RE: Operation not permitted errors [EXTERNAL]

2024-02-07 Thread Beard, Shawn
Right Technology. Simple and Secure. -Original Message- From: Christopher Schultz Sent: Tuesday, February 6, 2024 4:18 PM To: users@tomcat.apache.org Subject: Re: Operation not permitted errors [EXTERNAL] ** CAUTION: External message Shawn, On 2/6/24 13:52, Beard, Shawn wrote: > An appli

Operation not permitted errors

2024-02-06 Thread Beard, Shawn
An application we have running in Tomcat 9 using Java 8 is throwing this error when trying to create a file: java.nio.file.FileSystemException /path/to/filesystem/202311WEB/040389461310_08_37_246.jpg: Operation not permitted at

RE: DB2 database locks [EXTERNAL]

2022-10-18 Thread Beard, Shawn
Make changes to your mpm config in Apache. It sounds like there is increased traffic. It could be that you reach the max then it holds all those connections. There are a lot of online resources that have Apache Webserver recommended mpm settings and models to use for high traffic systems. Also

RE: enabling ssl debug on tomcat [EXTERNAL]

2022-06-06 Thread Beard, Shawn
Shawn, > Am 06.06.2022 um 22:49 schrieb Beard, Shawn : > > Im adding this -Djavax.net.debug=ssl:handshake:verbose > SSLSocketClientWithClientAuth > I assume that you copied this from the SSL-Samples App (where the class file is SSLSocketClientWithClientAuth). You have to add o

enabling ssl debug on tomcat

2022-06-06 Thread Beard, Shawn
Im adding this -Djavax.net.debug=ssl:handshake:verbose SSLSocketClientWithClientAuth To the java options of Tomcat, however the SSLSocketClientWithClientAuth is causing tomcat not start saying it cant find the SSLSocketClientWithClientAuth class. I need to debug socket issues on a ssl client

RE: Question regarding Tomcat and Apache HTTPD Mod-proxy over SSL [EXTERNAL]

2022-06-02 Thread Beard, Shawn
I've never done this. But I think it would go something like this: To make tomcat take advantages of Client Authentication, require three certificates. i.e A Server Certificate for Tomcat, Client Certificate for the browser/Apache and Certificate of the CA which will sign both the above

RE: [SECURITY] CVE-2021-42340 Apache Tomcat DoS [EXTERNAL]

2021-12-06 Thread Beard, Shawn
It has to do with not releasing http websocket connections properly. So its both. We just had to upgrade to 9.0.53 on everything because of this. ​ Shawn Beard• Sr. Systems Engineer Middleware Engineering [cid:image852868.png@BE68D2F7.0F762FA2] 3840 109th Street , Urbandale

RE: Potential Memory Leak with StandardManager [EXTERNAL]

2021-10-21 Thread Beard, Shawn
ternal message On Mon, Oct 18, 2021 at 2:51 PM Beard, Shawn wrote: > Update to Tomcat 9.0.54. This could be a known security bug that is > fixed in this version. > > https://urldefense.com/v3/__https://tomcat.apache.org/security-9.html* > Fixed_in_Apache_Tomcat_9.0.

RE: Potential Memory Leak with StandardManager [EXTERNAL]

2021-10-18 Thread Beard, Shawn
Update to Tomcat 9.0.54. This could be a known security bug that is fixed in this version. https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.54 ​ Shawn Beard• Sr. Systems Engineer Middleware Engineering [cid:image624605.png@3C243DDD.ADE52D22] 3840 109th Street

RE: jdbc connction pool issues [EXTERNAL]

2020-12-18 Thread Beard, Shawn
ership Unleashing Business Potential -Original Message- From: Christopher Schultz Sent: Friday, December 18, 2020 7:22 AM To: Tomcat Users List Subject: Re: jdbc connction pool issues [EXTERNAL] ** CAUTION: External message Shawn, On 12/17/20 14:21, Beard, Shawn wrote: > Well

RE: jdbc connction pool issues [EXTERNAL]

2020-12-17 Thread Beard, Shawn
ubject: Re: jdbc connction pool issues [EXTERNAL] ** CAUTION: External message Shawn, On 12/17/20 11:04, Beard, Shawn wrote: > I was able to fix this. I added this to the config: > > factory="org.apache.tomcat.jdbc.pool.DataSourceFactory" > > I was then seeing maxConnecti

RE: jdbc connction pool issues [EXTERNAL]

2020-12-17 Thread Beard, Shawn
sbe...@wrberkley.com<mailto:sbe...@wrberkley.com> -Original Message----- From: Beard, Shawn Sent: Wednesday, December 16, 2020 7:43 AM To: Tomcat Users List Subject: RE: jdbc connction pool issues [EXTERNAL] ** CAUTION: External message Yes same version of tomcat 9.0.31,

RE: jdbc connction pool issues [EXTERNAL]

2020-12-16 Thread Beard, Shawn
<mailto:sbe...@wrberkley.com> -Original Message- From: Phil Steitz Sent: Tuesday, December 15, 2020 3:37 PM To: users@tomcat.apache.org Subject: Re: jdbc connction pool issues [EXTERNAL] ** CAUTION: External message On 12/15/20 1:35 PM, Beard, Shawn wrote: > No int

RE: jdbc connction pool issues [EXTERNAL]

2020-12-15 Thread Beard, Shawn
hose other Tomcat servers is there a initialSize defined? Jim -Original Message- From: Beard, Shawn Sent: Tuesday, December 15, 2020 2:49 PM To: Tomcat Users List Subject: RE: jdbc connction pool issues [EXTERNAL] But wouldn’t maxActive mean the connection pool has a max of 50 conenctions? O

RE: jdbc connction pool issues [EXTERNAL]

2020-12-15 Thread Beard, Shawn
cat-9.0-doc/jdbc-pool.html__;!!Li8W9_Um1Taa!vJGrxr7yc86joO5r6QoNstpipfempGFqrYRe3_NyAIGNs-LenmBWhtjn1fRiAOex$ On those other Tomcat servers is there a initialSize defined? Jim -Original Message----- From: Beard, Shawn Sent: Tuesday, December 15, 2020 2:49 PM To: Tomcat Users List Subject: RE

RE: jdbc connction pool issues [EXTERNAL]

2020-12-15 Thread Beard, Shawn
at can be allocated from this pool at the same time. The default value is 100 It would make sense that 8 connections would be 80% utilized. I would try replacing maxActive with initialSize and seeing how that works for you. Good luck! - Jim From: Beard, Shawn Sent: Tuesday, December 15, 2020 2

RE: jdbc connction pool issues [EXTERNAL]

2020-12-15 Thread Beard, Shawn
works for you. Good luck! - Jim From: Beard, Shawn Sent: Tuesday, December 15, 2020 2:12 PM To: Tomcat Users List Subject: jdbc connction pool issues CAUTION EXTERNAL EMAIL: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the

jdbc connction pool issues

2020-12-15 Thread Beard, Shawn
We have this jdbc connection pool set up: However we are getting this error: Resource Pool Limit Reached Time 12/15/20 11:48:00 AM Summary JDBC Connection Pool Catalina:class=javax.sql.DataSource,context=/XX,host=X,name="jdbc/DataSource",type=DataSource has reached 80% limit.

RE: Tomcat SecurityListener [EXTERNAL]

2020-10-13 Thread Beard, Shawn
users@tomcat.apache.org Subject: Re: Tomcat SecurityListener [EXTERNAL] Shawn, On 10/12/2020 12:59 PM, Beard, Shawn wrote: > Tomcat 9.0.31.0 loads a org.apache.catalina.security.SecurityListener by > default in the catalina.sh file. > > This SecurityListener also sets the UMASK of files

Tomcat SecurityListener

2020-10-12 Thread Beard, Shawn
Tomcat 9.0.31.0 loads a org.apache.catalina.security.SecurityListener by default in the catalina.sh file. This SecurityListener also sets the UMASK of files to 0027. This has the effect of any file tomcat creates or the app running in tomcat creates with permissions or -rw-r- This is

RE: tomcat warnings. [EXTERNAL]

2020-09-17 Thread Beard, Shawn
warnings. [EXTERNAL] ** CAUTION: External message On Thu, Sep 17, 2020, 16:07 Beard, Shawn wrote: > Yes its 9.0.31.0 > The last 0 makes me think that you have installed Tomcat by using your OS package manager. Try with stock Tomcat downloaded from Apache servers. > [mwuser@usilg

RE: tomcat warnings. [EXTERNAL]

2020-09-17 Thread Beard, Shawn
@tomcat.apache.org Subject: Re: tomcat warnings. [EXTERNAL] ** CAUTION: External message On 16/09/2020 20:45, Beard, Shawn wrote: > protocol="HTTP/1.1" >connectionTimeout="2" >Server=" " &

RE: tomcat warnings. [EXTERNAL]

2020-09-16 Thread Beard, Shawn
Shawn Beard Sr. Systems Engineer BTS +1-515-564-2528 -Original Message- From: Mark Thomas Sent: Wednesday, September 16, 2020 2:40 PM To: users@tomcat.apache.org Subject: Re: tomcat warnings. [EXTERNAL] ** CAUTION: External message On 16/09/2020 19:46, Beard, Shawn wrote: >

tomcat warnings.

2020-09-16 Thread Beard, Shawn
I’m getting these in the log: 16-Sep-2020 14:39:42.909 WARNING [main] org.apache.catalina.startup.SetAllPropertiesRule.begin [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'compressibleMimeType' to

RE: SSL error [EXTERNAL]

2020-06-26 Thread Beard, Shawn M.
- From: Beard, Shawn M. Sent: Friday, June 26, 2020 11:57 AM To: Tomcat Users List Subject: RE: SSL error [EXTERNAL] The code is calling a new webservice. It has godaddy as its ca signer. It was getting the error before I added those java options. Those java options were my attempt to resolve

RE: SSL error [EXTERNAL]

2020-06-26 Thread Beard, Shawn M.
Beard Sr. Systems Engineer BTS +1-515-564-2528 -Original Message- From: calder Sent: Friday, June 26, 2020 11:45 AM To: Tomcat Users List Subject: Re: SSL error [EXTERNAL] ** CAUTION: External message In Fri, Jun 26, 2020, 10:37 Beard, Shawn M. wrote: > We are running tomcat-7.0

SSL error

2020-06-26 Thread Beard, Shawn M.
We are running tomcat-7.0.52(old I know) and java 1.7.0_80. When the app makes calls to an external webservice. It keeps throwing this error: javax.net.ssl.SSLException : javax.net.ssl.SSLException: java.lang.RuntimeException: Unexpected error:

RE: Changing the Java using by Tomcat [EXTERNAL]

2020-05-06 Thread Beard, Shawn M.
No we do this and use AdoptOpen JDK. If you are setting JAVA_HOME in any tomcat config like a setenv file or catalina file make sure to change those to point to the install of AdoptOpenJDK. Shawn Beard Sr. Systems Engineer BTS +1-515-564-2528 -Original Message- From: Reddy, Tippana

RE: Upgrading from 9.0.20 to 9.0.34 AJP connector issue [EXTERNAL]

2020-04-30 Thread Beard, Shawn M.
My workers is identical to yours and it works. Here is our connector config that is working. Might want to try removing address="127.0.0.1" and/or tomcatAuthentication="false" The fix for the Ghostcat vulnerability created some config challenges on the ajp protocol. I'm pretty sure

RE: Apache tomcat 9.0.6 Compatibility with Adopt openJDK [EXTERNAL]

2020-04-28 Thread Beard, Shawn M.
We are running the Adopt Open JDK 8 and 11 builds on tomcat 9 with no issues. Shawn Beard Sr. Systems Engineer BTS +1-515-564-2528 -Original Message- From: Martin Grigorov Sent: Tuesday, April 28, 2020 12:56 AM To: Tomcat Users List Subject: Re: Apache tomcat 9.0.6 Compatibility with

RE: tomcat and ssl [EXTERNAL]

2020-04-27 Thread Beard, Shawn M.
To: users@tomcat.apache.org Subject: Re: tomcat and ssl [EXTERNAL] ** CAUTION: External message On 27/04/2020 17:29, Beard, Shawn M. wrote: > This is a 3rd party app so can't do that. We need to configure tomcat to have > apps use a trust store just like any other java container. That

RE: tomcat and ssl [EXTERNAL]

2020-04-27 Thread Beard, Shawn M.
requests are normally using /lib/security/cacerts as truststore: Check if root (intermediate) certificate exists for targeted endpoint. BR, Johann Von: Beard, Shawn M. Gesendet: Montag, 27. April 2020 18:22 An: users@tomcat.apache.org Betreff: tomcat and ssl I have an app running in tomcat 9

RE: tomcat and ssl [EXTERNAL]

2020-04-27 Thread Beard, Shawn M.
@tomcat.apache.org Subject: Re: tomcat and ssl [EXTERNAL] ** CAUTION: External message On 27/04/2020 17:21, Beard, Shawn M. wrote: > I have an app running in tomcat 9 that makes an ssl call to an > external webservice. > > > > It fails with these errors in t

tomcat and ssl

2020-04-27 Thread Beard, Shawn M.
I have an app running in tomcat 9 that makes an ssl call to an external webservice. It fails with these errors in the logs: ERROR javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path