Re: Tomcat closes connections on unexpected status codes

2024-04-24 Thread Stefan Ansing
Op do 18 apr 2024 om 17:42 schreef Mark Thomas : > On 18/04/2024 15:18, Stefan Ansing wrote: > > Hi Rémy, Mark, > > > > > > > > I just want to make sure that we’re understanding each other. I can see > > that the connection needs to be closed in certain cond

Re: Tomcat closes connections on unexpected status codes

2024-04-18 Thread Stefan Ansing
Op do 18 apr 2024 om 15:41 schreef Rémy Maucherat : > On Thu, Apr 18, 2024 at 1:17 PM Mark Thomas wrote: > > > > On 18/04/2024 09:07, Stefan Ansing wrote: > > > Hi, > > > > > > We've observed some unexpected behaviour in Apache Tomcat (version &

Tomcat closes connections on unexpected status codes

2024-04-18 Thread Stefan Ansing
the behaviour configurable. A colleague of mine reported a bug for this issue: https://bz.apache.org/bugzilla/show_bug.cgi?id=68901 Kind regards, Stefan Ansing [1]: https://github.com/apache/tomcat/blame/bc900e0100de9879604b93af4722c272ab3d1a24/java/org/apache/coyote/http11/Http11Processor.java#L604

Re: Tomcat/Java starts using too much memory and not by the heap or non-heap memory

2024-01-06 Thread Stefan Mayr
this should also allow 1GB of native memory which may result in more then 2GB of memory used by the JVM Regards, Stefan Mayr - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users

Re: Tomcat/Java starts using too much memory and not by the heap or non-heap memory

2023-12-30 Thread Stefan Mayr
to limit that or use the Java flight recorder and tools like Mission Control or VisualVM to make that kind of memory usage visible. Regards, Stefan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional

Re: [SECURITY] CVE-2023-34981 Apache Tomcat - Information disclosure

2023-06-21 Thread Stefan Mayr
the previous request for the current request leading to an information leak. > ... Are setups with mod_jk also affected? Thanks, Stefan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands

Tomcat connection pool 9.0.52 uses more then configured maxActive connections

2023-05-22 Thread Stefan López Romero
ssword); } } //end if In the end, this problem causes all my available DB connections to be used up and my application to fail. Is this a known problem? Is there a workaround? Thanks for your answers, Regards Stefan Stefan López Romero Senior Lead IT Architect Theresienhöhe 13, 80339 M

Re: HTTP Error 414. The request URL is too long.

2023-03-10 Thread Stefan Mayr
Am 10.03.2023 um 08:27 schrieb Stefan Mayr: Am 10.03.2023 um 07:58 schrieb Thomas Hoffmann (Speed4Trade GmbH): Hello, -Ursprüngliche Nachricht- Von: Seth Mayers Gesendet: Freitag, 10. März 2023 01:14 An: Tomcat Users List Betreff: Re: HTTP Error 414. The request URL is too long

Re: HTTP Error 414. The request URL is too long.

2023-03-09 Thread Stefan Mayr
any/pet-food-experts> [image: twitter icon] <https://twitter.com/petfoodexperts> [image: youtube icon] <https://www.youtube.com/c/PetFoodExperts> - To unsubscribe, e-mail: users-unsubscr...@tomcat.apac

Re: Tomcat in distroless image

2022-07-08 Thread Stefan Mayr
Hi Chris, Am 07.07.2022 um 00:59 schrieb Christopher Schultz: Stefan, On 7/6/22 18:50, Stefan Mayr wrote: Am 05.07.2022 um 23:36 schrieb Pawel Veselov: Christopher, Stephan, On Tue, Jul 5, 2022 at 11:18 PM Christopher Schultz wrote: Stefan, On 7/2/22 09:45, Stefan Mayr wrote: Hi, Am

Re: Tomcat in distroless image

2022-07-06 Thread Stefan Mayr
Am 05.07.2022 um 23:36 schrieb Pawel Veselov: Christopher, Stephan, On Tue, Jul 5, 2022 at 11:18 PM Christopher Schultz wrote: Stefan, On 7/2/22 09:45, Stefan Mayr wrote: Hi, Am 01.07.2022 um 17:10 schrieb Christopher Schultz: Thomas, On 6/30/22 13:52, Thomas Meyer wrote: Sadly

Re: Tomcat in distroless image

2022-07-02 Thread Stefan Mayr
those features. - you should avoid logging into files and tune the logging configuration to log everything to stdout and stderr Regards, Stefan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional co

Re: mod_jk interference with ErrorDocument/Alias on HEAD request

2022-02-20 Thread Stefan Mayr
Hi, i created a bugzilla entry (https://bz.apache.org/bugzilla/show_bug.cgi?id=65901) and included a first attempt to patch this issue. Am 12.02.2022 um 14:24 schrieb Stefan Mayr: Hello Tomcat users, this week we were debugging a strange connection issue which I tracked down

Re: mod_jk interference with ErrorDocument/Alias on HEAD request

2022-02-15 Thread Stefan Mayr
Hello Thomas, Am 15.02.2022 um 11:38 schrieb Thomas Hoffmann (Speed4Trade GmbH): Hello Stefan, by spec / RFC, a HEAD request is not allowed to return any body. Greetings, Thomas This is true and that is why i'm writing to this list. In the described case mod_jk returns a response body

Re: mod_jk interference with ErrorDocument/Alias on HEAD request

2022-02-14 Thread Stefan Mayr
Hello again, a self-compiled mod_jk 1.2.48 shows the same issue. Am 13.02.2022 um 18:37 schrieb Stefan Mayr: Hi, looking at the source code https://github.com/apache/tomcat-connectors/blob/main/native/apache-2.0/mod_jk.c#L2954#L2973 I did some more testing: Variant 1: JkMount /demo

Re: mod_jk interference with ErrorDocument/Alias on HEAD request

2022-02-13 Thread Stefan Mayr
->status The response only seems correct for variant 1 - which is configured to let Apache httpd handle all responses for status codes >= 401. For variant 2 mod_jk seems to handle the response itself - contrary to what the comment explains. Am 12.02.2022 um 14:24 schrieb Stefan Mayr:

Re: mod_jk interference with ErrorDocument/Alias on HEAD request

2022-02-13 Thread Stefan Mayr
t /error/* ajp13_worker -Ursprüngliche Nachricht- Von: Stefan Mayr Gesendet: Samstag, 12. Februar 2022 14:24 An: Tomcat Users List Betreff: mod_jk interference with ErrorDocument/Alias on HEAD request Hello Tomcat users, this week we were debugging a strange connection iss

mod_jk interference with ErrorDocument/Alias on HEAD request

2022-02-12 Thread Stefan Mayr
try to compile the latest mod_jk version yet because I didn't spot a relevant point in the changelog. Can anyone confirm this behaviour or point me to a configuration directive i missed? Thank you, Stefan Mayr - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Do I Need Network NameSpaces to Solve This Tomcat+Connector/J Problem?

2021-12-30 Thread Stefan Mayr
solution in terms of implementation and operation is the one Mark suggested: add multiple ip addresses and/or ports to your database listener. Regards, Stefan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org

Re: [OT] Spring Security LDAPS authenticator won't trust TLS cert

2021-01-25 Thread Stefan Mayr
e certificate is ignored and it now only works when you add the intermediate certificate to your truststore. Please verify which intermediate certificate is provided by your LDAPS e.g. openssl s_client -connect ldaps.example.com:636 -showcerts - Stefan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: [EXTERNAL] Re: Bouncy Castle FIPS on RHEL 7.3

2020-11-30 Thread Stefan Mayr
w secondes. I think Red Hat preferes rngd but there should be some articles on access.redhat.com to help you depending on the used hypervisor. Regards, Stefan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.or

Re: Weirdest Tomcat Behavior Ever?

2020-11-05 Thread Stefan Mayr
389 >> 09:15:23 544203 >> 09:15:38 546395 >> >> It's not ideal; as it seems to take 15-20 seconds to count them using lsof. >> >> >> > > Wait, never mind. I realized the per-process limits are wh

Re: Tomcat mod_jk rpm-build for CentOS-8 - exit with error.

2020-07-17 Thread Stefan Mayr
at-rpm-config && \ yum clean all RUN cd /usr/src && \ curl --silent --remote-name ${REMOTE_URL} && \ tar -xzf tomcat-connectors-${JK_VERSION}-src.tar.gz && \ cd tomcat-connectors-${JK_VERSION}-src/native && \ ./configure --with-apxs=/us

Re: Wrong timezone in Date and Last-Modified-Headers

2020-06-10 Thread Stefan Mayr
the release notes. Using a request with a If-Modified-Since-Header changed the timezone in the Tomcat-Response. Luckily the latest Spring Boot release 2.1.14 contains Tomcat 9.0.34 which includes the bugfix. Thanks, Stefan -

Wrong timezone in Date and Last-Modified-Headers

2020-06-10 Thread Stefan Mayr
en this or an idea what could have happened there? After the restart I can't reproduce it. Thanks, Stefan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: [SECURITY] CVE-2020-9484 Apache Tomcat Remote Code Execution via session persistence

2020-05-24 Thread Stefan Mayr
sistentManager as in org.apache.catalina.session.PersistentManager? So a vulnerable configuration would need to use something like Regards, Stefan Mayr - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: [SECURITY] CVE-2020-1938 AJP Request Injection and potential Remote Code Execution

2020-03-01 Thread Stefan Mayr
of the web application by some other means) then this, along > with the ability to process a file as a JSP, made remote code execution > possible. Is this a bug which is or will be fixed or is this a fundamental design flaw of AJP which cannot be fixed? So to trust or not to trust are

Re: [ANN] Apache Tomcat 9.0.31 available

2020-02-13 Thread Stefan Mayr
e to change the configuration management while rolling out new Tomcat versions without breaking things. Now the critical question: will this break the previous versions or will they just ignore unkown parameters? Regards, Stefan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: [ANN] Apache Tomcat 9.0.31 available

2020-02-12 Thread Stefan Mayr
n 10.x but not in the lifecycle of an existing major version. Regards, Stefan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: ECDSA Private Keys

2020-01-12 Thread Stefan Mayr
th-signature-type). I guess this might change. Let's Encrypt is quite popular and plans to change to ECDSA for Root and Intermediate certificates Source: https://letsencrypt.org/upcoming-features/ - Stefan - To unsubscribe, e

Re: Jakarta EE 9

2019-10-29 Thread Stefan Mayr
Am 28.10.2019 um 22:07 schrieb Michael Osipov: Am 2019-10-28 um 22:00 schrieb Stefan Mayr: Am 28.10.2019 um 14:13 schrieb Rémy Maucherat: On Mon, Oct 28, 2019 at 1:46 PM Johan Compagner wrote: Hi On Mon, 28 Oct 2019 at 13:15, Mark Thomas wrote: Hi all, A frequent topic of discussion

Re: Jakarta EE 9

2019-10-28 Thread Stefan Mayr
ed to change. The API needs to remain compatible. When javax.* is renamed to jakarta.* it should be sufficient to have a javax.* shim library that translates everything to use jakarta.*. Or is there any public information that Oracle prohibits that too? Regards, Stefan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Multiple Hosts in server.xml - expected behaviour?

2018-09-01 Thread Stefan Mayr
Hi, Am 31.08.2018 um 19:22 schrieb Christopher Schultz: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Stefan, > > On 8/30/18 23:27, Stefan Mayr wrote: >> we got an application has multiple Service, Engine and Host entries >> in server.xml. All Host sec

Multiple Hosts in server.xml - expected behaviour?

2018-08-30 Thread Stefan Mayr
pX" for diffenent applications appX. Is this a valid configuration (for Tomcat 7.0)? If yes, what should we expect to happen? We currently see and endless loop of application deployments that fail because the ports of the Service Connector is already

Re: Documentation for Catalina Base

2018-07-31 Thread Stefan Mayr
lina.properties, context.xml, ... Some stackoverflow answers to that question recommend to copy the whole conf directory from CATALINA_HOME to CATALINA_BASE. I'm not sure if this is a good idea if I don't need to change the defaults. The documentation could be improved by listing the files that are mandatory in CATALINA_BASE Regards, Stefan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

TC 8.5.27 clustering doesn't work as described(?) and expected

2018-05-01 Thread Stefan Hall
uster. This contradicts in my opinion the parameter expireSessionsOnShutdown="false" and its explanation. I can also set the parameter to true, no change. Hope you can help me. Stefan - To unsubscribe, e-mail: us

Re: Can tomcat 9 handled EJB ?

2018-04-01 Thread Stefan Frei
Hi Karen your keyword here could be "TomEE", a collegue of mine used it recently to code an application, as far as i know its a tomcat with extended EE-Functionalities. Cheers 2018-04-01 16:33 GMT+02:00 Karen Goh : > Hi expert, > > I have come to the point where I

Re: I cant start Tomcat instances

2018-03-17 Thread Stefan Frei
check the permissons on the .sh files (chmod +x) 2018-03-17 14:16 GMT+01:00 Loai Abdallatif : > Dear Colleagues > I'm new to tomcat, I have successfully installed the service but when I > tried to run three instances I coudnt due to error below > > : the this I did is

Re: TomcatCon London slides and recordings

2017-10-04 Thread Stefan Mayr
es, Load-Balancing & Clustering - Part 1 and Part 2 link the same slides. Regards, Stefan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: [SECURITY] CVE-2017-5647 Apache Tomcat Information Disclosure

2017-04-10 Thread Stefan Mayr
che.org/security-8.html > [3] http://tomcat.apache.org/security-7.html > [4] http://tomcat.apache.org/security-6.html > > > - > To unsubscr

Re: Tomcat 8.5.5 (8.5+) Default Cookie Processor breaks persistent cookies for all IE versions

2016-11-06 Thread Stefan Mayr
r the next release > (not the one currently in progress but the one expected early next month). > > We also need to update the note in the docs about IE versions. > > Mark > > ----- > To unsubscribe, e-mail: users-unsubscr...@tomcat.a

Re: Code signing WAR and verification

2016-08-09 Thread Stefan Mayr
Am 09.08.2016 um 19:48 schrieb Mark Thomas: On 09/08/2016 18:29, Stefan Mayr wrote: Hi, two colleagues came with an idea that our new java platform should only run signed code. In the java world I've only seen signed java applets. From a bit of internet research it looks like any JAR, WAR

Code signing WAR and verification

2016-08-09 Thread Stefan Mayr
that this is supported or verified in WebLogic. So how about Tomcat? Is there any verification of signed code or are there any configuration flags to enable/enforce/disable this? I would guess the signature is ignored. Am I wrong? Thank you, Stefan Mayr

setting jvm parameters to optimize production performance

2016-05-06 Thread Stefan Frei
Tomcat 8.0.33 Debain jessie java 8 Hello i cannot find any resources how to set configure the setenv.sh for a production environment. Does somebody have some tips? Best regards Stefan - To unsubscribe, e-mail: users-unsubscr

CredentialHandler

2016-04-27 Thread Stefan Frei
like this atm. Its working, but passwords are stored in plain text. Regards Stefan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Small problems compiling tomcat native

2016-04-25 Thread Stefan Frei
ok thx for the hint. dunno why debian still provides 1.0.1. anyway i plan to migrate the production to ubuntu, im almost sure they have a more recent openssl. i only took the 1.1 release because of the old ssl. Regards Stefan 2016-04-25 14:57 GMT+02:00 Rainer Jung <rainer.j...@kippdata

Re: Small problems compiling tomcat native

2016-04-25 Thread Stefan Frei
very sorry just solved it. overlooked a line in configure /root/tomcat-native-1.1.34-src/jni/native/build/get-version.sh: Permission denied Regards Stefan 2016-04-25 14:04 GMT+02:00 Rainer Jung <rainer.j...@kippdata.de>: > Can you provide the full configure command you use and the

Re: Small problems compiling tomcat native

2016-04-25 Thread Stefan Frei
libapr1:amd64 1.5.1-3 openssl1.0.1k-3+deb8u4 2016-04-25 12:35 GMT+02:00 Mark Thomas <ma...@apache.org>: > On 25/04/2016 10:31, Stefan Frei wrote: >> Hello >> >> tomcat 8.0.33 >> tomcat-native-1.1.34-src >> SMP Debia

Small problems compiling tomcat native

2016-04-25 Thread Stefan Frei
information make[1]: *** [libtcnative-.la] Error 1 make: *** [all-recursive] Error 1 I followed the instructions described here: https://tomcat.apache.org/native-doc/ how can i debug this? Best regards Stefan - To unsubscribe

Re: Can tomcat serve MPI (parallel) applications?

2015-11-30 Thread Stefan Mayr
ot. If you write this wrapper in java you could use an embedded tomcat or jetty to startup a servlet container where needed. Regards, Stefan Mayr - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional c

Re: Http 2 support in Tomcat

2015-05-15 Thread Stefan Mayr
procotol. - Stefan -- Mayr Stefan Hausen - Gassenaecker 10 82269 Geltendorf Tel.: 08193 - 9979469 - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Multiple SSL certificates on one Instance

2015-03-16 Thread Stefan Frei
hi 2 points: configure the reverse proxy is simpler. tomcat may be harder to troubleshoot issues. i would take the prxy to do that, in fact we use squid rev-proxy to solve exact the same problem. Regards Stefan 2015-03-16 14:16 GMT+01:00 Mark Thomas ma...@apache.org: On 16/03/2015 12:53

Re: Umlaut URLs fail in Tomcat when accessed via isapi_redirect

2015-01-08 Thread Stefan Löhr
OK. Thanks very much! - Original Message - From: André Warnier a...@ice-sa.com To: Tomcat Users List users@tomcat.apache.org Sent: Thursday, January 08, 2015 11:56 AM Subject: Re: Umlaut URLs fail in Tomcat when accessed via isapi_redirect Stefan Löhr wrote: Did you add

Umlaut URLs fail in Tomcat when accessed via isapi_redirect

2015-01-08 Thread Stefan Löhr
would really appreciate any hints to solve the problem. Greetings, Stefan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Umlaut URLs fail in Tomcat when accessed via isapi_redirect

2015-01-08 Thread Stefan Löhr
Did you add URIEncoding=UTF-8 to the AJP connector? Thanks Mark! That solved it. I only added URIEncoding to the 8080 Connector Port. Why does it also have to be in the AJP connector? Greetings, Stefan - Original Message - From: Mark Thomas ma...@apache.org To: Tomcat Users List

Re: Tomcat Connection Pool Problems with XtraBackup

2014-10-12 Thread Stefan Mayr
locks. A problem we seen is high IO load during XtraBackup. Your DBA could check iostats while backup is in progress. If this makes your database server unresponsive he could try to throttle the backup: http://www.percona.com/doc/percona-xtrabackup/2.2/innobackupex/throttling_ibk.html -Stefan

Re: [OT] Forward TLS connection information from AWS ELB - httpd - Tomcat

2014-10-01 Thread Stefan Mayr
/ Togehter with transport-guarantee CONFIDENTIAL in your web.xml this would eliminate the need to configure anything on Apache httpd at all. - Stefan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands

Re: [OT] Forward TLS connection information from AWS ELB - httpd - Tomcat

2014-10-01 Thread Stefan Mayr
' list about that. ... mod_remoteip can do more for you (if you need it). Just for the purpose of logging the X-Forwarded-For-Header you could define a custom LogFormat and add request headers like \%{X-Forwarded-For}i\ to it. - Stefan

Re: How to create an Oracle XA Datasource within Tomcat 7

2014-08-29 Thread Stefan Mayr
in the oracle driver. Regards, Stefan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: How to create an Oracle XA Datasource within Tomcat 7

2014-08-27 Thread Stefan Mayr
for URLs and http://docs.oracle.com/cd/E18283_01/appdev.112/e13995/oracle/jdbc/pool/OracleDataSource.html for the possible parameters and default values. Regards, Stefan -- Mayr Stefan Hausen - Gassenaecker 10 82269 Geltendorf Tel.: 08193 - 9979469

Re: How to configure persistence session cookie with apache tomcat

2014-08-15 Thread Stefan Mayr
will show a table with Cookie and Response-Header information. As Oracle seems to support cluster configuration of OIA you could also ask their support about the setup requirements. Stefan -- Mayr Stefan Hausen - Gassenaecker 10 82269 Geltendorf Tel.: 08193 - 9979469

Tomcat as Windows service under technical user

2014-01-27 Thread Strobel, Stefan (TS IC)
(that starts at Windows startup) as the technical user A? I tried various commands, but didn't get it working. Any ideas, solutions? Thanks Stefan

Re: Packet misses in Tomcat

2014-01-13 Thread Stefan Mayr
Am 13.01.2014 07:22, schrieb Divyaprakash Y: -Original Message- From: Stefan Mayr [mailto:ste...@mayr-stefan.de] Sent: 10 January 2014 23:26 To: users@tomcat.apache.org Subject: Re: Packet misses in Tomcat Hi Am 09.01.2014 14:21, schrieb Divyaprakash Y: -Original Message

Re: Packet misses in Tomcat

2014-01-10 Thread Stefan Mayr
setup) or are there any extra configurations which I missed in my server.xml? This might be the issue seen in https://issues.apache.org/bugzilla/show_bug.cgi?id=55976 . Looks like Mark fixed it today for 7.0.51 (not released yet) - Stefan

Re: Same realm for three different countries

2013-12-03 Thread Stefan Frei
Hello thanks for your all help. I think the solution is possible with the username. when i use firstname.lastn...@webapp.ch i can evaluate that in the realm and the changes i have to made are not that hard. Cheers Stefan 2013/12/3 Martin Gainty mgai...@hotmail.com: $CATALINA_HOME/srcgrep -S

Same realm for three different countries

2013-12-02 Thread Stefan Frei
is destined? Cheers Stefan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Same realm for three different countries

2013-12-02 Thread Stefan Frei
do you see a entry point where to start ? i already have a customRealm 2013/12/2 Christopher Schultz ch...@christopherschultz.net: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Stefani, On 12/2/13, 2:23 PM, Stefan Frei wrote: tomcat 7.0.42 debian I have the same webapplication

RE: FormAuthenticator: saveRequest does not preserve body

2013-11-14 Thread Bley, Stefan
? Or reset? Because I can see the form data in the coyote request input buffer. It is just the stream that can't be read. is.available() also returns 0. Stefan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional

RE: FormAuthenticator: saveRequest does not preserve body

2013-11-14 Thread Bley, Stefan
Thanks Chris. When you say request input buffer, which buffer do you mean? I haven't looked at the code in a while, but the FormAuthenticator may parse POST multipart/form-data into individual parameters, thus draining the input stream in the process. Perhaps you are looking for your missing

RE: FormAuthenticator: saveRequest does not preserve body

2013-11-14 Thread Bley, Stefan
mean getParameter* from the request, then yes. We call request.getParameter(SAMLRequest) in order to find out wether it is a SAML request. So you are stating that once a Request#getParameter* method has been called the request inputstream is consumed and might not be used again? Stefan

FormAuthenticator: saveRequest does not preserve body

2013-11-13 Thread Bley, Stefan
) ) = 0) { body.append(buffer, 0, bytesRead); } Can anybody give a hint why the request inputstream can't be read? Thank you! Stefan Tomcat 7.0.42 Picketlink 2.5.2.Final Java 1.6.0_26 SuSE Linux 12

RE: FormAuthenticator: saveRequest does not preserve body

2013-11-13 Thread Bley, Stefan
Was there a body ? What kind of request was it ? A POST request with form params in it (JSF view state etc.). I can see them in request.coyoteRequest.parameters and request.coyoteRequest.inputBuffer.buf when debugging. So the params are in the buffer but the buffer isn't read as expected.

Re: Session does not get invalidated when sessionCookiePath is set to /

2013-10-03 Thread Stefan Haberl
the sessionCookiePath=/ line at the context descriptor inside the WAR (/META-INF/context.xml) you can reload the page (Step 6 above) as often as you like and new session IDs will be generated as they IMHO should be to prevent session fixation attacks. Anyone any thoughts on this? Stefan

Re: Session does not get invalidated when sessionCookiePath is set to /

2013-10-03 Thread Stefan Haberl
configured another cookie path for the second test.war (/test/) and the error *did not* occur. Please tell me when you're done with testing so that I can take the server offline again. Stefan On 03.10.2013, at 14:40, Christopher Schultz ch...@christopherschultz.net wrote: -BEGIN PGP

Session does not get invalidated when sessionCookiePath is set to /

2013-10-02 Thread Stefan Haberl
case (because I'm running the webapp as ROOT anyhow), but is this expected behaviour? Regards, Stefan -- Stefan Haberl http://christa-und-stefan.net - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org

Re: Session does not get invalidated when sessionCookiePath is set to /

2013-10-02 Thread Stefan Haberl
Hi Chuck, Sorry, that was a copy and paste error into my mail client. My context.xml of course looks like: Context sessionCookieDomain=acme.org sessionCookieName=acme useHttpOnly=true disableURLRewriting=true !-- disable persistent sessions -- Manager pathname= / /Context Stefan

use password expiration with datasource realm

2013-09-16 Thread Stefan Frei
regards Stefan Frei

Re: use password expiration with datasource realm

2013-09-16 Thread Stefan Frei
? Cheers Stefan 2013/9/16 Neven Cvetkovic neven.cvetko...@gmail.com The problem: The user should have a password which should change after a time (eg one month). So how do i intercept a login request after j_security_check which redirects the user to a „change your password

Re: Mapping security role outside of servlet specification

2013-08-23 Thread Stefan Mayr
it is also required to override the authenticate methods which return the principal object. Any recommendations? Stefan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h

Re: Mapping security role outside of servlet specification

2013-08-23 Thread Stefan Mayr
Am 23.08.2013 20:10, schrieb Stefan Mayr: Am 11.06.2013 19:42, schrieb Felix Schumacher: Am 05.06.2013 13:42, schrieb Ilya Kazakevich: Hello, I use probe app for several tomcats. It's security model is based on servlet API security: security roles and constraints are provided in web.xml

[Tomcat 7.x] Tuning the connector for large requests / response

2013-07-11 Thread Stefan Magnus Landrø
? Any pointers would be great. Cheers Stefan

Re: [Tomcat 7.x] Tuning the connector for large requests / response

2013-07-11 Thread Stefan Magnus Landrø
No. We're using apache cxf. It works ok but io seems to consume a lot of CPU. Den 11. juli 2013 kl. 15:39 skrev Konstantin Kolinko knst.koli...@gmail.com: 2013/7/11 Stefan Magnus Landrø stefan.lan...@gmail.com: Hi there, We're developing a web service application that will have to handle

Re: [Tomcat 7.x] Tuning the connector for large requests / response

2013-07-11 Thread Stefan Magnus Landrø
Den 11. juli 2013 kl. 15:44 skrev chris derham ch...@derham.me.uk: Stefan, but I'm not sure which values to tune. Probably the buffers, right? Any pointers would be great. If you want to tune an application, first you need to create a repeatable test load using any tool you like

Re: binary distribution - how to upgrade ?

2013-06-20 Thread Stefan Mayr
6.0.18 but backports security patches. Though I would still recommend the official tomcat binaries from the apache website. It's much easier to support a well known state that your developers can also install on their workstation. - Stefan

RE: Delayed WAR expansion, timeout on context startup?

2013-05-14 Thread Mayr Stefan
Hi Chuck, Am Montag, den 13.05.2013, 15:44 +0200 schrieb Caldarale, Charles R chuck.caldar...@unisys.com: From: Stefan Mayr [mailto:ste...@mayr-stefan.de] Subject: Delayed WAR expansion, timeout on context startup? Are there any parameters to adjust deployment timeouts for these contexts

Re: Delayed WAR expansion, timeout on context startup?

2013-05-14 Thread Mayr Stefan
Hi Mark, Am Dienstag, den 14.05.2013, 12:21 +0200 schrieb Mark Thomas ma...@apache.org: On 14/05/2013 11:17, Mayr Stefan wrote: I hoped for something generic like, e.g. set -Dorg.catalina.deploy.timeoutX=... There is no such configuration setting because there is no such feature. Tomcat

Re: Delayed WAR expansion, timeout on context startup?

2013-05-14 Thread Stefan Mayr
Am 14.05.2013 16:13, schrieb Jeffrey Janner: -Original Message- From: Mayr Stefan [mailto:ste...@mayr-stefan.de] Sent: Tuesday, May 14, 2013 5:17 AM To: Tomcat Users List Subject: RE: Delayed WAR expansion, timeout on context startup? Hi Chuck, Am Montag, den 13.05.2013, 15:44

Delayed WAR expansion, timeout on context startup?

2013-05-13 Thread Stefan Mayr
. Thanks, Stefan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Configuring Tomcat for generating log file (catalina.out) (Tomcat 5.0)

2013-01-19 Thread Stefan Mayr
catalina.out by itself Good luck, Stefan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Tomcat slow during startup = 7.0.28

2013-01-15 Thread Stefan Mayr
://tomcat.apache.org/migration-7.html#Annotation_scanning Bye, Stefan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Tomcat 7.x and Internet Explorer Adobe Reader plugin

2012-08-22 Thread Stefan Mayr
) to protocol=org.apache.coyote.http11.Http11Protocol and retest with 7.0.29. Bye, Stefan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Tomcat 7.x and Internet Explorer Adobe Reader plugin

2012-08-22 Thread Stefan Mayr
Am 22.08.2012 23:04, schrieb Kari Scott: On Aug 22, 2012, at 3:55 PM, Stefan Mayr wrote: Am 22.08.2012 22:31, schrieb Miguel González Castaños: We are having what sounds like a similar problem (although 7.0.26 works for us) and can provide our details. We are using Solaris 10, Tomcat 7.0.26

Re: PDF Download problem tomcat = 7.0.27

2012-08-01 Thread Stefan Mayr
.Http11AprProtocol to ensure which implementation causes this problem. - Stefan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Issue with sudo + init script

2012-08-01 Thread Stefan Mayr
, the commands are being run). Could you post your tomcat output when you try to start it? You should also check differences in your environment variables when using different methods. - Stefan - To unsubscribe, e-mail: users-unsubscr

Howot debug network connections from JVM?

2012-06-16 Thread Stefan Mayr
-Limits or the OS (Linux) itself? As this only happens in production debugging is not easy. Any ideas welcome, Stefan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h

Re: isHexDigit error problems and upgrading Tomcat and jdk

2012-06-07 Thread Stefan Mayr
have a look at oracles lifecycle policy: http://www.oracle.com/technetwork/java/eol-135779.html If you need to provide a secure system with current patches you should take the effort to upgrade to java 7. This provides you with 3 more years of Oracle updates. Stefan

Re: ROOT.xml problem

2012-06-03 Thread Stefan Mayr
version index.html: html head meta http-equiv=refresh content=0; URL=/corda/ head body a href=/corda/Go to corda/a /body /html hope this fulfills your needs Stefan - To unsubscribe, e-mail: users-unsubscr

Re: IE 9 ignoring my custom error pages with 404 codes

2012-05-13 Thread Stefan Mayr
details in his blog post: http://blogs.msdn.com/b/ieinternals/archive/2010/08/19/http-error-pages-in-internet-explorer.aspx He also has details where to find the limits for different error codes in the registry. Bye, Stefan

Re: Bug in Tomcat AJP Connector?

2012-04-08 Thread Stefan Mayr
Stefan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Java 7 + Tomcat 6.0.35 + Win2k3 Problem

2012-03-11 Thread Stefan Mayr
enable the access log valve to see if the request was processed by your tomcat (and check the status code) Stefan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h

  1   2   3   >