Re: Adding a custom configurations file globally and at web-app level for Apache Tomcat

2016-02-11 Thread Chiranga Alwis
Hi Chris, There are some custom configurations which we intend to add to this config file. We have a custom made single-sign-on valve based on SAML 2.0 which has plenty of configuration properties plus there are some custom classloading code which I am not that entirely proficient about. We

tomcat jndi ldap userSearchAsUser not used

2016-02-11 Thread Sascha Monteiro
Hi, When I configure this, it does not bind with the user (checked with wireshark on the ad server) (only when I use userPattern, but I cannot seem to use that as it needs a user for both bind and search) I don't want to have a username/password of a delegated user) Realm

Async servlet timeout behaviour

2016-02-11 Thread Thomas Boniface
Hi, I'm using async servlet with a timeout configured to 300ms but I can observe in live environnement some big differences with the actual applied timeout 700ms or more for instance. I was wondering how are triggered onTimeout events to AsyncListeners, is there a limited number of thread

Adding a custom configurations file globally and at web-app level for Apache Tomcat

2016-02-11 Thread Chiranga Alwis
Hi, I have been working on adding a custom configurations file which follow a pattern similar to the web.xml, i.e. the file can be defined globally but several predefined configuration properties can be overridden at web-app level. For this purpose, my initial plan was to load the content in

Re: Async servlet timeout behaviour

2016-02-11 Thread Thomas Boniface
2016-02-11 12:16 GMT+01:00 Mark Thomas : > On 11/02/2016 11:07, Thomas Boniface wrote: > > Hi, > > > > I'm using async servlet with a timeout configured to 300ms but I can > > observe in live environnement some big differences with the actual > applied > > timeout 700ms or more

Re: Does Tomcat need a non-ssl connector?

2016-02-11 Thread msh
On Thu, Feb 11, 2016 at 07:19:10PM +, Mark Thomas wrote: > On 11/02/2016 19:17, m...@kimwana.com wrote: > > If I want to run Tomcat using ssl only do I still need to set up a non-ssl > > connector and redirect the port? > > That depends if you want Tomcat to respond at all if a user tries to

Re: Tomcat Failure Modes

2016-02-11 Thread David kerber
On 2/11/2016 2:20 PM, Edward Hart (c) wrote: Q1: Can Tomcat be configured to 'roll back' if a patch update causes a TC failure on a production server? Q2: Can TC be configured to fail to a known safe state in the event of server failure during operation? I am developing a Security Technical

SSL between modcluster and tomcat 7

2016-02-11 Thread Qadeer Khan
I am looking for any good instructions on configuring ssl between mod_cluster and Tomcat 7 including creating certs. Greatly appreciate any help Thanks Qadeer - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For

Re: Does Tomcat need a non-ssl connector?

2016-02-11 Thread Mark Thomas
On 11/02/2016 19:17, m...@kimwana.com wrote: > If I want to run Tomcat using ssl only do I still need to set up a non-ssl > connector and redirect the port? That depends if you want Tomcat to respond at all if a user tries to use a non-TLS connection. Mark

Re: Why session on manager screen not updated?

2016-02-11 Thread Mark Thomas
On 11/02/2016 19:24, Qadeer Khan wrote: > There is a running application on tomcat server but the session is always a > zero on manager ui screen. > > For other applications like manager, host manager and sample we have session > updated but not for one application. > > The application is

Does Tomcat need a non-ssl connector?

2016-02-11 Thread msh
If I want to run Tomcat using ssl only do I still need to set up a non-ssl connector and redirect the port? - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail:

Tomcat Failure Modes

2016-02-11 Thread Edward Hart (c)
Q1: Can Tomcat be configured to 'roll back' if a patch update causes a TC failure on a production server? Q2: Can TC be configured to fail to a known safe state in the event of server failure during operation? I am developing a Security Technical Implement Guide (STIG) for Tomcat. A STIG is

Why session on manager screen not updated?

2016-02-11 Thread Qadeer Khan
There is a running application on tomcat server but the session is always a zero on manager ui screen. For other applications like manager, host manager and sample we have session updated but not for one application. The application is jackrabbit which is a messaging application. Any

Re: Tomcat Failure Modes

2016-02-11 Thread Mark Thomas
On 11/02/2016 19:20, Edward Hart (c) wrote: > Q1: Can Tomcat be configured to 'roll back' if a patch update causes a TC > failure on a production server? The question makes no sense since there is no such thing as a patch update for Tomcat. > Q2: Can TC be configured to fail to a known safe

Re: Async servlet timeout behaviour

2016-02-11 Thread Mark Thomas
On 11/02/2016 11:07, Thomas Boniface wrote: > Hi, > > I'm using async servlet with a timeout configured to 300ms but I can > observe in live environnement some big differences with the actual applied > timeout 700ms or more for instance. > > I was wondering how are triggered onTimeout events to

Re: Async servlet timeout behaviour

2016-02-11 Thread tomcat
On 11.02.2016 12:07, Thomas Boniface wrote: Hi, I'm using async servlet with a timeout configured to 300ms naive question : is that not awfully short, if this relates to some over-the-Internet communication ? but I can observe in live environnement some big differences with the actual

Re: 'javax.xml.parsers.FactoryConfigurationError: Provider for class javax.xml.parsers.DocumentBuilderFactory cannot be created' for Tomcat Valve

2016-02-11 Thread Chiranga Alwis
Hi Chris, I will check if it works by sticking to the default. On Mon, Feb 8, 2016 at 8:21 PM, Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Chiranga, > > On 2/7/16 2:27 AM, Chiranga Alwis wrote: > > I think OpenSAML seems to be

Re: Async servlet timeout behaviour

2016-02-11 Thread Thomas Boniface
2016-02-11 12:31 GMT+01:00 André Warnier (tomcat) : > On 11.02.2016 12:07, Thomas Boniface wrote: > >> Hi, >> >> I'm using async servlet with a timeout configured to 300ms >> > > naive question : is that not awfully short, if this relates to some > over-the-Internet communication

Re: Async servlet timeout behaviour

2016-02-11 Thread Mark Thomas
On 11/02/2016 11:44, Thomas Boniface wrote: > 2016-02-11 12:16 GMT+01:00 Mark Thomas : >> On 11/02/2016 11:07, Thomas Boniface wrote: >>> I also wonder what can be done or not while in the onTimeout thread, can >> I >>> still do some asynchronous operation (retrieving content

Re: Is there a way for code running on Tomcat 7+ to determine the URL of the Web App it's running under?

2016-02-11 Thread Mark Thomas
On 11/02/2016 22:56, Dougherty, Gregory T., M.S. wrote: > I would like to have a jar file in tomcat/lib that can be called from any of > the running web apps. I need for the code in the jar to behave differently > depending on which web app called it. It is not in this case possible for > the

Is there a way for code running on Tomcat 7+ to determine the URL of the Web App it's running under?

2016-02-11 Thread Dougherty, Gregory T., M.S.
I would like to have a jar file in tomcat/lib that can be called from any of the running web apps. I need for the code in the jar to behave differently depending on which web app called it. It is not in this case possible for the code to “trust” the caller to tell it the URL of the caller.

Re: NIO Thread Behavior With Http Connections

2016-02-11 Thread Mark Thomas
On 11/02/2016 21:54, Bart Wood wrote: > Will the NIO connector reuse a thread for multiple http connections in > flight? No. Once a thread enters the filter chain it is dedicated to that request until it exists the filter chain (plus some Tomcat internal processing). > For example, an nio thread

Re: NIO Thread Behavior With Http Connections

2016-02-11 Thread Bart Wood
Thanks Mark. I normally see around 20 active http connections and around 10 active NIO threads. Why isn't there a 1-to-1 ratio between active http connections and active nio threads? What is happening when a connection is "active" but it isn't being processed via the filter chain? On Thu, Feb

NIO Thread Behavior With Http Connections

2016-02-11 Thread Bart Wood
Will the NIO connector reuse a thread for multiple http connections in flight? For example, an nio thread begins processing a request for an http connection. The thread begins blocking on a slow database socket read. Will Tomcat let the thread be reused in flight for other http connections? If

Re: NIO Thread Behavior With Http Connections

2016-02-11 Thread Mark Thomas
On 11/02/2016 22:11, Bart Wood wrote: > Thanks Mark. > > I normally see around 20 active http connections and around 10 active NIO > threads. Why isn't there a 1-to-1 ratio between active http connections > and active nio threads? What is happening when a connection is "active" > but it isn't

RE: [PossibleSpam] Re: Tomcat Rewrite Valve

2016-02-11 Thread Joe Aldrich
>Am 10.02.2016 um 15:23 schrieb Rémy Maucherat: >> 2016-02-10 15:06 GMT+01:00 Joe Aldrich : >> Am 29.01.2016 15:34, schrieb Joe Aldrich: > Hello, > > I am using Tomcat 8.0.28 on Windows 10 and am having a problem with > the Rewrite Value. I must

Re: Adding a custom configurations file globally and at web-app level for Apache Tomcat

2016-02-11 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chiranga, On 2/11/16 6:45 AM, Chiranga Alwis wrote: > Hi, > > I have been working on adding a custom configurations file which > follow a pattern similar to the web.xml, i.e. the file can be > defined globally but several predefined configuration

Re: [PossibleSpam] Re: Tomcat Rewrite Valve

2016-02-11 Thread Felix Schumacher
Am 10.02.2016 um 15:23 schrieb Rémy Maucherat: 2016-02-10 15:06 GMT+01:00 Joe Aldrich : Am 29.01.2016 15:34, schrieb Joe Aldrich: Hello, I am using Tomcat 8.0.28 on Windows 10 and am having a problem with the Rewrite Value. I must include the escaped form of an

Re: ssl config questions

2016-02-11 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Msh, On 2/10/16 7:04 PM, m...@kimwana.com wrote: > I have the fillowing problem to solve for a job interview. Hmm. On the one hand, its YOUR job interview. On the other hand, if you don't know this answer, you need to be able to find out the answer,

ApacheCon NA 2016 - Important Dates!!!

2016-02-11 Thread Melissa Warnkin
Hello everyone! I hope this email finds you well.  I hope everyone is as excited about ApacheCon as I am! I'd like to remind you all of a couple of important dates, as well as ask for your assistance in spreading the word! Please use your social media platform(s) to get the word out! The more

Re: ssl config questions

2016-02-11 Thread msh
On Thu, Feb 11, 2016 at 12:28:40PM -0500, Christopher Schultz wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Msh, > > On 2/10/16 7:04 PM, m...@kimwana.com wrote: > > I have the fillowing problem to solve for a job interview. Fillowing. Heh! Thanks for the help. > You have two