Re: Tomcat 8.5.51 >> Use AJP Connector >> 403

2020-02-18 Thread Friderike Hofmeister
Chris, strange, as I thought I specified secretRequired="false" and so don't need any secret, but anyway: that's it -- Thank you! Now without secret="" and without mod_jk everything works fine. Regards, Friderike Hofmeister > Christopher Schultz hat am 18. Februar 2020 > 17:07 geschrieben

Re: Embedding with Tomcat 9

2020-02-18 Thread Thad Humphries
On Tue, Feb 18, 2020 at 6:29 PM Mark Thomas wrote: > On 18/02/2020 23:13, Thad Humphries wrote: > > On Tue, Feb 18, 2020 at 5:41 PM Mark Thomas wrote: > >> On 18/02/2020 22:32, calder wrote: > >>> On Tue, Feb 18, 2020, 14:12 Thad Humphries > > > > However although this runs it returns a 4

Re: Embedding with Tomcat 9

2020-02-18 Thread Mark Thomas
On 18/02/2020 23:13, Thad Humphries wrote: > On Tue, Feb 18, 2020 at 5:41 PM Mark Thomas wrote: >> On 18/02/2020 22:32, calder wrote: >>> On Tue, Feb 18, 2020, 14:12 Thad Humphries However although this runs it returns a 404 on /employee. Why? >> >> There aren't (doesn't appear to be) an

Re: Embedding with Tomcat 9

2020-02-18 Thread Thad Humphries
On Tue, Feb 18, 2020 at 5:41 PM Mark Thomas wrote: > On 18/02/2020 22:32, calder wrote: > > On Tue, Feb 18, 2020, 14:12 Thad Humphries > wrote: > > > >> I am trying to understand how to build and run an app from local with > >> Tomcat 9 embedded using Java 8. I've started with this example writt

Re: Expect: 100-continue with filters vs valves

2020-02-18 Thread Mark Thomas
On 18/02/2020 19:47, Michael Osipov wrote: > Am 2020-02-18 um 20:28 schrieb Mark Thomas: >> Got it - I think. Let me re-phrase to see if I understand correctly. >> >> You have a code fragment that issues a redirect. >> >> The app submits a request with an header "Expect: 100-continue" >> >> With

Re: Embedding with Tomcat 9

2020-02-18 Thread Mark Thomas
On 18/02/2020 22:32, calder wrote: > On Tue, Feb 18, 2020, 14:12 Thad Humphries wrote: > >> I am trying to understand how to build and run an app from local with >> Tomcat 9 embedded using Java 8. I've started with this example written for >> Tomcat 7: >> >> https://www.oracle.com/webfolder/techn

Re: Embedding with Tomcat 9

2020-02-18 Thread calder
On Tue, Feb 18, 2020, 14:12 Thad Humphries wrote: > I am trying to understand how to build and run an app from local with > Tomcat 9 embedded using Java 8. I've started with this example written for > Tomcat 7: > > https://www.oracle.com/webfolder/technetwork/tutorials/obe/java/basic_app_embedded

Embedding with Tomcat 9

2020-02-18 Thread Thad Humphries
I am trying to understand how to build and run an app from local with Tomcat 9 embedded using Java 8. I've started with this example written for Tomcat 7: https://www.oracle.com/webfolder/technetwork/tutorials/obe/java/basic_app_embedded_tomcat/basic_app-tomcat-embedded.html#overview I am able to

Re: Expect: 100-continue with filters vs valves

2020-02-18 Thread Michael Osipov
Am 2020-02-18 um 20:28 schrieb Mark Thomas: On 18/02/2020 18:13, Michael Osipov wrote: Am 2020-02-18 um 10:00 schrieb Mark Thomas: On 17/02/2020 20:17, Michael Osipov wrote: I have continued some tests on 8.5.51 with PUT requests and Expect: 100 continue header from HttpClient 5.0. I have not

Re: Expect: 100-continue with filters vs valves

2020-02-18 Thread Mark Thomas
On 18/02/2020 18:13, Michael Osipov wrote: > Am 2020-02-18 um 10:00 schrieb Mark Thomas: >> On 17/02/2020 20:17, Michael Osipov wrote: >>> I have continued some tests on 8.5.51 with PUT requests and Expect: 100 >>> continue header from HttpClient 5.0. >>> >>> I have noticed that the very same code

Re: Expect: 100-continue with filters vs valves

2020-02-18 Thread Michael Osipov
Am 2020-02-18 um 10:00 schrieb Mark Thomas: On 17/02/2020 20:17, Michael Osipov wrote: I have continued some tests on 8.5.51 with PUT requests and Expect: 100 continue header from HttpClient 5.0. I have noticed that the very same code code fragment What code fragment? My bad, here it is: F

Re: Tomcat 8.5.51 >> Use AJP Connector >> 403

2020-02-18 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 John, On 2/18/20 11:47, John Larsen wrote: > It doesn't work otherwise. Before you guys changed the AJP we > always used localhost for host in workers. localhost and 127.0.0.1 and/or :: should all be synonyms of each other. If you used to use (the

Re: Enhancement: New option 'persistAuthentication' for session manager

2020-02-18 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Carsten, On 2/18/20 12:47, Carsten Klein wrote: > Hi there, > > most of the issues discussed with/suggested by Mark Thomas should > be in place now. The renamed PR should now show a much better code > basis for further discussions. > >> b) Please ad

Re: Enhancement: New option 'persistAuthentication' for session manager

2020-02-18 Thread Carsten Klein
Hi there, most of the issues discussed with/suggested by Mark Thomas should be in place now. The renamed PR should now show a much better code basis for further discussions. b) Please add a changelog entry for this addition. Still looking for the change log file... Carsten --

Re: Enhancement: New option 'persistAuthentication' for session manager

2020-02-18 Thread Carsten Klein
j) At a minimum, new Manager attributes need to be added here: https://github.com/apache/tomcat/blob/master/webapps/docs/config/manager.xml Here's an online preview of the updated Manger documentation: http://office.datagis.com/pub/tomcat-9.0.x/docs/config/manager.html These are the changes

Re: Tomcat 8.5.51 >> Use AJP Connector >> 403

2020-02-18 Thread John Larsen
It doesn't work otherwise. Before you guys changed the AJP we always used locahost for host in workers. John Larsen On Tue, Feb 18, 2020 at 9:27 AM Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > John, > > On 2/18/20 07:49, Joh

Re: Enhancement: New option 'persistAuthentication' for session manager

2020-02-18 Thread Jonathan S. Fisher
https://github.com/cklein05/tomcat/pull/1/files Remy: Thank you for the feedback, but please see the other threads about this. The feature is not there right now because not everyone can/wants to use the Delta Session Manager. For instance, we do _not_ want a p2p architecture as they create scala

Re: Tomcat 8.5.51 >> Use AJP Connector >> 403

2020-02-18 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 John, On 2/18/20 07:49, John Larsen wrote: > Worker host also needs to be 127.0.0.1 in your mod_jk > workers.properties file. That is if you were using host=localhost > previously. Why? - -chris > On Tue, Feb 18, 2020 at 5:36 AM Friderike Hofmei

Re: Enhancement: New option 'persistAuthentication' for session manager

2020-02-18 Thread Carsten Klein
Open the pull request in your own fork... this link should work: https://github.com/cklein05/tomcat/compare/cklein05:master...cklein05:session-manager-persist-authentication?expand=1 Done. Carsten - To unsubscribe, e-mail: use

Re: Tomcat 8.5.51 >> Use AJP Connector >> 403

2020-02-18 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Friderike, On 2/18/20 07:36, Friderike Hofmeister wrote: > for our application we have to use the AJP protocol and so I > understand with Tomcat 8.5.51 we have to configure the AJP > connector as follows: > > redirectPort="8443" secretRequired="fal

Re: Enhancement: New option 'persistAuthentication' for session manager

2020-02-18 Thread Jonathan S. Fisher
Open the pull request in your own fork... this link should work: https://github.com/cklein05/tomcat/compare/cklein05:master...cklein05:session-manager-persist-authentication?expand=1 On Tue, Feb 18, 2020 at 6:42 AM Carsten Klein wrote: > Mark, > > > Please don't be put off by the number of comme

Re: cloud cluster

2020-02-18 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jon, On 2/16/20 10:06, Jonathan Yom-Tov wrote: > What kind of configuration do people usually use when deploying on > a public cloud (e.g. AWS)? An auto-scaling cluster with session > replication? A auto-scaling cluster with all sessions stored in a

Re: Tomcat 8.5.51 >> Use AJP Connector >> 403

2020-02-18 Thread Friderike Hofmeister
Sorry, but implementing mod_jk does not change anything. Error 403 remains. Possibly I made a mistake or do we need this attribute attribute allowedRequestAttributesPattern additionally? Friderike Hofmeister - To unsubscribe, e

Re: Tomcat 8.5.51 >> Use AJP Connector >> 403

2020-02-18 Thread Friderike Hofmeister
And no need for this attribute allowedRequestAttributesPattern? Friderike - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Tomcat 8.5.51 >> Use AJP Connector >> 403

2020-02-18 Thread John Larsen
I assumed. That was the case for us when the ajp connector changed. John On Tue, Feb 18, 2020 at 5:59 AM Friderike Hofmeister < friderike.hofmeis...@mbsupport.de> wrote: > Hi John, > > currently we do not make usage of mod_jk and workers.properties. > Does your post mean we have to implement it?

Re: Tomcat 8.5.51 >> Use AJP Connector >> 403

2020-02-18 Thread Friderike Hofmeister
Hi John, currently we do not make usage of mod_jk and workers.properties. Does your post mean we have to implement it? Regards, Friderike Hofmeister > > John Larsen hat am 18. Februar 2020 13:49 > geschrieben: > > > Worker host also needs to be 127.0.0.1 in your mod_jk workers.properties

Re: Tomcat 8.5.51 >> Use AJP Connector >> 403

2020-02-18 Thread John Larsen
Worker host also needs to be 127.0.0.1 in your mod_jk workers.properties file. That is if you were using host=localhost previously. John Larsen On Tue, Feb 18, 2020 at 5:36 AM Friderike Hofmeister < friderike.hofmeis...@mbsupport.de> wrote: > Hi, > > for our application we have to use the AJP

Re: Enhancement: New option 'persistAuthentication' for session manager

2020-02-18 Thread Carsten Klein
Mark, Please don't be put off by the number of comments and suggested changes. I think the core idea is sound and meets a valid requirement that some users have. To some extent, the volume of comments reflects that fact I'm responding to a clear proposal and explanation. This is a good thing in

Tomcat 8.5.51 >> Use AJP Connector >> 403

2020-02-18 Thread Friderike Hofmeister
Hi, for our application we have to use the AJP protocol and so I understand with Tomcat 8.5.51 we have to configure the AJP connector as follows: With this browser error message changed to "403 -- Der Server hat die Anfrage verstanden, verbietet aber eine Autoriesierung." So, probably we hav

Re: Enhancement: New option 'persistAuthentication' for session manager

2020-02-18 Thread Carsten Klein
On Tue, Feb 18, 2020 at 9:19 AM Carsten Klein wrote: Rémy, Can you describe an actual use case for this ? Without clustering, I don't understand why the auth persistence is useful at all [when using clustering, the delta manager persists that auth information]. To be honest, that's also th

Re: Enhancement: New option 'persistAuthentication' for session manager

2020-02-18 Thread Mark Thomas
On 17/02/2020 17:31, Carsten Klein wrote: > Hi there, > > finally, I got my first Tomcat enhancement ready. You can view its code > at my Tomcat fork on GitHub: > > https://github.com/cklein05/tomcat/tree/session-manager-persist-authentication > > > Before I'm opening an enhancement in Tomcat's

Re: Enhancement: New option 'persistAuthentication' for session manager

2020-02-18 Thread Rémy Maucherat
On Tue, Feb 18, 2020 at 9:19 AM Carsten Klein wrote: > Rémy, > > > > Can you describe an actual use case for this ? Without clustering, I > don't > > understand why the auth persistence is useful at all [when using > > clustering, the delta manager persists that auth information]. To be > > hones

Re: Expect: 100-continue with filters vs valves

2020-02-18 Thread Mark Thomas
On 17/02/2020 20:17, Michael Osipov wrote: > I have continued some tests on 8.5.51 with PUT requests and Expect: 100 > continue header from HttpClient 5.0. > > I have noticed that the very same code code fragment What code fragment? > kicks in in the > expect header evaluation when run as valve

Re: Tomcat responding 500 instead of 408

2020-02-18 Thread Mark Thomas
On 17/02/2020 18:39, Michael Osipov wrote: > Am 2020-02-17 um 16:47 schrieb Mark Thomas: >> On 17/02/2020 15:07, Michael Osipov wrote: >>> So the server tries to read those advertised 15 bytes from the client >>> while the input stream on client side has been exhausted. The reqest >>> times out.

Re: Enhancement: New option 'persistAuthentication' for session manager

2020-02-18 Thread Carsten Klein
Rémy, Can you describe an actual use case for this ? Without clustering, I don't understand why the auth persistence is useful at all [when using clustering, the delta manager persists that auth information]. To be honest, that's also the case for session persistence itself, which does not prov