you need to map some requests (those for .jsp) to Tomcat ROOT
web application.
I didn't do that, but I believe it should be done this way.
I'm sorry I cant give you ready-to-go solution, maybe I shouldn't have
answered it at all without personal experience...

I still really hope it helps.
Anton.


--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: a problem with in integrating tomcat4 with apache

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: yilmaz [mailto:[EMAIL PROTECTED]]
> Sent: Monday, January 21, 2002 10:56 AM
> To: Tomcat Users List
> Subject: Re: a problem with in integrating tomcat4 with apache
> 
> 
> Okey, no one replied my previous question. so assume
> for now there is no way to do this.
> I thought of a simple workaround, but i don't know how to do that.
> since we can't get apache handle playing media files, then
> can we force the browser to directly download those files, 
> instead of trying
> to play it?
> this way users won't think that there is a problem with this site.
> thank you very much
> cheers :)

I think you need to change content type either in Apache or Tomcat
(depends on what of them services files in your case)
for those files to something like application/octet-stream.

Anton.

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Mod_webApp Configuration - Tomcat 4.01, Apache 1.3.22 (Darwin)

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Terry J Fundak [mailto:[EMAIL PROTECTED]]
> Sent: Sunday, January 20, 2002 9:54 AM
> To: Tomcat User List
> Subject: Mod_webApp Configuration - Tomcat 4.01, Apache 1.3.22 (Darwin)
> 
> I have attached the output from WebApp-info which is the only thing that
> I have gotten to respond with any information...Sorry it is HTML because
> that is what webapp-info gives...
> 

It seems to me you attached txt file with instructions about unsubscribing
or my mail client is doing tricks to me? :))

> So My Question is:
> 
> Where is mod_webapp supposed to get the "Local Deployment Path"?
> And if it isn't right where do I set it?
> And if mod_webapp is NOT looking in the server.xml file in my
> $JAKARTA_HOME/config/ directory, where is it looking or how do I set it
> to look elsewhere?
> 

I believe mod_webapp doesn't look for server.xml at all, it looks for web.xml
of web application matched to its WebAppDeploy directive.

> And for completeness, here is my httpd.conf for a simple localhost.
> 

I think one needs your server.xml and how exactly it doesnt work to help you.

> At this point, I need someone who has succeeded to tell me EXACTLY what
> they have done.
> 

Well, that isnt about me, I hasn't tried yet :)

> Thank you,
> 
> Terry J Fundak
> 
> P.S. If I get this working I will write up detailed directions and a lot
> of notes about what not to do. This is what the FAQ's for TOMCAT 4.0 and
> mod_webapp needs at this point.
> 

A lot of people will pray on you if you do :))

Anton.

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Tomcat 4.0, + apache 1.3.22 + web_mod

[Anton Brazhnyk]

Hi,

> -Original Message-
> From: Ashish kulkarni [mailto:[EMAIL PROTECTED]]
> Sent: Saturday, January 19, 2002 1:38 AM
> To: [EMAIL PROTECTED]
> Subject: Tomcat 4.0, + apache 1.3.22 + web_mod
> 
> 
> Hi,
> I was trying to integrate tomcat4.0 with apache 1.3.22
> using web_mod, and i was able to do it, but now i am
> having a problem of multiple instance of tomcat and
> apache,
> I am able to forward all the request that come for
> servlet and jsp for the web applications defined in my
> webapp directory of tomcat,
> but when i try to connect to any web application which
> is some where else in the directory structure i get
> error that the application does not exist
> but when i try to reach using port 8080, i can reach
> that application
> So i can use that application using tomcat , but
> cannot use it when i try to integrate it with apache.
> So how can i do it, do i have to create a new Server
> instance in the server.xml file, or new service in the
> existing server,

Exactly, you just need well configured service.
It seems the standalone service is configured properly to access
non-default directory and apache service isn't.
I sugest you look through doc about Host or Context elements of server.xml,
whatever suits you better.
I believe you should be able to access them at
http://localhost:8080/tomcat-docs/config/host.html
http://localhost:8080/tomcat-docs/config/context.html
with default configs. I think you need "appBase" and "docBase" attributes.

> Please Help
> Ashish
> 

Anton.

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Strange behaviour; i don't understand...

[Anton Brazhnyk]

> -Original Message-
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED]]On Behalf Of Jean-Luc BEAUDET
> Sent: Friday, January 18, 2002 4:51 PM
> To: Tomcat Users List
> Subject: Re: Strange behaviour; i don't understand...
> 
> 
> >
> > Any difference at that abstraction layer, but there IS difference
> > in implementation of HttpConnector and WarpConnector
> 
> Well i'm not really sure, what do yu mean by this big IS ?
> Could yu lead me to extra documentation about it or smth like 
> that; please ?
> 

Well, actually English isn't my mother's language but I wanted
just put some stress on the verb 'is' (to be) and set 'is' as
opposition to 'Any' in the first part of the sentence. :)

> 
> BTW as it seems Tomcat is not unknow for yu, do yu have some informations
> about mod_webapp
> and LoadBalancing, like Tomcat 3.x afforded ?
> If so could yu give me a word on it ?
> 

I'm not really sure, but I according to tomcat-dev list Tomcat 4.0.2 will be released
soon (after weekend?) with loadbalancing. But I think it'll be available for mod_jk.

> 
> >
> >
> > Try  http://Server:80/StressZone/
> > (trailing slash is the answer for mod_webapp)
> 
> Yes, yu got it !
> 
> Tkanks alot.
> 
> Jean-Luc :O)
> 
> 
Anton.


--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Strange behaviour; i don't understand...

[Anton Brazhnyk]

Hi!

> -Original Message-
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED]]On Behalf Of Jean-Luc BEAUDET
> Sent: Friday, January 18, 2002 1:04 PM
> To: Tomcat Users List
> Subject: Strange behaviour; i don't understand...
> 
> 
> My first question is " What is the difference deploying such context in
> the Stand-Alone portion
> of conf/server.xml or the Apache-Tomcat part ?"
> 

Any difference at that abstraction layer, but there IS difference
in implementation of HttpConnector and WarpConnector

> 
> With http://Server:8080/StressZone OK.
> With http://Server:80/StressZone it doesn't work !
> 
> So the second question "According to what i read on the Wapr Connection
> Doc, it seems that for a Context
> to be seen by Apache via Warp Connector, its  application  has to be
> installed under the webapps directory of Tomcat...
> So if i well understand the stuff, YOU CAN't deployed such an
> application via Warp Connector somewhere else than under
> $CATALINA_HOME/webapps"
>  Am i Right ???

Nope
All your configs are OK. This bug or unimplemented feature (in my book) 
is discussed about half-dozen times during this week.

Try  http://Server:80/StressZone/
(trailing slash is the answer for mod_webapp)

> 
> Any help will be welcome ...
> 
> Jean-Luc BEAUDET :O(
> 

Anton.

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Getting a HTTP 503 Error

[Anton Brazhnyk]

Hi!

RFC 2616 ""Hypertext Transfer Protocol -- HTTP/1.1"" is a place to search.



10.5.4 503 Service Unavailable
The server is currently unable to handle the request due to a temporary overloading or 
maintenance of the server.
The implication is that this is a temporary condition which will be alleviated after 
some delay. If known, the length
of the delay MAY be indicated in a Retry-After header. If no Retry-After is given, the 
client SHOULD
handle the response as it would for a 500 response.



As far as I know Tomcat sets this error if your servlet failed
to sturtup (e.g. exception thrown in init()).
So try look at your logs.

Anton.

> -Original Message-
> From: Tom [mailto:[EMAIL PROTECTED]]
> Sent: Friday, January 18, 2002 12:59 PM
> To: Tomcat Users List
> Subject: Getting a HTTP 503 Error
> 
> 
> Anyone ever got a 503 error from TomCat 4?
> 
> What does it mean?
> 
> 

--
To unsubscribe:   
For additional commands: 
Troubles with the list: