Re: web.xml

2017-09-05 Thread M. Manna
Is a GET/POST call you are using to get the xml content? Have you reproduced this yourself. Or is it from that security report? On 5 Sep 2017 23:17, "Alejandro Vargas M." < alejandro.var...@kymsolutions.com> wrote: Good afternoon, I have a website on a client, and they ran a vulnerability

Re: web.xml

2017-09-05 Thread tomcat
On 06.09.2017 00:16, Alejandro Vargas M. wrote: Good afternoon, I have a website on a client, and they ran a vulnerability test, and it throws a vulnerability that any user can see web.xml from a web browser, how can I hide to see web.xml or any other file from the browser? 1) if web.xml is

Re: ISAPI and IIS 10 Logging Issue

2017-09-05 Thread tomcat
On 05.09.2017 22:42, Thomas, Michael wrote: -- On 01.09.2017 22:21, Thomas, Michael wrote: All, When using the ISAPI Handler Mapping in IIS 10 on Windows 2016, the IIS logs are not identifying the URI Stem (cs-uri-stem) and

web.xml

2017-09-05 Thread Alejandro Vargas M.
Good afternoon, I have a website on a client, and they ran a vulnerability test, and it throws a vulnerability that any user can see web.xml from a web browser, how can I hide to see web.xml or any other file from the browser? Thanks. -- Alejandro Vargas Mayorga /*Gerente Desarrollo

RE: ISAPI and IIS 10 Logging Issue

2017-09-05 Thread Thomas, Michael
-- On 01.09.2017 22:21, Thomas, Michael wrote: > All, > > When using the ISAPI Handler Mapping in IIS 10 on Windows 2016, the IIS logs > are not identifying the URI Stem (cs-uri-stem) and URI Query (cs-uri-query) > as expected.

Re: 8.5 - multiple host configuration question

2017-09-05 Thread Chris Cheshire
On Tue, Sep 5, 2017 at 2:07 PM, Christopher Schultz wrote: > If I were king, I'd set things up like this: > > 1. Tomcat is installed in /usr/local/tomcat (or > /usr/local/tomcat-x.y.z, or /opt/whatever, etc.). Looks like I do need to adjust default permissions on

Re: Does Tomcat scan static file directories on startup? If so, how does one prevent it?

2017-09-05 Thread Mark Thomas
On 05/09/2017 21:11, Meta Schemer wrote: > We're using Apache Tomcat/7.0.64 and have recently switched to using a > cloud-based file system for our static assets (which consists of millions > of files). The problem we now face is that the startup time for our app has > now gone through the roof

Does Tomcat scan static file directories on startup? If so, how does one prevent it?

2017-09-05 Thread Meta Schemer
We're using Apache Tomcat/7.0.64 and have recently switched to using a cloud-based file system for our static assets (which consists of millions of files). The problem we now face is that the startup time for our app has now gone through the roof (many hours). File system snooping has revealed

Re: 8.5 - multiple host configuration question

2017-09-05 Thread Chris Cheshire
On Tue, Sep 5, 2017 at 2:07 PM, Christopher Schultz wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Chris, > > On 9/5/17 10:54 AM, Chris Cheshire wrote: >> I am migrating from 7 (yum repo installation) to 8.5 (direct from >> apache) and looking to

Re: TomcatCon London 2017

2017-09-05 Thread Mark Thomas
Hi All, With TomcatCon London 2017 less than 3 weeks away I'm delighted to be able to say that we have sold just over 50% of the tickets. We are looking at options to increase capacity but that will depend on room availability at the venue. Based on the information we have at the moment, if

Re: Tomcat misuse of Servlet 3.0's asynchronous support

2017-09-05 Thread Yasser Zamani
Thanks a lot Mark! Yes I knew these and before tested that a tomcat with 400 max threads "scalabilitaly is equal" to a tomcat with 200 max threads but with servlet 3's async API including application's thread pool with size 200. However so far I thought Oracle's docs are like standards and

Re: 8.5 - multiple host configuration question

2017-09-05 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Chris, On 9/5/17 10:54 AM, Chris Cheshire wrote: > I am migrating from 7 (yum repo installation) to 8.5 (direct from > apache) and looking to improve configuration where possible. > > Currently (on *nix) I have a machine that runs sandboxes for

8.5 - multiple host configuration question

2017-09-05 Thread Chris Cheshire
I am migrating from 7 (yum repo installation) to 8.5 (direct from apache) and looking to improve configuration where possible. Currently (on *nix) I have a machine that runs sandboxes for my domain, call them sb1.dom.com and sb2.dom.com. They each have their own (system) user and in tomcat's

Re: Page cannot be displayed , TOMCAT installation on windows 2012 R2

2017-09-05 Thread tomcat
On 05.09.2017 12:38, ford royal wrote: HI team, I have installed Tomcat on windows 2012 r2 as a Windows Service ? From where did you get/download this tomcat ? , but I get page cannot be displayed when I try to open http:\\localhost:8080 The correct path is probably http://localhost:8080

Page cannot be displayed , TOMCAT installation on windows 2012 R2

2017-09-05 Thread ford royal
HI team, I have installed Tomcat on windows 2012 r2 , but I get page cannot be displayed when I try to open http:\\localhost:8080I have given Java path also but still no.Java 8 update 144  tomcat is 8.5.20 please guide  Best Regards, Thank you, Rao

Re: Tomcat misuse of Servlet 3.0's asynchronous support

2017-09-05 Thread Mark Thomas
On 03/09/17 09:01, Yasser Zamani wrote: > Hi there, > > At [1] we read: > >> Web containers in application servers normally use a server thread >> per client request. Under heavy load conditions, containers need a >> large amount of threads to serve all the client requests. >>