Re: Enhancement: Additional user attributes queried by (some) realms

2021-05-27 Thread Carsten Klein
Chris, Mark, On 27/05/2021 22:11, Christopher Schultz wrote: After re-reading this, you mentioned reflection while asking how much we trust in Collections.unmodifiableMap(). I didn't get that right, my bad. However, I thought of reflection in order to implement a deep copy mechanism. May

Re: Enhancement: Additional user attributes queried by (some) realms

2021-05-27 Thread Carsten Klein
Chris, Mark, On 27/05/2021 22:11, Christopher Schultz wrote: What's the primary use-case for these kinds of attributes? This has been described in detail here: http://mail-archives.apache.org/mod_mbox/tomcat-users/202104.mbox/ajax/%3Cb9a2a913-f00f-f5bf-ca05-8ea4f8663ca9%40datagis.com%3E

RE: [OT] web app big memory usage?

2021-05-27 Thread Mysore, Raghunath
You could try using the Oracle utility - "jstat" - for analyzing the GC in an active Java process (PID) The "gcold" option helps us to peep into the Old Generation area jstat -gcold PID jstat -gcoldcapacity PID https://docs.oracle.com/javase/8/docs/technotes/tools/unix/jstat.html -Orig

Re: [OT] web app big memory usage?

2021-05-27 Thread Christopher Schultz
Cris, On 5/27/21 15:24, Berneburg, Cris J. - US wrote: Hi Folks :-) One of our web apps is using a "lot" of memory, specifically a big user query. We'd like to find out why. The Tomcat Web Application Manager Find leaks button said that "No web applications appear to have triggered a memory

Re: Enhancement: Additional user attributes queried by (some) realms

2021-05-27 Thread Christopher Schultz
Mark, On 5/27/21 12:22, Mark Thomas wrote: On 27/05/2021 15:04, Christopher Schultz wrote: Mark, On 5/27/21 04:59, Mark Thomas wrote: On 27/05/2021 07:32, Carsten Klein wrote: On 26/05/2021 19:56, Mark Thomas wrote: Given that the attributes may well be security related, you would need to

RE: [OT] web app big memory usage?

2021-05-27 Thread John.E.Gregg
Cris, > -Original Message- > From: Berneburg, Cris J. - US > Sent: Thursday, May 27, 2021 2:24 PM > To: users@tomcat.apache.org > Subject: [OT] web app big memory usage? > > Hi Folks :-) > > One of our web apps is using a "lot" of memory, specifically a big user query. > We'd like to

RE: [OT] web app big memory usage?

2021-05-27 Thread Amit Pande
Have you enabled the " Enable 'keep unreachable objects'" setting of MAT? https://blog.gceasy.io/2015/12/11/eclipse-mat-titbits/ Thanks, Amit -Original Message- From: Berneburg, Cris J. - US Sent: Thursday, May 27, 2021 2:24 PM To: users@tomcat.apache.org Subject: [EXTERNAL] [OT] we

[OT] web app big memory usage?

2021-05-27 Thread Berneburg, Cris J. - US
Hi Folks :-) One of our web apps is using a "lot" of memory, specifically a big user query. We'd like to find out why. The Tomcat Web Application Manager Find leaks button said that "No web applications appear to have triggered a memory leak on stop, reload or undeploy." Tomcat Manager Serv

Re: Enhancement: Additional user attributes queried by (some) realms

2021-05-27 Thread Michael Osipov
You read my mind. I always wanted to report this, but never find time. Implemented this for our realm and principal years ago: http://tomcatspnegoad.sourceforge.net/apidocs/net/sf/michaelo/tomcat/realm/ActiveDirectoryPrincipal.html#getAdditionalAttributes-- The entire principal should be immutab

Re: Enhancement: Additional user attributes queried by (some) realms

2021-05-27 Thread Carsten Klein
Mark, On 27/05/2021 18:19, Mark Thomas wrote: I will note that it isn't uncommon to have to log out and back in again to pick up newly allocated groups/roles in other environments. Yes, you are right. Didn't see it that way so far. We're talking about live updates for a session during its li

RE: Tomcat SSL stops working after an undetermined amount of time

2021-05-27 Thread Mysore, Raghunath
Hi Ezsra, I concur with suggestions from Chris Schultz. Would you clarify the following items ? The current focus is to understand the prevailing environment configuration, in context of the stack trace you shared earlier. (1) To go back, did you check for ".jar" files wi

Re: Enhancement: Additional user attributes queried by (some) realms

2021-05-27 Thread Mark Thomas
On 27/05/2021 15:04, Christopher Schultz wrote: Mark, On 5/27/21 04:59, Mark Thomas wrote: On 27/05/2021 07:32, Carsten Klein wrote: On 26/05/2021 19:56, Mark Thomas wrote: Given that the attributes may well be security related, you would need to make sure neither the Map nor any of the keys

Re: Enhancement: Additional user attributes queried by (some) realms

2021-05-27 Thread Mark Thomas
On 27/05/2021 12:49, Carsten Klein wrote: On 27/05/2021 10:59, Mark Thomas wrote: As far as I can tell, removing UserDatabasePrincipal, relying on GenericPrincipal and User remaining an internal object not exposed via the Servlet API would achieve the same result with less code. At this po

Re: Tomcat SSL stops working after an undetermined amount of time

2021-05-27 Thread Ezsra McDonald
Thanks for the responses, So, I need to understand a little more about Bouncycastle. I inherited the tomcat environment so I do not know how or why BC came to be installed in the containers. I will do some research on BC so I understand it better. My assumption from the responses is that BC is not

Re: Enhancement: Additional user attributes queried by (some) realms

2021-05-27 Thread Christopher Schultz
Mark, On 5/27/21 04:59, Mark Thomas wrote: On 27/05/2021 07:32, Carsten Klein wrote: On 26/05/2021 19:56, Mark Thomas wrote: Given that the attributes may well be security related, you would need to make sure neither the Map nor any of the keys/values could be modified. Protecting the Map is

Re: Tomcat SSL stops working after an undetermined amount of time

2021-05-27 Thread Christopher Schultz
Raghunath, On 5/26/21 19:08, Mysore, Raghunath wrote: To track if BC is configured in your environment, you may want to assess if BC is listed as a "security.provider" in the following "java.security" file File : /jre/lib/security/java.security Check for record (example below) : secur

Re: Enhancement: Additional user attributes queried by (some) realms

2021-05-27 Thread Carsten Klein
On 27/05/2021 10:59, Mark Thomas wrote: As far as I can tell, removing UserDatabasePrincipal, relying on GenericPrincipal and User remaining an internal object not exposed via the Servlet API would achieve the same result with less code. At this point I am looking for a reason not to remove

RE: JNDI ldaps Problem with SSO

2021-05-27 Thread Susan.Wood
Hi Christopher Enclosed is the stacktrace of the tomcat (localhost) 03-Mar-2021 15:57:15.221 SEVERE [http-nio-8080-exec-10] org.apache.catalina.realm.JNDIRealm.authenticate Exception performing authentication javax.naming.NamingException: [LDAP: error code 1 - 04DC: LdapErr: DSID-0C0907E

Re: Enhancement: Additional user attributes queried by (some) realms

2021-05-27 Thread Mark Thomas
On 27/05/2021 07:32, Carsten Klein wrote: On 26/05/2021 19:56, Mark Thomas wrote: Given that the attributes may well be security related, you would need to make sure neither the Map nor any of the keys/values could be modified. Protecting the Map is easy. Protecting the keys/values is a littl