date:20090417

On 17.04.2009 01:30, Anthony J. Biacco wrote:
 On 16.04.2009 01:49, Anthony J. Biacco wrote:
 worker.template.socket_timeout=10
 I'm not very much in favor of the socket_timeout, but well, if you
 think
 you need it. Just for the sake of completeness, please check, whether
 having no socket_timeout changes anything about your problem.

 
 Confirmed same errors with socket_timeout commented out

Good to know.

 (*) We failed to read the Cpoong response. Note that we are still in
 the
 same second, so the wait time did not expire. We must have had some
 other failure.

 My expectation: Tomcat closed the connection due to connectionTimeout.
 mod_jk didn't check the connection_pool_timeout for this connection,
 because our pool is already small enough (13 conns).

 Try setting connection_pool_minsize to 0 and check, whether the
 observation goes away. Even with minsize 0, it can happen rarely,
 because Tomcat closes the connection at the moment the
 connectionTimeout
 is reached, whereas mod_jk needs to run the internal maintenance (once
 a
 minute) to check the idle connection timeouts.

 
 With connection_pool_minsize=0 I can confirm the different event from
 mod_jk after the tomcat connectionTimeout.

All of the log lines were debug then. So with normal log level setting
info, you won't get any disturbing log output.

 *But*: I don't fully understand, why the problem goes away by
 switching
 to a ping timeout of 25000 milliseconds. Maybe the 10 second
 socket_timeout hides the thing in this case [wild guess]. There is
 also
 a relation between the ping_timeout and which connections do get
 checked
 during maintenance (the connection_ping_interval). So a longer
 ping_timeout reduces also the frequency of ping checks, so it should
 also reduce the frequency of the info messages. Not sure whether the
 combination of all results in not getting them any longer.

 
 If I increase the ping timeout to 2 the maintaining worker process
 still executes 2 minutes (almost to the second) after the tomcat request
 finished. No error. The 3rd minute's process, same. It isn't until 4
 minutes after the tomcat request finished that I get the cpong error.

 If I set connection_ping_interval to something like 10 (with a 1
 ping_timeout), the cpong error shows up 1 minute after the tomcat
 request finished instead of 2.

OK, so that explains why the cping/cpong info log depends on the
ping_timeout (via the relation to the inerval).

 Go with connection_pool_minsize=0 and ignore very occasional info
 level
 messages.

 
 Will this affect my performance since it won't keep any connections in
 the pool and have to recreate one on every request?

No it won't. Connections will only be shut down, when they are idle for
more than a minute (the pool timeout xou configured). So if your site is
busy only very few of your connections (peak load connections) will be
closed, all other connections will stay open and be reused.

Testing with occasional clicks doesn't reveal that behaviour.

If the site is not busy, then the connection creation overhead will be
more frequent, but due to the small load on the system it will be no
problem at all for your system resources, and the latency you add in a
normal LAN will be in the single digit milliseconds range.

 As long as the ping without pong isn't going to break anything (like you
 said, it's info, not error (just sounds like a not-good thing)), i'm
 fine with it.

Right.

 You could have a look at netstat -an | grep 8009 on the Apache
 server
 (or whatever your AJP port is) and see, how the status of the
 connections changes, e.g. from ESTABLISHED to CLOSE_WAIT (remote side
 has closed the connection) and TIME_WAIT (local side has also closed
 the
 connection).
 
 After a tomcat request I have:
 tcp0  0 10.10.10.18:13597   10.10.10.16:8009
 ESTABLISHED
 
 After the tomcat connectiontimeout I have:
 tcp1  0 10.10.10.18:13597   10.10.10.16:8009
 CLOSE_WAIT

Yes, so you can see Tomcat closed the connection, and mod_jk didn't yet
do the same.

 After the cpong error I have nothing/no connection

With minsize  0 we might not close the connection although the idle
timeout has passed and the cping will detect the CLOSE_WAIT status and
as a result mod_jk will close it to. With minsize==0 we will already
close it because of idleness and there will be no need for the cping
test, since the connection doesn't exist any more.

 Because of the connectionTimeout in tomcat and the cpong failure, it
 seems like I'm defeating the purpose of a connection pool anyway, no?
 Since the tomcat socket close is minutes later causing the mod_jk socket
 close.

No, think about a busy situation. Then the most connections will not be
idle for a long time, nd thus neither tomcat nor mod_jk will have a
reason to close them.

 We saw that. Since Cping/Cpong worked, we do not even have an info
 message, only debug messages.

 At this point tomcat manager status shows the socket

Re: [SECURITY] CVE-2008-5519: Apache Tomcat mod_jk information disclosure vulnerability

Hi,

the problem is not fixed in httpd 2.2.11. It will be fixed in 2.2.12. A
source patch is available under the URL

http://www.apache.org/dist/httpd/patches/apply_to_2.2.11/

I assume, that you don't build yourself, because most Windows httpd
users start with a binary download. There is no updated (patched)
Windows binary for 2.2.11 until now.

Since you also put this question into the httpd bugzilla issue, I assume
you will get some answer there as well.

It is better to run this discusion either in BZ46949, or on the httpd
list. The tomcat lists are not the right place for topics, that are
related to problems w.r.t. httpd only.

Regards,

Rainer

On 17.04.2009 09:14, Jakob Ericsson wrote:
 Hi,
 
 We are also getting this error in mod_proxy_ajp (2.2.11 on Windows)
 
 Anyone know if this is the same fix?
 https://issues.apache.org/bugzilla/show_bug.cgi?id=46949
 
 Seems to be fixed.
 
 /Jakob

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: JK 1.2.28 - load balancer worker fails on startup with one worker down ?

2009-04-17 Thread André Warnier


Rainer Jung wrote:
[...]

What remains for me is your suggestion, that the error is not a fatal
one, since there are other balanced workers left. We could include such
a check in the startup code, although I'm not really convinced, that
your problem is a good reason for this.

I'm open to more argumntation and suggestions :)


Argumentation #1 against a change in logic:
The OP argues that one single unresolvable balanced worker should not 
stop the other 4 from working, hence that the balancer should start 
anyway, since 80% of the capacity is still available.  It sounds 
reasonable in principle.
But what if there are only 2 balanced workers in total, of which one is 
unresolvable at start ? would it be normal to start with only one 
balanced worker available anyway ?

If not, then where's the limit of acceptable ?

Argumentation #2 against a change in logic:
Suppose the balancer would start, with the resolved workers only.
Suppose the resolving problem comes from a typo, not the fact that the 
given host is temporarily out of the DNS system, but a definite 
non-existing host.  It will not be retried, so there will never be 
another error/warning message. The host itself may be ok and respond to 
pings etc.., it will just never be hit by Apache's mod_jk, so this would 
be a very quiet error.
How is the sysadmin going to figure out that there is, basically, a 
problem ?


Argumentation for a change in logging:
It would be clearer if the error message stated explicitly that the 
balancer worker was not started due to a /configuration/ error, see 
above message(s).


But then, if even I could figure it out from the existing error message, 
then just about everyone should be able to.

And what would be the use of the likes of me, if everything was clear ?
;-)

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

When is 5.5.28 planned to be released?


Hi,

Tomcat 5.5.28 offers us the ability to change the name of the  
JSESSIONID, something we depend on because we are operating two  
application servers behind the same HTTPD server. We currently have a  
patched version of 5.x and are in the process of moving to 5.5.x, but  
without this patch in place. We could patch our 5.5.27, but we would  
rather avoid this if possible. For this reason can anyone tell me when  
the target date for the 5.5.28 release is?


If the target date is after the target date for our project, what do  
you reckon is the simplest way to apply a patched Globals.java to a  
Tomcat instance without recompiling the whole Tomcat 5.5.27?


André-John
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Sharing an abandoned connection pool help

 From: Douglas Miller [mailto:dougmil...@themetacity.com]
 Subject: Sharing an abandoned connection pool help

 I have several web apps that are getting info from a database under
 the same username. I had it set up with a context in each app.

Try using a global resource rather than one local to each webapp.

You didn't bother to tell us the version of Tomcat you're using, but for 6.0, 
the doc is here:
http://tomcat.apache.org/tomcat-6.0-doc/config/globalresources.html

(The outdated use of DefaultContext in the doc should really refer to 
conf/context.xml or conf/Catalina/[host]/context.xml.default.)

 - Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Request entity too large when using SSO (IIS Integrated Windows authentication -Tomcat )

2009-04-17 Thread baumar


Hi,

We are running an application on Tomcat 6. The authorization is down by IIS
with Integrated Windows authentication selected. 

Whenever we try to access any page (with IE6), we get a request entity too
large response. 

We switched IIS to Basic authentication, then it works. By analyzing the
network traffic, we saw that IIS is adding a kerberos header with encrypted
data and guess this data cannot be handled by the jconnector or tomcat. we
made a test where we switched off tomcat and still got the same error, so
unless we didn't get some cached reply, this means the error might be thrown
by the jconnector, but we have no clear evidence. 

Did anybody encounter a similar case or know how to resolve this?

Thanks 

Markus


-- 
View this message in context: 
http://www.nabble.com/%22Request-entity-too-large%22-when-using-SSO-%28IIS-Integrated-Windows-authentication--Tomcat-%29-tp23099072p23099072.html
Sent from the Tomcat - User mailing list archive at Nabble.com.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

When is 5.5.28 planned to be released?


Hi,

Tomcat 5.5.28 offers us the ability to change the name of the  
JSESSIONID, something we depend on because we are operating two  
application servers behind the same HTTPD server. We currently have a  
patched version of 5.x and are in the process of moving to 5.5.x, but  
without this patch in place. We could patch our 5.5.27, but we would  
rather avoid this if possible. For this reason can anyone tell me when  
the target date for the 5.5.28 release is?


If the target date is after the target date for our project, what do  
you reckon is the simplest way to apply a patched Globals.java to a  
Tomcat instance without recompiling the whole Tomcat 5.5.27?


André-John
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: JK 1.2.28 - load balancer worker fails on startup with one worker down ?

2009-04-17 Thread David Fisher

An interesting discussion. Since I am about to configure such a load  
balancer and we prefer to use DNS, understanding this type of detail  
is critical.


The OP said that the reason that the DNS did not resolve was that the  
machine had been moved off the network. That may have been an event  
out of the control of the sysadmin for the web service. Suppose  
someone takes a server away and then a week later apache and mod_jk  
are restarted via a cron job in the middle of the night? Suddenly the  
web service is down.


I think that one could argue that if a configuration has been  
successful then this error should be a warning and if the  
configuration file has been altered since the past time it is a fatal  
error. That may be too much extra logic and it is non-deterministic as  
a configuration file change is hard to detect accurately.


Perhaps more helpful would be to have a sysadmin email address in the  
config and then when things go fatal send an email with the  
appropriate log information. It is all about catching appropriately  
thrown error classes. What logging facility does mod_jk use? It could  
be that plugging in a special logger in this situation makes sense.


Regards,
Dave

On Apr 17, 2009, at 5:28 AM, André Warnier wrote:


Rainer Jung wrote:
[...]

What remains for me is your suggestion, that the error is not a fatal
one, since there are other balanced workers left. We could include  
such

a check in the startup code, although I'm not really convinced, that
your problem is a good reason for this.
I'm open to more argumntation and suggestions :)

Argumentation #1 against a change in logic:
The OP argues that one single unresolvable balanced worker should  
not stop the other 4 from working, hence that the balancer should  
start anyway, since 80% of the capacity is still available.  It  
sounds reasonable in principle.
But what if there are only 2 balanced workers in total, of which one  
is unresolvable at start ? would it be normal to start with only one  
balanced worker available anyway ?

If not, then where's the limit of acceptable ?

Argumentation #2 against a change in logic:
Suppose the balancer would start, with the resolved workers only.
Suppose the resolving problem comes from a typo, not the fact that  
the given host is temporarily out of the DNS system, but a definite  
non-existing host.  It will not be retried, so there will never be  
another error/warning message. The host itself may be ok and respond  
to pings etc.., it will just never be hit by Apache's mod_jk, so  
this would be a very quiet error.
How is the sysadmin going to figure out that there is, basically, a  
problem ?


Argumentation for a change in logging:
It would be clearer if the error message stated explicitly that the  
balancer worker was not started due to a /configuration/ error, see  
above message(s).


But then, if even I could figure it out from the existing error  
message, then just about everyone should be able to.
And what would be the use of the likes of me, if everything was  
clear ?

;-)

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org




-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Request entity too large when using SSO (IIS Integrated Windows authentication -Tomcat )

2009-04-17 Thread Scott Bradshaw

Markus,
Is the header name called Authentication ? If so, we had this exact
same issue a few years ago. The length of this HTTP header was too long for
mod_jk to process and the request was getting dropped. I think you might be
able to configure the packet size of mod_jk now to get around this problem.

Our solution a few years ago was I built an ISAPI filter that removed the
Authentication header before it was sent to Tomcat (since this wasn't
needed).

Scott

On Fri, Apr 17, 2009 at 10:46 AM, baumar mbj...@active.ch wrote:

Hi,

We are running an application on Tomcat 6. The authorization is down by IIS
with Integrated Windows authentication selected.

Whenever we try to access any page (with IE6), we get a request entity too
large response.

We switched IIS to Basic authentication, then it works. By analyzing the
network traffic, we saw that IIS is adding a kerberos header with encrypted
data and guess this data cannot be handled by the jconnector or tomcat. we
made a test where we switched off tomcat and still got the same error, so
unless we didn't get some cached reply, this means the error might be
thrown
by the jconnector, but we have no clear evidence.

Did anybody encounter a similar case or know how to resolve this?

Thanks

Markus

--
View this message in context:
http://www.nabble.com/%22Request-entity-too-large%22-when-using-SSO-%28IIS-Integrated-Windows-authentication--Tomcat-%29-tp23099072p23099072.html
Sent from the Tomcat - User mailing list archive at Nabble.com.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: JK 1.2.28 - load balancer worker fails on startup with one worker down ?

2009-04-17 Thread fredk2

Hi,

I understand that when it comes to security you do not want to start the
service eg. if the certificate is corrupted you do not want the ssl server
to start full stop or if Apache cannot bind to the hostname then it cannot
start, etc... .
However, in this case there can be a few reasons why a tomcat server dns
entry is removed or decommissionned or dropped. Imagine one apache whith
many non-related workers (not just one lb)*.
So I understand that one does not want the service to fail during a restart
(nitely,automated or by an operator) while you investigate the problem ...
It seems to me more acceptable to have a potential performance degradation
vs a loss of the whole service.

so +1 on changing the fatal to non-fatal assuming the code change is one
line. I take scalability/stability over feature :-)

Rgds - Fred

awarnier wrote:

Rainer Jung wrote:
[...]
What remains for me is your suggestion, that the error is not a fatal
one, since there are other balanced workers left. We could include such
a check in the startup code, although I'm not really convinced, that
your problem is a good reason for this.

I'm open to more argumntation and suggestions :)

Argumentation #1 against a change in logic:
The OP argues that one single unresolvable balanced worker should not
stop the other 4 from working, hence that the balancer should start
anyway, since 80% of the capacity is still available. It sounds
reasonable in principle.
But what if there are only 2 balanced workers in total, of which one is
unresolvable at start ? would it be normal to start with only one
balanced worker available anyway ?
If not, then where's the limit of acceptable ?

Argumentation #2 against a change in logic:
Suppose the balancer would start, with the resolved workers only.
Suppose the resolving problem comes from a typo, not the fact that the
given host is temporarily out of the DNS system, but a definite
non-existing host. It will not be retried, so there will never be
another error/warning message. The host itself may be ok and respond to
pings etc.., it will just never be hit by Apache's mod_jk, so this would
be a very quiet error.
How is the sysadmin going to figure out that there is, basically, a
problem ?

Argumentation for a change in logging:
It would be clearer if the error message stated explicitly that the
balancer worker was not started due to a /configuration/ error, see
above message(s).

But then, if even I could figure it out from the existing error message,
then just about everyone should be able to.
And what would be the use of the likes of me, if everything was clear ?
;-)

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

--
View this message in context:
http://www.nabble.com/JK-1.2.28---load-balancer-worker-fails-on-startup-with-one-worker--down---tp23065939p23099365.html
Sent from the Tomcat - User mailing list archive at Nabble.com.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Need to share JVM for both tomcat and RMI server

2009-04-17 Thread Jorge Medina

I can't help here, but I can give you some suggesstions:

- Take a look at the classloaders used by Tomcat, you may be running
into trouble because your application may be loading classes that are
supposed to be loaded by your Web Apps only.

http://tomcat.apache.org/tomcat-6.0-doc/class-loader-howto.html

- Verify your Spring configuration file


-Original Message-
From: siranjeevi krishnan [mailto:siranjee...@gmail.com] 
Sent: Friday, April 17, 2009 4:40 AM
To: Tomcat Users List
Subject: Re: Need to share JVM for both tomcat and RMI server

Sorry I called main method of Bootstrap class with start as argument
to start tomcat.
I used Bootstrap.start() in my code to start tomcat


On Fri, Apr 17, 2009 at 10:45 AM, siranjeevi krishnan
siranjee...@gmail.com
 wrote:

 Hi Jorge
 Thanks for your reply.
 I used Bootstrap.start() in my code to start tomcat. But i get the 
 following exception in the spring frame work.

 ERROR 04/16 11:06:58 Stderr   700100 Apr 16, 2009 11:06:58
AM
 org.apache.catalina.core.ApplicationContext log
 INFO: Loading Spring root WebApplicationContext

 ERROR 04/16 11:07:00 Stderr   700100 Apr 16, 2009 11:07:00
AM
 org.apache.catalina.core.StandardContext listenerStart
 SEVERE: Exception sending context initialized event to listener 
 instance of class 
 org.springframework.web.context.ContextLoaderListener
 org.springframework.beans.factory.BeanCreationException: Error 
 creating bean with name 'componentMetricsDataServiceBean' defined in 
 ServletContext resource [/WEB-INF/applicationContext.xml]: Cannot 
 resolve reference to bean 
 'com.bmc.sas.ngp.service.component.NGPComponentMetricsDataService' 
 while setting bean property 'componentMetricsService'; nested 
 exception is
 org.springframework.beans.factory.NoSuchBeanDefinitionException: No 
 bean named 
 'com.bmc.sas.ngp.service.component.NGPComponentMetricsDataService' is
defined
 at

org.springframework.beans.factory.support.BeanDefinitionValueResolver.re
solveReference(BeanDefinitionValueResolver.java:275)
 at

org.springframework.beans.factory.support.BeanDefinitionValueResolver.re
solveValueIfNecessary(BeanDefinitionValueResolver.java:104)
 at

org.springframework.beans.factory.support.AbstractAutowireCapableBeanFac
tory.applyPropertyValues(AbstractAutowireCapableBeanFactory.java:1245)
 at

org.springframework.beans.factory.support.AbstractAutowireCapableBeanFac
tory.populateBean(AbstractAutowireCapableBeanFactory.java:1010)
 at

org.springframework.beans.factory.support.AbstractAutowireCapableBeanFac
tory.doCreateBean(AbstractAutowireCapableBeanFactory.java:472)
 at

org.springframework.beans.factory.support.AbstractAutowireCapableBeanFac
tory$1.run(AbstractAutowireCapableBeanFactory.java:409)
 at java.security.AccessController.doPrivileged(Native Method)
 at

org.springframework.beans.factory.support.AbstractAutowireCapableBeanFac
tory.createBean(AbstractAutowireCapableBeanFactory.java:380)
 at

org.springframework.beans.factory.support.AbstractBeanFactory$1.getObjec
t(AbstractBeanFactory.java:264)
 at

org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.g
etSingleton(DefaultSingletonBeanRegistry.java:222)
 at

org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(
AbstractBeanFactory.java:261)
 at

org.springframework.beans.factory.support.AbstractBeanFactory.getBean(Ab
stractBeanFactory.java:185)
 at

org.springframework.beans.factory.support.AbstractBeanFactory.getBean(Ab
stractBeanFactory.java:164)
 at

org.springframework.beans.factory.support.DefaultListableBeanFactory.pre
InstantiateSingletons(DefaultListableBeanFactory.java:429)
 at

org.springframework.context.support.AbstractApplicationContext.finishBea
nFactoryInitialization(AbstractApplicationContext.java:728)
 at

org.springframework.context.support.AbstractApplicationContext.refresh(A
bstractApplicationContext.java:380)
 at

org.springframework.web.context.support.AbstractRefreshableWebApplicatio
nContext.refresh(AbstractRefreshableWebApplicationContext.java:156)
 at

org.springframework.web.context.ContextLoader.createWebApplicationContex
t(ContextLoader.java:246)
 at

org.springframework.web.context.ContextLoader.initWebApplicationContext(
ContextLoader.java:184)
 at

org.springframework.web.context.ContextLoaderListener.contextInitialized
(ContextLoaderListener.java:49)
 at

org.apache.catalina.core.StandardContext.listenerStart(StandardContext.j
ava:3843)
 at

org.apache.catalina.core.StandardContext.start(StandardContext.java:4342
)
 at
 org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1045)
 at
org.apache.catalina.core.StandardHost.start(StandardHost.java:719)
 at
 org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1045)
 at
 org.apache.catalina.core.StandardEngine.start(StandardEngine.java:443)
 at

Apache proxypass problem

2009-04-17 Thread kumaresh P N

Hi

I am trying to use proxypass to bring a webpage from a different web
serverhttp://forums.devshed.com/#...

ProxyPass /techsupportpages/
http://server1/inner_frameSet.html?joint/techsupportpages/menu.html

but it works perfectly when i do this for the same server1

ProxyPass /techsupportpages/ http://server1

i guess its because of the ? symbol in the url ...  and in both changes
the images don't display.

what is the best way it can be done ... and any help appreciated ..!



Best Regards
Kumaresh

catalina errors

2009-04-17 Thread Walter Thompson

I am getting three or more errors when tomcat starts.
 
Thanks for any help or suggestions you can give me.
 
I am running the following configuration:
 
Windows Server 2003
Apache 2.2.6 front end
Tomcat 6.0.16.0 backend for servlets
Java 1.6.0_13-b03
mod_SSL 2.2.6
openSSL 0.9.8g
 
The SSL Certificates are installed in Apache so I may not need to enable
SSL in Tomcat (now tomcat ssl is enabled).
 
Catalina log shows following:
 
Apr 17, 2009 8:58:43 AM org.apache.catalina.core.StandardService stop
INFO: Stopping service Catalina
Apr 17, 2009 8:58:43 AM org.apache.catalina.startup.HostConfig
undeployApps
WARNING: Error while removing context []
java.lang.NullPointerException
 at
org.apache.catalina.core.ContainerBase.removeChild(ContainerBase.java:91
5)
 at
org.apache.catalina.startup.HostConfig.undeployApps(HostConfig.java:1189
)
 at org.apache.catalina.startup.HostConfig.stop(HostConfig.java:1160)
 at
org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:31
3)
 at
org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSu
pport.java:117)
 at org.apache.catalina.core.ContainerBase.stop(ContainerBase.java:1086)
 at org.apache.catalina.core.ContainerBase.stop(ContainerBase.java:1098)
 at
org.apache.catalina.core.StandardEngine.stop(StandardEngine.java:448)
 at
org.apache.catalina.core.StandardService.stop(StandardService.java:584)
 at
org.apache.catalina.core.StandardServer.stop(StandardServer.java:744)
 at org.apache.catalina.startup.Catalina.stop(Catalina.java:628)
 at org.apache.catalina.startup.Catalina.start(Catalina.java:603)
 at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.jav
a:39)
 at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessor
Impl.java:25)
 at java.lang.reflect.Method.invoke(Method.java:597)
 at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:288)
 at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:413)
Apr 17, 2009 8:59:48 AM org.apache.catalina.core.AprLifecycleListener
init
INFO: The APR based Apache Tomcat Native library which allows optimal
performance in production environments was not found on the
java.library.path:
C:\www\Tomcat6\bin;.;C:\WINDOWS\Sun\Java\bin;C:\WINDOWS\system32;C:\WIND
OWS;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program
Files\ATI Technologies\ATI Control Panel;C:\Program
Files\Intel\DMIX;C:\www\openssl\bin;C:\www\Apache22\bin;C:\www\php5;C:\w
ww\mysql5\bin;C:\www\perl\bin;C:\PROGRA~1\CA\SHARED~1\SCANEN~1;C:\PROGRA
~1\CA\ETRUST~1;C:\Program Files\Executive Software\Diskeeper\;C:\Program
Files\java\jdk1.6.0_13;C:\Program
Files\java\jre6;C:\www\Tomcat6;C:\www\Tomcat6\lib
Apr 17, 2009 8:59:48 AM org.apache.catalina.startup.Catalina load
INFO: Initialization processed in 487 ms
Apr 17, 2009 8:59:48 AM org.apache.catalina.core.StandardService start
INFO: Starting service Catalina
Apr 17, 2009 8:59:48 AM org.apache.catalina.core.StandardEngine start
INFO: Starting Servlet Engine: Apache Tomcat/6.0.16
Apr 17, 2009 8:59:48 AM org.apache.catalina.startup.HostConfig
deployDirectory
SEVERE: Error deploying web application directory ROOT
java.lang.SecurityException: Servlet of class
org.apache.catalina.ssi.SSIServlet is privileged and cannot be loaded by
this web application
 at
org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.jav
a:1134)
 at
org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:981)
 at
org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.j
ava:4058)
 at
org.apache.catalina.core.StandardContext.start(StandardContext.java:4364
)
 at
org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.ja
va:791)
 at
org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:771)
 at
org.apache.catalina.core.StandardHost.addChild(StandardHost.java:525)
 at
org.apache.catalina.startup.HostConfig.deployDirectory(HostConfig.java:9
24)
 at
org.apache.catalina.startup.HostConfig.deployDirectories(HostConfig.java
:887)
 at
org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:492)
 at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1147)
 at
org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:31
1)
 at
org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSu
pport.java:117)
 at
org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1053)
 at org.apache.catalina.core.StandardHost.start(StandardHost.java:719)
 at
org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1045)
 at
org.apache.catalina.core.StandardEngine.start(StandardEngine.java:443)
 at
org.apache.catalina.core.StandardService.start(StandardService.java:516)
 at
org.apache.catalina.core.StandardServer.start(StandardServer.java:710)
 at org.apache.catalina.startup.Catalina.start(Catalina.java:578)
 at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 at

Re: Request entity too large when using SSO (IIS Integrated Windows authentication -Tomcat )

On 17.04.2009 16:55, Scott Bradshaw wrote:
 Markus,
   Is the header name called Authentication ?  If so, we had this exact
 same issue a few years ago. The length of this HTTP header was too long for
 mod_jk to process and the request was getting dropped. I think you might be
 able to configure the packet size of mod_jk now to get around this problem.
 
 Our solution a few years ago was I built an ISAPI filter that removed the
 Authentication header before it was sent to Tomcat (since this wasn't
 needed).

What is jconnector? Are you using the isapi redirector to connect IIS
and Tomcat (the IIS relative of mod_jk)?

If so, the whole request including headers is not allowed to exceed 8KB
(excluding any request bodies e.g. when using the POST method).

If you need to send bigger requests, you will need to use a non-standard
configuration to exceed the AJP packet size limitations of the AJP13
protocol.

Look for max_packet_size on the page

   http://tomcat.apache.org/connectors-doc/reference/workers.html

Regards,

Rainer

 On Fri, Apr 17, 2009 at 10:46 AM, baumar mbj...@active.ch wrote:
 
 Hi,

 We are running an application on Tomcat 6. The authorization is down by IIS
 with Integrated Windows authentication selected.

 Whenever we try to access any page (with IE6), we get a request entity too
 large response.

 We switched IIS to Basic authentication, then it works. By analyzing the
 network traffic, we saw that IIS is adding a kerberos header with encrypted
 data and guess this data cannot be handled by the jconnector or tomcat. we
 made a test where we switched off tomcat and still got the same error, so
 unless we didn't get some cached reply, this means the error might be
 thrown
 by the jconnector, but we have no clear evidence.

 Did anybody encounter a similar case or know how to resolve this?

 Thanks

 Markus

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: When is 5.5.28 planned to be released?

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

André-John,

On 4/17/2009 10:10 AM, Andre-John Mas wrote:
 If the target date is after the target date for our project, what do you
 reckon is the simplest way to apply a patched Globals.java to a Tomcat
 instance without recompiling the whole Tomcat 5.5.27?

Unfortunately, you will have to recompile everything. The java compiler
performs an optimization for static final members that are assigned
values in their declaration: it actually copies the value into the
dependent class instead of referencing the original class. That means
that you can't simply replace Globals.class in catalina.jar and expect
it to change the name of the session cookie because Globals.class is
probably ignored most (or all) of the time.

You are always welcome to use the current HEAD version in svn, but YMMV.
Be sure to test, test, test! The good news is that TC 5.5 is seeing
little in the way of new feature development, so the svn HEAD should be
very stable.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAknon3EACgkQ9CaO5/Lv0PBgAwCfYC/zbxeTgqu5BkKtqhZz2cYW
ooEAn0npbYfaN9rtYxsTR59o7TpESd8n
=fbOW
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Announcing new Apache Tomcat installable Live CD appliance

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Liraz,

On 4/13/2009 1:55 PM, Liraz Siri wrote:
 We're proud to announce the release of TurnKey Apache Tomcat, an
 installable live CD of Apache Tomcat that can run on real hardware in
 addition to most types of virtual machines (e.g., VMWare, VirtualBox,
 Parallels, Xen HVM). It is designed to provide users with a
 pre-integrated, auto-updating, turn-key operating system environment
 that is carefully built from the ground up with the minimum components
 needed to run Apache Tomcat with maximum usability, efficiency, and
 security.

If your goal was a minimal set of components, why did you choose to
include Apache httpd + mod_jk, neither of which are required to run Tomcat.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAknoodEACgkQ9CaO5/Lv0PD8XwCfSpcIBqH9Ls4pi8u1Vby9Phrh
yXEAoJyFHX8aB+hELPEiDvwtnbm3ZZrp
=u4jf
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: retrieve session data stored in db using JDBCStore.

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Jerry,

On 4/15/2009 11:58 PM, jerrySheen wrote:
 So u mean to say, that if I were to prolong the JSESSIONID cookie's expiry
 time, the server would take care of repopulating the session state(stored in
 the db) even after a browser restart?
 
 Well, this seems like a much simpler solution,ill give it a try, hope it
 works.

You have to modify the cookie that Tomcat creates. By default, the
cookie has a max age of -1, which means forget me when the browser
closes. Note that this is different than the maxInactiveInterval for
the session itself, which is the expiration date for the /session/ (no
the cookie).

You'll have to write a filter or something like that to modify the
cookie sent to the browser. You want to grab the appropriate cookie and
change the max age to something else. You probably want to make it
something like tomorrow (relative to today, of course) so that the
cookie is persisted across browser restarts. Note that an expired
session on the server side is non-recoverable.

Good luck. Post back if you develop a decent solution.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAknooOEACgkQ9CaO5/Lv0PDVIQCeL/EVSixGDiz02Orzk4LuxLKa
K08AoKqmrENfD1zsh17+3eWgLkClQhhT
=RG+p
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Help with PersistenceManager

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Vinicius,

On 4/14/2009 3:45 PM, Vinicius Carvalho wrote:
 Well, We are running out of Old space very, very quickly (2gb for old
 space), and I was wondering if using the PersistenceManager would help
 us, but at the docs it says its not fully tested.

Some folks appear to be using it, but I suspect it is not /widely/ used.
Then again, a possibly buggy session persistence mechanism is probably
better than the standard implementation that will definitely crash your
JVM after a while. :)

 One question I have is how many sessions does it store in memory and
 how many goes to disk? What's the policy of the LRU implementation?

I don't believe you can control these settings. The documentation
doesn't even say that LRU is used it's all about idleness: if a
session is idle for a specified amount of time, it gets stored and
evicted from memory.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAknopIcACgkQ9CaO5/Lv0PDD4ACghiCVdLSeahUOfZe384YjxWJ8
M2AAni2mOaT3kgO2jIm+hS6Tz11U/trr
=L6DC
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: catalina errors

2009-04-17 Thread André Warnier


Walter Thompson wrote:
 
I am running the following configuration:
 
Windows Server 2003

Apache 2.2.6 front end
Tomcat 6.0.16.0 backend for servlets
Java 1.6.0_13-b03
mod_SSL 2.2.6
openSSL 0.9.8g
 

Thanks for mentioning that. Few people do without prodding.



The SSL Certificates are installed in Apache so I may not need to enable
SSL in Tomcat (now tomcat ssl is enabled).
 
Catalina log shows following:
 

...

Apr 17, 2009 8:59:48 AM org.apache.catalina.core.AprLifecycleListener
init
INFO: The APR based Apache Tomcat Native library which allows optimal
performance in production environments was not found on the
java.library.path:
C:\www\Tomcat6\bin;.;C:\WINDOWS\Sun\Java\bin;C:\WINDOWS\system32;C:\WIND
OWS;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program
Files\ATI Technologies\ATI Control Panel;C:\Program
Files\Intel\DMIX;C:\www\openssl\bin;C:\www\Apache22\bin;C:\www\php5;C:\w
ww\mysql5\bin;C:\www\perl\bin;C:\PROGRA~1\CA\SHARED~1\SCANEN~1;C:\PROGRA
~1\CA\ETRUST~1;C:\Program Files\Executive Software\Diskeeper\;C:\Program
Files\java\jdk1.6.0_13;C:\Program
Files\java\jre6;C:\www\Tomcat6;C:\www\Tomcat6\lib
Apr 17, 2009 8:59:48 AM org.apache.catalina.startup.Catalina load
INFO: Initialization processed in 487 ms
Apr 17, 2009 8:59:48 AM org.apache.catalina.core.StandardService start
INFO: Starting service Catalina
Apr 17, 2009 8:59:48 AM org.apache.catalina.core.StandardEngine start
INFO: Starting Servlet Engine: Apache Tomcat/6.0.16
Apr 17, 2009 8:59:48 AM org.apache.catalina.startup.HostConfig
deployDirectory
SEVERE: Error deploying web application directory ROOT
java.lang.SecurityException: Servlet of class
org.apache.catalina.ssi.SSIServlet is privileged and cannot be loaded by
this web application


Well, that sounds pretty clear.
Maybe here : http://tomcat.apache.org/tomcat-6.0-doc/config/context.html
privileged ?

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Running hypersonic db in server mode from tomcat

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Graham,

On 4/9/2009 4:10 AM, Graham Towse wrote:
 I
 understand that in JBoss one can define a dataSource that kicks off a
 hypersonic database in server mode (server mode enables tcp connections
 outside the JVM), the instructions are here 
 http://webdev.apl.jhu.edu/~jcs/ejava-javaee/course-docs/exercises/ex0.html#Part_E
 
 My question is, can you do the same thing in tomcat, i.e. kick off a 
 hypersonic database in server mode from tomcat.

Do you mean that you need to use it in a way other than in-process mode?

If you just need in-process, then all you need to do is configure a
DataSource using the standard setup
(http://tomcat.apache.org/tomcat-5.5-doc/jndi-datasource-examples-howto.html)
and hsqldb should start.

The documentation above for JBoss seems to indicate that JBoss knows how
to do dependency-checking for the server mode hsqldb. Tomcat doesn't do
anything like that.

If you want hsqldb to run in server mode in Tomcat, I think you'll want
to create a webapp that mimics the behavior of org.hsqldb.Server. Just
remember to put /all/ the hsqldb JAR files (including the JDBC driver
JAR) into Tomcat's common/lib or I don't think things will work.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAknoplIACgkQ9CaO5/Lv0PBAnQCfaIWgz2o4LyNLL56iJblKdt2j
ocQAoKNEhbKoR0uOYzzCbE2jPsfMfQAy
=bRXB
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: JK 1.2.28 - load balancer worker fails on startup with one worker down ?

2009-04-17 Thread André Warnier


David Fisher wrote:
An interesting discussion. Since I am about to configure such a load 
balancer and we prefer to use DNS, understanding this type of detail is 
critical.


The OP said that the reason that the DNS did not resolve was that the 
machine had been moved off the network. That may have been an event out 
of the control of the sysadmin for the web service. Suppose someone 
takes a server away and then a week later apache and mod_jk are 
restarted via a cron job in the middle of the night? Suddenly the web 
service is down.



I think you misunderstand the issue.
If a server (hosting a Tomcat corresponding to a worker) is simply down, 
or not there, that will not stop mod_jk starting up.
What stops it starting up, is that /the DNS lookup for this machine's IP 
address does not work/.
As long as the DNS system is working, it will provide an IP address, and 
mod_jk will be happy and start up.
Later, when mod_jk will try to access that worker (always by IP), it 
will notice that it is down, and just mark it so and check it from time 
to time until it is up again.


The point of Rainer was that if in your configuration you use DNS names 
instead of IP addresses, then it means that you consider DNS a pretty 
important part of your application/setup.
Thus if at startup the DNS system is not working for whatever reason, it 
will prevent mod_jk to start up properly.

But only then.

To my knowledge, the only case where the DNS would fail to provide an IP 
address of a correctly-written FQDN name, is if you have some 
configuration where your hosts register themselves under some variable 
IP address when they startup.  But that would be a strange setup for 
servers, no ?




-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Tomcat 6 and Windows 2003 -Xmx1024 Problem

2009-04-17 Thread Dan Armbrust

Something else on your OS is using more RAM that it was previously.

The JVM will only start if it can reserve a contiguous block of RAM as
large as you request.

I'd be rather surprised if you needed to go all the way down to 512
before it would start, however.

See what else is using memory on the server.

Dan

On Fri, Apr 17, 2009 at 2:17 AM, Mirco Attocchi ami...@gmail.com wrote:
 Hi all,
 from yesterday on two different server Windows 2003 R2 with Tomcat
 6.0.18 running with -Xmx1024m, after a nightly restart, I've this
 problem:

 [2009-04-16 10:05:51] [info] Error occurred during initialization of VM
 [2009-04-16 10:05:51] [info] Could not reserve enough space for object heap

 And now Tomcat start only with -Xmx512m.

 Seems due to an update from windows update. you know something about?

 Thanks

 Mirco Attocchi

 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Tomcat installation problem

2009-04-17 Thread Dan Armbrust

Your stack trace seems to show several things that are not fine with
your application.

First, you appear to have a DB issue:

Exception while establishing connection
com/iris/util/dbConnectionOracle.java ==
  ORA-00020: maximum number of processes (400) exceeded


And possibly related to your DB problem - you have a null pointer
exception in your jsp page FirstScreenShow.jsp.

SEVERE: Servlet.service() for servlet jsp threw exception
java.lang.NullPointerException
   at
org.apache.jsp.FirstScreenShow_jsp._jspService(FirstScreenShow_jsp.ja
va:277)


I'd start by fixing these issues.

Dan

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Tomcat 6 and Windows 2003 -Xmx1024 Problem

 From: Dan Armbrust [mailto:daniel.armbrust.l...@gmail.com]
 Subject: Re: Tomcat 6 and Windows 2003 -Xmx1024 Problem

 Something else on your OS is using more RAM that it was previously.

You're confusing RAM and virtual space - decidedly different entities.

 The JVM will only start if it can reserve a contiguous block of RAM as
 large as you request.

Not true; the JVM cares little about the installed RAM.  The heap (including 
PermGen) must fit into a  contiguous area of process virtual space; it can be 
scattered all over RAM, due to paging.

 I'd be rather surprised if you needed to go all the way down to 512
 before it would start, however.

That part is true.

 See what else is using memory on the server.

The problem is not what else is using memory on the server, but what is 
consuming virtual space within the Tomcat process.

The problem can also occur if the swap file is too small to hold all process 
spaces, but this would usually manifest itself in multiple processes failing to 
start.

 - Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: mod_jk ping_timeout revisit

2009-04-17 Thread Anthony J. Biacco

  So I set tomcat's connectionTimeout to 0 and repeat request.
  This time Tomcat (after 60 seconds) doesn't reset the keeped alive
socket count to 0 (as expected), socket stillin stage 'R'.
 
  ...
 
  We saw that. Since Cping/Cpong worked, we do not even have an info
  message, only debug messages.
 
  At this point tomcat manager status shows the socket in stage 'P'
  and
  keeped alive socket count is 0.
  Above mod_jk log repeats every 2 minutes. Tomcat manager status
  doesn't
  change.
 
  Is it me or is this a better situation to be in?
  I'm not sure about the 'P' stage though, if it's suppose to be that
 way,
  or if it should be back at 'R' at this point.
 
 Sorry, I'm to lazy (busy) at the moment to check, what exactly 'P' and
 'R' for AJP connections in the Tomcat manager mean.
 

P is 'Parse and prepare request'
R is 'Ready' (which is the norm state it seems)

I haven't been able to find out any more meaning of these through
searching.

-Tony
---
Manager, IT Operations
Format Dynamics, Inc.
303-573-1800x27
abia...@formatdynamics.com
http://www.formatdynamics.com




-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

GlobalNamingResources outside of server.xml

2009-04-17 Thread Anthony J. Biacco

Hi,

I'm using Resource directives in my server.xml file under
GlobalNamingResources (I used to have them in the webapps specific
context files). I use ResourceLink in the webapps specific context
files to point to them.
I'd like to know if it's possible to now put the Resource directives
in a file separate from server.xml and still keep them global? The
server.xml files in my production/dev/staging environments are
different, and I'd like to be able to just deploy a separate consistent
file for all environments.
Maybe something like using DOCTYPE/ENTITY?
!DOCTYPE Server [
!ENTITY inc_resources SYSTEM /opt/apps/tomcat/conf/resources.xml
]
And then putting inc_resources; inside the GlobalNamingResources
directive in server.xml
Would this be supported? I'm using 6.0.18.

Thanx,

-Tony
---
Manager, IT Operations
Format Dynamics, Inc.
303-573-1800x27
abia...@formatdynamics.com
http://www.formatdynamics.com



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Installing mod_jk 1.2.27 on NetWare 6.5 SP8

2009-04-17 Thread Vladimir Mikhelson

Hi,

I have tried to install mod_jk 1.2.27 on Netware 6.5 per CVE-2008-5519:
Apache Tomcat mod_jk information disclosure vulnerability.

I downloaded the binary mod_jk-1.2.27-httpd-2.0.63-nw.zip
http://archive.apache.org/dist/tomcat/tomcat-connectors/jk/binaries/netware/jk-1.2.27/mod_jk-1.2.27-httpd-2.0.63-nw.zip
from
http://archive.apache.org/dist/tomcat/tomcat-connectors/jk/binaries/netware/jk-1.2.27/
and tried to use it.

Unfortunately I was getting the following in the httpd message screen:

Syntax error on line 638 of SYS:/apache2/conf/httpd.conf:
JkWorkersFile only allowed once

Here is the part of the httpd.conf where the loader failed:
Line 636   #  TABLE: (4)
Line 637   IfModule mod_jk.c
Line 638   JkWorkersFile sys:/adminsrv/conf/mod_jk/workers.properties
Line 639   JkLogFile logs/mod_jk.log
Line 640   JkLogLevel error
Line 641   /IfModule

NetWare loads httpd in the Admin and then in the OS memory spaces.  The
problem is observed on the second load.

Do you think that it is something that Tomcat people can take care of or
is something where Novell should make their special binary?

Thank you,
Vladimir


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: JK 1.2.28 - load balancer worker fails on startup with one worker down ?

On 17.04.2009 18:02, André Warnier wrote:
 To my knowledge, the only case where the DNS would fail to provide an IP
 address of a correctly-written FQDN name, is if you have some
 configuration where your hosts register themselves under some variable
 IP address when they startup.  But that would be a strange setup for
 servers, no ?

Maybe some combination with DHCP? But I still don't like the concept of
this type of dynamics.

Regards,

Rainer

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Building Tomcat 5.5.27 tomcat-native


Hi,

I am trying to build 5.5.27, but it is asking for tomcat-native  
1.1.12, though I see that only 1.1.16 is available. This being the  
case, a couple of questions:

  - is this a suitable replacement?
  - where do I specify to use this version instead? I will looking  
through the source in the meantime


André-John
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Building Tomcat 5.5.27 tomcat-native

 From: Andre-John Mas [mailto:aj...@sympatico.ca]
 Subject: Building Tomcat 5.5.27  tomcat-native

 I am trying to build 5.5.27, but it is asking for tomcat-native
 1.1.12, though I see that only 1.1.16 is available. This being the
 case, a couple of questions:
- is this a suitable replacement?

Yes.

- where do I specify to use this version instead?

apache-tomcat-5.5.26-src/build/build.properties.default

 - Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

solution RE: request.getSession() generates IllegalStateException in top filter(appears, response not being recycled properly if SocketException happenedfor it in the past)

2009-04-17 Thread Leonard Gestrin

I found a solution that seems to hold.

Instead of associating ImageWriter directly with response.outputstream, I 
create temporary ByteInputStream that is associated with 
javax.imageio.ImageWriter 

Once imagewriter is done, I am dumping ByteInputStream bytes to  
response.outputsream.

My theory is that ImageWriter was hanging to outputstream longer than it 
supposed to 
And that was causing issues in ClientAbortException cases.

Thanks


-Original Message-
From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] 
Sent: Thursday, April 16, 2009 9:45 AM
To: Tomcat Users List
Subject: RE: request.getSession() generates IllegalStateException in top 
filter(appears, response not being recycled properly if SocketException 
happenedfor it in the past)

 From: Leonard Gestrin [mailto:leonard.gest...@markettools.com]
 Subject: request.getSession() generates IllegalStateException in top
 filter(appears, response not being recycled properly if SocketException
 happenedfor it in the past)
 
 After a while, the same response object is being used by tomcat again,
 but as it gets to a first filter, I can see that it's already in
 commited state (response.isCommitted()==true)

It's not completely clear from your description whether the filter is part of 
the request that encountered the socket error or a different request.  If the 
former, the behavior you observe is expected; if the latter, you may be running 
into this bug, fixed over a year ago:
https://issues.apache.org/bugzilla/show_bug.cgi?id=30949

 This is tomcat apache-tomcat-5.5.20, JRE 15, WinXP.

What happens if you try it on a version that's not over 2.5 years old?

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Building Tomcat 5.5.27 tomcat-native



On 17-Apr-2009, at 14:12, Caldarale, Charles R wrote:


From: Andre-John Mas [mailto:aj...@sympatico.ca]
Subject: Building Tomcat 5.5.27  tomcat-native

I am trying to build 5.5.27, but it is asking for tomcat-native
1.1.12, though I see that only 1.1.16 is available. This being the
case, a couple of questions:
  - is this a suitable replacement?


Yes.


  - where do I specify to use this version instead?


apache-tomcat-5.5.26-src/build/build.properties.default

- Chuck


I have now sorted the tomcat-native issue, but running into another  
issue, of methods that should be over-ridden, but aren't (see a sample  
at the end of this e-mail).


I am using JDK 1.6 as my VM, should I be using JDK 1.4 or JDK 1.5 for  
my builds?


André-John


   [javac] /home/ajmas/share/java/tomcat-deps/src/java/org/apache/ 
tomcat/dbcp/dbcp/BasicDataSource.java:44:  
org.apache.tomcat.dbcp.dbcp.BasicDataSource is not abstract and does  
not override abstract method isWrapperFor(java.lang.Class) in  
java.sql.Wrapper

[javac] public class BasicDataSource implements DataSource {
[javac]^
[javac] /home/ajmas/share/java/tomcat-deps/src/java/org/apache/ 
tomcat/dbcp/dbcp/DelegatingStatement.java:46:  
org.apache.tomcat.dbcp.dbcp.DelegatingStatement is not abstract and  
does not override abstract method isPoolable() in java.sql.Statement
[javac] public class DelegatingStatement extends AbandonedTrace  
implements Statement {

[javac]^
[javac] /home/ajmas/share/java/tomcat-deps/src/java/org/apache/ 
tomcat/dbcp/dbcp/DelegatingStatement.java:131: isClosed() in  
org.apache.tomcat.dbcp.dbcp.DelegatingStatement cannot implement  
isClosed() in java.sql.Statement; attempting to assign weaker access  
privileges; was public

[javac] protected boolean isClosed() {
[javac]   ^
[javac] /home/ajmas/share/java/tomcat-deps/src/java/org/apache/ 
tomcat/dbcp/dbcp/DelegatingPreparedStatement.java:50:  
org.apache.tomcat.dbcp.dbcp.DelegatingPreparedStatement is not  
abstract and does not override abstract method  
setNClob(int,java.io.Reader) in java.sql.PreparedStatement
[javac] public class DelegatingPreparedStatement extends  
DelegatingStatement

[javac]^
 
-

To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Building Tomcat 5.5.27 tomcat-native

 From: Andre-John Mas [mailto:aj...@sympatico.ca]
 Subject: Re: Building Tomcat 5.5.27  tomcat-native

 should I be using JDK 1.4 or JDK 1.5 for my builds?

Use 1.5.

Sun enhanced the SQL interfaces in 1.6 in a way that made them incompatible 
with implementations based on older versions.  The only workaround at the 
moment is to build Tomcat with 1.5; you may run the resulting classes on 1.6.

 - Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Building Tomcat 5.5.27 tomcat-native



On 17-Apr-2009, at 15:30, Andre-John Mas wrote:



On 17-Apr-2009, at 14:12, Caldarale, Charles R wrote:


From: Andre-John Mas [mailto:aj...@sympatico.ca]
Subject: Building Tomcat 5.5.27  tomcat-native

I am trying to build 5.5.27, but it is asking for tomcat-native
1.1.12, though I see that only 1.1.16 is available. This being the
case, a couple of questions:
 - is this a suitable replacement?


Yes.


 - where do I specify to use this version instead?


apache-tomcat-5.5.26-src/build/build.properties.default

- Chuck


I have now sorted the tomcat-native issue, but running into another  
issue, of methods that should be over-ridden, but aren't (see a  
sample at the end of this e-mail).


I am using JDK 1.6 as my VM, should I be using JDK 1.4 or JDK 1.5  
for my builds?


Building with JDK1.5 resolves the issue - thanks

André-John
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: JK 1.2.28 - load balancer worker fails on startup with one worker down ?

2009-04-17 Thread David Fisher


Rainer -

Wouldn't this type of dynamics occur if your workers were in a cloud?  
Or if you needed a lot more very quickly for peak processing?


Am I correct to think that if someone is being so dynamic with their  
worker's DNS configuration then they should automate using the status  
worker to handle configuration after initial startup of mod_jk?


http://tomcat.apache.org/connectors-doc/reference/status.html

Unfortunately, I don't see a way to add or remove a worker? I think  
that this type of dynamic configuration would be very helpful in  
managing a cloud of tomcat workers.


I would be pretty cool to be able to put Tomcat Workers into service  
merely by starting up a VM that uses DHCP to get its IP by name. The  
VM could then know to register itself with a mod_jk status worker.  
Wouldn't this make a Tomcat Cloud super easy to manage? It could even  
be geographically diverse and migratory.


Regards,
Dave

On Apr 17, 2009, at 10:16 AM, Rainer Jung wrote:


On 17.04.2009 18:02, André Warnier wrote:
To my knowledge, the only case where the DNS would fail to provide  
an IP

address of a correctly-written FQDN name, is if you have some
configuration where your hosts register themselves under some  
variable

IP address when they startup.  But that would be a strange setup for
servers, no ?


Maybe some combination with DHCP? But I still don't like the concept  
of

this type of dynamics.

Regards,

Rainer

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org




-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Building Tomcat 5.5.27 tomcat-native

On 17-Apr-2009, at 15:34, Caldarale, Charles R wrote:

From: Andre-John Mas [mailto:aj...@sympatico.ca]
Subject: Re: Building Tomcat 5.5.27  tomcat-native

should I be using JDK 1.4 or JDK 1.5 for my builds?

Use 1.5.

Sun enhanced the SQL interfaces in 1.6 in a way that made them  
incompatible with implementations based on older versions.  The only  
workaround at the moment is to build Tomcat with 1.5; you may run  
the resulting classes on 1.6.

That works. Now everything builds when I use the build.xml in the  
build directory, using:

ant release

the only thing which seems odd is the generated tar balls are marked  
as 5.5.26. Is this normal?

André-John
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: JK 1.2.28 - load balancer worker fails on startup with one worker down ?