Re: Strange URL rewrite when reverse proxy with Apache HTTP Server

2017-02-21 Thread André Warnier
On 21.02.2017 20:45, Aaron Gray wrote: I have an application server from a vendor that comes bundled with an additional Apache Tomcat server. The webapp SelfService.war is vendor supplied too. Here's my problem (IP's replaced to protect the innocent): networks: DMZ=172.x.x.x INTERNAL=10.x.x.x

Re: Tomcat 8.0.23, Apache Commons 2.2: Object pool shared across Tomcat servers/clusters?

2015-08-26 Thread André Warnier
On 26.08.2015 12:36, Prarthana Agwania wrote: Chuck, Apologies for the confusion. Let me rephrase it, Currently, we have multiple Tomcat nodes running on a single or on different physical machines with each having its own object pool (consider we have a pool of java String object but not

Re: Tomcat 7 - Organizing web applications into sub directories

2015-08-26 Thread André Warnier
On 26.08.2015 06:06, Srikanth Challa wrote: I am trying to organize my applications (multiple) into a specific hierarchy under the webapps folder. Something like this - webapps dev app1 app2 test app1 app3 When deploying (without WAR), I

Re: memory trace of the server with 2 instances of tomcat 7 running

2015-07-30 Thread André Warnier
Ethen John wrote: hi all, I have a linux server which is running 2 similar instances of Tomcats 7. Each of the tomcat instances has the exact same web application (.war) deployed. The application is not actively used by the users, but the behavior of the application on both the tomcat

Re: [OT] Re: SSL configuration using PFX as keystore

2015-07-22 Thread André Warnier
Mark Thomas wrote: On 08/07/2015 16:22, André Warnier wrote: snip / With respect, you both don't get it. MS support is deliberately pitiful, to emphasize the fact that MS software is by definition bug-free and does not really need support. I've had several extremely frustrating telephone

Re: tomcat deploys only half of the application and starts the server

2015-07-16 Thread André Warnier
chedana jayasinghe wrote: tomcat deploys only half of the application and starts. what could be the reason ? I tried deleting the server and setting up a new tomcat server but the problem is still the same If you installed and configured Tomcat with the same care and precision in terms than

Re: Unable to start service on Windows (Tomcat version 8.00.023)

2015-07-14 Thread André Warnier
Hi. Nikitha Benny wrote: Hi All, I have installed java JRE version 1.07.079 and Tomcat version 8.00.023. And it installs and runs fine on all unix platforms (Linux_x64, Linux_x86, Solaris and HP-UX). Now when it comes to Windows (both x86 and x64), Tomcat installs fine but does not run.

Re: Tomcat unaware that connection has been dropped

2015-07-09 Thread André Warnier
Tecno Brain wrote: I am running Tomcat 8.0.20 in Ubuntu with Java 1.8u45 This server runs in Amazon EC2 behind an ELB (load balancer), although the cluster size is just one server. My application allows to download some data in CSV format. The CSV data is generated on the fly, and there is no

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-09 Thread André Warnier
so much for all your support. Alex. El dj., 9 jul. 2015 a les 0:22, André Warnier (a...@ice-sa.com) va escriure: Alex Soto wrote: no they are always the same, I simply go to browser do https://localhost/hello/hello and I only push refresh button several times, until the id appears. Then after

Re: Tomcat unaware that connection has been dropped

2015-07-09 Thread André Warnier
some special dish that take a long time to prepare, you have to order it in advance; you can't just walk in and order it from the menu. I'll also ask Amazon about it. Thank you, -Jorge On Thu, Jul 9, 2015 at 2:06 AM, André Warnier a...@ice-sa.com wrote: Tecno Brain wrote: I am running

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-08 Thread André Warnier
like this : RewriteEngine On RewriteRule .* - [E=MY_SESSION_ID:%{SSL_SESSION_ID},NE] RequestHeader set JK-SSL-SESSION %{MY_SESSION_ID}e and then in Tomcat you would retrieve the HTTP header JK-SSL-SESSION. Alex. El dt., 7 jul. 2015 a les 23:05, André Warnier (a...@ice-sa.com) va escriure

Re: [OT] Re: SSL configuration using PFX as keystore

2015-07-08 Thread André Warnier
Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 7/7/15 9:39 AM, Mark Thomas wrote: On 30/06/2015 21:16, Mark Thomas wrote: This is probably off-topic now so marking as such. On 29/06/2015 14:29, André Warnier wrote: Mark Thomas wrote: On 26/06/2015 19

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-08 Thread André Warnier
Alex Soto wrote: no they are always the same, I simply go to browser do https://localhost/hello/hello and I only push refresh button several times, until the id appears. Then after some pushes it disappears again and appears after some time again. So I think I am not changing the protocol from

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-07 Thread André Warnier
. Honestly, I have never tried this, and I am not an SSL specialist at all, and the phrase above is a bit ambiguous. But it seems worth a try, and I do not see it in your configuration. El dt., 7 jul. 2015 a les 12:25, André Warnier (a...@ice-sa.com) va escriure: Mark Thomas wrote: On 07/07/2015

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-07 Thread André Warnier
this should work. But Tomcat is open-source and free software, and its development and debugging benefit from the help of any benevolent user, particularly if that user is interested in solving a particular problem that he is having. El dt., 7 jul. 2015 a les 19:17, André Warnier (a...@ice

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-07 Thread André Warnier
Mark Thomas wrote: On 07/07/2015 09:28, Alex Soto wrote: Hi Mark, SSL Session ID is not passed to Tomcat. You can see the logs here https://gist.github.com/lordofthejars/226d8ed605f2a58b52f3 (I have created a gist to not add here a lot of lines). Now the question is is it happens because of

Re: HTML 508 error with container authentication and virtual host

2015-07-07 Thread André Warnier
Hi. David Hoffer wrote: I've added FORM container authentication with Tomcat and everything works fine as long as users use the full URL to the app (URL in Tomcat's manager app). However users want to use a different URL based on a virtual host, e.g. myapp.mycompany.com. It brings the users

Re: HTML 508 error with container authentication and virtual host

2015-07-07 Thread André Warnier
André Warnier wrote: Hi. David Hoffer wrote: I've added FORM container authentication with Tomcat and everything works fine as long as users use the full URL to the app (URL in Tomcat's manager app). However users want to use a different URL based on a virtual host, e.g. myapp.mycompany.com

Re: HTML 508 error with container authentication and virtual host

2015-07-07 Thread André Warnier
=org.apache.catalina.valves.AccessLogValve directory=logs prefix=localhost_access_log. suffix=.txt pattern=%h %l %u %t quot;%rquot; %s %b / /Host /Engine /Service /Server On Tue, Jul 7, 2015 at 8:28 AM, André Warnier a...@ice-sa.com wrote: Hi. David Hoffer wrote

Re: Spring Scheduled Task is triggered multiple times

2015-07-05 Thread André Warnier
Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Zoran, On 7/3/15 2:41 AM, Zoran Avtarovski wrote: I have a context.xml in the META-INF directory which sets up a db container and jndi datasource realm, could this be the issue? ?xml version=1.0 encoding=UTF-8?

Re: Spring Scheduled Task is triggered multiple times

2015-07-02 Thread André Warnier
Zoran Avtarovski wrote: We have a struts2 based app that uses spiring scheduling to trigger a task every morning at 6am. The problem we have is that task in triggered multiple times, simultaneously. We have an Ubuntu 14.04.1 Server using the standard tomcat 7 installed using apt-get and

Re: Spring Scheduled Task is triggered multiple times

2015-07-02 Thread André Warnier
-config /login-config /web-app Thanks again. Z. On 2/07/2015 5:20 pm, André Warnier a...@ice-sa.com wrote: Zoran Avtarovski wrote: We have a struts2 based app that uses spiring scheduling to trigger a task every morning at 6am. The problem we have is that task in triggered

Re: Spring Scheduled Task is triggered multiple times

2015-07-02 Thread André Warnier
Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Zoran, On 7/2/15 1:22 AM, Zoran Avtarovski wrote: We have a struts2 based app that uses spiring scheduling to trigger a task every morning at 6am. The problem we have is that task in triggered multiple times,

Re: why is Tomcat 7 invoking WebSocket protocol?

2015-07-01 Thread André Warnier
Caldarale, Charles R wrote: From: André Warnier [mailto:a...@ice-sa.com] Subject: Re: why is Tomcat 7 invoking WebSocket protocol? But maybe the solution consists simply in renaming that filter, so that it does not give the mistaken impression that the WebSocket protocol is necessarily being

Re: why is Tomcat 7 invoking WebSocket protocol?

2015-06-30 Thread André Warnier
Hi. Sorry to jump in, and to top-post, and maybe make an irreverential comment : But maybe the solution consists simply in renaming that filter, so that it does not give the mistaken impression that the WebSocket protocol is necessarily being used ? Kiran Badi wrote: Hi Mark, Sorry to

Re: SSL configuration using PFX as keystore

2015-06-29 Thread André Warnier
Mark Thomas wrote: On 26/06/2015 19:37, Mark Thomas wrote: On 22/06/2015 11:56, Mark Thomas wrote: On 22/06/2015 09:39, Mark Thomas wrote: snip/ Prompting for authentication in response to an untrusted certificate is bizarre to say the least. Microsoft generously provide MSDN subscriptions

Re: Distinct servlets for different domains in one web application

2015-06-29 Thread André Warnier
Christian wrote: André, On 28.06.2015 23:11, André Warnier wrote: Christian wrote: Mark, On 28.06.2015 19:58, Mark Eggers wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Christian, On 6/28/2015 9:01 AM, Christian wrote: Hello all, is it somehow possible to create a web application

Re: [OT] Re: Filter behaviour

2015-06-29 Thread André Warnier
George Stanchev wrote: For SOAP, you *MUST* send back 500 or 400 with your SOAP fault back. [1] http://www.w3.org/TR/soap12-part2/#tabresstatereccodes Not to start a fight on SOAP on this Tomcat forum, but in the wording of the section referenced above, I definitely do not see that you

Re: Question on warning message from catalina log file

2015-06-29 Thread André Warnier
minh tran wrote: Hello , I tried to deploy myproj war file to tomcat production server and I got this message from the catalina log file saying that WARNING: A myproj docBase inside the host appBase has been specified, and will be ignored.I don't know what it meant but one thing I know that

Re: [OT] Re: Filter behaviour

2015-06-28 Thread André Warnier
Leo Donahue wrote: On Sat, Jun 27, 2015 at 8:37 AM, Konstantin Kolinko knst.koli...@gmail.com wrote: public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException { boolean iAmNotAuthorized = true; if

Re: Distinct servlets for different domains in one web application

2015-06-28 Thread André Warnier
Christian wrote: Mark, On 28.06.2015 19:58, Mark Eggers wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Christian, On 6/28/2015 9:01 AM, Christian wrote: Hello all, is it somehow possible to create a web application with multiple servlets that are registered to different domains for

Re: Filter behaviour

2015-06-26 Thread André Warnier
Leo Donahue wrote: public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException Assuming you have only a single Filter configured in web.xml Assuming you have logic in a doFilter that checks the value of a boolean. If the

Re: CVE-2014-7810 Mitigation

2015-06-25 Thread André Warnier
Lynch, Charles [USA] wrote: Seeking guidance on mitigation of CVE-2014-7810http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7810 on Apache Tomcat 6.0.37. Upgrading to 6.0.43 is not an option for my team at the moment, and we need to secure our install via other means until the patch can

Re: [External] Re: CVE-2014-7810 Mitigation

2015-06-25 Thread André Warnier
to be informed, isn't it ?) From: André Warnier [a...@ice-sa.com] Sent: Thursday, June 25, 2015 8:32 AM To: Tomcat Users List Subject: Re: [External] Re: CVE-2014-7810 Mitigation Lynch, Charles [USA] wrote: You are saying a malicious actor would need

Re: [External] Re: CVE-2014-7810 Mitigation

2015-06-25 Thread André Warnier
clear in the mail archive article I quoted below, which is signed by one of the core Tomcat developers. From: André Warnier [a...@ice-sa.com] Sent: Thursday, June 25, 2015 7:55 AM To: Tomcat Users List Subject: [External] Re: CVE-2014-7810 Mitigation Lynch

Re: Tomcat 6 : saerching for a bug fix between 6.0.24 and 6.0.44

2015-06-25 Thread André Warnier
Pascal Abaziou wrote: Le 25 juin 2015 à 00:23, Mark Eggers its_toas...@yahoo.com.INVALID a écrit : -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 6/24/2015 2:40 PM, André Warnier wrote: Pascal Abaziou wrote: Hello, I’m searching for the version that fixes a bug I’ve on a tomcat 6.0.24

Re: persistance cache

2015-06-24 Thread André Warnier
Hi. The recommendation on this forum is to not use top posting, but to keep the flow of conversation natural, and respond below the question to which your question refers. See http://tomcat.apache.org/lists.html, Important, 6) Kaouthar Ghorbel wrote: 2015-06-23 12:00 GMT+01:00 André Warnier

Re: the session tracking of tomcat 6 and tomcat 7 behaves strangely

2015-06-24 Thread André Warnier
jayasinghe wrote: On Tue, Jun 23, 2015 at 2:46 PM, André Warnier a...@ice-sa.com wrote: chedana jayasinghe wrote: In my web application, in a jsp there is a javascript which sends request to a servlet every twenty seconds, so it kills my applications user idle time tracking by resetting

Re: Tomcat 6 : saerching for a bug fix between 6.0.24 and 6.0.44

2015-06-24 Thread André Warnier
Pascal Abaziou wrote: Hello, I’m searching for the version that fixes a bug I’ve on a tomcat 6.0.24 (on redhat). As I do not reproduce it on my windows workstation with tomcat 6.0.44, I need elements to argue to upgrade to the sys admin. So the bug : with a REST resource service implemented

Re: the session tracking of tomcat 6 and tomcat 7 behaves strangely

2015-06-23 Thread André Warnier
chedana jayasinghe wrote: In my web application, in a jsp there is a javascript which sends request to a servlet every twenty seconds, so it kills my applications user idle time tracking by resetting the lastAccessed time in session. the funny thing is lastAccessed time doesn't get updated in

Re: persistance cache

2015-06-23 Thread André Warnier
hello. Kaouthar Ghorbel wrote: hello, I have a method that returns a list of items when I change the data in this list in the database ,the return of the method does not take into account this change. here is the configuration of persistance.xml ?xml version=1.0 encoding=UTF-8? persistence

Re: We have a problem involving weird error messages in our Tomcat context, and catalina.out growing to enormous size.

2015-06-22 Thread André Warnier
James H. H. Lampert wrote: We have two weird things going on at the same customer installation. First, we have a situation in which catalina.out is inexplicibly growing to enormous size (4558505886 bytes) in a very short time (under a week), and growing by 4k in under a minute. And yet the

Re: SSL configuration using PFX as keystore

2015-06-22 Thread André Warnier
Mark Thomas wrote: On 22/06/2015 09:39, Mark Thomas wrote: On 22/06/2015 00:25, Michael Salisbury wrote: snip/ When connecting from a Windows client (any Windows client) I get a 'network path not found' error 0x80070035. I know the path is valid as I can reach it via other means, and

Re: SSL configuration using PFX as keystore

2015-06-22 Thread André Warnier
Mark Thomas wrote: On 22/06/2015 00:25, Michael Salisbury wrote: Thanks, I've done much searching - hence why I'm finally posting here. Windows WebDAV is actually quite reasonable Many people would disagree with that statement. It hasn't been updated since the early days of Windows 7 but

Re: Weird situation

2015-06-22 Thread André Warnier
Nabusg Tomcat wrote: Apache HTTPD version 2.4.10 Tomcat version apache-tomcat-7.0.61 Ubuntu 12.04.5 16G RAM Dual Core processor 64-bit Lately I am noticing that the request parameters are present when the request hits Apache, but are dropped when request reaches tomcat. for e.g

Re: Weird situation

2015-06-22 Thread André Warnier
, Jun 22, 2015 at 11:00 AM, André Warnier a...@ice-sa.com wrote: Nabusg Tomcat wrote: Apache HTTPD version 2.4.10 Tomcat version apache-tomcat-7.0.61 Ubuntu 12.04.5 16G RAM Dual Core processor 64-bit Lately I am noticing that the request parameters are present when the request hits Apache

Re: Apache Tomcat 8.0.22 server on different machines

2015-06-20 Thread André Warnier
Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Prarthana, On 6/19/15 5:08 AM, Prarthana Agwania wrote: We have a requirement wherein we would like to know the urls of each of the tomcat instance running on different servers. The scenario is somewhat like, 1. There

Re: Apache Tomcat 8.0.22 server on different machines

2015-06-20 Thread André Warnier
André Warnier wrote: Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Prarthana, On 6/19/15 5:08 AM, Prarthana Agwania wrote: We have a requirement wherein we would like to know the urls of each of the tomcat instance running on different servers. The scenario

Re: SSL configuration using PFX as keystore

2015-06-19 Thread André Warnier
Daniel Mikusa wrote: On Fri, Jun 19, 2015 at 12:42 AM, Michael Salisbury mich...@skypoint.co.nz wrote: Hi there, I’m trying to get the above working using Tomcat 8.0, previously working with 7.0. This is part of a WebDAV connector in Confluence. It seems I can connect from anything other

Re: redirect to website not working

2015-06-18 Thread André Warnier
Ankur Gupta wrote: Thank you for your help... xx.xxx.xx.81 server through which iam using ie is not accessed to public website.This might be the problem. I want to ask a noob question that is there any method , as 81 server is not accessed to public websites but Linux server has access , so any

Re: redirect to website not working

2015-06-18 Thread André Warnier
Hi. I will try to give you some more tips below, but really you should try and work this out by yourself. From what little information is available below, I still believe that there is no problem with your application under Tomcat, but that the problem is that *the browser* cannot access

Re: logging input and output HTTP message payload

2015-06-17 Thread André Warnier
*org.apache.coyote.level=FINE *in log properties logs HTTP requests to the server, but does not log response. Highly appreciate if you guys can share your thoughts to achieve this. Ask the NSA for some tips ? Thanks, Milinda On Wed, Jun 17, 2015 at 5:56 PM, André Warnier a...@ice-sa.com wrote: Frederik Nosi

Re: redirect to website not working

2015-06-17 Thread André Warnier
Ankur Gupta wrote: Log says this: xx.xxx.xx.81 - - [17/Jun/2015:12:51:47 -0400] GET /examples/smstrial.jsp?mobileNumber=0123456789 HTTP/1.1 302 - xx.xxx.xx.81 - - [17/Jun/2015:12:52:16 -0400] GET /examples/smstrial.jsp?mobileNumber=0123456789 HTTP/1.1 302 - xx.xxx.xx.81 - -

Re: logging input and output HTTP message payload

2015-06-17 Thread André Warnier
Frederik Nosi wrote: It helps only with HTTP though, no HTTPS or at least not easily. While we are at this, are you trying to debug a SOAP / REST connection from your application running on Tomcat to another server or a connection coming from outside to your Tomcat? On 06/17/2015 11:16 AM,

Re: redirect to website not working

2015-06-17 Thread André Warnier
Ankur Gupta wrote: I have apache tomacat 7.0.61 and linux server 6.1 enterprise. There is a requirment of sending sms to the customers, but the request to send sms to the vendor is throught this sftp linux server. Now, when i redirect to the page it does not respond.But when i access the same

Re: redirect to website not working

2015-06-17 Thread André Warnier
Ankur Gupta wrote: Sorry if I was unable to make you understand . At my workplace we have one production server which have iis and classic asp pages are deployed. Ok, that I understand. Server-A = IIS + whatever Now as per the requirement (of which we do not have a copy, so we know nothing

Re: redirect to website not working

2015-06-17 Thread André Warnier
Ankur Gupta wrote: xx.xx.xx.81 has classic asp page sms.asp having code: %@ language=vbscript% % mobileNumber=0123456789 Response.redirect( http://xx.xxx.xx.99:8080/examples/smstrial.jsp?mobileNumber=; mobileNumber) % Linux server(xx.xxx.xx.99:8080) with

Re: redirect to website not working

2015-06-17 Thread André Warnier
Hi. Ankur Gupta wrote: Log says this: xx.xxx.xx.81 - - [17/Jun/2015:12:51:47 -0400] GET /examples/smstrial.jsp?mobileNumber=0123456789 HTTP/1.1 302 - xx.xxx.xx.81 - - [17/Jun/2015:12:52:16 -0400] GET /examples/smstrial.jsp?mobileNumber=0123456789 HTTP/1.1 302 - xx.xxx.xx.81 - -

Re: redirect to website not working

2015-06-17 Thread André Warnier
Ankur Gupta wrote: I had installed fiddler and deactivated ie stupid feature . how can I share the result of fiddler to you if the system dosent allow attachments? Well, on this list here we try to help, and we provide tips. But we do not do all the work for you, and you are expected to do

Re: Brand new to Tomcat

2015-06-16 Thread André Warnier
Cohen, Laurence wrote: Hi, I find myself in a position where I am the only system administrator on a project that uses tomcat appserver and apache webeserver with a postgres backend. I am going to do some guesswork here, and you'll tell us if I'm wrong. Presumably, considering what you are

Apache/Tomcat mod_jk connector config issue ?

2015-06-16 Thread André Warnier
Hi. Can I too ? mod_jk log (debug) : ... [Tue Jun 16 13:26:21.928 2015] [16334:140682714515200] [debug] map_uri_to_worker_ext::jk_uri_worker_map.c (1134): Attempting to map URI '/hudson' from 5 maps [Tue Jun 16 13:26:21.928 2015] [16334:140682714515200] [debug] find_match::jk_uri_worker_map.c

Re: Tomcat not reading jsp code

2015-06-15 Thread André Warnier
Ankur Gupta wrote: I have apache tomcat 7.0 and Linux 6.1 server. I had written simple jsp code in a .jsp page which will redirect page and deployed in tomcat . When. Page is accessed then only html tags are shown and tomcat just skips jsp code written under % % tag. Plz help. Do you have

Re: Fwd: Apache Tomcat 7 -Parameters lost

2015-06-12 Thread André Warnier
kartheek desineedi wrote: Yes we upgraded to Apache Tomcat 7.0.62 but still the issue is persisting. Failed request filter did not filter out any params indicating that the parameters are not malformed. We are sending all the requests in the SAME manner while most of them succeed,few of them

Re: Vb script not running

2015-06-08 Thread André Warnier
Ankur Gupta wrote: I have apache tomcat 7.0 linux 6.1 server I want to deploy a .asp page which contains vb script. The problem is that vb script is not executing. Even response.write() is not working. Is there any alternative to run vb script? Assuming that this script should normally be

Re: Vb script not running

2015-06-08 Thread André Warnier
). If there is a lot of vbscript used in the application, and you do not want to convert it to Java, then look at the solutions indicated above. On Mon, Jun 8, 2015 at 4:17 PM, André Warnier a...@ice-sa.com wrote: Ankur Gupta wrote: I have apache tomcat 7.0 linux 6.1 server I want to deploy

Re: FormAuthenticator, Tomcat restart

2015-05-29 Thread André Warnier
Leonid Rozenblyum wrote: Hello, Christopher! I indeed meant this The Tomcat restart between showing and submitting the login page is the source of the problem. Your explanation clarifies the core of the issue well! I'll dig into the Tomcat documentation deeper to find out how to inject that

Re: Problem specifying cipher suites in tomcat6

2015-05-29 Thread André Warnier
Sean Dawson wrote: I had significant problems trying to uncover a change in tomcat7 that broke our app when upgrading from 42 to 57, for a couple weeks over Christmas holidays. Turns out it was something we shouldn't have been doing - you mean, apart from top-posting here ? but it was

Re: can we pass OS username while connection Database from Tomcat

2015-05-28 Thread André Warnier
Mark Thomas wrote: On 28/05/2015 08:26, Vijay Kumar wrote: Hi, Is it possible to pass OS username when making connection to any Database from Tomcat context.xml? In theory this should be possible if you are using SPNEGO authentication. Testing this to figure out what is required to make it

Re: can we pass OS username while connection Database from Tomcat

2015-05-28 Thread André Warnier
Vijay Kumar wrote: Hi Mark, Thanks for your update. I should have specify my requirement little more clear to you to understand what you are saying. I have Oracle Database where my objects are installed and I have also a Linux instance where i installed Tomcat. I am currently creating

Re: can we pass OS username while connection Database from Tomcat

2015-05-28 Thread André Warnier
Vijay Kumar wrote: Hi Mark, Please find below my exact requirement. I have Oracle Database where my objects are installed and I have also a Linux instance where i installed Tomcat. I am currently creating connection to the Oracle database from Tomcat using 'apps' user as this schema is having

Re: can we pass OS username while connection Database from Tomcat

2015-05-28 Thread André Warnier
Vijay, do not top post. As you can see below, it makes it difficult to follow the conversation. Vijay Kumar wrote: Hi Mark, Thanks for your update. I should have specify my requirement little more clear to you to understand what you are saying. I have Oracle Database where my objects are

Re: can we pass OS username while connection Database from Tomcat

2015-05-28 Thread André Warnier
it is not. Thanks, Vijay G On Thu, May 28, 2015 at 3:20 PM, André Warnier a...@ice-sa.com wrote: Vijay Kumar wrote: Hi Mark, Please find below my exact requirement. I have Oracle Database where my objects are installed and I have also a Linux instance where i installed Tomcat. I am currently creating

Re: Fwd: Fwd:

2015-05-26 Thread André Warnier
Hello Yuval. As a kind of generic answer to your previous enquiries : Tomcat is a Servlet Container, and the developers who write Tomcat strive to have it behave in accordance with the applicable Java Servlet Specification. Refer to this page to find out which version of Tomcat matches which

Re: native API - to make Apache/Tomcat faster

2015-05-26 Thread André Warnier
David kerber wrote: On 5/26/2015 9:36 AM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- ... The rebooting the server is a cure. That seems to be a popular cure with Microsoft Windows servers ;) But unfortunately, it's only treating the symptoms, not curing the

Re: native API - to make Apache/Tomcat faster

2015-05-26 Thread André Warnier
Christoph P.U. Kukulies wrote: Am 26.05.2015 um 15:36 schrieb Christopher Schultz: So you are using either mod_proxy_ajp or mod_proxy? mod_proxy Are you using TLS anywhere in the mix? (I should hope so, since you are deploying a CMS). Does httpd terminate TLS? Do you encrypt the

Re: how to block the duplicated requests?

2015-05-19 Thread André Warnier
Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 To whom it may concern, On 5/19/15 8:09 AM, javalishixml wrote: Just understood you. Really appreciate for your feedback. How do we judge it's a robot? item1: we find the request IP is always the same one. item2: our

Re: Tomcat 7 JNDI Realm credential password update availability

2015-05-13 Thread André Warnier
John Beaulaurier -X (jbeaulau - ADVANCED NETWORK INFORMATION INC at Cisco) wrote: Hello, We have a Tomcat 7 server running on Linux that must use LDAP over SSL to connect to an AD server for user authentication. This configuration we have working. The issue is the credentials used to connect

Re: Tomcat Vulnerabilities for 6.x and 7.x version

2015-05-12 Thread André Warnier
Mittal, Paran (Infosys) wrote: Hi Team, We need to understand the fix for tomcat Vulnerabilities for 6.0.29 and 7.0 version. We came across a CVE Reference: CVE-2014-0230 which says When a response for a request with a request body is returned to the user agent before the request body is

Re: Issues with Tomcat 7.0.57 not loading ActionServlets

2015-05-07 Thread André Warnier
Raj wrote: I upgraded my application from tomcat 5.5.15, JDK 1.5, Struts 1.1 on Debian 2.6.32 to tomcat 7.0.57, JDK 1.6, struts 1.1 on ubuntu14.04 and Action Servlets are not loading. I am thinking of this is something to do with version conflict. Please let me know what I am missing. Below is

Re: [SECURITY] CVE-2014-0230: Apache Tomcat DoS

2015-05-06 Thread André Warnier
Jose María Zaragoza wrote: 2015-05-06 0:53 GMT+02:00 Mark Thomas ma...@apache.org: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 CVE-2014-0230 Denial of Service Severity: Low Vendor: The Apache Software Foundation Versions Affected: - - Apache Tomcat 8.0.0-RC1 to 8.0.8 - - Apache Tomcat

Re: Officially released Apache tomcat version with CVE-2014-0230

2015-05-05 Thread André Warnier
Raghavendra Nilekani wrote: Hi I have an application where I currently use 6.0.20 version of Apache tomcat bundle from spring source. Now because of security vulnerabilities I have to migrate to newer latest version of Apache tomcat. I saw the latest version on Apace tomcat site is Apache

Re: High cpu on Tomcat 8

2015-05-04 Thread André Warnier
Caldarale, Charles R wrote: From: Christopher Schultz [mailto:ch...@christopherschultz.net] Subject: Re: High cpu on Tomcat 8 Car analogy: it's the distributor cap of all the bytes flying around the container. You're dating yourself :-) Haven't seen a distributor on a car in many years.

Re: Finding the Apache httpd IP address when AJP is used

2015-04-30 Thread André Warnier
Paul Klinkenberg wrote: Hi Christopher, Thanks for taking the time to respond; again much appreciated. Your point, and André's, is understood. Security should not be done based on incoming IP address. With this current project, we off course want to deliver software which is secure by

Re: Finding the Apache httpd IP address when AJP is used

2015-04-30 Thread André Warnier
Paul Klinkenberg wrote: Hi André, Paul Klinkenberg wrote: Hi Christopher, Thanks for taking the time to respond; again much appreciated. Your point, and André's, is understood. Security should not be done based on incoming IP address. With this current project, we off course want to deliver

Re: [OT] Finding the Apache httpd IP address when AJP is used

2015-04-30 Thread André Warnier
Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Paul, On 4/30/15 3:24 AM, Paul Klinkenberg wrote: I never knew the remote_addr could not be trusted, but I believe you at once when you say so. I thought it was taken from the actual socket connection. With the

Re: Finding the Apache httpd IP address when AJP is used

2015-04-30 Thread André Warnier
Paul Klinkenberg wrote: Hi André, Paul Klinkenberg wrote: Hi André, Paul Klinkenberg wrote: Hi Christopher, Thanks for taking the time to respond; again much appreciated. Your point, and André's, is understood. Security should not be done based on incoming IP address. With this current

Re: Finding the Apache httpd IP address when AJP is used

2015-04-29 Thread André Warnier
Paul Klinkenberg wrote: Hi Tomcat users! I have been working on an update for a Tomcat valve called mod_cfml. The project aims to provide automatic web context creation in Tomcat, when coming from a frontend webserver. The live code base can be found at https://github.com/utdream/mod_cfml

Re: Finding the Apache httpd IP address when AJP is used

2015-04-29 Thread André Warnier
As a P.S. : Maybe you should also look at this, to see if it would fit your needs : http://tomcat.apache.org/tomcat-8.0-doc/proxy-howto.html André Warnier wrote: Paul Klinkenberg wrote: Hi Tomcat users! I have been working on an update for a Tomcat valve called mod_cfml. The project aims

Re: how to convert https to http by using mod_jk

2015-04-27 Thread André Warnier
chenk...@126.com wrote: hi:? ??? ? I'm using apache + tomcat to build my website。The tomcat ?provide http service and apache provide both http/https。I tried two method to implements: by mod_proxy:ProxyPass / balancer://mycluster/ stickysession=JSESSIONID nofailover=On?

Re: [OT] Sending HTTP Trailers from a client (not servlet)

2015-04-24 Thread André Warnier
Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, Bump. Anyone? No, but I tried. But everything I found seems to say that such trailers are really rarely used, and that's probably why you are not getting any echo. I believe that initially you mentioned that

Re: File descriptors peaks with latest stable build of Tomcat 7

2015-04-22 Thread André Warnier
Rainer Jung wrote: Am 22.04.2015 um 11:58 schrieb Thomas Boniface: What concerns me the most is the CLOSE_WAIT on tomcat side because when an fd peak appears the web application appears to be stuck. It feels like all its connections are consumed and none can be established from nginx anymore.

Re: File descriptors peaks with latest stable build of Tomcat 7

2015-04-22 Thread André Warnier
Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Neill, On 4/22/15 9:12 AM, Neill Lima wrote: If I am not wrong, if the application in question is monitored in VisualVM through JMX (https://visualvm.java.net/) you could trigger a Force GC from its monitoring console.

Re: File descriptors peaks with latest stable build of Tomcat 7

2015-04-22 Thread André Warnier
Rainer Jung wrote: Am 22.04.2015 um 00:08 schrieb André Warnier: ... The OP has a complex setup, where we are not even sure that the various connections in various states are even related directly to Tomcat or not. Graphically, we have this : client -- TCP -- nginx -- TCP -- Tomcat -- webapp

Re: File descriptors peaks with latest stable build of Tomcat 7

2015-04-21 Thread André Warnier
Thomas Boniface wrote: The file descriptor peak show up in our monitoring application. We have some charts showing the number of file descriptors owned by the tomcat process (ls /proc/$(pgrep -u tomcat7)/fd/ | wc -l). The calatalina.out log shows errors, the most frequent being a

Re: File descriptors peaks with latest stable build of Tomcat 7

2015-04-21 Thread André Warnier
Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 André, On 4/21/15 10:56 AM, André Warnier wrote: Thomas Boniface wrote: The file descriptor peak show up in our monitoring application. We have some charts showing the number of file descriptors owned by the tomcat

Re: File descriptors peaks with latest stable build of Tomcat 7

2015-04-20 Thread André Warnier
Thomas Boniface wrote: I did some captures during a peak this morning, I have some lsof and netstat data. It seems to me that most file descriptors used by tomcat are some http connections: thomas@localhost  ~/ads3/tbo11h12  cat lsof| wc -l 17772 thomas@localhost  ~/ads3/tbo11h12  cat

Re: Multiple login/home pages within a tomcat app

2015-04-08 Thread André Warnier
Olayemi Olatunji wrote: Hello Guys, I’m sort of a newbie to this but I need to know if its achievable. I want to create multiple login pages within a single web app e.g www.tomcat.org/login1, /login2 How can I achieve this? Hi. Since you claim to be a newbie at this, I'll try to

Re: Rendering JSP files through Apache

2015-04-08 Thread André Warnier
Leggio, Andrew wrote: I have the following being used in my conf file: IfModule mod_proxy_ajp.so ProxyPass / ajp://localhost:8009/ /IfModule Does this actually direct jsp files to use Tomcat? That is a funny way of putting it. What the above does - if everything else is installed and

Re: Fedora 20 Yum and tomcat setup

2015-04-08 Thread André Warnier
Salam Y. Elias wrote: Thanks Chuck, recommandation was great. I downloaded 8.0.21, created three directories, each one with its own Tomcat, chnaged some ports in server.xml and all 3 applications are running like a charm. However, I am trying to replace the Root with my application. I delete

Re: Fedora 20 Yum and tomcat setup

2015-04-08 Thread André Warnier
André Warnier wrote: Salam Y. Elias wrote: Thanks Chuck, recommandation was great. I downloaded 8.0.21, created three directories, each one with its own Tomcat, chnaged some ports in server.xml and all 3 applications are running like a charm. However, I am trying to replace the Root with my

  1   2   3   4   5   6   7   8   9   10   >