Hi All
In our application we are trying to manage session per user login and have
set the session inactivity to 15 minutes [user details are set to the
session], when we are running the application for longer duration [over 2
days] with continuous activity per user login we see that some session
Hi,
I got few question would like ask hope someone answer my question, below is
the server information
Windows 2003 server
Tomcat 6.0 (configured java initial / maximum memory pool: 1024 MB)
Apache 2.2 (using mod_jk)
Java 1.6
The testing result I've use Jmeter (configured 100 thread
The problem is that one of my web-apps compiles JSP at run-time - so that we
can update them on-the-fly.
BTW, I'm still not getting this error today - so it looks like it is either the
checkInterval flag, reduction of memory usage or minimizing the catalina/stdout
logging (we had some
2 things to look at:
keep-alive parameter for the connector
session-timeout in web.xml
do the logs confirm the webapp is producing activity when the connection is
closed?
Martin --
__
Verzicht und Vertraulichkeitanmerkung/Note de déni et de
What is the reason NOT to assume that request with more than one
User-Agent header originates from a bot?
See lines 133, 134 in Tomcat 7.0.14.
Thanks
Martin
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For
On 24/05/2011 12:50, Martin Kouba wrote:
What is the reason NOT to assume that request with more than one
User-Agent header originates from a bot?
See lines 133, 134 in Tomcat 7.0.14.
Simply that none of the samples I looked at had multiple UA headers and
a suggestion from another committer
Mark Thomas wrote:
On 24/05/2011 12:50, Martin Kouba wrote:
What is the reason NOT to assume that request with more than one
User-Agent header originates from a bot?
See lines 133, 134 in Tomcat 7.0.14.
Simply that none of the samples I looked at had multiple UA headers and
a suggestion from
From: Harsimranjit singh Kler [mailto:simran...@gmail.com]
Subject: Session Expiry Issue on Tomcat 5.5.27
we see that some session are expired even if there is some
activity going on and the user gets logged out.
Are you sure the session is expiring, or is it perhaps being explicitly
I've a web application with two contexts ROOT and mycontext. Both
contexts have custom error pages defined in the web.xml and everything
works as expected in most cases. The only problem is that if my
context, mycontext, fails to initialize (e.g. database is
unavailable), and if some one tries to
On Tue, May 24, 2011 at 9:59 AM, Sai Pullabhotla
sai.pullabho...@jmethods.com wrote:
I've a web application with two contexts ROOT and mycontext. Both
contexts have custom error pages defined in the web.xml and everything
works as expected in most cases. The only problem is that if my
I'm finding that whether I use a redirect() or a forward() to a static
resource, my server goes crazy.
at
org.apache.catalina.core.ApplicationHttpRequest.getSession(ApplicationHttpRequest.java:572)
at
From: Jay, Michael [mailto:em...@ufl.edu]
Subject: Static Resources - Runtime Problems
I must be overlooking something very basic.
A) Not telling us the version of Tomcat you're using, the JVM level, the
platform it's all running on, and whether or not you're running Tomcat
stand-alone or
From: Caldarale, Charles R
Subject: RE: Static Resources - Runtime Problems
C) Configuring a loop in your filter declarations. Post
your WEB-INF/web.xml so we can look at it.
Might not be in filter declarations; could easily be just the servlet mapping
you've set up.
- Chuck
THIS
!-- what you are forwarding/redirecting to must be mapped so in one of my
web.xml i have --.
servlet-mapping
servlet-namefreemarker/servlet-name
url-pattern*.ftl/url-pattern
/servlet-mapping
servlet-mapping
servlet-namelayoutServlet/servlet-name
hi
Using Session.setMaxInactiveInterval() so expecting it overwrite web.xml
's expirytime.
keep-alive parameter for the connector
Where to set this value can u explain?
thanks
On Tue, May 24, 2011 at 4:43 PM, Martin Gainty mgai...@hotmail.com wrote:
2 things to look at:
keep-alive
I apologize for the insufficient data. The goal is to foward the user to
google.com to login and on successful authentication, reveal the original page
desired. The original author used a .jsp that simply produces itself. But
that's a separate issue--I think. I've not been able to capture an
I've setup a pretty generic httpd(2.2.19)+mod_jk to tomcat 6 on Oracle
Linux 5 (CentOS 5 equiv) with SSL setup. With JkExtractSSL and the
correct SSLOptions in the httpd configuration files. I can see the
SSL environment variables in /cgi-bin/printenv but no headers or
environment variables in
On Tue, 24 May 2011 10:47:32 -0400, Jay, Michael wrote:
IMHO code that follows pattern
try {
... something
} catch (Exception e) {
System.out(oops);
}
...
try {
... something
} catch (Exception e) {
System.out(oops);
}
deserves only /dev/null as a permanent storage destination.
--
Mikolaj
On 24/05/2011 15:56, Marc Boorshtein wrote:
I've setup a pretty generic httpd(2.2.19)+mod_jk to tomcat 6 on Oracle
Linux 5 (CentOS 5 equiv) with SSL setup. With JkExtractSSL and the
correct SSLOptions in the httpd configuration files.
And your SSLOptions are what exactly?
Also Tomcat and
And your SSLOptions are what exactly?
Also Tomcat and mod_jk version info might be relevant.
oadModulejk_module modules/mod_jk.so
LoadFile /home/sys/ssl-poc/webgate/access/oblix/lib/libgcc_s.so.1
LoadFile /home/sys/ssl-poc/webgate/access/oblix/lib/libstdc++.so.5
SSLOptions +StdEnvVars
Thanks for the reply, Chris.
We do several things during context initialization with the
ServletContextListener hook. The contextInitialized method may not
complete for various reasons, sometimes with checked exceptions and
sometimes with unchecked exceptions. We just let Tomcat/JVM handle the
From: Sai Pullabhotla [mailto:sai.pullabho...@jmethods.com]
Subject: Re: Overriding error page displayed when a context fails to
initialize
What I'm looking for is a way to override the error pages of
Tomcat at the global level (not application/context specific)
There's no such mechanism
Dear Sirs,
Tomcat 7.0.14
Servlet 3.0
Windows XP SP3 x86版
My servlet programs with @WebServlet annotation have three problems as
follows:
1. A servlet program with @WebServlet
annotation(@WebServlet(name=HelloServlet, urlPatterns={/hello}))
cantnot be
Dear Sirs,
Tomcat 7.0.14
Servlet 3.0
Windows XP SP3 x86
My servlet programs with @WebServlet annotation have three problems as
follows:
1. A servlet program with @WebServlet
annotation(@WebServlet(name=HelloServlet, urlPatterns={/hello}))
cantnot be
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
McAfe,
On 5/24/2011 3:01 AM, McAfe wrote:
Apache 2.2 (using mod_jk)
The testing result I've use Jmeter (configured 100 thread per-second) it
will die when thread(Jmeter) between 200 ~ 300
AJP expects to have persistent connections. What is your
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Marc,
On 5/24/2011 11:39 AM, Marc Boorshtein wrote:
SSLOptions +StdEnvVars
SSLOptions +ExportCertData
JkExtractSSL On
VirtualHost _default_:9443
I'm not entirely sure about the JkExtractSSL option, but some other
mod_jk options are not
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Kerotan,
On 5/24/2011 1:28 PM, kerotan wrote:
Tomcat 7.0.14
My servlet programs with @WebServlet annotation have three problems as
follows:
1. A servlet program with @WebServlet
annotation(@WebServlet(name=HelloServlet, urlPatterns={/hello}))
Caldarale, Charles R wrote:
From: Sai Pullabhotla [mailto:sai.pullabho...@jmethods.com]
Subject: Re: Overriding error page displayed when a context fails to initialize
What I'm looking for is a way to override the error pages of
Tomcat at the global level (not application/context specific)
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Michael,
On 5/24/2011 10:47 AM, Jay, Michael wrote:
I apologize for the insufficient data. The goal is to foward the
user to google.com to login and on successful authentication, reveal
the original page desired. The original author used a .jsp
I appreciate you trying to be helpful rather than otherwise. The current state
of the code is simply an exploration, a debugging exercise, though one that is
causing a lot of frustration and costing a lot of time. I'm not sure how to
get the full trace. It goes beyond what I can capture in the
From: Jay, Michael [mailto:em...@ufl.edu]
Subject: RE: Static Resources - Runtime Problems
I haven't mapped the .htm to anything.
Actually, you have:
servlet-mapping
servlet-nameHRSurveyLogin/servlet-name
url-pattern//url-pattern
/servlet-mapping
Marc,
On 5/24/2011 11:39 AM, Marc Boorshtein wrote:
SSLOptions +StdEnvVars
SSLOptions +ExportCertData
JkExtractSSL On
VirtualHost _default_:9443
I'm not entirely sure about the JkExtractSSL option, but some other
mod_jk options are not copied into all virtual hosts. You might want to
That was gnawing at the back of my mind a little bit. So how would you have an
entry point servlet run at a simple address without consuming everything in
that path? If the context is /hrsurvey and all the other servlets are mapped
with that assumed as a prefix, can there not be anything mapped
This is super low priority, since I assume somebody is passing junk in a
Set-Cookie header, but I'd love to get to the bottom of it (I'm of the no
request left behind mindset), and I'm still in the dark about what Tomcat
doesn't like about what it's being passed.
Can you guys shed any light on
Using a filter would insert the entry point of the Servlet into an entire path
with the option of allowing/not allowing it to continue down the call chain.
--FilterA-FilterB-RealServlet
|
+-SomethingInteresting
FilterA will have the ability to examine the request and pass it to some
On 24/05/2011 21:25, Dan Checkoway wrote:
This is super low priority, since I assume somebody is passing junk in a
Set-Cookie header, but I'd love to get to the bottom of it (I'm of the no
request left behind mindset), and I'm still in the dark about what Tomcat
doesn't like about what it's
On 24/05/2011 21:21, Jay, Michael wrote:
That was gnawing at the back of my mind a little bit. So how would you have
an entry point servlet run at a simple address without consuming everything
in that path? If the context is /hrsurvey and all the other servlets are
mapped with that assumed
Thanks!
-Original Message-
From: Bill Miller [mailto:millebi.subscripti...@gmail.com]
Sent: Tuesday, May 24, 2011 4:32 PM
To: 'Tomcat Users List'
Subject: RE: Static Resources - Runtime Problems
Using a filter would insert the entry point of the Servlet into an entire path
with the
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Marc,
On 5/24/2011 4:13 PM, Marc Boorshtein wrote:
Marc,
On 5/24/2011 11:39 AM, Marc Boorshtein wrote:
SSLOptions +StdEnvVars
SSLOptions +ExportCertData
JkExtractSSL On
VirtualHost _default_:9443
I'm not entirely sure about the
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Marc,
On 5/24/2011 10:56 AM, Marc Boorshtein wrote:
I've setup a pretty generic httpd(2.2.19)+mod_jk to tomcat 6 on Oracle
Linux 5 (CentOS 5 equiv) with SSL setup. With JkExtractSSL and the
correct SSLOptions in the httpd configuration files. I
Ah, thanks! I see now that setting ALLOW_HTTP_SEPARATORS_IN_V0=true
bypasses that check in a few spots. Probably what Chuck was alluding
to in his reply...
The one spot it wouldn't bypass is line 292 in ServerCookie.java. You
guys could switch the order of the logical checks in there, i.e.:
-
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Marc,
On 5/24/2011 4:59 PM, Christopher Schultz wrote:
Instead, they are stored in the request /attributes/.
Specifically, these:
javax.servlet.request.cipher_suite - as a String
javax.servlet.request.key_size - as an Integer
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Dan,
On 5/24/2011 5:09 PM, Dan Checkoway wrote:
-} else if (CookieSupport.isHttpToken(value)
-!CookieSupport.ALLOW_HTTP_SEPARATORS_IN_V0 ||
-CookieSupport.isV0Token(value)
-
I wasn't gonna say anything about that, but I did consult my operator
precedence reference while looking at it... :-) +1 on parens!
Dan
On Tue, May 24, 2011 at 5:21 PM, Christopher Schultz
ch...@christopherschultz.net wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Dan,
On 5/24/2011
From: Christopher Schultz [mailto:ch...@christopherschultz.net]
Subject: Re: Control character in cookie value or attribute
On 5/24/2011 5:09 PM, Dan Checkoway wrote:
-} else if (CookieSupport.isHttpToken(value)
-!CookieSupport.ALLOW_HTTP_SEPARATORS_IN_V0 ||
-
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Marc,
On 5/24/2011 5:20 PM, Christopher Schultz wrote:
On 5/24/2011 4:59 PM, Christopher Schultz wrote:
Instead, they are stored in the request /attributes/.
Specifically, these:
javax.servlet.request.cipher_suite - as a String
Hope you don't mind...I opened a ticket for this:
https://issues.apache.org/bugzilla/show_bug.cgi?id=51260
Dan
On Tue, May 24, 2011 at 5:28 PM, Caldarale, Charles R
chuck.caldar...@unisys.com wrote:
From: Christopher Schultz [mailto:ch...@christopherschultz.net]
Subject: Re: Control character
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Chuck,
On 5/24/2011 5:28 PM, Caldarale, Charles R wrote:
From: Christopher Schultz [mailto:ch...@christopherschultz.net]
Subject: Re: Control character in cookie value or attribute
On 5/24/2011 5:09 PM, Dan Checkoway wrote:
-} else if
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Marc,
On 5/24/2011 5:37 PM, Christopher Schultz wrote:
Looking at the mod_jk code, it appears that the only variables that are
included by using JkExtractSSL are those shown above. If you want more,
you'll have to use JkEnvVar.
I can confirm
Christopher Schultz wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Marc,
On 5/24/2011 10:56 AM, Marc Boorshtein wrote:
I've setup a pretty generic httpd(2.2.19)+mod_jk to tomcat 6 on Oracle
Linux 5 (CentOS 5 equiv) with SSL setup. With JkExtractSSL and the
correct SSLOptions in the
50 matches
Mail list logo