RE: I dont want my users to see tomcat console. Any advice?

Take off with HCL BHANU PRATAP RAINA Systems Administrator HCL Infinet Ltd. E-4,5,6 Sector XI Noida 201 301, UP INDIA [EMAIL PROTECTED] www.hclinfinet.in mobile: +91-9871976805 Add me to your address book... -Original Message- From: ryan webb [mailto:[EMAIL PROTECTED]

Re: Multiple Hits to same JSP

What are the hits actually for, the same page or separate pages? Is the requestor hitting a page and then getting all of the associated images, scripts, css etc? How many extra files per page do you have on average? A client with caching turned off, or behind a badly configured proxy/cache

How to increase memory form Tomcat 5.5

Hi I'm getting the OutOfMemory exception sometimes with some applications in tomcat 5.5 on Ubuntu. I've been searching on the internet how to give more memory to Tomcat, but the only way i found is to add the line set JAVA_OPTS=-server -Xms256m -Xmx512m (cause in this case i need that

RE: How to increase memory form Tomcat 5.5

I believe in Linux the command is Export JAVA_OPTS= etc I put it in the setclasspath.sh file though I don't think its that important? -Original Message- From: Tomás Tormo [mailto:[EMAIL PROTECTED] Sent: 13 May 2008 09:25 To: Tomcat Users List Subject: How to increase memory form

Re: retrieving two different objects from session (should be thesame)

Hi again, sorry for delay and thanks for help. Chuck has been absolutely right - it was a concurrency issue. As he said, it's better to store needed objects in the request than in the session. The problem is, I need an object being available for several requests, so I have to store it in

Vista tomcat6.exe Access denied

Hello, I have a Windows Vista Business PC and my Account is members of the local Administrator Group. After the Installation and a reboot, I get the Error Access Denied when Vista tries to Start the Tomcat6w.exe. Any idea? Alex

Save POJO Application Server Definition

--- HARBOR: http://coolharbor.100free.com/index.htm The most powerful application server on earth. The only real POJO Application Server. Making the Java dream come true.

Re: *SPAM* RE: How to increase memory form Tomcat 5.5

I tried what you told me (actually, I put the line *export JAVA_OPTS=-Xms256m -Xmx512m* in the beginning of the setclasspath.sh file), but it didn't make anychange... (it is still saying 113mb avaliable in the Server Status in the Administration webpage...) Any solution? Thank you very much.

Re: Save POJO Application Server Definition

Could it be just because you are reinventing the wheel? Leon On Tue, May 13, 2008 at 11:58 AM, Johnny Kewl [EMAIL PROTECTED] wrote: --- HARBOR: http://coolharbor.100free.com/index.htm The most powerful application

Re: Tomcat configuration question

Hi, I changed the server.xml file and changed the various ports from 8005 - 9005, 8080-9090 etc. When I start Tomcat (using startup.sh) I get the following in the catalina.out file: May 13, 2008 7:36:59 AM org.apache.catalina.core.AprLifecycleListener init INFO: The APR based Apache

Load Balnce and failover for Tomcat

I need to load balance (but not cluster) a collection of Tomcats. We have existing load balancers/failover that can probe with an HTTP requests to see if a service is up. However out Tomcats have a number of webapps on and the start-up/shotdown can take quite a few minutes, so the failover isn't

RE: Load Balnce and failover for Tomcat

From: Stront [mailto:[EMAIL PROTECTED] 2. That all of the webapps are running. That's webapp-dependent, surely? Tomcat can't determine all the ways in which your application can fail. But it can tell if the app has started; Tomcat's manager displays a list of apps and whether it is

RE: Load Balnce and failover for Tomcat

From: Stront [mailto:[EMAIL PROTECTED] 2. That all of the webapps are running. That's webapp-dependent, surely? Tomcat can't determine all the ways in which your application can fail. - Peter - To start a

Re: Load Balnce and failover for Tomcat

I think what the experts are saying is that even if your webapps is started it could be dependent on a large startup operation. Take for example Apache Roller which can take several minutes to rebuild its persistence state and while up will reject requests. The only way to know if the

Re: Binding JMX to a specific IP address

Any updates to this? Anyone have suggestions on how to bind JMX traffic to a specific IP and port? By default, it binds promiscuously to all ports specified even if the host=hostname is specified to be the virtual IP I want to bind to. This is important for a multi-instance Tomcat install

link to Tomcat6 bug list

Hi, The bug report interface here: https://issues.apache.org/bugzilla/query.cgi?product=Tomcat%206 will only display a specific word search. Is there a canned report URL for showing all open issues for Tomcat6? -- Thanks, Zemian Deng

Clustering Tomcat - StandardManager loaded instead of DeltaManager

Hi All, I am trying to configure Tomcat for cluster in Tomcat 6. However in the catalina.out tomcat is still creating StandardManager instead of defined DeltaManager: Any suggestion what is wrong here ?? Thanks, Petr. Here is catalina.out after start: INFO: Starting Servlet Engine: Apache

URLClassLoader and Reflection fail on Windows.

Dear All, I have developed a webapp that loads dynamically java classes from jar files. Practically you put a jar file in a specified directory and the application will try to load a specified class from it. The application works with tomcat on Unix systems (both Linux and MacOSX) but it

RE: Tomcat installation on Windows - different install directory than default

Thanks Peter. We thought about doing that, but since it was already nicely packaged, we figured we'd give it a try. xd From: [EMAIL PROTECTED] To: users@tomcat.apache.org Date: Mon, 12 May 2008 09:25:26 +0100 Subject: RE: Tomcat installation on Windows - different install directory

Re: link to Tomcat6 bug list

https://issues.apache.org/bugzilla/buglist.cgi?product=Tomcat+6bug_status=UNCONFIRMEDbug_status=NEWbug_status=ASSIGNEDbug_status=REOPENEDbug_status=NEEDINFO -Tim Zemian Deng wrote: Hi, The bug report interface here: https://issues.apache.org/bugzilla/query.cgi?product=Tomcat%206 will only

Re: Clustering Tomcat - StandardManager loaded instead of DeltaManager

Hi Filip, I already found that - because to disable session persistency there is a hint in Tomcat pages to uncomment that Manager path=/ and this was causing a trouble as somebody uncomented that... Regards, Petr. On Tue, 2008-05-13 at 07:46 -0700, Filip Hanik - Dev Lists wrote: do you by

Once again, clear text passwords in context.xml files

Hello everyove, We were asked to eliminate clear text passwords associated to database pooled connections in context.xml files... I know it has been discussed a lot, but I would like to ask once again whether someone has a simple, clean solution for that. We are using Windows server and MS SQL

Re: Clustering Tomcat - StandardManager loaded instead of DeltaManager

do you by any chance have the Manager element uncommented in conf/context.xml or haven't set distributable/ in your web.xml Filip Petr Skokan wrote: Hi All, I am trying to configure Tomcat for cluster in Tomcat 6. However in the catalina.out tomcat is still creating StandardManager instead

Re: Once again, clear text passwords in context.xml files

it's a wasted effort, the one way it could be truly secure, was if tomcat asked you for a key upon startup. this wouldn't work very well in a 1000 tomcat instance server farm. any other effort simply masks the problem, letting you think it is secure, when it isn't. what you should do is

Multiple Authentication Methods?

How would be go about implementing the following kind of access scheme? 1. If the user's IP address is in an approved range, let them connect to tomcat anonymously. 2. If the IP address is not in an approved range, authenticate them through Active Directory. Is that even possible? -- Eric

Re: How to increase memory form Tomcat 5.5

hi James, a better place is to create a file called setenv.sh that way you don't have to change any tomcat files sometimes you have to separate out the commands like JAVA_OPTS=-Xmx512m export JAVA_OPTS export is all lowercase Filip James Law wrote: I believe in Linux the command is Export

Few public ports w/many Tomcat instances

I'm a Java developer and reluctant/under-qualified server administrator formulating a strategy for transitioning two production web apps from Resin to Tomcat. I'm familiar with connecting multiple Resin instances to a single Apache instance, such that all of the Resin instances (on ports in

how do I block weak ciphers on Tomcat 4.1.31

I have extensively searched the web, but I can't find a definitive answer on this. Here's the situation. I have tomcat 4.1.31 with Java(TM) 2 Runtime Environment, Standard Edition (build 1.5.0_15-b04), running on a Solaris 8 box. Due to custom production apps we can not upgrade tomcat at this

RE: Few public ports w/many Tomcat instances

From: Mike Volk [mailto:[EMAIL PROTECTED] Is there a better/faster/easier alternative to using Apache as a front-end port proxy server (via vhosts) for my multiple Tomcat instances? Can you get a second IP address assigned to the machine? If so, bind one Tomcat instance to each IP and

Re: Few public ports w/many Tomcat instances

Mike Volk wrote: I'm a Java developer and reluctant/under-qualified server administrator formulating a strategy for transitioning two production web apps from Resin to Tomcat. I'm familiar with connecting multiple Resin instances to a single Apache instance, such that all of the Resin instances

Re: Few public ports w/many Tomcat instances

On Tue, May 13, 2008 at 9:01 AM, Mike Volk [EMAIL PROTECTED] wrote: Is there a better/faster/easier alternative to using Apache as a front-end port proxy server I haven't used Pound myself but it was strongly recommended by someone who /is/ using it in production: http://www.apsis.ch/pound/

RES: Once again, clear text passwords in context.xml files

Filip thanks for your reply, 1. make sure tomcat runs as an account that can't login Right, that is done 2. make any file that contains secure information readonly, and readable only by the tomcat user Done too if someone gets onto your machine as an super user, you have bigger problem

Re: META-INF dir purpose

In META-INF I have a context.xml. It is used to override some settings from server.xml per each webapp. But I never put anything else on it. I ask myself if it's ever possible to do so. Stefan Textor a écrit : Hi, I write webapps for a while now and I've been wondering all the time about

META-INF dir purpose

Hi, I write webapps for a while now and I've been wondering all the time about the META-INF directory inside the webapp structure. What files are recognized by tomcat in this directory and what are they for. I have read several tutorials/specs/books about webapps and I did not find anything

Re: Once again, clear text passwords in context.xml files

How about hashing the passwords with a known forumla and storing them in this intermediate format. App would need to hash the user input and compare. This might give ur security czars a warmer feeling and get them off ur back. -Kevin On 5/13/08, Milanez, Marcus [EMAIL PROTECTED] wrote:

RE: Once again, clear text passwords in context.xml files

From: Kevin Williams [mailto:[EMAIL PROTECTED] Subject: Re: Once again, clear text passwords in context.xml files How about hashing the passwords with a known forumla and storing them in this intermediate format. App would need to hash the user input and compare. There's no user input.

RES: Once again, clear text passwords in context.xml files

Hi kevin, Thnaks a lot for your answer, but there is no user input. The password is for database access porpuses and is stored in context.xml file... It seems to me there is no solution at all for this issue, unless beleive server access are safe... Thank you! Marcus -Mensagem

Re: Once again, clear text passwords in context.xml files

Kevin: That works for remote user accounts logging into tomcat webapps, but does not work for database pools, etc., ... where tomcat the service has to perform a login to gain access to protected resources. Marcus: If the admins who are making noise ever really thought about the problem,

Re: Vista tomcat6.exe Access denied

Alexander Diedler wrote: Hello, I have a Windows Vista Business PC and my Account is members of the local Administrator Group. After the Installation and a reboot, I get the Error Access Denied when Vista tries to Start the Tomcat6w.exe. Any idea? When starting a new thread (ie sending a

Re: Tomcat configuration question

Neil B. Cohen wrote: Hi, I changed the server.xml file and changed the various ports from 8005 - 9005, 8080-9090 etc. When I start Tomcat (using startup.sh) I get the following in the catalina.out file: May 13, 2008 7:36:59 AM org.apache.catalina.core.AprLifecycleListener init

Re: Multiple Authentication Methods?

Robinson, Eric wrote: How would be go about implementing the following kind of access scheme? 1. If the user's IP address is in an approved range, let them connect to tomcat anonymously. 2. If the IP address is not in an approved range, authenticate them through Active Directory. Is that

Re: how do I block weak ciphers on Tomcat 4.1.31

Naqvi Zahid - znaqvi wrote: I have extensively searched the web, but I can't find a definitive answer on this. Here's the situation. You'll need 4.1.32 onwards for the ciphers option work. If you are worried about this, then there are plenty of other things to worry about

Re: Tomcat LDAP Authentication

Hi, Is there a command line method to test an LDAP configuration? I could not find any log messages after basic authentication was denied. Perhaps the authentication log is not in $CATALINA_HOME/logs? Realm className=org.apache.catalina.realm.JNDIRealm debug=99

changing server.xml attribs on the fly

Hi folks Has anyone ventured into modifying the conf/server.xml file using the default internal XML parser of tomcat? I am currently in a midst of a project where I am securing all in bound and out bound communications and to that effect I have generated a SSL certificate using our

Re: META-INF dir purpose

--- HARBOR: http://coolharbor.100free.com/index.htm The most powerful application server on earth. The only real POJO Application Server. Making the Java dream come true.

RE: how do I block weak ciphers on Tomcat 4.1.31

Thanks Mar, I think it makes a lot of sense. I know that we have to upgrade but can't do it until all the scripts and production stuff is moved over to TC6. Thanks for the pointer I will try the upgrade to TC4.1.32 so that the ciphers option starts to work. -Original Message- From: Mark

Re: Multiple Hits to same JSP

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sameer, Sameer Naik wrote: | due to a bug/feature in Oracle connection (round robin feature for | checking out connection), each one never gets cleaned up. That is a horrible problem. You can't re-use connections? I'd look at that before I tried to

Re: Multiple Hits to same JSP

--- HARBOR: http://coolharbor.100free.com/index.htm The most powerful application server on earth. The only real POJO Application Server. Making the Java dream come true.

Re: Save POJO Application Server Definition

--- HARBOR: http://coolharbor.100free.com/index.htm The most powerful application server on earth. The only real POJO Application Server. Making the Java dream come true.

Re: Save POJO Application Server Definition

We know you think your stuff is so kewl, but would you please stop leading all your email with an evangelical tag line. That would be so cool of you. Thanks, Regards, Dave On May 13, 2008, at 3:14 PM, Johnny Kewl wrote:

Re: Save POJO Application Server Definition

--- HARBOR: http://coolharbor.100free.com/index.htm The most powerful application server on earth. The only real POJO Application Server. --- -

Shared Javascript, CSS, and Image Files

Hi, I am looking for the recommended solution for when multiple webapps need to use the same sets or javascript, css, and image files. I have created a symbolic link in $CATALINA_HOME/webapps/myapp called shared pointing to /home/myhome/shared_files. When I refer to /shared/test.js in my

Re: Shared Javascript, CSS, and Image Files

Hi, Probably you should refer to it as shared/test.js without the leading / Regards, Dave On May 13, 2008, at 6:21 PM, John Buchholz wrote: Hi, I am looking for the recommended solution for when multiple webapps need to use the same sets or javascript, css, and image files. I have

Re: Shared Javascript, CSS, and Image Files

--- HARBOR: http://coolharbor.100free.com/index.htm The most powerful application server on earth. The only real POJO Application Server. --- -

Re: Streaming Video Media

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alan, Alan Chaney wrote: | The best thing that you can do is to try and avoid having the download | link actually appear in the web page. I would also make sure that the Referer [sic] header matches a page that contains the video. Browsers should

Re: Multiple Authentication Methods?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mark, Mark Thomas wrote: | Painful but probably possible with a fair amount of work in Tomcat. | | http://securityfilter.sourceforge.net is probably an easier place to start. With sf, you still have to do a fair amount of work. You'll have to write

Re: Vista tomcat6.exe Access denied

permission errors caused by not ensuring the binary has assigned rights such as execute,read and write My guess is you installed the binary as Admin and are attempting to run the binary under another permission setting perhaps another user with lesser permission Anyone else? M- - Original

Tomcat stops invalidating sessions after session expiry

Tomcat Version 6.014 on Linux. We have implemented HttpSessionListener in our application. In that listener we are doing some special code on sessionDestroyed(mainly closing connection with oracle database). But after some time tomcat stops calling that sessionDestroyed method of listener for

Re: Tomcat stops invalidating sessions after session expiry

pg1691 wrote: We have implemented HttpSessionListener in our application. In that listener we are doing some special code on sessionDestroyed(mainly closing connection with oracle database). Why do you want to store db connections within a session? If you use single db user for every

RE: Multiple Authentication Methods?

I'm too lazy for all that. I was hoping it would amount a few extra lines in some configuration file. Now I'm thinking I'll figure out a way to lock it down in group policy or with some changes to the proxy server. -- Eric Robinson Disclaimer - May 13, 2008 This email and any files

what are ways to improve the performance of server?

I am using tomcat 6 on linux machine with 4 cpu 64 bit machine, What are the ways to perform load balancingand improve the performance of server when multiple requests are processed? i am new to this and just installed the tomcat and jdk in machine. what i do next? -- View this message in

Re: static method to get servlet context

Thanks. ThreadLocal is exactly what I am looking for. -Nilesh On Sun, May 11, 2008 at 9:37 PM, Bill Barker [EMAIL PROTECTED] wrote: Nilesh Bansal [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] hi all, I want to know if Tomcat (servlet api) provides some way by which a