RE: Regarding context.xml changes impact other web service not deployed

2020-06-09 Thread S Abirami
Hi Mark Thomas, Thanks a lot for the information. Answers for your question In which context.xml file? The global one, the host one or a web application specific one? I have changed in global context.xml which is located in conf/context.xml. Regards, Abirami.S -Original Message- From:

RE: Regarding context.xml changes impact other web service not deployed

2020-06-09 Thread S Abirami
Hi Luis, Thanks for the information. My question is mainly whether the changes in context.xml will impact the web application, which is not deployed in the Tomcat. From Mark reply, I understood that the changes in context.xml will impact the web application even though it is not deployed in

Re: Should Tomcat 10 enable response compression by default?

2020-06-09 Thread Manuel Dominguez Sarmiento
I would not change this default. GZIP (or other kinds) of response compression are better addressed as servlet filters. Having the Tomcat feature is good, but IMHO it should only be enabled by those who need it. At least in our case we have our own code to deal with this, considering

Should Tomcat 10 enable response compression by default?

2020-06-09 Thread Mark Thomas
Hi all, An enhancement has been opened to enable response compression by default: https://bz.apache.org/bugzilla/show_bug.cgi?id=64431 In short, the proposal is to change the default for the Connector's compression attribute from "off" to "on". This would be for Tomcat 10 onwards only. The

Re: Tomcat 9.0.0 multiple thread issue

2020-06-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Ripu, On 6/9/20 08:03, Ripu Daman wrote: > Hello everyone, > > I work in an IT firm as a software engineer. I don't know whether > it's a right platform to ask questions based on personal projects > but i believe i will get some help from here. > >

Re: File access error on Windows Server 2019 after upgrading to Tomcat 8.5.45

2020-06-09 Thread Bill Stewart
On Tue, Jun 9, 2020 at 9:56 AM calder wrote: > A bit off-topic, but wanted to jump in and clear this up, as the Java > error messages are somewhat misleading. Thanks for the clarification. Regards Bill - To unsubscribe,

RE: File access error on Windows Server 2019 after upgrading to Tomcat 8.5.45

2020-06-09 Thread jonmcalexander
Mark, Was the change with 8.5.44 implemented when you run the service.bat file? Thanks, Dream * Excel * Explore * Inspire Jon McAlexander Asst Vice President Middleware Product Engineering Enterprise CIO | Platform Services | Middleware | Infrastructure Solutions 8080 Cobblestone Rd |

RE: File access error on Windows Server 2019 after upgrading to Tomcat 8.5.45

2020-06-09 Thread BOSECKER Nancy
> I've been tasked with upgrading Tomcat from 8.5.41, but have run into a > problem that begins with release 8.5.45. Hopefully someone here can help. >>What was the last version where this worked? 8.5.43? I ask as 8.5.44 was not >>formally released. 8.5.43 worked, 8.5.45 does not. >>This might

RE: File access error on Windows Server 2019 after upgrading to Tomcat 8.5.45

2020-06-09 Thread BOSECKER Nancy
>> Also, "file not found" is not the same as "access denied". You should >> post the exact error line(s) from your log. >A bit off-topic, but wanted to jump in and clear this up, as the Java error >messages are somewhat misleading. >If I write a class to open a read-only file with

Re: File access error on Windows Server 2019 after upgrading to Tomcat 8.5.45

2020-06-09 Thread calder
On Tue, Jun 9, 2020 at 8:08 AM Bill Stewart wrote: [ snip ] > Also, "file not found" is not the same as "access denied". You should > post the exact error line(s) from your log. A bit off-topic, but wanted to jump in and clear this up, as the Java error messages are somewhat misleading. If I

Re: rewrite.config don't work as expected after Tomcat 8.5.53 to 8.5.55 update

2020-06-09 Thread Mark Thomas
On 09/06/2020 15:51, Ziarko Jakub wrote: > Hi, > > > After the Tomcat update (below) rewrite.config doesn't seem to be working. If > no one knows the answer maybe at least can provide me how to enable login for > RewriteValve. There is a regression in 8.5.55. Update to 8.5.56. Mark > >

rewrite.config don't work as expected after Tomcat 8.5.53 to 8.5.55 update

2020-06-09 Thread Ziarko Jakub
Hi, After the Tomcat update (below) rewrite.config doesn't seem to be working. If no one knows the answer maybe at least can provide me how to enable login for RewriteValve. Last rewrite command instead of redirecting all requests to index.html (angular app) it search in path files and

Re: File access error on Windows Server 2019 after upgrading to Tomcat 8.5.45

2020-06-09 Thread Mark Thomas
On 08/06/2020 22:54, BOSECKER Nancy wrote: > I've been tasked with upgrading Tomcat from 8.5.41, but have run into a > problem that begins with release 8.5.45. Hopefully someone here can help. What was the last version where this worked? 8.5.43? I ask as 8.5.44 was not formally released. > I

Re: File access error on Windows Server 2019 after upgrading to Tomcat 8.5.45

2020-06-09 Thread Bill Stewart
On Mon, Jun 8, 2020 at 3:54 PM BOSECKER Nancy wrote: > In 8.5.45, I get the Java error: File not Found exception - > Access is denied. The file exists and is readable, but must be > being held onto by some unknown process. I've tried Windows > process manager and resource manager, but neither of

Re: Tomcat 9.0.0 multiple thread issue

2020-06-09 Thread Paul Carter-Brown
I assume a servlet request is kicking off this process? If this is correct then are you 100% sure that something is not calling the servlet more than once? Perhaps a retry after a timeout or something? Turn your access log on and look at what requests are coming in to the server Paul On Tue,

Tomcat 9.0.0 multiple thread issue

2020-06-09 Thread Ripu Daman
Hello everyone, I work in an IT firm as a software engineer. I don't know whether it's a right platform to ask questions based on personal projects but i believe i will get some help from here. We are facing an issue regarding multiple threads being created for a servlet execution running in

Re: Mitigating slow HTTP headers vulnerability

2020-06-09 Thread Mark Thomas
On 09/06/2020 07:19, Amit Pande wrote: > (My apologies if this has been discussed already.) > > Slow HTTP headers vulnerability was reported by scanner tool, on Tomcat > 8.5.54. > > There might be not any perfect solution to address this issue, but wanted to > understand some of the best

Re: Regarding context.xml changes impact other web service not deployed

2020-06-09 Thread Mark Thomas
On 09/06/2020 06:59, S Abirami wrote: > Hi Team, > > In our product to address security vulnerability in context.xml, we have > introduced following entry > > In which context.xml file? The global one, the host one or a web application specific one? > After introducing the above line,

Re: Regarding context.xml changes impact other web service not deployed

2020-06-09 Thread Luis Rodríguez Fernández
Hello Abirami, Well, strict does what it promises, so if those third-party rest services were expecting some cookies that now are not being sent by the browser, it is normal that they do not work as expected. Internal implementation: sure! You can always have a look at the code of the different

Mitigating slow HTTP headers vulnerability

2020-06-09 Thread Amit Pande
(My apologies if this has been discussed already.) Slow HTTP headers vulnerability was reported by scanner tool, on Tomcat 8.5.54. There might be not any perfect solution to address this issue, but wanted to understand some of the best practices to mitigate this vulnerability.

Regarding context.xml changes impact other web service not deployed

2020-06-09 Thread S Abirami
Hi Team, In our product to address security vulnerability in context.xml, we have introduced following entry After introducing the above line, I noticed few rest service which is not deployed in that Tomcat also getting impact. Deployment Details Deployed :RHEL Tomcat