Re: Tomcat HTTP Sessions exceeded

2018-07-12 Thread Suvendu Sekhar Mondal
Sorry, there was a typo on my last email.

On Wed, Jul 11, 2018, 3:08 AM Gopi Palla  wrote:

> Hi,
>
> We have two dc, in one of the dc tomcat http sessions are exceeded. we are
> using introscope to monitor tomcat application server and getting the
> alerts, we kept the threshold value as 850 in introscope
>

Do you mean in one of  the Tomcats you are seeing 850+ HTTP sessions and
they never get cleaned up? What is the problem your app is facing?


> Tomcat version is 8.0.39
>
> Do we need to do any configuration changes in server.xml/web.xml ?
>
> Can someone please guide what to do in this case ?
>
> Appreciate your help.
>
>
>
>
> Regards
> Gopi
>


Re: Tomcat HTTP Sessions exceeded

2018-07-12 Thread Suvendu Sekhar Mondal
Gopi,

On Wed, Jul 11, 2018, 3:08 AM Gopi Palla  wrote:

> Hi,
>
> We have two dc, in one of the dc tomcat http sessions are exceeded. we are
> using introscope to monitor tomcat application server and getting the
> alerts, we kept the threshold value as 850 in introscope
>

Do you mean in one of  the Tomcats 850+have HTTP sessions are alive and
they  never get cleaned up? What is the problem your app is facing?

>
> Tomcat version is 8.0.39
>
> Do we need to do any configuration changes in server.xml/web.xml ?
>
> Can someone please guide what to do in this case ?
>
> Appreciate your help.
>
>
>
>
> Regards
> Gopi
>


RE: Getting the Manager app running on localhost.. Please help

2018-07-12 Thread Caldarale, Charles R
> From: Hassan Schroeder [mailto:hassan.schroe...@gmail.com] 
> Subject: Re: Getting the Manager app running on localhost.. Please help

> FYI, I'm on MacOS (Sierra 10.12.6). I just now

> 1) installed apache-tomcat-8.5.32
> 2) added these two lines to tomcat-users.xml
>
>   
>   

Note that such an addition must be done outside of the sample role/user
elements, since they are commented out.  A common error is failing to remove
or otherwise avoid the comment markers.

  - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you received
this in error, please contact the sender and delete the e-mail and its
attachments from all computers.



smime.p7s
Description: S/MIME cryptographic signature


Re: Getting the Manager app running on localhost.. Please help

2018-07-12 Thread Hassan Schroeder
On Thu, Jul 12, 2018 at 7:58 AM, Désilets, Alain
 wrote:
> I have been trying to get my local Tomcat installation to allow me to deploy 
> apps from the local machine and nothing I do seems to help.

FYI, I'm on MacOS (Sierra 10.12.6). I just now

1) installed apache-tomcat-8.5.32
2) added these two lines to tomcat-users.xml

  
  

3) started tomcat (`bin/catalina.sh run`)
4) open browser to http://localhost:8080/manager/html
5) supplied above credentials
6) uploaded a war file which deployed correctly

I'm not sure why you created a context file, but it seems extraneous...

FWIW,
-- 
Hassan Schroeder  hassan.schroe...@gmail.com
twitter: @hassan
Consulting Availability : Silicon Valley or remote

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Getting the Manager app running on localhost.. Please help

2018-07-12 Thread Chuan Ong


To use host-manager you need admin-gui as the role.

> On Jul 12, 2018, at 11:08 AM, Désilets, Alain  
> wrote:
> 
> Thx for the reply.
> 
>> have you enabled all user roles with passwords? in 
>> CATALINA_HOME/conf/tomcat-users.xml file? 
>> Also, don't forget to change
>> the passwords noted as "" with something "interesting".
> 
> Yes. As I mentioned in the first email of this thread, I have a file 
> [CATALINA_HOME]/conf/tomcat-users.xml with the following content:
> 
>   
>   
>   
>roles="manager,manager-script,manager-gui"/>
> 
>>   By default, it can only run on localhost, and it's configured to listen to
>>   127.0.0.1 via the valve. If you uncomment the user role part and change the
>>   password, you should be able to log in. i was able to start it by doing
>>   above.
> 
> As I mentioned in the first email, when I tried it first with the above 
> tomcat-users.xml file and no manager.xml file, it didn't work. Server Status 
> worked, Manager opened the page but couldn't deploy a war file, and Host 
> Manager gave me 403. This happened whether I accessed the site as 
> http://localhost:8080 or http://127.0.0.1:8080. 
> 
> So for some reason or other, the default behaviour doesn't seem to work for 
> me.
> 
> Note that I am using OSX. 
> 
> Could this be due to some sort of proxy issue?
> 
> Thx again.
> 
> Alain
> 
> 
> 
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
> 

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Getting the Manager app running on localhost.. Please help

2018-07-12 Thread Konstantin Kolinko
2018-07-12 18:24 GMT+03:00 Désilets, Alain :
>> Where 132.246.129.58 is my IP address. Note that I tried also with 
>> “132.0.0.0” and with “^.*$” to no avail.
>
> I should be more precise…
>
> When I try with “^.*$”, I get same behavior as when I didn’t have a 
> manager.xml file, ie:
>
>   *   Server Status: works
>   *   Manager: opens page but deploying war causes ‘This site can’t be 
> reached’
>   *   Host Manager: ‘403 Access Denied’
>
> And by “132.0.0.0.”, I actually meant “127.0.0.1”. When I try that from 
> ‘localhost:8080’, all buttons result in ‘403 Access Denied’. But when I 
> access the buttons from “127.0.0.1:8080”, I get the same behavior as above

See
https://wiki.apache.org/tomcat/FAQ/Troubleshooting_and_Diagnostics#Common_Troubleshooting_Scenario

"localhost" name never resolves to "132."something.


> /usr/local/apache-tomcat-8.5.4/bin

Why 8.5.4??? Why not the current release (8.5.32)?

See
http://tomcat.apache.org/security-8.html


> sudo sh startup.sh;

Do not run Tomcat as root!

See
http://tomcat.apache.org/tomcat-8.5-doc/security-howto.html

Delete all temporary files (in the logs, temp and work directories of
Tomcat) that might now be owned by root and not writable by a regular
user and start over. Note that deploying / undeploying a web
application via Manager requires write access to the webapps, work and
maybe conf directories for the user running Tomcat java process.

>   
>   
 >  
 >  

The Manager app in Tomcat 8.5 does not use the "manager" role.  The
last time it was used was Tomcat 6. Are you sure that you are
following a correct manual?

The "manager-script" role should be used by automated scripts only.
Granting "manager-script" and "manager-gui" to the same user means
that CSRF protection (in the Manager web application) for that user
will be ineffective.


Best regards,
Konstantin Kolinko

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Getting the Manager app running on localhost.. Please help

2018-07-12 Thread Désilets , Alain
Thx for the reply.

> have you enabled all user roles with passwords? in 
> CATALINA_HOME/conf/tomcat-users.xml file? 
> Also, don't forget to change
>  the passwords noted as "" with something "interesting".

Yes. As I mentioned in the first email of this thread, I have a file 
[CATALINA_HOME]/conf/tomcat-users.xml with the following content:

   
   
   
   

>By default, it can only run on localhost, and it's configured to listen to
>127.0.0.1 via the valve. If you uncomment the user role part and change the
>password, you should be able to log in. i was able to start it by doing
>above.

As I mentioned in the first email, when I tried it first with the above 
tomcat-users.xml file and no manager.xml file, it didn't work. Server Status 
worked, Manager opened the page but couldn't deploy a war file, and Host 
Manager gave me 403. This happened whether I accessed the site as 
http://localhost:8080 or http://127.0.0.1:8080. 

So for some reason or other, the default behaviour doesn't seem to work for me.

Note that I am using OSX. 

Could this be due to some sort of proxy issue?

Thx again.

Alain



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Getting the Manager app running on localhost.. Please help

2018-07-12 Thread M. Manna
have you enabled all user roles with passwords?

in CATALINA_HOME/conf/tomcat-users.xml file? Also, don't forget to change
the passwords noted as "" with something "interesting".

By default, it can only run on localhost, and it's configured to listen to
127.0.0.1 via the valve. If you uncomment the user role part and change the
password, you should be able to log in. i was able to start it by doing
above.

Also, when you get 403, pay attention to what user roles you need to have
for certain pages to be visible on localhost.

Regards,

On 12 July 2018 at 16:24, Désilets, Alain 
wrote:

> > Where 132.246.129.58 is my IP address. Note that I tried also with
> “132.0.0.0” and with “^.*$” to no avail.
>
> I should be more precise…
>
> When I try with “^.*$”, I get same behavior as when I didn’t have a
> manager.xml file, ie:
>
>   *   Server Status: works
>   *   Manager: opens page but deploying war causes ‘This site can’t be
> reached’
>   *   Host Manager: ‘403 Access Denied’
>
> And by “132.0.0.0.”, I actually meant “127.0.0.1”. When I try that from
> ‘localhost:8080’, all buttons result in ‘403 Access Denied’. But when I
> access the buttons from “127.0.0.1:8080”, I get the same behavior as above
>
>
> Alain Désilets
> National Research Council of Canada
>


Re: Getting the Manager app running on localhost.. Please help

2018-07-12 Thread Désilets , Alain
> Where 132.246.129.58 is my IP address. Note that I tried also with 
> “132.0.0.0” and with “^.*$” to no avail.

I should be more precise…

When I try with “^.*$”, I get same behavior as when I didn’t have a manager.xml 
file, ie:

  *   Server Status: works
  *   Manager: opens page but deploying war causes ‘This site can’t be reached’
  *   Host Manager: ‘403 Access Denied’

And by “132.0.0.0.”, I actually meant “127.0.0.1”. When I try that from 
‘localhost:8080’, all buttons result in ‘403 Access Denied’. But when I access 
the buttons from “127.0.0.1:8080”, I get the same behavior as above


Alain Désilets
National Research Council of Canada


Getting the Manager app running on localhost.. Please help

2018-07-12 Thread Désilets , Alain
I have been trying to get my local Tomcat installation to allow me to deploy 
apps from the local machine and nothing I do seems to help.

At the moment, I have a file [CATALINA_HOME]/conf/tomcat-users.xml with the 
following content:

   
   
   
   

When I go to http://localhost:8080/ and click on the various apps buttons I get 
the following outcomes:


  *   Server Status: Opens the ‘Server Status’ page
  *   Manager App: Opens the ‘Tomcat Web Application Manager’ page. But if I 
try to deploy a war file, I get “This site can’t be reached”.
  *   Host Manager: I get ‘403 Access Denied’ with a long series of 
explanations about roles, context.xml and tomcat-users.xml.

Reading the instructions, it sounds like I got the tomcat-users.xml part right 
(see the content above). Correct?

So now I go about creating the context file for the Manager app. I create a 
file:

   [CATALINA_HOME]/ conf/Catalina/localhost/manager.xml

With the following content: