Some problem of analyzing the tomcat logs

2010-09-16 Thread yang Yang
Hi: I am trying to develop a web based tool to track page hit counts, user session activity and etc of our own sites. I meet some problems: 1) How to distinguish a request target is a page or a resource? For example,the following two logs(remove some parts): #1-> [17/Sep/2010:11:38:26 +0800] "P

RE: jsvc crashing in Tomcat 6.0.26 on Linux(RHES 5.5/2.6.18) 64Bit/AMD

2010-09-16 Thread marc_swingler
The application is pure java, (including JDBC drivers). The JVM could be crashing, but I haven't seen one of those JVM dump files sitting around. In anycase the application is fixed for now (hibernate issue). But next time I'll try out a more recent patch of the JVM and see if it helps. n828cl w

Unix domain socket support for AJP connector?

2010-09-16 Thread David Dabbs
Hi. I've looked about (obviously in the wrong places if it exists) for whether or not the AJP APR connector supports listening on a Unix domain socket. Specifically, I'd like to connect this way using mod_proxy_ajp. This begs another question. Which of the following are the highest-performing way

Tomcat start error java.lang.reflect.InvocationTargetException

2010-09-16 Thread hellian
Hello I'm having a strange error while starting my Tomcat from Eclipse. It's throwing the following exception: java.lang.reflect.InvocationTargetException at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAcc

Re: Host Manager.

2010-09-16 Thread Wesley Acheson
Okay thats good feedback a lot more work though. On Fri, Sep 17, 2010 at 12:01 AM, André Warnier wrote: > Wesley Acheson wrote: >> >> The way I've implemented this it does all the normal work of adding >> the host to the container before trying to persist the file. >> >> Now there are a lot of th

Re: Host Manager.

2010-09-16 Thread André Warnier
Wesley Acheson wrote: The way I've implemented this it does all the normal work of adding the host to the container before trying to persist the file. Now there are a lot of things that can go wrong when trying to write to a filesystem. Maybe the user doesn't have permission to update the file.

Re: JSP:includes parameter passing vulnerability

2010-09-16 Thread Michael Coates
Chris, Thanks for looking into this situation. I agree with your ultimate conclusion of user/developer education. There is a strong push within security education programs to always treat user controlled data as dangerous until validated/encoded. We just need to remember in JSPs that anytime the

RE: jsvc crashing in Tomcat 6.0.26 on Linux(RHES 5.5/2.6.18) 64Bit/AMD

2010-09-16 Thread Caldarale, Charles R
> From: marc_swingler [mailto:marc.swing...@gmail.com] > Subject: jsvc crashing in Tomcat 6.0.26 on Linux(RHES 5.5/2.6.18) 64Bit/AMD > Syslog has errors like this one: > kernel: jsvc[24900]: segfault at 406e6ec8 rip 2e521f30 > rsp 406e6ec0 error 6 > jsvc itself is crashin

jsvc crashing in Tomcat 6.0.26 on Linux(RHES 5.5/2.6.18) 64Bit/AMD

2010-09-16 Thread marc_swingler
Getting a segfault in my syslogs for jsvc running Tomcat 6.0.26 Syslog has errors like this one: kernel: jsvc[24900]: segfault at 406e6ec8 rip 2e521f30 rsp 406e6ec0 error 6 A repeatable error or exception in our application triggers the segfault like clockwork. If an appl

Re: Host Manager.

2010-09-16 Thread Wesley Acheson
The way I've implemented this it does all the normal work of adding the host to the container before trying to persist the file. Now there are a lot of things that can go wrong when trying to write to a filesystem. Maybe the user doesn't have permission to update the file. Maybe the existing file

Re: [OT] Tomcat on Linux

2010-09-16 Thread David kerber
On 9/16/2010 2:36 PM, André Warnier wrote: David kerber wrote: On 9/16/2010 12:57 PM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, On 9/16/2010 11:32 AM, André Warnier wrote: The load average is not particularly impressive however. One could almost suspect

Re: [OT] Tomcat on Linux

2010-09-16 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, On 9/16/2010 2:36 PM, André Warnier wrote: > I think that you deserve a handicap; for Windows servers, uptime counts > double. So you`re getting close to Christopher's. +1 - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (MingW3

Re: How to solve "To prevent a memory leak"

2010-09-16 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mark, On 9/16/2010 1:09 PM, Mark Eggers wrote: > As another person said, make sure you have a recently updated MySQL driver. I > believe > anything >= 5.1.11 solves a threading issue that was reported on their > (MySQL's) > bug > tracking database.

Re: Help Needed: Tomcat and ldap configuration for authentication

2010-09-16 Thread André Warnier
Manish Kashikar -X (mkashika - Zensar at Cisco) wrote: Hi Is it possible to configure tomcat and ldap for authentication purpose. Yes. Please can anyone give detail steps to configure. Yes. How much are you paying ? -

Re: [OT] Tomcat on Linux

2010-09-16 Thread André Warnier
David kerber wrote: On 9/16/2010 12:57 PM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, On 9/16/2010 11:32 AM, André Warnier wrote: The load average is not particularly impressive however. One could almost suspect that you keep this machine coddled away from

Re: JSP:includes parameter passing vulnerability

2010-09-16 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Michael, On 9/15/2010 6:33 PM, Michael Coates wrote: > On 9/15/10 2:46 PM, Christopher Schultz wrote: >> >> I think what you're really trying to say is "it's easy to overlook the >> fact that uses URL parameters to pass data, and that an >> include i

Re: JSP:includes parameter passing vulnerability

2010-09-16 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Martin, On 9/15/2010 6:21 PM, Martin Gainty wrote: > > Mike- > check to make sure your page="mycommon.jsp" > > > Not useful information: tags must be well-formed, and wouldn't even compile if the end tag or short-form of the tag weren't being

Re: [OT] session-timeout not taking effect

2010-09-16 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, On 9/15/2010 7:44 PM, André Warnier wrote: > Debbie Shapiro wrote: >> Exactly. We have to follow FDA guidelines for validation of OTS >> software and our validation expert is testing for this now. We want to >> make sure that security is in pla

Re: Help Needed: Tomcat and ldap configuration for authentication

2010-09-16 Thread Mark Thomas
On 16/09/2010 18:40, Manish Kashikar -X (mkashika - Zensar at Cisco) wrote: > Hi > > Is it possible to configure tomcat and ldap for authentication purpose. > Please can anyone give detail steps to configure. I was seriously tempted to reply "Yes. Yes." Try reading the Tomcat documentation and t

RE: Help Needed: Tomcat and ldap configuration for authentication

2010-09-16 Thread Caldarale, Charles R
> From: Manish Kashikar -X (mkashika - Zensar at Cisco) > [mailto:mkash...@cisco.com] > Subject: Help Needed: Tomcat and ldap configuration for authentication > Is it possible to configure tomcat and ldap for authentication > purpose. Please can anyone give detail steps to configure. Read th

RE: [OT] Tomcat on Linux

2010-09-16 Thread Caldarale, Charles R
> From: Christopher Schultz [mailto:ch...@christopherschultz.net] > Subject: Re: [OT] Tomcat on Linux > > It looks to me like the memory just gets fragmented and > > eventually things fail. > I'm not sure what you mean by "fragmentation"... the JVM > does a pretty good job of managing memory a

Re: OutOfMemoryError: PermGen space!!!! Dont know why?

2010-09-16 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 abhi, On 9/16/2010 3:21 AM, abhishek jain wrote: > hi > ps axf --cols 1000 | grep java returns > > 29807 pts/2S+ 0:00 \_ grep java > 19511 ?Ss 0:00 jsvc.exec -user tomcat -cp ./bootstrap.jar > -Djava.endorsed.dirs=../comm

Help Needed: Tomcat and ldap configuration for authentication

2010-09-16 Thread Manish Kashikar -X (mkashika - Zensar at Cisco)
Hi Is it possible to configure tomcat and ldap for authentication purpose. Please can anyone give detail steps to configure. Thanks Manish K

New blog post on Tomcat 7 & JMX

2010-09-16 Thread Mark Thomas
https://blogs.apache.org/tomcat/entry/tomcat_7_trunk_and_jmx If folks are interested in this but need help with building Tomcat 7 from source just ask on this list. Mark - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.

Re: How to solve "To prevent a memory leak"

2010-09-16 Thread Mark Eggers
See the following Wiki article on how to use Hibernate and Tomcat's pooling. http://wiki.apache.org/tomcat/TomcatHibernate As another person said, make sure you have a recently updated MySQL driver. I believe anything >= 5.1.11 solves a threading issue that was reported on their (MySQL's) bug

Re: [OT] Tomcat on Linux

2010-09-16 Thread David kerber
On 9/16/2010 12:57 PM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, On 9/16/2010 11:32 AM, André Warnier wrote: The load average is not particularly impressive however. One could almost suspect that you keep this machine coddled away from any real network, ju

Re: [OT] Tomcat on Linux

2010-09-16 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, On 9/16/2010 11:32 AM, André Warnier wrote: > The load average is not particularly impressive however. One could > almost suspect that you keep this machine coddled away from any real > network, just for the purpose of boasting about its uptime

Re: [OT] Tomcat on Linux

2010-09-16 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 George, On 9/16/2010 12:12 PM, George Sexton wrote: > I don't think my webapp is leaky. Things like file handles, db > connections, all stay pretty constant. That's good to know. > I do have undeploy/re-deploy's of virtual hosts periodically. Maybe

Re: [OT] Tomcat on Linux

2010-09-16 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Nicholas, On 9/16/2010 11:48 AM, Nicholas Sushkin wrote: > On Thursday, September 16, 2010 11:14:27 Christopher Schultz wrote: >> >> Actually, we do a full JVM shutdown and restart whenever we do >> deployments. This happens every 6 months or so, so I

RE: [OT] Tomcat on Linux

2010-09-16 Thread George Sexton
> -Original Message- > From: Christopher Schultz [mailto:ch...@christopherschultz.net] > Sent: Thursday, September 16, 2010 9:16 AM > To: Tomcat Users List > Subject: Re: [OT] Tomcat on Linux > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > George, > > On 9/15/2010 7:26 PM, Georg

Re: Adding Transfer Encoding header if not present

2010-09-16 Thread André Warnier
Amit, The Transfer-Encoding header is not one which you can just add to a request, and expect it to work. You should consult the HTTP RFC 2616, to find out what it really means. In particular, a value of "chunked" 1) only makes sense if the request has a body (which is not the case for a GET

Re: How to solve "To prevent a memory leak"

2010-09-16 Thread Alex
It seem that moving the MySql driver to $tomcat/lib solves the problem with the jdbc connection, buut the problem with quartz still exists. I'm using tomcat 6.0.29 I wrote a listener : public class ServletContextAttribListener implements ServletContextListener, ServletContextAttributeListener

Re: [OT] Tomcat on Linux

2010-09-16 Thread André Warnier
Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ognjen, On 9/16/2010 9:30 AM, Ognjen Blagojevic wrote: On 15.9.2010 22:08, Tommy Pham wrote: I was wondering what flavor(s) of Linux, if applicable, do you use to develop? And what Linux flavor(s) do you have Tomcat runn

Re: [OT] Tomcat on Linux

2010-09-16 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ognjen, On 9/16/2010 9:30 AM, Ognjen Blagojevic wrote: > On 15.9.2010 22:08, Tommy Pham wrote: >> I was wondering what flavor(s) of Linux, if applicable, do you use to >> develop? And what Linux flavor(s) do you have Tomcat running >> production on? >

Re: [OT] Tomcat on Linux

2010-09-16 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 George, On 9/15/2010 7:26 PM, George Sexton wrote: > My servers stay up for months at a time. Most of my production > servers have been up for more than six months. I do have to re-start > tomcat every couple of weeks or so. Why do you have to restar

Re: Adding Transfer Encoding header if not present

2010-09-16 Thread Amit Puri
Hi Thanks a lot Mark and Andre for your replies. As per my requirement I want to add Transfer-Encoding in the client request header and send request to servlet for priniting the headers there. For one way, I am doing with Apache http server using mod_jk with mod_headers RequestHeader append Tra

Re: How to solve "To prevent a memory leak"

2010-09-16 Thread Ognjen Blagojevic
On 16.9.2010 16:04, Alex wrote: The MySql driver is in $TOMCAT/webapps/xxx/lib. I using Hibernate as OMR Mapper with Spring 3.0, here my hibernateApllicationContext.xml (partial) Check with c3p0 documentation how to unregister driver, or see link I provided earlier. How can I search the Se

Re: How to solve "To prevent a memory leak"

2010-09-16 Thread Wesley Acheson
I know there was a issue in older versions of tomcat that didn't release the mysql driver even if the driver wasn't referenced. What version are you runnning? Wes - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For

Re: HtttServletRequest.getSession()

2010-09-16 Thread Mark Thomas
On 16/09/2010 14:46, Joseph Morgan wrote: > Mark... on that thought, Java 1.5+ has the java.net.CookieHandler class... is > there a way to insert a CookieHandler into Tomcat??? Not without writing some custom code to replace some of Tomcat's internals. Mark -

Re: HtttServletRequest.getSession()

2010-09-16 Thread André Warnier
Brian McBride wrote: On 14/09/2010 23:17, André Warnier wrote: [...] Personal interpretation : if the browser receives a cookie marked "secure", it should only send it back with requests happening over an HTTPS connection. (No matter if it was received over HTTP or HTTPS). I'm using httpunit

[ANN] Apache Tomcat 5.5.31 released

2010-09-16 Thread Jim Jagielski
The Apache Tomcat Team announces the immediate availability of Apache Tomcat 5.5.31 stable. Apache Tomcat 5.5.31 is primarily a security and bug fix release. All users of older versions of the Tomcat 5.5 family should upgrade to 5.5.31. Please refer to the change log for the list of changes: htt

Re: How to solve "To prevent a memory leak"

2010-09-16 Thread Alex
Thank for your response! The MySql driver is in $TOMCAT/webapps/xxx/lib. I using Hibernate as OMR Mapper with Spring 3.0, here my hibernateApllicationContext.xml (partial) destroy-method="close"> How can I search the ServletContext for specific objects? Alex Am 2010-09-16 15

RE: HtttServletRequest.getSession()

2010-09-16 Thread Joseph Morgan
Mark... on that thought, Java 1.5+ has the java.net.CookieHandler class... is there a way to insert a CookieHandler into Tomcat??? -Original Message- From: Mark Thomas [mailto:ma...@apache.org] Sent: Thursday, September 16, 2010 8:26 AM To: Tomcat Users List Subject: Re: HtttServletReque

Re: How to solve "To prevent a memory leak"

2010-09-16 Thread Ognjen Blagojevic
On 16.9.2010 15:32, Alex wrote: I run an web application which uses spring, hibernate, apache-cxf and the quartz scheduler which is referenced by spring. The webapp work as it should, but on shutdown or restart the apache tomcat server I always get following output. The webapp is not stopped an

RE: How to solve "To prevent a memory leak"

2010-09-16 Thread Caldarale, Charles R
> From: Alex [mailto:devns...@gmail.com] > Subject: How to solve "To prevent a memory leak" > The webapp work as it should, but on shutdown or restart the apache > tomcat server I always get following output. > The webapp is not stopped and I have to kill the process manually. > How can I solv

How to solve "To prevent a memory leak"

2010-09-16 Thread Alex
Hi, I run an web application which uses spring, hibernate, apache-cxf and the quartz scheduler which is referenced by spring. The webapp work as it should, but on shutdown or restart the apache tomcat server I always get following output. The webapp is not stopped and I have to kill the pr

Re: [OT] Tomcat on Linux

2010-09-16 Thread Ognjen Blagojevic
On 15.9.2010 22:08, Tommy Pham wrote: I was wondering what flavor(s) of Linux, if applicable, do you use to develop? And what Linux flavor(s) do you have Tomcat running production on? We use latest CentOS Linux. [r...@server ~]# uptime 15:27:31 up 65 days, 22:54, 1 user, load average: 0.06,

Re: [OT] Tomcat on Linux

2010-09-16 Thread Nicholas Sushkin
On Wednesday, September 15, 2010 17:20:58 Christopher Schultz wrote: > We've had servers (dev/demo/production) that don't require reboots > for years: usually just for a rare kernel upgrade. > NB: Tomcat stays up as long as the machine does, too :) You don't redeploy applications? -- Nicholas S

Re: HtttServletRequest.getSession()

2010-09-16 Thread Mark Thomas
On 16/09/2010 13:49, Brian McBride wrote: > Is there a way to persuade Tomcat to use Set-Cookie2 headers? Not though the Servlet API. The servlet spec references v0 and v1 cookies but not the v2 spec. Given the IE doesn't even fully implement the v1 cookie spec, I would estimate the chances of it

Re: HtttServletRequest.getSession()

2010-09-16 Thread Brian McBride
On 14/09/2010 23:17, André Warnier wrote: [...] Personal interpretation : if the browser receives a cookie marked "secure", it should only send it back with requests happening over an HTTPS connection. (No matter if it was received over HTTP or HTTPS). I'm using httpunit for testing. I obser

Re: Adding Transfer Encoding header if not present

2010-09-16 Thread Mark Thomas
On 16/09/2010 00:15, André Warnier wrote: > Did I totally misread the above, or is the OP talking about request > headers, as received by the server from a client request ? > In that case, I would think that if the servlet does not see a > Transfer-Encoding header, it is because the client request

Re: OutOfMemoryError: PermGen space!!!! Dont know why?

2010-09-16 Thread André Warnier
abhishek jain wrote: hi ps axf --cols 1000 | grep java returns 29807 pts/2S+ 0:00 \_ grep java 19511 ?Ss 0:00 jsvc.exec -user tomcat -cp ./bootstrap.jar -Djava.endorsed.dirs=../common/endorsed -outfile ../logs/catalina.out -errfile ../logs/catalina.err -verbose org.a

Re: OutOfMemoryError: PermGen space!!!! Dont know why?

2010-09-16 Thread abhishek jain
hi ps axf --cols 1000 | grep java returns 29807 pts/2S+ 0:00 \_ grep java 19511 ?Ss 0:00 jsvc.exec -user tomcat -cp ./bootstrap.jar -Djava.endorsed.dirs=../common/endorsed -outfile ../logs/catalina.out -errfile ../logs/catalina.err -verbose org.apache.catalina.startup.