Re: Clustering and session persistence across restarts?

2011-11-08 Thread Pid *
On 7 Nov 2011, at 22:23, Al DiVenuti aloviciou...@gmail.com wrote: Hello, I am currently configuring a sandbox development environment with two clustered Tomcat 6.0.32 instances running on the same Windows XP SP3 (32-bit) hosts. I have a question regarding whether or not the Manager

problem with loading Bouncy Castle

2011-11-08 Thread Jan Vávra
Hello, I have a problem with loading bouncy castle. My code snippet is: int position = Security.addProvider(new BouncyCastleProvider()); KeyStore store = KeyStore.getInstance(PKCS12, BC); In the application log I have message that BouncyCastleProvider is already loaded (position== -1). But

Re: problem with loading Bouncy Castle

2011-11-08 Thread Pid
On 08/11/2011 08:47, Jan Vávra wrote: Hello, I have a problem with loading bouncy castle. My code snippet is: int position = Security.addProvider(new BouncyCastleProvider()); KeyStore store = KeyStore.getInstance(PKCS12, BC); In the application log I have message that

Re: problem with loading Bouncy Castle

2011-11-08 Thread Marvin Addison
Crypto providers need to be installed into the JRE extension directory (e.g. $JRE_HOME/lib/ext) and an entry must be added to $JRE_HOME/lib/security/java.security to install the provider. For example: security.provider.5=org.bouncycastle.jce.provider.BouncyCastleProvider Note the 5 above; each

Re: Catalina.policy file for security option

2011-11-08 Thread Petr Hracek
Yes the tomcat should be run as a back-end server (AJP) with apache2-2.2.21. I have add to the catalina.policy following permission: permission javax.management.MBeanServerPermission createMBeanServer; permission javax.management.MBeamPermission com.javamonitor.mbeans.*,*;

Re: Catalina.policy file for security option

2011-11-08 Thread Petr Hracek
When I have set CATALINA_OPTS to: linux:/var/log/tomcat5/base # echo $CATALINA_OPTS -Djava.security.debug=all linux:/var/log/tomcat5/base # in log I see: domain 1 ProtectionDomain CodeSource=CodeSource, url=file:/usr/share/tomcat5/bin/bootstrap.jar, no certificates

mod_jk - Browser displays HTML Sourcecode

2011-11-08 Thread Alexander Diedler
Hello, Something goes wrong. I have a Apache 2.2.1 with mod_jk and a Tomcat 6.0.32. So if I connect to the website http://www.test.de/ everything is ok, site was displayed. If I try to access http://www.test.de/xyz i get the source code from the site it should be displayed, but it was not

Re: mod_jk - Browser displays HTML Sourcecode

2011-11-08 Thread André Warnier
Alexander Diedler wrote: Hello, Something goes wrong. I have a Apache 2.2.1 with mod_jk and a Tomcat 6.0.32. So if I connect to the website http://www.test.de/ everything is ok, site was displayed. If I try to access http://www.test.de/xyz i get the source code from the site it should be

AW: mod_jk - Browser displays HTML Sourcecode

2011-11-08 Thread Alexander Diedler
Hello That most probably means that the URL mappings for mod_jk are not correct, and that Apache httpd is serving that content directly. Look at (or show here) the JkMount lines that should be somewhere in your Apache configuration. Was attached in the post: JkMount /* loadbalancer So everything

Re: AW: mod_jk - Browser displays HTML Sourcecode

2011-11-08 Thread Pid
On 08/11/2011 15:12, Alexander Diedler wrote: Hello That most probably means that the URL mappings for mod_jk are not correct, and that Apache httpd is serving that content directly. Look at (or show here) the JkMount lines that should be somewhere in your Apache configuration. Was

Re: o Tomcat alter the page encoding for JSP file created via Netbeans 7.01

2011-11-08 Thread Pid
On 05/11/2011 17:57, Kiran Badi wrote: Hi All, I am aware this might be offtopic but being a silent member to this list, I think this list can give me better suggestion than doing a google.So posting here. Unfortunately it was on someone else's topic. In future please don't just edit a

AW: AW: mod_jk - Browser displays HTML Sourcecode

2011-11-08 Thread Alexander Diedler
Ok, But would be the better way (of life) for this? HTTPD vhost.conf: VirtualHost 192.168.100.40:80 ServerAdmin xxx@yyy DocumentRoot D:/www/apps/app1/ROOT Directory D:/www/apps/app1/ROOT Options Indexes FollowSymLinks AllowOverride None

Re: AW: mod_jk - Browser displays HTML Sourcecode

2011-11-08 Thread André Warnier
Hi. Pid wrote: On 08/11/2011 15:12, Alexander Diedler wrote: Hello That most probably means that the URL mappings for mod_jk are not correct, and that Apache httpd is serving that content directly. Look at (or show here) the JkMount lines that should be somewhere in your Apache

Re: AW: mod_jk - Browser displays HTML Sourcecode

2011-11-08 Thread Pid
On 08/11/2011 15:54, André Warnier wrote: But obviously it isn't, so there's something wrong with this JkMount. Jumping ahead, that bit comes next when the OP's sorted their layout out... ;) p -- [key:62590808] signature.asc Description: OpenPGP digital signature

Re: AW: mod_jk - Browser displays HTML Sourcecode

2011-11-08 Thread André Warnier
Pid wrote: On 08/11/2011 15:54, André Warnier wrote: But obviously it isn't, so there's something wrong with this JkMount. Jumping ahead, that bit comes next when the OP's sorted their layout out... ;) Jumping back, the misdirected DocumentRoot issue should not be an immediate security

Re: AW: mod_jk - Browser displays HTML Sourcecode

2011-11-08 Thread André Warnier
Pid wrote: On 08/11/2011 15:54, André Warnier wrote: But obviously it isn't, so there's something wrong with this JkMount. Jumping ahead, that bit comes next when the OP's sorted their layout out... ;) Ok, had a second look at the Tomcat config, and I think you're right. there's some work

[SECURITY] CVE-2011-3376 Apache Tomcat - Privilege Escalation via Manager app

2011-11-08 Thread Mark Thomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 CVE-2011-3376 Apache Tomcat - Privilege Escalation via Manager app Severity: Low Vendor: The Apache Software Foundation Versions Affected: - - Tomcat 7.0.0 to 7.0.21 Description: This issue only affects environments running web applications that

Re: Session expiration - browser -Web application

2011-11-08 Thread Léa Massiot
@Terence : Thank you for your answer. Actually, I extracted the Java code from the JSP and put it in a TLD so that the code is cleaner and more manageable. Best regards, -- Léa -- View this message in context:

Re: making security constraints configureable

2011-11-08 Thread Terence M. Bandoian
On 1:59 PM, André Warnier wrote: Terence M. Bandoian wrote: On 1:59 PM, Konstantin Kolinko wrote: 2011/11/3 Leon Rosenbergrosenberg.l...@gmail.com: I have a situation where an application is accessable from outside in staging and production environment, but shouldn't be open for public in

Tomcat 7, Servlet 3.0, and Non-Blocking

2011-11-08 Thread Matthew Tyson
Hey Guys, It has been my assumption that Tomcat 7's comet implementation (ie, asyncSupported=true), will automatically use NIO processing. Is that not true? Do I need to set the connector to be org.apache.coyote.http11.Http11NioProtocol explicitly? Thanks, Matt

Re: SSL connect to APR fails - bad version

2011-11-08 Thread Kobe
Tomcat is also a servlet container and may be used to host web services. That is the case here. the web service client is hosted in a BEA weblogic server and attempts to connect to the web service over SSL. /Kobe awarnier wrote: Kobe wrote: I build tcnative and apr from src with exist ver

Re: Tomcat 7, Servlet 3.0, and Non-Blocking

2011-11-08 Thread Mark Thomas
On 08/11/2011 20:15, Matthew Tyson wrote: Hey Guys, It has been my assumption that Tomcat 7's comet implementation (ie, asyncSupported=true), will automatically use NIO processing. Comet != Servlet 3.0 async Is that not true? Yes, that is not true. Do I need to set the connector to be

Re: SSL connect to APR fails - bad version

2011-11-08 Thread Kobe
Actually, whether it be webaccess or webservice access, i not follow your confusion. pleas explain why this is wrong. /Kobe Kobe wrote: Tomcat is also a servlet container and may be used to host web services. That is the case here. the web service client is hosted in a BEA weblogic server

Re: SSL connect to APR fails - bad version

2011-11-08 Thread Kobe
thank for your help. here is more info on my setup: tomcat version 6.0.29. And tomcat is startin clean; no ererors while loading. if I use tls1, I get same error as before (bad version). when i test with openssl s_client, I check line 293 of s3_pkt.c. it say -- if ((version8) !=

Re: SSL connect to APR fails - bad version

2011-11-08 Thread Kobe
many thanks again for your time and help. Problem is: same openssl version working on another server and successfuly setup SSLv3 connections with same client. So I am thinking, there is misconfigure on this server. i would like to find why this server respond with SSLv2 ClientHello instead of

tomcat doesnt want to start

2011-11-08 Thread Christian Röttger
Hello list, i updated my ubuntu server to tomcat 6.0.24. (a kernel update was also included) After a reboot tomcat doesn't want to start. The status is not running and when i want to start it, it always says: /etc/init.d/tomcat6 start * Starting Tomcat servlet engine tomcat6

Re: HTTP Status 404 - /manager/html

2011-11-08 Thread Kaushal Shriyan
On Tue, Nov 8, 2011 at 10:29 AM, Caldarale, Charles R chuck.caldar...@unisys.com wrote: From: Kaushal Shriyan [mailto:kaushalshri...@gmail.com] Subject: Re: HTTP Status 404 - /manager/html I did downloaded it from http://archive.apache.org/dist/tomcat/tomcat-7/v7.0.19/bin/ Good.  For

Re: Tomcat 7, Servlet 3.0, and Non-Blocking

2011-11-08 Thread Matthew Tyson
I guess what I'm asking is if I just start using the Servlet 3.0 support for suspending requests out of the box, will it be a thread blocking implementation I'm using? HTTP APR/native is blocking as well, correct? So if I want to use Servlet 3.0 async (eg, a call to request.startAsync), and have

Re: o Tomcat alter the page encoding for JSP file created via Netbeans 7.01

2011-11-08 Thread Kiran Badi
Got it Pid.Thanks. On 11/8/2011 8:53 PM, Pid wrote: On 05/11/2011 17:57, Kiran Badi wrote: Hi All, I am aware this might be offtopic but being a silent member to this list, I think this list can give me better suggestion than doing a google.So posting here. Unfortunately it was on someone

Trouble running TC8 trunk

2011-11-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 All, With current trunk HEAD and a fresh: $ ant clean clean-depend download-compile deploy When I attempt to start Tomcat, I get this error (this is 100% of my catalina.out): java.lang.NoClassDefFoundError:

Re: Tomcat 7, Servlet 3.0, and Non-Blocking

2011-11-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Matthew, On 11/8/11 4:43 PM, Matthew Tyson wrote: So if I want to use Servlet 3.0 async (eg, a call to request.startAsync), and have it be handled without blocking IO, I need to use the NIO connector? To repeat Mark's reply: On Tue, Nov 8, 2011

Re: SSL connect to APR fails - bad version

2011-11-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kobe, On 11/8/11 2:01 PM, Kobe wrote: thank for your help. here is more info on my setup: tomcat version 6.0.29. And tomcat is startin clean; no ererors while loading. if I use tls1, I get same error as before (bad version). when i test with

Re: Trouble running TC8 trunk

2011-11-08 Thread Mark Eggers
- Original Message - From: Christopher Schultz ch...@christopherschultz.net To: Tomcat Users List users@tomcat.apache.org Cc: Sent: Tuesday, November 8, 2011 5:37 PM Subject: Trouble running TC8 trunk -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 All, With current trunk

Re: Trouble running TC8 trunk

2011-11-08 Thread Konstantin Kolinko
2011/11/9 Christopher Schultz ch...@christopherschultz.net: \ With current trunk HEAD and a fresh: $ ant clean clean-depend download-compile deploy When I attempt to start Tomcat, I get this error (this is 100% of my catalina.out): java.lang.NoClassDefFoundError:

RE: tomcat doesnt want to start

2011-11-08 Thread Caldarale, Charles R
From: Christian Röttger [mailto:chris.roett...@uni-muenster.de] Subject: tomcat doesnt want to start i updated my ubuntu server to tomcat 6.0.24. (a kernel update was also included) After a reboot tomcat doesn't want to start. Can anyone provide some help how to get it running again?

Re: tomcat doesnt want to start

2011-11-08 Thread Daniel Baktiar
Probably you should instead do this: $ cat /var/log/tomcat6 (I suspect it's the log file, not a tomcat6 folder). --- daniel baktiar On Wed, Nov 9, 2011 at 07:08, Christian Röttger chris.roett...@uni-muenster.de wrote: Hello list, i updated my ubuntu server to tomcat 6.0.24. (a kernel

Re: SSL connect to APR fails - bad version

2011-11-08 Thread Kobe
thank you Chris. I know the server (APR) is sending SSLv2 ClientHello because ssl debugs show it: // from ${CATALINA_HOME}/bin/setenv.sh: export JAVA_OPTS=... -Djavax.net.debug=ssl //... # sh ${CATALINA_HOME}/bin/startup.sh // from client $ openssl s_client -connect

Re: tomcat doesnt want to start

2011-11-08 Thread Brian Burch
On 09/11/11 15:46, Daniel Baktiar wrote: Probably you should instead do this: $ cat /var/log/tomcat6 (I suspect it's the log file, not a tomcat6 folder). No, it is because of permissions on the /var/log/tomcat6 directory... you cannot cd to that directory as an ordinary user. so these will

how to connect to datasource

2011-11-08 Thread spike@12
Hi, I have setup my application using with tomcat and it is working fine. But when I have restarted my DB machine, my application is not working. If I have restart my tomcat server then it is working fine. may I know, how to connect to datasource automatically if my DB machine is restarted?? Is

RE: SSL connect to APR fails - bad version

2011-11-08 Thread Adamus, Steven J.
Hi Kobe; I can see why it looks like the server is sending the message, but I think there's some reference that's being missed. The SSL debug should show Client messages and Server messages. One thing that's certain, the SSLv2 ClientHello is a client message sent by the client. This

Re: how to connect to datasource

2011-11-08 Thread Pid
On 09/11/2011 07:00, spike@12 wrote: Hi, I have setup my application using with tomcat and it is working fine. But when I have restarted my DB machine, my application is not working. If I have restart my tomcat server then it is working fine. may I know, how to connect to datasource