Re: KrbException: Do not have keys of types listed in default_tkt_enctypes available

2015-05-15 Thread Mark Thomas
On 15/05/2015 08:34, Ravindhar Konka wrote: Hi All I am trying to use SSO functionality for my app apache-tomcat-7.0.61 windows server 2008 R2 java 1.8.0_25 active directory machine ( DOMAIN-ad) tomcat instance machine (windows-sso-demo) username (ss0ad...@domain.com) password (XX)

RE: KrbException: Do not have keys of types listed in default_tkt_enctypes available

2015-05-15 Thread Ravindhar Konka
Hey Mark thanks for quick reply ,I followed same doc. Which you provided -Original Message- From: Mark Thomas [mailto:ma...@apache.org] Sent: Friday, May 15, 2015 1:14 PM To: Tomcat Users List Subject: Re: KrbException: Do not have keys of types listed in default_tkt_enctypes available

Re: Http 2 support in Tomcat

2015-05-15 Thread Mark Thomas
On 15/05/2015 08:55, anjan bacchu wrote: wondering what the plans are for supporting HTTP 2 support in tomcat ? When is it planned ? Which version(s) are likely to get support ? Work is in progress now. http://tomcat.markmail.org/thread/twqufoz53txetagh I hope to have basic support working

Http 2 support in Tomcat

2015-05-15 Thread anjan bacchu
wondering what the plans are for supporting HTTP 2 support in tomcat ? When is it planned ? Which version(s) are likely to get support ?

KrbException: Do not have keys of types listed in default_tkt_enctypes available

2015-05-15 Thread Ravindhar Konka
Hi All I am trying to use SSO functionality for my app apache-tomcat-7.0.61 windows server 2008 R2 java 1.8.0_25 active directory machine ( DOMAIN-ad) tomcat instance machine (windows-sso-demo) username (ss0ad...@domain.com) password (XX) krb5.ini [libdefaults] default_realm = DOMAIN.COM

RE: KrbException: Do not have keys of types listed in default_tkt_enctypes available

2015-05-15 Thread Ravindhar Konka
[libdefaults] default_realm = DOMAIN.COM default_keytab_name = FILE:c:\apache-tomcat-7.0.61\conf\test.keytab default_tkt_enctypes = rc4-hmac,aes256-cts-hmac-sha1-96,aes128-cts-hmac-sha1-96 default_tgs_enctypes = rc4-hmac,aes256-cts-hmac-sha1-96,aes128-cts-hmac-sha1-96 forwardable=true [realms]

Tomcat connector: mod_jk 1.2.40 in 32 bit for OS - Linux 2.6.39-400.21.1.el6uek.x86_64

2015-05-15 Thread Prarthana Agwania
Hi, I am looking for mod_jk 1.2.40 source/binary on 32 bit, for Linux OS to be used with Oracle Http Server build on Apache 2.2 I could not find the details anywhere on your site. Also the link for the connector which is made available on your website is on 64 bit. Hence, request you to please

Re: AJP config questions

2015-05-15 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jeffrey, On 5/14/15 6:38 PM, Jeffrey Janner wrote: (Hopefully, this isn't a duplicate post, but I sent the original a half-hour ago and I haven't seen it come back yet.) Guys, it's been a long time since I did any work with AJP, but it

Re: CVE-2015-0204 - FREAK vulnerability on tomcat 7.

2015-05-15 Thread Neill Lima
We would love to help but without the bare minimum description we are unable to do so. Sorry! On Fri, May 15, 2015 at 2:10 PM, Penubothu, Srinivasa M srinivasa.penubo...@bankofamerica.com wrote: Hello, I am looking for help with fixing FREAK vulnerability on tomcat 7. I am unable to find a

RE: CVE-2015-0204 - FREAK vulnerability on tomcat 7.

2015-05-15 Thread Caldarale, Charles R
From: Penubothu, Srinivasa M [mailto:srinivasa.penubo...@bankofamerica.com] Subject: RE: CVE-2015-0204 - FREAK vulnerability on tomcat 7. Title: SSL/TLS Server Accepts RSA_EXPORT Cipher Suites (FREAK) CVE ID: CVE-2015-0204 That particular CVE number is only for the OpenSSL client side of

Re: SPNEGO test configuration with Manager webapp

2015-05-15 Thread Mark Thomas
On 14/05/2015 22:29, Mark Thomas wrote: On 14/05/2015 21:11, Mark Thomas wrote: On 29/03/2015 23:13, André Warnier wrote: David Marsh wrote: I've tested all the following public JDKs jdk-7u45-windows-i586.exe jdk-7u65-windows-i586.exe jdk-7u75-windows-i586.exe jdk-8-windows-i586.exe

CVE-2015-0204 - FREAK vulnerability on tomcat 7.

2015-05-15 Thread Penubothu, Srinivasa M
Hello, I am looking for help with fixing FREAK vulnerability on tomcat 7. I am unable to find a solution for tomcat. Any help would be much appreciated. Regards Srinivasa(Vasu) Penubothu -- This message, and any attachments,

RE: CVE-2015-0204 - FREAK vulnerability on tomcat 7.

2015-05-15 Thread Penubothu, Srinivasa M
Here are the details of the vulnerability. Title: SSL/TLS Server Accepts RSA_EXPORT Cipher Suites (FREAK) CVE ID: CVE-2015-0204 Diagnosis: The remote SSL/TLS server accepts RSA_EXPORT cipher suites which is vulnerable to session downgrade vulnerability. Result: Exploitation allows an attacker to

Re: Issues with Tomcat 7.0.57 not loading ActionServlets

2015-05-15 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Raj, On 5/13/15 10:29 PM, Raj wrote: Hi Chris, Thanks for your response. Sorry for the late response as I was out of town. I verified struts-config.xml the files and have this plug-in className=org.apache.struts.validator.ValidatorPlugIn

Re: Tomcat connector: mod_jk 1.2.40 in 32 bit for OS - Linux 2.6.39-400.21.1.el6uek.x86_64

2015-05-15 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Prarthana, On 5/15/15 6:09 AM, Prarthana Agwania wrote: I am looking for mod_jk 1.2.40 source/binary on 32 bit, for Linux OS to be used with Oracle Http Server build on Apache 2.2 I could not find the details anywhere on your site. Also the

tomcat7 PID file and status check

2015-05-15 Thread Eric Wood
I trying to find a service script (init.d) that I can use to start, stop, and check status of my tomcat7 instances. We run multiple instances of tomcat of a single server. I have found scripts out that where the status call checks the ps table to get the pid to determine the status. I thought

Re: CVE-2015-0204 - FREAK vulnerability on tomcat 7.

2015-05-15 Thread David kerber
On 5/15/2015 8:23 AM, Penubothu, Srinivasa M wrote: Here are the details of the vulnerability. Title: SSL/TLS Server Accepts RSA_EXPORT Cipher Suites (FREAK) CVE ID: CVE-2015-0204 Diagnosis: The remote SSL/TLS server accepts RSA_EXPORT cipher suites which is vulnerable to session downgrade

Re: Http 2 support in Tomcat

2015-05-15 Thread PerfGuru
Good news thanks for the update. It may be some time before servlet 4 support is released but good to know Tomcat will be ready then.But does APR support http/2? I know other web servers now do. Also, I think Tomcat supports websockets which has the important capabilities that http/2 has and

Re: Http 2 support in Tomcat

2015-05-15 Thread PerfGuru
Hi Chris, I do not want to start a war but I am using Wildfly 9.0.0 CR1. The initial reason I looked it was due to Undertow. Then I found out they had a HTTP/2 implementation and when I tried that for half of my requests headers went from 3xx bytes down to 3x bytes. The response times were a

Re: tomcat7 PID file and status check

2015-05-15 Thread Hassan Schroeder
On Fri, May 15, 2015 at 6:56 AM, Eric Wood eric.w...@irondata.com wrote: I trying to find a service script (init.d) that I can use to start, stop, and check status of my tomcat7 instances. We run multiple instances of tomcat of a single server. I have found scripts out that where the status

Issue in setting up SHA2 certificate with tomcat6

2015-05-15 Thread Pavan Kasarla
Hi, I am trying to configure SHA2 algorithm certificates with tomcat6 in centos 6. I have created a keystore of format JKS using keytool and imported the certificate and intermediates to the keystore. When i restart the tomcat, logs do not show any kind of errors it starts up normally

Issue in setting up SHA2 certificate with tomcat6

2015-05-15 Thread Pavan Kasarla
Hi, I am trying to configure SHA2 algorithm certificates with tomcat6 in centos 6. I have created a keystore of format JKS using keytool and imported the certificate and intermediates to the keystore. When i restart the tomcat, logs do not show any kind of errors it starts up normally

Re: Http 2 support in Tomcat

2015-05-15 Thread Stefan Mayr
Am 15.05.2015 um 20:23 schrieb Christopher Schultz: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 5/15/15 12:59 PM, Mark Thomas wrote: On 15/05/2015 17:49, Christopher Schultz wrote: Tony, On 5/15/15 12:06 PM, PerfGuru wrote: Good news thanks for the update. It may be some time

Re: Issues with Tomcat 7.0.57 not loading ActionServlets

2015-05-15 Thread RAJ
Thanks Chris for the quick response, for class loader it is Loader but as your saying not make that change so will not. Validator-rules. Xml file is under Catalina_Home/webapps/app-name/WEB-INF/ and the app is in exploded format. This is working fine on tomcat 5.x and we just copied the files

Re: Http 2 support in Tomcat

2015-05-15 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 5/15/15 12:59 PM, Mark Thomas wrote: On 15/05/2015 17:49, Christopher Schultz wrote: Tony, On 5/15/15 12:06 PM, PerfGuru wrote: Good news thanks for the update. It may be some time before servlet 4 support is released but good to

Listeners' requestDestoyed() method not called in exception cases

2015-05-15 Thread Pilkington, Simon
We recently ran into an issue where the requestDestroyed() method of listeners were not being called when exceptions were propagated out of our application. Looking into the code, it seems related to this[1]. Is this the expected behavior for listeners and we can’t rely on the

Re: Issues with Tomcat 7.0.57 not loading ActionServlets

2015-05-15 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Raj, On 5/15/15 12:49 PM, RAJ wrote: Thanks Chris for the quick response, for class loader it is Loader but as your saying not make that change so will not. Validator-rules. Xml file is under Catalina_Home/webapps/app-name/WEB-INF/ and the app

Re: Http 2 support in Tomcat

2015-05-15 Thread Mark Thomas
On 15/05/2015 19:23, Christopher Schultz wrote: Mark, On 5/15/15 12:59 PM, Mark Thomas wrote: On 15/05/2015 17:49, Christopher Schultz wrote: Tony, On 5/15/15 12:06 PM, PerfGuru wrote: Good news thanks for the update. It may be some time before servlet 4 support is released but good to

Re: Http 2 support in Tomcat

2015-05-15 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Tony, On 5/15/15 12:06 PM, PerfGuru wrote: Good news thanks for the update. It may be some time before servlet 4 support is released but good to know Tomcat will be ready then. But does APR support http/2? I know other web servers now do.

Re: Http 2 support in Tomcat

2015-05-15 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Tony, On 5/15/15 2:43 PM, PerfGuru wrote: Thanks Mark Chris this is a very informative. I am using a httpd that supports http/2 and wow is it impressive. Sorry, I had to stop using Apache/Tomcat to use it but the performance and bandwidth

Re: Listeners' requestDestoyed() method not called in exception cases

2015-05-15 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Simon, On 5/15/15 2:26 PM, Pilkington, Simon wrote: We recently ran into an issue where the requestDestroyed() method of listeners were not being called when exceptions were propagated out of our application. Looking into the code, it seems

Re: Http 2 support in Tomcat

2015-05-15 Thread PerfGuru
Thanks Mark Chris this is a very informative. I am using a httpd that supports http/2 and wow is it impressive. Sorry, I had to stop using Apache/Tomcat to use it but the performance and bandwidth gains are so nice it is addicting and my users have noticed. I will look into jre/jdk 9 and ask

Re: Http 2 support in Tomcat

2015-05-15 Thread Mark Thomas
On 15/05/2015 17:49, Christopher Schultz wrote: Tony, On 5/15/15 12:06 PM, PerfGuru wrote: Good news thanks for the update. It may be some time before servlet 4 support is released but good to know Tomcat will be ready then. But does APR support http/2? I know other web servers now do.

Re: Http 2 support in Tomcat

2015-05-15 Thread Rainer Jung
Am 15.05.2015 um 20:43 schrieb PerfGuru: Thanks Mark Chris this is a very informative. I am using a httpd that supports http/2 and wow is it impressive. Sorry, I had to stop using Apache/Tomcat to use it but the performance and bandwidth gains are so nice it is addicting and my users have