Tomcat 6.0.20 - Workaround for reading the value of a cookie with special characters

2010-01-15 Thread Travis Beech
All, I am trying to read the value of a cookie String cookievalue = cookie.getValue(); where the value itself contains the equal sign, i.e. SESSIONID=1234567890. We were using Tomcat 6.0.14 which based on the code sample above the value of cookievalue would be the string SESSIONID=12345

Re: Classloader between Web application and system loader

2010-01-15 Thread youngm
Thanks for your help guys. I've never really considered modifying a .war outside of the normal build process an acceptable thing to do. But, it appears that is the recommended approach from the Tomcat community so I'll work with my middleware organization to see if we can get something like that

Re: Tomcat access is very slow

2010-01-15 Thread Ziggy
Is it slow when you try to access it directly using the IP address? On Fri, Jan 15, 2010 at 7:54 PM, Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Yu, > > On 1/15/2010 11:28 AM, Yu Chao wrote: > > I’m not a very new to Tomcat \wit

Tomcat issue : open a office 2007 document

2010-01-15 Thread soulSnatched
I am trying to open a office 2007 document a .xlsx file I am using tomcat 6.18 on Windows XP platform Currently i am using in my jsp: response.setContentType("application/vnd.ms-excel"); and the mime mapping in tomcat/conf/web.xml is defined as : xls application/vnd.ms-exc

Re: Hide Tomcat Version From Default Error Page

2010-01-15 Thread André Warnier
massive.boisson wrote: Thank you sir, that works! It can't be used it in the US however, because that was obviously an insider tip. markt-2 wrote: Create the following directory structure under CATALINA_BASE/lib: org/apache/catalina/util Download the following file and place it in that d

Re: Hide Tomcat Version From Default Error Page

2010-01-15 Thread massive.boisson
Thank you sir, that works! markt-2 wrote: > > Create the following directory structure under CATALINA_BASE/lib: > org/apache/catalina/util > > Download the following file and place it in that directory: > http://svn.apache.org/repos/asf/tomcat/tc6.0.x/trunk/java/org/apache/catalina/util/Serve

Re: Tomcat access is very slow

2010-01-15 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Yu, On 1/15/2010 11:28 AM, Yu Chao wrote: > I’m not a very new to Tomcat \with a few projects experience. > > I got a new note book, everything is very fast except tomcat access. Where is Tomcat running? On your notebook, or on another server? > I

Re: Hide Tomcat Version From Default Error Page

2010-01-15 Thread Mark Thomas
On 15/01/2010 19:44, massive.boisson wrote: > > Yes, that's it. > > I do have custom page defined in web.xml with , but it is > theoretically possible to still get Tomcat exception, if for example somehow > it was thrown within the custom error page. > > So I am just trying to avoid this unlik

RE: Hide Tomcat Version From Default Error Page

2010-01-15 Thread Caldarale, Charles R
> From: massive.boisson [mailto:massive.bois...@gmail.com] > Subject: Re: Hide Tomcat Version From Default Error Page > > I thought maybe there is a request parameter I can modify in these > situations that stores the version number. To completely eliminate the Tomcat version labeling, you'll nee

Re: Hide Tomcat Version From Default Error Page

2010-01-15 Thread massive.boisson
Yes, that's it. I do have custom page defined in web.xml with , but it is theoretically possible to still get Tomcat exception, if for example somehow it was thrown within the custom error page. So I am just trying to avoid this unlikely scenario. I thought maybe there is a request parameter

Re: mod_jk: plus-character causes %-encoding problems

2010-01-15 Thread Tero Karttunen
>> The '+' char has no special meaning in HTTP/1.1 (RFC 2616) [1], so in >> the path part of the URL it just means itself, the plus sign. > > Any bug in either mod_alias or mod_jk could be proven with regard to the > above statement by simply changing the URL from: > > http://localhost/sites/one%2B

Re: Hide Tomcat Version From Default Error Page

2010-01-15 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chuck, On 1/15/2010 1:36 PM, Caldarale, Charles R wrote: >> From: massive.boisson [mailto:massive.bois...@gmail.com] Subject: >> RE: Hide Tomcat Version From Default Error Page >> >> I still get: Apache Tomcat/6.0.20 at the bottom. > > Bottom of wha

RE: Hide Tomcat Version From Default Error Page

2010-01-15 Thread Caldarale, Charles R
> From: massive.boisson [mailto:massive.bois...@gmail.com] > Subject: RE: Hide Tomcat Version From Default Error Page > > I still get: Apache Tomcat/6.0.20 at the bottom. Bottom of what? The server attribute of controls the content of the Server HTTP header, nothing else. If you have a webapp

Re: trouble connecting with mod_jk to my Tomcat "missing uri map for 127.0.0.1:"

2010-01-15 Thread Rick Hightower
Thanks Chris comments below On Fri, Jan 15, 2010 at 7:10 AM, Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Rick, > > On 1/14/2010 5:52 PM, Rick Hightower wrote: > > LoadModule jk_module /usr/lib/apache2/modules/mod_jk.so > >

RE: Hide Tomcat Version From Default Error Page

2010-01-15 Thread massive.boisson
Hi, thanks, I tried both: and But it does not work, I still get: Apache Tomcat/6.0.20 at the bottom. Am I doing something wrong? Thanks --MB n828cl wrote: > >> From: massive.boisson [mailto:massive.bois...@gmail.com] >> Subject: Hide Tomcat Version From Default Error Page >>

Re: mod_proxy_ajp JSESSIONID and Mime Type

2010-01-15 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Darren, On 1/4/2010 2:10 PM, Darren Salomons wrote: > Since my servlet excepts all types of file types I thought I would just > leverage apache setting the content-type for me. This is a bad assumption: if you want your servlet to serve files of typ

Re: tomcat + apache + proxy = very slow response

2010-01-15 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Pionier, On 1/13/2010 4:25 PM, pionier wrote: > BindException : > 2010-01-13 21:16:07 org.apache.coyote.http11.Http11Protocol start > SEVERE: Error starting endpoint > java.net.BindException: Permission denied:80 "Permission denied" would have been a

RE: Hide Tomcat Version From Default Error Page

2010-01-15 Thread Caldarale, Charles R
> From: massive.boisson [mailto:massive.bois...@gmail.com] > Subject: Hide Tomcat Version From Default Error Page > > I read that I can hide server version ("Apache Tomcat/6.0.20") by some > setting in server.xml / Connector on version 6.0.20. The paranoid among us should look at the server attri

Hide Tomcat Version From Default Error Page

2010-01-15 Thread massive.boisson
Hi, I read that I can hide server version ("Apache Tomcat/6.0.20") by some setting in server.xml / Connector on version 6.0.20. But I have not been able to find any such setting in the docs (like here: http://tomcat.apache.org/tomcat-6.0-doc/config/http.html) or anywhere else. Any ideas? Than

Re: CVE-2009-3555 fix in tomcat-native-1.1.19?!

2010-01-15 Thread Mladen Turk
On 01/15/2010 05:35 PM, Jens Neu wrote: Dear all, the GET / HTTP/1.0 until the "R" is manually inserted, I expect something like 2860:error:1409444C:SSL routines:SSL3_READ_BYTES:tlsv1 alert no renegotiation:./ ssl/s3_pkt.c:1053:SSL alert number 100 but certainly no RENEGOTIATION. Any hints?

Re: Tomcat access is very slow

2010-01-15 Thread Yu Chao
some complementary: 1. Tomcat startup is very fast, in 5 seconds, but slow in access pages. 2. I changed 5.5.28 to 5.5.23, both very slow. 3. 2010/1/16 Yu Chao > Dears, > > > > I’m not a very new to Tomcat \with a few projects experience. > > I got a new note book, everything is very fast excep

RE: Updating Java

2010-01-15 Thread Robin Wilson
That would work, but you won't get the latest version of the JDK that way. If that's "good enough", then by all means - let 'r rip! -- Robin D. Wilson Director of Web Development KingsIsle Entertainment, Inc. CELL: 512-426-3929 DESK: 512-623-5913 www.KingsIsle.com -Original Message- Fro

CVE-2009-3555 fix in tomcat-native-1.1.19?!

2010-01-15 Thread Jens Neu
Dear all, I just installed the tomcat-native-1.1.19 APR connector alongside tomcat-6.0.20 - since my understanding of its CHANGELOG.txt is, that the renegotiation vulnerability should be gone when using this APR connector, despite my openssl version beeing below 0.9.8l (since I'm on CentOS/RHE

Tomcat access is very slow

2010-01-15 Thread Yu Chao
Dears, I’m not a very new to Tomcat \with a few projects experience. I got a new note book, everything is very fast except tomcat access. I run a new project in my new tomcat(5.5.28 with no other project in webapp), I need about 2-5 minutes to open a page. Same environment on my colleague,

Re: Best Basic Auth Approach

2010-01-15 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Colin, On 1/13/2010 4:33 PM, cgswtsu78 wrote: > Thanks for the info below. The problem I have is that the authentication is > already being done on the apache side as my java/tomcat web application > lives within an apache perl application. I'm just

Re: allowTrace="false" allowing Trace Method

2010-01-15 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Iain, On 1/14/2010 6:16 AM, iainmac wrote: > Sorry, not sure what you want an example of, and not sure what you mean when > you ask what connectors I am using (not really an expert) I meant the elements specified in conf/server.xml. Just post them a

Re: Basic Auth - Adding Client Header

2010-01-15 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 To whom it may concern, On 1/14/2010 11:20 AM, cgswtsu78 wrote: > I have tomcat based application that is invoked from the apache side through > mod_jk. I've setup basic auth on the apache side and the very first request > to tomcat works as expected

Re: Tomcat crash dump on Windows

2010-01-15 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jeffrey, On 1/15/2010 10:21 AM, Jeffrey Janner wrote: > Is there any procedure for generating a memory dump for Tomcat running > as a Windows service when the service dies and hangs? Yes: you want to set one (or more) of the following JVM flags: - -

Re: Classloader between Web application and system loader

2010-01-15 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mike, On 1/14/2010 6:45 PM, youngm wrote: > * It would seem that the change tracking of a process like that above would > be very difficult. It would be hard to answer questions like "What patches > have I applied to these 20 applications in producti

Re: Allocated memory and VMWare

2010-01-15 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Abel, On 1/15/2010 4:46 AM, Abel MacAdam wrote: > We manage several customers on VMWare systems. Their Tomcat installation is > used by a Content Management System written in Java. I have a question about > what happens with Tomcat when memory it has

Tomcat crash dump on Windows

2010-01-15 Thread Jeffrey Janner
Is there any procedure for generating a memory dump for Tomcat running as a Windows service when the service dies and hangs? We had a production instance stop responding last night and then it refused to stop when the operator tried to shut it down using the services control panel. We had to use

Re: Updating Java

2010-01-15 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Robin, On 1/14/2010 11:26 PM, Robin Wilson wrote: > You could just download the Sun JDK rpm and manually install it using > the command line. Then point your "JAVA_HOME" environment variable to > where you installed it. Why use the RPM when Debian/Ub

Re: trouble connecting with mod_jk to my Tomcat "missing uri map for 127.0.0.1:"

2010-01-15 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Rick, On 1/14/2010 5:52 PM, Rick Hightower wrote: > LoadModule jk_module /usr/lib/apache2/modules/mod_jk.so > JkWorkersFile /etc/apache2/workers.properties > JkShmFile /var/log/apache2/mod_jk.shm > JkLogFile /var/log/apache2/mod_jk.log > JkOpt

Re: Tomcat behind proxy listening just for localhost

2010-01-15 Thread dennis.winter
Thanks! I'm german, we set commas for nearly everything! ;) No, the post of Konstantin answered my question! Everything is working fine, now :) Kind regards, Dennis Winter Christopher Schultz-2 wrote: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Dennis, > > > On 1/14/2010 4:34

Re: Tomcat behind proxy listening just for localhost

2010-01-15 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dennis, On 1/14/2010 4:34 PM, dennis.winter wrote: > P.S.: Sorry for my crappy english! Your English is great! Your only problem is too many commas :) > I'm new to Tomcat, i've set up the tomcat and apache with mod_proxy as > proxy. > So, it's work

Re: how to encrypt password in data source config in context.xml

2010-01-15 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 William, On 1/14/2010 1:30 PM, WM C wrote: > In the data source declaration, database username, password needs to > be provided, and they are in plain text! > > For the application, data source works fine, but I feel it is really > not safe - anybody

Re: Tomcat memory settings

2010-01-15 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Leo, On 1/14/2010 11:48 AM, Leo Donahue - PLANDEVX wrote: > Thank you for the feedback. I followed Chuck's advice and set the > initial and maximum memory pool using the tomcat6w.exe I have both > values set to 512MB. As Chuck suggests, that's a bi

Re: Allocated memory and VMWare

2010-01-15 Thread Mark H. Wood
As others have said, try a VMware forum for more definite answers. I use VMware slightly but I'm not anything like an expert. Meanwhile, one thing to keep in mind is that the guest OS can't tell when VMware trims the guest's memory. The guest always sees as much as it was allocated. VMware can

RE: [OT] Allocated memory and VMWare

2010-01-15 Thread Caldarale, Charles R
> From: André Warnier [mailto:a...@ice-sa.com] > Subject: Re: Allocated memory and VMWare > > I may be mistaken, but I do not know of any OS which is capable to run > with a variable (dynamic) amount of memory. The amount available is > usually set when the OS boots, and does not change after tha

Re: mod_jk: plus-character causes %-encoding problems

2010-01-15 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Konstantin, On 1/13/2010 6:42 PM, Konstantin Kolinko wrote: > Why is '+' decoded to ' ' in the path part of the URL? > > That is, I think, wrong. > > The '+' char has no special meaning in HTTP/1.1 (RFC 2616) [1], so in > the path part of the URL it

Re: Tomcat + Apache + AJP = high cpu usage:/

2010-01-15 Thread pionier
Peter Crowther wrote: > > 2010/1/14 pionier : >> Linux vs4160 2.6.22-vs2.2.0.7-gentoo #4 SMP Mon Jul 27 01:53:39 Local >> time >> zone must be set--see zic  x86_64 AMD Phenom(tm) II X4 810 Processor >> AuthenticAMD GNU/Linux > > Thanks. OK, you've got a few options here. This is all because

How to switch off retries for LB worker?

2010-01-15 Thread Ryszard Łach
Hi. I'm testing mod_jk 1.2.28 trying to fine tune retries, reply_timeout and max_reply_timeouts. Let's begin from retries. I have a simple servlet, which returns text/plain 'OK' after time (in seconds) given in url. I've set reply_timeout to 3s for worker first and to 6s for worker second. After e

Re: 6.0.19 feature to not swallow input if the connection is going to be closed

2010-01-15 Thread Ronald Klop
Hello, I think this is an interesting question. I wonder why there is no answer. Ronald. Op vrijdag, 8 januari 2010 17:20 schreef Lock Ian IC : Hi There was a feature introduced in 6.0.19 to not swallow the inputStream if the servlet throws an exception and the connection is going t

Re: Classloader between Web application and system loader

2010-01-15 Thread Pid
On 14/01/2010 23:45, youngm wrote: * It would seem that the change tracking of a process like that above would be very difficult. It would be hard to answer questions like "What patches have I applied to these 20 applications in production?" If there were simply a folder with the patches right

Re: Allocated memory and VMWare

2010-01-15 Thread André Warnier
Abel MacAdam wrote: So I take it we should reserve the 500 MB with fixed (or rigid I think it is called) memory? That might cause other problems *). Thanks for the response. *) When you reserve flexible memory the OS of the system VMWare runs on you get a situation where more memory is allocate

Re: hold tomcat

2010-01-15 Thread André Warnier
Gonima wrote: Hi Community, i'm looking for a possibility to hold the tomcat server, and to let it go on later. I think you need to specify a bit more in detail what you mean by "hold", but here is a rough way : - get VMWare Server and install it - create a virtual machine in it - install Jav

hold tomcat

2010-01-15 Thread Gonima
Hi Community, i'm looking for a possibility to hold the tomcat server, and to let it go on later. Thanks for any help Gaetan -- View this message in context: http://old.nabble.com/hold-tomcat-tp27173782p27173782.html Sent from the Tomcat - User mailing list archive at Nabble.com.

Re: Allocated memory and VMWare

2010-01-15 Thread Abel MacAdam
So I take it we should reserve the 500 MB with fixed (or rigid I think it is called) memory? That might cause other problems *). Thanks for the response. *) When you reserve flexible memory the OS of the system VMWare runs on you get a situation where more memory is allocated then flexible is ava

Allocated memory and VMWare

2010-01-15 Thread Abel MacAdam
HiHi, We manage several customers on VMWare systems. Their Tomcat installation is used by a Content Management System written in Java. I have a question about what happens with Tomcat when memory it has configured is not available when necessary. Our Tomcat installations should use 500 MB (-Xmx51

Re: Allocated memory and VMWare

2010-01-15 Thread André Warnier
Mark Thomas wrote: On 15/01/2010 08:57, Abel MacAdam wrote: Hi, We manage several customers on VMWare systems. Their Tomcat installation is used by a Content Management System written in Java. I have a question about what happens with Tomcat when memory it has configured is not available when n

Re: Allocated memory and VMWare

2010-01-15 Thread Mark Thomas
On 15/01/2010 08:57, Abel MacAdam wrote: > > Hi, > > We manage several customers on VMWare systems. Their Tomcat installation is > used by a Content Management System written in Java. I have a question about > what happens with Tomcat when memory it has configured is not available when > necessar

Re: Tomcat + Apache + AJP = high cpu usage:/

2010-01-15 Thread Peter Crowther
2010/1/14 pionier : > Linux vs4160 2.6.22-vs2.2.0.7-gentoo #4 SMP Mon Jul 27 01:53:39 Local time > zone must be set--see zic  x86_64 AMD Phenom(tm) II X4 810 Processor > AuthenticAMD GNU/Linux Thanks. OK, you've got a few options here. This is all because a process can only bind to a port < 1024

Allocated memory and VMWare

2010-01-15 Thread Abel MacAdam
Hi, We manage several customers on VMWare systems. Their Tomcat installation is used by a Content Management System written in Java. I have a question about what happens with Tomcat when memory it has configured is not available when necessary. Our Tomcat installations should use 500 MB (-Xmx516