Re: Tomcat with half open tcp sockets

2018-10-03 Thread Alex O'Ree
Thanks Chris. I ended up using aggressive read timeout values on the Web service clients by adding properties to the binding provider. Thing is, every jre version and soap attacks use different versions which made this much harder to track down. On Tue, Oct 2, 2018, 1:44 PM Christopher Schultz

StuckThreadDetectionValve with threads on IO

2018-10-03 Thread Behrooz Nobakht
[1] uses a time based threshold to mark a request thread as "stuck" above the configured threshold. This is definitely useful, but maybe a thread is busy transferring a large request (IO). This could become a wrong conclusion for the thread to be marked as stuck. A relevant contextual example is

Use existing CGI response for HTTP errors

2018-10-03 Thread Daniel Becroft
Hi, We are setting up Tomcat 8 to use a CGI program (.exe, proprietary) to generate and return various JSON responses. This all works fine when the response is a HTTP 200. But, when an HTTP error is returned (HTTP 4xx), Tomcat is generating the HTML page instead. We have the same setup working

Re: Load Balancing to Tomcat Workers

2018-10-03 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Loai, On 10/3/18 16:07, Loai Abdallatif wrote: > Hello, > > I have configures web server with jk load balancer to tomcat > server (192.168.237.11) with two containers worker 0, worker1) the > problem is that the web application session seems keep

Load Balancing to Tomcat Workers

2018-10-03 Thread Loai Abdallatif
Hello, I have configures web server with jk load balancer to tomcat server (192.168.237.11) with two containers worker 0, worker1) the problem is that the web application session seems keep rotating between both workers but I need session stickeness, means the client will be connected to the

[SECURITY] CVE-2018-11784 Apache Tomcat - Open Redirect

2018-10-03 Thread Mark Thomas
CVE-2018-11784 Apache Tomcat - Open Redirect Severity: Moderate Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 9.0.0.M1 to 9.0.11 Apache Tomcat 8.5.0 to 8.5.33 Apache Tomcat 7.0.23 to 7.0.90 The unsupported 8.0.x release line has not been analysed but is likely to be

Re: [EXTERNAL] Re: Tomcat custom location for configuration

2018-10-03 Thread Amit Pande
Thank you so much, Mark! In our case, the server.xml contains some information which is generated run time (pre-config before Tomcat is started) like the paths to key store and trust store, cipher suites, etc. Also, we have an active-passive cluster setup in which only the currently active

Re: Apache failed to initialize connector

2018-10-03 Thread Gael REYNOARD
Thank you for that answer The Windows firewall is disabled on my machine, but I will try this method and I will come back to you if it corrects my problem. Best regards, -- * Gaël REYNOARD* - Ingénieur Recherche & Développement Service *Bureau d'étude informatique*

Re: Tomcat custom location for configuration

2018-10-03 Thread Mark Thomas
On 02/10/18 17:41, Amit Pande wrote: > Hello SMEs, > > I am looking at Tomcat documentation to see if there is a way to move the > “/conf” to a custom location and use this path while > running the startup/shutdown scripts. Why? What problem are you trying to solve? > I have looked at the >

Re: Apache failed to initialize connector

2018-10-03 Thread M. Manna
it looks like you've bound your port 8009 and 8080 with something else temporarily during windows startup.It may be some port scanning service or some firewall/ prevention service is blocking all the ports until some checks are done. And that is why you have this issue intermittently. As a

Re: Apache failed to initialize connector

2018-10-03 Thread Gael REYNOARD
Sorry for my previous answer, I did not give enough details. So, yes Tomcat start automatically when the OS starts and I only installed one instance of the Tomcat service. I thought about this idea of the service that starts twice, but I did not see anything in the log

Re: Apache failed to initialize connector

2018-10-03 Thread Mark Thomas
On 03/10/18 14:54, Gael REYNOARD wrote: > Tomcat is installed as a service in Windows with a dependency with the SQL > Server service. > > I can also add when I have this problem, if I manually restart the Tomcat8 > service, it restarts correctly. How are you *starting* Tomcat? Manually starting

Re: Apache failed to initialize connector

2018-10-03 Thread Gael REYNOARD
Tomcat is installed as a service in Windows with a dependency with the SQL Server service. I can also add when I have this problem, if I manually restart the Tomcat8 service, it restarts correctly. Best regards, -- * Gaël REYNOARD* - Ingénieur Recherche &

Re: Apache failed to initialize connector

2018-10-03 Thread Mark Thomas
On 03/10/18 12:28, Gael REYNOARD wrote: > Hello everybody, > > OS : Windows 7 Pro x64 > Tomcat : 8.5.31 > > On a test bench, I reboot Windows to test one of our C# applications. > Sometimes after starting the OS, my Tomcat server fails to initialize > because the 8080 or 8009 port would be

Apache failed to initialize connector

2018-10-03 Thread Gael REYNOARD
Hello everybody, OS : Windows 7 Pro x64 Tomcat : 8.5.31 On a test bench, I reboot Windows to test one of our C# applications. Sometimes after starting the OS, my Tomcat server fails to initialize because the 8080 or 8009 port would be already used. I changed the default port 8080 by and I

Re: [Bug 62798] Apache failed to initialize connector

2018-10-03 Thread Mark Thomas
On 03/10/18 11:04, Gael REYNOARD wrote: > Hello, > > Tomcat 8.5.31 > > I have read your answer from BugZilla but how Tomcat is possible that > Tomcat was not completely stopped because I do not just stop the Tomcat > service. I always reboot my operating system. > And it's during the startup of

Re: Incorrect decoding of encoded HTTP headers

2018-10-03 Thread Michael Osipov
Am 2018-10-03 um 11:22 schrieb Jean Pierre Urkens: Hi everybody, I am having an issue where Unicode characters (e.g. and & #105;) are passed by the Apache Webserver 2.4 to Tomcat as UTF-8 encoded bytes while Tomcat seems to evaluate them as ISO-8859-15 encoded. Having taken a

[Bug 62798] Apache failed to initialize connector

2018-10-03 Thread Gael REYNOARD
Hello, Tomcat 8.5.31 I have read your answer from BugZilla but how Tomcat is possible that Tomcat was not completely stopped because I do not just stop the Tomcat service. I always reboot my operating system. And it's during the startup of Windows that I have sometimes this error. Best regards,

Re: Incorrect decoding of encoded HTTP headers

2018-10-03 Thread Mark Thomas
On 03/10/18 10:22, Jean Pierre Urkens wrote: > Hi everybody, > > I am having an issue where Unicode characters (e.g. and & #105;) are > passed by the Apache Webserver 2.4 to Tomcat as UTF-8 encoded bytes while > Tomcat seems to evaluate them as ISO-8859-15 encoded. > > Having taken a network

Incorrect decoding of encoded HTTP headers

2018-10-03 Thread Jean Pierre Urkens
Hi everybody, I am having an issue where Unicode characters (e.g. and & #105;) are passed by the Apache Webserver 2.4 to Tomcat as UTF-8 encoded bytes while Tomcat seems to evaluate them as ISO-8859-15 encoded. Having taken a network trace with TCPDUMP I see the following bytes for my