Re: SameSite cookies shows as "Unset" but Header shows Correct Value

Just to confirm, we know that Chrome will block JSESSIONID it if sent over unsecure connection and with SameSite=None. But we saw the previously mentioned issue in Firefox. Thanks, On Wed, 11 Mar 2020 at 15:33, M. Manna wrote: > Hi All, > > Due to the recent issues with Chrome 80, we

SameSite cookies shows as "Unset" but Header shows Correct Value

uot;), the Network tab of browsers (e.g. Firefox, Chrome) always shows SameSite as "Unset". But if you observe the response header, it's actually setting the correct value. The question is - Would this be expected? Or, do we have to fix something here for browsers? Regards, M. MAnna

Re: Novice Tomcat Admin Question - Filtering log output

Hey Darryl, On Fri, 21 Feb 2020 at 17:15, Darryl Philip Baker < darryl.ba...@northwestern.edu> wrote: > I have taken over the administration of several Tomcat instances. A number > of these are load balanced using an F5 appliance. The > org.apache.catalina.values.AccessLogValve log file is fille

Re: cloud cluster

We are also using redis based option. On Sun, 16 Feb 2020 at 17:32, Jonathan S. Fisher wrote: > We're doing the second: sessions stored in a Redis cluster with > sticky sessions. This topology is simple and it scales pretty easily until > it doesn't anymore [couple thousand simultaneous users].

Re: Cross-session Persistent Object?

If database is the answer, you could use memcache/redis to do this too. It should be able to support multiple servers if you need. Since it’s only persistent based on tomcat, I was thinking at the servlet context level only. Provided that database read overhead is acceptable, it’s a more persisten

Re: Cross-session Persistent Object?

Jerry, On Tue, 11 Feb 2020 at 20:12, Jerry Malcolm wrote: > I need some advice. I need to maintain a set of long-running threads. > When a request comes in, I need to determine if I have a thread started > for a particular id found in the request. So I need to have a hashmap > of threads keye

Re: Tomcat 8.5.51/52 release time

Brilliant!.. Thanks Mark, helps a lot :) On Tue, 11 Feb 2020 at 15:51, Mark Thomas wrote: > On 11/02/2020 15:44, M. Manna wrote: > > Hello, > > > > Do we have any tentative timeline for next 8.5.x release ? > > The release vote for 8.5.51 passed earlier today. T

Tomcat 8.5.51/52 release time

Hello, Do we have any tentative timeline for next 8.5.x release ? Regards,

Question on HttpSession investigation

Hello, I apologise in advance if the answer is obvious for this question. We are trying to investigate (in an isolated cluster) whether our session attributes are getting lost somewhere in the process. The issue is that we are setting it at a JSP Tag Level, however, when we do an AJAX request bac

Re: Class loader takes long time after server inactivity - Tomcat Version 9.0.10

Hey Niall, On Tue, 14 Jan 2020 at 13:42, Niall Fitzpatrick wrote: > Hi Folks, > > > > I have a web application that, after a period of inactivity (1-2hours), > will stall for 3 – 35 seconds upon the first new session. All subsequent > sessions will not experience this delay unless another period

Re: Possible release of next 8.5.x in 2020

Hey Mark, On Mon, 13 Jan 2020 at 09:34, Mark Thomas wrote: > On 12/01/2020 21:03, M. Manna wrote: > > > > > With regards to my enquiry, I’m simply trying to find out whether there > > would be a new release coming out this January 2020. > > I am currently

Re: Possible release of next 8.5.x in 2020

He Michael, On Sun, 12 Jan 2020 at 20:55, Michael Osipov wrote: > Am 2020-01-12 um 19:26 schrieb M. Manna: > > Hey All, > > > > Just trying to get a timeline (or possible release time) for next 8.5.x. > > The latest release is 8.5.50 from December 2020. I am assuming

Possible release of next 8.5.x in 2020

Hey All, Just trying to get a timeline (or possible release time) for next 8.5.x. The latest release is 8.5.50 from December 2020. I am assuming there is one imminent for January 2020? This is purely for individual interest as my dev cycle requires a tomcat upgrade 4 times a year. Regards, M

Re: HTTP/2 configuration

Hey Mark et. al., On Tue, 7 Jan 2020 at 11:20, Mark Thomas wrote: > On 12/12/2019 15:23, Christopher Schultz wrote: > > Arief, > > > > On 12/12/19 00:25, Arief Hasani wrote: > >> IMHO, being able to override form HTTP1.1 conf is all good as user > >> could easily assume that if not specified in

Re: Tomcat 9 does not allow to read file in /tmp folder with 777 permission?

Hi, On Sat, 4 Jan 2020 at 14:36, bphamhuu wrote: > Hello, > > I have a java web application by Tomcat 9 servlet container which tries to > read a file in /tmp folder with 777 permission on Ubuntu 18.04 > > ls -ltr /tmp/test.txt > -rwxrwxrwx 1 vagrant vagrant 10 Jan 3 17:03 /tmp/test.txt > > The

Re: Hide a request header to application

Oliver, On Mon, 16 Dec 2019 at 11:09, Olivier Jaquemet wrote: > Hello all, > > I would like to systematically hide a request header to web applications > hosted by Tomcat. > > "Blanking" or "Unsetting" a header is not the same as "Hiding". By hiding, you are essentially asking for the Header t

Re: HTTP/2 configuration

Mark, On Wed, 11 Dec 2019 at 11:48, Mark Thomas wrote: > All, > > The Tomcat committers are looking for some user feedback. > > Currently, the HTTP/2 protocol configuration [1] duplicates many > attributes of the HTTP/1.1 protocol [2] it is nested under. > > We are considering simplifying this f

Re: Design Patterns in Tomcat

Chris, On Mon, 9 Dec 2019 at 17:10, Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > M, > > On 12/8/19 17:10, M. Manna wrote: > > Hi All, > > > > A numpty question as its best, but I was t

Design Patterns in Tomcat

Hi All, A numpty question as its best, but I was trying to summarise the design patterns used for tomcat. So far I could see the following, but shouldn't be limited to: 1) Mediator 2) Observer 3) Factory 4) Builder 4) Adapter Perhaps I missed any confluence link or something that confirms it? T

Re: Unknown protocol: e on Windows

Chris, On Wed, 4 Dec 2019 at 18:34, Konstantin Kolinko wrote: > ср, 4 дек. 2019 г. в 20:28, Christopher Schultz < > ch...@christopherschultz.net>: > > > > All, > > > > I feel like I should be able to figure this out on my own, but I'm > > drawing a blank. > > > > I'm trying to upgrade from Apach

Re: Unknown protocol: e on Windows

Also, with Windows \\ escape often has the tricks. On Wed, 4 Dec 2019 at 17:43, M. Manna wrote: > Chris, > > On Wed, 4 Dec 2019 at 17:38, Christopher Schultz < > ch...@christopherschultz.net> wrote: > >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA256 >&g

Re: Unknown protocol: e on Windows

Chris, On Wed, 4 Dec 2019 at 17:38, Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > All, > > I should note that I'm using Oracle Java 1.8.0 build 161. > > I have seen another environment with essentially the same > configuration t

Re: SEVERE: A child container failed during start

Karen, On Sat, 30 Nov 2019 at 00:58, Karen Goh wrote: > > > > Sent from Yahoo Mail for iPhone > > > On Saturday, November 30, 2019, 6:18 AM, Mark Thomas > wrote: > > On 29/11/2019 21:28, Karen Goh wrote: > > I have done so but it is no use. I have deleted the Tomcat and add an > new instance be

Re: SEVERE: A child container failed during start

Karen, On Fri, 29 Nov 2019 at 20:51, Karen Goh wrote: > > > > Sent from Yahoo Mail for iPhone > > > On Friday, November 29, 2019, 8:39 PM, Karen Goh > wrote: > > > > > > > On Friday, November 29, 2019, 6:59:38 PM GMT+8, Mark Thomas < > ma...@apache.org> wrote: > > > On 29/11/2019 10:44, Karen G

Re: Tomcat 9 relaxedQueryChars format

low. If not specified, no > additional characters will be allowed. The value may be any combination of > the following characters: " < > [ \ ] ^ ` { | } . Any other characters > present in the value will be ignored. On Fri, 29 Nov 2019 at 15:39, M. Manna wrote: > Robert, &g

Re: Tomcat 9 relaxedQueryChars format

Robert, On Fri, 29 Nov 2019 at 15:28, Robert Hicks wrote: > What is the correct format? > > I see the following used when I do a search: > > relaxedQueryChars="[,],{,}.|" > > relaxedQueryChars="[ ] { } |" > > relaxedQueryChars="[]|{}^\`"<>" > > We use that last one. I am running down this error:

Re: Double Slash Support in Tomcat 9.0.27

F/web.xml > WEB-INF/tomcat-web.xml > ${catalina.base}/conf/web.xml > > type="javax.sql.DataSource"/> > > className="org.apache.tomcat.util.http.LegacyCookieProcessor" /> > > > > > > > > > > &g

Re: Double Slash Support in Tomcat 9.0.27

ushagra Bindal > > wrote: > > > Hi Mark, > > > > Thanks for providing the response. > > > > Yes, you are right that we should design our application to remove // > from > > being used. > > > > I will plan it accordingly, for the provided sol

Re: SEVERE: A child container failed during start

Hi, On Fri, 29 Nov 2019 at 10:45, Karen Goh wrote: > Hi experts, > > > Basically, I have now upgraded my dynamic MVC web app to use openJDK 13 > and running it with Tomcat 9.0.27. Windows OS. Eclipse 2019-09. > > Have been trying to tackling the problem with no avail. > > Would appreciate some

Re: Double Slash Support in Tomcat 9.0.27

HI, On Fri, 29 Nov 2019 at 09:00, Kushagra Bindal wrote: > Hi, > > We are working on upgrading our enterprise application from 8.5.24 to > 9.0.27 version. > > What we have observed that in earlier version i.e. 8.5.24 we were able to > process process a REST URI have double slash ("//") in it.

Re: CPU high usage, the reason org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run

I’m suspecting it’s the same issue that we found out for 8.5.45 where the commit didn’t get reverted out in Poll.java Or maybe not. Thanks, On Sun, 24 Nov 2019 at 10:36, Mark Thomas wrote: > Tomcat version? > > Operating system? > > Java version? > > Mark > > > On 24/11/2019 09:57, Mladen Adam

Re: tomcat thread incurring CPU load

. Manna wrote: > Mark, > > On Mon, 18 Nov 2019 at 19:28, Mark Thomas wrote: > >> On 18/11/2019 14:14, Mark Thomas wrote: >> > On 18/11/2019 12:06, M. Manna wrote: >> >> Mark and others, >> >> >> >> On Mon, 18 Nov 2019 at 12:01, Mark Tho

Re: tomcat thread incurring CPU load

Mark, On Mon, 18 Nov 2019 at 19:28, Mark Thomas wrote: > On 18/11/2019 14:14, Mark Thomas wrote: > > On 18/11/2019 12:06, M. Manna wrote: > >> Mark and others, > >> > >> On Mon, 18 Nov 2019 at 12:01, Mark Thomas wrote: > >> > >>> OK,

Re: tomcat thread incurring CPU load

Thanks, > > Next steps are to try and track down the root cause. > > Mark > > > > > Mark and M, > > > > On 11/13/19 19:31, Mark Thomas wrote: > >> On November 13, 2019 11:42:34 PM UTC, "M. Manna" > >> wrote: > >>> I see

Re: tomcat thread incurring CPU load

. Manna wrote: > Hi Chris, > > On Wed, 13 Nov 2019 at 16:27, Christopher Schultz < > ch...@christopherschultz.net> wrote: > >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA256 >> >> On 11/13/19 11:20, M. Manna wrote: >> > HI Mark, >>

Re: tomcat thread incurring CPU load

Hi Chris, On Wed, 13 Nov 2019 at 16:27, Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > On 11/13/19 11:20, M. Manna wrote: > > HI Mark, > > > > On Wed, 13 Nov 2019 at 15:38, Mark Thomas > &

Re: tomcat thread incurring CPU load

HI Mark, On Wed, 13 Nov 2019 at 15:38, Mark Thomas wrote: > On 12/11/2019 19:11, M. Manna wrote: > > HI Mark, > > > > following my previous reply, we have now confirmed that it's indeed > 8.5.45 > > with APR 1.2.23 that's causing such high JVM CPU usage.

Re: tomcat thread incurring CPU load

olling back. I would appreciate if this can be looked into. On Tue, 12 Nov 2019 at 11:27, M. Manna wrote: > Hey Mark (appreciate your response in US holiday time) > > On Tue, 12 Nov 2019 at 07:51, Mark Thomas wrote: > >> On November 12, 2019 12:54:53 AM UTC, "M. Manna&

Re: tomcat thread incurring CPU load

Hey Mark (appreciate your response in US holiday time) On Tue, 12 Nov 2019 at 07:51, Mark Thomas wrote: > On November 12, 2019 12:54:53 AM UTC, "M. Manna" > wrote: > >Just to give an update again: > > > >1) We reverted the APR to 1.2.21 - but observed no

Re: tomcat thread incurring CPU load

see any of our application stack. Since there is no user traffic, this is coming from tomcat internally. At this stage, we cannot really figure out what's the root cause. Any help is appreciated. Thanks, On Mon, 11 Nov 2019 at 20:57, M. Manna wrote: > Hello All, > > Any thoughts

Re: tomcat thread incurring CPU load

the pct). Thanks, On Mon, 11 Nov 2019 at 17:46, M. Manna wrote: > Hello, > > after migrating to 8.5.45, we are seeing a lot of cpu load by following > JVM thread dump: > > "https-openssl-apr-0.0.0.0-8443-Poller" : 102 : RUNNABLE : > cpu=172902703125000 : cpuLoad=

tomcat thread incurring CPU load

Hello, after migrating to 8.5.45, we are seeing a lot of cpu load by following JVM thread dump: "https-openssl-apr-0.0.0.0-8443-Poller" : 102 : RUNNABLE : cpu=172902703125000 : cpuLoad= 74.181015 BlockedCount:8464 BlockedTime:0 LockName:null LockOwnerID:-1 LockOwnerName:null WaitedCount:5397 Wa

Re: SameSite cookies

Hey Chris, Interesting question. samesite attribute is also to protect cookies from possible cross-site attacks. Even if you have super domain cookies, using strict/lax shouldn't make any difference for you, or does it? Thanks, On Fri, 8 Nov 2019 at 15:04, Christopher Schultz < ch...@christophe

Re: Intermittent JSP Caching/Compiling Issue while under load

I’m just trying to understand, is there really a plausible solution here ? Unless we have loadbalanced tomcat instances, can we truly ever stop such behaviour (or more importantly, does it make sense to do so)? For my use case, We do it in production almost every other day for patching, but we do

Re: SameSite Cookie Setup Not Working

Apologies, but got this resolved. the httpOly attribute was missing from one of the apps. I have now set it globally for all my apps. Thanks, On Tue, 22 Oct 2019 at 15:34, M. Manna wrote: > Hello, > > As per the official documentation, I setup my same site coo

SameSite Cookie Setup Not Working

Hello, As per the official documentation, I setup my same site cookie using Rfc62665CookieProcessor and set everything in "strict" mode. However, when I restarted my server, I only see httpOnly, secure - but not SameSite checked under browser's developer console. Could someone please help me und

Re: Session Size Calculation Question

he.org/confluence/display/tomcat/AddOns#AddOns-WebApplications > > > > > > > El sáb., 19 oct. 2019 a las 2:51, M. Manna () > escribió: > > > Hello, > > > > We are trying to do some calculation for our user session size (or near > > estimate of it). > > >

Session Size Calculation Question

Hello, We are trying to do some calculation for our user session size (or near estimate of it). What we understand is that upon a "Graceful" shutdown, Catalina Host will write out the serializable values of all session into a SESSIONS.ser file in the main servlet's work directory. If this is corr

Question regarding changelog in 8.5.46

Hello, http://tomcat.apache.org/tomcat-8.5-doc/changelog.html#Tomcat_8.5.46_(markt) I am just trying to understand if these changes have any impact on 8.5.45 with CPU usage. It seems to be some potential NPE and (HTTP/2 only) hanging issues. We are seeing some CPU spikes with 8.5.45 and these c

Re: 8.5.46 and 9.0.26 Downloads

Hi, As MarkT mentioned, have you actually checked the Virus Total score against 50+ vendors ? Is your virus scanner listed on virus total? Thanks, On Fri, 20 Sep 2019 at 22:20, wrote: > I am also getting the same thing with the other mirrors. > > > Dream * Excel * Explore * Inspire > Jon McAle

Re: Secure Communication Between Tomcat Servers

Why not use JWT cookies/tokens? You sign your claims and only you can validate the claims and ensure that it’s coming from the right place/user. Thanks, On Mon, 9 Sep 2019 at 19:26, Michael Duffy wrote: > I need to communicate securely between two Tomcat servers running in two > different envir

Re: Release Schedule

Release is roughly every 30-40 days. I guess markt can confirm that. He’s the release manager. You can see the release logs for the past 2-3 releases to see how frequently they’ve been coming out. Regards, On Wed, 14 Aug 2019 at 19:39, Bush, Clinton R (CGI Federal) < clinton.b...@cgifederal.com

Re: confusions with conf/tomcat-users.xml setup

I would recommend reading the role settings from here first: https://tomcat.apache.org/tomcat-7.0-doc/manager-howto.html Also, if everything is okay for you try using comma-separated roles e.g. roles=“manager-gui,admin”. Even better, try to create new roles and assign them correctly. See if that

Re: why is ContextListener.attributeAdded means?

Hi Goh, It’s part of standard tomcat logging for servlet ctx init audit. Check logging.properties file in your conf/ directory. You should be able to change the level and tune how much logging is needed. And btw, it’s an INFO, not ERROR/FATAL/SEVERE. Thanks, On Wed, 24 Jul 2019 at 11:42, Karen

Forced session expiry after certain period

Hello, Is it possible to evict all sessions after certain period of time ? This is not the same as idle session-timeout (web.xml). We are trying to research into whether there’s an absolute maximum limit for a session in tomcat. After which _any_ session should be expired. We are currently using

Re: Maximum connections and thread notifications

arted with *1.2.18*, we didn't get this error. Could someone confirm whether 1.2.19 was the minimum version requirement for 8.5.37? Thanks, On Fri, 5 Apr 2019 at 01:39, M. Manna wrote: > Hello all, > > Since yesterday all of our loadbalanced tomcat servers have been refusing &

Maximum connections and thread notifications

Hello all, Since yesterday all of our loadbalanced tomcat servers have been refusing further connection intermittently. During our internal stress testing, we’ve managed to reproduce the issue where maximum number of threads/connections to Catalina were reached for one server, but then the rest w

APR 1.2.21 with Apache Tomcat 8.5.37

Hello, Is it okay to replace 1.2.19 (packed with Tomcat 8.5.37 Windows 64 bit) with the newly released version 1.2.21? I know that tomcat checks some mandatory version compatibility during Bootstrap, but not sure if this is the only check. I am referring to the windows download here. http://mirr

Re: Tomcat 9 does not work with Java 11

if you are moving away from Java 8, I would recommmend you install java 11 first. Oracle JDK or openJDK doesn’t matter here. Once you do that, confirm that your JAVA_HOME env var is setup correctly ( google it if you’re not sure). The go ahead with your tomcat installation (service or standalone).

Re: Tomcat 9 does not work with Java 11

Tomcat 9 doesn’t use any module that’s restricted by OOB openJDK. It seems like a path issue to me. On Mon, 26 Nov 2018 at 17:34, Mark Thomas wrote: > Tomcat 9.0.13 windows installer, Open JDK 11.0.1 and Window server 2008 > R2 work first time for me on a clean install. > > This doesn't look

Re: [EXTERNAL] Re: Hostnames with underscores

ation of the following characters: " < > [ \ ] > ^ ` { | } . “ > > But I admit that I did not actually verify it and will see if these > attributes work for underscore too. > > Thanks, > Amit > > On Oct 26, 2018, at 12:02 PM, M. Manna manme...@gmail.com>>

Re: Hostnames with underscores

Have you checked the connector config doc for relaxedPathChars and relaxedQueryChars? On Fri, 26 Oct 2018 at 18:00, Amit Pande wrote: > Hello all, > > Recent Tomcat versions (8.5.32 I think) has made a stricter validation for > hostnames with underscores in it. ( > https://bz.apache.org/bugzil

Re: Error Regarding RFC 7230 and RC 3986

already. Thanks, On Thu, 18 Oct 2018 at 14:09, Mark H. Wood wrote: > On Thu, Oct 18, 2018 at 11:55:24AM +0100, M. Manna wrote: > > Thanks a bunch Mark. > > > > "The correct fix is to ensure that the user agents are sending > > specification compliant requests."

Re: Error Regarding RFC 7230 and RC 3986

I understand. We will use the connector patch for now. But thanks again for sharing your thoughts. And the link to apache Confluence is really helpful! Thanks, On Thu, 18 Oct 2018 at 12:12, Mark Thomas wrote: > On 18/10/18 11:55, M. Manna wrote: > > Thanks a bunch Mark. > > &

Re: Error Regarding RFC 7230 and RC 3986

em seem to have this option (or we might've missed it). We are using relaxedQueryChars for now - but would like to understand the fix you've proposed above. On Thu, 18 Oct 2018 at 10:39, Mark Thomas wrote: > On 18/10/18 09:52, M. Manna wrote: > > Hello, > > > > We

Error Regarding RFC 7230 and RC 3986

Hello, We received in error in our application after we have upgraded to 8.5.34 INFO: Error parsing HTTP request header Note: further occurrences of HTTP header parsing errors will be logged at DEBUG level. java.lang.IllegalArgumentException: Invalid character found in the request target. The val

Re: Apache failed to initialize connector

it looks like you've bound your port 8009 and 8080 with something else temporarily during windows startup.It may be some port scanning service or some firewall/ prevention service is blocking all the ports until some checks are done. And that is why you have this issue intermittently. As a verific

Tuning parameters in APR/Standard connectors

Hello, We have a some SQL statements (Insert, Update) which comes to a few MBs in size. We are currently using APR 1.2.16. What we observed that sometimes, the connection hangs out because of extremely large SQL text blocks being sent to SQL Server. Is there any parameter in APR or Standard Conne

Re: Tomcat Vs Windows Versions

Is there any specific reason you are after platform versions ? On Mon, 24 Sep 2018 at 19:03, André Luís Scandolara < andre.luis.scandol...@gmail.com> wrote: > Does anyone know the Windows versions supported by Apache Tomcat 7, 8 and > 9? > > I could not find out this information on Apache website

Re: Possible Discrepancy in ClassLoading order when running in Linux

Please ignore my question. Seems like someone decided to try out a "Special" classloader - didn't have the information before. Thanks for responding anyway. Regards, On Wed, 29 Aug 2018 at 20:20, M. Manna wrote: > Thanks mark. We aren’t using delegation, but even with

Re: Possible Discrepancy in ClassLoading order when running in Linux

Thanks mark. We aren’t using delegation, but even with delegation classes directory are looked up first in the order. Tomcat version 8.5.32. Thanks, On Wed, 29 Aug 2018 at 19:31, Mark Thomas wrote: > On 29/08/18 19:09, M. Manna wrote: > > Hello, > > > > I am not sur

Possible Discrepancy in ClassLoading order when running in Linux

Hello, I am not sure if this is a bug or something specific to our implementation, so wanted to share that with others. Please forgive my idiocy. We took a verbose classloading on Windows and it loaded two classes from two different locations. 1) *SomeUtils*.class from *com.my.package.name

Re: Why move to tomcat9 (UNCLASSIFIED)

The key benefit is - You get all recent CVE patches which protects your product more from known vulnerabilities. You can see a comparison table here - http://tomcat.apache.org/whichversion.html I would recommend that you review Servlet, Connector, and Java version related changes carefully (if yo

Re: App fails to completely startup on a Tomcat restart

What is your full context.xml file? Also, is there any reason why you have named your application as ROOT.war? Regards, On 9 August 2018 at 15:48, Donald J wrote: > We are running a Tomcat application where the login always fails after a > tomcat restart > with an error about unable to load the

Re: Release Roadmap for H2 2018

I simply meant email distribution list - tomcat users. On 2 August 2018 at 16:15, Christopher Schultz wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > To whom it may concern, > > On 8/2/18 7:12 AM, M. Manna wrote: > > Nice one! Thanks Mark. will k

Re: Release Roadmap for H2 2018

Nice one! Thanks Mark. will keep an eye on the distro. On 2 August 2018 at 12:11, Mark Thomas wrote: > On 02/08/18 12:01, M. Manna wrote: > > Hello, > > > > Is there any release roadmap or community wiki where release plans are > > currently being published? > &g

Release Roadmap for H2 2018

Hello, Is there any release roadmap or community wiki where release plans are currently being published? We wanted to do an upgrade but wondering if it's better to wait as there might be a new release coming for 8.5.x or 9.0.x Regards,

No Official Info on CVE Mitre - CVE-2018-1336

Hello, Does anyone know if this is fully official yet? NIST and CVE Mitre say that the ticket is reserved, but tomcat website says that this has been fixed in newer versions. I was simply looking for an official explanation on how this has been identified as a problem. Regards,

Re: Need information

: > Because I need to add a folder (properties) under the tomcat installation > in order to read the properties in a file with the following annotation > (using spring) > @PropertySource("classpath:properties/application.properties"); > > > > > > 2018-07-23 22:

Re: Need information

o if there is an explanation and why i should modify them, it will be very > important to me. > > thanks > > 2018-07-23 18:06 GMT+02:00 M. Manna : > > > http://tomcat.apache.org/tomcat-8.5-doc/class-loader- > > howto.html#Class_Loader_Definitions > > > > Als

Re: Changing Sever.xml without restarting Tomcat 8.5

I am not sure if it's possible, and probably for a valid reasons. Server.xml is the mother of server container config and messing things up there means your servlet context/listeners etc. may need to be reconfigured. Without a heavily customised/rewritten version of tomcat config change listener, y

Re: Need information

http://tomcat.apache.org/tomcat-8.5-doc/class-loader-howto.html#Class_Loader_Definitions Also, you should try and pay attention to Bootstrap.java file and debug through the execution to understand how it's working. On 23 July 2018 at 17:03, Francesco Viscomi wrote: > hi all > In catalina.prope

Re: Getting the Manager app running on localhost.. Please help

have you enabled all user roles with passwords? in CATALINA_HOME/conf/tomcat-users.xml file? Also, don't forget to change the passwords noted as "" with something "interesting". By default, it can only run on localhost, and it's configured to listen to 127.0.0.1 via the valve. If you uncomment th

Re: log4j

Hi Chris, How r u planning to use Log4j (or log4j2, which solves a lot of performance issues for 1.2.x)? Are you bridging with SLF4J or or using directly? All log4j configuration are automatically discovered and configured provided that you have set up your appplication log4j properties file cor

Re: Jsp pages with scriptlet and javadoc comments loaded in char[]

s, it doesn't seem to be an option. Thanks, On 2 May 2018 at 10:39, Mark Thomas wrote: > On 02/05/18 10:31, M. Manna wrote: > > Hi All, > > > > I had a specific question regarding JSPs loaded in web-application > > container for jasper to compilation. If I have a

Jsp pages with scriptlet and javadoc comments loaded in char[]

Hi All, I had a specific question regarding JSPs loaded in web-application container for jasper to compilation. If I have a JSP page which has scriptlet and javadoc comments/code comments, aren't those loaded into the char[] of JSP pages too? I understand that Jasper compiles the JSPs but those co

Re: APR/native error on tomcat 8.5.16

Thread.run(Thread.java:745) Please let me know if this helps. Regards, On 25 April 2018 at 12:55, Mark Thomas wrote: > On 25/04/18 11:18, M. Manna wrote: > > Hello, > > > > > But from the above stack track it seems as though the > > socket cannot handle the size of the

APR/native error on tomcat 8.5.16

Hello, We have been getting the error stack on our production servers quite frequently over the past few days: java.io.IOException: Unexpected error [730,054] writing data to the APR/native socket [950,585,024] with wrapper [org.apache.tomcat.util.net.AprEndpoint$AprSocketWrapper@c5f5747:95058502

Re: TCP6

In your server.xml add address="0.0.0.0" for connector. On 18 Mar 2018 1:04 pm, "Loai Abdallatif" wrote: > Dear Friends > > *root@appserver01:~# netstat -antp* > I have started three tomcat instances on one debian server and I got the > following netstat output: > how I force the tomcat to bind

Re: WebApp Caching Broken

Kenneth, As MarkT suggested earlier, there is no such "Cache". If you are using Tag/Cotext Pooling - it's a separate issue and you need to check tomcat's documentation to check what options you need/don't need. "The “-XX:+DisableAttachMechanism” JVM option does not work with Tomcat" - what do you

Re: jasper ant task classpath

You can create an Ant directory variable which gets added to your job and can be looked up for additional dependency. Check path,fileset from Ant docs to see how you can add it to ant task On 26 Feb 2018 9:52 pm, "Mark Thomas" wrote: On 26/02/18 20:22, Juan Florez wrote: > Hello, > > I'm tryi

Re: problems with tomcat 8.5.5

Can you please check the changelog for 8.5.x and see if this was fixed? Regards, On Thu, 22 Feb 2018 at 23:11, Lou DeGenaro wrote: > From catalina.out, NPE seems bad. Other log files have NPEs too. Need a > never version of tomcat? > > Thanks. > > Lou. > > - > > 22-Feb-2018 16:37:28.599 S

Re: Tomcat throwing 404 error after modifying context.xml

; driverClassName="org.postgresql.Driver" > > url="jdbc:postgresql://itsusralsp06829:5432/spectra"/> > > > > > type="javax.sql.DataSource" maxActive="2" maxIdle="30" > > maxWait="1" username="saevdce

Re: Tomcat throwing 404 error after modifying context.xml

Your jdbc url and context path have changed. Have you updated how and where you are requesting it? 404 means Not Found. So your requesting for something non-existent. Please chill and confirm. On Wed, 21 Feb 2018 at 22:32, Howlader, Aakash [GTSUS Non-J&J] < ahowl...@its.jnj.com> wrote: > Hello, >

Re: _jspService is exceeding the 65535 bytes limit

If this doesn’t cause pain, I would do the following: 1) Replace all in-body scriptlets and use JSTL core tags in offending JSPs. Most of the codebloats are caused by using intermediate scriptlets e.g. <% if (foo.bar() == jack.jill() ) { %> // lots of jsp code <%} else <%{ %> 2) use all your co

Re: dsn config issues

jar files. > On Feb 6, 2018, at 2:57 PM, M. Manna wrote: > > How r u bootstrapping the application? As installed service or invoking > main() usimg bootstrap.jar? > > Also, I would try loading the jar from -classpath location. Typically, it > should be placed into WEB-INF/lib

Re: dsn config issues

How r u bootstrapping the application? As installed service or invoking main() usimg bootstrap.jar? Also, I would try loading the jar from -classpath location. Typically, it should be placed into WEB-INF/lib folder. But may be you want to try loading it from classpath and see how it goes. Regard

Re: Tomcat7 with jre 1.7 error during starting

And did you try running it with jre7? In other words, all 7 ? On 26 Jan 2018 18:08, "Rajesh Cherukuri" wrote: > HI > > we have a existing running tomcat version 5 running on solaris with out > any issues , recently we have installed tomcat 7 on the same solaris 10 > server with no applicatio

Re: White-space encoding issue in 8.5.16

Actually, it's the same issue (and even error stack) reported here: http://tomcat.10.x6.nabble.com/Tomcat-8-5-4-uses-RFC-6265-by-default-which-does-not-appear-to-be-Servlet-3-1-compliant-td5054685.html On 13 November 2017 at 09:00, Mark Thomas wrote: > On 12/11/17 22:25, M. Man

White-space encoding issue in 8.5.16

Hi, We are currently encountering an issue where some of our REST API calls are failing because of a white-space not being encoded (i.e. %20). This has started with 8.5.16 and our previous version didn't have this problem - 8.0.29. Is this something anyone has seen before? I am assuming that it'

  1   2   >