Re: How to get the tomcat internal log out?

2011-11-25 Thread Pid *
On 25 Nov 2011, at 03:15, 飞翔鸟 fxbird1...@163.com wrote:

 Hello :

Why tomcat 7? Are there some features which can make  classes updated 
 without restart tomcat?


   Thanks .

Please post your replies below the question.

5.5 is very old and will soon stop being supported. The latest release
is 7.0, new users should be using that.

p

 At 2011-11-24 00:04:06,Christopher Schultz ch...@christopherschultz.net 
 wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1

 Konstantin,

 On 11/21/11 7:00 AM, Konstantin Kolinko wrote:
 2011/11/21 Kurt fxbird1...@163.com:
 Hello all:

 I compile tomcat 5.5.30 and import it to eclipse as a project, to
 research how the tomcat load class , I need to view the running
 log ,after reading through this
 post(http://tomcat.apache.org/tomcat-5.5-doc/logging.html) and
 adding below log4j.properties to the direcotry 'common/classes'
 and log4j-1.26.jar to common/lib, logs turned out not to be
 generated when I debug the tomcat starting from class Catalina.
 No idea about it, I've tried many times.

 log4j.rootLogger=DEBUG,R
 log4j.appender.R=org.apache.log4j.RollingFileAppender
 log4j.appender.R.File=k:\\logs\\tomcat.log
 log4j.appender.R.MaxFileSize=10MB
 log4j.appender.R.MaxBackupIndex=10
 log4j.appender.R.layout=org.apache.log4j.PatternLayout
 log4j.appender.R.layout.ConversionPattern=%p%t%c-%m%n
 log4j.logger.org.apache.catalina.core.ContainerBase.[Catalina].[localhost]=DEBUG,


 R
 log4j.logger.org.apache.catalina.core=DEBUG, R
 log4j.logger.org.apache.catalina.session=DEBUG, R

 And the program parameter I use is 'start', vm parameter is
 '-Dcatalina.home=I:\My
 Documents\program\java\projects\eclipse\mye9.0\TOMCAT_5_5_30\mybuild-5.5.30'


 Any ideas? Thanks


 0. Is there a reason why the OP is trying to use Tomcat 5.5 instead of
 Tomcat 7?

 1. Is there a reason why you are trying to use log4j? That is not
 default configuration for Tomcat logging. The default one is JULI.
 (Though you have to remove log4.jar from Tomcat if you want JULI to
 work).

 - -chris

 -BEGIN PGP SIGNATURE-
 Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
 Comment: GPGTools - http://gpgtools.org
 Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

 iEYEARECAAYFAk7NGXYACgkQ9CaO5/Lv0PCN/ACgucGIyR8+8qLjAcejpyuDzxN6
 r+cAoJCeXdgeK5cEhUFyCfAybjll4XUy
 =734m
 -END PGP SIGNATURE-

 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: How to get the tomcat internal log out?

2011-11-25 Thread Kurt

Hello guy:
   Tc7 is good, but I've no choice cause our projects are designed to run  
on tc 5 or 6. The point is how to make the tomcat internal log out,  
whatever version it is.


   Nice day.
Kurt

在 Fri, 25 Nov 2011 16:29:32 +0800,Pid * p...@pidster.com 写道:


On 25 Nov 2011, at 03:15, 飞翔鸟 fxbird1...@163.com wrote:


Hello :

   Why tomcat 7? Are there some features which can make  classes  
updated without restart tomcat?



  Thanks .


Please post your replies below the question.

5.5 is very old and will soon stop being supported. The latest release
is 7.0, new users should be using that.

p

At 2011-11-24 00:04:06,Christopher Schultz  
ch...@christopherschultz.net wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Konstantin,

On 11/21/11 7:00 AM, Konstantin Kolinko wrote:

2011/11/21 Kurt fxbird1...@163.com:

Hello all:

I compile tomcat 5.5.30 and import it to eclipse as a project, to
research how the tomcat load class , I need to view the running
log ,after reading through this
post(http://tomcat.apache.org/tomcat-5.5-doc/logging.html) and
adding below log4j.properties to the direcotry 'common/classes'
and log4j-1.26.jar to common/lib, logs turned out not to be
generated when I debug the tomcat starting from class Catalina.
No idea about it, I've tried many times.

log4j.rootLogger=DEBUG,R
log4j.appender.R=org.apache.log4j.RollingFileAppender
log4j.appender.R.File=k:\\logs\\tomcat.log
log4j.appender.R.MaxFileSize=10MB
log4j.appender.R.MaxBackupIndex=10
log4j.appender.R.layout=org.apache.log4j.PatternLayout
log4j.appender.R.layout.ConversionPattern=%p%t%c-%m%n
log4j.logger.org.apache.catalina.core.ContainerBase.[Catalina].[localhost]=DEBUG,



R

log4j.logger.org.apache.catalina.core=DEBUG, R
log4j.logger.org.apache.catalina.session=DEBUG, R

And the program parameter I use is 'start', vm parameter is
'-Dcatalina.home=I:\My
Documents\program\java\projects\eclipse\mye9.0\TOMCAT_5_5_30\mybuild-5.5.30'



Any ideas? Thanks




0. Is there a reason why the OP is trying to use Tomcat 5.5 instead of
Tomcat 7?


1. Is there a reason why you are trying to use log4j? That is not
default configuration for Tomcat logging. The default one is JULI.
(Though you have to remove log4.jar from Tomcat if you want JULI to
work).


- -chris

-BEGIN PGP SIGNATURE-
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk7NGXYACgkQ9CaO5/Lv0PCN/ACgucGIyR8+8qLjAcejpyuDzxN6
r+cAoJCeXdgeK5cEhUFyCfAybjll4XUy
=734m
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org




--
使用 Opera 革命性的电子邮件客户程序: http://www.opera.com/mail/


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



RE: How to get the tomcat internal log out?

2011-11-25 Thread Caldarale, Charles R
 From: Kurt [mailto:fxbird1...@163.com] 
 Subject: Re: How to get the tomcat internal log out?

 our projects are designed to run on tc 5 or 6.

Then they should run on 7 just as well.

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.

 


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Mysterious request edirect with value exchange

2011-11-25 Thread Uwe . Hellmann
Hello together,

I recently ran into an issue which probably has nothing to do with tomcat. But 
because I don't know how to get rid of it
or what the cause for this issue is I want to make sure that I have taken all 
chances.

Just a short architecture overview.

We have a Loadbalancer which roundrobin addresses 2 Apache 2.2. which passes 
their requests via mod_proxy balancer to 2
tomcat 5.5.26 servers which are configured identical and have also clustering 
enabled. The application is located only on the tomcats.

So what we have is a redirected response from a failed login process.
As example we have an login mask and while tryinig to login we put the username 
Tester in the username inputfield
send the form away and get a login error message and the following URL string:
http://mytestsystem/login.action?login_error=1u=Tester
In the input field the value Tester is still set.

This result is as expected, but from time to time we saw the following URL 
string returned
http://mytestsystem/login.action?login_error=1u=OtherUser although we sent the 
form
with Tester as value away. But now in the input field it is also OtherUser set.

We have checked Loadbalancer rewrites(possible Proxywrites) and fount nothing. 
The behaviour seem to appear if we
have much load on these systems. Does anybody have any idea where I should 
start my investigation.
I would assume the application does have a problem with session handling or a 
corruptable redirection method but
the developer told us everything is fine.

Mit freundlichen Grüßen / Yours sincerely

Uwe Hellmann

T-Systems International GmbH
Production CSS
GCU Large Accounts
AC Express  Logistics LT1

Gradestr. 20, 30163 Hannover
+49 511 333 - 1233 (Tel.)
+49 511 333 - 1287 (Fax)
Email: uwe.hellm...@t-systems.commailto:uwe.hellm...@t-systems.com
Internet: http://www.t-systems.comhttp://www.t-systems.com/

T-Systems International GmbH
Aufsichtsrat: René Obermann (Vorsitzender)
Geschäftsführung: Reinhard Clemens (Vorsitzender), Dr. Ferri Abolhassan, Ulrich 
Meister, Georg Pepping, Hagen Rickmann, Dietmar Wendt, Klaus Werner
Handelsregister: Amtsgericht Frankfurt am Main HRB 55933
Sitz der Gesellschaft: Frankfurt am Main


Notice: This transmittal and/or attachments may be privileged or confidential. 
If you are not the intended recipient, you are hereby notified that you have 
received this transmittal in error; any review, dissemination, or copying is 
strictly prohibited. If you received this transmittal in error, please notify 
us immediately by reply and immediately delete this message and all its 
attachments. Thank you.




Re: How to get the tomcat internal log out?

2011-11-25 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1



On 11/25/11 3:37 AM, Caldarale, Charles R wrote:
 From: Kurt [mailto:fxbird1...@163.com] Subject: Re: How to get
 the tomcat internal log out?
 
 our projects are designed to run on tc 5 or 6.
 
 Then they should run on 7 just as well.

+1

Any webapp that runs on 5.5 that doesn't run on Tomcat 7 represents
either a regression in Tomcat or a webapp that has been tied-into
Tomcat's internal classes (which it shouldn't have been).

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk7Pmg0ACgkQ9CaO5/Lv0PBoXwCaAyb1zKy7BsHxP2IaRWchNAg5
fQYAn3p68Jn6RqrapGItpOY81B/mbMQF
=j+xU
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Mysterious request edirect with value exchange

2011-11-25 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Uwe,

On 11/25/11 7:43 AM, uwe.hellm...@t-systems.com wrote:
 We have a Loadbalancer which roundrobin addresses 2 Apache 2.2.
 which passes their requests via mod_proxy balancer to 2 tomcat
 5.5.26 servers which are configured identical and have also
 clustering enabled. The application is located only on the
 tomcats.

Are you using HTTP or AJP? From your description, it's probably HTTP
but it's worth asking.

Are you able to test/reproduce without the lb or a second Tomcat in
the mix? I'm sure this is a rare occurrence, so reproducing might not
be easy. If you have a test bed environment that is identical to
production (you do have one, right?), can you load it down and observe
intermittent failures like this? If so, try hitting a single Tomcat
directly and see if the problem disappears.

 So what we have is a redirected response from a failed login
 process. As example we have an login mask and while tryinig to
 login we put the username Tester in the username inputfield send
 the form away and get a login error message and the following URL
 string: http://mytestsystem/login.action?login_error=1u=Tester In
 the input field the value Tester is still set.
 
 This result is as expected, but from time to time we saw the
 following URL string returned 
 http://mytestsystem/login.action?login_error=1u=OtherUser although
 we sent the form with Tester as value away. But now in the input
 field it is also OtherUser set.

Have you reviewed the code in your test? Sometimes the tests are
flawed. :(

 We have checked Loadbalancer rewrites(possible Proxywrites) and
 fount nothing. The behaviour seem to appear if we have much load on
 these systems. Does anybody have any idea where I should start my
 investigation. I would assume the application does have a problem
 with session handling or a corruptable redirection method but the
 developer told us everything is fine.

Of course the developer told you that the software is bulletproof. :)

Can you post your Connector elements from your server.xml (minus
anything that might be considered sensitive, of course), and let us
know if you are using APR (aka native) with Tomcat.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk7PpxcACgkQ9CaO5/Lv0PCuigCgl0CL4wzLoe616M4NBPBVKm6i
jnIAn0q2Y8G8D1PYqAEeSB3VojOfMgms
=Th2F
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Babysitting ThreadLocals

2011-11-25 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Konstantin,

On 11/23/11 1:21 PM, Konstantin Kolinko wrote:
 2011/11/23 Christopher Schultz ch...@christopherschultz.net:
 On 11/23/11 11:29 AM, Caldarale, Charles R wrote:
 From: Christopher Schultz
 [mailto:ch...@christopherschultz.net] Subject: Babysitting
 ThreadLocals
 
 Removing the ThreadLocal after every request of course means
 that the use of ThreadLocal is entirely useless.
 
 Should I stop worrying about the overhead of creating a 
 SimpleDateFormat?
 
 Given that the cost of generating and writing a log entry is
 going to vastly outweigh any object creation or synchronization
 impact, then, yes, you should stop worrying.
 
 External reality checks are always useful. ;)
 
 The -MM-dd value changes only ~365 times a year. You do not
 need to regenerate it every second.

Correct. This is only the code for protecting the SimpleDateFormat.

 Tomcat does some clever things when it needs to generate timestamp
 for logging purposes (e.g. in org.apache.juli.OneLineFormatter),
 but that looks like an overkill for your use case.

I actually got the idea of using ThreadLocal from Tomcat's logging
code. Tomcat has the distinct advantage of being loaded at a higher
ClassLoader level and therefore won't leak its own ThreadLocals across
webapp restarts :)

I think most of this will be overkill, at least for the minimal load
we're getting as of now. If we were talking more than maybe 50
requests per second I might start looking at ways to reduce memory and
CPU overhead for this kind of thing. But Chuck is right: the disk is
the bottleneck, here, and probably always will be until we move to a
more message-oriented logging scheme (where the disk on the other end
will be the bottleneck) :)

Thanks,
- -chris

-BEGIN PGP SIGNATURE-
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk7PqfwACgkQ9CaO5/Lv0PA4iACeIKmdDmj5mr3yORb+h0+G2LDy
Tz8An0R13Akuc1NnxHfuvfWU24G1i5g+
=EvD/
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Babysitting ThreadLocals

2011-11-25 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Chema,

On 11/23/11 1:10 PM, Chema wrote:
 The string of the date format is constant. However the
 SimpleDateFormat
 class is not threadsafe, so you will hit intermittant issues when
 sharing across threads
 
 Do you mean that read operations (getters) in not-threadsafe
 objects are not an atomic operations and could retrieve dirty
 values cause sharing across threads?

As Chuck says, that depends upon the class.

In the case of SimpleDateFormat, there is a Calendar object used
internally with no synchronization, so multiple threads cannot safely
use java.text.SimpleDateFormat without fear of mass confusion.

If you didn't know that, now you do: don't use a shared
SimpleDateFormat in a threaded environment without any kind of protection.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk7PqpQACgkQ9CaO5/Lv0PDragCgrluaNuJ1Xs3tMGvpHauEts7d
VhYAn1vyKtmd/pT1FGzbibXJwlGfvI56
=oo7Q
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Babysitting ThreadLocals

2011-11-25 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Terrence,

On 11/23/11 8:13 PM, Terence M. Bandoian wrote:
 Adding Thread.yield() eliminated the error message from the log.

No, this is a legitimate leak.

In order to fix it, I'd have to clean all the threads in the thread
pool (because it's a ThreadLocal). It's just not worth it.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk7PqwMACgkQ9CaO5/Lv0PDANwCfX4o1w2wuAvBdhXauOITzJu/l
/gsAn3IMsAG96X1lCIgbxGzYQxhDGLnl
=gGW6
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Babysitting ThreadLocals

2011-11-25 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Sylvain,

On 11/24/11 4:02 PM, Sylvain Laurent wrote:
 I don't think this ThreadLocal creates a real leak of classloader. 
 It would if dayFormat was static.

IIRC, ThreadLocal essentially puts a key/value pair in a Map in the
Thread. I dunno what kind of reference it is, but I suspect it's a
normal, strong reference. That means that the Thread itself retains a
reference to the instance of the inner class in my servlet. That's
just not going to become available for collection anytime soon.

 But you may still see warnings issued by tomcat when the
 application is stopped because of this problem 
 http://wiki.apache.org/tomcat/MemoryLeakProtection#threadLocalPseudoLeak

 
After some time and if all the threads of the server are sollicited
 sufficiently, the classloader will be eventually collected.

I must admit that I haven't instrumented the VM after a redeploy to
check to see if the ThreadLocals are eventually restarted.

 With tomcat 7, there's no leak since threads are renewed, but you 
 might still see the warnings.

I am using Tomcat 7 -- I had forgotten about that feature. So, I think
you're right: the Threads will eventually be trashed and the
WebappClassLoader will be discarded. Thanks for pointing that out.

 IMHO, you'd rather either stop worrying and recreate a new 
 SimpleDateFormat, unless actual tests show a real bottleneck. In
 that case, go with another implementation like FastDateFormat. It
 will be much cleaner than playing with ThreadLocals...

Absolutely.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk7PrR8ACgkQ9CaO5/Lv0PC3EQCfTBNGMNCl0Nk882pDrrHMnVWH
3+oAoLbdnk0FgHs907hWSzq+5PsAyASl
=mB/F
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat user roles

2011-11-25 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Bill,

On 11/24/11 11:42 PM, Bill Wang wrote:
 Thanks, with your help, I find out this link: 
 http://onjava.com/onjava/2001/07/24/tomcat.html, seems you need me
 setup MemoryRealm,  then setup security constraint in
 webapps/manager/WEB-INF/web.xml

Wow, you didn't have any protection on your manager webapp? You should
already have had some kind of Realm configured. If you already had a
Realm configured, then you didn't need to enable MemoryRealm (which is
mostly a toy for doing simple authentication kind of like htpasswd is
for Apache httpd).

 There is an exist role manager , I try to understand it and add a
 new role restart in this web.xml, always get permission deny.

Post what you've got in your web.xml for security-constraint and
user-role and we'll take a look.

 So could you please give some instruction on how to setup below URL
 to that role restart only?
 
 http://hostname:8181/manager/html/stop?path=/APPNAME 
 http://hostname:8181/manager/html/start?path=/APPNAME

You really need to read the servlet spec for an explanation of how to
set up authorization in web.xml. Briefly, you're going to want
something like this new security-constraint in your web.xml:

security-constraint
web-resource-collection
web-resource-nameJust Restarts through the Web
UI/web-resource-name
url-pattern/html/restart/url-pattern
/web-resource-collection
auth-constraint
role-namemanager-gui/role-name
role-namemanager-gui-restart/role-name
/auth-constraint
/security-constraint

...

  security-role
description
  People who can restart webapps.
/description
role-namemanager-gui-restart/role-name
  /security-role

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk7Pr9EACgkQ9CaO5/Lv0PDwEACfTkyZuxmG6n4sa3EJS46VX7m0
xeMAnRpYTN+fdgttp6p4rSn6iJje9dtr
=BVtE
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Single war file - multiple hosts - can't get log4j to log to different files

2011-11-25 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Pid,

On 11/23/11 3:42 PM, Pid wrote:
 You could just run separate instances of Tomcat.  It would be less 
 hassle  easier to manage.
 
 Separate CATALINA_HOME  CATALINA_BASE, so you can use the same
 core code  just create some separate instances.

That may be the path of least resistance for this case, but I would
favor the flexibility of being able to deploy the webapp in different
ways. The code isn't that complicated to make that work, so it would
be my recommendation.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk7PtlgACgkQ9CaO5/Lv0PAHGgCdE45KNjodmfkFxJ+EN59O4763
HMkAn0/ktesy+2KWJYnK9RpVOh+kvgnu
=iF/d
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Mysterious request edirect with value exchange

2011-11-25 Thread Konstantin Kolinko
2011/11/25  uwe.hellm...@t-systems.com:

 So what we have is a redirected response from a failed login process.

Is it FORM authentication, or some custom implemented login process?

 As example we have an login mask and while tryinig to login we put the 
 username Tester in the username inputfield
 send the form away and get a login error message and the following URL string:
 http://mytestsystem/login.action?login_error=1u=Tester
 In the input field the value Tester is still set.

 This result is as expected, but from time to time we saw the following URL 
 string returned
 http://mytestsystem/login.action?login_error=1u=OtherUser although we sent 
 the form
 with Tester as value away. But now in the input field it is also OtherUser 
 set.

I think I would configure an AccessLogValve with %{Location}o in it.
That should log what redirect URL is actually sent to the client in
Location response header.

Best regards,
Konstantin Kolinko

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat user roles

2011-11-25 Thread Mark Thomas
On 25/11/2011 15:10, Christopher Schultz wrote:
 Bill,
 
 On 11/24/11 11:42 PM, Bill Wang wrote:
 Thanks, with your help, I find out this link: 
 http://onjava.com/onjava/2001/07/24/tomcat.html, seems you need
 me setup MemoryRealm,  then setup security constraint in 
 webapps/manager/WEB-INF/web.xml
 
 Wow, you didn't have any protection on your manager webapp? You
 should already have had some kind of Realm configured. If you
 already had a Realm configured, then you didn't need to enable
 MemoryRealm (which is mostly a toy for doing simple authentication
 kind of like htpasswd is for Apache httpd).
 
 There is an exist role manager , I try to understand it and add
 a new role restart in this web.xml, always get permission
 deny.
 
 Post what you've got in your web.xml for security-constraint and 
 user-role and we'll take a look.
 
 So could you please give some instruction on how to setup below
 URL to that role restart only?
 
 http://hostname:8181/manager/html/stop?path=/APPNAME 
 http://hostname:8181/manager/html/start?path=/APPNAME
 
 You really need to read the servlet spec for an explanation of how
 to set up authorization in web.xml. Briefly, you're going to want 
 something like this new security-constraint in your web.xml:
 
 security-constraint web-resource-collection 
 web-resource-nameJust Restarts through the Web 
 UI/web-resource-name url-pattern/html/restart/url-pattern

There is no such command as restart. You'll need:
url-pattern/html/stop/url-pattern
url-pattern/html/start/url-pattern

You'll probably want:
url-pattern/html/list/url-pattern
as well.

Mark

 /web-resource-collection auth-constraint 
 role-namemanager-gui/role-name 
 role-namemanager-gui-restart/role-name /auth-constraint 
 /security-constraint
 
 ...
 
 security-role description People who can restart webapps. 
 /description role-namemanager-gui-restart/role-name 
 /security-role
 
 -chris
 
 -

 
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org
 


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Multi-level context with #

2011-11-25 Thread Adil Munir
we are trying to work with multi-level context
we have tried tomcat 6.24, 7 with JDK 6 update 17,18, 19, 25
server 2008 64 bit

we have the xml and war file as follows:
S:\Server\x\servers\xxx\tomcat\conf\Catalina\localhost\ws#management.xml
webapps/ws/management.war

error:

java.lang.IllegalArgumentException: Document base
s:\Server\x\servers\xxx\tomcat\webapps\ws#management does not exist or
is not a readable directory
at
org.apache.naming.resources.FileDirContext.setDocBase(FileDirContext.java:142)
at
org.apache.catalina.core.StandardContext.resourcesStart(StandardContext.java:4086)
at
org.apache.catalina.core.StandardContext.start(StandardContext.java:4255)
at
org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:791)
at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:771)
at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:526)
at
org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:637)
at
org.apache.catalina.startup.HostConfig.deployDescriptors(HostConfig.java:563)
at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:498)
at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1277)
at
org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:321)
at
org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:119)
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1053)
at org.apache.catalina.core.StandardHost.start(StandardHost.java:722)
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1045)
at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:443)
at org.apache.catalina.core.StandardService.start(StandardService.java:516)
at org.apache.catalina.core.StandardServer.start(StandardServer.java:710)
at org.apache.catalina.startup.Catalina.start(Catalina.java:593)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java



Re: Multi-level context with #

2011-11-25 Thread Mark Thomas
On 25/11/2011 17:46, Adil Munir wrote:
 we are trying to work with multi-level context
 we have tried tomcat 6.24, 7 with JDK 6 update 17,18, 19, 25
 server 2008 64 bit
 
 we have the xml and war file as follows:
 S:\Server\x\servers\xxx\tomcat\conf\Catalina\localhost\ws#management.xml
 webapps/ws/management.war

The WAR needs to be named ws#management.war which will get expanded to
the ws#management directory...

 error:
 
 java.lang.IllegalArgumentException: Document base
 s:\Server\x\servers\xxx\tomcat\webapps\ws#management does not exist or
 is not a readable directory

...and make this error go away.

Mark

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



RE: Multi-level context with #

2011-11-25 Thread Adil Munir
works!
thank you very much

-Original Message-
From: Mark Thomas [mailto:ma...@apache.org] 
Sent: November 25, 2011 12:51 PM
To: Tomcat Users List
Subject: Re: Multi-level context with #

On 25/11/2011 17:46, Adil Munir wrote:
 we are trying to work with multi-level context
 we have tried tomcat 6.24, 7 with JDK 6 update 17,18, 19, 25
 server 2008 64 bit
 
 we have the xml and war file as follows:
 S:\Server\x\servers\xxx\tomcat\conf\Catalina\localhost\ws#management.xml
 webapps/ws/management.war

The WAR needs to be named ws#management.war which will get expanded to
the ws#management directory...

 error:
 
 java.lang.IllegalArgumentException: Document base
 s:\Server\x\servers\xxx\tomcat\webapps\ws#management does not exist or
 is not a readable directory

...and make this error go away.

Mark

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat user roles

2011-11-25 Thread Pid *
On 25 Nov 2011, at 04:43, Bill Wang bw57...@gmail.com wrote:

 Hi Mark,

 Thanks, with your help, I find out this link:
 http://onjava.com/onjava/2001/07/24/tomcat.html,

2001!   :)


p


 seems you need me setup
 MemoryRealm,  then setup security constraint
 in webapps/manager/WEB-INF/web.xml

 There is an exist role manager , I try to understand it and add a new
 role restart in this web.xml, always get permission deny.

 So could you please give some instruction on how to setup below URL to that
 role restart only?

 http://hostname:8181/manager/html/stop?path=/APPNAME
 http://hostname:8181/manager/html/start?path=/APPNAME

 Regards,
 Bill
 On Thu, Nov 24, 2011 at 7:06 PM, ma...@apache.org wrote:

 Bill Wang bw57...@gmail.com wrote:

 Hi Tomcat guru,

 I have questions for the tomcat user roles setup.

 On-call team (24*7 support)  need permission to restart one tomcat
 services, if they get call.  I think it is maybe possible to let them
 restart tomcat throught Tomcat Web Application Manager (the admin url
 http://server:port/manager)

 My request is, I can't give the admin username and password directly to
 on-call team, admin account can not only restart the application, it
 can
 deploy and undeploy applications, that's too dangerous.

 So how can I setup the tomcat-users.xml or other config file to let
 on-call
 team has only permission to restart that particular application, not
 else.

 Regards,
 Bill

 You can create a new role in web.xml called restart and limit it to the
 list, start and stop commands since each command is part of the URL. Then
 you assign that role to a new user in your Realm.

 I'm on my phone so can't give an exact example. If that isn't enough info,
 I'm sure someone else can fill in the gaps for you.

 Mark



 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat user roles

2011-11-25 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Mark,

On 11/25/11 12:47 PM, Mark Thomas wrote:
 There is no such command as restart. You'll need: 
 url-pattern/html/stop/url-pattern 
 url-pattern/html/start/url-pattern

Whoops. Thanks for catching that.

 You'll probably want: url-pattern/html/list/url-pattern as
 well.

+1

- -chrs
-BEGIN PGP SIGNATURE-
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEUEARECAAYFAk7P5EAACgkQ9CaO5/Lv0PANjgCgt7PvxplfvSpeR3Z7TJF8+kHN
S9QAl3kZqiTIxMiGyI27YJmz7zVZ11U=
=OHNN
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



[ANN] Apache Tomcat 7.0.23 released

2011-11-25 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache
Tomcat 7.0.23

This release includes numerous bug fixes and several new features
compared to version 7.0.22. The notable new features include:
* The ability to start and stop child containers (primarily Contexts:
  i.e. web applications) in parallel which can significantly improve
  start times. This is disabled by default but can be enabled by
  setting the startStopThreads attribute of a Host to a value greater
  than one.
* Cache the results of parsing the global and host level context.xml
  files to improve start times.
* Improve the handling of failed deployments so that a broken
  application can be fixed (e.g. via JMX) and another attempt made to
  start it rather than it having to be removed.

Please refer to the change log for the complete list of changes:
http://tomcat.apache.org/tomcat-7.0-doc/changelog.html

Note that this version has 4 zip binaries: a generic one and three
bundled with Tomcat native binaries for Windows operating systems
running on different CPU architectures.

Downloads:
http://tomcat.apache.org/download-70.cgi

Migration guide from Apache Tomcat 5.5.x and 6.0.x:
http://tomcat.apache.org/migration.html

Thank you,

-- The Apache Tomcat Team





-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Minimal persistent storage for a webapp

2011-11-25 Thread Benson Margulies
I'm fairly certain that I know the answer to the question here, but I
want to pose it just in case I've missed something.

In a web application, I'd like to store a bit of data without
configuring a database, or, indeed anything that has to be edited into
an XML file or typed into a container-level gui. As far as I know, the
entire servlet/webapp spec has nothing for me here, since the Snoracle
thinking was that this sort of thing was the job of JEE descriptors.

Have I missed something all these years?

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Tomcat 7 not working with javax.net.ssl.keyStorePassword property

2011-11-25 Thread Konstantin Kolinko
2011/11/24 Mark Thomas ma...@apache.org:
 On 22/11/2011 20:42, Satish Mittal wrote:
 Hi All,

 I have observed a regression between tomcat 5 and tomcat 7.

 That is https://issues.apache.org/bugzilla/show_bug.cgi?id=38774 that
 was fixed only in the 5.5.x branch.

 I'm not a huge fan of using system properties for configuration so I
 prefer the Tomcat 6+ approach that requires explicit configuration (even
 though some system properties are still used as fall back).


 In my tomcat webapp, before I spawn another tomcat webapp process, I pass
 on the keystore password by setting the system property
 javax.net.ssl.keyStorePassword to keystore password, instead of writing
 the keystore password in plain-text as an attribute in server.xml.


You can always use
keystorePass=${javax.net.ssl.keyStorePassword}

That will work in all current Tomcat versions, including 5.5 as well.

Best regards,
Konstantin Kolinko

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Minimal persistent storage for a webapp

2011-11-25 Thread Konstantin Kolinko
2011/11/26 Benson Margulies bimargul...@gmail.com:
 I'm fairly certain that I know the answer to the question here, but I
 want to pose it just in case I've missed something.

 In a web application, I'd like to store a bit of data without
 configuring a database, or, indeed anything that has to be edited into
 an XML file or typed into a container-level gui. As far as I know, the
 entire servlet/webapp spec has nothing for me here, since the Snoracle
 thinking was that this sort of thing was the job of JEE descriptors.

 Have I missed something all these years?


Define store. What is proposed lifetime of that information?

You can store anything in memory, using static variables (as each
webapp has its own class loader), or even use
ServletContext.setAttribute().

There are writable directories:
 (a) application-specific one that is cleared on redeployments
(work/appname in Tomcat),
 (b) java.io.tmpdir as well as user home directory.

(a) is required by Servlet spec and there is standard ServletContext
attribute that provides path of that directory. See
ServletContext.TEMPDIR constant.

 Snoracle thinking

JCP was community effort...


Best regards,
Konstantin Kolinko

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Minimal persistent storage for a webapp

2011-11-25 Thread Benson Margulies
On Fri, Nov 25, 2011 at 4:36 PM, Konstantin Kolinko
knst.koli...@gmail.com wrote:
 2011/11/26 Benson Margulies bimargul...@gmail.com:
 I'm fairly certain that I know the answer to the question here, but I
 want to pose it just in case I've missed something.

 In a web application, I'd like to store a bit of data without
 configuring a database, or, indeed anything that has to be edited into
 an XML file or typed into a container-level gui. As far as I know, the
 entire servlet/webapp spec has nothing for me here, since the Snoracle
 thinking was that this sort of thing was the job of JEE descriptors.

 Have I missed something all these years?


 Define store. What is proposed lifetime of that information?

Forever. Sorry about the snide vendor remark. I have to think about
whether redeployment is good enough. Is that ServletContext.TEMPDIR
guaranteed to stick around across container reboots as long as the app
isn't specifically redeployed?

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Tomcat 5.5 crashes after changing server IP

2011-11-25 Thread sirwiz
Hi, i recently move server to new IP, since this change ive got 
permanently this error, i tryed everything but im fail.



[Fri Nov 25 23:56:29 2011] [notice] SELinux policy enabled; httpd 
running as context root:system_r:httpd_t:s0
[Fri Nov 25 23:56:29 2011] [notice] suEXEC mechanism enabled (wrapper: 
/usr/sbin/suexec)
[Fri Nov 25 23:56:29 2011] [info] Init: Seeding PRNG with 256 bytes of 
entropy
[Fri Nov 25 23:56:29 2011] [info] Loading certificate  private key of 
SSL-aware server
[Fri Nov 25 23:56:29 2011] [debug] ssl_engine_pphrase.c(469): 
unencrypted RSA private key - pass phrase not required
[Fri Nov 25 23:56:29 2011] [info] Init: Generating temporary RSA 
private keys (512/1024 bits)
[Fri Nov 25 23:56:29 2011] [info] Init: Generating temporary DH 
parameters (512/1024 bits)
[Fri Nov 25 23:56:29 2011] [info] Init: Initializing (virtual) servers 
for SSL

[Fri Nov 25 23:56:29 2011] [info] Configuring server for SSL protocol
[Fri Nov 25 23:56:29 2011] [debug] ssl_engine_init.c(406): Creating new 
SSL context (protocols: SSLv3, TLSv1)
[Fri Nov 25 23:56:29 2011] [debug] ssl_engine_init.c(602): Configuring 
permitted SSL ciphers 
[ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW]
[Fri Nov 25 23:56:29 2011] [debug] ssl_engine_init.c(730): Configuring 
RSA server certificate
[Fri Nov 25 23:56:29 2011] [warn] RSA server certificate is a CA 
certificate (BasicConstraints: CA == TRUE !?)
[Fri Nov 25 23:56:29 2011] [warn] RSA server certificate CommonName 
(CN) `bilet.8host.pl' does NOT match server name!?
[Fri Nov 25 23:56:29 2011] [debug] ssl_engine_init.c(769): Configuring 
RSA server private key
[Fri Nov 25 23:56:29 2011] [info] Server: Apache/2.2.3, Interface: 
mod_ssl/2.2.3, Library: OpenSSL/0.9.8e-fips-rhel5
[Fri Nov 25 23:56:29 2011] [notice] Digest: generating secret for 
digest authentication ...

[Fri Nov 25 23:56:29 2011] [notice] Digest: done
[Fri Nov 25 23:56:29 2011] [debug] util_ldap.c(2021): LDAP merging 
Shared Cache conf: shm=0x2b1216c74a18 rmm=0x2b1216c74a70 for VHOST: 
bilety.mosir.torun.pl
[Fri Nov 25 23:56:29 2011] [debug] util_ldap.c(2021): LDAP merging 
Shared Cache conf: shm=0x2b1216c74a18 rmm=0x2b1216c74a70 for VHOST: 
bilety.mosir.torun.pl
[Fri Nov 25 23:56:29 2011] [info] APR LDAP: Built with OpenLDAP LDAP 
SDK

[Fri Nov 25 23:56:29 2011] [info] LDAP: SSL support available
[Fri Nov 25 23:56:29 2011] [info] Init: Seeding PRNG with 256 bytes of 
entropy
[Fri Nov 25 23:56:29 2011] [info] Loading certificate  private key of 
SSL-aware server
[Fri Nov 25 23:56:29 2011] [debug] ssl_engine_pphrase.c(469): 
unencrypted RSA private key - pass phrase not required
[Fri Nov 25 23:56:29 2011] [info] Init: Generating temporary RSA 
private keys (512/1024 bits)
[Fri Nov 25 23:56:29 2011] [info] Init: Generating temporary DH 
parameters (512/1024 bits)
[Fri Nov 25 23:56:29 2011] [debug] ssl_scache_shmcb.c(374): shmcb_init 
allocated 512000 bytes of shared memory
[Fri Nov 25 23:56:29 2011] [debug] ssl_scache_shmcb.c(554): entered 
shmcb_init_memory()
[Fri Nov 25 23:56:29 2011] [debug] ssl_scache_shmcb.c(576): for 512000 
bytes, recommending 4265 indexes
[Fri Nov 25 23:56:29 2011] [debug] ssl_scache_shmcb.c(619): 
shmcb_init_memory choices follow
[Fri Nov 25 23:56:29 2011] [debug] ssl_scache_shmcb.c(621): 
division_mask = 0x1F
[Fri Nov 25 23:56:29 2011] [debug] ssl_scache_shmcb.c(623): 
division_offset = 96
[Fri Nov 25 23:56:29 2011] [debug] ssl_scache_shmcb.c(625): 
division_size = 15997
[Fri Nov 25 23:56:29 2011] [debug] ssl_scache_shmcb.c(627): queue_size 
= 2136
[Fri Nov 25 23:56:29 2011] [debug] ssl_scache_shmcb.c(629): index_num = 
133
[Fri Nov 25 23:56:29 2011] [debug] ssl_scache_shmcb.c(631): 
index_offset = 8
[Fri Nov 25 23:56:29 2011] [debug] ssl_scache_shmcb.c(633): index_size 
= 16
[Fri Nov 25 23:56:29 2011] [debug] ssl_scache_shmcb.c(635): 
cache_data_offset = 8
[Fri Nov 25 23:56:29 2011] [debug] ssl_scache_shmcb.c(637): 
cache_data_size = 13853
[Fri Nov 25 23:56:29 2011] [debug] ssl_scache_shmcb.c(650): leaving 
shmcb_init_memory()
[Fri Nov 25 23:56:29 2011] [info] Shared memory session cache 
initialised
[Fri Nov 25 23:56:29 2011] [info] Init: Initializing (virtual) servers 
for SSL

[Fri Nov 25 23:56:29 2011] [info] Configuring server for SSL protocol
[Fri Nov 25 23:56:29 2011] [debug] ssl_engine_init.c(406): Creating new 
SSL context (protocols: SSLv3, TLSv1)
[Fri Nov 25 23:56:29 2011] [debug] ssl_engine_init.c(602): Configuring 
permitted SSL ciphers 
[ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW]
[Fri Nov 25 23:56:29 2011] [debug] ssl_engine_init.c(730): Configuring 
RSA server certificate
[Fri Nov 25 23:56:29 2011] [warn] RSA server certificate is a CA 
certificate (BasicConstraints: CA == TRUE !?)
[Fri Nov 25 23:56:29 2011] [warn] RSA server certificate CommonName 
(CN) `xx' does NOT match server name!?
[Fri Nov 25 23:56:29 2011] [debug] ssl_engine_init.c(769): Configuring 
RSA server private key
[Fri Nov 25 23:56:29 2011] [info] Server: Apache/2.2.3, 

Re: Babysitting ThreadLocals

2011-11-25 Thread Sylvain Laurent

On 25 nov. 2011, at 15:58, Christopher Schultz wrote:

 On 11/24/11 4:02 PM, Sylvain Laurent wrote:
 I don't think this ThreadLocal creates a real leak of classloader. 
 It would if dayFormat was static.
 
 IIRC, ThreadLocal essentially puts a key/value pair in a Map in the
 Thread. I dunno what kind of reference it is, but I suspect it's a
 normal, strong reference. That means that the Thread itself retains a
 reference to the instance of the inner class in my servlet. That's
 just not going to become available for collection anytime soon.

Actually, in Sun's implementation (1.5 and 1.6 at least), ThreadLocal are 
implemented with a kind of WeakHashMap in a instance variable of Thread, using 
your ThreadLocal instance as a weak key and the actual value you stored as 
value with a strong reference.
In your example, the reference to the ThreadLocal instance is stored in an 
instance variable of your Servlet. So, when your app is stopped, tomcat 
releases its reference to your Servlet instance so that it can be collected and 
your ThreadLocal instance too.
Since in your case the value that is bound in the ThreadLocal for each thread 
is a JRE class (SimpleDateFormat), it does not reference the webapp 
classloader. The latter can then be collected (provided there are no other 
references pinning it in memory).

Note that I was wrong when I wrote that there would be a leak if dayFormat was 
static : that would only be the case if the value bound in the ThreadLocal was 
an instance of a class that is loaded by the webapp. It's not the case here 
(SimpleDateFormat), so that even with a static dayFormat, the classloader would 
be GCed. 

Sylvain


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



RE: Tomcat 5.5 crashes after changing server IP

2011-11-25 Thread Caldarale, Charles R
 From: sir...@8host.pl [mailto:sir...@8host.pl] 
 Subject: Tomcat 5.5 crashes after changing server IP

 Hi, i recently move server to new IP, since this change ive got 
 permanently this error, i tryed everything but im fail.

 [Fri Nov 25 23:56:29 2011] [notice] SELinux policy enabled; httpd 
 running as context root:system_r:httpd_t:s0

Nice of you to show us the httpd logs, but since you're reporting a problem 
with Tomcat, wouldn't it be more appropriate to send the Tomcat logs?  Would 
also be good to see your server.xml and the mod_proxy_ajp config.

Can you access Tomcat directly?

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.



RE: Tomcat 5.5 crashes after changing server IP

2011-11-25 Thread sirwiz

Tomcat log:

2011-11-26 00:42:34 org.apache.catalina.core.AprLifecycleListener init
INFO: The APR based Apache Tomcat Native library which allows optimal 
performance in production environments was not found on the 
java.library.path: 
/usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0.x86_64/jre/lib/amd64/server:/usr/lib/jvm/java-1$
2011-11-26 00:42:34 org.apache.tomcat.util.digester.SetPropertiesRule 
begin
WARNING: [SetPropertiesRule]{Server/Service/Engine/Host} Setting 
property 'debug' to '0' did not find a matching property.
2011-11-26 00:42:34 org.apache.tomcat.util.digester.SetPropertiesRule 
begin
WARNING: [SetPropertiesRule]{Server/Service/Engine/Host/Context} 
Setting property 'debug' to '0' did not find a matching property.

2011-11-26 00:42:35 org.apache.coyote.http11.Http11Protocol init
INFO: Initializing Coyote HTTP/1.1 on http-8080
2011-11-26 00:42:35 org.apache.catalina.startup.Catalina load
INFO: Initialization processed in 1130 ms
2011-11-26 00:42:35 org.apache.catalina.core.StandardService start
INFO: Starting service Catalina
2011-11-26 00:42:35 org.apache.catalina.core.StandardEngine start
INFO: Starting Servlet Engine: Apache Tomcat/6.0.32
2011-11-26 00:42:36 org.apache.catalina.loader.WebappClassLoader 
validateJarFile
INFO: validateJarFile(/var/www/torun/WEB-INF/lib/servletapi-2.2.jar) - 
jar not loaded. See Servlet Spec 2.3, section 9.7.2. Offending class: 
javax/servlet/Servlet.class
2011-11-26 00:42:36 org.apache.catalina.startup.HostConfig 
deployDescriptor

INFO: Deploying configuration descriptor host-manager.xml
2011-11-26 00:42:36 org.apache.catalina.startup.HostConfig 
deployDescriptor

INFO: Deploying configuration descriptor manager.xml
2011-11-26 00:42:36 org.apache.catalina.startup.HostConfig 
deployDirectory

INFO: Deploying web application directory docs
2011-11-26 00:42:37 org.apache.catalina.startup.HostConfig 
deployDirectory

INFO: Deploying web application directory ROOT
2011-11-26 00:42:37 org.apache.catalina.startup.HostConfig 
deployDirectory

INFO: Deploying web application directory examples
2011-11-26 00:42:37 org.apache.coyote.http11.Http11Protocol start
INFO: Starting Coyote HTTP/1.1 on http-8080
2011-11-26 00:42:38 org.apache.jk.common.ChannelSocket init
INFO: JK: ajp13 listening on /0.0.0.0:8009
2011-11-26 00:42:38 org.apache.jk.server.JkMain start
INFO: Jk running ID=0 time=0/55  config=null
2011-11-26 00:42:38 org.apache.catalina.startup.Catalina start
INFO: Server startup in 2926 ms
2011-11-26 00:43:44 org.apache.coyote.http11.Http11Protocol pause
INFO: Pausing Coyote HTTP/1.1 on http-8080
2011-11-26 00:43:45 org.apache.catalina.core.StandardService stop
INFO: Stopping service Catalina
2011-11-26 00:43:45 org.apache.catalina.core.StandardWrapper unload
INFO: Waiting for 1 instance(s) to be deallocated
2011-11-26 00:43:46 org.apache.catalina.core.StandardWrapper unload
INFO: Waiting for 1 instance(s) to be deallocated
2011-11-26 00:43:47 org.apache.catalina.core.StandardWrapper unload
INFO: Waiting for 1 instance(s) to be deallocated
2011-11-26 00:43:47 org.apache.catalina.loader.WebappClassLoader 
clearReferencesThreads
SEVERE: The web application [] is still processing a request that has 
yet to finish. This is very likely to create a memory leak. You can 
control the time allowed for requests to finish by using the unloadDelay 
attribute of the standard$

2011-11-26 00:43:47 org.apache.coyote.http11.Http11Protocol destroy
INFO: Stopping Coyote HTTP/1.1 on http-8080


server.xml:

?xml version='1.0' encoding='utf-8'?
!--
  Licensed to the Apache Software Foundation (ASF) under one or more
  contributor license agreements.  See the NOTICE file distributed with
  this work for additional information regarding copyright ownership.
  The ASF licenses this file to You under the Apache License, Version 
2.0

  (the License); you may not use this file except in compliance with
  the License.  You may obtain a copy of the License at

  http://www.apache.org/licenses/LICENSE-2.0

  Unless required by applicable law or agreed to in writing, software
  distributed under the License is distributed on an AS IS BASIS,
  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or 
implied.

  See the License for the specific language governing permissions and
  limitations under the License.
--
!-- Note:  A Server is not itself a Container, so you may not
 define subcomponents such as Valves at this level.
 Documentation at /docs/config/server.html
 --
Server port=8005 shutdown=SHUTDOWN

  !--APR library loader. Documentation at /docs/apr.html --
  Listener className=org.apache.catalina.core.AprLifecycleListener 
SSLEngine=on /
  !--Initialize Jasper prior to webapps are loaded. Documentation at 
/docs/jasper-howto.html --

  Listener className=org.apache.catalina.core.JasperListener /
  !-- Prevent memory leaks due to use of particular java/javax APIs--
  Listener 
className=org.apache.catalina.core.JreMemoryLeakPreventionListener /
  !-- JMX Support for 

Re: How to get the tomcat internal log out?

2011-11-25 Thread MiB


25 nov 2011 14.37 Christopher Schultz wrote:





+1

Any webapp that runs on 5.5 that doesn't run on Tomcat 7 represents
either a regression in Tomcat or a webapp that has been tied-into
Tomcat's internal classes (which it shouldn't have been).


Running is not the issue here, is it? Internal logs are.

Not everyone can update to Tomcat 7 midproduction.

However, there are modern web applications made with certain  
frameworks that will not run on 5.5 and must use 6 or later. If so  
there's no alternative to update tomcat. But what does this fact have  
to do with logging?


/MiB





-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org