Hi Paul,
Paul Beattie schrieb:
> Hi,
>
> I have a series of relatively high transaction volume tomcat servers
> which are sporadically hitting thread issues. We run with with tomcat
> 4.1.27 at the current time. The behaviour we notice is after several
> days of around one hundred thousand tran
Hi Anna,
Anna Nhan schrieb:
> Hi,
>
> Is there a way to change the Connector element in server.xml without
> manually editing the file? Could we, for example, change the
> CATALINA_OPTS line using a script or C code to choose whether to use
> HTTP or HTTPS, the file path to the keystore and key
Hi Julian,
Julian Dunn schrieb:
> Hi,
>
> I have some applications running under a Tomcat installation set up
> in this way:
>
> [load balancer on port 80] ---> [Apache server on port 5001] -->
> [Tomcat server on port 7001]
>
> One of the Tomcat applications sends a redirect to Apache because
Hi Julian,
Julian Dunn schrieb:
>> How do you connect Apache to Tomcat? If you are using mod_jk, the
>> module gets the port it sends to Tomcat via ap_get_server_port(),
>> which in turn depends on UseCanonicalName. If this is set to On,
>> the port is also determined from the port in ServerName.
It looks like you are using mod_jk2. JK2 has been deprecated long ago.
It will be hard to get any support for it now. Please switch to JK,
which is still actively developed and nearly all features of JK2 have
been backported.
Regards,
Rainer
Kandala Satish schrieb:
> Hi,
>
>
>
> I am receivi
Are you using the tcnative.dll?
If so, do you know, which version?
There was a bug in tcnative that resulted in the same symptom.
You might want to remove tcnative.dll temporarily to check, if this
fixes the problem, and then might want to check with a recent tcnative.
Regards,
Rainer
Smith, Mic
Like Chuck said:
you can freely choose names and values you like. Choose your names
carefully to prevent collisions with properties used by other
components, e.g. you can start the name with your internet domain name
or similar.
Example
Property -Dorg.myorg.myapp.node1.http.port=8001
in server.
Hi Rainer,
I can reproduce on Solaris.
The first problem should be fixed by:
--- configure.orig 2007-12-21 15:06:53.0 +0100
+++ configure 2008-01-04 14:16:13.0 +0100
@@ -2490,7 +2490,7 @@
{ (exit 1); exit 1; }; }
fi
sapr_version="`echo $sapr_pversion|sed -e 's/\(
Did you see my second post?
Rainer Traut schrieb:
> Hi Rainer :)
>
> Rainer Jung schrieb:
>> Hi Rainer,
>>
>> I can reproduce on Solaris.
>>
>> The first problem should be fixed by:
>>
>> --- configure.orig 2007-12-21 15:06:53.0 +01
Replace --Wl, by -Wl, in configure and build/tcnative.m4.
--- configure.orig 2007-12-21 15:06:53.0 +0100
+++ configure 2008-01-04 14:41:51.0 +0100
@@ -3936,7 +3936,7 @@
TCN_OPENSSL_LIBS="-L$use_openssl/lib -Wl,+b: -lssl
-lcrypto"
;;
Hi Joe,
are you able to reproduce the behaviour with few, maybe only a single
request? If so: you can increase JkLogLevel to "debug" (not recommended
for high load production size, because it produces a lot of log lines),
reproduce the problem and make the log file available.
What I didn't really
Hi Jim,
APR and OpenSSL are maintained by other projects (apr.apache.org resp.
www.openssl.org).
The tcnative source can be obtained from
http://www.apache.org/dist/tomcat/tomcat-connectors/native/
The download contain a dsp file for Visual Studio (supposing you are
talking about WIN platform b
This patch was supposed to allow chunked encoding, but I am not sure if
> I applied it right. Is there a registry setting that I need to change
> to allow chunked encoding with this patch, or does it do it
> automatically?
>
> Thanks-
> Joe
>
> -Original Message-
,
> Jim
>
>
> -Original Message-
> From: Rainer Jung [mailto:[EMAIL PROTECTED]
> Sent: Friday, January 04, 2008 4:34 PM
> To: Tomcat Users List
> Subject: Re: Apache Portable Runtime and Tomcat?
>
> Hi Jim,
>
> APR and OpenSSL are maintained by other pr
There's no Content-Length coming from the backend. See below. So: are
you sure the backend sends it, if you send the same request without a
web server in front of Tomcat? I would expect, that it's also missing,
if you contact Tomcat directly via httpd. In this case it's an error in
the webapp.
Woy
Hi Scott,
Scott McClanahan schrieb:
> I'm getting 404 errors when I try to access the jkmanager page. There
> is only one backend tomcat instance and no load balancing configuration
> at all. I was just wanting to see the UI and if it had changed at all
> with the upgrade. Do you now get 404's
ied it right. Is there a registry setting that I need to change to
allow chunked encoding with this patch, or does it do it automatically?
Thanks-
Joe
-Original Message-
From: Rainer Jung [mailto:[EMAIL PROTECTED]
Sent: Friday, January 04, 2008 2:06 PM
To: Tomcat Users List
Subject: Re:
In Joes case CICS seems to get used as an HTTP client, not an HTTP server.
Nevertheless the server page you found includes a link to
http://publib.boulder.ibm.com/infocenter/cicsts/v3r1/topic/com.ibm.cics.ts31.doc/dfhtl/topics/dfhtl_cwschunking.htm
that contains the following information:
Hi Gregory,
the descriptions below work (at least) for TC 5.0/5.5/6.0.
Gregory Gerard schrieb:
I've got an F5 load balancer running version 9.3 of the software.
I've got several Tomcat installations behind it.
The F5 does all SSL and clear traffic as a reverse proxy, rewriting
headers as need
Sorry didn't read your post carefully enough. The access log thing is
OK, but about the redirect:
I've got an F5 load balancer running version 9.3 of the software.
I've got several Tomcat installations behind it.
The F5 does all SSL and clear traffic as a reverse proxy, rewriting
headers as n
rsponds with the AJP connector, and this connector fakes those
getRemote* from the info retrieved by mod_jk.
greg
Rainer Jung wrote:
Hi Gregory,
the descriptions below work (at least) for TC 5.0/5.5/6.0.
Gregory Gerard schrieb:
I've got an F5 load balancer running version 9.3 of the so
Hi Mohan,
Mohan2005 schrieb:
Dear All;
If I am not wrong, the "Busyness" algorithm routes requests to workers by
checking their "Health"
What criteria constitutes as a "nodes" "Health"
and if so,
How is it determined (using the native JVM or else )
All balancing methods of mod_jk share comm
mod_jk ? ),
Only checks the Network Latency (Network Response ) through Cping and Cpong
methods as a nodes health as described in
http://tomcat.apache.org/connectors-doc/generic_howto/timeouts.html
Correct.
Rainer Jung-3 wrote:
Hi Mohan,
Mohan2005 schrieb:
Dear All;
If I am not wrong, the
Julio Cesar Leiva schrieb:
Hi all
We have this setup
1 web server apache 2.2.0
I hope it's not 2.2.0 but something more recent (e.g. 2.2.4 or 2.2.6)
2 tomcat servers tomcat 5.5.20
mod_jk 1.2.25
This is our workers.properties
Remove the next line, it's useless.
workers.java_home=/usr/l
Hi Robert, I reopened the bug. See comments there.
Robert Starzer schrieb:
hi,
could somebody please help me with this issue
http://issues.apache.org/bugzilla/show_bug.cgi?id=43929
related issue is
(http://issues.apache.org/bugzilla/show_bug.cgi?id=41949)
i'm -not- using an old tomcat version
Mohan2005 schrieb:
Hello!
The documentation says the following on the Busyness Method...
QUOTE
If set to B[usyness] the balancer will pick the worker with the lowest
current load, based on how many requests the worker is currently serving.
This number is divided by the workers lbfactor, and the
Hi,
Nahor wrote:
Hi,
Is there a way to specify at runtime what worker the load-balancer
should use first?
For some request, we can't use cookies so we pass the session id via the
URL or via the query string. We then force the worker using RewriteRule
and the JK_WORKER_NAME env var.
But the
Hi Edwin,
Edwin Walsh wrote:
Hi,
First of all I would like to mention that this is my first post on this
list, I hope that this question is posted in the right place. I have
tried finding a solution for my problem, but it either doesn't exist, or
my limited brain can't manage to figure out h
Hi Jordi,
Jordi Prats wrote:
Hi
I'm trying to balance connections using mod_jk, but I'm getting this error:
[Wed Jan 09 11:12:55 2008] [31970:3086935744] [info]
ajp_service::jk_ajp_common.c (2186): (loadbalancer) sending request to
tomcat failed (recoverable), because of error during request
at.apache.org/connectors-doc/reference/apache.html
Have fun!
Rainer
Rainer Jung wrote:
Hi Edwin,
Edwin Walsh wrote:
Hi,
First of all I would like to mention that this is my first post on
this list, I hope that this question is posted in the right place. I
have tried finding a solution f
ransferred to the
backend for the request plus receuved from the backend with the response.
methods please?
Thanks and Best Regards
Mohan
Regards,
Rainer
Rainer Jung-3 wrote:
Mohan2005 schrieb:
Hello!
The documentation says the following on the Busyness Method...
QUOTE
If set to B[usynes
pmarchwiak wrote:
Isapi_redirect.dll is not writing to its log file. I have Tomcat 5.5
installed on a Windows Server 2003 box and I am using the ISAPI redirector
to redirect some requests from IIS. I am using the isapi_redirect.properties
file for my configuration (as opposed to the registry sett
Shiby Maria John wrote:
Hi,
This is a bit of documentation from the Load balancing page of the
Apache site.
sticky_session specifies whether requests with SESSION
ID's should be routed back to
Berglas, Anthony wrote:
Hello,
I am trying to set up 0racle connection pooling. Some of the
parameters are reflected normally, but some are specified via a property
lists. How do I set the property list properties using Tomcat/JNDI? I
can set up the basic DataSource, but I cannot set the max
Hi Dominik,
Dominik Pospisil wrote:
Hello,
I am having following problem with following failover test scenario.
Cluster setup:
- 1 apache load balancer
- 2 nodes with equal LB factor
- sticky session turned on
- Apache/2.0.52, mod_jk/1.2.26
Test scenario:
1. start 1st node
2. start load driver
Hi Dominik,
Eventually, after killing 1st node, and after returning couple of "503
Service Temporarily Unavailable" exceptions, mod_jk finally recheck 2nd
node status, reroute requests to 2nd node and resumes correct operation.
Still, I it is not clear to me, why I am getting 503 exceptions.
Hi Nahor,
Nahor schrieb:
Hi,
I want my webapp to use "nice" URL for a user's homepage (e.g.
"http://server/user";).
Because of that, I need to have an empty path in the session cookie. So
far, I've been using "emptySessionPath".
However, "emptySessionPath" uses the session id from a cookie
Hi Shiby,
Shiby Maria John schrieb:
Hi,
This is my worker.properties for Apache server for clustering 3
instances of Tomcat in my machine.
# The advanced router LB worker
worker.list=router
# Define a worker using ajp13
worker.worker1.port=8009
worker.worker1.host=localhost
worker.worker1.typ
Hi Alain,
[EMAIL PROTECTED] wrote:
Environment Description :
Windows 2000 SP4 ; IE 6.0
Apache Tomcat 5.5
Apache Ant 1.7.0
Object : my purpose is to use the ant task "list" defines in Tomcat distrib
(Tomcat distrib gives a general purpose build script with lot of features,
including a target "li
Hi Edwin,
Edwin Walsh wrote:
Hi,
I have the most peculiar problem (at least in my point of view) with
forwarding with jkmount. JkMount has always worked on my server, but
suddenly, without changing anything but the mod_jk settings (adding a
new jkmount and some rewriterules), JkMount suddenl
Hallo Günther,
Günther wrote:
Hi!
I got a problem running jk 1.2.26 on httpd 2.2.3 and I'm not sure if
this a setup problem or a bug in jk.
When compiling jk it says:
---
mod_jk.c: In function âinit_ws_serviceâ:
mod_jk.c:671: warning: implicit declaration of function
âap_get_server_descript
Hi Günther,
Günther wrote:
Hallo Rainer,
thank you for your fast reply. I guess it's an error in the opensuse
10.2 apache2-devel-2.2.3-22 rpm. MODULE_MAGIC_NUMBER_MINOR is "5" in
/usr/include/apache2-prefork/ap_mmn.h and
/usr/include/apache2-worker/ap_mmn.h´. The change-logs included in
the f
How do you connect httpd to Tomcat? Via mod_jk, mod_proxy_http or
mod_proxy_ajp?
Which MPM do you use in httpd, prefork (single-threaded) or worker
(multi-threaded) or something else?
To give you hints, it would be nice to see your connector configuration,
and the configuration of your httpd
Dominik Pospisil wrote:
Indeed. It would be OK to return 503, for requests, that already have
been received by the first node, but not returned yet. New requests
That's the case. All errors I am getting are from requests which were allready
in processing by failing node. Why it is OK to return
... adding to previous post:
It also does not retry/fail over, in the following (more or less obvious
cases):
- there was a problem with the client (browser) connection
- we already started to send back parts of the response to the client,
typically the headers (depending on recovery_options;
ep the influence of load local in time, the
load values of all workers are divided by 2 approximately once a minute.
This is true for all methods, apart from "B", where the load value does
not accumulate, so there's no need to decay.
Regards,
Shiby
Regards,
Rainer
Mladen Turk wrote:
Rainer Jung wrote:
If there is no such worker, or the worker is nor usable, the request
is handled like it wouldn't have a route in the session id, or no
session at all.
Also if there is directive sticky_session_force=true
and the worker is not usable then the 5
Christopher Schultz schrieb:
| When there is an OutOfMemory, it's impossible to make a ThreadDump. The
| reason is that, since you lack memory, it can be seen as useless to try
| allocating StackTrace object and stuff it in a new Error(). Moreover,
| from my experience, when you are out of memor
http://www.nabble.com/mod_jk-broken-pipe-ts6882827.html
Eqbal schrieb:
I am seeing a lot of warning messages in catalina.out
with the stack trace show below.
We are using tomcat 5.5.16 with apache 2 and ajp13 to
connect. Can someone shed some light on this?
Thanks.
Hi Chris,
Chris Baty schrieb:
Hi Guys, I'm running Tomcat 5.5 and Apache 2, with Tomcat connector
(Kind of a newbie). I got my Tomcat working fine at
/usr/share/tomcat5.5-webapps/ROOT/cwrecyclers. When I point the
browser (locally) at localhost:8180/cwrecyclers/ I see exactly what I
expect.
Hi Thomas,
Thomas Glanzmann schrieb:
Hello,
I have mod_jk version 1:1.2.18-3etch1 (which comes with Debian Etch) as
loadbalancer in front of four tomcats version 5.5.20-2etch2 that do not
duplicate sessions because of their size (100Mbyte per session; 120 -
500 users). My workers.property looks
Martin Gainty schrieb:
I dont believe you can force JAVA VM to run in 'server-mode' configuration
on any windows box
perhaps if you try to use -server option configured in the %JAVA_OPTS%
with a AMD64 bit processor?
http://java.sun.com/j2se/1.5.0/docs/guide/vm/server-class.html
C:\Programme\J
Hi Holger,
Holger Burde wrote:
Hi;
I did a Netbeans 6 JSF Project recently which was developed and tested
with Tomcat6. The final installation was set up with Tomcat 6.0.14
behind IIS6 (Connectors / isapi_rediretor (latest version)).
Running some tests we discovered that allmost all Javascr
[EMAIL PROTECTED] wrote:
Hello,
thank you Chuck, Ben and all at this list for your responses
I think I'll try the apache "secret" feature but i don't know which
attribute it matches under tomcat ajp connector conf ?
Any idea ?
At least
http://tomcat.apache.org/connectors-doc/reference/worker
?
It is, even for ajp13. To document the problem please open an issue in
bugzilla and give some information, why you can't simply avoid those
directory names.
hb
Regards,
Rainer
-Ursprüngliche Nachricht- Von: Rainer Jung
[mailto:[EMAIL PROTECTED] Gesendet: Montag, 21. Januar 20
index.jsp
No luck yet with the JSP. I'm trying to get http://cwrecyclers.hopto.org/ up and running.
- Original Message
From: Rainer Jung <[EMAIL PROTECTED]>
To: Tomcat Users List
Sent: Sunday, January 20, 2008 10:06:13 AM
Subject: Re: Only s
You need to get some Java thread dumps of the JBoss during the time the
problem is visible. The reason for the hanging backend most likely can
be found by investigating the thread dumps.
That's kind of an FAQ answer, you can google for Java thread dump.
Regards,
Rainer
Steve Gaunt wrote:
Christopher Schultz wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Rainer,
Rainer Jung wrote:
| If you think that your requests do net get forwarded to Tomcat, set
| JkLogLevel to debug and do a single request, that should go to Tomcat.
Or, just check to see that your worker is
Christopher Schultz wrote:
Rainer Jung wrote:
| I think I saw [worker.list] further down, before he dfined the
properties of that
| worker. He split the list into multiple worker.list lines, which is
| allowed and might be nice for keeping the files modular.
Oops. Color me stupid and obnoxious
pen::jk_shm.c (252):
Shared memory is already open
[Mon Jan 21 16:46:18 2008] [6400:21952] [debug] jk_child_init::mod_jk.c (2311):
Attached shm:/var/log/apache2/jk-runtime-status
[Mon Jan 21 16:46:18 2008] [6400:21952] [debug] jk_child_init::mod_jk.c (2321):
Initialized mod_jk/1.2.18
Thanks.
Hi Adrian,
[EMAIL PROTECTED] schrieb:
Should it be normal behavior to return the response: HTTP/1.x 400 Invalid
URI: noSlash
To the request: GET/bar/foo%3A%2F%2Fxx.org%2Fencs%3Fenc%3D100%23101
Note: Unencoded it is: GET /bar/foo://xx.org/encs?enc=101#101
Tomcat 6.0.14 jdk 1.5
Is this a def
Darren Kukulka wrote:
Hi All,
Running Tomcat 6.0.13 on Windows Server 2003 x64 with an Apache Web
Server 2.2.4 (on a separate server) with mod_jk 1.2.20
We are currently at 2.2.8/1.2.26 ...
Regularly getting these in the log - same warning every time...
23-Jan-2008 08:24:56 org.apache.jk.c
Tim Funk wrote:
Have you tried .. http://sourceforge.net/projects/j2ep
I do not know of a jk implemention done in java.
JMeter includes an AJP13 client. I would expect that to be overkill though.
I also do not know of any fully featured Java based reverse proxy
servlet. In your case, you mig
Christian Schausberger wrote:
Hi,
I use apache-2.2.4 together with mod_jk-1.2.25 to load balance a bunch
of tomcat-5.5.25 servers. All servers are running on Solaris 10 and are
implemented as zones.
The setup works really good during normal operation. But when a server
dies for some reason, and
Christian Schausberger wrote:
Rainer Jung wrote:
I would start adding a prepost_timeout. See:
http://tomcat.apache.org/connectors-doc/generic_howto/timeouts.html
and
http://tomcat.apache.org/connectors-doc/reference/workers.html
Maybe I misunderstood this directive. connect_timeout only
Hi,
1) How many fds does the process have, so is the question "why can't we
use all those 4096 fds configured", or is it "Where do those 4096
fdsused by my process come from"?
2) CLOSE_WAIT means the remote side closed the connection and the local
side didn't yet close it. What's you remote
ct to
re-compiling mod_jk with MAX_SECS_TO_LINGER set lower, say, 10 seconds
or 5? Or even lower?
Thanks again for the help!
Chris
-Original Message-
From: Rainer Jung [mailto:[EMAIL PROTECTED]
Sent: Friday, January 25, 2008 7:03 AM
To: Tomcat Users List
Subject: Re: Need *faster* con
Tobias Schulz-Hess wrote:
Hi Rainer,
Rainer Jung schrieb:
Hi,
1) How many fds does the process have, so is the question "why can't
we use all those 4096 fds configured", or is it "Where do those 4096
fdsused by my process come from"?
The latter. We can actually see
Hi Chris,
interesting use case :)
mod_jk closes the backend connection as soon as the reply_timeout fires,
or there is something to write back to the client and mod_jk detects,
that the connection to the client can not be used any longer (browser
stop, retry or click on another link).
If th
n hacks to our
production systems so if you could give this a once-over (and perhaps an
updated patch file, if you have time) that would be fantastic.
Thanks again for the help!
Chris
-Original Message-
From: Rainer Jung [mailto:[EMAIL PROTECTED]
Sent: Friday, January 25, 2008 4:37 PM
What are the contents of your mod_jk.la file?
What is the output of doing make, especially the parts close to the end,
like shortly before and all after the line
"Making all in apache-2.0"
After all it looks, like you are doing a static apache build. Note, that
neither '--enable-module=most'
Are you actually using -Xrs? At least it's not contained in the part of
the commandline you posted, which is unfortunately truncated.
The result of kill -QUIT goes to STDOUT of the jvm. So you need to find
out, where your STDOUT goes to. The standard tomcat start scripts
(startup.sh or catalin
Give us a look at your hotspot error files.
Do they look very close to each other, or do they show very different
stacks as the reason for the crash?
If double free is really the reason it won't be caused by a pure Java
Tomcat, instead it could be native libs integrated into your webapps by
Could you please post your configuration and maybe some more snippets
from the debug log? What is your platform?
Under *nix systems Apache 1.3 is single threaded and uses a single
backend connection tied to a process, so this situation should never happen.
How easy can you reproduce this?
Re
As I understand you, you want to let Tomcat handle the cgi for you. But
you also configured Apache to locally handle *.cgi as a CGI itself. So
you need to resolve the conflict between handling everything that starts
with /Context/ by mod_jk and everything that ends in .cgi by mod_cgi.
/Context/
No, sorry I misread you mail telling us that you upgraded from 1.5.0_09.
Java 6 should be OK, there is a 1.6.0_01 out for a couple of weeks now.
Still interested in your hotspot error files next week.
Regards,
Rainer
Jacob Bunk Nielsen schrieb:
> Rainer Jung <[EMAIL PROTECTED]&g
Hi Rob,
at the moment there is no known problem with the balancing. I expect you
checked your mod_jk log file for errors.
What's your platform and what's your web server?
Since your request counts in the status display are still relatively
small, it looks like you get the unequal distribution pr
seems to be not bug fix in the 1.6.0_01 release notes
related to those bugs.
Sorry, but there seems to be nothing, we can do from the Tomcat side :(
Regards,
Rainer
Jacob Bunk Nielsen wrote:
Rainer Jung <[EMAIL PROTECTED]> writes:
Give us a look at your hotspot error files.
I have
http://marc.info/?l=tomcat-user&m=118117027608411&w=2
Unrelated, but: you should consider upgrading mod_jk. 1.2.20 is very
outdated and misses a lot of new features. At the moment we are at 1.2.23...
[EMAIL PROTECTED] wrote:
Hi,
I have a webapp running in Tomcat which authenticates the user
You configured 404 as an http status code, which results in taking
workers offline. I think usually this is not a good idea. Think about
users sending you URLs like
http://youserver/trash
and thus taking your backends offline :(
Even without bad things in mind, users might use old bookmarks a
I committed a patch for mod_jk using 64 Bit unsigned ints for content
length. This patch still needs testing. I only verified, that it does
not break normal operation (at least not on Solaris with Apache 2.2).
I don't know, if anyone of those who were working on this bug until now
(Bill? Mark?
No, Filip is right:
1) Each Tomcat needs to have a unique jvmRoute
2) the name of the member workers of the lb need to be identical to the
jvmRoute of the Tomcat instances they point to.
Regards,
Rainer
McCormack, Chris wrote:
Should that not be :
jvmRoute="balancer"
C.
-Original Mes
Hi,
if you are only interested in communication between mod_jk and Tomcat,
set JkLogLevel to debug. It will dump alle headers and data packets. The
data packets are truncated at 1024 bytes in the debug log. In case you
need more, set JkLogLevel to trace.
Try to do this without much load on t
question should decrease...
Mladen Turk wrote:
Rainer Jung wrote:
No, Filip is right:
1) Each Tomcat needs to have a unique jvmRoute
One side note:
jvmRoute does not need to reflect the worker name
in domain clustering model.
jvmRoute can be "group1" on multiple nodes.
and work
Yes, this will work. The only bad thing will be, that the requests
belonging to one session will be logged partially on both of the IIS
instances, so if you try to debug a problem, you always need to look at
both IIS servers.
Stickyness works like this:
- you set a unique jvmRoute in the engi
, or does it base it on the number of
requests that that particular instance of mod_jk has forwarded to
Tomcat? If
it's the latter, is this likely to cause problems?
Thanks
Ian
-Original Message-
From: Rainer Jung [mailto:[EMAIL PROTECTED]
Sent: 21 June 2007 15:50
To: Tomcat
I never used it. If you have a test system, you could switch you switch
the log level of the isapi plugin to debug and check, if your plugin log
file shows messages containing
Client Certificate encoding
Then you would at least find out, if the plugin detected a client
certificate.
Regards,
OK, then you should be able to retrieve them on the tomcat side with
request.getAttribute().
[EMAIL PROTECTED] wrote:
OK
I enabled JK1 debug level logging and can see that IIS6 *is* relaying the
client authenticated SSL details in the AJP stream.
I see attributes called:
CERT_ISSUER
I had a similar problem with mod_prox and mod_headers for Apache httpd
2.2 today, and I would expect, that changing the headers with mod_header
does not work.
I see no easy way (but maybe others out there). You could hack
ajp_unmarshal_response() in common/jk_ajp_common.c.
Alternative: experi
Tomcat 5.5.24 is expected to be released in a few days.
The vulnerability you cited should be rated low impact for most people.
There is a similar open issue, both are shortly described on the page
http://tomcat.apache.org/security-5.html
Both issues only affect the example webapps (which you
53111 Bonn www.kippdata.de
HRB 8018 Amtsgericht Bonn / USt.-IdNr. DE 196 457 417
Geschäftsführer: Dr. Thomas Höfer, Rainer Jung, Sven Maurmann
===
kippdata
informationstechnologie GmbH Tel: +49 228 98549 -0
Bornheimer Str. 33aFax: +49 228 98549 -
although the CVE-2007-0450 might be important, it has been
implemented in wrong way?
Thanks,
Sebastian
On 24 Jun 2007, at 16:09, Rainer Jung wrote:
Look for "CVE-2007-0450" in
http://tomcat.apache.org/security-6.html
Regards,
Rainer
Sebastian Kruk wrote:
Hello,
just a quick question.
If you really really want to it:
Read about exclusion rules in
http://tomcat.apache.org/connectors-doc/reference/uriworkermap.html
but think twice, if this is robust, i.e. if the web server admin will
have a chance to keep this up-to-date.
Regards,
Rainer
tomcat user wrote:
Why would you
Something is wrong with your configuration or box setup.
request.getRemoteAddr() works for me, it shows the Apache server address
used by the request.
Regards,
Rainer
Nino Ulsamer wrote:
Hello,
I have a problem with finding out the IP address of requests in Tomcat.
I'm using the HttpServlet
e the address of the user who originally started the request!
Nino
-Ursprüngliche Nachricht-----
Von: Rainer Jung [mailto:[EMAIL PROTECTED]
Gesendet: Montag, 2. Juli 2007 12:22
An: Tomcat Users List
Betreff: Re: Tomcat - Apache: IP replacement
Something is wrong with your config
Johnny Kewl wrote:
Can you believe that, IE only allows 2 files downloaded at the same
time, and then you have to dig into the registry get OPERA ;)
The 2 connections are a recommendation for well-behaved http clients
coming from the http spec in order to keep server load related to one
c
Hallo Frau Pillet,
ich habe gerade mal Google eingesetzt und gesehen, dass Ihre Firma ja
auch einen Sitz in Bonn-Mehlem hat. Sitzen Sie da zufällig auch? Fände
ich nur witzig, weil wir ebenfalls in Bonn unseren Sitz haben.
Beste Grüße sendet
Rainer Jung
--
kippdata
informationstechnologie
Sorry, auto-completion :(
-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
No experience with AIX compilation, but 2 infos:
a) usually this measage means, that
/opt/apache_2.2/bin/apxs -q PREFIX
returned an error or something wrong (here I have chosen the same path
to apxs, which you have posted).
You can check that without running configure. Choose the same user a
rking fine now
Thx a lot for your help.
Regards,
Phi-Long LE
Le 05/07/2007 14:56, Rainer Jung a écrit :
No experience with AIX compilation, but 2 infos:
a) usually this measage means, that
/opt/apache_2.2/bin/apxs -q PREFIX
returned an error or something wrong (here I have chosen the same
pat
601 - 700 of 2105 matches
Mail list logo
