Websocket classes in tomcat-embed-core-7.0.52.jar

2014-02-20 Thread Ralph Schaer
Hi

The embedded core jar 7.0.52 no longer contains the websocket classes.
It only contains an empty org.apache.tomcat.websocket package

Version 7.0.50 of the embedded core contains all the websocket classes.

Is this a intentional change or maybe a bug in the build process?

Ralph


Re: Websocket classes in tomcat-embed-core-7.0.52.jar

2014-02-20 Thread Jacopo Cappellato
On Feb 20, 2014, at 9:10 AM, Ralph Schaer ralphsch...@gmail.com wrote:

 Hi
 
 The embedded core jar 7.0.52 no longer contains the websocket classes.
 It only contains an empty org.apache.tomcat.websocket package
 
 Version 7.0.50 of the embedded core contains all the websocket classes.
 
 Is this a intentional change or maybe a bug in the build process?

This is true, however the embedded distribution now has a separate jar with the 
websockets implementation:

tomcat7-embed-websocket.jar

Jacopo


 
 Ralph


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Can jasper2's validateXml be added back, at least for the lifetime of Tomcat 7?

2014-02-20 Thread Mark Thomas
On 20/02/2014 07:46, mark_desp...@mcafee.com wrote:
 Hi everyone,
 
 My project recently tried upgrading to Tomcat 7.0.52 and has become
 bit by the renaming of jasper2’s “validateXml” to “validateTld”, as
 described on the thread below.  This change has made it more
 difficult pick up the latest Tomcat 7’s security fixes since the
 change breaks build scripts for quite a few projects maintained by
 different teams.
 
 Would it be possible to add back support for “validateXml” as part of
 the next minor release of Tomcat 7, as more or less described by Mark
 Thomas on that thread?
 
 http://mail-archives.apache.org/mod_mbox/tomcat-users/201401.mbox/%3ccd84922d-b159-49bd-9c11-6aaa5cb97...@email.android.com%3E

  This would save us a lot of effort, and we would then plan on
 switching to the new attribute name as part of adopting Tomcat 8.
 
 Thank you for any assistance on this!

It looks like that attribute was going to get added back already as,
digging into another issue reported on the dev list, Jasper in 7.0.x
still parses web.xml in full so it needs to have separate control over
validateXml.

Mark

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Websocket classes in tomcat-embed-core-7.0.52.jar

2014-02-20 Thread Ralph Schaer
Thanks a lot. Was not aware that this is now in a separate package.
Ralph


On Thu, Feb 20, 2014 at 9:20 AM, Jacopo Cappellato 
jacopo.cappell...@gmail.com wrote:

 On Feb 20, 2014, at 9:10 AM, Ralph Schaer ralphsch...@gmail.com wrote:

  Hi
 
  The embedded core jar 7.0.52 no longer contains the websocket classes.
  It only contains an empty org.apache.tomcat.websocket package
 
  Version 7.0.50 of the embedded core contains all the websocket classes.
 
  Is this a intentional change or maybe a bug in the build process?

 This is true, however the embedded distribution now has a separate jar
 with the websockets implementation:

 tomcat7-embed-websocket.jar

 Jacopo


 
  Ralph


 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org




Re: [ANN] Apache Tomcat 7.0.52 released

2014-02-20 Thread Maarten van Hulsentop
Hello Violeta,

On the security vulnerability site https://tomcat.apache.org/security-7.html,
issue 
CVE-2014-0050http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0050is
still reported to be fixed in 7.0.51, which is stated as not yet
released.
I assume the fix is delivered in 7.0.52 as well, but the vulnerability page
is not updated yet. Can you confirm this?

Thank you very much!

Regards,

Maarten




2014-02-19 13:10 GMT+01:00 Violeta Georgieva miles...@gmail.com:

 The Apache Tomcat team announces the immediate availability of Apache
 Tomcat 7.0.52.

 Apache Tomcat is an open source software implementation of the Java
 Servlet, JavaServer Pages and Java Expression Language technologies.

 This release contains a number of bug fixes and improvements compared to
 version 7.0.50.

 Please refer to the change log for the complete list of changes:
 http://tomcat.apache.org/tomcat-7.0-doc/changelog.html

 Note: This version has 4 zip binaries: a generic one and
   three bundled with Tomcat native binaries for Windows operating
   systems running on different CPU architectures.

 Note: Use of the JSR-356 Java WebSocket 1.0 implementation requires Java 7.

 Note: If you use the APR/native AJP or HTTP connector you *must* upgrade
   to version 1.1.29 or later of the APR/native library.

 Downloads:
 http://tomcat.apache.org/download-70.cgi

 Migration guides from Apache Tomcat 5.5.x and 6.0.x:
 http://tomcat.apache.org/migration.html



Re: Websocket classes in tomcat-embed-core-7.0.52.jar

2014-02-20 Thread Mark Thomas
On 20/02/2014 08:31, Ralph Schaer wrote:
 Thanks a lot. Was not aware that this is now in a separate package.
 Ralph

I'm just going through the build script to fix the various places where
we end up shipping JARs with an empty package because the contents of
that package is in a different JAR. Those changes will be in the next
releases of 8.0.x and 7.0.x.

Mark


 
 
 On Thu, Feb 20, 2014 at 9:20 AM, Jacopo Cappellato 
 jacopo.cappell...@gmail.com wrote:
 
 On Feb 20, 2014, at 9:10 AM, Ralph Schaer ralphsch...@gmail.com wrote:

 Hi

 The embedded core jar 7.0.52 no longer contains the websocket classes.
 It only contains an empty org.apache.tomcat.websocket package

 Version 7.0.50 of the embedded core contains all the websocket classes.

 Is this a intentional change or maybe a bug in the build process?

 This is true, however the embedded distribution now has a separate jar
 with the websockets implementation:

 tomcat7-embed-websocket.jar

 Jacopo



 Ralph


 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org


 


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: [ANN] Apache Tomcat 7.0.52 released

2014-02-20 Thread Violeta Georgieva
Hi,

2014-02-20 10:44 GMT+02:00 Maarten van Hulsentop maar...@vanhulsentop.nl:

 Hello Violeta,

 On the security vulnerability site
https://tomcat.apache.org/security-7.html,
 issue CVE-2014-0050
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0050is
 still reported to be fixed in 7.0.51, which is stated as not yet
 released.
 I assume the fix is delivered in 7.0.52 as well, but the vulnerability
page
 is not updated yet. Can you confirm this?

I updated the security page.
Thanks for pointing this.

Regards
Violeta

 Thank you very much!

 Regards,

 Maarten




 2014-02-19 13:10 GMT+01:00 Violeta Georgieva miles...@gmail.com:

  The Apache Tomcat team announces the immediate availability of Apache
  Tomcat 7.0.52.
 
  Apache Tomcat is an open source software implementation of the Java
  Servlet, JavaServer Pages and Java Expression Language technologies.
 
  This release contains a number of bug fixes and improvements compared to
  version 7.0.50.
 
  Please refer to the change log for the complete list of changes:
  http://tomcat.apache.org/tomcat-7.0-doc/changelog.html
 
  Note: This version has 4 zip binaries: a generic one and
three bundled with Tomcat native binaries for Windows
operating
systems running on different CPU architectures.
 
  Note: Use of the JSR-356 Java WebSocket 1.0 implementation requires
Java 7.
 
  Note: If you use the APR/native AJP or HTTP connector you *must* upgrade
to version 1.1.29 or later of the APR/native library.
 
  Downloads:
  http://tomcat.apache.org/download-70.cgi
 
  Migration guides from Apache Tomcat 5.5.x and 6.0.x:
  http://tomcat.apache.org/migration.html
 


Re: Exception in thread http-bio-8081-exec-9 java.lang.StackOverflowError

2014-02-20 Thread Dilip Sankhla
How do you launch it?

 lunching from cmd line from bin/startup.sh

Check your launch configuration options for java

 My java configurations are

JAVA_HOME=/Library/Java/JavaVirtualMachines/jdk1.7.0_51.jdk/Contents/Home/
JAVA_OPTS=-Xss160k -Xms512m -Xmx2040m -XX:MaxPermSize=128M
-Dorg.apache.jasper.compiler.Parser.STRICT_QUOTE_ESCAPING=false
-Dorg.apache.catalina.session.StandardSession.ACTIVITY_CHECK=true 
JPDA_ADDRESS=5007
JPDA_TRANSPORT=dt_socket

And i found i had copied configurations from tomcat 6 ...after
changing Xxx to 256k my problem resolved.

.
What is your stack size  that it overflows after a dozen of function calls?

 Yes its overflows after some calls.


Thanks

On Tue, Feb 18, 2014 at 3:52 PM, Konstantin Kolinko
knst.koli...@gmail.com wrote:
 2014-02-18 13:49 GMT+04:00 Dilip Sankhla dilipsank...@gmail.com:
 * I am getting below mention error, every thing was working fine with
 tomcat 6. Please Help


 My tomcat and java configurations are

 Server version: Apache Tomcat/7.0.50
 Server built:   Dec 19 2013 10:18:12
 Server number:  7.0.50.0
 OS Name:Mac OS X
 OS Version: 10.7.5
 Architecture:   x86_64
 JVM Version:1.7.0_51-b13
 JVM Vendor: Oracle Corporation


 How do you launch it?

 Check your launch configuration options for java.
 What is your stack size  that it overflows after a dozen of function calls?


 and thread dump is


 Exception in thread http-bio-8081-exec-9 java.lang.StackOverflowError
 at java.net.SocketInputStream.socketRead0(Native Method)
at java.net.SocketInputStream.read(SocketInputStream.java:152)
 at java.net.SocketInputStream.read(SocketInputStream.java:122)
 at 
 org.apache.coyote.http11.InternalInputBuffer.fill(InternalInputBuffer.java:516)
 at 
 org.apache.coyote.http11.InternalInputBuffer.fill(InternalInputBuffer.java:501)
 at 
 org.apache.coyote.http11.Http11Processor.setRequestLineReadTimeout(Http11Processor.java:173)
 at 
 org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:950)
 at 
 org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:607)
 at 
 org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:315)
 at 
 java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
 at 
 java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
 at java.lang.Thread.run(Thread.java:744)

 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org




-- 
Dilip K. Sankhla

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



recommended external/plugin session manager based on redis/cassandra/memcache

2014-02-20 Thread Ja kub
Hello

Has anybody tried using redis/cassandra/memcache as session manager ?
Are there any mature plugins available ?
Is there an interest in such plugin ?
Maybe it is hard to integrate such external cache solution because of
servlet spec requirements ?
Please give links to projects worth recommendation.


Below looks interesting but abandoned or in alpa version:

https://github.com/jcoleman/tomcat-redis-session-manager
one developer without time (
https://github.com/jcoleman/tomcat-redis-session-manager/issues/17 )

http://code.google.com/a/apache-extras.org/p/tomcat-cassandra/
valid session is loosing attributes if not written/read after ttl - not
resolved since 30.01

http://code.google.com/p/memcached-session-manager/
one developer, many old unresolved issues


Regards
Jakub


Tomcat 7.0.50 - Starting tomcat get this error overrides final method start.

2014-02-20 Thread Patel Sufyan (HEALTH AND SOCIAL CARE INFORMATION CENTRE)
Hi,

I am using Apache Tomcat realm to perform the user authentication and have 
added the following to the server.xml

Realm appContextLocation=conf/spring-security.xml 
className=org.springframework.security.adapters.catalina.CatalinaSpringSecurityUserRealm
 key=my_password resourceName=UserDatabase/

However, since upgrading to Tomcat 7.0.50 from 6.0.39, when starting Tomcat 
service (through Eclipse), I get the error below. From trawling through the net 
I could not find the exact error but I get the feeling that I will need to 
replace this class with something else. Or is there anything I can do/download 
to fix it?

SEVERE: Begin event threw error
java.lang.VerifyError: class 
org.springframework.security.adapters.catalina.CatalinaSpringSecurityUserRealm 
overrides final method start.()V
at java.lang.ClassLoader.defineClass1(Native Method)
at java.lang.ClassLoader.defineClass(Unknown Source)
at java.security.SecureClassLoader.defineClass(Unknown Source)
at java.net.URLClassLoader.defineClass(Unknown Source)
at java.net.URLClassLoader.access$100(Unknown Source)
at java.net.URLClassLoader$1.run(Unknown Source)
at java.net.URLClassLoader$1.run(Unknown Source)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(Unknown Source)
at java.lang.ClassLoader.loadClass(Unknown Source)
at java.lang.ClassLoader.loadClass(Unknown Source)
at 
org.apache.tomcat.util.digester.ObjectCreateRule.begin(ObjectCreateRule.java:144)
at 
org.apache.tomcat.util.digester.Digester.startElement(Digester.java:1288)
at 
com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.startElement(Unknown
 Source)
at 
com.sun.org.apache.xerces.internal.parsers.AbstractXMLDocumentParser.emptyElement(Unknown
 Source)
at 
com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanStartElement(Unknown
 Source)
at 
com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl$FragmentContentDriver.next(Unknown
 Source)
at 
com.sun.org.apache.xerces.internal.impl.XMLDocumentScannerImpl.next(Unknown 
Source)
at 
com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanDocument(Unknown
 Source)
at 
com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(Unknown 
Source)
at 
com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(Unknown 
Source)
at 
com.sun.org.apache.xerces.internal.parsers.XMLParser.parse(Unknown Source)
at 
com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.parse(Unknown 
Source)
at 
com.sun.org.apache.xerces.internal.jaxp.SAXParserImpl$JAXPSAXParser.parse(Unknown
 Source)
at 
org.apache.tomcat.util.digester.Digester.parse(Digester.java:1561)
at org.apache.catalina.startup.Catalina.load(Catalina.java:616)
at org.apache.catalina.startup.Catalina.load(Catalina.java:664)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown 
Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at 
org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:281)
at 
org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:455)



Thanks in advance

Suf





This message may contain confidential information. If you are not the intended 
recipient please inform the
sender that you have received the message in error before deleting it.
Please do not disclose, copy or distribute information in this e-mail or take 
any action in reliance on its contents:
to do so is strictly prohibited and may be unlawful.

Thank you for your co-operation.

NHSmail is the secure email and directory service available for all NHS staff 
in England and Scotland
NHSmail is approved for exchanging patient data and other sensitive information 
with NHSmail and GSi recipients
NHSmail provides an email address for your career in the NHS and can be 
accessed anywhere




Re: Tomcat 7.0.50 - Starting tomcat get this error overrides final method start.

2014-02-20 Thread Filip Hanik
If I remember correctly, IIRC, those adapters have been removed from Spring
security. If you upgrade your Tomcat, try to upgrade your Spring Security
version too

http://64.20.104.11/spring-security/spring-security/commit/e2062bbe79033b214f55f7c2ce03542a70f29a78


On Thu, Feb 20, 2014 at 7:20 AM, Patel Sufyan (HEALTH AND SOCIAL CARE
INFORMATION CENTRE) sufyan.pa...@hscic.gov.uk wrote:

 Hi,

 I am using Apache Tomcat realm to perform the user authentication and have
 added the following to the server.xml

 Realm appContextLocation=conf/spring-security.xml
 className=org.springframework.security.adapters.catalina.CatalinaSpringSecurityUserRealm
 key=my_password resourceName=UserDatabase/

 However, since upgrading to Tomcat 7.0.50 from 6.0.39, when starting
 Tomcat service (through Eclipse), I get the error below. From trawling
 through the net I could not find the exact error but I get the feeling that
 I will need to replace this class with something else. Or is there anything
 I can do/download to fix it?

 SEVERE: Begin event threw error
 java.lang.VerifyError: class
 org.springframework.security.adapters.catalina.CatalinaSpringSecurityUserRealm
 overrides final method start.()V
 at java.lang.ClassLoader.defineClass1(Native Method)
 at java.lang.ClassLoader.defineClass(Unknown Source)
 at java.security.SecureClassLoader.defineClass(Unknown
 Source)
 at java.net.URLClassLoader.defineClass(Unknown Source)
 at java.net.URLClassLoader.access$100(Unknown Source)
 at java.net.URLClassLoader$1.run(Unknown Source)
 at java.net.URLClassLoader$1.run(Unknown Source)
 at java.security.AccessController.doPrivileged(Native
 Method)
 at java.net.URLClassLoader.findClass(Unknown Source)
 at java.lang.ClassLoader.loadClass(Unknown Source)
 at java.lang.ClassLoader.loadClass(Unknown Source)
 at
 org.apache.tomcat.util.digester.ObjectCreateRule.begin(ObjectCreateRule.java:144)
 at
 org.apache.tomcat.util.digester.Digester.startElement(Digester.java:1288)
 at
 com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.startElement(Unknown
 Source)
 at
 com.sun.org.apache.xerces.internal.parsers.AbstractXMLDocumentParser.emptyElement(Unknown
 Source)
 at
 com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanStartElement(Unknown
 Source)
 at
 com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl$FragmentContentDriver.next(Unknown
 Source)
 at
 com.sun.org.apache.xerces.internal.impl.XMLDocumentScannerImpl.next(Unknown
 Source)
 at
 com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanDocument(Unknown
 Source)
 at
 com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(Unknown
 Source)
 at
 com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(Unknown
 Source)
 at
 com.sun.org.apache.xerces.internal.parsers.XMLParser.parse(Unknown Source)
 at
 com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.parse(Unknown
 Source)
 at
 com.sun.org.apache.xerces.internal.jaxp.SAXParserImpl$JAXPSAXParser.parse(Unknown
 Source)
 at
 org.apache.tomcat.util.digester.Digester.parse(Digester.java:1561)
 at
 org.apache.catalina.startup.Catalina.load(Catalina.java:616)
 at
 org.apache.catalina.startup.Catalina.load(Catalina.java:664)
 at sun.reflect.NativeMethodAccessorImpl.invoke0(Native
 Method)
 at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown
 Source)
 at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown
 Source)
 at java.lang.reflect.Method.invoke(Unknown Source)
 at
 org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:281)
 at
 org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:455)



 Thanks in advance

 Suf




 

 This message may contain confidential information. If you are not the
 intended recipient please inform the
 sender that you have received the message in error before deleting it.
 Please do not disclose, copy or distribute information in this e-mail or
 take any action in reliance on its contents:
 to do so is strictly prohibited and may be unlawful.

 Thank you for your co-operation.

 NHSmail is the secure email and directory service available for all NHS
 staff in England and Scotland
 NHSmail is approved for exchanging patient data and other sensitive
 information with NHSmail and GSi recipients
 NHSmail provides an email address for your career in the NHS and can be
 

java: src/network.c:441: Java_org_apache_tomcat_jni_Socket_send: Assertion failed

2014-02-20 Thread Dmitry Batiyevskiy
We have upgraded tomcat 7.0.42 to 7.0.50
We have an app which is built around atmosphere framework and uses
websockets
After upgrade tomcat instance which has only this app dies in few hours
after deploy (the whole java process dies)

The only error in log is following:
java: src/network.c:441: Java_org_apache_tomcat_jni_Socket_send: Assertion
`(s-opaque != ((void *)0))' failed

No memory dumps are created (java process is launched with
-XX:+HeapDumpOnOutOfMemoryError) and can not find anything like OOM killer
in system log (we use Debian 7)
Rollback to 7.0.42 helps and app works fine with same configs (context.xml,
server.xml, etc) and libs
We use oracle jdk 1.7.45, changing jdk version doesn't helps when using
tomcat 7.0.50
Not sure what other details I can provide about this issue
Will appreciate any help

Regards,

Dmitry Batiyevskiy

Ardas Group Inc.

www.ardas.dp.ua


Re: java: src/network.c:441: Java_org_apache_tomcat_jni_Socket_send: Assertion failed

2014-02-20 Thread André Warnier

Dmitry Batiyevskiy wrote:

We have upgraded tomcat 7.0.42 to 7.0.50
We have an app which is built around atmosphere framework and uses
websockets
After upgrade tomcat instance which has only this app dies in few hours
after deploy (the whole java process dies)

The only error in log is following:
java: src/network.c:441: Java_org_apache_tomcat_jni_Socket_send: Assertion
`(s-opaque != ((void *)0))' failed

No memory dumps are created (java process is launched with
-XX:+HeapDumpOnOutOfMemoryError) and can not find anything like OOM killer
in system log (we use Debian 7)
Rollback to 7.0.42 helps and app works fine with same configs (context.xml,
server.xml, etc) and libs
We use oracle jdk 1.7.45, changing jdk version doesn't helps when using
tomcat 7.0.50
Not sure what other details I can provide about this issue


The first 20 lines of the Tomcat log, when you start Tomcat.
Also maybe your Connector configuration in server.xml.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: recommended external/plugin session manager based on redis/cassandra/memcache

2014-02-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Jakub,

On 2/20/14, 4:57 AM, Ja kub wrote:
 Has anybody tried using redis/cassandra/memcache as session manager
 ?

I believe there is a SessionManager (or is it a Store) that
implements a memcached-backed session store out there somewhere.
Search the list archives... it has come up a few times and you'll
probably find a reference to where you can find it.

 Are there any mature plugins available ? Is there an interest in
 such plugin ?

I think there are certainly some folks who would like to use
non-memory session stores.

 Maybe it is hard to integrate such external cache solution because
 of servlet spec requirements ?

I don't think so: there's nothing prohibiting sessions from being some
place other than memory. As long as it works vaguely like a Map, the
implementation is irrelevant.

 Please give links to projects worth recommendation.
 
 
 Below looks interesting but abandoned or in alpa version:
 
 https://github.com/jcoleman/tomcat-redis-session-manager one
 developer without time ( 
 https://github.com/jcoleman/tomcat-redis-session-manager/issues/17
 )
 
 http://code.google.com/a/apache-extras.org/p/tomcat-cassandra/ 
 valid session is loosing attributes if not written/read after ttl -
 not resolved since 30.01
 
 http://code.google.com/p/memcached-session-manager/ one developer,
 many old unresolved issues

If you are interested in one of these, perhaps you should join one of
the projects and contribute fixes.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=VK8a
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: java: src/network.c:441: Java_org_apache_tomcat_jni_Socket_send: Assertion failed

2014-02-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Dmitry,

On 2/20/14, 11:00 AM, Dmitry Batiyevskiy wrote:
 We have upgraded tomcat 7.0.42 to 7.0.50 We have an app which is
 built around atmosphere framework and uses websockets After upgrade
 tomcat instance which has only this app dies in few hours after
 deploy (the whole java process dies)
 
 The only error in log is following: java: src/network.c:441:
 Java_org_apache_tomcat_jni_Socket_send: Assertion `(s-opaque !=
 ((void *)0))' failed

Does the process die immediately after this assertion failure?

 No memory dumps are created (java process is launched with 
 -XX:+HeapDumpOnOutOfMemoryError) and can not find anything like OOM
 killer in system log (we use Debian 7)
 
 Rollback to 7.0.42 helps and app works fine with same configs
 (context.xml, server.xml, etc) and libs We use oracle jdk 1.7.45,
 changing jdk version doesn't helps when using tomcat 7.0.50

What version of tcnative are you using? The version bundled with
Tomcat or an external version?

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=H3cC
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: java: src/network.c:441: Java_org_apache_tomcat_jni_Socket_send: Assertion failed

2014-02-20 Thread Dmitry Batiyevskiy
When using tomcat 7.0.42 I used libtcnative 1.1.24-1 which comes from
debian repos
Upgrade to tomcat 7.0.50  required upgrade of libtcnative also and there
was no updated version in debian repos so I had to compile it from source
tarball downloaded here http://tomcat.apache.org/download-native.cgi
Downgrading tomcat also means downgrading libtcnative for me

Connector configuration:
  Connector port=8443 maxHttpHeaderSize=8192
 maxThreads=15000
 enableLookups=false disableUploadTimeout=true
 acceptCount=1000 scheme=https secure=true
 SSLEnabled=true
 compression=off
 SSLCertificateFile=/opt/tomcat/my.crt
 SSLCertificateKeyFile=/opt/tomcat/my.key /

limits.conf is appropriate for this number of threads, however on
production server we never had more than 2000 active established connections

First lines of log when starting tomcat:

Feb 18, 2014 9:12:50 AM org.apache.catalina.core.AprLifecycleListener init
INFO: Loaded APR based Apache Tomcat Native library 1.1.29 using APR
version 1.4.6.
Feb 18, 2014 9:12:50 AM org.apache.catalina.core.AprLifecycleListener init
INFO: APR capabilities: IPv6 [true], sendfile [true], accept filters
[false], random [true].
Feb 18, 2014 9:12:51 AM org.apache.catalina.core.AprLifecycleListener
initializeSSL
INFO: OpenSSL successfully initialized (OpenSSL 1.0.1e 11 Feb 2013)
Feb 18, 2014 9:12:51 AM org.apache.coyote.AbstractProtocol init
INFO: Initializing ProtocolHandler [http-apr-8080]
Feb 18, 2014 9:12:51 AM org.apache.coyote.AbstractProtocol init
INFO: Initializing ProtocolHandler [http-apr-8443]
Feb 18, 2014 9:12:51 AM org.apache.coyote.AbstractProtocol init
INFO: Initializing ProtocolHandler [ajp-apr-8009]
Feb 18, 2014 9:12:51 AM org.apache.catalina.startup.Catalina load
INFO: Initialization processed in 1188 ms
Feb 18, 2014 9:12:51 AM org.apache.catalina.core.StandardService
startInternal
INFO: Starting service dbApp
Feb 18, 2014 9:12:51 AM org.apache.catalina.core.StandardEngine
startInternal
INFO: Starting Servlet Engine: Apache Tomcat/7.0.50
Feb 18, 2014 9:12:51 AM org.apache.catalina.core.StandardService
startInternal
INFO: Starting service Catalina
Feb 18, 2014 9:12:51 AM org.apache.catalina.core.StandardEngine
startInternal
INFO: Starting Servlet Engine: Apache Tomcat/7.0.50
Feb 18, 2014 9:12:51 AM org.apache.catalina.startup.HostConfig deployWAR
INFO: Deploying web application archive /opt/tomcat/webapps/somemyapp.war
Feb 18, 2014 9:13:39 AM org.apache.catalina.util.SessionIdGenerator
createSecureRandom
INFO: Creation of SecureRandom instance for session ID generation using
[SHA1PRNG] took [7,593] milliseconds.
Feb 18, 2014 9:13:39 AM com.radiadesign.catalina.session.PropertiesHolder
readRedisSettings
INFO: Redis settings setup is finished. Applied values - redisHost:
somemyhost, redisPort: 6379, redisDatabase: 0
Feb 18, 2014 9:13:39 AM
com.radiadesign.catalina.session.RedisSessionManager startInternal
INFO: Attached to RedisSessionHandlerValve
Feb 18, 2014 9:13:39 AM
com.radiadesign.catalina.session.RedisSessionManager initializeSerializer
INFO: Attempting to use serializer
:com.radiadesign.catalina.session.JavaSerializer
Feb 18, 2014 9:13:39 AM
com.radiadesign.catalina.session.RedisSessionManager startInternal
INFO: Will expire sessions after 28800 seconds





Regards,

Dmitry Batiyevskiy

Ardas Group Inc.

www.ardas.dp.ua


2014-02-20 20:14 GMT+02:00 Christopher Schultz ch...@christopherschultz.net
:

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA256

 Dmitry,

 On 2/20/14, 11:00 AM, Dmitry Batiyevskiy wrote:
  We have upgraded tomcat 7.0.42 to 7.0.50 We have an app which is
  built around atmosphere framework and uses websockets After upgrade
  tomcat instance which has only this app dies in few hours after
  deploy (the whole java process dies)
 
  The only error in log is following: java: src/network.c:441:
  Java_org_apache_tomcat_jni_Socket_send: Assertion `(s-opaque !=
  ((void *)0))' failed

 Does the process die immediately after this assertion failure?

  No memory dumps are created (java process is launched with
  -XX:+HeapDumpOnOutOfMemoryError) and can not find anything like OOM
  killer in system log (we use Debian 7)
 
  Rollback to 7.0.42 helps and app works fine with same configs
  (context.xml, server.xml, etc) and libs We use oracle jdk 1.7.45,
  changing jdk version doesn't helps when using tomcat 7.0.50

 What version of tcnative are you using? The version bundled with
 Tomcat or an external version?

 - -chris
 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1
 Comment: GPGTools - http://gpgtools.org
 Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

 iQIcBAEBCAAGBQJTBkYSAAoJEBzwKT+lPKRYBtQQAKr1p3NfO5BxcKZqwDxhw1Hg
 qol9RxOE6JIPkowdHjJdgOg0mNc1ROeG6HFu/aLDiJ0uP34piaiwQRDSgk6/7j0J
 lZSplp+fO8gl05Yhb7lzl/Y/+Our21Cu0NkY7GES1McY2yKDQKsLWJJixCD4lEFZ
 yS4z4fd6ihSlmpXvkhm7vRNxyvz+zNlCi1/nqt08Ha8UBLqtg4kUDxJEHYlAj8OX
 

From rameau1...@hotmail.com

2014-02-20 Thread rameau rameau1982
http://SUDHAVINDU.CO.IN/images/scores.php
  

Tomcat 7.0.52/stdout stderr not created

2014-02-20 Thread Petr Nemecek
Hello,

I've been using Tomcat 7.0.47   on Windows Server 2012 R2.

Today I tried to update to 7.0.52, but had a problem, that even if the
configurations seem to be the same, *stdout*.log and *stderr*.log are not
created on logs folder for 7.0.52. In 7.0.47 (and previous versions) this
worked automatically without any additional configuration.

I tried to install 7.0.50, and both stdout and sterr are also automatically
created.

Is there any change in 7.0.52 from last versions?

Many thanks,
 Petr

P.S. When I start 7.0.52 using startup.bat, I normally see all the logs in
the console window.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat 7.0.52/stdout stderr not created

2014-02-20 Thread Konstantin Kolinko
2014-02-21 0:56 GMT+04:00 Petr Nemecek p...@cmail.cz:
 Hello,

 I've been using Tomcat 7.0.47   on Windows Server 2012 R2.

 Today I tried to update to 7.0.52, but had a problem, that even if the
 configurations seem to be the same, *stdout*.log and *stderr*.log are not
 created on logs folder for 7.0.52. In 7.0.47 (and previous versions) this
 worked automatically without any additional configuration.

If you installed it with service.bat, then yes.

See Re r1567742 thread on dev list
http://mail-archives.apache.org/mod_mbox/tomcat-dev/201402.mbox/%3CCABzHfVngLtpr5LGB-igXSOAFt%2BrEg03co1DOHdZixe%2BSoxy9Rw%40mail.gmail.com%3E
- Minor - 2)

This is already fixed for 7.0.53.

You can edit those settings with Service Configuration application
(Tomcat7w.exe).


 I tried to install 7.0.50, and both stdout and sterr are also automatically
 created.

 Is there any change in 7.0.52 from last versions?

 Many thanks,
  Petr

 P.S. When I start 7.0.52 using startup.bat, I normally see all the logs in
 the console window.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Can jasper2's validateXml be added back, at least for the lifetime of Tomcat 7?

2014-02-20 Thread Mark_DeSpain
Thank you for the quick reply, Mark.  Would it be possible to get a sense
of which release the validateXml attribute might get added back? E.g.
7.0.53? 

I did a quick search through the bugs, but it does not seem to be tracked.
 Would it be worth submitting something?

Thanks!

Mark D.




On 2/20/14, 12:21 AM, Mark Thomas ma...@apache.org wrote:

On 20/02/2014 07:46, mark_desp...@mcafee.com wrote:
 Hi everyone,
 
 My project recently tried upgrading to Tomcat 7.0.52 and has become
 bit by the renaming of jasper2¹s ³validateXml² to ³validateTld², as
 described on the thread below.  This change has made it more
 difficult pick up the latest Tomcat 7¹s security fixes since the
 change breaks build scripts for quite a few projects maintained by
 different teams.
 
 Would it be possible to add back support for ³validateXml² as part of
 the next minor release of Tomcat 7, as more or less described by Mark
 Thomas on that thread?
 
 
http://mail-archives.apache.org/mod_mbox/tomcat-users/201401.mbox/%3Ccd84
922d-b159-49bd-9c11-6aaa5cb97...@email.android.com%3E

  This would save us a lot of effort, and we would then plan on
 switching to the new attribute name as part of adopting Tomcat 8.
 
 Thank you for any assistance on this!

It looks like that attribute was going to get added back already as,
digging into another issue reported on the dev list, Jasper in 7.0.x
still parses web.xml in full so it needs to have separate control over
validateXml.

Mark

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Tomcat 7 8 getRemoteHost with enableLookups=true with x-forwarded-for header gets IP instead of hostname

2014-02-20 Thread Yann Nicolas
Hello,

I have a web application load balanced in an intranet and I need to get the
hostname of the client from the request (for audit purposes).

I have verified that the load balancer is adding the header
x-forwarded-for and I get the correct client IP with the
HttpServletRequest method getRemoteAddr(). Also, I have enabled the
lookups setting to true enableLookups and if I connect from a client to
the server without passing through the load balancer, the hostname of the
client is correctly obtained with getRemoteHost().

However when I send a request from a client passing through the
load-balancer the hostname is not resolved, I get only the IP when using
the method getRemoteHost().

I have been looking at the source code for Tomcat 7 and Tomcat 8 and I see
that in both classes that seems to handle the x-forwarded-for header, the
hostname is never obtained from IP:
- org.apache.catalina.valves.RemoteIpValve
- org.apache.catalina.filters.RemoteIpFilter

For example in RemoteIpValve (
https://github.com/apache/tomcat/blob/trunk/java/org/apache/catalina/valves/RemoteIpValve.java),
we have:

 *[...]*
if (remoteIp != null) {

request.setRemoteAddr(remoteIp);
request.setRemoteHost(remoteIp);
[...]

And the remote host is never resolved.


Of course I can put a filter in my web application to do search the
hostname from the remote IP using java.net.InetAddress for example but I
was wondering if a Tomcat native solution exists.

If not, is there any particular reason for this, or is it because no body
has required that feature.

Thanks,

Yann Nicolas


Re: recommended external/plugin session manager based on redis/cassandra/memcache

2014-02-20 Thread Ja kub
Thx for reply.
BR
Jakub


On Thu, Feb 20, 2014 at 7:11 PM, Christopher Schultz 
ch...@christopherschultz.net wrote:

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA256

 Jakub,

 On 2/20/14, 4:57 AM, Ja kub wrote:
  Has anybody tried using redis/cassandra/memcache as session manager
  ?

 I believe there is a SessionManager (or is it a Store) that
 implements a memcached-backed session store out there somewhere.
 Search the list archives... it has come up a few times and you'll
 probably find a reference to where you can find it.

  Are there any mature plugins available ? Is there an interest in
  such plugin ?

 I think there are certainly some folks who would like to use
 non-memory session stores.

  Maybe it is hard to integrate such external cache solution because
  of servlet spec requirements ?

 I don't think so: there's nothing prohibiting sessions from being some
 place other than memory. As long as it works vaguely like a Map, the
 implementation is irrelevant.

  Please give links to projects worth recommendation.
 
 
  Below looks interesting but abandoned or in alpa version:
 
  https://github.com/jcoleman/tomcat-redis-session-manager one
  developer without time (
  https://github.com/jcoleman/tomcat-redis-session-manager/issues/17
  )
 
  http://code.google.com/a/apache-extras.org/p/tomcat-cassandra/
  valid session is loosing attributes if not written/read after ttl -
  not resolved since 30.01
 
  http://code.google.com/p/memcached-session-manager/ one developer,
  many old unresolved issues

 If you are interested in one of these, perhaps you should join one of
 the projects and contribute fixes.

 - -chris
 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1
 Comment: GPGTools - http://gpgtools.org
 Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

 iQIcBAEBCAAGBQJTBkU0AAoJEBzwKT+lPKRYkUgP/1ZTXuSXMpMLeWfKIqwOwCAy
 vDFKoFWYN62Uu41nGXZy46IwnGE164xFgsC+H/3EWNZaf/zVWoxR1M3u7HHUO72s
 MP+7T5k0lF+fztimGUjMTp0OaAZcLYsEDsKo6E9KEfSWdjF1oKe4mQVwiu0yMxL2
 f87nfc9c9OT6vGuL05Cldxo/IpRoKQi7x+ZQflPmajOvGX6arAKJFvZkAdwcKMd/
 ut+gEI9SiGvVDaE7jFYw+y8JvpvIZtR7JREAnOvvJoyEqYlg778bhXIPzx69/Z0U
 FEJuGemImJbgTz9uliNckjVEH428NwEl1iX3GwuHhZDm+Sw1CMig64ck2nJsx4Et
 F6QpDzEmdS7SuXDSS6hZeawZn4UA3FBAk5NLdbMaNl+8WvwBQynG4fh62qRcRL5o
 sWh/Kkaf0U0zH5hutI68ms3MM0NFaBXvt/4CCcU/0o4xo2qOd4fxRH6PWHTcC04v
 uakNrVUIrXMbm1LMyTmJL8ArnOnVlav4CXUNkL+HWgUyQSE63LBF2S9YXn6CZ26Q
 uUFBJwq1LbKOy7JfZUeSkg+qfTxtpa+O/029TNMfoIsl1GyjjTMcYKfV8x+PvLVW
 uwbZjAOS9JKQqowcDEiSvMsBHHvubj66DmXy0gzOd7zwZNBWqUlYhA+xZIhFIpTR
 guU5f6DJTnFjXEOxvxna
 =VK8a
 -END PGP SIGNATURE-

 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org