Re: Question about thread's "keep alive time" value in Embed Tomcat 8.5 in Spring Boot 1.5

2019-11-05 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Roy, On 11/4/19 18:22, Roy Zhang wrote: > Dear Christopher, > > Really appreciate ur quick response! Sorry for late reply due to > personal affairs... > I haven't read the code in detail, but I'm guessing that the thread pool > uses a qu

Re: How to stop logging 401 unauthorized errors

2019-11-05 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Dean, On 11/5/19 16:52, Dean Del Ponte wrote: > I'm using Tomcat 9.0.26 on Ubuntu. > > I would like to configure Tomcat to NOT log any 401 - unauthorized > errors. > > What's the best way to do this? What kind of logging are you trying to suppres

Re: Generating passwords digests for 9.0.27

2019-11-05 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Pawel, On 11/5/19 03:33, Mark Thomas wrote: > On 05/11/2019 00:52, Pawel Veselov wrote: >> Hello. >> >> I'm doing something where I need to generate a password for a >> tomcat user that is authenticated using >> org.apache.catalina.realm.UserDataba

How to stop logging 401 unauthorized errors

2019-11-05 Thread Dean Del Ponte
I'm using Tomcat 9.0.26 on Ubuntu. I would like to configure Tomcat to NOT log any 401 - unauthorized errors. What's the best way to do this? Thanks!

Re: Roadmap for Tomcat and Jakarta EE

2019-11-05 Thread Campbell, Lance
Thanks. On 11/5/19, 1:33 PM, "Rémy Maucherat" wrote: On Tue, Nov 5, 2019 at 8:19 PM Campbell, Lance wrote: > Is there an article describing a general roadmap for Tomcat and Jakarta EE > that I could read? > http://tomcat.apache.org/presentations.html The lates

Re: Roadmap for Tomcat and Jakarta EE

2019-11-05 Thread Rémy Maucherat
On Tue, Nov 5, 2019 at 8:19 PM Campbell, Lance wrote: > Is there an article describing a general roadmap for Tomcat and Jakarta EE > that I could read? > http://tomcat.apache.org/presentations.html The latest "State of the Cat" presentation from ApacheCon EU looks into the Jakarta stuff. Rémy

Roadmap for Tomcat and Jakarta EE

2019-11-05 Thread Campbell, Lance
Is there an article describing a general roadmap for Tomcat and Jakarta EE that I could read? Thanks, LANCE CAMPBELL Software Architect Web Services Public Affairs Contact the Webto

Re: Help requested to fix the tomcat vulnerability

2019-11-05 Thread Magosányi Árpád
Hi, I suggest to follow this guide: https://tomcat.apache.org/tomcat-7.0-doc/ssl-howto.html On 11/5/19 2:29 PM, thulasiram k wrote: > Hi, > > we have installed tomcat 7.0.94 on windows 2016 and no SSL enabled. But > while qualys scan we found the below vulnerability. can you guide how can > we fi

Help requested to fix the tomcat vulnerability

2019-11-05 Thread thulasiram k
Hi, we have installed tomcat 7.0.94 on windows 2016 and no SSL enabled. But while qualys scan we found the below vulnerability. can you guide how can we fix it. 1) QID : 86763 - Web Server Uses Plain Text Basic Authentication Impact : Using Readable Clear Text can help eavesdropping and thereby c

Re: Intermittent JSP Caching/Compiling Issue while under load

2019-11-05 Thread Tim K
On Tue, Nov 5, 2019 at 3:01 AM Mark Thomas wrote: > This looks like some sort of concurrency issue. In your test > environment, how likely is it that: > - there are concurrent (or at least very close together) changes to a > JSP > - that there are concurrent requests for a modified JSP? In my t

Re: Generating passwords digests for 9.0.27

2019-11-05 Thread Mark Thomas
On 05/11/2019 00:52, Pawel Veselov wrote: > Hello. > > I'm doing something where I need to generate a password for a tomcat user > that is authenticated using org.apache.catalina.realm.UserDatabaseRealm > with "sha" digest, the user database is > produced by org.apache.catalina.users.MemoryUserDat

Re: Intermittent JSP Caching/Compiling Issue while under load

2019-11-05 Thread Mark Thomas
On 05/11/2019 02:51, Tim K wrote: > The cached JSP actually survives a tomcat restart because the work > directory still contains the cached JSP content even though the timestamp > of the class/java files appear to match that of the latest JSP file's > content. Ah. That is useful new informatio