Re: IIS6, Tomcat 6.0, ISAPI redirector 1.2.27 - no log on one server

2009-01-22 Thread Thangavel Sankaranarayanan
Did u try checking the security settings are same as in the test environment Regards, Thangavel Sankaranarayanan Rick Larkin

Re: PostgreSQL vs MySQL with Tomcat

2009-01-22 Thread Chris Wareham
Joseph Millet wrote: Hi all, in my opinion MySql as previously said is a lot easier to administrate, and more developer friendly than postgre - even if its process managements is far from being good (some single query may bring it down - as far as I could see so far using 5.1.22 and many

Re: run tomcat as tomcat user

2009-01-22 Thread André Warnier
Kaushal Shriyan wrote: Hi I am not able to start tomcat as tomcat user on ubutu 8.04 Linux, Below is my start/stop script Any ideas as what is going wrong ? I think the way you are using the su command is wrong. Try : su - (userid) -c command + params You also probably want to re-direct the

Re: run tomcat as tomcat user

2009-01-22 Thread Chris Wareham
André Warnier wrote: Kaushal Shriyan wrote: Hi I am not able to start tomcat as tomcat user on ubutu 8.04 Linux, Below is my start/stop script Any ideas as what is going wrong ? I think the way you are using the su command is wrong. Try : su - (userid) -c command + params You also probably

Re: PostgreSQL vs MySQL with Tomcat

2009-01-22 Thread Jim Cox
When creating tables with referential integrity in MySQL you still get gems like, e.g.: mysql create table jimtest ( colA varchar(32) NOT NULL, CONSTRAINT fk1 FOREIGN KEY(colA) REFERENCES jimtest2(colA) ON DELETE CASCADE ); ERROR 1005 (HY000): Can't create table './test/jimtest.frm' (errno:

SECURITY breach in Tomcat

2009-01-22 Thread Toby Kurien
Hi, I have a webapp for my company that has been running for several years. Recently, we got infected by a trojan or virus and this has been causing a lot of abnormal behavior. The trojan creates user accounts in Windows and also creates web applications like safee.war and zhu.war into the webapps

Re: SECURITY breach in Tomcat

2009-01-22 Thread Brian Clark
What version of Tomcat are you using? What version of the JVM? What version of Windows? Are you up to date on your Windows patches? From: Toby Kurien tobyis7...@gmail.com To: users@tomcat.apache.org Sent: Thursday, January 22, 2009 9:16:46 AM Subject:

Re: SECURITY breach in Tomcat

2009-01-22 Thread Joseph Millet
Not sure this would be useful in your case http://mail-archives.apache.org/mod_mbox/tomcat-users/200810.mbox/%3c19811090.p...@talk.nabble.com%3e There seems to be issues with app manager and windows running tomcats. On Thu, Jan 22, 2009 at 4:30 PM, Brian Clark brianclar...@yahoo.com wrote:

Re: SECURITY breach in Tomcat

2009-01-22 Thread Toby Kurien
Tomcat is 6.0.18 JVM is 1.5.0_12-b04 Windows Server 2003 We got the latest patches from Microsoft regarding some similar security breaches. On Thu, Jan 22, 2009 at 10:30 AM, Brian Clark brianclar...@yahoo.com wrote: What version of Tomcat are you using? What version of the JVM? What version of

Re: SECURITY breach in Tomcat

2009-01-22 Thread Gregor Schneider
On Thu, Jan 22, 2009 at 4:39 PM, Toby Kurien tobyis7...@gmail.com wrote: [ Tomcat hacked ] Basic lesson concerning security: If a system is once compromised, there is only one option: Dump it and set it up vanilla. Why? It's because you have no idea what additional malware has been

Re: SECURITY breach in Tomcat

2009-01-22 Thread Toby Kurien
Thanks Gregor. We are looking at setting up in Linux, but that is going to take longer to get a LIVE environment up and running. I have in the past already setup Tomcat from scratch 2-3 times and the infection just keeps coming. Only open port is 80 and network access is disabled. In fact, one of

Re: SECURITY breach in Tomcat

2009-01-22 Thread Len Popp
This sounds like an attack that has been seen before: http://markmail.org/message/jrqw75yw3d3xh3p6 That message also has tips on tightening security. In those cases it seems that the security hole was a weak password for the manager webapp. -- Len On Thu, Jan 22, 2009 at 10:16, Toby Kurien

Re: SECURITY breach in Tomcat

2009-01-22 Thread Brian Clark
I suggest removing all of the bundled web apps (in the webapps folder), including root, manager and host-manager. Also, upgrade your JVM to the latest 1.5.x version, which I think is 1.5.15 or something like that. Finally, scan your app/system for vulnerabilities with something like these:

Re: SECURITY breach in Tomcat

2009-01-22 Thread Gregor Schneider
Toby, On Thu, Jan 22, 2009 at 5:27 PM, Toby Kurien tobyis7...@gmail.com wrote: Thanks Gregor. We are looking at setting up in Linux, but that is going to take longer to get a LIVE environment up and running. I have in the past already setup Tomcat from scratch 2-3 times and the infection just

TCP connections and HTTP sessions

2009-01-22 Thread tovaldez
Hi, monitoring our webapp while running load testing, I noticed that the number of the effective users browsing the site is more than the number of opened sockets in ESTABLISHED state (while under a 240 Virtual Users load, I see only 180 ESTABLISHED connections, or 2000VU vs 450 opened

Re: SECURITY breach in Tomcat

2009-01-22 Thread Toby Kurien
Yea, I rebuild server from scratch. Fortunately, we have virtual machines so we can revert to a factory build by just reverting to a snapshot. That is same as moving to a fresh OS without anything installed. Moving servers mean we moved it physically from one box to another. IP and DNS stays the

Re: SECURITY breach in Tomcat

2009-01-22 Thread Len Popp
Yes, you should remove all other webapps (manager, examples, etc.) You can remove ROOT too, unless you've put files in there that you need to serve. -- Len On Thu, Jan 22, 2009 at 14:50, Toby Kurien tobyis7...@gmail.com wrote: Yea, I rebuild server from scratch. Fortunately, we have virtual

Re: SECURITY breach in Tomcat

2009-01-22 Thread Gregor Schneider
Moving servers mean we moved it physically from one box to another. IP and DNS stays the same when we move. Btw: Can I take off all the apps from webapps, except ROOT and myApp? Hacker or virus is probably exploiting some vulnerability in them. As of now, tomcat is running after restarting

Re: Tomcat shutdown script initiates Heap dump collection

2009-01-22 Thread Prakash Nathan1
Hi Andre I could not execute the following in my production server echo catalina.sh : JAVA_OPTS = $JAVA_OPTS /var/log/tomcat_debug_file.log Here is how I start the tomcat services /opt/app/tomcat/public1/bin/startup.sh I was checking all the file the startup.sh uses startup.sh includes

Re: Facing “Javax.servlet.servletException: c annot connect to windows server”. error

2009-01-22 Thread Kees Jan Koster
Dear S.Prakash, I am using jrxml for preparing the reports in excel files. It is working fine in windows but if the same is implemented (server)MAC OS tomcat I am facing Javax.servlet.servletException: cannot connect to windows server – not enough. I am using Tomcat

GenericType error?

2009-01-22 Thread Jonathan Mast
I have a webapp that is giving me this error: description The server encountered an internal error () that prevented it from fulfilling this request. exception org.apache.jasper.JasperException: Unable to compile class for JSP An error occurred at line: 28 in the jsp file: /blah.jsp Generated

RE: GenericType error?

2009-01-22 Thread Caldarale, Charles R
From: Jonathan Mast [mailto:jhmast.develo...@gmail.com] Subject: GenericType error? What is causing this error? It's caused by not telling us anything about the Tomcat version or the JVM you're using, and precious little about the platforms you're running on. - Chuck THIS COMMUNICATION

Re: GenericType error?

2009-01-22 Thread Jonathan Mast
Sorry: OS: linux JVM: 1.4.2 Tomcat: 5.5.17 On Thu, Jan 22, 2009 at 4:03 PM, Caldarale, Charles R chuck.caldar...@unisys.com wrote: From: Jonathan Mast [mailto:jhmast.develo...@gmail.com] Subject: GenericType error? What is causing this error? It's caused by not telling us anything

RE: GenericType error?

2009-01-22 Thread Caldarale, Charles R
From: Jonathan Mast [mailto:jhmast.develo...@gmail.com] Subject: Re: GenericType error? Sorry: OS: linux JVM: 1.4.2 Tomcat: 5.5.17 (This is like pulling teeth.) Which Linux? Is it a real Tomcat, or a 3rd-party repackaged one? Which Windows is the compilation working on? Which Tomcat

Re: SECURITY breach in Tomcat

2009-01-22 Thread Toby Kurien
thanks. I only need ROOT and myApp (which is my application). I am the developer, admin, everything. And yes, we moved between physical server racks that actually host Virtual environments. On Thu, Jan 22, 2009 at 3:15 PM, Gregor Schneider rc4...@googlemail.com wrote: Moving servers mean we

Re: Facing “Javax.servlet.servletException: cannot connect to windows server”. error

2009-01-22 Thread prakash shanmugam
Hai martin, I am using Tomcat 5.5.28 in MAC (Tiger) which is running at 9090 port, since 8080 already configured for another server we had changed the port to 9090 in server.xml and MYsql is running at 3306 port. with regards prakash.s On Thu, Jan 22, 2009 at 8:22 AM, Martin Gainty

Re: PostgreSQL vs MySQL with Tomcat

2009-01-22 Thread Jonathan Mast
Perhaps the discussion should move back towards how Tomcat interacts with databases. This thread seems to be damning MySQL for not having super advanced features, some of which should perhaps not even be in the purview of the database layer, but more appropriately belong at the application layer

Re: Facing “Javax.servlet.servletException: cannot connect to windows server”. error

2009-01-22 Thread prakash shanmugam
Dear kees Jan koster, I had visited the link suggested by you, please let me know how to change the java property -Djava.awt.headless=true Is it just enough to type the command prompt? with regards prakash.s On Fri, Jan 23, 2009 at 1:56 AM, Kees Jan Koster kjkos...@gmail.com

Re: GenericType error?

2009-01-22 Thread Jonathan Mast
Well I do need to get my wisdom teeth removed ;) Linux: Slackware 10.2.0 Tomcat: as downloaded from tomcat.apache.org Windows: XP service pack 2, Netbeans 6.5, Tomcat 5.5, the project has its Source code and JVM level set to 1.4.2, which is installed along with 1.5, and 1.6. I don't see how this

RE: GenericType error?

2009-01-22 Thread Caldarale, Charles R
From: Jonathan Mast [mailto:jhmast.develo...@gmail.com] Subject: Re: GenericType error? Well I do need to get my wisdom teeth removed ;) I did that 35 years ago; nothing to look forward to, other than to get it over with. I don't see how this is relevant though. It was relevant (before

Configuring alternate host and port on Tomcat server - newbie question

2009-01-22 Thread Shyam Anand
Hi, I'm running Tomcat 5.5 on a Solaris(SunOS 5.10 )box. I have a couple of instances of Tomcat web servers running on the same machine - the first one uses the primary IP/localhost and port 443, and I would like to configure the second instance to work with a secondary IP/alternate host and

RE: Configuring alternate host and port on Tomcat server - newbie question

2009-01-22 Thread Caldarale, Charles R
From: Shyam Anand [mailto:struts_new...@yahoo.com] Subject: Configuring alternate host and port on Tomcat server - newbie question I would like to configure the second instance to work with a secondary IP/alternate host and port 443 on the same machine. By default, Tomcat listens on IP

Re: IIS6, Tomcat 6.0, ISAPI redirector 1.2.27 - no log on one server

2009-01-22 Thread ManiacCoder
Yes, I have verified that the user account under which the Tomcat service is running has the same permissions on all platforms, as well as the web and pool users for the IIS web site. -- View this message in context:

Re: UnsatisfiedLinkError in Windows Service (tomcat6w/5w.exe)

2009-01-22 Thread Michael Ludwig
Konstantin Kolinko schrieb am 22.01.2009 um 07:51:16 (+0300): 2009/1/22 Michael Ludwig mil...@gmx.de: But I'm assured by the developers that: The Java API for DB XML begins by first trying to load the release versions of the libraries, and failing that then tries to load the debug

Re: UnsatisfiedLinkError in Windows Service (tomcat6w/5w.exe)

2009-01-22 Thread Konstantin Kolinko
Hi, Michael. I am glad to hear that you solved this. Hmm. Apparently, the directory hadn't been in the PATH the moment the SYSTEM account took a copy of it. Maybe SYSTEM doesn't read the environment again later on. It may only get to see updates to the PATH after a reboot. Or some other

RE: UnsatisfiedLinkError in Windows Service (tomcat6w/5w.exe)

2009-01-22 Thread Caldarale, Charles R
From: Michael Ludwig [mailto:mil...@gmx.de] Subject: Re: UnsatisfiedLinkError in Windows Service (tomcat6w/5w.exe) Turns out the Tomcat service does not disregard the PATH. It needs the directory in the PATH, and *in addition* to be present in the PATH the directory has to be included in the

Archive Download

2009-01-22 Thread Ben Walter
Hi, I've been trying to download http://archive.apache.org/dist/tomcat/tomcat-5/v5.0.30/bin/jakarta-tomcat-5.0.30.exe with two different browsers, no proxy, and it only gets to 4.69MB before stopping and claiming the download is complete. I need v5.0.30 for Windows to do some bug testing...

Re: Archive Download

2009-01-22 Thread Ben Walter
Never mindappears to be issue with smb share module on Linux or Windows access to smb on Linux From: Ben Walter ben.wal...@scorpiogeek.net.nz To:users@tomcat.apache.org Date: 23/01/2009 8:03 p.m. Subject: Archive Download Hi, I've been trying to download