RE: Redirection of mycompany.com to www.mycompany.com

2013-12-18 Thread pierre posset
Hi, I have found what was happening, it was one of my colleagues who has put a filter and didin't remember doing that. Thank you. Date: Tue, 17 Dec 2013 00:30:04 +0400 Subject: Re: Redirection of mycompany.com to www.mycompany.com From: knst.koli...@gmail.com To: users@tomcat.apache.org

Re: linking (limiting???)

2013-12-18 Thread Ray Holme
Hmm . . . . Lots of speculation here. How are the files referenced in your application? It seems that if the physical files are available, then the application works fine. If the physical files are not available, then the database has problems (firebird under xinetd, perhaps?) and you get 404

Re: linking (limiting???)

2013-12-18 Thread André Warnier
Ray Holme wrote: Hmm . . . . Lots of speculation here. How are the files referenced in your application? It seems that if the physical files are available, then the application works fine. If the physical files are not available, then the database has problems (firebird under xinetd,

Some security-related questions / enhancements for the Windows Installer

2013-12-18 Thread Konstantin Preißer
Hi, while I normally only use the .zip distributions of Tomcat, I just had a look at the Windows Service Installer for Tomcat 8.0.0-RC9. There are some points related to security which I noticed that could be improved: 1) When installing Tomcat with the Windows Service Installer, it installs

Re: Some security-related questions / enhancements for the Windows Installer

2013-12-18 Thread André Warnier
Konstantin Preißer wrote: Hi, while I normally only use the .zip distributions of Tomcat, I just had a look at the Windows Service Installer for Tomcat 8.0.0-RC9. There are some points related to security which I noticed that could be improved: 1) When installing Tomcat with the Windows

RE: Some security-related questions / enhancements for the Windows Installer

2013-12-18 Thread Jeffrey Janner
Konstantin - Interesting points. See comments in-line. Jeff -Original Message- From: Konstantin Preißer [mailto:kpreis...@apache.org] Sent: Wednesday, December 18, 2013 8:18 AM To: 'Tomcat Users List' Subject: Some security-related questions / enhancements for the Windows Installer

RE: Some security-related questions / enhancements for the Windows Installer

2013-12-18 Thread Jeffrey Janner
-Original Message- From: André Warnier [mailto:a...@ice-sa.com] Sent: Wednesday, December 18, 2013 9:28 AM To: Tomcat Users List Subject: Re: Some security-related questions / enhancements for the Windows Installer Konstantin Preißer wrote: Hi, while I normally only use

X-Frame-Options header

2013-12-18 Thread Dariusz Gorczyca
Recently a was working on X-Frame-Options and discovered that Tomcat 7 and 8 doesn't support that solution for Clickjacking security. One of the solution is to hide Tomcat behind Apache , but it can't be done. Is there anyone who knows if there are any plans to implement it eg. as a tag in

RE: Modify content in META-INF/context.xml

2013-12-18 Thread Jeffrey Janner
-Original Message- From: Jose María Zaragoza [mailto:demablo...@gmail.com] Sent: Tuesday, December 17, 2013 4:33 AM To: Tomcat Users List Subject: Modify content in META-INF/context.xml Hello: I'm using Apache Tomcat 6.0.24 and I've deployed a web application that defines its

Re: X-Frame-Options header

2013-12-18 Thread Mark Thomas
On 18/12/2013 15:48, Dariusz Gorczyca wrote: Recently a was working on X-Frame-Options and discovered that Tomcat 7 and 8 doesn't support that solution for Clickjacking security. One of the solution is to hide Tomcat behind Apache , but it can't be done. Is there anyone who knows if there

RE: Some security-related questions / enhancements for the Windows Installer

2013-12-18 Thread Konstantin Preißer
Hi André, thank you for your reply. -Original Message- From: André Warnier [mailto:a...@ice-sa.com] Sent: Wednesday, December 18, 2013 4:28 PM To: Tomcat Users List Subject: Re: Some security-related questions / enhancements for the Windows Installer Konstantin Preißer wrote:

Re: linking (limiting???)

2013-12-18 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Ray, On 12/17/13, 1:23 PM, Ray Holme wrote: HTTP Status 404 - /appName/appName_tour/appNamev3.html type Status report message /appName/appName_tour/appNamev3.html description The requested resource is not available. Apache Tomcat/7.0.35 you're

EOFException in AjpNioProcessor

2013-12-18 Thread Jesse Barnum
I'm seeing this error a lot in my log files. It happens when I am trying to read from the request InputStream. Should I be concerned about this, or is it just the equivalent of the user clicking 'stop' in their browser? SEVERE: An error occurred while handling request

Re: Setting log file permissions upon creation?

2013-12-18 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 12/17/13, 11:29 AM, Mark Eggers wrote: There are not a lot of files that Tomcat creates. 1. log files, as we have been discussing 2. PID file - if enabled, and that depends on where you write it 3. serialized sessions 4. JSP files -

Re: X-Frame-Options header

2013-12-18 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 12/18/13, 10:55 AM, Mark Thomas wrote: On 18/12/2013 15:48, Dariusz Gorczyca wrote: Recently a was working on X-Frame-Options and discovered that Tomcat 7 and 8 doesn't support that solution for Clickjacking security. One of the solution

Re: linking (limiting???)

2013-12-18 Thread Ray Holme
Chris, You may have hit the nail on the head. While I have 4 working tomcat applications, I am a C/Java/SQL programmer and Unix admin person (ex IBM system BAL programmer). I am mostly a DBA and write Java bean code to provide better access to things in the DB (make sure rules are followed).

Re: EOFException in AjpNioProcessor

2013-12-18 Thread Jesse Barnum
On Dec 18, 2013, at 12:27 PM, Jesse Barnum jsb_tom...@360works.com wrote: I'm seeing this error a lot in my log files. It happens when I am trying to read from the request InputStream. Should I be concerned about this, or is it just the equivalent of the user clicking 'stop' in their

RE: EOFException in AjpNioProcessor

2013-12-18 Thread Konstantin Preißer
Hi Jesse, -Original Message- From: Jesse Barnum [mailto:jsb_tom...@360works.com] Sent: Wednesday, December 18, 2013 6:58 PM To: Tomcat Users List Subject: Re: EOFException in AjpNioProcessor On Dec 18, 2013, at 12:27 PM, Jesse Barnum jsb_tom...@360works.com wrote: I'm seeing

Re: EOFException in AjpNioProcessor

2013-12-18 Thread André Warnier
Jesse Barnum wrote: On Dec 18, 2013, at 12:27 PM, Jesse Barnum jsb_tom...@360works.com wrote: I'm seeing this error a lot in my log files. It happens when I am trying to read from the request InputStream. Should I be concerned about this, or is it just the equivalent of the user clicking

RE: Some security-related questions / enhancements for the Windows Installer

2013-12-18 Thread Konstantin Preißer
-Original Message- From: Konstantin Preißer [mailto:kpreis...@apache.org] Sent: Wednesday, December 18, 2013 6:24 PM - the user group Administrators is the name in English. In other locales, it is different (French : Administrateurs; German : Administratoren; Spanish:

RE: Some security-related questions / enhancements for the Windows Installer

2013-12-18 Thread Konstantin Preißer
Sorry for the spam... -Original Message- From: Konstantin Preißer [mailto:kpreis...@apache.org] Sent: Wednesday, December 18, 2013 8:00 PM To: 'Tomcat Users List' Subject: RE: Some security-related questions / enhancements for the Windows Installer -Original Message-

[OT] Garbage Collectors

2013-12-18 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, I was recently discussing garbage collectors with a friend (yes, an exciting conversation) and I was wondering what the folks in the Tomcat community were using for their garbage collection needs. I'd like to run an informal poll. Feel free

Re: [OT] Garbage Collectors

2013-12-18 Thread Howard W. Smith, Jr.
On Wed, Dec 18, 2013 at 6:11 PM, Christopher Schultz ch...@christopherschultz.net wrote: 1. What JVM are you using? Answer: [X] Sun/Oracle/OpenJDK Java 1.7 2. What kind of web application are you running? Answer: [X] A moderately busy web site (1M requests/mo/server) 3. What is

Re: [OT] Garbage Collectors

2013-12-18 Thread Leon Rosenberg
Hello, On Thu, Dec 19, 2013 at 12:11 AM, Christopher Schultz ch...@christopherschultz.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, I was recently discussing garbage collectors with a friend (yes, an exciting conversation) and I was wondering what the folks in the

Re: [OT] Garbage Collectors

2013-12-18 Thread Leon Rosenberg
On Thu, Dec 19, 2013 at 12:51 AM, Howard W. Smith, Jr. smithh032...@gmail.com wrote: On Wed, Dec 18, 2013 at 6:11 PM, Christopher Schultz ch...@christopherschultz.net wrote: 3. What is your total heap size? -Xms4096m -Xmx4096m -XX:MaxPermSize=384m (will share this as well, just

Re: [OT] Garbage Collectors

2013-12-18 Thread Howard W. Smith, Jr.
On Wed, Dec 18, 2013 at 6:57 PM, Leon Rosenberg rosenberg.l...@gmail.comwrote: On Thu, Dec 19, 2013 at 12:51 AM, Howard W. Smith, Jr. smithh032...@gmail.com wrote: On Wed, Dec 18, 2013 at 6:11 PM, Christopher Schultz ch...@christopherschultz.net wrote: 3. What is your total heap

Re: [OT] Garbage Collectors

2013-12-18 Thread David Kerber
On 12/18/2013 6:11 PM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, I was recently discussing garbage collectors with a friend (yes, an exciting conversation) and I was wondering what the folks in the Tomcat community were using for their garbage collection

Re: tomcat unexpected shutdown

2013-12-18 Thread 박원석
Thanks, your response I found the problem why tomcat unexpectly shutdown.it is not a system.exit() method and kill command and shutdown port The problem is that the opertator using his own script to start tomcat. the script is like this = #!/bin/bash

Re: tomcat unexpected shutdown

2013-12-18 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 박원석, On 12/18/13, 9:47 PM, 박원석 wrote: Thanks, your response I found the problem why tomcat unexpectly shutdown.it is not a system.exit() method and kill command and shutdown port The problem is that the opertator using his own script to

Re: Modify content in META-INF/context.xml

2013-12-18 Thread Jose María Zaragoza
2013/12/18 Jeffrey Janner jeffrey.jan...@polydyne.com: I think that at 6.x you need to do one of the following to the context.xml file located in the configBase ($CATALINA_BASE/conf/[enginename]/[hostname]/): 1. make the changes to the file there and reload the webapp 2. make the changes in