Re: AW: AW: Suppress or replace WWW-Authorization header

2015-10-28 Thread Andy Wang
On 10/28/2015 12:04 PM, André Warnier (tomcat) wrote: The server supports two kinds of deployment: Standalone with an embedded Jetty-server and as war-file for app-servers (most of them are tomcat-server). I try to suppress the browser BASIC-login-dialog for the REST-service-calls from

Chunked transfer delay with httpd 2.4 + mod_jk 1.2.41 on Windows.

2015-10-19 Thread Andy Wang
Hi all, I'm seeing a weird problem that I'm running out of ideas on. I'm going to send this email to both the apache httpd users list and the tomcat users list (separate messages) but hoping for any ideas at all. The issue is currently reproduced using Apache httpd 2.4.16, mod_jk 1.2.41 and

Re: Chunked transfer delay with httpd 2.4 + mod_jk 1.2.41 on Windows.

2015-10-19 Thread Andy Wang
On 10/19/2015 06:04 PM, Konstantin Kolinko wrote:request. Is the below a capture between your client and HTTPD? (as opposed to one between HTTPD and Tomcat) The capture is between client and httpd Note that Basic auth sends password in plain text (encoded in base64). So you password is

Re: Chunked transfer delay with httpd 2.4 + mod_jk 1.2.41 on Windows.

2015-10-19 Thread Andy Wang
behavior rather than introduce the confusion of a custom ServletFilter. Andy On 10/19/2015 04:45 PM, Andy Wang wrote: Hi all, I'm seeing a weird problem that I'm running out of ideas on. I'm going to send this email to both the apache httpd users list and the tomcat users list (separate

Re: building 64-bit isapi_redirect.dll

2015-08-14 Thread Andy Wang
On 08/14/2015 11:57 AM, Christopher Schultz wrote: You might want to reach-out to the Apache Lounge folks, too... they seem to have a good process for building ASF binaries that they might be willing to share with you. That was one of the first things I thought about and checked. This is

Re: building 64-bit isapi_redirect.dll

2015-08-13 Thread Andy Wang
On 08/13/2015 04:46 PM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Andy, On 8/13/15 5:34 PM, Andy Wang wrote: I was hoping to find out how the official isapi_redirect.dlls are built. Specifically the x64 version. Reason I ask is that 1) the documentation

building 64-bit isapi_redirect.dll

2015-08-13 Thread Andy Wang
I was hoping to find out how the official isapi_redirect.dlls are built. Specifically the x64 version. Reason I ask is that 1) the documentation still documents using MS VC 6.0 which I think can't build 64-bit 2) the official binaries seem to link against msvcrt.dll and not msvcr[version].dll

Re: Tomcat, REMOTE_USER, getRemoteUser()

2015-07-28 Thread Andy Wang
On 07/28/2015 02:03 PM, Christopher Schultz wrote: On 7/28/15 2:29 PM, John Baker wrote: Hello, I'm not sure how long ago that was, but I don't live in the Windows world. I would have thought that someone at Apache Lounge would have balked if a release was broken. Were you building a

Re: Tomcat, REMOTE_USER, getRemoteUser()

2015-07-28 Thread Andy Wang
On 07/28/2015 03:02 PM, Andy Wang wrote: I'd also like a better way and after discussing with some security-geeks, we were wondering if there's some way we can implement a Valve that takes a username and a signature using a shared secret. The problem is signing in Apache: I've not looked too

Re: [OT] Random Form Resubmissions

2015-06-17 Thread Andy Wang
On 06/17/2015 12:43 PM, Caldarale, Charles R wrote: From: Jerry Malcolm [mailto:techst...@malcolms.com] Subject: OT: Random Form Resubmissions I have written defensive code in my webapp to detect this situation and handle it. So it's not a critical problem now. But it just frustrates me

Re: TCP connections reuse

2015-06-12 Thread Andy Wang
Could this be as simple as the default keepaliveTimeout = 15000 (i.e. 15s) Andy On 06/12/2015 11:20 AM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Maxim, On 6/12/15 1:53 AM, Maxim Neshcheret wrote: According to

Re: SSL Handshake Exceptions

2015-05-11 Thread Andy Wang
On 05/11/2015 01:24 PM, jairaj kamal wrote: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target This usually means

Re: SSL Handshake Exceptions

2015-05-11 Thread Andy Wang
On 05/11/2015 02:30 PM, jairaj kamal wrote: Hi, Can you share the steps to import the certificate into the jssecacerts truststore, my client is webserver. *Jairaj Kamal* On Mon, May 11, 2015 at 2:16 PM, Andy Wang aw...@ptc.com wrote: On 05/11/2015 01:24 PM, jairaj kamal wrote

Re: Configure Tomcat 7 using Apache 2.4.6

2015-04-08 Thread Andy Wang
On 04/08/2015 12:43 PM, Leggio, Andrew wrote: I am trying to get tomcat to work under Apache. I have verified that tomcat is listening on port 8009. I tried doing the following: *Apache Web Server Settings* Add the following to the */etc/httpd/conf.d/proxy_ajp.conf* file or if that file

Re: AJP Connector : question on mod_proxy_ajp

2015-03-31 Thread Andy Wang
On 03/31/2015 04:11 PM, Rainer Jung wrote: Am 31.03.2015 um 22:47 schrieb Christopher Schultz: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 André, On 3/31/15 3:41 PM, André Warnier wrote: I have a question of my own. ??! +1 Tomcat 6.x/7.x/8.x. Until now, we have been using mostly

Re: Problem with nsapi_redirect.so (1.2.37) on iPlanet 7.0.15 and Solaris 11

2013-02-21 Thread Andy Wang
On 02/19/2013 11:13 AM, Rainer Jung wrote: It will be tedious, but if we want to check whether the OS disallows some syscalls when running as suid under root, then truss should provide insight. So run iPlanet (the iPlanet start script) under truss -f -o /some/path/tr.out once in the working

Re: Problem with nsapi_redirect.so (1.2.37) on iPlanet 7.0.15 and Solaris 11

2013-02-19 Thread Andy Wang
On 02/19/2013 12:11 AM, Mladen Turk wrote: On 02/18/2013 10:47 PM, Andy Wang wrote: If I execute startserv as the non-privileged user rather than root or do this on Solaris 10, no problems. Any ideas why systhread_start (this is an iPlanet NSAPI function) would fail here as root? Did you

Re: Problem with nsapi_redirect.so (1.2.37) on iPlanet 7.0.15 and Solaris 11

2013-02-19 Thread Andy Wang
On 02/19/2013 12:11 AM, Mladen Turk wrote: Did you tried to check the ulimit. Seems like webservd once when switched to non privileged user cannot create threads either because of some security settings or lack of resources. I'm not so sure that this sequence is what's occurring. When the

Problem with nsapi_redirect.so (1.2.37) on iPlanet 7.0.15 and Solaris 11

2013-02-18 Thread Andy Wang
I'm having some problems getting the nsapi_redirect.dll working with iPlanet 7.0.15 on solaris 11. The problem seems specifically related to Solaris 11 and only if I try to install/run the server as root (using webservd as the non-privileged user). When I do so (and after enabling debug jk

Re: Slow downloads through mod_jk on Windows XP

2012-05-14 Thread Andy Wang
On 05/11/2012 04:51 AM, Mladen Turk wrote: I was following this tread and was hoping that someone will say: Do not use workstation grade software for server applications but no. XP (Win7 falls in the same category) has good network stack but focused on client applications. There is a good

Re: Slow downloads through mod_jk on Windows XP

2012-05-10 Thread Andy Wang
I have solid numbers that I will e-mail in a follow up by itself so it's not lossed in the shuffle. Some answers to the comments inline. Thanks, Andy Do you mean that Tomcat performance appears to be the same regardless of version? That's both good and bad... I thought there were some

Re: Slow downloads through mod_jk on Windows XP

2012-05-10 Thread Andy Wang
So I cannot reproduce the slow down to 4-5MB/s on the same VM I was able to reproduce it on once I copied the VM to an adequate vmware server. But I do see some neat numbers in case people care. I ran with ab -5 directly against apache, against a url mapped to ajp as well as direct to the

Re: Slow downloads through mod_jk on Windows XP

2012-05-08 Thread Andy Wang
On 05/07/2012 06:50 PM, Andy Wang wrote: On 05/07/2012 06:06 PM, André Warnier wrote: Considering your setup, it should not be too hard to set up a download of the same file file directly from Tomcat (through its HTTP Connector), to compare that with your two previous ways. This way, you

Re: Slow downloads through mod_jk on Windows XP

2012-05-08 Thread Andy Wang
Which connector are you using? If you have APR available, AJP should use the APR connector by default. Do you know if you are using APR/native? If not, consider trying it, and use sendFile=true. I'm not sure if it will improve anything because the real problem might be the actual buffering

Re: Slow downloads through mod_jk on Windows XP

2012-05-08 Thread Andy Wang
tomcat numbers were about half that. I'm still wondering if there's something that can be tweaked in the MS TCP/IP stack to bring the two together closer. Andy On 05/08/2012 02:06 PM, Andy Wang wrote: On 05/07/2012 06:50 PM, Andy Wang wrote: On 05/07/2012 06:06 PM, André Warnier wrote

Re: Slow downloads through mod_jk on Windows XP

2012-05-08 Thread Andy Wang
He did that previously, and the result seemed to be that Tomcat alone was comparable to httpd alone, and both were better than httpd/mod_jk + Tomcat; which is indeed physically to be expected : more tubing, less throughput (excepting quantum tunelling effects of course). The question is more

Slow downloads through mod_jk on Windows XP

2012-05-07 Thread Andy Wang
Hi all, We've had a number of cases of people reporting to us that file downloads are slow when passed through tomcat and I've not been able to reproduce the problem on Linux but finally was provided a windows XP VM that was able to reproduce the problem. This is Apache 2.2.22 and mod_jk

Re: Slow downloads through mod_jk on Windows XP

2012-05-07 Thread Andy Wang
On 05/07/2012 06:06 PM, André Warnier wrote: Andy Wang wrote: Hi all, We've had a number of cases of people reporting to us that file downloads are slow when passed through tomcat and I've not been able to reproduce the problem on Linux but finally was provided a windows XP VM that was able

Re: Possible race condition with mod_jk + multiple workers in recovery mode

2011-01-21 Thread Andy Wang
On 01/17/2011 04:53 AM, Rainer Jung wrote: On 13.01.2011 00:36, Andy Wang wrote: Aahh, having the maintenance thread do a periodic probe would be awesome. I see what you mean about parallel probing delaying request handling, but what would you think about modifying the loop so that after

Re: Possible race condition with mod_jk + multiple workers in recovery mode

2011-01-12 Thread Andy Wang
On 01/12/2011 03:36 PM, Rainer Jung wrote: That was meant as an improvement. Recovery is only used, when a worker has been in error state for enough time (by default 60 seconds) and we want to find out whether it is still in error or not. mod_jk has no active probing with test URLs, so if the

Possible race condition with mod_jk + multiple workers in recovery mode

2011-01-11 Thread Andy Wang
I'm still digging, but I thought I'd send this along to the mailing list while I try to decipher the mod_jk code. We're using tomcat-connector 1.2.31 on apache 2.2.17 on a Linux system. Log file is at this URL: http://www.moonteeth.com/~dopey/tomcat/mod_jk.log

Re: Possible race condition with mod_jk + multiple workers in recovery mode

2011-01-11 Thread Andy Wang
problem or am I mis-reading what the end-service() call does here: service_stat = end-service(end, s, l, is_service_error); Thanks, Andy On 01/11/2011 12:08 PM, Andy Wang wrote: I'm still digging, but I thought I'd send this along to the mailing list while I try to decipher

tomcat connector issue with Sun Web Server 7.0.

2010-10-05 Thread Andy Wang
Hi all, We have a configuration where we use the tomcat connector with the Sun Java System Web Server and I'm noticing an unusual behavior that I've not noticed with Apache and mod_jk. When making a request to a URL such as http://host/webapp/dir/ In apache, the underlying request is made as:

Re: JVM goes away

2010-01-11 Thread Andy Wang
dmesg check if the linux out of memory kill struck you :) Andy On 01/11/2010 04:37 PM, Carl wrote: This is a new server, a Dell T110 with a Xeon 3440 processor and 4GB memory. I have turned off both the turbo mode and hyperthreading. The environment: 64 bit Slackware Linux java version

Re: JVM goes away

2010-01-11 Thread Andy Wang
I assume $GB means 4GB :) With that kind of memory use it doesn't sound entirely like the OOM killer. Have you looked around the filesystem for hs_err[pid].pid files? This usually is written to the cwd of the java process. That might give you ideas if it's a native crash. If so, it'll have the

Re: IIS isapi_redirect.dll chunked encoding option

2009-09-02 Thread Andy Wang
Rainer Jung wrote: Difficult to answer. My feeling is, that the code is fine and the original contributor Tim Whittington seemed to have used basically the same code for quite some time. On the other hand only having it in a separate binary will still prevent most people to use it, so it might

IIS isapi_redirect.dll chunked encoding option

2009-08-21 Thread Andy Wang
What are the general thoughts on the stability of the enable_chunked_encoding option for the IIS isapi redirector for tomcat and IIS? We're running into a scenario where something is causing IIS to not send down the complete response. Haven't figured out exactly the cause yet, but the

Re: IIS isapi_redirect.dll chunked encoding option

2009-08-21 Thread Andy Wang
Sorry, forgot to mention that. We're at the latest and greatest tomcat-connector version: 1.2.28. Thanks, Andy Peter Crowther wrote: 2009/8/21 Andy Wang aw...@ptc.com: What are the general thoughts on the stability of the enable_chunked_encoding option for the IIS isapi redirector

Re: tomcat-connectors mod_jk.dsp file will not load in Visual Studio 2005

2009-06-08 Thread Andy Wang
Mladen Turk wrote: All higher MSVCRT versions has dependency on MSVCRT.dll so if you build against that you have assurance that CRT functions will come from the same CRT library regardless of the version used. I know that stdio functions have problems, so if like mod_jk the module uses them for

Re: tomcat-connectors mod_jk.dsp file will not load in Visual Studio 2005

2009-06-05 Thread Andy Wang
-mail from Jess Holle regarding a quieter logging patch that he asked for comments on. Until we have time to look into Rainer's idea of stopping the nodes via the mod_jk status worker, we're using our patch for now, thus the need to build our own mod_jk. Thanks, Andy Mladen Turk wrote: Andy

Re: tomcat-connectors mod_jk.dsp file will not load in Visual Studio 2005

2009-06-05 Thread Andy Wang
Rainer Jung wrote: Mladen might like to elaborate more, but in short: MS binaries need a Microsoft Visual C++ Runtime library to run with. Those are called msvcrt. The library version used is determined during the dynamic linking done with visual studio. Now if you use an extensible application

Re: tomcat-connectors mod_jk.dsp file will not load in Visual Studio 2005

2009-06-04 Thread Andy Wang
I had no dependency issues on libhttpd, I was nmake -f Makefile.vc just worked for me once the proper environment variables were set. I just can't load the .dsp file and convert it to a vproj file. libhttpd should have been built with Apache, not the tomcat-connectors, so I guess I'm not

tomcat-connectors mod_jk.dsp file will not load in Visual Studio 2005

2009-06-03 Thread Andy Wang
Hi all, I was able to get mod_jk building fine using Makefile.vc, but couldn't get the .dsp file loaded into Visual Studio 2005. Anyone know if there's a trick to this, or should I just not care (it does build and seem to work fine with the Makefile). When Visual Studio 2005 tries to

nsapi_redirector with Sun Java System Web Server 7.0?

2009-04-03 Thread Andy Wang
Has anyone used the nsapi redirectory to connect SJSWS 7.0 with Tomcat? I noted that the documentation all still refers to 6.0, but the README on the binaries page is somewhat encouraging: # nsapi_redirector-1.2.28-sjsws6.1sp11.so is for Sun Java System Web Server (aka Netscape Enterprise