websocket connection problem

2012-11-27 Thread YinZhang
hi all: I am using apache-tomcat-7.0.32, the use of websocket to make a chat, I encountered a problem, when three people at the same time online chat, when suddenly a man unplug cable out of chat, server is unable to determine the connection is disconnected, how the server know unplugged

Re: malware found the tomcat 6.0.29

2012-11-27 Thread Mark Thomas
On 27/11/2012 07:21, Mohan Kumar G wrote: We have found the malware installed on the tomcat version 6.0.29 on two of the servers.The both servers have a war file (Tomcatmanagxesaxsas.war) that installed several java script files to the Tomcat webserver that allow for remote access over the

Re: Cannot redirect to html

2012-11-27 Thread Mark Thomas
On 27/11/2012 07:45, bas...@obninsk.com wrote: Hi. I’ve got a file, containg html and locating in relative directory. When i return it in a jsp page using out.write(relative path of the file), then everything is ok. But when i return it using response.sendRedirect(relative path of the

Re: tomcat6 with crl doesn't load

2012-11-27 Thread Will Nordmeyer
Dan, I tried that - first attempt jstack threw exceptions and I got nothing. So I killed the tomcat, took the crlFile back out and ran, got a nice jstack showing everything running smoothly. Shut tomcat down, put the crlFile line back and started up again. This time, tomcat6 doesn't hang, but

Re: tomcat6 with crl doesn't load

2012-11-27 Thread Daniel Mikusa
On Nov 27, 2012, at 9:17 AM, Will Nordmeyer wrote: Dan, I tried that - first attempt jstack threw exceptions and I got nothing. So I killed the tomcat, took the crlFile back out and ran, got a nice jstack showing everything running smoothly. Shut tomcat down, put the crlFile line back

Re: tomcat6 with crl doesn't load

2012-11-27 Thread Will Nordmeyer
OK, I upped it to 1024G and it still crashed. I tried loading with a 70M file (the root CA, and the CA directly responsible for my cert). That seemed to load, but when I tried going to a probe application that I've got installed - to get memory data, etc. It prompts me for my cert, but then

Shutdown.sh doesn't. At least not reliably. (7.0.25)

2012-11-27 Thread James Lampert
Running Tomcat on various AS/400s (V6R1 or later OS), we've found that shutdown.sh doesn't reliably shut down the server, and we frequently have to shut it down forcibly (i.e., finding CATALINA on a WRKACTJOB, and giving it a 4 with OPTION(*IMMED)). Port 8009 does appear to be open before we

RE: Shutdown.sh doesn't. At least not reliably. (7.0.25)

2012-11-27 Thread Caldarale, Charles R
From: James Lampert [mailto:jam...@touchtonecorp.com] Subject: Shutdown.sh doesn't. At least not reliably. (7.0.25) Or where I should look for indications of what it could be? Can you take a thread dump of the Tomcat process after shutdown.sh has been used?

RE: Shutdown.sh doesn't. At least not reliably. (7.0.25)

2012-11-27 Thread Carrillo, Dan
If you take a thread dump you'll be able to see the state of both Tomcat's threads and your own application's threads to see where it's hanging. -Original Message- From: James Lampert [mailto:jam...@touchtonecorp.com] Sent: Tuesday, November 27, 2012 9:10 AM To: Tomcat Users List

Re: tomcat6 with crl doesn't load

2012-11-27 Thread Daniel Mikusa
On Nov 27, 2012, at 9:55 AM, Will Nordmeyer wrote: OK, I upped it to 1024G and it still crashed. I tried loading with a 70M file (the root CA, and the CA directly responsible for my cert). That seemed to load, but when I tried going to a probe application that I've got installed - to get

Re: tomcat6 with crl doesn't load

2012-11-27 Thread Konstantin Kolinko
2012/11/27 Will Nordmeyer quark...@gmail.com: OK, I upped it to 1024G and it still crashed. I tried loading with a 70M file (the root CA, and the CA directly responsible for my cert). That seemed to load, but when I tried going to a probe application that I've got installed - to get memory

Re: tomcat6 with crl doesn't load

2012-11-27 Thread Will Nordmeyer
On Tue, Nov 27, 2012 at 12:24 PM, Daniel Mikusa dmik...@vmware.com wrote: On Nov 27, 2012, at 9:55 AM, Will Nordmeyer wrote: I have a self signed server certificate - and the user certs have no association/connection to the server cert. I apologize, but I'm not exactly sure what you are

Re: Shutdown.sh doesn't. At least not reliably. (7.0.25)

2012-11-27 Thread Konstantin Kolinko
2012/11/27 James Lampert jam...@touchtonecorp.com: Running Tomcat on various AS/400s (V6R1 or later OS), we've found that shutdown.sh doesn't reliably shut down the server, and we frequently have to shut it down forcibly (i.e., finding CATALINA on a WRKACTJOB, and giving it a 4 with

Re: tomcat6 with crl doesn't load

2012-11-27 Thread Will Nordmeyer
On Tue, Nov 27, 2012 at 12:48 PM, Konstantin Kolinko knst.koli...@gmail.com wrote: 2012/11/27 Will Nordmeyer quark...@gmail.com: OK, I upped it to 1024G and it still crashed. I tried loading with a 70M file (the root CA, and the CA directly responsible for my cert). That seemed to load, but

Re: tomcat6 with crl doesn't load

2012-11-27 Thread Mark H. Wood
On Tue, Nov 27, 2012 at 12:56:38PM -0500, Will Nordmeyer wrote: My problem comes when I attempt to implement Certificate Revocation List checking. The Government has a root certificate and about 20-30 different intermediate certificate authorities that could have issued the user certificate.

Re: Shutdown.sh doesn't. At least not reliably. (7.0.25)

2012-11-27 Thread James Lampert
Konstantin Kolinko wrote: 2. Shutdown command is sent to port 8005. (8009 is a port used by AJP protocol connector). Thanks. That at least clears up a misconception on my part. Researching it cleared up another misconception on my part: that the Catalina job directly owns the ports.

Re: Using the Tomcat Native Library can only connect over ipv6 But not over ipv4

2012-11-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, On 11/26/12 3:14 PM, André Warnier wrote: Also, I don't know if this is really relevant here, but I seem to remember a parameter or attribute somewhere named preferIPv4Stack/preferIPv6Stack. That is for configuring the Java networking

Re: Using the Tomcat Native Library can only connect over ipv6 But not over ipv4

2012-11-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Harm-Jan, On 11/26/12 3:16 PM, Zorro wrote: I have now this in my server.xml: For IPv4: Connector port=80 protocol=HTTP/1.1 connectionTimeout=2 redirectPort=8443 address=0.0.0.0 / For IPv6: Connector port=80 protocol=HTTP/1.1

Re: Shutdown.sh doesn't. At least not reliably. (7.0.25)

2012-11-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 James, On 11/27/12 1:13 PM, James Lampert wrote: Konstantin Kolinko wrote: 2. Shutdown command is sent to port 8005. (8009 is a port used by AJP protocol connector). Thanks. That at least clears up a misconception on my part. Researching it

Re: Tomcat with multiple domains

2012-11-27 Thread Paul van Hoven
Thanks for the answer. I followed the tutorial you propose ( http://wiki.apache.org/tomcat/TomcatDevelopmentVirtualHosts ). But it is still not working. Here is my new configuration server.xml Host name=2nddomain.com appBase=/opt/apache-tomcat-7.0.32/2nddomain.com unpackWARs=true autoDeploy=true

Re: Tomcat with multiple domains

2012-11-27 Thread Konstantin Kolinko
2012/11/28 Paul van Hoven paul.van.ho...@googlemail.com: I edited the /etc/hosts file and added the following entries: 88.84.140.88www.2nddomain.com:8080 88.84.140.88www.1rstdomain.com:8080 Domain Name Service resolves host names. A port number is not part of a host name. The above

Re: Using the Tomcat Native Library can only connect over ipv6 But not over ipv4

2012-11-27 Thread Zorro
Op 27-11-2012 20:00, Christopher Schultz schreef: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Harm-Jan, On 11/26/12 3:16 PM, Zorro wrote: I have now this in my server.xml: For IPv4: Connector port=80 protocol=HTTP/1.1 connectionTimeout=2 redirectPort=8443 address=0.0.0.0 / For IPv6:

RE: Tomcat with multiple domains

2012-11-27 Thread Jeffrey Janner
-Original Message- From: Paul van Hoven [mailto:paul.van.ho...@googlemail.com] Sent: Tuesday, November 27, 2012 2:13 PM To: Tomcat Users List Subject: Re: Tomcat with multiple domains Thanks for the answer. I followed the tutorial you propose (

RE: Using the Tomcat Native Library can only connect over ipv6 But not over ipv4

2012-11-27 Thread Jeffrey Janner
-Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Tuesday, November 27, 2012 1:01 PM To: Tomcat Users List Subject: Re: Using the Tomcat Native Library can only connect over ipv6 But not over ipv4 -BEGIN PGP SIGNED MESSAGE- Hash:

Re: Shutdown.sh doesn't. At least not reliably. (7.0.25)

2012-11-27 Thread James Lampert
Christopher Schultz wrote: Maybe use DMPJVM? Sorry for the through-Google link [PDF]: THANKS! Never heard of such a thing until you brought it to my attention, and it's enough of an eye-opener that I would have gladly forgiven even a through-LMGTFY link. DMPJVM looks like it may be just

Re: Using the Tomcat Native Library can only connect over ipv6 But not over ipv4

2012-11-27 Thread André Warnier
Zorro wrote: Op 27-11-2012 20:00, Christopher Schultz schreef: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Harm-Jan, On 11/26/12 3:16 PM, Zorro wrote: I have now this in my server.xml: For IPv4: Connector port=80 protocol=HTTP/1.1 connectionTimeout=2 redirectPort=8443 address=0.0.0.0 /

Re: tomcat6 with crl doesn't load

2012-11-27 Thread Daniel Mikusa
On Nov 27, 2012, at 12:56 PM, Will Nordmeyer wrote: On Tue, Nov 27, 2012 at 12:24 PM, Daniel Mikusa dmik...@vmware.com wrote: On Nov 27, 2012, at 9:55 AM, Will Nordmeyer wrote: I have a self signed server certificate - and the user certs have no association/connection to the server cert.

Nagios plugin script for use with JMXProxy

2012-11-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 All, I have developed a Perl script that can be used with Nagios to check on a Tomcat instance via the manager's JMXProxyServlet. Someone asked me to publish it, which I'm happy to do. I'm just wondering what the best thing to do is. I see several

Re: Shutdown.sh doesn't. At least not reliably. (7.0.25)

2012-11-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 James, On 11/27/12 3:56 PM, James Lampert wrote: Christopher Schultz wrote: Maybe use DMPJVM? Sorry for the through-Google link [PDF]: THANKS! Never heard of such a thing until you brought it to my attention, and it's enough of an eye-opener

Re: Using the Tomcat Native Library can only connect over ipv6 But not over ipv4

2012-11-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Harm-Jan, On 11/27/12 3:32 PM, Zorro wrote: Op 27-11-2012 20:00, Christopher Schultz schreef: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Harm-Jan, On 11/26/12 3:16 PM, Zorro wrote: I have now this in my server.xml: For IPv4: Connector

Re: Nagios plugin script for use with JMXProxy

2012-11-27 Thread Mark Eggers
On 11/27/2012 2:37 PM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 All, I have developed a Perl script that can be used with Nagios to check on a Tomcat instance via the manager's JMXProxyServlet. Someone asked me to publish it, which I'm happy to do. I'm just

Re: malware found the tomcat 6.0.29

2012-11-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mark, On 11/27/12 4:23 AM, Mark Thomas wrote: On 27/11/2012 07:21, Mohan Kumar G wrote: We have found the malware installed on the tomcat version 6.0.29 on two of the servers.The both servers have a war file (Tomcatmanagxesaxsas.war) that

Re: Nagios plugin script for use with JMXProxy

2012-11-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mark, On 11/27/12 6:02 PM, Mark Eggers wrote: On 11/27/2012 2:37 PM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 All, I have developed a Perl script that can be used with Nagios to check on a Tomcat instance via

Re: Nagios plugin script for use with JMXProxy

2012-11-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mark, On 11/27/12 6:02 PM, Mark Eggers wrote: First of all, thank you for this. I've been toying with a similar idea (and plugging the entire mess into the Icenga remoting script), but I've not had the chance.

Re: Tomcat ssl vulnerability CVE-2009-3555

2012-11-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hermes, On 11/26/12 3:36 PM, Hermes Flying wrote: Hi, I am running Tomcat 5.35 and I got a report that it is vulnerable to SSL client renegotiation DoS. You notein your docs that this is not a Tomcat issue per se, but JSSE issue. Please note

Re: Nagios plugin script for use with JMXProxy

2012-11-27 Thread Mark Eggers
On 11/27/2012 3:14 PM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mark, On 11/27/12 6:02 PM, Mark Eggers wrote: On 11/27/2012 2:37 PM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 All, I have developed a Perl script that can be used

Re: tomcat 6.0.35 with java 7 ssl proxy request body failed

2012-11-27 Thread Johanes Soetanto
On 26 November 2012 18:22, Mark Thomas ma...@apache.org wrote: Johanes Soetanto otnat...@gmail.com wrote: Hi all, I am wondering whether there is a known issue with running Tomcat 6.0.35 with Java 7 ? None I can think of. I see lots of (502)Unknown error 502: proxy: pass request body

Re: Cannot redirect to html

2012-11-27 Thread basilk
I’ve got a file, containg html and locating in relative directory. When i return it in a jsp page using out.write(relative path of the file), then everything is ok. But when i return it using response.sendRedirect(relative path of the file), i’ve got a 404 error. What seems to be a problem?