tomcat jndi ldap userSearchAsUser not used

2016-02-11 Thread Sascha Monteiro
Hi, When I configure this, it does not bind with the user (checked with wireshark on the ad server) (only when I use userPattern, but I cannot seem to use that as it needs a user for both bind and search) I don't want to have a username/password of a delegated user) Realm className="org.apache.ca

Re: Adding a custom configurations file globally and at web-app level for Apache Tomcat

2016-02-11 Thread Chiranga Alwis
Hi Chris, There are some custom configurations which we intend to add to this config file. We have a custom made single-sign-on valve based on SAML 2.0 which has plenty of configuration properties plus there are some custom classloading code which I am not that entirely proficient about. We inten

Re: Is there a way for code running on Tomcat 7+ to determine the URL of the Web App it's running under?

2016-02-11 Thread Mark Thomas
On 11/02/2016 22:56, Dougherty, Gregory T., M.S. wrote: > I would like to have a jar file in tomcat/lib that can be called from any of > the running web apps. I need for the code in the jar to behave differently > depending on which web app called it. It is not in this case possible for > the

Is there a way for code running on Tomcat 7+ to determine the URL of the Web App it's running under?

2016-02-11 Thread Dougherty, Gregory T., M.S.
I would like to have a jar file in tomcat/lib that can be called from any of the running web apps. I need for the code in the jar to behave differently depending on which web app called it. It is not in this case possible for the code to “trust” the caller to tell it the URL of the caller. Is

Re: NIO Thread Behavior With Http Connections

2016-02-11 Thread Mark Thomas
On 11/02/2016 22:11, Bart Wood wrote: > Thanks Mark. > > I normally see around 20 active http connections and around 10 active NIO > threads. Why isn't there a 1-to-1 ratio between active http connections > and active nio threads? What is happening when a connection is "active" > but it isn't be

Re: NIO Thread Behavior With Http Connections

2016-02-11 Thread Bart Wood
Thanks Mark. I normally see around 20 active http connections and around 10 active NIO threads. Why isn't there a 1-to-1 ratio between active http connections and active nio threads? What is happening when a connection is "active" but it isn't being processed via the filter chain? On Thu, Feb 1

Re: NIO Thread Behavior With Http Connections

2016-02-11 Thread Mark Thomas
On 11/02/2016 21:54, Bart Wood wrote: > Will the NIO connector reuse a thread for multiple http connections in > flight? No. Once a thread enters the filter chain it is dedicated to that request until it exists the filter chain (plus some Tomcat internal processing). > For example, an nio thread

NIO Thread Behavior With Http Connections

2016-02-11 Thread Bart Wood
Will the NIO connector reuse a thread for multiple http connections in flight? For example, an nio thread begins processing a request for an http connection. The thread begins blocking on a slow database socket read. Will Tomcat let the thread be reused in flight for other http connections? If cod

Re: Tomcat Failure Modes

2016-02-11 Thread David kerber
On 2/11/2016 2:20 PM, Edward Hart (c) wrote: Q1: Can Tomcat be configured to 'roll back' if a patch update causes a TC failure on a production server? Q2: Can TC be configured to fail to a known safe state in the event of server failure during operation? I am developing a Security Technical

Re: Tomcat Failure Modes

2016-02-11 Thread Mark Thomas
On 11/02/2016 19:20, Edward Hart (c) wrote: > Q1: Can Tomcat be configured to 'roll back' if a patch update causes a TC > failure on a production server? The question makes no sense since there is no such thing as a patch update for Tomcat. > Q2: Can TC be configured to fail to a known safe st

Re: Does Tomcat need a non-ssl connector?

2016-02-11 Thread msh
On Thu, Feb 11, 2016 at 07:19:10PM +, Mark Thomas wrote: > On 11/02/2016 19:17, m...@kimwana.com wrote: > > If I want to run Tomcat using ssl only do I still need to set up a non-ssl > > connector and redirect the port? > > That depends if you want Tomcat to respond at all if a user tries to

Re: Why session on manager screen not updated?

2016-02-11 Thread Mark Thomas
On 11/02/2016 19:24, Qadeer Khan wrote: > There is a running application on tomcat server but the session is always a > zero on manager ui screen. > > For other applications like manager, host manager and sample we have session > updated but not for one application. > > The application is jackr

Why session on manager screen not updated?

2016-02-11 Thread Qadeer Khan
There is a running application on tomcat server but the session is always a zero on manager ui screen. For other applications like manager, host manager and sample we have session updated but not for one application. The application is jackrabbit which is a messaging application. Any thoughts?

SSL between modcluster and tomcat 7

2016-02-11 Thread Qadeer Khan
I am looking for any good instructions on configuring ssl between mod_cluster and Tomcat 7 including creating certs. Greatly appreciate any help Thanks Qadeer - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For a

Tomcat Failure Modes

2016-02-11 Thread Edward Hart (c)
Q1: Can Tomcat be configured to 'roll back' if a patch update causes a TC failure on a production server? Q2: Can TC be configured to fail to a known safe state in the event of server failure during operation? I am developing a Security Technical Implement Guide (STIG) for Tomcat. A STIG is

Re: Does Tomcat need a non-ssl connector?

2016-02-11 Thread Mark Thomas
On 11/02/2016 19:17, m...@kimwana.com wrote: > If I want to run Tomcat using ssl only do I still need to set up a non-ssl > connector and redirect the port? That depends if you want Tomcat to respond at all if a user tries to use a non-TLS connection. Mark -

Does Tomcat need a non-ssl connector?

2016-02-11 Thread msh
If I want to run Tomcat using ssl only do I still need to set up a non-ssl connector and redirect the port? - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.o

Re: ssl config questions

2016-02-11 Thread msh
On Thu, Feb 11, 2016 at 12:28:40PM -0500, Christopher Schultz wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Msh, > > On 2/10/16 7:04 PM, m...@kimwana.com wrote: > > I have the fillowing problem to solve for a job interview. Fillowing. Heh! Thanks for the help. > You have two conn

ApacheCon NA 2016 - Important Dates!!!

2016-02-11 Thread Melissa Warnkin
Hello everyone! I hope this email finds you well.  I hope everyone is as excited about ApacheCon as I am! I'd like to remind you all of a couple of important dates, as well as ask for your assistance in spreading the word! Please use your social media platform(s) to get the word out! The more v

RE: [PossibleSpam] Re: Tomcat Rewrite Valve

2016-02-11 Thread Joe Aldrich
>Am 10.02.2016 um 15:23 schrieb Rémy Maucherat: >> 2016-02-10 15:06 GMT+01:00 Joe Aldrich : >> Am 29.01.2016 15:34, schrieb Joe Aldrich: > Hello, > > I am using Tomcat 8.0.28 on Windows 10 and am having a problem with > the Rewrite Value. I must include the escaped form of a

Re: [PossibleSpam] Re: Tomcat Rewrite Valve

2016-02-11 Thread Felix Schumacher
Am 10.02.2016 um 15:23 schrieb Rémy Maucherat: 2016-02-10 15:06 GMT+01:00 Joe Aldrich : Am 29.01.2016 15:34, schrieb Joe Aldrich: Hello, I am using Tomcat 8.0.28 on Windows 10 and am having a problem with the Rewrite Value. I must include the escaped form of an ampersand '%26' in the output U

Re: ssl config questions

2016-02-11 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Msh, On 2/10/16 7:04 PM, m...@kimwana.com wrote: > I have the fillowing problem to solve for a job interview. Hmm. On the one hand, its YOUR job interview. On the other hand, if you don't know this answer, you need to be able to find out the answer,

Re: Adding a custom configurations file globally and at web-app level for Apache Tomcat

2016-02-11 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chiranga, On 2/11/16 6:45 AM, Chiranga Alwis wrote: > Hi, > > I have been working on adding a custom configurations file which > follow a pattern similar to the web.xml, i.e. the file can be > defined globally but several predefined configuration pro

Re: Async servlet timeout behaviour

2016-02-11 Thread Mark Thomas
On 11/02/2016 11:44, Thomas Boniface wrote: > 2016-02-11 12:16 GMT+01:00 Mark Thomas : >> On 11/02/2016 11:07, Thomas Boniface wrote: >>> I also wonder what can be done or not while in the onTimeout thread, can >> I >>> still do some asynchronous operation (retrieving content from http >> reques

Re: 'javax.xml.parsers.FactoryConfigurationError: Provider for class javax.xml.parsers.DocumentBuilderFactory cannot be created' for Tomcat Valve

2016-02-11 Thread Chiranga Alwis
Hi Chris, I will check if it works by sticking to the default. On Mon, Feb 8, 2016 at 8:21 PM, Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Chiranga, > > On 2/7/16 2:27 AM, Chiranga Alwis wrote: > > I think OpenSAML seems to be

Re: Async servlet timeout behaviour

2016-02-11 Thread Thomas Boniface
2016-02-11 12:31 GMT+01:00 André Warnier (tomcat) : > On 11.02.2016 12:07, Thomas Boniface wrote: > >> Hi, >> >> I'm using async servlet with a timeout configured to 300ms >> > > naive question : is that not awfully short, if this relates to some > over-the-Internet communication ? > That's a matt

Adding a custom configurations file globally and at web-app level for Apache Tomcat

2016-02-11 Thread Chiranga Alwis
Hi, I have been working on adding a custom configurations file which follow a pattern similar to the web.xml, i.e. the file can be defined globally but several predefined configuration properties can be overridden at web-app level. For this purpose, my initial plan was to load the content in glob

Re: Async servlet timeout behaviour

2016-02-11 Thread Thomas Boniface
2016-02-11 12:16 GMT+01:00 Mark Thomas : > On 11/02/2016 11:07, Thomas Boniface wrote: > > Hi, > > > > I'm using async servlet with a timeout configured to 300ms but I can > > observe in live environnement some big differences with the actual > applied > > timeout 700ms or more for instance. > >

Re: Async servlet timeout behaviour

2016-02-11 Thread tomcat
On 11.02.2016 12:07, Thomas Boniface wrote: Hi, I'm using async servlet with a timeout configured to 300ms naive question : is that not awfully short, if this relates to some over-the-Internet communication ? but I can observe in live environnement some big differences with the actual appl

Re: Async servlet timeout behaviour

2016-02-11 Thread Mark Thomas
On 11/02/2016 11:07, Thomas Boniface wrote: > Hi, > > I'm using async servlet with a timeout configured to 300ms but I can > observe in live environnement some big differences with the actual applied > timeout 700ms or more for instance. > > I was wondering how are triggered onTimeout events to

Async servlet timeout behaviour

2016-02-11 Thread Thomas Boniface
Hi, I'm using async servlet with a timeout configured to 300ms but I can observe in live environnement some big differences with the actual applied timeout 700ms or more for instance. I was wondering how are triggered onTimeout events to AsyncListeners, is there a limited number of thread handli