Re: Tomcat Authentication + Spring Security J2EEPreAuthentication

2019-05-20 Thread Nacho Ganguli 
My last attempt used Spring Security JEE pre-authentication filters. This
works as I would like "provided" that I only use basic auth and tomcat's
default realm (tomcat-users.xml).

As soon as I introduce form-based auth, it does not work and I am prompted
to authenticate a second time.  The log files shows "RunAsManager did not
change Authentication object"

If anyone has some suggestions or can recommend an alternate approach, it
would really help me.




--
Sent from: http://tomcat.10.x6.nabble.com/Tomcat-User-f1968778.html

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Massive Startup Time after Server Reboot

2019-05-20 Thread Jerry Malcolm 

Andre,

Your theory sounds like a real possibility.  It would explain why it 
only blows up the first time after a reboot.  I'll test the theory 
tonight during off-peak use hours for the web sites I host.


Thx.

Jerry

On 5/20/2019 3:43 AM, André Warnier (tomcat) wrote:

On 20.05.2019 00:09, Jerry Malcolm wrote:
Just an FYI this server has been in production a little over a 
year.  This TC load
problem only started 2-3 months ago.  So 'something' changed to cause 
this problem to
manifest itself. It's been too long to try to correlate a specific 
server change to the
start of this problem. But I just wanted to point out that this 
problem has NOT been

around since day 1 on this server.


Just in case, since this is a Windows server ..
2-3 months ago, an update of a virus scanner ?
(of the intrusive kind which pre-checks each file that wants to be 
opened)
Checking may be easy or not, depending on your access : disable the 
virus scanner just the time to start tomcat and check.




Jerry

On 5/19/2019 5:03 PM, Jerry Malcolm wrote:

Rainer,

No change with the urandom parm.  I am attaching a portion of the 
Catalina log.  The
first half shows between 8 and 15 seconds to deploy each app for a 
single virtual host
(there are no war files, the app is already exploded in the appbase 
dir).  I have quite
a few virtual hosts with several apps each.  That initial server 
start took 21+ minutes.
  I then restarted the TC service and got the ~.5 sec start per 
webapp shown in the 2nd

half of the log below.

Can you refresh me on how to capture the stack dumps you suggested? 
It's been a while


Thx.

Jerry

 First start of Tomcat after server reboot
-
 [C:\domains\.com\webapps\JSPWiki.war] has finished in 
[8,579] ms

tory [C:\domains\.com\webapps\cis]
irectory [C:\domains\.com\webapps\cis] has finished in 
[11,486] ms

tory [C:\domains\.com\webapps\gallery]
irectory [C:\domains\.com\webapps\gallery] has finished in 
[9,204] ms

tory [C:\domains\.com\webapps\gl]
irectory [C:\domains\.com\webapps\gl] has finished in 
[8,469] ms

tory [C:\domains\.com\webapps\idmanager]
irectory [C:\domains\.com\webapps\idmanager] has finished 
in [8,689] ms

tory [C:\domains\.com\webapps\itemtrack]
irectory [C:\domains\.com\webapps\itemtrack] has finished 
in [6,907] ms

tory [C:\domains\.com\webapps\malcolment]
irectory [C:\domains\.com\webapps\malcolment] has finished 
in [8,469] ms

tory [C:\domains\.com\webapps\notebook]
irectory [C:\domains\.com\webapps\notebook] has finished 
in [10,189] ms

tory [C:\domains\.com\webapps\order]
irectory [C:\domains\.com\webapps\order] has finished in 
[8,501] ms

tory [C:\domains\.com\webapps\payment]
irectory [C:\domains\.com\webapps\payment] has finished in 
[14,209] ms

tory [C:\domains\.com\webapps\projectmanager]
irectory [C:\domains\.com\webapps\projectmanager] has 
finished in [9,018] ms

 [C:\Tomcat 9.0\conf\Catalina\myridetx.net\manager.xml]
ptor [C:\Tomcat 9.0\conf\Catalina\myridetx.net\manager.xml] has 
finished in [62] ms


 Restart of Tomcat 
-

tory [C:\domains\.com\webapps\cis]
irectory [C:\domains\.com\webapps\cis] has finished in 
[594] ms

tory [C:\domains\.com\webapps\gallery]
irectory [C:\domains\.com\webapps\gallery] has finished in 
[547] ms

tory [C:\domains\.com\webapps\gl]
irectory [C:\domains\.com\webapps\gl] has finished in 
[562] ms

tory [C:\domains\.com\webapps\idmanager]
irectory [C:\domains\.com\webapps\idmanager] has finished 
in [578] ms

tory [C:\domains\.com\webapps\itemtrack]
irectory [C:\domains\.com\webapps\itemtrack] has finished 
in [547] ms

tory [C:\domains\.com\webapps\malcolment]
irectory [C:\domains\.com\webapps\malcolment] has finished 
in [579] ms

tory [C:\domains\.com\webapps\notebook]
irectory [C:\domains\.com\webapps\notebook] has finished 
in [547] ms

tory [C:\domains\.com\webapps\order]
irectory [C:\domains\.com\webapps\order] has finished in 
[531] ms

tory [C:\domains\.com\webapps\payment]
irectory [C:\domains\.com\webapps\payment] has finished in 
[562] ms

tory [C:\domains\.com\webapps\projectmanager]
irectory [C:\domains\.com\webapps\projectmanager] has 
finished in [531] ms


On 5/18/2019 3:18 PM, Rainer Jung wrote:
Most likely it hangs waiting for enough entropy for random number 
generator seeding.


Try whether the problem goes away if you add

  -Djava.security.egd=file:/dev/urandom

to you process flags. If you are using older Java than Java 8 (not 
possible for Tomcat
9 but just in case you also have older software stacks running), 
then it would be


  -Djava.security.egd=file:/dev/./urandom

The cryptic /./ is not a typo, you would need it for Java before 
Java 8.


If this doesn't help, then you should try capturing a few stack 
dumps (thread dumps)

during the long startup time. People here can help interpret them.

Regards,

Rainer

Am 18.05.2019 um 21:55 schrieb Jerry Malcolm:

Re: ApacheCon agenda?

2019-05-20 Thread Israel Timoteo 
Chris,

It would be very interesting having a talk where I can experiment (like in a 
lab) building a configuration for HTTPD as a proxy for a Tomcat cluster; 
something where I can see details for best practices on how to calculate the 
number of clients (ThreadsPerChild, MaxRequestWorkers, MaxConnectionsPerChild, 
etc) in apache that matches number of clients in Tomcat (maxThreads, 
maxConnections, acceptCount, etc) and then know how to adjust that number when 
the number of Tomcat instances changes.

From my experience in past conferences, sessions for HTTPD are normally 
separated from the ones with Tomcat content; I cannot recall attended one where 
this expertise is shared - maybe there was one last year but I had to interrupt 
my attendance on the first day, then I might have missed it.

However, the intention of my asking is to show my manager the knowledge to be 
offered on this conference so I can justify attending the event.

Thanks

Israel Timoteo
itimo...@me.com



> On May 20, 2019, at 11:56 AM, Christopher Schultz 
>  wrote:
> 
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
> 
> Israel,
> 
> On 5/20/19 09:27, Israel Timoteo wrote:
>> When can we expect to see the ApacheCon agenda published?
> 
> The call-for-papers just ended 7 days ago, so it might be a few weeks
> before we find out.
> 
> Is there a Tomcat-related topic you'd especially like to see
> presented? We are assembling a concurrent TomcatCon and anything we
> can do to encourage members of this community to attend ApacheCon this
> year, we'll consider.
> 
> - -chris
> -BEGIN PGP SIGNATURE-
> Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/
> 
> iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAlzi3CoACgkQHPApP6U8
> pFhXjhAAliw1jwGqnu+FzL6d/ZRMZXoVMA19hjlmon8PlM/ycRJ7V6W0AJdrqaUn
> xzb6eQqX09HIZ7++IKRefZco16qNCOODMg2Re7CgYUWK/a3J1VLu8qMIGRwwX/T+
> ND7mRdoCua9hzXT1iu4RFd/c+AhyAuEwPpqpWLE5sQtXStmiiWoTVVhGgi1vLYRE
> 4TWWOMDX7nV/N2PiM/FSDKXgYS1IRTIGnJ2SgveYN+Vgua0bJXD8fQj3ZcdzTfwL
> eWfQ9Rkyi4FtG52eOWAzwJU8zL87dAK7Ct7ztbs7nBZwY1UWON4M0zBC4sD7IZjv
> 3hV0X00bvTH5QC4VHVBJJgabEuMyxnVvXWzqruitriJk2Jli8cEigto/AiHZOa2f
> 3iGnnRVY9Y5x+MKXelBcbeP2TQN82dOBCnMG/CuRpBab5CHDy+aIIxc6dQv4MQ+7
> 4MSeKVpoG1KuBrPht7e43yygaKNXbL9ghoDtl1odNaP6iu80b7wOHhJ9mRrDeVMP
> i2P+lQSNjIywx1zV080NGARRky3j1LzzsCHqjcMQVOh1Gry2iMEv4Ghg7FYZXDfP
> 7KBvP1FXLg7wuNg0qmTlIgfSqCPql0ibRGWcrzUQ7ZnnwZNoZNa2gviFlMwAvnOZ
> rSdOEIAmfD42PAU56+F1u9usPocJgEB8S8mP6IG3LmLGPd28LFY=
> =l8KK
> -END PGP SIGNATURE-
> 
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>

Re: Massive Startup Time after Server Reboot

2019-05-20 Thread Suvendu Sekhar Mondal 
On Mon, May 20, 2019, 5:46 PM Louis Zipes  Can you refresh me on how to capture the stack dumps you suggested?
> It's been a while
>
> >In Task Manager find the Tomcat process, right click on it and there is
> an option to create a dump file.
>

Well, that will create Windows memory dump.

>
> >Also, if you have access to jconsole or other JMX tool you can connect
> to it and see what is going on.
>

Agreed. Alternatively you can use jstack to generate thread dumps. Exact
command will be like: jstack -l PID_of_JVM

I'll suggest to take thread dumps 1 sec apart.

But still I am surprised to see that it happens only during entire server
reboot and from your log, subsequent TC restart is not taking long time. Is
that a right statement or I am entirely misreading it? If that is true, you
can try 'atomatic delayed start' option.

>
> -Original Message-
> From: André Warnier (tomcat) [mailto:a...@ice-sa.com]
> Sent: Monday, May 20, 2019 4:44 AM
> To: users@tomcat.apache.org
> Subject: Re: Massive Startup Time after Server Reboot
>
> - - - external message, proceed with caution - - -
>
>
> On 20.05.2019 00:09, Jerry Malcolm wrote:
> > Just an FYI this server has been in production a little over a
> year.  This TC load
> > problem only started 2-3 months ago.  So 'something' changed to cause
> this problem to
> > manifest itself. It's been too long to try to correlate a specific
> server change to the
> > start of this problem. But I just wanted to point out that this problem
> has NOT been
> > around since day 1 on this server.
>
> Just in case, since this is a Windows server ..
> 2-3 months ago, an update of a virus scanner ?
> (of the intrusive kind which pre-checks each file that wants to be opened)
> Checking may be easy or not, depending on your access : disable the virus
> scanner just the
> time to start tomcat and check.
>
> >
> > Jerry
> >
> > On 5/19/2019 5:03 PM, Jerry Malcolm wrote:
> >> Rainer,
> >>
> >> No change with the urandom parm.  I am attaching a portion of the
> Catalina log.  The
> >> first half shows between 8 and 15 seconds to deploy each app for a
> single virtual host
> >> (there are no war files, the app is already exploded in the appbase
> dir).  I have quite
> >> a few virtual hosts with several apps each.  That initial server start
> took 21+ minutes.
> >>   I then restarted the TC service and got the ~.5 sec start per webapp
> shown in the 2nd
> >> half of the log below.
> >>
> >> Can you refresh me on how to capture the stack dumps you suggested?
> It's been a while
> >>
> >> Thx.
> >>
> >> Jerry
> >>
> >>  First start of Tomcat after server reboot
> >> -
> >>  [C:\domains\.com\webapps\JSPWiki.war] has finished in
> [8,579] ms
> >> tory [C:\domains\.com\webapps\cis]
> >> irectory [C:\domains\.com\webapps\cis] has finished in
> [11,486] ms
> >> tory [C:\domains\.com\webapps\gallery]
> >> irectory [C:\domains\.com\webapps\gallery] has finished in
> [9,204] ms
> >> tory [C:\domains\.com\webapps\gl]
> >> irectory [C:\domains\.com\webapps\gl] has finished in [8,469]
> ms
> >> tory [C:\domains\.com\webapps\idmanager]
> >> irectory [C:\domains\.com\webapps\idmanager] has finished in
> [8,689] ms
> >> tory [C:\domains\.com\webapps\itemtrack]
> >> irectory [C:\domains\.com\webapps\itemtrack] has finished in
> [6,907] ms
> >> tory [C:\domains\.com\webapps\malcolment]
> >> irectory [C:\domains\.com\webapps\malcolment] has finished in
> [8,469] ms
> >> tory [C:\domains\.com\webapps\notebook]
> >> irectory [C:\domains\.com\webapps\notebook] has finished in
> [10,189] ms
> >> tory [C:\domains\.com\webapps\order]
> >> irectory [C:\domains\.com\webapps\order] has finished in
> [8,501] ms
> >> tory [C:\domains\.com\webapps\payment]
> >> irectory [C:\domains\.com\webapps\payment] has finished in
> [14,209] ms
> >> tory [C:\domains\.com\webapps\projectmanager]
> >> irectory [C:\domains\.com\webapps\projectmanager] has
> finished in [9,018] ms
> >>  [C:\Tomcat 9.0\conf\Catalina\myridetx.net\manager.xml]
> >> ptor [C:\Tomcat 9.0\conf\Catalina\myridetx.net\manager.xml] has
> finished in [62] ms
> >>
> >>  Restart of Tomcat
> -
> >> tory [C:\domains\.com\webapps\cis]
> >> irectory [C:\domains\.com\webapps\cis] has finished in [594]
> ms
> >> tory [C:\domains\.com\webapps\gallery]
> >> irectory [C:\domains\.com\webapps\gallery] has finished in
> [547] ms
> >> tory [C:\domains\.com\webapps\gl]
> >> irectory [C:\domains\.com\webapps\gl] has finished in [562] ms
> >> tory [C:\domains\.com\webapps\idmanager]
> >> irectory [C:\domains\.com\webapps\idmanager] has finished in
> [578] ms
> >> tory [C:\domains\.com\webapps\itemtrack]
> >> irectory [C:\domains\.com\webapps\itemtrack] has finished in
> [547] ms
> >> tory [C:\domains\.com\webapps\malcolment]
> >> irectory [C:\domains\.com\webapps\malcolment] has finished in
> [579] ms
> >> tory [C:\domains\.com\w

Re: ApacheCon agenda?

2019-05-20 Thread Christopher Schultz 
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Israel,

On 5/20/19 09:27, Israel Timoteo wrote:
> When can we expect to see the ApacheCon agenda published?

The call-for-papers just ended 7 days ago, so it might be a few weeks
before we find out.

Is there a Tomcat-related topic you'd especially like to see
presented? We are assembling a concurrent TomcatCon and anything we
can do to encourage members of this community to attend ApacheCon this
year, we'll consider.

- -chris
-BEGIN PGP SIGNATURE-
Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/

iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAlzi3CoACgkQHPApP6U8
pFhXjhAAliw1jwGqnu+FzL6d/ZRMZXoVMA19hjlmon8PlM/ycRJ7V6W0AJdrqaUn
xzb6eQqX09HIZ7++IKRefZco16qNCOODMg2Re7CgYUWK/a3J1VLu8qMIGRwwX/T+
ND7mRdoCua9hzXT1iu4RFd/c+AhyAuEwPpqpWLE5sQtXStmiiWoTVVhGgi1vLYRE
4TWWOMDX7nV/N2PiM/FSDKXgYS1IRTIGnJ2SgveYN+Vgua0bJXD8fQj3ZcdzTfwL
eWfQ9Rkyi4FtG52eOWAzwJU8zL87dAK7Ct7ztbs7nBZwY1UWON4M0zBC4sD7IZjv
3hV0X00bvTH5QC4VHVBJJgabEuMyxnVvXWzqruitriJk2Jli8cEigto/AiHZOa2f
3iGnnRVY9Y5x+MKXelBcbeP2TQN82dOBCnMG/CuRpBab5CHDy+aIIxc6dQv4MQ+7
4MSeKVpoG1KuBrPht7e43yygaKNXbL9ghoDtl1odNaP6iu80b7wOHhJ9mRrDeVMP
i2P+lQSNjIywx1zV080NGARRky3j1LzzsCHqjcMQVOh1Gry2iMEv4Ghg7FYZXDfP
7KBvP1FXLg7wuNg0qmTlIgfSqCPql0ibRGWcrzUQ7ZnnwZNoZNa2gviFlMwAvnOZ
rSdOEIAmfD42PAU56+F1u9usPocJgEB8S8mP6IG3LmLGPd28LFY=
=l8KK
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: [OT] Massive Startup Time after Server Reboot

2019-05-20 Thread Christopher Schultz 
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Markus,

On 5/18/19 17:39, i...@flyingfischer.ch wrote:
> apt-get install haveged update-rc.d haveged defaults
> 
> This increases the system entropy for random generation and reduces
> boot time for Tomcat considerably.

I'm a -1 on this solution because it takes a reliable source of
entropy and converts it into an unreliable source of entropy. There is
a reason that *NIX* systems usually have both /dev/random (a good,
secure source of randomness) and /dev/urandom (a *fast* source of
randomness which is reasonably good).

When there are reasons to use /dev/random -- such as generating a new
long-lived encryption key like PGP, RSA, ECC, etc. -- it's important
that these kinds of "artificial" sources of randomness aren't used.
That's why we don't use /dev/urandom for those purposes.

But haveged basically turns /dev/random into /dev/urandom and
therefore programs have no choice.

It's better to leave hadeged out of the mix and choose the right
source of randomness for your application.

- -chris

> Am 18.05.19 um 22:18 schrieb Rainer Jung:
>> Most likely it hangs waiting for enough entropy for random
>> number generator seeding.
>> 
>> Try whether the problem goes away if you add
>> 
>> -Djava.security.egd=file:/dev/urandom
>> 
>> to you process flags. If you are using older Java than Java 8
>> (not possible for Tomcat 9 but just in case you also have older
>> software stacks running), then it would be
>> 
>> -Djava.security.egd=file:/dev/./urandom
>> 
>> The cryptic /./ is not a typo, you would need it for Java before
>> Java 8.
>> 
>> If this doesn't help, then you should try capturing a few stack
>> dumps (thread dumps) during the long startup time. People here
>> can help interpret them.
>> 
>> Regards,
>> 
>> Rainer
>> 
>> Am 18.05.2019 um 21:55 schrieb Jerry Malcolm:
>>> This is a weird one.  It started a few months ago.   I have TC
>>> 9 running on Windows Server 16.  After I reboot the entire
>>> server, Tomcat takes forever on startup.  It normally starts in
>>> about 30 seconds.  But after a server reboot it takes up to 15
>>> minutes... chugging along at a snail's pace starting up all of
>>> the apps on all of the virtual hosts.  It always finally gets
>>> there with everything successfully running.  Other servers on
>>> the same box (Apache, JAMES, ISC BIND, MySQL) don't have any
>>> problem starting up.  CPU, Disk, Memory, etc. usages are barely
>>> showing on the performance graphs. There's nothing in the
>>> Catalina log or system.err other than showing a couple of
>>> minute gap in the time stamp between each app as it starts up.
>>> If I need to reboot again later, it boots again in about 30 sec
>>> as expected.
>>> 
>>> First question... any ideas off the top of your head that might
>>> be causing this?
>>> 
>>> Second question... is there any other logging I can turn on
>>> that might explain what TC is blocking on?
>>> 
>>> Thanks.
>>> 
>>> Jerry
>> 
>> -
>>
>> 
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>> For additional commands, e-mail: users-h...@tomcat.apache.org
>> 
> 
> 
> -
>
> 
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
> 
-BEGIN PGP SIGNATURE-
Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/
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=N2E6
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

ApacheCon agenda?

2019-05-20 Thread Israel Timoteo 
Hi team,

When can we expect to see the ApacheCon agenda published?

Thanks

Israel Timoteo



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Fwd: Travel Assistance for ApacheCon NA Las Vegas 2019 now open.

2019-05-20 Thread Mark Thomas 
 Forwarded Message 

The Travel Assistance Committee (TAC) are pleased to announce that
travel assistance applications for ApacheCon NA 2019 are now open!

We will be supporting ApacheCon NA Las Vegas, Nevada on 9th - 12th
September 2019

 TAC exists to help those that would like to attend ApacheCon events,
but are unable to do so for financial reasons.
For more info on this years applications and qualifying criteria, please
visit the TAC website at
< http://www.apache.org/travel/  >.
Applications opened today and will close around the 21st June.

Important: Applications close on June 21st, 2019. Applicants have until
the closing date above to submit their applications (which should
contain as much supporting material as required to efficiently and
accurately process their request), this will enable TAC to announce
successful awards shortly afterwards.

As usual, TAC expects to deal with a range of applications from a
diverse range of backgrounds. We therefore encourage (as always) anyone
thinking about sending in an application to do so ASAP.
We look forward to greeting many of you in Las Vegas!

Kind Regards,
Gavin - (On behalf of the Travel Assistance Committee)

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Massive Startup Time after Server Reboot

2019-05-20 Thread Louis Zipes 
Can you refresh me on how to capture the stack dumps you suggested?
It's been a while

>In Task Manager find the Tomcat process, right click on it and there is an 
>option to create a dump file.

>Also, if you have access to jconsole or other JMX tool you can connect  to it 
>and see what is going on.

-Original Message-
From: André Warnier (tomcat) [mailto:a...@ice-sa.com]
Sent: Monday, May 20, 2019 4:44 AM
To: users@tomcat.apache.org
Subject: Re: Massive Startup Time after Server Reboot

- - - external message, proceed with caution - - -


On 20.05.2019 00:09, Jerry Malcolm wrote:
> Just an FYI this server has been in production a little over a year.  
> This TC load
> problem only started 2-3 months ago.  So 'something' changed to cause this 
> problem to
> manifest itself. It's been too long to try to correlate a specific server 
> change to the
> start of this problem. But I just wanted to point out that this problem has 
> NOT been
> around since day 1 on this server.

Just in case, since this is a Windows server ..
2-3 months ago, an update of a virus scanner ?
(of the intrusive kind which pre-checks each file that wants to be opened)
Checking may be easy or not, depending on your access : disable the virus 
scanner just the
time to start tomcat and check.

>
> Jerry
>
> On 5/19/2019 5:03 PM, Jerry Malcolm wrote:
>> Rainer,
>>
>> No change with the urandom parm.  I am attaching a portion of the Catalina 
>> log.  The
>> first half shows between 8 and 15 seconds to deploy each app for a single 
>> virtual host
>> (there are no war files, the app is already exploded in the appbase dir).  I 
>> have quite
>> a few virtual hosts with several apps each.  That initial server start took 
>> 21+ minutes.
>>   I then restarted the TC service and got the ~.5 sec start per webapp shown 
>> in the 2nd
>> half of the log below.
>>
>> Can you refresh me on how to capture the stack dumps you suggested? It's 
>> been a while
>>
>> Thx.
>>
>> Jerry
>>
>>  First start of Tomcat after server reboot
>> -
>>  [C:\domains\.com\webapps\JSPWiki.war] has finished in [8,579] ms
>> tory [C:\domains\.com\webapps\cis]
>> irectory [C:\domains\.com\webapps\cis] has finished in [11,486] ms
>> tory [C:\domains\.com\webapps\gallery]
>> irectory [C:\domains\.com\webapps\gallery] has finished in [9,204] 
>> ms
>> tory [C:\domains\.com\webapps\gl]
>> irectory [C:\domains\.com\webapps\gl] has finished in [8,469] ms
>> tory [C:\domains\.com\webapps\idmanager]
>> irectory [C:\domains\.com\webapps\idmanager] has finished in 
>> [8,689] ms
>> tory [C:\domains\.com\webapps\itemtrack]
>> irectory [C:\domains\.com\webapps\itemtrack] has finished in 
>> [6,907] ms
>> tory [C:\domains\.com\webapps\malcolment]
>> irectory [C:\domains\.com\webapps\malcolment] has finished in 
>> [8,469] ms
>> tory [C:\domains\.com\webapps\notebook]
>> irectory [C:\domains\.com\webapps\notebook] has finished in 
>> [10,189] ms
>> tory [C:\domains\.com\webapps\order]
>> irectory [C:\domains\.com\webapps\order] has finished in [8,501] ms
>> tory [C:\domains\.com\webapps\payment]
>> irectory [C:\domains\.com\webapps\payment] has finished in 
>> [14,209] ms
>> tory [C:\domains\.com\webapps\projectmanager]
>> irectory [C:\domains\.com\webapps\projectmanager] has finished in 
>> [9,018] ms
>>  [C:\Tomcat 9.0\conf\Catalina\myridetx.net\manager.xml]
>> ptor [C:\Tomcat 9.0\conf\Catalina\myridetx.net\manager.xml] has finished in 
>> [62] ms
>>
>>  Restart of Tomcat 
>> -
>> tory [C:\domains\.com\webapps\cis]
>> irectory [C:\domains\.com\webapps\cis] has finished in [594] ms
>> tory [C:\domains\.com\webapps\gallery]
>> irectory [C:\domains\.com\webapps\gallery] has finished in [547] ms
>> tory [C:\domains\.com\webapps\gl]
>> irectory [C:\domains\.com\webapps\gl] has finished in [562] ms
>> tory [C:\domains\.com\webapps\idmanager]
>> irectory [C:\domains\.com\webapps\idmanager] has finished in [578] 
>> ms
>> tory [C:\domains\.com\webapps\itemtrack]
>> irectory [C:\domains\.com\webapps\itemtrack] has finished in [547] 
>> ms
>> tory [C:\domains\.com\webapps\malcolment]
>> irectory [C:\domains\.com\webapps\malcolment] has finished in 
>> [579] ms
>> tory [C:\domains\.com\webapps\notebook]
>> irectory [C:\domains\.com\webapps\notebook] has finished in [547] 
>> ms
>> tory [C:\domains\.com\webapps\order]
>> irectory [C:\domains\.com\webapps\order] has finished in [531] ms
>> tory [C:\domains\.com\webapps\payment]
>> irectory [C:\domains\.com\webapps\payment] has finished in [562] ms
>> tory [C:\domains\.com\webapps\projectmanager]
>> irectory [C:\domains\.com\webapps\projectmanager] has finished in 
>> [531] ms
>>
>> On 5/18/2019 3:18 PM, Rainer Jung wrote:
>>> Most likely it hangs waiting for enough entropy for random number generator 
>>> seeding.
>>>
>>> Try whether the problem goes away if you add
>>>
>>>   -Djava.security

Re: Massive Startup Time after Server Reboot

2019-05-20 Thread tomcat 

On 20.05.2019 00:09, Jerry Malcolm wrote:

Just an FYI this server has been in production a little over a year.  This 
TC load
problem only started 2-3 months ago.  So 'something' changed to cause this 
problem to
manifest itself. It's been too long to try to correlate a specific server 
change to the
start of this problem. But I just wanted to point out that this problem has NOT 
been
around since day 1 on this server.


Just in case, since this is a Windows server ..
2-3 months ago, an update of a virus scanner ?
(of the intrusive kind which pre-checks each file that wants to be opened)
Checking may be easy or not, depending on your access : disable the virus scanner just the 
time to start tomcat and check.




Jerry

On 5/19/2019 5:03 PM, Jerry Malcolm wrote:

Rainer,

No change with the urandom parm.  I am attaching a portion of the Catalina log. 
 The
first half shows between 8 and 15 seconds to deploy each app for a single 
virtual host
(there are no war files, the app is already exploded in the appbase dir).  I 
have quite
a few virtual hosts with several apps each.  That initial server start took 21+ 
minutes.
  I then restarted the TC service and got the ~.5 sec start per webapp shown in 
the 2nd
half of the log below.

Can you refresh me on how to capture the stack dumps you suggested? It's been a 
while

Thx.

Jerry

 First start of Tomcat after server reboot
-
 [C:\domains\.com\webapps\JSPWiki.war] has finished in [8,579] ms
tory [C:\domains\.com\webapps\cis]
irectory [C:\domains\.com\webapps\cis] has finished in [11,486] ms
tory [C:\domains\.com\webapps\gallery]
irectory [C:\domains\.com\webapps\gallery] has finished in [9,204] ms
tory [C:\domains\.com\webapps\gl]
irectory [C:\domains\.com\webapps\gl] has finished in [8,469] ms
tory [C:\domains\.com\webapps\idmanager]
irectory [C:\domains\.com\webapps\idmanager] has finished in [8,689] 
ms
tory [C:\domains\.com\webapps\itemtrack]
irectory [C:\domains\.com\webapps\itemtrack] has finished in [6,907] 
ms
tory [C:\domains\.com\webapps\malcolment]
irectory [C:\domains\.com\webapps\malcolment] has finished in [8,469] 
ms
tory [C:\domains\.com\webapps\notebook]
irectory [C:\domains\.com\webapps\notebook] has finished in [10,189] 
ms
tory [C:\domains\.com\webapps\order]
irectory [C:\domains\.com\webapps\order] has finished in [8,501] ms
tory [C:\domains\.com\webapps\payment]
irectory [C:\domains\.com\webapps\payment] has finished in [14,209] ms
tory [C:\domains\.com\webapps\projectmanager]
irectory [C:\domains\.com\webapps\projectmanager] has finished in 
[9,018] ms
 [C:\Tomcat 9.0\conf\Catalina\myridetx.net\manager.xml]
ptor [C:\Tomcat 9.0\conf\Catalina\myridetx.net\manager.xml] has finished in 
[62] ms

 Restart of Tomcat 
-
tory [C:\domains\.com\webapps\cis]
irectory [C:\domains\.com\webapps\cis] has finished in [594] ms
tory [C:\domains\.com\webapps\gallery]
irectory [C:\domains\.com\webapps\gallery] has finished in [547] ms
tory [C:\domains\.com\webapps\gl]
irectory [C:\domains\.com\webapps\gl] has finished in [562] ms
tory [C:\domains\.com\webapps\idmanager]
irectory [C:\domains\.com\webapps\idmanager] has finished in [578] ms
tory [C:\domains\.com\webapps\itemtrack]
irectory [C:\domains\.com\webapps\itemtrack] has finished in [547] ms
tory [C:\domains\.com\webapps\malcolment]
irectory [C:\domains\.com\webapps\malcolment] has finished in [579] ms
tory [C:\domains\.com\webapps\notebook]
irectory [C:\domains\.com\webapps\notebook] has finished in [547] ms
tory [C:\domains\.com\webapps\order]
irectory [C:\domains\.com\webapps\order] has finished in [531] ms
tory [C:\domains\.com\webapps\payment]
irectory [C:\domains\.com\webapps\payment] has finished in [562] ms
tory [C:\domains\.com\webapps\projectmanager]
irectory [C:\domains\.com\webapps\projectmanager] has finished in 
[531] ms

On 5/18/2019 3:18 PM, Rainer Jung wrote:

Most likely it hangs waiting for enough entropy for random number generator 
seeding.

Try whether the problem goes away if you add

  -Djava.security.egd=file:/dev/urandom

to you process flags. If you are using older Java than Java 8 (not possible for 
Tomcat
9 but just in case you also have older software stacks running), then it would 
be

  -Djava.security.egd=file:/dev/./urandom

The cryptic /./ is not a typo, you would need it for Java before Java 8.

If this doesn't help, then you should try capturing a few stack dumps (thread 
dumps)
during the long startup time. People here can help interpret them.

Regards,

Rainer

Am 18.05.2019 um 21:55 schrieb Jerry Malcolm:

This is a weird one.  It started a few months ago.   I have TC 9 running on 
Windows
Server 16.  After I reboot the entire server, Tomcat takes forever on startup. 
It
normally starts in about 30 seconds.  But after a server reboot it takes up to 
15
minutes... chugging along at a snail's pace starting up all of the