Re: What would it take for you to attend ApacheCon North America in April 2015
On Mon, Dec 8, 2014 at 4:39 PM, Mark Thomas ma...@apache.org wrote: The call for papers is currently open for ApacheCon North America in April 2015. While I could submit some talks on what ever Tomcat related subject I fancy talking about, I'd prefer to talk about what you want to hear. So, with that in mind what Tomcat talk(s) would need to be on the schedule for you to be able to (convince your manager to let you) attend ApacheCon North America next year? Can't attend ... but I'll throw out 4 fun [YMMV] ideas in case there is interest by someone else ... - Security year in review ... My heart bled POODLE and other reasons I was kept up at night. - On the road[map] again, possible inclusions in the next servlet spec and how that will affect the next Tomcat release. - Non-blocking IO. Is everything awesome? - Getting the cat back in the bag. Deploying your apps in Tomcat on Docker.
Re: What would it take for you to attend ApacheCon North America in April 2015
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Tim, On 12/12/14 9:26 AM, Tim Funk wrote: On Mon, Dec 8, 2014 at 4:39 PM, Mark Thomas ma...@apache.org wrote: The call for papers is currently open for ApacheCon North America in April 2015. While I could submit some talks on what ever Tomcat related subject I fancy talking about, I'd prefer to talk about what you want to hear. So, with that in mind what Tomcat talk(s) would need to be on the schedule for you to be able to (convince your manager to let you) attend ApacheCon North America next year? Can't attend ... but I'll throw out 4 fun [YMMV] ideas in case there is interest by someone else ... - Security year in review ... My heart bled POODLE and other reasons I was kept up at night. Amusingly enough, Sander Temme was giving his presentation at ApacheCon NA 2014 on the State of the SSL Union when great number of audience members first heard about Heartbleed - I was certainly amongst those. A bunch of people walked out immediately to go call clients and everyone else had their mobile phones out, furiously sending emails and text messages. I would imagine that Sander will give another presentation on the same topic, so this one will probably be covered. Anyone who might be interested in attending could bet on such a presentation. - On the road[map] again, possible inclusions in the next servlet spec and how that will affect the next Tomcat release. +1 - Non-blocking IO. Is everything awesome? +1 NIO is the default connector in Tomcat 8.x and BIO is already gone from trunk/9.0, so everyone needs to get with the NIO program. - Getting the cat back in the bag. Deploying your apps in Tomcat on Docker. +1 Who doesn't love scripting Maven (which was invented to avoid scripting!)? :) - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1 Comment: GPGTools - http://gpgtools.org iQIcBAEBCAAGBQJUiwHRAAoJEBzwKT+lPKRY4xwP/031MG1cNW1avcAN2EPdNTq1 INFY1C83Wg3L1U7JW1zF903ed2BfQ5NmgCkbrXTdWTeQksgAlv6iK3MOGLEesREm C4f3+CeSWI3+e+cy1XCsKbhK1r49NvHpILz3Xfezyo9HPd5X6ix7z/B4ntskQWmS gb28surkrubJqI+87ip1GYob9q3Y142gO6LQkW3xW5Y1ErNBR7puXaSRhca9F3iD Ox3f7OxReAoahpWlJqMXDTgy+B5hcFB4HM1SDp9dlGbm2Rs24q/LKCjN8vL7wWVY ekEINh4jm7QZR1f70NOjxGUi775BkxGG3f8QOQ1r0iJE45JCf/aKuMkcRcnKpcfe N6SaG5dfCTdo4yFETcuNc+3b7LIvWsXP4p2wvSFiUH3ErOaqKr2Byg70F0Z7njzY 4ob+rqbpTIP9PbQ6cw245qHkM/nIMFKIuD+rLHke4zp8yi6Q4GcSgxuk0c5bnouH Uiiw3DhNTg3iHHaAY30MVCM6n6ryRjhqmDGxM9xjgOaQdi5jndofeMAUUVs+g3AN H7PLcIf012UO7VcUoHsqiifkwxRSJNLeNpt3p7tMT6ZLILROb0A7JWew9BYSWskP d7r2GRTtbOz8ka2gsjePcDsEvMT8Q+l+HiId5ft86XbrkId8WUrHc8BbXLoAevX2 tu8YEtrZv1kaDh3h9hFW =eyOe -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: What would it take for you to attend ApacheCon North America in April 2015
On 08/12/2014 21:39, Mark Thomas wrote: All, The call for papers is currently open for ApacheCon North America in April 2015. While I could submit some talks on what ever Tomcat related subject I fancy talking about, I'd prefer to talk about what you want to hear. So, with that in mind what Tomcat talk(s) would need to be on the schedule for you to be able to (convince your manager to let you) attend ApacheCon North America next year? I look forward to hearing your suggestions. Off-list I have had a request for a load-balancing / clustering deep-dive. Interestingly, I did a tutorial on this at ApacheCon Europe that was very well attended (something like 20 people) with no advertising at all apart from the sign-up option on the registration page. Slides and other supporting material is here: http://people.apache.org/~markt/presentations/2014-11-20-Tomcat-load-balancing-and-clustering/ Mark - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Help! Tomcat crashing on takeoff
I'm trying to bring up Tomcat on a customer's AS/400. It's at the same OS release as our own box, and Java 6 was just installed on it, sometime this past week. I get this exception in catalina.out: java.lang.ClassNotFoundException: org.apache.catalina.startup.Catalina at java.net.URLClassLoader.findClass(URLClassLoader.java:419) at java.lang.ClassLoader.loadClass(ClassLoader.java:643) at java.lang.ClassLoader.loadClass(ClassLoader.java:609) at org.apache.catalina.startup.Bootstrap.init(Bootstrap.java:235) at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:425) and this from stdout: Using CATALINA_BASE: /wintouch/tomcat Using CATALINA_HOME: /wintouch/tomcat Using CATALINA_TMPDIR: /wintouch/tomcat/temp Using JRE_HOME:/QOpenSys/QIBM/ProdData/JavaVM/jdk60/32bit Using CLASSPATH: /wintouch/tomcat/bin/bootstrap.jar:/wintouch/tomcat/bin/tomcat-juli.jar Tomcat started. which is exactly the same as what comes out of STDOUT when we launch Tomcat on our own box. I can't recall ever seeing this exception before, and I don't know what to make of it. Object size of their tomcat-juli.jar matches ours. -- James H. H. Lampert - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Help! Tomcat crashing on takeoff
From: James H. H. Lampert [mailto:jam...@touchtonecorp.com] Subject: Help! Tomcat crashing on takeoff I'm trying to bring up Tomcat on a customer's AS/400. Don't suppose you'd want to give us a clue as to _exactly_ which version of Tomcat you're trying to run? - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Tomcat 7 with APR connector: connection fails when client uses SSLv2Hello
I was using SSLProtocol=TLSv1 explicitly. However, when I switched to all the health monitor kicked back in. Interestingly though, I decided to switch it back to my original APR configuration (the one that was giving me issues with the health monitor in the first place) and the monitor continued to work. Not sure why it's working now but I'm leaving my APR connector with SSLProtocol=all since that's what seemed to resolve my issue. Thanks! On Thu, Dec 11, 2014 at 5:02 PM, Christopher Schultz ch...@christopherschultz.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Tadeusz, On 12/11/14 2:15 PM, Sacilowski, Tadeusz wrote: I'm in the process of upgrading our Tomcat servers to Tomcat 7 (7.0.57). I'm also trying to use the APR connector (TC-Native 1.1.32) for SSL. The servers sit behind an F5 load balancer (LTM 10.2.1) that uses an HTTP health monitor to mark nodes up/down. Prior to updating to the APR connector, I was using NIO, with SSLv3 disabled, and the health monitor worked properly: sslProtocol=TLS sslEnabledProtocols=TLSv1.2,TLSv1.1,TLSv1,SSLv2Hello The SSLv2Hello is necessary, as the F5 health monitor uses this and there's apparently no way to force TLS with the version that we're on (when I don't explicitly include it, the health monitor fails). There are also possibly some legacy applications that would be using the pseudo-protocol as well. When trying to use the APR connector (with SSLv3 being disabled), the health monitor fails to connect. Some troubleshooting with OpenSSL (0.9.8x) indicated that I need to force a connection with -tls1 in order for it to connect (see my post at stackoverflow: http://stackoverflow.com/questions/27410851/openssl-s-client-cant-connect-to-tomcat-7-via-apr/27414403#27414403 ). I'm assuming the issue is because SSLv2Hello is disabled with the APR connector... is there any way to explicitly enable is, as I do in the NIO connector? What does your APR connector configuration look like? From your SO post it looks like you have TLSv1 only. What if you try all (the default)? This will include only TLS protocols when using Tomcat 7.0.57 or later with tcnative 1.1.32 or later (and not SSL) but it looks like OpenSSL might use SSLv2hello when there is more than one protocol supported. Your other option is to simply re-enable SSLv3 on the Tomcat server and use your firewall to prevent anyone from connecting except for your load-balancer (which, presumably, you trust). SSLv3 is only risky when you don't trust your clients. - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1 Comment: GPGTools - http://gpgtools.org iQIcBAEBCAAGBQJUihRjAAoJEBzwKT+lPKRYPXgP+wXY1FshX5CbS7MREsSCXW3L JijWrldOTzN/jWEmmMOKEmJ1ff3SXjUPR2z5o5lTT5fGRBb190f4hOxWLqJke48d 1GJTmufQfYBGHZ/Bp43G/3WqwtsvqqznOUWzajcN/Vt+HWMbmRT3u5V/ApTAC+I/ uhzSjj07QvfU27pK/fFzgMZsN9InPoV5uibnUUhabu+6xtkk4gLYxi2LKRJjlM0j HX7SQ0cnqpOxjqMDmQLVyaMLDI80e1XYGdtkEDnYYQQApe7eHHIyk9QrrEoNufpJ VMuX/A7sX1f/kHvUQSey16YTBW/ujPFCjGG/j7Te32f4sHTE5eB1RdTdqpinlu5g +2Ltm0t8tuczHsqogFB4+5M78jNcNCKBr3Gpq1CpxUdib3gmsTg9PRVOCIYQ6AiB WtDfxIdIO4FV2fTyDTlk3jAx1SdwCe8ELmnjXd8wOzvWPDH4HbjLFu96oFcqjWsK DB3psjBGTMzeVnAct46N7CZwLCFhziEaPyA+nBKdMCVQineVNxozT9h6fB5pykJ3 5AxlJa756fdi/zm5CDKDKWsTP/OeFllUA82rFeJX3ugjsBt+crKIToI1d8oDuglA 7aYVdvgiMKemutAaY4S4QTREdtbCtKjYgbKr0Ur9s88iKPVQ1IANawiUDLsSWT5n aJw4LYHfurebFe+vOwez =sz1Q -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org -- *Tadeusz Sacilowski* *Manager, Portal Mobile Development* Teachers College, Columbia University sacilow...@tc.columbia.edu
Re: Help! Tomcat crashing on takeoff
On 12/12/14 10:02 AM, Caldarale, Charles R wrote: From: James H. H. Lampert [mailto:jam...@touchtonecorp.com] Subject: Help! Tomcat crashing on takeoff I'm trying to bring up Tomcat on a customer's AS/400. Don't suppose you'd want to give us a clue as to _exactly_ which version of Tomcat you're trying to run? Certainly. The customer box (an AS/400 at V6R1) is, according to RELEASE-NOTES, on 7.0.56. Our box (another AS/400 at V6R1) is on 7.0.54. We have another customer box (another AS/400, this one at V7R1) that is running 7.0.56 just fine. I just wiped out the /wintouch/tomcat directory (same convention we use at all of our Tomcat installations), re-unzipped it, and tried to launch it without doing any of our usual configuration changes (e.g., enabling SSL, setting up a user for Manager). It still crashed exactly the same way. -- James H. H. Lampert - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Help! Tomcat crashing on takeoff
Couple of things that comes to mind 1. the 'java' binary that gets executed is actually not the one you think it is 2. the file /wintouch/tomcat/bin/bootstrap.jar is corrupted or not readable by the JVM hence it can't find the class Filip On Fri, Dec 12, 2014 at 11:27 AM, James H. H. Lampert jam...@touchtonecorp.com wrote: On 12/12/14 10:02 AM, Caldarale, Charles R wrote: From: James H. H. Lampert [mailto:jam...@touchtonecorp.com] Subject: Help! Tomcat crashing on takeoff I'm trying to bring up Tomcat on a customer's AS/400. Don't suppose you'd want to give us a clue as to _exactly_ which version of Tomcat you're trying to run? Certainly. The customer box (an AS/400 at V6R1) is, according to RELEASE-NOTES, on 7.0.56. Our box (another AS/400 at V6R1) is on 7.0.54. We have another customer box (another AS/400, this one at V7R1) that is running 7.0.56 just fine. I just wiped out the /wintouch/tomcat directory (same convention we use at all of our Tomcat installations), re-unzipped it, and tried to launch it without doing any of our usual configuration changes (e.g., enabling SSL, setting up a user for Manager). It still crashed exactly the same way. -- James H. H. Lampert - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: tomcat on windows 2012 weirdness
Hi Chris Thanks for your replies. I am somewhat new to Tomcat, only been using it for 1 year, so some of the technical details are new to me. Is it possible that you are not using URL-based session ids, and that your browser has cookies disabled via a policy? I will need to check URL-based session ids. How do I check? Also, my browser does not have cookies disabled. Is the browser or the server (or both) on Windows 2012? The server is on Win 2012. It works OK when both the browser and server are the same 2012 VM. I don't know if it works when both client and server are both Win 2012 but different machines. I will be able to check that soon. It does not work with different client OS version and box than the server, but that may simply be coincidence. Try using a protocol sniffer to see if the browser is sending a session id to the server, and if the server is responding with a session id either before or after login. Wow, that sounds intimidating - never done that before. :-) -- Cris Berneburg, Lead Software Engineer CACI, IRMA Project, 703-679-5313 -Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Thursday, December 11, 2014 1:35 PM To: Tomcat Users List Subject: Re: tomcat on windows 2012 weirdness -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Cris, On 12/11/14 12:41 PM, Christopher Schultz wrote: Cris, On 12/11/14 11:28 AM, Cris Berneburg - US wrote: I'm having trouble with my JSP web app using Tomcat 6 and 7 on Windows Server 2012. The issue is that no matter what file I request in the browser URL, it always returns the app welcome file, that is, the login page. Even when requesting an image. The one exception is that after logging in, the main menu page appears, but none of the graphics or CSS files load. Clicking on the app links, it just brings up the welcome page again. Checking the Tomcat log files, I see that Tomcat is returning the welcome page instead of the files requested in the main menu page. Using the Tomcat manager, I see that my application has a ridiculous number of sessions, instead of just one. I interpret that for every single file requested, a new Tomcat session is being generated and possibly invalidated. FYI, using the same setup on Windows Server 2003 and 2008 works fine. Opening the same firewall ports on all three OS's has been done. Even disabling the firewall on 2012 does not affect the issue in any way. And to make things even weirder, accessing the application from a browser on the server itself using localhost works fine! I wonder if there is some mystery setting somewhere that is crippling the app. Got any suggestions? Please help. Thanks! Check two quick things: 1. Do you have any security-constraints in WEB-INF/web.xml? If so, do they all make sense, and can users actually access those resources once logged-in (or at all)? 2. Do you have any servlets in WEB-INF/web.xml mapped to / other than the DefaultServlet (which should be configured by default so you shouldn't have to configure it yourself)? After re-reading your post, it's pretty clear that my initial questions will be worthless and not help you. Is it possible that you are not using URL-based session ids, and that your browser has cookies disabled via a policy? Is the browser or the server (or both) on Windows 2012? Try using a protocol sniffer to see if the browser is sending a session id to the server, and if the server is responding with a session id either before or after login. - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1 Comment: GPGTools - http://gpgtools.org iQIcBAEBCAAGBQJUiePTAAoJEBzwKT+lPKRYORoP/iCMTFyLmWf6SCBbQX4HH7A+ zGFqVw95Iaf2Kd2xwMqy6xA8SLpVhtr/TezyJQQHTCg3pMgx9NS9kFZPV4QACEVF iM6QGk0xnzEo5v4SBTgj9dp/aIF3eYQV0P6kkLGlEm7Zgno/nIHHRL3hYQAj+Lj9 f7czP1nEx2+OyoVtVedV1LxyvuohtUJto5/c1cslwl3+GhCYNqqAcFchdRjDp/KI qt9IWvkC3OfS+asTfxJ23BITAHXnTDOemeIYZ9yRolVfbYzI8+JtNMDjMB69hQgS yy45//MI38p50dW2+qxNk41R113I3rL7fvAV7lKJh6Eaxr/R0oxUgEj1cSv34s5X x30feYSxmpVBveCgb4pmiGoZ/DmEhb53qHDs5EbPE3LkjkN9nAN1A9mGscwMETBC SqF1ECgJz8H95hOOf/g45CZSyB+5fQ1VHoTGQQya6WBVYrvfl+tRxCMw2bP2/I2L 2Owl4IYOGZxqjkMHzX5ubRYqE2TLXo3pgTNKYRaR6fJhlR04gAZqdnAXCES67VD0 WSFqSQcMZYuzZvCAJ87YOiCLbvF48uV2BEOUTmxp92f1i1o3qoAqrmOZVtP1d+Gu rxXHYjd0sw0jV27VWpoWc0KVsLP/ZXxKrjU2h8OE0vr5MHeZkPyj6YKs9BISV8An 30qBjkuotwNX319XEmtz =zyqf -END PGP SIGNATURE-
Re: Help! Tomcat crashing on takeoff
On Sat, Dec 13, 2014 at 12:01 AM, Filip Hanik fi...@hanik.com wrote:
Couple of things that comes to mind
1. the 'java' binary that gets executed is actually not the one you think
it is
2. the file /wintouch/tomcat/bin/bootstrap.jar is corrupted or not readable
by the JVM hence it can't find the class
org.apache.catalina.startup.Catalina is distributed as part of
catalina.jar.
catalina.jar is loaded by common.loader defined catalina.properties:
common.loader=${catalina.base}/lib,${catalina.base}/lib/*.jar,${catalina.home}/lib,${catalina.home}/lib/*.jar
As stack-trace shows Bootstrap has been loaded successfully. So
bootstrap.jar is not an issue.
Can you please check your conf/catalina.properties, it contains above line?
Filip
On Fri, Dec 12, 2014 at 11:27 AM, James H. H. Lampert
jam...@touchtonecorp.com wrote:
On 12/12/14 10:02 AM, Caldarale, Charles R wrote:
From: James H. H. Lampert [mailto:jam...@touchtonecorp.com]
Subject: Help! Tomcat crashing on takeoff
I'm trying to bring up Tomcat on a customer's AS/400.
Don't suppose you'd want to give us a clue as to _exactly_ which
version of Tomcat you're trying to run?
Certainly.
The customer box (an AS/400 at V6R1) is, according to RELEASE-NOTES, on
7.0.56. Our box (another AS/400 at V6R1) is on 7.0.54. We have another
customer box (another AS/400, this one at V7R1) that is running 7.0.56
just
fine.
I just wiped out the /wintouch/tomcat directory (same convention we use
at
all of our Tomcat installations), re-unzipped it, and tried to launch it
without doing any of our usual configuration changes (e.g., enabling SSL,
setting up a user for Manager). It still crashed exactly the same way.
--
James H. H. Lampert
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Help! Tomcat crashing on takeoff
On Sat, Dec 13, 2014 at 12:01 AM, Filip Hanik fi...@hanik.com wrote:
Couple of things that comes to mind
1. the 'java' binary that gets executed is actually not the one you think
it is
2. the file /wintouch/tomcat/bin/bootstrap.jar is corrupted or not readable
by the JVM hence it can't find the class
org.apache.catalina.startup.Catalina is distributed as part of
catalina.jar, located at CATALINA_BASE/lib.
catalina.jar is loaded by commonloader defined having classpath defined in
catalina.properties:
common.loader=${catalina.base}/lib,${catalina.base}/lib/*.jar,${catalina.home}/lib,${catalina.home}/lib/*.jar
As stack-trace shows Bootstrap has been loaded successfully. So
bootstrap.jar is not an issue.
Can you please check your conf/catalina.properties, if it contains above
line?
Filip
On Fri, Dec 12, 2014 at 11:27 AM, James H. H. Lampert
jam...@touchtonecorp.com wrote:
On 12/12/14 10:02 AM, Caldarale, Charles R wrote:
From: James H. H. Lampert [mailto:jam...@touchtonecorp.com]
Subject: Help! Tomcat crashing on takeoff
I'm trying to bring up Tomcat on a customer's AS/400.
Don't suppose you'd want to give us a clue as to _exactly_ which
version of Tomcat you're trying to run?
Certainly.
The customer box (an AS/400 at V6R1) is, according to RELEASE-NOTES, on
7.0.56. Our box (another AS/400 at V6R1) is on 7.0.54. We have another
customer box (another AS/400, this one at V7R1) that is running 7.0.56
just
fine.
I just wiped out the /wintouch/tomcat directory (same convention we use
at
all of our Tomcat installations), re-unzipped it, and tried to launch it
without doing any of our usual configuration changes (e.g., enabling SSL,
setting up a user for Manager). It still crashed exactly the same way.
--
James H. H. Lampert
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Tomcat 7 with APR connector: connection fails when client uses SSLv2Hello
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Tadeusz, On 12/12/14 1:09 PM, Sacilowski, Tadeusz wrote: I was using SSLProtocol=TLSv1 explicitly. However, when I switched to all the health monitor kicked back in. Interestingly though, I decided to switch it back to my original APR configuration (the one that was giving me issues with the health monitor in the first place) and the monitor continued to work. Not sure why it's working now but I'm leaving my APR connector with SSLProtocol=all since that's what seemed to resolve my issue. Assuming that you have OpenSSL 1.0+, you'll want to be able to support TLSv1, TLSv1.1, and TLSv1.2, though I suppose if it's just for communication between your load-balancer and your Tomcat nodes, it's probably not critical that you be able to support the very latest in TLS protocol. Good luck, - -chris On Thu, Dec 11, 2014 at 5:02 PM, Christopher Schultz ch...@christopherschultz.net wrote: Tadeusz, On 12/11/14 2:15 PM, Sacilowski, Tadeusz wrote: I'm in the process of upgrading our Tomcat servers to Tomcat 7 (7.0.57). I'm also trying to use the APR connector (TC-Native 1.1.32) for SSL. The servers sit behind an F5 load balancer (LTM 10.2.1) that uses an HTTP health monitor to mark nodes up/down. Prior to updating to the APR connector, I was using NIO, with SSLv3 disabled, and the health monitor worked properly: sslProtocol=TLS sslEnabledProtocols=TLSv1.2,TLSv1.1,TLSv1,SSLv2Hello The SSLv2Hello is necessary, as the F5 health monitor uses this and there's apparently no way to force TLS with the version that we're on (when I don't explicitly include it, the health monitor fails). There are also possibly some legacy applications that would be using the pseudo-protocol as well. When trying to use the APR connector (with SSLv3 being disabled), the health monitor fails to connect. Some troubleshooting with OpenSSL (0.9.8x) indicated that I need to force a connection with -tls1 in order for it to connect (see my post at stackoverflow: http://stackoverflow.com/questions/27410851/openssl-s-client-cant-connect-to-tomcat-7-via-apr/27414403#27414403 ). I'm assuming the issue is because SSLv2Hello is disabled with the APR connector... is there any way to explicitly enable is, as I do in the NIO connector? What does your APR connector configuration look like? From your SO post it looks like you have TLSv1 only. What if you try all (the default)? This will include only TLS protocols when using Tomcat 7.0.57 or later with tcnative 1.1.32 or later (and not SSL) but it looks like OpenSSL might use SSLv2hello when there is more than one protocol supported. Your other option is to simply re-enable SSLv3 on the Tomcat server and use your firewall to prevent anyone from connecting except for your load-balancer (which, presumably, you trust). SSLv3 is only risky when you don't trust your clients. -chris - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org -BEGIN PGP SIGNATURE- Version: GnuPG v1 Comment: GPGTools - http://gpgtools.org iQIcBAEBCAAGBQJUi0IVAAoJEBzwKT+lPKRYw0YP/RT4OS7qTq0W3inkfem8ELyU XIkUrmSpiK4EbSmEskXXH6I9bJUkj8momfMbsEVBncKPMHD2FT98+Atw/tQfKGtN QmzDsqgSdcY5L2XaZ5XHRHql3/QliTQRG5ykfc0cdE+YErtGcuehkgcr52cowXTc hrqnHMJshXP8DPwkJA4HV6FUsO3icL22z+XBvqc8LCnoHNWBH5DIpV62Pn5XlSO3 lyrluagPMcEtWaEUNsc05oNtOYIYSO6Ll8KLjO/QNKty9o0TcP8v1cLaFMakWwS1 +ok8C2huaisHM4byg3o1WU9Qh21kUz/BoNu48l61nv7H4pDfeBDSxkIfglX5co53 QvxTIRpShn0N4S+lxtGfx5qydbsawE8OfyZIgNTeyHWw4Kahi1sy6NqdEwq63sZJ 2tejSyBNR08n9VCkX29zeks/zm+1TPM5KCssRqxyWHqDznRUfySUrB2oKlGVNKnn FMaqHTJVaY6SwuGB0CiOBECEFT010XggBY7XgJ3Un/98yR/IV0OgsLSz7VYGAKob wfsPnBNaBXyXlHCumEq1M4MhOv/3M3LVtw+z6PNJ/+dCOW+19PQGddXpHhpPowvL XwATOrPxRhE+lFrbccteqatDH/rpJomtRT5xHruJnEtXUL2H+ZaHljrWhwk3VryL kqrm5Onk60QFsAvmg6td =6SEw -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: tomcat on windows 2012 weirdness
Andre Thanks for taking the time to respond to my plea. :-) the way you describe it sounds like an authentication problem, where a bunch of near simultaneous requests to the server (for embedded images, css, etc.) all hit some not yet authenticated condition, and all together (or rather each separately) return a 401 or similar (or a login page instead of a requested image e.g.). Maybe there is something new in that respect with Windows Server 2012, which your application's authentication framework does not handle well ? My problem is that I don't know what changed in Win 2012 that would cause Tomcat to behave differently. Perhaps it's a default security setting that changed? FYI, I can request image files from the 2008 server w/o being logged in and they display just fine. Below is a sample from my localhost_access_log. Notice that all the files, except for the favicon which we don't have, all return a status of 200 and size 3715 - the welcome file - no matter what was requested. 200 means OK, right? 10.25.20.35 - - [03/Dec/2014:11:50:04 -0500] GET /app/ HTTP/1.1 200 3715 10.25.20.35 - - [03/Dec/2014:11:50:05 -0500] GET /app/include/styles.css HTTP/1.1 200 3715 10.25.20.35 - - [03/Dec/2014:11:50:05 -0500] GET /app/css/GridStyle.css HTTP/1.1 200 3715 10.25.20.35 - - [03/Dec/2014:11:50:05 -0500] GET /app/images/back2.gif HTTP/1.1 200 3715 10.25.20.35 - - [03/Dec/2014:11:50:06 -0500] GET /images/favicon.ico HTTP/1.1 404 987 10.25.20.35 - - [03/Dec/2014:11:51:27 -0500] POST /app/Login HTTP/1.1 200 5526 10.25.20.35 - - [03/Dec/2014:11:51:27 -0500] GET /app/include/styles.css HTTP/1.1 200 3715 10.25.20.35 - - [03/Dec/2014:11:51:27 -0500] GET /app/images/back2.gif HTTP/1.1 200 3715 10.25.20.35 - - [03/Dec/2014:11:51:27 -0500] GET /app/css/GridStyle.css HTTP/1.1 200 3715 10.25.20.35 - - [03/Dec/2014:11:51:27 -0500] GET /app/images/f15.jpg HTTP/1.1 200 3715 10.25.20.35 - - [03/Dec/2014:11:51:28 -0500] GET /app/images/tab-off.gif HTTP/1.1 200 3715 10.25.20.35 - - [03/Dec/2014:11:51:28 -0500] GET /images/favicon.ico HTTP/1.1 404 987 10.25.20.35 - - [03/Dec/2014:11:59:08 -0500] GET /app/main/main.jsp HTTP/1.1 200 3715 10.25.20.35 - - [03/Dec/2014:11:59:08 -0500] GET /app/include/styles.css HTTP/1.1 200 3715 10.25.20.35 - - [03/Dec/2014:11:59:08 -0500] GET /app/images/back2.gif HTTP/1.1 200 3715 10.25.20.35 - - [03/Dec/2014:11:59:08 -0500] GET /app/css/GridStyle.css HTTP/1.1 200 3715 10.25.20.35 - - [03/Dec/2014:11:59:08 -0500] GET /app/images/favicon.ico HTTP/1.1 200 3715 (or the structure of your application). (e.g. the login page itself contains references to images and css which themselves are in a protected area and so on). Eh, the login page itself is really plain - no images in it. Just the pages afterwards once you log in. -- Cris Berneburg, Lead Software Engineer CACI, IRMA Project, 703-679-5313 -Original Message- From: André Warnier [mailto:a...@ice-sa.com] Sent: Thursday, December 11, 2014 1:22 PM To: Tomcat Users List Subject: Re: tomcat on windows 2012 weirdness Cris Berneburg - US wrote: Hi Folks I'm having trouble with my JSP web app using Tomcat 6 and 7 on Windows Server 2012. The issue is that no matter what file I request in the browser URL, it always returns the app welcome file, that is, the login page. Even when requesting an image. The one exception is that after logging in, the main menu page appears, but none of the graphics or CSS files load. Clicking on the app links, it just brings up the welcome page again. Checking the Tomcat log files, I see that Tomcat is returning the welcome page instead of the files requested in the main menu page. Using the Tomcat manager, I see that my application has a ridiculous number of sessions, instead of just one. I interpret that for every single file requested, a new Tomcat session is being generated and possibly invalidated.. FYI, using the same setup on Windows Server 2003 and 2008 works fine. Opening the same firewall ports on all three OS's has been done. Even disabling the firewall on 2012 does not affect the issue in any way. And to make things even weirder, accessing the application from a browser on the server itself using localhost works fine! I wonder if there is some mystery setting somewhere that is crippling the app. Got any suggestions? Please help. Thanks! Without realling getting to the bottom of it, the way you describe it sounds like an authentication problem, where a bunch of near simultaneous requests to the server (for embedded images, css, etc.) all hit some not yet authenticated condition, and all together (or rather each separately) return a 401 or similar (or a login page instead of a requested image e.g.). Maybe there is something new in that respect with Windows Server 2012, which your application's authentication framework does not handle well ? (or the structure of your application). (e.g. the login
Re: tomcat on windows 2012 weirdness
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Cris, On 12/12/14 2:18 PM, Cris Berneburg - US wrote: Hi Chris Thanks for your replies. I am somewhat new to Tomcat, only been using it for 1 year, so some of the technical details are new to me. Is it possible that you are not using URL-based session ids, and that your browser has cookies disabled via a policy? I will need to check URL-based session ids. How do I check? If your browser has cookies disabled, then all the links on the web pages in this web application should have a ;jsessionid=[id] path parameter added to them. See below. Also, my browser does not have cookies disabled. This is almost certainly the issue. If your browser does not support cookies (Tomcat knows if you support cookies if you send a JSESSIONID cookie, but it can't tell if you send nothing), then the web application must fall-back to using URL-based session-tracking. Unfortunately, this isn't entirely auto-magical: the web application needs to support it properly. Most 3rd-party web applications should already be doing things properly, but if you have an in-house application, it may not be written properly. When emitting a URL onto a page for a client, the application needs to run the URL through a call to HttpServletResponse.encodeURL(String) or HttpServletResponse.encodeRedirectURL(String). These methods will add the ;jsessionid=[id] path parameter to the URL when the client does not support cookies. In this way, session-tracking will still work. If the application isn't doing this for *every URL in the whole application*, then sessions can be dropped and the user will have to re-authenticate. If this is the case, you only have two options: 1. Re-enable cookies on your browser 2. Review the application and fix every instance of a URL on a page (it's a huge job) Is the browser or the server (or both) on Windows 2012? The server is on Win 2012. It works OK when both the browser and server are the same 2012 VM. I don't know if it works when both client and server are both Win 2012 but different machines. I will be able to check that soon. It does not work with different client OS version and box than the server, but that may simply be coincidence. It may be a cookie policy: if localhost is trusted, the cookie policy may change. Try using a protocol sniffer to see if the browser is sending a session id to the server, and if the server is responding with a session id either before or after login. Wow, that sounds intimidating - never done that before. :-) It's worth learning how to do. I think there's a plug-in for MSIE called IEHeaders (or something similar). Install that and you can watch the conversation between client and server -- even when TLS is being used. Hope that helps, - -chris -Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Thursday, December 11, 2014 1:35 PM To: Tomcat Users List Subject: Re: tomcat on windows 2012 weirdness Cris, On 12/11/14 12:41 PM, Christopher Schultz wrote: Cris, On 12/11/14 11:28 AM, Cris Berneburg - US wrote: I'm having trouble with my JSP web app using Tomcat 6 and 7 on Windows Server 2012. The issue is that no matter what file I request in the browser URL, it always returns the app welcome file, that is, the login page. Even when requesting an image. The one exception is that after logging in, the main menu page appears, but none of the graphics or CSS files load. Clicking on the app links, it just brings up the welcome page again. Checking the Tomcat log files, I see that Tomcat is returning the welcome page instead of the files requested in the main menu page. Using the Tomcat manager, I see that my application has a ridiculous number of sessions, instead of just one. I interpret that for every single file requested, a new Tomcat session is being generated and possibly invalidated. FYI, using the same setup on Windows Server 2003 and 2008 works fine. Opening the same firewall ports on all three OS's has been done. Even disabling the firewall on 2012 does not affect the issue in any way. And to make things even weirder, accessing the application from a browser on the server itself using localhost works fine! I wonder if there is some mystery setting somewhere that is crippling the app. Got any suggestions? Please help. Thanks! Check two quick things: 1. Do you have any security-constraints in WEB-INF/web.xml? If so, do they all make sense, and can users actually access those resources once logged-in (or at all)? 2. Do you have any servlets in WEB-INF/web.xml mapped to / other than the DefaultServlet (which should be configured by default so you shouldn't have to configure it yourself)? After re-reading your post, it's pretty clear that my initial questions will be worthless and not help you. Is it possible that you are not using URL-based session ids, and that your browser
Re: Help! Tomcat crashing on takeoff
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Filip, On 12/12/14 1:31 PM, Filip Hanik wrote: Couple of things that comes to mind 1. the 'java' binary that gets executed is actually not the one you think it is 2. the file /wintouch/tomcat/bin/bootstrap.jar is corrupted or not readable by the JVM hence it can't find the class +1 I wouldn't be surprised if the AS/400 unzip software does Bad Things to ZIP archives. Make sure you use UNIX-compatible tools to unpack everything, or maybe do everything from inside that UNIX-like environment (I seem to recall that, while you are running AS/400's i OS, you are also running some kind of UNIX-like environment on top of it). You might even want to check MD5 digest or something similar on the two machines to see if any files have been corrupted. EBCDIC can certainly be confusing things, here. - -chris On Fri, Dec 12, 2014 at 11:27 AM, James H. H. Lampert jam...@touchtonecorp.com wrote: On 12/12/14 10:02 AM, Caldarale, Charles R wrote: From: James H. H. Lampert [mailto:jam...@touchtonecorp.com] Subject: Help! Tomcat crashing on takeoff I'm trying to bring up Tomcat on a customer's AS/400. Don't suppose you'd want to give us a clue as to _exactly_ which version of Tomcat you're trying to run? Certainly. The customer box (an AS/400 at V6R1) is, according to RELEASE-NOTES, on 7.0.56. Our box (another AS/400 at V6R1) is on 7.0.54. We have another customer box (another AS/400, this one at V7R1) that is running 7.0.56 just fine. I just wiped out the /wintouch/tomcat directory (same convention we use at all of our Tomcat installations), re-unzipped it, and tried to launch it without doing any of our usual configuration changes (e.g., enabling SSL, setting up a user for Manager). It still crashed exactly the same way. -- James H. H. Lampert - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org -BEGIN PGP SIGNATURE- Version: GnuPG v1 Comment: GPGTools - http://gpgtools.org iQIcBAEBCAAGBQJUi0VRAAoJEBzwKT+lPKRY0g0QAKwVFa21odF26f1CjOQ1zV5C /Y8fCa1oELzwEMxpq9FhslYqESW00RMm0t1b6Yn4kmTwdl6iZ44ATNtsGQ5ke41C PvneFwUICPOMXcsdehJSZEbCbq8A2xMM4fq85DLvHnLcm+hL1RRL6Oob/AcfhcY7 /MIFC8UuSdbUfJ2lsCcrkgTDrjGQHP1AU03mn/pjIbTZ5OyvKrYWwq2KlB1P0JGr dFZanWzXRzORBRwz5cqN+tH4rRc3SfFSTVB2FH0kj3c9m9aa8E77M0VeZw4qjjOl B9ne3gCLwIQYiZzErwxn55TrJjqQd6f/5ZkfHzLAnXGN5BB84S0BGTM0j3fXp6/z YrvjevKqtbq6fwfrN7qhCUlmJqe8BbU0Xoal/3soS8QgB0FxqmI0Lc+zy1mwAgpz ZdrtAi0VCBLmbnAL6oOh3kt3kWnk+P1+Fvd3mG2yW8SmAHM7hC9gvd3Fn0qjp2n8 t4HWcWK3hLveol18+wvcRt3cJL+Qbr/Xk3LDnzdZXLhLNbKKQCUPn80hvpsQHpDu hL9gc1cYF3etuGb7jbaTeW5dUQMWZZ3/aABA05U1PKz02gfw7L0iqLL7EntvFcMh aEOpvmQ+mVtgRH8ouSE+6Bd/eDiQXk+aGTf2d8rHI8GkTVDijDsPI73voD/AgaD5 nNyhJNg4ygUhYMK1LPDf =g9/r -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: tomcat on windows 2012 weirdness
On Sat, Dec 13, 2014 at 1:06 AM, Christopher Schultz ch...@christopherschultz.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Cris, On 12/12/14 2:18 PM, Cris Berneburg - US wrote: Hi Chris Thanks for your replies. I am somewhat new to Tomcat, only been using it for 1 year, so some of the technical details are new to me. Is it possible that you are not using URL-based session ids, and that your browser has cookies disabled via a policy? I will need to check URL-based session ids. How do I check? If your browser has cookies disabled, then all the links on the web pages in this web application should have a ;jsessionid=[id] path parameter added to them. See below. Also, my browser does not have cookies disabled. This is almost certainly the issue. Chris, I think he meant cookies are already enabled on his browser. If your browser does not support cookies (Tomcat knows if you support cookies if you send a JSESSIONID cookie, but it can't tell if you send nothing), then the web application must fall-back to using URL-based session-tracking. Unfortunately, this isn't entirely auto-magical: the web application needs to support it properly. Most 3rd-party web applications should already be doing things properly, but if you have an in-house application, it may not be written properly. When emitting a URL onto a page for a client, the application needs to run the URL through a call to HttpServletResponse.encodeURL(String) or HttpServletResponse.encodeRedirectURL(String). These methods will add the ;jsessionid=[id] path parameter to the URL when the client does not support cookies. In this way, session-tracking will still work. If the application isn't doing this for *every URL in the whole application*, then sessions can be dropped and the user will have to re-authenticate. If this is the case, you only have two options: 1. Re-enable cookies on your browser 2. Review the application and fix every instance of a URL on a page (it's a huge job) Is the browser or the server (or both) on Windows 2012? The server is on Win 2012. It works OK when both the browser and server are the same 2012 VM. I don't know if it works when both client and server are both Win 2012 but different machines. I will be able to check that soon. It does not work with different client OS version and box than the server, but that may simply be coincidence. It may be a cookie policy: if localhost is trusted, the cookie policy may change. Try using a protocol sniffer to see if the browser is sending a session id to the server, and if the server is responding with a session id either before or after login. Wow, that sounds intimidating - never done that before. :-) It's worth learning how to do. I think there's a plug-in for MSIE called IEHeaders (or something similar). Install that and you can watch the conversation between client and server -- even when TLS is being used. If you are using IE9, it has a very useful utility in its developer tool to capture network traffic. Few simple steps to capture it: Press F12 -- Go to network tab-- start capturing You can save/export the captured data in an xml file and then can see everything going to-and-fro between your browser and server. Compare the traffic when you are communicating from localhost, which you say is working fine, with the traffic when you are accessing from an outside client. Pay special attention to the headers section of the HTTP calls. Hope that helps, - -chris -Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Thursday, December 11, 2014 1:35 PM To: Tomcat Users List Subject: Re: tomcat on windows 2012 weirdness Cris, On 12/11/14 12:41 PM, Christopher Schultz wrote: Cris, On 12/11/14 11:28 AM, Cris Berneburg - US wrote: I'm having trouble with my JSP web app using Tomcat 6 and 7 on Windows Server 2012. The issue is that no matter what file I request in the browser URL, it always returns the app welcome file, that is, the login page. Even when requesting an image. The one exception is that after logging in, the main menu page appears, but none of the graphics or CSS files load. Clicking on the app links, it just brings up the welcome page again. Checking the Tomcat log files, I see that Tomcat is returning the welcome page instead of the files requested in the main menu page. Using the Tomcat manager, I see that my application has a ridiculous number of sessions, instead of just one. I interpret that for every single file requested, a new Tomcat session is being generated and possibly invalidated. FYI, using the same setup on Windows Server 2003 and 2008 works fine. Opening the same firewall ports on all three OS's has been done. Even disabling the firewall on 2012 does not affect the issue in any way. And to make things even weirder, accessing the
Re: Help! Tomcat crashing on takeoff
On 12/12/14 11:21 AM, Ameer Mawia wrote:
catalina.jar is loaded by common.loader defined catalina.properties:
common.loader=${catalina.base}/lib,${catalina.base}/lib/*.jar,${catalina.home}/lib,${catalina.home}/lib/*.jar
As stack-trace shows Bootstrap has been loaded successfully. So
bootstrap.jar is not an issue.
Can you please check your conf/catalina.properties, it contains above line?
Hmm. Yes, it does.
I found some interesting joblog messages (especially after launching
startup.sh from an interactive QSHELL session) that had me checking
public authorities, but after resolving those messages, Tomcat continues
to crash on takeoff, with exactly the same exception as before.
--
JHHL
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
Re: tomcat on windows 2012 weirdness
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Ameer, On 12/12/14 3:11 PM, Ameer Mawia wrote: On Sat, Dec 13, 2014 at 1:06 AM, Christopher Schultz ch...@christopherschultz.net wrote: Cris, On 12/12/14 2:18 PM, Cris Berneburg - US wrote: Hi Chris Thanks for your replies. I am somewhat new to Tomcat, only been using it for 1 year, so some of the technical details are new to me. Is it possible that you are not using URL-based session ids, and that your browser has cookies disabled via a policy? I will need to check URL-based session ids. How do I check? If your browser has cookies disabled, then all the links on the web pages in this web application should have a ;jsessionid=[id] path parameter added to them. See below. Also, my browser does not have cookies disabled. This is almost certainly the issue. Chris, I think he meant cookies are already enabled on his browser. Ah! A double-negative. I read too quickly. Well, the protocol analyzer will certainly help inform the conversation. - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1 Comment: GPGTools - http://gpgtools.org iQIcBAEBCAAGBQJUi0zKAAoJEBzwKT+lPKRYZHAQAJYqjchuvYXOuYQN2PmjAbly dnlmXiOJIeaPVCaVtFy2oBxhxP0KaAZHFUdofF2n9Fx2s5EIL5fxexIp0wkQmmuE PORs1Wm5Iz0ArOVCXcP3lBgQFYB/TRY0ryo/2MTQE7Eto77frBGL6gduqiHeelJn vfJ9DF1IujxWadGVzhF6277wkANrL/RBJBr23ly/dBGmZ09mzGMtGWbLdXPxN6rv IimC1K8/r4RKbz8qYRib1CCx2Rmn5xfxw5aAp0I71xyUdBygSH6DiZmzLKDalCnV OqX6ujD5TlFO7x56I7/C+BdohZUXopTKQwVFnvbgbTsfBwZ9qNQCFtcI6QauYJWK B9Q8Jo5uZ+7kSE/5U9EY6G6vZUKGBi2iqc13CWMrpMNOavjO9vIc823WBjkfPVIP cd8WQgwjQaHLooGeHKxkPZDiUKXsIK4/aGLs38V2Oe3NvTnZLuWqAcXyuwke2/sP Yav+Yp9F7QKIZnlJWSjIM3Nk4DZjg4P2p3pi/N+k3ko0g/4L9P4tBirE2BwzT/Yu CpFLF//Io0xTeSk5BbB2ghTBY5dzZOZNA4oNhTAXvgvrLaENYKb2vwRu8ArACVR+ bBnFGgkEC+vl26KgcZVJEfrj+9Q+Q9eMAs7VkAIikfizZYogYdXBKNXdj+Y72LM2 /Cup5W8jGgaXJnzLCm8k =lmci -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Help! Tomcat crashing on takeoff
On 12/12/14 11:43 AM, Christopher Schultz wrote: I wouldn't be surprised if the AS/400 unzip software does Bad Things to ZIP archives. Make sure you use UNIX-compatible tools to unpack everything, or maybe do everything from inside that UNIX-like environment (I seem to recall that, while you are running AS/400's i OS, you are also running some kind of UNIX-like environment on top of it). You might even want to check MD5 digest or something similar on the two machines to see if any files have been corrupted. EBCDIC can certainly be confusing things, here. What AS/400 unzip software? When we unzip the Tomcat zip file on a system, we use JAR, in a QSHELL session. And likewise, JAR tvm jarname.jar shows what appear to be a good bin/bootstrap.jar, a good bin/tomcat-juli.jar, and a good lib/catalina.jar Now, KEYTOOL is a worthless mess on AS/400s, but I've never seen anything like this happen from using JAR on AS/400s. -- JHHL - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Help! Tomcat crashing on takeoff
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 James, On 12/12/14 3:19 PM, James H. H. Lampert wrote: On 12/12/14 11:43 AM, Christopher Schultz wrote: I wouldn't be surprised if the AS/400 unzip software does Bad Things to ZIP archives. Make sure you use UNIX-compatible tools to unpack everything, or maybe do everything from inside that UNIX-like environment (I seem to recall that, while you are running AS/400's i OS, you are also running some kind of UNIX-like environment on top of it). You might even want to check MD5 digest or something similar on the two machines to see if any files have been corrupted. EBCDIC can certainly be confusing things, here. What AS/400 unzip software? Hah, I can't tell if that's a joke or not. When we unzip the Tomcat zip file on a system, we use JAR, in a QSHELL session. And likewise, JAR tvm jarname.jar shows what appear to be a good bin/bootstrap.jar, a good bin/tomcat-juli.jar, and a good lib/catalina.jar Okay, good so far. Is there any way to run md5sum or something similar against them to determine that they are byte-for-byte identical to what you have on the other (working) system? jar should be able to unzip the Tomcat .zip distribution without any problems (JAR is just ZIP with a MANIFEST.MF file... and even that isn't required). Now, KEYTOOL is a worthless mess on AS/400s, but I've never seen anything like this happen from using JAR on AS/400s. - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1 Comment: GPGTools - http://gpgtools.org iQIcBAEBCAAGBQJUi1OvAAoJEBzwKT+lPKRYtwwP/i5XAtDgSXn0QjsZzYzLpKvF ygL/uK4LXqClHiiaOUHPYYRo9mDw3S1h3EsF6gr1qepoyZgGvxENd+q/8EfBJsT3 HSng3hkKSB2vrMGJDhCf0utXVXPfOm3c60OHiH4TKizQs/k6GYA0tvTSWX/pfPRg 8I2xuOHwe0FYX/9Xe5GyDnVKwC1J5/Omgsb4Fj9XL9WuvwJcmuDDyxQY0YyzjeWq 1sVdCOjFJUI6yD9qp7/76bKmh3Jd1m9gmjVhHtEO039k/wfq0du8LpfS5OpqZtjh uprHdKqZl+VfhVKA0tv2iOEaORy6KlNIqbpVJ6w9fYe06ELoO4fNWu158wGk8EWd Hq0uO1EfTCW8YfyjjAj2Sl1y/6JnPM5vhCgxnuQGRJWY2ag/NDDBVzPLaN6aQptk QzLyDExM5TX25+CvNtjvUycueVlAfhDad5YCVIHPyBsq/JmUNarOGNvS7zcoBVZV iEfKEwXguTwqSh3+5/ebeECPmAyPID0yF5ed/uQ8VX71A9Sv/fF31qFyhi3LKLxS WHnBRp4b/iXqRtIUCv/VRkg8tedGYyzGbWFV+e++Y7l2FQRbLGo+55h4xT7vQllS Ypp9qnIW+x5Sqgc6G9qZ3/aoTLbrXV+9yObV2aR2x5J1WTp1Yl00BgQEWmJbsiWz u7lGL0iCpbyS4DhgBzIY =u7Ly -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Tomcat 8.0.12 - unable to eliminate logs stating org.apache.catalina.webresources.Cache.getResource Unable to add the resource at [variousURLs] to the cache because there was insufficient free sp
I have read the reference, but nowhere can I find an example of what it’s talking about. My web.xml / context.xml don’t have a resource component in it that I can find, and nowhere can I find out what the syntax is or where to put it. This is why I’ve reached out to this group for help. If you can point me to an example or more detailed info I would appreciate it. Thanks, Kevin McKee Application Development Architect Goodyear Canada Inc. 388 Goodyear Rd, Napanee, ON K7R 3L2 phone.613.354.7850 krmc...@goodyear.com On 2014-12-09, 4:27 PM, Christopher Schultz ch...@christopherschultz.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Kevin, On 12/9/14 11:01 AM, Kevin McKee wrote: Thanks Chris. Yes - I want to fix whatever is causing that warning to appear, and thus stop it from appearing in my logs. I’m not an expert on Tomcat config so please help me what settings I should remove or add in order to fix this issue. Do I want to disable the cache to eliminate the warning/log, or what do you recommend? I wouldn't usually recommend disabling caching, but I guess it depends upon what is failing to be cached. Tomcat uses Resources to load everything including classes (though I'm not sure if it bothers to actually cache the .class file content, since the JVM loads and compiles them and then the cache would be useless) and other one-time-read kind of stuff. If you have thousands of tiny files or something then you could be thrashing your cache and disabling it would be better than leaving it in its current state. You could also decide that you want caching (you might want to do some performance tests to see what kind of difference it makes) and that you want to /increase/ the cache size from the default. Is this what I want? Context cachingAllowed=false No. Please read the reference I sent: this is not configured on the Context element in Tomcat 8. - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1 Comment: GPGTools - http://gpgtools.org iQIcBAEBCAAGBQJUhyLuAAoJEBzwKT+lPKRYVzwP/AwyYdbc6eGsoAo7aTgnicWP SYwmo5cTnLQWDT1qBebnS618/6NXL48UvG5bA1+MMjbf7gD+2plWVyW02pk5TM58 LbgnQ9QFfZLB74eA+FaUfPVtMV4ke1KN0LuK6j3Sd4GZEJNKXKHxlLx/k8hSyL2D zZU/HYUv1Dopr5R/QPARHozaWkyw4m/a/yD4OOU8ZpiocXx0OGfLV2Uq+vWyr3+l hyBRiI1sm2+aT//M//eveYVr3rqzYSauN7IUmC9K8tvso+C60/aCOwNTXhl2l1Hf 6NU4v2I2V8tnbVFrRndXb6/ZKFGwFuamYXAK0U6mPbEUh0lh9LExfhKiayh5yMqD 9k0Iyr9UaFXdAh4tKdpwnB32tcgiUSKocjXgeLrC2fef7qjCKNan3LdQfXMbb8sl hGmCdKVq7E2OodaKutnKEH2E2qA+a0FTc0EQDmHq2JPQ91BR2rXRp5yXYlEP80eY hAilBxXaqUVktJtVfdrFHpL5fFFcmYvGfJOoGxAVuTLqFAMZkxUgLGswonqTKPQh B+NZQNPby/ogJ9KUyc66q09vaTl5Gr3Kq6lM6erFdkp+sD8Bt3RRI1goJln4yLMq HuHK9tQZ8tQarMMIgStfWu4LizOXXCYJkMVPoJr4Q84dnkA7Kdx+05niB2LQZebk Z56QlXI9PCEJ98wUnVm2 =zsR+ -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Help! Tomcat crashing on takeoff
possibly add -verbose:class to your JVM options and see if that yields anything On Fri, Dec 12, 2014 at 1:44 PM, Christopher Schultz ch...@christopherschultz.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 James, On 12/12/14 3:19 PM, James H. H. Lampert wrote: On 12/12/14 11:43 AM, Christopher Schultz wrote: I wouldn't be surprised if the AS/400 unzip software does Bad Things to ZIP archives. Make sure you use UNIX-compatible tools to unpack everything, or maybe do everything from inside that UNIX-like environment (I seem to recall that, while you are running AS/400's i OS, you are also running some kind of UNIX-like environment on top of it). You might even want to check MD5 digest or something similar on the two machines to see if any files have been corrupted. EBCDIC can certainly be confusing things, here. What AS/400 unzip software? Hah, I can't tell if that's a joke or not. When we unzip the Tomcat zip file on a system, we use JAR, in a QSHELL session. And likewise, JAR tvm jarname.jar shows what appear to be a good bin/bootstrap.jar, a good bin/tomcat-juli.jar, and a good lib/catalina.jar Okay, good so far. Is there any way to run md5sum or something similar against them to determine that they are byte-for-byte identical to what you have on the other (working) system? jar should be able to unzip the Tomcat .zip distribution without any problems (JAR is just ZIP with a MANIFEST.MF file... and even that isn't required). Now, KEYTOOL is a worthless mess on AS/400s, but I've never seen anything like this happen from using JAR on AS/400s. - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1 Comment: GPGTools - http://gpgtools.org iQIcBAEBCAAGBQJUi1OvAAoJEBzwKT+lPKRYtwwP/i5XAtDgSXn0QjsZzYzLpKvF ygL/uK4LXqClHiiaOUHPYYRo9mDw3S1h3EsF6gr1qepoyZgGvxENd+q/8EfBJsT3 HSng3hkKSB2vrMGJDhCf0utXVXPfOm3c60OHiH4TKizQs/k6GYA0tvTSWX/pfPRg 8I2xuOHwe0FYX/9Xe5GyDnVKwC1J5/Omgsb4Fj9XL9WuvwJcmuDDyxQY0YyzjeWq 1sVdCOjFJUI6yD9qp7/76bKmh3Jd1m9gmjVhHtEO039k/wfq0du8LpfS5OpqZtjh uprHdKqZl+VfhVKA0tv2iOEaORy6KlNIqbpVJ6w9fYe06ELoO4fNWu158wGk8EWd Hq0uO1EfTCW8YfyjjAj2Sl1y/6JnPM5vhCgxnuQGRJWY2ag/NDDBVzPLaN6aQptk QzLyDExM5TX25+CvNtjvUycueVlAfhDad5YCVIHPyBsq/JmUNarOGNvS7zcoBVZV iEfKEwXguTwqSh3+5/ebeECPmAyPID0yF5ed/uQ8VX71A9Sv/fF31qFyhi3LKLxS WHnBRp4b/iXqRtIUCv/VRkg8tedGYyzGbWFV+e++Y7l2FQRbLGo+55h4xT7vQllS Ypp9qnIW+x5Sqgc6G9qZ3/aoTLbrXV+9yObV2aR2x5J1WTp1Yl00BgQEWmJbsiWz u7lGL0iCpbyS4DhgBzIY =u7Ly -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Help! Tomcat crashing on takeoff
or -Dibm.cl.verbose=ClassToTrace On Fri, Dec 12, 2014 at 2:26 PM, Filip Hanik fi...@hanik.com wrote: possibly add -verbose:class to your JVM options and see if that yields anything On Fri, Dec 12, 2014 at 1:44 PM, Christopher Schultz ch...@christopherschultz.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 James, On 12/12/14 3:19 PM, James H. H. Lampert wrote: On 12/12/14 11:43 AM, Christopher Schultz wrote: I wouldn't be surprised if the AS/400 unzip software does Bad Things to ZIP archives. Make sure you use UNIX-compatible tools to unpack everything, or maybe do everything from inside that UNIX-like environment (I seem to recall that, while you are running AS/400's i OS, you are also running some kind of UNIX-like environment on top of it). You might even want to check MD5 digest or something similar on the two machines to see if any files have been corrupted. EBCDIC can certainly be confusing things, here. What AS/400 unzip software? Hah, I can't tell if that's a joke or not. When we unzip the Tomcat zip file on a system, we use JAR, in a QSHELL session. And likewise, JAR tvm jarname.jar shows what appear to be a good bin/bootstrap.jar, a good bin/tomcat-juli.jar, and a good lib/catalina.jar Okay, good so far. Is there any way to run md5sum or something similar against them to determine that they are byte-for-byte identical to what you have on the other (working) system? jar should be able to unzip the Tomcat .zip distribution without any problems (JAR is just ZIP with a MANIFEST.MF file... and even that isn't required). Now, KEYTOOL is a worthless mess on AS/400s, but I've never seen anything like this happen from using JAR on AS/400s. - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1 Comment: GPGTools - http://gpgtools.org iQIcBAEBCAAGBQJUi1OvAAoJEBzwKT+lPKRYtwwP/i5XAtDgSXn0QjsZzYzLpKvF ygL/uK4LXqClHiiaOUHPYYRo9mDw3S1h3EsF6gr1qepoyZgGvxENd+q/8EfBJsT3 HSng3hkKSB2vrMGJDhCf0utXVXPfOm3c60OHiH4TKizQs/k6GYA0tvTSWX/pfPRg 8I2xuOHwe0FYX/9Xe5GyDnVKwC1J5/Omgsb4Fj9XL9WuvwJcmuDDyxQY0YyzjeWq 1sVdCOjFJUI6yD9qp7/76bKmh3Jd1m9gmjVhHtEO039k/wfq0du8LpfS5OpqZtjh uprHdKqZl+VfhVKA0tv2iOEaORy6KlNIqbpVJ6w9fYe06ELoO4fNWu158wGk8EWd Hq0uO1EfTCW8YfyjjAj2Sl1y/6JnPM5vhCgxnuQGRJWY2ag/NDDBVzPLaN6aQptk QzLyDExM5TX25+CvNtjvUycueVlAfhDad5YCVIHPyBsq/JmUNarOGNvS7zcoBVZV iEfKEwXguTwqSh3+5/ebeECPmAyPID0yF5ed/uQ8VX71A9Sv/fF31qFyhi3LKLxS WHnBRp4b/iXqRtIUCv/VRkg8tedGYyzGbWFV+e++Y7l2FQRbLGo+55h4xT7vQllS Ypp9qnIW+x5Sqgc6G9qZ3/aoTLbrXV+9yObV2aR2x5J1WTp1Yl00BgQEWmJbsiWz u7lGL0iCpbyS4DhgBzIY =u7Ly -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Jersey 2.13 Rest running on Apache Tomcat 7.0.57
Hi, I am attempting to run a simple RESTful service on Tomcat 7.0.57 on Linux 2.6.32-504 with Jersey 2.13, JDK 1.7.0_71. I have deployed Apache and it starts Ok. I have deployed the compiled clases the WEB-INF/classes and copied the Jersey libraries to WEB-INF/lib. The web.xml is configured. However, when I attempt to start the tomcat the restful resource errors with the following error SEVERE: Servlet /resttest threw load() exception java.lang.ClassNotFoundException: org.glassfish.jersey.servlet.ServletContainer at org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader.java:1720) at org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader.java:1571) at org.apache.catalina.core.DefaultInstanceManager.loadClass(DefaultInstanceManager.java:506) at org.apache.catalina.core.DefaultInstanceManager.loadClassMaybePrivileged(DefaultInstanceManager.java:488) at org.apache.catalina.core.DefaultInstanceManager.newInstance(DefaultInstanceManager.java:115) at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1148) at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:1087) I have also expand the Jersey jars into the classes directory and I still get the ClassNotFoundException. I have deployed the same test on Windows 7, Apache 6.2 and Java 7 and it runs Ok. Any pointers will be welcome. Thanks Jason - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Help! Tomcat crashing on takeoff
On 12/12/2014 2:19 PM, James H. H. Lampert wrote: On 12/12/14 11:43 AM, Christopher Schultz wrote: I wouldn't be surprised if the AS/400 unzip software does Bad Things to ZIP archives. Make sure you use UNIX-compatible tools to unpack everything, or maybe do everything from inside that UNIX-like environment (I seem to recall that, while you are running AS/400's i OS, you are also running some kind of UNIX-like environment on top of it). You might even want to check MD5 digest or something similar on the two machines to see if any files have been corrupted. EBCDIC can certainly be confusing things, here. What AS/400 unzip software? When we unzip the Tomcat zip file on a system, we use JAR, in a QSHELL session. And likewise, JAR tvm jarname.jar shows what appear to be a good bin/bootstrap.jar, a good bin/tomcat-juli.jar, and a good lib/catalina.jar Now, KEYTOOL is a worthless mess on AS/400s, but I've never seen anything like this happen from using JAR on AS/400s. -- JHHL James, I have always deployed Tomcat on IBM i by mapping a network drive to the IFS and then unzipping to the mapped drive. It is slow but it hasn't ever ended up causing issues. Also, are you sure that Java 6 on this box is current with PTF's and that the profile this is running under is picking up the correct JVM version when it runs? My money is on a J9 JVM PTF but an issue with permissions or JVM version could be a possibility.. Pete - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Help! Tomcat crashing on takeoff
On Fri, Dec 12, 2014 at 2:26 PM, Filip Hanik fi...@hanik.com wrote: possibly add -verbose:class to your JVM options and see if that yields anything On 12/12/14 1:27 PM, Filip Hanik wrote: or -Dibm.cl.verbose=ClassToTrace Again calling /wintouch/tomcat/bin/startup.sh from an interactive QSHELL session, first with just the one, then with both, added to the JAVA_OPTS environment variable: No change, with either. Still the same exceptions in catalina.out; still the same information to STDOUT; still the same joblogs produced by calling the shell script from an interactive QSHELL session. -- JHHL - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Help! Tomcat crashing on takeoff
On 12/12/14 2:54 PM, Pete Helgren wrote: My money is on a J9 JVM PTF but an issue with permissions or JVM version could be a possibility.. That's occurred to us as well; we've asked someone at their end to check for PTFs. -- JHHL - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Help! Tomcat crashing on takeoff
2014-12-12 22:43 GMT+03:00 Christopher Schultz ch...@christopherschultz.net: EBCDIC can certainly be confusing things, here. I wonder - can you verify that conf/catalina.properties file can be read with a simple Java program? Essentially Tomcat does the following: in org/apache/catalina/startup/CatalinaProperties.java File home = new File(getCatalinaBase()); File conf = new File(home, conf); File propsFile = new File(conf, catalina.properties); InputStream is = new FileInputStream(propsFile); Properties properties = new Properties(); properties.load(is); Then if you print out the value of properties.get(common.loader) it shall be non-empty. I think that Tomcat can read the file (otherwise you would have seen an exception of a Failed to load catalina.properties warning), but maybe it has trouble parsing it as a properties file. Maybe the whole contents is interpreted as one line and provides no value for common.loader. The *.loader properties are allowed to be empty, so there will be no warning if one is missing. Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Help! Tomcat crashing on takeoff
On Fri, Dec 12, 2014 at 3:55 PM, James H. H. Lampert jam...@touchtonecorp.com wrote: On Fri, Dec 12, 2014 at 2:26 PM, Filip Hanik fi...@hanik.com wrote: possibly add -verbose:class to your JVM options and see if that yields anything On 12/12/14 1:27 PM, Filip Hanik wrote: or -Dibm.cl.verbose=ClassToTrace Again calling /wintouch/tomcat/bin/startup.sh from an interactive QSHELL session, first with just the one, then with both, added to the JAVA_OPTS environment variable: No change, with either. Still the same exceptions in catalina.out; still the same information to STDOUT; still the same joblogs produced by calling the shell script from an interactive QSHELL session. We're not looking for change, we're looking for the output, that may tell us what is going on. Please post it, if you're not getting any output, then either those aren't supported (which I definitely thought they would be), or you're invoking it incorrectly Filip
Re: Help! Tomcat crashing on takeoff
On 12/12/14 5:36 PM, Filip Hanik wrote: We're not looking for change, we're looking for the output, that may tell us what is going on. Please post it, if you're not getting any output, then either those aren't supported (which I definitely thought they would be), or you're invoking it incorrectly Of course I wasn't expecting any change in behavior. No change implicitly meant no change in the output. And I then explicitly said that the exceptions in catalina.out look the same, what gets sent to STDOUT looks the same, and the joblogs from what QSHELL spawned off look the same. If there's anyplace else that additional output from those parameters could have gone, besides catalina.out, STDOUT, or a spool file, I can't imagine where, and I have over 20 years of experience with AS/400s. -- JHHL - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Help! Tomcat crashing on takeoff
It means they didn't take into effect. On the command line you should be able to do java -verbose:class -version and see if that flag works, if it does, then I suggest you create a setenv.sh file next to startup.sh and put JAVA_OPTS=-verbose:class -Dibm.cl.verbose=ClassToTrace export JAVA_OPTS and hopefully that way it takes into effect On Fri, Dec 12, 2014 at 6:47 PM, James H. H. Lampert jam...@touchtonecorp.com wrote: On 12/12/14 5:36 PM, Filip Hanik wrote: We're not looking for change, we're looking for the output, that may tell us what is going on. Please post it, if you're not getting any output, then either those aren't supported (which I definitely thought they would be), or you're invoking it incorrectly Of course I wasn't expecting any change in behavior. No change implicitly meant no change in the output. And I then explicitly said that the exceptions in catalina.out look the same, what gets sent to STDOUT looks the same, and the joblogs from what QSHELL spawned off look the same. If there's anyplace else that additional output from those parameters could have gone, besides catalina.out, STDOUT, or a spool file, I can't imagine where, and I have over 20 years of experience with AS/400s. -- JHHL - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
