How to check if the client dropped the connection

2009-09-28 Thread aaime74

Hi,
I'm working on the development of an open source application, GeoServer,
implementing the Web Map Service specification.
The specification allows a client to request maps using simple GET
requests like:

http://sigma.openplans.org:8080/geoserver/wms?WIDTH=431SRS=EPSG%3A4326LAYERS=tiger-nyHEIGHT=550STYLES=FORMAT=image%2FpngSERVICE=WMSVERSION=1.1.1REQUEST=GetMapEXCEPTIONS=application%2Fvnd.ogc.se_inimageBBOX=-74.01697805908182,40.69808217724622,-73.99567744140603,40.72526393994153

and the client gets back a PNG with a map of the request area.
No asynchronism is allowed, the protocol is standardized
(http://portal.opengeospatial.org/files/?artifact_id=1058) and I have no
controls over the clients (there are tens of them around, both open source
and proprietary) which are free to make as many request as they like, in
whatever order the like.

By spec we're forced to use a plain request and response approach, but
we're experiencing a problem with clients making lots of request as the
user zooms/pans around: basically a request is made, but the user keeps
on moving, the client drops the older requests (closing the connection in
face of
the server) and makes others.
Unfortunately in the meantime the older requests are still running, drawing
a map takes
time and a lot of memory, for example the above request, which is a
small one btw, allocates a BufferedImage of 700KB. The memory is
consumed up until the image is encoded out to the stream, which is also
the moment we finally figure out the client dropped the connection
(since writing to the servlet output stream fails).

This is very sub-optimal. Servers like Apache with cgi do kill the cgi
process the moment the connection is dropped, significantly reducing the
server load both in terms of CPU and memory consumption.

Is there any way to check if the client connection is still open using
only the standard servlet API?
If not, is there any Tomcat specific approach that might work instead?

If there is no solution that can be applied at the general servlet
api level, do you know of any Tomcat specific approach one could use?
e.g., casting the HttpServletResponse to some Tomcat specific class
and get some connection information status there?

Cheers
Andrea 
-- 
View this message in context: 
http://www.nabble.com/How-to-check-if-the-client-dropped-the-connection-tp25641481p25641481.html
Sent from the Tomcat - User mailing list archive at Nabble.com.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Non-http tcp protocol

2009-09-28 Thread Sergio Bello

Hi all,
I'm trying to figure out how to use tomcat as a TCP server. The basic 
idea is to receive tcp connections, through a given port, process them 
and return a response. Has anyone done it? I've googling but I've not 
found much information.

Which do you think is the best/simplest way to do it?
Thanks a lot

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Tomcat JK connection problem ?

2009-09-28 Thread Ashika Umanga Umagiliya

Greetings all,

I have configured JK connector to bridge Apache to my Tomcat server.
I am getting weird behaviour for a one particular servlet.
For a random  client , it seems that Apache serves some cached 
page.Seems it shows some kind of cached page of JSP page called 'Error.jsp'.
I have placed a System.out.println(error JSP called); inside this JSP 
but this method does not get called.


When user open the page from another browser, it serves the correct page 
and error moves to another client!


I have placed System.out.println(POST); and 
System.out.println(GET); on top of  doPost() and  doGet() methods of 
the servlet ,and when this happens there's no output in the Tomcat 
output.(ie these methods are not called atall).


When users access using 8080 port , everything works fine.Is some kind 
of caching involed inside JK connector ?


Any tips ?


My 'workers.properties' file :

# Define 1 real worker using ajp13
worker.list=worker1
# Set properties for worker1 (ajp13)
worker.worker1.type=ajp13
worker.worker1.host=XXX.XXX.XXX.XXX
worker.worker1.port=8009


Thanks in advance.
umanga



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat JK connection problem ?

2009-09-28 Thread Peter Crowther
2009/9/28 Ashika Umanga Umagiliya auma...@biggjapan.com

 Any tips ?


When posting about a complex environment such as httpd + mod_jk + Tomcat, a
good tip is to include version information - we're far more likely to be
able to help you!

- Operating system and version
- Java version (and whether it's a JDK or a JRE)
- Tomcat version (right down to the last digit - 6.0.20, not Tomcat 6.0)
- mod_jk version
- httpd version

Is there anything in common between the clients that appear to be getting
the cached page?  All one company?  All one browser?  All one login to your
app (if you have logins)?

Regards,

- Peter


Re: Tomcat JK connection problem ?

2009-09-28 Thread Rainer Jung
On 28.09.2009 11:08, Ashika Umanga Umagiliya wrote:
 Greetings all,
 
 I have configured JK connector to bridge Apache to my Tomcat server.
 I am getting weird behaviour for a one particular servlet.
 For a random  client , it seems that Apache serves some cached
 page.Seems it shows some kind of cached page of JSP page called
 'Error.jsp'.
 I have placed a System.out.println(error JSP called); inside this JSP
 but this method does not get called.
 
 When user open the page from another browser, it serves the correct page
 and error moves to another client!
 
 I have placed System.out.println(POST); and
 System.out.println(GET); on top of  doPost() and  doGet() methods of
 the servlet ,and when this happens there's no output in the Tomcat
 output.(ie these methods are not called atall).
 
 When users access using 8080 port , everything works fine.Is some kind
 of caching involed inside JK connector ?
 
 Any tips ?

No, mod_jk does not do any caching. Apach eitself is able to use
caching, but then you would need to activate the appropriate modules,
like mod_cache, mod_mem_cache or mod_disk_cache.

 My 'workers.properties' file :
 
 # Define 1 real worker using ajp13
 worker.list=worker1
 # Set properties for worker1 (ajp13)
 worker.worker1.type=ajp13
 worker.worker1.host=XXX.XXX.XXX.XXX
 worker.worker1.port=8009

I would activate the access log for Apache and for Tomcat and check, how
the requests and responses move through your architecture.

Regards,

Rainer

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat JK connection problem ?

2009-09-28 Thread Ashika Umanga Umagiliya

H Peter ,

Thank you for the reply.
I have given in-line answers.


- Operating system and version
  

Server : Debian Lenny 64bit

- Java version (and whether it's a JDK or a JRE)
  

JDK 1.6.0_16

- Tomcat version (right down to the last digit - 6.0.20, not Tomcat 6.0)
  

Tomcat 6

- mod_jk version
  

1.2.26

- httpd version
  
Apache/2.2.9 (Debian) DAV/2 SVN/1.5.1 mod_jk/1.2.26 PHP/5.2.6-1+lenny3 
with Suhosin-Patch mod_ssl/2.2.9 OpenSSL/0.9.8g Server at biggserver 
Port 80

Is there anything in common between the clients that appear to be getting
the cached page?  All one company?  All one browser?  All one login to your
app (if you have logins)?
  

AFAIK there's nothing common.And the application does not need to log.

I am sure that this is an issue with JK ,because when accessing directly 
through 8080,everything works fine.


Here is the link that gives the error (you have to open several browsers 
to get the error):


http://diam-jba.jp/diam/regulationdocument

Thanks in advance,
umanga




-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat JK connection problem ?

2009-09-28 Thread Ashika Umanga Umagiliya

Sorry , full tomcat version is : Tomcat 6.0.20


**Ashika Umanga Umagiliya wrote:

H Peter ,

Thank you for the reply.
I have given in-line answers.


- Operating system and version
  

Server : Debian Lenny 64bit

- Java version (and whether it's a JDK or a JRE)
  

JDK 1.6.0_16
- Tomcat version (right down to the last digit - 6.0.20, not Tomcat 
6.0)
  

Tomcat 6

- mod_jk version
  

1.2.26

- httpd version
  
Apache/2.2.9 (Debian) DAV/2 SVN/1.5.1 mod_jk/1.2.26 PHP/5.2.6-1+lenny3 
with Suhosin-Patch mod_ssl/2.2.9 OpenSSL/0.9.8g Server at biggserver 
Port 80
Is there anything in common between the clients that appear to be 
getting
the cached page?  All one company?  All one browser?  All one login 
to your

app (if you have logins)?
  

AFAIK there's nothing common.And the application does not need to log.

I am sure that this is an issue with JK ,because when accessing 
directly through 8080,everything works fine.


Here is the link that gives the error (you have to open several 
browsers to get the error):


http://diam-jba.jp/diam/regulationdocument

Thanks in advance,
umanga






-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat JK connection problem ?

2009-09-28 Thread Rainer Jung
As far as I can see, the log file contains the same situation as when I
connet to the URL with a browser. I do successfully get the main page,
but the page includes two invalid references:

- for style.css (should be maybe css/style.css)
- and inside css/style.css which is also used in addition to the wrong
style.css it has a reference to images/bg_001.png, which should likely
have been a ../images/bg_001.png.

Furthermore the page contains two xml headers:

- !DOCTYPE HTML PUBLIC -//W3C//DTD HTML 4.01 Transitional//EN

and later down another

- !DOCTYPE HTML PUBLIC -//W3C//DTD HTML 4.01 Transitional//EN
http://www.w3.org/TR/html4/loose.dtd;

which doesn' seem right.

I can't see any occurence of a caches Error.jsp, but I do see broken
links which obviously send the Tomcat standard error page to the browser
instead of the css file resp. the png file.

Regards,

Rainer

On 28.09.2009 11:51, Ashika Umanga Umagiliya wrote:
 I managed to save the JK log file when the error occurred.Last request
 information in in log file contains the details for the issue.
 I have attached the logfile with this.
 
 Thanks in advance,
 umanga
 
 Rainer Jung wrote:
 On 28.09.2009 11:08, Ashika Umanga Umagiliya wrote:
   
 Greetings all,

 I have configured JK connector to bridge Apache to my Tomcat server.
 I am getting weird behaviour for a one particular servlet.
 For a random  client , it seems that Apache serves some cached
 page.Seems it shows some kind of cached page of JSP page called
 'Error.jsp'.
 I have placed a System.out.println(error JSP called); inside this JSP
 but this method does not get called.

 When user open the page from another browser, it serves the correct page
 and error moves to another client!

 I have placed System.out.println(POST); and
 System.out.println(GET); on top of  doPost() and  doGet() methods of
 the servlet ,and when this happens there's no output in the Tomcat
 output.(ie these methods are not called atall).

 When users access using 8080 port , everything works fine.Is some kind
 of caching involed inside JK connector ?

 Any tips ?
 

 No, mod_jk does not do any caching. Apach eitself is able to use
 caching, but then you would need to activate the appropriate modules,
 like mod_cache, mod_mem_cache or mod_disk_cache.

   
 My 'workers.properties' file :

 # Define 1 real worker using ajp13
 worker.list=worker1
 # Set properties for worker1 (ajp13)
 worker.worker1.type=ajp13
 worker.worker1.host=XXX.XXX.XXX.XXX
 worker.worker1.port=8009
 

 I would activate the access log for Apache and for Tomcat and check, how
 the requests and responses move through your architecture.

 Regards,

 Rainer

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Non-http tcp protocol

2009-09-28 Thread Leon Rosenberg
hello,

take the simpliest example from a java book.

this is one:

public class BasicTCPServer extends AbstractServer implements Runnable{
/**
 * The port to listen on.
 */
private int port;
/**
 * The listening socket.
 */
private ServerSocket serverSocket;
/**
 * True as long as we are running.
 */
private volatile boolean running;

/**
 * Creates a new server with the given port and connection factory.
 * @param aPort the port to listen to.
 * @param conFactory
 */
public BasicTCPServer(int aPort, IConnectionFactory conFactory){
super(conFactory);
port = aPort;
}


@Override public void startServer() throws ServerException{
try{
serverSocket = new ServerSocket(port);
}catch(IOException e){
throw new ServerException(Couldn't bind port: +port+ 
: +e.getMessage());
}
new Thread(this).start();
}

@Override public void run(){
setRunning(true);
while(isRunning()){
try{
Socket s = serverSocket.accept();
IConnection newConnection =
getConnectionFactory().createConnection(new SocketContext(s));
notifyConnectionCreated(newConnection);
newConnection.open();
}catch(IOException e){
e.printStackTrace();
}
}
}

/**
 * Stops the server.
 */
@Override public void stopServer() {
setRunning(false);

}


regards
Leon


P.S. you can checkout the code under
svn://svn.anotheria.net/opensource/ano-net/trunk with a ready to use
tcp client/server, udp client/server and so on.



On Mon, Sep 28, 2009 at 10:10 AM, Sergio Bello ser...@televes.com wrote:
 Hi all,
 I'm trying to figure out how to use tomcat as a TCP server. The basic idea
 is to receive tcp connections, through a given port, process them and return
 a response. Has anyone done it? I've googling but I've not found much
 information.
 Which do you think is the best/simplest way to do it?
 Thanks a lot

 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Non-http tcp protocol

2009-09-28 Thread Tim Funk
Don't - there are other apache projects which can do that much better 
than Tomcat.


-Tim

Sergio Bello wrote:

Hi all,
I'm trying to figure out how to use tomcat as a TCP server. The basic 
idea is to receive tcp connections, through a given port, process them 
and return a response. Has anyone done it? I've googling but I've not 
found much information.

Which do you think is the best/simplest way to do it?



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Non-http tcp protocol

2009-09-28 Thread Sergio Bello

Tim Funk escribió:
Don't - there are other apache projects which can do that much better 
than Tomcat.


-Tim

Sergio Bello wrote:

Hi all,
I'm trying to figure out how to use tomcat as a TCP server. The basic 
idea is to receive tcp connections, through a given port, process 
them and return a response. Has anyone done it? I've googling but 
I've not found much information.

Which do you think is the best/simplest way to do it?



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


I was thinking on tomcat to take advantage of several features (request 
and thread management, etc) that I know have been tested for years, but 
I'm not tied to the use of tomcat.
If you know another project (java/opensource) I can rely on, could you 
tell me its name, please?


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Non-http tcp protocol

2009-09-28 Thread Stefan Zoerner
I was thinking on tomcat to take advantage of several features (request 
and thread management, etc) that I know have been tested for years, but 
I'm not tied to the use of tomcat.
If you know another project (java/opensource) I can rely on, could you 
tell me its name, please?


If you prefer Java, Apache MINA, for instance
http://mina.apache.org/

Greetings from Hamburg,
Stefan



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



blocked / hanging on call to HandlerRequest.checkRequest

2009-09-28 Thread Simon Papillon
Hi

I'm running tomcat 5.5.25 on debian sarge 32 bit linux (2.6.8 kernel)
with ~ 1.5GB ram on a pentium 4 2GHz
with a mysql db 5.0.27

I've got a configuration with apache mod_jk 1.2.25  balancing to 2
tomcats which are both running running on jdk 1.6.0_16  -Xmx=256M

periodically, generally at busy times, looking at the JK Status
Manager the busy count on one of the tomcats will go up and the
requests channelled through that container will start to hang, the
busy count will steadily increase the throughput will drop
dramatically  (i.e. the Acc column in jk_status will stop incrementing
by 30 every 10secs and go down to like 4),

This will continue until I either stop that tomcat member through the
JK Status Manager - by editing the worker settings or the thread count
goes up to over the number of permitted apache requests (at 150 at the
moment) and apache is restarted automatically by an out of process
monitoring app.

If I stop the tomcat instance through the JK Status Manager, then the
busy count will gradually (over a period of 5 - 10 mins) decrease and
get to 0.

I took a thread dump by tee-ing the output of catalina.out and then
sending a kill -SIGQUIT pid when it was in the described busy state
and lots of threads

The crux of that seemed to be a lot of threads blocked / waiting for
lock on a lock / monitor held in the HandlerRequest.checkRequest here
is the printout of the thread holding the lock which is in the
RUNNABLE state:



TP-Processor65 daemon prio=10 tid=0x08bc9400 nid=0x54bd runnable [0x55dd]
   java.lang.Thread.State: RUNNABLE
   at java.lang.Class.getMethod(Class.java:1605)
   at 
org.apache.commons.modeler.BaseModelMBean.setManagedResource(BaseModelMBean.java:764)
   at org.apache.commons.modeler.ManagedBean.createMBean(ManagedBean.java:393)
   at org.apache.commons.modeler.Registry.registerComponent(Registry.java:835)
   at org.apache.jk.common.ChannelSocket.registerRequest(ChannelSocket.java:466)
   at org.apache.jk.common.HandlerRequest.checkRequest(HandlerRequest.java:357)
   - locked 0x4490ee38 (a java.lang.Object)
   at org.apache.jk.common.HandlerRequest.decodeRequest(HandlerRequest.java:367)
   at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:261)
   at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:773)
   at 
org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:703)
   at 
org.apache.jk.common.ChannelSocket$SocketConnection.runIt(ChannelSocket.java:895)
   at 
org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:689)
   at java.lang.Thread.run(Thread.java:619)

then lots of the following types of threads (e.g. 35) all blocked

TP-Processor63 daemon prio=10 tid=0x09ddc800 nid=0x549f waiting for
monitor entry [0x55d3]
   java.lang.Thread.State: BLOCKED (on object monitor)
   at org.apache.jk.common.HandlerRequest.checkRequest(HandlerRequest.java:357)
   - waiting to lock 0x4490ee38 (a java.lang.Object)
   at org.apache.jk.common.HandlerRequest.decodeRequest(HandlerRequest.java:367)
   at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:261)
   at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:773)
   at 
org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:703)
   at 
org.apache.jk.common.ChannelSocket$SocketConnection.runIt(ChannelSocket.java:895)
   at 
org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:689)
   at java.lang.Thread.run(Thread.java:619)

TP-Processor62 daemon prio=10 tid=0x09dd4c00 nid=0x549e waiting for
monitor entry [0x55ce]
   java.lang.Thread.State: BLOCKED (on object monitor)
   at org.apache.jk.common.HandlerRequest.checkRequest(HandlerRequest.java:357)
   - waiting to lock 0x4490ee38 (a java.lang.Object)
   at org.apache.jk.common.HandlerRequest.decodeRequest(HandlerRequest.java:367)
   at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:261)
   at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:773)
   at 
org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:703)
   at 
org.apache.jk.common.ChannelSocket$SocketConnection.runIt(ChannelSocket.java:895)
   at 
org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:689)
   at java.lang.Thread.run(Thread.java:619)

.etc

here is a typical reading from the JK Server Manager for the  for the
balanced members
NametomcatA
Typeajp13
Hostlocalhost:8011
Addr127.0.0.1:8011
Act ACT
State   OK
D   0
F   100
M   1
V   104
Acc 42540
Err 0
CE  426
RE  0
Wr  34M
Rd  792M
Busy80
Max 92
Route   tomcatA
RR  
Cd  
Cd  0/0

NametomcatB
Typeajp13
Hostlocalhost:8012
Addr127.0.0.1:8012
Act ACT
State   OK
D   0
F   100
M   1
V   97
Acc 42719
Err 0
CE  377
RE  0
Wr  39M
Rd  807M
Busy4
Max 57
Route   tomcatB
RR  
Cd  
Cd  0/0


I'm been 

Apache/Tomcat with SSL

2009-09-28 Thread Miguel Ortiz
I recently setup a SSL cert on our Apache/Tomcat server. When I load our page, 
I can see the lock in my browser with all the SSL info, but the page only 
loads as a the jsp script and not the full page. Is there some configuration 
setting that I have missed. I can provide snippets from the server.xml, 
httpd.conf, and ssl.conf. Thanks in advance.

Miguel Ortiz
Network Engineer
x4818
wk: 954-331-4818
bbry: 954-649-1863
miguel.or...@macneillgroup.com




This email and any files transmitted with it are the confidential property of 
Focus Holdings, LLC and its subsidiaries, and intended solely for the use of 
the individual or entity to whom they are addressed. If you are not the named 
addressee you should not disseminate, distribute or copy this e-mail. Please 
notify the sender immediately by e-mail if you have received this e-mail by 
mistake and delete this e-mail from your system. If you are not the intended 
recipient you are notified that disclosing, copying, distributing or taking any 
action in reliance on the contents of this information is strictly prohibited.


Re: Apache/Tomcat with SSL

2009-09-28 Thread Peter Crowther
2009/9/28 Miguel Ortiz miguel.or...@macneillgroup.com

 I recently setup a SSL cert on our Apache/Tomcat server. When I load our
 page, I can see the lock in my browser with all the SSL info, but the page
 only loads as a the jsp script and not the full page. Is there some
 configuration setting that I have missed. I can provide snippets from the
 server.xml, httpd.conf, and ssl.conf. Thanks in advance.


Have you ensured that all the links to other content on your page (CSS,
images etc) are appropriate for SSL access?  Are they either relative links
or starting with https://... when accessed over SSL?

What's in the access logs for httpd (I assume from Apache/Tomcat that
you're running httpd in front, though you don't say or give any version
information)?  What's in the access logs for Tomcat?  Do they match, or are
some requests being dropped?

If you use some appropriate logging tool* from your browser to examine
requests, what's happening?

- Peter

* Fiddler2's good for IE, Firebug works for Firefox, no idea for other
browsers!


RE: Apache/Tomcat with SSL

2009-09-28 Thread Miguel Ortiz
Peter,

I have checked the httpd logs. I didn't find anything that says why the page 
isn't loading. Here is a copy of the results for the various log files. I am 
running Apache/httpd 2.2.3 and Tomcat 5. Also, I have contacted our web 
developer to check the css and links for the page. Thanks again.

[u...@localhost conf.d]# tail -f /var/log/httpd/ssl_error_log
[Mon Sep 28 08:51:41 2009] [error] [client xxx.xxx.xxx.xxx] File does not 
exist: /var/lib/tomcat5/webapps/favicon.ico
[Mon Sep 28 08:51:44 2009] [error] [client xxx.xxx.xxx.xxx] File does not 
exist: /var/lib/tomcat5/webapps/favicon.ico
[Mon Sep 28 09:03:04 2009] [error] [client xxx.xxx.xxx.xxx] Directory index 
forbidden by Options directive: /var/lib/tomcat5/webapps/
[Mon Sep 28 09:17:32 2009] [error] [client xxx.xxx.xxx.xxx] File does not 
exist: /var/lib/tomcat5/webapps/favicon.ico
[Mon Sep 28 09:17:35 2009] [error] [client xxx.xxx.xxx.xxx] File does not 
exist: /var/lib/tomcat5/webapps/favicon.ico

[u...@localhost conf.d]# tail -f /var/log/httpd/ssl_access_log
xxx.xxx.xxx.xxx - - [28/Sep/2009:08:51:41 -0400] GET /favicon.ico HTTP/1.1 
404 296
xxx.xxx.xxx.xxx - - [28/Sep/2009:08:51:44 -0400] GET /favicon.ico HTTP/1.1 
404 296
xxx.xxx.xxx.xxx - - [28/Sep/2009:09:03:04 -0400] GET / HTTP/1.1 403 5043
xxx.xxx.xxx.xxx - - [28/Sep/2009:09:03:04 -0400] GET /icons/apache_pb.gif 
HTTP/1.1 200 2326
xxx.xxx.xxx.xxx - - [28/Sep/2009:09:03:04 -0400] GET /icons/powered_by_rh.png 
HTTP/1.1 200 1213
xxx.xxx.xxx.xxx - - [28/Sep/2009:09:17:32 -0400] GET /focus/common/Index.jsp 
HTTP/1.1 200 12414
xxx.xxx.xxx.xxx - - [28/Sep/2009:09:17:32 -0400] GET /favicon.ico HTTP/1.1 
404 296
xxx.xxx.xxx.xxx - - [28/Sep/2009:09:17:35 -0400] GET /favicon.ico HTTP/1.1 
404 296
xxx.xxx.xxx.xxx - - [28/Sep/2009:09:49:45 -0400] GET /focus/common/Index.jsp 
HTTP/1.1 200 12414
xxx.xxx.xxx.xxx - - [28/Sep/2009:09:49:45 -0400] GET /favicon.ico HTTP/1.1 
200 21630

[u...@localhost conf.d]# tail -f /var/log/httpd/error_log
[Sun Sep 27 04:02:28 2009] [notice] Digest: generating secret for digest 
authentication ...
[Sun Sep 27 04:02:28 2009] [notice] Digest: done
[Sun Sep 27 04:02:28 2009] [notice] mod_python: Creating 4 session mutexes 
based on 150 max processes and 0 max threads.
[Sun Sep 27 04:02:28 2009] [notice] Apache/2.2.3 (CentOS) configured -- 
resuming normal operations

Miguel Ortiz
Network Engineer
x4818
wk: 954-331-4818
bbry: 954-649-1863
miguel.or...@macneillgroup.com


-Original Message-
From: peter.crowth...@googlemail.com [mailto:peter.crowth...@googlemail.com] On 
Behalf Of Peter Crowther
Sent: Monday, September 28, 2009 9:03 AM
To: Tomcat Users List
Subject: Re: Apache/Tomcat with SSL

2009/9/28 Miguel Ortiz miguel.or...@macneillgroup.com

 I recently setup a SSL cert on our Apache/Tomcat server. When I load our
 page, I can see the lock in my browser with all the SSL info, but the page
 only loads as a the jsp script and not the full page. Is there some
 configuration setting that I have missed. I can provide snippets from the
 server.xml, httpd.conf, and ssl.conf. Thanks in advance.


Have you ensured that all the links to other content on your page (CSS,
images etc) are appropriate for SSL access?  Are they either relative links
or starting with https://... when accessed over SSL?

What's in the access logs for httpd (I assume from Apache/Tomcat that
you're running httpd in front, though you don't say or give any version
information)?  What's in the access logs for Tomcat?  Do they match, or are
some requests being dropped?

If you use some appropriate logging tool* from your browser to examine
requests, what's happening?

- Peter

* Fiddler2's good for IE, Firebug works for Firefox, no idea for other
browsers!

No virus found in this incoming message.
Checked by AVG - www.avg.com 
Version: 8.5.409 / Virus Database: 270.13.112/2390 - Release Date: 09/28/09 
05:51:00



This email and any files transmitted with it are the confidential property of 
Focus Holdings, LLC and its subsidiaries, and intended solely for the use of 
the individual or entity to whom they are addressed. If you are not the named 
addressee you should not disseminate, distribute or copy this e-mail. Please 
notify the sender immediately by e-mail if you have received this e-mail by 
mistake and delete this e-mail from your system. If you are not the intended 
recipient you are notified that disclosing, copying, distributing or taking any 
action in reliance on the contents of this information is strictly prohibited.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



RE: Apache/Tomcat with SSL

2009-09-28 Thread Jorge Medina
Hola Miguel, 

   did you set up SSL in Apache ? Or did you do it in Tomcat ? Or in both ?

   I am assuming that you want Apache to be the exposed server, therefore SSL 
must be configured in Apache.  You must also have configured Apache to forward 
the requests to Tomcat by using the Apache modules mod_jk or mod_proxy 
   
-Jorge

 

-Original Message-
From: Miguel Ortiz [mailto:miguel.or...@macneillgroup.com] 
Sent: Monday, September 28, 2009 8:32 AM
To: users@tomcat.apache.org
Subject: Apache/Tomcat with SSL

I recently setup a SSL cert on our Apache/Tomcat server. When I load our page, 
I can see the lock in my browser with all the SSL info, but the page only 
loads as a the jsp script and not the full page. Is there some configuration 
setting that I have missed. I can provide snippets from the server.xml, 
httpd.conf, and ssl.conf. Thanks in advance.

Miguel Ortiz
Network Engineer
x4818
wk: 954-331-4818
bbry: 954-649-1863
miguel.or...@macneillgroup.com




This email and any files transmitted with it are the confidential property of 
Focus Holdings, LLC and its subsidiaries, and intended solely for the use of 
the individual or entity to whom they are addressed. If you are not the named 
addressee you should not disseminate, distribute or copy this e-mail. Please 
notify the sender immediately by e-mail if you have received this e-mail by 
mistake and delete this e-mail from your system. If you are not the intended 
recipient you are notified that disclosing, copying, distributing or taking any 
action in reliance on the contents of this information is strictly prohibited.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



RE: Apache/Tomcat with SSL

2009-09-28 Thread Jorge Medina

Also, in order to configure Apache with SSL you must have the module mod_ssl


-Original Message-
From: Jorge Medina [mailto:jmed...@e-dialog.com] 
Sent: Monday, September 28, 2009 10:40 AM
To: Tomcat Users List
Subject: RE: Apache/Tomcat with SSL

Hola Miguel, 

   did you set up SSL in Apache ? Or did you do it in Tomcat ? Or in both ?

   I am assuming that you want Apache to be the exposed server, therefore SSL 
must be configured in Apache.  You must also have configured Apache to forward 
the requests to Tomcat by using the Apache modules mod_jk or mod_proxy 
   
-Jorge

 

-Original Message-
From: Miguel Ortiz [mailto:miguel.or...@macneillgroup.com]
Sent: Monday, September 28, 2009 8:32 AM
To: users@tomcat.apache.org
Subject: Apache/Tomcat with SSL

I recently setup a SSL cert on our Apache/Tomcat server. When I load our page, 
I can see the lock in my browser with all the SSL info, but the page only 
loads as a the jsp script and not the full page. Is there some configuration 
setting that I have missed. I can provide snippets from the server.xml, 
httpd.conf, and ssl.conf. Thanks in advance.

Miguel Ortiz
Network Engineer
x4818
wk: 954-331-4818
bbry: 954-649-1863
miguel.or...@macneillgroup.com




This email and any files transmitted with it are the confidential property of 
Focus Holdings, LLC and its subsidiaries, and intended solely for the use of 
the individual or entity to whom they are addressed. If you are not the named 
addressee you should not disseminate, distribute or copy this e-mail. Please 
notify the sender immediately by e-mail if you have received this e-mail by 
mistake and delete this e-mail from your system. If you are not the intended 
recipient you are notified that disclosing, copying, distributing or taking any 
action in reliance on the contents of this information is strictly prohibited.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Apache/Tomcat with SSL

2009-09-28 Thread André Warnier

Miguel Ortiz wrote:
...

[u...@localhost conf.d]# tail -f /var/log/httpd/ssl_error_log
[Mon Sep 28 08:51:41 2009] [error] [client xxx.xxx.xxx.xxx] File does not 
exist: /var/lib/tomcat5/webapps/favicon.ico
[Mon Sep 28 08:51:44 2009] [error] [client xxx.xxx.xxx.xxx] File does not 
exist: /var/lib/tomcat5/webapps/favicon.ico
[Mon Sep 28 09:03:04 2009] [error] [client xxx.xxx.xxx.xxx] Directory index 
forbidden by Options directive: /var/lib/tomcat5/webapps/


Nothing to, I think, with your problem, but it would seem from the above 
that you have configured your Apache front-end with something like


DocumentRoot /var/lib/tomcat5/webapps

which, in principle, is not a good idea.
What do you get in your browser when you request
http://your-hostname/ROOT/WEB-INF/web.xml

(or with https:// as the case may be)
?


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



RE: Apache/Tomcat with SSL

2009-09-28 Thread Miguel Ortiz
André,

This server was configured by our web development contractors. I was only 
tasked with setting up the SSL. When I go to the specified URL, firefox throws 
a server not found. 


Miguel Ortiz
Network Engineer
x4818
wk: 954-331-4818
bbry: 954-649-1863
miguel.or...@macneillgroup.com


-Original Message-
From: André Warnier [mailto:a...@ice-sa.com] 
Sent: Monday, September 28, 2009 11:25 AM
To: Tomcat Users List
Subject: Re: Apache/Tomcat with SSL

Miguel Ortiz wrote:
...
 [u...@localhost conf.d]# tail -f /var/log/httpd/ssl_error_log
 [Mon Sep 28 08:51:41 2009] [error] [client xxx.xxx.xxx.xxx] File does not 
 exist: /var/lib/tomcat5/webapps/favicon.ico
 [Mon Sep 28 08:51:44 2009] [error] [client xxx.xxx.xxx.xxx] File does not 
 exist: /var/lib/tomcat5/webapps/favicon.ico
 [Mon Sep 28 09:03:04 2009] [error] [client xxx.xxx.xxx.xxx] Directory index 
 forbidden by Options directive: /var/lib/tomcat5/webapps/

Nothing to, I think, with your problem, but it would seem from the above 
that you have configured your Apache front-end with something like

DocumentRoot /var/lib/tomcat5/webapps

which, in principle, is not a good idea.
What do you get in your browser when you request
http://your-hostname/ROOT/WEB-INF/web.xml

(or with https:// as the case may be)
?


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


No virus found in this incoming message.
Checked by AVG - www.avg.com 
Version: 8.5.409 / Virus Database: 270.13.112/2390 - Release Date: 09/28/09 
05:51:00



This email and any files transmitted with it are the confidential property of 
Focus Holdings, LLC and its subsidiaries, and intended solely for the use of 
the individual or entity to whom they are addressed. If you are not the named 
addressee you should not disseminate, distribute or copy this e-mail. Please 
notify the sender immediately by e-mail if you have received this e-mail by 
mistake and delete this e-mail from your system. If you are not the intended 
recipient you are notified that disclosing, copying, distributing or taking any 
action in reliance on the contents of this information is strictly prohibited.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



RE: Apache/Tomcat with SSL

2009-09-28 Thread Miguel Ortiz
Jorge,

I have setup the SSL through Apache and Tomcat, if there is a different 
procedure for mod_ssl, I will try that as well. The site comes up fine when I 
access it without the https, however when I use the https, all I see is the jsp 
script.

Miguel Ortiz
Network Engineer
x4818
wk: 954-331-4818
bbry: 954-649-1863
miguel.or...@macneillgroup.com


-Original Message-
From: Jorge Medina [mailto:jmed...@e-dialog.com] 
Sent: Monday, September 28, 2009 10:55 AM
To: Tomcat Users List
Subject: RE: Apache/Tomcat with SSL


Also, in order to configure Apache with SSL you must have the module mod_ssl


-Original Message-
From: Jorge Medina [mailto:jmed...@e-dialog.com] 
Sent: Monday, September 28, 2009 10:40 AM
To: Tomcat Users List
Subject: RE: Apache/Tomcat with SSL

Hola Miguel, 

   did you set up SSL in Apache ? Or did you do it in Tomcat ? Or in both ?

   I am assuming that you want Apache to be the exposed server, therefore SSL 
must be configured in Apache.  You must also have configured Apache to forward 
the requests to Tomcat by using the Apache modules mod_jk or mod_proxy 
   
-Jorge

 

-Original Message-
From: Miguel Ortiz [mailto:miguel.or...@macneillgroup.com]
Sent: Monday, September 28, 2009 8:32 AM
To: users@tomcat.apache.org
Subject: Apache/Tomcat with SSL

I recently setup a SSL cert on our Apache/Tomcat server. When I load our page, 
I can see the lock in my browser with all the SSL info, but the page only 
loads as a the jsp script and not the full page. Is there some configuration 
setting that I have missed. I can provide snippets from the server.xml, 
httpd.conf, and ssl.conf. Thanks in advance.

Miguel Ortiz
Network Engineer
x4818
wk: 954-331-4818
bbry: 954-649-1863
miguel.or...@macneillgroup.com




This email and any files transmitted with it are the confidential property of 
Focus Holdings, LLC and its subsidiaries, and intended solely for the use of 
the individual or entity to whom they are addressed. If you are not the named 
addressee you should not disseminate, distribute or copy this e-mail. Please 
notify the sender immediately by e-mail if you have received this e-mail by 
mistake and delete this e-mail from your system. If you are not the intended 
recipient you are notified that disclosing, copying, distributing or taking any 
action in reliance on the contents of this information is strictly prohibited.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


No virus found in this incoming message.
Checked by AVG - www.avg.com 
Version: 8.5.409 / Virus Database: 270.13.112/2390 - Release Date: 09/28/09 
05:51:00



This email and any files transmitted with it are the confidential property of 
Focus Holdings, LLC and its subsidiaries, and intended solely for the use of 
the individual or entity to whom they are addressed. If you are not the named 
addressee you should not disseminate, distribute or copy this e-mail. Please 
notify the sender immediately by e-mail if you have received this e-mail by 
mistake and delete this e-mail from your system. If you are not the intended 
recipient you are notified that disclosing, copying, distributing or taking any 
action in reliance on the contents of this information is strictly prohibited.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: How to check if the client dropped the connection

2009-09-28 Thread Jason Brittain
Hi Andrea.

When the client disconnects, and your servlet tries to write to the output
stream, Tomcat will throw a ClientAbortException (you may have already seen
this):

http://tomcat.apache.org/tomcat-6.0-doc/api/org/apache/catalina/connector/ClientAbortException.html

Tomcat appears to only throw this exception when you either write some bytes
to the output stream or when you flush the output stream, and the client
already closed its end of the connection.  It appears that you could
periodically try flushing the output stream and see if doing so throws this
exception. You can flush after writing any number of bytes, including zero
bytes.  The first time you call flush, it will send the HTTP response
headers to the client, so you would need to first set the headers before
flushing.  That sounds difficult for you to do because you're writing an
image, and one of the headers would be Content-Length, which you probably
don't know until your image is generated.

--
Jason Brittain


On Mon, Sep 28, 2009 at 12:21 AM, aaime74 andrea.a...@gmail.com wrote:


 Hi,
 I'm working on the development of an open source application, GeoServer,
 implementing the Web Map Service specification.
 The specification allows a client to request maps using simple GET
 requests like:


 http://sigma.openplans.org:8080/geoserver/wms?WIDTH=431SRS=EPSG%3A4326LAYERS=tiger-nyHEIGHT=550STYLES=FORMAT=image%2FpngSERVICE=WMSVERSION=1.1.1REQUEST=GetMapEXCEPTIONS=application%2Fvnd.ogc.se_inimageBBOX=-74.01697805908182,40.69808217724622,-73.99567744140603,40.72526393994153

 and the client gets back a PNG with a map of the request area.
 No asynchronism is allowed, the protocol is standardized
 (http://portal.opengeospatial.org/files/?artifact_id=1058) and I have no
 controls over the clients (there are tens of them around, both open source
 and proprietary) which are free to make as many request as they like, in
 whatever order the like.

 By spec we're forced to use a plain request and response approach, but
 we're experiencing a problem with clients making lots of request as the
 user zooms/pans around: basically a request is made, but the user keeps
 on moving, the client drops the older requests (closing the connection in
 face of
 the server) and makes others.
 Unfortunately in the meantime the older requests are still running, drawing
 a map takes
 time and a lot of memory, for example the above request, which is a
 small one btw, allocates a BufferedImage of 700KB. The memory is
 consumed up until the image is encoded out to the stream, which is also
 the moment we finally figure out the client dropped the connection
 (since writing to the servlet output stream fails).

 This is very sub-optimal. Servers like Apache with cgi do kill the cgi
 process the moment the connection is dropped, significantly reducing the
 server load both in terms of CPU and memory consumption.

 Is there any way to check if the client connection is still open using
 only the standard servlet API?
 If not, is there any Tomcat specific approach that might work instead?

 If there is no solution that can be applied at the general servlet
 api level, do you know of any Tomcat specific approach one could use?
 e.g., casting the HttpServletResponse to some Tomcat specific class
 and get some connection information status there?

 Cheers
 Andrea
 --
 View this message in context:
 http://www.nabble.com/How-to-check-if-the-client-dropped-the-connection-tp25641481p25641481.html
 Sent from the Tomcat - User mailing list archive at Nabble.com.


 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org




-- 
Jason Brittain


Re: Apache/Tomcat with SSL

2009-09-28 Thread André Warnier

Miguel Ortiz wrote:

André,

This server was configured by our web development contractors. I was only tasked with setting up the SSL. When I go to the specified URL, firefox throws a server not found. 



When I mentioned the URL
http://your-hostname/ROOT/WEB-INF/web.xml
I meant for you to replace the your-hostname part by your own host's name.
:-)

Also, basically I think that this discussion belongs more to the Apache 
user's list, than Tomcat's, because it seems that the SSL part is done 
at the Apache httpd level, not at Tomcat's level.
It is also not easy to just add SSL to an Apache httpd, if this Apache 
httpd uses VirtualHosts.


In the first responses to your first post, some very relevant questions 
were asked, which I don't think you have answered fully yet.  It is 
difficult for someone to help you with the partial information you have 
supplied so far.  Tell us :

- on which platform (OS) this is running
- how Apache httpd and Tomcat are connected together (using mod_jk, 
mod_proxy_ajp, or mod_proxy_http?)
- is (was) your Apache httpd configured with multiple VirtualHost 
sections ?
- can you append your main Apache httpd configuration file (httpd.conf 
or apache2.conf, depending on platform).  Don't put it as an attachment, 
because chances are this list will strip it. Paste it right into your 
message.

- what exactly did you add, and where, to add the SSL capability ?









Miguel Ortiz
Network Engineer
x4818
wk: 954-331-4818
bbry: 954-649-1863
miguel.or...@macneillgroup.com


-Original Message-
From: André Warnier [mailto:a...@ice-sa.com] 
Sent: Monday, September 28, 2009 11:25 AM

To: Tomcat Users List
Subject: Re: Apache/Tomcat with SSL

Miguel Ortiz wrote:
...

[u...@localhost conf.d]# tail -f /var/log/httpd/ssl_error_log
[Mon Sep 28 08:51:41 2009] [error] [client xxx.xxx.xxx.xxx] File does not 
exist: /var/lib/tomcat5/webapps/favicon.ico
[Mon Sep 28 08:51:44 2009] [error] [client xxx.xxx.xxx.xxx] File does not 
exist: /var/lib/tomcat5/webapps/favicon.ico
[Mon Sep 28 09:03:04 2009] [error] [client xxx.xxx.xxx.xxx] Directory index 
forbidden by Options directive: /var/lib/tomcat5/webapps/


Nothing to, I think, with your problem, but it would seem from the above 
that you have configured your Apache front-end with something like


DocumentRoot /var/lib/tomcat5/webapps

which, in principle, is not a good idea.
What do you get in your browser when you request
http://your-hostname/ROOT/WEB-INF/web.xml

(or with https:// as the case may be)
?


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


No virus found in this incoming message.
Checked by AVG - www.avg.com 
Version: 8.5.409 / Virus Database: 270.13.112/2390 - Release Date: 09/28/09 05:51:00




This email and any files transmitted with it are the confidential property of 
Focus Holdings, LLC and its subsidiaries, and intended solely for the use of 
the individual or entity to whom they are addressed. If you are not the named 
addressee you should not disseminate, distribute or copy this e-mail. Please 
notify the sender immediately by e-mail if you have received this e-mail by 
mistake and delete this e-mail from your system. If you are not the intended 
recipient you are notified that disclosing, copying, distributing or taking any 
action in reliance on the contents of this information is strictly prohibited.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org





-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



RE: Apache/Tomcat with SSL

2009-09-28 Thread Miguel Ortiz
André,

That is what I did and it still came up with server not found. If you would 
like to verify. Our site is http://fun.macneillgroup.com. The site we are 
currently testing is http://fun.macneillgroup.com/focus/common/Index.jsp. This 
page works, however the https form doesn't seem to produce the desired results.

Miguel Ortiz
Network Engineer
x4818
wk: 954-331-4818
bbry: 954-649-1863
miguel.or...@macneillgroup.com


-Original Message-
From: André Warnier [mailto:a...@ice-sa.com] 
Sent: Monday, September 28, 2009 3:02 PM
To: Tomcat Users List
Subject: Re: Apache/Tomcat with SSL

Miguel Ortiz wrote:
 André,
 
 This server was configured by our web development contractors. I was only 
 tasked with setting up the SSL. When I go to the specified URL, firefox 
 throws a server not found. 
 

When I mentioned the URL
http://your-hostname/ROOT/WEB-INF/web.xml
I meant for you to replace the your-hostname part by your own host's name.
:-)

Also, basically I think that this discussion belongs more to the Apache 
user's list, than Tomcat's, because it seems that the SSL part is done 
at the Apache httpd level, not at Tomcat's level.
It is also not easy to just add SSL to an Apache httpd, if this Apache 
httpd uses VirtualHosts.

In the first responses to your first post, some very relevant questions 
were asked, which I don't think you have answered fully yet.  It is 
difficult for someone to help you with the partial information you have 
supplied so far.  Tell us :
- on which platform (OS) this is running
- how Apache httpd and Tomcat are connected together (using mod_jk, 
mod_proxy_ajp, or mod_proxy_http?)
- is (was) your Apache httpd configured with multiple VirtualHost 
sections ?
- can you append your main Apache httpd configuration file (httpd.conf 
or apache2.conf, depending on platform).  Don't put it as an attachment, 
because chances are this list will strip it. Paste it right into your 
message.
- what exactly did you add, and where, to add the SSL capability ?







 
 Miguel Ortiz
 Network Engineer
 x4818
 wk: 954-331-4818
 bbry: 954-649-1863
 miguel.or...@macneillgroup.com
 
 
 -Original Message-
 From: André Warnier [mailto:a...@ice-sa.com] 
 Sent: Monday, September 28, 2009 11:25 AM
 To: Tomcat Users List
 Subject: Re: Apache/Tomcat with SSL
 
 Miguel Ortiz wrote:
 ...
 [u...@localhost conf.d]# tail -f /var/log/httpd/ssl_error_log
 [Mon Sep 28 08:51:41 2009] [error] [client xxx.xxx.xxx.xxx] File does not 
 exist: /var/lib/tomcat5/webapps/favicon.ico
 [Mon Sep 28 08:51:44 2009] [error] [client xxx.xxx.xxx.xxx] File does not 
 exist: /var/lib/tomcat5/webapps/favicon.ico
 [Mon Sep 28 09:03:04 2009] [error] [client xxx.xxx.xxx.xxx] Directory index 
 forbidden by Options directive: /var/lib/tomcat5/webapps/
 
 Nothing to, I think, with your problem, but it would seem from the above 
 that you have configured your Apache front-end with something like
 
 DocumentRoot /var/lib/tomcat5/webapps
 
 which, in principle, is not a good idea.
 What do you get in your browser when you request
 http://your-hostname/ROOT/WEB-INF/web.xml
 
 (or with https:// as the case may be)
 ?
 
 
 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org
 
 
 No virus found in this incoming message.
 Checked by AVG - www.avg.com 
 Version: 8.5.409 / Virus Database: 270.13.112/2390 - Release Date: 09/28/09 
 05:51:00
 
 
 
 This email and any files transmitted with it are the confidential property of 
 Focus Holdings, LLC and its subsidiaries, and intended solely for the use of 
 the individual or entity to whom they are addressed. If you are not the named 
 addressee you should not disseminate, distribute or copy this e-mail. Please 
 notify the sender immediately by e-mail if you have received this e-mail by 
 mistake and delete this e-mail from your system. If you are not the intended 
 recipient you are notified that disclosing, copying, distributing or taking 
 any action in reliance on the contents of this information is strictly 
 prohibited.
 
 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org
 
 


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


No virus found in this incoming message.
Checked by AVG - www.avg.com 
Version: 8.5.409 / Virus Database: 270.13.112/2390 - Release Date: 09/28/09 
05:51:00



This email and any files transmitted with it are the confidential property of 
Focus Holdings, LLC and its subsidiaries, and intended solely for the use of 
the individual or entity to whom they are addressed. If you are not the named 
addressee you should not disseminate, distribute 

Re: How to check if the client dropped the connection

2009-09-28 Thread Markus Meyer

Jason Brittain schrieb:

The first time you call flush, it will send the HTTP response
headers to the client, so you would need to first set the headers before
flushing.  That sounds difficult for you to do because you're writing an
image, and one of the headers would be Content-Length, which you probably
don't know until your image is generated.


Actually, Content-Length is optional as per the HTTP-1.1 spec:

http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html

However, my take on the OP is that a better optimization strategy in 
this case would be to just cache a larger image on the server rather 
than generating every image on-demand. That is, when the user is moving 
around in the image, the server, on the first request, would calculate 
the image for a much larger portion of the map than requested and stores 
it on disk in temporary storage (or in some cache area in RAM, if 
feasible, after all RAM is cheap these days and 64-bit machines can have 
lots of RAM). Storage of the images would not be done all at once but in 
tiles. When then user then moves around in the client, the requests just 
reads the tiles of the created image from disk, puts them together and 
clips the borders, then compresses the image and sends it to the client. 
It is possible that PNG even has some support for compressing parts of 
an image so the tiles itself could be already stored in compressed 
format, but it's been a while since I read the PNG spec last time. The 
same could be done for zooming by storing images in a pyramidal 
structure, like it is done in pattern recognition. While the user is 
moving, a background thread associated with the client could try to 
anticipate where the user is likely to be moving to and calculate the 
given tiles in advance. Actually, this sounds like an interesting 
project for several Ph.D. theses...



Markus

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: How to check if the client dropped the connection

2009-09-28 Thread aaime74


jasonb wrote:
 
 Hi Andrea.
 
 When the client disconnects, and your servlet tries to write to the output
 stream, Tomcat will throw a ClientAbortException (you may have already
 seen
 this):
 
 http://tomcat.apache.org/tomcat-6.0-doc/api/org/apache/catalina/connector/ClientAbortException.html
 
 Tomcat appears to only throw this exception when you either write some
 bytes
 to the output stream or when you flush the output stream, and the client
 already closed its end of the connection.  It appears that you could
 periodically try flushing the output stream and see if doing so throws
 this
 exception. You can flush after writing any number of bytes, including zero
 bytes.  The first time you call flush, it will send the HTTP response
 headers to the client, so you would need to first set the headers before
 flushing.  That sounds difficult for you to do because you're writing an
 image, and one of the headers would be Content-Length, which you probably
 don't know until your image is generated.


We actually don't send the content length out, we used chunked transfer
instead (that is, stream out the result of the png compression as made by
JAI
Image I/O) but unfortunately we cannot do that either, as the protocols
mandates that any error occurring during rendering be returned as XML.

So I actually know the final content type only when the image is fully
rendered,
which is when I start writing out bytes anyways.

Cheers
Andrea

-- 
View this message in context: 
http://www.nabble.com/How-to-check-if-the-client-dropped-the-connection-tp25641481p25651470.html
Sent from the Tomcat - User mailing list archive at Nabble.com.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Upgrade from 5.5.9 to 5.5.20 Help

2009-09-28 Thread Corrin, Simon P
Hello,

I have never upgraded Tomcat before and need to upgrade it from version
5.5.9 to 5.5.20 for application compatibility.  I had a search through
the documentation and didn't come across a section on how to do this
type of thing (maybe I missed it).  Can someone point me in the right
direction here?

From version: 5.5.9
To version: 5.5.20
OS: Windows Server 2000
IIS: IIS 5 using IIS Redirect for SSO purposes (application
requirements)

Other than that it is a pretty vanilla installation.

Thanks in advance,

Simon.


Re: How to check if the client dropped the connection

2009-09-28 Thread aaime74



Markus Meyer wrote:
 
 Jason Brittain schrieb:
 The first time you call flush, it will send the HTTP response
 headers to the client, so you would need to first set the headers before
 flushing.  That sounds difficult for you to do because you're writing an
 image, and one of the headers would be Content-Length, which you probably
 don't know until your image is generated.
 
 Actually, Content-Length is optional as per the HTTP-1.1 spec:
 
 http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html
 
 However, my take on the OP is that a better optimization strategy in 
 this case would be to just cache a larger image on the server rather 
 than generating every image on-demand. That is, when the user is moving 
 around in the image, the server, on the first request, would calculate 
 the image for a much larger portion of the map than requested and stores 
 it on disk in temporary storage (or in some cache area in RAM, if 
 feasible, after all RAM is cheap these days and 64-bit machines can have 
 lots of RAM). Storage of the images would not be done all at once but in 
 tiles. When then user then moves around in the client, the requests just 
 reads the tiles of the created image from disk, puts them together and 
 clips the borders, then compresses the image and sends it to the client. 
 It is possible that PNG even has some support for compressing parts of 
 an image so the tiles itself could be already stored in compressed 
 format, but it's been a while since I read the PNG spec last time. The 
 same could be done for zooming by storing images in a pyramidal 
 structure, like it is done in pattern recognition. While the user is 
 moving, a background thread associated with the client could try to 
 anticipate where the user is likely to be moving to and calculate the 
 given tiles in advance. Actually, this sounds like an interesting 
 project for several Ph.D. theses...
 

Well, something like that has actually been done already, it's called
tile caching, and works under the restrictive conditions that you
can force the client to make requests in predetermined sizes and tiles.
As for applying this to the general case, I invite you to have a look
at how big the raster surface is and how much space is required
to actually store on the disk a full map (only _one_ map, some GeoServer
installs do serve 500-1000 different layers) here:
http://geowebcache.org/trac/wiki/resources
(the site is describing the tile cache companion to GeoServer, called
GeoWebCache)

So, it is somewhat doable, but only for a few backgrond layers that
do not change that often (once a month may be ok if you don't need
to zoom in too much).

Cheers
Andrea

-- 
View this message in context: 
http://www.nabble.com/How-to-check-if-the-client-dropped-the-connection-tp25641481p25651562.html
Sent from the Tomcat - User mailing list archive at Nabble.com.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: How to check if the client dropped the connection

2009-09-28 Thread Markus Meyer

aaime74 schrieb:

Well, something like that has actually been done already, it's called
tile caching, and works under the restrictive conditions that you
can force the client to make requests in predetermined sizes and tiles.
As for applying this to the general case, I invite you to have a look
at how big the raster surface is and how much space is required
to actually store on the disk a full map (only _one_ map, some GeoServer
installs do serve 500-1000 different layers) here:


I'm not saying you should store the whole map all at once. My approach 
was to dynamically cache requests that the client may want to make in 
advance. An easy example would be if a client makes a request for the 
city center, you create the map for the city center plus the suburbs 
around it and store it somewhere, then return the city center. If the 
user then moves around a bit to see the suburbs, you already have the 
whole map cached and just need to return it, no need to do any further 
calculation.


If you then also compress the image on the fly while you are reading it 
from disk (or from some memory cache), you will start writing to the 
output stream very soon (also detecting the dropped connection very 
soon) and the servlet will not need much RAM. Of course this does not 
work if you just use Java's built-in PNG encoder.


Obviously, caching always comes with the price that you will have the 
occassional cache miss :-) That is, this does not work for every request 
but may decrease load and RAM usage a lot for typical use cases.


In your OP you write: Unfortunately in the meantime the older requests 
are still running, drawing a map takes time and a lot of memory, for 
example the above request, which is a small one btw, allocates a 
BufferedImage of 700KB. This indicates that you (1) seem to not use any 
caching (drawing a map takes time - with caching the map would already 
have been drawn) and (2) you use BufferedImage which of course does not 
allow you to PNG-encode on the fly. Both problems would be solved with 
the above suggestion.



Markus

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



RE: Apache/Tomcat with SSL

2009-09-28 Thread Jorge Medina
As suggested by André, you may want to join the Apache User's list and ask 
there your question.

You need to configure SSL in your Apache web server.
To configure SSL Apache Web server, the first thing you need to do is to verify 
that the module mod_ssl is available. 
You may want to consider posting sections of your httpd.conf file (or any 
relevant file included by the Include directive) (Remove any sensitive 
information when posting your question)

-Jorge

 

-Original Message-
From: Miguel Ortiz [mailto:miguel.or...@macneillgroup.com] 
Sent: Monday, September 28, 2009 3:19 PM
To: 'Tomcat Users List'; 'Tomcat Users List'
Subject: RE: Apache/Tomcat with SSL

André,

That is what I did and it still came up with server not found. If you would 
like to verify. Our site is http://fun.macneillgroup.com. The site we are 
currently testing is http://fun.macneillgroup.com/focus/common/Index.jsp. This 
page works, however the https form doesn't seem to produce the desired results.

Miguel Ortiz
Network Engineer
x4818
wk: 954-331-4818
bbry: 954-649-1863
miguel.or...@macneillgroup.com


-Original Message-
From: André Warnier [mailto:a...@ice-sa.com]
Sent: Monday, September 28, 2009 3:02 PM
To: Tomcat Users List
Subject: Re: Apache/Tomcat with SSL

Miguel Ortiz wrote:
 André,
 
 This server was configured by our web development contractors. I was only 
 tasked with setting up the SSL. When I go to the specified URL, firefox 
 throws a server not found. 
 

When I mentioned the URL
http://your-hostname/ROOT/WEB-INF/web.xml
I meant for you to replace the your-hostname part by your own host's name.
:-)

Also, basically I think that this discussion belongs more to the Apache user's 
list, than Tomcat's, because it seems that the SSL part is done at the Apache 
httpd level, not at Tomcat's level.
It is also not easy to just add SSL to an Apache httpd, if this Apache httpd 
uses VirtualHosts.

In the first responses to your first post, some very relevant questions were 
asked, which I don't think you have answered fully yet.  It is difficult for 
someone to help you with the partial information you have supplied so far.  
Tell us :
- on which platform (OS) this is running
- how Apache httpd and Tomcat are connected together (using mod_jk, 
mod_proxy_ajp, or mod_proxy_http?)
- is (was) your Apache httpd configured with multiple VirtualHost sections ?
- can you append your main Apache httpd configuration file (httpd.conf or 
apache2.conf, depending on platform).  Don't put it as an attachment, because 
chances are this list will strip it. Paste it right into your message.
- what exactly did you add, and where, to add the SSL capability ?







 
 Miguel Ortiz
 Network Engineer
 x4818
 wk: 954-331-4818
 bbry: 954-649-1863
 miguel.or...@macneillgroup.com
 
 
 -Original Message-
 From: André Warnier [mailto:a...@ice-sa.com]
 Sent: Monday, September 28, 2009 11:25 AM
 To: Tomcat Users List
 Subject: Re: Apache/Tomcat with SSL
 
 Miguel Ortiz wrote:
 ...
 [u...@localhost conf.d]# tail -f /var/log/httpd/ssl_error_log [Mon 
 Sep 28 08:51:41 2009] [error] [client xxx.xxx.xxx.xxx] File does not 
 exist: /var/lib/tomcat5/webapps/favicon.ico
 [Mon Sep 28 08:51:44 2009] [error] [client xxx.xxx.xxx.xxx] File does 
 not exist: /var/lib/tomcat5/webapps/favicon.ico
 [Mon Sep 28 09:03:04 2009] [error] [client xxx.xxx.xxx.xxx] Directory 
 index forbidden by Options directive: /var/lib/tomcat5/webapps/
 
 Nothing to, I think, with your problem, but it would seem from the 
 above that you have configured your Apache front-end with something 
 like
 
 DocumentRoot /var/lib/tomcat5/webapps
 
 which, in principle, is not a good idea.
 What do you get in your browser when you request 
 http://your-hostname/ROOT/WEB-INF/web.xml
 
 (or with https:// as the case may be)
 ?
 
 
 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org
 
 
 No virus found in this incoming message.
 Checked by AVG - www.avg.com
 Version: 8.5.409 / Virus Database: 270.13.112/2390 - Release Date: 
 09/28/09 05:51:00
 
 
 
 This email and any files transmitted with it are the confidential property of 
 Focus Holdings, LLC and its subsidiaries, and intended solely for the use of 
 the individual or entity to whom they are addressed. If you are not the named 
 addressee you should not disseminate, distribute or copy this e-mail. Please 
 notify the sender immediately by e-mail if you have received this e-mail by 
 mistake and delete this e-mail from your system. If you are not the intended 
 recipient you are notified that disclosing, copying, distributing or taking 
 any action in reliance on the contents of this information is strictly 
 prohibited.
 
 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, 

RE: How to check if the client dropped the connection

2009-09-28 Thread Martin Gainty

could you explain just a bit more what is a tile?

Martin 
__ 
Verzicht und Vertraulichkeitanmerkung
 
Diese Nachricht ist vertraulich. Sollten Sie nicht der vorgesehene Empfaenger 
sein, so bitten wir hoeflich um eine Mitteilung. Jede unbefugte Weiterleitung 
oder Fertigung einer Kopie ist unzulaessig. Diese Nachricht dient lediglich dem 
Austausch von Informationen und entfaltet keine rechtliche Bindungswirkung. 
Aufgrund der leichten Manipulierbarkeit von E-Mails koennen wir keine Haftung 
fuer den Inhalt uebernehmen.






 Date: Mon, 28 Sep 2009 21:27:15 +0200
 From: me...@mesw.de
 To: users@tomcat.apache.org
 Subject: Re: How to check if the client dropped the connection
 
 Jason Brittain schrieb:
  The first time you call flush, it will send the HTTP response
  headers to the client, so you would need to first set the headers before
  flushing.  That sounds difficult for you to do because you're writing an
  image, and one of the headers would be Content-Length, which you probably
  don't know until your image is generated.
 
 Actually, Content-Length is optional as per the HTTP-1.1 spec:
 
 http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html
 
 However, my take on the OP is that a better optimization strategy in 
 this case would be to just cache a larger image on the server rather 
 than generating every image on-demand. That is, when the user is moving 
 around in the image, the server, on the first request, would calculate 
 the image for a much larger portion of the map than requested and stores 
 it on disk in temporary storage (or in some cache area in RAM, if 
 feasible, after all RAM is cheap these days and 64-bit machines can have 
 lots of RAM). Storage of the images would not be done all at once but in 
 tiles. When then user then moves around in the client, the requests just 
 reads the tiles of the created image from disk, puts them together and 
 clips the borders, then compresses the image and sends it to the client. 
 It is possible that PNG even has some support for compressing parts of 
 an image so the tiles itself could be already stored in compressed 
 format, but it's been a while since I read the PNG spec last time. The 
 same could be done for zooming by storing images in a pyramidal 
 structure, like it is done in pattern recognition. While the user is 
 moving, a background thread associated with the client could try to 
 anticipate where the user is likely to be moving to and calculate the 
 given tiles in advance. Actually, this sounds like an interesting 
 project for several Ph.D. theses...
 
 
 Markus
 
 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org
 
  
_
Hotmail® has ever-growing storage! Don’t worry about storage limits.
http://windowslive.com/Tutorial/Hotmail/Storage?ocid=TXT_TAGLM_WL_HM_Tutorial_Storage_062009

[OT] Re: How to check if the client dropped the connection

2009-09-28 Thread André Warnier

Martin Gainty wrote:

could you explain just a bit more what is a tile?


http://en.wikipedia.org/wiki/Tile

It's the same idea, but for images.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: How to check if the client dropped the connection

2009-09-28 Thread Markus Meyer

Martin Gainty schrieb:

could you explain just a bit more what is a tile?


If you have a very large image, say 1 million x 1 million pixels or 
something like that, it is more efficient to split the image into tiles, 
that is small images of, say, 256 x 256 pixels. If a certain portion of 
the big image is requested, you can then load these tiles individually 
from disk and put them together to form the portion of the image that 
was requested. Tiles which are inside the requested image portion can be 
used as is, tiles at the borders may not be contained fully in the 
requested image and must possibly be clipped.


How tiles are used can be seen e.g. in Google Maps: when you have a slow 
internet connection, while scrolling you can actually see that the map 
consists of rectangular tiles which are loaded on demand.


This is more or less the same concept as blocks when doing paging of 
virtual memory or pages when talking about processor caches. Even 
Audacity (audio editor) uses this concept to achieve fast editing of 
very large audio files.



Markus

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Upgrade from 5.5.9 to 5.5.20 Help

2009-09-28 Thread Pid

On 28/09/2009 20:34, Corrin, Simon P wrote:

Hello,

I have never upgraded Tomcat before and need to upgrade it from version
5.5.9 to 5.5.20 for application compatibility.  I had a search through
the documentation and didn't come across a section on how to do this
type of thing (maybe I missed it).  Can someone point me in the right
direction here?

 From version: 5.5.9
To version: 5.5.20
OS: Windows Server 2000
IIS: IIS 5 using IIS Redirect for SSO purposes (application
requirements)

Other than that it is a pretty vanilla installation.

Thanks in advance,

Simon.


There's no patch or upgrade methodology.

You simply grab the latest version and install it in parallel, then 
reconfigure as needed.


May I suggest that you just upgrade to the latest version (5.5.28)?
5.5.20 seems have been released very late 2007 - there's been 
substantial work/bugfixes done since then.



The config (assuming your original is correct) will be identical, so you 
should be able to install a new copy from tomcat.apache.org, and pretty 
much copy  paste the contents of your various config files.


It is worth noting, however, that writing a fresh config is often a good 
idea - especially if you've repeatedly carried old configs over from 
ancient versions.


The list will assist if you get stuck with config.


p

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: tomcat url rewrite

2009-09-28 Thread WILLIAMer

to Christopher Schultz-2:
I try to rewrite some relative path to absolute path for CSS and image.
And it work!!!

So i think i find the solution for this.
The / char will not let me get error, just check the relative path.  
Thanks for your help!
-- 
View this message in context: 
http://www.nabble.com/tomcat---url-rewrite-tp25395691p25531387.html
Sent from the Tomcat - User mailing list archive at Nabble.com.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: blocked / hanging on call to HandlerRequest.checkRequest

2009-09-28 Thread Bill Barker

Simon Papillon simon.papil...@gmail.com wrote in message 
news:e9cf50b20909280512o2905849fref38fc97a06dd...@mail.gmail.com...
 Hi

 I'm running tomcat 5.5.25 on debian sarge 32 bit linux (2.6.8 kernel)
 with ~ 1.5GB ram on a pentium 4 2GHz
 with a mysql db 5.0.27

 I've got a configuration with apache mod_jk 1.2.25  balancing to 2
 tomcats which are both running running on jdk 1.6.0_16  -Xmx=256M

 periodically, generally at busy times, looking at the JK Status
 Manager the busy count on one of the tomcats will go up and the
 requests channelled through that container will start to hang, the
 busy count will steadily increase the throughput will drop
 dramatically  (i.e. the Acc column in jk_status will stop incrementing
 by 30 every 10secs and go down to like 4),

 This will continue until I either stop that tomcat member through the
 JK Status Manager - by editing the worker settings or the thread count
 goes up to over the number of permitted apache requests (at 150 at the
 moment) and apache is restarted automatically by an out of process
 monitoring app.

 If I stop the tomcat instance through the JK Status Manager, then the
 busy count will gradually (over a period of 5 - 10 mins) decrease and
 get to 0.

 I took a thread dump by tee-ing the output of catalina.out and then
 sending a kill -SIGQUIT pid when it was in the described busy state
 and lots of threads

 The crux of that seemed to be a lot of threads blocked / waiting for
 lock on a lock / monitor held in the HandlerRequest.checkRequest here
 is the printout of the thread holding the lock which is in the
 RUNNABLE state:


If you just want the problem to go away, then look for the attribute 
request.registerRequests in 
http://tomcat.apache.org/tomcat-5.5-doc/config/ajp.html .  If that is set to 
false, then there is no locking within the checkRequest method.  You lose 
that ability to get stats for the request threads via JMX (including the 
manager status page), but that method also quits being a bottleneck if you 
get a flood of new requests.




 TP-Processor65 daemon prio=10 tid=0x08bc9400 nid=0x54bd runnable 
 [0x55dd]
   java.lang.Thread.State: RUNNABLE
   at java.lang.Class.getMethod(Class.java:1605)
   at 
 org.apache.commons.modeler.BaseModelMBean.setManagedResource(BaseModelMBean.java:764)
   at 
 org.apache.commons.modeler.ManagedBean.createMBean(ManagedBean.java:393)
   at 
 org.apache.commons.modeler.Registry.registerComponent(Registry.java:835)
   at 
 org.apache.jk.common.ChannelSocket.registerRequest(ChannelSocket.java:466)
   at 
 org.apache.jk.common.HandlerRequest.checkRequest(HandlerRequest.java:357)
   - locked 0x4490ee38 (a java.lang.Object)
   at 
 org.apache.jk.common.HandlerRequest.decodeRequest(HandlerRequest.java:367)
   at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:261)
   at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:773)
   at 
 org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:703)
   at 
 org.apache.jk.common.ChannelSocket$SocketConnection.runIt(ChannelSocket.java:895)
   at 
 org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:689)
   at java.lang.Thread.run(Thread.java:619)

 then lots of the following types of threads (e.g. 35) all blocked

 TP-Processor63 daemon prio=10 tid=0x09ddc800 nid=0x549f waiting for
 monitor entry [0x55d3]
   java.lang.Thread.State: BLOCKED (on object monitor)
   at 
 org.apache.jk.common.HandlerRequest.checkRequest(HandlerRequest.java:357)
   - waiting to lock 0x4490ee38 (a java.lang.Object)
   at 
 org.apache.jk.common.HandlerRequest.decodeRequest(HandlerRequest.java:367)
   at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:261)
   at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:773)
   at 
 org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:703)
   at 
 org.apache.jk.common.ChannelSocket$SocketConnection.runIt(ChannelSocket.java:895)
   at 
 org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:689)
   at java.lang.Thread.run(Thread.java:619)

 TP-Processor62 daemon prio=10 tid=0x09dd4c00 nid=0x549e waiting for
 monitor entry [0x55ce]
   java.lang.Thread.State: BLOCKED (on object monitor)
   at 
 org.apache.jk.common.HandlerRequest.checkRequest(HandlerRequest.java:357)
   - waiting to lock 0x4490ee38 (a java.lang.Object)
   at 
 org.apache.jk.common.HandlerRequest.decodeRequest(HandlerRequest.java:367)
   at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:261)
   at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:773)
   at 
 org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:703)
   at 
 org.apache.jk.common.ChannelSocket$SocketConnection.runIt(ChannelSocket.java:895)
   at 
 org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:689)
   at java.lang.Thread.run(Thread.java:619)

 .etc

 here is a typical reading from the JK 

Re: Apache/Tomcat with SSL

2009-09-28 Thread Bill Barker
The most common cause of this is that you haven't copied your JkMount etc 
configuration statements to the SSL VirtualHost.  In this case, mod_jk 
doesn't think that it should be serving the .jsp file, so Apache (httpd) 
serves it instead.  Since httpd knows nothing about JSP, it just serves it 
as a text file.

As other people have pointed out, unless you really know what you are doing, 
it is generally a bad idea to share the httpd DocumentRoot with the Tomcat 
webapps directory.  And even if you do really know what you are doing, it is 
a significant amount of extra work to secure this configuration.

Miguel Ortiz miguel.or...@macneillgroup.com wrote in message 
news:bb7ef21e0428a445b16e49e814926426048...@macg-exch02.macneillgroup.local...
I recently setup a SSL cert on our Apache/Tomcat server. When I load our 
page, I can see the lock in my browser with all the SSL info, but the page 
only loads as a the jsp script and not the full page. Is there some 
configuration setting that I have missed. I can provide snippets from the 
server.xml, httpd.conf, and ssl.conf. Thanks in advance.

Miguel Ortiz
Network Engineer
x4818
wk: 954-331-4818
bbry: 954-649-1863
miguel.or...@macneillgroup.com




This email and any files transmitted with it are the confidential property 
of Focus Holdings, LLC and its subsidiaries, and intended solely for the use 
of the individual or entity to whom they are addressed. If you are not the 
named addressee you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. If you are not 
the intended recipient you are notified that disclosing, copying, 
distributing or taking any action in reliance on the contents of this 
information is strictly prohibited.




-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Apache/Tomcat with SSL

2009-09-28 Thread Crypto Sal

Miguel,

Do you have Tomcat serving up Port 80 traffic or is that Apache's httpd? 
I suggest you have one web server handle both normal web traffic and SSL 
traffic (if possible), since this page is a login page, you might want 
to FORCE https on that page and not allow HTTP. It would almost appear 
that you have Tomcat serving up port 80 traffic and Apache serving up 
SSL/TLS connections. So if that were the case, use Tomcat to do the SSL 
as well and configure tomcat accordingly in the server.xml file.


Do keep in mind there is a difference between Tomcat and Apache (httpd). 
Please clarify your setup for us.






On 09/28/2009 01:47 PM, Miguel Ortiz wrote:

Jorge,

I have setup the SSL through Apache and Tomcat, if there is a different 
procedure for mod_ssl, I will try that as well. The site comes up fine when I 
access it without the https, however when I use the https, all I see is the jsp 
script.

Miguel Ortiz
Network Engineer
x4818
wk: 954-331-4818
bbry: 954-649-1863
miguel.or...@macneillgroup.com


-Original Message-
From: Jorge Medina [mailto:jmed...@e-dialog.com]
Sent: Monday, September 28, 2009 10:55 AM
To: Tomcat Users List
Subject: RE: Apache/Tomcat with SSL


Also, in order to configure Apache with SSL you must have the module mod_ssl


-Original Message-
From: Jorge Medina [mailto:jmed...@e-dialog.com]
Sent: Monday, September 28, 2009 10:40 AM
To: Tomcat Users List
Subject: RE: Apache/Tomcat with SSL

Hola Miguel,

did you set up SSL in Apache ? Or did you do it in Tomcat ? Or in both ?

I am assuming that you want Apache to be the exposed server, therefore SSL 
must be configured in Apache.  You must also have configured Apache to forward 
the requests to Tomcat by using the Apache modules mod_jk or mod_proxy

-Jorge



-Original Message-
From: Miguel Ortiz [mailto:miguel.or...@macneillgroup.com]
Sent: Monday, September 28, 2009 8:32 AM
To: users@tomcat.apache.org
Subject: Apache/Tomcat with SSL

I recently setup a SSL cert on our Apache/Tomcat server. When I load our page, I can see 
the lock in my browser with all the SSL info, but the page only loads as a 
the jsp script and not the full page. Is there some configuration setting that I have 
missed. I can provide snippets from the server.xml, httpd.conf, and ssl.conf. Thanks in 
advance.

Miguel Ortiz
Network Engineer
x4818
wk: 954-331-4818
bbry: 954-649-1863
miguel.or...@macneillgroup.com




This email and any files transmitted with it are the confidential property of 
Focus Holdings, LLC and its subsidiaries, and intended solely for the use of 
the individual or entity to whom they are addressed. If you are not the named 
addressee you should not disseminate, distribute or copy this e-mail. Please 
notify the sender immediately by e-mail if you have received this e-mail by 
mistake and delete this e-mail from your system. If you are not the intended 
recipient you are notified that disclosing, copying, distributing or taking any 
action in reliance on the contents of this information is strictly prohibited.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


No virus found in this incoming message.
Checked by AVG - www.avg.com
Version: 8.5.409 / Virus Database: 270.13.112/2390 - Release Date: 09/28/09 
05:51:00



This email and any files transmitted with it are the confidential property of 
Focus Holdings, LLC and its subsidiaries, and intended solely for the use of 
the individual or entity to whom they are addressed. If you are not the named 
addressee you should not disseminate, distribute or copy this e-mail. Please 
notify the sender immediately by e-mail if you have received this e-mail by 
mistake and delete this e-mail from your system. If you are not the intended 
recipient you are notified that disclosing, copying, distributing or taking any 
action in reliance on the contents of this information is strictly prohibited.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


   



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org