GZIP support in Tomcat 7

I have following configuration in my server.xml : Connector port=19380 protocol=HTTP/1.1 compression=on compressableMimeType=text/ html,text/xml,text/plain,application/javascript,application/json,text/javascript,text/json

Difference between process kill and shutdown

On our linux boxes, we have multiple users who run tomcat. Currently we are using process kill commands to kill the respective user's tomcat , instead of using shutdown.sh Are there any downsides of using this approach ? Thanks, Akash

Re: Difference between process kill and shutdown

kill -15 On Sun, Mar 2, 2014 at 4:42 AM, Mark Thomas ma...@apache.org wrote: On 01/03/2014 12:11, Akash Jain wrote: On our linux boxes, we have multiple users who run tomcat. Currently we are using process kill commands to kill the respective user's tomcat , instead of using

Tomcat 7 Session Persistence disable not working as expected

As documented in https://tomcat.apache.org/tomcat-5.5-doc/config/manager.html#Disable_Session_Persistence, I added the following code piece to disable session persistence in Tomcat 7. Manager pathname= / After this change I can see that SESSIONS.ser is not getting created as

Re: Tomcat 7 Session Persistence disable not working as expected

Hi Violeta, Its latest version ( 7.0.52 ) On Sun, Mar 9, 2014 at 10:28 PM, Violeta Georgieva violet...@apache.orgwrote: Hi, На понеделник, 10 март 2014 г. Akash Jain akash.delh...@gmail.com написа: As documented in https://tomcat.apache.org/tomcat-5.5-doc/config/manager.html

Re: Tomcat 7 Session Persistence disable not working as expected

Christopher, I have changed in server.xml. Below is the server.xml part - Context path= docBase=ROOT sessionCookieName=mycookie sessionCookieDomain=myapp.mydomain.com

Exception while running downloaded tomcat

I am getting following error when trying to run tomcat in Mac osx 10.7.5 ( using jdk 1.7 ) Can anybody please guide as to what is wrong ? r 14, 2014 12:04:59 AM org.apache.catalina.startup.HostConfig deployDirectory INFO: Deploying web application directory

Tomcat 7 : Configure redirect url for session timeout

I have following configuration in `web.xml` in tomcat 7. I am wondering if I can add any configurable parameter here, so that if user tries to do any operation post 30 minutes, I redirect the user to our home page. session-config session-timeout30/session-timeout

Re: Tomcat 7 : Configure redirect url for session timeout

Leo, If any request comes after session timeout interval ... why would it go into error ? I want to keep the session timeout and error scenarios different. On Fri, Mar 14, 2014 at 3:34 PM, Leo Donahue donahu...@gmail.com wrote: On Fri, Mar 14, 2014 at 3:04 PM, Akash Jain akash.delh

Re: Tomcat 7 : Configure redirect url for session timeout

I want to redirect user to / with a query parameter to indicate that session has timed out. On Fri, Mar 14, 2014 at 4:01 PM, Leo Donahue donahu...@gmail.com wrote: On Fri, Mar 14, 2014 at 3:48 PM, Akash Jain akash.delh...@gmail.com wrote: Leo, If any request comes after session timeout

CSRF protection in Tomcat 7

How can I prevent CSRF protection using Tomcat 7 ? I have heard that tomcat 7 provides CSRF filter http://tomcat.apache.org/tomcat-7.0-doc/api/org/apache/catalina/filters/CsrfPreventionFilter.html But is it thread safe ? Or shall we do a custom protection in our spring 3 application ?

Re: CSRF protection in Tomcat 7

/htmlsingle/#csrf On Mon, Mar 24, 2014 at 3:49 PM, Akash Jain akash.delh...@gmail.com wrote: How can I prevent CSRF protection using Tomcat 7 ? I have heard that tomcat 7 provides CSRF filter http://tomcat.apache.org/tomcat-7.0-doc/api/org/apache/catalina/filters/CsrfPreventionFilter.html

Re: CSRF protection in Tomcat 7

Yes, it uses LinkedHashMap internally which is not thread safe. http://tomcat.10.x6.nabble.com/CsrfPreventionFilter-LRU-cache-td2113069.html On Mon, Mar 24, 2014 at 1:09 PM, Daniel Mikusa dmik...@gopivotal.comwrote: On Mar 24, 2014, at 3:49 PM, Akash Jain akash.delh...@gmail.com wrote: How

Re: CSRF protection in Tomcat 7

On Mon, Mar 24, 2014 at 1:33 PM, Daniel Mikusa dmik...@gopivotal.comwrote: On Mar 24, 2014, at 4:24 PM, Akash Jain akash.delh...@gmail.com wrote: Yes, it uses LinkedHashMap internally which is not thread safe. http://tomcat.10.x6.nabble.com/CsrfPreventionFilter-LRU-cache-td2113069.html

Re: CSRF protection in Tomcat 7

On Mon, Mar 24, 2014 at 1:37 PM, Konstantin Kolinko knst.koli...@gmail.comwrote: 2014-03-25 0:24 GMT+04:00 Akash Jain akash.delh...@gmail.com: Yes, it uses LinkedHashMap internally which is not thread safe. http://tomcat.10.x6.nabble.com/CsrfPreventionFilter-LRU-cache-td2113069.html A 3

Tomcat 8 Slow ?

Hi, i recently tried to migrate from tomcat 7.0.53 to 8.0.5 I did some StopWatch ( Spring class) tests to compare the performance impact, and for same configurations, tomcat 8.0.5 showed its slightly slow compared to 7.0.53 Did anyone else also experienced same ? Thanks. Akash

Session fixation Tomcat 7

Hi, I am trying to resolve session fixation issue with tomcat 7.0.52 We have a Spring MVC application running on it, and the Auth method is provided by another application which writes cookie, and we use the cookie value to check whether the user is valid or not. My application URL patterns are

Size Based Rolling

HI, How can we make catalina.out and access logs ( AccessLogsValve) roll log based on size instead of daily rolling ? Thanks, Akash