Re: After OS update from RHEL 6.3 to 6.10 seeing 503 error

2020-07-30 Thread Coty Sutherland
On Wed, Jul 29, 2020 at 4:41 PM Christopher Schultz < ch...@christopherschultz.net> wrote: > Satish, > > On 7/29/20 2:56 PM, Satish Chhatpar 02 wrote: > > After OS update from RHEL 6.6 to 6.10, seeing 503 error. > > > > Need help to fix this. > > > > > > > > > > 503 Service Temporarily

Re: File "catalina.out" not being created/populated when using Tomcat 9.0.31 + Ubuntu 20.04, and content goes to the Ubuntu syslog instead?

2020-07-07 Thread Coty Sutherland
With this kind of service (and, similarly, Coty Sutherland's work @ > RedHat), I might re-think my policy of always using the vanilla > packages from Apache. > > It's *really* nice when the package-manager can do it all. > It really is ;)

Re: Tomcat not part of RHEL 8 distro?

2020-07-07 Thread Coty Sutherland
On Thu, Jul 2, 2020 at 3:43 PM Sean Neeley wrote: > I heard that tomcat is no longer available for RHEL 8. Does anyone know > why this is? What free alternatives are there for java servlets, which > have rpm packages managed by Red Hat? Thanks > The answer to your question is pretty

Re: [ANN] New committer: Raymond Augé

2020-07-02 Thread Coty Sutherland
Congrats and welcome! On Thu, Jul 2, 2020 at 10:40 AM Mark Thomas wrote: > On behalf of the Tomcat committers I am pleased to announce that > Raymond Augé (rotty3000) has been voted in as a new Tomcat committer. > > Please join me in welcoming him. > > Kind regards, > > Mark > >

Re: Having trouble with tomcat 7 installation on RHEL 7.8 power pc

2020-07-02 Thread Coty Sutherland
The RHEL 7 Tomcat package uses systemd and the journal to capture stdout instead of catalina.out. Did you check the journal to see if the thread dumps are logged there from your invocations of kill -3? You can use `journalctl -u tomcat` to check it. On Wed, Jul 1, 2020 at 6:58 PM Sean Neeley

Re: CentOS Tomcat install seems to ignore setenv.sh

2020-05-18 Thread Coty Sutherland
On Wed, May 13, 2020 at 5:06 PM Patrick Baldwin wrote: > On Wed, May 13, 2020 at 1:31 PM Coty Sutherland > wrote: > > > Hi, > > > > Please see responses in line below. I'm top posting a bit because the > > thread got off in the weeds about permission

Re: CentOS Tomcat install seems to ignore setenv.sh

2020-05-13 Thread Coty Sutherland
Hi, Please see responses in line below. I'm top posting a bit because the thread got off in the weeds about permissions it seems, which are important but not exactly relevant to your problem IMO. On Tue, May 12, 2020 at 11:28 AM Patrick Baldwin wrote: > I've gotten passed an odd (to me,

Re: Tomcat Server Using 100% CPU

2019-08-08 Thread Coty Sutherland
I'd suggest writing a small script to loop about 10 times and capture top and thread dumps with jstack at the same time, then wait a few seconds then repeat. After that you can grab the pid/tid from the top output and compare that with your thread dump to see exactly what the thread is doing for

Re: how to enable OCSP for Tomcat w OpenSSL

2019-04-02 Thread Coty Sutherland
Hi, On Mon, Apr 1, 2019 at 3:30 PM John Palmer wrote: > What, if anything, needs to be configured to ENABLE (preferably REQUIRE) > tomat to do CLIENT certificate revocation checking via OCSP in Tomcat > 8.5.38 using Openssl ? Setting `certificateVerification="require"` on your Connector and

Re: [ANN] New committer: Woonsan Ko

2018-12-20 Thread Coty Sutherland
Congratulations and Welcome Woonsan! On Wed, Dec 19, 2018 at 9:08 PM Keiichi Fujino wrote: > Congratulations! > Welcome Woonsan! > > 2018年12月19日(水) 18:56 Mark Thomas : > > > On behalf of the Tomcat committers I am pleased to announce that > > Woonsan Ko (woonsan) has been voted in as a new

Re: OCSP stapling in tomcat 7 with APR

2018-10-15 Thread Coty Sutherland
On Mon, Oct 15, 2018 at 11:39 AM Mark Thomas wrote: > On 15/10/18 16:20, Усманов Азат Анварович wrote: > > how do I make sure ocsp is enabled on tomcat native > > > > when I try to pass --enable-ocsp to tomcat native configure i get > unrecognized option warning > > As far as I can tell, you'd

Re: 2018.03.07-2 Bundle issue with tomcat 8 - Post

2018-08-28 Thread Coty Sutherland
On Fri, Aug 17, 2018 at 9:51 AM Olaf Kock wrote: > > On 17.08.2018 15:40, Mandal, Jayanta wrote: > > Tomcat Version : We upgraded our tomcat environment from bundle > 2016.10.31-2 to 2018.03.07-2 & suddenly we are seeing all Post method > stopped working with new bundle. > > > > > > Previous

Re: problem in starting tomcat

2018-06-27 Thread Coty Sutherland
On Wed, Jun 27, 2018 at 1:08 PM, Prateek wrote: > Hi Chris, > > By hardened, I meant that support for some FIPS non-complaint algos were > removed/disabled. > > Thanks for confirming again that this is a clear problem with the JVM. > >From what you've given us this is a JVM problem and nothing

Re: problem in starting tomcat

2018-06-26 Thread Coty Sutherland
On Tue, Jun 26, 2018 at 12:27 PM, Prateek Yadav wrote: > Thanks for reply > I already tested it for more than one machine so hardware problem can not > be a case. > What happens if you don't specify that OnError call? Can you attach a fuller stack trace if not the entire hs_err_pid log (make

Re: How to configure Tomcat for OCSP stapling?

2018-05-28 Thread Coty Sutherland
Hi, On Mon, May 28, 2018 at 7:22 PM, Mark Boon wrote: > My company asked to enable OCSP stapling for our Tomcat server. I found > the documentation about configuring a Tomcat OCSP Connector here: > > https://tomcat.apache.org/tomcat-8.5-doc/ssl-howto.html# > Configuring_OCSP_Connector > > > >

Re: javax.servlet.Filter failed to start error. How to debug it?

2018-04-03 Thread Coty Sutherland
On Tue, Apr 3, 2018 at 8:47 AM, Luis Rodríguez Fernández wrote: > Hello there, > > I've realized that if I make a typo in my declaration I get > something in the catalina.out like: > > Apr 03, 2018 2:27:01 PM org.apache.catalina.core.StandardContext > startInternal > SEVERE:

Re: HOME user folder change & tomcat HOME

2018-03-27 Thread Coty Sutherland
Hi, This sounds like a problem specific to the distribution's tomcat package, which is usually better served by the distribution's community rather than Tomcat's (they repackage what we provide). You may want to ask on their users list/support forum/etc, but I will try and help though :) On Tue,

Re: worker0 tomcat ,manager is not wotking

2018-03-20 Thread Coty Sutherland
On Tue, Mar 20, 2018 at 6:40 AM, Loai Abdallatif wrote: > Thanks Schultz > > the error is described in the url link below, The issue has been fixed > using following these steps: > >- Go to Tomcat installation and then /opt/worker0/webapps/manager/ >META-INF >

Re: Binding a non root user to port 443

2018-03-13 Thread Coty Sutherland
This looks like a continuation of this thread from 11 days ago: https://www.mail-archive.com/users@tomcat.apache.org/msg128541.html On Tue, Mar 13, 2018 at 2:16 PM, Cheltenham, Chris wrote: > Chris, > > I see JSVC will allow a non root user to bund to 443 > Somehow I

Re: where to find org.apache.catalina.filters.RemoteAddrFilter?

2018-03-01 Thread Coty Sutherland
On Thu, Mar 1, 2018 at 3:35 PM, Zari Ladak wrote: > Hi All, > > I would like to use the org.apache.catalina.filters.RemoteAddrFilter > filter as part of my web.xml settings. I am just curious to know which > jar file has that class. You can find which paths are included

Re: [OT] Running as user tomcat [authbind]

2018-02-26 Thread Coty Sutherland
On Mon, Feb 26, 2018 at 9:59 AM, Christopher Schultz <ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Coty and André, > > On 2/23/18 6:58 PM, Coty Sutherland wrote: >> Also see https://bz.apache.org/bugzilla/show_bu

Re: Running as user tomcat

2018-02-23 Thread Coty Sutherland
Also see https://bz.apache.org/bugzilla/show_bug.cgi?id=60560 :) I've been planning to push a solution for that, just haven't gotten around to it yet. On Fri, Feb 23, 2018 at 5:34 PM, André Warnier (tomcat) wrote: > On 23.02.2018 23:32, André Warnier (tomcat) wrote: >> >> On

Re: Error parsing HTTP request header, HTTP method names must be tokens

2018-02-20 Thread Coty Sutherland
On Tue, Feb 20, 2018 at 4:01 PM, Alex O'Ree wrote: > I keep running into the an IllegalArgumentException at or near startup of > tomcat 8.5 with a bunch of cxf web services deployed and I have no idea > what's causing it. The error message mentions turning on logging at the >

Re: TomcatCon Training: Tomcat for Administrators

2018-02-19 Thread Coty Sutherland
__ >> Israel Timoteo >> >>> On Feb 19, 2018, at 10:50 AM, Rémy Maucherat <r...@apache.org> wrote: >>> >>> On Mon, Feb 19, 2018 at 5:28 PM, Mark Thomas <ma...@apache.org> wrote: >>> >>>> On 19/02/18 16:23, Coty Sutherland wrote: >

Re: TomcatCon Training: Tomcat for Administrators

2018-02-19 Thread Coty Sutherland
Do we plan on doing any audio or video to go along with the slides for these? We could add them to the youtube channel for those that can't attend the live training. On Mon, Feb 19, 2018 at 9:50 AM, Mark Thomas wrote: > All, > > The Apache Tomcat PMC is delighted to announce

Re: OOM Issues with Tomcat/8.5.20 and JRE/1.8.0_144-b01

2018-02-15 Thread Coty Sutherland
On Thu, Feb 15, 2018 at 10:02 AM, Kanduri, Rakesh Kumar X. -ND wrote: > Hi All, > > We are facing Out Of Memory issue in our Tomcat Server v8.5.20 as shown in > the below logs. > Note: Though the error message says insufficient memory, we checked for the >

Re: Tool to analyze the core/heap dump

2018-02-05 Thread Coty Sutherland
On Mon, Feb 5, 2018 at 3:16 PM, Igal @ Lucee.org wrote: > On 2/5/2018 11:15 AM, Johan Compagner wrote: >> >> Jvisualvm that ships with java8 or yourkit (you can evaluate for some >> time) >> >> Op 5 feb. 2018 19:43 schreef "D, Dwarakesh (External)" < >> dwarakes...@xerox.com>: >>

Re: Can't Get SSL to Work in 8.5

2018-01-23 Thread Coty Sutherland
="_default_" > clientAuth="false" > sslProtocol="TLS" > protocols="TLSv1.2" > sessionCacheSize="5" > sessionTimeout="960"> > certificateKeyAlias="dmb-kenneth" > certificateKeystoreFile="conf/localhos

Re: Can't Get SSL to Work in 8.5

2018-01-22 Thread Coty Sutherland
On Mon, Jan 22, 2018 at 2:23 PM, Kenneth Taylor wrote: > We are trying to get SSL to work in 8.5 and have been unsuccessful. We > followed all the instructions in the Tomcat documentation and what help is > available on the net but have been unable to get TC to

Re: Subscription to tomcat-users

2018-01-05 Thread Coty Sutherland
Is there some reason why this user can't subscribe to the users@ list? They found me in freenode and seemingly get no response from the list emails (users@ and users-help@). Cheers, On Fri, Jan 5, 2018 at 3:40 PM, Alex wrote: > Hello, > > This is my address that doesn't get

Re: ALv2 Tomcat Training material

2018-01-04 Thread Coty Sutherland
On Thu, Jan 4, 2018 at 8:01 AM, Mark Thomas wrote: > On 04/01/18 11:31, Marek Czernek wrote: >> Hi Mark, >> >> I think this is a great idea. Before doing any brainstorming though, I >> wonder about the following: >> >> 1. Who'd be the target audience? And what skill level would

Re: getting "BindException: permission denied" exception when trying to change port 8080 to 8090

2018-01-02 Thread Coty Sutherland
7 system_u:object_r:unreserved_port_t:s0 portcon udp 1024-32767 system_u:object_r:unreserved_port_t:s0 ~~~ Note that a port that works (8080) is labeled http_cache_port_t which is usable by tomcat_domain and port 8090 is just labeled as an unreserved_port_t. > Thanks,Alceu > >

Re: getting "BindException: permission denied" exception when trying to change port 8080 to 8090

2017-12-21 Thread Coty Sutherland
On Thu, Dec 21, 2017 at 2:45 PM, Alceu R. de Freitas Jr. wrote: > Hello Cristopher, > I never saw something like that too. I also search on Google, all occurrences > happened with people trying to run Tomcat on privileged ports (<1024). > Here is a quick test,

Re: Apache tomcat 7.0.82 RFC issue (UNCLASSIFIED)

2017-12-11 Thread Coty Sutherland
On Mon, Dec 11, 2017 at 9:34 AM, Lueders, Paul T CIV USARMY NGIC (US) wrote: > CLASSIFICATION: UNCLASSIFIED > > I am running Apache tomcat 7.0.82. It is not running behind any other web > server. I am getting: > Java.lang.IllegalArgumentException: Invalid Character

Re: unable to set the "secure="true" flag on server.xml

2017-11-30 Thread Coty Sutherland
On Thu, Nov 30, 2017 at 1:39 PM, Christopher Schultz wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Naga, > > On 11/30/17 12:29 PM, Naga Ramesh wrote: >> Thanks Chris.. >> >> See the below output and here not showing the secure. >> >> < HTTP/1.1 200

Re: Question - Tomcat Memory

2017-11-16 Thread Coty Sutherland
On Thu, Nov 16, 2017 at 1:48 PM, Ramya Elineni wrote: > The "Initial memory pool" and "maximum memory pool" are the two > configurations under Tomcat. I couldn't find any detailed explanation of how > Tomcat uses these settings. I request you to please provide me

Re: OSCP support in tomcat-native (was OCSP)

2017-11-10 Thread Coty Sutherland
On Thu, Nov 9, 2017 at 1:45 PM, Christopher Schultz <ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Coty, > > On 11/9/17 12:19 PM, Coty Sutherland wrote: >> Hi, >> >> I'm trying to determine whether or not we

Re: Service killed by signal 9

2017-11-10 Thread Coty Sutherland
On Fri, Nov 10, 2017 at 4:31 AM, Greg Huber wrote: > Since switching to jsvc, randomly I am getting tomcat restarting, looking > at the logs I see that the jsvc is using alot of memory total-vm: and > being killed by the system. > > Nov 9 13:11:11 prodbox kernel: Out of

OCSP support in tomcat-native

2017-11-09 Thread Coty Sutherland
Hi, I'm trying to determine whether or not we fully support OCSP in tomcat-native 1.2.x on Linux. There isn't any documentation about it other than some on the Downloads page that says it's experimental on Windows: "The Windows binaries are available in two variants. a) Default. This is what

Re: TomcatCon Where (and when) next?

2017-10-02 Thread Coty Sutherland
On Fri, Sep 29, 2017 at 3:03 PM, Christopher Schultz wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Mark, > > On 9/27/17 5:14 PM, Mark Thomas wrote: >> All, >> >> TomcatCon London 2017 took place yesterday and was even more >> successful than hoped.

Re: Re: Re: how to set Http11AprProtocol with embedded tomcat

2017-09-29 Thread Coty Sutherland
that version. JULI was moved into tomcat-embed-core now, so updating the pom to use 8.5.20 resolves the CNFE for LogFactory. > > Thanks! > > Jennifer > > -Original Message- > From: Coty Sutherland [mailto:csuth...@redhat.com] > Sent: Friday, September 29, 2017 8:43 AM

Tomcat Embedded Quickstarts

2017-09-29 Thread Coty Sutherland
Hi all, Sorry for cross posting, but I thought this pertinent to both lists. I hear that there was lots of talk about quickstarts and/or the need for quickstarts at the most recent TomcatCon. I've been working on some off and on for a while now and rather enjoy creating them; I'd like to

Re: Re: how to set Http11AprProtocol with embedded tomcat

2017-09-29 Thread Coty Sutherland
Here is a working quickstart (that I forgot to link yesterday) for APR in Spring Boot: https://github.com/csutherl/tomcat-embedded-quickstarts/tree/master/springboot-apr-example On Thu, Sep 28, 2017 at 3:34 PM, Coty Sutherland <csuth...@redhat.com> wrote: > On Thu, Sep 28, 2017 at 12:27

Re: Re: how to set Http11AprProtocol with embedded tomcat

2017-09-28 Thread Coty Sutherland
and starting with `mvn spring-boot:run`. I also configured that the System.setProperty call didn't work. HTH > > SpringApplication.run(Application.class, args); > } > } > > Thanks! > > Jennifer > > -Original Message- > From: Coty Sutherland [mailto

Re: how to set Http11AprProtocol with embedded tomcat

2017-09-28 Thread Coty Sutherland
On Thu, Sep 28, 2017 at 11:32 AM, Wang, Jennifer wrote: > NONCONFIDENTIAL // EXTERNAL > How to set Http11AprProtocol with embedded tomcat in java spring boot app? > > I keep get below error. You don't have tomcat-native installed. Resolving the problem should be as

Re: tomcat7 eol date?

2017-09-25 Thread Coty Sutherland
On Sat, Sep 23, 2017 at 12:47 PM, Mark Thomas wrote: > On 23/09/17 13:15, Alex O'Ree wrote: >> Is there an approximate or estimated date in which ASF will stop >> supporting patches for Tomcat7? > > Best guess that is at least two to three years away. > >> I'm assuming that the

Re: Tomcat 7 giving java.lang.OutOfMemoryError: unable to create new native thread Exception in Catalina.out after upgrading to RHEL 7.4

2017-09-19 Thread Coty Sutherland
On Tue, Sep 19, 2017 at 9:53 AM, Suvendu Sekhar Mondal wrote: > Radhika, > > On Tue, Sep 19, 2017 at 2:21 PM, Peddi, Radhika (Radhika) > wrote: >> Hi, >> >> We have upgraded RHEL 7.2 to RHEL 7.4. After upgrade when we are running >> performance testing of

Re: Setting PropertySourceVault programatically in o.a.t.util.digester.Digester

2017-09-11 Thread Coty Sutherland
On Mon, Sep 11, 2017 at 2:43 PM, Mark Thomas <ma...@apache.org> wrote: > On 11/09/17 19:07, Coty Sutherland wrote: > >> So, my questions comes down to "Can I configure a PropertySource >> instance and pass that to tomcat's Digester before tomcat starts?". > >

Setting PropertySourceVault programatically in o.a.t.util.digester.Digester

2017-09-11 Thread Coty Sutherland
Hi all, I'm fairly certain that there isn't a way to do this currently (I'm not so good with Reflection, so there could be), but I have to ask anyway. Let me explain my use case... I'm using tomcat embedded (8.5.x/trunk) and have a need to programmatically configure and use a PropertySource

Re: Unable to Access tomcat UI on restart of the server on Linux

2017-07-24 Thread Coty Sutherland
On Mon, Jul 24, 2017 at 9:57 AM, Chaitanya Sabbineni wrote: > Hi All, > > I had a problem in accessing UI of the tomcat using http://:8081 > > I tried changing the port to 8086 and 8088 and even i am not able to access > the UI. > > I checked using netstat -an | grep 8081

Re: Server giving 404 since upgrade to Tomcat7

2017-07-24 Thread Coty Sutherland
On Mon, Jul 24, 2017 at 6:57 AM, Mark Thomas wrote: > On 24/07/17 11:12, Flynn, Peter wrote: >> I have a CentOS7 server running Apache and Tomcat serving the Cocoon >> application which handles lots of research project XML pages. It's been >> running fine for years, through

Re: Tomcat is stopping on its own even though stop script is not executed

2017-07-21 Thread Coty Sutherland
On Thu, Jul 20, 2017 at 3:05 PM, Chaitanya Sabbineni wrote: > Hi, > > just to explain you what exactly is happening. We are taking back up of the > server at 12:00 AM daily.which is a type of offline backup.After backup > server is running fine for 2 hours and exactly at

Re: tomcat 7, null tag attributes

2017-06-15 Thread Coty Sutherland
t; careful back-porting). This is also dependent on the CentOS >>> distribution picking up the change to 7.0.x. I don't know how >>> likely that is. Given the current package is based on a version >>> over a year old I suspect that the changes of this being quick >>&g

Re: Under system account, Tomcat starts even with shutdown port conflict

2017-06-08 Thread Coty Sutherland
On Thu, Jun 8, 2017 at 11:21 AM, Tou Vue wrote: > Hello, > > I have a question regarding how Tomcat starts up under the system account > and local user account in Windows. I had a Tomcat service that would start > fine under the system account, but once I configured it to

Re: Tomact 7.x - Subscription

2017-06-08 Thread Coty Sutherland
Hello, On Thu, Jun 8, 2017 at 9:10 AM, Mahajan, Arvind wrote: > Hi > > > > I am new to tomcat , considering evaluation of Tomcat vs. JBOSS EAP in my > new application hosting requirement. > > My application vendor support both (Tomcat & JBOSS) middle ware > > > >

Re: TomcatCon Meetup (UPDATE)

2017-05-18 Thread Coty Sutherland
; wrote: > > > > Hi All, > > > > The pic for the meetup yesterday can be found here: > > > > https://www.dropbox.com/s/vu02lnrs77up5mc/IMG_0591.JPG > > > >> On Wed, May 17, 2017 at 8:46 PM, Coty Sutherland <csuth...@redhat.com> > wrote: > &g

Re: TomcatCon Meetup (UPDATE)

2017-05-17 Thread Coty Sutherland
Sorry I had to run off, hopefully you guys had a productive meeting :) On May 17, 2017 7:02 PM, "Coty Sutherland" <csuth...@redhat.com> wrote: > We're sitting next to the pool. The room is occupied :( > > On May 17, 2017 9:12 AM, "Christopher Schultz" <

Re: TomcatCon Meetup (UPDATE)

2017-05-17 Thread Coty Sutherland
We're sitting next to the pool. The room is occupied :( On May 17, 2017 9:12 AM, "Christopher Schultz" wrote: > All, > > Let's move the Meetup to "immediately following the Lightning Talks", > since that is a popular event at the conference. > > -chris > > > > >

Re: TomcatCon Meetup

2017-05-16 Thread Coty Sutherland
\o/ On May 16, 2017 10:35 PM, "Christopher Schultz" < ch...@christopherschultz.net> wrote: > All, > > For those of you at ApacheCon in Miami, here are the details for the > Tomcat Meetup. Come and meet fellow members of the community, committers, > and new friends. > > Time: 18:00 EDT > Place:

Re: [OT] ApacheCon anyone?

2017-05-12 Thread Coty Sutherland
On Fri, May 12, 2017 at 1:25 PM, Christopher Schultz wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Leon, > > On 5/12/17 6:04 AM, Leon Rosenberg wrote: >> Just wondering if there are any plans for an informal get-together >> at the apache con in Miami

Re: tomcat management interface gives 403 forbidden error

2017-05-08 Thread Coty Sutherland
On Fri, May 5, 2017 at 12:13 PM, Tim Dunphy wrote: > I've had to configure two tomcat servers recently. I've setup one tomcat > server using using version 8.5.13 and that works fine. I can access Server > Status, Manager App and Host Manager web interfaces with no problem. >

Re: TomcatCon @ ApacheCon

2017-02-06 Thread Coty Sutherland
OK, I submitted a proposal for the linux packaging talk here http://events.linuxfoundation.org/cfp/proposals/14925/13455 . I can't update the Confluence page though. On Fri, Feb 3, 2017 at 2:31 PM, Coty Sutherland <csuth...@redhat.com> wrote: > Hi Emmanuel, > >> If you al

Re: TomcatCon @ ApacheCon

2017-02-03 Thread Coty Sutherland
pache.org> wrote: > Le 1/02/2017 à 20:20, Coty Sutherland a écrit : >> I'm still planning to submit for the linux packaging talk (though I >> haven't heard anything else form the other distro maintainers), just >> haven't done it yet. I suppose I could volunteer for one of t

Re: TomcatCon @ ApacheCon

2017-02-01 Thread Coty Sutherland
I'm still planning to submit for the linux packaging talk (though I haven't heard anything else form the other distro maintainers), just haven't done it yet. I suppose I could volunteer for one of the others, I'll check the list. On Wed, Feb 1, 2017 at 2:13 PM, Mark Thomas

Re: Apache Tomcat/7.0.39 crashed with fatal error

2017-01-27 Thread Coty Sutherland
> # Problematic frame: > # J > org.apache.http.impl.cookie.BestMatchSpec.formatCookies(Ljava/util/List;)Ljava/util/List; Generally a crash in a java frame is a JVM bug. A quick google search of the problematic frame yields the following first result,

Re: Tomcat maintainer's ApacheCon NA presentation

2017-01-23 Thread Coty Sutherland
org> wrote: > Hi Coty, > > This is an excellent idea. I won't be able to attend ApacheCon NA but > I'll be happy to provide some input for your presentation and contribute > a few slides to describe the Tomcat packaging in Debian/Ubuntu. > > Emmanuel Bourg > > Le 19/01/2017

Re: TomcatCon @ ApacheCon

2017-01-19 Thread Coty Sutherland
> That's a reasonable position to take IMO, it's just not the position > that the Tomcat team took. I think so ;) > The result was Tomcat 8.5 which is essentially the best of both > worlds. One could argue that Tomcat 9 should have become Tomcat 10 and > Tomcat 8.5 should have instead been

Tomcat maintainer's ApacheCon NA presentation

2017-01-19 Thread Coty Sutherland
Hi all, My name is Coty and I'm the maintainer for RHEL tomcat and a co-maintainer for Fedora/EPEL tomcat. I'm reaching out to you all in response to the tomcat users list thread (subject: TomcatCon @ ApacheCon) to see if you're interested in doing a talk with me about linux packaging at the

Re: TomcatCon @ ApacheCon

2017-01-19 Thread Coty Sutherland
anges. If we were talking about the difference between 8 and 9, then sure we can do whatever is necessary as long as things were properly deprecated, etc. On Thu, Jan 12, 2017 at 3:30 PM, Christopher Schultz <ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE-

Re: Tcnative.dll apr-1.5.2-win32-src - unable to compile with openssl-1.0.2j-fips-x86_64

2017-01-12 Thread Coty Sutherland
Can you provide the output of the failure so that we can see what's happening? And are you trying to build tomcat-native 1.2.x or 1.1.x? On Thu, Jan 12, 2017 at 1:56 PM, marcus presley wrote: > Forum, > > > I have been unsuccessful, trying to compile 'tcnative.dll'

Re: Tomcat compatibility based on OS

2017-01-12 Thread Coty Sutherland
> Can you also confirm that same logic applies to REDHAT provide Tomcat the > JBoss Enterprise Web Server? The answer to that is a 'maybe' because of the Red Hat distribution's tomcat-native builds which are included in the zip distribution. To get a real (official) answer though you need to

Re: TomcatCon @ ApacheCon

2017-01-11 Thread Coty Sutherland
On Tue, Jan 10, 2017 at 3:14 PM, Christopher Schultz wrote: > +1 I'm glad someone is interested :) > Perhaps we could have some representatives from the various > distributions give a joint presentation. That would be great. I'd love to meet the other distro

Re: TomcatCon @ ApacheCon

2017-01-09 Thread Coty Sutherland
Would anyone be interested (and is it within the guidelines) to talk about the differences in some tomcat distributions? Like the difference in the Red Hat linux and Debian tomcat distributions, for example. I know it isn't 100% ASF Tomcat, but I get a lot of inquiries about where to find stuff on

Re: Problem configuring a resource link after Fixed CVE-2016-6797

2016-12-22 Thread Coty Sutherland
> It's possible that there was an imperfect patch released by Debian. Yep, they're missing r1763236 in wheezy; it was added to Jessie on 12/8 (commit 49e4e30b8c12ffc28378075545f413b725ad5cd9). Please notify your maintainer to have it fixed :) On Thu, Dec 22, 2016 at 1:48 PM, Christopher Schultz

Re: Upgrade to 8.5.8/9

2016-12-19 Thread Coty Sutherland
Hm, errno=111 is a connection refusal. Are you sure that your new instance has an adequate number of threads available for httpd to proxy to? Do you see any errors in your tomcat logging? If you do have sufficient threads in the pool, then maybe there is something (like GC pauses) hanging your

Re: Trigger sessionDestroyed event from custom ManagerBase

2016-10-03 Thread Coty Sutherland
I set Gokul here from #tomcat on freenode :) Just for a bit more information (since it was excluded): Good UGT, i'm using java - 1.8.0_74, tomcat - 8.0.32, os - win 7 On Mon, Oct 3, 2016 at 12:38 PM, GOKULA KRISHNAN wrote: > Hi, > > I want to trigger the sessionDestroyed

Re: Using hashes in tomcat-users.xml

2016-09-16 Thread Coty Sutherland
You could also take a look at tomcat-vault (https://github.com/picketbox/tomcat-vault). On Wed, Sep 14, 2016 at 5:37 PM, Christopher Schultz wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Brian, > > On 9/14/16 3:40 PM, Paquin, Brian wrote: >> I was

Re: Tomcat8 on CentOS - Session-Tomcat

2016-08-30 Thread Coty Sutherland
Just following up on our IRC conversation (which happened after this email) so others can see my response. I was able to find a description of the session-timeout setting in the XSD here:

Re: Trouble setting TOMCAT_USER

2016-08-30 Thread Coty Sutherland
Based on your usage of /etc/tomcat/tomcat.conf you must be running the Fedora/EPEL or RHEL-7/CentOS-7 distribution of tomcat. Firstly, the TOMCAT_USER is tomcat by default; this is configured in the init script. For tomcat to start and be owned by a user other than tomcat, you should just need to

Question on tomcat-native upgrade from 1.1.34 to 1.2.8

2016-08-16 Thread Coty Sutherland
Hello, I'd like to upgrade the tomcat-native package in Fedora from 1.1.34 to 1.2.8 and wanted to ask if anyone knew of any changes to any ABI/API that would cause a breakage in doing so. I checked the changelog, etc and everything looks good to me. It is also noteworthy that the tomcat version

Re: More, Re: Question about vulnerability report

2016-08-08 Thread Coty Sutherland
Vulnerability scanners are always iffy when it comes to finding actual issues IMO. They're good for running a quick scan to get an overall feel for weaknesses, but the effectiveness varies from tool to tool (some only check versions, etc). I think that the best way to test if you're vulnerable to

Re: More, Re: Question about vulnerability report

2016-08-08 Thread Coty Sutherland
, then you'll have to update to java7+. On Mon, Aug 8, 2016 at 1:13 PM, James H. H. Lampert <jam...@touchtonecorp.com> wrote: > On 8/8/16, 9:59 AM, Coty Sutherland wrote: >> >> To mitigate POODLE you must disable SSLv3 and only use TLS. Please >> visit the wiki p

Re: More, Re: Question about vulnerability report

2016-08-08 Thread Coty Sutherland
> Except for one. It seems that whoever is doing the customer's security audit > is concerned with POODLE vulnerability. To mitigate POODLE you must disable SSLv3 and only use TLS. Please visit the wiki page for more info: https://wiki.apache.org/tomcat/Security/POODLE On Mon, Aug 8, 2016 at

Re: Tomcat7 jsp compilation error with java1.8

2016-08-03 Thread Coty Sutherland
The problem is with java8 support in ECJ, not tomcat directly. You need at least JDT 4.4 in order to have full java8 support in my experiences. I just tested with 7.0.27 built from sources and the issue is present with the 3.7.2 version that it depends on. If I upgrade to ecj-4.4.2.jar (retrieved

Re: No binary distribution for mod_jk?

2016-07-21 Thread Coty Sutherland
n the same > server. It is my understanding the I need httpd to do this. It is also my > understanding that I needed mod_jk to have the httpd route to TomEE (Tomcat > 7). I have TomEE running on the server now. But TomEE gets all http > traffic to the server as the architecture st

Re: No binary distribution for mod_jk?

2016-07-21 Thread Coty Sutherland
Is there some reason that you can't use mod_proxy_balancer instead of mod_cluster (if you don't want to be vulnerable to the known CVEs)? I assume that you're looking for some specific logic offered by mod_cluster, but since you're considering mod_jk I'm not so sure. If you're going to learn to

Re: Tomcat graceful shutdown inquiry

2016-06-28 Thread Coty Sutherland
Fantastic. Thanks! :) On Tue, Jun 28, 2016 at 2:43 PM, Mark Thomas <ma...@apache.org> wrote: > On 28/06/2016 19:39, Coty Sutherland wrote: >> Hello all, >> >> I've been poking around with the Fedora distribution of tomcat and >> noticed that systemd isn't allow

Tomcat graceful shutdown inquiry

2016-06-28 Thread Coty Sutherland
Hello all, I've been poking around with the Fedora distribution of tomcat and noticed that systemd isn't allowing tomcat to gracefully shutdown (it sends an immediate SIGKILL after the Boostrap stop is called). That isn't your issue, but in trying to mediate the issue so that session persistence

Re: Tomcat 8.5 and TLS

2016-04-07 Thread Coty Sutherland
I'm glad I was able to help, Thad. Good luck! Let me know if you have any other questions regarding the connectors (or anything else, in a separate thread please). On Wed, Apr 6, 2016 at 3:58 PM, Thad Humphries <thad.humphr...@gmail.com> wrote: > On Wed, Apr 6, 2016 at 12:17 PM, Coty S

Re: Tomcat 8.5 and TLS

2016-04-06 Thread Coty Sutherland
che.xerces.internal.parsers.AbstractSAXParser.parse(AbstractSAXParser.java:1213) > > > at > > > > > > > > > com.sun.org.apache.xerces.internal.jaxp.SAXParserImpl$JAXPSAXParser.parse(SAXParserImpl.java:643) > > > at org.apache.tomcat.util.digester.Digester.parse(Dige