Re: SameSite cookies shows as "Unset" but Header shows Correct Value

2020-03-11 Thread M. Manna
Just to confirm, we know that Chrome will block JSESSIONID it if sent over unsecure connection and with SameSite=None. But we saw the previously mentioned issue in Firefox. Thanks, On Wed, 11 Mar 2020 at 15:33, M. Manna wrote: > Hi All, > > Due to the recent issues with Chrome 80, we

SameSite cookies shows as "Unset" but Header shows Correct Value

2020-03-11 Thread M. Manna
t;), the Network tab of browsers (e.g. Firefox, Chrome) always shows SameSite as "Unset". But if you observe the response header, it's actually setting the correct value. The question is - Would this be expected? Or, do we have to fix something here for browsers? Regards, M. MAnna

Re: Novice Tomcat Admin Question - Filtering log output

2020-02-21 Thread M. Manna
Hey Darryl, On Fri, 21 Feb 2020 at 17:15, Darryl Philip Baker < darryl.ba...@northwestern.edu> wrote: > I have taken over the administration of several Tomcat instances. A number > of these are load balanced using an F5 appliance. The > org.apache.catalina.values.AccessLogValve log file is

Re: cloud cluster

2020-02-16 Thread M. Manna
We are also using redis based option. On Sun, 16 Feb 2020 at 17:32, Jonathan S. Fisher wrote: > We're doing the second: sessions stored in a Redis cluster with > sticky sessions. This topology is simple and it scales pretty easily until > it doesn't anymore [couple thousand simultaneous users].

Re: Cross-session Persistent Object?

2020-02-11 Thread M. Manna
If database is the answer, you could use memcache/redis to do this too. It should be able to support multiple servers if you need. Since it’s only persistent based on tomcat, I was thinking at the servlet context level only. Provided that database read overhead is acceptable, it’s a more

Re: Cross-session Persistent Object?

2020-02-11 Thread M. Manna
Jerry, On Tue, 11 Feb 2020 at 20:12, Jerry Malcolm wrote: > I need some advice. I need to maintain a set of long-running threads. > When a request comes in, I need to determine if I have a thread started > for a particular id found in the request. So I need to have a hashmap > of threads

Re: Tomcat 8.5.51/52 release time

2020-02-11 Thread M. Manna
Brilliant!.. Thanks Mark, helps a lot :) On Tue, 11 Feb 2020 at 15:51, Mark Thomas wrote: > On 11/02/2020 15:44, M. Manna wrote: > > Hello, > > > > Do we have any tentative timeline for next 8.5.x release ? > > The release vote for 8.5.51 passed earlier today

Tomcat 8.5.51/52 release time

2020-02-11 Thread M. Manna
Hello, Do we have any tentative timeline for next 8.5.x release ? Regards,

Question on HttpSession investigation

2020-02-09 Thread M. Manna
Hello, I apologise in advance if the answer is obvious for this question. We are trying to investigate (in an isolated cluster) whether our session attributes are getting lost somewhere in the process. The issue is that we are setting it at a JSP Tag Level, however, when we do an AJAX request

Re: Class loader takes long time after server inactivity - Tomcat Version 9.0.10

2020-01-14 Thread M. Manna
Hey Niall, On Tue, 14 Jan 2020 at 13:42, Niall Fitzpatrick wrote: > Hi Folks, > > > > I have a web application that, after a period of inactivity (1-2hours), > will stall for 3 – 35 seconds upon the first new session. All subsequent > sessions will not experience this delay unless another

Re: Possible release of next 8.5.x in 2020

2020-01-13 Thread M. Manna
Hey Mark, On Mon, 13 Jan 2020 at 09:34, Mark Thomas wrote: > On 12/01/2020 21:03, M. Manna wrote: > > > > > With regards to my enquiry, I’m simply trying to find out whether there > > would be a new release coming out this January 2020. > > I am currently

Re: Possible release of next 8.5.x in 2020

2020-01-12 Thread M. Manna
He Michael, On Sun, 12 Jan 2020 at 20:55, Michael Osipov wrote: > Am 2020-01-12 um 19:26 schrieb M. Manna: > > Hey All, > > > > Just trying to get a timeline (or possible release time) for next 8.5.x. > > The latest release is 8.5.50 from December 2020. I am assuming

Possible release of next 8.5.x in 2020

2020-01-12 Thread M. Manna
Hey All, Just trying to get a timeline (or possible release time) for next 8.5.x. The latest release is 8.5.50 from December 2020. I am assuming there is one imminent for January 2020? This is purely for individual interest as my dev cycle requires a tomcat upgrade 4 times a year. Regards, M

Re: HTTP/2 configuration

2020-01-07 Thread M. Manna
Hey Mark et. al., On Tue, 7 Jan 2020 at 11:20, Mark Thomas wrote: > On 12/12/2019 15:23, Christopher Schultz wrote: > > Arief, > > > > On 12/12/19 00:25, Arief Hasani wrote: > >> IMHO, being able to override form HTTP1.1 conf is all good as user > >> could easily assume that if not specified in

Re: Tomcat 9 does not allow to read file in /tmp folder with 777 permission?

2020-01-04 Thread M. Manna
Hi, On Sat, 4 Jan 2020 at 14:36, bphamhuu wrote: > Hello, > > I have a java web application by Tomcat 9 servlet container which tries to > read a file in /tmp folder with 777 permission on Ubuntu 18.04 > > ls -ltr /tmp/test.txt > -rwxrwxrwx 1 vagrant vagrant 10 Jan 3 17:03 /tmp/test.txt > >

Re: Hide a request header to application

2019-12-16 Thread M. Manna
Oliver, On Mon, 16 Dec 2019 at 11:09, Olivier Jaquemet wrote: > Hello all, > > I would like to systematically hide a request header to web applications > hosted by Tomcat. > > "Blanking" or "Unsetting" a header is not the same as "Hiding". By hiding, you are essentially asking for the Header

Re: HTTP/2 configuration

2019-12-11 Thread M. Manna
Mark, On Wed, 11 Dec 2019 at 11:48, Mark Thomas wrote: > All, > > The Tomcat committers are looking for some user feedback. > > Currently, the HTTP/2 protocol configuration [1] duplicates many > attributes of the HTTP/1.1 protocol [2] it is nested under. > > We are considering simplifying this

Re: Design Patterns in Tomcat

2019-12-09 Thread M. Manna
Chris, On Mon, 9 Dec 2019 at 17:10, Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > M, > > On 12/8/19 17:10, M. Manna wrote: > > Hi All, > > > > A numpty question as its best, but I was t

Design Patterns in Tomcat

2019-12-08 Thread M. Manna
Hi All, A numpty question as its best, but I was trying to summarise the design patterns used for tomcat. So far I could see the following, but shouldn't be limited to: 1) Mediator 2) Observer 3) Factory 4) Builder 4) Adapter Perhaps I missed any confluence link or something that confirms it?

Re: Unknown protocol: e on Windows

2019-12-04 Thread M. Manna
Chris, On Wed, 4 Dec 2019 at 18:34, Konstantin Kolinko wrote: > ср, 4 дек. 2019 г. в 20:28, Christopher Schultz < > ch...@christopherschultz.net>: > > > > All, > > > > I feel like I should be able to figure this out on my own, but I'm > > drawing a blank. > > > > I'm trying to upgrade from

Re: Unknown protocol: e on Windows

2019-12-04 Thread M. Manna
Also, with Windows \\ escape often has the tricks. On Wed, 4 Dec 2019 at 17:43, M. Manna wrote: > Chris, > > On Wed, 4 Dec 2019 at 17:38, Christopher Schultz < > ch...@christopherschultz.net> wrote: > >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA256 >&g

Re: Unknown protocol: e on Windows

2019-12-04 Thread M. Manna
Chris, On Wed, 4 Dec 2019 at 17:38, Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > All, > > I should note that I'm using Oracle Java 1.8.0 build 161. > > I have seen another environment with essentially the same > configuration

Re: SEVERE: A child container failed during start

2019-11-30 Thread M. Manna
Karen, On Sat, 30 Nov 2019 at 00:58, Karen Goh wrote: > > > > Sent from Yahoo Mail for iPhone > > > On Saturday, November 30, 2019, 6:18 AM, Mark Thomas > wrote: > > On 29/11/2019 21:28, Karen Goh wrote: > > I have done so but it is no use. I have deleted the Tomcat and add an > new instance

Re: SEVERE: A child container failed during start

2019-11-29 Thread M. Manna
Karen, On Fri, 29 Nov 2019 at 20:51, Karen Goh wrote: > > > > Sent from Yahoo Mail for iPhone > > > On Friday, November 29, 2019, 8:39 PM, Karen Goh > wrote: > > > > > > > On Friday, November 29, 2019, 6:59:38 PM GMT+8, Mark Thomas < > ma...@apache.org> wrote: > > > On 29/11/2019 10:44, Karen

Re: Tomcat 9 relaxedQueryChars format

2019-11-29 Thread M. Manna
low. If not specified, no > additional characters will be allowed. The value may be any combination of > the following characters: " < > [ \ ] ^ ` { | } . Any other characters > present in the value will be ignored. On Fri, 29 Nov 2019 at 15:39, M. Manna wrote: > Robert, &g

Re: Tomcat 9 relaxedQueryChars format

2019-11-29 Thread M. Manna
Robert, On Fri, 29 Nov 2019 at 15:28, Robert Hicks wrote: > What is the correct format? > > I see the following used when I do a search: > > relaxedQueryChars="[,],{,}.|" > > relaxedQueryChars="[ ] { } |" > > relaxedQueryChars="[]|{}^" > > We use that last one. I am running down this error: > >

Re: Double Slash Support in Tomcat 9.0.27

2019-11-29 Thread M. Manna
F/web.xml > WEB-INF/tomcat-web.xml > ${catalina.base}/conf/web.xml > > type="javax.sql.DataSource"/> > > className="org.apache.tomcat.util.http.LegacyCookieProcessor" /> > > > > > > > > > > &g

Re: Double Slash Support in Tomcat 9.0.27

2019-11-29 Thread M. Manna
ra Bindal > > wrote: > > > Hi Mark, > > > > Thanks for providing the response. > > > > Yes, you are right that we should design our application to remove // > from > > being used. > > > > I will plan it accordingly, for the provided solution

Re: SEVERE: A child container failed during start

2019-11-29 Thread M. Manna
Hi, On Fri, 29 Nov 2019 at 10:45, Karen Goh wrote: > Hi experts, > > > Basically, I have now upgraded my dynamic MVC web app to use openJDK 13 > and running it with Tomcat 9.0.27. Windows OS. Eclipse 2019-09. > > Have been trying to tackling the problem with no avail. > > Would appreciate some

Re: Double Slash Support in Tomcat 9.0.27

2019-11-29 Thread M. Manna
HI, On Fri, 29 Nov 2019 at 09:00, Kushagra Bindal wrote: > Hi, > > We are working on upgrading our enterprise application from 8.5.24 to > 9.0.27 version. > > What we have observed that in earlier version i.e. 8.5.24 we were able to > process process a REST URI have double slash ("//") in it.

Re: CPU high usage, the reason org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run

2019-11-24 Thread M. Manna
I’m suspecting it’s the same issue that we found out for 8.5.45 where the commit didn’t get reverted out in Poll.java Or maybe not. Thanks, On Sun, 24 Nov 2019 at 10:36, Mark Thomas wrote: > Tomcat version? > > Operating system? > > Java version? > > Mark > > > On 24/11/2019 09:57, Mladen

Re: tomcat thread incurring CPU load

2019-11-19 Thread M. Manna
. Manna wrote: > Mark, > > On Mon, 18 Nov 2019 at 19:28, Mark Thomas wrote: > >> On 18/11/2019 14:14, Mark Thomas wrote: >> > On 18/11/2019 12:06, M. Manna wrote: >> >> Mark and others, >> >> >> >> On Mon, 18 Nov 2019 at 12:01, Mar

Re: tomcat thread incurring CPU load

2019-11-19 Thread M. Manna
Mark, On Mon, 18 Nov 2019 at 19:28, Mark Thomas wrote: > On 18/11/2019 14:14, Mark Thomas wrote: > > On 18/11/2019 12:06, M. Manna wrote: > >> Mark and others, > >> > >> On Mon, 18 Nov 2019 at 12:01, Mark Thomas wrote: > >> > >>>

Re: tomcat thread incurring CPU load

2019-11-18 Thread M. Manna
ks, > > Next steps are to try and track down the root cause. > > Mark > > > > > Mark and M, > > > > On 11/13/19 19:31, Mark Thomas wrote: > >> On November 13, 2019 11:42:34 PM UTC, "M. Manna" > >> wrote: > >>> I see this

Re: tomcat thread incurring CPU load

2019-11-13 Thread M. Manna
. Manna wrote: > Hi Chris, > > On Wed, 13 Nov 2019 at 16:27, Christopher Schultz < > ch...@christopherschultz.net> wrote: > >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA256 >> >> On 11/13/19 11:20, M. Manna wrote: >> > HI Mark, >>

Re: tomcat thread incurring CPU load

2019-11-13 Thread M. Manna
Hi Chris, On Wed, 13 Nov 2019 at 16:27, Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > On 11/13/19 11:20, M. Manna wrote: > > HI Mark, > > > > On Wed, 13 Nov 2019 at 15:38, Mark Thomas > &

Re: tomcat thread incurring CPU load

2019-11-13 Thread M. Manna
HI Mark, On Wed, 13 Nov 2019 at 15:38, Mark Thomas wrote: > On 12/11/2019 19:11, M. Manna wrote: > > HI Mark, > > > > following my previous reply, we have now confirmed that it's indeed > 8.5.45 > > with APR 1.2.23 that's causing such high JVM CPU usage. > >

Re: tomcat thread incurring CPU load

2019-11-12 Thread M. Manna
would appreciate if this can be looked into. On Tue, 12 Nov 2019 at 11:27, M. Manna wrote: > Hey Mark (appreciate your response in US holiday time) > > On Tue, 12 Nov 2019 at 07:51, Mark Thomas wrote: > >> On November 12, 2019 12:54:53 AM UTC, "M. Manna" >>

Re: tomcat thread incurring CPU load

2019-11-12 Thread M. Manna
Hey Mark (appreciate your response in US holiday time) On Tue, 12 Nov 2019 at 07:51, Mark Thomas wrote: > On November 12, 2019 12:54:53 AM UTC, "M. Manna" > wrote: > >Just to give an update again: > > > >1) We reverted the APR to 1.2.21 - but observed no

Re: tomcat thread incurring CPU load

2019-11-11 Thread M. Manna
of our application stack. Since there is no user traffic, this is coming from tomcat internally. At this stage, we cannot really figure out what's the root cause. Any help is appreciated. Thanks, On Mon, 11 Nov 2019 at 20:57, M. Manna wrote: > Hello All, > > Any thoughts regarding this?

Re: tomcat thread incurring CPU load

2019-11-11 Thread M. Manna
the pct). Thanks, On Mon, 11 Nov 2019 at 17:46, M. Manna wrote: > Hello, > > after migrating to 8.5.45, we are seeing a lot of cpu load by following > JVM thread dump: > > "https-openssl-apr-0.0.0.0-8443-Poller" : 102 : RUNNABLE : > cpu=172902703125000 : cpuLoad=

tomcat thread incurring CPU load

2019-11-11 Thread M. Manna
Hello, after migrating to 8.5.45, we are seeing a lot of cpu load by following JVM thread dump: "https-openssl-apr-0.0.0.0-8443-Poller" : 102 : RUNNABLE : cpu=172902703125000 : cpuLoad= 74.181015 BlockedCount:8464 BlockedTime:0 LockName:null LockOwnerID:-1 LockOwnerName:null WaitedCount:5397

Re: SameSite cookies

2019-11-08 Thread M. Manna
Hey Chris, Interesting question. samesite attribute is also to protect cookies from possible cross-site attacks. Even if you have super domain cookies, using strict/lax shouldn't make any difference for you, or does it? Thanks, On Fri, 8 Nov 2019 at 15:04, Christopher Schultz <

Re: Intermittent JSP Caching/Compiling Issue while under load

2019-11-04 Thread M. Manna
I’m just trying to understand, is there really a plausible solution here ? Unless we have loadbalanced tomcat instances, can we truly ever stop such behaviour (or more importantly, does it make sense to do so)? For my use case, We do it in production almost every other day for patching, but we do

Re: SameSite Cookie Setup Not Working

2019-10-22 Thread M. Manna
Apologies, but got this resolved. the httpOly attribute was missing from one of the apps. I have now set it globally for all my apps. Thanks, On Tue, 22 Oct 2019 at 15:34, M. Manna wrote: > Hello, > > As per the official documentation, I setup my same site coo

SameSite Cookie Setup Not Working

2019-10-22 Thread M. Manna
Hello, As per the official documentation, I setup my same site cookie using Rfc62665CookieProcessor and set everything in "strict" mode. However, when I restarted my server, I only see httpOnly, secure - but not SameSite checked under browser's developer console. Could someone please help me

Re: Session Size Calculation Question

2019-10-20 Thread M. Manna
g/confluence/display/tomcat/AddOns#AddOns-WebApplications > > > > > > > El sáb., 19 oct. 2019 a las 2:51, M. Manna () > escribió: > > > Hello, > > > > We are trying to do some calculation for our user session size (or near > > estimate of it). > > > >

Session Size Calculation Question

2019-10-18 Thread M. Manna
Hello, We are trying to do some calculation for our user session size (or near estimate of it). What we understand is that upon a "Graceful" shutdown, Catalina Host will write out the serializable values of all session into a SESSIONS.ser file in the main servlet's work directory. If this is

Question regarding changelog in 8.5.46

2019-10-02 Thread M. Manna
Hello, http://tomcat.apache.org/tomcat-8.5-doc/changelog.html#Tomcat_8.5.46_(markt) I am just trying to understand if these changes have any impact on 8.5.45 with CPU usage. It seems to be some potential NPE and (HTTP/2 only) hanging issues. We are seeing some CPU spikes with 8.5.45 and these

Re: 8.5.46 and 9.0.26 Downloads

2019-09-20 Thread M. Manna
Hi, As MarkT mentioned, have you actually checked the Virus Total score against 50+ vendors ? Is your virus scanner listed on virus total? Thanks, On Fri, 20 Sep 2019 at 22:20, wrote: > I am also getting the same thing with the other mirrors. > > > Dream * Excel * Explore * Inspire > Jon

Re: Secure Communication Between Tomcat Servers

2019-09-09 Thread M. Manna
Why not use JWT cookies/tokens? You sign your claims and only you can validate the claims and ensure that it’s coming from the right place/user. Thanks, On Mon, 9 Sep 2019 at 19:26, Michael Duffy wrote: > I need to communicate securely between two Tomcat servers running in two > different

Re: Release Schedule

2019-08-14 Thread M. Manna
Release is roughly every 30-40 days. I guess markt can confirm that. He’s the release manager. You can see the release logs for the past 2-3 releases to see how frequently they’ve been coming out. Regards, On Wed, 14 Aug 2019 at 19:39, Bush, Clinton R (CGI Federal) <

Re: confusions with conf/tomcat-users.xml setup

2019-07-24 Thread M. Manna
I would recommend reading the role settings from here first: https://tomcat.apache.org/tomcat-7.0-doc/manager-howto.html Also, if everything is okay for you try using comma-separated roles e.g. roles=“manager-gui,admin”. Even better, try to create new roles and assign them correctly. See if

Re: why is ContextListener.attributeAdded means?

2019-07-23 Thread M. Manna
Hi Goh, It’s part of standard tomcat logging for servlet ctx init audit. Check logging.properties file in your conf/ directory. You should be able to change the level and tune how much logging is needed. And btw, it’s an INFO, not ERROR/FATAL/SEVERE. Thanks, On Wed, 24 Jul 2019 at 11:42,

Forced session expiry after certain period

2019-06-24 Thread M. Manna
Hello, Is it possible to evict all sessions after certain period of time ? This is not the same as idle session-timeout (web.xml). We are trying to research into whether there’s an absolute maximum limit for a session in tomcat. After which _any_ session should be expired. We are currently

Re: Maximum connections and thread notifications

2019-04-05 Thread M. Manna
with *1.2.18*, we didn't get this error. Could someone confirm whether 1.2.19 was the minimum version requirement for 8.5.37? Thanks, On Fri, 5 Apr 2019 at 01:39, M. Manna wrote: > Hello all, > > Since yesterday all of our loadbalanced tomcat servers have been refusing > furthe

Maximum connections and thread notifications

2019-04-04 Thread M. Manna
Hello all, Since yesterday all of our loadbalanced tomcat servers have been refusing further connection intermittently. During our internal stress testing, we’ve managed to reproduce the issue where maximum number of threads/connections to Catalina were reached for one server, but then the rest

APR 1.2.21 with Apache Tomcat 8.5.37

2019-02-04 Thread M. Manna
Hello, Is it okay to replace 1.2.19 (packed with Tomcat 8.5.37 Windows 64 bit) with the newly released version 1.2.21? I know that tomcat checks some mandatory version compatibility during Bootstrap, but not sure if this is the only check. I am referring to the windows download here.

Re: Tomcat 9 does not work with Java 11

2018-11-26 Thread M. Manna
if you are moving away from Java 8, I would recommmend you install java 11 first. Oracle JDK or openJDK doesn’t matter here. Once you do that, confirm that your JAVA_HOME env var is setup correctly ( google it if you’re not sure). The go ahead with your tomcat installation (service or

Re: Tomcat 9 does not work with Java 11

2018-11-26 Thread M. Manna
Tomcat 9 doesn’t use any module that’s restricted by OOB openJDK. It seems like a path issue to me. On Mon, 26 Nov 2018 at 17:34, Mark Thomas wrote: > Tomcat 9.0.13 windows installer, Open JDK 11.0.1 and Window server 2008 > R2 work first time for me on a clean install. > > This doesn't look

Re: [EXTERNAL] Re: Hostnames with underscores

2018-10-26 Thread M. Manna
combination of the following characters: " < > [ \ ] > ^ ` { | } . “ > > But I admit that I did not actually verify it and will see if these > attributes work for underscore too. > > Thanks, > Amit > > On Oct 26, 2018, at 12:02 PM, M. Manna manme...@gmail.com>&

Re: Hostnames with underscores

2018-10-26 Thread M. Manna
Have you checked the connector config doc for relaxedPathChars and relaxedQueryChars? On Fri, 26 Oct 2018 at 18:00, Amit Pande wrote: > Hello all, > > Recent Tomcat versions (8.5.32 I think) has made a stricter validation for > hostnames with underscores in it. ( >

Re: Error Regarding RFC 7230 and RC 3986

2018-10-18 Thread M. Manna
this already. Thanks, On Thu, 18 Oct 2018 at 14:09, Mark H. Wood wrote: > On Thu, Oct 18, 2018 at 11:55:24AM +0100, M. Manna wrote: > > Thanks a bunch Mark. > > > > "The correct fix is to ensure that the user agents are sending > > specification compliant requests.

Re: Error Regarding RFC 7230 and RC 3986

2018-10-18 Thread M. Manna
I understand. We will use the connector patch for now. But thanks again for sharing your thoughts. And the link to apache Confluence is really helpful! Thanks, On Thu, 18 Oct 2018 at 12:12, Mark Thomas wrote: > On 18/10/18 11:55, M. Manna wrote: > > Thanks a bunch Mark. > > &

Re: Error Regarding RFC 7230 and RC 3986

2018-10-18 Thread M. Manna
em to have this option (or we might've missed it). We are using relaxedQueryChars for now - but would like to understand the fix you've proposed above. On Thu, 18 Oct 2018 at 10:39, Mark Thomas wrote: > On 18/10/18 09:52, M. Manna wrote: > > Hello, > > > > We received in er

Error Regarding RFC 7230 and RC 3986

2018-10-18 Thread M. Manna
Hello, We received in error in our application after we have upgraded to 8.5.34 INFO: Error parsing HTTP request header Note: further occurrences of HTTP header parsing errors will be logged at DEBUG level. java.lang.IllegalArgumentException: Invalid character found in the request target. The

Re: Apache failed to initialize connector

2018-10-03 Thread M. Manna
it looks like you've bound your port 8009 and 8080 with something else temporarily during windows startup.It may be some port scanning service or some firewall/ prevention service is blocking all the ports until some checks are done. And that is why you have this issue intermittently. As a

Tuning parameters in APR/Standard connectors

2018-09-27 Thread M. Manna
Hello, We have a some SQL statements (Insert, Update) which comes to a few MBs in size. We are currently using APR 1.2.16. What we observed that sometimes, the connection hangs out because of extremely large SQL text blocks being sent to SQL Server. Is there any parameter in APR or Standard

Re: Tomcat Vs Windows Versions

2018-09-24 Thread M. Manna
Is there any specific reason you are after platform versions ? On Mon, 24 Sep 2018 at 19:03, André Luís Scandolara < andre.luis.scandol...@gmail.com> wrote: > Does anyone know the Windows versions supported by Apache Tomcat 7, 8 and > 9? > > I could not find out this information on Apache

Re: Possible Discrepancy in ClassLoading order when running in Linux

2018-08-29 Thread M. Manna
Please ignore my question. Seems like someone decided to try out a "Special" classloader - didn't have the information before. Thanks for responding anyway. Regards, On Wed, 29 Aug 2018 at 20:20, M. Manna wrote: > Thanks mark. We aren’t using delegation, but even with deleg

Re: Possible Discrepancy in ClassLoading order when running in Linux

2018-08-29 Thread M. Manna
Thanks mark. We aren’t using delegation, but even with delegation classes directory are looked up first in the order. Tomcat version 8.5.32. Thanks, On Wed, 29 Aug 2018 at 19:31, Mark Thomas wrote: > On 29/08/18 19:09, M. Manna wrote: > > Hello, > > > > I am not

Possible Discrepancy in ClassLoading order when running in Linux

2018-08-29 Thread M. Manna
Hello, I am not sure if this is a bug or something specific to our implementation, so wanted to share that with others. Please forgive my idiocy. We took a verbose classloading on Windows and it loaded two classes from two different locations. 1) *SomeUtils*.class from *com.my.package.name

Re: Why move to tomcat9 (UNCLASSIFIED)

2018-08-29 Thread M. Manna
The key benefit is - You get all recent CVE patches which protects your product more from known vulnerabilities. You can see a comparison table here - http://tomcat.apache.org/whichversion.html I would recommend that you review Servlet, Connector, and Java version related changes carefully (if

Re: App fails to completely startup on a Tomcat restart

2018-08-09 Thread M. Manna
What is your full context.xml file? Also, is there any reason why you have named your application as ROOT.war? Regards, On 9 August 2018 at 15:48, Donald J wrote: > We are running a Tomcat application where the login always fails after a > tomcat restart > with an error about unable to load

Re: Release Roadmap for H2 2018

2018-08-02 Thread M. Manna
I simply meant email distribution list - tomcat users. On 2 August 2018 at 16:15, Christopher Schultz wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > To whom it may concern, > > On 8/2/18 7:12 AM, M. Manna wrote: > > Nice one! Thanks Mark. will k

Re: Release Roadmap for H2 2018

2018-08-02 Thread M. Manna
Nice one! Thanks Mark. will keep an eye on the distro. On 2 August 2018 at 12:11, Mark Thomas wrote: > On 02/08/18 12:01, M. Manna wrote: > > Hello, > > > > Is there any release roadmap or community wiki where release plans are > > currently being published? > &g

Release Roadmap for H2 2018

2018-08-02 Thread M. Manna
Hello, Is there any release roadmap or community wiki where release plans are currently being published? We wanted to do an upgrade but wondering if it's better to wait as there might be a new release coming for 8.5.x or 9.0.x Regards,

No Official Info on CVE Mitre - CVE-2018-1336

2018-08-02 Thread M. Manna
Hello, Does anyone know if this is fully official yet? NIST and CVE Mitre say that the ticket is reserved, but tomcat website says that this has been fixed in newer versions. I was simply looking for an official explanation on how this has been identified as a problem. Regards,

Re: Need information

2018-07-23 Thread M. Manna
: > Because I need to add a folder (properties) under the tomcat installation > in order to read the properties in a file with the following annotation > (using spring) > @PropertySource("classpath:properties/application.properties"); > > > > > > 2018-07-23 22:

Re: Need information

2018-07-23 Thread M. Manna
gt; So if there is an explanation and why i should modify them, it will be very > important to me. > > thanks > > 2018-07-23 18:06 GMT+02:00 M. Manna : > > > http://tomcat.apache.org/tomcat-8.5-doc/class-loader- > > howto.html#Class_Loader_Definitions > > > > Also, you sho

Re: Changing Sever.xml without restarting Tomcat 8.5

2018-07-23 Thread M. Manna
I am not sure if it's possible, and probably for a valid reasons. Server.xml is the mother of server container config and messing things up there means your servlet context/listeners etc. may need to be reconfigured. Without a heavily customised/rewritten version of tomcat config change listener,

Re: Need information

2018-07-23 Thread M. Manna
http://tomcat.apache.org/tomcat-8.5-doc/class-loader-howto.html#Class_Loader_Definitions Also, you should try and pay attention to Bootstrap.java file and debug through the execution to understand how it's working. On 23 July 2018 at 17:03, Francesco Viscomi wrote: > hi all > In

Re: Getting the Manager app running on localhost.. Please help

2018-07-12 Thread M. Manna
have you enabled all user roles with passwords? in CATALINA_HOME/conf/tomcat-users.xml file? Also, don't forget to change the passwords noted as "" with something "interesting". By default, it can only run on localhost, and it's configured to listen to 127.0.0.1 via the valve. If you uncomment

Re: log4j

2018-05-18 Thread M. Manna
Hi Chris, How r u planning to use Log4j (or log4j2, which solves a lot of performance issues for 1.2.x)? Are you bridging with SLF4J or or using directly? All log4j configuration are automatically discovered and configured provided that you have set up your appplication log4j properties file

Re: Jsp pages with scriptlet and javadoc comments loaded in char[]

2018-05-02 Thread M. Manna
, it doesn't seem to be an option. Thanks, On 2 May 2018 at 10:39, Mark Thomas <ma...@apache.org> wrote: > On 02/05/18 10:31, M. Manna wrote: > > Hi All, > > > > I had a specific question regarding JSPs loaded in web-application > > container for jasper to compilatio

Jsp pages with scriptlet and javadoc comments loaded in char[]

2018-05-02 Thread M. Manna
Hi All, I had a specific question regarding JSPs loaded in web-application container for jasper to compilation. If I have a JSP page which has scriptlet and javadoc comments/code comments, aren't those loaded into the char[] of JSP pages too? I understand that Jasper compiles the JSPs but those

Re: APR/native error on tomcat 8.5.16

2018-04-25 Thread M. Manna
Thread.run(Thread.java:745) Please let me know if this helps. Regards, On 25 April 2018 at 12:55, Mark Thomas <ma...@apache.org> wrote: > On 25/04/18 11:18, M. Manna wrote: > > Hello, > > > > > But from the above stack track it seems as though the > > socket cannot

APR/native error on tomcat 8.5.16

2018-04-25 Thread M. Manna
Hello, We have been getting the error stack on our production servers quite frequently over the past few days: java.io.IOException: Unexpected error [730,054] writing data to the APR/native socket [950,585,024] with wrapper

Re: TCP6

2018-03-18 Thread M. Manna
In your server.xml add address="0.0.0.0" for connector. On 18 Mar 2018 1:04 pm, "Loai Abdallatif" wrote: > Dear Friends > > *root@appserver01:~# netstat -antp* > I have started three tomcat instances on one debian server and I got the > following netstat output: >

Re: WebApp Caching Broken

2018-03-06 Thread M. Manna
Kenneth, As MarkT suggested earlier, there is no such "Cache". If you are using Tag/Cotext Pooling - it's a separate issue and you need to check tomcat's documentation to check what options you need/don't need. "The “-XX:+DisableAttachMechanism” JVM option does not work with Tomcat" - what do

Re: jasper ant task classpath

2018-02-26 Thread M. Manna
You can create an Ant directory variable which gets added to your job and can be looked up for additional dependency. Check path,fileset from Ant docs to see how you can add it to ant task On 26 Feb 2018 9:52 pm, "Mark Thomas" wrote: On 26/02/18 20:22, Juan Florez wrote: >

Re: problems with tomcat 8.5.5

2018-02-22 Thread M. Manna
Can you please check the changelog for 8.5.x and see if this was fixed? Regards, On Thu, 22 Feb 2018 at 23:11, Lou DeGenaro wrote: > From catalina.out, NPE seems bad. Other log files have NPEs too. Need a > never version of tomcat? > > Thanks. > > Lou. > > - > >

Re: Tomcat throwing 404 error after modifying context.xml

2018-02-22 Thread M. Manna
ssName="org.postgresql.Driver" > > url="jdbc:postgresql://itsusralsp06829:5432/spectra"/> > > > > > type="javax.sql.DataSource" maxActive="2" maxIdle="30" > > maxWait="1" username="saevdcep"

Re: Tomcat throwing 404 error after modifying context.xml

2018-02-21 Thread M. Manna
Your jdbc url and context path have changed. Have you updated how and where you are requesting it? 404 means Not Found. So your requesting for something non-existent. Please chill and confirm. On Wed, 21 Feb 2018 at 22:32, Howlader, Aakash [GTSUS Non-J] < ahowl...@its.jnj.com> wrote: > Hello, >

Re: _jspService is exceeding the 65535 bytes limit

2018-02-07 Thread M. Manna
If this doesn’t cause pain, I would do the following: 1) Replace all in-body scriptlets and use JSTL core tags in offending JSPs. Most of the codebloats are caused by using intermediate scriptlets e.g. <% if (foo.bar() == jack.jill() ) { %> // lots of jsp code <%} else <%{ %> 2) use all your

Re: dsn config issues

2018-02-06 Thread M. Manna
location as all of the other jar files. > On Feb 6, 2018, at 2:57 PM, M. Manna <manme...@gmail.com> wrote: > > How r u bootstrapping the application? As installed service or invoking > main() usimg bootstrap.jar? > > Also, I would try loading the jar from -classpath location. Typic

Re: dsn config issues

2018-02-06 Thread M. Manna
How r u bootstrapping the application? As installed service or invoking main() usimg bootstrap.jar? Also, I would try loading the jar from -classpath location. Typically, it should be placed into WEB-INF/lib folder. But may be you want to try loading it from classpath and see how it goes.

Re: Tomcat7 with jre 1.7 error during starting

2018-01-26 Thread M. Manna
And did you try running it with jre7? In other words, all 7 ? On 26 Jan 2018 18:08, "Rajesh Cherukuri" wrote: > HI > > we have a existing running tomcat version 5 running on solaris with out > any issues , recently we have installed tomcat 7 on the same solaris 10 >

Re: White-space encoding issue in 8.5.16

2017-11-13 Thread M. Manna
Actually, it's the same issue (and even error stack) reported here: http://tomcat.10.x6.nabble.com/Tomcat-8-5-4-uses-RFC-6265-by-default-which-does-not-appear-to-be-Servlet-3-1-compliant-td5054685.html On 13 November 2017 at 09:00, Mark Thomas <ma...@apache.org> wrote: > On 12/11/17

White-space encoding issue in 8.5.16

2017-11-12 Thread M. Manna
Hi, We are currently encountering an issue where some of our REST API calls are failing because of a white-space not being encoded (i.e. %20). This has started with 8.5.16 and our previous version didn't have this problem - 8.0.29. Is this something anyone has seen before? I am assuming that

  1   2   >