RE: Speeding up tomcat

2024-04-05 Thread Alex Hatcher
...@christopherschultz.net. Learn why this is important at https://aka.ms/LearnAboutSenderIdentification ] [EXTERNAL] Alex, On 3/25/24 13:06, Alex Hatcher wrote: > Java version: 11.0.20 > Tomcat version: 9.0.59 Are you able to upgrade these? Your Tomcat is nearly 2 years old and your Java is ... I'm not su

Speeding up tomcat

2024-03-25 Thread Alex Hatcher
Java version: 11.0.20 Tomcat version: 9.0.59 OS Version: Windows Server 2022 Datacenter Azure Edition Azure VM Type and Specs: D8s v3 8 CPU 32 GiB Mem VM Generation V2 VM Architecture x64 Location East US Zone 1 We have a

Re: Long lasting websocket sessions

2024-02-16 Thread Alex O'Ree
No devices in-between, browser to local host. Good feedback though, I'll try to reproduce with the snake app Thanks! On Fri, Feb 16, 2024, 2:47 PM Chuck Caldarale wrote: > > > On Feb 16, 2024, at 11:31, Mark Thomas wrote: > > > > On 09/02/2024 13:47, Alex O'Ree

Long lasting websocket sessions

2024-02-09 Thread Alex O'Ree
I've been experimenting with tomcat 9.x in seeing how long i can get a web socket session to last. I'm currently struggling to get past 30 minutes or so. Looking for guidance on how to best increase this or if this is a bad idea. Here's the current configuration and what i've tried thus far: The

Re: Keycloak-adapter compatible version

2023-10-15 Thread Alex
. https://html.duckduckgo.com/html?q=keycloak%2Doidc%2Dtomcat%2Dadapter \ https://www.keycloak.org/docs/latest/securing_apps/#openid-connect \ https://www.keycloak.org/docs/latest/securing_apps/#_tomcat_adapter Hth Alex On Fri, Oct 13, 2023 at 11:47 AM Bernd Schatz wrote: Hi Navya, Am

Re: Need help tomcat

2023-10-02 Thread Alex O'Ree
Assuming windows sc delete servicename On Mon, Oct 2, 2023, 7:44 AM jean-frederic clere wrote: > On 10/1/23 09:02, Deepak Lalchandani wrote: > > I have deleted and Uninstalled all tomcat services but despite that the > > tomcat service exists in services window . I want to delete the

Re: just wondering.. encryption in context.xml?

2023-04-08 Thread Alex O'Ree
For context.xml, you can do the following make a java project with the following dependency org.apache.tomcat tomcat-dbcp INSERT APPROPRIATE VERSION HERE provided Make a class that extends org.apache.tomcat.dbcp.dbcp.BasicDataSourceFactory then you can transform the stored credential using

Re: Got a customer who's paranoid about Manager

2023-02-22 Thread Alex O'Ree
is removing the manager war an option for you? i don't think it's required for operation. you could also rename it so that it's in a different url path than the default On Wed, Feb 22, 2023 at 12:58 PM Mark Thomas wrote: > On 22/02/2023 17:49, James H. H. Lampert wrote: > > On 2/22/23 9:23 AM,

Tomcat maven plugin

2023-01-17 Thread Alex O'Ree
Is the tomcat maven plugin still maintained? I noticed it hasn't been updated in a while

Re: Receiving HTTP (any version but 3 prefered) over UDP

2022-12-12 Thread Alex
Hi. On 11.12.22 17:44, Shawn Heisey wrote: On 12/10/22 15:15, Aryeh Friedman wrote: Is there any browser support for direct UDP sockets in any browser besides Chrome? I know WebRTC and Websockets force TCP. I know Chrome does support UDP but can find no evidence one way for the other browsers.

Re: Difference between versions

2022-08-23 Thread Alex
Hi Mark. On 23.08.22 08:32, Mark Thomas wrote: On 23/08/2022 00:36, Alex wrote: Dear Mohan. your E-Mail address is invalid! moha...@ramco.com.INVALID That isn't something the OP has done. That change is made by the ASF mail servers else many subscribers won't receive list emails. https

Re: Difference between versions

2022-08-22 Thread Alex
Dear Mohan. your E-Mail address is invalid! moha...@ramco.com.INVALID That does not helps to support you. Regards Alex On 22.08.22 16:17, Alex wrote: Hi Mohan. On 21.08.22 04:45, Mohan T wrote: Dear All, Just want to know if there are any major differences between the below tomcat

Re: Difference between versions

2022-08-22 Thread Alex
%20detected%20on%20classpath Maybe some of the hits may solve your topic. Thanks Mohan Regards Alex - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Question about TLS/SSL setup and SSLHostConfig or not

2021-03-02 Thread Alex
On 02.03.21 23:50, Peter Kreuser wrote: Alex, Am 02.03.2021 um 23:19 schrieb Alex : Hi. On 02.03.21 23:14, John Larsen wrote: I usually let the apache webserver or nginx handle the SSL while proxying to the tomcat. Unless you need some really fancy rewriting or caching, Tomcat

Re: Question about TLS/SSL setup and SSLHostConfig or not

2021-03-02 Thread Alex
that the HAProxy/nginx talk TLS to the backend, in this case tomcat. John Larsen On Tue, Mar 2, 2021 at 3:06 PM Alex wrote: Hi. I try to make a "good" tomcat config and read the docs. Now in the Connector doc is the following statement. http://tomcat.apache.org/tomcat-9.0-doc/config

Question about TLS/SSL setup and SSLHostConfig or not

2021-03-02 Thread Alex
LS in tomcat? I use JSSE as implementation. http://tomcat.apache.org/tomcat-9.0-doc/ssl-howto.html http://tomcat.apache.org/tomcat-10.0-doc/ssl-howto.html ``` ``` What's your suggestion and opinion to configure the tomcat in a proper way to use TLS also for the future ver

Re: Feature request for SSL Valve

2021-02-25 Thread Alex
Christopher. Thank you for your answer. On 25.02.21 21:10, Christopher Schultz wrote: Alex, On 2/24/21 22:05, Alex wrote: Hi. I try to setup HAProxy to send some TLS Information's to tomcat. As described in the documentation of SSL Valve are several parameters available and most of them

Feature request for SSL Valve

2021-02-24 Thread Alex
to be added into tomcat ssl valve? Regards Alex - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Possible memory leak in Tomcat 8.5.57 Websocket

2020-08-11 Thread Alex Maltinsky
Hash: SHA256 > > Alex, > > On 8/11/20 11:47, Alex Maltinsky wrote: > > Hi Folks > > > > We ran into what looks like a memory leak in tomcat 8.5.57 on > > Ubuntu 18.04 running on Openjdk 11.0.5 > > > > Our app maintains permanent websocket connections with

Possible memory leak in Tomcat 8.5.57 Websocket

2020-08-11 Thread Alex Maltinsky
Hi Folks We ran into what looks like a memory leak in tomcat 8.5.57 on Ubuntu 18.04 running on Openjdk 11.0.5 Our app maintains permanent websocket connections with multiple clients (also written in Java, using the Tyrus websocket client - version 1.13.1). Recently, a few clients began

Fwd: Possible memory leak in Tomcat 8.5.57 Websocket

2020-08-11 Thread Alex Maltinsky
Hi Folks We ran into what looks like a memory leak in tomcat 8.5.57 on Ubuntu 18.04 running on Openjdk 11.0.5 Our app maintains permanent websocket connections with multiple clients (also written in Java, using the Tyrus websocket client - version 1.13.1). Recently, a few clients began

Re: 7.0.59 to 7.0.99 upgrade, CVE-2015-5174 fix prevents us from accessing resources outside context

2020-02-04 Thread Alex Pritchard
= BaseAction.REDIRECT_TO_NON_STRUTS2, location = "%{url}", params = {"location", "%{url}"}) Really appreciate all the info you provided. Definitely helped me track down exactly what was going on. Alex On Tue, Feb 4, 2020 at 3:52 AM Mark Thomas wrote: > On 03/02

Re: 7.0.59 to 7.0.99 upgrade, CVE-2015-5174 fix prevents us from accessing resources outside context

2020-02-03 Thread Alex Pritchard
. The doesn't appear to be any configurable behavior here. Alex On Fri, Jan 31, 2020 at 10:28 AM Mark Thomas wrote: > On 30/01/2020 21:38, Alex Pritchard wrote: > > Totally possible. I tried modifying \conf\context.xml, using both > > useRelativeRedirects="true" and &quo

Re: 7.0.59 to 7.0.99 upgrade, CVE-2015-5174 fix prevents us from accessing resources outside context

2020-01-30 Thread Alex Pritchard
Totally possible. I tried modifying \conf\context.xml, using both useRelativeRedirects="true" and "false": WEB-INF/web.xml I also tried making the same changes in our web-app/src/main/resources/meta-inf/context.xml in case that was overriding somehow. Alex On Thu,

Re: 7.0.59 to 7.0.99 upgrade, CVE-2015-5174 fix prevents us from accessing resources outside context

2020-01-30 Thread Alex Pritchard
30, 2020 at 12:41 PM Alex Pritchard wrote: > Hi, > > Trying to drag a legacy app forward and running into a breaking change > based on the fact that we're using struts2 to serve some JSPs from a > directory outside our context root by taking advantage of the now-patched > d

7.0.59 to 7.0.99 upgrade, CVE-2015-5174 fix prevents us from accessing resources outside context

2020-01-30 Thread Alex Pritchard
on in some way to either identify the alternate directory as a root for these other jsps (while still functioning for the jsps that are correctly in web-inf/content) or to allow a specific directory traversal in some context. Appreciate any input! Alex

Re: Tomcat app within docker container

2020-01-10 Thread Alex K
Thanx Logo, On Fri, Jan 10, 2020 at 3:06 PM logo wrote: > Alex, > > Am 2020-01-10 12:47, schrieb Alex K: > > Just to follow-up on this in case it will be useful to anyone, I > > managed to > > use also the official tomcat image. I had to amend my .war files and &g

Re: Tomcat app within docker container

2020-01-10 Thread Alex K
/8-jre-alpine3.9/images/sha256-ea81da311d33e052eeea34336018434bdc50596100f9c623193867faa291b284 by using the same Dockerfile (by pointing to the custom built image FROM tomcat:alpine) I was able to deploy same app successfully reaching image size 281MB instead of 660MB with the default tomcat image. On Fri, J

Re: Tomcat app within docker container

2020-01-10 Thread Alex K
Hi, On Thu, Jan 9, 2020 at 7:50 PM Mark Eggers wrote: > Alex, > > On 1/9/2020 8:51 AM, Alex K wrote: > > Hi all, > > > > I have two .war files that when deployed at a plain Debian 9 VM are > working > > fine. > > I have prepared a docker file so as

Re: Tomcat app within docker container

2020-01-10 Thread Alex K
Hi Logo, On Thu, Jan 9, 2020 at 7:40 PM logo wrote: > Hi Alex, > > > > > Am 09.01.2020 um 17:51 schrieb Alex K : > > > > Hi all, > > > > I have two .war files that when deployed at a plain Debian 9 VM are > working > > fine. > > I have pr

Tomcat app within docker container

2020-01-09 Thread Alex K
/JAXBException Since I am not very familiar with tomcat, I would appreciate any pointers how to troubleshoot this. Thanx, Alex

Re: Let's Encrypt with Tomcat?

2019-12-27 Thread Alex O'Ree
i use letsencrypt with tomcat. i adopted a cronjob/bash script that auto renews the cert before expiration, it then stops tomcat, refreshes the jks files, then restarts tomcat. yeah it's down time, but it is minimal and it works On Thu, Dec 26, 2019 at 7:49 PM James H. H. Lampert <

Re: Tomcat - No Fork for debugging?

2019-12-06 Thread Alex Scheel
- Original Message - > From: "Christopher Schultz" > To: users@tomcat.apache.org > Sent: Friday, December 6, 2019 12:41:23 PM > Subject: Re: Tomcat - No Fork for debugging? > > -BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 > > Alex, >

Re: Tomcat - No Fork for debugging?

2019-12-06 Thread Alex Scheel
g? > > -BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 > > Alex, > > On 12/5/19 18:05, Alex Scheel wrote: > > - Original Message - > >> From: "Christopher Schultz" To: > >> users@tomcat.apache.org Sent: Thursday, December 5, 201

Re: Tomcat - No Fork for debugging?

2019-12-05 Thread Alex Scheel
- Original Message - > From: "Christopher Schultz" > To: users@tomcat.apache.org > Sent: Thursday, December 5, 2019 5:05:42 PM > Subject: Re: Tomcat - No Fork for debugging? > > -BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 > > Alex, > >

Tomcat - No Fork for debugging?

2019-12-05 Thread Alex Scheel
and it wants to launch as the tomcat user), dropping my environmental variables I want. Ideally (for debugging) I'd like to simplify this. Is there a more direct entry route I can use perhaps? - Alex - To unsubscribe, e-mail: users

Re: Intermittent JSP Caching/Compiling Issue while under load

2019-11-04 Thread Alex O'Ree
Sounds a lot like the issue I reported a few months ago On Mon, Nov 4, 2019, 3:12 PM Tim K wrote: > On Mon, Nov 4, 2019, 10:30 AM Mark Thomas wrote: > > > > > Thanks. That helps as it means the issue should be reproducible on a > > single, stand-alone instance. > > > > Mark > > > > I was

Re: user self registration/account creation

2019-10-08 Thread Alex O'Ree
thanks i'll look into it On Mon, Oct 7, 2019 at 3:36 AM Mark Thomas wrote: > On 06/10/2019 20:31, Alex O'Ree wrote: > > i have a password protected web app and would like to provide users with > > the ability to self register for a new account. looks like the easiest

user self registration/account creation

2019-10-06 Thread Alex O'Ree
i have a password protected web app and would like to provide users with the ability to self register for a new account. looks like the easiest way to do this with tomcat is with a jdbc realm to protect the web app and anonymous access to the self registration app. a few questions on this. is

Re: Is it possible to disable JMX?

2019-08-26 Thread Alex O'Ree
you may have to edit catalina.bat and add --no-jmx to the command line On Mon, Aug 26, 2019 at 2:05 PM Pascal Schumacher wrote: > |Hi, > > according to https://tomcat.apache.org/tomcat-9.0-doc/changelog.html it > should be possible to disable JMX when using Tomcat 9.0.20+. > > I tried different

Re: how to enable OCSP for Tomcat w OpenSSL

2019-08-01 Thread Alex O'Ree
This thread was super useful. thanks for sharing On Wed, Apr 17, 2019 at 3:29 PM John Palmer wrote: > I'm still struggling with getting APR/OpenSSL to do the OCSP check. > > I'd appreciate some tips: > versions: Java 8 (1.8.0_202), 64-bit, tomcat 8.5.38, APR 1.2.21 > using APR/OpenSSL (the

Re: on 8.5.40, random tmpFile.renameTo with jsp files

2019-06-11 Thread Alex O'Ree
jsps, now it's closer to 1 of 400. Definitely better, but is it because of the update to the newer code base or is it due to the code change i made. I'll do some more experiments tomorrow to try and narrow it down On Mon, Jun 10, 2019 at 3:32 PM Alex O'Ree wrote: > > Anything unusual

Re: on 8.5.40, random tmpFile.renameTo with jsp files

2019-06-10 Thread Alex O'Ree
imarily just to ensure that they compile correctly. Shouldn't be an concurrent sessions on this context. > Alex, are you able to edit the code and replace the File.renameTo call with an equivalent Files.move and see if it's either (a) more reliable or (b) gives you better error information?

Re: on 8.5.40, random tmpFile.renameTo with jsp files

2019-06-10 Thread Alex O'Ree
BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Alex, > > On 6/10/19 03:20, Mark Thomas wrote: > > On 07/06/2019 15:35, Alex O'Ree wrote: > >> HTTP Status 500 – Internal Server Error Type Exception Report > >> > >> Message Unable to compile c

Re: on 8.5.40, random tmpFile.renameTo with jsp files

2019-06-10 Thread Alex O'Ree
I am on windows 7. Same partition as the os. On Mon, Jun 10, 2019, 3:20 AM Mark Thomas wrote: > On 07/06/2019 15:35, Alex O'Ree wrote: > > HTTP Status 500 – Internal Server Error > > Type Exception Report > > > > Message Unable to compile class for JSP > > >

Re: on 8.5.40, random tmpFile.renameTo with jsp files

2019-06-07 Thread Alex O'Ree
: > On 06/06/2019 20:38, Alex O'Ree wrote: > > I've upgraded from .34 to .40 somewhat recently (on windows) and have > been > > getting random errors rendering jsp pages recently. The trace is always > > related to jasper failing to rename a file. I'm not really sure what the

on 8.5.40, random tmpFile.renameTo with jsp files

2019-06-06 Thread Alex O'Ree
I've upgraded from .34 to .40 somewhat recently (on windows) and have been getting random errors rendering jsp pages recently. The trace is always related to jasper failing to rename a file. I'm not really sure what the issue is. Has anyone seen this or something similar? Usually retrying the

Re: Jmx example for adding or removing users?

2019-05-10 Thread Alex O'Ree
the answer is no but I may have missed something. Can anyone confirm this? On Fri, May 10, 2019 at 7:07 AM Alex O'Ree wrote: > Ahh i missed the exception, had the logs redirected. thanks > > On Fri, May 10, 2019 at 3:46 AM Mark Thomas wrote: > >> On 10/05/2019 03:45

Re: Jmx example for adding or removing users?

2019-05-10 Thread Alex O'Ree
Ahh i missed the exception, had the logs redirected. thanks On Fri, May 10, 2019 at 3:46 AM Mark Thomas wrote: > On 10/05/2019 03:45, Alex O'Ree wrote: > > Well less than perfect. Tomcat out of the box is setup with the users xml > > file. What's ex

Re: Jmx example for adding or removing users?

2019-05-09 Thread Alex O'Ree
i missing something? On Fri, Apr 26, 2019 at 7:14 PM Alex O'Ree wrote: > Ahh perfect, thanks. > > On Fri, Apr 26, 2019 at 12:34 PM Mark Thomas wrote: > >> On 26/04/2019 12:11, Alex O'Ree wrote: >> > I am looking for a way to programmatically add or remove user accou

Re: Jmx example for adding or removing users?

2019-04-26 Thread Alex O'Ree
Ahh perfect, thanks. On Fri, Apr 26, 2019 at 12:34 PM Mark Thomas wrote: > On 26/04/2019 12:11, Alex O'Ree wrote: > > I am looking for a way to programmatically add or remove user accounts > > using tomcats user xml file as a store without restarting tomcat. Can > this >

Jmx example for adding or removing users?

2019-04-26 Thread Alex O'Ree
I am looking for a way to programmatically add or remove user accounts using tomcats user xml file as a store without restarting tomcat. Can this be done using jmx?

Re: JMS Testing

2018-12-17 Thread Alex O'Ree
JMS is a programming api that is an abstraction for a messaging service. There's a bunch of implementations of the JMS API, such like car's have the same human to car interface (steering wheel, pedals, etc), however there's tons of types and manufacturers. Tomcat serves up web content. Some JMS

Re: [SECURITY] CVE-2018-11784 Apache Tomcat - Open Redirect

2018-10-18 Thread Alex O'Ree
Roger that, thanks On Thu, Oct 18, 2018, 9:38 AM Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Alex, > > On 10/18/18 11:08, Alex O'Ree wrote: > > Basically. I start with the tomcat distro, apply m

Re: [SECURITY] CVE-2018-11784 Apache Tomcat - Open Redirect

2018-10-18 Thread Alex O'Ree
AM Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Alex, > > On 10/14/18 18:06, Alex O'Ree wrote: > > Is there perhaps a patch that can be applied or better yet, a list > > of jars that are wer

Re: [SECURITY] CVE-2018-11784 Apache Tomcat - Open Redirect

2018-10-14 Thread Alex O'Ree
Is there perhaps a patch that can be applied or better yet, a list of jars that are were affected by this? (I'm just trying to find a simple way to patch a large volume of servers) On Wed, Oct 10, 2018 at 10:23 AM Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED

Re: Tomcat with half open tcp sockets

2018-10-04 Thread Alex O'Ree
Sorry, mobile typo. Soap stack, as in cxf, axis, sun jaxws ri On Thu, Oct 4, 2018, 12:57 PM Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Alex, > > On 10/3/18 20:25, Alex O'Ree wrote: > > T

Re: Tomcat with half open tcp sockets

2018-10-03 Thread Alex O'Ree
< ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Alex, > > On 9/29/18 08:31, Alex O'Ree wrote: > > Does tomcat detect or mitigate against half open tcp connections? > > Not directly. Basically, that's the OS's job

Tomcat with half open tcp sockets

2018-09-29 Thread Alex O'Ree
Does tomcat detect or mitigate against half open tcp connections? I recently ran into an issue where something in between a java jaxws client and a jaxws service running in tomcat is interfering with the tcp stream. Resolving this client side has been a challenge due the transmitting thread

websocket endpoints not released

2018-08-31 Thread Alex O'Ree
I ran into a strange issue today. Running tomcat 8.5 with a websocket endpoint + some javascript to wire up a browser to the socket. All works as normal, however sometimes if the user refreshes the browser, it seems as if second web socket is opened by the browser. This leads to the user seeing

Re: org.apache.tomcat.jdbc.pool casting to original connection class

2018-08-28 Thread Alex O'Ree
>From what i understand, the postgres jdbc driver does support reading/writing from a result set or command via a input or output stream, however from my testing, it looks like it just buffers the whole thing in memory. I actually had one case where i was able to insert 1.2GB of content into a

Re: org.apache.tomcat.jdbc.pool casting to original connection class

2018-08-27 Thread Alex O'Ree
I'm storing large files. Postgres has a limit for blobs and uses a different api for larger stuff. Cut off is 1gb On Mon, Aug 27, 2018, 7:19 PM Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Alex, > >

Re: org.apache.tomcat.jdbc.pool casting to original connection class

2018-08-27 Thread Alex O'Ree
I figured it out. Classpath issue. I had the postgres driver in my web app and in tomcat's lib folder. Removing from the web app fixed it. On Mon, Aug 27, 2018 at 9:47 AM Alex O'Ree wrote: > Unfortunately, it's not working. I've tried unwrap for both > org.postgresql.jdbc.PgConnection (co

Re: org.apache.tomcat.jdbc.pool casting to original connection class

2018-08-27 Thread Alex O'Ree
Unfortunately, it's not working. I've tried unwrap for both org.postgresql.jdbc.PgConnection (concrete class) and org.psotgresql.PGConnection (interface) and both of them fail to unwrap. Any other suggestions? On Sun, Aug 26, 2018 at 10:04 AM Alex O'Ree wrote: > Perfect, thanks > > On

Re: org.apache.tomcat.jdbc.pool casting to original connection class

2018-08-26 Thread Alex O'Ree
Perfect, thanks On Fri, Aug 24, 2018, 5:05 PM Torsten Krah wrote: > The isWrapperFor(..) and unwrap(..) methods on the connection API should > work for this. >

org.apache.tomcat.jdbc.pool casting to original connection class

2018-08-24 Thread Alex O'Ree
I have a use case where i need to downcast a pooled database connection down to the native class that is in use for the driver. Unfortunately I don't see any APIs that I can use to do this. Is there any backdoors or mechanisms I can use? Background, I'm using postgres with tomcat 8.5 and need to

Re: user lockout realm, logging ip addresses

2018-08-18 Thread Alex O'Ree
, 2018 at 9:58 AM, Alex O'Ree wrote: > after looking at the code, it's not a simple 1 liner and would require a > number of api changes. I was able to get it working, but it is a large > change set. Anyone that extends or builds a custom one of these: > -Realm > -AuthenticatorBase

Re: user lockout realm, logging ip addresses

2018-08-18 Thread Alex O'Ree
impact. I'm not sure how this community feels about API changes and backwards compatibility. For the PR, do you all have a branch naming strategy? On Sat, Aug 18, 2018 at 8:20 AM, Alex O'Ree wrote: > Cool beans. I can do a PR if there's interest. > > On Sat, Aug 18, 2018 at 7:59 AM, Ch

programmatically adding new users to tomcat-users.xml

2018-08-18 Thread Alex O'Ree
I'd like to provide users a mechanism to create their own user accounts via browser instead of requiring access to the server + editing xml files. I found this solution here https://stackoverflow.com/a/39770319/1203182 and i found the APIs here

Re: user lockout realm, logging ip addresses

2018-08-18 Thread Alex O'Ree
Cool beans. I can do a PR if there's interest. On Sat, Aug 18, 2018 at 7:59 AM, Christopher Schultz < ch...@christopherschultz.net> wrote: > Mark and Alex, > > > On Aug 18, 2018, at 05:46, Mark Thomas wrote: > > > >> On 18/08/18 10:36, Olaf Kock wrote: > >

user lockout realm, logging ip addresses

2018-08-17 Thread Alex O'Ree
Is it possible to configure the user lockout realm to log what ip address the failed login attempt came from? I know the information needed will also be in the access log but added it to the "attempt to login from a locked account" message would be super helpful. Would it be more advisable to

Re: Programmatically unlocking an account?

2018-08-13 Thread Alex O'Ree
No problem. Thanks! On Mon, Aug 13, 2018, 3:52 AM Mark Thomas wrote: > On 13/08/18 00:32, Alex O'Ree wrote: > > Thanks everyone. Would it be possible to get this backported to 8.5? > > Done. Although I'm afraid it just missed the cut for the 8.5.33 release. > It will be

Re: Programmatically unlocking an account?

2018-08-12 Thread Alex O'Ree
Thanks everyone. Would it be possible to get this backported to 8.5? On Tue, Jun 26, 2018 at 12:17 PM, Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Alex, > > On 6/25/18 8:49 PM, Alex O'Ree wrote: >

Re: Requirements for servlet session attributes?

2018-07-03 Thread Alex O'Ree
" wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Alex, On 7/1/18 7:48 AM, Alex O'Ree wrote: > I was working on attempting to increase performance on a web app > which calls a jaxws service on behalf of the user. The process for > creating the jaxws client is somewhat slow so

Requirements for servlet session attributes?

2018-07-01 Thread Alex O'Ree
I was working on attempting to increase performance on a web app which calls a jaxws service on behalf of the user. The process for creating the jaxws client is somewhat slow so I was to try and cache the the jaxws client object as an HTTP session attribute. It doesn't work for some reason. What

Re: tomcat with laptop + windows sleep

2018-06-28 Thread Alex O'Ree
I also see a lot of jdbc/my name is not bound in this context. Unable to find jdbc On Thu, May 24, 2018, 5:30 PM Alex O'Ree wrote: > Yes it is a tomcat managed data source with postgres. The cpu usage is my > app trying to get a managed data source. Perhaps the jdbc driver is the &

Re: tomcat with laptop + windows sleep

2018-06-28 Thread Alex O'Ree
un 3, 2018 at 11:13 AM, Alex O'Ree wrote: > I did not copy any tomcat specific jars. I have validation queries > implemented programmatically. > > On Sun, Jun 3, 2018 at 8:44 AM, Felix Schumacher internetallee.de> wrote: > >> >> >> Am 02.06.2018 um 20:51 schrieb Al

Re: Programmatically unlocking an account?

2018-06-25 Thread Alex O'Ree
D MESSAGE- > Hash: SHA256 > > Alex, > > On 6/25/18 3:24 PM, Alex O'Ree wrote: > > Is it possible to programmatically unlock an account that's been > > locked via the lockoutrealm and the simple xml user store? > > Regardless of the user-storage mechanism, the

Programmatically unlocking an account?

2018-06-25 Thread Alex O'Ree
Is it possible to programmatically unlock an account that's been locked via the lockoutrealm and the simple xml user store? If so, how?

Re: tomcat with laptop + windows sleep

2018-06-03 Thread Alex O'Ree
I did not copy any tomcat specific jars. I have validation queries implemented programmatically. On Sun, Jun 3, 2018 at 8:44 AM, Felix Schumacher < felix.schumac...@internetallee.de> wrote: > > > Am 02.06.2018 um 20:51 schrieb Alex O'Ree: > >> I think I've narrowed it d

Re: Http11Nio2Protocol allows brand-new sockets to live indefinitely? (Tomcat 9.0.8 and others)

2018-06-02 Thread Alex Marchevskiy
Thanks Rémy! > On Jun 2, 2018, at 12:49 PM, Rémy Maucherat wrote: > > On Sat, Jun 2, 2018 at 9:25 PM Alex Marchevskiy wrote: > >> Hi Rémy, >> >> Thank you for your quick follow up to the issue posted by Adam. I have >> been reviewing th

Re: Http11Nio2Protocol allows brand-new sockets to live indefinitely? (Tomcat 9.0.8 and others)

2018-06-02 Thread Alex Marchevskiy
the aforementioned condition. I would be happy to work on getting this merged upstream with proper test coverage if you believe this is reasonable. Thanks in advance, Alex - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org

Re: tomcat with laptop + windows sleep

2018-06-02 Thread Alex O'Ree
: > > > Am 24. Mai 2018 23:30:10 MESZ schrieb Alex O'Ree : > >Yes it is a tomcat managed data source with postgres. The cpu usage is > >my > >app trying to get a managed data source. Perhaps the jdbc driver is the > >issue. .. > > Care to post your configuration? Ma

Re: tomcat with laptop + windows sleep

2018-05-24 Thread Alex O'Ree
-- > Hash: SHA256 > > Alex, > > On 5/22/18 7:39 PM, Alex O'Ree wrote: > > I've noticed a behavioral difference from tomcat 7 to 8.5. In v7, I > > used to be able to put a computer to "sleep" with tomcat running. > > On resume, everything would be just fin

tomcat with laptop + windows sleep

2018-05-22 Thread Alex O'Ree
I've noticed a behavioral difference from tomcat 7 to 8.5. In v7, I used to be able to put a computer to "sleep" with tomcat running. On resume, everything would be just fine. On tomcat 8.5, i'm noticing that all database connections are basically dropped and do not appear to to restart/resume

Re: Tomcat Silent Remote Uninstall - How to do it?

2018-04-20 Thread Alex O'Ree
Pretty sure there is a script in the bin folder that can be ran from an elevated the command line. Something like 'service install', then call 'net start tomcat8' On Fri, Apr 20, 2018 at 4:53 PM, < ross.a.reichenber...@wellsfargo.com.invalid> wrote: > Hello, > I need to know how to silently

Re: User session validation

2018-03-29 Thread Alex O'Ree
Thanks for the info On Thu, Mar 29, 2018, 12:30 PM Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Alex, > > On 3/28/18 7:20 PM, Alex O'Ree wrote: > > Does tomcat do any validation on session id's

User session validation

2018-03-28 Thread Alex O'Ree
Does tomcat do any validation on session id's based on up addresses? I'm thinking that if some one intercepts the session token and tries to use it from another ip address, then it's feasible to detect this and invalidate the session.

Re: Tomcat shutdown, webapp vs database pools

2018-03-17 Thread Alex O'Ree
Thanks for the info. I'll investigate further into the listeners. On Sat, Mar 17, 2018 at 4:27 AM, Mark Thomas <ma...@apache.org> wrote: > On 16/03/18 22:42, Alex O'Ree wrote: > > I have a war file that defines a context.xml file, some cxf based web > > services and a few o

Tomcat shutdown, webapp vs database pools

2018-03-16 Thread Alex O'Ree
I have a war file that defines a context.xml file, some cxf based web services and a few other background tasks using quartz that are initialized in a servlet context listener. When tomcat shuts down, it appears that tomcat stops the database connection pool before the cxf services or the quartz

Re: intermittent connectivity failure under ssl

2018-03-09 Thread Alex O'Ree
, you'll need a windows box to replicate (x64) On Fri, Mar 9, 2018 at 3:01 PM, Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Alex, > > On 3/9/18 2:50 PM, Mark Thomas wrote: > > On 09/03/18 19:39, Alex

Re: intermittent connectivity failure under ssl

2018-03-09 Thread Alex O'Ree
that comes with the windows build of tomcat has something wrong with it. On Mon, Mar 5, 2018 at 9:29 AM, Alex O'Ree <spyhunte...@gmail.com> wrote: > thanks. what else could be cause this? Chrome says error empty response > frequently > > On Mon, Mar 5, 2018 at 9:27 AM,

Re: intermittent connectivity failure under ssl

2018-03-05 Thread Alex O'Ree
thanks. what else could be cause this? Chrome says error empty response frequently On Mon, Mar 5, 2018 at 9:27 AM, Rémy Maucherat <r...@apache.org> wrote: > On Mon, Mar 5, 2018 at 2:59 PM, Alex O'Ree <alexo...@apache.org> wrote: > > > I may be on to something. I found

Re: intermittent connectivity failure under ssl

2018-03-05 Thread Alex O'Ree
be related to the problem as it looks like the protocol attribute must be one of HTTP/1.1, etc. Assuming this is the issue, which attribute can i used to specify my overridden class? On Fri, Mar 2, 2018 at 1:58 PM, Alex O'Ree <alexo...@apache.org> wrote: > Remy, what more information

Re: intermittent connectivity failure under ssl

2018-03-02 Thread Alex O'Ree
Remy, what more information would you like? Any more info on the issue that you are referencing? On Fri, Mar 2, 2018 at 10:56 AM, Rémy Maucherat <r...@apache.org> wrote: > On Fri, Mar 2, 2018 at 4:19 PM, Alex O'Ree <alexo...@apache.org> wrote: > > > Ran into a strange pr

intermittent connectivity failure under ssl

2018-03-02 Thread Alex O'Ree
Ran into a strange problem, not too sure what the problem is. Basically, I'm getting intermittent connectivity from a http client to tomcat but only through SSL using the Http11NioProtocol. Some http requests go through, others fail with the stack trace below. Usually, restarting tomcat fixes it,

SSL: Unexpected end of file from server

2018-03-01 Thread Alex O'Ree
I have a CXF web service client accessing a CXF SOAP service running in tomcat. I'm seeing intermitent issues only when using SSL and I'm not entirely sure why. The client logs the following SocketException: Unexpected end of file from server at sun.net.www.http.Client.parseHTTPHeader I'm using

Re: No reliable way to know if the request emerged from localhost

2018-02-27 Thread Alex O'Ree
I think this means, no remote http access, but allow admins remote desktop access. Once in a local desktop sessions, allow the http access since the request comes from local host This issue is get remote address usually returns a non loop back ip address, even if the url was to localhost On

Re: using default cacerts AND custom keystore

2018-02-21 Thread Alex O'Ree
anything related to SSL, key stores, trust stores, X509 certificates, etc will do that to you! On Mon, Feb 19, 2018 at 9:16 AM, Chris Cheshire wrote: > On Fri, Feb 16, 2018 at 2:11 PM, Christopher Schultz > wrote: > > -BEGIN PGP SIGNED

Possibility of simplifying a UI vs services war setup

2018-02-21 Thread Alex O'Ree
Hi everyone, yet another email. I'm not too sure who to ask but I figured the tomcat crew would be a good place to start. Maybe SO is more appropriate I have a two web app (war files) system, one containing just the UI and the other containing a collection of CXF soap services and some rest

  1   2   3   4   >