RE: Class get deleted at run time

2010-11-30 Thread Caldarale, Charles R
> From: Sandip Hirwale [mailto:sandip.hirw...@sukrutsystems.com] > Subject: Re: Class get deleted at run time > i am deploying application on my local machine just by right click on > application and run. That is not "deployment" in any sense of the term. You really, really need to read some d

Re: Class get deleted at run time

2010-11-30 Thread Sandip Hirwale
All the Classes are Deleted which are in my application . there is no any subdirectories i am deploying application on my local machine just by right click on application and run. On Wed, Dec 1, 2010 at 2:24 AM, Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED

Re: (Tomcat) Does NIO connector make a difference outside of 'Comet' ?

2010-11-30 Thread Michael Ludwig
Caldarale, Charles R schrieb am 29.11.2010 um 22:47 (-0600): > > From: Michael Ludwig [mailto:mil...@gmx.de] > > > can we say that: > > > (a) blocking IO requires one thread (or, in some other > > server environments, one process) per socket > > Well, sort of. The actual requirement is one thr

Re: Tomcat SSL godaddy

2010-11-30 Thread Nathaniel Thalluri
Chris, > You mean the root CA stuff? Your default Java cacerts should probably > already contain them. If not... I mean the all the certificates listed in the second option in godaddy documentation. They list 4 certs. They are all included in a zip file which is available for download once the CS

Re: allow user to start / stop webapps but not to deploy

2010-11-30 Thread Konstantin Kolinko
2010/11/30 : > We are running Tomcat 6.0.29 on a Windows server. > I would like a specific user to be able to stop and start their own webapp. > But I dont want them to be able to deploy themselves and this has to go > through a tight change process. > > Doe anyone have any ideas how to do this. >

Re: allow user to start / stop webapps but not to deploy

2010-11-30 Thread Pid
On 11/30/10 9:22 PM, Christopher Schultz wrote: > Pid, > > On 11/30/2010 1:12 PM, Pid * wrote: >> You could provide a custom API which interacts with JMX to do this. > > I thought more nuanced roles had recently been added to the manager app, > but I can't find any configuration file comments to

Re: SSL Renegotiation

2010-11-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Konstantin, On 11/30/2010 4:20 PM, Konstantin Kolinko wrote: > 2010/12/1 Christopher Schultz : >> On 11/20/2010 5:04 PM, Pid wrote: >>> >>> http://www.oracle.com/technetwork/java/javase/documentation/tlsreadme2-176330.html >> >> Interesting that Ora

Re: New jsvc (commons-daemon-native); catalina.out is owned by root - WTF?

2010-11-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gregor, On 11/30/2010 4:18 PM, Gregor Schneider wrote: > Mladen, > >> Believe it or not, this is intentional and correct behavior. >> Almost any server behaves like that. > > thanks for sharing your views on this one, which I, however, do not share

Re: allow user to start / stop webapps but not to deploy

2010-11-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Pid, On 11/30/2010 1:12 PM, Pid * wrote: > You could provide a custom API which interacts with JMX to do this. I thought more nuanced roles had recently been added to the manager app, but I can't find any configuration file comments to confirm that.

Re: SSL Renegotiation

2010-11-30 Thread Konstantin Kolinko
2010/12/1 Christopher Schultz : > On 11/20/2010 5:04 PM, Pid wrote: >>  http://www.oracle.com/technetwork/java/javase/documentation/tlsreadme2-176330.html > > Interesting that Oracle chose to patch Java 1.5 and 1.4, which have both > reached EOL. > > Oracle gets a point for pragmatism and security.

Re: New jsvc (commons-daemon-native); catalina.out is owned by root - WTF?

2010-11-30 Thread Gregor Schneider
Mladen, Believe it or not, this is intentional and correct behavior. Almost any server behaves like that. thanks for sharing your views on this one, which I, however, do not share at all besides, no server behaves like you're stating: if an application is started in a non-root-context and prod

Re: Session Invalidate not working on HTTPS ( Tomcat 6.0.29 )

2010-11-30 Thread Konstantin Kolinko
2010/12/1 Christopher Schultz : > Konstantin, can you confirm that behavior is different if you are using > single sign-on? > The single sign on is a separate cookie with its own life. The sessions live independently and have their own IDs. See o.a.c.authenticator.SingleSignOn Best regards, Kons

Re: SSL Renegotiation

2010-11-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Pid, On 11/20/2010 5:04 PM, Pid wrote: > > http://www.oracle.com/technetwork/java/javase/documentation/tlsreadme2-176330.html Interesting that Oracle chose to patch Java 1.5 and 1.4, which have both reached EOL. Oracle gets a point for pragmatism

Re: Tomcat SSL godaddy

2010-11-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Nathaniel, On 11/30/2010 3:00 PM, Nathaniel Thalluri wrote: > Then downloaded the certificate bundle that > godaddy provides. You mean the root CA stuff? Your default Java cacerts should probably already contain them. If not... > Imported the certs

Re: Session Invalidate not working on HTTPS ( Tomcat 6.0.29 )

2010-11-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Konstantin, On 11/30/2010 10:03 AM, Konstantin Kolinko wrote: > That will mean that every web application will use its unique value of > sessionid. Thus you can never share sessionid between them. So it's a feature, not a bug :) Andrea, if the webap

Re: Class get deleted at run time

2010-11-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sandip, On 11/30/2010 12:50 AM, Sandip Hirwale wrote: > I [experience the] following error at runtime > > java.lang.ClassNotFoundException Which class? What is the rest of the stack trace? > when I Build my application all the > classes are presen

Re: New jsvc (commons-daemon-native); catalina.out is owned by root - WTF?

2010-11-30 Thread Konstantin Kolinko
2010/11/30 Gregor Schneider : > Well, in the old version, there was the archive "tomcat-native.tar.gz" > containing the sources for the native wrapper. The above one is tomcat-native, aka Tomcat-Apr, a library that provides code for Http11AprProtocol and AjpAprProtocol connectors. http://tomcat.

Tomcat SSL godaddy

2010-11-30 Thread Nathaniel Thalluri
I am having the following issue with SSL and I am not sure where the issue lies. This is the background. I used java's keytool.exe to create a size 2048 private key keystore and then created a CSR from it. This CSR was submitted to godaddy. Then downloaded the certificate bundle that godaddy provi

Re: Windows Service Uninstall (was: Re: Problems installing Tomcat on Windows 2008)

2010-11-30 Thread Mark Eggers
Possibly Sysinternals? http://technet.microsoft.com/en-us/sysinternals/default.aspx See the Handle utility. Caveat - I'm not a Windows expert (or person). /mde/ - Original Message From: Thomas To: users@tomcat.apache.org Sent: Tue, November 30, 2010 9:27:13 AM Subject: Windows Servi

Re: New jsvc (commons-daemon-native); catalina.out is owned by root - WTF?

2010-11-30 Thread Mladen Turk
On 11/30/2010 07:31 PM, Gregor Schneider wrote: Hi guys, What's really puzzling me, is, that since we upgraded Tomcat, catalina.out is not owned by the user specified in $TOMCAT_USER any more but is owned by root. Believe it or not, this is intentional and correct behavior. Almost any server

New jsvc (commons-daemon-native); catalina.out is owned by root - WTF?

2010-11-30 Thread Gregor Schneider
Hi guys, we had some issues due to a memory-leak here and used this opportunity to upgrade our Tomcat from 5.5.20 to 5.5.31. Here's our current environment: tom...@www2:~/local/tomcat55/bin$ ./version.sh Using CATALINA_BASE: /home/tomcat/local/tomcat55 Using CATALINA_HOME: /home/tomcat/local

Re: allow user to start / stop webapps but not to deploy

2010-11-30 Thread Pid *
You could provide a custom API which interacts with JMX to do this. p On 30 Nov 2010, at 17:19, "terry.mcbr...@aero.bombardier.com" wrote: > > > Hi there > > We are running Tomcat 6.0.29 on a Windows server. > I would like a specific user to be able to stop and start their own webapp. > But I

Windows Service Uninstall (was: Re: Problems installing Tomcat on Windows 2008)

2010-11-30 Thread Thomas
Hallo Konstantin, On 11/19/2010 06:14 PM, Konstantin Kolinko wrote: > b) You cannot install the service twice with the same name. (The > second and later attempts will fail with the same generic message as > above). Try "service.bat remove" first. Verify that it is not listed > as a service (in th

allow user to start / stop webapps but not to deploy

2010-11-30 Thread terry . mcbride
Hi there We are running Tomcat 6.0.29 on a Windows server. I would like a specific user to be able to stop and start their own webapp. But I dont want them to be able to deploy themselves and this has to go through a tight change process. Doe anyone have any ideas how to do this. It is my under

Re: Problems running tomcat 6.0.24 on ubuntu server 10.4

2010-11-30 Thread André Warnier
Christian Röttger wrote: hello, i installed tomcat 6.0.24 from the repositorys on ubuntu server 10.04 with this installation guide: https://help.ubuntu.com/10.04/serverguide/C/tomcat.html i can access the index.html on myserver:8080 and can run the example servlets. i updated the |/etc/tomc

Re: Session replication with multicast

2010-11-30 Thread Guillaume HERAIL
Actually, it works without it, just forgot to add in my web.xml. 2010/11/29 Filip Hanik - Dev Lists : > alternatively, try to add > > -Djava.net.preferIPv4Stack=true > > to your JVM args > > On 11/26/2010 06:36 AM, Guillaume HERAIL wrote: >> >> Hi, >> >> OS : Debian lenny >> Tomcat : 7.0.2 >> JRE

Re: Session Invalidate not working on HTTPS ( Tomcat 6.0.29 )

2010-11-30 Thread Konstantin Kolinko
2010/11/30 Andrea Corti : > Hi, i discovered that (perhaps) the problem raise in the following rows in > the Request class: > >        // Attempt to reuse session id if one was submitted in a cookie >        // Do not reuse the session id if it is from a URL, to prevent > possible >        // phish

Re: Session Invalidate not working on HTTPS ( Tomcat 6.0.29 )

2010-11-30 Thread Andrea Corti
Hi, i discovered that (perhaps) the problem raise in the following rows in the Request class: // Attempt to reuse session id if one was submitted in a cookie // Do not reuse the session id if it is from a URL, to prevent possible // phishing attacks if (connector.ge

Re: Session Invalidate not working on HTTPS ( Tomcat 6.0.29 )

2010-11-30 Thread Konstantin Kolinko
2010/11/30 Andrea Corti : > Yes, I have emptySessionPath=true  in connectors; is this the issue? > In your logs, you have "sessionCreated" message, i.e. a session was created and thus the listener was notified, but the ID was reused. You can put a breakpoint in your listener to see where that com

Problems running tomcat 6.0.24 on ubuntu server 10.4

2010-11-30 Thread Christian Röttger
hello, i installed tomcat 6.0.24 from the repositorys on ubuntu server 10.04 with this installation guide: https://help.ubuntu.com/10.04/serverguide/C/tomcat.html i can access the index.html on myserver:8080 and can run the example servlets. i updated the |/etc/tomcat6/tomcat-users.xml |with

Re: Session Invalidate not working on HTTPS ( Tomcat 6.0.29 )

2010-11-30 Thread Andrea Corti
Yes, I have emptySessionPath=true in connectors; is this the issue? Thanks for the link, now i'm trying to debug in order to find some more details for you experts. Thanks. 2010/11/30 Konstantin Kolinko > >> > Follows an extract form a test servlet: > >> > HttpSession s = req.getSessi

Re: Session Invalidate not working on HTTPS ( Tomcat 6.0.29 )

2010-11-30 Thread Konstantin Kolinko
>> > Follows an extract form a test servlet: >> >         HttpSession s = req.getSession(); >> >         if (s==null) { >> >             System.out.println(mt+":Session is null"); >> >         } else { >> >             System.out.println(mt+":Session id="+s.getId()+"\t >> > New="+s.isNew()); >> >  

Re: Session Invalidate not working on HTTPS ( Tomcat 6.0.29 )

2010-11-30 Thread Andrea Corti
2010/11/29 Christopher Schultz > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Andrea, > > On 11/29/2010 9:37 AM, Andrea Corti wrote: > > In order to avoid session fixation in the login phase of our application > > we have to invalidate the session. > > As you may have noted, Tomcat has imp

Re: [Tomcat] Can I see if 'maxThreads' is exceeded?

2010-11-30 Thread Mark Thomas
On 29/11/2010 22:21, Sylvain Laurent wrote: > > On 29 nov. 2010, at 15:01, Mark Thomas wrote: > >> On 29/11/2010 13:57, sol myr wrote: >>> Hi, >>> >>> I'm new to Tomcat management, and would appreciate help on the 'maxThreads' >>> property of the Http Connector: >>> >>> 1) Please tell if I under