On Wed, Apr 10, 2024 at 2:14 PM Mark Thomas wrote:
> ... and it might represent an information leakage vulnerability in your
> > application. Be Careful.
>
> Shall we start the flame war now on whether exposing the current version
> you are running represents a valid vulnerability or if hiding
On Mon, Apr 8, 2024 at 8:27 AM david w wrote:
If you can share a way for this to not be necessary, I'm all ears...
>
I can read computer certificates from non-privileged accounts on Windows.
(How would a user application such as a browser work otherwise?)
I'm not sure what's different on your
On Mon, Apr 8, 2024 at 3:49 AM david w wrote:
The account running the Tomcat Windows Service needs local Administrator
> rights to be able to refernce these certificate stores.
>
Fortunately, this statement is not correct.
I would definitely not recommend running the Tomcat service using a
ub.com/Bill-Stewart/ApacheTomcatSetup
It won't configure everything you're asking for, but it should get you most
of the way there.
The build process could be adjusted to accommodate 8.5, but I would think
9.x would be preferable.
Documentation and installer source:
https://github.com/Bill-Stewart/ApacheTomcatSetup
Download installer executable:
https://github.com/Bill-Stewart/ApacheTomcatSetup/releases
(Why an alternative installer for Windows? See the "Background" section in
the documentation for deta
On Tue, May 24, 2022 at 7:48 AM Mark Thomas wrote:
Nothing to worry about. Just some new logging that should probably be
> logging at debug level. I reviewed the associated PR but didn't realize
> the code was called every minute.
>
> Having just looked at the relevant part of the source code and
On Tue, May 24, 2022 at 3:20 AM Pontus Ågren wrote:
Since installing Tomcat 9.0.63 (as a service on Windows Server 2019)
> commons-daemon.log is filling up with this...
>
> [2022-05-24 09:19:27] [info] [ 6772] Service SERVICE_CONTROL_INTERROGATE
> signalled.
> [2022-05-24 09:19:27] [info] [
On Thu, Feb 10, 2022 at 11:17 AM James H. H. Lampert wrote:
I'm doing some cleanup on a customer box, removing a previous version of
> Tomcat 8.5 that I'd replaced some time ago, and I'm finding huge amounts
> of "stuff" in the "temp" directory within the Tomcat directory. Is that
> stuff Tomcat
On Wed, Feb 9, 2022 at 10:47 AM W wrote:
Thank Bill, I downloaded it and run it successfully. But when I modified
> confg/tomcat-users.xml (so I can use manager), Tomcat service stopped.
> Status became disabled. When I tried to restart the service, it told me
> that the service was marked for
s in advance.
For Windows users, I provided an alternative installer that might work
better for you:
https://github.com/Bill-Stewart/ApacheTomcatSetup
It provides a means for specifying which account you want to use to run the
Tomcat service (running as local system is definitely not recommended), a
On Fri, Jan 14, 2022 at 10:25 AM Alan F wrote:
> Interested to know your best practices on securing jdbc plain text
> passwords, in my last place they used a mechanism to encrypt all passwords.
> Is this the best method as I read some people don't recommend this. Any
> details or procs on best
Documentation and installer source:
https://github.com/Bill-Stewart/ApacheTomcatSetup
Download installer executable:
https://github.com/Bill-Stewart/ApacheTomcatSetup/releases
Documentation and installer source:
https://github.com/Bill-Stewart/ApacheTomcatSetup
Download installer executable:
https://github.com/Bill-Stewart/ApacheTomcatSetup/releases
Documentation and installer source:
https://github.com/Bill-Stewart/ApacheTomcatSetup
Download installer executable:
https://github.com/Bill-Stewart/ApacheTomcatSetup/releases
Documentation and installer source:
https://github.com/Bill-Stewart/ApacheTomcatSetup
Download installer executable:
https://github.com/Bill-Stewart/ApacheTomcatSetup/releases
Documentation and installer source:
https://github.com/Bill-Stewart/ApacheTomcatSetup
Download installer:
https://github.com/Bill-Stewart/ApacheTomcatSetup/releases
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
On Thu, Feb 25, 2021 at 2:31 AM wrote:
We are having a problem with our Single sign On config.
> When using ldap - all works well.
>
> When switiching to ldaps , the User loses to connection all together
> (Server not reachable)
>
> server.xml
>
> Good:
>
Documentation and installer source:
https://github.com/Bill-Stewart/ApacheTomcatSetup
Download installer:
https://github.com/Bill-Stewart/ApacheTomcatSetup/releases
See installer source file for release notes:
https://github.com/Bill-Stewart/ApacheTomcatSetup/blob/master/ApacheTomcat.iss
On Fri, Jan 22, 2021 at 11:49 AM Christopher Schultz wrote:
> I think the OP is a non-native English speaker. I interpreted this to
> mean "I'm hoping to get some help you you and this group."
I appreciate the less-entitled potential interpretation.
Bill
On Thu, Jan 21, 2021 at 8:43 PM Nitin Kadam wrote:
> I am from a Windows Administrator background and hence facing these
> challenges, So expecting help from you and this group.
"Expecting help from you and this group": This phrasing makes it sound
like you think you are entitled to something.
On Thu, Jan 21, 2021 at 7:19 AM Nitin Kadam wrote:
> Hi Team,
>
> The internal security team reported below as Security findings. We do not
> have anyone from a Tomcat background and for same we need to know the best
> steps to resolve this issue.
I am thinking you might need to adjust your
Documentation and installer source:
https://github.com/Bill-Stewart/ApacheTomcatSetup
Download installer:
https://github.com/Bill-Stewart/ApacheTomcatSetup/releases
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
Documentation and installer source:
https://github.com/Bill-Stewart/ApacheTomcatSetup
Download installer:
https://github.com/Bill-Stewart/ApacheTomcatSetup/releases
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
On Fri, Nov 20, 2020 at 10:59 AM jonmcalexander wrote:
> When adding an instance as a service and using a domain service account to
> run Tomcat,
> what additional user rights assignments does the service account need?
The account will need at least SeServiceLogonRight ("Log on as a
service").
Documentation and installer source:
https://github.com/Bill-Stewart/ApacheTomcatSetup
Download installer:
https://github.com/Bill-Stewart/ApacheTomcatSetup/releases
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
Documentation and installer source:
https://github.com/Bill-Stewart/ApacheTomcatSetup
Download installer:
https://github.com/Bill-Stewart/ApacheTomcatSetup/releases
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
On Tue, Aug 25, 2020 at 8:29 AM Mark Thomas wrote:
>> Enhancement requests for this should go to Commons Daemon. Should
> >> be simple enough just to dump current config.
> >
> > Done.
> >
> > https://issues.apache.org/jira/browse/DAEMON-422
>
> Done.
>
> It outputs the command to (re-)create the
On Thu, Aug 6, 2020 at 10:18 AM Christopher Schultz wrote:
The problem is that if you don't have your old command-line saved and
> handy, you have to figure out how to re-generate it. Thus, the
> feature-request for procrun to dump the current configuration to a
> script which can re-create
On Thu, Aug 6, 2020 at 10:01 AM wrote:
I like what you are showing here, but are you implying a shared
> CATALINA_HOME and CATALINA_BASE?
>
Sorry; I don't understand the question. The alternate installer doesn't set
or use the CATALINA_HOME or CATALINA_BASE environment variables; it uses
procrun
On Thu, Aug 6, 2020 at 10:18 AM Christopher Schultz wrote:
The problem is that if you don't have your old command-line saved and
> handy, you have to figure out how to re-generate it. Thus, the
> feature-request for procrun to dump the current configuration to a
> script which can re-create
/jvmoptions="-Djavax.net.ssl.trustStoreType=WINDOWS-ROOT" - tells the Java
instance running Tomcat to trust the Windows certificate store
/jvmms=2048 /jvmmx=2048 - sets the Java memory pool sizes for the service
/silent - hands-free installation
/log="c:\windows\temp\tomc
. Install using alternate installer; e.g.:
apache-tomcat-a.b.c-setup.exe /instance="FOO"
4. Update the config files, copy application server files, etc.
See the documentation - https://github.com/Bill-Stewart/ApacheTomcatSetup -
for details. (Without /instance it installs a default in
On Tue, Aug 4, 2020 at 2:18 PM Christopher Schultz wrote:
So how do you switch Java versions?
>
What do you mean? 1. Point an existing Tomcat instance to a different Java
runtime, or 2. Upgrade an existing instance of Java?
For 1:
Use the procrun GUI and change the path to the jvm.dll file.
document the settings: It
automatically stops the service, updates the files, and restarts the
service (preserving all configuration details).
https://github.com/Bill-Stewart/ApacheTomcatSetup
Bill
On Mon, Jul 27, 2020 at 12:22 AM Hans Schou wrote:
Yes I can add and change information, but how can I get the information out
> so I can use that for an upgrade to a new major version?
>
>From an elevated command line, run:
tomcat8w.exe "//ES//servicename"
This displays the GUI configuration
https://github.com/Bill-Stewart/ApacheTomcatSetup/blob/master/ApacheTomcat.iss
Bill
On Fri, Jul 24, 2020 at 2:26 AM Hans Schou wrote:
"document" manually? Like copy into a text file?
>
Yes, however you customarily do so.
> > 2. If you used Apache's Windows installer, uninstall it (unfortunately
> this removes the service and service configuration info).
>
> I use the zip file
o 9.0?
>
Simplifying upgrades on the Windows platform is one of the main reasons I
created an alternative Windows installer. Latest version here:
https://github.com/Bill-Stewart/ApacheTomcatSetup/releases
Documentation is here:
https://github.com/Bill-Stewart/ApacheTomcatSetup
Basically the
Documentation and installer source:
https://github.com/Bill-Stewart/ApacheTomcatSetup
Download installer:
https://github.com/Bill-Stewart/ApacheTomcatSetup/releases
Please see here:
https://github.com/Bill-Stewart/ApacheTomcatSetup
The Setup executable is available on the Releases tab.
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h
On Tue, Jun 9, 2020 at 9:56 AM calder wrote:
> A bit off-topic, but wanted to jump in and clear this up, as the Java
> error messages are somewhat misleading.
Thanks for the clarification.
Regards
Bill
-
To unsubscribe,
On Mon, Jun 8, 2020 at 3:54 PM BOSECKER Nancy wrote:
> In 8.5.45, I get the Java error: File not Found exception -
> Access is denied. The file exists and is readable, but must be
> being held onto by some unknown process. I've tried Windows
> process manager and resource manager, but neither of
Please see here:
https://github.com/Bill-Stewart/ApacheTomcatSetup
The Setup executable is available on the Releases tab.
Bill
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail
On Tue, Apr 28, 2020 at 10:42 PM Naga Ramesh wrote:
> Can you check the below link..
>
> https://mkyong.com/webservices/jax-ws/suncertpathbuilderexception-unable-to-find-valid-certification-path-to-requested-target/
I think you intended to reply to the mailing list (users at tomcat dot
apache
On Mon, Apr 27, 2020 at 3:31 PM calder wrote:
>
> On Mon, Apr 27, 2020 at 11:22 AM Beard, Shawn M. wrote:
>
> > I have an app running in tomcat 9 that makes an ssl call to an external
> > webservice.
> >
> > It fails with these errors in the logs:
> >
> > ERROR
Please see here:
https://github.com/Bill-Stewart/ApacheTomcatSetup
The Setup executable is available on the Releases tab.
Bill
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail
On Thu, Apr 9, 2020 at 10:54 AM Mark Thomas wrote:
> The correct SHA512 is:
> 2bb67b23dc4fd484026f1a8b382f8fe3693644b45576f835f3822d4627e1c1a5c395b054c66cb7b50a29ac591389bdd6b9d2fe42de9fdfb0f4dd38bdeb58027f
Thank you. The issue was my download had somehow gotten corrupted. I
downloaded the file
On Thu, Apr 9, 2020 at 10:41 AM Bill Stewart wrote:
>
> On Thu, Apr 9, 2020 at 10:36 AM Mark Thomas wrote:
>
> > Where did you get that zip file from?
>
> https://tomcat.apache.org/download-90.cgi
>
> (Not sure which specific mirror was used; I since navigated elsewher
On Thu, Apr 9, 2020 at 10:36 AM Mark Thomas wrote:
> Where did you get that zip file from?
https://tomcat.apache.org/download-90.cgi
(Not sure which specific mirror was used; I since navigated elsewhere)
> What is the SHA512 hash of the zip file you downloaded?
On Thu, Apr 9, 2020 at 9:08 AM Mark Thomas wrote:
> The Apache Tomcat team announces the immediate availability of Apache
> Tomcat 9.0.34.
Thank you.
FYI: The file tcnative-1.dll is missing from the
'apache-tomcat-9.0.34-windows-x64.zip' distribution.
Bill
Please see here:
https://github.com/Bill-Stewart/ApacheTomcatSetup
The Setup executable for Tomcat 9.0.31 is available on the Releases tab.
Bill
Thanks to permission from the PMC, the initial release of my
alternative Windows installer is available:
https://github.com/Bill-Stewart/ApacheTomcatSetup
I designed this to meet some specific needs in my organization.
Perhaps others might find it useful as well.
Regards,
Bill
> Mark Thomas wrote:
> Generally, Tomcat's source code is provided under the ALv2. Normally,
> the answer would be "The ALv2 gives you all the permissions you need.".
> However..., those files all contain the Tomcat logo which is a trademark
> so section 6 applies which means the ALv2 does not
On Wed, Dec 18, 2019 at 8:21 AM Mark Thomas wrote:
> No need to be a commmitter. Your message has been moderate through.
> Expect the PMC to discuss it and then respond.
Understood; thank you.
> The upgrades looked to be the most obvious feature difference. That
> raises questions about whether
Mark Thomas wrote:
> > Question 1: Do I need to get permission to use these images from ASF if
I
> > host the installer publicly, and if so how would I do that?
>
> Generally, Tomcat's source code is provided under the ALv2. Normally,
> the answer would be "The ALv2 gives you all the permissions
Greetings,
I wrote an Inno Setup 6.x script for installing Tomcat 9.x that I think has
some useful improvements over the NSIS installer:
* Supports silent install (/silent, /verysilent), upgrade, of Tomcat on
Windows
* You can configure any of the following using the installer GUI or the
56 matches
Mail list logo