Tomcat Manager 403's with LDAP Realm

2024-02-17 Thread Dan McLaughlin
related based on my understanding of how the filter works. If someone knows the specific packages, I might want to bump up the logging on; that would probably be most helpful at this point. Cheers! Dan -- *NOTICE:* This e-mail message and all attachments transmitted

Re: Session Cookie Logging

2024-02-01 Thread Dan McLaughlin
a chance to look at the logic in the Apache code, but this would be a helpful addition and would have saved a lot of time trying to debug where the value came from. -- Thanks, Dan On Thu, Feb 1, 2024 at 10:31 AM Mark Thomas wrote: > > > On 27/01/2024 14:38, Dan McLaughlin wrote: >

Re: Session Cookie Logging

2024-01-27 Thread Dan McLaughlin
require a // path of '/' but the servlet spec uses an empty string if (contextPath.length() == 0) { contextPath = "/"; } } -- Thanks, Dan On Sat, Jan 27, 2024 at 12:12 AM Mark Thomas wrote: > On 26/01/2024 22:22, Dan McLaughlin wrote: > > Hey Konstan

Re: Session Cookie Logging

2024-01-26 Thread Dan McLaughlin
t defaults to /. Anyway, I'd have to do quite a bit more testing before I'd feel comfortable opening a bug, but there looks to be changes in the areas related to Sessions and Cookies lately, so I'm guessing at this point that one of those changes introduced a behavior change. -- Thanks, Dan On F

Re: Session Cookie Logging

2024-01-25 Thread Dan McLaughlin
the default JSESSIONID using the context path as the cookie path. At least it does in my local Docker environment. Anyway, I'd appreciate any pointers if anyone else has any ideas. My next step is to try rolling back the Tomcat versions to find when the behavior changed. -- Thanks, Dan On Thu, Jan

Re: Session Cookie Logging

2024-01-25 Thread Dan McLaughlin
don't care. So we are moving to using __Secure- instead. -- Thanks, Dan On Thu, Jan 25, 2024 at 9:29 PM Dan McLaughlin wrote: > I think I just figured it out. __Host- doesn't allow for setting a path to > anything other than /. > > It would have been nice if Tomcat would have log

Re: Session Cookie Logging

2024-01-25 Thread Dan McLaughlin
I think I just figured it out. __Host- doesn't allow for setting a path to anything other than /. It would have been nice if Tomcat would have logged an error instead of silently failing, or forcing the path to / and not saying anything. That would have saved me a ton of time. -- Thanks, Dan

Re: Session Cookie Logging

2024-01-25 Thread Dan McLaughlin
Which one wins the catalina-base/conf/web.xml or the Webapp/WEB-INF/web.xml. I just noticed that the one under catalina base contains: 30 Or do they get merged? Thanks, Dan On Thu, Jan 25, 2024 at 7:00 PM Dan McLaughlin wrote: > Does anyone know what class we would crank the log le

Session Cookie Logging

2024-01-25 Thread Dan McLaughlin
on. -- Thanks, Dan -- *NOTICE:* This e-mail message and all attachments transmitted with it are for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, ​or distribution is strictly prohibited

Re: Is the HTTP/2 Rapid Reset Exploit still possible on 2.4.58?

2023-11-13 Thread Dan McLaughlin
Yep, wrong list. Sorry. On Mon, Nov 13, 2023 at 4:37 PM Chuck Caldarale wrote: > You may have the wrong mailing list - this one is for Tomcat, but your > query seems to be solely about Apache httpd. > > - Chuck > > > > > On Nov 13, 2023, at 16:

Is the HTTP/2 Rapid Reset Exploit still possible on 2.4.58?

2023-11-13 Thread Dan McLaughlin
=1, ready=0, out_buffer=0 Thanks! Dan -- *NOTICE:* This e-mail message and all attachments transmitted with it are for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, ​or distribution

Re: Angular -> Apache 2.4.57 -> Tomcat 10.1.10 over HTTP2

2023-07-13 Thread Dan McLaughlin
to what's going on without me having to create a way to reproduce it for a bug report I'd be happy to do so, but for now, I have to get back to working on other things on my plate. -- Thanks, Dan On Wed, Jul 12, 2023 at 10:56 PM Dan McLaughlin wrote: > > Hey Mark, > > I found a wo

Re: Angular -> Apache 2.4.57 -> Tomcat 10.1.10 over HTTP2

2023-07-12 Thread Dan McLaughlin
-- Thanks, Dan On Wed, Jul 12, 2023 at 9:58 PM Dan McLaughlin wrote: > > Well, the deeper I get into the problem, the more complicated it gets. I > thought I was onto something, thinking the size of the JSON might have > something to do with it, so I created a Python scr

Re: Angular -> Apache 2.4.57 -> Tomcat 10.1.10 over HTTP2

2023-07-12 Thread Dan McLaughlin
war, then start a Tomcat and Apache docker image..and I can't reproduce the issue. My worst fear was that I was dealing with something potentially Windows-specific, back to the drawing board. -- Thanks, Dan On Wed, Jul 12, 2023 at 4:05 PM Dan McLaughlin wrote: > Mark, > > I'm working

Re: Angular -> Apache 2.4.57 -> Tomcat 10.1.10 over HTTP2

2023-07-12 Thread Dan McLaughlin
quite large, it fails. Before I spend more time on this test case, can you think of any setting in Tomcat or mod_proxy_http2 that might cause the POST of the larger JSON to fail? -- Thanks, Dan On Wed, Jul 12, 2023 at 2:36 PM Mark Thomas wrote: > > 12 Jul 2023 13:40:18 Dan McLaughlin :

Re: Angular -> Apache 2.4.57 -> Tomcat 10.1.10 over HTTP2

2023-07-12 Thread Dan McLaughlin
, Dan On Wed, Jul 12, 2023 at 6:00 AM Dan McLaughlin wrote: > > Hi Mark, > > I already provided the output from org.apache.coyote.http2.level = > FINE in the very first post to this thread. I didn't include > everything because all the header information includes things I don't

Re: Angular -> Apache 2.4.57 -> Tomcat 10.1.10 over HTTP2

2023-07-12 Thread Dan McLaughlin
it, I will. -- Thanks, Dan On Wed, Jul 12, 2023 at 3:34 AM Mark Thomas wrote: > > On 11/07/2023 19:10, Dan McLaughlin wrote: > > One other note, is I can switch to h2c, and it still fails, and a packet > > capture shows the entire JSON is delivered to Tomcat, and when I put

Re: Angular -> Apache 2.4.57 -> Tomcat 10.1.10 over HTTP2

2023-07-11 Thread Dan McLaughlin
e full contents of the JSON. Thanks, Dan On Tue, Jul 11, 2023 at 11:43 AM Dan McLaughlin wrote: > I was already using the latest Amazon Corretto 20, so I tried moving to > the latest OpenJDK 20, which made no difference. So I'm now using the > latest Apache HTTPD 2.4, Tomcat 10.1, an

Re: Angular -> Apache 2.4.57 -> Tomcat 10.1.10 over HTTP2

2023-07-11 Thread Dan McLaughlin
leased connection for (as01:18443) [Tue Jul 11 08:27:51.184357 2023] [proxy_http2:debug] [pid 14776:tid 5676] mod_proxy_http2.c(458): [remote x.x.x.x:63451] AH03377: leaving handler -- Thanks, Dan On Tue, Jul 11, 2023 at 11:00 AM Dan McLaughlin wrote: > I just upgraded to Tomcat 10.1.11, and it sti

Re: Angular -> Apache 2.4.57 -> Tomcat 10.1.10 over HTTP2

2023-07-11 Thread Dan McLaughlin
I just upgraded to Tomcat 10.1.11, and it still fails. A comparison of the logs between a failed POST on 10.1.10 and 10.1.11 look slightly different, but it still fails for the same reason. I'm going to try updating the JDK and see if that helps. -- Thanks, Dan On Tue, Jul 11, 2023 at 10:32

Re: Angular -> Apache 2.4.57 -> Tomcat 10.1.10 over HTTP2

2023-07-11 Thread Dan McLaughlin
in a timeout rather than the expected read or write. (markt) - [image: Fix:] Refactor waiting for an HTTP/2 stream or connection window update to handle spurious wake-ups during the wait. (markt) -- Thanks, Dan On Tue, Jul 11, 2023 at 9:43 AM Dan McLaughlin wrote: > We have many Angu

Angular -> Apache 2.4.57 -> Tomcat 10.1.10 over HTTP2

2023-07-11 Thread Dan McLaughlin
nection [b], SocketState [ASYNC_IO] 11-Jul-2023 08:27:51.175 FINE [https-openssl-nio-x.x.x.x-18443-exec-8] org.apache.coyote.http2.Stream.recycle Connection [b], Stream [23] has been recycled What do you think? Is there a bug here somewhere, or do we need to tweak an H2 config setting in Apache or T

Re: Tomcat Clustering, Mod_JK, Fail_on_Status, Stopped Application

2023-06-20 Thread Dan McLaughlin
ng the request URI was found, log a fine message // and pass the request to the next Valve log.info("Application is available, passing to next valve"); getNext().invoke(request, response); } } } -- Thanks, Dan On Tue, Jun 20, 2023 at 12:15 PM Dan McLaughlin wrote: > > One thi

Re: Tomcat Clustering, Mod_JK, Fail_on_Status, Stopped Application

2023-06-20 Thread Dan McLaughlin
. Thoughts? -- Thanks, Dan -- Thanks, Dan McLaughlin Robert Clay Vineyards Proprietor/Vigneron d...@robertclayvineyards.com mobile: 512.633.8086 main: 325.261.0075 https://robertclayvineyards.com Facebook | Instagram On Tue, Jun 20, 2023 at 10:28 AM Mark

Re: Tomcat Clustering, Mod_JK, Fail_on_Status, Stopped Application

2023-06-20 Thread Dan McLaughlin
of our apps are authenticated using SAML, so all requests are intercepted before the request is ever sent to Tomcat, but for our apps that don't require authentication, it would be easy to exploit any app that had 404 in the fail_on_status. -- Thanks, Dan On Tue, Jun 20, 2023 at 10:41 AM Dan

Re: Tomcat Clustering, Mod_JK, Fail_on_Status, Stopped Application

2023-06-20 Thread Dan McLaughlin
We typically don't deploy a ROOT context in our production environments--for no other reason than making it more difficult to poke around. I'll look at that as an option. Thanks for the tips. -- Thanks, Dan On Tue, Jun 20, 2023 at 10:28 AM Mark Thomas wrote: > On 20/06/2023 15:41,

Re: Tomcat Clustering, Mod_JK, Fail_on_Status, Stopped Application

2023-06-20 Thread Dan McLaughlin
is passed on. Why would request.getContext(); return ROOT if that wasn't the requested context? Is this a bug? -- Thanks, Dan -- Thanks, Dan McLaughlin DJAB Enterprises, LLC d...@djabenterprises.com mobile: 512.633.8086 NOTICE: This e-mail message and all attachments transmitted

Re: Tomcat Clustering, Mod_JK, Fail_on_Status, Stopped Application

2023-06-20 Thread Dan McLaughlin
vailable, passing to next valve"); getNext().invoke(request, response); } } } -- Thanks, Dan On Wed, Jun 14, 2023 at 2:32 PM Mark Thomas wrote: > On 14/06/2023 19:49, Dan McLaughlin wrote: > > Hello, > > > > This is probably a question that would be better suited

Words of Wisdom re: Context Versioning - Parallel Deployment

2023-06-16 Thread Dan McLaughlin
pose any issues? We use jgroups and log4j2. Both create their own mbeans, but it seems we have control over the names they use. Do you know if there are any other issues we need to consider? Words of wisdom? Thanks! Dan -- *NOTICE:* This e-mail message and all attachments transmitted

Re: Tomcat Clustering, Mod_JK, Fail_on_Status, Stopped Application

2023-06-14 Thread Dan McLaughlin
all our applications in a "Down for Maintenance Mode" without having to stop them and that can be scheduled at the individual application level. I'll look at using a valve if we decide it's a big enough issue. Thanks again for the explanation! Dan On Wed, Jun 14, 2023 at 2:32 PM M

Tomcat Clustering, Mod_JK, Fail_on_Status, Stopped Application

2023-06-14 Thread Dan McLaughlin
pment and testing.This is certainly an interesting topic, and I appreciate your insights. Let me know if you have any further questions or thoughts!"* -- Thanks, Dan -- *NOTICE:* This e-mail message and all attachments transmitted with it are for the sole use of the intended recipient(s) and m

Re: 9.0.70 / 9.0.71 regression?

2023-03-04 Thread Dan Armbrust
Thanks for updating - sorry I didn't get a chance to run it down more. I should be able to do a test in our SSO enabled env this next week with 9.0.73. Dan On 2/27/23 4:06 AM, Mark Thomas wrote: Looks like this is the issue: https://bz.apache.org/bugzilla/show_bug.cgi?id=66488 That you only

9.0.70 / 9.0.71 regression?

2023-02-15 Thread Dan Armbrust
, which then didn't match any of our services, and was sent back as a 404. We haven't yet done any further debugging about where in the tomcat stack the request was being completely corrupted.  I also haven't isolated if it was 9.0.71 or 9.0.70 - 9.0.69 works, and 9.0.71 fails. Thanks, Dan

Status Code 500 on /manager/status after upgrade to 9.0.45

2021-04-15 Thread Dan Schreck
g tool isn't working because it thinks there is no data. Any suggestions ? Thanks. Dan Schreck | Director of IT Operations | Foundation Source Phone & Fax: +1 203-319-3727 | dschr...@foundationsource.com 55 Walls Drive, 3rd Floor, Fairfield CT 06824 www.foundationsource.com The finest com

Please help : EOL TOMCAT 7 and 8.5

2018-04-12 Thread BENGUIRA, Dan (Allianz en France)
informations? Thanks to the generous soul that would help me, I would be very grateful ! Kind regards, [cid:image001.gif@01D3D268.02C716B0] Dan BENGUIRA (IBM) Green Recovery Adress : Tour Franklin - La Défense E-mail : externe.dan.bengu...@allianz.fr<mailto:externe.dan.bengu...@allianz.fr> Tél. :

RewriteValve and the ROOT webapp

2017-08-30 Thread Dan Rabe
precautions should I take? Security guides such as https://www.owasp.org/index.php/Securing_tomcat recommend removing the ROOT webapp, but without providing reasons or rationale. Thank you! --Dan Rabe

Re: AW: 8.5.11/8.5.14 using SSLHostConfig protocols and ciphers list ignored

2017-04-27 Thread Dan Morrison
On 04/27/2017 01:32 PM, Dan Morrison wrote: On 04/27/2017 10:57 AM, Kreuser, Peter wrote: Hi (WhoEverYouMayBe - you may want to sign with a name???), Server version:Apache Tomcat/8.5.11 Server built: Jan 10 2017 21:02:52 UTC Server number: 8.5.11.0 OS Name

Re: 8.5.14 wildcard certificate Exception

2017-04-27 Thread Dan Morrison
_default_ suggestion shortly as a possible short term work-around. Thanks !! Dan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: AW: 8.5.11/8.5.14 using SSLHostConfig protocols and ciphers list ignored

2017-04-27 Thread Dan Morrison
ontext it shows the names are all as I am using. When I look at my catalina.out with -Djavax.net.debug=ssl:handshake it currently shows the negotiated cipher as... Cipher Suite: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

Re: 8.5.14 wildcard certificate Exception

2017-04-27 Thread Dan Morrison
t;) in both cases by simply not specifying the hostName and defaultSSLHostConfigName attributes? - -chris I will give it a try and provide feedback here. Thx, Dan -BEGIN PGP SIGNATURE- Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Thunderbird - http://www.enigmail

Re: Tomcat Version 7.0.34 + jdk 1.6 is not supporting TLS Protocol TLS1.2

2016-12-15 Thread Hrivnak, Dan
On 12/15/16, 9:19 AM, "frank.pien...@materna.de" wrote: Q1 use recent java8 Version if you want secure TLS 1.3 choose right cipher.

Re: TLSv1.2 handshake failure on outgoing connections

2016-01-29 Thread Hrivnak, Dan
out! Dan Hrivnak On 1/25/16, 5:19 PM, "Christopher Schultz" <ch...@christopherschultz.net> wrote: >-BEGIN PGP SIGNED MESSAGE----- >Hash: SHA1 > >Dan, > >On 1/25/16 9:28 AM, Hrivnak, Dan wrote: >> Thank you Chris! I’m glad to hear

Re: TLSv1.2 handshake failure on outgoing connections

2016-01-25 Thread Hrivnak, Dan
, etc). The only difference I can find is that one is running within Tomcat and one isn’t. The actual client code is using Axis 2 to call a SOAP service, so the raw HTTP connection code is inside the Axis library unfortunately. Thanks again for your help! Dan Hrivnak On 1/22/16, 2:36 PM

TLSv1.2 handshake failure on outgoing connections

2016-01-21 Thread Hrivnak, Dan
re would I configure the security settings for that type of connection? Everything I've been able to find relates to configuring Tomcat as the server not as the client for SSL/TLS-related things. Please let me know if there is more information that would help! Thank you, Dan Hrivnak All i

Re: Tomcat 7.0.41 shows v6 manager GUI

2015-08-10 Thread Dan OConnor
Chris, Thanks for replying. It looks like your suggestion about a stale css was probably correct. Without changing anything, the machine is now showing the v7 manager UI. Regards, Dan On Aug 8, 2015, at 8:43 AM, Christopher Schultz ch...@christopherschultz.net wrote: -BEGIN PGP

Tomcat 7.0.41 shows v6 manager GUI

2015-08-06 Thread Dan OConnor
is the cause and is there a fix? Thanks, Dan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

failing final step to update ssl certificate for tomcat6

2015-06-12 Thread Dan Hyatt
I am trying to update my SSL certificate in tomcat. The webserver keeps sending the old expired certificate I am taking over from long gone admins with no config notes, but this should be straightforward. The certificate authority support suggests there might be another configuration..but

java.lang.ClassNotFoundException: javax.ws.rs.MessageProcessingException

2015-01-09 Thread Dan Kaplan
Source of question: http://stackoverflow.com/questions/27868936/java-lang-classnotfoundexception-javax-ws-rs-messageprocessingexception I am deploying a war to Tomcat 7.0.57. This code uses Jersey 2.x Client to communicate with a Rest endpoint and exposes its own Rest endpoints using CXF (AKA

RE: Keystore error trying to use SSL JSSE

2013-06-06 Thread Carrillo, Dan
It's not complaining about the file path, but about the property name. Capitalize the F - it should be keystoreFile= -Original Message- From: Tim Colletto [mailto:tcolle...@cra.com] Sent: Thursday, June 06, 2013 8:30 AM To: users@tomcat.apache.org Subject: Keystore error trying to use

RE: Which version of tomcat for apache 2.2.24 and JDK 1.6.0

2013-04-30 Thread Carrillo, Dan
If you want to utilize Servlet spec 3.0 or JSP spec 2.2 then use Tomcat version 7.0.39. This is compatible with Java 1.6. If you prefer or are constrained to using the older servlet or JSP specifications, then use Tomcat version 6.0.36. If you don't know or don't care, then my recommendation

RE: Which version of tomcat for apache 2.2.24 and JDK 1.6.0

2013-04-30 Thread Carrillo, Dan
1.6.0 From: Carrillo, Dan [mailto:dcarri...@idanalytics.com] Subject: RE: Which version of tomcat for apache 2.2.24 and JDK 1.6.0 If you want to utilize Servlet spec 3.0 or JSP spec 2.2 then use Tomcat version 7.0.39. This is compatible with Java 1.6. If you prefer or are constrained

RE: SSL configuration on Tomcat7.

2013-04-25 Thread Carrillo, Dan
You didn't provide very much information. But one thing to check is that the domain name of your site matches what you specified for the certificate. -Original Message- From: Shahid Tamboli [mailto:shahid1...@gmail.com] Sent: Thursday, April 25, 2013 8:10 AM To:

RE: Diagnosing Silently Frozen Tomcats

2013-03-22 Thread Carrillo, Dan
Take a full thread dump of the PID. Linux kill -3, if Windows CTRL+BREAK if you have a console window open. This will allow you to see the state of all threads and see whether it's your own application class (likely), or Tomcat itself. -Original Message- From: Robinson, Eric

RE: Achieve large number of concurrent websocket connections (~40000-50000)

2013-02-13 Thread Carrillo, Dan
You should consider setting up a cluster of Tomcat's to service your requests. With 40-50 thousand concurrent connections you're likely to need to balance the load anyway. Are you familiar with setting up a Tomcat cluster? -Original Message- From: Amit Bhagra

RE: Shutdown.sh doesn't. At least not reliably. (7.0.25)

2012-11-27 Thread Carrillo, Dan
If you take a thread dump you'll be able to see the state of both Tomcat's threads and your own application's threads to see where it's hanging. -Original Message- From: James Lampert [mailto:jam...@touchtonecorp.com] Sent: Tuesday, November 27, 2012 9:10 AM To: Tomcat Users List

sessions replication

2012-09-19 Thread Carrillo, Dan
Hi folks, My sessions are replicating across the cluster as indicated by my session listener debug output. E.g I can see the session created/destroyed messages in each respective log. I have a Service object that is serializable, which contains a String member variable (x) which is not

Re: SSL Vulnerability in Tomcat and/or JVM?

2012-09-15 Thread Dan Chernoff
Your only other real option is remove any CBC and diffehelmen ciphers from your supported cipher list. This really only leaves you with RC4 ciphers. Dan On Sep 14, 2012, at 5:14 PM, Brian Braun brianbr...@gmail.com wrote: Hi Dan, Thanks a lot for your response! Contacting them

RE: SSL Vulnerability in Tomcat and/or JVM?

2012-09-14 Thread Dan
connector. JSSE Connector protocol=org.apache.coyote.http11.Http11Protocol port=443 .../ APR/OpenSSL Connector protocol=org.apache.coyote.http11.Http11AprProtocol port=443 .../ Dan -Original Message- From: Brian Braun [mailto:brianbr...@gmail.com] Sent: Friday, September 14, 2012 1

RE: Unable to start cluster (java.net.BindException: Cannot assign requested address)

2012-08-15 Thread Carrillo, Dan
Hi Jeff, java.net.BindException: Address already in use indicates there is another process using this ip/port. You'll need to change it to a unique value. Dan -Original Message- From: Jeff Hall [mailto:jhall@gmail.com] Sent: Wednesday, August 15, 2012 12:50 PM To: users

RE: Unable to start cluster (java.net.BindException: Cannot assign requested address)

2012-08-15 Thread Carrillo, Dan
Jeff, Can you include your entire server.xml for each instance and also your /etc/hosts? From: Jeff Hall [mailto:jhall@gmail.com] Sent: Wednesday, August 15, 2012 1:32 PM To: users@tomcat.apache.org Cc: Carrillo, Dan Subject: Re: Unable to start cluster (java.net.BindException: Cannot assign

Hanging on startup?

2012-03-12 Thread Dan Armbrust
this? Is there a compatibility issue with this JVM? Thanks, Dan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Hanging on startup?

2012-03-12 Thread Dan Armbrust
On Mon, Mar 12, 2012 at 2:34 PM, Caldarale, Charles R chuck.caldar...@unisys.com wrote: From: Dan Armbrust [mailto:daniel.armbrust.l...@gmail.com] Subject: Hanging on startup? Startup, and it hangs on app deploy: Waiting for entropy to build up?  Take a few thread dumps with jstack to see

Re: Hanging on startup?

2012-03-12 Thread Dan Armbrust
Yep. JAVA_OPTS=-Djava.security.egd=file:/dev/./urandom prevents the hang. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

tomcat 7.0.25 - tomcat7 //US//.... ++jmvOptions broken ??

2012-02-05 Thread Dan Tran
Hello, Starting tomcat 7.0.25, update windows tomcat server option using ++jmvOptions seems to replace existing option. Can someone confirm this? run bin/service.bat, and you can see the last ++jmvOptions replaces previous configuration Thanks -D Note: I have a custom bat script to setup my

Re: tomcat 7.0.25 - tomcat7 //US//.... ++jmvOptions broken ??

2012-02-05 Thread Dan Tran
I also notice commons-deamon is upgraded after tomcat 7.0.23 Would this be the main issue? -D On Sun, Feb 5, 2012 at 1:40 AM, Dan Tran dant...@gmail.com wrote: Hello, Starting tomcat 7.0.25, update windows tomcat server option using ++jmvOptions seems to replace existing option. Can

Re: tomcat 7.0.25 - tomcat7 //US//.... ++jmvOptions broken ??

2012-02-05 Thread Dan Tran
it seems procrun already fixed this issue at its end. does tomcat team has a tentative schedule date for 7.0.26? Thanks -Dan On Sun, Feb 5, 2012 at 1:46 AM, Dan Tran dant...@gmail.com wrote: I also notice commons-deamon is upgraded after tomcat 7.0.23 Would this be the main issue? -D

RE: jsessionid cookie across webapps

2011-10-24 Thread Carrillo, Dan
Read up on the emptySessionPath connector setting in the Tomcat configuration guide. This will explain it. -Original Message- From: chad.da...@emc.com [mailto:chad.da...@emc.com] Sent: Monday, October 24, 2011 10:34 AM To: users@tomcat.apache.org Subject: jsessionid cookie across

How to externalize a webapp's logging.properties?

2011-10-11 Thread Dan Checkoway
a path to logging.properties (in theory classpath: or file: style) on a per-webapp basis? i.e. in conf/server.xml in the Context. Or if there's an easier way, shove me toward it... Thanks, Dan

Re: How to externalize a webapp's logging.properties?

2011-10-11 Thread Dan Checkoway
'dispatcher' Oct 11, 2011 8:48:28 AM org.apache.catalina.core.ApplicationContext log INFO: Closing Spring root WebApplicationContext I'm confused as to why everything else is going to catalina.out...any advice? Thanks, Dan On Tue, Oct 11, 2011 at 8:36 AM, Pid p...@pidster.com wrote: On 11/10/2011 07

Re: How to externalize a webapp's logging.properties?

2011-10-11 Thread Dan Checkoway
=${catalina.base}/virtualcp/my-webapp / /Context Put logging.properties in $TOMCAT_HOME/virtualcp/my-webapp/logging.properties. Works like a charm. Thanks again! Dan On Tue, Oct 11, 2011 at 9:08 AM, Konstantin Kolinko knst.koli...@gmail.comwrote: 2011/10/11 Dan Checkoway dchecko...@gmail.com: So... 1

Re: Executor thread lifecycle

2011-09-21 Thread Dan Checkoway
-unexplained recycling of threads. FWIW, we've got the pool based solution going now, so I'm off the whole ThreadLocal bandwagon (really really small wagon). This is uber low prio from my standpoint, in case you guys want to forget I ever brought it up. :-) Thanks, Dan On Wed, Sep 21, 2011 at 9

Executor thread lifecycle

2011-09-20 Thread Dan Checkoway
has explicit deliberate control over the Executor thread lifecycle, and if so, how I might be able to control it? And if not, is there a way to control it? Thanks, Dan

Re: Executor thread lifecycle

2011-09-20 Thread Dan Checkoway
management of this stuff and have to synchronize access to it across my hundreds of executor threads. Sounds like I'll need to bite the bullet on that. Oh well... :-) On Tue, Sep 20, 2011 at 2:55 PM, Mark Thomas ma...@apache.org wrote: On 20/09/2011 19:29, Dan Checkoway wrote: I'm curious how long

Re: Executor thread lifecycle

2011-09-20 Thread Dan Checkoway
to centralize the pool and just synchronize management of it. Oy. On Tue, Sep 20, 2011 at 3:02 PM, Mark Thomas ma...@apache.org wrote: On 20/09/2011 19:59, Dan Checkoway wrote: Thanks for the quick reply, Mark. Much appreciated. I was afraid that was the case. What I was trying

Re: Executor thread lifecycle

2011-09-20 Thread Dan Checkoway
bulk borrow/return, shoot it my way...thx. On Tue, Sep 20, 2011 at 3:11 PM, Mark Thomas ma...@apache.org wrote: On 20/09/2011 20:06, Dan Checkoway wrote: To be specific, we're having a major issue with garbage generation. To avoid this, we're pre-allocating pools of instances (up until now

Re: Executor thread lifecycle

2011-09-20 Thread Dan Checkoway
PGP SIGNED MESSAGE- Hash: SHA1 Dan, On 9/20/2011 2:29 PM, Dan Checkoway wrote: I'm curious how long Executor threads live prior to being recycled/replaced/what have you. Is there a way to control this lifecycle? You can set maxIdleTime to something other than the default (which is 1

How to handle the AWT-Windows thread?

2011-08-18 Thread Dan Armbrust
to let the thread end. I haven't dug for it yet, but I assume there is a switch I can use to shut off the memory detect warnings? (If I can't figure out how to fix all my issues) I can't ship code to the customers that logs SEVERE errors on shutdown. Thanks, Dan

Re: How to handle the AWT-Windows thread?

2011-08-18 Thread Dan Armbrust
that more people don't encounter the AWT issue. Sigh. Guess it goes back to Sun never really getting that design right... and then never fixing it. On the plus side, since they never actually remove anything they deprecate... maybe I can just stop the thread. Hmm. Dan

Re: How to handle the AWT-Windows thread?

2011-08-18 Thread Dan Armbrust
on shutdown. Thanks, Dan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: JSP compile limitation 7.0.16 - 7.0.19

2011-07-25 Thread Dan Checkoway
with respect to max method size or something of that nature. I'll assume I'm not the only lonely soul out here who's going to bump into this... Dan On Mon, Jul 25, 2011 at 4:33 AM, Mark Thomas ma...@apache.org wrote: On 24/07/2011 15:40, Dan Checkoway wrote: Did some sort of jasper

JSP compile limitation 7.0.16 - 7.0.19

2011-07-24 Thread Dan Checkoway
to give a more informative error in this circumstance, indicating that class size or method size was the issue. Now the error is completely ambiguous...and it took me a little while to figure out (read: guess) that method size was the issue. Anyway, heads-up about this. Thanks! Dan

Re: JSP compile limitation 7.0.16 - 7.0.19

2011-07-24 Thread Dan Checkoway
In case this helps, here are some generated source specs for comparison: file sizes: -rw-r--r-- 1 dan staff 298619 Jul 24 10:46 7.0.16-generated-source.java -rw-r--r-- 1 dan staff 300421 Jul 24 10:46 7.0.19-generated-source.java line counts: 7328 7.0.16-generated-source.java 7331

Re: JSP compile limitation 7.0.16 - 7.0.19

2011-07-24 Thread Dan Checkoway
Line 593 has what you might expect...the long method generated from the JSP: public void _jspService(final javax.servlet.http.HttpServletRequest request, final javax.servlet.http.HttpServletResponse response) Dan On Sun, Jul 24, 2011 at 6:04 PM, Pid p...@pidster.com wrote: On 24/07/2011 15

AccessLogValve %D and acceptCount tuning

2011-07-21 Thread Dan Checkoway
that up. I'd like to be able to quantify this experiment somehow, to see how much time a client spent waiting *after* the socket connection was established, but before the thread pool actually serviced the request. Any advice? Thanks, Dan

Re: AccessLogValve %D and acceptCount tuning

2011-07-21 Thread Dan Checkoway
Also forgot to ask...is there an MBean attribute that I can check via JMX to see how many established connections are waiting to be serviced? i.e. if there's a backlog in the accept queue? On Thu, Jul 21, 2011 at 12:12 PM, Dan Checkoway dchecko...@gmail.comwrote: http://tomcat.apache.org

Re: AccessLogValve %D and acceptCount tuning

2011-07-21 Thread Dan Checkoway
can try using netstat to count ESTABLISHED connections instead... Dan On Thu, Jul 21, 2011 at 6:01 PM, Pid p...@pidster.com wrote: On 21/07/2011 17:16, Dan Checkoway wrote: Also forgot to ask...is there an MBean attribute that I can check via JMX to see how many established connections

Re: AccessLogValve %D and acceptCount tuning

2011-07-21 Thread Dan Checkoway
Gotcha, makes sense. Thanks Mark! On Thu, Jul 21, 2011 at 6:52 PM, Mark Thomas ma...@apache.org wrote: On 21/07/2011 23:01, Pid wrote: On 21/07/2011 17:16, Dan Checkoway wrote: Also forgot to ask...is there an MBean attribute that I can check via JMX to see how many established

Re: EL system properties...possible to override per context?

2011-07-05 Thread Dan Checkoway
? Is that a reasonable request? What if I'm willing to help code it? :-) Thanks, Dan On Mon, Jul 4, 2011 at 4:04 PM, Mark Thomas ma...@apache.org wrote: On 04/07/2011 20:46, Dan Checkoway wrote: I have two webapps that need to run under the same instance of tomcat. One needs COERCE_TO_ZERO=true

EL system properties...possible to override per context?

2011-07-04 Thread Dan Checkoway
instance. Is there any way this behavior could be controlled or overridden at the Context level instead of system-wide? Dan

Re: Control character in cookie value or attribute

2011-05-24 Thread Dan Checkoway
on what might evoke that Control character in cookie value or attribute error in 7.0.14? I still can't get my head wrapped around which ServerCookie.* property(ies) to tweak to try to figure this out. Thanks, Dan On Fri, May 20, 2011 at 4:56 PM, Dan Checkoway dchecko...@gmail.com wrote: Ah, thanks

Re: Control character in cookie value or attribute

2011-05-24 Thread Dan Checkoway
is getting passed in the Set-Cookie value (presumably unicode). Dan On Tue, May 24, 2011 at 4:42 PM, Mark Thomas ma...@apache.org wrote: On 24/05/2011 21:25, Dan Checkoway wrote: This is super low priority, since I assume somebody is passing junk in a Set-Cookie header, but I'd love to get

Re: Control character in cookie value or attribute

2011-05-24 Thread Dan Checkoway
I wasn't gonna say anything about that, but I did consult my operator precedence reference while looking at it... :-) +1 on parens! Dan On Tue, May 24, 2011 at 5:21 PM, Christopher Schultz ch...@christopherschultz.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dan, On 5/24/2011

Re: Control character in cookie value or attribute

2011-05-24 Thread Dan Checkoway
Hope you don't mind...I opened a ticket for this: https://issues.apache.org/bugzilla/show_bug.cgi?id=51260 Dan On Tue, May 24, 2011 at 5:28 PM, Caldarale, Charles R chuck.caldar...@unisys.com wrote: From: Christopher Schultz [mailto:ch...@christopherschultz.net] Subject: Re: Control character

Control character in cookie value or attribute

2011-05-20 Thread Dan Checkoway
) at java.lang.Thread.run(Thread.java:662) I suppose I could start logging headers, but that would get out of hand pretty quickly...considering I only see this happen about once in 100 million requests. Anyway, figured I'd raise the flag here first... Dan

Re: Control character in cookie value or attribute

2011-05-20 Thread Dan Checkoway
. something between 0x00 and 0x1F), or something else like a \ getting in there, like foo\nbar. Don't suppose it could be unicode in a cookie value that's causing this? Which seems more plausible to you, 0x00 or unicode? And any specific suggestions for config tweaks would be much appreciated! Dan

Re: how to track tomcat throughput?

2011-05-18 Thread Dan Checkoway
# of RequestProcessor beans, there are gaps in the sequence, etc. I'm hoping there's an easier way to get just a single JMX-exposed attribute representing total requestCount. Possible? Wish list item...open a bugzilla ticket? Bueller...Bueller...? :-) Dan On Tue, May 17, 2011 at 4:22 AM, Dan

Re: how to track tomcat throughput?

2011-05-18 Thread Dan Checkoway
this centrally, and maybe just not exposing it? Dan On Wed, May 18, 2011 at 7:45 AM, Jess Holle je...@ptc.com wrote: I've done a servlet request filter for this and many other such things. I've always been a bit surprised by how little of this data Tomcat collects -- but that's fine as one can

Re: how to track tomcat throughput?

2011-05-18 Thread Dan Checkoway
Ah, there it is...thanks! Mark, any idea why sometimes the GlobalRequestProcessor appears with the ObjectName: Catalina:name=http-nio-80,type=GlobalRequestProcessor ...and other times it shows up as: Catalina:type=GlobalRequestProcessor,name=http-nio-80 ? Thanks, Dan On Wed, May 18, 2011

Re: how to track tomcat throughput?

2011-05-18 Thread Dan Checkoway
... :-) Dan On Wed, May 18, 2011 at 12:06 PM, Christopher Schultz ch...@christopherschultz.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dan, On 5/18/2011 8:21 AM, Dan Checkoway wrote: Gotcha...yeah, it would be trivial to slap an AtomicLong counter in a filter, but I'd hate

Re: how to track tomcat throughput?

2011-05-18 Thread Dan Checkoway
7.0.14, I'm a bleeding edge adopter. :-) On Wed, May 18, 2011 at 2:35 PM, Christopher Schultz ch...@christopherschultz.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dan, On 5/18/2011 12:10 PM, Dan Checkoway wrote: Then I'd be faced with 400 (executor maxThreads) separate

  1   2   3   >