Session Expiry Issue on Tomcat 5.5.27

2011-05-24 Thread Harsimranjit singh Kler
Hi All In our application we are trying to manage session per user login and have set the session inactivity to 15 minutes [user details are set to the session], when we are running the application for longer duration [over 2 days] with continuous activity per user login we see that some session

Performance *SpareThreads

2011-05-24 Thread McAfe
Hi, I got few question would like ask hope someone answer my question, below is the server information Windows 2003 server Tomcat 6.0 (configured java initial / maximum memory pool: 1024 MB) Apache 2.2 (using mod_jk) Java 1.6 The testing result I've use Jmeter (configured 100 thread

RE: java.lang.ClassNotFoundException - JSP pages

2011-05-24 Thread Tom Wolf
The problem is that one of my web-apps compiles JSP at run-time - so that we can update them on-the-fly. BTW, I'm still not getting this error today - so it looks like it is either the checkInterval flag, reduction of memory usage or minimizing the catalina/stdout logging (we had some

RE: Session Expiry Issue on Tomcat 5.5.27

2011-05-24 Thread Martin Gainty
2 things to look at: keep-alive parameter for the connector session-timeout in web.xml do the logs confirm the webapp is producing activity when the connection is closed? Martin -- __ Verzicht und Vertraulichkeitanmerkung/Note de déni et de

CrawlerSessionManagerValve question

2011-05-24 Thread Martin Kouba
What is the reason NOT to assume that request with more than one User-Agent header originates from a bot? See lines 133, 134 in Tomcat 7.0.14. Thanks Martin - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For

Re: CrawlerSessionManagerValve question

2011-05-24 Thread Mark Thomas
On 24/05/2011 12:50, Martin Kouba wrote: What is the reason NOT to assume that request with more than one User-Agent header originates from a bot? See lines 133, 134 in Tomcat 7.0.14. Simply that none of the samples I looked at had multiple UA headers and a suggestion from another committer

Re: CrawlerSessionManagerValve question

2011-05-24 Thread André Warnier
Mark Thomas wrote: On 24/05/2011 12:50, Martin Kouba wrote: What is the reason NOT to assume that request with more than one User-Agent header originates from a bot? See lines 133, 134 in Tomcat 7.0.14. Simply that none of the samples I looked at had multiple UA headers and a suggestion from

RE: Session Expiry Issue on Tomcat 5.5.27

2011-05-24 Thread Caldarale, Charles R
From: Harsimranjit singh Kler [mailto:simran...@gmail.com] Subject: Session Expiry Issue on Tomcat 5.5.27 we see that some session are expired even if there is some activity going on and the user gets logged out. Are you sure the session is expiring, or is it perhaps being explicitly

Overriding error page displayed when a context fails to initialize

2011-05-24 Thread Sai Pullabhotla
I've a web application with two contexts ROOT and mycontext. Both contexts have custom error pages defined in the web.xml and everything works as expected in most cases. The only problem is that if my context, mycontext, fails to initialize (e.g. database is unavailable), and if some one tries to

Re: Overriding error page displayed when a context fails to initialize

2011-05-24 Thread chris derham
On Tue, May 24, 2011 at 9:59 AM, Sai Pullabhotla sai.pullabho...@jmethods.com wrote: I've a web application with two contexts ROOT and mycontext. Both contexts have custom error pages defined in the web.xml and everything works as expected in most cases. The only problem is that if my

Static Resources - Runtime Problems

2011-05-24 Thread Jay, Michael
I'm finding that whether I use a redirect() or a forward() to a static resource, my server goes crazy. at org.apache.catalina.core.ApplicationHttpRequest.getSession(ApplicationHttpRequest.java:572) at

RE: Static Resources - Runtime Problems

2011-05-24 Thread Caldarale, Charles R
From: Jay, Michael [mailto:em...@ufl.edu] Subject: Static Resources - Runtime Problems I must be overlooking something very basic. A) Not telling us the version of Tomcat you're using, the JVM level, the platform it's all running on, and whether or not you're running Tomcat stand-alone or

RE: Static Resources - Runtime Problems

2011-05-24 Thread Caldarale, Charles R
From: Caldarale, Charles R Subject: RE: Static Resources - Runtime Problems C) Configuring a loop in your filter declarations. Post your WEB-INF/web.xml so we can look at it. Might not be in filter declarations; could easily be just the servlet mapping you've set up. - Chuck THIS

RE: Static Resources - Runtime Problems

2011-05-24 Thread Martin Gainty
!-- what you are forwarding/redirecting to must be mapped so in one of my web.xml i have --. servlet-mapping servlet-namefreemarker/servlet-name url-pattern*.ftl/url-pattern /servlet-mapping servlet-mapping servlet-namelayoutServlet/servlet-name

Re: Session Expiry Issue on Tomcat 5.5.27

2011-05-24 Thread Harsimranjit singh Kler
hi Using Session.setMaxInactiveInterval() so expecting it overwrite web.xml 's expirytime. keep-alive parameter for the connector Where to set this value can u explain? thanks On Tue, May 24, 2011 at 4:43 PM, Martin Gainty mgai...@hotmail.com wrote: 2 things to look at: keep-alive

RE: Static Resources - Runtime Problems

2011-05-24 Thread Jay, Michael
I apologize for the insufficient data. The goal is to foward the user to google.com to login and on successful authentication, reveal the original page desired. The original author used a .jsp that simply produces itself. But that's a separate issue--I think. I've not been able to capture an

JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread Marc Boorshtein
I've setup a pretty generic httpd(2.2.19)+mod_jk to tomcat 6 on Oracle Linux 5 (CentOS 5 equiv) with SSL setup. With JkExtractSSL and the correct SSLOptions in the httpd configuration files. I can see the SSL environment variables in /cgi-bin/printenv but no headers or environment variables in

RE: Static Resources - Runtime Problems

2011-05-24 Thread Mikolaj Rydzewski
On Tue, 24 May 2011 10:47:32 -0400, Jay, Michael wrote: IMHO code that follows pattern try { ... something } catch (Exception e) { System.out(oops); } ... try { ... something } catch (Exception e) { System.out(oops); } deserves only /dev/null as a permanent storage destination. -- Mikolaj

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread Mark Thomas
On 24/05/2011 15:56, Marc Boorshtein wrote: I've setup a pretty generic httpd(2.2.19)+mod_jk to tomcat 6 on Oracle Linux 5 (CentOS 5 equiv) with SSL setup. With JkExtractSSL and the correct SSLOptions in the httpd configuration files. And your SSLOptions are what exactly? Also Tomcat and

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread Marc Boorshtein
And your SSLOptions are what exactly? Also Tomcat and mod_jk version info might be relevant. oadModulejk_module modules/mod_jk.so LoadFile /home/sys/ssl-poc/webgate/access/oblix/lib/libgcc_s.so.1 LoadFile /home/sys/ssl-poc/webgate/access/oblix/lib/libstdc++.so.5 SSLOptions +StdEnvVars

Re: Overriding error page displayed when a context fails to initialize

2011-05-24 Thread Sai Pullabhotla
Thanks for the reply, Chris. We do several things during context initialization with the ServletContextListener hook. The contextInitialized method may not complete for various reasons, sometimes with checked exceptions and sometimes with unchecked exceptions. We just let Tomcat/JVM handle the

RE: Overriding error page displayed when a context fails to initialize

2011-05-24 Thread Caldarale, Charles R
From: Sai Pullabhotla [mailto:sai.pullabho...@jmethods.com] Subject: Re: Overriding error page displayed when a context fails to initialize What I'm looking for is a way to override the error pages of Tomcat at the global level (not application/context specific) There's no such mechanism

restricted utilization on @WebServlet annotation of Servlet 3.0

2011-05-24 Thread kerotan
Dear Sirs, Tomcat 7.0.14 Servlet 3.0 Windows XP SP3 x86版 My servlet programs with @WebServlet annotation have three problems as follows: 1. A servlet program with @WebServlet annotation(@WebServlet(name=HelloServlet, urlPatterns={/hello})) cantnot be

restricted utilization on @WebServlet annotation of Servlet 3.0

2011-05-24 Thread kerotan
Dear Sirs, Tomcat 7.0.14 Servlet 3.0 Windows XP SP3 x86 My servlet programs with @WebServlet annotation have three problems as follows: 1. A servlet program with @WebServlet annotation(@WebServlet(name=HelloServlet, urlPatterns={/hello})) cantnot be

Re: Performance *SpareThreads

2011-05-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 McAfe, On 5/24/2011 3:01 AM, McAfe wrote: Apache 2.2 (using mod_jk) The testing result I've use Jmeter (configured 100 thread per-second) it will die when thread(Jmeter) between 200 ~ 300 AJP expects to have persistent connections. What is your

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marc, On 5/24/2011 11:39 AM, Marc Boorshtein wrote: SSLOptions +StdEnvVars SSLOptions +ExportCertData JkExtractSSL On VirtualHost _default_:9443 I'm not entirely sure about the JkExtractSSL option, but some other mod_jk options are not

Re: restricted utilization on @WebServlet annotation of Servlet 3.0

2011-05-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kerotan, On 5/24/2011 1:28 PM, kerotan wrote: Tomcat 7.0.14 My servlet programs with @WebServlet annotation have three problems as follows: 1. A servlet program with @WebServlet annotation(@WebServlet(name=HelloServlet, urlPatterns={/hello}))

Re: Overriding error page displayed when a context fails to initialize

2011-05-24 Thread André Warnier
Caldarale, Charles R wrote: From: Sai Pullabhotla [mailto:sai.pullabho...@jmethods.com] Subject: Re: Overriding error page displayed when a context fails to initialize What I'm looking for is a way to override the error pages of Tomcat at the global level (not application/context specific)

Re: Static Resources - Runtime Problems

2011-05-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Michael, On 5/24/2011 10:47 AM, Jay, Michael wrote: I apologize for the insufficient data. The goal is to foward the user to google.com to login and on successful authentication, reveal the original page desired. The original author used a .jsp

RE: Static Resources - Runtime Problems

2011-05-24 Thread Jay, Michael
I appreciate you trying to be helpful rather than otherwise. The current state of the code is simply an exploration, a debugging exercise, though one that is causing a lot of frustration and costing a lot of time. I'm not sure how to get the full trace. It goes beyond what I can capture in the

RE: Static Resources - Runtime Problems

2011-05-24 Thread Caldarale, Charles R
From: Jay, Michael [mailto:em...@ufl.edu] Subject: RE: Static Resources - Runtime Problems I haven't mapped the .htm to anything. Actually, you have: servlet-mapping servlet-nameHRSurveyLogin/servlet-name url-pattern//url-pattern /servlet-mapping

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread Marc Boorshtein
Marc, On 5/24/2011 11:39 AM, Marc Boorshtein wrote: SSLOptions +StdEnvVars SSLOptions +ExportCertData JkExtractSSL On VirtualHost _default_:9443 I'm not entirely sure about the JkExtractSSL option, but some other mod_jk options are not copied into all virtual hosts. You might want to

RE: Static Resources - Runtime Problems

2011-05-24 Thread Jay, Michael
That was gnawing at the back of my mind a little bit. So how would you have an entry point servlet run at a simple address without consuming everything in that path? If the context is /hrsurvey and all the other servlets are mapped with that assumed as a prefix, can there not be anything mapped

Re: Control character in cookie value or attribute

2011-05-24 Thread Dan Checkoway
This is super low priority, since I assume somebody is passing junk in a Set-Cookie header, but I'd love to get to the bottom of it (I'm of the no request left behind mindset), and I'm still in the dark about what Tomcat doesn't like about what it's being passed. Can you guys shed any light on

RE: Static Resources - Runtime Problems

2011-05-24 Thread Bill Miller
Using a filter would insert the entry point of the Servlet into an entire path with the option of allowing/not allowing it to continue down the call chain. --FilterA-FilterB-RealServlet | +-SomethingInteresting FilterA will have the ability to examine the request and pass it to some

Re: Control character in cookie value or attribute

2011-05-24 Thread Mark Thomas
On 24/05/2011 21:25, Dan Checkoway wrote: This is super low priority, since I assume somebody is passing junk in a Set-Cookie header, but I'd love to get to the bottom of it (I'm of the no request left behind mindset), and I'm still in the dark about what Tomcat doesn't like about what it's

Re: Static Resources - Runtime Problems

2011-05-24 Thread Mark Thomas
On 24/05/2011 21:21, Jay, Michael wrote: That was gnawing at the back of my mind a little bit. So how would you have an entry point servlet run at a simple address without consuming everything in that path? If the context is /hrsurvey and all the other servlets are mapped with that assumed

RE: Static Resources - Runtime Problems

2011-05-24 Thread Jay, Michael
Thanks! -Original Message- From: Bill Miller [mailto:millebi.subscripti...@gmail.com] Sent: Tuesday, May 24, 2011 4:32 PM To: 'Tomcat Users List' Subject: RE: Static Resources - Runtime Problems Using a filter would insert the entry point of the Servlet into an entire path with the

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marc, On 5/24/2011 4:13 PM, Marc Boorshtein wrote: Marc, On 5/24/2011 11:39 AM, Marc Boorshtein wrote: SSLOptions +StdEnvVars SSLOptions +ExportCertData JkExtractSSL On VirtualHost _default_:9443 I'm not entirely sure about the

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marc, On 5/24/2011 10:56 AM, Marc Boorshtein wrote: I've setup a pretty generic httpd(2.2.19)+mod_jk to tomcat 6 on Oracle Linux 5 (CentOS 5 equiv) with SSL setup. With JkExtractSSL and the correct SSLOptions in the httpd configuration files. I

Re: Control character in cookie value or attribute

2011-05-24 Thread Dan Checkoway
Ah, thanks! I see now that setting ALLOW_HTTP_SEPARATORS_IN_V0=true bypasses that check in a few spots. Probably what Chuck was alluding to in his reply... The one spot it wouldn't bypass is line 292 in ServerCookie.java. You guys could switch the order of the logical checks in there, i.e.: -

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marc, On 5/24/2011 4:59 PM, Christopher Schultz wrote: Instead, they are stored in the request /attributes/. Specifically, these: javax.servlet.request.cipher_suite - as a String javax.servlet.request.key_size - as an Integer

Re: Control character in cookie value or attribute

2011-05-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dan, On 5/24/2011 5:09 PM, Dan Checkoway wrote: -} else if (CookieSupport.isHttpToken(value) -!CookieSupport.ALLOW_HTTP_SEPARATORS_IN_V0 || -CookieSupport.isV0Token(value) -

Re: Control character in cookie value or attribute

2011-05-24 Thread Dan Checkoway
I wasn't gonna say anything about that, but I did consult my operator precedence reference while looking at it... :-) +1 on parens! Dan On Tue, May 24, 2011 at 5:21 PM, Christopher Schultz ch...@christopherschultz.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dan, On 5/24/2011

RE: Control character in cookie value or attribute

2011-05-24 Thread Caldarale, Charles R
From: Christopher Schultz [mailto:ch...@christopherschultz.net] Subject: Re: Control character in cookie value or attribute On 5/24/2011 5:09 PM, Dan Checkoway wrote: -} else if (CookieSupport.isHttpToken(value) -!CookieSupport.ALLOW_HTTP_SEPARATORS_IN_V0 || -

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marc, On 5/24/2011 5:20 PM, Christopher Schultz wrote: On 5/24/2011 4:59 PM, Christopher Schultz wrote: Instead, they are stored in the request /attributes/. Specifically, these: javax.servlet.request.cipher_suite - as a String

Re: Control character in cookie value or attribute

2011-05-24 Thread Dan Checkoway
Hope you don't mind...I opened a ticket for this: https://issues.apache.org/bugzilla/show_bug.cgi?id=51260 Dan On Tue, May 24, 2011 at 5:28 PM, Caldarale, Charles R chuck.caldar...@unisys.com wrote: From: Christopher Schultz [mailto:ch...@christopherschultz.net] Subject: Re: Control character

Re: Control character in cookie value or attribute

2011-05-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chuck, On 5/24/2011 5:28 PM, Caldarale, Charles R wrote: From: Christopher Schultz [mailto:ch...@christopherschultz.net] Subject: Re: Control character in cookie value or attribute On 5/24/2011 5:09 PM, Dan Checkoway wrote: -} else if

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marc, On 5/24/2011 5:37 PM, Christopher Schultz wrote: Looking at the mod_jk code, it appears that the only variables that are included by using JkExtractSSL are those shown above. If you want more, you'll have to use JkEnvVar. I can confirm

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread André Warnier
Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marc, On 5/24/2011 10:56 AM, Marc Boorshtein wrote: I've setup a pretty generic httpd(2.2.19)+mod_jk to tomcat 6 on Oracle Linux 5 (CentOS 5 equiv) with SSL setup. With JkExtractSSL and the correct SSLOptions in the