Re: Invoke methods in EL?
Thanks Mark. That does help.
On Mon, 2017-04-10 at 23:24 +0100, Mark Thomas wrote:
> On 10/04/17 16:35, Tim Watts wrote:
> > Environment: Tomcat 7.0.59; JRE 1.8.0_72
> >
> > I suspect the answer to my problem is "You can't do that" but here goes:
> >
> > A simple JSP that tries to get a Calendar instance and outputs the year:
> >
> > <%@ page language="java"
> > contentType="text/html;
> > charset=UTF-8" pageEncoding="UTF-8"%>
> > <%@ taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core; %>
> >
> >
> >
> >
> >
> > The year is ${ Y }
> >
> >
> >
> > This presents a page that just says "The year is" but no year value. Is
> > there some syntactical mojo I'm missing or is my best alternative to
> > resort to a scriptlet?
> >
> > (And for context, I actually want to do something along these lines in a
> > tag file.)
>
> You can do something like that but...
>
> You'll need EL 3.0 which means Tomcat 8 minimum. I recommend 8.5.x in
> preference to 8.0.x.
>
> EL doesn't let you specify the package in the expression. You have to
> explicitly import. With Tomcat, if you import the class into the JSP
> page that automatically imports it into the EL expression. (Whether
> Tomcat should do this or not is an open question with the EL Expert Group.)
>
> Then factor in that EL only lets you reference static methods and fields
> on concrete classes (which means you can't use Calendar since it is
> abstract) and you get:
>
>
> <%@ page language="java"
> import="java.util.Calendar,java.util.GregorianCalendar"
> contentType="text/html;charset=UTF-8"
> pageEncoding="UTF-8"%>
> <%@ taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core; %>
>
>
>
>
>
> The year is ${ Y }
>
>
>
>
> Drop the above test into a JSP page in the examples web application in
> Tomcat 8 onwards and you'll get the output you are looking for.
>
> Note I tested this with 9.0.x but 8.x should behave the same way.
>
> HTH,
>
> Mark
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
Invoke methods in EL?
Environment: Tomcat 7.0.59; JRE 1.8.0_72
I suspect the answer to my problem is "You can't do that" but here goes:
A simple JSP that tries to get a Calendar instance and outputs the year:
<%@ page language="java"
contentType="text/html;
charset=UTF-8" pageEncoding="UTF-8"%>
<%@ taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core; %>
The year is ${ Y }
This presents a page that just says "The year is" but no year value. Is
there some syntactical mojo I'm missing or is my best alternative to
resort to a scriptlet?
(And for context, I actually want to do something along these lines in a
tag file.)
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Connection reset while trying to access a web service running under Tomcat
On Fri, 2017-02-24 at 01:08 +0100, André Warnier (tomcat) wrote: > On 24.02.2017 00:57, James H. H. Lampert wrote: > > On 2/23/17, 3:13 PM, André Warnier (tomcat) wrote: > >> It seems to say right up here what the problem is : the customer system > >> cannot establish a HTTPS connection with your server. The connection > >> attempt starts, but then your server rejects it and closes the connection. > >> Maybe they cannot agree on a common SSL protocol ? > > . . . > > > > Is there a diagnostic setting I can apply to the Tomcat server, that would > > shed any light > > on what's happening? > > > > Probably, if you set the log level high enough. Unfortunately, the tomcat > logging > configuration is also not really my thing. > One expert in these matters on this list is Christopher, but he seems to get > list emails > after some delay. So have a little patience, and you'll probably be helped. > In the meantime, there is always the helpful on-line tomcat documentation > which you could try. > http://tomcat.apache.org/tomcat-8.0-doc/logging.html > In addition, you might want to indicate what HTTP Connector and SSL stack you're using. Pure Java/JSSE? Native/OpenSSL? I believe the logging tweaks will be different for these. > > > > - > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Error 404 - The requested resource is not available
On Wed, 2017-01-11 at 15:49 -0600, fonsin2008 . wrote: > Hi all! > > First, I need to say that I'm new(ignorant) with Tomcat. One of our > systems is written with tomcat, but today something went wrong and the > following error appears on the webpage: > > --Estado HTTP 404 - /evaluacion/WEB-INF/pages/login/forma_login.jsp > --__ > --type Informe de estado > --mensaje /evaluacion/WEB-INF/pages/login/forma_login.jsp > --descripción El recurso requerido no está disponible. > -- > --Apache Tomcat/6.0.37 > > The file exists on the virtualserver, at > > home/desarrollo/produccioncbi/virtualhost/cbi_desarrollo/evaluacion/WEB-INF/pages/login > > And: > ls -l > -rw-r--r-- 1 desarrollo 3744 feb 11 2015 forma_login.jsp > > the evaluacion.war file lives at > /home/desarrollo/produccioncbi/virtualhost/cbi_desarrollo > > And in /WEB-INF/classes/struts.xm I found: > ./WEB-INF/classes/struts.xml: name="forma_login">/WEB-INF/pages/login/forma_login.jsp > > So, I can't figure out why this error appears. May be I'm missing > something obvious. I also googled it, but I only found permission > errors and wrong paths. > > If you need some additional information, feel free to ask. > What URL was used to produce the error message? Since you're unfamiliar with Tomcat, and presumably Servlet based web applications, you need to know that /WEB-INF and anything below it is inaccessible outside the web app; it's only accessible from within the web app. So if you issued a URL like: http://some-host/evaluacion/WEB-INF/pages/login/forma_login.jsp You will unsurprisingly get the 404 error. If this is the case then your task is to learn more about the specifics of your application and what the proper login URL is. Looks like it's built with Struts so you may need to learn about that -- starting with what version was used. -- Tim. > Thank you guys for your time! > > Jesus Mager > [www.h1n1-al.blogspot.com] > > - > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: tomcat8 unable to load the Resource/property file from jar
On Wed, 2016-09-14 at 11:54 +, Venkata Reddy P wrote:
> Thanks Chris for replying.
>
> I have tried placing all the jars into webapps/auth/web-inf/lib
> folder but still getting the null value.
>
You mean WEB-INF/lib not web-inf/lib, right? Case matters.
> Is there any way to confirm the property file in tomcat classpath?
>
> Many Thanks.
> -Original Message-
> From: Christopher Schultz [mailto:ch...@christopherschultz.net]
> Sent: Monday, September 12, 2016 2:39 AM
> To: Tomcat Users List
> Subject: Re: tomcat8 unable to load the Resource/property file from jar
>
> Venkata,
>
> On 9/9/16 2:48 PM, Venkata Reddy P wrote:
> > These jars are deployed in common folder to make use of my two web
> > applications. I have modified the catalina.properties file to load
> > these jars by tomcat server.
>
> What happens if you put those JAR files separately into each web application?
>
> I would expect the code as presented to work, but it's worth trying.
> And much easier to deal with than a complicated deployment where you need to
> stash things in Tomcat's common classloader.
>
> -chris
>
> > -Original Message- From: Christopher Schultz
> > [mailto:ch...@christopherschultz.net] Sent: 10 September 2016
> > 00:08 To: Tomcat Users List Subject: Re: tomcat8 unable to load the
> > Resource/property file from jar
> >
> > Venkata,
> >
> > On 9/9/16 5:18 AM, Venkata Reddy P wrote:
> >> I have tried it and still getting the null value. URL url =
> >> Auth.class.getClassLoader().getResource("/com/trianz/auth/auth.proper
> t
> >
> >>
> ies");
> >
> >> The Auth.java is part of other jar called tools.jar
> >
> >> My jars: 1)auth.jar com/trianz/auth/*.java
> >> com/trianz/auth/auth.properties
> >
> >> 2)tools.jar com/trianz/tools /Auth.java com/trianz/tools/*.properties
> >
> >> Many thanks for the response.
> >
> > And where are those .jar files located?
> >
> > -chris
> >
> >> -Original Message- From: Christopher Schultz
> >> [mailto:ch...@christopherschultz.net] Sent: Thursday, September 08,
> >> 2016 8:33 PM To: Tomcat Users List Subject: Re: tomcat8 unable to
> >> load the Resource/property file from jar
> >
> >> Venkata,
> >
> >> On 9/7/16 4:49 AM, Venkata Reddy P wrote:
> >>> Recently we have upgraded the one of application from tomcat6.x to
> >>> tomcat8.0.36 version. In tomcat6, i was able to read the
> >>> property/resource file from the jar file but certain reasons after
> >>> upgrading to the tomca8.0.36 its failing to load.
> >
> >>> My jar: auth.jar com/trianz/auth/*.java
> >>> com/trianz/auth/auth.properties
> >
> >>> //failing code, here url always getting null value. URL url =
> >>>
> >>> Auth.class.getClassLoader().getResource("com/trianz/auth/auth.proper
> t
> >
> >>>
> i
> >
> >>>
> > es");
> >
> >>> I am sure by looking at the tomcat catalina.startup logs the
> >>> auth.jar is loading properly Is there any way to confirm the file in
> >>> classpath "com/trianz/auth/auth.properties"? How do I fix this?
> >
> >>> Many Thanks in advance.
> >
> >> Can you try reading the file like this:
> >
> >> URL url =
> >> Auth.class.getClassLoader().getResource("/com/trianz/auth/auth.proper
> t
> >
> >>
> ie
> >
> >
> > s")
> >
> >> ? (note the leading "/")
> >
> >> Also, from where is the Auth class being loaded? Where is auth.jar
> >> located?
> >
> >> -chris
> >
> >> -
> >
> >>
> >
> > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> >> For additional commands, e-mail: users-h...@tomcat.apache.org
> >
> >
> >> -
> >
> >>
> >
> > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> >> For additional commands, e-mail: users-h...@tomcat.apache.org
> >
> >
> > -
> >
> >
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> > For additional commands, e-mail: users-h...@tomcat.apache.org
> >
> >
> > -
> >
> >
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> > For additional commands, e-mail: users-h...@tomcat.apache.org
> >
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
Re: How to write a correct HTTP request to Tomcat 8.5.4 instance?
On Mon, 2016-09-05 at 14:11 +0200, Klemens Muthmann wrote:
> Hi,
>
> I currently need to implement an HTTP data transmission from an Arduino
> with WiFi module to a PC running a Tomcat 8.5.4 instance. The Tomcat is
> running under Ubuntu 16.04.
>
> The problem is that, since there are no HTTP libraries on Arduino, I
> need to write the correct HTTP request myself and I got stuck. It would
> be great if someone on the list with a deeper understanding of the HTTP
> protocol would be willing to support me.
> The transmitted (possibly erroneous ) request looks like:
>
>
> GET /push?VIN=testrun HTTP/1.1
> User-Agent: Freematics
> Connection: keep-alive
> Host:
>
>
> The server runs under a local access point IP (10.42.0.1) and receives
> that request correctly but throws me an EOFException from the following
> code fragment:
>
> nRead = channel.read(socketBufferHandler.getReadBuffer());
> if (nRead == -1) {
> throw new EOFException();
> }
>
> So it seems to me that an end of file is reached before it is expected.
> Can somebody provide me with hints on how to solve that issue and
> formulate a correct HTTP request to my Tomcat instance?
>
> The following is th log trace I receive from the server:
>
> 2016-09-05 13:32:50.238 DEBUG 13143 --- [nio-8080-exec-1]
> o.a.coyote.http11.Http11InputBuffer : Received [GET
> /push?VIN=testrun HTTP/1.1
> User-Agent: Freematics
> Connection: keep-alive
> Host:
>
> ]
Until a real expert comes along with a better answer let me just toss
this out: Are the lines in the HTTP request that the Arduino submits
terminated with \r\n (and not just \n)? Because it looks like the
entire request may have been read when reading the request line. Then
when it goes to read the headers it gets an EOF. Not 100% sure of this
but it's possible.
> 2016-09-05 13:32:50.238 DEBUG 13143 --- [nio-8080-exec-1]
> o.a.c.authenticator.AuthenticatorBase: Security checking request GET
> /push
> 2016-09-05 13:32:50.238 DEBUG 13143 --- [nio-8080-exec-1]
> org.apache.catalina.realm.RealmBase : No applicable constraints
> defined
> 2016-09-05 13:32:50.238 DEBUG 13143 --- [nio-8080-exec-1]
> o.a.c.authenticator.AuthenticatorBase: Not subject to any constraint
> 2016-09-05 13:32:50.238 DEBUG 13143 --- [nio-8080-exec-1]
> org.apache.tomcat.util.http.Parameters : Set encoding to UTF-8
> 2016-09-05 13:32:50.238 DEBUG 13143 --- [nio-8080-exec-1]
> org.apache.tomcat.util.http.Parameters : Decoding query null UTF-8
> 2016-09-05 13:32:50.238 DEBUG 13143 --- [nio-8080-exec-1]
> org.apache.tomcat.util.http.Parameters : Start processing with input
> [VIN=testrun]
> 2016-09-05 13:32:50.238 DEBUG 13143 --- [nio-8080-exec-1]
> o.s.b.w.f.OrderedRequestContextFilter: Bound request context to
> thread: org.apache.catalina.connector.RequestFacade@75c83bc4
> 2016-09-05 13:32:50.238 DEBUG 13143 --- [nio-8080-exec-1]
> o.s.web.servlet.DispatcherServlet: DispatcherServlet with name
> 'dispatcherServlet' processing GET request for [/push]
> 2016-09-05 13:32:50.238 DEBUG 13143 --- [nio-8080-exec-1]
> s.w.s.m.m.a.RequestMappingHandlerMapping : Looking up handler method for
> path /push
> 2016-09-05 13:32:50.238 DEBUG 13143 --- [nio-8080-exec-1]
> s.w.s.m.m.a.RequestMappingHandlerMapping : Returning handler method
> [public void de.cyface.obd2.controller.Obd2Controller.push()]
> 2016-09-05 13:32:50.238 DEBUG 13143 --- [nio-8080-exec-1]
> o.s.b.f.s.DefaultListableBeanFactory : Returning cached instance of
> singleton bean 'obd2Controller'
> 2016-09-05 13:32:50.238 DEBUG 13143 --- [nio-8080-exec-1]
> o.s.web.servlet.DispatcherServlet: Last-Modified value for
> [/push] is: -1
> push
> 2016-09-05 13:32:50.239 DEBUG 13143 --- [nio-8080-exec-1]
> o.s.web.servlet.DispatcherServlet: Null ModelAndView returned to
> DispatcherServlet with name 'dispatcherServlet': assuming HandlerAdapter
> completed request handling
> 2016-09-05 13:32:50.239 DEBUG 13143 --- [nio-8080-exec-1]
> o.s.web.servlet.DispatcherServlet: Successfully completed request
> 2016-09-05 13:32:50.239 DEBUG 13143 --- [nio-8080-exec-1]
> o.s.b.w.f.OrderedRequestContextFilter: Cleared thread-bound request
> context: org.apache.catalina.connector.RequestFacade@75c83bc4
> 2016-09-05 13:32:50.239 DEBUG 13143 --- [nio-8080-exec-1]
> o.apache.coyote.http11.Http11Processor : Socket:
> [org.apache.tomcat.util.net.NioEndpoint$NioSocketWrapper@2940dec1:org.apache.tomcat.util.net.NioChannel@34a92297:java.nio.channels.SocketChannel[connected
> local=/10.42.0.1:8080 remote=/10.42.0.72:46701]], Status in:
> [OPEN_READ], State out: [OPEN]
> 2016-09-05 13:32:55.280 DEBUG 13143 --- [nio-8080-exec-2]
> o.apache.coyote.http11.Http11Processor : Error parsing HTTP request header
>
> java.io.EOFException: null
> at
>
Re: OT if/else or not if/else
On Fri, 2016-04-22 at 17:34 +0100, Mark Thomas wrote:
> On 22/04/2016 17:24, Leon Rosenberg wrote:
> > Lets say I have three possible conditions, A, B and C, which are exclusive.
> > My native approach would be:
> > if (A){...}
> > if (B){...}
> > if (C){...}
> >
> > now some people would 'optimize' it as
> > if (A){ ...} else if (B) {} else if (C) { }
> > and I think in the world of single-cpu computers this optimization could
> > work.
> >
> As an aside, why can't the compile optimize to test the three conditions
> in parallel with the "else if"?
Actually, I would think the compiler could do a parallel optimization
for "if else" but more likely could NOT for a series of "if"s as often
only the programmer knows whether the "if" series is mutually exclusive.
>
> Mark
>
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Multiple domian names one web site different content
On Fri, 2016-03-04 at 21:46 +0100, Jose María Zaragoza wrote:
> Maybe my question does't have to do with current thread ( an probably
> doesn't have any sense at all) but :
>
> would be possible to define "VirtualHost" according the destination port ?
> I know that VirtualHost diferent domain name, but i want to keep the
> same domain name
> and to define
> 2 connectors , listening on 8080 and 8081
> Requests to 8080 go to /webapps-app1 and requests to 8081 go to /webapps-app2
>
Is there an implied requirement that host:8080/webapp1 should be
serviced ONLY on 8080 and likewise for 8081/webapp2? If so I think a
config along these lines would work:
where ${app-base1} and ${app-base2} are distinct non-nested directories
and webapp1 and webapp2 are located within the respective app-bases.
But read the Configuration reference for details.
http://tomcat.apache.org/tomcat-8.0-doc/config/ Depending on which
version of Tomcat you're using.
> is it possible in a only one Tomcat instance ? or I need to configure
> 2 tomcat instances ?
>
> Thanks and regards
>
>
>
>
>
>
> 2016-03-04 19:11 GMT+01:00 Christopher Schultz :
> > -BEGIN PGP SIGNED MESSAGE-
> > Hash: SHA1
> >
> > Andrew,
> >
> > On 3/4/16 7:44 AM, Andrew Hardy wrote:
> >> New to web servers.
> >
> > Welcome.
> >
> >> This may be a spring MVC question rather than tomcat, I'm not
> >> sure.
> >>
> >> I understand I can map multiple domains to a single ip address
> >> using DNS. I have read some stuff on how to set up multiple
> >> virtual hosts on the same host (ip address) on tomcat which
> >> requests can be diverted to depending on which domain name was used
> >> to make the request.
> >>
> >> Alternatively I am wondering about not having multiple virtual
> >> hosts (which I am guessing would be more useful if there was
> >> significant difference between between the sites) but have a single
> >> site which has a single layout structure etc but serves up
> >> specifically tailored content from a selected content store BASED
> >> on the domain used to make the request.
> >>
> >> Is this anything to do with tomcat or do I have to some how tell
> >> which domain was used when the http session is begun and set which
> >> content at that point using spring MVC. Perhaps the (first)
> >> request / session includes the domain used and I so need to access
> >> that programatically?
> >
> > You mean one single instance of the application that handles the
> > hostname of the request to make decisions? Sounds good, and doesn't
> > really involve Tomcat.
> >
> > If you have a session contained in a single web application, you could
> > either store the initial server hostname in the session and use that
> > until the session ends, or you could always pull the hostname from
> > each incoming request. Presumably, it won't be changing. Or, you could
> > cross-check those hostnames and maybe change configuration or complain
> > and log the user out in that event.
> >
> > Again, not much to do with Tomcat, which will just route all
> > appropriate requests to your application.
> >
> >> Is there a reason for this situation that I should not do things
> >> the way I suggest? but should use multiple "identical duplicate"
> >> web sites (virtual hosts) apart from each of which being hard coded
> >> to access a specific content store?
> >
> > For me, it always comes down to complexity. If you know you can do
> > this with a webapp-per-domain, then that's certainly a possibility but
> > you'll need more heap space for multiple web applications, and so you
> > might not scale as well.
> >
> > On the other hand, you may have to significantly re-work your web
> > application to be able to handle one-single-webapp that can
> > auto-switch configuration based upon the client's server-hostname. If
> > that's the case, then running a single-application represents more
> > risk -- at least for now.
> >
> > If I were designing things from scratch and I knew I'd be supporting
> > marge numbers of configurations, I'd go with the
> > single-webapp-instance approach because it's more scalable.
> >
> > - -chris
> > -BEGIN PGP SIGNATURE-
> > Comment: GPGTools - http://gpgtools.org
> > Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
> >
> > iEYEARECAAYFAlbZz9oACgkQ9CaO5/Lv0PD0mQCfShH1CZqKimD+mwBpOJimFMvt
> > qpgAni7S3D76ekXUrChiIfHZKRisUOsK
> > =jNpf
> > -END PGP SIGNATURE-
> >
> > -
> > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> > For additional commands, e-mail: users-h...@tomcat.apache.org
> >
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>
Re: Is there a way for code running on Tomcat 7+ to determine the URL of the Web App it's running under?
On Tue, 2016-02-16 at 14:31 -0500, Christopher Schultz wrote: > On 2/16/16 11:50 AM, Dougherty, Gregory T., M.S. wrote: > > I completely and totally trust my servlet with my data. I do not > > in the least bit trust any other servlet running on that Tomcat > > instance. > > Then those servlets shouldn't be deployed into the same application. > Possibly not even within the same JVM. But okay, let's ignore that > lack of safety for the time being. We're ignoring all kinds of other > things as well, so one more doesn't matter. > If I may interject: I think part of the problem here is the OP is using "servlet" and "webapp" interchangably. He originally used the term webapp but then switched to servlet around the time he laid out this authentication solution. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Is there a way for code running on Tomcat 7+ to determine the URL of the Web App it's running under?
On Fri, 2016-02-12 at 20:35 +, Dougherty, Gregory T., M.S. wrote: > You are correct, I¹m trying to authorize the web app, not the user. > > Goal: I am trying to come up with a way for a Tomcat app to securely store > and retrieve the password it needs to access a DB. > > My definition of ³secure² includes ³there exist no files with an > unencrypted copy of the password². IIUC, JNDI fails this test. > > My requirements include that all web app components are checked in to a > source control system that malicious users can have read access to. > > Solution: > 1: Trusted user creates public:private key pair (1), distributes public key > 2: Web app developer creates pubic:private key pair (2), distributes > public key > 3: Web app developer encrypted password with private key 2, then public > key 1, stores with web app > 4: Web app calls decryption jar that¹s in tomcat/lib, passing in the > encrypted password from step 3 > 5: Decryption code determines which app called it, pulls the public key > (3) saved for that app > 6: Decryption code decrypts with private key 1, public key 3, and returns > the unencrypted password. > > So long as 1: Trusted user can store private key where it¹s secure, but > accessible to decryption code Since the webapps all run in the same tomcat and therefore under the same OS user account, how do you ensure that *only* the decryption code can access the private key? Otherwise, any webapp could decrypt any other webapp's password. > , and 2: Can correctly determine the calling > app, I believe this setup is secure. > > We log who uploads the web apps, so if user X uploads a bogus ³User Y > App², we can deal with that. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: the session tracking of tomcat 6 and tomcat 7 behaves strangely
On Wed, 2015-06-24 at 11:55 +0200, André Warnier wrote: Hi. Hi. The recommendation on this forum is to not use top posting, but to keep the flow of conversation natural, and respond below the question to which your question refers. See http://tomcat.apache.org/lists.html, Important, 6) I have modified you latest post accordingly below. chedana jayasinghe wrote: On Tue, Jun 23, 2015 at 2:46 PM, André Warnier a...@ice-sa.com wrote: chedana jayasinghe wrote: In my web application, in a jsp there is a javascript which sends request to a servlet every twenty seconds, so it kills my applications user idle time tracking by resetting the lastAccessed time in session. the funny thing is lastAccessed time doesn't get updated in tomcat 6 and my applications idle time tracking works fine in it, but in 7 it gets updated and kills that functionality of the application . so I'm little bit confused about the changes in the session tracking of tomcat 6 and tomcat 7. I don't know what happened in Tomcat 6 as compared to what happens in other versions. But from a purely logical point of view, I would tend to think that, from the server point of view, whether a request comes from the user pressing a button or from a javascript module in a page sending a request, does not make a difference : the application has been accessed, so the last accessed time should be updated. That is probably the point even, of many such javascript snippets out there in the wild. So again from a purely logical point of view, if Tomcat 6 then did not update the last access time, that would sound more like a bug, that was corrected later. Maybe the fact that it updates this or not, depends on whether the application that is called retrieves the session or not, and if so you may have control over it, by making sure that whatever your javascript calls, it does /not/ retrieve the session. Caveat : I do not really /know/ how it works, so there is a lot of speculation here. I just put a debug point an checked. In tomcat 6,the request comes to the servlet with a null session,but in tomcat 7 and later versions the valid session is there in the request Yes, but the /call/ that contains this jsession-id, comes from the javascript that is in the HTML page currently shown in the browser. So the question is : why does that /call/, now, contain this jsessionid parameter, when under Tomcat 6 it did not ? Or to put this another way : how does the local javascript in the browser *know* this jsession-id ? Or in yet another way : the javascript in the browser does not /know/ if it is talking to a Tomcat 6 or a Tomcat 7 or a Tomcat 8 server, right ? So how comes that in one case, it sends a request /without/ a jsessionid, and in the other cases /with/ a jsessionid ? Haven't been following this thread too closely, so ignore this if it's a total non sequitur, but perhaps TC6 does NOT mark the cookie as HttpOnly while later versions do? - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: ClassNotFoundException - Involving a class implementing Filter and two projects depending on another one
On Sun, 2015-03-29 at 12:56 -0400, Tim Watts wrote: On Sun, 2015-03-29 at 18:06 +0200, Lmhelp1 wrote: On 3/29/2015 5:36 PM, André Warnier [via Tomcat] wrote: Lmhelp1 wrote: Hello, Thank you for reading my post. I am getting a ClassNotFoundException. Below is the situation. - I'm working with Eclipse (Luna), Tomcat 8 and Java 8. - I have three projects project1, project2 and project3. - project1 and project2 depend on the third project project3. In Project - Properties - Java Build Path - Projects, I added project3 for both projects project1 and project2. - project3 is a Java project. - project1 and project2 are Dynamic Web Projects. - project3 defines the class MyFilter which implements Filter and which I put in the package my.package. - project1 contains a web.xml file which contains the following elements: [...] filter filter-nameMyFilter/filter-name filter-classmy.package.MyFilter/filter-class init-param param-namerequestEncoding/param-name param-valueUTF-8/param-value /init-param /filter filter-mapping filter-nameMyFilter/filter-name url-pattern/*/url-pattern /filter-mapping [...] - project2 contains a web.xml file which contains the following elements (same as in project 1): [...] filter filter-nameMyFilter/filter-name filter-classmy.package.MyFilter/filter-class init-param param-namerequestEncoding/param-name param-valueUTF-8/param-value /init-param /filter filter-mapping filter-nameMyFilter/filter-name url-pattern/*/url-pattern /filter-mapping [...] When running a JSP of project1 on the Tomcat server, I get the error: SEVERE: Exception starting filter MyFilter java.lang.ClassNotFoundException: my.package.MyFilter There are no errors at build time. I just would like to mention that I'm working with Tomcat 8 for the first time. It used to work with Tomcat 7 but I might have done something more to make it work... I don't remember what... What can I do to solve that problem? Please let me know if you need additional information or if I'm not clear enough. I do not really know how to translate this for Eclipse but if this was a stand-alone Tomcat, the way you describe it above, project1 and project2 (when deployed) should also have the class available under their respective (catalina_base)/webapps/projectX/WEB-INF/classes/ directory (or /WEB-INF/classes/lib/, if in a jar). Is it the case ? Thank you for your answer. No, it is not the case. - There are no .class files from project3 under classes directories for the two projects project1 and project2. - I didn't make a .jar file out of project3 because I don't want to have to do it every time I change the code of the classes in project3... Note - If I do not add project3 via Project - Properties - Java Build Path - Projects for both projects project1 and project2 I get hundreds of errors. So clearly this is a required setting... I don't know what is missing... Thank you for helping me. Best regards. -- Léa In Eclipse, try Project / Properties / Deployment Assembly. Add project 'project3'. It should add project3's resulting jar file to WEB-INF/lib or resulting classes to WEB-INF/classes depending on how project3 is configured. UPDATE: The 2nd part of that sentence is not true; it will always add the resulting jar file of project3. However, it will create jar file on the fly when the webapp is re/deployed OR when project3 is modified. Keep in mind that this is simply a quick dirty way of testing the app from within Eclipse and NOT suitable for building a deployable war file. You should use Maven or Ant or etc. for that. Note that I'm using the Maven plug-in so this may be a consequent feature of the plug-in, I'm not sure. This feature does not appear to require the Maven plug-in. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: ClassNotFoundException - Involving a class implementing Filter and two projects depending on another one
On Sun, 2015-03-29 at 18:06 +0200, Lmhelp1 wrote: On 3/29/2015 5:36 PM, André Warnier [via Tomcat] wrote: Lmhelp1 wrote: Hello, Thank you for reading my post. I am getting a ClassNotFoundException. Below is the situation. - I'm working with Eclipse (Luna), Tomcat 8 and Java 8. - I have three projects project1, project2 and project3. - project1 and project2 depend on the third project project3. In Project - Properties - Java Build Path - Projects, I added project3 for both projects project1 and project2. - project3 is a Java project. - project1 and project2 are Dynamic Web Projects. - project3 defines the class MyFilter which implements Filter and which I put in the package my.package. - project1 contains a web.xml file which contains the following elements: [...] filter filter-nameMyFilter/filter-name filter-classmy.package.MyFilter/filter-class init-param param-namerequestEncoding/param-name param-valueUTF-8/param-value /init-param /filter filter-mapping filter-nameMyFilter/filter-name url-pattern/*/url-pattern /filter-mapping [...] - project2 contains a web.xml file which contains the following elements (same as in project 1): [...] filter filter-nameMyFilter/filter-name filter-classmy.package.MyFilter/filter-class init-param param-namerequestEncoding/param-name param-valueUTF-8/param-value /init-param /filter filter-mapping filter-nameMyFilter/filter-name url-pattern/*/url-pattern /filter-mapping [...] When running a JSP of project1 on the Tomcat server, I get the error: SEVERE: Exception starting filter MyFilter java.lang.ClassNotFoundException: my.package.MyFilter There are no errors at build time. I just would like to mention that I'm working with Tomcat 8 for the first time. It used to work with Tomcat 7 but I might have done something more to make it work... I don't remember what... What can I do to solve that problem? Please let me know if you need additional information or if I'm not clear enough. I do not really know how to translate this for Eclipse but if this was a stand-alone Tomcat, the way you describe it above, project1 and project2 (when deployed) should also have the class available under their respective (catalina_base)/webapps/projectX/WEB-INF/classes/ directory (or /WEB-INF/classes/lib/, if in a jar). Is it the case ? Thank you for your answer. No, it is not the case. - There are no .class files from project3 under classes directories for the two projects project1 and project2. - I didn't make a .jar file out of project3 because I don't want to have to do it every time I change the code of the classes in project3... Note - If I do not add project3 via Project - Properties - Java Build Path - Projects for both projects project1 and project2 I get hundreds of errors. So clearly this is a required setting... I don't know what is missing... Thank you for helping me. Best regards. -- Léa In Eclipse, try Project / Properties / Deployment Assembly. Add project 'project3'. It should add project3's resulting jar file to WEB-INF/lib or resulting classes to WEB-INF/classes depending on how project3 is configured. Note that I'm using the Maven plug-in so this may be a consequent feature of the plug-in, I'm not sure. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: File getting created in bin folder instead of project folder
On Mon, 2015-02-09 at 09:58 +0530, Hyder Hashmi wrote:
Hi All,
When I execute the following code in my project folder, it creates the file
in my current folder(project folder).
import java.io.File;
public class CreateFile{
File f = null;
try{
f = new File(test.txt);
bool = f.createNewFile();
System.out.println(File created: +bool);
}catch(Exception e){
e.printStackTrace();
}
}
First, there's no way that compiles. Perhaps that block is supposed to
be wrapped in a method?
I am now calling this class in my servlet.
The servlet is executing perfectly on the tomcat, however, the file is
getting created in the tomcat's bin folder instead of my project folder
placed in the webapps.
If I specify the path, then it creates the file on that location , however,
that will be hardcoding and will not work on the other computer.
Second, you asked this question last week and you got several replies
offering guidance. What advice, if any, did you follow and how did it
turn out? (Hint: it's annoying when people take time to help and you
don't listen to them but want more help.)
As one of the replies suggested, probably the best approach is to set an
absolute path in either a system or context property. Then obtain that
value during servlet init and pass it to the CreateFile class somehow
(via a constructor or a set method, or as a param to the create method
etc.).
--- Tim
Please help.
Thanks in advance
Hyder!
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Need Help!
On Thu, 2015-01-29 at 00:33 +0530, Hyder Hashmi wrote: Hi, I am working on a small project and need your help in this. I have a java program in which I read and write in a file that is located in the current folder. Now I have written a few servlets and trying to use the previous code along with servlets. Tomcat is searching for the file in its bin folder and giving FileNotFoundException. If I use my java code without the servlet it is checking for the file in current folder (which is my requirment). I want to ensure that when I use my java code along with servlets, it should read and write in the file from current folder(Project folder in tomcat's webapps). It sounds like you're trying to force your notion of what a web app's current folder should be onto Tomcat. It simply doesn't work that way. The Servlet Spec makes no guarantee as to what the current folder is (a file system notion) in a Servlet container or web app. Suggest you modify your file processing class to accept a hint as to the current folder and set that value in the servlet using ServletContext.getRealPath(/) and/or via an init parameter or via injection. But note that if the web app is deployed as an unexploded war file getRealPath() may return null. --- Tim I am not using any IDE, the code is written in Notepad and being executed from CommandLine. I have spent long time on Internet to find the resolution but in vain. Request to help me with this situation . Hoping for a positive reply. Thanks for in advance for all the help. Regards, Hyder. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: How to access Sessions outside of class
On Wed, 2014-10-29 at 08:28 -0400, Jason Ricles wrote: foo is not a webapp, it is a separate program running on the computer as a daemon. It has to do this stuff for it needed to be ran like this. bar is basically the gui to the daemon, providing what is happening on the machine to someone at another computer, since the machine is headless these programs are being ran on. So I am curious as to how having my foo program running outside of bar how it can interact using websockets? So far I have seen that they are disconnected and have no clue about each other outside of using RMI. A java program can be a websocket client with out being a webapp. Perhaps this example will help: http://stackoverflow.com/questions/26452903/javax-websocket-client-simple-example You would need the JEE 7 websocket jar which presumably is included in Tomcat 8 -- or use the appropriate Maven dependencies. And as Chris pointed out, JSON is fairly ubiquitous and easy to deal with. RMI could work and is simple enough. There are a few downsides worth considering: 1) it's strictly java-to-java IPC, so no other technologies (e.g. .NET) can participate down the road; 2) it's not firewall friendly -- but that would only matter if there was a fw between foo and bar; 3) it's not hip and cool -- not sure how widely used it is anymore outside of EJB (do people still write EJBs?). Did you say earlier that foo would need to send unsolicited alerts at some point -- i.e. send alerts even when there's no client listening? That could possibly complicate the design in that I believe the ws server endpoint's life begins only in response to a client connection. (I'm thinking of the server endpoint for the browser here.) Thus such alerts would need to go somewhere until a client shows up wanting to see them (e.g. a database). And if that's the case why not send all of them there. Sounds like you may have some design issues to work out and we don't have enough details to be of much help. --tim. On Tue, Oct 28, 2014 at 6:55 PM, Christopher Schultz ch...@christopherschultz.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jason, On 10/28/14 3:06 PM, Jason Ricles wrote: Chris, foo has to run as a daemon outside of tomcat. It will be interacting with low level drivers through jni. While interesting, it's not terribly relevant. I was looking at trying to do that with making a client endpoint in my daemon but i was having trouble getting it to connect to the websocket server. Maybe you should start there: get your foo daemon talking to your web application via Websocket and I think you'll learn a lot about Websocket in general and probably end up with a better webapp to boot. Thanks, - -chris On Tue, Oct 28, 2014 at 12:21 PM, Christopher Schultz ch...@christopherschultz.net wrote: Jason, On 10/28/14 9:06 AM, Jason Ricles wrote: Ok so here is the problem I have been spinning my wheels on for day let me just lay it out. I have a daemon written in java running lets call it foo for simpleness on a linux machine that has the tomcat server running. On the tomcat server is a WAR file for a webapp called bar. In that webapp is a webpage with JavaScript websocket communication that connects to a websocket server that is also a part of the WAR file. So I have a webpage and a websocket server communicating with each other. I want the foo daemon and the websocket server on bar (web application) to be able to communicate with each other. Is there any way outside of sockets to have foo and the websocket server on bar do this? Dumb question: why can't foo just be a Websocket client? Make a ws:// connection to your web application in Tomcat and then two-way communication is possible. Take whatever values from either side and push them over the wire. Use JSON or something dirt-simple as your data encapsulation language: it's standard, well-understood, and has parsers and serializers readily available for many different languages. It's also pretty much backward- and forward-compatible since everything is pretty much a named value map, so you can add/subtract fields at will without having to rewrite the communication protocol or do a lot of extra work in either the client or the server. -chris On Tue, Oct 28, 2014 at 8:59 AM, Martin Grigorov martin.grigo...@gmail.com wrote: On Tue, Oct 28, 2014 at 2:51 PM, Jose María Zaragoza demablo...@gmail.com wrote: 2014-10-28 13:44 GMT+01:00 Jason Ricles jgr...@alum.lehigh.edu: Martin, I can not use hazelcast due to regulations I have to abide by, is where any other built in way besides sockets that will allow me to share data between the two processes? You could use an embedded ( or not ) messaging broker ( like ActiveMQ ) . Or any kind of in-memory database But
Re: How to access Sessions outside of class
On Linux/Unix you could use a FIFO (aka named pipe) and have each side connect to it with a stream. But that's non-portable and probably not too elegant/robust. What's the problem with using a socket? Or better yet, a message broker like ActiveMQ like someone else has already suggested? On Tue, 2014-10-28 at 09:46 -0400, Jason Ricles wrote: Communicate means something happens that the daemon is monitoring, so thus the daemon sends a message to the websocket server running on the webapp, so that message can get relayed to the webpage from the server and the daemon will also need to get messages from the webapp. It will then be two way and just regular messages. On Tue, Oct 28, 2014 at 9:42 AM, chris derham ch...@derham.me.uk wrote: On 28 October 2014 11:06, Jason Ricles jgr...@alum.lehigh.edu wrote: Ok so here is the problem I have been spinning my wheels on for day let me just lay it out. I have a daemon written in java running lets call it foo for simpleness on a linux machine that has the tomcat server running. On the tomcat server is a WAR file for a webapp called bar. In that webapp is a webpage with JavaScript websocket communication that connects to a websocket server that is also a part of the WAR file. So I have a webpage and a websocket server communicating with each other. I want the foo daemon and the websocket server on bar (web application) to be able to communicate with each other. Is there any way outside of sockets to have foo and the websocket server on bar do this? Define communicate - what kind? One way, two way, what kind of data, frequency, size, type? Chris - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: How to access Sessions outside of class
Any IPC that you have to write from scratch is going have a not insignificant level of complexity whether it's raw sockets, pipes, http, whatever. Since it sounds like you can't introduce any additional software packages, you might want to consider using RMI (see the java.rmi package). At least then, you're coding to an API instead of having to invent message formats and protocols. On Tue, 2014-10-28 at 10:16 -0400, Jason Ricles wrote: Yes we are trying to portable, well the socket is the last resort. We are trying to avoid it until now but will go that way if we have to if there is no other way. Mostly due to the data coming in and out writing our own socket will be complex but doable. As far as messaging broker, they are not approved for use on our system so thus can not be used. On Tue, Oct 28, 2014 at 10:13 AM, Tim Watts t...@cliftonfarm.org wrote: On Linux/Unix you could use a FIFO (aka named pipe) and have each side connect to it with a stream. But that's non-portable and probably not too elegant/robust. What's the problem with using a socket? Or better yet, a message broker like ActiveMQ like someone else has already suggested? On Tue, 2014-10-28 at 09:46 -0400, Jason Ricles wrote: Communicate means something happens that the daemon is monitoring, so thus the daemon sends a message to the websocket server running on the webapp, so that message can get relayed to the webpage from the server and the daemon will also need to get messages from the webapp. It will then be two way and just regular messages. On Tue, Oct 28, 2014 at 9:42 AM, chris derham ch...@derham.me.uk wrote: On 28 October 2014 11:06, Jason Ricles jgr...@alum.lehigh.edu wrote: Ok so here is the problem I have been spinning my wheels on for day let me just lay it out. I have a daemon written in java running lets call it foo for simpleness on a linux machine that has the tomcat server running. On the tomcat server is a WAR file for a webapp called bar. In that webapp is a webpage with JavaScript websocket communication that connects to a websocket server that is also a part of the WAR file. So I have a webpage and a websocket server communicating with each other. I want the foo daemon and the websocket server on bar (web application) to be able to communicate with each other. Is there any way outside of sockets to have foo and the websocket server on bar do this? Define communicate - what kind? One way, two way, what kind of data, frequency, size, type? Chris - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: can only access tomcat (running on centos) locally not from machine on same subnet
On Sun, 2014-09-14 at 08:02 +0100, AndyE wrote:
I have an app installed (one that i have installed several times) on
centos 6.5 it runs a version of tomcat (7.0.54) that is currently
configured on port .. i cannot access this page from any other
machine on the same subnet .. the browser (chrome) gives the
following :
This webpage is not available Google Chrome could not load the webpage
because 192.168.1.11 took too long to respond. The website may be
down, or you may be experiencing issues with your Internet connection.
Error code: ERR_CONNECTION_TIMED_OUT
I have tried the following :
Changed tomcat ports in server.xml restarted = same
there is no localhost only config in server.xml
disabled firewalls on everything (selinux disabled and turned off FW
in windows)
netstat doesn't show it listening on ports or 8080 which ive also
tried.
This is likely the proximate cause.
disabled ipv6
I can ping/resolve ip and hostname of tomcat server from other
machines
Bit lost as to why this isn't working - netstat is giving me a clue
but why isnt it listening ?
For more clues look for errors/warnings in the tomcat log under
{TOMCAT}/logs (assuming you're working with a standard Tomcat distro and
not a Centos package). May want to stop/start Tomcat first.
--tim
server.xml :
!-- Define a non-SSL HTTP/1.1 Connector on port 8080 --
!-- Meadowlands - i18n changes - 15-Nov-2012 - Start (KRB) --
Connector port= URIEncoding=UTF-8 maxHttpHeaderSize=8192
maxThreads=150 minSpareThreads=25 enableLookups=true
redirectPort=8443 acceptCount=100 connectionTimeout=2
disableUploadTimeout=true /
!-- Meadowlands - i18n changes - 15-Nov-2012 - End (KRB) --
!-- Define a SSL Coyote HTTP/1.1 Connector on port 8443 --
!--
Connector
port=8443 minProcessors=5 maxProcessors=75
enableLookups=true disableUploadTimeout=true
acceptCount=100 debug=0 scheme=https secure=true
SSLEnabled=true
clientAuth=false sslProtocol=TLS
ciphers=SSL_RSA_WITH_RC4_128_MD5,SSL_RSA_WITH_RC4_128_SHA,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_DSS_WITH_AES_128_CBC_SHA,SSL_RSA_WITH_3DES_EDE_CBC_SHA,SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA,SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA
keystoreFile=SPECROOT/custom/keystore/cacerts
keystorePass=changeit
/Connector
--
!-- Define the top level container in our container hierarchy --
Engine name=Catalina defaultHost=localhost
!-- Define the host to run the web applications --
Host name=localhost appBase=webapps unpackWARs=true
autoDeploy=false
!-- Access log processes all requests for this virtual host. By
default, log files are created in the logs directory
relative to
$CATALINA_HOME. If you wish, you can specify a different
directory with the directory attribute. Specify either a
relative
(to $CATALINA_HOME) or absolute path to the desired
directory.
This access log implementation is optimized for maximum
performance,
but is hardcoded to support only the common and combined
patterns.
--
Valve className=org.apache.catalina.valves.AccessLogValve
directory=logs prefix=localhost_access_log. suffix=.txt
pattern=%l %u %t %r %s %b %D resolveHosts=false /
/Host
/Engine
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
Re: can only access tomcat (running on centos) locally not from machine on same subnet
On Sun, 2014-09-14 at 13:43 +0100, AndyE wrote:
the tomcat is installed with the application and i have installed this prob
100+ times on windows .. this is a newer version in centos
Maybe you should contact the app vendor?
new log file on restarting tomcat attached - no warnings or errors ?
The list strips attachments. If you would paste it inline maybe we can
get a better idea what's happening.
cheers.
-Original Message-
From: Tim Watts
Sent: Sunday, September 14, 2014 12:22 PM
To: Tomcat Users List
Subject: Re: can only access tomcat (running on centos) locally not from
machine on same subnet
On Sun, 2014-09-14 at 08:02 +0100, AndyE wrote:
I have an app installed (one that i have installed several times) on
centos 6.5 it runs a version of tomcat (7.0.54) that is currently
configured on port .. i cannot access this page from any other
machine on the same subnet .. the browser (chrome) gives the
following :
This webpage is not available Google Chrome could not load the webpage
because 192.168.1.11 took too long to respond. The website may be
down, or you may be experiencing issues with your Internet connection.
Error code: ERR_CONNECTION_TIMED_OUT
I have tried the following :
Changed tomcat ports in server.xml restarted = same
there is no localhost only config in server.xml
disabled firewalls on everything (selinux disabled and turned off FW
in windows)
netstat doesn't show it listening on ports or 8080 which ive also
tried.
This is likely the proximate cause.
disabled ipv6
I can ping/resolve ip and hostname of tomcat server from other
machines
Bit lost as to why this isn't working - netstat is giving me a clue
but why isnt it listening ?
For more clues look for errors/warnings in the tomcat log under
{TOMCAT}/logs (assuming you're working with a standard Tomcat distro and
not a Centos package). May want to stop/start Tomcat first.
--tim
server.xml :
!-- Define a non-SSL HTTP/1.1 Connector on port 8080 --
!-- Meadowlands - i18n changes - 15-Nov-2012 - Start (KRB) --
Connector port= URIEncoding=UTF-8 maxHttpHeaderSize=8192
maxThreads=150 minSpareThreads=25 enableLookups=true
redirectPort=8443 acceptCount=100 connectionTimeout=2
disableUploadTimeout=true /
!-- Meadowlands - i18n changes - 15-Nov-2012 - End (KRB) --
!-- Define a SSL Coyote HTTP/1.1 Connector on port 8443 --
!--
Connector
port=8443 minProcessors=5 maxProcessors=75
enableLookups=true disableUploadTimeout=true
acceptCount=100 debug=0 scheme=https secure=true
SSLEnabled=true
clientAuth=false sslProtocol=TLS
ciphers=SSL_RSA_WITH_RC4_128_MD5,SSL_RSA_WITH_RC4_128_SHA,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_DSS_WITH_AES_128_CBC_SHA,SSL_RSA_WITH_3DES_EDE_CBC_SHA,SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA,SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA
keystoreFile=SPECROOT/custom/keystore/cacerts
keystorePass=changeit
/Connector
--
!-- Define the top level container in our container hierarchy --
Engine name=Catalina defaultHost=localhost
!-- Define the host to run the web applications --
Host name=localhost appBase=webapps unpackWARs=true
autoDeploy=false
!-- Access log processes all requests for this virtual host. By
default, log files are created in the logs directory
relative to
$CATALINA_HOME. If you wish, you can specify a different
directory with the directory attribute. Specify either a
relative
(to $CATALINA_HOME) or absolute path to the desired
directory.
This access log implementation is optimized for maximum
performance,
but is hardcoded to support only the common and combined
patterns.
--
Valve className=org.apache.catalina.valves.AccessLogValve
directory=logs prefix=localhost_access_log. suffix=.txt
pattern=%l %u %t %r %s %b %D resolveHosts=false /
/Host
/Engine
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
No activity on tomcat.users since Tues?
Markmail seems to confirm this but kind of remarkable, huh? I think the user community should get a promotion in recognition of our quantum leap in tomcat problem-solving skills! (Or perhaps everyone's just busy reading the manual?) - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Should validationQuery commit ?
On Fri, 2014-04-18 at 11:05 +0200, Franck Routier wrote: property name=validationQuery value=select 1 from rtelre/ Is is possible the select just needs to be terminated with a semi-colon? - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Please help diagnosing a random production Tomcat 7.0.53 Internal Server Error!
On Tue, 2014-04-15 at 17:12 -0400, Ian Long wrote: Ian Long wrote: I have tomcat configured to log via log4j, and then there is my application log, those are the only two logs, and neither contains anything. They're empty? Are you sure the logs are writable? How much free space is available on the file system where the logs reside? It’s not about believing, I have monitoring software that gives me precise information about memory use and there is no indication of a problem there. Thanks, Ian - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: filter question
On Thu, 2014-03-13 at 17:51 -0700, Brendan Miller wrote:
I have a filter with doFilter method like this:
public void doFilter(ServletRequest request,
ServletResponse response,
FilterChain chain)
throws IOException, ServletException {
HttpServletRequest req = (HttpServletRequest) request;
HttpServletResponse resp = (HttpServletResponse) response;
resp.setHeader(Cache-Control,
must-revalidate, max-age=0, post-check=0,
pre-check=0);
chain.doFilter(request, response);
}
This sets the header. However, if I set the header *after* chain.doFilter,
the header is not set. Why is this?
A similar question came up last week. Basically, it's because the
response has already been committed. A response becomes committed once
the 1st byte is sent back to the client -- e.g. if flush() is called or
the buffer becomes full while more response data is written.
You can search the archive for how it was resolved. Don't recall the
subject line. Sorry.
-- Tim
public void doFilter(ServletRequest request,
ServletResponse response,
FilterChain chain)
throws IOException, ServletException {
HttpServletRequest req = (HttpServletRequest) request;
HttpServletResponse resp = (HttpServletResponse) response;
chain.doFilter(request, response);
resp.setHeader(Cache-Control,
must-revalidate, max-age=0, post-check=0,
pre-check=0);
}
Programmatically I can see the header is null.
Has the content already been sent to the web browser after chain.doFilter?
If so, is there a way to delay sending data to the browser? I need to
inspect the status code in the response before setting my header (to
prevent 404's from being cached).
Thanks,
Brendan Miller
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
RE: filter question
On Thu, 2014-03-13 at 21:20 -0400, Martin Gainty wrote:
you'll need to pass your modified response to service method of
servlet which is *in* the filterChain
Utter nonsense.
ApplicationFilterChain::internalDoFilter(ServletRequest request,
ServletResponse response)
throws IOException, ServletException
{
servlet.service(request, response);
...
}
Martin
Date: Thu, 13 Mar 2014 17:51:59 -0700
Subject: filter question
From: catph...@catphive.net
To: users@tomcat.apache.org
I have a filter with doFilter method like this:
public void doFilter(ServletRequest request,
ServletResponse response,
FilterChain chain)
throws IOException, ServletException {
HttpServletRequest req = (HttpServletRequest) request;
HttpServletResponse resp = (HttpServletResponse) response;
resp.setHeader(Cache-Control,
must-revalidate, max-age=0, post-check=0,
pre-check=0);
chain.doFilter(request, response);
}
This sets the header. However, if I set the header *after* chain.doFilter,
the header is not set. Why is this?
public void doFilter(ServletRequest request,
ServletResponse response,
FilterChain chain)
throws IOException, ServletException {
HttpServletRequest req = (HttpServletRequest) request;
HttpServletResponse resp = (HttpServletResponse) response;
chain.doFilter(request, response);
resp.setHeader(Cache-Control,
must-revalidate, max-age=0, post-check=0,
pre-check=0);
}
Programmatically I can see the header is null.
Has the content already been sent to the web browser after chain.doFilter?
If so, is there a way to delay sending data to the browser? I need to
inspect the status code in the response before setting my header (to
prevent 404's from being cached).
Thanks,
Brendan Miller
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
Re: filter question
On Thu, 2014-03-13 at 19:11 -0700, Brendan Miller wrote:
I'm confused by what you mean by that. Are you saying I need to somehow
rewrite the class of the FilterChain object passed to my filter?
I think you're somewhat new to the list. Mr. Gainty is notorious here
and seems to pride himself on concocting the most off-the-wall red
herrings imaginable. I'll admit some of them are truly breathtaking. I
guess it's some sort of quest to build a global reputation as the
world's most incompetent developer. I dunno.
To be clear, I'm trying to modify the response that comes back from the
service. I have a header that I may or may not need to set based on the
response code. I believe the service sets the response code?
That's true. Unfortunately, by the time your filter gets control again,
the response will very likely be committed thus shutting out any
possibility of setting any headers.
Doing this in a Filter, while intuitively sensible, will always be a
highly fragile solution. You would have to set a buffer large enough to
accommodate the largest conceivable response size. Once a response is
committed you can't set the response code or headers -- they're already
on their way to the client. There's no getting around this.
I think the best approach is to conditionally set the header before any
response is generated. If your application has an MVC structure you
could do this just before the Controller invokes the View. You should
know the response code by then.
HTH
-- Tim
On Thu, Mar 13, 2014 at 6:20 PM, Martin Gainty mgai...@hotmail.com wrote:
you'll need to pass your modified response to service method of servlet
which is *in* the filterChain
ApplicationFilterChain::internalDoFilter(ServletRequest request,
ServletResponse response)
throws IOException, ServletException
{
servlet.service(request, response);
...
}
Martin
Date: Thu, 13 Mar 2014 17:51:59 -0700
Subject: filter question
From: catph...@catphive.net
To: users@tomcat.apache.org
I have a filter with doFilter method like this:
public void doFilter(ServletRequest request,
ServletResponse response,
FilterChain chain)
throws IOException, ServletException {
HttpServletRequest req = (HttpServletRequest) request;
HttpServletResponse resp = (HttpServletResponse) response;
resp.setHeader(Cache-Control,
must-revalidate, max-age=0, post-check=0,
pre-check=0);
chain.doFilter(request, response);
}
This sets the header. However, if I set the header *after*
chain.doFilter,
the header is not set. Why is this?
public void doFilter(ServletRequest request,
ServletResponse response,
FilterChain chain)
throws IOException, ServletException {
HttpServletRequest req = (HttpServletRequest) request;
HttpServletResponse resp = (HttpServletResponse) response;
chain.doFilter(request, response);
resp.setHeader(Cache-Control,
must-revalidate, max-age=0, post-check=0,
pre-check=0);
}
Programmatically I can see the header is null.
Has the content already been sent to the web browser after
chain.doFilter?
If so, is there a way to delay sending data to the browser? I need to
inspect the status code in the response before setting my header (to
prevent 404's from being cached).
Thanks,
Brendan Miller
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
Re: filter question
On Thu, 2014-03-13 at 23:16 -0400, Tim Watts wrote:
On Thu, 2014-03-13 at 19:11 -0700, Brendan Miller wrote:
To be clear, I'm trying to modify the response that comes back from the
service. I have a header that I may or may not need to set based on the
response code. I believe the service sets the response code?
That's true.
Actually, let me correct myself: that may not be strictly true. I don't
think there's anything in the spec that says the response code will be
set when service() returns UNLESS the request results in an error.
-- Tim.
Unfortunately, by the time your filter gets control again,
the response will very likely be committed thus shutting out any
possibility of setting any headers.
Doing this in a Filter, while intuitively sensible, will always be a
highly fragile solution. You would have to set a buffer large enough to
accommodate the largest conceivable response size. Once a response is
committed you can't set the response code or headers -- they're already
on their way to the client. There's no getting around this.
I think the best approach is to conditionally set the header before any
response is generated. If your application has an MVC structure you
could do this just before the Controller invokes the View. You should
know the response code by then.
HTH
-- Tim
On Thu, Mar 13, 2014 at 6:20 PM, Martin Gainty mgai...@hotmail.com wrote:
you'll need to pass your modified response to service method of servlet
which is *in* the filterChain
ApplicationFilterChain::internalDoFilter(ServletRequest request,
ServletResponse response)
throws IOException, ServletException
{
servlet.service(request, response);
...
}
Martin
Date: Thu, 13 Mar 2014 17:51:59 -0700
Subject: filter question
From: catph...@catphive.net
To: users@tomcat.apache.org
I have a filter with doFilter method like this:
public void doFilter(ServletRequest request,
ServletResponse response,
FilterChain chain)
throws IOException, ServletException {
HttpServletRequest req = (HttpServletRequest) request;
HttpServletResponse resp = (HttpServletResponse) response;
resp.setHeader(Cache-Control,
must-revalidate, max-age=0, post-check=0,
pre-check=0);
chain.doFilter(request, response);
}
This sets the header. However, if I set the header *after*
chain.doFilter,
the header is not set. Why is this?
public void doFilter(ServletRequest request,
ServletResponse response,
FilterChain chain)
throws IOException, ServletException {
HttpServletRequest req = (HttpServletRequest) request;
HttpServletResponse resp = (HttpServletResponse) response;
chain.doFilter(request, response);
resp.setHeader(Cache-Control,
must-revalidate, max-age=0, post-check=0,
pre-check=0);
}
Programmatically I can see the header is null.
Has the content already been sent to the web browser after
chain.doFilter?
If so, is there a way to delay sending data to the browser? I need to
inspect the status code in the response before setting my header (to
prevent 404's from being cached).
Thanks,
Brendan Miller
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Http Status 404
On Thu, 2014-02-06 at 10:32 -0500, Neven Cvetkovic wrote: On Feb 6, 2014 4:21 PM, Shivam Mishra shmishra...@gmail.com wrote: My tomcat and its example application is running but I got an error with my own application .My port number is 8080 .I compile my servlet programme in jdk 7 .and my web.xml file is below ?xml version=1.0 encoding=ISO-8859-1? !DOCTYPE web-app PUBLIC -//Sun Microsystems, Inc.//DTD Web Application 2.2//EN http://java.sun.com/j2ee/dtds/web-app_2.2.dtd; web-app servlet servlet-nameMyServlet/servlet-name servlet-classTestServlet/servlet-class /servlet servlet-mapping servlet-nameMyServlet/servlet-name url-pattern/TestServlet/url-pattern /servlet-mapping /web-app My servlet class name is TestServlet Ok, great. Now tell us about directory structure of your application, what files, where did you put the servlet class file, etc. Also what do logs say once you deploy your app? And just as importantly: What URL are you using to access your app? - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Http Status 404
:09.177 INFO [main] org.apache.catalina.startup.Catalina.start Server startup in 1504 ms On Thu, Feb 6, 2014 at 9:12 PM, Tim Watts t...@cliftonfarm.org wrote: On Thu, 2014-02-06 at 10:32 -0500, Neven Cvetkovic wrote: On Feb 6, 2014 4:21 PM, Shivam Mishra shmishra...@gmail.com wrote: My tomcat and its example application is running but I got an error with my own application .My port number is 8080 .I compile my servlet programme in jdk 7 .and my web.xml file is below ?xml version=1.0 encoding=ISO-8859-1? !DOCTYPE web-app PUBLIC -//Sun Microsystems, Inc.//DTD Web Application 2.2//EN http://java.sun.com/j2ee/dtds/web-app_2.2.dtd; web-app servlet servlet-nameMyServlet/servlet-name servlet-classTestServlet/servlet-class /servlet servlet-mapping servlet-nameMyServlet/servlet-name url-pattern/TestServlet/url-pattern /servlet-mapping /web-app My servlet class name is TestServlet Ok, great. Now tell us about directory structure of your application, what files, where did you put the servlet class file, etc. Also what do logs say once you deploy your app? And just as importantly: What URL are you using to access your app? - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Http Status 404
On Thu, 2014-02-06 at 23:07 +0530, Shivam Mishra wrote: Now my browser is showing this error as below: Exception report *message* *Error instantiating servlet class TestServlet* *description* *The server encountered an internal error that prevented it from fulfilling this request.* *exception* javax.servlet.ServletException: Error instantiating servlet class TestServlet org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:503) org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:74) org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:610) org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:509) org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1015) org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:651) org.apache.coyote.http11.Http11NioProtocol$Http11ConnectionHandler.process(Http11NioProtocol.java:222) org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1575) org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.run(NioEndpoint.java:1533) java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) java.lang.Thread.run(Unknown Source) *root cause* java.lang.IllegalAccessException: Class org.apache.catalina.core.DefaultInstanceManager can not access a member of class TestServlet with modifiers You probably didn't declare it as 'public class ...'. If that's not the case perhaps you could post the source. (Just a gentle pre-emptive reminder: This list is run by volunteers to help folks with their Tomcat problems, not to teach basic Java or Servlet coding.) sun.reflect.Reflection.ensureMemberAccess(Unknown Source) java.lang.Class.newInstance(Unknown Source) org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:503) org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:74) org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:610) org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:509) org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1015) org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:651) org.apache.coyote.http11.Http11NioProtocol$Http11ConnectionHandler.process(Http11NioProtocol.java:222) org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1575) org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.run(NioEndpoint.java:1533) java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) java.lang.Thread.run(Unknown Source) On Thu, Feb 6, 2014 at 11:04 PM, Shivam Mishra shmishra...@gmail.comwrote: My url is http://localhost:8080/name/TestServlet On Thu, Feb 6, 2014 at 10:55 PM, Tim Watts t...@cliftonfarm.org wrote: On Thu, 2014-02-06 at 21:32 +0530, Shivam Mishra wrote: My directory structure is C:\Program Files\Apache Software Foundation\Tomcat 8.0\webapps\name\WEB-INF\Classes for .class file of Servlet That last part should be ...\WEB-INF\classes (lower case 'c'). If that doesn't fix it then, again I ask, what URL are you using to access the app? Description of my logs is below 06-Feb-2014 14:50:22.684 INFO [Thread-9] org.apache.coyote.AbstractProtocol.pause Pausing ProtocolHandler [http-nio-8080] 06-Feb-2014 14:50:22.742 INFO [Thread-9] org.apache.coyote.AbstractProtocol.pause Pausing ProtocolHandler [ajp-nio-8009] 06-Feb-2014 14:50:22.793 INFO [Thread-9] org.apache.catalina.core.StandardService.stopInternal Stopping service Catalina 06-Feb-2014 14:50:22.912 INFO [Thread-9] org.apache.coyote.AbstractProtocol.stop Stopping ProtocolHandler [http-nio-8080] 06-Feb-2014 14:50:22.916 INFO [Thread-9] org.apache.coyote.AbstractProtocol.stop Stopping ProtocolHandler [ajp-nio-8009] 2014-02-06 14:50:33 Commons Daemon procrun stderr initialized 06-Feb-2014 14:50:34.636 INFO [main] org.apache.catalina.core.AprLifecycleListener.init The APR based Apache Tomcat Native library which allows optimal performance in production environments was not found on the java.library.path: C:\Program Files\Apache Software Foundation\Tomcat 8.0\bin;C:\WINDOWS\Sun\Java\bin;C:\WINDOWS\system32;C:\WINDOWS;C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\Driver;;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32
Re: On one particular box, Tomcat 7.0.25 runs just fine, but 7.0.47 crashes on takeoff -- some authority problem
On Mon, 2013-12-09 at 11:00 -0800, James H. H. Lampert wrote: On 12/6/13 6:56 PM, CRPence (on the Midrange Java List) wrote: The T-AF audit entry should log the object to which there was insufficient authority, then the chmod can be requested against that object to grant the necessary authority bits. The T-AF audit entry shows (and I'm no longer bothering to change names to protect the innocent): 1 'A*N*N*STMFQP0ZSPWP WTADMIN ' 00051 '280199WTADMIN ' 00101 '000 ' 00151 ' ' 00201 ' ' 00251 ' nP8 ry ' . . . 00801 ' nP8 ry QASP011USENU Y' 00851 ' /wintouch/tomcat/bin/startup.sh ' Which would seem to indicate that it's the startup shell script itself that has the authority problem. So looking at the paths using the QShell ls command, I get: cd /wintouch/tomcat/bin $ ls -l startup.sh -rw-rw-rw- 1 WTADMIN 0 1961 Oct 18 13:19 startup.sh for the 7.0.47 version, which has the authority failure, and cd /wintouch/tomcat.bak/bin $ ls -l startup.sh -rw-rw-rw- 1 WINTOUCH 0 1961 Jun 15 2012 startup.sh for the 7.0.25, which looks exactly the same, except for the owner and the date, and yet it works. The bin directory shows: drwxrwsrwx 2 WTADMIN 0 32768 Oct 18 13:19 bin for 7.0.47 (fails), and drwxrwsrwx 2 WINTOUCH 0 32768 Jun 15 2012 bin for 7.0.25 (works) The tomcat (7.0.47) and tomcat.bak (7.0.25) directories show: drwxrwsrwx 9 WTADMIN 0 12288 Dec 6 14:21 tomcat drwxrwsrwx 9 WINTOUCH 0 12288 Jun 15 2012 tomcat.bak What about execute permissions on /wintouch. As Chris pointed out earlier, WTADMIN must have execute permission to the top of the tree. You seem to have investigated every corner except that one. (I'm no AS400 expert but there doesn't seem to be on on the Tomcat list other than you.) Finally, for comparison, here are the corresponding results on our own box, where there are no problems at all: drwxrwsrwx 9 RABBIT0 8192 Nov 29 16:48 tomcat drwxrwsrwx 2 RABBIT 0 28672 Oct 18 13:19 bin -rw-rw-rw- 1 RABBIT 0 1961 Oct 18 13:19 startup.sh and drwxrwsrwx 9 RABBIT0 24576 Nov 5 17:14 tomcat.bak drwxrwsrwx 2 RABBIT 0 28672 Jun 18 2012 bin -rw-rw-rw- 1 RABBIT 0 1961 Feb 14 2012 startup.sh I don't see any difference - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org signature.asc Description: This is a digitally signed message part
Re: [OT] [Fwd: TomEE Professional Support]
On Wed, 2013-11-13 at 14:56 +0100, Leon Rosenberg wrote: I got it too. I think its easier to delete and forget it, as to debate about it. ;-) When an Apache project founder[1] starts spamming the Apache community, there can and ought to be consequences. ___ [1] At least that's his claim in the email. Their website doesn't post any PMC member list that I could find. Doesn't Apache have some minimum standards for this? He seems to be a project committer, but hasn't contributed any code in about a year. regards Leon On Wed, Nov 13, 2013 at 2:15 PM, André Warnier a...@ice-sa.com wrote: Hi. I got the following email in my personal email inbox. Isn't there some rule, or at least some matter of self-control, in not using email addresses collected on this list for commercial promotion ? Original Message From: - Wed Nov 13 13:48:37 2013 X-Mozilla-Status: 0001 X-Mozilla-Status2: Return-Path: bounce-mc.us3_22715643.227889-aw=ice-sa.com@mail173. us4.mcsv.net X-Original-To: a...@ice-sa.com Delivered-To: andre.warn...@ice-sa.com Received-SPF: Pass (sender SPF authorized) identity=mailfrom; client-ip=205.201.128.173; helo=mail173.us4.mcsv.net; envelope-from=bounce-mc.us3_22715643.227889-aw=ice-sa.com@ mail173.us4.mcsv.net; receiver=a...@ice-sa.com Received: from mail173.us4.mcsv.net (mail173.us4.mcsv.net[205.201.128.173]) by tor.combios.es (Postfix) with ESMTP id DCFAB3C0AD2 for a...@ice-sa.com; Wed, 13 Nov 2013 13:48:25 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=k1; d= mail173.us4.mcsv.net; h=Subject:From:Reply-To:To:Date:Message-ID:List- Unsubscribe:Sender:Content-Type:MIME-Version; i=gurkanerdogdu=3Dyahoo.com@ mail173.us4.mcsv.net; bh=Mxp5nGTBAhJ4tiDlAEgNxpJYWwM=; b=Ocyx3ymgzmK11vA3/+524g885jWe0hlVlLQwFLGw052EepxX/u3JqrGTIZv6+afps8yWKhHqpMRz DR1JqSg9JPIfmn6xVzPvr5X/5Ve5g78ZKmZm5BmxmCRNyqB4fIc5+iLuIas31KKRImjm5cpEh8P5 RAauIo5RquVVHcBgVbU= DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=k1; d= mail173.us4.mcsv.net; b=BmLvRK7R5zl2/VRFdLZ09BJy50nOQFBXLcUoHLPQqfO o7DkgQbmi8Ug7bwNHNpotAwBLuXBIp2sW w8nzt6XeIcHys59itcvcLBKCt6zoR1 vBv1RFw1OMSwlwuilV8u0zcNtNcav+LdWoW8zAnksyWOWL /knOPWkSMr9PbtPhtB4=; Received: from (127.0.0.1) by mail173.us4.mcsv.net id hgdqg0174lg1 for a...@ice-sa.com; Wed, 13 Nov 2013 12:47:58 + (envelope-from bounce-mc.us3_22715643.227889-aw=ice-sa@mail173.us4.mcsv.net) Subject: TomEE Professional Support From: Apache TomEE Support gurkanerdo...@yahoo.com Reply-To: Apache TomEE Support gurkanerdo...@yahoo.com To: a...@ice-sa.com Date: Wed, 13 Nov 2013 12:47:58 + Message-ID: 9781cf0ccdac7604f1f7fd52ea052bfdbb3.20131113124746@mail173. us4.mcsv.net X-Mailer: MailChimp Mailer - **CID105b909b64a052bfdbb3** X-Campaign: mailchimp9781cf0ccdac7604f1f7fd52e.105b909b64 X-campaignid: mailchimp9781cf0ccdac7604f1f7fd52e.105b909b64 X-Report-Abuse: Please report abuse for this campaign here: http://www.mailchimp.com/abuse/abuse.phtml?u=9781cf0ccdac7604f1f7fd52eid= 105b909b64e=a052bfdbb3 X-MC-User: 9781cf0ccdac7604f1f7fd52e x-accounttype: ff List-Unsubscribe: mailto:unsubscribe-9781cf0ccdac7604f1f7fd52e- 105b909b64-a052bfd...@mailin1.us2.mcsv.net?subject=unsubscribe, http://blogspot.us3.list-manage.com/unsubscribe?u= 9781cf0ccdac7604f1f7fd52eid=b75a8245a1e=a052bfdbb3c=105b909b64 Sender: Apache TomEE Support gurkanerdogdu=yahoo.com@ mail173.us4.mcsv.net x-mcda: FALSE Content-Type: multipart/alternative; boundary=_--=_MCPart_ 1458955636 MIME-Version: 1.0 20% off TomEE Support from Java EE Guru Gurkan Erdogdu. He really knows Apache Tomcat, TomEE and related Java EE projects in source code level! Email not displaying correctly? View it in your browser (http://us3.campaign-archive1.com/?u= 9781cf0ccdac7604f1f7fd52eid=105b909b64e=a052bfdbb3) . ** Support for Apache TomEE (http://blogspot.us3.list- manage1.com/track/click?u=9781cf0ccdac7604f1f7fd52eid= bceee0c9bae=a052bfdbb3) Funs BUY NOW (http://blogspot.us3.list-manage.com/track/click?u= 9781cf0ccdac7604f1f7fd52eid=6a24f4ee0ee=a052bfdbb3) ** TomEE Support : 20% Off ** professional TomEE Support with NO HIDDEN COST! divimg src=http://blogspot.us3.list-manage.com/qr/coupon?e= a052bfdbb3data=eyJjaWQiOiIxMDViOTA5YjY0IiwidW lkIjoiOTc4MWNmMGNjZGFjNzYwNGYxZjdmZDUyZSIsImNvZGUiOiIzYzE0OT g3NDIxIiwidGV4dCI6IjIwJSBvZmYgMSBUb21FRSBTdXBwb3J0IiwidGlkIj oiOTcxMDJlZDgyNiIsInVzZXMiOjF9s=2 alt=20% off 1 TomEE Support title=20% off 1 TomEE Supporta href=http://9781cf0ccdac7604f1f7fd52e. 105b909b64.list-manage.com/3c14987421 alt= style=display:none;margin- left:-px;/a/div
Re: [OT] [Fwd: TomEE Professional Support]
On Wed, 2013-11-13 at 06:53 -0800, Gurkan Erdogdu wrote:
Hello all,
When an Apache project founder[1] starts spamming the Apache community,
Sorry but how could you say spamming the Apache Community? without
knowing me and how I have been contributing to the Apache community
and projects?
spam: n. Unsolicited email sent in bulk for commercial purposes.
That I don't know you only makes it more spammy.
there can and ought to be consequences.
What do you mean?
Doesn't Apache have some minimu standards for this? He seems to
be a project committer, but hasn't contributed any code in about a
year.
I am PMC Chair of OpenWebBeans project. I think you don't know the
roles of PMC Chair, please learn from here before talking.
You mean that role comes with spamming privileges? News to me.
Lastly,
I get everyday huge amount of such marketing emails from all big known
software vendors. I am sure you also receive such emails. If I am not
interested, I simply unsubscribe from the list, this is not a really
big problem to discuss!
If you received such email from my email address, and not interested
please unsubscribe from the list and you will never get a such email
again.
'Everyone else does it' is a pretty shaky ethical foundation. Yes, it's
easy enough to unsubscribe. But before I do that I need to check around
and make sure I can trust the link so I'm not just feeding a spammer. I
get enough 'opt-out' crap already without having trusted sources like
ASF hopping on the bandwagon. If this is going to be the new norm for
ASF I may have to rethink my list subscriptions.
Dude, you're not helping your mission here. Take your wrist slap and
find a better channel to drum up business.
Best
Gurkan
On Wednesday, November 13, 2013 4:24 PM, Tim Watts t...@cliftonfarm.org
wrote:
On Wed, 2013-11-13 at 14:56 +0100, Leon Rosenberg wrote:
I got it too. I think its easier to delete and forget it, as to debate
about it. ;-)
When an Apache project founder[1] starts spamming the Apache community,
there can and ought to be consequences.
___
[1] At least that's his claim in the email. Their website doesn't post
any PMC member list that I could find. Doesn't Apache have some minimum
standards for this? He seems to be a project committer, but hasn't
contributed any code in about a year.
regards
Leon
On Wed, Nov 13, 2013 at 2:15 PM, André
Warnier a...@ice-sa.com wrote:
Hi.
I got the following email in my personal email inbox.
Isn't there some rule, or at least some matter of self-control, in not
using email addresses collected on this list for commercial promotion ?
Original Message
From: - Wed Nov 13 13:48:37 2013
X-Mozilla-Status: 0001
X-Mozilla-Status2:
Return-Path: bounce-mc.us3_22715643.227889-aw=ice-sa.com@mail173.
us4.mcsv.net
X-Original-To: a...@ice-sa.com
Delivered-To: andre.warn...@ice-sa.com
Received-SPF: Pass (sender SPF authorized) identity=mailfrom;
client-ip=205.201.128.173; helo=mail173.us4.mcsv.net;
envelope-from=bounce-mc.us3_22715643.227889-aw=ice-sa.com@
mail173.us4.mcsv.net; receiver=a...@ice-sa.com
Received: from mail173.us4.mcsv.net
(mail173.us4.mcsv.net[205.201.128.173])by
tor.combios.es (Postfix) with ESMTP id DCFAB3C0AD2 for
a...@ice-sa.com;
Wed, 13 Nov 2013 13:48:25 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=k1; d=
mail173.us4.mcsv.net; h=Subject:From:Reply-To:To:Date:Message-ID:List-
Unsubscribe:Sender:Content-Type:MIME-Version; i=gurkanerdogdu=3Dyahoo.com@
mail173.us4.mcsv.net; bh=Mxp5nGTBAhJ4tiDlAEgNxpJYWwM=;
b=Ocyx3ymgzmK11vA3/+524g885jWe0hlVlLQwFLGw052EepxX/u3JqrGTIZv6+afps8yWKhHqpMRz
DR1JqSg9JPIfmn6xVzPvr5X/5Ve5g78ZKmZm5BmxmCRNyqB4fIc5+iLuIas31KKRImjm5cpEh8P5
RAauIo5RquVVHcBgVbU=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=k1; d=
mail173.us4.mcsv.net; b=BmLvRK7R5zl2/VRFdLZ09BJy50nOQFBXLcUoHLPQqfO
o7DkgQbmi8Ug7bwNHNpotAwBLuXBIp2sW w8nzt6XeIcHys59itcvcLBKCt6zoR1
vBv1RFw1OMSwlwuilV8u0zcNtNcav+LdWoW8zAnksyWOWL /knOPWkSMr9PbtPhtB4=;
Received: from (127.0.0.1) by mail173.us4.mcsv.net id hgdqg0174lg1 for
a...@ice-sa.com; Wed, 13 Nov 2013 12:47:58 + (envelope-from
bounce-mc.us3_22715643.227889-aw=ice-sa@mail173.us4.mcsv.net)
Subject: TomEE Professional Support
From: Apache TomEE Support gurkanerdo...@yahoo.com
Reply-To: Apache TomEE Support gurkanerdo...@yahoo.com
To: a...@ice-sa.com
Date: Wed, 13 Nov 2013 12:47:58 +
Message-ID: 9781cf0ccdac7604f1f7fd52ea052bfdbb3.20131113124746@mail173.
us4.mcsv.net
X-Mailer: MailChimp Mailer - **CID105b909b64a052bfdbb3**
X-Campaign: mailchimp9781cf0ccdac7604f1f7fd52e.105b909b64
X-campaignid: mailchimp9781cf0ccdac7604f1f7fd52e.105b909b64
X-Report-Abuse: Please report abuse for this
campaign here:
http://www.mailchimp.com/abuse/abuse.phtml?u
Re: Remote jconsole access (again)
On Fri, 2013-07-26 at 12:57 -0400, Christopher Schultz wrote: All, I have the JmxRemoteLifecycleListener enabled with the following configuration: System properties (confirmed effective): -Dcom.sun.management.jmxremote.password.file=app/conf/jmxremote.password -Dcom.sun.management.jmxremote.access.file=app/conf/jmxremote.access -Dcom.sun.management.jmxremote.ssl=false Also these files: $ cat app/conf/jmxremote.password admin letmein $ cat app/conf/jmxremote.access admin readwrite ...and server.xml: Listener className=org.apache.catalina.mbeans.JmxRemoteLifecycleListener rmiRegistryPortPlatform=18215 rmiServerPortPlatform=18217 useLocalPorts=true / I can confirm that my (remote) Java process is listening on these ports: $ netstat -plan | grep 1821 tcp6 0 0 :::18215:::* LISTEN 24991/java tcp6 0 0 :::18217:::* LISTEN 24991/java I can also confirm that my local machine is forwarding these ports via SSH: $ netstat -an | grep 1821 tcp4 0 0 127.0.0.1.18217*.* LISTEN tcp6 0 0 ::1.18217 *.* LISTEN tcp4 0 0 127.0.0.1.18215*.* LISTEN tcp6 0 0 ::1.18215 *.* LISTEN Presumably sshd is the listener here. Any chance the remote only accepts tcp6 connections and your local is trying to connect via the tcp4 address? I'm pretty sure the jvm default now is to prefer IPv6 but maybe you've got some funky setting somewhere. Is there any message conveying *how* it failed, e.g. connection refused, invalid handshake etc? Could there be missing classes that it's trying to resolve via rmi? No answers here but hopefully some useful questions. -tim When attempting to connect via jconsole (as per Tomcat documentation[1]): $ jconsole service:jmx:rmi://localhost:18217/jndi/rmi://localhost:18215/jmxrmi This command doesn't ask for username and password, and fails. So I use jconsole's GUI interface to connect to a Remote Process and enter these values: Remote Process: service:jmx:rmi://localhost:18217/jndi/rmi://localhost:18215/jmxrmi Username: admin Password: letmein jconsole tells me that it can't connect via SSL and I say okay, connect insecurely and the connection fails immediately. Am I missing a step somewhere? Am I doing it wrong? Running Oraacle Java 1.7.0_25-b15 on both the client and the server. Thanks! -chris [1] http://tomcat.apache.org/tomcat-7.0-doc/config/listeners.html#JMX_Remote_Lifecycle_Listener_-_org.apache.catalina.mbeans.JmxRemoteLifecycleListener - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org signature.asc Description: This is a digitally signed message part
Re: JSP in Static Resources
On Sun, 2013-07-14 at 23:28 +0200, André Warnier wrote: Alireza Fattahi wrote: Well, If we want to follow up that post , then we should belive that: Tomcat is an inclusive church, and you can believe what you want. Konstantin is one of the Tomcat developers however, so you should probably consider what he wrote and try to understand it correctly. Setting the mime type is not working for css That is not what he wrote. Setting the MIME type in (tomcat)/conf/web.xml /does/ work, for the default servlet which is used by default in all webapps to serve static documents. But in the case of the logic which you want to implement, the CSS is not a static document, so it is not relevant to your specific case. He gave you the proper syntax for Tomcat 7, because previously you did not mention the Tomcat version that you were using. For Tomcat 6, that syntax doesn't work. So we should use other ways to solve it. Yes. The first option would be to use Tomcat 7 instead of Tomcat 6. Then the syntax shown by Konstantin would work. Otherwise, he gave you one hint of how to try to solve it. Another possibility would be to wrap your webapp with a servlet filter, and set the content-type header there, before the content is written to the response object. Another possibility would be to re-think your logic, and leave you CSS files be static documents, and just pick the one you need to include. That you want or don't want to use a certain logic is your choice; but if you pick a logic which is difficult to implement in the version of the software that you are using, then the problem to implement it is ultimately yours. Another drawback to generating the CSS files dynamically is that you'll have to do extra work to make them cacheable. But when served as static resources, the default servlet does a good job of this for you. If you don't take steps to make them cacheable, they'll be fetched every time on every page adding extra load on your server and the network. Is that true?! ~Regards, ~~Alireza Fattahi From: André Warnier a...@ice-sa.com To: Tomcat Users List users@tomcat.apache.org Sent: Sunday, 14 July 2013, 12:00 Subject: Re: JSP in Static Resources Alireza Fattahi wrote: Guys please concentrate on the main issue !! I believe that the main issue was already answered thoroughly by Konstantin earlier. Did you not read it ? I ask again: When you set jsp servlet to process the css files by adding: servlet-mapping servlet-namejsp/servlet-name url-pattern*.css/url-pattern /servlet-mapping The tomcat does not set the CSS file extension mime type to text/css. Although below line is set in localhost-config/web.xml mime-mapping extensioncss/extension mime-typetext/css/mime-type /mime-mapping When you manually set the content mime type %@page contentType=text/css % every thing will work fine ~Regards, ~~Alireza Fattahi - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org signature.asc Description: This is a digitally signed message part
Re: JSP in Static Resources
On Sun, 2013-07-14 at 16:27 -0700, Hassan Schroeder wrote: On Sun, Jul 14, 2013 at 3:53 PM, Tim Watts t...@cliftonfarm.org wrote: If you don't take steps to make them cacheable, they'll be fetched every time on every page adding extra load on your server and the network. Which would be *the whole point* of having dynamically generated style files, eh? :-) Well yes, but I think that misses the point. The OP needs to deliver exactly 1 of 2 CSS's to the user. And I would imagine that in the vast majority of cases each user wants the same one each time. So giving up cacheability adds no value to the system. signature.asc Description: This is a digitally signed message part
Re: [OT] WEB-INF
On Wed, 2013-07-10 at 15:08 -0700, Leo Donahue - RDSA IT wrote: When did it start that developers decided to place jsps in the WEB-INF directory? Was that intended from the beginning, or was it stumbled upon? My guess is that it was a side effect of MVC adoption -- making views accessible only via a controller. Leo signature.asc Description: This is a digitally signed message part
Re: Error deploying web application
On Tue, 2013-06-25 at 10:01 -0400, Nickalaus A Painter wrote: Jun 25, 2013 9:49:53 AM org.apache.catalina.startup.HostConfig deployDescriptor SEVERE: Error deploying configuration descriptor /usr/local/tomcat/apache-tomcat-7.0.37/conf/Catalina/localhost/MyApp.xml java.lang.NullPointerException at snip/ So does this mean that I have to reconfigure MyApp.xml in that directory? Shouldn't Tomcat look in the directory of MyApp once it explodes the .war file? Also, for completeness, here is MyApp.xml: Relative to the root of your .war file, Tomcat will look for META-INF/context.xml. It copies this to .../Catalina/localhost/MyApp.xml. You shouldn't have a MyApp.xml anywhere in your .war file. HTH -Tim. ?xml version=1.0 encoding=UTF-8? !DOCTYPE Context application xmlns=http://java.sun.com/xml/ns/j2ee; xmlns:xsi=http://www.w3.org/2001/XMLSchema-instance; xsi:schemaLocation=http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd http://java.sun.com/xml/ns/j2ee/web-app_2_5.xsd; version=2.5 !-- Only one of these Resource name blocks may be uncommented at a single time. Altering the commented value will force the system to use that back-end JDBC driver, and thus impacts which database instance you will connect to. -- Context path=/MyApp docBase=MyApp debug=5 reloadable=true crossContext=true Resource name=jdbc/dbconn auth=Container type=javax.sql.DataSource driverClassName=com.mysql.jdbc.Driver url=jdbc:mysql://localhost:3306/mydatabase username=root password=root maxActive=50 maxIdle=15 maxWait=-1/ /Context /application Do you need anything else? Thank you very much for your time! Regards, Nick Nickalaus A. Painter IBM Smarter Water Co-op Developer Clarkson University 2014 B.S. Mathematics and Computer Science +18454353546 From: Mark Thomas ma...@apache.org To: Tomcat Users List users@tomcat.apache.org, Date: 06/25/2013 09:52 AM Subject:Re: Error deploying web application On 25/06/2013 14:43, Nickalaus A Painter wrote: While attempting to deploy my web application to our production server I encountered an issue, and after looking in the catalina.out log file, the following shows up: snip/ Caused by: org.apache.catalina.LifecycleException: Failed to process either the global, per-host or context-specific context.xml file therefore the [/MyApp] Context cannot be started. at org.apache.catalina.startup.FailedContext.startInternal(FailedContext.java:155) at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150) ... 11 more Before this message, a message will have been logged along the lines of: SEVERE: ... Error deploying configuration descriptor file name here You need to find that log message. It will tell you which context.xml file could not be processed and why. My guess would be malformed XML. Mark - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org signature.asc Description: This is a digitally signed message part
Re: [tomcat 6.0.35]- propert loadin
On Sun, 2013-02-10 at 18:51 +0800, vicky wrote:
Hi All,
My application need a resource/properties file to exist in the
CLASSPATH, for this i placed my resource file in CATALINA_BASE/bin
folder it was working fine.
But since yesterday my application reporting the error that properties
file doesnt exist in classpath/path
In order to fix then i created the lib folder in my CATALINA_BASE
placed my properties/resource file over there, which eventually
fixed my application CLASSPATH issue.
But the thing which makes me wonder that how my application was able
to access the properties file earlier when i placed it
CATALINA_BASE/bin location
what makes it to stop now.
Kindly suggest what all can be the scenarios/prossible use case for
this,
TOmcat version - 6.0.35
Thanks
The only reasonable explanation is that you angered the Supreme Tomcat
God by putting your resource in {CATALINA_BASE}/bin. Being indisposed
to suffer fools for long, she removed it and made you do penance by
putting it in a Sanctioned location such as {CATALINA_BASE}/lib. Be
Glad O Sister! The Tomcat God is Merciful and Smiles down upon you!
signature.asc
Description: This is a digitally signed message part
Re: unwanted tcp6 protocol in tribes listener socket;
On Mon, 2013-02-04 at 14:39 +1300, Vince Stewart wrote:
Using Tomcat 7.0.35 embedded in Java standalone application. Java SE 1.7.0.
Ubuntu 12.04
Hi All,
I have an experimental class below. The aim is just to open a listening
port on port 4000 in the localhost address.
When this has run, the address for the listener is 127.0.0.1 in other
words an IPv4 address.
However the SocksSocketImpl object representing the real socket continues
to display the* useV4* property as *false*
and my Ubuntu system displays the listening socket as tpc6.
Listening only for tcp6? What does
netstat -atn | grep -P :4000\W
show?
Perhaps what you want is to set the java.net.preferIPv4Stack system
property in CATALINA_OPTS? Description here:
http://docs.oracle.com/javase/7/docs/technotes/guides/net/properties.html
But why would you want that limitation?
I suspect there is some configuration issue somewhere and if anyone can
help with this, I would be most grateful.
I have also noted that the java.nio.channels.spi.SelectorProvider cannot
return a Provider from loadProviderFromProperty() or loadProviderAsService()
so therefore issues *provider =
sun.nio.ch.DefaultSelectorProvider.create()*resulting in a
ServerSocketChannel that is of type
*sun.nio.ch.ServerSocketChannelImpl*
and a ServerSocket of type *sun.nio.ch.ServerSocketAdapter*. I'm not sure
that these are intended and may be I need a system property named
java.nio.channels.spi.SelectorProvider to ensure some other
SelectorProvider and therefore different ServerSocketChannel and
ServerSocket types.
public class TribalAfiliations{
Channel myChannel;
private static class MyMemberListener implements MembershipListener{...}
private static class MyMessageListener implements ChannelListener{...}
TribalAfiliations() throws SocketException{
this.myChannel=new GroupChannel();
ChannelListener msgListener = new TribalAfiliations.MyMessageListener();
MembershipListener mbrListener = new TribalAfiliations.MyMemberListener();
myChannel.addMembershipListener(mbrListener);
myChannel.addChannelListener(msgListener);
try{
myChannel.start(Channel.MBR_TX_SEQ|Channel.MBR_RX_SEQ|Channel.SND_TX_SEQ|Channel.SND_RX_SEQ);
/// same problem, withmyChannel.start(Channel.DEFAULT);
}
catch(ChannelException e){
System.out.println(e.getMessage());
}
}
signature.asc
Description: This is a digitally signed message part
Re: unwanted tcp6 protocol in tribes listener socket;
On Mon, 2013-02-04 at 17:51 +1300, Vince Stewart wrote:
Hi Tim,
thanks so much for your reply
netstat -t -l yields that includes:
Active Internet connections (only servers)
Proto Recv-Q Send-QLocal Address Foreign
Address State
tcp6 0 0 myComputerName:4000
[::]:*LISTEN
netstat -atn | grep -P :4000\W yields (without any headings line)
tcp6 0 0 127.0.1.1:4000
:::* LISTEN
re But why would you want that limitation?
My first aim was to send a single message from home to my VPS or vice
versa. When I did not succeed I have been fishing for reasons and the first
thing that struck me was that Ubuntu was reporting tpc6 but NioReceiver
object clusterReceiver had a bind property of type Inet4Address and an
address of 2130706689 (127.0.0.1).
Possibly though, this is a normal IPv6 connection and I should treat it
accordingly. I'll give that ago tomorrow morning and keep CATALINA_OPTS in
mind as well.
Yes, I believe this is normal. Looks like your system is using
IPv4-mapped addresses which allows interoperability between IPv46
hosts without needing two IP stacks on the IPv6 host.
Many thanks for your help.
On Mon, Feb 4, 2013 at 4:06 PM, Tim Watts t...@cliftonfarm.org wrote:
On Mon, 2013-02-04 at 14:39 +1300, Vince Stewart wrote:
Using Tomcat 7.0.35 embedded in Java standalone application. Java SE
1.7.0.
Ubuntu 12.04
Hi All,
I have an experimental class below. The aim is just to open a listening
port on port 4000 in the localhost address.
When this has run, the address for the listener is 127.0.0.1 in other
words an IPv4 address.
However the SocksSocketImpl object representing the real socket continues
to display the* useV4* property as *false*
and my Ubuntu system displays the listening socket as tpc6.
Listening only for tcp6? What does
netstat -atn | grep -P :4000\W
show?
Perhaps what you want is to set the java.net.preferIPv4Stack system
property in CATALINA_OPTS? Description here:
http://docs.oracle.com/javase/7/docs/technotes/guides/net/properties.html
But why would you want that limitation?
I suspect there is some configuration issue somewhere and if anyone can
help with this, I would be most grateful.
I have also noted that the java.nio.channels.spi.SelectorProvider cannot
return a Provider from loadProviderFromProperty() or
loadProviderAsService()
so therefore issues *provider =
sun.nio.ch.DefaultSelectorProvider.create()*resulting in a
ServerSocketChannel that is of type
*sun.nio.ch.ServerSocketChannelImpl*
and a ServerSocket of type *sun.nio.ch.ServerSocketAdapter*. I'm not sure
that these are intended and may be I need a system property named
java.nio.channels.spi.SelectorProvider to ensure some other
SelectorProvider and therefore different ServerSocketChannel and
ServerSocket types.
public class TribalAfiliations{
Channel myChannel;
private static class MyMemberListener implements MembershipListener{...}
private static class MyMessageListener implements ChannelListener{...}
TribalAfiliations() throws SocketException{
this.myChannel=new GroupChannel();
ChannelListener msgListener = new TribalAfiliations.MyMessageListener();
MembershipListener mbrListener = new
TribalAfiliations.MyMemberListener();
myChannel.addMembershipListener(mbrListener);
myChannel.addChannelListener(msgListener);
try{
myChannel.start(Channel.MBR_TX_SEQ|Channel.MBR_RX_SEQ|Channel.SND_TX_SEQ|Channel.SND_RX_SEQ);
/// same problem, withmyChannel.start(Channel.DEFAULT);
}
catch(ChannelException e){
System.out.println(e.getMessage());
}
}
signature.asc
Description: This is a digitally signed message part
Re: tomcat 6 j_security_check, Apache ProxyPass and the Origin: header
Anyone? On 14/01/13 17:24, Watts, Timothy wrote: Hi, Is there a way to *tell* j_security_check that an Origin: header set (during the login POST request) to a remote server is permitted (and is not an XSS attack)? We have a tomcat server T running a tomcat webapp that uses j_security_check to auth users (Excuse me - I am not the tomcat programmer, I'm the sysadmin trying to help the programmer, so my terminology might be bad). Basically, http://T/webapp/jsp/login works OK On Server A running apache, we have a config: RewriteRule ^/jsp/(.*)$ http://T/webapp/jsp/$1 [P] (which is a ProxyPass - we have many rewrite rules so prefer to use RewriteRule for consistency) If we try to login to the tomcat webapp from http://A/jsp/login the POST request sends an Origin: header containing http:://A/... Tomcat seems not to like this as it realises that server A is not where it is running. I made it work with a disgraceful hack in the apache config: RequestHeader edit Origin http:\/\/A\/ http:\/\/T\/ early But now Tomcat can log us in but sends the wrong URI host in the Location: header when it replies with the 302 redirect. So I fix this with: Header edit Location http:\/\/T\/webapp\/jsp\/ http://A/jsp/ It works, but it is horrible and basically leaving a booby trap for the unwary. Many thanks, Tim -- Tim Watts Tel (VOIP): +44 (0)1580 848360 Systems Manager Digital Humanities, King's College London Systems Messages and Notifications: https://systemsblog.cch.kcl.ac.uk/ Personal Blog: http://squiddy.blog.dionic.net/ A fanatic is one who can't change his mind and won't change the subject. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: tomcat 6 j_security_check, Apache ProxyPass and the Origin: header
On 18/01/13 11:27, André Warnier wrote: I don't know if this really helps or improves things, but the standard way of handling the Location in redirects is via the ProxyPassReverse directive (which is probably more efficient here - and more easily understood - than the Header-edit). The ProxyPassReverse directive should work whether you use ProxyPass or not. Hi Andre, Yes - I agree about ProxyPassReverse - that likely would fix the redirect incorrectness. I do not really understand the problem with the Origin header though. Proxying from httpd to Tomcat (even with a differenr hostname) is a widely-used thing, and I have never heard of this kind of issue before. May be something specific to j_security_check, I just don't know. If you stop editing the request headers, and forward the requests via ProxyPass, do you get this problem also ? I will try - A RewriteRule .. .. [P] should be equivalent to a ProxyPass, but just in case there is a subtle difference I will give it a try. I prefer the rewrite rules as there are a bunch of them for other reasons and not mixing RewriteRule with ProxyPass makes it very clear what order they are being actioned (which is important). Re: j_security_check: I have see a load of issues reported that match this problem - usually the person reports a 408 error and everyone piles in and tries to solve that with increasing timeout settings. the 408 is clearly erroneous - and having fixed it myself by editing the Origin header, that's clearly the causal factor. Oddly enough, I did my usual trick of downloading the source code (for tomcat 6) and doing a recursive grep for any mention of the Origin: header. I found nothing! Which makes me wonder if the problem originates in a generic Java library??? The whole damn thing is so poorly documented (or at least all I could find was a document on who to enable auth checking) that I'm not able to tell if there are some options that I *could* be setting in the web.xml or somewhere. It seems reasonable that it might whine about a cross-site auth effort, but equally there should be a way to explicitly permit that, at least for a named VHOST. As you say, proxying is very common - for load balancing if nothing else. I'll go and try your suggestions - Thanks :) Tim Maybe you should also look at ProxypassReverseCookieDomain ? - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org -- Tim Watts Tel (VOIP): +44 (0)1580 848360 Systems Manager Digital Humanities, King's College London Systems Messages and Notifications: https://systemsblog.cch.kcl.ac.uk/ Personal Blog: http://squiddy.blog.dionic.net/ She got her looks from her father. He's a plastic surgeon. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: tomcat 6 j_security_check, Apache ProxyPass and the Origin: header
On 18/01/13 11:45, Mark Thomas wrote: On 18/01/2013 11:07, Tim Watts wrote: Anyone? Hi Mark, Tomcat doesn't give two hoots about the origin header. Curious - I wonder how me editing it helped? Unless it caused some knockon somewhere. It does care about the Host header. That would make more sense... It is hard to tell exactly what is going wrong from your post but you may need one or more of the following: http://httpd.apache.org/docs/2.2/mod/mod_proxy.html#proxypreservehost Hmm - that would be worth a shot - I went down this road when trying to stop Wordpress whining about being on the end of a proxy. Didn;t work there, but it might here. Set this to on Set proxyName=A anf proxyPort=80 on the connector in server.xml A being the host that is proxying to the tomcat server. Cool - that is the sort of thing I was looking for - though I expected to find it in the web.xml so maybe I was looking for the wrong thing... HTH, Mark Thank you for your suggestions - I will try them shortly in conjunction with Andre's. Lucky - I seemed to have bumped my mail just at the time all the experts are around :- Cheers :) Tim -- Tim Watts Tel (VOIP): +44 (0)1580 848360 Systems Manager Digital Humanities, King's College London Systems Messages and Notifications: https://systemsblog.cch.kcl.ac.uk/ Personal Blog: http://squiddy.blog.dionic.net/ A fanatic is one who can't change his mind and won't change the subject. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
tomcat 6 j_security_check, Apache ProxyPass and the Origin: header
Hi, Is there a way to *tell* j_security_check that an Origin: header set (during the login POST request) to a remote server is permitted (and is not an XSS attack)? We have a tomcat server T running a tomcat webapp that uses j_security_check to auth users (Excuse me - I am not the tomcat programmer, I'm the sysadmin trying to help the programmer, so my terminology might be bad). Basically, http://T/webapp/jsp/login works OK On Server A running apache, we have a config: RewriteRule ^/jsp/(.*)$ http://T/webapp/jsp/$1 [P] (which is a ProxyPass - we have many rewrite rules so prefer to use RewriteRule for consistency) If we try to login to the tomcat webapp from http://A/jsp/login the POST request sends an Origin: header containing http:://A/... Tomcat seems not to like this as it realises that server A is not where it is running. I made it work with a disgraceful hack in the apache config: RequestHeader edit Origin http:\/\/A\/ http:\/\/T\/ early But now Tomcat can log us in but sends the wrong URI host in the Location: header when it replies with the 302 redirect. So I fix this with: Header edit Location http:\/\/T\/webapp\/jsp\/ http://A/jsp/ It works, but it is horrible and basically leaving a booby trap for the unwary. Many thanks, Tim -- Tim Watts - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Tomcat doesn't process error messages
On Thu, 2013-01-03 at 12:42 +, Husarik, Branko wrote: Hello, I will try to clarify the process as I see it: Request message sending process from Oracle to Web Service Oracle -- HTTP -- Tomcat -- Input/Output stream -- webapp -- Input/Output stream -- Tomcat -- HTTPS -- Web Service Response message receiving process from Web Service to Oracle Web Service-- HTTPS -- Tomcat -- Input/Output stream -- webapp -- Input/Output stream -- Tomcat -- HTTP -- Oracle The problem occures during the receiving stage (Tomcat -- Input/Output stream -- webapp) when the response from Web service cointains HTTP/1.1 500 Internal Server Error Webapp modifies the message (for example it adds basic authentication). I hope I don't miss something Big. Sounds like 'webapp' is what you referred to as the 'Proxy' in your original message? And it sounds like it's the 'webapp' that's discarding the SOAP response. Perhaps when it sees the 500 HTTP response code it simply discards the body of the response and sends that generic error message instead -- e.g. by calling sendError() and letting Tomcat generate it's default error response or the webapp's error page (if one is defined)? Depending on which component you have control over you can either: 1. Modify the 'webapp' to unconditionally send back the response body (perhaps by modifying it's error page if one is defined) -- OR -- 2. Modify the Web Service to reply with a 200 HTTP response code even if the service request fails. #2 seems the more reasonable approach to me since the failure is on the service level not the HTTP level. But in either case there's no tweaking in Tomcat itself that will fix this. Braňko -Original Message- From: André Warnier [mailto:a...@ice-sa.com] Sent: 3. ledna 2013 11:23 To: Tomcat Users List Subject: Re: Tomcat doesn't process error messages Husarik, Branko wrote: SOAP service logic should manipulate the message, but there is need to receive message from Tomcat by reading it's input stream. Problem is, there is only error stream cointaining tomcat error coming from Tomcat. I think it is caused by message from web service, which cointains HTTP/1.1 500 Internal Server Error in HTTP protocol and SOAP message is not forwarded. It seems to me like common logic, but i don't know, how to set Tomcat to forward these messages to input stream. Hi. Personally, I do not understand what you are trying to say. I believe that there is some incorrect understanding on your part of how this is supposed to work. In the scenario as you describe it, - Oracle is the HTTP client for Tomcat (just like any browser could be a client) - inside Tomcat, runs some webapp which happens to be a SOAP proxy. What this webapp does, is unknown to Tomcat. As far as Tomcat is concerned, this webapp is supposed to process some HTTP requests (depending on the URL of the request), and generate a HTTP response. Schematically, we have this : request : Oracle client -- HTTP -- Tomcat -- webapp (-- (unknown to Tomcat)) response : ( (unknown to Tomcat) -- ) webapp -- Tomcat -- HTTP -- Oracle client Repeat : what the webapp does inside is unknown and of (almost) no interest to Tomcat. (For example, if the webapp uses HTTPS to communicate with something else, Tomcat never knows this, and never plays any role in that part) So in this case, if the webapp generates a response which happens to be a 500 error, Tomcat will forward this to the (Oracle client). Tomcat will never read any input stream coming back from the webapp or anything like this. It is the webapp which is responsible for that kind of thing. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org signature.asc Description: This is a digitally signed message part
RE: Tomcat doesn't process error messages
On Thu, 2013-01-03 at 12:42 +, Husarik, Branko wrote: Hello, I will try to clarify the process as I see it: Request message sending process from Oracle to Web Service Oracle -- HTTP -- Tomcat -- Input/Output stream -- webapp -- Input/Output stream -- Tomcat -- HTTPS -- Web Service Response message receiving process from Web Service to Oracle Web Service-- HTTPS -- Tomcat -- Input/Output stream -- webapp -- Input/Output stream -- Tomcat -- HTTP -- Oracle The problem occures during the receiving stage (Tomcat -- Input/Output stream -- webapp) when the response from Web service cointains HTTP/1.1 500 Internal Server Error I just re-read your original email and I may have missed something. Are you saying that you get an IOException when you call request.getInputStream() during a 500 response? If so can you please post the stack trace. Webapp modifies the message (for example it adds basic authentication). I hope I don't miss something Big. Braňko -Original Message- From: André Warnier [mailto:a...@ice-sa.com] Sent: 3. ledna 2013 11:23 To: Tomcat Users List Subject: Re: Tomcat doesn't process error messages Husarik, Branko wrote: SOAP service logic should manipulate the message, but there is need to receive message from Tomcat by reading it's input stream. Problem is, there is only error stream cointaining tomcat error coming from Tomcat. I think it is caused by message from web service, which cointains HTTP/1.1 500 Internal Server Error in HTTP protocol and SOAP message is not forwarded. It seems to me like common logic, but i don't know, how to set Tomcat to forward these messages to input stream. Hi. Personally, I do not understand what you are trying to say. I believe that there is some incorrect understanding on your part of how this is supposed to work. In the scenario as you describe it, - Oracle is the HTTP client for Tomcat (just like any browser could be a client) - inside Tomcat, runs some webapp which happens to be a SOAP proxy. What this webapp does, is unknown to Tomcat. As far as Tomcat is concerned, this webapp is supposed to process some HTTP requests (depending on the URL of the request), and generate a HTTP response. Schematically, we have this : request : Oracle client -- HTTP -- Tomcat -- webapp (-- (unknown to Tomcat)) response : ( (unknown to Tomcat) -- ) webapp -- Tomcat -- HTTP -- Oracle client Repeat : what the webapp does inside is unknown and of (almost) no interest to Tomcat. (For example, if the webapp uses HTTPS to communicate with something else, Tomcat never knows this, and never plays any role in that part) So in this case, if the webapp generates a response which happens to be a 500 error, Tomcat will forward this to the (Oracle client). Tomcat will never read any input stream coming back from the webapp or anything like this. It is the webapp which is responsible for that kind of thing. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org signature.asc Description: This is a digitally signed message part
RE: Tomcat doesn't process error messages
On Thu, 2013-01-03 at 12:42 +, Husarik, Branko wrote: Hello, I will try to clarify the process as I see it: Request message sending process from Oracle to Web Service Oracle -- HTTP -- Tomcat -- Input/Output stream -- webapp -- Input/Output stream -- Tomcat -- HTTPS -- Web Service Response message receiving process from Web Service to Oracle Web Service-- HTTPS -- Tomcat -- Input/Output stream -- webapp -- Input/Output stream -- Tomcat -- HTTP -- Oracle It's also important to note that in the WebService--webapp path the webapp is acting as an HTTP client. If I'm understanding you correctly then, if the webapp calls request.getInputStream() that stream would be connected to the Oracle client NOT the WebService. Since the request has already been completely read (and presumably closed?) it's understandable that you would get an IOException trying to read from it. The problem occures during the receiving stage (Tomcat -- Input/Output stream -- webapp) when the response from Web service cointains HTTP/1.1 500 Internal Server Error Webapp modifies the message (for example it adds basic authentication). I hope I don't miss something Big. Braňko -Original Message- From: André Warnier [mailto:a...@ice-sa.com] Sent: 3. ledna 2013 11:23 To: Tomcat Users List Subject: Re: Tomcat doesn't process error messages Husarik, Branko wrote: SOAP service logic should manipulate the message, but there is need to receive message from Tomcat by reading it's input stream. Problem is, there is only error stream cointaining tomcat error coming from Tomcat. I think it is caused by message from web service, which cointains HTTP/1.1 500 Internal Server Error in HTTP protocol and SOAP message is not forwarded. It seems to me like common logic, but i don't know, how to set Tomcat to forward these messages to input stream. Hi. Personally, I do not understand what you are trying to say. I believe that there is some incorrect understanding on your part of how this is supposed to work. In the scenario as you describe it, - Oracle is the HTTP client for Tomcat (just like any browser could be a client) - inside Tomcat, runs some webapp which happens to be a SOAP proxy. What this webapp does, is unknown to Tomcat. As far as Tomcat is concerned, this webapp is supposed to process some HTTP requests (depending on the URL of the request), and generate a HTTP response. Schematically, we have this : request : Oracle client -- HTTP -- Tomcat -- webapp (-- (unknown to Tomcat)) response : ( (unknown to Tomcat) -- ) webapp -- Tomcat -- HTTP -- Oracle client Repeat : what the webapp does inside is unknown and of (almost) no interest to Tomcat. (For example, if the webapp uses HTTPS to communicate with something else, Tomcat never knows this, and never plays any role in that part) So in this case, if the webapp generates a response which happens to be a 500 error, Tomcat will forward this to the (Oracle client). Tomcat will never read any input stream coming back from the webapp or anything like this. It is the webapp which is responsible for that kind of thing. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org signature.asc Description: This is a digitally signed message part
RE: rotation of catalina.out on restart but no truncation
On Fri, 2012-11-09 at 08:11 -0600, Caldarale, Charles R wrote: From: Meik Suchlich [mailto:meik.suchl...@brandad-systems.de] Subject: AW: rotation of catalina.out on restart but no truncation catalina.out is rotated by restart to catalina.-mm-dd.log, but catalina.out itself contains the entries of the rotated log. I only want to know, how we can prevent this To reiterate: whatever script is doing the rotation is *not* part of the standard Tomcat distribution. It likely is part of the Debian mangling of Tomcat into Debian-specific packages. You'll need to find the script and adjust it to meet your needs. Most likely: 'man logrotate' will help. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org signature.asc Description: This is a digitally signed message part
Re: Tomcat 6.0.24 SSL Setup issue
On Wed, 2012-10-24 at 11:38 +0100, KumareshGopalsamy wrote:
Connector port=8443 protocol=HTTP/1.1 SSLEnabled=true
maxThreads=150 scheme=https secure=true
clientAuth=false sslProtocol=TLS
keystorePass=changeit keystoreFile=
C:\apache-tomcat-6.0.24-windows-x64\key \.keystore/
The only thing that looks weird is that space after '\key'. And perhaps
the newline after 'keystoreFile='? But maybe I'm reading this too
literally.
Also, it looks like something is already bound to a port you want to
use.
--tim
I have got the below error message when I restart the Tomcat server
Could you please help me on this?
22-Oct-2012 11:21:43 org.apache.catalina.core.AprLifecycleListener init
INFO: Loaded APR based Apache Tomcat Native library 1.1.19.
22-Oct-2012 11:21:43 org.apache.catalina.core.AprLifecycleListener init
INFO: APR capabilities: IPv6 [true], sendfile [true], accept filters
[false], ra
ndom [true].
22-Oct-2012 11:21:43 org.apache.catalina.startup.SetAllPropertiesRule
begin
WARNING: [SetAllPropertiesRule]{Server/Service/Connector} Setting
property 'clie
ntAuth' to 'false' did not find a matching property.
22-Oct-2012 11:21:43 org.apache.catalina.startup.SetAllPropertiesRule
begin
WARNING: [SetAllPropertiesRule]{Server/Service/Connector} Setting
property 'keys
torePass' to 'changeit' did not find a matching property.
22-Oct-2012 11:21:43 org.apache.catalina.startup.SetAllPropertiesRule
begin
WARNING: [SetAllPropertiesRule]{Server/Service/Connector} Setting
property 'keys
toreFile' to 'C:\.keystore' did not find a matching property.
22-Oct-2012 11:21:44 org.apache.coyote.http11.Http11AprProtocol init
INFO: Initializing Coyote HTTP/1.1 on http-8080
22-Oct-2012 11:21:44 org.apache.coyote.http11.Http11AprProtocol init
SEVERE: Error initializing endpoint
java.lang.Exception: No Certificate file specified or invalid file
format
at org.apache.tomcat.jni.SSLContext.setCertificate(Native
Method)
at
org.apache.tomcat.util.net.AprEndpoint.init(AprEndpoint.java:720)
at
org.apache.coyote.http11.Http11AprProtocol.init(Http11AprProtocol.jav
a:107)
at
org.apache.catalina.connector.Connector.initialize(Connector.java:100
7)
at
org.apache.catalina.core.StandardService.initialize(StandardService.j
ava:677)
at
org.apache.catalina.core.StandardServer.initialize(StandardServer.jav
a:795)
at org.apache.catalina.startup.Catalina.load(Catalina.java:540)
at org.apache.catalina.startup.Catalina.load(Catalina.java:560)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.
java:39)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces
sorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at
org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:261)
at
org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:413)
22-Oct-2012 11:21:44 org.apache.catalina.startup.Catalina load
SEVERE: Catalina.start
LifecycleException: Protocol handler initialization failed:
java.lang.Exception
: No Certificate file specified or invalid file format
at
org.apache.catalina.connector.Connector.initialize(Connector.java:100
9)
at
org.apache.catalina.core.StandardService.initialize(StandardService.j
ava:677)
at
org.apache.catalina.core.StandardServer.initialize(StandardServer.jav
a:795)
at org.apache.catalina.startup.Catalina.load(Catalina.java:540)
at org.apache.catalina.startup.Catalina.load(Catalina.java:560)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.
java:39)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces
sorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at
org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:261)
at
org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:413)
22-Oct-2012 11:21:44 org.apache.catalina.startup.Catalina load
INFO: Initialization processed in 1836 ms
22-Oct-2012 11:21:44 org.apache.catalina.core.StandardService start
INFO: Starting service Catalina
22-Oct-2012 11:21:44 org.apache.catalina.core.StandardEngine start
INFO: Starting Servlet Engine: Apache Tomcat/6.0.24
22-Oct-2012 11:21:44 org.apache.catalina.startup.HostConfig
deployDescriptor
INFO: Deploying configuration descriptor host-manager.xml
22-Oct-2012 11:21:44 org.apache.catalina.startup.HostConfig
deployDescriptor
INFO: Deploying configuration descriptor manager.xml
22-Oct-2012 11:21:44
Re: tomcat manager login
On Sat, 2012-09-22 at 14:31 +0330, Mohsen Jamali wrote: Hi guys, After searching the web about how to deploy a war file on Tomcat. The simplest way is to just copy the war file to webapps/ under your Tomcat base. By default Tomcat will automatically deploy it from there. i came to the conclusion that i should change the /etc/tomcat6/tomcat-users.xml file and add sth like this : 1. role rolename=manager-gui/ 2. user username=admin password=admin roles= standard, manager-gui/ Did you restart Tomcat? but after after adding this two lines ang going to localhost:8080/manager/html and entering admin as user and pass it doesn't accept it. That's pretty vague. What DOES it do? what's wrong me. thanks signature.asc Description: This is a digitally signed message part
RE: Facing Memory leak - 64 bit Tomcat 6.0.35 with windows 2008 R2(64 bit JVM 1.6.0_33)
On Wed, 2012-09-05 at 12:16 -0400, PJ Delsh wrote: Shailendra, I'm not an expert, but when we had this same issue, we increased the Initial Memory Pool and Maximum Memory pool (XMS and XMX) in the Tomcat Monitor in Windows 2008.We also had a leak in some of our JSP files that was causing Tomcat to hang several times during business hours. We configured Tomcat so that VisualVM (which comes with the Java JDK) could monitor Tomcat memory usage. Then we took heap dumps, and analyzed them for leaks (Shallow Heap vs Retained Heap) using Eclipse Memory Analyzer. Once we fixed the leaks, Tomcat was stable.In the interim, if you have Tomcat running as a service in Windows, under the Recovery tab set the Tomcat service to restart automatically if it does stop. But if you have memory leaks, the Tomcat service probably will still be running but it won't be responding.You can also install more than one Tomcat on the same server, so if one goes down, the other will still be running. You would also have to configure Apache (or whatever) to work with more than one Tomcat.We also had issues with the Tomcat service crashing (eg Terminated Unsuccessfully) on Windows. After months of searching, we think the issue was having system.exit(0) in our code. System.exit(0) is the very definition of successful termination although it certainly doesn't belong in your webapp's code. The truth is that Tomcat is not written well enough to run on Windows. What rot. All the problems you mention above you traced back to your application. Yet your conclusion is that Tomcat doesn't run well on Windows. Really? See what you can do to move your app to Linux. You will find many more Tomcat experts on Linux than on Windows. I myself have a strong preference for Linux but for reasons unrelated to Tomcat. In reality, you'll find that most Tomcat experts don't give a rat's hiney which OS it runs under. But they may care which JVM you're using. Tomcat is not like IIS. True. Developing for Tomcat on Windows is fine, but running production apps in Tomcat on Windows is a bad idea. I wish this was more widely known and publicized.-PJ Total BS. Date: Wed, 5 Sep 2012 11:13:09 -0400 From: ch...@christopherschultz.net To: users@tomcat.apache.org Subject: Re: Facing Memory leak - 64 bit Tomcat 6.0.35 with windows 2008 R2(64 bit JVM 1.6.0_33) -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Shailendra, On 9/5/12 2:50 AM, Shailendra Singh wrote: We are using 64 bit Tomcat 6.0.35 with windows 2008 R2 (64 bit JVM 1.6.0_33) and facing memory leak issues(OutOfMemoryError ) after a short interval of time( ~30 minutes). We deploy a web application on this version of tomcat and while working with the GUI part of the application we face memory leak, but same application works fine on this windows server for 32 bit JVM. Please help us if this is an issue with 64 bit Tomcat version or with 64bit JVM or with its combination. kindly let us know a solution or any work around or for this. You've asked this question three times now and have apparently been ignoring every reply you get. Please stop asking if you are going to ignore our questions and advice. - -chris -BEGIN PGP SIGNATURE- Version: GnuPG/MacGPG2 v2.0.17 (Darwin) Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Mozilla - http://www.enigmail.net/ iEYEARECAAYFAlBHbAUACgkQ9CaO5/Lv0PCknACeIwxou02m0hz1Y9HtZTAmzMot A/YAniXDFbzzs+ApHFFXBxL9vtIoXuoN =NjrU -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org signature.asc Description: This is a digitally signed message part
Re: Problems upgrading to Tomcat 7
On Tue, 2012-07-31 at 09:20 -0300, Alejandro Mehring wrote: First of all, thank you very much for your quick response! I'm too having a hard time believing that tomcat would do something like that... I even tried on a new web project and it didn't remove the parent directory reference! I'm very confused right now... The base url of the application is of the form http://host/app/servlets/FrontController So when in Tomcat 4 the page fetches the stylesheet (using the href=../lightStyle.css form), it resolves to http://host/app/lightStyle.css, whereas in Tomcat 7 it goes to http://host/app/servlets/lightStyle.css. In your 4-7 migration process have you made any source code changes (e.g. using base tags)? Here's the output of the JSP (the header part) for both 4 and 7 version. TOMCAT 4 html style type=text/css @import URL(../lightStyle.css) /style head !--meta http-equiv=Content-Type content=text/html; charset=windows-1252-- meta http-equiv=Content-Type content=text/html; charset=ISO-8859-1 meta http-equiv=Expires content=0 meta http-equiv=Pragma content=no-cache meta http-equiv=cache-control content=no-cache titleConsulta de usuarios/title link rel=stylesheet href=../lightStyle.css type=text/css ... /head ... TOMCAT 7 HTML style type=text/css @import URL(lightStyle.css) /style head titleError/title link rel=stylesheet href=lightStyle.css type=text/css meta http-equiv=Content-Type content=text/html; charset=ISO-8859-1 meta http-equiv=Expires content=0 meta http-equiv=Pragma content=no-cache meta http-equiv=cache-control content=no-cache ... /head ... Thanks again for anything you can think of! Cheers! Ale On Tue, Jul 31, 2012 at 5:10 AM, André Warnier a...@ice-sa.com wrote: Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alejandro, On 7/30/12 5:48 PM, Alejandro Mehring wrote: I'm migrating to Tomcat 7 a web system that used to run on Tomcat 4... Been there (though I went through 5.5 and 6.0 to get there in a relatively short amount of time). So far, I've been able to sort out all of the issues I've faced, but I'm stuck at one point. When a page loads in Tomcat 4, it goes and fetches the stylesheet from the server with a link of the form link type=text/css href=../lightStyle.css rel=stylesheet Although this should work, I always recommend using context-relative URLs like this: link type=text/css href=%= response.encodeURL(request.**getContextPath() + /lightStyle.css) % / This will ensure that your URLs resolve properly no matter how the .jsp is being evaluated (for instance, in an include or after a forward, where the client's URL may not match what your JSP expects). But on Tomcat 7, the parent directory indirection is removed, and I can't seem to find the way to prevent this from happening! That doesn't seem right. What confuses me more, is that when Tomcat generates the *_jsp.java files, both 4 and 7 versions generate a line of code like this one: out.write(link rel=\stylesheet\ href=\../lightStyle.css\ type=\text/css\\r\n\r\n); So i can't figure out why the rendering process is removing the '../' bit of the link! I have a hard time believing that Tomcat is modifying anything: in the case above, Tomcat does not interpret anything at all. As far as Tomcat is concerned, the above is just a string of characters like Hello, World and has no URL context or anything like that. Are you sure this isn't being included by another JSP or forwarded from another URL? Has anyone faced this problem before? I haven't found any parent directory restriction configuration or something that would point me in that direction. What does the output of the JSP look like? That is, what is the actual content of the page as seen by the client? +1 And, what does that request for the stylesheet actually look like, when it is sent by the client (the browser) to the server ? You can find that out by using one of the browser plugins like Fiddler2 (for IE), HttpFox (for Firefox) or similar. The point is : this href is interpreted *by the client* and converted to a full HTTP request URL (with hostname, path and all), before being sent to the server. The server always receives an absolute URL, starting at the root. --**--**- To unsubscribe, e-mail: users-unsubscribe@tomcat.**apache.orgusers-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org signature.asc Description: This is a digitally signed message part
Re: Tomcat 7.0.25 on an AS/400, V5R4, Another try. Help?
On Mon, 2012-07-30 at 09:26 -0700, James Lampert wrote:
I have just wiped the Tomcat installation on the V5R4 box in question,
and done a clean install of 7.0.25.
No change in its behavior.
I tried a modified version of our standard Tomcat-launch CL program,
that adds a CATALINA_OPTS environment variable, with a value of
-verbose:class (excerpt from CL program below):
ADDENVVAR ENVVAR(CATALINA_HOME) +
VALUE('/wintouch/tomcat') REPLACE(*YES)
ADDENVVAR ENVVAR(CATALINA_OPTS) +
VALUE('-verbose:class') REPLACE(*YES)
Did this have any effect? catalina.out should have a lot of messages
like [Loaded class.name from source]
ADDENVVAR ENVVAR(JAVA_OPTS) +
VALUE('-Dos400.awt.native=true +
-Djava.awt.headless=true +
-Djava.version=1.6 -Xms256m -Xmx512m') +
REPLACE(*YES)
SBMJOB CMD(QSH +
CMD('/wintouch/tomcat/bin/startup.sh')) +
JOB(CATALINA) JOBD(WINTOUCH/WTSRVC) +
INLLIBL(QGPL QTEMP) CPYENVVAR(*YES) +
ALWMLTTHD(*YES)
(ADDENVVAR being the CL command to set an environment variable, SBMJOB
to submit a batch job, and QSH to launch QShell, and the CPYENVVAR
parameter telling SBMJOB to pass the environment variables from the
submitting job to the submitted job. Placing the environment variables
in the CL program that launches Tomcat, rather than in catalina.sh or
setenv.sh, allows us to avoid having to either roll our own version of
the Tomcat ZIP file, or manually install the environment variables,
every time we install (or update) Tomcat.)
Bear with me, I'm not proficient in AS/400: Is it possible to open an
interactive QShell and try to start Tomcat that way?
The STDOUT spool file:
/wintouch/tomcat/bin/catalina.sh: 001-0019 Error found searching for
command tty. No such path or directory.
Using CATALINA_BASE: /wintouch/tomcat
Using CATALINA_HOME: /wintouch/tomcat
Using CATALINA_TMPDIR: /wintouch/tomcat/temp
Using JRE_HOME:/QOpenSys/QIBM/ProdData/JavaVM/jdk60/32bit
Using CLASSPATH:
/wintouch/tomcat/bin/bootstrap.jar:/wintouch/tomcat/bin/tomcat-juli.jar
tells me that it's at least getting to the point in catalina.sh where it
spits out selected environment variables,
There's never been any doubt about that right? You wouldn't be getting
the ClassNotFoundException otherwise.
and that it's getting the
environment variables we set in the CL program.
Maybe. But that's neither here nor there.
--
JHHL
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
signature.asc
Description: This is a digitally signed message part
Re: Tomcat 7.0.25 on an AS/400, V5R4, Another try. Help?
On Thu, 2012-07-26 at 13:34 -0700, James Lampert wrote:
Tim Watts wrote:
import java.io.File;
import java.net.URL;
import java.net.URLClassLoader;
public class FindClass {
public static void main(String[] args) {
try {
URLClassLoader loader = new URLClassLoader(
new URL[] {new
File(/wintouch/tomcat/lib/catalina.jar).toURI().toURL()});
loader.loadClass(args[0]);
System.out.println(URLClassLoader found class '
+args[0] +');
}
catch (Exception e) {
e.printStackTrace();
}
}
}
I tried it. I'm surprised I was able to get it to compile and run on
only the second try (the first try, I had left the stream file editor in
the default EBCDIC codepage when I pasted in your source, which JAVAC,
not surprisingly, didn't like at all).
At any rate, I get:
java FindClass org.apache.catalina.startup.Catalina
URLClassLoader found class 'org.apache.catalina.startup.Catalina'
OK, so the JVM classloader seems to work. This is basically identical
to the one used by the bootstrapper. Which suggests that some/all of
the Tomcat config files are messed up. Again, are these in EBCDIC or
ASCII? I presume the unix environment on AS/400 wants ASCII files
generally -- or at least the java stuff does? And you're sure that's
what you're providing? You can take a hex dump of, say,
conf/catalina.properties and confirm that? This would be important to
know.
And so far as I can determine without doing a clean install of Tomcat,
nothing is customized at all, at this point, other than maybe setting
port numbers (which it isn't even getting to, yet), and adding your
diagnostic lines in logging.properties.
Paul Holm, on the Midrange.com Java list, suggested turning on verbose
mode on Java; I'm not entirely sure how I would even do that for Tomcat.
He probably means -verbose:class . You could add this to CATALINA_OPTS
or JAVA_OPTS in a bin/setenv.sh script:
export CATALINA_OPTS=-verbose:class
It will spit out a lot of data but I don't think that will tell us
anything new at this point.
What would be the next step?
Don't know how feasible Chris' suggestion would be for you but if you
can boot up a virtual OS such as Linux under AS/400 that might be the
easiest thing to get something working. Of course, it could also just
be the opening of the next can of worms...
Otherwise, I would go with a clean install. If you have to let someone
else do the install, download your own copy of the same Tomcat version
and do diffs on bin/*.sh and conf/. It's hard to offer any useful help
if we don't know what environment we're dealing with. Also, make sure
no text file conversions occur when unpacking the zip file (e.g. don't
use unzip's -a option) -- assuming my presumption about the unix env is
correct.
--
JHHL
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
signature.asc
Description: This is a digitally signed message part
Re: Tomcat 7.0.25 on an AS/400, V5R4, Another try. Help?
On Thu, 2012-07-26 at 08:57 -0700, James Lampert wrote: Tim Watts wrote: http://tomcat.10.n6.nabble.com/Tomcat-7-0-25-on-an-AS-400-V5R4-Another-try-Help-td4984199.html#a4984215 - Add these lines to the end of conf/logging.properties: org.apache.catalina.startup.Bootstrap.level = ALL org.apache.catalina.startup.ClassLoaderFactory.level = ALL No effect whatsoever. The catalina.out log and the spool file produced by STDOUT are exactly the same as before. Well, hopefully not EXACTLY the same -- different timestamps right? Right? :-) Looks like it may be using a customized logging configuration. Find that and update the above according to the config file location and/or the logging framework in use. (Sorry, can't be more specific; you're leaving us in the dark as to your set up.) Look in bin/setenv.sh if you have one. Or if you've modified any of the distribution scripts (which generally you shouldn't do) then do a diff against the distribution versions for 7.0.25. Please post these so we're not flying so blind. Also, could this be another ASCII/EBCDIC issue? I seem to recall that was a possibility a long time ago but don't recall if that ever panned out. -- JHHL - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org signature.asc Description: This is a digitally signed message part
Re: Tomcat 7.0.25 on an AS/400, V5R4, Another try. Help?
On Tue, 2012-07-24 at 09:17 -0700, James Lampert wrote: To recap, I've got a situation where Tomcat is crashing on takeoff, on a V5R4 AS/400, with what appears to be the same setup that works fine on a V6 box, and showing correct environment variables in the STDOUT spool file, and leaving this in Catalina.out. java.lang.ClassNotFoundException: org.apache.catalina.startup.Catalina at java.net.URLClassLoader.findClass(URLClassLoader.java:432) at java.lang.ClassLoader.loadClass(ClassLoader.java:642) at java.lang.ClassLoader.loadClass(ClassLoader.java:608) at org.apache.catalina.startup.Bootstrap.init(Bootstrap.java:236) at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:425) to which Rainer Jung replied: . . . All this works by default in an untampered Tomcat installation. It can break: - if catalina.jar is not in /wintouch/tomcat/lib or it is not readable - if catalina.properties is not in /wintouch/tomcat/conf, or it is not readable, or the entries for the server.loader or common.loader are broken - the start scripts do not set -Dcatalina.base=/wintouch/tomcat/ and -Dcatalina.home=/wintouch/tomcat/ when starting the JVM - you are changing the place of the used properties file by giving a non-default value in the system property -Dcatalina.config during startup. I can find, so far, no evidence to indicate any of these possibilities. But is there some diagnostic I could enable, that would allow me to find out more detail about the problem? Or maybe something I could try from a QShell command line in a terminal session? I made some suggestions to this effect the other day: http://tomcat.10.n6.nabble.com/Tomcat-7-0-25-on-an-AS-400-V5R4-Another-try-Help-td4984199.html#a4984215 Maybe you already tried them or didn't get the email. -- James H. H. Lampert Touchtone Corporation - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org signature.asc Description: This is a digitally signed message part
Re: Project will not build
hint Are you asking here because you got no answers on the NetBeans
list? Nor the Ant list? /hint
On Tue, 2012-07-24 at 15:11 -0400, Cotton, Joseph B wrote:
This question concerns a Project that used to work nicely. Now it will
not build.
I am using NetBeans IDE 7.1.1 with Apache Tomcat 7.0.22
I left this project alone for a few months.
Now when I come back and try to build or run, it errors with this
message:
Copying 1 file to D:\Documents and Settings\cottonjb\My
Documents\NetBeansProjects\MAFSS2\build\web\WEB-INF\lib
D:\Documents and Settings\cottonjb\My
Documents\NetBeansProjects\MAFSS2\nbproject\build-impl.xml:687: Warning:
Could not find file D:\Documents and Settings\cottonjb\My
Documents\Downloads\javax.servlet.jsp.jstl-api-1.2.1-javadoc.jar to
copy.
BUILD FAILED (total time: 0 seconds)
It refers to this in build-impl.xml:
target depends=init name=library-inclusion-in-archive
unless=dist.ear.dir
copyfiles files=${file.reference.winzipaes-20100321.jar}
todir=${build.web.dir}/WEB-INF/lib/
copyfiles
files=${file.reference.javax.servlet.jsp.jstl-api-1.2.1-javadoc.jar}
todir=${build.web.dir}/WEB-INF/lib/
copyfiles
files=${file.reference.javax.servlet.jsp.jstl-api-1.2.1-sources.jar}
todir=${build.web.dir}/WEB-INF/lib/
copyfiles
files=${file.reference.javax.servlet.jsp.jstl-api-1.2.1.jar}
todir=${build.web.dir}/WEB-INF/lib/
copyfiles files=${file.reference.jstl-1.2.jar}
todir=${build.web.dir}/WEB-INF/lib/
copyfiles files=${libs.JSP121.classpath}
todir=${build.web.dir}/WEB-INF/lib/
/target
I manually added the javax.servlet.jsp.jstl-api-1.2.1-javadoc.jar to the
NetBeans library and the Project library.
The winzip jar is found. The jsp jars are not found. Am I reading this
correctly?
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
signature.asc
Description: This is a digitally signed message part
RE: Project will not build
On Tue, 2012-07-24 at 15:46 -0400, Martin Gainty wrote:
http://grepcode.com/snapshot/repo1.maven.org/maven2/javax.servlet.jsp.jstl/javax.servlet.jsp.jstl-api/1.2.1
This is what youre looking for ..if the ant guy is looking the other
way you can easily integrate this depdency with maven3 and insert this
dependency into your depdendency list:
dependencies
dependency
groupIdjavax.servlet.jsp.jstl/groupId
artifactIdjavax.servlet.jsp.jstl-api/artifactId
version1.2.1/version
/dependency
...other dependencies..
/dependencies
1. I don't think he's using Maven.
if the ant guy is on top of you or has sufficient power to stop the
project then copy the jar from the liunk above to the location pointed
by
${file.reference.winzipaes-20100321.jar}
2. Red Herring. That could be an entirely different location.
(you should see the exact location from the reference of
file.reference.winzipaes-20100321.jar located somewhere at the top of
the build.xml)
then rerun the ant script and make sure the init target is executed
e.g.
ant init
Martin Gainty
__
I know a little about Orson's childhood and seriously doubt if he
ever was a child... - Joseph Cotton
3. That's Joseph Cotten
Subject: Project will not build
Date: Tue, 24 Jul 2012 15:11:40 -0400
From: bcot...@dpscs.state.md.us
To: users@tomcat.apache.org
This question concerns a Project that used to work nicely. Now it will
not build.
I am using NetBeans IDE 7.1.1 with Apache Tomcat 7.0.22
I left this project alone for a few months.
Now when I come back and try to build or run, it errors with this
message:
Copying 1 file to D:\Documents and Settings\cottonjb\My
Documents\NetBeansProjects\MAFSS2\build\web\WEB-INF\lib
D:\Documents and Settings\cottonjb\My
Documents\NetBeansProjects\MAFSS2\nbproject\build-impl.xml:687: Warning:
Could not find file D:\Documents and Settings\cottonjb\My
Documents\Downloads\javax.servlet.jsp.jstl-api-1.2.1-javadoc.jar to
copy.
BUILD FAILED (total time: 0 seconds)
It refers to this in build-impl.xml:
target depends=init name=library-inclusion-in-archive
unless=dist.ear.dir
copyfiles files=${file.reference.winzipaes-20100321.jar}
todir=${build.web.dir}/WEB-INF/lib/
copyfiles
files=${file.reference.javax.servlet.jsp.jstl-api-1.2.1-javadoc.jar}
todir=${build.web.dir}/WEB-INF/lib/
copyfiles
files=${file.reference.javax.servlet.jsp.jstl-api-1.2.1-sources.jar}
todir=${build.web.dir}/WEB-INF/lib/
copyfiles
files=${file.reference.javax.servlet.jsp.jstl-api-1.2.1.jar}
todir=${build.web.dir}/WEB-INF/lib/
copyfiles files=${file.reference.jstl-1.2.jar}
todir=${build.web.dir}/WEB-INF/lib/
copyfiles files=${libs.JSP121.classpath}
todir=${build.web.dir}/WEB-INF/lib/
/target
I manually added the javax.servlet.jsp.jstl-api-1.2.1-javadoc.jar to the
NetBeans library and the Project library.
The winzip jar is found. The jsp jars are not found. Am I reading this
correctly?
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
signature.asc
Description: This is a digitally signed message part
RE: Project will not build
On Tue, 2012-07-24 at 16:00 -0400, Cotton, Joseph B wrote:
Actually, no. But a little more poking around fixed it.
Glad you worked it out.
By the way, is there any really good reference for Tomcat? I have
three O'reiley books and they don’t seem to help much. I can read the
How-To pages all day and nothing seems to stick. I am looking for
somehting that decribes what happens when And what each of the
xml files are for. Is there a component list?
Well, as far as an actual *Reference* it's hard to get more
authoritative than the online docs. Based on some of the traffic here,
there seem to be a number of dubious tutorials floating around the
'net but I'm sure there are quality ones as well. Perhaps you would
find the wiki helpful:
http://wiki.apache.org/tomcat/FrontPage
It has a link for suggested books although some look pretty outdated.
HTH
-Original Message-
From: Tim Watts [mailto:t...@cliftonfarm.org]
Sent: Tuesday, July 24, 2012 3:36 PM
To: Tomcat Users List
Subject: Re: Project will not build
hint Are you asking here because you got no answers on the NetBeans list?
Nor the Ant list? /hint
On Tue, 2012-07-24 at 15:11 -0400, Cotton, Joseph B wrote:
This question concerns a Project that used to work nicely. Now it
will not build.
I am using NetBeans IDE 7.1.1 with Apache Tomcat 7.0.22 I left this
project alone for a few months.
Now when I come back and try to build or run, it errors with this
message:
Copying 1 file to D:\Documents and Settings\cottonjb\My
Documents\NetBeansProjects\MAFSS2\build\web\WEB-INF\lib
D:\Documents and Settings\cottonjb\My
Documents\NetBeansProjects\MAFSS2\nbproject\build-impl.xml:687: Warning:
Could not find file D:\Documents and Settings\cottonjb\My
Documents\Downloads\javax.servlet.jsp.jstl-api-1.2.1-javadoc.jar to
copy.
BUILD FAILED (total time: 0 seconds)
It refers to this in build-impl.xml:
target depends=init name=library-inclusion-in-archive
unless=dist.ear.dir
copyfiles files=${file.reference.winzipaes-20100321.jar}
todir=${build.web.dir}/WEB-INF/lib/
copyfiles
files=${file.reference.javax.servlet.jsp.jstl-api-1.2.1-javadoc.jar}
todir=${build.web.dir}/WEB-INF/lib/
copyfiles
files=${file.reference.javax.servlet.jsp.jstl-api-1.2.1-sources.jar}
todir=${build.web.dir}/WEB-INF/lib/
copyfiles
files=${file.reference.javax.servlet.jsp.jstl-api-1.2.1.jar}
todir=${build.web.dir}/WEB-INF/lib/
copyfiles files=${file.reference.jstl-1.2.jar}
todir=${build.web.dir}/WEB-INF/lib/
copyfiles files=${libs.JSP121.classpath}
todir=${build.web.dir}/WEB-INF/lib/
/target
I manually added the javax.servlet.jsp.jstl-api-1.2.1-javadoc.jar to
the NetBeans library and the Project library.
The winzip jar is found. The jsp jars are not found. Am I reading
this correctly?
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
signature.asc
Description: This is a digitally signed message part
Re: problems installing app on tomcat v.7.0.26
On Mon, 2012-07-23 at 14:39 -0700, Jim Proctor wrote: Greetings — I'm running into errors installing a Java app called GeoServer (latest stable v2.1.4) on my Tomcat server at sge.lclark.edu:8080 (Tomcat v.7.0.26, JVM v.1.6.0_20-b20). I downloaded the .war.zip file, expanded it, and uploaded the .war file into a root-level directory (/geoserver) in Tomcat's webapps folder. Then, using the Tomcat manager, I tried both clicking Start for this directory, and used the Deploy menu below. The Deploy option results in Tomcat error Application already exists at path, and the Start option results in Tomcat error Application at context path /geoserver could not be started. Huh? Are you saying you uploaded geoserver.war to the directory TC_HOME/webapps/geoserver/ and tried to deploy it from there using the Manager? If so, don't do that. Stop Tomcat, move the .war file to webapps/, remove the webapps/geoserver/ directory and restart. Unless autodeploy is disabled it should deploy automatically. signature.asc Description: This is a digitally signed message part
Re: Tomcat 7.0.27 listens only @IPv6 localhost, ignores 'use IPv4' JAVA_OPTS in tomcat.conf. How to correctly force IPv4?
On Sun, 2012-07-22 at 08:03 -0700, k9...@operamail.com wrote: Linux svr 3.1.10-1.16-desktop #1 SMP PREEMPT Wed Jun 27 05:21:40 UTC 2012 (d016078) x86_64 x86_64 x86_64 GNU/Linux IPv4 is enabled on the server. The IPv6 stack is also enabled, and necessarily configured as, grep bindv6only /etc/sysctl.conf net.ipv6.bindv6only = 1 I want Tomcat listening on the IPv4 localhost @ 127.0.0.1. So you want Tomcat to listen on all IPv6 addresses plus the IPv4 loopback address but no other IPv4 addresses? Since you've told the OS to not allow IPv4 connections on IPv6 sockets, I believe you would need to configure a separate Connector on the same port for the IPv4 loopback address. So, reading here - http://tomcat.10.n6.nabble.com/Tomcat-uses-IPv6-td2164369.html#a2164371 - and elsewhere, I set vi /etc/tomcat/tomcat.conf ... JAVA_OPTS=Djava.net.preferIPv4Stack=true -Djava.net.preferIPv4Addresses=true CATALINA_OPTS=Djava.net.preferIPv4Stack=true -Djava.net.preferIPv4Addresses=true ... now, @ tomcat start, ps ax | grep tomcat 6530 ?Sl 0:03 /etc/alternatives/jre/bin/java -Djava.net.preferIPv4Stack=true -Djava.net.preferIPv4Addresses=true -Djava.net.preferIPv4Stack=true -Djava.net.preferIPv4Addresses=true -classpath :/usr/share/tomcat/bin/bootstrap.jar:/usr/share/tomcat/bin/tomcat-juli.jar:/usr/share/java/commons-daemon.jar -Dcatalina.base=/usr/share/tomcat -Dcatalina.home=/usr/share/tomcat -Djava.endorsed.dirs= -Djava.io.tmpdir=/var/cache/tomcat/temp -Djava.util.logging.config.file=/usr/share/tomcat/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager org.apache.catalina.startup.Bootstrap start but, Tomcat still listens only on IPv6 netstat -pan --tcp | grep 8080 tcp0 0 :::8080 :::* LISTEN 6530/java and is unavailable/unreachable @ 127.0.0.1 telnet 127.0.0.1 8080 Trying 127.0.0.1... telnet: connect to address 127.0.0.1: Connection refused telnet ::1 8080 Trying ::1... Connected to ::1. Escape character is '^]'. telnet has the method for getting Tomcat to listen only @ IPv4 changed for v7? - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org signature.asc Description: This is a digitally signed message part
Re: Tomcat 7.0.27 listens only @IPv6 localhost, ignores 'use IPv4' JAVA_OPTS in tomcat.conf. How to correctly force IPv4?
On Sun, 2012-07-22 at 10:32 -0700, k9...@operamail.com wrote: Hi, On Sun, Jul 22, 2012, at 01:24 PM, Tim Watts wrote: On Sun, 2012-07-22 at 08:03 -0700, k9...@operamail.com wrote: Linux svr 3.1.10-1.16-desktop #1 SMP PREEMPT Wed Jun 27 05:21:40 UTC 2012 (d016078) x86_64 x86_64 x86_64 GNU/Linux IPv4 is enabled on the server. The IPv6 stack is also enabled, and necessarily configured as, grep bindv6only /etc/sysctl.conf net.ipv6.bindv6only = 1 I want Tomcat listening on the IPv4 localhost @ 127.0.0.1. So you want Tomcat to listen on all IPv6 addresses plus the IPv4 loopback address but no other IPv4 addresses? No. I want Tomcat7 to listen ONLY on one address: the IPv4 loopback @ 127.0.0.1. No other IPv4 addresses, and no IPv6 addresses at all. Oh, that's easy: specify address=127.0.0.1 on your Connector. By default, Tomcat will listen on port 8080 on all available addresses (IPv6 and 4, barring configuration settings at the OS level). The key word in those java.net properties is prefer (i.e. not require). So the door is still open to IPv6 even with these properties. BTW, not that it will impact you, but it's java.net.preferIPv6Addreses (defaults to false): -Djava.net.preferIPv4Addresses=true Specifying a listener proptocol, address port should be a fairly commonplace undertaking ... Since you've told the OS to not allow IPv4 connections on IPv6 sockets, I believe you would need to configure a separate Connector on the same port for the IPv4 loopback address. Not sure if this, then, still holds. Sounds like you don't need an additional Connector. Just modify the existing one. I'd understaood that those 'use IPv4' -D options should do exactly what I intend to here. Apparently not, though ... - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org signature.asc Description: This is a digitally signed message part
Re: Tomcat 7.0.27 listens only @IPv6 localhost, ignores 'use IPv4' JAVA_OPTS in tomcat.conf. How to correctly force IPv4?
On Sun, 2012-07-22 at 11:21 -0700, k9...@operamail.com wrote: On Sun, Jul 22, 2012, at 02:08 PM, Tim Watts wrote: By default, Tomcat will listen on port 8080 on all available addresses (IPv6 and 4, barring configuration settings at the OS level). The key word in those java.net properties is prefer (i.e. not require). So the door is still open to IPv6 even with these properties. I still would presume that, given the specification of prefer, when localhost is referenced, given the choice of either IPv4 or IPv6 in a functional dual-stack, that it *would* prefer and select IPv4, i.e., 127.0.0.1. But doing so would close the door on ::1, turning prefer into require. Whereas binding on ::* allows both IPv6 4 in. I guess what's confusing in all this is that the preferences just deal with outbound addresses and connections (e.g. preferIPv4Stack means the JVM will send out IPv4 packets etc.). It's worth noting that, even if it did behave this way, you would still have needed to specify the loopback address. Otherwise Tomcat would have been accessible on any IPv4 address configured on the node. Just setting those properties would never have been sufficient for what you were really after. apparently, not the case. clarification noted. cheers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org signature.asc Description: This is a digitally signed message part
Re: Tomcat 7.0.25 on an AS/400, V5R4, Another try. Help?
On Thu, 2012-07-19 at 17:25 -0700, James Lampert wrote:
Tim:
This is normally in TC_HOME/lib/catalina.jar.
A. Does it exist there?
B. Does the user the process is running as have permission to
read
that file and directory?
C. If yes to A B, is the file corrupt?
/wintouch/tomcat/lib/catalina.jar exists. I had to FTP it elsewhere
to
check its validity, but it seems valid. And the authorities for it
look
exactly the same as those for /wintouch/tomcat/bin/bootstrap.jar.
Rainer:
- if catalina.jar is not in /wintouch/tomcat/lib or it is not
readable
- if catalina.properties is not in /wintouch/tomcat/conf, or it is
not readable, or the entries for the server.loader or common.loader
are broken
- the start scripts do not set -Dcatalina.base=/wintouch/tomcat/ and
-Dcatalina.home=/wintouch/tomcat/ when starting the JVM
- you are changing the place of the used properties file by giving a
non-default value in the system property -Dcatalina.config during
startup.
Everything looks like it's in the right place, undamaged, and without
authority issues.
Perhaps the IBM JDK6 has some bugs running on V5R4?
Some other things you might do to shed more light on this:
- Add these lines to the end of conf/logging.properties:
org.apache.catalina.startup.Bootstrap.level = ALL
org.apache.catalina.startup.ClassLoaderFactory.level = ALL
Then stop/start Tomcat. You should see a log entry like:
location X is file:/wintouch/tomcat/lib/catalina.jar
- If you do see an entry as above try compiling and running the
following from /wintouch/tomcat which tests finding a class:
BEGIN
import java.io.File;
import java.net.URL;
import java.net.URLClassLoader;
public class FindClass {
public static void main(String[] args) {
try {
URLClassLoader loader = new URLClassLoader(
new URL[] {new
File(/wintouch/tomcat/lib/catalina.jar).toURI().toURL()});
loader.loadClass(args[0]);
System.out.println(URLClassLoader found class '
+args[0] +');
}
catch (Exception e) {
e.printStackTrace();
}
}
}
END
* Save this to FindClass.java in /wintouch/tomcat
* Compile it: javac FindClass.java (or compile on another machine
and copy the resulting .class file)
* Run it: java -cp . FindClass org.apache.catalina.startup.Catalina
If this fails then my guess would be that there's a JDK6 problem on V5R4
or there's a problem with your catalina.jar. If it succeeds then some
Tomcat file(s) aren't as correct and/or authorized as you think they are
-- or you're leaving out some other important factor.
--
JHHL
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
signature.asc
Description: This is a digitally signed message part
Re: Tomcat 7.0.25 on an AS/400, V5R4, Another try. Help?
On Thu, 2012-07-19 at 15:10 -0700, James Lampert wrote: Theoretically, I've ironed out the bugs concerning which JVMs Tomcat will run under, but it still isn't coming up. The STDOUT from attempting to start Tomcat is as follows: /wintouch/tomcat/bin/catalina.sh: 001-0019 Error found searching for command tty. No such path or directory. Using CATALINA_BASE: /wintouch/tomcat Using CATALINA_HOME: /wintouch/tomcat Using CATALINA_TMPDIR: /wintouch/tomcat/temp Using JRE_HOME:/QOpenSys/QIBM/ProdData/JavaVM/jdk60/32bit Using CLASSPATH: /wintouch/tomcat/bin/bootstrap.jar:/wintouch/tomcat/bin/tomcat-juli.jar Which is to say, /QOpenSys/QIBM/ProdData/JavaVM/jdk60/32bit/jre is a JVM that, so far as I'm aware, doesn't have any problems with Tomcat. Everything above is exactly the same as in a successful launch on our V6R1 box. And Catalina.out is mercifully short this time: java.lang.ClassNotFoundException: org.apache.catalina.startup.Catalina at java.net.URLClassLoader.findClass(URLClassLoader.java:432) at java.lang.ClassLoader.loadClass(ClassLoader.java:642) at java.lang.ClassLoader.loadClass(ClassLoader.java:608) at org.apache.catalina.startup.Bootstrap.init(Bootstrap.java:236) at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:425) It's obviously trying to tell me SOMETHING, but I can't determine WHAT it's trying to tell me. It's trying to tell you it can't find the class o.a.c.startup.Catalina. This is normally in TC_HOME/lib/catalina.jar. A. Does it exist there? B. Does the user the process is running as have permission to read that file and directory? C. If yes to A B, is the file corrupt? Any ideas? I don't see the class it's complaining about in either of the two JARs listed on the classpath dumped to STDOUT, but if that were the problem, it wouldn't work here, either. -- JHHL - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org signature.asc Description: This is a digitally signed message part
Re: service() failed with http error 413 - error log message from isapi_redirect.log file
Hi Ann, On Mon, 2012-07-16 at 19:18 -0700, ann ramos wrote: Hi, We are using HP Service Manager 9.2 system. The web client tier was set up using Windows 2008 R2 64-bit, IIS 7.5, Tomcat 6 and Isapi Redirector 1.2.30. The client is accessing the site by https because we had created a certificate and binded it to the IIS. Here are the steps that I used: 1. Go to IIS. 2. Go to Server Certificate. 3. Choose complete certificate request. 4. Upload the certificate file with the cer extension. 5. Go to Default Website. 6. Bind it to HTTPS and point it to the certificate that you just uploaded in #4. Everything is working fine. User can access the system through web. I noticed the following messages (attached fle ) from the isapi_redirect.log file. Would appreciate it if someone can provide additional information about the message and some ways/ideas on stopping them from occurring. As the log message suggests, 413 is a standard HTTP error code. Quote from http://www.faqs.org/rfcs/rfc2616.html: 10.4.14 413 Request Entity Too Large The server is refusing to process a request because the request entity is larger than the server is willing or able to process. The server MAY close the connection to prevent the client from continuing the request. If the condition is temporary, the server SHOULD include a Retry- After header field to indicate that it is temporary and after what time the client MAY try again. Based on messages like this from the log you attached: ajp_marshal_into_msgb::jk_ajp_common.c (469): failed appending the header value it sounds like you might need to bump 'max_packet_size' in your workers.properties. See http://tomcat.apache.org/connectors-doc/reference/workers.html for details. HOWEVER, did you notice this in the log? [Mon Jul 16 15:19:37.365 2012] [3420:6708] [emerg] HttpFilterProc::jk_isapi_plugin.c (1921): [/sm9/dv/META-INF/services/javax.xml.transform.TransformerFactory] points to the web-inf or meta-inf directory. Somebody tries to hack into the site!!! Someone may be trying to exploit buffer overruns on your site. My apologies if the information that I have provided is not complete. Let me know so I can add some more details. Thanks and regards! Ann - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org signature.asc Description: This is a digitally signed message part
Re: Logging framework for Tomcat -Exceptions
On Thu, 2012-07-12 at 06:35 +0530, Kiran Badi wrote:
Hi,
I have below code for catching DAO exceptions,
No, it's not. It's code that defines an interface and a poorly
implemented exception type. There's no catching. Anywhere.
but I feel its not correct
way to do this,Can some one point me to some library which will capture
all exceptions which my code will throw and works with tomcat. I
implementing Model2 mvc pattern and to my surprise I am able to show
values to the view but database is not getting inserted.I am lost given
that no exception is also being thrown anywhere.All logs looks clean but
DB is not updated.
import java.sql.Connection;
public interface DAO {
Connection getConnection() throws DAOException;
}
public class DAOException extends Exception {
private static final long serialVersionUID = 19192L;
public DAOException() {
}
public DAOException(String message) {
this.message = message;
}
@Override
public String getMessage() {
return message;
}
public void setMessage(String message) {
this.message = message;
}
private String message;
@Override
public String toString() {
return message;
}
}
Other than including Tomcat in the subject, this has nothing to do with
Tomcat. No offense, but this really isn't a list for teaching Java.
But what the hell, I'll make one exception:
public class DAOException extends Exception {
public DAOException(String msg) {
super();
}
public DAOException(String msg) {
super(msg);
}
public DAOException(String msg, Throwable cause) {
super(msg, cause);
}
public DAOException(Throwable cause) {
super(cause);
}
}
That's all I'll say on this thread.
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
signature.asc
Description: This is a digitally signed message part
RE: soap location address
On Tue, 2012-07-10 at 08:17 -0400, Toman, Chuck [Stock] wrote: I wish it was so :-( Whatever WebServices/SOAP/WSDL library you're using (if any) should provide support for setting the target address at runtime. You can get help on one of their support forums. If not (wtf!) make friends with one of these: http://axis.apache.org/ http://cxf.apache.org/ Thanks, Charles G. Toman Trend DBA T: +1 (919) 431 1792 · M: +1 (919) 524 8652 Customer Focused, Associate Driven. -Original Message- From: Tim Watts [mailto:t...@cliftonfarm.org] Sent: Monday, July 09, 2012 12:30 PM To: Tomcat Users List Subject: RE: soap location address On Mon, 2012-07-09 at 10:14 -0400, Toman, Chuck [Stock] wrote: Yes, I believe so Somehow in Apache Tomcat the hostname can be dynamically change for soap location address. Are you asserting this as fact or do you just wish it were so? Tomcat is a web application container. What leads you to believe Tomcat and the Servlet spec are intrinsically tied to SOAP and/or WSDL? Thanks, Charles G. Toman Trend DBA T: +1 (919) 431 1792 * M: +1 (919) 524 8652 Customer Focused, Associate Driven. -Original Message- From: Pid [mailto:p...@pidster.com] Sent: Friday, July 06, 2012 4:44 PM To: Tomcat Users List Subject: Re: soap location address On 06/07/2012 20:00, Toman, Chuck [Stock] wrote: How do you dynamically change soap location for WSDL files? Are you asking this question on the right mailing list? This list is for questions about Apache Tomcat. p - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org signature.asc Description: This is a digitally signed message part
RE: soap location address
On Mon, 2012-07-09 at 10:14 -0400, Toman, Chuck [Stock] wrote: Yes, I believe so Somehow in Apache Tomcat the hostname can be dynamically change for soap location address. Are you asserting this as fact or do you just wish it were so? Tomcat is a web application container. What leads you to believe Tomcat and the Servlet spec are intrinsically tied to SOAP and/or WSDL? Thanks, Charles G. Toman Trend DBA T: +1 (919) 431 1792 * M: +1 (919) 524 8652 Customer Focused, Associate Driven. -Original Message- From: Pid [mailto:p...@pidster.com] Sent: Friday, July 06, 2012 4:44 PM To: Tomcat Users List Subject: Re: soap location address On 06/07/2012 20:00, Toman, Chuck [Stock] wrote: How do you dynamically change soap location for WSDL files? Are you asking this question on the right mailing list? This list is for questions about Apache Tomcat. p signature.asc Description: This is a digitally signed message part
Re: Error Starting webapp. FAIL - Application at context path /cyclos could not be started.
Hi Rick, On Thu, 2012-07-05 at 13:15 -0400, Rick Bragg wrote: Hi, After upgrading one of my web applications (cyclos) I can no longer start up the web application. I get the following error: FAIL - Application at context path /cyclos could not be started. I tried undoing my upgrade, but I still get errors. Has anybody run into this? What would be the best way to find a solution? Based on the logs you included the root problem is that the Hibernate class org.hibernate.type.StandardBasicTypes is missing. If it were me administering this system I'd start by contacting the vendor with this log output and ask them to help me get it fixed. Hibernate is a commonly used framework for accessing objects in a database. The following is in my catalina log: - Jul 5, 2012 1:03:22 PM org.apache.catalina.core.StandardContext start SEVERE: Error listenerStart Jul 5, 2012 1:03:22 PM org.apache.catalina.core.StandardContext start SEVERE: Context [/cyclos] startup failed due to previous errors Jul 5, 2012 1:03:23 PM org.apache.catalina.loader.WebappClassLoader clearReferencesJdbc SEVERE: A web application registered the JBDC driver [com.mysql.jdbc.Driver] but failed to unregister it when the web application was stopped. To prevent a memory leak, the JDBC Driver has been forcibly unregistered. Jul 5, 2012 1:03:23 PM org.apache.catalina.loader.WebappClassLoader clearReferencesThreads SEVERE: A web application appears to have started a thread named [MySQL Statement Cancellation Timer] but has failed to stop it. This is very likely to create a memory leak. Jul 5, 2012 1:03:23 PM org.apache.catalina.loader.WebappClassLoader clearThreadLocalMap SEVERE: A web application created a ThreadLocal with key of type [java.lang.ThreadLocal] (value [java.lang.ThreadLocal@50ba0dfc]) and a value of type [org.apache.cxf.bus.CXFBusImpl] (value [org.apache.cxf.bus.CXFBusImpl@66ec44cb]) but failed to remove it when the web application was stopped. To prevent a memory leak, the ThreadLocal has been forcibly removed. - Also, the following is in my localhost log: - Jul 5, 2012 1:03:10 PM org.apache.catalina.core.ApplicationContext log INFO: HTMLManager: start: Starting web application at '/cyclos' Jul 5, 2012 1:03:11 PM org.apache.catalina.core.ApplicationContext log INFO: Initializing Spring root WebApplicationContext Jul 5, 2012 1:03:22 PM org.apache.catalina.core.StandardContext listenerStart SEVERE: Exception sending context initialized event to listener instance of class org.springframework.web.context.ContextLoaderListener org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'sessionFactory' defined in class path resource [nl/strohalm/cyclos/spring/persistence.xml]: Invocation of init method failed; nested exception is java.lang.NoClassDefFoundError: org/hibernate/type/StandardBasicTypes Caused by: java.lang.NoClassDefFoundError: org/hibernate/type/StandardBasicTypes at nl.strohalm.cyclos.utils.hibernate.PeriodType.clinit(PeriodType.java:35) at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39) at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27) at java.lang.reflect.Constructor.newInstance(Constructor.java:513) at java.lang.Class.newInstance0(Class.java:355) at java.lang.Class.newInstance(Class.java:308) at org.hibernate.type.CompositeCustomType.init(CompositeCustomType.java:69) at org.hibernate.type.TypeFactory.heuristicType(TypeFactory.java:265) at org.hibernate.mapping.SimpleValue.getType(SimpleValue.java:283) at org.hibernate.mapping.SimpleValue.isValid(SimpleValue.java:276) at org.hibernate.mapping.Property.isValid(Property.java:207) at org.hibernate.mapping.PersistentClass.validate(PersistentClass.java:458) at org.hibernate.mapping.RootClass.validate(RootClass.java:215) at org.hibernate.cfg.Configuration.validate(Configuration.java:1149) at org.hibernate.cfg.Configuration.buildSessionFactory(Configuration.java:1334) at org.springframework.orm.hibernate3.LocalSessionFactoryBean.newSessionFactory(LocalSessionFactoryBean.java:805) at nl.strohalm.cyclos.spring.CustomSessionFactoryBean.newSessionFactory(CustomSessionFactoryBean.java:61) at org.springframework.orm.hibernate3.LocalSessionFactoryBean.buildSessionFactory(LocalSessionFactoryBean.java:745) at org.springframework.orm.hibernate3.AbstractSessionFactoryBean.afterPropertiesSet(AbstractSessionFactoryBean.java:134) at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.invokeInitMethods(AbstractAutowireCapableBeanFactory.java:1203) at
Re: Tomcat shutdown.sh troubleshooting on AS/400
On Wed, 2012-06-20 at 19:19 -0400, David Kerber wrote: On 6/19/2012 8:07 PM, André Warnier wrote: James Lampert wrote: . . . and when I looked back at the box I was testing, Tomcat *had* finally shut down. And when I ran both the start and stop scripts this time, the stop script worked perfectly (and promptly). Weird. Why would the shutdown take so long as to give the impression it had failed entirely, then eventually work, then later work promptly? 1) Gremlins. You need to exorcise your datacenter. or 2) because the first time, Tomcat had been running for a while, so it had a lot of things to shut down nicely and cleanup; while the second time, it had only be running for a much shorter time, and had less to clean up ? It's not gremlins, it's magic. I see this all the time on windows: it shuts down in the time I'm willing to wait for it ~50% of the time. The other 50% I end up killing the task. Any time I've seen this it's because some app or library has carelessly started non-daemon threads that are still spinning. Everything Tomcat can shutdown has shutdown. You could always try 'catalina.sh stop -force'. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org signature.asc Description: This is a digitally signed message part
Re: Protect JSP from Direct Access in Tomcat 7.0.xx
Hi Kiran, On Tue, 2012-06-19 at 05:40 +0530, Kiran Badi wrote: Hi All, I need your guidance again.I have bunch of JSP's close to 100+ which I need to protect it from direct access. By direct access do you mean that http://host/myapp/sample.jsp is returning the JSP source code rather than executing it? Or do you mean that you don't want any .jsp URLs to be accessible to users? I have this mapping in web xml and this is not working,It seems that probably i need to define a role first and then use below settings.But unfortunately my app is open internet application which does not use realm at all. security-constraint display-nameDenyAccesstoDirectJSP/display-name web-resource-collection web-resource-namesample.jsp/web-resource-name descriptionSample confirmation JSP/description url-pattern*.jsp/url-pattern http-methodGET/http-method http-methodPOST/http-method /web-resource-collection /security-constraint This isn't going to help you. Dump it. All my jsp's are residing in the webpages folder of project directory.I know this is incorrect and probably gives direct access to jsp's. So I have some clarification to ask, 1. is their a way to tell tomcat to not to serve direct jsp's probably via web xml If by serve direct jsp's you mean don't return source code then, yes. Put them under your web app's directory. For example, if your web app's context is 'myapp' then in tomcat it will be deployed under TC_BASE/webapps/myapp. You could put them directly in this directory or group them under a separate directory; 'jsps' for instance. Then sample.jsp would be addressed as http://host/myapp/sample.jsp (or http://host/myapp/jsps/sample.jsp ) 2. Is their any extra setting that is required if I move my JSP's inside web-inf.I created a folder under web-inf and create sample hello world.jsp and then tried to invoke that jsp but got 404 message. First of all, it's WEB-INF. Case matters. No, there's no special setting that will directly expose anything under WEB-INF via a URL. That's the part of the Servlet Spec. It's a Good Thing®. However, if you're trying to make your JSPs inaccessible via URLs, then you can move them there and have them indirectly accessed using a servlet which forwards the request to them. See ServletContext.getRequestDispatcher() and RequestDispatcher.forward(). Hopefully, you're trying to use or move toward the MVC (Model, View, Controller) pattern. If not, you should. Google MVC design pattern. There are many, many frameworks that will make this easier for you (once you learn them): Struts, Spring MVC... If you're well into your project and don't want to add a framework to it you could write a simple servlet that uses an algorithm to map URI paths to JSPs then forwards to the JSP using a dispatcher. For instance, you could put your JSPs in myapp/WEB-INF/jsps. Then have the servlet map a URI such as /sample to /WEB-INF/jsps/sample.jsp (all relative to /myapp). This isn't a great approach because you really aren't separating the model from the view (all the app logic and display logic are housed in the JSP -- a maintenance nightmare). But if you don't have time to re-architect the app now, it will hide the .jsp's from direct access. And it will put you in a slightly better position if/WHEN you do re-architect it. - Kiran - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org signature.asc Description: This is a digitally signed message part
Re: Protect JSP from Direct Access in Tomcat 7.0.xx
On Tue, 2012-06-19 at 08:48 +0530, Kiran Badi wrote: No its not returning source code.I have couple of jsps where in I use EL in those to access session objects and directly accessing those jsps is not something I want. Good move. SNIP 2. Is their any extra setting that is required if I move my JSP's inside web-inf.I created a folder under web-inf and create sample hello world.jsp and then tried to invoke that jsp but got 404 message. First of all, it's WEB-INF. Case matters. Ok got it. No, there's no special setting that will directly expose anything under WEB-INF via a URL. That's the part of the Servlet Spec. It's a Good Thing®. However, if you're trying to make your JSPs inaccessible via URLs, then you can move them there and have them indirectly accessed using a servlet which forwards the request to them. See ServletContext.getRequestDispatcher() and RequestDispatcher.forward(). Yup I have lot many of request dispatchers in servlets.Almost all my JSP's are using data which is forwarded by servlets.I pull data from db via servlet, store it in session scope,forward it to jsp and in jsp access it via el.On logoff I remove attributes from the session. So then those JSPs which are forwarded to by servlets (typical controllers in MVC) could be moved to WEB-INF/whatever and then the servlets would use a dispatcher to forward to /WEB-INF/whatever/sample.jsp instead of /webpages/sample.jsp or whatever they're using now. You'd need to physically move those JSPs then update the servlets to use the JSPs' new location. Hopefully, you're trying to use or move toward the MVC (Model, View, Controller) pattern. If not, you should. Google MVC design pattern. There are many, many frameworks that will make this easier for you (once you learn them): Struts, Spring MVC... If you're well into your project and don't want to add a framework to it you could write a simple servlet that uses an algorithm to map URI paths to JSPs then forwards to the JSP using a dispatcher. For instance, you could put your JSPs in myapp/WEB-INF/jsps. Then have the servlet map a URI such as /sample to /WEB-INF/jsps/sample.jsp (all relative to /myapp). http://localhost:8080/mysite/WEB-INF/jsp/newjsp.jsp I just created folder jsp under WEB-INF and then added newjsp.jsp(this is hello world jsp) and then ran the file.I get 404 error. I am trying all this with netbeans. Well I hope by now you understand why or we're just going in circles. Of course, that URL gives a 404: it's trying to access WEB-INF which is never accessible via HTTP. But it is accessible via RequestDispatcher.forward() -- e.g.: servletCtx.getRequestDispatcher(/WEB-INF/jsp/newjsp.jsp).forward(request, response); This is kind of like what you said earlier that your servlets are essentially doing, right? This isn't a great approach because you really aren't separating the model from the view (all the app logic and display logic are housed in the JSP -- a maintenance nightmare). But if you don't have time to re-architect the app now, it will hide the .jsp's from direct access. And it will put you in a slightly better position if/WHEN you do re-architect it. I think I am using kind of MVC pattern of course the one used around 6 to 8 years back.I am using jsp as view, servlet as kind controller and then some beans/jstl and el to make my life easy somewhat. I would love to work with frameworks like spring or struts someday. They're free you know. :-) But of course, free software doesn't add hours to the day. You're basically rolling your own MVC and that will probably help you understand better what these frameworks do. But move away from this as soon as you can. They've solved a lot of problems you probably haven't even considered and they can make your applications much less brittle if you take the time to learn them well. Ok let me explain as what I need again, I have form A with say about 10 fields, lets call this as jsp A. So in browser bar it looks like http://localhost:8080/mysite/A.jsp Ah, so you do want SOME of your JSPs to be URL accessible! Well, if A.jsp doesn't and never ever will have any dependencies on the application's state then fine. Maybe it's true today but I doubt it will stay that way. So it's probably better to be consistent and hide this as well. User fills this A.jsp and then clicks Submit button. It posts the form to Servlet B which does insert in the database and then forwards the request via request dispatcher to C.jsp which has some confirmation details in it.(Unique reference ids pulled out from DB). So on submit, an HTTP POST is sent to http://localhost:8080/mysite/B. Then servlet B does its work and essentially invokes: ctx.getRequestDispatcher(/C.jsp).forward(request, response); then C.jsp sends back the response using data from the session. Is this right? (btw, you know your app'ss
Re: Javamail exception in tomcat 7.0.11
On Tue, 2012-06-19 at 10:54 +0530, Kiran Badi wrote:
Hi All,
I have send mail servlet, which looks something like below,
protected void doPost(HttpServletRequest request, HttpServletResponse
response) throws ServletException, IOException {
String emailRecipient = request.getParameter(name);
// String emailRecipient = xxx;
try {
Message msg = new MimeMessage(this.session);
Looks like your mail session isn't getting initialized properly and you
left out that piece of the puzzle. How where does 'this.session' get
set?
msg.setFrom(new InternetAddress(xxx));
System.out.println( remoteAddr is + emailRecipient + ');
for (int i = 0; i 10; i++) {
msg.setRecipients(Message.RecipientType.TO,
InternetAddress.parse(emailRecipient, false));
}
msg.setSubject(Test email);
msg.setText(Hello This is test mail);
msg.setSentDate(new Date());
Transport.send(msg); *(This is line number 60)*
System.out.println(Message sent OK.);
} catch (Exception ex) {
Logger.getLogger(MailSendingServlet.class.getName()).log(Level.SEVERE,
null, ex);
}
}
}
and I have javamail reference declared in context.xml something like
this one,
Resource name=mail/ourstorymailsession
auth=Container
type=javax.mail.Session
mail.smtp.host=smtp.gmail.com
mail.smtp.port=465
mail.smtp.auth=true
mail.smtp.user=sender userid
password=
mail.smtp.starttls.enable=true
mail.smtp.socketFactory.class=javax.net.ssl.SSLSocketFactory
mail.debug=true /
and web.xml something like
resource-ref
description
My site mail server
/description
res-ref-namemail/mysitemailsession/res-ref-name
Doesn't match your Resource definition name.
--tim
res-typejavax.mail.Session/res-type
res-authContainer/res-auth
res-sharing-scopeShareable/res-sharing-scope
/resource-ref
With this setting now I am getting below exception,
avax.mail.MessagingException: Could not connect to SMTP host: localhost,
port: 25;
nested exception is:
java.net.ConnectException: Connection refused: connect
at com.sun.mail.smtp.SMTPTransport.openServer(SMTPTransport.java:1934)
at
com.sun.mail.smtp.SMTPTransport.protocolConnect(SMTPTransport.java:638)
at javax.mail.Service.connect(Service.java:295)
at javax.mail.Service.connect(Service.java:176)
at javax.mail.Service.connect(Service.java:125)
at javax.mail.Transport.send0(Transport.java:194)
at javax.mail.Transport.send(Transport.java:124)
at indianads.MailSendingServlet.doPost(MailSendingServlet.java:60)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:641)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:722)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:304)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
at
org.netbeans.modules.web.monitor.server.MonitorFilter.doFilter(MonitorFilter.java:393)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:240)
at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:164)
at
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:498)
at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:164)
at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:100)
at
org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:562)
at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118)
at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:394)
at
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:243)
at
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:188)
at
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:166)
at
org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:302)
at
java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:886)
at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:908)
at java.lang.Thread.run(Thread.java:662)
Caused by:
Re: Threads in Tomcat
On Fri, 2012-05-18 at 12:14 -0400, Vance - wrote: I'm maintaining a Web application for searching multiple wikis, this app runs under Tomcat 6. I need to modify a servlet so it instantiates a 'Thread' subclass to perform a wiki availability check every so often, say every 30 minutes. Given that I'm no expert on the use of threads, a co-worker suggested the following questions to look into: Might want to study the classes interfaces in java.util.concurrent instead of using a raw Thread. Concurrency often ends up being trickier than it first appears and the classes interfaces in this package were designed to handle a lot of these subtle details for you. The Executors class in particular has some pre-built common configurations ready to instantiate. · Does the spawned thread have a time limit imposed by Tomcat? · Does it take up worker thread space from other Tomcat threads? I believe the simple answer to these is No. Which is to say I don't believe Tomcat per se enforces such limits. However, it may be possible that an active SecurityManager could impose them. Would be unusual though -- especially the 1st question. I'd appreciate any help anyone could give w.r.t. these questions. signature.asc Description: This is a digitally signed message part
Re: how
On Wed, 2012-05-09 at 20:29 -0500, Reissner Pabón wrote: how can i conect apache toncat 7 to oracle 10 g or oracle 11 g an adobe flex? to make a ria? tnaks Your question is too broad, as is your subject line. Please read this: http://catb.org/~esr/faqs/smart-questions.html Also, if you're trying to write an RIA you'll probably get better help on the Adobe forums. signature.asc Description: This is a digitally signed message part
Re: Tomcat advantages
I've been trying to get Tomcat to chase my mouse for year with no luck. On Wed, 2012-03-14 at 10:29 -0400, Mark H. Wood wrote: But does it also walk dogs? signature.asc Description: This is a digitally signed message part
Re: Inconsistency in AjpMessage.java
On Wed, 2012-02-29 at 00:40 +0800, Ken Cheung wrote:
I observed some code clones in Tomcat and found inconsistent code.
Could anyone explain why this is not a bug?
If you think it's a bug can you explain why you think so? You may get
more value out of the homework assignment by pondering this.
/tomcat/trunk/java/org/apache/coyote/ajp/AjpMessage.java
195if (cc == null) {
196log.error(sm.getString(ajpmessage.null),
197new NullPointerException());
198appendInt(0);
199appendByte(0);
200return;
201}
202int start = cc.getStart();
203int end = cc.getEnd();
204appendInt(end - start);
205char[] cbuf = cc.getBuffer();
206for (int i = start; i end; i++) {
207char c = cbuf[i];
208// Note: This is clearly incorrect for many strings,
209// but is the only consistent approach within the current
210// servlet framework. It must suffice until servlet output
211// streams properly encode their output.
212if (((c = 31) (c != 9)) || c == 127 || c 255) {
213c = ' ';
214}
215appendByte(c);
216}
217appendByte(0);
/tomcat/trunk/java/org/apache/coyote/ajp/AjpMessage.java
230if (str == null) {
231log.error(sm.getString(ajpmessage.null),
232new NullPointerException());
233appendInt(0);
234appendByte(0);
235return;
236}
237int len = str.length();
238appendInt(len);
239for (int i = 0; i len; i++) {
240char c = str.charAt (i);
241// Note: This is clearly incorrect for many strings,
242// but is the only consistent approach within the current
243// servlet framework. It must suffice until servlet output
244// streams properly encode their output.
245if (((c = 31) (c != 9)) || c == 127 || c 255) {
246c = ' ';
247}
248appendByte(c);
249}
250appendByte(0);
Quick description of the inconsistency
Two code snippets are very similar code, but as you see, both codes
use different ways to compute the condition of for loop.
signature.asc
Description: This is a digitally signed message part
Re: Problem running my webapp with Tomcat 7.0.22.0 Security Manager enabled (Windows Vista)
On Tue, 2012-01-10 at 22:06 +, ja...@mobilewebexpert.co.uk wrote: Basically, I've created a webapp which runs fine on my development machine, but our actual hosting is shared (and uses a Security Manager) and some new libraries we're using throws up loads of exceptions which we need to replicate locally, hence the need for me to activate the Security Manager. If it makes things any simpler, the webapp runs as the root context. Any chance you could help me out with the code I need for catalina.policy? Sounds like your host provider is prescribing the security constraints and you want to replicate that to see what adjustments need to be made to the app and/or the policy file. Why not grab the policy file on your target host and start with that? - Original Message - From: Pid p...@pidster.com To: Tomcat Users List users@tomcat.apache.org Sent: Tuesday, January 10, 2012 7:47 PM Subject: Re: Problem running my webapp with Tomcat 7.0.22.0 Security Manager enabled (Windows Vista) - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org signature.asc Description: This is a digitally signed message part
Re: Tomcat 7 SSL activation on AS/400? (Cross-posted to JAVA400)
On Tue, 2012-01-10 at 09:35 -0800, James Lampert wrote: Tim Watts wrote: That's a possibility if it's padding the passwords as well. I'm not an AS/400 expert by any means. Is /foo a preallocated file and if so could the problem be with the way it was allocated? The Java-400 list over at Midrange.com is also in on this (albeit not this specific message). I tried putting the password, and some of the values, in single quotes, and others in double quotes. No change in behavior: the confirmation message fields were padded, and the quote marks were shown in them. Hmm. THIS is INTERESTING! If I FTP a keystore created on my WinDoze box onto the 400, then KEYTOOL there can read it. FASCINATING. Ha! Presumably you FTP-ed in binary mode? Maybe that solves your original problem too. I know the big mainframe OSes can run Unix VMs which is what the bank where I used to work ran all their Java servers in. Perhaps AS/400 has something similar and would make your app easier to manage. Hope there's an AS/400 expert lurking on the list; I don't think I can offer much further help. If you do work it out on midrange.com maybe you could post your solution here too for others to learn from. Good Luck. -- JHHL - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org signature.asc Description: This is a digitally signed message part
Re: Tomcat 7 SSL activation on AS/400?
Can you successfully run this command:
keytool -list -keystore {path/to/your/keystore/file} -storepass
{passwd-in-server.xml}
If so, perhaps it's a character encoding issue? Don't remember if
AS/400 uses EBCDIC as its default character set.
On Mon, 2012-01-09 at 14:42 -0800, James Lampert wrote:
I'm attempting to bring up SSL support in Tomcat 7, on an AS/400 (V6R1).
Tomcat itself runs nicely, but following the instructions on
http://tomcat.apache.org/tomcat-7.0-doc/ssl-howto.html
I am consistently getting:
SEVERE: Failed to initialize connector [Connector[HTTP/1.1-8443]]
Throwable occurred: org.apache.catalina.LifecycleException: Failed to
initialize component [Connector[HTTP/1.1-8443]]
at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:106)
at
org.apache.catalina.core.StandardService.initInternal(StandardService.java:559)
at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:102)
at
org.apache.catalina.core.StandardServer.initInternal(StandardServer.java:781)
at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:102)
at org.apache.catalina.startup.Catalina.load(Catalina.java:573)
at org.apache.catalina.startup.Catalina.load(Catalina.java:598)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:60)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:37)
at java.lang.reflect.Method.invoke(Method.java:611)
at org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:281)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:449)
Caused by: org.apache.catalina.LifecycleException: Protocol handler
initialization failed
at
org.apache.catalina.connector.Connector.initInternal(Connector.java:939)
at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:102)
... 12 more
Caused by: java.io.IOException: Keystore was tampered with, or password was
incorrect
at com.ibm.crypto.provider.JavaKeyStore.engineLoad(Unknown Source)
at java.security.KeyStore.load(KeyStore.java:414)
at
org.apache.tomcat.util.net.jsse.JSSESocketFactory.getStore(JSSESocketFactory.java:407)
at
org.apache.tomcat.util.net.jsse.JSSESocketFactory.getKeystore(JSSESocketFactory.java:306)
at
org.apache.tomcat.util.net.jsse.JSSESocketFactory.getKeyManagers(JSSESocketFactory.java:565)
at
org.apache.tomcat.util.net.jsse.JSSESocketFactory.getKeyManagers(JSSESocketFactory.java:505)
at
org.apache.tomcat.util.net.jsse.JSSESocketFactory.init(JSSESocketFactory.java:449)
at
org.apache.tomcat.util.net.jsse.JSSESocketFactory.createSocket(JSSESocketFactory.java:158)
at org.apache.tomcat.util.net.JIoEndpoint.bind(JIoEndpoint.java:369)
at
org.apache.tomcat.util.net.AbstractEndpoint.init(AbstractEndpoint.java:553)
at org.apache.coyote.AbstractProtocol.init(AbstractProtocol.java:369)
at
org.apache.coyote.http11.AbstractHttp11JsseProtocol.init(AbstractHttp11JsseProtocol.java:119)
at
org.apache.catalina.connector.Connector.initInternal(Connector.java:937)
... 13 more
Caused by: java.security.UnrecoverableKeyException: Password verification
failed
... 26 more
I've tried it with the default keystore name, location, and passwords;
I've tried it with an explicit name, location, and both key and keystore
paswords. The above exceptions are thrown consistently, except for one
occasion when the keystore simply didn't exist where expected.
--
James H.
Re: Tomcat 7 SSL activation on AS/400? (Cross-posted to JAVA400)
On Mon, 2012-01-09 at 15:55 -0800, James Lampert wrote:
Tim Watts (from the Tomcat Users List) wrote:
Can you successfully run this command:
keytool -list -keystore {path/to/your/keystore/file} -storepass
{passwd-in-server.xml}
It gives the same error message. And yes, EBCDIC is the default encoding
for AS/400s. The attributes on /foo show that it has a CCSID of 819,
though, which (if my memory and the IBM docs are correct) is ASCII.
Here's a QShell transcript from a test I ran specifically so that I
could post everything without betraying any passwords:
keytool -genkey -alias foo -keyalg RSA -keystore /foo
Enter keystore password:
bar
What is your first and last name?
[Unknown]:
James Lampert
What is the name of your organizational unit?
[Unknown]:
Development Lab
What is the name of your organization?
[Unknown]:
Touchtone Corporation
What is the name of your City or Locality?
[Unknown]:
Costa Mesa
What is the name of your State or Province?
[Unknown]:
California
What is the two-letter country code for this unit?
[Unknown]:
US
Is CN=James Lampert
, OU=Development Lab
, O=Touchtone Corporation
, L=Costa Mesa
, ST=California
, C=US
correct? (type yes or no)
[no]:
yes
Enter key password for foo:
(RETURN if same as keystore password):
bar
$
keytool -list -keystore /foo -storepass bar
keytool error (likely untranslated): java.io.IOException: Keystore was
tampered with, or password was incorrect
$
Another thought occurred to me: Could the trailing blanks shown in the
confirmation message have anything to do with the problem?
That's a possibility if it's padding the passwords as well. I'm not an
AS/400 expert by any means. Is /foo a preallocated file and if so could
the problem be with the way it was allocated?
Perhaps what's encrypted in the file was ASCII but the keystrokes in
your shell (and chars in server.xml file) are EBCDIC?
--
JHHL
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
signature.asc
Description: This is a digitally signed message part
Re: Different session id per page
On Sat, 2011-12-31 at 00:33 -0600, Jerry Malcolm wrote: I have a web app that's worked for years. I had to go in and do some renovations on it due to a few new requirements. Now for some reason, I'm getting a new/different session id for each page. It's easy to see that's what happening since I use the sessionid for a log file name. Where I used to get one log file when clicking through a series of pages, I now get a bunch of logging files. This is a problem since I store data in the session object between pages. And now the pages cannot find the data. This is on TC 7. The only major thing I'm doing differently now that I can figure might affect it is I'm using mod_rewrite in apache httpd. But I'm grasping at straws. I really don't see how mod_rewrite would be preventing session data from passing through. Or could it? The way I understand it, it's simply a session key that's passed back and forth as a cookie, right? The session ID could also be embedded in the URL and perhaps mod_rewrite is dropping it. You could compare the access logs in httpd vs tomcat (enable them in tomcat if necessary). Any ideas why I'm losing my sessions on each page? Thx Jerry signature.asc Description: This is a digitally signed message part
Re: Odd NIO connector behavior
On Thu, 2011-12-29 at 11:22 -0800, Matthew Tyson wrote:
BIG SNIP
How an empty 200 response could be generated
without executing the logging statement here is a mystery.
Do you still have that MonitoringFilter configured in the web app?
Perhaps it is short circuiting the chain.
protected void service(HttpServletRequest request, HttpServletResponse
response) throws ServletException, IOException
{
logger.info(REQUEST: + request.getRemoteAddr() ++
request.getMethod() ++ request.getQueryString() + | TRACE: , new
Throwable());
if (OPTIONS.equals(request.getMethod()))
{
serviceOptions(request, response);
return;
}
HttpTransport transport = null;
ListString allowedTransports = _bayeux.getAllowedTransports();
for (String transportName : allowedTransports)
{
ServerTransport serverTransport =
_bayeux.getTransport(transportName);
if (serverTransport instanceof HttpTransport)
{
HttpTransport t = (HttpTransport)serverTransport;
if (t.accept(request))
{
transport = t;
logger.info(ACCEPTED: + request.getRemoteAddr() +
+ t.getClass().getName());
break;
} else {
logger.info(NOT ACCEPTED: + request.getRemoteAddr() +
+ t.getClass().getName());
}
}
}
if (transport == null)
{
if (!response.isCommitted()) {
response.sendError(HttpServletResponse.SC_BAD_REQUEST, Unknown
Bayeux Transport);
} else {
logger.info(NULL TRANSPORT: + request.getRemoteAddr());
}
}
else
{
try
{
_bayeux.setCurrentTransport(transport);
transport.setCurrentRequest(request);
transport.handle(request, response);
}
finally
{
transport.setCurrentRequest(null);
BayeuxServerImpl bayeux = _bayeux;
if (bayeux != null)
bayeux.setCurrentTransport(null);
}
}
}
Best,
Matt Tyson
signature.asc
Description: This is a digitally signed message part
Re: using htop, i see many tomcat processes?
You may have the thread view active. Each thread gets its own PID. I don't know about htop, but in top H (i.e. capital H) toggles this. And it's CATALINA_OPTS not CATALINA_OPT. On Fri, 2011-12-23 at 17:23 -0500, S Ahmed wrote: In my catalina.sh and set CATALINA_OPT, and I have Xmx around 2GB of ram. When I run htop, I see many instances of the tomcat process. I'm on a quad core server (xeon 3450), and I am seeing more than 15 tomcat processes, and one of the columns shows how the process was started with the java executable, and it shows Xmx 128m. Can someone make sense of this to me? :) signature.asc Description: This is a digitally signed message part
RE: AJP 1.3 Connector
On Mon, 2011-12-19 at 13:42 -0500, Troy-McKoy, Vickie wrote: Thanks for your response. When I ping server2, I get valid responses coming back. When I telnet to server2 on port 8009, I am also able to connect. Did you do the telnet test from a shell on the apache host? Did you use the exact name *as configured* (i.e. server2.ourlab.com)? What's the exact error message you're getting and which component (browser, apache) is reporting it? -Original Message- From: André Warnier [mailto:a...@ice-sa.com] Sent: Saturday, December 17, 2011 7:14 AM To: Tomcat Users List Subject: Re: AJP 1.3 Connector Vickie Troy-McKoy wrote: Hi, I'm in need of a little help. I'm trying to get my tomcat and apache web server instances communicating; they are running on two different physical servers. When I attempt a test of the application url, it basically says that a connection cannot be established. I am running the following: RHEL Release 5.6 (x86_64) Apache Tomcat 7.0.14 Apache/2.0.64 mod_jk/1.2.32 On the 1st physical server, the apache webserver instance resides: httpd.conf contains the following: LoadModule jk_module modules/mod_jk.so # JkWorkersFile conf/workers.properties JkMount /* server2 workers.properties contain the following: worker.list=server2 worker.server2.port=8009 worker.server2.host=server2.ourlab.com worker.server2.type=ajp13 worker.server2.lbfactor=1 worker.server2.socket_keepalive=1 On the 2nd physical server, the apache-tomcat instance resides: server.xml contains the following: !-- Define an AJP 1.3 Connector on port 8009 -- Connector port=8009 enableLookups=false protocol=AJP/1.3 redirectPort=8443 / Connector port=8443 maxHttpHeaderSize=8192 protocol=HTTP/1.1 SSLEnabled=true [and various other settings] I am missing something. Can someone please provide help? Thank you... Hi. Your configuration looks fine. The problem then should be with the network. Try the following : From the Apache httpd server (command-line), 1) enter : ping server2.ourlab.com If you get regular messages showing that the ping packets are being answered, it's fine. If you get error messages, then you have a basic network problem accessing server2.ourlab.com from your Apache host. (faked) example of a good answer : PING server2.ourlab.com (192.168.20.1) 56(84) bytes of data. 64 bytes from server2.ourlab.com (192.168.20.1): icmp_seq=1 ttl=64 time=0.326 ms 64 bytes from server2.ourlab.com (192.168.20.1): icmp_seq=2 ttl=64 time=0.158 ms 64 bytes from server2.ourlab.com (192.168.20.1): icmp_seq=3 ttl=64 time=0.156 ms Example of a bad answer : - unknown host - network is not reachable etc.. 2) If the above is fine, then : enter : telnet server2.ourlab.com 8009 It should at least connect (and may drop the connection right away), but the point is : is it connecting ? If it is, you will get an answer similar to this : Trying 192.168.20.1... Connected to colin-int. Escape character is '^]'. xxx Connection closed by foreign host. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - Email messages cannot be guaranteed to be secure or error-free as transmitted information can be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. The Centers for Medicare Medicaid Services therefore does not accept liability for any error or omissions in the contents of this message, which arise as a result of email transmission. CONFIDENTIALITY NOTICE: This communication, including any attachments, may contain confidential information and is intended only for the individual or entity to which it is addressed. Any review, dissemination, or copying of this communication by anyone other than the intended recipient is strictly prohibited. If you are not the intended recipient, please contact the sender by reply email and delete and destroy all copies of the original message. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org signature.asc Description: This is a digitally signed message part
Re: AJP 1.3 Connector
I'm having doubts that mod_jk is actually loading. You say httpd.conf contains this line: LoadModule jk_module modules/mod_jk.so Unless you have a 'modules' directory under your ServerRoot that line should probably be /usr/local/lib/apache/mod_jk.so or something similar. Try this command and see what it turns up: find /usr -name mod_jk.so Use the full path in the LoadModule directive and force httpd to reload its config. On Mon, 2011-12-19 at 22:26 +0100, André Warnier wrote: I'll continue to top-post, since you do. (Note that this is not the most logical way to have a conversation; it is easier when questions and responses follow a logical top-down order). Summary : - your Apache httpd configuration looks OK - your Tomcat AJP Connector looks OK - you can connect with a browser to the HTTP port of Tomcat, and with the URI /, you get the Tomcat homepage - you can ping the Tomcat server from the Apache httpd server - from the Apache httpd server, you can telnet to port 8009 of the Tomcat server - if you remove the JkMount directive from the Apache httpd configuration, you get the expected Apache httpd page - if you insert the JkMount directive, you get a message saying that Tomcat cannot be reached ... Obviously, something is wrong in the above list. If, from the command-line on the Apache httpd host, you can establish a TCP connection to the Tomcat host on port 8009 using telnet, then there is no immediate reason why mod_jk should not be able to do the same. Unless mod_jk is trying to connect to some other host than the one running Tomcat. The thing which causes a bit of doubt there, is that in your workers.properties file, you use the hostname server2.ourlab.com for Tomcat, while in all your other checks and messages, you use the hostname tomcatappserver. Is this just a matter of typing and censoring, or are these really two different names ? Or are they really two different hosts ? That they /should/ be the same host, does not necessarily mean that they /are/. Can you confirm that using the /same/ hostname in your workers.properties file and in your ping and telnet tests, everything goes as you have described it so far ? Note that you can also use the JkLogFile and JkLogLevel directives, to get more explicit error messages from mod_jk. But seen the above, it would probably just tell you that it cannot connect to server2. Troy-McKoy, Vickie wrote: Yes. From the apache host, I pinged and telneted the tomcat host. # ping tomcatappserver PING tomcatappserver (nn.n.nn.nnn) 56(84) bytes of data. 64 bytes from tomcatappserver (nn.n.nn.nnn): icmp_seq=1 ttl=64 time=0.140 ms # telnet tomcatappserver 8009 Trying nn.n.nn.nnn... Connected to tomcatappserver (nn.n.nn.nnn). Escape character is '^]'. Connection closed by foreign host. When I attempt to connect to the tomcatappserver via the apachewebserver, in firefox browser I get: Unable to connect. Firefox can't establish a connection to the serer at tomcatappserver:8009. I just noticed if I put in the browser, the tomcatappserver url with the default port, I get the Apache Tomcat/7.0.14 page. But, if I put in the apachewebserver url with the default port, I get this message: Service Temporarily Unavailable The server is temporarily unable to service your request due to maintenance downtime or capacity problems. Please try again later. Apache/2.0.64 (Unix) mod_jk/1.2.32 Server at x Port 80 When I remove the JkMount and JkWorkersFile from httpd.conf, I get the default Apache web server page. -Original Message- From: Tim Watts [mailto:t...@cliftonfarm.org] Sent: Monday, December 19, 2011 2:20 PM To: Tomcat Users List Subject: RE: AJP 1.3 Connector On Mon, 2011-12-19 at 13:42 -0500, Troy-McKoy, Vickie wrote: Thanks for your response. When I ping server2, I get valid responses coming back. When I telnet to server2 on port 8009, I am also able to connect. Did you do the telnet test from a shell on the apache host? Did you use the exact name *as configured* (i.e. server2.ourlab.com)? What's the exact error message you're getting and which component (browser, apache) is reporting it? -Original Message- From: André Warnier [mailto:a...@ice-sa.com] Sent: Saturday, December 17, 2011 7:14 AM To: Tomcat Users List Subject: Re: AJP 1.3 Connector Vickie Troy-McKoy wrote: Hi, I'm in need of a little help. I'm trying to get my tomcat and apache web server instances communicating; they are running on two different physical servers. When I attempt a test of the application url, it basically says that a connection cannot be established. I am running the following: RHEL Release 5.6 (x86_64
Re: [OT] truststore and keystore SSL
On Mon, 2011-12-19 at 18:06 -0500, Christopher Schultz wrote: On 12/17/11 2:34 AM, Lau Eng Huat wrote: The question that I have now is how to get it to work with apache httpclient components. Have you tried the apache-commons mailing list? Actually Http Components has been a top level project for sometime and they have their own list: http://hc.apache.org/ signature.asc Description: This is a digitally signed message part
Re: Tomcat 6.0 configuration with Adobe LiveCycle DS ES 3.0 Server
On Sun, 2011-12-18 at 01:11 +0530, Anshul Asthana wrote: From: André Warnier a...@ice-sa.com To: Tomcat Users List users@tomcat.apache.org Sent: Saturday, 17 December 2011 6:03 PM Subject: Re: Tomcat 6.0 configuration with Adobe LiveCycle DS ES 3.0 Server I have written a simple web application to accept Name using Flex SDK 3.2 HttpService and send it to my web application running on Tomcat 6.0 WebServer. We are Using Flex with LiveCycle DS ES 3.0 to communicate Web Server(Tomcat 6.0). Am able to accept input in flex code but the problem is when trying to send data from Flex client to Tomcat WebServer application, it does not work. Both LifeCycle DS ES 3.0 and WebServer Tomcat 6.0 are running on same machine. LiveCycle DS ES 3.0 uses port no - 8400 WebServer Tomcat 6.0 uses port no - 8000 LiveCycle DS ES 3.0 uses two configuration files :- a. services-config.xml b. proxy-config.xml WebServer Tommcat 6.0 uses one configuration files :- a. web.xml I have worked with Adobe and they have helped me configure LiveCycle DS ES 3.0. I have Installed Flex Debugger and it gives follwoing error message when trying to communicate with Tomcat 6.0 WebServer:- [RPC Fault faultString=Send failed faultCode=Client.Error.MessageSend faultDetail=Channel.Connect.Failed error NetConnection.Call.Failed: HTTP: Status 404: url: 'http://localhost:8400/JLCAPP/messagebroker/amf'] I'm no flex expert but, it looks to me like your flex app is getting a 404 (not found) trying to connect to a LifeCycle server service. I noticed your web.xml has the messagebroker configured in Tomcat. Perhaps that belongs in LifeCycle instead? To be honest, you're going to get precious little help here. It looks to me like your basic problem, at this point, is in understanding how LifeCycle RPC works not Tomcat. I suggest you engage the support forums there. And/Or go through the tutorials (again). at mx.rpc::AbstractInvoker/http://www.adobe.com/2006/flex/mx/internal::faultHandler()[C:\autobuild\3.2.0\frameworks\projects\rpc\src\mx\rpc\AbstractInvoker.as:220] at mx.rpc::Responder/fault()[C:\autobuild\3.2.0\frameworks\projects \rpc\src\mx\rpc\Responder.as:53] at mx.rpc::AsyncRequest/fault()[C:\autobuild\3.2.0\frameworks \projects\rpc\src\mx\rpc\AsyncRequest.as:103] at mx.messaging::ChannelSet/faultPendingSends()[C:\autobuild\3.2.0 \frameworks\projects\rpc\src\mx\messaging\ChannelSet.as:1482] at mx.messaging::ChannelSet/channelFaultHandler()[C:\autobuild\3.2.0 \frameworks\projects\rpc\src\mx\messaging\ChannelSet.as:975] at flash.events::EventDispatcher/dispatchEventFunction() at flash.events::EventDispatcher/dispatchEvent() at mx.messaging::Channel/connectFailed()[C:\autobuild\3.2.0 \frameworks\projects\rpc\src\mx\messaging\Channel.as:997] at mx.messaging.channels::PollingChannel/connectFailed()[C:\autobuild \3.2.0\frameworks\projects\rpc\src\mx\messaging\channels \PollingChannel.as:354] at mx.messaging.channels::AMFChannel/statusHandler()[C:\autobuild \3.2.0\frameworks\projects\rpc\src\mx\messaging\channels \AMFChannel.as:390] Am providing you with the configuration file that am using at Tomcat Webserver namely web.xml. web.xml --- ?xml version=1.0 encoding=UTF-8? web-app xmlns=http://java.sun.com/xml/ns/javaee; xmlns:xsi=http://www.w3.org/2001/XMLSchema-instance; version=2.5 xsi:schemaLocation=http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd; !-- MessageBroker Servlet -- !-- Http Flex Session attribute and binding listener support -- listener listener-classflex.messaging.HttpFlexSession/listener-class /listener servlet servlet-nameaction/servlet-name servlet-classorg.apache.struts.action.ActionServlet/servlet-class init-param param-nameconfig/param-name param-value/WEB-INF/struts-config.xml/param-value /init-param init-param param-namedebug/param-name param-value3/param-value /init-param init-param param-namedetail/param-name param-value3/param-value /init-param load-on-startup1/load-on-startup /servlet servlet servlet-nameMessageBrokerServlet/servlet-name servlet-classflex.messaging.MessageBrokerServlet/servlet-class init-param param-nameservices.configuration.file/param-name param-value/WEB-INF/flex/services-config.xml/param-value /init-param load-on-startup1/load-on-startup /servlet servlet-mapping servlet-nameaction/servlet-name url-pattern*.do/url-pattern /servlet-mapping servlet-mapping servlet-nameMessageBrokerServlet/servlet-name url-pattern/messagebroker/*/url-pattern /servlet-mapping welcome-file-list welcome-filehello.html/welcome-file /welcome-file-list /web-app The problem is that connection is not getting established between
[sidebar] Re: Tomcat 6.0 configuration with Adobe LiveCycle DS ES 3.0 Server
On Sat, 2011-12-10 at 22:45 +, Pid wrote: Yeah... Please also just reply to the mailing list. Are you referring to this (cough, cough): http://catb.org/~esr/faqs/smart-questions.html#easyreply (your Reply-To points to your email not the list). p signature.asc Description: This is a digitally signed message part
Re: Having different apps (contexts) on different ports
On Tue, 2011-11-15 at 11:38 +, Pid wrote: On 15/11/2011 08:01, Mario Splivalo wrote: Can I have several Tomcat contexts on different ports? I need to have manager app listening only on 8080, and all the other apps on 80. Is something like that possible, within one Tomcat Service? You can have more than one Connector. You can't assign individual apps to specific Connectors. Or, if I fire up two services (under same server), each with its own set of connectors, is manager app from one service able to manage apps in another? The Manager application can only manage applications in the same Host. Unfortunately, separate Services will have separate Hosts. Perhaps an alternative that may work good enough would be to bind 8080 to localhost and 80 to a public IP address. Or, similarly, if the machined is multi-homed bind each port to different addresses. Presumably, you'd want the 8080 address to be on an address that doesn't have a route to the Internet. See 'address' on /docs/config/http.html . All the apps will still be available on both ports but if you're concerned about the public accessing 'manager' then putting it on an address they can't reach would give you some measure of isolation. Of course, this also means *you* can't reach 'manager' from outside either -- unless you tunnel in via ssh or something. p - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Having different apps (contexts) on different ports
On Tue, 2011-11-15 at 10:16 -0500, Tim Watts wrote: On Tue, 2011-11-15 at 11:38 +, Pid wrote: On 15/11/2011 08:01, Mario Splivalo wrote: Can I have several Tomcat contexts on different ports? I need to have manager app listening only on 8080, and all the other apps on 80. Is something like that possible, within one Tomcat Service? You can have more than one Connector. You can't assign individual apps to specific Connectors. Or, if I fire up two services (under same server), each with its own set of connectors, is manager app from one service able to manage apps in another? The Manager application can only manage applications in the same Host. Unfortunately, separate Services will have separate Hosts. Perhaps an alternative that may work good enough would be to bind 8080 to localhost and 80 to a public IP address. Or, similarly, if the machined is multi-homed bind each port to different addresses. Presumably, you'd want the 8080 address to be on an address that doesn't have a route to the Internet. See 'address' on /docs/config/http.html . All the apps will still be available on both ports but if you're concerned about the public accessing 'manager' then putting it on an address they can't reach would give you some measure of isolation. Of course, this also means *you* can't reach 'manager' from outside either -- unless you tunnel in via ssh or something. And of course, no need to use different ports if you're using different addresses. But I'm sure that light would have come on soon enough :-) p - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: 403 error starting tomcat 7.0.22 application on windows 7
On Mon, 2011-11-14 at 09:56 +0400, bas...@obninsk.com wrote:
-Исходное сообщение-
From: Tim Watts
Sent: Monday, November 14, 2011 9:09 AM
To: Tomcat Users List
Subject: Re: 403 error starting tomcat 7.0.22 application on windows 7
On Mon, 2011-11-14 at 08:17 +0400, bas...@obninsk.com wrote:
Can you paste the application web.xml file (inline) into your reply?
?xml version=1.0 encoding=UTF-8?
web-app xmlns:xsi=http://www.w3.org/2001/XMLSchema-instance;
xmlns=http://java.sun.com/xml/ns/javaee;
xmlns:web=http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd;
xsi:schemaLocation=http://java.sun.com/xml/ns/javaee
http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd;
version=2.5
display-nameWEB query/display-name
description/description
error-page
error-code404/error-code
location/includes/error404.jsp/location
/error-page
error-page
error-code500/error-code
location/includes/error500.jsp/location
/error-page
servlet
description/description
display-namereportcmnt/display-name
servlet-namereportcmnt/servlet-name
jsp-file/jsp/reportcmnt.jsp/jsp-file
/servlet
servlet-mapping
servlet-namereportcmnt/servlet-name
url-pattern/reportcmnt/url-pattern
/servlet-mapping
/web-app
Do you have an access log configured, if so, what does it show?
0:0:0:0:0:0:0:1 - - [13/Nov/2011:09:50:32 +0300] GET /query HTTP/1.1 302
125 - Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.2 (KHTML,
like
Gecko) Chrome/15.0.874.120 Safari/535.2
0:0:0:0:0:0:0:1 - - [13/Nov/2011:09:50:32 +0300] GET /query/ HTTP/1.1
403
964 - Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.2 (KHTML,
like
Gecko) Chrome/15.0.874.120 Safari/535.2
0:0:0:0:0:0:0:1 - - [13/Nov/2011:11:40:54 +0300] GET /query HTTP/1.1 302
125
http://localhost:8082/manager/html;jsessionid=4D76EA53493CA915B556DB02D1D9932E?org.apache.catalina.filters.CSRF_NONCE=95AB554C225507BE146FBA41E2BF3A97;
Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.2 (KHTML, like Gecko)
Chrome/15.0.874.120 Safari/535.2
0:0:0:0:0:0:0:1 - - [13/Nov/2011:11:40:54 +0300] GET /query/ HTTP/1.1
403
964
http://localhost:8082/manager/html;jsessionid=4D76EA53493CA915B556DB02D1D9932E?org.apache.catalina.filters.CSRF_NONCE=95AB554C225507BE146FBA41E2BF3A97;
Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.2 (KHTML, like Gecko)
Chrome/15.0.874.120 Safari/535.2
What user account is Tomcat running under?
A: local system account. It has full access to the application's folders and
files.
OK, you're getting a 403 on http://localhost:8082/query/ but your
web.xml only shows a mapping for /reportcmnt and no welcome file
declarations. What happens if you use /query/reportcmnt instead?
A: 403 error again.
Is there perhaps an index.html that would have redirected
to /query/reportcmnt?
A: My index.html contains
html
meta content=text/html;charset=utf-8/
head
titleWEB query/title
/head
body
scriptlocation=jsp/app.jsp/script
/body
/html
Q: What version of Tomcat were you using prior to the win7 migration?
A: Tomcat 7.0.22.
I've just installed Tomcat 7.0.22 on WinXP,
then copied my app from Win7 to the WinXp webapps folder and run my app.
It works fine.
So (xp,tc7)=OK but (win7,tc7)=403 for 'query' but not 'manager'.
Presumably on XP you're also running Tomcat as a service under the local
system account? Just for grins, have you tried stopping the service
then running Tomcat from a command shell (e.g. {tc-home}\bin
\startup.bat) on win7 under your user account and see if you still get
the 403?
Just guessing here but is it possible your web app files have security
constraints attached to them that aren't being resolved on win7 but are
on xp?
Are there any conditions in your app logic that would return a 403?
Perhaps it can't access a service from win7 but can from xp? Licensing?
Also, looks like you've done some tweaking on server.xml (e.g. different
server port). Can you paste in this file as well?
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
Re: 403 error starting tomcat 7.0.22 application on windows 7
On Mon, 2011-11-14 at 08:17 +0400, bas...@obninsk.com wrote: Can you paste the application web.xml file (inline) into your reply? ?xml version=1.0 encoding=UTF-8? web-app xmlns:xsi=http://www.w3.org/2001/XMLSchema-instance; xmlns=http://java.sun.com/xml/ns/javaee; xmlns:web=http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd; xsi:schemaLocation=http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd; version=2.5 display-nameWEB query/display-name description/description error-page error-code404/error-code location/includes/error404.jsp/location /error-page error-page error-code500/error-code location/includes/error500.jsp/location /error-page servlet description/description display-namereportcmnt/display-name servlet-namereportcmnt/servlet-name jsp-file/jsp/reportcmnt.jsp/jsp-file /servlet servlet-mapping servlet-namereportcmnt/servlet-name url-pattern/reportcmnt/url-pattern /servlet-mapping /web-app Do you have an access log configured, if so, what does it show? 0:0:0:0:0:0:0:1 - - [13/Nov/2011:09:50:32 +0300] GET /query HTTP/1.1 302 125 - Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.2 (KHTML, like Gecko) Chrome/15.0.874.120 Safari/535.2 0:0:0:0:0:0:0:1 - - [13/Nov/2011:09:50:32 +0300] GET /query/ HTTP/1.1 403 964 - Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.2 (KHTML, like Gecko) Chrome/15.0.874.120 Safari/535.2 0:0:0:0:0:0:0:1 - - [13/Nov/2011:11:40:54 +0300] GET /query HTTP/1.1 302 125 http://localhost:8082/manager/html;jsessionid=4D76EA53493CA915B556DB02D1D9932E?org.apache.catalina.filters.CSRF_NONCE=95AB554C225507BE146FBA41E2BF3A97; Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.2 (KHTML, like Gecko) Chrome/15.0.874.120 Safari/535.2 0:0:0:0:0:0:0:1 - - [13/Nov/2011:11:40:54 +0300] GET /query/ HTTP/1.1 403 964 http://localhost:8082/manager/html;jsessionid=4D76EA53493CA915B556DB02D1D9932E?org.apache.catalina.filters.CSRF_NONCE=95AB554C225507BE146FBA41E2BF3A97; Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.2 (KHTML, like Gecko) Chrome/15.0.874.120 Safari/535.2 What user account is Tomcat running under? OK, you're getting a 403 on http://localhost:8082/query/ but your web.xml only shows a mapping for /reportcmnt and no welcome file declarations. What happens if you use /query/reportcmnt instead? Is there perhaps an index.html that would have redirected to /query/reportcmnt? Q: What version of Tomcat were you using prior to the win7 migration? If you were using a pre-Tomcat7 version you may be butting up against 7's stricter servlet compliance. You should explicitly declare a welcome file in web.xml. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: JVM config for tomcat7.0.19
On Thu, 2011-11-10 at 12:02 -0800, celtic man wrote: Thanks a lot for the quick response.. So i have updated the setenv.sh with -Xms2048M -Xmx2048M -XX:Permsize=512m -XX:MaxPermsize=512m and restarted tomcat.. but when i grep for tomcat process i don't see it .. ps -ef | grep tomcat root 10959 1 19 14:57 pts/400:00:29 /appl/java/bin/java -Dnop -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.endorsed.dirs=/appl/tomcat/endorsed -classpath /appl/tomcat/bin/bootstrap.jar:/appl/tomcat/bin/tomcat-juli.jar -Dcatalina.base=/appl/tomcat -Dcatalina.home=/appl/tomcat -Djava.io.tmpdir=/appl/tomcat/temp org.apache.catalina.startup.Bootstrap start If that's the output of grep after starting tomcat then you are in fact seeing it. Tomcat is a *java* application. Hence it runs under java. do you know why ?? Christopher Schultz-2 wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Celtic, On 11/10/11 8:01 AM, celtic man wrote: Can i set the below parameters on the setenv.sh? Sure. application running on tomcat7.0.19 on linux 64 bit with 2GB total memory and 0.5 GB available memory on the machine. JAVA_OPTS=-Xms2048M -Xmx2048M -XX:Permsize=512m -XX:MaxPermsize=512m If you only have 0.5GiB available, perhaps requesting a 2GiB heap isn't wise. The current setting on the setenv.sh file is : CATALINA_OPTS=-Xmx4000M Well, lowering it from 4GiB to 2 GiB will certainly help free up some of your RAM. If you only have a 2GiB machine, why bother running 64-bit? - -chris -BEGIN PGP SIGNATURE- Version: GnuPG/MacGPG2 v2.0.17 (Darwin) Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk68AJEACgkQ9CaO5/Lv0PBL6wCfR7KU0u5uYtX57GBJOZd6oI49 hzYAoLOjPtnLyZjQ7bSoOVI/ti+LO9rC =qUbu -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: JVM config for tomcat7.0.19
On Fri, 2011-11-11 at 08:40 -0800, celtic man wrote: Is this JAVA setting below OK ? cat /proc/meminfo MemTotal: 4149124 kB MemFree:457884 kB 4Gb total memory on the linux box and have 0.4GB free memory and I think MemFree misleading. Don't quote me but I think you have to add Buffers as well. Or if you can run gnome apps try running gnome-system-monitor and click the Resources tab. Gives a more realistic picture I think. tomcat(6.0.18) running with below : JAVA_OPTS=-Xmx2000M so that i.e 1.9GB ?? or please suggest me the best settings that i add and not have any memory leak issues on the application.. No setting will fix a memory leak. Eventually you'll get OutOfMemoryExceptions. It becomes a question of when and how often do you want to restart. You haven't actually indicated in this thread whether you're getting OOMs. Is that the problem you're trying to address? Pid * wrote: On 10/11/2011 22:45, Igor Cicimov wrote: JAVA_OPTS=-Xms2048M -Xmx2048M -XX:Permsize=512m -XX:MaxPermsize=512m You are allocating here 2.5GB of memory to tomcat ... how do you expect it to start on a box with 2GB in total of which only 500MB are available? +1 It's the perfect way to achieve shockingly bad performance. p On Fri, Nov 11, 2011 at 8:25 AM, Christopher Schultz ch...@christopherschultz.net wrote: Celtic, On 11/10/11 12:02 PM, celtic man wrote: So i have updated the setenv.sh with -Xms2048M -Xmx2048M -XX:Permsize=512m -XX:MaxPermsize=512m and restarted tomcat.. Where is setenv.sh located? Can you give us the full contents of that file? but when i grep for tomcat process i don't see it .. ps -ef | grep tomcat root 10959 1 19 14:57 pts/4 00:00:29 /appl/java/bin/java -Dnop -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.endorsed.dirs=/appl/tomcat/endorsed -classpath /appl/tomcat/bin/bootstrap.jar:/appl/tomcat/bin/tomcat-juli.jar -Dcatalina.base=/appl/tomcat -Dcatalina.home=/appl/tomcat -Djava.io.tmpdir=/appl/tomcat/temp org.apache.catalina.startup.Bootstrap start How are you starting Tomcat? Give us the exact command you are running. -chris - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org -- [key:62590808] - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Session expiration - browser -Web application
On Fri, 2011-11-04 at 07:16 -0700, Léa Massiot wrote: Hello, Thank you for reading my post. Maybe my question is not purely related to Tomcat but here is my problem: - a user logs into my Webapp; - his session expires; - if he: - presses the F5 key (browser refresh functionality), This creates a new session for the user with _none_ of the objects from the old session in it (because it expired). - goes back to the previous screen using the browser go back one page button... all that was stored in the session is lost and the Webapp behaviour is uncertain. Uncertain is a bit vague. This could be a design problem in the app, e.g. if some objects are simply assuming that the session contains certain other objects then you should expect unexpected behaviour. My guess is the behaviours you see are quite certain, just not well understood. Instead, I wish I go direct him to the Webapp log in page. If every page in the web app is supposed to require authentication you need to declare that in web.xml. I'm assuming (perhaps incorrectly) you've already got some declaration in there for form authentication? My Webapp itself behaves properly. My problem occurs only if the user uses browser functionalities or buttons. I don't know how to deal with that issue. Can you help me? Best regards, -- Léa - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Session expiration - browser -Web application
On Fri, 2011-11-04 at 13:07 -0400, Christopher Schultz wrote: On 11/4/11 12:04 PM, Léa Massiot wrote: SNIP I would basically echo what Chris said. [Tim wrote:] I'm assuming (perhaps incorrectly) you've already got some declaration in there for form authentication? What are you thinking about? Can you be more precise? Form authentication is part of the servlet spec. The spec is quite precise and fairly accessible reading. As Chris said, read the sections on authentication and authorization. Trust me, you'll be glad you read it. The servlet 2.5 spec is here: http://download.oracle.com/otn-pub/jcp/servlet-2.5-mrel2-eval-oth-JSpec/servlet-2_5-mrel2-spec.pdf If users are logging-into your webapp, presumably they are providing a username and password (or other credentials): where do you have that configured? - -chris -BEGIN PGP SIGNATURE- Version: GnuPG/MacGPG2 v2.0.17 (Darwin) Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk60G7QACgkQ9CaO5/Lv0PDIlACgoqsUbBg77GjOYVIbSfkAMbQW I7AAoIXZVd5nMgT4v8fUeXnQTqcpJLmA =IxaF -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Session expiration - browser -Web application
Léa,
Life needn't be this difficult. :-) You're reinventing wheels here
instead of understanding how the wheels you already have work. Again,
read the spec. Pretty please. So many questions will be answered.
On Fri, 2011-11-04 at 11:55 -0700, Léa Massiot wrote:
@Christopher :
Thank you for your answer.
Christopher wrote:
The new session created is completely empty. It has nothing to do with the
user going back in the history, etc.
No, you are right.
What I meant is that I was/am managing session expiration inside the Webapp
(for instance if the user clicks a button which is inside the Webapp and if
the session has expired, I redirect him to the log in page).
Christopher wrote:
I always try to have enough information in the page (form) so that
resuming a workflow after a session timeout is a possibility.
I'm sorry but I do not understand what you are explaining me here...
A SOLUTION... I THINK.
I have found a solution, here it is:
for all the JSPs which require a user to be identified (*), I add the
following code:
Better solution is to check whether the user principle is set. The spec
will explain this.
%
ASessionAttribute aSessionAttribute = null;
HttpSession httpSession = null;
httpSession = request.getSession();
aSessionAttribute = (ASessionAttribute)
httpSession.getAttribute(aSessionAttribute);
if(aSessionAttribute == null)
{
response.sendRedirect(the-log-in-page.jsp);
}
%
Then if a user presses the F5 key and if the session has expired, he is
properly redirected to the log in page.
Best regards,
--
Léa
(*) That is to say, in my example, the aSessionAttribute object musn't be
null.
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
