Re: Core Dump File Generation

2024-02-28 Thread Olaf Kock
On 28.02.24 12:03, Chaudhary, Mohit wrote: Hi, Java version 1.8.0_121 is running on server. From the release notes of Java 1.8.0_121 (https://www.oracle.com/java/technologies/javase/8u121-relnotes.html): The JRE expires whenever a new release with security vulnerability fixes becomes

Re: Core Dump File Generation

2024-02-28 Thread Olaf Kock
On 28.02.24 09:57, Chaudhary, Mohit wrote: Hi All, We are facing issues on tomcat. Core dump file generating very frequent twice to thrice in a month and core file size would be 13GB to 15GB every time .Whenever this issue is happening tomcat services stopped automatically. We have done

Re: Any way to look-up a session from application?

2024-02-27 Thread Olaf Kock
Hi Chris On 27.02.24 15:19, Christopher Schultz wrote: All, I'm looking at building some administrative tools into my application, and I'd like to be able to inspect user sessions for certain attributes. I know that I can use JMX to make calls to the (session) Manager, but it looks like the

Re: Tomcat 9 release plan

2024-01-30 Thread Olaf Kock
On 30.01.24 12:10, Kambhapati, Sindhuri wrote: Hi, Can you give me link for the tomcat forum please. https://tomcat.apache.org/lists.html - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional

Re: Regarding Tomcat is creating the zombie processes

2024-01-05 Thread Olaf Kock
On 05.01.24 14:17, Simon Matter wrote: You will need to provide more details. A default Tomcat install does not create parent and child processes so zombie processes cannot occur. Often, Java-Threads look like child processes in Linux tools. I'm assuming that the application creates

Re: Getting False Tomcat Down Alert

2024-01-03 Thread Olaf Kock
On 03.01.24 15:34, Christopher Schultz wrote: Olaf, +1 The regular expression used with grep should be improved a lot. I would recommend at least the following: STAT=`netstat -luptn 2>/dev/null | grep '^tcp.*:8080[^:0-9]' | awk '{print $6}'` ...or omit the UDP output by using "netstat

Re: Getting False Tomcat Down Alert

2024-01-03 Thread Olaf Kock
On 03.01.24 10:18, Olaf Kock wrote: Here's an option: On 03.01.24 09:41, Chaudhary, Mohit wrote: Hi, Please find below script code which has been written. STAT=`netstat -luptn | grep 8080 | awk '{print $6}'` if [[ "$STAT" != "LISTEN" ]]; then echo "Tomcat instance

Re: Getting False Tomcat Down Alert

2024-01-03 Thread Olaf Kock
Here's an option: On 03.01.24 09:41, Chaudhary, Mohit wrote: Hi, Please find below script code which has been written. STAT=`netstat -luptn | grep 8080 | awk '{print $6}'` if [[ "$STAT" != "LISTEN" ]]; then echo "Tomcat instance down" >> $MESSAGE mail -s "Tomcat Instance Down on $HOSTNAME"

Re: Getting False Tomcat Down Alert

2024-01-03 Thread Olaf Kock
On 03.01.24 07:55, Chaudhary, Mohit wrote: Hello Team, We have RHEL 6.10 server and  configured custom script in crontab to check 8080 port is up or not, if 8080 is down then getting email alert. But some time we are facing the false alert for 2 to 3 min. When we are checking the tomcat

Re: Are there any known class loader leaks in Tomcat 9?

2023-11-07 Thread Olaf Kock
On 06.11.23 18:55, William Crowell wrote: Good afternoon, I am running Tomcat 9.0.78 with JDK 1.8.0_371 (running with G1GC), and I am loading some very large Java classes into Metaspace. I know this is not good practice, but I inherited this library. These classes have business rules and

Re: [EXTERNAL] - Need help tomcat

2023-10-02 Thread Olaf Kock
On 02.10.23 10:07, Deepak Lalchandani wrote: Hi Please advice , Where to send the screenshot Hi Deepak, You're dealing with textual messages, right? Just send the text - it's easier to read, search for etc anyway. Olaf

Re: OT: hsts in Tomcat 9.0.73

2023-04-22 Thread Olaf Kock
Am 22.04.23 um 00:48 schrieb jonmcalexan...@wellsfargo.com.INVALID: Thanks Peter, I still do not see the hsts header. I'm wondering if this is causing it. SSL certificate verify result: self signed certificate in certificate chain (19), continuing anyway. I don't know why it's complaining

Re: OT: hsts in Tomcat 9.0.73

2023-04-21 Thread Olaf Kock
Am 21.04.23 um 07:03 schrieb jonmcalexan...@wellsfargo.com.INVALID: No, there is no error and no stack trace. Everything works, just the hsts header isn't in the list of headers. The lowest hanging fruit: HSTS is only defined on https - on http it doesn't have any meaning and Tomcat would

Re: Tomcat 8.5.85 and above - Issue with file uploads

2023-04-14 Thread Olaf Kock
On 13.04.23 22:40, William L. Cunningham wrote: Environment: Windows 2019 Standard with latest JDK 17 and Apache Tomcat 8.5.87. When trying to upload a file to the application running off Tomcat (custom software), we are getting the following error since 8.5.85 (works fine on 8.5.84).

Re: Java Heap Space Error

2023-04-14 Thread Olaf Kock
On 14.04.23 04:55, pratik.kulka...@shell.com.INVALID wrote: Hi All, Thanks for your quick suggestions. As Olaf suggested, I tried to set the same values to Xms and Xmx; the application immediately crashes after Tomcat restart and I am not able to access it. I tried it with different

Re: Java Heap Space Error

2023-04-13 Thread Olaf Kock
Hi Pratik, On 13.04.23 11:35, pratik.kulka...@shell.com.INVALID wrote: Hello, This email concerns an error I encountered while using Oracle Apex with ORDS 3.0.9 and Tomcat 9. Specifically, I receive a "Java heap space" error when accessing the application. To troubleshoot the issue, I have

Re: Query: HSTS | Tomcat 9.0.50

2023-01-17 Thread Olaf Kock
On 17.01.23 13:09, Olaf Kock wrote: On 17.01.23 11:45, Deepti Sharma S wrote: Hello, I have tried with both Chrome and Mozilla in private window where information is not cached. HSTS is not working on custom ports. I'm not confident that HSTS is among those cached values

Re: Query: HSTS | Tomcat 9.0.50

2023-01-17 Thread Olaf Kock
On 17.01.23 11:45, Deepti Sharma S wrote: Hello, I have tried with both Chrome and Mozilla in private window where information is not cached. HSTS is not working on custom ports. I'm not confident that HSTS is among those cached values that are not shared between normal and incognito mode.

Re: Query: HSTS | Tomcat 9.0.50

2023-01-16 Thread Olaf Kock
On 16.01.23 06:57, Deepti Sharma S wrote: Hello Team, Can you please help us for below query: Query : How to enable HSTS in Apache Tomcat on non-default ports? We have custom ports for http and https and we want to enable HSTS on those custom ports. Note: We could see HSTS is working

Re: Having two servers and controlling my secondary server with the primary server

2023-01-10 Thread Olaf Kock
redirect the requests to another server if and only if the particular server is down. So I am searching for this solution, and came to know about this group. So I requested about this , may be I will get some ideas. Really thanks for response. On Mon, 9 Jan 2023, 8:21 pm Olaf Kock, wrote

Re: Having two servers and controlling my secondary server with the primary server

2023-01-09 Thread Olaf Kock
On 09.01.23 15:22, Manisha Chermadurai wrote: Good evening Sir, I am trying to control my secondary server with the primary server of mine. Bothe are of versions 9.0. Primary server has been available in my physical machine and my secondary server is in virtual machine. Both are of windows 10.

Re: setenv.sh not loaded

2022-11-02 Thread Olaf Kock
On 02.11.22 12:43, Ivano Luberti wrote: Hi, I have been given an Oracle Linux instance with tomcat 9.0.65 installed as a service. Tomcat is running correctly I have tried to create a setenv.sh file to tune the JVM, but using the tomcat manager application and the catalina.log file it seems

Re: Help Needed for installation of apache-tomcat-8.5.5

2022-10-08 Thread Olaf Kock
On 08.10.22 05:09, Verma, Sahil wrote: Hi Team, We have a requirement to install Tomcat 8.5.5 version in Linux environment. Please help with steps of downloading the package and installation steps. Linux version -  Red Hat Enterprise Linux release 8.6 You have a requirement to install

Re: Apache Tomcat 8 - Require Tomcat configuration to restrict exe's from downloading

2022-06-20 Thread Olaf Kock
On 20.06.22 11:51, bharath Kumar wrote: > Hi Team, > > I am using apache Tomcat 8 version, > > *Problem statement: * > > My application's accessible URL format is > *http:///abc/xyz.exe* A good way to get the question answered would be to answer the comments on your identical Stackoverflow

Re: Compile JSP pages dynamically using Tomcat 6.0.45

2022-06-13 Thread Olaf Kock
On 13.06.22 11:48, Pavan Kumar Tiruvaipati wrote: > Hi, > > Our application is running on Tomcat 6.0.45. > > > *Operation System* - Linux & Windows > > Due to security reasons, we are replacing JDK 1.8 with JRE 1.8. If you make a change *for security reasons*, you might want to rather update

Re: SAML SSO Login issue

2022-05-11 Thread Olaf Kock
On 11.05.22 17:36, harish lal wrote: > Facing SSO Login issue after upgrade from Tomcat 6.0.33 to Tomcat 7.0.62 > > We upgraded our application from Tomcat 6.0.33 to Tomcat 7.0.62 due to web > socket dependency in Tomcat. > After upgrade , while try to do SAML SSO login from application we are >

Re: tomcat-10.0.x Problem https multiple IP

2022-01-21 Thread Olaf Kock
Dear Jaebo, On 21.01.22 10:29, Jaebo Nah wrote: >  10.100.142.31  =   two.domain.loc > > >   address=" two.domain.loc" > >   SSLEnabled="true" defaultSSLHostConfigName="10.100.142.32" > > >      protocols="TLSv1.2,+TLSv1.1,+TLSv1"> > > Above, I only left the lines from your mail

Re: Tomcat dedicated server

2022-01-20 Thread Olaf Kock
Hi Mark On 20.01.22 10:18, Mark Thomas wrote: > On 20/01/2022 08:54, Olaf Kock wrote: > >>  My rule of thumb is: The >> more memory there is to be claimed in GC, the longer a full GC run >> takes. > > Nope. > > The time a GC run takes is proportional to the

Re: Tomcat dedicated server

2022-01-20 Thread Olaf Kock
Hi Lance On 19.01.22 23:35, Campbell, Lance wrote: > On a Tomcat 9.x dedicated Linux server with 16G of memory, how much memory > would you allocate for the OS? > > Assume there is no file processing taking place. Also assume Tomcat is > communicating primarily with a PostgreSQL database and

Re: ClassFileTransformer in Tomcat 10 common classloader

2021-12-28 Thread Olaf Kock
On 28.12.21 00:36, Chew Kok Hoor wrote: > We're using the old javax.servlet namespace for compatibility reasons. > > Some of our jar files are re-used by different web-apps, therefore we > placed them in the common classloader. > > Is it possible to convert them dynamically, just

Re: Handling database connection pooling outside Java, without DBCP et al?

2021-11-23 Thread Olaf Kock
I don't have experience with this particular setup, but one sentence (in fact, one word) caught my attention: On 23.11.21 14:23, jkla...@iki.fi wrote: > We're in the process of adopting ProxySQL in front of MySQL, to act as the > connection pooler and for separating read and write traffic to

Re: tomcat hangs

2021-09-09 Thread Olaf Kock
On 09.09.21 12:50, Mehrdad Taagholi wrote: > HiI use apache tomcat 8.0.32 and oracle-jdk-8u66 and redhat 6.After working > with the system for a few hours and the load on the system increases, > suddenly the tomcat hangs and no logs are printed and it is not possible to > connect via

Re: Xms Xmx in JAVA_OPT vs CATALINA_OPTS

2021-08-03 Thread Olaf Kock
Onno, On 03.08.21 04:57, Onno van der Straaten wrote: > Hi, > I was looking at a Tomcat deployment and noticed settings in setenv.sh as > shown below. I noticed that Xms and Xmx is in JAVA_OPTS and CATALINA_OPTS > with the exact same settings. Do these settings make sense? What is the >

Re: Ho to upgrade to newest version in tomcat 9

2021-07-28 Thread Olaf Kock
On 27.07.21 19:01, W wrote: > Hi, > I am on Ubuntu with tomcat 9.0.16I tried    sudo apt-get update    sudo > apt-get upgradeBut did not work. How to do it? The distribution packages (here: Debian) typically pick one version and keep it stable, optionally backporting security fixes to it. Odds

Re: Mixing Root Context webapp with other webapps

2021-07-09 Thread Olaf Kock
On 09.07.21 07:58, Jerry Malcolm wrote: > I have one webapp that processes REST-style url paths and therefore > needs to run in the ROOT context.  Is it possible to run other webapps > in the same host with other non-root contexts?   In other words, when > resolving a URL to a web app, does it

Re: Re-Use TCP Source Ports if the Socket is Unique?

2021-06-25 Thread Olaf Kock
st asks the runtime environment (ultimately I'd expect the OS) for a connection to a particular destination, then it uses that. How the connection is then established will depend on * available network adapters * best route to the target address * OS or network configuration It will /not/ depend on a

Re: Re-Use TCP Source Ports if the Socket is Unique?

2021-06-25 Thread Olaf Kock
On 25.06.21 05:19, Eric Robinson wrote: > Thanks for the feedback, Daniel. > > I guess the answer depends on whether the socket libraries use the tomcat > listening port as the source IP. If you have three tomcat instances listening > on three different IPs, each instance should be able to

Re: Where does Tomcat 9 (apt managed / standard config) store sessions in Ubuntu 18?

2021-06-20 Thread Olaf Kock
On 20.06.21 04:54, Gustavo Almeida wrote: > "Configuration Reference - The Manager Component" says: > "A Manager element MAY be nested inside a Context component. If it is not > included, a default Manager configuration will be created automatically" > > My Context has no nested Manager element.

Re: CATALINA_OPTS vs JAVA_OPTS

2021-06-16 Thread Olaf Kock
Service configurations are service configurations. You won't run the other options as service, so those are for the JVM that is used for the service. And I'm not aware that a service is stopped as the command line version. At least I'd hope so - a standard JVM would be good enough, if the

Re: Request: Encryption requirements for TLS and SSL for Tomcat

2021-06-08 Thread Olaf Kock
On 08.06.21 14:10, Emen-Eddine AISSAOUI wrote: > Hello, > > I am contacting you regarding the cipher suite recommandations for TLS and > SSL for Tomcat. > > Could you please tell us which cipher suites are used and necessary and if > there is any particular prequesites regarding TLS and SSL

Re: Question about encrypting database passwords in the context.xml file - Tomcat 9

2021-06-07 Thread Olaf Kock
On 07.06.21 10:56, xcorpius wrote: > Hello again! > > Checking the documentation ... Tomcat can create an encrypted password with > the "digest.sh" tool for application passwords. > > But you cannot create an encrypted password for the DB in the context.xml > file. The only solution without

Re: Question about encrypting database passwords in the context.xml file - Tomcat 9

2021-04-26 Thread Olaf Kock
On 26.04.21 13:10, xcorpius wrote: > Hi, > > I wanted to ask about how to encrypt database passwords in the context.xml > file in Tomcat 9. > Hi, please check this article: https://cwiki.apache.org/confluence/display/TOMCAT/Password It covers the topic once and for all... Olaf

Re: Getting additional attributes for logged on users

2021-04-09 Thread Olaf Kock
Hi Carsten, I'll be limiting my answer to the most notable lines and quote only those. (anybody else reading this without following the mails live: Go to the archive to see Carsten's full post) On 08.04.21 22:08, Carsten Klein wrote: > > Typically, those desired extra attributes are stored in

[OT] Re: What exactly does the AJP connector on 8009 do?

2021-04-06 Thread Olaf Kock
On 06.04.21 11:53, André Warnier (tomcat/perl) wrote: > > Shortcut : > - comment-out the AJP Connector in the tomcat configuration > - restart tomcat > - and wait for desperate support calls > That reminds me of the common wisdom in System Administration: *Everybody* has a dedicated testing

Re: [OT] programming style or mental process ?

2021-04-04 Thread Olaf Kock
Hi André On 04.04.21 12:23, André Warnier (tomcat/perl) wrote: > >   if (null == request.getCharacterEncoding()) { > > as opposed to > >   if (request.getCharacterEncoding() == null) { > > > So why do (some) people write it the other way ? > Is it purely a question of individual programming style

Re: Mixed User Session

2021-01-15 Thread Olaf Kock
On 15.01.21 15:57, juan wrote: > Hi, > > We were running tomcat 8.5.57 on CentOS 7 and together with CAS SSO, we > have multiple servers behind an AWS load balancer setup with sticky > sessions. We encountered a weird situation where a user who logged into > their application was presented with

Re: regarding CVE-2020-8022 applicable to tomcat 8.5.57

2020-09-02 Thread Olaf Kock
On 02.09.20 10:16, Rathore, Rajendra wrote: > Please let me know whether CVE-2020-8022 applicable to tomcat 8.5.57 or not, > if yes please let me know which release we fixing it. The CVE states: "A Incorrect Default Permissions vulnerability in the *packaging of tomcat* on SUSE Enterprise

Re: Allowing dir listing of root (/) dir of the machine

2020-08-24 Thread Olaf Kock
On 24.08.20 16:41, Aryeh Friedman wrote: > On Mon, Aug 24, 2020 at 4:27 AM Mark Thomas wrote: > >> On 23/08/2020 22:05, Aryeh Friedman wrote: >>> In order to allow my developers to quickly access any temporarily >> produced >>> html files created/stored outside of webapps (such as those created

Re: Patch for Ubuntu 18

2020-07-20 Thread Olaf Kock
On 20.07.20 15:55, Celestino Federico (ETAS-SEC/ISY-IT) wrote: >   > > Could someone tell me how to find a debdiff for tomcat8 package from > version *8.5.39-1ubuntu1~18.04.3* (last version available on Ubuntu > 18) and version *8.5.56*? > > My expectation is that you'll have to create this

Re: file ownership of webapps and below

2020-07-14 Thread Olaf Kock
On 14.07.20 11:12, Christoph Kukulies wrote: > I found there are some mismatches in file ownership from manual installation > and moving around webapps trees from different tomcat versions. > My current tomcat (9) runs under user.group tomcat.tomcat. A couple of files > have ownership > >

Re: How to encrypt db password in tomcat context.xml

2020-06-28 Thread Olaf Kock
On 28.06.20 19:50, Jürgen Weber wrote: I would like to know how to encrypt and decrypt the database password in context.xml when the application is running which also allow me to change the db password for the purpose of security. >>

Re: How to encrypt db password in tomcat context.xml

2020-06-26 Thread Olaf Kock
On 26.06.20 15:05, FANG YAP wrote: > Hi Tomcat, > > I would like to know how to encrypt and decrypt the database password in > context.xml when the application is running which also allow me to change > the db password for the purpose of security.

Re: Cryptominer malware and Tomcat

2020-06-18 Thread Olaf Kock
Hi Pete, On 17.06.20 23:44, Pete Helgren wrote: > I am going to guess that it is one of these two known vulnerabilities: > > CST-7111: RCE via JSON deserialization (LPS-88051/LPE-165981) > The JSONDeserializer of Flexjson allows the instantiation of arbitrary > classes and the invocation of

Re: Does Tomcat 9 still support AJP connections, REMOTE_USER, and tomcatAuthentication="false"?

2020-05-15 Thread Olaf Kock
hat seem to > be saying that the "tomcatAuthentication" parameter on the Tomcat connection > was no longer supported or something like that? > > Also re. "secret" on the Tomcat side: If that is set to, for example, > "mysecret", how do I pass that on the Apach

Re: Does Tomcat 9 still support AJP connections, REMOTE_USER, and tomcatAuthentication="false"?

2020-05-15 Thread Olaf Kock
On 15.05.20 09:06, oh...@yahoo.com.INVALID wrote: > Hi, > > I am using an Apache proxy in front of Tomcat 9, and I am using AJP > connection to connect from the Apache to Tomcat, and I have the Apache > sending a username to the Tomcat in a REMOTE_USER header. > > In the Tomcat server.xml I

Re: how do I switch class loaders

2020-05-08 Thread Olaf Kock
On 08.05.20 19:50, Christopher Schultz wrote: > Olaf, > > On 5/8/20 13:19, Olaf Kock wrote: > > > You might want to hunt down duplicate classes in the JAR files on > > your classpath. Worst case: unpack them all in temporary > > directories and check for occurren

Re: how do I switch class loaders

2020-05-08 Thread Olaf Kock
utput >>> below). The class is being loaded twice from the same location, I'm >>> guessing by two different class loaders. How can that be? >>> >>> [Loaded org.redisson.tomcat.RedissonSessionManager from >>> file:/C:/dev/tomcat.9.0.19/lib/redisson-tomc

Re: how do I switch class loaders

2020-05-08 Thread Olaf Kock
On 08.05.20 09:37, Jonathan Yom-Tov wrote: > Thanks Mark. Just tried that. I put the redisson-tomcat jar outside of > WEB-INF/lib and added it with scope provided. I get the exact same issue. > What am I doing wrong? Make sure, it's actually gone from your webapp. Depending on the deployment

Re: Tomcat 7.0.103

2020-04-20 Thread Olaf Kock
Hi Greg, On 21.04.20 04:13, Hebner, Greg D. wrote: > We are migrating from 7.0.68 to 7.0.103 to close some security > vulnerabilities. We are running LDAP authentication via JAAS. Authentication > was working normally on 7.0.68. we use scripts to configure Tomcat > installations so every

Re: How to shutdown tomcat

2020-04-17 Thread Olaf Kock
On 17.04.20 16:55, Blake McBride wrote: > I suppose, never mind. I created a startup listener that just does a > System.exit(0) on contextDestroyed which is what I want - exit. > > Thanks. > > Blake > > > On Fri, Apr 17, 2020 at 8:53 AM Blake McBride wrote: > >> Greetings, >> >> I am running

Re: learning tomcat 7 on Linux

2020-04-08 Thread Olaf Kock
On 08.04.20 14:55, Andy Sloane wrote: > Hi, > I have set up a Linux CentOS 7 host, and have installed Tomcat 7... > > ... > I would like to learn how to develop webapps. > I see no particular reason to start with Tomcat 7. Most of the code that you will learn will be version independent, and the

Re: How to increase Memory available to Tomcat?

2020-03-31 Thread Olaf Kock
On 31.03.20 17:02, o haya wrote: > Hi, > > I am running Tomcat 9.02 under RHEL 7 (under Oracle JDK 1.8), and I would > like to increase the memory that is available to Tomcat when it is running. > > I have tried sourcing the following: > > JAVA_OPTS="-Djava.awt.headless=true

Re: Does Tomcat/Java get around the problem of 64K maximum client source ports?

2020-03-26 Thread Olaf Kock
Hi Eric, On 26.03.20 18:58, Eric Robinson wrote: > Greetings, > > Many people say the maximum number of client ports is 64K. However, TCP > connections only require unique sockets, which are defined as... > > local_IP:local_port -> remote_ip:remote_port > > Theoretically, it is possible for a

Re: Is it possible to programmatically compile jsp files?

2020-03-25 Thread Olaf Kock
ommons project has a couple of nice options (I vaguely remember a TeeOutputStream or similar, which would automagically be able to keep your current client happy, while also filling up the buffer) Olaf > On Wed, Mar 25, 2020 at 4:03 PM Olaf Kock wrote: > >> On 25.03.20 14:51, Jona

Re: Is it possible to programmatically compile jsp files?

2020-03-25 Thread Olaf Kock
On 25.03.20 14:51, Jonathan Yom-Tov wrote: > I think I phrased my question incorrectly. What I want to do is to cache > the HTML resulting from the JSPs evaluation so I can serve the cached > result. The reason is that I'm working on an application which makes a lot > of requests per page. This

Re: Is it possible to programmatically compile jsp files?

2020-03-24 Thread Olaf Kock
On 24.03.20 15:44, Jonathan Yom-Tov wrote: > I have a set of jsp files. These jsps' compilation result changes whenever > a variable in my cache changes. I want to compile them whenever that > variable changes so they're ready to serve without going through the normal > pipeline. Is that

Re: AW: gostCat patch

2020-03-23 Thread Olaf Kock
On 23.03.20 15:07, Mark Thomas wrote: > On 23/03/2020 14:02, Fritze, Florian wrote: >> Maybe I am making it too easy but if you or another tomcat developer could >> prevent the newest Tomcat from throwing this exception: >> >> org.apache.catalina.core.StandardService.startInternal Failed to

Re: Security audit raises questions (Tomcat 7.0.93)

2020-03-18 Thread Olaf Kock
On 18.03.20 01:04, James H. H. Lampert wrote: > On 3/17/20 3:50 PM, Mark Thomas wrote: >> The XXS might be valid. I assume the tool provided a sample URL you >> could use to validate the finding. That should point you in the right >> direction but feel free to ask here if more help is required.

Re: Tomcat 8.5.51 fails

2020-02-13 Thread Olaf Kock
On 13.02.20 11:17, Olaf Kock wrote: > On 13.02.20 10:36, kohm...@iris.eonet.ne.jp wrote: >> On 2020/02/13 18:25, André Warnier (tomcat/perl) wrote: >>> Check in the file (tomcat_dir)/conf/server.xml, the Connector : >>> >>>     >> The setting is the

Re: Tomcat 8.5.51 fails

2020-02-13 Thread Olaf Kock
On 13.02.20 10:36, kohm...@iris.eonet.ne.jp wrote: > On 2020/02/13 18:25, André Warnier (tomcat/perl) wrote: >> Check in the file (tomcat_dir)/conf/server.xml, the Connector : >> >>     > > The setting is the same as mine. > > I have use server.xml used in 8.5.50. In case of 8.5.50, I have no

Re: Question on Apache Tomcat Patches

2020-02-11 Thread Olaf Kock
On 11.02.20 15:39, Walker, Mike (GE Aviation, US) wrote: > So apache only releases full versions not upgrades? Does that mean if you > run the version 7.99 it will create a new folder under Apache Software > Foundation folder for 7.99 files? Since this would imply a change to the path > for

Re: RewriteValve does not work on HTTPS

2020-02-04 Thread Olaf Kock
On 04.02.20 20:31, Hua Zhang wrote: > Best tomcat team, > > Hereby I have a question about an issue I found by using RewriteValve > on tomcat 9.30 > > The rewrite.config is very simple: > > /RewriteCond %{HTTP_HOST} =youkoop.com > RewriteRule ^.*$ https://www.youkoop.com

Re: Dates on Linux vs. Windows - Resolved

2020-01-08 Thread Olaf Kock
On 08.01.20 06:05, Jerry Malcolm wrote: > Just to summarize for anybody who comes along with a similar > problem I original set the timezone of mySQL RDS instance to > Central time when I created it months back (unchangable after it's > set).  I set my Linux timezone to Central as well in

Re: Tomcat 9 does not allow to read file in /tmp folder with 777 permission?

2020-01-04 Thread Olaf Kock
On 04.01.20 15:35, bphamhuu wrote: > Hello, > > I have a java web application by Tomcat 9 servlet container which tries to > read a file in /tmp folder with 777 permission on Ubuntu 18.04 > > ls -ltr /tmp/test.txt > -rwxrwxrwx 1 vagrant vagrant 10 Jan 3 17:03 /tmp/test.txt > > The java code is:

Re: HSTS not apply to some request URI path on tomcat 8.5.9 Centos 7

2019-12-26 Thread Olaf Kock
On 26.12.19 11:22, Pattavee Sanchol wrote: > Dear support team > > I config tomcat server to enabled HSTS some request URI path not > response with Secure heading > > ... > > > I some request URI such as http://192.168.1.1/%20 is not response with > security hedering > > > this is working > > >

Re: Exception while starting tomcat version 9.0.29

2019-12-20 Thread Olaf Kock
On 20.12.19 13:28, Kushagra Bindal wrote: > Hi, > > We are working on upgrading our tomcat version from 8.5.24 to 9.0.29. In > this process, while starting one of our services we found that while > starting catalina.out is having some exception. > > Note: This exception we are getting before

OT Developer Praise - was Re: EOL for Tomcat 9.X ?

2019-10-22 Thread Olaf Kock
On 22.10.19 17:56, Michael Osipov wrote: > Am 2019-10-22 um 16:43 schrieb Christopher Schultz: >> >> So Tomcat 9 is looking good for aother 10 years at this point. > > ...and this is the reason why I appreciate the Tomcat devs' work. I > can simply stick to a version and virtually forget about

Re: Adding the manager app to an existing installation

2019-10-18 Thread Olaf Kock
On 18.10.19 17:21, Tom Povey wrote: > Hi, > > I’ve been asked to help with an existing Tomcat install which is supporting a > live website. When it was installed, it did not have the manager app added. > We want to use the manager app now. > > I have copied the manager folder from another

Re: EOL for Tomcat 9.X ?

2019-10-18 Thread Olaf Kock
On 18.10.19 17:25, Robert Hicks wrote: > Management is asking me if there is an end of life for Tomcat 9 reported. I > don't see anything on the tomcat web site. Mark recently answered this to a the same question for Tomcat 8.5: There is no official date. The Tomcat project maintains 3 major

Re: Password encryption in Tomcat 8.5.35

2019-09-16 Thread Olaf Kock
On 16.09.19 08:24, Olaf Kock wrote: > If someone has access to the old Wiki's information, it'd be a great > page to restore. > "Do you really want to send this mail?" - "Of course" - "so be it" - m( Facepalm: It takes the steps above to think of a

Re: Password encryption in Tomcat 8.5.35

2019-09-16 Thread Olaf Kock
On 16.09.19 06:05, Mohan T wrote: > Hi, > > We are using tomcat 8.5.35, on Red Hat Enterprise Linux Server release 7.4. > > Is it possible to encrypt or mask passwords that is being used in the > datasource for connecting to database. I am mentioning the credentials in > server.xml There used

Re: [ANN] Apache Tomcat 9.0.24 available

2019-08-21 Thread Olaf Kock
On 20.08.19 21:43, Christopher Schultz wrote: > Olaf, > > On 8/19/19 09:55, Olaf Kock wrote: > > > If nothing changed since I looked at it last time, ubuntu didn't > > update to a new version, but at most backported some fixes while > > staying on roughly the sa

Re: Tomcat 9 Getting Started

2019-08-20 Thread Olaf Kock
On 20.08.19 12:28, Enosh Mogire wrote: > When I execute ls -la /opt/tomcat this is what I get > > enosh@hp:~$ ls -la /opt/tomcat > total 36 > drwxr-xr-x 3 tomcat tomcat 4096 Aug 20 08:55 . > drwxr-xr-x 7 root root 4096 Aug 19 10:53 .. > drwxr-xr-x 9 tomcat tomcat 4096 Aug 14 10:31

Re: Tomcat 9 Getting Started

2019-08-20 Thread Olaf Kock
On 20.08.19 10:14, Enosh Mogire wrote: > So after installing and extracting the Tomcat archive file, I needed to set > the required permissions on the files through the commands bellow > > enosh@hp:~$ sudo chgrp -R tomcat /opt/tomcat > enosh@hp:~$ cd /opt/tomcat/ > enosh@hp:/opt/tomcat$ sudo

Re: Tomcat 9 Getting Started

2019-08-20 Thread Olaf Kock
On 20.08.19 09:44, Enosh Mogire wrote: > I trust that your week is well and that this email finds you well. My name > is Enosh and I am a newbie to the system. I recently started a personal > learning project with DHIS2 and I needed to install the Apache servlet but > I keep on getting this

Re: [ANN] Apache Tomcat 9.0.24 available

2019-08-19 Thread Olaf Kock
On 19.08.19 15:41, John Dale wrote: > Does this get included in the apt framework for ubuntu automatically? > > John > > > On 8/19/19, Mark Thomas wrote: >> The Apache Tomcat team announces the immediate availability of Apache >> Tomcat 9.0.24. If nothing changed since I looked at it last

Re: AW: Updating tomcat 7 to 9 got problems

2019-06-07 Thread Olaf Kock
Christopher, On 07.06.19 16:41, Christopher Schultz wrote: > Olaf, > > On 6/7/19 10:04, Olaf Kock wrote: > > On 07.06.19 15:30, Support wrote: > >> Hi, > >> > >> it is not working my folder structure is usr/share/tomcat > > > [snip] > >

Re: AW: Updating tomcat 7 to 9 got problems

2019-06-07 Thread Olaf Kock
On 07.06.19 15:30, bernd.sch...@daimler.com wrote: > Hi, > > it is not working my folder structure is usr/share/tomcat On top of Bernd's questions: Please provide as much detail as you can. "It is not working" isn't really helpful for coming up with additional suggestions. How exactly is it not

Re: Running sudo from a servlet

2019-05-23 Thread Olaf Kock
On 22.05.19 18:31, Christopher Schultz wrote: > Claude, > > On 5/21/19 14:20, Claude Brisson wrote: > > (responding to myself) > > > The culprit is the option > > > NoNewPrivileges=true > > > in the file > > /etc/systemd/system/multi-user.target.wants/tomcat8.service > > > When changed to false,

Re: Latest Best Practices for Tomcat Tuning

2019-05-22 Thread Olaf Kock
On 22.05.19 16:36, Louis Zipes wrote: > Hi Experts, > I know that if you Google 'Tomcat Tuning' you will get some hits (ex. > https://www.mulesoft.com/tcat/tomcat-performance) but I would like to see if > we can have a discussion of best practices for Tomcat tuning from the group > of experts

Re: Problem in ApacheTomcat - 8.0. 37: Files are not displaying in sorted order.

2019-04-24 Thread Olaf Kock
On 24.04.19 14:52, Rahul Ranjan wrote: > Hi Team, > > I am facing an issue which is related to ApacheTomcat-8.0.37. I wrote > a code to display the files/folder in browser. By default it should > display in alphabetically sorted order. But it's not showing. > I have migrated my code from Unix to

Re: Could not find datasource: java:/comp/env/jdbc/TOPSDB when start Tomcat 9.0.13

2019-03-25 Thread Olaf Kock
On 25.03.19 03:41, Hua, Gary - Saint Louis, MO - Contractor wrote: > Hi experts: > > After I deployed my application TOPS to Tomcat server(9.0.13) > on Linux box, and started the server, I got the following error: > > > 1537 [main] FATAL

Re: Default Max response size in Tomcat

2019-03-20 Thread Olaf Kock
On 20.03.19 12:08, Saurav Sarkar wrote: > Just to add the stack trace. > > I am getting ClientAbortException "Connection reset by peer" when i am > trying to write to the response stream > > 2019-03-20T10:32:28.501+ [APP/PROC/WEB/0] ERR >

Re: What is `tomcat7/common/` for?

2019-03-13 Thread Olaf Kock
On 13.03.19 15:01, Joel Griffith wrote: > I installed it using Ubuntu's apt-get install, so installing it again > won't do anything different. Is there a documentation page > that lists what files are supposed to be there? > That would help. I can't seem to find one. If you installed through

Re: What is `tomcat7/common/` for?

2019-03-13 Thread Olaf Kock
On 13.03.19 14:22, Joel Griffith wrote: > > I think it was accomplishing something; tomcat7/common/lib/ contained a > > bunch of .jar files that looked like standard Tomcat installation files > > (tomcat7-websocket.jar, tomcat-catalina-7.0.68.jar, etc.).  If I switch > > directories in the

Re: I'm not able to get acces server status Apache Tomcat/9.0.16

2019-03-05 Thread Olaf Kock
On 04.03.19 19:06, ITMex wrote: > Hi everyone, I'm running Apache Tomcat/9.0.16 over CentOS 7 so far is > okay, but I'm not able to get acces to "server status, Manager App and > Host Manager" menus, even from localhost I got the following message: > > > HTTP Status 404 – Not Found Did you

Re: Tomcat Apache 7.0.79 upgrade to Latest version

2019-02-20 Thread Olaf Kock
Hi Nitin, John gave you a good primer, for almost all of the rest I'll point to the fine documentation again. Look at a diff between your current installation and the plain vanilla download of the tomcat version that you're running. What I want to comment on is this: On 20.02.19 15:33, Nitin

Re: Tomcat Apache 7.0.79 upgrade to Latest version

2019-02-20 Thread Olaf Kock
On 20.02.19 14:47, Nitin Kadam wrote: > Thanks John for reply.. > > is there any documentation walkthrough for this upgrade available? > i am new to Tomcat and e to doing this 1st time, It will be great help if > anyone > provide same. There's plenty of documentation on

Re: Tomcat Apache 7.0.79 upgrade to Latest version

2019-02-20 Thread Olaf Kock
On 20.02.19 13:57, Nitin Kadam wrote: > Hello Team, > > Can you please guide how we can migrate seamlessly from Tomcat > apache 7.0.79 to 7.0.92 or any latest version that 8.x or 9.x ( Windows > 2012 R2 server)escr 7.0 to 8.0: https://tomcat.apache.org/migration-8.html 8.0 to 8.5:

Re: Anyway to set more max ram to Tomcat 32bit?

2019-01-04 Thread Olaf Kock
On 04.01.19 02:46, ark...@tutanota.com wrote: > Something wierd seems to be going on... I have an application on tomcat that > used to be on a physical windows server 2008 standard 32-bit which I p2v'd > with vmware converter over as a VM. I'm upgrading the server to windows > server 2008 r2

  1   2   3   >