Re: Wrong SessionID

2009-07-23 Thread Ron McNulty
Hi Uwe Great news - it took us days to find this on our intranet. It wasn't helped by the fact that only one of our call centre operators had the problem, and she worked in a centre 400km away. It turned out that her desktop always had a particular SAP application open plus one of ours. I

Re: Monitoring Tomcat

2009-07-23 Thread Timo Meinen | mindmatters
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Dori, we are using Munin and a JMX plugin for this purpose. Timo Am 22.07.2009 um 17:51 schrieb dori: Hello everyone. What would be the best way or a good way to monitor topcat, so i could see when and where any errors are originating

Re: Preventing access to directories?

2009-07-23 Thread André Warnier
Andre-John Mas wrote: On 22-Jul-2009, at 22:36, Hassan Schroeder wrote: On Wed, Jul 22, 2009 at 5:23 PM, Andre-John Masandrejohn@gmail.com wrote: I want to ensure that someone typing: http://../webapp/module/jsp/abc.jsp won't be able to access the resource. I know I could put

Re: Fwd: Is it not possible to install apache-tomcat-6.0.20 with a J2SE 5 JRE: A new development

2009-07-23 Thread Varuna Seneviratna
Interesting that your subject line says J2SE 5 JRE, when the registered JVM is a JDK 6... Well it's an error I have made it' s got to be without J2SE 5 JRE. When the installation failed , I thought whether it's because I am using Java SE 6, since tomcat documentation says to use an J2SE 5

Re: Fwd: Is it not possible to install apache-tomcat-6.0.20 with a J2SE 5 JRE: A new development

2009-07-23 Thread André Warnier
Varuna Seneviratna wrote: ... Well I did as you have instructed me 1. *Stopped the Anti virus * 2. *Downloaded apache-tomcat-6.0.20.zip (core)* 3. *Unzipped it to the directory apache-tomcat-6.0.20* 4. *Opened a console window* 5. *Went to the directory

Re: XSS vulnerability in Tomcat Host Header

2009-07-23 Thread Leon Rosenberg
So, it was a hoax? :-) Leon On Wed, Jul 22, 2009 at 3:30 PM, Konstantin Kolinkoknst.koli...@gmail.com wrote: 2009/7/22 Rémy Maucherat remy.mauche...@gmail.com: On Wed, Jul 22, 2009 at 2:37 PM, Mark Thomasma...@apache.org wrote: You'll need to provide more details. Nothing stands out from the

Re: Can a Realm communicate with a web application?

2009-07-23 Thread Pid
On 22/7/09 19:32, Mitch Claborn wrote: Pid wrote: On 21/7/09 23:23, Mitch Claborn wrote: I am toying with the idea of writing my own Realm for authentication. Much of the code and structures that I need are already present in the web application. Is there any way for the Realm to access Java

Re: XSS vulnerability in Tomcat Host Header

2009-07-23 Thread Mark Thomas
Konstantin Kolinko wrote: 2009/7/22 Rémy Maucherat remy.mauche...@gmail.com: On Wed, Jul 22, 2009 at 2:37 PM, Mark Thomasma...@apache.org wrote: You'll need to provide more details. Nothing stands out from the security pages. Please provide step by step instructions to reproduce from a

Re: Fwd: Is it not possible to install apache-tomcat-6.0.20 with a J2SE 5 JRE: A new development

2009-07-23 Thread Varuna Seneviratna
Andre: I edited the service.bat, only part that had to be added was echo Using %EXECUTABLE%: C:\apache-tomcat-6.0.20\binservice.bat install Installing the service 'Tomcat6' ... Using CATALINA_HOME:C:\apache-tomcat-6.0.20 Using CATALINA_BASE:C:\apache-tomcat-6.0.20 Using JAVA_HOME:

Re: Fwd: Is it not possible to install apache-tomcat-6.0.20 with a J2SE 5 JRE: A new development

2009-07-23 Thread André Warnier
Varuna, just as an aside : Just send your answer to the list, do not include the other addresses. We are all subscribed to the list, so we get these messages anyway. If you also send it to the other addresses, we each get these messages twice. Thanks.

IAVM Identified Vulnerability - 2009-B-0026_0028

2009-07-23 Thread Owen, Scott A CTR IT/IM Bldg1490
u...@tomcat.apache.org, I am currently running Tomcat 5.5.27 on a Windows 2003 server for the application Business Objects Enterprise XI R2. I have been notified by my IA department of an IAVA that has been identified and needs immediate action. The IAVM is 2009-B-0026_0028 and references the

Re: Fwd: Is it not possible to install apache-tomcat-6.0.20 with a J2SE 5 JRE: A new development

2009-07-23 Thread André Warnier
Good, we are making progress ! Varuna Seneviratna wrote: Andre: I edited the service.bat, only part that had to be added was echo Using %EXECUTABLE%: C:\apache-tomcat-6.0.20\binservice.bat install Installing the service 'Tomcat6' ... Using CATALINA_HOME:C:\apache-tomcat-6.0.20 Using

Re: Fwd: Is it not possible to install apache-tomcat-6.0.20 with a J2SE 5 JRE: A new development

2009-07-23 Thread David Smith
I believe there should be a companion program tomcat6w.exe that allows you to see the registry settings used by the service. --David Varuna Seneviratna wrote: Andre: I edited the service.bat, only part that had to be added was echo Using %EXECUTABLE%:

Re: IAVM Identified Vulnerability - 2009-B-0026_0028

2009-07-23 Thread Markus Schönhaber
Owen, Scott A CTR IT/IM Bldg1490: I am currently running Tomcat 5.5.27 on a Windows 2003 server for the application Business Objects Enterprise XI R2. I have been notified by my IA department of an IAVA that has been identified and needs immediate action. The IAVM is 2009-B-0026_0028 and

Re: Fwd: Is it not possible to install apache-tomcat-6.0.20 with a J2SE 5 JRE: A new development

2009-07-23 Thread André Warnier
David Smith wrote: I believe there should be a companion program tomcat6w.exe that allows you to see the registry settings used by the service. Your belief is correct, but you're coming a bit late in the day. But I guess geography explains that. ;-) There is also the fact that the subject of

Re: Fwd: Is it not possible to install apache-tomcat-6.0.20 with a J2SE 5 JRE: A new development

2009-07-23 Thread Konstantin Kolinko
When given the long command C:\apache-tomcat-6.0.20\bintomcat6.exe //IS//%SERVICE_NAME% --StartClass org. apache.catalina.startup.Bootstrap --StopClass org.apache.catalina.startup.Bootst rap --StartParams start --StopParams stop The above command displayed a message box with a big Red X

Re: Fwd: Is it not possible to install apache-tomcat-6.0.20 with a J2SE 5 JRE: A new development

2009-07-23 Thread David Smith
I wouldn't say I'm late ... just watching the thread til now, offering up my thoughts where they are relevant. --David André Warnier wrote: David Smith wrote: I believe there should be a companion program tomcat6w.exe that allows you to see the registry settings used by the service. Your

Re: Trouble setting up virtual host

2009-07-23 Thread Lisa D Beggs/AC/VCU
Can you tell us first under what kind of host this Tomcat is running ? Is it a Unix system, a Linux system, a Windows system ? We are running Windows Server 2003 Second : I am going to ask some pretty basic questions. Can you answer them, even if you think that they are stupid, or that you

Re: Can a Realm communicate with a web application?

2009-07-23 Thread Mitch Claborn
Pid wrote: On 22/7/09 19:32, Mitch Claborn wrote: Pid wrote: On 21/7/09 23:23, Mitch Claborn wrote: I am toying with the idea of writing my own Realm for authentication. Much of the code and structures that I need are already present in the web application. Is there any way for the Realm

Logging servlet time and connections

2009-07-23 Thread craig
Hello, I need to log incoming connections to tomcat (when connected, then disconnected), as well as the servlet it's running. I am trying to find out information on how long its taking to process our servlet as well as how long connections may be queued. Is there anything I can turn on in

Re: Fwd: Is it not possible to install apache-tomcat-6.0.20 with a J2SE 5 JRE: A new development

2009-07-23 Thread André Warnier
Konstantin Kolinko wrote: When given the long command C:\apache-tomcat-6.0.20\bintomcat6.exe //IS//%SERVICE_NAME% --StartClass org. apache.catalina.startup.Bootstrap --StopClass org.apache.catalina.startup.Bootst rap --StartParams start --StopParams stop The above command displayed a message

Re: Can a Realm communicate with a web application?

2009-07-23 Thread Mark Thomas
Mitch Claborn wrote: everything looks correctly spelled to me. That class only in one place. find . -name MyRealm.class ./MMWebServer/WEB-INF/classes/com/csc/mm/web/tomcat/MyRealm.class Realms are internal Tomcat objects and the associated classes need to be placed in the CATALINA_HOME/lib

Re: Trouble setting up virtual host

2009-07-23 Thread André Warnier
Lisa D Beggs/AC/VCU wrote: Can you tell us first under what kind of host this Tomcat is running ? Is it a Unix system, a Linux system, a Windows system ? We are running Windows Server 2003 Second : I am going to ask some pretty basic questions. Can you answer them, even if you think that

Error during initialization of VM

2009-07-23 Thread Goddard Jiri
Hi, I've got this error: [2009-07-23 15:53:47] [1253 prunsrv.c] [debug] Procrun log initialized [2009-07-23 15:53:47] [info] Running Service... [2009-07-23 15:53:47] [1075 prunsrv.c] [debug] Inside ServiceMain... [2009-07-23 15:53:48] [info] Starting service... [2009-07-23 15:53:48] [399

Re: Trouble setting up virtual host

2009-07-23 Thread Lisa D Beggs/AC/VCU
Allright, let's continue step by step, based on the above. Q5: a) Open a Windows command window. b) Type nslookup adm138 The last line of the response is an IP address. What is it ? 128.172.12.129 (which is IP of ADM138) c) Type nslookup www.fmdreports.vcu.edu The last line of the response

Re: Trouble setting up virtual host

2009-07-23 Thread André Warnier
Lisa D Beggs/AC/VCU wrote: Allright, let's continue step by step, based on the above. Q5: a) Open a Windows command window. b) Type nslookup adm138 The last line of the response is an IP address. What is it ? 128.172.12.129 (which is IP of ADM138) c) Type nslookup www.fmdreports.vcu.edu

Re: Trouble setting up virtual host

2009-07-23 Thread Lisa D Beggs/AC/VCU
another note.now that I have changed port from 8080 to 80, How exactly did you do this ? I changed the configuration in the server.xml file based on guidance from my vendor. I cannot see my default URL (http://adm138/InfoViewApp) either on user workstation (not sure if same or

Re: XSS vulnerability in Tomcat Host Header

2009-07-23 Thread David Fisher
On Jul 23, 2009, at 4:00 AM, Mark Thomas wrote: Konstantin Kolinko wrote: 2009/7/22 Rémy Maucherat remy.mauche...@gmail.com: On Wed, Jul 22, 2009 at 2:37 PM, Mark Thomasma...@apache.org wrote: You'll need to provide more details. Nothing stands out from the security pages. Please provide

RE: Logging servlet time and connections

2009-07-23 Thread Caldarale, Charles R
From: cr...@thetimmermans.net [mailto:cr...@thetimmermans.net] Subject: Logging servlet time and connections I need to log incoming connections to tomcat What you really need to do is tell us the version of Tomcat you're using. Since you didn't, this response pertains to the current

RE: Trouble setting up virtual host

2009-07-23 Thread Caldarale, Charles R
From: Lisa D Beggs/AC/VCU [mailto:ldbe...@vcu.edu] Subject: Re: Trouble setting up virtual host another note.now that I have changed port from 8080 to 80, How exactly did you do this ? I changed the configuration in the server.xml file based on guidance from my vendor. Please learn

RE: Logging servlet time and connections

2009-07-23 Thread craig
Sorry, the Tomcat version is 5.5. See below... Quoting Caldarale, Charles R chuck.caldar...@unisys.com: From: cr...@thetimmermans.net [mailto:cr...@thetimmermans.net] Subject: Logging servlet time and connections I need to log incoming connections to tomcat What you really need to do is

Re: missing content-length header for HEAD request in mod_jk 1.2.28 with tomcat 6.0.18

2009-07-23 Thread Sameer Naik
Operating system is Linux 2.4.21-32.0.1.ELsmp #1 SMP Tue May 17 17:52:23 EDT 2005 i686 athlon i386 GNU/Linux - Original Message From: Sameer Naik samee...@yahoo.com To: users@tomcat.apache.org Sent: Wednesday, July 22, 2009 9:39:03 PM Subject: missing content-length header for HEAD

Re: Tomcat6 CentOS runlevel startup issue

2009-07-23 Thread Peter Lokus
Hi Mark, jsvc, of course! Unfortunately it was not in my mind at my first attempt. I have altered my init script and added jsvc. Now tomcat starts at boot time properly. Thanks for your suggestion. Mark Shifman schrieb: You need to add lines like this to the init script.

Re: Digested passwords stored in tomcat-users.xml by admin application?

2009-07-23 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kurt, On 7/22/2009 6:17 PM, Kurt Heberlein wrote: Thanks Chuck - Sorry - yes v5.5, and i am referring to the admin webapp that came with it. I have to allow for end-users that don't want to use LDAP, nor another DB (I know it is stupid). So

request.getPathInfo() gets truncated when ; is present

2009-07-23 Thread Peter J. Farrell
I'm trying to figure out a particular strange problem with request.getPathInfo() data being truncated. This has to do with SES / Friendly URLs in which data is append on the path info part of the request URI. On the framework project I work on, we've seen developers put data into SES URL --

RE: Logging servlet time and connections

2009-07-23 Thread Caldarale, Charles R
From: cr...@thetimmermans.net [mailto:cr...@thetimmermans.net] Subject: RE: Logging servlet time and connections It could be user sessions if thats whats available. You can implement an HttpSessionListener to track sessions coming and going within a webapp. See the servlet spec for

Re: Logging servlet time and connections

2009-07-23 Thread Jess Holle
Beware of acceptCount. If you use this with the AJP connector and don't enable the native connector, then you won't get what you expect -- and last I checked the documentation gave no warning of this. In this scenario once you exceed maxThread minus 2 simultaneous connections (there's a

RE: request.getPathInfo() gets truncated when ; is present

2009-07-23 Thread Caldarale, Charles R
From: Peter J. Farrell [mailto:pe...@mach-ii.com] Subject: request.getPathInfo() gets truncated when ; is present I'm trying to figure out a particular strange problem with request.getPathInfo() data being truncated. It's unfortunate that the mailing list doesn't have a filter that

RE: Logging servlet time and connections

2009-07-23 Thread Caldarale, Charles R
From: Jess Holle [mailto:je...@ptc.com] Subject: Re: Logging servlet time and connections In this scenario once you exceed maxThread minus 2 simultaneous connections (there's a clear off by 2 error here somewhere) any additional simultaneous connections go into some sort of weird limbo,

Re: Trouble setting up virtual host

2009-07-23 Thread André Warnier
Lisa, I am doing my best to help, but you are not making it easy. You get one more try, cause I'm a good guy (unlike Chuck). See below. And do leave some space between questions and answers, it's just much easier to read. Lisa D Beggs/AC/VCU wrote: another note.now that I have changed

Re: request.getPathInfo() gets truncated when ; is present

2009-07-23 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Peter, On 7/23/2009 3:41 PM, Peter J. Farrell wrote: /index.cfm/somePathInfoamp;withMoreInfo/ Shouldn't that be /index.cfm/somePathInfoamp%3BwithMoreInfo/ ? If you try the above URL, does it work? java.net.URLEncoder will encode ; as %3B. See

Re: providing downloading functionality for a file which is on disk

2009-07-23 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Lanxiazhi, On 7/21/2009 7:52 AM, lanxiazhi wrote: I don't have a linux at hand to prove this idea: if you're deploy your app in linux ,maybe you can use a soft link to that directory ,and put the link under your webapp's dir. hope that will help.

Re: request.getPathInfo() gets truncated when ; is present

2009-07-23 Thread André Warnier
Caldarale, Charles R wrote: From: Peter J. Farrell [mailto:pe...@mach-ii.com] Subject: request.getPathInfo() gets truncated when ; is present I'm trying to figure out a particular strange problem with request.getPathInfo() data being truncated. It's unfortunate that the mailing list doesn't

Re: what is the upper limit of maximum heap memory for Tomcat with 32-bit JVM running on Red Hat Linux 4 (32-bit)

2009-07-23 Thread Alan Chaney
2. Your other 'workaround' is to install a 64 bit OS and a 64 bit JVM. Then you can have 7G+ for the JVM. Actually, to be totally clear, you can have pretty much as much memory as you have physical ram in the machine. In your case that's 7G+ For more info on the 64bit JVM see

RE: what is the upper limit of maximum heap memory for Tomcat with 32-bit JVM running on Red Hat Linux 4 (32-bit)

2009-07-23 Thread Li,Henry
Thank you Alan for your help. I use top to get the 4G free memory: Mem: 8309064k total, 3426680k used, 4882384k free, 163308k buffers. Your are right, my 4 processors mean 4 cores (2 dual-core processors) I think I will take your workaround #2. Regards, Henry -Original Message-

RE: what is the upper limit of maximum heap memory for Tomcat with 32-bit JVM running on Red Hat Linux 4 (32-bit)

2009-07-23 Thread Caldarale, Charles R
From: Alan Chaney [mailto:a...@compulsivecreative.com] Subject: Re: what is the upper limit of maximum heap memory for Tomcat with 32-bit JVM running on Red Hat Linux 4 (32-bit) You are using a 32 bit operating system and a 32 bit processor. To make more than 4GB of ram available you must

Re: what is the upper limit of maximum heap memory for Tomcat with 32-bit JVM running on Red Hat Linux 4 (32-bit)

2009-07-23 Thread Alan Chaney
You are using a 32 bit operating system and a 32 bit processor. To make more than 4GB of ram available you must ensure that you have PAE support enabled in your kernel (search Google for Physical Address Extension) which may mean re-compiling for RHEL 4 (see Red Hat). Your processor may not

what is the upper limit of maximum heap memory for Tomcat with 32-bit JVM running on Red Hat Linux 4 (32-bit)

2009-07-23 Thread Li,Henry
My Tomcat is running on 32-bit Red Hat 4 (2.6.9-78.0.1.ELsmp), host server has 8G physical memory and 4 processors. java version 1.4.2 gcj (GCC) 3.4.6 20060404 (Red Hat 3.4.6-10) I got java.lang.OutOfMemoryError Current configuration: -Xms1024M -Xmx2304M The host server has about 4.5G free

RE: what is the upper limit of maximum heap memory for Tomcat with 32-bit JVM running on Red Hat Linux 4 (32-bit)

2009-07-23 Thread Caldarale, Charles R
From: Alan Chaney [mailto:a...@compulsivecreative.com] Subject: Re: what is the upper limit of maximum heap memory for Tomcat with 32-bit JVM running on Red Hat Linux 4 (32-bit) Actually, to be totally clear, you can have pretty much as much memory as you have physical ram in the machine.

RE: what is the upper limit of maximum heap memory for Tomcat with32-bit JVM running on Red Hat Linux 4 (32-bit)

2009-07-23 Thread Caldarale, Charles R
From: Li,Henry [mailto:henr...@mdanderson.org] Subject: what is the upper limit of maximum heap memory for Tomcat with32-bit JVM running on Red Hat Linux 4 (32-bit) My Tomcat is running on 32-bit Red Hat 4 (2.6.9-78.0.1.ELsmp), host server has 8G physical memory and 4 processors. The

Re: Seeking the right solution to java.lang.ClassNotFoundException: com.mysql.jdbc.Driver

2009-07-23 Thread Bob Marcum
Whahoo! Following its_toasted's recipes I have successfully implemented, successively, both Tomcat managed Database pooling and Hibernate Managed Database pooling. I did have a couple of issues to fix when implementing Hibernate managed pooling: 1) Order of entries into the xml. I first

RE: what is the upper limit of maximum heap memory for Tomcat with 32-bit JVM running on Red Hat Linux 4 (32-bit)

2009-07-23 Thread Anthony J. Biacco
I would do option 2 also if I were him. I doubt his cpus are 32-bit though. I'm betting any dual core out there is 64-bit, though I wouldn't bet the farm on it. We use the 64-bit jvm on dual-core xeons without any problem (rhel5). -Tony Sent from my Windows Mobile® phone. -Original

RE: what is the upper limit of maximum heap memory for Tomcat with 32-bit JVM running on Red Hat Linux 4 (32-bit)

2009-07-23 Thread Li,Henry
Thank you Chuck! I will go to the 64-bit. Regards, Henry -Original Message- From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] Sent: Thursday, July 23, 2009 7:19 PM To: Tomcat Users List Subject: RE: what is the upper limit of maximum heap memory for Tomcat with 32-bit JVM

Re: request.getPathInfo() gets truncated when ; is present

2009-07-23 Thread Bill Barker
Christopher Schultz ch...@christopherschultz.net wrote in message news:4a68cd5b.2090...@christopherschultz.net... -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Peter, On 7/23/2009 3:41 PM, Peter J. Farrell wrote: /index.cfm/somePathInfoamp;withMoreInfo/ Shouldn't that be