Re: Tomcat 7 Manager App Authentication failure

2012-06-28 Thread Arnaud LARROQUE
Hello, Are you using tomcat 7 or tomcat 5 ? You mentioned both and this is confusing. URL changed in the tomcat 7 manager app : are you accessing through http://your-host:your-port/manager/html ? On Jun 29, 2012 3:17 AM, "kl2eativ" wrote: > Hello. I am having problems trying to authenticate my

Re: Tomcat 7 Manager App Authentication failure

2012-06-28 Thread Igor Cicimov
On Fri, Jun 29, 2012 at 11:17 AM, kl2eativ wrote: > Hello. I am having problems trying to authenticate my tomcat 7 manager > app. I > keep getting a 401 Unauthorized page. My config is as follows: > tomcat-users.xml (Located in /etc/tomcat5) > [code] > > > > > > [/code] > > server.xml

RE: FW: Tomcat server start up taking excessive time

2012-06-28 Thread Caldarale, Charles R
> From: THIND Mansukhdeep [mailto:mansukhdeep_th...@3dplmsoftware.com] > Subject: RE: FW: Tomcat server start up taking excessive time > What is lack of entropy in dev/random? Please clarify. GIYF. http://en.wikipedia.org/wiki//dev/random http://en.wikipedia.org/wiki/Entropy_%28computing%29 If

RE: FW: Tomcat server start up taking excessive time

2012-06-28 Thread THIND Mansukhdeep
OK Chris. Next time on I will post to the whole community. I did not understand the second part of your reply. You have said that " We have seen lack of entropy in /dev/random (or equivalent) just blocking: basically, the CPU is just waiting for data to become available for, say, crypto operation

Tomcat 7 Manager App Authentication failure

2012-06-28 Thread kl2eativ
Hello. I am having problems trying to authenticate my tomcat 7 manager app. I keep getting a 401 Unauthorized page. My config is as follows: tomcat-users.xml (Located in /etc/tomcat5) [code] [/code] server.xml (Located in /etc/tomcat5) [code] [/code] I restart the

Re: tomcat security authenticator

2012-06-28 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Zoltán, On 6/28/12 4:08 AM, Komáromi, Zoltán wrote: > 1. Why not a Realm? Because the authentication depends on session > attribute, and I want to bypass the form if user is logged in. > > So is this correct? > > > > The tomcat's doc says, that "J

Re: FW: Tomcat server start up taking excessive time

2012-06-28 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mansukhdeep, On 6/27/12 11:00 PM, THIND Mansukhdeep wrote: > You were correct Chris. I found the jar file which was causing the > issue. It is a kernel specific jar that contains wrapper classes > for context initialization with the container/applica

RE: Wish to use an independent class module in Tomcat

2012-06-28 Thread Terence M. Bandoian
On 1:59 PM, Cotton, Joseph B wrote: A link to the Tomcat documentation: http://tomcat.apache.org/tomcat-7.0-doc/appdev/deployment.html#Shared_Li brary_Files -Terence Bandoian Thanks, Terence. Now I have a related question... This is perhaps more a Java question than a Tomcat question. I hav

Re: Tomcat DBCP Connection pool issue

2012-06-28 Thread Kiran Badi
On 6/27/2012 8:35 PM, Christopher Schultz wrote: 100 active db connections sounds like a lot. Do you really need to support 100 simultaneous connections to your database? Can your database support that many connections with active queries from each? Do you have a cluster? Remember that each membe

RE: Tomcat 7.0.28 connection pool issue

2012-06-28 Thread Filip Hanik (mailing lists)
Martin, generally I would run with fairQueue="false" - this is the default. The only time I would change to fairQueue="true" is if we see threads being starved, and not getting connections. However, this scenario is very unlikely unless there is extreme concurrency going on. Filip > -Original

RE: Tomcat 7.0.28 connection pool issue

2012-06-28 Thread Jeffrey Janner
> -Original Message- > From: cjder...@gmail.com [mailto:cjder...@gmail.com] On Behalf Of chris > derham > Sent: Thursday, June 28, 2012 10:47 AM > To: Tomcat Users List > Subject: Re: Tomcat 7.0.28 connection pool issue > > On Thu, Jun 28, 2012 at 12:38 PM, Yasser wrote: > > > Yes. It do

Re: default context

2012-06-28 Thread James Lampert
David kerber wrote: If I'm not mistaken (which is definitely possible), if you name it ROOT.war, it will also become the default context. Quite true. Even a neophyte like me is aware of that. ;-p (And there's a lot more about Tomcat that I *don't* know, than there is that I *do* -- it was jus

RE: Tomcat 7.0.28 connection pool issue

2012-06-28 Thread Martin Gainty
Hi Filip Is there an algorithm we can use to determine if the op should configure concurrent db connections (fairQueue=false) vs config non-concurrent db connections (fairQueue=true) e.g. if 50%+ of database cursors are 'read-only' then concurrent connections *should be used* and TC attribute

Re: default context

2012-06-28 Thread David kerber
On 6/28/2012 3:20 PM, chad.da...@emc.com wrote: As I read the context docs ( http://tomcat.apache.org/tomcat-7.0-doc/config/context.html ), the only way to define a default web application is via a context element in the server.xml file. Is this true? So, this means that it is IMPOSSIBLE to

default context

2012-06-28 Thread Chad.Davis
As I read the context docs ( http://tomcat.apache.org/tomcat-7.0-doc/config/context.html ), the only way to define a default web application is via a context element in the server.xml file. Is this true? So, this means that it is IMPOSSIBLE to drop a default web app WAR into the webapps folde

Re: Tomcat 7.0.28 connection pool issue

2012-06-28 Thread Yasser
By default fairQueue is set to true and the value of maxWait is 30 seconds. I will try increasing the maxwait to 60 seconds and see if that buys tomcat enough time to return connections to the pool and have it available for the next connection request. Will let you know. On Thu, Jun 28, 2012 at 1

Re: Tomcat 7.0.28 connection pool issue

2012-06-28 Thread Yasser
We use Oracle 11.2.0 and it can handle more than 1000 connections. Here is the stacktrace of the connection pool empty error that I receive in tomcat logs Caused by: org.apache.tomcat.jdbc.pool.PoolExhaustedException: [http-apr-30690-exec-743] Timeout: Pool empty. Unable to fetch a connection in

RE: Tomcat 7.0.28 connection pool issue

2012-06-28 Thread Filip Hanik (mailing lists)
Then the issue you may be running into is that your Tomcat configuration supports a higher concurrency level than what your Resin configuration is setup to do. With higher concurrency, there will be a need for more data base connections. If you still want to run with a lower number of connections,

Re: Tomcat 7.0.28 connection pool issue

2012-06-28 Thread Yasser
That was the issue with Tomcat 7.0.26 and they fixed it in 7.0.28 On Thu, Jun 28, 2012 at 11:54 AM, Filip Hanik (mailing lists) < devli...@hanik.com> wrote: > Could you have run into > https://issues.apache.org/bugzilla/show_bug.cgi?id=53367 > > ? > > You could try out > http://people.apache.org

RE: Tomcat 7.0.28 connection pool issue

2012-06-28 Thread Filip Hanik (mailing lists)
Could you have run into https://issues.apache.org/bugzilla/show_bug.cgi?id=53367 ? You could try out http://people.apache.org/~fhanik/jdbc-pool/bz53367-jdbc-pool.jar > -Original Message- > From: Yasser [mailto:yarafa...@gmail.com] > Sent: Thursday, June 28, 2012 9:39 AM > To: Tomcat Us

Re: Tomcat 7.0.28 connection pool issue

2012-06-28 Thread chris derham
On Thu, Jun 28, 2012 at 12:38 PM, Yasser wrote: > Yes. It does show that maxactive has reached 100. I also use splunk to get > the connection status at the oracle side. > What I dont understand is that Resin needs just 50 connections to handle > the same load. I am in the process of increasing th

Re: Tomcat 7.0.28 connection pool issue

2012-06-28 Thread Yasser
Yes. It does show that maxactive has reached 100. I also use splunk to get the connection status at the oracle side. What I dont understand is that Resin needs just 50 connections to handle the same load. I am in the process of increasing the count to 300 and see if that makes a difference. Oracle

RE: Tomcat 7.0.28 connection pool issue

2012-06-28 Thread Hedrick, Brooke - 43
> -Original Message- > From: Yasser [mailto:yarafa...@gmail.com] > Sent: Thursday, June 28, 2012 9:44 AM > To: users@tomcat.apache.org > Subject: Tomcat 7.0.28 connection pool issue > ... > What is the issue? > When we run a stress test on the same codebase deployed to Tomcat 7.0.28, > at

RE: tomcat security authenticator

2012-06-28 Thread Martin Gainty
so the client will need to encrypt the data before the client puts the data on the wire? in that case you'll want to take a look at configure both the client transmitting the secured data and server ACK or responding with encrypted resp via JSSE http://docs.oracle.com/javase/6/docs/technotes/

Tomcat 7.0.28 connection pool issue

2012-06-28 Thread Yasser
What we are doing? We are in the process of migrating from Resin 2.0.3 to Tomcat 7.0.28. The codebase running on Resin when subjected to a stress test (using resin's connection pool) with maxactive of 50 perform fine. It meets out non functionality requirements including hits/sec, throughtput, pass

RE: Wish to use an independent class module in Tomcat

2012-06-28 Thread Cotton, Joseph B
A link to the Tomcat documentation: http://tomcat.apache.org/tomcat-7.0-doc/appdev/deployment.html#Shared_Li brary_Files -Terence Bandoian Thanks, Terence. Now I have a related question... This is perhaps more a Java question than a Tomcat question. I have copied a jar file into the shared lib

Re: tomcat security authenticator

2012-06-28 Thread Kris Easter
> I think, if I replace the FormAuthenticator with an descendant, it'll > solve the problem. > > To extend FormAuthenticator is simple, but how can I make Tomcat to use it? I tested this out at one time but it was never placed in production. My terse notes, which might be leaving something out,

Re: 7.0.4 Parallel deployment, war name invalid

2012-06-28 Thread Daniel Mikusa
- Original Message - > > > Hi, > > was trying the parallel deployment feature: > - have an app xapp under webapps, running > - created a new war of xapp, named xapp##001.war > - placed the under webapps > > no xapp#001 folderlogs says: > > SEVERE: The war name [xapp##001.war] is in

Re: 7.0.4 Parallel deployment, war name invalid

2012-06-28 Thread Konstantin Kolinko
2012/6/28 Gabriele Bulfon : > Hi, > > was trying the parallel deployment feature: > - have an app xapp under webapps, running > - created a new war of xapp, named xapp##001.war > - placed the under webapps > > no xapp#001 folderlogs says: > > SEVERE: The war name [xapp##001.war] is invalid. The

Re: Adapting a webapp to use https

2012-06-28 Thread David kerber
On 6/28/2012 9:27 AM, Jeffrey Janner wrote: -Original Message- From: David kerber [mailto:dcker...@verizon.net] Sent: Thursday, June 28, 2012 7:25 AM To: Tomcat Users List Subject: Adapting a webapp to use https We have an application that we've been running successfully for years. Now o

RE: Adapting a webapp to use https

2012-06-28 Thread Jeffrey Janner
> -Original Message- > From: David kerber [mailto:dcker...@verizon.net] > Sent: Thursday, June 28, 2012 7:25 AM > To: Tomcat Users List > Subject: Adapting a webapp to use https > > We have an application that we've been running successfully for years. > Now one of our potential customers

7.0.4 Parallel deployment, war name invalid

2012-06-28 Thread Gabriele Bulfon
Hi, was trying the parallel deployment feature: - have an app xapp under webapps, running - created a new war of xapp, named xapp##001.war - placed the under webapps no xapp#001 folderlogs says: SEVERE: The war name [xapp##001.war] is invalid. The archive will be ignored. any idea? Gabriele. -

Adapting a webapp to use https

2012-06-28 Thread David kerber
We have an application that we've been running successfully for years. Now one of our potential customers wants to investigate possibly switching it to use https instead of http, and I'm trying to figure out what's involved in the conversion. The clients are headless industrial computers that

Re: STDOUT log growing very huge. [I]

2012-06-28 Thread Konstantin Kolinko
2012/6/28 Neena Damodaran : > Classification: For internal use only If it is "for internal use", do not post it to a publicly archived mailing list. The same for your "disclaimer" below. > > We have issues with logging with one of our customers in production. > We have log4J configured in our ap

Re: How to initiate session id change from application code?

2012-06-28 Thread chris derham
> > > Good Evening Pavel Implementing a SSL Connector on Tomcat will prevent > Session Fixation attack > Martin, This is not correct. Using SSL will not stop session fixation attacks Chris

STDOUT log growing very huge. [I]

2012-06-28 Thread Neena Damodaran
Classification: For internal use only Hi, We have issues with logging with one of our customers in production. We have log4J configured in our application. But for this one customer the logs that are written to Application.log is also going to STDOUT.log and because of this STDOUT.log is gro

Re: iis not looking for jsp in tomcat webapps folder

2012-06-28 Thread Vijaya
The problem was with jk2.shm file. In any case I installed the latest iaspi_redirect and got it working to some extent. the login goes to the ROOT/index.jsp rather than my webapp's index.jsp. uriworkermap.properties is /AtYourService/*.jsp=worker1 /AtYourService/servlet/*=worker1 workers.prop

Re: tomcat security authenticator

2012-06-28 Thread Jose María Zaragoza
2012/6/28 Komáromi, Zoltán : > 1. Why not a Realm? > Because the authentication depends on session attribute, and I want to > bypass the form if user is logged in. When I used Tomcat's realm to authenticate users , that was a issue than I missed : to access to session enviroment or context envirom

Re: tomcat security authenticator

2012-06-28 Thread Komáromi , Zoltán
1. Why not a Realm? Because the authentication depends on session attribute, and I want to bypass the form if user is logged in. So is this correct? The tomcat's doc says, that "Java class name of the implementation to use. This MUST be set to org.apache.catalina.authenticator.FormAuthenticator

Re: tomcat security authenticator

2012-06-28 Thread Konstantin Kolinko
2012/6/28 Komáromi, Zoltán : > Hi, > > I need to use custom authenticator, because a part of application is > using container authentication, and unfortunately the usersernames in > realm conflicts with usernames in application database. :( > > So I need, that if anibody is logged in to my applicat