Re: Help in diagnosing server unresponsiveness

2013-02-20 Thread Zoran Avtarovski
Hi Guys, It's been a while but the nature of this problem means it may be a while between crashes. But we just had a big one which hung the system and required a reboot. I have changed the tomcat options as follows inline with all the advice and material I read to be as follows: -server

Re: Help in diagnosing server unresponsiveness

2013-02-20 Thread Zoran Avtarovski
Also, I forgot to add the details of the memory histogram: Heap Classes: 3,999, Instances: 6,333,516, Kilo-Bytes: 592,665 Class Size (Kb) % size Instances % instances int[]243,29641151,0842 char[]153,148251,699,59426 java.lang.String36,70861,174,68318 byte[]29,6505120,3661

Re: Question regarding JNDIRealm - tomcat 6.0.35

2013-02-20 Thread Cédric Couralet
2013/2/19 Tanmoy Chatterjee tanmoy.chatter...@nxp.com: Hello, Technical Stack: Apache Tomcat v 6.0.35 OS : RHEL 5.3 64 bits java version 1.6.0_18 32 bits I am using Realm className=org.apache.catalina.realm.JNDIRealm for connecting to LDAP. Is there any configuration to prevent the

Re: basic auth required on https but not required on http

2013-02-20 Thread André Warnier
The standard modus operandi of this list is to not top-post (makes it more difficult to follow the logical flow of conversation). So I've copied your response and my further comments at end. Andrew Winter wrote: I work on an intranet type application. While on the local network calls are

RE: Question regarding JNDIRealm - tomcat 6.0.35

2013-02-20 Thread Tanmoy Chatterjee
Hello Cédric, The reason I want to do is as follows: I am facing the problem already expressed in https://issues.apache.org/bugzilla/show_bug.cgi?id=33774 I see that the bug status shows as Fixed, however I still get the same Issue on the Stack mentioned earlier. Hence what I have done is that

Re: basic auth required on https but not required on http

2013-02-20 Thread Andrew Winter
On Feb 20, 2013 5:13 AM, André Warnier a...@ice-sa.com wrote: The standard modus operandi of this list is to not top-post (makes it more difficult to follow the logical flow of conversation). So I've copied your response and my further comments at end. Andrew Winter wrote: I work on an

Tomcat Client Authentication

2013-02-20 Thread Maximilian-Schmidt
Hello dear Tomcat Users and Developers, I'm want my tomcat to use Client Authentication to check access of different users. I created all certs (HTTPS works) but if I connect with a Client and send my Client Cert I always get a 403 Error. I don't think it'S a problem of certificates but of the

Re: Help in diagnosing server unresponsiveness

2013-02-20 Thread Edson Richter
AFAIK, as best practice is recommended that if you have dedicated server, let -Xms as close as possible to -Xmx to avoid extra effort in releasing memory. I remember to read this information as recommended by Oracle (JRockit) and IBM (WebSphere) documentation (unfortunately, I don't have the

Re: Question regarding JNDIRealm - tomcat 6.0.35

2013-02-20 Thread Cédric Couralet
2013/2/20 Tanmoy Chatterjee tanmoy.chatter...@nxp.com: Hello Cédric, The reason I want to do is as follows: I am facing the problem already expressed in https://issues.apache.org/bugzilla/show_bug.cgi?id=33774 I see that the bug status shows as Fixed, however I still get the same Issue on

Re: Tomcat Client Authentication

2013-02-20 Thread Mark Thomas
On 20/02/2013 12:01, maximilian-schm...@telekom.de wrote: And this is my tomcat-users.xml (Maximilian Schmidt is the CN of my client-certificate): role rolename=admin / role rolename=secureconn/ user username=Maximilian Schmidt password=123456789 roles=secureconn,

AW: Tomcat Client Authentication

2013-02-20 Thread Maximilian-Schmidt
Hello Mark, thank you for the quick answer! Could you explain, how I can change how to derive the user name from the cert? I don't have a DN in my certificate (Only E, CN, OU, O, L, S, C). This would be very great. Mit freundlichen Grüßen, Maximilian Schmidt

Re: Tomcat Client Authentication

2013-02-20 Thread Cédric Couralet
2013/2/20 maximilian-schm...@telekom.de: Hello Mark, thank you for the quick answer! Could you explain, how I can change how to derive the user name from the cert? I don't have a DN in my certificate (Only E, CN, OU, O, L, S, C). This would be very great. Hello, The different E, CN,...

AW: Tomcat Client Authentication

2013-02-20 Thread Maximilian-Schmidt
Hello Cedric, And look at the first line which could be Owner or Subject (I only have a french version at the moment which says Propriétaire:) (I created another Client-Cert) I did it and it shows me: CN=User03, OU=Any, O=Company, L=City, ST=Something, C=DE So I wrote: user

Re: Tomcat Client Authentication

2013-02-20 Thread Cédric Couralet
2013/2/20 maximilian-schm...@telekom.de: Hello Cedric, And look at the first line which could be Owner or Subject (I only have a french version at the moment which says Propriétaire:) (I created another Client-Cert) I did it and it shows me: CN=User03, OU=Any, O=Company, L=City,

RE: Tomcat Client Authentication

2013-02-20 Thread Maximilian-Schmidt
I solved my problem, I changed my web.xml to the following: security-constraint web-resource-collection web-resource-namePartNos/web-resource-name url-pattern/TNR/*/url-pattern http-methodGET/http-method http-methodPOST/http-method

RE: Question regarding JNDIRealm - tomcat 6.0.35

2013-02-20 Thread Tanmoy Chatterjee
Thanks Cédric, I will try this and let you know. Once Ldap closes the connection from it's end, tomcat indeed keeps on trying and finally establishes a new connectionbut the time spent in retrying is too high (more than 4-5 minutes) and in that time...user cannot loginthe login page

Re: Question regarding JNDIRealm - tomcat 6.0.35

2013-02-20 Thread Cédric Couralet
2013/2/20 Tanmoy Chatterjee tanmoy.chatter...@nxp.com: Thanks Cédric, I will try this and let you know. Once Ldap closes the connection from it's end, tomcat indeed keeps on trying and finally establishes a new connectionbut the time spent in retrying is too high (more than 4-5 minutes)

GenericPrincipal - ERRATA

2013-02-20 Thread Giulio Quaresima
I am very sorry, this morning I got a ClassCastException GenericPrincipal MyUserPrincipal, but now all works fine, and I don't know why. When I reproduce the problem I encountered earler, I will notice you. Bye

Troubles with JNDI data source configuration in Tomcat6 - mentioning H2 and Jetty

2013-02-20 Thread Alexander Dümont
Hello, my name is Alexander Dümont and i have some troubles configuring a JNDI datasource for Tomcat6. Im sorry, if i can't find the right words, English is not my first language and this is my first shot asking others. I have two active configurations for the same java software project

Re: Help in diagnosing server unresponsiveness

2013-02-20 Thread Daniel Mikusa
On Feb 20, 2013, at 3:52 AM, Zoran Avtarovski wrote: Hi Guys, It's been a while but the nature of this problem means it may be a while between crashes. But we just had a big one which hung the system and required a reboot. Can you elaborate more on this? What OS are you running? What do

Re: basic auth required on https but not required on http

2013-02-20 Thread Andrew Winter
On Wed, Feb 20, 2013 at 5:13 AM, André Warnier a...@ice-sa.com wrote: The standard modus operandi of this list is to not top-post (makes it more difficult to follow the logical flow of conversation). So I've copied your response and my further comments at end. Andrew Winter wrote: I

Re: basic auth required on https but not required on http

2013-02-20 Thread André Warnier
Andrew Winter wrote: On Wed, Feb 20, 2013 at 5:13 AM, André Warnier a...@ice-sa.com wrote: The standard modus operandi of this list is to not top-post (makes it more difficult to follow the logical flow of conversation). So I've copied your response and my further comments at end. Andrew

Re: No javax.servlet.error.query_string [servlet spec clarification]

2013-02-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Martin, On 2/18/13 3:32 PM, Martin Grigorov wrote: This is rather a question about Servlet specification. Is there a reason why there is no javax.servlet.error.query_string ? That text does not appear anywhere in the Java Servlet Specification,

Set context of web app to / tomcat7

2013-02-20 Thread Smith, Mitchell
Hi I am trying to set the context of the standard jira web app to / ; so my url would be http://hostname:8080/ and this would load the jira application. I have read the documentation, and found a couple of posts on this (

Re: Set context of web app to / tomcat7

2013-02-20 Thread André Warnier
Smith, Mitchell wrote: Hi I am trying to set the context of the standard jira web app to / ; so my url would be http://hostname:8080/ and this would load the jira application. I have read the documentation, and found a couple of posts on this (

RE: Set context of web app to / tomcat7

2013-02-20 Thread Caldarale, Charles R
From: Smith, Mitchell [mailto:mitchell.sm...@cwc.com] Subject: Set context of web app to / tomcat7 I am trying to set the context of the standard jira web app to / ; so my url would be http://hostname:8080/ and this would load the jira application. Simply change the name of the webapp (.war

Re: GenericPrincipal . catalina 6.0.24

2013-02-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Giulio, On 2/20/13 8:58 AM, Giulio Quaresima wrote: I have a little [question] about the default Realm implementations which comes with Tomcat. In particular, I refer to JAASRealm. I developed a JAAS LoginModule which populate the Subject

simple authentication question

2013-02-20 Thread André Warnier
Hi. In relation to a couple of recent posts, I have a naive question : In a servlet, to retrieve the authenticated user-id (if any), I use String userName = request.getRemoteUser(); Now, suppose I wanted to create a servlet filter which (under certain conditions), would force the current

Re: simple authentication question

2013-02-20 Thread Mark Thomas
On 20/02/2013 21:20, André Warnier wrote: Hi. In relation to a couple of recent posts, I have a naive question : In a servlet, to retrieve the authenticated user-id (if any), I use String userName = request.getRemoteUser(); Now, suppose I wanted to create a servlet filter which (under

[OT] Tomcat upgrade 7.0.35 - 7.0.37, SSL/TLS handshake failure

2013-02-20 Thread Ognjen Blagojevic
Hi, I just wanted to report a problem with JSSE TLS/SSL handshake that became obvious only after I upgraded Tomcat from 7.0.35 to 7.0.37. Server: Tomcat 7.0.37, BIO Connector, Oracle JDK 1.7.0_xx (e.g. _09) Client: Java TLS/SSL client, e.g. [1], Oracle JDK 1.6.0_xx (e.g. _35) Exception is:

Re: simple authentication question

2013-02-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 André, On 2/20/13 4:20 PM, André Warnier wrote: In relation to a couple of recent posts, I have a naive question : In a servlet, to retrieve the authenticated user-id (if any), I use String userName = request.getRemoteUser(); Now,

Re: basic auth required on https but not required on http

2013-02-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 André, On 2/20/13 1:40 PM, André Warnier wrote: Andrew Winter wrote: On Wed, Feb 20, 2013 at 5:13 AM, André Warnier a...@ice-sa.com wrote: Okay, I have this resolved, now. I went with the FORM authentication method and created a servlet that