Re: Strange URL rewrite when reverse proxy with Apache HTTP Server

On 21.02.2017 20:45, Aaron Gray wrote: I have an application server from a vendor that comes bundled with an additional Apache Tomcat server. The webapp SelfService.war is vendor supplied too. Here's my problem (IP's replaced to protect the innocent): networks: DMZ=172.x.x.x INTERNAL=10.x.x.x

Re: Tomcat 7 - Organizing web applications into sub directories

On 26.08.2015 06:06, Srikanth Challa wrote: I am trying to organize my applications (multiple) into a specific hierarchy under the webapps folder. Something like this - webapps dev app1 app2 test app1 app3 When deploying (without WAR), I am

Re: Tomcat 8.0.23, Apache Commons 2.2: Object pool shared across Tomcat servers/clusters?

On 26.08.2015 12:36, Prarthana Agwania wrote: Chuck, Apologies for the confusion. Let me rephrase it, Currently, we have multiple Tomcat nodes running on a single or on different physical machines with each having its own object pool (consider we have a pool of java String object but not connec

Re: memory trace of the server with 2 instances of tomcat 7 running

Ethen John wrote: hi all, I have a linux server which is running 2 similar instances of Tomcats 7. Each of the tomcat instances has the exact same web application (.war) deployed. The application is not actively used by the users, but the behavior of the application on both the tomcat instance

Re: [OT] Re: SSL configuration using PFX as keystore

Mark Thomas wrote: On 08/07/2015 16:22, André Warnier wrote: With respect, you both don't get it. MS support is deliberately pitiful, to emphasize the fact that MS software is by definition bug-free and does not really need support. I've had several extremely frustrating telep

Re: tomcat deploys only half of the application and starts the server

chedana jayasinghe wrote: tomcat deploys only half of the application and starts. what could be the reason ? I tried deleting the server and setting up a new tomcat server but the problem is still the same If you installed and configured Tomcat with the same care and precision in terms than yo

Re: Unable to start service on Windows (Tomcat version 8.00.023)

Hi. Nikitha Benny wrote: Hi All, I have installed java JRE version 1.07.079 and Tomcat version 8.00.023. And it installs and runs fine on all unix platforms (Linux_x64, Linux_x86, Solaris and HP-UX). Now when it comes to Windows (both x86 and x64), Tomcat installs fine but does not run. Also

Re: Tomcat unaware that connection has been dropped

some restaurants, if you want some special dish that take a long time to prepare, you have to order it in advance; you can't just walk in and order it from the menu. I'll also ask Amazon about it. Thank you, -Jorge On Thu, Jul 9, 2015 at 2:06 AM, André Warnier wrote: Tecno Brain

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

ache and why this is happening. Thank you so much for all your support. Alex. El dj., 9 jul. 2015 a les 0:22, André Warnier () va escriure: Alex Soto wrote: no they are always the same, I simply go to browser do https://localhost/hello/hello and I only push refresh button several times, until t

Re: Tomcat unaware that connection has been dropped

Tecno Brain wrote: I am running Tomcat 8.0.20 in Ubuntu with Java 1.8u45 This server runs in Amazon EC2 behind an ELB (load balancer), although the cluster size is just one server. My application allows to download some data in CSV format. The CSV data is generated on the fly, and there is no wa

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

Alex Soto wrote: no they are always the same, I simply go to browser do https://localhost/hello/hello and I only push refresh button several times, until the id appears. Then after some pushes it disappears again and appears after some time again. So I think I am not changing the protocol from ht

Re: [OT] Re: SSL configuration using PFX as keystore

Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 7/7/15 9:39 AM, Mark Thomas wrote: On 30/06/2015 21:16, Mark Thomas wrote: This is probably off-topic now so marking as such. On 29/06/2015 14:29, André Warnier wrote: Mark Thomas wrote: On 26/06/2015 19

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

d : setting a HTTP request header, before proxying to Tomcat. It would work like this : RewriteEngine On RewriteRule .* - [E=MY_SESSION_ID:%{SSL_SESSION_ID},NE] RequestHeader set JK-SSL-SESSION "%{MY_SESSION_ID}e" and then in Tomcat you would retrieve the HTTP header "JK-SSL-SES

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

ime ? Again, this is probably not the way in which this should work. But Tomcat is open-source and free software, and its development and debugging benefit from the help of any benevolent user, particularly if that user is interested in solving a particular problem that he is having. El dt.,

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

vVars." Honestly, I have never tried this, and I am not an SSL specialist at all, and the phrase above is a bit ambiguous. But it seems worth a try, and I do not see it in your configuration. El dt., 7 jul. 2015 a les 12:25, André Warnier () va escriure: Mark Thomas wrote: On 07/07/2015 0

Re: HTML 508 error with container authentication and virtual host

l but here is a copy. On Tue, Jul 7, 2015 at 8:28 AM, André Warnier wrote: Hi. David Hoffer wrote: I've added FORM container authentication with Tomcat and everything works fine as long as users use the full URL to the app (URL in Tomcat

Re: HTML 508 error with container authentication and virtual host

André Warnier wrote: Hi. David Hoffer wrote: I've added FORM container authentication with Tomcat and everything works fine as long as users use the full URL to the app (URL in Tomcat's manager app). However users want to use a different URL based on a virtual host, e.g. myapp.myc

Re: HTML 508 error with container authentication and virtual host

Hi. David Hoffer wrote: I've added FORM container authentication with Tomcat and everything works fine as long as users use the full URL to the app (URL in Tomcat's manager app). However users want to use a different URL based on a virtual host, e.g. myapp.mycompany.com. It brings the users to

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

Mark Thomas wrote: On 07/07/2015 09:28, Alex Soto wrote: Hi Mark, SSL Session ID is not passed to Tomcat. You can see the logs here https://gist.github.com/lordofthejars/226d8ed605f2a58b52f3 (I have created a gist to not add here a lot of lines). Now the question is is it happens because of mod

Re: Spring Scheduled Task is triggered multiple times

Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Zoran, On 7/3/15 2:41 AM, Zoran Avtarovski wrote: I have a context.xml in the META-INF directory which sets up a db container and jndi datasource realm, could this be the issue? This is unconnected with your init

Re: Spring Scheduled Task is triggered multiple times

Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Zoran, On 7/2/15 1:22 AM, Zoran Avtarovski wrote: We have a struts2 based app that uses spiring scheduling to trigger a task every morning at 6am. The problem we have is that task in triggered multiple times, simultan

Re: Spring Scheduled Task is triggered multiple times

/login.jsp /login-error.jsp Thanks again. Z. On 2/07/2015 5:20 pm, "André Warnier" wrote: Zoran Avtarovski wrote: We have a struts2 based app that uses spiring scheduling to trigger a task every morning at 6am. The problem we h

Re: Spring Scheduled Task is triggered multiple times

Zoran Avtarovski wrote: We have a struts2 based app that uses spiring scheduling to trigger a task every morning at 6am. The problem we have is that task in triggered multiple times, simultaneously. We have an Ubuntu 14.04.1 Server using the standard tomcat 7 installed using apt-get and running

Re: why is Tomcat 7 invoking WebSocket protocol?

Caldarale, Charles R wrote: From: André Warnier [mailto:a...@ice-sa.com] Subject: Re: why is Tomcat 7 invoking WebSocket protocol? But maybe the solution consists simply in renaming that filter, so that it does not give the mistaken impression that the WebSocket protocol is necessarily being

Re: why is Tomcat 7 invoking WebSocket protocol?

Hi. Sorry to jump in, and to top-post, and maybe make an irreverential comment : But maybe the solution consists simply in renaming that filter, so that it does not give the mistaken impression that the WebSocket protocol is necessarily being used ? Kiran Badi wrote: Hi Mark, Sorry to jumpi

Re: Question on warning message from catalina log file

minh tran wrote: Hello , I tried to deploy myproj war file to tomcat production server and I got this message from the catalina log file saying that "WARNING: A myproj docBase inside the host appBase has been specified, and will be ignored".I don't know what it meant but one thing I know that

Re: [OT] Re: Filter behaviour

George Stanchev wrote: For SOAP, you *MUST* send back 500 or 400 with your SOAP fault back. [1] http://www.w3.org/TR/soap12-part2/#tabresstatereccodes Not to start a fight on SOAP on this Tomcat forum, but in the wording of the section referenced above, I definitely do not see that you *MUST*

Re: SSL configuration using PFX as keystore

Mark Thomas wrote: On 26/06/2015 19:37, Mark Thomas wrote: On 22/06/2015 11:56, Mark Thomas wrote: On 22/06/2015 09:39, Mark Thomas wrote: Prompting for authentication in response to an untrusted certificate is bizarre to say the least. Microsoft generously provide MSDN subscriptions for A

Re: Distinct servlets for different domains in one web application

Christian wrote: André, On 28.06.2015 23:11, André Warnier wrote: Christian wrote: Mark, On 28.06.2015 19:58, Mark Eggers wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Christian, On 6/28/2015 9:01 AM, Christian wrote: Hello all, is it somehow possible to create a web application

Re: Distinct servlets for different domains in one web application

Christian wrote: Mark, On 28.06.2015 19:58, Mark Eggers wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Christian, On 6/28/2015 9:01 AM, Christian wrote: Hello all, is it somehow possible to create a web application with multiple servlets that are registered to different domains for th

Re: [OT] Re: Filter behaviour

Leo Donahue wrote: On Sat, Jun 27, 2015 at 8:37 AM, Konstantin Kolinko wrote: public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException { boolean iAmNotAuthorized = true; if (iAmNotAuthorized)

Re: Filter behaviour

Leo Donahue wrote: public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException Assuming you have only a single Filter configured in web.xml Assuming you have logic in a doFilter that checks the value of a boolean. If the boolean

Re: [External] Re: CVE-2014-7810 Mitigation

be informed, isn't it ?) From: André Warnier [a...@ice-sa.com] Sent: Thursday, June 25, 2015 8:32 AM To: Tomcat Users List Subject: Re: [External] Re: CVE-2014-7810 Mitigation Lynch, Charles [USA] wrote: You are saying a malicious actor would need to be o

Re: [External] Re: CVE-2014-7810 Mitigation

clear in the mail archive article I quoted below, which is signed by one of the core Tomcat developers. From: André Warnier [a...@ice-sa.com] Sent: Thursday, June 25, 2015 7:55 AM To: Tomcat Users List Subject: [External] Re: CVE-2014-7810 Mitigation Lynch

Re: CVE-2014-7810 Mitigation

Lynch, Charles [USA] wrote: Seeking guidance on mitigation of CVE-2014-7810 on Apache Tomcat 6.0.37. Upgrading to 6.0.43 is not an option for my team at the moment, and we need to secure our install via other means until the patch ca

Re: Tomcat 6 : saerching for a bug fix between 6.0.24 and 6.0.44

Pascal Abaziou wrote: Le 25 juin 2015 à 00:23, Mark Eggers a écrit : -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 6/24/2015 2:40 PM, André Warnier wrote: Pascal Abaziou wrote: Hello, I’m searching for the version that fixes a bug I’ve on a tomcat 6.0.24 (on redhat). As I do not

Re: Tomcat 6 : saerching for a bug fix between 6.0.24 and 6.0.44

Pascal Abaziou wrote: Hello, I’m searching for the version that fixes a bug I’ve on a tomcat 6.0.24 (on redhat). As I do not reproduce it on my windows workstation with tomcat 6.0.44, I need elements to argue to upgrade to the sys admin. So the bug : with a REST resource service implemented w

Re: the session tracking of tomcat 6 and tomcat 7 behaves strangely

st accordingly below. chedana jayasinghe wrote: On Tue, Jun 23, 2015 at 2:46 PM, André Warnier wrote: chedana jayasinghe wrote: In my web application, in a jsp there is a javascript which sends request to a servlet every twenty seconds, so it kills my applications user idle time tracking by resetti

Re: persistance cache

Hi. The recommendation on this forum is to not use "top posting", but to keep the flow of conversation natural, and respond below the question to which your question refers. See http://tomcat.apache.org/lists.html, "Important", 6) Kaouthar Ghorbel wrote: 2015-06-23 1

Re: persistance cache

hello. Kaouthar Ghorbel wrote: hello, I have a method that returns a list of items when I change the data in this list in the database ,the return of the method does not take into account this change. here is the configuration of persistance.xml http://xmlns.jcp.org/xml/ns/persistence"; xml

Re: the session tracking of tomcat 6 and tomcat 7 behaves strangely

chedana jayasinghe wrote: In my web application, in a jsp there is a javascript which sends request to a servlet every twenty seconds, so it kills my applications user idle time tracking by resetting the lastAccessed time in session. the funny thing is lastAccessed time doesn't get updated in t

Re: We have a problem involving weird error messages in our Tomcat context, and catalina.out growing to enormous size.

James H. H. Lampert wrote: We have two weird things going on at the same customer installation. First, we have a situation in which catalina.out is inexplicibly growing to enormous size (4558505886 bytes) in a very short time (under a week), and growing by 4k in under a minute. And yet the cat

Re: Weird situation

ed this way, which is the reason I asked.) On Mon, Jun 22, 2015 at 11:00 AM, André Warnier wrote: Nabusg Tomcat wrote: Apache HTTPD version 2.4.10 Tomcat version apache-tomcat-7.0.61 Ubuntu 12.04.5 16G RAM Dual Core processor 64-bit Lately I am noticing that the request parameters are prese

Re: Weird situation

Nabusg Tomcat wrote: Apache HTTPD version 2.4.10 Tomcat version apache-tomcat-7.0.61 Ubuntu 12.04.5 16G RAM Dual Core processor 64-bit Lately I am noticing that the request parameters are present when the request hits Apache, but are dropped when request reaches tomcat. for e.g /secure/myprog.

Re: SSL configuration using PFX as keystore

Mark Thomas wrote: On 22/06/2015 09:39, Mark Thomas wrote: On 22/06/2015 00:25, Michael Salisbury wrote: When connecting from a Windows client (any Windows client) I get a 'network path not found' error 0x80070035. I know the path is valid as I can reach it via other means, and other Web

Re: SSL configuration using PFX as keystore

Mark Thomas wrote: On 22/06/2015 00:25, Michael Salisbury wrote: Thanks, I've done much searching - hence why I'm finally posting here. Windows WebDAV is actually quite reasonable Many people would disagree with that statement. It hasn't been updated since the early days of Windows 7 but this

Re: Apache Tomcat 8.0.22 server on different machines

André Warnier wrote: Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Prarthana, On 6/19/15 5:08 AM, Prarthana Agwania wrote: We have a requirement wherein we would like to know the urls of each of the tomcat instance running on different servers. The scenario is

Re: Apache Tomcat 8.0.22 server on different machines

Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Prarthana, On 6/19/15 5:08 AM, Prarthana Agwania wrote: We have a requirement wherein we would like to know the urls of each of the tomcat instance running on different servers. The scenario is somewhat like, 1. There

Re: SSL configuration using PFX as keystore

Daniel Mikusa wrote: On Fri, Jun 19, 2015 at 12:42 AM, Michael Salisbury wrote: Hi there, I’m trying to get the above working using Tomcat 8.0, previously working with 7.0. This is part of a WebDAV connector in Confluence. It seems I can connect from anything other than a Windows Mini Redi

Re: redirect to website not working

Ankur Gupta wrote: Thank you for your help... xx.xxx.xx.81 server through which iam using ie is not accessed to public website.This might be the problem. I want to ask a noob question that is there any method , as 81 server is not accessed to public websites but Linux server has access , so any

Re: redirect to website not working

Hi. I will try to give you some more tips below, but really you should try and work this out by yourself. From what little information is available below, I still believe that there is no problem with your application under Tomcat, but that the problem is that *the browser* cannot access that

Re: logging input and output HTTP message payload

by changing *org.apache.coyote.level=FINE *in log properties logs HTTP requests to the server, but does not log response. Highly appreciate if you guys can share your thoughts to achieve this. Ask the NSA for some tips ? Thanks, Milinda On Wed, Jun 17, 2015 at 5:56 PM, André Warnier wrote: Frederik N

Re: redirect to website not working

Ankur Gupta wrote: I had installed fiddler and deactivated ie stupid feature . how can I share the result of fiddler to you if the system dosent allow attachments? Well, on this list here we try to help, and we provide tips. But we do not do all the work for you, and you are expected to do som

Re: redirect to website not working

Ankur Gupta wrote: Log says this: xx.xxx.xx.81 - - [17/Jun/2015:12:51:47 -0400] "GET /examples/smstrial.jsp?mobileNumber=0123456789 HTTP/1.1" 302 - xx.xxx.xx.81 - - [17/Jun/2015:12:52:16 -0400] "GET /examples/smstrial.jsp?mobileNumber=0123456789 HTTP/1.1" 302 - xx.xxx.xx.81 - - [17/Jun/2015:12

Re: logging input and output HTTP message payload

Frederik Nosi wrote: It helps only with HTTP though, no HTTPS or at least not easily. While we are at this, are you trying to debug a SOAP / REST connection from your application running on Tomcat to another server or a connection coming from outside to your Tomcat? On 06/17/2015 11:16 AM,

Re: redirect to website not working

Hi. Ankur Gupta wrote: Log says this: xx.xxx.xx.81 - - [17/Jun/2015:12:51:47 -0400] "GET /examples/smstrial.jsp?mobileNumber=0123456789 HTTP/1.1" 302 - xx.xxx.xx.81 - - [17/Jun/2015:12:52:16 -0400] "GET /examples/smstrial.jsp?mobileNumber=0123456789 HTTP/1.1" 302 - xx.xxx.xx.81 - - [17/Jun/20

Re: redirect to website not working

Ankur Gupta wrote: xx.xx.xx.81 has classic asp page sms.asp having code: <%@ language=vbscript%> <% mobileNumber="0123456789" Response.redirect(" http://xx.xxx.xx.99:8080/examples/smstrial.jsp?mobileNumber="&; mobileNumber) %> Linux server(xx.xxx.xx.99:8080)

Re: redirect to website not working

Ankur Gupta wrote: Sorry if I was unable to make you understand . At my workplace we have one production server which have iis and classic asp pages are deployed. Ok, that I understand. Server-A = IIS + whatever Now as per the requirement (of which we do not have a copy, so we know nothing ab

Re: redirect to website not working

Ankur Gupta wrote: I have apache tomacat 7.0.61 and linux server 6.1 enterprise. There is a requirment of sending sms to the customers, but the request to send sms to the vendor is throught this sftp linux server. Now, when i redirect to the page it does not respond.But when i access the same web

Re: Brand new to Tomcat

Cohen, Laurence wrote: Hi, I find myself in a position where I am the only system administrator on a project that uses tomcat appserver and apache webeserver with a postgres backend. I am going to do some guesswork here, and you'll tell us if I'm wrong. Presumably, considering what you are sa

Apache/Tomcat mod_jk connector config issue ?

Hi. Can I too ? mod_jk log (debug) : ... [Tue Jun 16 13:26:21.928 2015] [16334:140682714515200] [debug] map_uri_to_worker_ext::jk_uri_worker_map.c (1134): Attempting to map URI '/hudson' from 5 maps [Tue Jun 16 13:26:21.928 2015] [16334:140682714515200] [debug] find_match::jk_uri_worker_map.c

Re: Tomcat not reading jsp code

Ankur Gupta wrote: I have apache tomcat 7.0 and Linux 6.1 server. I had written simple jsp code in a .jsp page which will redirect page and deployed in tomcat . When. Page is accessed then only html tags are shown and tomcat just skips jsp code written under <% %> tag. Plz help. Do you have an

Re: Fwd: Apache Tomcat 7 -Parameters lost

kartheek desineedi wrote: Yes we upgraded to Apache Tomcat 7.0.62 but still the issue is persisting. Failed request filter did not filter out any params indicating that the parameters are not malformed. We are sending all the requests in the SAME manner while most of them succeed,few of them fa

Re: Vb script not running

then, they would become cross-platform (for Linux and Windows). If there is a lot of vbscript used in the application, and you do not want to convert it to Java, then look at the solutions indicated above. On Mon, Jun 8, 2015 at 4:17 PM, André Warnier wrote: Ankur Gupta wrote: I have apach

Re: Vb script not running

Ankur Gupta wrote: I have apache tomcat 7.0 linux 6.1 server I want to deploy a .asp page which contains vb script. The problem is that vb script is not executing. Even response.write() is not working. Is there any alternative to run vb script? Assuming that this script should normally be ru

Re: Problem specifying cipher suites in tomcat6

Sean Dawson wrote: I had significant problems trying to uncover a change in tomcat7 that broke our app when upgrading from 42 to 57, for a couple weeks over Christmas holidays. Turns out it was something we shouldn't have been doing - you mean, apart from top-posting here ? but it was defin

Re: FormAuthenticator, Tomcat restart

Leonid Rozenblyum wrote: Hello, Christopher! I indeed meant this "The Tomcat restart between showing and submitting the login page is the source of the problem." Your explanation clarifies the core of the issue well! I'll dig into the Tomcat documentation deeper to find out how to inject that c

Re: can we pass OS username while connection Database from Tomcat

is is the answer to your question, or why it is not. Thanks, Vijay G On Thu, May 28, 2015 at 3:20 PM, André Warnier wrote: Vijay Kumar wrote: Hi Mark, Please find below my exact requirement. I have Oracle Database where my objects are installed and I have also a Linux instance where i i

Re: can we pass OS username while connection Database from Tomcat

Vijay Kumar wrote: Hi Mark, Please find below my exact requirement. I have Oracle Database where my objects are installed and I have also a Linux instance where i installed Tomcat. I am currently creating connection to the Oracle database from Tomcat using 'apps' user as this schema is having a

Re: can we pass OS username while connection Database from Tomcat

Vijay Kumar wrote: Hi Mark, Thanks for your update. I should have specify my requirement little more clear to you to understand what you are saying. I have Oracle Database where my objects are installed and I have also a Linux instance where i installed Tomcat. I am currently creating connecti

Re: can we pass OS username while connection Database from Tomcat

Vijay, do not "top post". As you can see below, it makes it difficult to follow the conversation. Vijay Kumar wrote: Hi Mark, Thanks for your update. I should have specify my requirement little more clear to you to understand what you are saying. I have Oracle Database where my objects are i

Re: can we pass OS username while connection Database from Tomcat

Mark Thomas wrote: On 28/05/2015 08:26, Vijay Kumar wrote: Hi, Is it possible to pass OS username when making connection to any Database from Tomcat context.xml? In theory this should be possible if you are using SPNEGO authentication. Testing this to figure out what is required to make it w

Re: native API - to make Apache/Tomcat faster

Christoph P.U. Kukulies wrote: Am 26.05.2015 um 15:36 schrieb Christopher Schultz: So you are using either mod_proxy_ajp or mod_proxy? mod_proxy Are you using TLS anywhere in the mix? (I should hope so, since you are deploying a CMS). Does httpd terminate TLS? Do you encrypt the connectio

Re: native API - to make Apache/Tomcat faster

David kerber wrote: On 5/26/2015 9:36 AM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- ... The rebooting the server is a cure. That seems to be a popular cure with Microsoft Windows servers ;) But unfortunately, it's only treating the symptoms, not curing the disease

Re: Fwd: Fwd:

Hello Yuval. As a kind of generic answer to your previous enquiries : Tomcat is a "Servlet Container", and the developers who write Tomcat strive to have it behave in accordance with the applicable "Java Servlet Specification". Refer to this page to find out which version of Tomcat matches whic

Re: how to block the duplicated requests?

Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 To whom it may concern, On 5/19/15 8:09 AM, javalishixml wrote: Just understood you. Really appreciate for your feedback. How do we judge it's a robot? item1: we find the request IP is always the same one. item2: our

Re: Tomcat 7 JNDI Realm credential password update availability

John Beaulaurier -X (jbeaulau - ADVANCED NETWORK INFORMATION INC at Cisco) wrote: Hello, We have a Tomcat 7 server running on Linux that must use LDAP over SSL to connect to an AD server for user authentication. This configuration we have working. The issue is the credentials used to connect t

Re: Tomcat Vulnerabilities for 6.x and 7.x version

Mittal, Paran (Infosys) wrote: Hi Team, We need to understand the fix for tomcat Vulnerabilities for 6.0.29 and 7.0 version. We came across a CVE Reference: CVE-2014-0230 which says "When a response for a request with a request body is returned to the user agent before the request body is fu

Re: Issues with Tomcat 7.0.57 not loading ActionServlets

Raj wrote: I upgraded my application from tomcat 5.5.15, JDK 1.5, Struts 1.1 on Debian 2.6.32 to tomcat 7.0.57, JDK 1.6, struts 1.1 on ubuntu14.04 and Action Servlets are not loading. I am thinking of this is something to do with version conflict. Please let me know what I am missing. Below is t

Re: [SECURITY] CVE-2014-0230: Apache Tomcat DoS

Jose María Zaragoza wrote: 2015-05-06 0:53 GMT+02:00 Mark Thomas : -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 CVE-2014-0230 Denial of Service Severity: Low Vendor: The Apache Software Foundation Versions Affected: - - Apache Tomcat 8.0.0-RC1 to 8.0.8 - - Apache Tomcat 7.0.0 to 7.0.54 -

Re: Officially released Apache tomcat version with CVE-2014-0230

Raghavendra Nilekani wrote: Hi I have an application where I currently use 6.0.20 version of Apache tomcat bundle from spring source. Now because of security vulnerabilities I have to migrate to newer latest version of Apache tomcat. I saw the latest version on Apace tomcat site is Apache Tomcat

Re: High cpu on Tomcat 8

Caldarale, Charles R wrote: From: Christopher Schultz [mailto:ch...@christopherschultz.net] Subject: Re: High cpu on Tomcat 8 Car analogy: it's the distributor cap of all the bytes flying around the container. You're dating yourself :-) Haven't seen a distributor on a car in many years. H

Re: Finding the Apache httpd IP address when AJP is used

Paul Klinkenberg wrote: Hi André, Paul Klinkenberg wrote: Hi André, Paul Klinkenberg wrote: Hi Christopher, Thanks for taking the time to respond; again much appreciated. Your point, and André's, is understood. Security should not be done based on incoming IP address. With this current proj

Re: Finding the Apache httpd IP address when AJP is used

Paul Klinkenberg wrote: Hi André, Paul Klinkenberg wrote: Hi Christopher, Thanks for taking the time to respond; again much appreciated. Your point, and André's, is understood. Security should not be done based on incoming IP address. With this current project, we off course want to deliver s

Re: [OT] Finding the Apache httpd IP address when AJP is used

Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Paul, On 4/30/15 3:24 AM, Paul Klinkenberg wrote: I never knew the remote_addr could not be trusted, but I believe you at once when you say so. I thought it was taken from the actual socket connection. With the except

Re: Finding the Apache httpd IP address when AJP is used

Paul Klinkenberg wrote: Hi Christopher, Thanks for taking the time to respond; again much appreciated. Your point, and André's, is understood. Security should not be done based on incoming IP address. With this current project, we off course want to deliver software which is secure by default

Re: Finding the Apache httpd IP address when AJP is used

As a P.S. : Maybe you should also look at this, to see if it would fit your needs : http://tomcat.apache.org/tomcat-8.0-doc/proxy-howto.html André Warnier wrote: Paul Klinkenberg wrote: Hi Tomcat users! I have been working on an update for a Tomcat valve called mod_cfml. The project aims to

Re: Finding the Apache httpd IP address when AJP is used

Paul Klinkenberg wrote: Hi Tomcat users! I have been working on an update for a Tomcat valve called mod_cfml. The project aims to provide automatic web context creation in Tomcat, when coming from a frontend webserver. The live code base can be found at https://github.com/utdream/mod_cfml

Re: how to convert https to http by using mod_jk

chenk...@126.com wrote: > > > > > > hi：? ??? ? I'm using apache + tomcat to build my website。The tomcat ?provide > http service and apache provide both http/https。I tried two method to > implements： > by mod_proxy:ProxyPass "/" "balancer://mycluster/" stickysession=JSESSIONID > nofailover=O

Re: [OT] Sending HTTP Trailers from a client (not servlet)

Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, Bump. Anyone? No, but I tried. But everything I found seems to say that such trailers are really rarely used, and that's probably why you are not getting any echo. I believe that initially you mentioned that y

Re: File descriptors peaks with latest stable build of Tomcat 7

Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Neill, On 4/22/15 9:12 AM, Neill Lima wrote: If I am not wrong, if the application in question is monitored in VisualVM through JMX (https://visualvm.java.net/) you could trigger a Force GC from its monitoring console.

Re: File descriptors peaks with latest stable build of Tomcat 7

Rainer Jung wrote: Am 22.04.2015 um 11:58 schrieb Thomas Boniface: What concerns me the most is the CLOSE_WAIT on tomcat side because when an fd peak appears the web application appears to be stuck. It feels like all its connections are consumed and none can be established from nginx anymore.

Re: File descriptors peaks with latest stable build of Tomcat 7

Rainer Jung wrote: Am 22.04.2015 um 00:08 schrieb André Warnier: ... The OP has a complex setup, where we are not even sure that the various connections in various states are even related directly to Tomcat or not. Graphically, we have this : client <-- TCP --> nginx <-- TCP -

Re: File descriptors peaks with latest stable build of Tomcat 7

Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 André, On 4/21/15 10:56 AM, André Warnier wrote: Thomas Boniface wrote: The file descriptor peak show up in our monitoring application. We have some charts showing the number of file descriptors owned by the tomcat

Re: File descriptors peaks with latest stable build of Tomcat 7

Thomas Boniface wrote: The file descriptor peak show up in our monitoring application. We have some charts showing the number of file descriptors owned by the tomcat process (ls /proc/$(pgrep -u tomcat7)/fd/ | wc -l). The calatalina.out log shows errors, the most frequent being a java.io.IOExcep

Re: File descriptors peaks with latest stable build of Tomcat 7

Thomas Boniface wrote: I did some captures during a peak this morning, I have some lsof and netstat data. It seems to me that most file descriptors used by tomcat are some http connections: thomas@localhost  ~/ads3/tbo11h12  cat lsof| wc -l 17772 thomas@localhost  ~/ads3/tbo11h12  cat lso

Re: Fedora 20 Yum and tomcat setup

André Warnier wrote: Salam Y. Elias wrote: Thanks Chuck, recommandation was great. I downloaded 8.0.21, created three directories, each one with its own Tomcat, chnaged some ports in server.xml and all 3 applications are running like a charm. However, I am trying to replace the Root with my

Re: Fedora 20 Yum and tomcat setup

Salam Y. Elias wrote: Thanks Chuck, recommandation was great. I downloaded 8.0.21, created three directories, each one with its own Tomcat, chnaged some ports in server.xml and all 3 applications are running like a charm. However, I am trying to replace the Root with my application. I delete th

Re: Rendering JSP files through Apache

Leggio, Andrew wrote: I have the following being used in my conf file: ProxyPass / ajp://localhost:8009/ Does this actually direct jsp files to use Tomcat? That is a funny way of putting it. What the above does - if everything else is installed and configured correctly - is proxying *al

Re: Configure Tomcat 7 using Apache 2.4.6

Leggio, Andrew wrote: I am trying to get tomcat to work under Apache. I have verified that tomcat is listening on port 8009. I tried doing the following: Apache Web Server Settings Add the following to the /etc/httpd/conf.d/proxy_ajp.conf file or if that file does not exist you can add it to

  1   2   3   4   5   6   7   8   9   10   >