Re: Status of the current IIS ISAPI Redirector for Tomcat
Konstantin, On Fri, Jan 24, 2014 at 2:06 PM, Konstantin Preißer kpreis...@apache.orgwrote: Hi all, for my Java Servlet web applications which run on Tomcat (currently 8.0.0-RC 10) on various Windows Server OSes (currently Windows Server 2012 R2), I use the ISAPI Redirector to forward requests from IIS to Tomcat over AJP. I use IIS as primary web server because I also host other websites that use different technologies like ASP.Net and PHP (and because IIS allows to run web applications as different processes as different user accounts, and because I can configure the SSL settings over IIS, and so on). The ISAPI Redirector has its job done well in the past and currently I'm still using it. Note that I'm only using it to forward requests from a single IIS instance to a single Tomcat instance, but not for load-balancing or other features. However, over the time I found some issues which seem to result from the changes that Win Server, IIS and other components have experienced over time, which I wanted to list here and see how these could be changed. A possibility that I see is to use an ASP.Net (C#) based redirector instead of an ISAPI based redirector as that will have a number of advantages - see below. == You raise good points. I have run into similar issues and thus created my own project outside the Apache foundation three years ago (BonCode). It is a C# based AJP connector. It can currently be used with Tomcat, JBOSS, Jetty. From support requests I am surmising that is currently bundled with software from a few manufacturers including: EMC, CSC, Siemens and others instead of ISAPI redirector. Thus, I do encourage the update of the current IIS connection mechanism to a more up-to-date method. Using a managed code mechanism is the way to go in my opinion. In the long run SPDY may also be of interest for the same purpose. The more choices the better. The following are differences already in existence with BonCode and in response to your extensive writing, only read on if you are curious:: 1. The ISAPI Redirector seems to be quite complicate to configure. You have to: 1) place the ISAPI redirector DLL in some arbitrary path (the docs suggest to place them in your Tomcat\bin directory) == not needed 2) create a virtual directory in your IIS web application which points to this path == not needed 3) change the handler settings for the virtual directory to allow to execute ISAPI dlls == not needed 4) add the ISAPI redirector DLL to the list of CGI and ISAPI restrictions in IIS == not needed 5) add the ISAPI redirector DLL to your web app as ISAPI filter == not needed 6) create some registry entries at HKLM\Software\Apache Software Foundation\Jakarta Isapi Redirector\1.0 to specify the path of the virtual directory, path to configuration files etc. == not needed 7) create configuration files (uriworkersmap.properties, worker.properties) and but them in some arbitrary path (the docs suggest to place them in your Tomcat\conf directory) == not needed, configurations are done via the IIS UI and/or an xml config file I see a few problems here. First, you have to place the ISAPI redirector DLL in some external arbitrary path. This can introduce additional maintenance issues as you always have to remember this when e.g. moving the server. Because the docs suggest to place them in your Tomcat\bin directory, you might delete that file by mistake when you delete your Tomcat installation and create a new one. The same is true for the config files - if you place them in your Tomcat directory, you might delete them when you change your Tomcat config. Normally, these files do not belong to Tomcat, but to the ISAPI redirector, so I would expect to place them somewhere in your IIS web application. E.g, ASP.Net web applications have a web.config file in their root directory for configuration, and a bin directory where .Net assemblies can be placed. If you were using an ASP.Net based redirector for example (implemented as a managed module), you can place the binary into the bin directory of your IIS webapp and configure it by adding it to the web.config file. This would also mean that you don't have to create a virtual directory any more. I also got problems with the system-wide registry keys that you need to set up for the ISAPI redirector, as they don't allow separate configs for different IIS webapps. I once tried to create a isapi_redirect.properties with the configuration (instead of using the registry) like it is described on the Tomcat Connectors IIS reference page [1], but I didn't have success, so I reverted back to the registry settings. Note also that Microsoft has deprecated ISAPI filters and extensions in favor of native http modules [2]. == not needed 2. When using the ISAPI redirector with IIS 7, I got a few problems with response buffering - it seemed that IIS buffered the complete response body
Re: runtime.exec cmd.exe /C net use
On Sun, Mar 24, 2013 at 10:20 AM, Patrick Flaherty pflah...@rampageinc.comwrote: On Mar 23, 2013, at 10:00 PM, David Kerber wrote: On 3/23/2013 8:13 PM, Harris, Jeffrey E. wrote: -Original Message- From: André Warnier [mailto:a...@ice-sa.com] Sent: Saturday, March 23, 2013 8:10 PM To: Tomcat Users List Subject: Re: runtime.exec cmd.exe /C net use Harris, Jeffrey E. wrote: -Original Message- From: Patrick Flaherty [mailto:pflahrty@rampageinc.**compflah...@rampageinc.com ] Sent: Saturday, March 23, 2013 5:22 PM To: Tomcat Users List Subject: runtime.exec cmd.exe /C net use Hi, I'm trying to run the following command ( runtime.exec cmd.exe /C net use ) from my tomcat app and it's returning : net use New connections will be remembered. There are no entries in the list. This only happen when I run as a Windows service. If I run the tomcat batch file to start tomcat then net use returns all my mapped network drives. The service login is an account that has access to the network shares as my app uses those shares, but the service login should not preclude the command from executing properly. If I substitute dir for net use that works and I get a directory listing. The combo of net use command using cmd.exe and running as a service seems to be the conflict. Any input much appreciated. Thanks Pat I would add that it is kind of doubtful that this has anything directly to do with Tomcat, or even Java. Maybe that question would belong more to some Windows forum. --**--** - I absolutely agree. I would expect to see the same behavior with Apache HTTPD, IIS, or any other service that accesses mapped drives. It is a question of how service accounts behave in the windows architecture, rather than something specific with Tomcat. Jeffrey Harris It will depend on what user your TC service is running under.If it's running as the LocalSystem user, it will not have access to any network drives, or many other network resources. It can hit some, such as databases. If you want your TC to be able to see networked drives, you need to run it under the logged-on user's ID. Keep in mind, though, that if the user logs off, the drives will be disconnected. Your best bet in that case it to not connect by drive letter, but rather by the UNC name (what you used to map it when you were logged on). That will work if the user TC is running has has the appropriate permissions to the network resource. D Hi, Thanks for all the input. I know about service logins being only able to use UNC paths (not drive letters) to access network shares. I know the service login password have to have a matching account on the server with the shares in order for the tomcat app to use (access) those shares. We do all of this. Out tomcat app depends on network shares to function and it always has worked as long as the service login account matches an account on the server with the shares. What I'm trying to do in an html interface is make a pulldown menu list of my mapped drives as a location for our database backup. It's a preference setup to where an automated scheduled backup will write the backups. I'm using net use to produce what you would expect for output (all the mapped network drives) and parsing the output to produce the pulldown menu item containing the unc portion gleaned from the net use output. I need the unc portion as this is what a tomcat app needs. No matter what I do outside the app I cannot produce the effectively empty list that the app is producing. I'm logged into Windows as the same account as the service and I open a command prompt and see all my mapped drives via net use. I have tried UAC on and off and it changes nothing. I added a simple dir to the app and I can get that output but not the net use output. I do know it has to do with the service as I said because when tomcat is started via the startup.bat it works great. Maybe it is a Windows question but thought someone may have had some similar experience. Thanks for eveyone's thoughts. -Pat Pat, I believe the Windows workstation service is required to map drives. Background services in general run under a different context, thus, they cannot map drives. That being said you should be able to achieve this by allowing your Tomcat service to interact with desktop then actually mapping your drives in scripted fashion using a series of net use F: \\target\one /PERSISTENT:YES net use G: \\target\two /PERSISTENT:YES Now when you do a list using net use it should list drives for your service. HTH -Bilal
Re: Help on Windows 2008(64 bit)\Tomcat
I put it in the Tomcat 6.0\webapps folder while Tomcat was stopped, then started Tomcat to allow it to unpack. I have not installed Adobe Axis2 as I cannot find any part of it on the old servers. If you feel like you have any suggestions to pass on still I would appreciate it however I understand if you do not. Unfortunately due to my timeframe I was given, 2 week, management has decided to just edit the application to use the port 8080. We will determine at a later date if we need to continue to effort to get the redirect to work or not. == if so, why not change Tomcat to port 80 and stop IIS? Alternately, I am supporting the BonCode connector project for IIS ( tomcatiis.riaforge.org). To support Axis2 you would need to select the Wildcard mapping option during seutp.
Re: Custom Header Fields are Missing after SiteMinder Redirect (UNCLASSIFIED)
On Tue, Aug 28, 2012 at 3:55 PM, Rainer Jung rainer.j...@kippdata.dewrote: Hi John, On 28.08.2012 01:25, Lowman, John Mr CTR USA AMC wrote: I hope someone out there has some insight regarding the problem that I'm about to describe. All custom request header fields that are added via the SiteMinder policy server are being stripped (intentionally or accidentally) from the request header after passing through the Apache Tomcat isapi_redirect.dll ISAPI filter. Can you give an example of such a header, i.e. its name and a typical value? You might want to check https://issues.apache.org/**bugzilla/show_bug.cgi?id=47679https://issues.apache.org/bugzilla/show_bug.cgi?id=47679 though it should be fixed in 1.2.32. If you increase the redirector log level to debug, you will get additional output of the form: Forwarding request header HEADER_NAME : HEADER_VALUE for each header. We have a website running on IIS and ColdFusion 10 that is protected using SiteMinder. When a web request comes in, SiteMinder intercepts the request and performs a HTTP 302 redirect to the policy servers for authentication. After successful authentication, the policy server adds some custom fields, such as userid and mail, to the request header and fires it back to our web server. When using an ASP script below, I can see that these custom header fields appear in IIS, so I have proof that they are arriving intact in the header. However, the problem is that the custom request header fields get stripped out when viewing a ColdFusion page, which goes through the Apache Tomcat ISAPI filter. As Chris already asked: we need to understand the communication between Client/Browser, SiteMinder and your IIS/Redirector Client - IIS (HTTP Request) Now ?? SiteMinder ??? (what does intercept mean)? Then ?? Fire Back ?? I suggest a quick check against the debug log first. Here is the showheaders.asp page that I used to view the custom header fields: --- BEGIN showheaders.asp --- ... % ' Iterate through the server variables collection and display each header along with its value for each header in Request.ServerVariables response.write header = Request.ServerVariables( **header)brbr next % ... --- END showheaders.asp --- Here is the showheaders.cfm page that I used to view the custom header fields: --- BEGIN showheaders.cfm --- ... cfoutputALL_HTTP = #cgi.ALL_HTTP#/cfoutput See below cfdump var=#cgi# label=cgi expand=yes / cfdump var=#getHTTPRequestData()# / ... --- END showheaders.cfm --- The missing headers problem started after upgrading our server from ColdFusion MX 7 to ColdFusion 10. ColdFusion MX 7 ran on JRun; ColdFusion 10 runs on a modified version of Apache Tomcat. I suspect that the header fields are being stripped out by the ISAPI filter, because the custom fields are missing whether I use ColdFusion's built-in getHTTPRequestData() function, or from a Java equivalent on the ColdFusion page. --- BEGIN GetCredentialsFromHeader() --- ... cfset pageRequest = getPageContext().getRequest() / cfset pageRequestHeaderNames = pageRequest.getHeaderNames() / cfloop condition=#**pageRequestHeaderNames.** hasMoreElements()# cfset thisName = pageRequestHeaderNames.**nextElement() / cfoutput #thisName#='#pageRequest.**getHeader(thisName)#'br / /cfoutput /cfloop cfdump var=#pageRequest# label=Java Page Request / !--- This is the ColdFusion way of getting request headers. --- cfdump var=#GetHTTPRequestData()# label=HTTP Request Headers / cfabort / /cffunction --- END GetCredentialsFromHeader() --- Another quirk that I noticed is that the ALL_HTTP CGI field exists after passing through the ISAPI filter, but it's blank. In contrast, the ALL_HTTP field is populated when viewing in IIS via the ASP script. Since CGI does more unwanted things to the HTTP headers (replacing underscores with dashes, lowercasing names etc.) the ISAPI redirector uses ALL_RAW. Now the specs: ColdFusion: version 10,282462 CF-Tomcat: N/A (It's integrated into ColdFusion 10) isapi_direct.dll: version 1.2.32.0 OS: Windows 2003 Java: JDK 1.6.0_33 VM Version: 20.8-b03 IIS:6 I can't think of anything else at the moment. If anyone knows what's causing this, please help me. I'd be very grateful. Regards, Rainer --**--**- To unsubscribe, e-mail:
Re: [OT] problems with performance with IIS 7.5 and Tomcat Connector
On Thu, Feb 2, 2012 at 3:38 PM, Mark Thomas ma...@apache.org wrote: On 02/02/2012 20:19, Bilal S wrote: I am willing to learn but finding the Apache related processes singularly difficult to deal with. We are working with mailing list, in the age of websites and social media. Correct. This is deliberate. Mailing lists are the lowest common denominator and allow the widest possible participation. Not everyone has an always on internet connection with high bandwidth. è Thanks for clarifying. Is the goal to design for the lowest common dominator? This would mean that if 99% of the user base had access to better tools and 1% did not you would design for the 1%? If so, this would be a disservice to the user community, wouldn’t it? There are more improved design principles that have found use on the web for the last decade and have proven to serve their user base better. For example, either graceful degradation or progressive enhancement would be able to help the whole population without sacrifice. Why not adopt one at the ASF? For those folks with bandwidth to spare that prefer a forum interface, there are third parties that provide it. I love that the tools we use at the ASF work just as well when I (or anyone else) is at the end of a very slow mobile data connection in the middle of almost nowhere even though trying to view a web page from the same place is pretty much impossible these days. è Also not sure that the issue of better and easier to use tools and communication is a bandwidth problem alone, and thus, concluding that people with low bandwidth would prefer email as lone mechanism of communication does not follow automatically. There are rich experiences possible for people with low bandwidth connections. Apps running in browsers making use of partial connections, local storage and enhanced programmability have blown this boundary a while ago. Similarly, on the mobile side, there are smart apps aware of connectivity. There are many examples, but I would like to point at Google for example implementations. A quick tour of google mobile apps and google groups online shows well designed interaction for any bandwidth. Why can’t this be a goal at ASF? There is no easy to find contact form anywhere on the Apache websites. Also correct. The primary form of communication within Apache communities are the mailing lists and these should be obviously linked from each project's home page. In Tomcat's case, you'll find the forum based interfaces linked from the same place. è Thanks for clarifying. Thus, I am challenging ASF to be more open and do better than mailing list. Why would running users to a gauntlet to be able to talk someone be considered effective or desirable for an organization promoting openness? It may reduce email volumes but wouldn't hide the true issues? Yet, there seems to be a lot emotions floating around in this list. With a high a volume mailing list such as this, there is an expectation that folks follow [1] and a distinct lack of patience for folks that continue to ignore that excellent advice after they have been pointed towards it. è I understand the nature of volunteer work. I appreciate the hard work and dedication of all. The word “Excellent” does throw me for a loop though as I can not find objective measurements that would back this up. For example, are we basing excellence on resolution rate? On time to resolution, on professionalism of interaction? Number of steps? What baselines have been established against similar organizations (e.g. Jboss, etc.) and support groups; how has this group done better or worse? I think it would be a great project for ASF to establish goals and measure them in contrast to others in this area, especially given the volunteer nature. In my opinion, it is hallmark of maturity to be able to this type of assessment. Though there is not doubt that some users will “ignore” advice by very smart contributors, it does not mean they deserve less respect in the way that they are being treated or do not deserve to ask questions. No volume (I think this group averages about a dozen emails per day over a year) of request justifies discourteous treatment by anyone to anyone else. As you can tell I have a disagreement on this statement and issue alone. Even in a very positive light, I am reading little regard for users. Is this true? In my opinion, organizations that promote Free and Open Software, should be easily accessible, easy to communicate with, and make their mission to educate others (even the ones that “ignore advice”) about the principles, the products and services. It should not be a punishment to post on list, and you should not be bullied out of them. Maybe I am out of line or just an idealist, but that would be highly cool and I know it is possible and ASF could do it. As an example check out Jboss.org communities. This in a way is good. It speaks of passion and dedication. I would
Re: [OT] problems with performance with IIS 7.5 and Tomcat Connector
On Thu, Feb 2, 2012 at 5:06 AM, Mark Thomas ma...@apache.org wrote: On 02/02/2012 09:57, André Warnier wrote: Alex Samad - Yieldbroker wrote: Hi Hopefully this is the right list :) Actually I don't know, but I would also like to know. I have noticed previously on this list, that whenever someone mentions JBoss, some of the people here (Tomcat developers ?) In the most recent case, it was a JBoss/Tomcat developer who responded seem to react quite strongly, and tell the poster curtly to go ask their question on the JBoss support list. == I agree that support objective of this list is sometimes overshadowed by personal egos and short-circuited responses. I have observed this regularly but believe that the persons responsible have the right intent, just not the maturity required. We are all trying to learn and help each other in the end. On the other hand, it seems to be so that JBoss is a server software which uses Tomcat as the underlying servlet engine. (But maybe also I am mistaken there, I do not really know JBoss). JBoss used to embed Tomcat directly. Some time ago (before Tomcat 7 - Remy would know exactly when) JBoss opted to fork Tomcat. I believe (I haven't looked) that the code bases remain similar in many areas but there are some significant differences. For example, the Servlet 3 implementations are likely to be very different. I don't see any issue with JBoss questions here up to the point that it is apparent that the issue is in an area where the JBoss fork has diverged. Then the JBoss support forums would be a better place to seek help. Agreed. In any case, there seems to be more to it than meets the eye of the naive subscriber that I am. So it would be nice if someone here provided some clarity on the matter. The above is the best I can do short of doing a diff between the JBoss code and Tomcat code. Anyway, from your description of the matter and of the configuration files, it seems that your question is at least to a large extent related to the isapi_redirect IIS plugin, which is developed by some of the people on this list, and thus for which this list is the right place for your questions, as far as I know. +1. If you believe that the problem is localized around the connector have you tried to bypass it to verify that assumption and create a baseline? If you used IIS HTTP proxy what are the results? If you were hitting the tomcat servers on HTTP directly (no IIS) what are the results? If you used an alternate connector (BonCode) (I dare not write the URL since then the Tomcat guys are going to jump on me for daring to suggest other solutions not invented here) what are the results? If all is similar, then, looking at the JBoss side for performance optimization would probably a good idea.
Re: [OT] problems with performance with IIS 7.5 and Tomcat Connector
If you believe that the problem is localized around the connector have you tried to bypass it to verify that assumption and create a baseline? If you used IIS HTTP proxy what are the results? If you were hitting the tomcat servers on HTTP directly (no IIS) what are the results? If you used an alternate connector (BonCode) (I dare not write the URL since then the Tomcat guys are going to jump on me for daring to suggest other solutions not invented here) I'll bite. 1. Bilal announces release of his (?) connector. 2. Bilal responds to a user configuration problem by suggesting they uses another connector, the one referred to in #1. 3. Repeat #2. Personally* I don't object to you promoting your(?) project here. It's just that not disclosing that when you're helping another user by suggesting they use your(?) project instead of fixing the actual issue seems a bit off. p * I'm one person, it's just my own view == Thank you for sharing. I appreciate your comments. I will highlight this in subsequent interactions. In the end, I am trying to help. If any of my projects can assist, I consider it gravy but not the end goal. After all, my name being unique would have made this obvious to anyone who can handle a command prompt. You will also note that I am asking for collection of data to diagnose the issues given. I hope you do not consider data collection and analysis counterproductive and relegate this to not fixin the issue. I am willing to learn but finding the Apache related processes singularly difficult to deal with. We are working with mailing list, in the age of websites and social media. Yahoo groups met the light of day in the late 90's yet there is no web-forum available. There is no easy to find contact form anywhere on the Apache websites. Yet, there seems to be a lot emotions floating around in this list. This in a way is good. It speaks of passion and dedication. I would ask that this passion is directed toward assistance and innovation. This probably will go farther than anything else. Feel free to email me directly if you want to chat.
Re: Reinstall with 302 error
On Sat, Jan 28, 2012 at 11:24 AM, Pid p...@pidster.com wrote: On 28/01/2012 15:08, Bilal S wrote: It would not be unusual for a page to redirect to itself. Have you tried an alternate connection mechanisms. Http proxy or BonCode ( http://tomcatiis.riaforge.org)? Really, is that relevant here? Please don't top-post. Please reply below each relevant point in the previous message. == Highly relevant as per post: Extract from post: Extract start === Previously we had been using IIS to redirect the site, however we installed the Tomcat Connector. === Extract End Thus, we need to understand whether things were working with the old connection mechanism. Also substantiated by working on MacOSx no Apache webserver was mentioned, thus high likely hood that the connection was direct to tomcat. Ben, what happens when you connect to Tomcat webport directly, i.e. port 8080?
Re: Reinstall with 302 error
It would not be unusual for a page to redirect to itself. Have you tried an alternate connection mechanisms. Http proxy or BonCode ( http://tomcatiis.riaforge.org)? Does it behave the same? If this app works unmodified in Mac OSX, it should work in Windows. On Wed, Jan 25, 2012 at 5:08 PM, Benjamin Madore bc...@pitt.edu wrote: Hi all, I have inherited a two web applications written several years ago. Since the server, which had been installed just before I arrived, was rebuilt last month we have not been able to log in to the application. We had continued to update Tomcat and Java before the rebuild so it was running the latest versions at the time on Windows 2008. Previously we had been using IIS to redirect the site, however we installed the Tomcat Connector. We use an SSL cert that has been installed in IIS. The index.jsp page loads fine, but other jsp pages in the site give an error. Other sites have no problem, and I am able to view jsp pages with or without https. One web app (the eli2117 and 2121 folders) won't load at all after the login page, and the other (dataSearch) appears normal, it will reload the login page (related to a bug in the application, login was always flaky on it unless you were logged into an instance of the former application). Other pages (the test directory) load fine. The eli app uses response.sendRedirect(home.jsp); in the login process; but it appears to me that even login.jsp is not being recognized from the form submit. We have a test server running Tomcat 6 and MacOS 10.4 where the application works fine. I understand there is a big difference between the two, but the budget for upgrades is thin around here. As I said before, it ran in the current environment prior to the rebuild. I would appreciate any hints on where to go from here on fixing the problem. Attached are log snippets. Thanks, Ben Madore Research Programmer, Linguistics Dpt. University of Pittsburgh, Cathedral of Learning 136.142.248.135 - - [24/Jan/2012:14:02:12 -0500] GET /eli2121/ HTTP/1.1 200 6501 136.142.248.135 - - [24/Jan/2012:14:02:20 -0500] POST /eli2121/login.jsp HTTP/1.1 302 - 136.142.248.135 - - [24/Jan/2012:14:02:20 -0500] GET /eli2121/home.jsp HTTP/1.1 302 - 136.142.248.135 - - [24/Jan/2012:14:02:20 -0500] GET /eli2121/home.jsp HTTP/1.1 302 - 136.142.248.135 - - [24/Jan/2012:14:02:20 -0500] GET /eli2121/home.jsp HTTP/1.1 302 - 136.142.248.135 - - [24/Jan/2012:14:02:20 -0500] GET /eli2121/home.jsp HTTP/1.1 302 - 136.142.248.135 - - [24/Jan/2012:14:02:20 -0500] GET /eli2121/home.jsp HTTP/1.1 302 - 136.142.248.135 - - [24/Jan/2012:14:02:20 -0500] GET /eli2121/home.jsp HTTP/1.1 302 - 136.142.248.135 - - [24/Jan/2012:14:02:20 -0500] GET /eli2121/home.jsp HTTP/1.1 302 - 136.142.248.135 - - [24/Jan/2012:14:02:20 -0500] GET /eli2121/home.jsp HTTP/1.1 302 - 136.142.248.135 - - [24/Jan/2012:14:02:20 -0500] GET /eli2121/home.jsp HTTP/1.1 302 - 136.142.248.135 - - [24/Jan/2012:14:02:20 -0500] GET /eli2121/home.jsp HTTP/1.1 302 - 136.142.248.135 - - [24/Jan/2012:14:02:20 -0500] GET /eli2121/home.jsp HTTP/1.1 302 - 136.142.248.135 - - [24/Jan/2012:14:02:20 -0500] GET /eli2121/home.jsp HTTP/1.1 302 - 136.142.248.135 - - [24/Jan/2012:14:02:20 -0500] GET /eli2121/home.jsp HTTP/1.1 302 - 136.142.248.135 - - [24/Jan/2012:14:02:20 -0500] GET /eli2121/home.jsp HTTP/1.1 302 - 136.142.248.135 - - [24/Jan/2012:14:02:20 -0500] GET /eli2121/home.jsp HTTP/1.1 302 - 136.142.248.135 - - [24/Jan/2012:14:02:20 -0500] GET /eli2121/home.jsp HTTP/1.1 302 - 136.142.248.135 - - [24/Jan/2012:14:02:20 -0500] GET /eli2121/home.jsp HTTP/1.1 302 - 136.142.248.135 - - [24/Jan/2012:14:02:20 -0500] GET /eli2121/home.jsp HTTP/1.1 302 - 136.142.248.135 - - [24/Jan/2012:14:02:20 -0500] GET /eli2121/home.jsp HTTP/1.1 302 - 136.142.248.135 - - [24/Jan/2012:14:02:20 -0500] GET /eli2121/home.jsp HTTP/1.1 302 - 107.9.135.86 - - [25/Jan/2012:00:37:31 -0500] GET /eli2117/course.jsp?action=submitfile_type_id=1 HTTP/1.1 302 - 107.9.135.86 - - [25/Jan/2012:00:37:32 -0500] GET /eli2117/home.jsp HTTP/1.1 302 - 107.9.135.86 - - [25/Jan/2012:00:37:32 -0500] GET /eli2117/home.jsp HTTP/1.1 302 - 107.9.135.86 - - [25/Jan/2012:00:37:32 -0500] GET /eli2117/home.jsp HTTP/1.1 302 - 107.9.135.86 - - [25/Jan/2012:00:37:32 -0500] GET /eli2117/home.jsp HTTP/1.1 302 - 107.9.135.86 - - [25/Jan/2012:00:37:32 -0500] GET /eli2117/home.jsp HTTP/1.1 302 - 107.9.135.86 - - [25/Jan/2012:00:37:32 -0500] GET /eli2117/home.jsp HTTP/1.1 302 - 107.9.135.86 - - [25/Jan/2012:00:37:32 -0500] GET /eli2117/home.jsp HTTP/1.1 302 - 107.9.135.86 - - [25/Jan/2012:00:37:32 -0500] GET /eli2117/home.jsp HTTP/1.1 302 - 107.9.135.86 - - [25/Jan/2012:00:37:32 -0500] GET /eli2117/home.jsp HTTP/1.1 302 - 107.9.135.86 - - [25/Jan/2012:00:37:32 -0500] GET /eli2117/home.jsp HTTP/1.1 302 - 107.9.135.86 - -
Re: BonCode AJP Connector 1.0rc ready - AJP from IIS to Tomcat
Sure thing here is the change log between 0.91 to 1 Version 0.9.2.2 Updates: * Fix: gzip compression handling from servlets. Set correct content encoding. * Fix: install on IIS7 did not write setting file * Add: Updated troubleshooting information in Manuals Version 0.9.2.3 Updates: * Fix: JSP response.sendRedirect() call uses HTTP 302 redirect. Would lead to timeout. * Fix: Specific issues with Jetbrains TeamCity application implementation and protocol behavior (AJAX) * Fix: Stop waiting on tomcat when redirect directive is given * Fix: Handle Railo vs. tomcat native variances in File upload behavior with and without redirects. Version 0.9.2.4 Updates: * Add: Installer update. Installation of .net framework feature as option for windows 7 and windows 2008+ * Add: User friendly error messages when we cannot connect to Apache Tomcat Version 0.9.2.5 Updates: * Fix: separate AJP attributes from headers. All present optional http attributes are transferred even if not processed by tomcat. * Fix: Recognize misordered packets from Tomcats (out of order GET BODY CHUNK) and provide proper response. This would result in blank screen. * Add: add new setting to transfer optional header (x-tomcat-docroot) note capitalization * Add: automatically fix wrong content-length declaration if content is missing. Fill in empty characters where content is missing. This is not correct but will continue browser processing. * Fix: Use of System Timer would leak memory when thread was destroyed * Fix: AJP protocol header server and port designations send to servlet container were incorrect when IIS and tomcat were remoted. * Add: HTTP header Blacklist and Whitelist options in settings file * Fix: Correct flush protocol detection problem so HTTP flushes can be detected and spooled to browser. Version 0.9.2.6 Updates: * Fix: correct transfer of non-standard headers without the http prefix added by IIS * Fix: compatibility with Axis1 projects * Add: no longer force conversion of text to UTF8. Will pass directly content as is to browser from tomcat regardless of content-type declaration. * Add: Setting [ForceSecureSession] to force secure session via SSL. Will automatically exchange secure session cookies and force all communication over SSL to the Webserver. * Add: Settings for timeout tcp/ip connections are exposed and can be changed by user. Version 0.9.2.7 Updates: * Add: Improve http flush detection, add network stream behavior in addition to timer. * Fix: Zero content tomcat packages would cause display of error message in browser. * Fix: ignore binary transfers that contain AJP protocol magic markers would lead to empty screen. Version 0.9.2.8 Updates: * Fix: extend timeout for socket so that longer timeouts in IIS Application Pool do not result in closed socket errors * Add: automatic translation of client IPs to account for intermediaries (load balancers and proxies), e.g. HTTP_X_FORWARDED_FOR to REMOTE_ADDR automatic rewrite * Add: Strong signing of assemblies so project can be placed in GAC (Global Assembly Cache) Version 0.9.2.9 Updates: * Add: setting to show suppressed headers (AllowEmptyHeaders). The connectors skips headers that do not have data to speed processing. Set to true to send empty headers as well. * Add: setting to send path info in alternate http header (PathInfoHeader). This is to bypass tomcat bug with AJP path-info transfer. * Fix: Remove default for ResolveRemoteAddrFrom (HTTP_X_FORWARDED_FOR). Will now need to be explicitly set to be enabled. Version 1.0rc Updates: * Add: installer deploy in GAC mode * Add: installer configure tomcat server.xml if on same server The only difference between 1rc and 1 will be scripted deployment options for the installer (so you put it on many servers easily etc.). Best, Bilal On Fri, Jan 20, 2012 at 2:02 PM, Jordan Michaels jor...@viviotech.netwrote: Sweet! Is there a changelog between the 0.91 release to the 1.0rc release? Thanks Bilal! -Jordan - Original Message - From: Bilal S bilal.so...@gmail.com To: Tomcat Users List users@tomcat.apache.org Sent: Thursday, January 19, 2012 12:13:00 PM Subject: BonCode AJP Connector 1.0rc ready - AJP from IIS to Tomcat After close to a year of development and help of countless volunteers version 1.0rc is finally available. Many thanks to all the people that helped. This was done despite the discouragement from the Apache foundation how nuts we were to even try to improve this old horse. We simply needed a better way to connect IIS and Tomcat, that addressed issues that have emerged over the years. Just to name a few: easier setup, better management, more throughput, etc. http://tomcatiis.riaforge.org/ As usual feedback is appreciated. Cheers, Bilal - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Is SSL keystore with AJP connector possible?
If you are running windows, have you tried to connect to IIS via HTTPS and then via AJP to tomcat? I find that this is much easier solution then trying to configure HTTPS on tomcat or apache httpd.
BonCode AJP Connector 1.0rc ready - AJP from IIS to Tomcat
After close to a year of development and help of countless volunteers version 1.0rc is finally available. Many thanks to all the people that helped. This was done despite the discouragement from the Apache foundation how nuts we were to even try to improve this old horse. We simply needed a better way to connect IIS and Tomcat, that addressed issues that have emerged over the years. Just to name a few: easier setup, better management, more throughput, etc. http://tomcatiis.riaforge.org/ As usual feedback is appreciated. Cheers, Bilal
Re: tomcat iis connector feedback is needed
Thanks for the info. Will adjust with next revision. On Wed, Apr 6, 2011 at 11:20 AM, Mladen Turk mt...@apache.org wrote: On 04/06/2011 03:56 PM, Bilal S wrote: Folks: Feedback is needed on a project I worked on to connect IIS to Tomcat. Connectors can be downloaded from: http://tomcatiis.riaforge.org/ This not open source AFAICT, but that's fine. Nevertheless you should follow the ASF Trademark guidelines: http://www.apache.org/foundation/marks/ when ever using one of our trademark names. In essence our project is not Tomcat, but rather 'Apache Tomcat', so you should credit it as such. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
tomcat iis connector feedback is needed
Folks: Feedback is needed on a project I worked on to connect IIS to Tomcat. This is a replacement for the old ISAPI redirectors that have been used since early 2000. Nonetheless, the new ones should work for Tomcat 5,6,7 and IIS 5.1,6,7,7.5 combinations. Looking for feedback (what works, what doesn't, bugs from this group). Connectors can be downloaded from: http://tomcatiis.riaforge.org/ Here are some general improvements with these connectors: • no ISAPI code • no IIS6 vestiges or backward compatibility elements needed on IIS7 • all managed code for using .net extensibility framework • works on IIS5.1, IIS6 and IIS7 • speed improvements • easier control on IIS side • no virtual directories and virtual mapping needed • configuration can be inherited to sub-sites and virtual sites • easy install/uninstall • support partial stream sending to browser (automatic flushing) with faster response to client • support both 32/64 bit of Windows with same process and files • transfer of all request headers • build in simple-security for web-administration pages • Works on Windows XP (IIS5.1) and above Thanks again, -Bilal
Re: IIS7/isapi/tomcat performance
Folks: I might be a little to this discussion. I have taken upon myself; (don't ask why I asked for that kind of pain ;o) to review how IIS and tomcat inter operate and just released in beta a new connector specifically for IIS7 / tomcat (though this works in IIS6 as well). You can download binary code and docs from RIA forge site (I use this for my projects): http://tomcatiis.riaforge.org/ The download also has a pointer to source code if you need to download it and would like to compile it yourself. I am currently working on automating the install for this. I did very detailed analysis the existing ISAPI connection methodology and elected to forgo it and use a more future proof managed document handler. This has several advantages, one of which it that it gracefully handles 32/64 bit with the same code base. My initial focus was on providing a connector that is more aggressive in managing throughput, thus able to use larger IP packets, more simultaneous connections per client, larger connection pools by default then the previous ISAPI based one. I would appreciate any feedback from the members here. Best, Bilal
