How Can I integrate tomcat6 cometprocessor + apache2.2 (load balancing)
Nice to meet you. I am trying to integrate tomcat6 and apache2.2 for load balancing. I tested connecting tomcat6 and apache2.2 (not nio) and load balancing, and it was successful.. By the way, I must use cometprocessor of tomcat6, so that I have to use nio protocol. When I send http request(comet timeout 10 sec), it send response immediately.. The right action is that client receive response after 10 sec. In this case, how can I integrate tomcat6 and apache2.2? I saw the sentence... IMPORTANT NOTE: Usage of these features requires using the APR or NIO HTTP connectors. The classic java.io HTTP connector and the AJP connectors do not support them. please let me know the solution.. -- View this message in context: http://www.nabble.com/How-Can-I-integrate-tomcat6-cometprocessor-%2B-apache2.2-%28load-balancing%29-tp23846079p23846079.html Sent from the Tomcat - User mailing list archive at Nabble.com. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: retrive Arabic data
Hi, I am using following tools and technologies for the web application · apache-tomcat-5.5.23 · jdk_1.5.0_12 · JSP, Servlet · SQL servelr 2005 · Windows server 2005 enterprise edition SP1 1. All JSP pages have the following code · %@ page contentType=text/html;charset=Cp1252 % · meta http-equiv=Content-Type content=text/html; charset=windows-1256 2. In servelet, The ouptput of request.getCharacterEncoding()) is appeared as NULL 3. In Database properties, collation is set as SQL_Latin1_General_CP1_CI_AS 4. Database table column where Arabic inserted is nvarchar 5. In insert statement, Arabic string inserted as N’arabictext 6. Deafault charset on the windows server 2003 platform is windows-1252 I have done the following two points extra to retrieve the Arabic data. 7. In Regional and language option on Windows server 2003, in Advance tab, the language for non Unicode programs is selected as Arabic(UAE). 8. Restarted the window server 2003. Able to retrieve the Arabic data. Thanks Regards -Abdul Razack --- On Mon, 6/1/09, André Warnier a...@ice-sa.com wrote: From: André Warnier a...@ice-sa.com Subject: Re: retrive Arabic data To: Tomcat Users List users@tomcat.apache.org Date: Monday, June 1, 2009, 3:42 PM Hi Abdul. Can you write exactly what you changed to make it work ? It would help for future similar cases, if there were some tips available in the mailing list. (Particularly what was /not/ the problem). Thanks. abdul razack wrote: Hi, Please accept my appreciation for responding my queries. The problem of retrieving Arabic data is solved. As told, it is not straight answer to the problem and need to figure out step by step. After making sure that everything is perfect from application and database point of view, I figured out problem lies in regional and language option setting on Windows server. And I corrected the same. Again thank you for the help in achieving the significant result. Thanks Regards -Abdul Razack --- On Sat, 5/30/09, George Sexton geor...@mhsoftware.com wrote: From: George Sexton geor...@mhsoftware.com Subject: Re: retrive Arabic data To: Tomcat Users List users@tomcat.apache.org Date: Saturday, May 30, 2009, 8:38 PM Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 George, On 5/28/2009 3:59 PM, George Sexton wrote: The issue is the default character set for Java. I've noticed that at least at one point in time, the default character set for Java running under windows was Windows-1252. Running under Linux it defaults to ISO-8859-1. That's a bold statement. $ uname -a Linux chadis 2.6.14-gentoo-r5 #2 PREEMPT Sat Dec 17 16:30:55 EST 2005 i686 AMD Athlon(tm) XP 1700+ AuthenticAMD GNU/Linux $ java -version java version 1.6.0_13 Java(TM) SE Runtime Environment (build 1.6.0_13-b03) Java HotSpot(TM) Client VM (build 11.3-b02, mixed mode, sharing) $ java -classpath .. Env | grep file\.encoding= file.encoding=ANSI_X3.4-1968 That's ASCII, baby! My statements were based on tests I ran at one point in time. Here's some tests I ran today: OpenSuSE 10.3, 11.0 and 11.1 = UTF-8. Windows XP w/ JDK 1.6.0_13 = Cp1252 MacOS 10.5 = MacRoman - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Three tomcat instances
I write a java web service and depending on a result i want it to call other web service (http://localhost:80/axis/serv.jws). But, i want serv.jws to be handled by three different servers depending on where i want to send it. How can i run three tomcats simultaneously?I read the server documentation,but mentions that only one server i can set into server.xml Any help appreciated. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
How to reference Shared Libraries with TOMCAT
Till now I have been deploying all the JARs in WEB-INF/lib folder of my Web Application and run it to satisfaction. Now we need a mechanism by which the JARs will not be stored in WEB-INF/lib but in a centralized location for example c:/lib, and all tomcat Web Applications should refer to this folder for all JARs required during runtime. How can I do this. Thanks Sarva -- View this message in context: http://www.nabble.com/How-to-reference-Shared-Libraries-with-TOMCAT-tp23847320p23847320.html Sent from the Tomcat - User mailing list archive at Nabble.com. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Three tomcat instances
If you want to run 3 tomcats then you need to have 3 tomcat installations. One tomcat per instance that you want to have server, this in turn will mean that you will have 3 separate server.xml files. You can then load balance the 3 tomcats to be referenced as required. You can even create workers for each instance and then not loadbalance. Call exach required worker as you need it directly. Kind regards / Met vriendelijke groet, Lawrence Lamprecht -Original Message- From: xalia...@freemail.gr [mailto:xalia...@freemail.gr] Sent: Wednesday, June 03, 2009 9:54 AM To: users@tomcat.apache.org Subject: Three tomcat instances I write a java web service and depending on a result i want it to call other web service (http://localhost:80/axis/serv.jws). But, i want serv.jws to be handled by three different servers depending on where i want to send it. How can i run three tomcats simultaneously?I read the server documentation,but mentions that only one server i can set into server.xml Any help appreciated. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Three tomcat instances
You don't tell us which version of Tomcat you're running, so it's hard to point you to the correct docs for your version on the Web. However, if memory serves, look at the file RUNNING.txt in your Tomcat directory. There's a section in there about setting up multiple Tomcats on the same machine. - Peter -Original Message- From: xalia...@freemail.gr [mailto:xalia...@freemail.gr] Sent: 03 June 2009 08:54 To: users@tomcat.apache.org Subject: Three tomcat instances I write a java web service and depending on a result i want it to call other web service (http://localhost:80/axis/serv.jws). But, i want serv.jws to be handled by three different servers depending on where i want to send it. How can i run three tomcats simultaneously?I read the server documentation,but mentions that only one server i can set into server.xml Any help appreciated. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
[ANN] Apache Tomcat 6.0.20 released
The Apache Tomcat team announces the immediate availability of Apache Tomcat 6.0.20 stable. This release includes many bugfixes over Apache Tomcat 6.0.18. Apache Tomcat 6.0 includes new features over Apache Tomcat 5.5, including support for the new Servlet 2.5 and JSP 2.1 specifications, a refactored clustering implementation, advanced IO features, and improvements in memory usage. Please refer to the change log for the list of changes: http://tomcat.apache.org/tomcat-6.0-doc/changelog.html Downloads: http://tomcat.apache.org/download-60.cgi Migration guide from Apache Tomcat 5.5.x: http://tomcat.apache.org/migration.html Thank you, -- The Apache Tomcat Team - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: How to reference Shared Libraries with TOMCAT
From: Sarva [mailto:malhotrasa...@yahoo.in] Till now I have been deploying all the JARs in WEB-INF/lib folder of my Web Application and run it to satisfaction. OK. Now we need a mechanism by which the JARs will not be stored in WEB-INF/lib but in a centralized location for example c:/lib, and all tomcat Web Applications should refer to this folder for all JARs required during runtime. Why? You will make a maintenance nightmare for yourself when the version of a jar changes for one application, but another application still needs the old version. How can I do this. Depends on your Tomcat version, which you didn't bother to tell us. - Peter - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: How to reference Shared Libraries with TOMCAT
Hello, You need to add those JAR files on central location add these files in Class Path (its better if you make a environment script), so when will you start your applications it will load JARs from there, thanks. Best Regards, Zeeshan Ahmad. Associate Manager SCM. P Save a tree...pls don't print this e-mail unless necessary -Original Message- From: Sarva [mailto:malhotrasa...@yahoo.in] Sent: Wednesday, June 03, 2009 2:14 PM To: users@tomcat.apache.org Subject: How to reference Shared Libraries with TOMCAT Till now I have been deploying all the JARs in WEB-INF/lib folder of my Web Application and run it to satisfaction. Now we need a mechanism by which the JARs will not be stored in WEB-INF/lib but in a centralized location for example c:/lib, and all tomcat Web Applications should refer to this folder for all JARs required during runtime. How can I do this. Thanks Sarva -- View this message in context: http://www.nabble.com/How-to-reference-Shared-Libraries-with-TOMCAT-tp238473 20p23847320.html Sent from the Tomcat - User mailing list archive at Nabble.com. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: How to reference Shared Libraries with TOMCAT
In tomcat 6.x, put the jars in tomcat-home-dir/lib and all the web applications in that tomcat will start sharing the jars. Regards Ghufran Ul Haq -Original Message- From: Zeeshan Ahmad [mailto:zah...@i2cinc.com] Sent: Wednesday, June 03, 2009 1:40 PM To: 'Tomcat Users List' Subject: RE: How to reference Shared Libraries with TOMCAT Hello, You need to add those JAR files on central location add these files in Class Path (its better if you make a environment script), so when will you start your applications it will load JARs from there, thanks. Best Regards, Zeeshan Ahmad. Associate Manager SCM. P Save a tree...pls don't print this e-mail unless necessary -Original Message- From: Sarva [mailto:malhotrasa...@yahoo.in] Sent: Wednesday, June 03, 2009 2:14 PM To: users@tomcat.apache.org Subject: How to reference Shared Libraries with TOMCAT Till now I have been deploying all the JARs in WEB-INF/lib folder of my Web Application and run it to satisfaction. Now we need a mechanism by which the JARs will not be stored in WEB-INF/lib but in a centralized location for example c:/lib, and all tomcat Web Applications should refer to this folder for all JARs required during runtime. How can I do this. Thanks Sarva -- View this message in context: http://www.nabble.com/How-to-reference-Shared-Libraries-with-TOMCAT-tp238473 20p23847320.html Sent from the Tomcat - User mailing list archive at Nabble.com. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org No virus found in this incoming message. Checked by AVG - www.avg.com Version: 8.5.339 / Virus Database: 270.12.44/2140 - Release Date: 06/02/09 17:53:00
RE: How to reference Shared Libraries with TOMCAT
If you have multiple tomcats and multiple applications then you have to put the jars on a separate location and add these in class path environment before starting any of the tomcat, it will work for more then one tomcats and more then one applications, thanks. Best Regards, Zeeshan Ahmad. Associate Manager SCM. P Save a tree...pls don't print this e-mail unless necessary -Original Message- From: Ghufran [mailto:ghufra...@vopium.com] Sent: Wednesday, June 03, 2009 4:08 PM To: 'Tomcat Users List' Subject: RE: How to reference Shared Libraries with TOMCAT In tomcat 6.x, put the jars in tomcat-home-dir/lib and all the web applications in that tomcat will start sharing the jars. Regards Ghufran Ul Haq -Original Message- From: Zeeshan Ahmad [mailto:zah...@i2cinc.com] Sent: Wednesday, June 03, 2009 1:40 PM To: 'Tomcat Users List' Subject: RE: How to reference Shared Libraries with TOMCAT Hello, You need to add those JAR files on central location add these files in Class Path (its better if you make a environment script), so when will you start your applications it will load JARs from there, thanks. Best Regards, Zeeshan Ahmad. Associate Manager SCM. P Save a tree...pls don't print this e-mail unless necessary -Original Message- From: Sarva [mailto:malhotrasa...@yahoo.in] Sent: Wednesday, June 03, 2009 2:14 PM To: users@tomcat.apache.org Subject: How to reference Shared Libraries with TOMCAT Till now I have been deploying all the JARs in WEB-INF/lib folder of my Web Application and run it to satisfaction. Now we need a mechanism by which the JARs will not be stored in WEB-INF/lib but in a centralized location for example c:/lib, and all tomcat Web Applications should refer to this folder for all JARs required during runtime. How can I do this. Thanks Sarva -- View this message in context: http://www.nabble.com/How-to-reference-Shared-Libraries-with-TOMCAT-tp238473 20p23847320.html Sent from the Tomcat - User mailing list archive at Nabble.com. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org No virus found in this incoming message. Checked by AVG - www.avg.com Version: 8.5.339 / Virus Database: 270.12.44/2140 - Release Date: 06/02/09 17:53:00 - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
What is a typical Comet event flow, with multiple READ events?
Hi, I have been trying to write a Comet webapp, but it's not totally clear to me when and how CometEvents are exactly triggered. According to the documentation a typical life cycle of a Comet request will consist in a series of events such as: BEGIN - READ - READ - READ - ERROR/TIMEOUT (from: http://www.mbaworld.com/docs/aio.html). It seems that a READ event is triggered only by a POST request, but the event flow that I am getting never triggers more that one READ event in a row, for example: BEGIN- -READ-END, BEGIN- -READ-END, etc. Is the way a comet application should work? So you have to establish a new connection every time you get a response from the server and wait for the next response, process it and start from the beginning? My idea was having one connection and reuse that connection for multiple requests. So on the client side there would be something like the following code: script var xhr; function init() { xhr = new XMLHttpRequest(); }); function triggerEvent() { xhr.open(POST, /servlets/cometservlet, true); xhr.send(something); } /script input type=button onclick=triggerEvent / Since it is not possible to invoke xhr.send() several times without opening the connection first (xhr.open()), a CometEvent.BEGIN is always triggered first. So how can the BEGIN - READ - READ - READ series (given in the documentation) be implemented? - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Just a few questions on my Tomcat Configuration
Sorry about that Chuck, I'm a little new to this here... Tomcat version is 6.0.18. My /conf directory is the standard windows installation directory structure it contains no other sud-directories, just my config files. If I modify the directory and add the recomended structure, will Tomcat pick it up, or is it different because this is the Win32 installation? also there is a way in Tomcat to do a contextual reload of the xml files automatically as soon as they change, but I forget how. Any takers on this? On Tue, Jun 2, 2009 at 11:47 PM, Caldarale, Charles R chuck.caldar...@unisys.com wrote: From: Josh Gooding [mailto:josh.good...@gmail.com] Subject: Just a few questions on my Tomcat Configuration I have tomcat running on a dedicated Windows server (this is a web server). Tomcat version? Always tell us that - we're not mind readers. My /conf directory is not exactly the same as what it is calling for (Approach #2). What's different? Again, we can't read your mind. Choice of the two approaches is up to you; some find it easier keeping Context elements inside each webapp (in META-INF/context.xml), some prefer to keep them separate from the webapp itself by placing them in conf/Catalina/[host]/[appName].xml. Bind each virtual host to the corresponding sub-domain (not a clue on how to do this) Use the sub-domain as the name attribute on the associated Host. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: How Can I integrate tomcat6 cometprocessor + apache2.2 (load balancing)
using apache with blocking threads and tomcat with comet is somewhat a contradiction. use a regular servlet to achieve what you want Filip redmoon wrote: Nice to meet you. I am trying to integrate tomcat6 and apache2.2 for load balancing. I tested connecting tomcat6 and apache2.2 (not nio) and load balancing, and it was successful.. By the way, I must use cometprocessor of tomcat6, so that I have to use nio protocol. When I send http request(comet timeout 10 sec), it send response immediately.. The right action is that client receive response after 10 sec. In this case, how can I integrate tomcat6 and apache2.2? I saw the sentence... IMPORTANT NOTE: Usage of these features requires using the APR or NIO HTTP connectors. The classic java.io HTTP connector and the AJP connectors do not support them. please let me know the solution.. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: What is a typical Comet event flow, with multiple READ events?
When a browser is a client, you typically don't have multiple read events. Filip Pieter Fibbe wrote: Hi, I have been trying to write a Comet webapp, but it's not totally clear to me when and how CometEvents are exactly triggered. According to the documentation a typical life cycle of a Comet request will consist in a series of events such as: BEGIN - READ - READ - READ - ERROR/TIMEOUT (from: http://www.mbaworld.com/docs/aio.html). It seems that a READ event is triggered only by a POST request, but the event flow that I am getting never triggers more that one READ event in a row, for example: BEGIN- -READ-END, BEGIN- -READ-END, etc. Is the way a comet application should work? So you have to establish a new connection every time you get a response from the server and wait for the next response, process it and start from the beginning? My idea was having one connection and reuse that connection for multiple requests. So on the client side there would be something like the following code: script var xhr; function init() { xhr = new XMLHttpRequest(); }); function triggerEvent() { xhr.open(POST, /servlets/cometservlet, true); xhr.send(something); } /script input type=button onclick=triggerEvent / Since it is not possible to invoke xhr.send() several times without opening the connection first (xhr.open()), a CometEvent.BEGIN is always triggered first. So how can the BEGIN - READ - READ - READ series (given in the documentation) be implemented? - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
How to kill the port used by tomcat
Hi All, When I do netstat -an | grep 8443 it says that it was in listen mode. *.8443 *.*0 0 49152 0 LISTEN Now I need to use the same port for the another tomcat.So I need to kill this make the port to non listen mode. How I can free the port without going to the original tomcat shutdown. Please help me to solve this issue. Regards, Kalai -- View this message in context: http://www.nabble.com/How-to-kill-the-port-used-by-tomcat-tp23850842p23850842.html Sent from the Tomcat - User mailing list archive at Nabble.com. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: How to kill the port used by tomcat
From: kalpeer [mailto:inka...@gmail.com] How I can free the port without going to the original tomcat shutdown. You have to kill the process that is using the port. - Peter - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
[ANN] New Tomcat announce list
All, In response to popular demand, we have added an announce list to the collection of Tomcat mailing lists. This list is open to anyone to subscribe but only committers may post. It will be used to announce releases, security vulnerabilities and other similar project announcements. To subscribe, send a blank email to: announce-subscr...@tomcat.apache.org Further information is available from the Tomcat website: http://tomcat.apache.org/lists.html Enjoy! The Apache Tomcat Team - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: How to kill the port used by tomcat
Whats the command used to get the process id of the prot Peter Crowther wrote: From: kalpeer [mailto:inka...@gmail.com] How I can free the port without going to the original tomcat shutdown. You have to kill the process that is using the port. - Peter - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org -- View this message in context: http://www.nabble.com/How-to-kill-the-port-used-by-tomcat-tp23850842p23851022.html Sent from the Tomcat - User mailing list archive at Nabble.com. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: How to kill the port used by tomcat
From: kalpeer [mailto:inka...@gmail.com] Whats the command used to get the process id of the prot That depends on your OS - which you haven't told us. Tomcat should show up as a Java process, so if you're running a recent Java (which you also didn't tell us) then jps should tell you some possible process IDs. http://java.sun.com/j2se/1.5.0/docs/tooldocs/share/jps.html - Peter - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: ISAPI issues
Replies included Rainer Jung-3 wrote: On 02.06.2009 23:30, dljohnson69 wrote: Actually I am still on 1.2.27 but am willing to update, just cannot find a compiled download of the 1.2.28 dll. http://tomcat.apache.org/download-connectors.cgi -- downloaded, installed and loaded (working) However, I made those changes and now there are no errors in the isapi.log but the browser errors with service temporary unavailable. When I check the logs I get All Tomcat instances failed, no more workers left. The next line says, all tomcat instances are busy or in error state. This was AFTER a reboot of the physical box. IIS and Tomcat on the same box? (Yes, IIS, Tomcat and apps on same box) Could you get your pages directly from Tomcat via its http connector (8080 or so)? (Yes, can get apps directly through Tomcat ports 8009, 8010) So does it - work never (correct, has never worked through IIS, always worked directly to app port which means to me that Tomcat itself is okay, just IIS issue) - work sometimes, but sometimes not? Which URL did you use, what's exactly in the log file? (http://xxapp/wealthstation/FCMD does not work, http://xxapp:8010/wealthstation/FCMD does work. These are the current logs AFTER changes to worker and urimap listed below. Currently no errors in isapi.log but there is obviously a configuration or other issue as the error goes to a 404 error now. Jakarta/ISAPI/isapi_redirector/1.2.28 [Wed Jun 03 07:39:10.659 2009] [4656:4700] [debug] init_jk::jk_isapi_plugin.c (2423): Detected IIS version 6.0 [Wed Jun 03 07:39:10.659 2009] [4656:4700] [debug] init_jk::jk_isapi_plugin.c (2428): Using registry. [Wed Jun 03 07:39:10.659 2009] [4656:4700] [debug] init_jk::jk_isapi_plugin.c (2431): Using log file E:\wealthstation\logs\isapi.log. [Wed Jun 03 07:39:10.659 2009] [4656:4700] [debug] init_jk::jk_isapi_plugin.c (2432): Using log level 1. [Wed Jun 03 07:39:10.659 2009] [4656:4700] [debug] init_jk::jk_isapi_plugin.c (2433): Using extension uri /tomcat/isapi_redirect.dll. [Wed Jun 03 07:39:10.659 2009] [4656:4700] [debug] init_jk::jk_isapi_plugin.c (2434): Using worker file E:\wealthstation\appserver2\conf\workers.properties. [Wed Jun 03 07:39:10.659 2009] [4656:4700] [debug] init_jk::jk_isapi_plugin.c (2435): Using worker mount file E:\wealthstation\appserver2\conf\uriworkermap.properties. [Wed Jun 03 07:39:10.659 2009] [4656:4700] [debug] init_jk::jk_isapi_plugin.c (2437): Using rewrite rule file . [Wed Jun 03 07:39:10.659 2009] [4656:4700] [debug] init_jk::jk_isapi_plugin.c (2439): Using uri select 3. [Wed Jun 03 07:39:10.659 2009] [4656:4700] [debug] init_jk::jk_isapi_plugin.c (2440): Using no chunked encoding. [Wed Jun 03 07:39:10.659 2009] [4656:4700] [debug] init_jk::jk_isapi_plugin.c (2442): Using notification event SF_NOTIFY_AUTH_COMPLETE (0x0400) [Wed Jun 03 07:39:10.659 2009] [4656:4700] [debug] init_jk::jk_isapi_plugin.c (2452): Using uri header TOMCATURI1000:. [Wed Jun 03 07:39:10.659 2009] [4656:4700] [debug] init_jk::jk_isapi_plugin.c (2453): Using query header TOMCATQUERY1000:. [Wed Jun 03 07:39:10.659 2009] [4656:4700] [debug] init_jk::jk_isapi_plugin.c (2454): Using worker header TOMCATWORKER1000:. [Wed Jun 03 07:39:10.659 2009] [4656:4700] [debug] init_jk::jk_isapi_plugin.c (2455): Using worker index TOMCATWORKERIDX1000:. [Wed Jun 03 07:39:10.659 2009] [4656:4700] [debug] init_jk::jk_isapi_plugin.c (2456): Using translate header TOMCATTRANSLATE1000:. [Wed Jun 03 07:39:10.659 2009] [4656:4700] [debug] init_jk::jk_isapi_plugin.c (2457): Using a default of 250 connections per pool. [Wed Jun 03 07:39:10.659 2009] [4656:4700] [debug] jk_map_read_property::jk_map.c (491): Adding property '/admin/*' with value 'wlb' to map. [Wed Jun 03 07:39:10.659 2009] [4656:4700] [debug] jk_map_read_property::jk_map.c (491): Adding property '/manager/*' with value 'wlb' to map. [Wed Jun 03 07:39:10.659 2009] [4656:4700] [debug] jk_map_read_property::jk_map.c (491): Adding property '/jsp-examples/*' with value 'wlb' to map. [Wed Jun 03 07:39:10.659 2009] [4656:4700] [debug] jk_map_read_property::jk_map.c (491): Adding property '/servlets-examples/*' with value 'wlb' to map. [Wed Jun 03 07:39:10.659 2009] [4656:4700] [debug] jk_map_read_property::jk_map.c (491): Adding property '/planningstation/*' with value 'ps' to map. [Wed Jun 03 07:39:10.659 2009] [4656:4700] [debug] jk_map_read_property::jk_map.c (491): Adding property '/wealthstation/*' with value 'ws' to map. [Wed Jun 03 07:39:10.659 2009] [4656:4700] [debug] jk_map_read_property::jk_map.c (491): Adding property '/jkmanager' with value 'jkstatus' to map. [Wed Jun 03 07:39:10.659 2009] [4656:4700] [debug] uri_worker_map_load::jk_uri_worker_map.c (1102): Loading urimaps from E:\wealthstation\appserver2\conf\uriworkermap.properties with reload check interval 60 seconds
RE: How to kill the port used by tomcat
The os:solaris10 and 9 java:1.5.0_17 please let me know the comment for getting the id :( Peter Crowther wrote: From: kalpeer [mailto:inka...@gmail.com] Whats the command used to get the process id of the prot That depends on your OS - which you haven't told us. Tomcat should show up as a Java process, so if you're running a recent Java (which you also didn't tell us) then jps should tell you some possible process IDs. http://java.sun.com/j2se/1.5.0/docs/tooldocs/share/jps.html - Peter - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org -- View this message in context: http://www.nabble.com/How-to-kill-the-port-used-by-tomcat-tp23850842p23851524.html Sent from the Tomcat - User mailing list archive at Nabble.com. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: How to kill the port used by tomcat
From: kalpeer [mailto:inka...@gmail.com] Subject: RE: How to kill the port used by tomcat os:solaris10 and 9 java:1.5.0_17 please let me know the comment for getting the id :( This is not a Solaris training list. Since you're acting as a system administrator, you need to have system administrator knowledge. Try the jps program, as already suggested. Look at the man pages for netstat to see what option to use to display the pid (it's usually -o). - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: How to kill the port used by tomcat
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kalai, On 6/3/2009 8:52 AM, kalpeer wrote: When I do netstat -an | grep 8443 it says that it was in listen mode. *.8443 *.*0 0 49152 0 LISTEN Now I need to use the same port for the another tomcat.So I need to kill this make the port to non listen mode. How I can free the port without going to the original tomcat shutdown. You may be able to use Sysinternals' tcpview.exe to close those connections, but it's possible that you'll only be able to close active connections, and that you can't unbind a bound IP port. I don't expect this to work, but you can try it. Why not just change the configuration and bounce Tomcat? - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkomhRQACgkQ9CaO5/Lv0PCb8ACdFZmUfIQwmjFJ55hhjTpD/5lH cUYAn1Pep0M1JD3kxbWRE8Vt3HiaSs72 =wj/k -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: fonts in linux
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chuck, On 6/2/2009 11:37 PM, Caldarale, Charles R wrote: Do you really mean fonts? Or are you actually referring to the default language and character set? Let's presume the latter, since the former makes little sense. If the OP is using AWT to generate images or something like that, server-side fonts can certainly be an issue. The problem wasn't well explained, so we might never know... - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkomhYUACgkQ9CaO5/Lv0PDWIgCgqe8c37YGbO758fBN70yKF2pi dG8AnRGU1kwCCgCkH13xWykUpCpqJUU5 =zGze -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: How to reference Shared Libraries with TOMCAT
From: Zeeshan Ahmad [mailto:zah...@i2cinc.com] Subject: RE: How to reference Shared Libraries with TOMCAT If you have multiple tomcats and multiple applications then you have to put the jars on a separate location As Peter pointed out, doing so is a really bad idea. The OP should continue to run what's working, with the jars duplicated in each webapp's WEB-INF/lib directory. Anything else is extremely problematic. and add these in class path environment Don't *EVER* set the CLASSPATH environment variable - that causes no end of grief, and plays havoc with Tomcat's classloading requirements. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: sqljdbc, integrated sql server authentication and multiple webapps - only the first app can connect
Hi, I had the same problem. I resolved the issue by deleting sqljdbc.jar from both the apps and added that jar in the tomcat's lib folder along with the .dll and also .dll to your windows\system32. Make it sure the system's Path is set to your windows\system32. Hope so this helps Christopher Schultz-2 wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Stephan, On 3/10/2009 5:07 AM, Stephan Steiner wrote: The first application to make a connection to the database succeeds in doing so and it will have access to the DB until I stop it (or stop tomcat). The second app to try and access the database can never connect and gets the error you get when sqljdbc_auth.dll is not in the path. If you're using a native library (sqljdbc_auth.dll), you must be using a Java wrapper that loads the library and then puts calls through to it. I wonder if you are putting the JNI wrapper in your webapp's lib directory and that's trying to double-initialize the DLL. The DLL file should have come with a JAR file, too. Where do you have that JAR file installed? If you have it once per webapp, your problem is probably double-init. Try moving the JAR file that came with the DLL into Tomcat's lib directory (that is, $CATALINA_BASE/lib). - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkm6aU0ACgkQ9CaO5/Lv0PACsgCfTw4K6KHIYYRMZbjidgQksBgm KP8AoIwTqUipDW/Sc37/BZONVzxANzPB =Q5BK -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org -- View this message in context: http://www.nabble.com/sqljdbc%2C-integrated-sql-server-authentication-and-multiple-webappsonly-the-first-app-can-connect-tp22430342p23852411.html Sent from the Tomcat - User mailing list archive at Nabble.com. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Authentication from the browser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alec, On 6/2/2009 2:03 PM, Alec Swan wrote: Hassan, I don't think that the goals are contradictory, because each goal applies to its own group of users: our customer users and everybody else. Customer users should not have to enter user name and password, but everybody else should. What authentication mechanism are you using already? FORM? BASIC? With BASIC or DIGEST authentication, it's easy enough to put the credentials into the request that the remote server sends to you. If you're using FORM authentication, it's more complicated because Tomcat's authentication /requires/ request-challenge-credentials-repeat-request. If you use securityfilter (http://securityfilter.sourceforge.net), you can do drive-by logins by just calling j_security_check directly (without an initial request). Another option (which I prefer) is to provide a service that is oriented toward these clients which accepts credentials in a different form. Don't use container-managed security for this service. Instead, accept credentials in some other way. You can accept username and password, or you could even accept a single token which is encrypted using a pre-shared key. - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkomh9QACgkQ9CaO5/Lv0PB/wwCfdVDhW0QEwL4psZmLz2ff1JM+ EwQAnjjeCbAPtHbiJBvGJV1HVpwdkl0r =8h+o -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Just a few questions on my Tomcat Configuration
From: Josh Gooding [mailto:josh.good...@gmail.com] Subject: Re: Just a few questions on my Tomcat Configuration Tomcat version is 6.0.18. Good. My /conf directory is the standard windows installation directory structure it contains no other sud-directories, just my config files. Tomcat will create the subdirectories as needed, such as when you deploy a .war file that has an context.xml file in its META-INF directory. It won't create them until needed. If I modify the directory and add the recomended structure, will Tomcat pick it up Yes; it's all Java, so it doesn't care what the platform is. also there is a way in Tomcat to do a contextual reload of the xml files automatically as soon as they change Depends on which .xml files you're talking about. For WEB-INF/web.xml, that's controlled by a WatchedResource element nested inside a Context element. That's enabled by default for all webapps, since it appears in the global conf/context.xml file. You can add other WatchedResource elements to the global or individual webapp Context elements to monitor changes in other files, if desired. You can also set the reloadable attribute for any Context to have Tomcat watch for changes to the webapp classes and jars. Note that none of the monitoring mechanisms should be used in production, due to the overhead incurred. Doc for Context: http://tomcat.apache.org/tomcat-6.0-doc/config/context.html - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Authentication from the browser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alec, On 6/2/2009 6:08 PM, Alec Swan wrote: ? You can't put HTTP headers in a link, unless you're processing it through some proxy mechanism... Looks like the last SecurityFilter build was released on Dec. 14, 2004, which makes me hesitant to use it. The servlet specification regarding authentication and authorization hasn't changed in a long time, so newer releases haven't been warranted. The project is definitely active, in spite of a lack of recent releases. I am wondering if it is possible to use JavaScript to include the user name and password in the HTTP header when the link is clicked. Yuk. Relying on javascript for security is, IMO, a terrible mistake. Does this mean that there is no way to authenticate against Tomcat server unless the server initiated the request itself? No, that means that the client must make a request for a protected resource /before/ the client can provide credentials to the server (i.e. no drive-by logins). - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkomiUEACgkQ9CaO5/Lv0PAoVgCdHoR8zCu91Bn4prfOhKhs45yx ElMAn2axBAgLGQ9TAKHz29angRfCJje3 =7rCg -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Just a few questions on my Tomcat Configuration
From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] Subject: RE: Just a few questions on my Tomcat Configuration Tomcat will create the subdirectories as needed, such as when you deploy a .war file that has an context.xml file in its META-INF directory. It won't create them until needed. I see that 6.0.20 now copies the META-INF/context.xml file into conf/Catalina/[host]/[appName].xml file even when deployment is via a directory. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: How to reference Shared Libraries with TOMCAT
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chuck, On 6/3/2009 10:15 AM, Caldarale, Charles R wrote: Don't *EVER* set the CLASSPATH environment variable - that causes no end of grief, and plays havoc with Tomcat's classloading requirements. It really shouldn't interfere: it should actually have no effect at all. startup.sh calls catalina.sh which calls setclasspath.sh and at the beginning of that script is # First clear out the user classpath CLASSPATH= Now, of course, anyone can modify these scripts and totally screw everything up, but simply setting the CLASSPATH environment variable at the command prompt will have no effect on Tomcat. - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkomi8AACgkQ9CaO5/Lv0PAEhgCfVJMyczZ4XigChldyN/mNP8td xqMAoLLTn3NriBHg/6gz83vaKFBdsVZm =b4UO -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
java.net.SocketException: Too many open files
Hello All, something strange happened to our tomcat 5.5 instance running on RHEL Linux. Suddenly we began getting the exception listed below written out to the catalina.out log. It was repeated approx 4 million times w/in a couple of hours until it filled up the file system and hung tomcat. This is a pretty standard setup. Requests come into apache and then a ProxyPass forwards onto tomcat. Apache has a directive like the following for each context: ProxyPass /gdsg ajp://localhost:8009/gdsg Can someone please help to to understand what might cause such an exception? Is there a good way to see the files tomcat has open? I'm not sure that a simple lsof -u tomcat will show them all. Thanks so much for the help! --john Jun 1, 2009 6:19:07 AM org.apache.jk.common.ChannelSocket acceptConnections WARNING: Exception executing accept java.net.SocketException: Too many open files at java.net.PlainSocketImpl.socketAccept(Native Method) at java.net.PlainSocketImpl.accept(PlainSocketImpl.java:384) at java.net.ServerSocket.implAccept(ServerSocket.java:450) at java.net.ServerSocket.accept(ServerSocket.java:421) at org.apache.jk.common.ChannelSocket.accept(ChannelSocket.java:312) at org.apache.jk.common.ChannelSocket.acceptConnections(ChannelSocket.java:666) at org.apache.jk.common.ChannelSocket$SocketAcceptor.runIt(ChannelSocket.java:876) at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:685) at java.lang.Thread.run(Thread.java:595) - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: java.net.SocketException: Too many open files
From: john.c.cartwri...@noaa.gov [mailto:john.c.cartwri...@noaa.gov] Can someone please help to to understand what might cause such an exception? File descriptor exhaustion - the process has run out of fds. Any i/o could use a file descriptor, whether that's socket to httpd, socket to database or access to a file. Naively, I'd expect lsof to show them - what makes you think it isn't? If you're lucky, you merely need to find the piece of code that's leaking resources and fix it - which I accept isn't always the easiest of jobs. If you're *un*lucky, it's load related and you've just plain run out. I'll leave the UNIX specialists to suggest ways of increasing the number of fds per process, but there have been some recent threads on here. - Peter - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Just a few questions on my Tomcat Configuration
On Wed, Jun 3, 2009 at 10:36 AM, Caldarale, Charles R chuck.caldar...@unisys.com wrote: From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] Subject: RE: Just a few questions on my Tomcat Configuration Tomcat will create the subdirectories as needed, such as when you deploy a .war file that has an context.xml file in its META-INF directory. It won't create them until needed. Will this happen even if I do not deploy the project via a .war file? I might have to see about upgrading the project to 6.0.20. Thank you so much Chuck for clearing up some things for me. The help is greatly appreciated!' Warmest Regards, - Josh I see that 6.0.20 now copies the META-INF/context.xml file into conf/Catalina/[host]/[appName].xml file even when deployment is via a directory. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Just a few questions on my Tomcat Configuration
From: Josh Gooding [mailto:josh.good...@gmail.com] Subject: Re: Just a few questions on my Tomcat Configuration Will this happen even if I do not deploy the project via a .war file? Not on 6.0.18 (and I haven't actually tried 6.0.20 yet). But it doesn't really matter - you can create the necessary directories yourself; Tomcat will use them if they exist. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: How to reference Shared Libraries with TOMCAT
From: Christopher Schultz [mailto:ch...@christopherschultz.net] Subject: Re: How to reference Shared Libraries with TOMCAT # First clear out the user classpath CLASSPATH= But not on Windows. The corresponding Windows script only sets CLASSPATH if running with a JDK and it can find tools.jar (which is odd, since Tomcat no longer uses javac). Under any other conditions (such as running with a JRE), the CLASSPATH is left untouched. Setting CLASSPATH globally (which a quicktime install does) can be disastrous for other programs, if not Tomcat; that environment variable has long outlived its usefulness. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers.
[SECURITY] CVE-2009-0033 Apache Tomcat DoS when using Java AJP connector
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 CVE-2009-0033: Apache Tomcat denial of service vulnerability Severity: important Vendor: The Apache Software Foundation Versions Affected: Tomcat 6.0.0 to 6.0.18 Tomcat 5.5.0 to 5.5.27 Tomcat 4.1.0 to 4.1.39 The unsupported Tomcat 3.x, 4.0.x and 5.0.x versions may be also affected. Description: If Tomcat receives a request with invalid headers via the Java AJP connector, it does not return an error and instead closes the AJP connection. In case this connector is member of a mod_jk load balancing worker, this member will be put into an error state and will be blocked from use for approximately one minute. Thus the behaviour can be used for a denial of service attack using a carefully crafted request. Mitigation: 6.0.x users should do one of the following: - upgrade to 6.0.20 - apply this patch http://svn.apache.org/viewvc?rev=742915view=rev 5.5.x users should do one of the following: - upgrade to 5.5.28 when released - apply this patch http://svn.apache.org/viewvc?rev=781362view=rev 4.1.x users should do one of the following: - upgrade to 4.1.40 when released - apply this patch http://svn.apache.org/viewvc?rev=781362view=rev Example: GET /servlets-examples/ HTTP/1.1 Host: localhost:x Credit: This issue was discovered by Yoshihito Fukuyama. References: http://tomcat.apache.org/security.html http://tomcat.apache.org/security-6.html http://tomcat.apache.org/security-5.html http://tomcat.apache.org/security-4.html The Apache Tomcat Security Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkommc4ACgkQb7IeiTPGAkNJNACePbuHUz9m9P/lR/+hfhXh4TpL V+EAnRjaiXwAkLJROzGDQebAqyNchEJt =OHhB -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
[SECURITY] CVE-2009-0580 Apache Tomcat User enumeration vulnerability with FORM authentication
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 CVE-2009-0580: Tomcat information disclosure vulnerability Severity: Low Vendor: The Apache Software Foundation Versions Affected: Tomcat 4.1.0 to 4.1.39 Tomcat 5.5.0 to 5.5.27 Tomcat 6.0.0 to 6.0.18 The unsupported Tomcat 3.x, 4.0.x and 5.0.x versions may be also affected. Description: Due to insufficient error checking in some authentication classes, Tomcat allows for the enumeration (brute force testing) of usernames by supplying illegally URL encoded passwords. The attack is possible if form based authenticiaton (j_security_check) with one of the following authentication realms is used: * MemoryRealm * DataSourceRealm * JDBCRealm Mitigation: 6.0.x users should do one of the following: - upgrade to 6.0.20 - apply this patch http://svn.apache.org/viewvc?rev=747840view=rev 5.5.x users should do one of the following: - upgrade to 5.5.28 when released - apply this patch http://svn.apache.org/viewvc?rev=781379view=rev 4.1.x users should do one of the following: - upgrade to 4.1.40 when released - apply this patch http://svn.apache.org/viewvc?rev=781382view=rev Example: The following POST request should trigger an error (500 server error or empty response, depending on the configuration) if the ROOT web application is configured to use FORM authentication: POST /j_security_check HTTP/1.1 Host: localhost j_username=tomcatj_password=% Credit: This issue was discovered by D. Matscheko and T. Hackner of SEC Consult. References: http://tomcat.apache.org/security.html Mark Thomas -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkommckACgkQb7IeiTPGAkP75ACg7XYuld/25X2ltLLTeeQx88UB pFgAn1f6mIpzU7QUnjF4lsHcR+6lY67B =a0AC -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Just a few questions on my Tomcat Configuration
Excellent. So let me see if I have everything straight here: I use virtual hosting to create /abcapps and /xyzapps and install the program in each directory. In the Host section, bind the sub-domain to them and then I should be able to login per subdomain and have everything completely seperate (since I have files being uploaded to the server). It's all housed in the Server.xml file right? One more quick note, is there a way that I can break out certain sections of the server.xml file into a seperate .properties file? I have some of the properties broken out of the web.xml, but can I do the same thing in the server.xml file since it is a core file that tomcat relies on for it's configuration? Thanks again! On Wed, Jun 3, 2009 at 11:25 AM, Caldarale, Charles R chuck.caldar...@unisys.com wrote: From: Josh Gooding [mailto:josh.good...@gmail.com] Subject: Re: Just a few questions on my Tomcat Configuration Will this happen even if I do not deploy the project via a .war file? Not on 6.0.18 (and I haven't actually tried 6.0.20 yet). But it doesn't really matter - you can create the necessary directories yourself; Tomcat will use them if they exist. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
ServletContextAttributeListener and a cluster
Hi, We've been playing around with the DistributedContext, and setAttribute getAttribute works perfectly. I was wondering if it is possible to get a distributed ServletContextAttributeListener. So when we do setAttribute(foo, bar) on cluster node1 I would like to receive a ServletContextAttributeEvent on cluster node2. RJ
Re: Authentication from the browser
Bill, thank you for your feedback. I read up on CLIENT-CERT and am now surprised that Bill was the only one to mention it. It sounds like CLIENT-CERT is the scheme that we should. We can generate certificates and ask our customer to distribute it to its users and have them install certificates in their browsers. Is there a reason why not many people recommended CLIENT-CERT authentication on this thread? Thanks On Tue, Jun 2, 2009 at 8:59 PM, Bill Barker wbar...@wilshire.com wrote: Alec Swan alecs...@gmail.com wrote in message news:34abb48b0906021503t158542a5ube612b5ccfad0...@mail.gmail.com... On Tue, Jun 2, 2009 at 2:34 PM, Jonathan Mast jhmast.develo...@gmail.comwrote: Alec, so basically members of your client company should be able to have direct access to a servlet that is otherwise restricted to a handful of users who must authenicate themselves with a username/password login, right? Yes, this is exactly what we need. Awhile back, I had a request to do something similar. However, in this case the (then) client was providing a portal that their users logged onto, and proxied to our app. What we did is to clone the webapp and make the clone authenticate with CLIENT-CERT. The client portal would then proxy to the clone and provide the same certificate for all users that it had authenticated (which Tomcat then accepted). In this case, even if a blackhat could find the URL for the clone, she still couldn't get in. One solution to this situation would be to create a simple servlet that sniffs incoming request IPs, if they match the range/set of IPs of your client, then you bypass the authenication mechanism of your existing servlet and give them a full view of whatever goodies your servlet has. If incoming requests don't match the IPs then bounce them off somewhere. However this approach is not a complete solution, a very interested party could observe your system and deduce that it was based upon privileged IPs and then spoof them. It all depends upon how important this servlet is you and your organization. If it is absolutely mission critical, then you'll want to use SSL and require logins. The servlet is not mission critical and provides only read-only access. I like this idea, but as Hassaan pointed out it does not allow our customer users to access this page if they are outside of the VPN. On Tue, Jun 2, 2009 at 4:01 PM, Alec Swan alecs...@gmail.com wrote: I may not be explaining it clearly. We have one corporate customer who is putting a link to our servlet on their intranet web page. Therefore, we know the domain name of the users who need custom authentication. We can also tell the customer to put whatever we need in the link, such as HTTP headers. Does this give you enough information to propose a solution? On Tue, Jun 2, 2009 at 12:22 PM, Hassan Schroeder hassan.schroe...@gmail.com wrote: On Tue, Jun 2, 2009 at 11:03 AM, Alec Swan alecs...@gmail.com wrote: Hassan, I don't think that the goals are contradictory, because each goal applies to its own group of users: our customer users and everybody else. Customer users should not have to enter user name and password, but everybody else should. IOW, you want it protected, and you want it openly accessable. Sorry, that sounds contradictory to me :-) If you have a customer who would like to put a link on a web page to your servlet, that servlet's URL is now in the wild -- anyone who finds it can access it. I am glad that you made me think about this, because maybe it is possible to extend Tomcat authentication to also use client IP address or domain? How would you know a priori the IP or domain of the clients? -- Hassan Schroeder hassan.schroe...@gmail.com - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
IIS Connector Redirect to Localhost?
Hi, I configured the isapi_redirect file for tomcat using the instructions I found online. The only twist I added, was instead of defining the ISAPI filter for the entire website, I used a wildcard map and instructed IIS 6.0 to use isapi_redirect.dll as the high priority wildcard map for an empty directory called C:\myapp. In my worker map, I defined /myapp to go to the ajp13 connector. If I visit the page in plain http, it seems to work fine all the time. I.e. http://www.example.com/myapp brings up the page. When I visit the page in https, ajp13 tries to redirect the client to localhost:8009 (which of course is not valid). But when I reload the page, it goes to the https://www.example.com/myapp. How can I avoid the redirect to localhost? I suspect I just need to put www.example.com http://www.example.com/ somewhere in server.xml, but there were 3 places with localhost specified, and I wasn't sure which one I should replace. Thanks. Patrick
RE: java.net.SocketException: Too many open files
Here is the code void acceptConnections() { if( log.isDebugEnabled() ) log.debug(Accepting ajp connections on + port); while( running ) { try{ MsgContext ep=createMsgContext(packetSize); ep.setSource(this); ep.setWorkerEnv( wEnv ); this.accept(ep); if( !running ) break; // Since this is a long-running connection, we don't care about the small GC //next line gac's SocketConnection ajpConn= new SocketConnection(this, ep); tp.runIt( ajpConn ); }catch(Exception ex) { if (running) log.warn(Exception executing accept ,ex); } } } where org.apache.jk.core.JkHandler.java contains the createMsgContext public MsgContext createMsgContext() { return new MsgContext(8*1024); } which calls org.apache.jk.core.MsgContext public MsgContext(int bsize) { try { c2b = new C2BConverter(iso-8859-1); } catch(IOException iex) { log.warn(Can't happen, iex); } jkIS = new JkInputStream(this, bsize); } which calls org.apache.jk.common.JkInputStream public JkInputStream(MsgContext context, int bsize) { mc = context; bodyMsg = new MsgAjp(bsize); outputMsg = new MsgAjp(bsize); } //which calls org.apache.jk.common.MsgAjp private byte buf[]; // The current read or write position in the buffer private int pos; /** * This actually means different things depending on whether the * packet is read or write. For read, it's the length of the * payload (excluding the header). For write, it's the length of * the packet as a whole (counting the header). Oh, well. */ private int len; /*** The maximum packet size*/ private int bufsize; /*** Constructor that takes a buffer size*/ public MsgAjp(int bsize) { if(bsize 8*1024) { bsize = 8*1024; } bufsize = bsize; buf = new byte[bsize]; } 3 possiblities 1)misconfig with AJP connector 2)so you're running out of heap tweaking JAVA_OPT minheap and maxheap parameters would help a 2004 post http://forums.sun.com/thread.jspa?messageID=10055131 says it best The default stack size is 256K on UNIX and on 32-bit Windows operating systems. To set Stack size java -XX:NewSize=128m -XX:MaxNewSize=128m -XX:SurvivorRatio=8 -Xms512m -Xmx512m 1. Setting the New generation heap size -XX:NewSize Use this option to set the New generation Java heap size. Set this value to a multiple of 1024 that is greater than 1MB. As a general rule, set -XX:NewSize to be one-fourth the size of the maximum heap size. Increase the value of this option for larger numbers of short-lived objects.(problem is you would have to know which objects are short-lived) Be sure to increase the New generation as you increase the number of processors. Memory allocation can be parallel, but garbage collection is not parallel. 2. Setting the maximum New generation heap size -XX:MaxNewSize Use this option to set the maximum New generation Java heap size. Set this value to a multiple of 1024 that is greater than 1MB. (this is the ceiling for New Generation heap) 3. Setting New heap size ratios -XX:SurvivorRatio The New generation area is divided into three sub-areas: Eden, and two survivor spaces that are equal in size. Use the -XX:SurvivorRatio=X option to configure the ratio of the Eden/survivor space size. Try setting this value to 8, and then monitor your garbage collection. 4. Setting minimum heap size -Xms Use this option to set the minimum size of the memory allocation pool. Set this value to a multiple of 1024 that is greater than 1MB. As a general rule, set minimum heap size (-Xms) equal to the maximum heap size (-Xmx) to minimize garbage collections. 5. Setting maximum heap size -Xmx Use this option to set the maximum Java heap size. Set this value to a multiple of 1024 that is greater than 1MB. i would double all specified params (leave Survivor alone) until maxheap -Xmx reaches AvailablePhysicalRam/2 2)you've maxed out HW RAM at which point I'd run down to local tech supply store and buy more RAM sticks (good to wait for offhours ,down the server and take one of the ram sticks with you just to make sure you have a good fit..generally safe to double..if you have 1 get another..if you have 2 get 2 more ) (unless of course this is a unisys box then i would ask Unisys) Martin Gainty __ Verzicht und Vertraulichkeitanmerkung/Note de déni et de confidentialité Diese Nachricht ist vertraulich. Sollten Sie nicht der vorgesehene Empfaenger sein, so bitten wir hoeflich um eine Mitteilung. Jede unbefugte Weiterleitung oder Fertigung einer Kopie ist unzulaessig. Diese Nachricht dient lediglich dem
RE: Just a few questions on my Tomcat Configuration
From: Josh Gooding [mailto:josh.good...@gmail.com] Subject: Re: Just a few questions on my Tomcat Configuration I use virtual hosting to create /abcapps and /xyzapps and install the program in each directory. The proper term is webapp, not program. A webapp has a spec-defined directory structure that must be adhered to for proper operation of the webapp. Browse through the various webapps that come with Tomcat to get an idea of the layout, read the servlet spec for the details. In the Host section, bind the sub-domain to them Also set the appBase attribute of each Host to point to the specific sub-domain directories. Note that the default webapp for a Host must be named ROOT (case sensitive). One of your Host elements must be declared as the defaultHost for the surrounding Engine; this is the one used when the URL does not match any of the Host name attributes (including references via IP address). then I should be able to login per subdomain Depends on what you mean by login. If it's just accessing the web site, yes; if you mean authentication, you'll need to configure the appropriate security mechanism. This is usually done with a Realm, which can be placed inside an Engine, Host, or Context, as needed. (since I have files being uploaded to the server). Do not attempt to write files into the appBase directory - keep them outside of Tomcat's directory structure. It's all housed in the Server.xml file right? Context elements are not. (Watch out for your capitalization; many file names are case-sensitive, even on Windows. That should be server.xml, not Server.xml.) One more quick note, is there a way that I can break out certain sections of the server.xml file into a seperate .properties file? Not that I'm aware of, although various XML inclusion mechanisms might work (haven't tried). You can resolve attribute values from system properties, using the ${prop.name} notation. Anything to do with specific webapps should not be in server.xml. can I do the same thing in the server.xml file since it is a core file that tomcat relies on for it's configuration? And is thus not intended to be updated frequently. The contents of server.xml are only read when Tomcat starts up; changes mad after the fact won't be honored until the next Tomcat restart. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: ServletContextAttributeListener and a cluster
Robbert-Jan Roos wrote: Hi, We've been playing around with the DistributedContext, and setAttribute getAttribute works perfectly. I was wondering if it is possible to get a distributed ServletContextAttributeListener. So when we do setAttribute(foo, bar) on cluster node1 I would like to receive a ServletContextAttributeEvent on cluster node2. I don't think so, since we modify the map directly. Filip RJ - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Just a few questions on my Tomcat Configuration
You sir are a gentleman and a scholar! Thank you for all of the tips, they are greatly appreciated! I think you have answered just about all of my questions I have as of right now. I have Win Server 2K3 R2 and a box to play with. I am going to try to get everything up and running this weekend. Hopefully I'll be able to get this and the MySQL tweak running in under a day or so. Again thank you so much. If I have any more questions, I'll toss them up here. - Josh On Wed, Jun 3, 2009 at 12:59 PM, Caldarale, Charles R chuck.caldar...@unisys.com wrote: From: Josh Gooding [mailto:josh.good...@gmail.com] Subject: Re: Just a few questions on my Tomcat Configuration I use virtual hosting to create /abcapps and /xyzapps and install the program in each directory. The proper term is webapp, not program. A webapp has a spec-defined directory structure that must be adhered to for proper operation of the webapp. Browse through the various webapps that come with Tomcat to get an idea of the layout, read the servlet spec for the details. In the Host section, bind the sub-domain to them Also set the appBase attribute of each Host to point to the specific sub-domain directories. Note that the default webapp for a Host must be named ROOT (case sensitive). One of your Host elements must be declared as the defaultHost for the surrounding Engine; this is the one used when the URL does not match any of the Host name attributes (including references via IP address). then I should be able to login per subdomain Depends on what you mean by login. If it's just accessing the web site, yes; if you mean authentication, you'll need to configure the appropriate security mechanism. This is usually done with a Realm, which can be placed inside an Engine, Host, or Context, as needed. (since I have files being uploaded to the server). Do not attempt to write files into the appBase directory - keep them outside of Tomcat's directory structure. It's all housed in the Server.xml file right? Context elements are not. (Watch out for your capitalization; many file names are case-sensitive, even on Windows. That should be server.xml, not Server.xml.) One more quick note, is there a way that I can break out certain sections of the server.xml file into a seperate .properties file? Not that I'm aware of, although various XML inclusion mechanisms might work (haven't tried). You can resolve attribute values from system properties, using the ${prop.name} notation. Anything to do with specific webapps should not be in server.xml. can I do the same thing in the server.xml file since it is a core file that tomcat relies on for it's configuration? And is thus not intended to be updated frequently. The contents of server.xml are only read when Tomcat starts up; changes mad after the fact won't be honored until the next Tomcat restart. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: java.net.SocketException: Too many open files
Thanks for your suggestions Martin, I'll look into modifying the memory parameters. Strange thing is that this has been running for weeks w/o any changes in the configuration or contexts. --john Martin Gainty wrote: Here is the code void acceptConnections() { if( log.isDebugEnabled() ) log.debug(Accepting ajp connections on + port); while( running ) { try{ MsgContext ep=createMsgContext(packetSize); ep.setSource(this); ep.setWorkerEnv( wEnv ); this.accept(ep); if( !running ) break; // Since this is a long-running connection, we don't care about the small GC //next line gac's SocketConnection ajpConn= new SocketConnection(this, ep); tp.runIt( ajpConn ); }catch(Exception ex) { if (running) log.warn(Exception executing accept ,ex); } } } where org.apache.jk.core.JkHandler.java contains the createMsgContext public MsgContext createMsgContext() { return new MsgContext(8*1024); } which calls org.apache.jk.core.MsgContext public MsgContext(int bsize) { try { c2b = new C2BConverter(iso-8859-1); } catch(IOException iex) { log.warn(Can't happen, iex); } jkIS = new JkInputStream(this, bsize); } which calls org.apache.jk.common.JkInputStream public JkInputStream(MsgContext context, int bsize) { mc = context; bodyMsg = new MsgAjp(bsize); outputMsg = new MsgAjp(bsize); } //which calls org.apache.jk.common.MsgAjp private byte buf[]; // The current read or write position in the buffer private int pos; /** * This actually means different things depending on whether the * packet is read or write. For read, it's the length of the * payload (excluding the header). For write, it's the length of * the packet as a whole (counting the header). Oh, well. */ private int len; /*** The maximum packet size*/ private int bufsize; /*** Constructor that takes a buffer size*/ public MsgAjp(int bsize) { if(bsize 8*1024) { bsize = 8*1024; } bufsize = bsize; buf = new byte[bsize]; } 3 possiblities 1)misconfig with AJP connector 2)so you're running out of heap tweaking JAVA_OPT minheap and maxheap parameters would help a 2004 post http://forums.sun.com/thread.jspa?messageID=10055131 says it best The default stack size is 256K on UNIX and on 32-bit Windows operating systems. To set Stack size java -XX:NewSize=128m -XX:MaxNewSize=128m -XX:SurvivorRatio=8 -Xms512m -Xmx512m 1. Setting the New generation heap size -XX:NewSize Use this option to set the New generation Java heap size. Set this value to a multiple of 1024 that is greater than 1MB. As a general rule, set -XX:NewSize to be one-fourth the size of the maximum heap size. Increase the value of this option for larger numbers of short-lived objects.(problem is you would have to know which objects are short-lived) Be sure to increase the New generation as you increase the number of processors. Memory allocation can be parallel, but garbage collection is not parallel. 2. Setting the maximum New generation heap size -XX:MaxNewSize Use this option to set the maximum New generation Java heap size. Set this value to a multiple of 1024 that is greater than 1MB. (this is the ceiling for New Generation heap) 3. Setting New heap size ratios -XX:SurvivorRatio The New generation area is divided into three sub-areas: Eden, and two survivor spaces that are equal in size. Use the -XX:SurvivorRatio=X option to configure the ratio of the Eden/survivor space size. Try setting this value to 8, and then monitor your garbage collection. 4. Setting minimum heap size -Xms Use this option to set the minimum size of the memory allocation pool. Set this value to a multiple of 1024 that is greater than 1MB. As a general rule, set minimum heap size (-Xms) equal to the maximum heap size (-Xmx) to minimize garbage collections. 5. Setting maximum heap size -Xmx Use this option to set the maximum Java heap size. Set this value to a multiple of 1024 that is greater than 1MB. i would double all specified params (leave Survivor alone) until maxheap -Xmx reaches AvailablePhysicalRam/2 2)you've maxed out HW RAM at which point I'd run down to local tech supply store and buy more RAM sticks (good to wait for offhours ,down the server and take one of the ram sticks with you just to make sure you have a good fit..generally safe to double..if you have 1 get another..if you have 2 get 2 more ) (unless of course this is a unisys box then i would ask Unisys) Martin Gainty __ Verzicht und Vertraulichkeitanmerkung/Note de déni et de confidentialité Diese Nachricht
RE: java.net.SocketException: Too many open files
From: John Cartwright [mailto:john.c.cartwri...@noaa.gov] Subject: Re: java.net.SocketException: Too many open files I'll look into modifying the memory parameters. That would be a complete waste of time. The heap size has nothing to do with the problem you're seeing, and the discussion cited by Martin is full of erroneous information. Please ignore it. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: java.net.SocketException: Too many open files
Thanks for your reply Peter. Initially I was assuming that lsof was not showing me files on disk that were being opened and read by servlets. However, I've been unable to reproduce that in a more controlled setting. Since this system has been running for weeks w/o any modification, something must be leaking. I'll keep monitoring and see if I can gather more information. --john Peter Crowther wrote: From: john.c.cartwri...@noaa.gov [mailto:john.c.cartwri...@noaa.gov] Can someone please help to to understand what might cause such an exception? File descriptor exhaustion - the process has run out of fds. Any i/o could use a file descriptor, whether that's socket to httpd, socket to database or access to a file. Naively, I'd expect lsof to show them - what makes you think it isn't? If you're lucky, you merely need to find the piece of code that's leaking resources and fix it - which I accept isn't always the easiest of jobs. If you're *un*lucky, it's load related and you've just plain run out. I'll leave the UNIX specialists to suggest ways of increasing the number of fds per process, but there have been some recent threads on here. - Peter - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: java.net.SocketException: Too many open files
glad to hear that helped you may want to consider implementing SSL on your connectors to protect your TC resources http://www.mbaworld.com/docs/ssl-howto.html Please let us know if we can provide any assistance to your efforts Martin Gainty __ Jogi és Bizalmassági kinyilatkoztatás/Verzicht und Vertraulichkeitanmerkung/Note de déni et de confidentialité Ez az üzenet bizalmas. Ha nem ön az akinek szánva volt, akkor kérjük, hogy jelentse azt nekünk vissza. Semmiféle továbbítása vagy másolatának készítése nem megengedett. Ez az üzenet csak ismeret cserét szolgál és semmiféle jogi alkalmazhatósága sincs. Mivel az electronikus üzenetek könnyen megváltoztathatóak, ezért minket semmi felelöség nem terhelhet ezen üzenet tartalma miatt. Diese Nachricht ist vertraulich. Sollten Sie nicht der vorgesehene Empfaenger sein, so bitten wir hoeflich um eine Mitteilung. Jede unbefugte Weiterleitung oder Fertigung einer Kopie ist unzulaessig. Diese Nachricht dient lediglich dem Austausch von Informationen und entfaltet keine rechtliche Bindungswirkung. Aufgrund der leichten Manipulierbarkeit von E-Mails koennen wir keine Haftung fuer den Inhalt uebernehmen. Ce message est confidentiel et peut être privilégié. Si vous n'êtes pas le destinataire prévu, nous te demandons avec bonté que pour satisfaire informez l'expéditeur. N'importe quelle diffusion non autorisée ou la copie de ceci est interdite. Ce message sert à l'information seulement et n'aura pas n'importe quel effet légalement obligatoire. Étant donné que les email peuvent facilement être sujets à la manipulation, nous ne pouvons accepter aucune responsabilité pour le contenu fourni. Date: Wed, 3 Jun 2009 14:15:43 -0600 From: john.c.cartwri...@noaa.gov Subject: Re: java.net.SocketException: Too many open files To: users@tomcat.apache.org Thanks for your suggestions Martin, I'll look into modifying the memory parameters. Strange thing is that this has been running for weeks w/o any changes in the configuration or contexts. --john Martin Gainty wrote: Here is the code void acceptConnections() { if( log.isDebugEnabled() ) log.debug(Accepting ajp connections on + port); while( running ) { try{ MsgContext ep=createMsgContext(packetSize); ep.setSource(this); ep.setWorkerEnv( wEnv ); this.accept(ep); if( !running ) break; // Since this is a long-running connection, we don't care about the small GC //next line gac's SocketConnection ajpConn= new SocketConnection(this, ep); tp.runIt( ajpConn ); }catch(Exception ex) { if (running) log.warn(Exception executing accept ,ex); } } } where org.apache.jk.core.JkHandler.java contains the createMsgContext public MsgContext createMsgContext() { return new MsgContext(8*1024); } which calls org.apache.jk.core.MsgContext public MsgContext(int bsize) { try { c2b = new C2BConverter(iso-8859-1); } catch(IOException iex) { log.warn(Can't happen, iex); } jkIS = new JkInputStream(this, bsize); } which calls org.apache.jk.common.JkInputStream public JkInputStream(MsgContext context, int bsize) { mc = context; bodyMsg = new MsgAjp(bsize); outputMsg = new MsgAjp(bsize); } //which calls org.apache.jk.common.MsgAjp private byte buf[]; // The current read or write position in the buffer private int pos; /** * This actually means different things depending on whether the * packet is read or write. For read, it's the length of the * payload (excluding the header). For write, it's the length of * the packet as a whole (counting the header). Oh, well. */ private int len; /*** The maximum packet size*/ private int bufsize; /*** Constructor that takes a buffer size*/ public MsgAjp(int bsize) { if(bsize 8*1024) { bsize = 8*1024; } bufsize = bsize; buf = new byte[bsize]; } 3 possiblities 1)misconfig with AJP connector 2)so you're running out of heap tweaking JAVA_OPT minheap and maxheap parameters would help a 2004 post http://forums.sun.com/thread.jspa?messageID=10055131 says it best The default stack size is 256K on UNIX and on 32-bit Windows operating systems. To set Stack size java -XX:NewSize=128m -XX:MaxNewSize=128m -XX:SurvivorRatio=8 -Xms512m -Xmx512m 1. Setting the New generation heap size -XX:NewSize Use this option to set the New generation Java heap size. Set this value to a multiple of 1024 that is
how to setup Tomcat 6.x fixes
Hi Where can I get instructions on setting up our Tomcat server with the new fixes? I have downloaded the new fixes but cannot see any instructions on the web site. Thanks Kirk Kirk Meline Systems Administrator NASA Ames Research Center Mail Stop 213-7 Moffett Field, CA 94035-1000 1-(650) 604-6868 Office
RE: how to setup Tomcat 6.x fixes
From: Meline, Kirk Alan. (ARC)[PEROT SYSTEMS] [mailto:kirk.mel...@nasa.gov] Subject: how to setup Tomcat 6.x fixes Where can I get instructions on setting up our Tomcat server with the new fixes? Download, unzip (or untar), run: http://tomcat.apache.org/tomcat-6.0-doc/setup.html I have downloaded the new fixes but cannot see any instructions on the web site. What exactly did you download, and from where? - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: how to setup Tomcat 6.x fixes
Chuck I have download all the files from the windows section of http://tomcat.apache.org/download-60.cgi#6.0.20 I just would like to know how to install them while making sure I do not cause problems on apache. Thanks Kirk Meline Systems Administrator NASA Ames Research Center Mail Stop 213-7 Moffett Field, CA 94035-1000 1-(650) 604-6868 Office -Original Message- From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] Sent: Wednesday, June 03, 2009 3:24 PM To: Tomcat Users List Subject: RE: how to setup Tomcat 6.x fixes From: Meline, Kirk Alan. (ARC)[PEROT SYSTEMS] [mailto:kirk.mel...@nasa.gov] Subject: how to setup Tomcat 6.x fixes Where can I get instructions on setting up our Tomcat server with the new fixes? Download, unzip (or untar), run: http://tomcat.apache.org/tomcat-6.0-doc/setup.html I have downloaded the new fixes but cannot see any instructions on the web site. What exactly did you download, and from where? - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
tomcat-connectors mod_jk.dsp file will not load in Visual Studio 2005
Hi all, I was able to get mod_jk building fine using Makefile.vc, but couldn't get the .dsp file loaded into Visual Studio 2005. Anyone know if there's a trick to this, or should I just not care (it does build and seem to work fine with the Makefile). When Visual Studio 2005 tries to convert mod_jk.dsp to the newer format it complains with a Cannot load the project due to a corrupt project file popup. Does anyone really care about this or should I just ignore it? Thanks, Andy - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: How to reference Shared Libraries with TOMCAT
Caldarale, Charles R wrote: From: Zeeshan Ahmad [mailto:zah...@i2cinc.com] Subject: RE: How to reference Shared Libraries with TOMCAT If you have multiple tomcats and multiple applications then you have to put the jars on a separate location As Peter pointed out, doing so is a really bad idea. The OP should continue to run what's working, with the jars duplicated in each webapp's WEB-INF/lib directory. Anything else is extremely problematic. Yeah, I once tried having a single lib location for the common jars, and while I could get it working, it was quite fragile, and I ended up giving each webapp its own copy of the libraries in question. It's been much more robust since then. D - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: how to setup Tomcat 6.x fixes
Kirk- I have'nt seen that particular feature incorporated into current TC 6.x release please feel free to post this feature request to https://issues.apache.org/bugzilla/enter_bug.cgi?product=Tomcat%206 powers that be will review the feature request and respond HTH Martin Gainty __ Jogi és Bizalmassági kinyilatkoztatás/Verzicht und Vertraulichkeitanmerkung/Note de déni et de confidentialité Ez az üzenet bizalmas. Ha nem ön az akinek szánva volt, akkor kérjük, hogy jelentse azt nekünk vissza. Semmiféle továbbítása vagy másolatának készítése nem megengedett. Ez az üzenet csak ismeret cserét szolgál és semmiféle jogi alkalmazhatósága sincs. Mivel az electronikus üzenetek könnyen megváltoztathatóak, ezért minket semmi felelöség nem terhelhet ezen üzenet tartalma miatt. Diese Nachricht ist vertraulich. Sollten Sie nicht der vorgesehene Empfaenger sein, so bitten wir hoeflich um eine Mitteilung. Jede unbefugte Weiterleitung oder Fertigung einer Kopie ist unzulaessig. Diese Nachricht dient lediglich dem Austausch von Informationen und entfaltet keine rechtliche Bindungswirkung. Aufgrund der leichten Manipulierbarkeit von E-Mails koennen wir keine Haftung fuer den Inhalt uebernehmen. Ce message est confidentiel et peut être privilégié. Si vous n'êtes pas le destinataire prévu, nous te demandons avec bonté que pour satisfaire informez l'expéditeur. N'importe quelle diffusion non autorisée ou la copie de ceci est interdite. Ce message sert à l'information seulement et n'aura pas n'importe quel effet légalement obligatoire. Étant donné que les email peuvent facilement être sujets à la manipulation, nous ne pouvons accepter aucune responsabilité pour le contenu fourni. From: kirk.mel...@nasa.gov To: users@tomcat.apache.org Date: Wed, 3 Jun 2009 16:43:53 -0500 Subject: how to setup Tomcat 6.x fixes Hi Where can I get instructions on setting up our Tomcat server with the new fixes? I have downloaded the new fixes but cannot see any instructions on the web site. Thanks Kirk Kirk Meline Systems Administrator NASA Ames Research Center Mail Stop 213-7 Moffett Field, CA 94035-1000 1-(650) 604-6868 Office _ Windows Live™ SkyDrive™: Get 25 GB of free online storage. http://windowslive.com/online/skydrive?ocid=TXT_TAGLM_WL_SD_25GB_062009
Understanding GC Logs
I am just trying to learn and understand the GC logs. (I did read the sun's docs on GC tuning). jdk1.6.0_07 -Xms2g -Xmx2g -Xss256k -XX:+UseLargePages -XX:+PrintGCDetails -verbose:gc -Xloggc:/var/log/gc.log -XX:PermSize=512m -XX:MaxPermSize=512m It is running Parallel Collector by default. The full GC usually runs in every 20-30 minutes (takes 2 seconds), and the minor collections occur every 40-50 seconds. I viewed the logs in GC Viewer, and the throughput is about 99.6%, but the pauses tend to get noticable at times slowing the app down for upto 10 minutes- and sometimes the app becomes unresponsive after running for about a week due to GC. I have pasted the snipped from my GC logs (when the pause became noticeable). Does the logs in themselves indicates any possible problems? Thanks in advance. 322241.484: [GC [PSYoungGen: 493731K-50938K(578816K)] 1617970K-1175624K(1977600K), 0.0761440 secs] [Times: user=0.23 sys=0.00, real=0.07 secs] 322264.254: [GC [PSYoungGen: 508730K-78771K(581568K)] 1633416K-1203628K(1980352K), 0.1524060 secs] [Times: user=0.26 sys=0.01, real=0.16 secs] 322283.883: [GC [PSYoungGen: 543155K-118014K(582400K)] 1668012K-1249096K(1981184K), 0.2397130 secs] [Times: user=0.49 sys=0.00, real=0.24 secs] 322301.402: [GC [PSYoungGen: 582398K-118007K(495360K)] 1713480K-1289473K(1894144K), 0.2343380 secs] [Times: user=0.64 sys=0.01, real=0.24 secs] 322317.408: [GC [PSYoungGen: 495351K-161534K(538880K)] 1666817K-1357597K(1937664K), 0.3078690 secs] [Times: user=0.70 sys=0.00, real=0.31 secs] 322338.991: [GC [PSYoungGen: 538878K-161533K(426240K)] 1734941K-1379949K(1825024K), 0.1890400 secs] [Times: user=0.86 sys=0.00, real=0.19 secs] 322352.173: [GC [PSYoungGen: 426237K-156891K(421632K)] 1644653K-1376348K(1820416K), 0.1314940 secs] [Times: user=0.83 sys=0.00, real=0.13 secs] 322353.537: [GC [PSYoungGen: 421595K-149135K(464320K)] 1641052K-1368592K(1863104K), 0.1075660 secs] [Times: user=0.78 sys=0.01, real=0.11 secs] 322358.922: [GC [PSYoungGen: 385935K-192657K(429504K)] 1605392K-1412114K(1828288K), 0.4118000 secs] [Times: user=1.10 sys=1.27, real=0.41 secs] 322382.445: [GC [PSYoungGen: 429457K-162415K(466944K)] 1648914K-1391845K(1865728K), 0.1753080 secs] [Times: user=0.93 sys=0.13, real=0.18 secs] 322389.711: [GC [PSYoungGen: 395887K-175021K(466944K)] 1625317K-1404944K(1865728K), 0.1825450 secs] [Times: user=0.83 sys=0.01, real=0.18 secs] 322400.876: [GC [PSYoungGen: 408493K-163512K(466944K)] 1638416K-1397305K(1865728K), 0.1612630 secs] [Times: user=0.87 sys=0.01, real=0.16 secs] 322411.500: [GC [PSYoungGen: 396239K-111767K(466944K)] 1630032K-1412129K(1865728K), 0.2211210 secs] [Times: user=1.04 sys=0.11, real=0.23 secs] 322427.250: [GC [PSYoungGen: 345239K-35751K(466944K)] 1645601K-1401444K(1865728K), 0.1585970 secs] [Times: user=0.65 sys=0.14, real=0.16 secs] 322427.409: [Full GC [PSYoungGen: 35751K-0K(466944K)] [PSOldGen: 1365693K-695195K(1398784K)] 1401444K-695195K(1865728K) [PSPermGen: 180694K-180694K(524288K)], 2 .3017070 secs] [Times: user=2.09 sys=0.21, real=2.30 secs] 322431.641: [GC [PSYoungGen: 233472K-3639K(466944K)] 928667K-698834K(1865728K), 0.0171480 secs] [Times: user=0.05 sys=0.00, real=0.02 secs] 322432.659: [GC [PSYoungGen: 237111K-4086K(466944K)] 932306K-699281K(1865728K), 0.0150920 secs] [Times: user=0.04 sys=0.00, real=0.01 secs] 322438.955: [GC [PSYoungGen: 237558K-10227K(466944K)] 932753K-705422K(1865728K), 0.0291110 secs] [Times: user=0.06 sys=0.01, real=0.03 secs] 322441.277: [GC [PSYoungGen: 243699K-7492K(466944K)] 938894K-702688K(1865728K), 0.0213000 secs] [Times: user=0.05 sys=0.01, real=0.03 secs] 322442.216: [GC [PSYoungGen: 240964K-15236K(466944K)] 936160K-711474K(1865728K), 0.0242510 secs] [Times: user=0.11 sys=0.00, real=0.03 secs] 322449.748: [GC [PSYoungGen: 248708K-22608K(466944K)] 944946K-723379K(1865728K), 0.0357610 secs] [Times: user=0.19 sys=0.01, real=0.04 secs] 322451.245: [GC [PSYoungGen: 256080K-2982K(466944K)] 956851K-724151K(1865728K), 0.0365930 secs] [Times: user=0.20 sys=0.04, real=0.04 secs] 322452.165: [GC [PSYoungGen: 236454K-6013K(472000K)] 957623K-728651K(1870784K), 0.0160030 secs] [Times: user=0.07 sys=0.01, real=0.02 secs] 322457.810: [GC [PSYoungGen: 244541K-14396K(466944K)] 967179K-737034K(1865728K), 0.0434880 secs] [Times: user=0.14 sys=0.09, real=0.05 secs] 322463.141: [GC [PSYoungGen: 252924K-19285K(492928K)] 975562K-741923K(1891712K), 0.0314660 secs] [Times: user=0.15 sys=0.03, real=0.04 secs] 322471.247: [GC [PSYoungGen: 293781K-70034K(481984K)] 1016419K-792671K(1880768K), 0.1132550 secs] [Times: user=0.48 sys=0.15, real=0.11 secs] 322472.328: [GC [PSYoungGen: 344530K-156662K(452672K)] 1067167K-879300K(1851456K), 0.1949290 secs] [Times: user=0.98 sys=0.40, real=0.20 secs] 322476.209: [GC [PSYoungGen: 409974K-188250K(441600K)] 1132612K-918748K(1840384K), 0.1994430 secs] [Times: user=1.11 sys=0.19, real=0.20 secs] 322478.163: [GC [PSYoungGen: 441562K-200628K(466944K)] 1172060K-967015K(1865728K),
Re: Blank page when native DLL used
Hi Chuck, Nope, I just verified, I made no changes to server.xml at all... in fact, the only thing I did do was take all the preinstalled applications and remove them from webapps... I'd be surprised to learn it, but could that be the problem somehow? Thanks, Frank -- Frank W. Zammetti Author of Practical Ext JS Projects with Gears (coming soon) and Practical Dojo Projects and Practical DWR 2 Projects and Practical JavaScript, DOM Scripting and Ajax Projects and Practical Ajax Projects with Java Technology (For info: apress.com/book/search?searchterm=zammettiact=search) All you could possibly want is here: zammetti.com Caldarale, Charles R wrote: From: Frank W. Zammetti [mailto:fzli...@omnytex.com] Subject: Re: Blank page when native DLL used 32-bit, and I re-confirmed I have the right download (which seems obvious anyway given that Tomcat picks it up and starts running with it, but you never know). You didn't happen to disable the APR listener in server.xml, did you? That might contribute to the observed symptoms. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org __ Information from ESET Smart Security, version of virus signature database 4128 (20090603) __ The message was checked by ESET Smart Security. http://www.eset.com - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Blank page when native DLL used
From: Frank W. Zammetti [mailto:fzli...@omnytex.com] Subject: Re: Blank page when native DLL used the only thing I did do was take all the preinstalled applications and remove them from webapps... Including ROOT? If you don't have a default webapp deployed, you will get a blank page back if the URL can't be matched against any of the deployed webapps. (This is true with and without tcnative-1.dll available.) Note that the browser may display an old copy of the Tomcat home page if it has one lying around; hitting refresh will get rid of that. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Blank page when native DLL used
That's correct, root too... I tried adding all the webapps back in anyway to no avail... the URL I know is correct because without the DLL, it gets me my page as expected, but when I drop the DLL in and just hit refresh, I get the blank page (I also confirmed there was no trailing slash both times to be extra sure). I can of course hit refresh all day long without the DLL (the JSP renders the current time so I know it's properly being refreshed). Well, if I'm the only one that's ever reported this then no big deal, I'm perfectly happy assuming it's something on my machine (or me doing something stupid that I just can't catch). This is just for development so not a problem at all. If others see this though, maybe then it might be indicative of an actual problem. Take care, Frank -- Frank W. Zammetti Author of Practical Ext JS Projects with Gears (coming soon) and Practical Dojo Projects and Practical DWR 2 Projects and Practical JavaScript, DOM Scripting and Ajax Projects and Practical Ajax Projects with Java Technology (For info: apress.com/book/search?searchterm=zammettiact=search) All you could possibly want is here: zammetti.com Caldarale, Charles R wrote: From: Frank W. Zammetti [mailto:fzli...@omnytex.com] Subject: Re: Blank page when native DLL used the only thing I did do was take all the preinstalled applications and remove them from webapps... Including ROOT? If you don't have a default webapp deployed, you will get a blank page back if the URL can't be matched against any of the deployed webapps. (This is true with and without tcnative-1.dll available.) Note that the browser may display an old copy of the Tomcat home page if it has one lying around; hitting refresh will get rid of that. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org __ Information from ESET Smart Security, version of virus signature database 4129 (20090604) __ The message was checked by ESET Smart Security. http://www.eset.com - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: how to setup Tomcat 6.x fixes
From: Meline, Kirk Alan. (ARC)[PEROT SYSTEMS] [mailto:kirk.mel...@nasa.gov] Subject: RE: how to setup Tomcat 6.x fixes I have download all the files from the windows section of http://tomcat.apache.org/download-60.cgi#6.0.20 O.k., you went a bit overboard, but there's no damage; I'd recommend just the Core .zip file for now. The Windows Service Installer will also work, but is a bit more difficult to use for people just getting started or wanting to run multiple Tomcats on the same box. Unlike the .exe download, the .zip lets you install Tomcat wherever you want to, and includes .bat scripts for running Tomcat from a command prompt. You can also install it as a Windows service with the .zip's service.bat script if and when you're ready to do that. Just unzip the download to whatever directory is convenient for you, and keep reading. I just would like to know how to install them while making sure I do not cause problems on apache. Not sure what you mean by cause problems on apache. Do you already have some other version of Tomcat installed? Do you already have httpd running on the system of interest? If there are potential conflicts with existing installations, you will want to edit the conf/server.xml file to change the port numbers to insure the version under test won't bother the current ones. The port numbers of interest are given in the Server and Connector elements. Find out what ports are in use (netstat will show you), and make sure your test copy of Tomcat doesn't try to use the same ones. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org