Re: Regarding Tomcat url redirection

i Chris, Thanks I will request new certificate with SANs and I will try to fix the things from our end. Best Regards, Lavanya On Wed, Apr 24, 2024 at 11:12 PM Christopher Schultz < ch...@christopherschultz.net> wrote: Lavanya, On 4/24/24 15:39, lavanya tech wrote: Local host mean

Re: Regarding Tomcat url redirection

at 11:12 PM Christopher Schultz < ch...@christopherschultz.net> wrote: Lavanya, On 4/24/24 15:39, lavanya tech wrote: Local host means the machine i am logged in to server.lbg.com You are right, example.lbg.com is CNAME record. Okay, thanks for clearing that up. I dont have any

Re: Regarding Tomcat url redirection

, April 24, 2024, Christopher Schultz < ch...@christopherschultz.net> wrote: Lavanya, On 4/24/24 07:37, lavanya tech wrote: Sorry I understood wrongly here with regards to my environment, Let me start from the beginning. I donot want to use redirect at all. I simply wanted to force apache

Re: Tomcat closes connections on unexpected status codes

Stefan, On 4/24/24 13:58, Stefan Ansing wrote: Op do 18 apr 2024 om 17:42 schreef Mark Thomas : On 18/04/2024 15:18, Stefan Ansing wrote: Hi Rémy, Mark, I just want to make sure that we’re understanding each other. I can see that the connection needs to be closed in certain conditions to

Re: Regarding Tomcat url redirection

k you need any use of the RewriteValve unless you want to handle sending HTTP 302 redirect responses to insecure requests without specifying the CONFIDENTIAL transport-guarantee in your application's web.xml file. But I don't see any reason NOT to have that in there. -chris On Tue, Apr 23, 2024 at 10:5

Re: Installation on Win 10 failure.

Hello, A few things. 1. Are you really coming from Tomcat 4.04? 2. Are you really using Java 18? It's basically dead. Use Java 17 or 21, which are both Long Term Support (LTS) versions, especially if you are only going to upgrade once every 20 years. 3. You should not have CLASSPATH set.

Re: AW: FileUpload class not working with Tomcat 10.1

JSP programs to all have file uploading enabled and launched by the correspoding requesting program? Can you post both definitions and the s for each of them? It's still yucky to use a JSP to do this IMHO. -chris On Thu Nov 16 14:36:21 2023 Christopher Schultz wrote: Mark, Apologies

Re: Regarding Tomcat url redirection

-chris On Fri, Apr 19, 2024 at 3:03 PM Christopher Schultz < ch...@christopherschultz.net> wrote: Ammu, On 4/19/24 08:32, lavanya tech wrote: Thank you very much. I removed for example.com as well as adding an in server.xml I copied context.xml file /git/app/apache-tomcat-10.1.

Re: Regarding Tomcat url redirection

ROOT web application name instead of "towl". -chris On Fri, Apr 19, 2024 at 1:21 PM Christopher Schultz < ch...@christopherschultz.net> wrote: Ammu, On 4/18/24 09:34, lavanya tech wrote: I am attaching server.xml and context.xml and rewrite.config files. The paths are /git/app

Re: Tomcat closes connections on unexpected status codes

if "Not Found" was replaced by "Found to be empty" in all cases. 204 No Content is normally used with PUT and DELETE requests. Yes, you can use those. 200 would also make sense and, of course 201 for new resources. -chris -Original Message- From: Christopher Sc

Re: Tomcat closes connections on unexpected status codes

Pawel, On 4/18/24 20:21, Pawel Veselov wrote: On 18/04/2024 15:18, Stefan Ansing wrote: Hi Rémy, Mark, I just want to make sure that we’re understanding each other. I can see that the connection needs to be closed in certain conditions to prevent request smuggling attacks. I certainly don’t

Re: Tomcat closes connections on unexpected status codes

Pawel, On 4/18/24 20:32, Pawel Veselov wrote: On Thu, Apr 18, 2024 at 9:40 AM Adwait Kumar Singh wrote: I'm not (yet) convinced distinguishing between those scenarios is always going to be possible. I have a Tomcat patch which we use at work to do this, i.e always close the connection if

Re: Tomcat closes connections on unexpected status codes

Mark, On 4/18/24 11:38, Mark Thomas wrote: On 18/04/2024 15:16, Adwait Kumar Singh wrote: I think we should *always* close connections in cases where it can lead to request smuggling vulnerabilities like when there is an error during header or request line parsing, but allowing the user to

Re: Tomcat closes connections on unexpected status codes

All, On 4/18/24 10:16, Adwait Kumar Singh wrote: I think we should *always* close connections in cases where it can lead to request smuggling vulnerabilities like when there is an error during header or request line parsing, but allowing the user to control connection close when the status is

Re: Regarding Tomcat url redirection

o a stock Tomcat less significant and easier to apply to new versions if/when necessary. -chris On Thu, Apr 18, 2024 at 2:17 PM Christopher Schultz < ch...@christopherschultz.net> wrote: Ammu, On 4/18/24 07:45, lavanya tech wrote: I added classname rewrite val

Re: Regarding Tomcat url redirection

Ammu, On 4/18/24 07:45, lavanya tech wrote: I added classname rewrite valeus in contex.xml file . created rewrite.config so both of them is located under conf under apache-tomcat. https://www.example.com:/example [R=301,L] So according to the

Re: Question on the ErrorReportValve

Jon, On 4/17/24 13:26, Mcalexander, Jon J. wrote: Thank you. The documentation makes it somewhat confusing because it starts out that a Valve can exist in Engine, Host, and Context Containers, and then in the subsequent valve list is the ErrorReportValve, but it doesn’t make it clear as to

Re: Unexpected behavior of filters

Konstantin, On 4/16/24 13:16, Konstantin Kolinko wrote: вт, 16 апр. 2024 г. в 18:17, Christopher Schultz : All, I'm not sure if this is the first time I've tried something like this, but I was surprised by the behavior I observed today when trying to configure a new Filter. I have

Unexpected behavior of filters

All, I'm not sure if this is the first time I've tried something like this, but I was surprised by the behavior I observed today when trying to configure a new Filter. I have an existing Filter that looks at Cookies provided in a request. I wanted to add a new Filter that takes request

Re: Retrieve server.built, server.number

On 4/11/24 10:59, Mark Thomas wrote: On 11/04/2024 15:49, Bill Stewart wrote: On Wed, Apr 10, 2024 at 2:14 PM Mark Thomas wrote: ... and it might represent an information leakage vulnerability in your application. Be Careful. Shall we start the flame war now on whether exposing the

Re: Question on the ErrorReportValve

Jon, On 4/15/24 12:36, Mcalexander, Jon J. wrote: Quick question on the ErrorReportValve and location within the server.xml file. I know that typically this would be inside the element, but if you have Multiple elements, do you add the valve to each Host section, or can it be placed at the

Re: [EXT]Re: .intermittent InvocationTargetException errors

yote.http11.Http11Processor.service(Http11Processor.java:391) at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:63) at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:896) -chris -Original Message- From: Christopher Schultz Sent: Monday, April 15

Re: .intermittent InvocationTargetException errors

Rick, On 4/15/24 10:04, Rick Noel wrote: Hello, I am using Tomcat 10 with java 17. I am getting itermitant jsp compile errors below. Some times the page compiles correctly but sometimes the page hits result in below errors java.lang.reflect.InvocationTargetException at

Re: [EXT]Re: [EXT]Re: Tomcat 10 session replication fails

Rick, On 4/15/24 08:12, Rick Noel wrote: Hi Chuck, Your suggestion did not work. I defined Membership as suggested... and still getting this in the logs org.apache.catalina.ha.session.DeltaManager.startInternal Starting clustering manager at [##0001] 15-Apr-2024

Re: [OT] Tomcat 9.0.83 - SSL handshake stops working for Google API calls after a while

of the symptoms. -chris On Thu, Apr 11, 2024 at 2:25 PM Christopher Schultz < ch...@christopherschultz.net> wrote: Marcos, Marking as "off topic" because this is not Tomcat-related. Please see below... On 4/11/24 08:28, Marcos Peña wrote: Hi, I am looking for help with a

Re: [OT] Tomcat 9.0.83 - SSL handshake stops working for Google API calls after a while

Marcos, Marking as "off topic" because this is not Tomcat-related. Please see below... On 4/11/24 08:28, Marcos Peña wrote: Hi, I am looking for help with a strange issue we are experiencing when trying to use Google APIs from a web application that is deployed on Tomcat 9.0.83. After a

Re: Retrieve server.built, server.number

Mark, On 4/10/24 16:12, Mark Thomas wrote: On 10/04/2024 21:15, Christopher Schultz wrote: All, On 4/10/24 4:00 AM, Mark Thomas wrote: On 09/04/2024 17:17, prat 007 wrote: Hi All, I would like to know is there a way to find tomcat's server.built and server.number remotely using tool loke

Re: Tomcat log warnings for connection parameter limits?

Baron, On 4/9/24 16:33, Baron Fujimoto wrote: I'm investigating occasional 503 errors for our CAS service running in a Tomcat 10.1.x container. The 503s appear to correlate with some traffic spikes at the same time. The connector is configured as follows: Can Tomcat log info such as

Re: Retrieve server.built, server.number

All, On 4/10/24 4:00 AM, Mark Thomas wrote: On 09/04/2024 17:17, prat 007 wrote: Hi All, I would like to know is there a way to find tomcat's server.built and server.number remotely using tool loke curl or from browser? In a default installation, no. You'd have to write a servlet that

Re: Tomcat in a Windows environment : new keystore possibilities

David, On 4/8/24 05:35, David Wooffindin wrote: Referring to the documentation on Apache Tomcat 9 Configuration Reference (9.0.87) - The HTTP Connector keystore types, i wanted to get mentioned that a new set of

Re: Migrating from Tomcat 9.0.x to 10.1.x

Amit, On 4/4/24 22:21, Amit Pande wrote: I am in the process of migrating from Tomcat 9 (9.0.87) to Tomcat 10.1 (10.1.20). https://tomcat.apache.org/migration-10.1.html Using the migration tool, I have migrated the applications (which use Spring libraries 5.x). While testing the migrated

Re: org.apache.catalina.valves.RemoteAddrValve

Eric, On 4/4/24 13:43, Eric Fetzer wrote: Hi All, When I originally set up my tomcat instance, I added the following to allow manager access under /opt/tomcat/webapps/manager/META-INF/context.xml: That worked wonderfully. Now I'm trying to add another IP range by changing it to: This is

Re: [EXT]Re: how to define database resource in just context.xml or server.xml

way to do that is by defining it in server.xml and then linking it through your applications' WEB-INF/web.xml files. You should not have to touch CATALINA_BASE/conf/context.xml. -chris -Original Message- From: Christopher Schultz Sent: Friday, March 29, 2024 2:21 PM To: Tomcat Users

Re: FW: [EXT]Re: how to define database resource in just context.xml or server.xml

n just context.xml or server.xml If have the resource defined in CATALINA_BASE/conf/context.xml And CATALINA_BASE/conf/server.xml Rick Noel Systems Programmer | Westwood One rn...@westwoodone.com -Original Message- From: Christopher Schultz Sent: Friday, March 29, 2024 11:47 AM To: users@t

Re: [EXT]Re: how to define database resource in just context.xml or server.xml

upgrading Tomcat much easier. -chris -Original Message----- From: Christopher Schultz Sent: Friday, March 29, 2024 11:47 AM To: users@tomcat.apache.org Subject: [EXT]Re: how to define database resource in just context.xml or server.xml Rick, On 3/29/24 09:48, Rick Noel wrote: Can someone t

Re: how to define database resource in just context.xml or server.xml

Rick, On 3/29/24 09:48, Rick Noel wrote: Can someone tell me why I need to have my database source defined in both my context.xml and server.xml? I thought we are suppose to define it in only one location? It's definitely not a requirement to specify it in both places. I can only log into my

Re: [EXT]Re: [EXT]Re: performance tunning of Tomcat 10

beyond just throwing X requests at a site. -chris -Original Message- From: Christopher Schultz Sent: Thursday, March 28, 2024 3:09 PM To: users@tomcat.apache.org Subject: [EXT]Re: [EXT]Re: performance tunning of Tomcat 10 Rick, On 3/27/24 09:22, Rick Noel wrote: -Original Message

Re: [EXT]Re: performance tunning of Tomcat 10

Rick, On 3/27/24 09:22, Rick Noel wrote: -Original Message- From: Christopher Schultz Sent: Wednesday, March 27, 2024 8:24 AM To: Tomcat Users List ; Rick Noel Cc: Voodoo nmulcahy gmail ; David Jung Subject: [EXT]Re: performance tunning of Tomcat 10 Rick, On 3/27/24 07:53, Rick

Re: performance tunning of Tomcat 10

Rick, On 3/27/24 07:53, Rick Noel wrote: I was wondering if the apache foundation has any tools we can use to fine tune Tomcat 10. Tools to deteming how to set the best heap size for Tomcat startup and the best connection attributes of minSpareThreads and MaxThreads. What is your goal? I

Re: Tomcat Internal Architect for JSP compilation?

not a realistic expectation. Tomcat relies on its local environment being stable. Dont' destabilize it. If you absolutely need Tomcat to not-fail under thes conditions, we'd be happy to have you research it and provide a patch or pull-request. -chris On Fri, Mar 22, 2024 at 7:01 PM Christopher

Re: Speeding up tomcat

Alex, On 3/25/24 13:06, Alex Hatcher wrote: Java version: 11.0.20 Tomcat version: 9.0.59 Are you able to upgrade these? Your Tomcat is nearly 2 years old and your Java is ... I'm not sure how old. This will have nothing to do with performance. Just security and general stability. OS

[ANN] Apache Tomcat 10.1.20 Available

The Apache Tomcat team announces the immediate availability of Apache Tomcat 10.1.20. Apache Tomcat 10 is an open source software implementation of the Jakarta Servlet, Jakarta Server Pages, Jakarta Expression Language, Jakarta WebSocket, Jakarta Authentication and Jakarta Annotations

[ANN] Apache Tomcat 8.5.100 Available

The Apache Tomcat team announces the immediate availability of Apache Tomcat 8.5.100. *This will likely be the final release of Apache Tomcat 8.5. Please see the EOL notice linked at the end of this message.* Apache Tomcat 8 is an open source software implementation of the Java Servlet,

Re: Tomcat 9.0.87 - status 400 in css / images

DAngel, On 3/22/24 16:14, DAngel wrote: Tomcat 9.0.87 (and Tomcat 9.0.76) Ubuntu 22.04 (and Red hat 8) java 8 : openjdk version "1.8.0_382" protocol: HTTP I have migrated an application from tomcat 7 (7.0.76) to tomcat 9.0.76 (and also to tomcat 9.0.87) After upgrading to Tomcat 9.0.76, the

Re: HttpSession tracking

Robert. On 3/22/24 14:11, Robert Turner wrote: Thanks for figuring it out -- I will keep that in mind when I go to split our "mega session object" up as that will impact some of the decisions for sure. Yeah, I guess you end up with a "dummy object" on the session as a result -- I guess we got

Re: [EXT]Re: Tomcat session replication issue - java.lang.IllegalArgumentException: setAttribute: Non-serializable attribute :

Rick, On 3/22/24 13:33, Rick Noel wrote: I do not want to replicate customer because that class does not implement serializable I was looking for someway that the Manager would NOT try to replicate it This is an allow-list which is much more secure than a deny-list. It's a regular

Re: HttpSession tracking

All, On 3/22/24 09:59, Christopher Schultz wrote: All, On 3/22/24 09:33, Robert Turner wrote: On Fri, Mar 22, 2024 at 9:28 AM Christopher Schultz < ch...@christopherschultz.net> wrote: Robert, On 3/21/24 15:31, Robert Turner wrote: We receive the sessionWillPas

Re: HttpSession tracking

All, On 3/22/24 09:33, Robert Turner wrote: On Fri, Mar 22, 2024 at 9:28 AM Christopher Schultz < ch...@christopherschultz.net> wrote: Robert, On 3/21/24 15:31, Robert Turner wrote: We receive the sessionWillPassivate and sessionDidActivate callbacks on startup. Odd that you are not.

Re: Memory leak in EncodingDetector?

in yourself, or grab 10.1.x from GitHub, or wit for Tomcat 10.1.21 to be released (10.1.20 has already been rolled and the voting will end shortly, so you'll have to wait for the next release). -chris On Thu, Mar 21, 2024 at 1:44 PM Christopher Schultz wrote: Simon, On 3/20/24 15:36, Simon

Re: Tomcat Internal Architect for JSP compilation?

. These files could live for decades if you never changed your source .jsp files or re-deployed your application. -chris On Thu, Mar 21, 2024 at 7:24 PM Christopher Schultz < ch...@christopherschultz.net> wrote: Subudh, On 3/21/24 07:32, Subodh Joshi wrote: Expert, Recently i came across a

Re: HttpSession tracking

Robert, On 3/21/24 15:31, Robert Turner wrote: We receive the sessionWillPassivate and sessionDidActivate callbacks on startup. Odd that you are not. That's how we achieve the same. On 3/21/24 16:21, Robert Turner wrote: Just to add a bit more information, our handler class, for better or for

HttpSession tracking

All, After having written a solution using JMX to do something like this, I'd like to make it cleaner and I'm not sure it's entirely possible using just Servlet APIs. I'd like to be able to track every HttpSession for the application. for admin purposes, I'd like to be able to analyze: 1.

Re: Use JAVA/CATALINA_OPTS arguments in server.xml

Manak, On 3/21/24 09:57, Manak Bisht wrote: On Thu, 21 Mar 2024, 19:18 Christopher Schultz, < ch...@christopherschultz.net> wrote: Manak, On 3/21/24 05:38, Manak Bisht wrote: Thanks, Chuck! This works for defining the port but does not work for the host. Using either of the above

Re: Tomcat Internal Architect for JSP compilation?

Subudh, On 3/21/24 07:32, Subodh Joshi wrote: Expert, Recently i came across a issue and i was getting no clue what was going on wrong with the Application. So here is the issue , we were getting following issue in our web application(Springboot+Embedded Tomcat) which is deployed into Linux

Re: Use JAVA/CATALINA_OPTS arguments in server.xml

Manak, On 3/21/24 05:38, Manak Bisht wrote: Thanks, Chuck! This works for defining the port but does not work for the host. port="4000" host="${tomcat.member:-localhost}"/> port="4000" host="${tomcat.member:-127.0.0.1}"/> Using either of the above throws the following error, 21-Mar-2024

Re: Memory leak in EncodingDetector?

eak detection log messages. *shrug* I wonder if there really are any use-cases for applications wanting Tomcat to specify the XMLInputFactory *to be used for JSP*. I suspect not. -chris On Wed, Mar 20, 2024 at 7:01 PM Christopher Schultz wrote: Simon, On 3/20/24 09:59, Simon Niederberger wr

Re: Memory leak in EncodingDetector?

.run(TaskThread.java:63) at java.base/java.lang.Thread.run(Thread.java:840) Mühlegasse 18, 6340 Baar, Switzerland https://www.want.ch https://www.funnel.travel On Tue, Mar 19, 2024 at 12:31 PM Christopher Schultz wrote: Simon, On 3/18/24 15:17, Simon Niederberger wrote: I'm ana

Re: PKCS#8 encryption algorithm unrecognized

Timothy, On 3/19/24 14:18, Timothy Resh wrote: where the . is the fqdn This works fine *until* Tomcat 9.0.83 and now we get the following listed below. Is it possible for you to re-test with Tomcat 9.0.85 or later? -chris I have read some of the

Re: [EXT]Re: 404 for j_security_check

: Christopher Schultz Sent: Sunday, March 17, 2024 10:57 AM To: users@tomcat.apache.org Subject: Re: [EXT]Re: 404 for j_security_check [You don't often get email from ch...@christopherschultz.net. Learn why this is important at https://aka.ms/LearnAboutSenderIdentification ] Rick, On 3/15/24 13:49

Re: problems with partitioned cookies

Holger, On 3/19/24 04:46, info@klawitter.de wrote: dang! I missed that while checking the changelog. Thanks for pointing out. I'm curious about CHIPS. It's still considered experimental and, honestly, every web browser on the planet is poised to use the equivalent of "partitioned

Re: Memory leak in EncodingDetector?

Simon, On 3/18/24 15:17, Simon Niederberger wrote: I'm analyzing a memory leak reported by Tomcat, and have narrowed it down to org.apache.jasper.compiler.EncodingDetector: private static final XMLInputFactory XML_INPUT_FACTORY; static { XML_INPUT_FACTORY = XMLInputFactory.newInstance();

Re: [EXT]Re: 404 for j_security_check

y encoding your URLs in your page like with HttpServletResponse.encodeURL()? If you are using cookie-based session-tracking it probably won't matter, but it's best practice to always do that to ensure your URLs are generated properly. -chris -Original Message----- From: Christopher Schultz

Re: 404 for j_security_check

Rick, On 3/14/24 15:37, Rick Noel wrote: After moving from tomcat 9 to tomcat 10 after a user successfully logs in and then hits a restricted page, the login page is hit again but on this second login hit I get 404 page not found This is actually expected, since j_security_check is only

Re: reloading context with manager-script

Mark, On 3/14/24 07:57, Mark Thomas wrote: On 12/03/2024 13:47, Christopher Schultz wrote: Greg and Mark, On 3/12/24 05:00, Greg Huber wrote: On 11/03/2024 18:17, Christopher Schultz wrote: Mark, On 3/10/24 08:49, Mark Thomas wrote: On 10/03/2024 10:50, Greg Huber wrote: Hello, Using

Re: Tomcat 9 returning 404 for audio files

Sam, On 3/13/24 22:34, Sam wrote: Thank you so much! Finally issue is resolved. Regards! On Tue, Mar 12, 2024, 11:43 p.m. Anson Cheung wrote: ok,it's a problem caused by tomcat cache. You need to disable it. Please refer to

Re: reloading context with manager-script

Greg and Mark, On 3/12/24 05:00, Greg Huber wrote: On 11/03/2024 18:17, Christopher Schultz wrote: Mark, On 3/10/24 08:49, Mark Thomas wrote: On 10/03/2024 10:50, Greg Huber wrote: Hello, Using http://tomcat/manager-app/text/reload?path=/ When I reload an application (in java), I get

Re: When does Tomcat add and remove threads?

John, On 3/11/24 18:14, john.e.gr...@wellsfargo.com.INVALID wrote: From: Christopher Schultz Sent: Monday, March 11, 2024 5:09 PM > On 3/11/24 17:47, john.e.gr...@wellsfargo.com.INVALID wrote: I am using Tomcat 9.x. When does Tomcat add and remove threads from its internal thread p

Re: When does Tomcat add and remove threads?

John, On 3/11/24 17:47, john.e.gr...@wellsfargo.com.INVALID wrote: I am using Tomcat 9.x. When does Tomcat add and remove threads from its internal thread pool? I'm talking about the threads with names like http-nio-8080-exec-1. It appears the thread pool is Tomcat's own ThreadPoolExecutor

Re: how to reload SSL certificates without restarting Tomcat

Jerry, On 3/11/24 14:51, Jerry Lin wrote: Hi Chris, There is also this: https://tomcat.apache.org/presentations.html#latest-lets-encrypt It's very LE-focused, but it shows you how to programmatically trigger a reload. Thanks for your presentation and script. We are using Let's Encrypt, so

Re: Tomcat 9 returning 404 for audio files

Sam, On 3/11/24 13:04, Sam wrote: On the server side, I'm checking that file exists before returning the file path to the browser. We are also dynamically creating pdf files this way and no issues with accessing them. How are you checking to see if the file exists? It's possible that your

Re: [OT] Tomcat SMPT TLS1.2

Brandie, (Marking this [OT] as it's not really a Tomcat question.) On 3/11/24 12:34, Brandie Nickey wrote: I have a COTS webapp using Tomcat 8.0.43 and Java 1.8.0_121. I have been trying to find out where to configure outbound smtp messages to use only TLS1.2. I've found plenty of info on

Re: how to reload SSL certificates without restarting Tomcat

Jerry, On 3/10/24 16:00, Jerry Lin wrote: Hi Chuck, Presumably, you mean “not behind https", since “Apache” refers to the organization that develops and maintains a plethora of software products. Yes, “not behind https" (I meant not behind an Apache HTTP server) you can configure the

Re: reloading context with manager-script

Mark, On 3/10/24 08:49, Mark Thomas wrote: On 10/03/2024 10:50, Greg Huber wrote: Hello, Using http://tomcat/manager-app/text/reload?path=/ When I reload an application (in java), I get a reply OK - Reloaded application at context path [/] but when the application is not present I get this

Re: SpringBoot Embedded Tomcat Server RateLimitFilter

Ved, On 2/28/24 00:56, Ved wrote: Hi, I am using spring boot and wanted to use Rate Limit. I can find it in package org.apache.catalina.filters; //in embedded tomcat But this RateLimitFilter is never called. I want to understand when this filter is called and how I can customize it. Have you

Re: How to properly enable logging in "org.apache.catalina.core.StandardContext"

David, On 2/29/24 13:21, David Karr wrote: In our SpringBoot services, we sometimes run into situations where we get an exception like this: org.springframework.context.ApplicationContextException: Unable to start web server; nested exception is

Re: Core Dump File Generation

Mohit, On 2/28/24 04:39, Chaudhary, Mohit wrote: I am talking about java core dump file which is generating on tomcat/bin path and the OS is RHEL 6. There is no such thing as a "java core dump file". What is the name of the file? Something like hs_err_*? or is this something in

Re: Need help for a problem on migrating from Tomcat-8 to Tomcat-9

Rajib, On 2/26/24 23:43, Saha, Rajib wrote: Hi Mark, Thanks for your explanation and suggestion. For my use case, I have used the below option and its working fine. = --ServiceUser="LocalSystem" = Thank you very much for showing the way.

Any way to look-up a session from application?

All, I'm looking at building some administrative tools into my application, and I'd like to be able to inspect user sessions for certain attributes. I know that I can use JMX to make calls to the (session) Manager, but it looks like the only things really exposed are: String[]

Re: TOMCAT CERTIFICATE RENEWAL

Prabu, On 2/19/24 02:40, Ganesan, Prabu wrote: Thanks for your information - its jks file do we have any specific command to pass them for renew the certificate? If you aren't sure how to do this, maybe you aren't the right person to try to do this. -chris

Re: ConnectionPool JDBC vs. DBCP

Andreas, On 2/16/24 02:21, Döscher, Andreas (ESI) wrote: Moin, in the docpage https://tomcat.apache.org/tomcat-10.1-doc/jdbc-pool.html it says The JDBC Connection Pool org.apache.tomcat.jdbc.pool is a replacement or an alternative to the Apache Commons DBCP connection pool. So why do we

Re: Tomcat/Java starts using too much memory and not by the heap or non-heap memory

Chuck and Brian, On 2/15/24 10:53, Chuck Caldarale wrote: On Feb 15, 2024, at 09:04, Brian Braun wrote: I discovered the JCMD command to perform the native memory tracking. When running it, after 3-4 days since I started Tomcat, I found out that the compiler was using hundreds of MB and

Re: [OT] Tomcat not syncing existing sessions on restart

Manak, On 2/12/24 10:33, Manak Bisht wrote: Chris, On Mon, 12 Feb 2024, 20:52 Christopher Schultz, < ch...@christopherschultz.net> wrote: I wouldn't refuse to configure, since anyone using 0.0.0.0 with /separate/ hosts wouldn't experience this problem. I am using separate host

Re: Tomcat Instance unable to connect to DB with TCPS

Michael, On 2/8/24 21:54, Kebret, Michael wrote: Tomcat version 9.0.83 running on Linux redhat 7 java 11.0.20. When changing the protocol from TCP to TCPS in Catalina.properties and in server.xml we have attribute truststorePassword= (tested with both cleartext and encrypted) password

Re: [OT] Tomcat not syncing existing sessions on restart

Mark, On 2/9/24 06:14, Mark Thomas wrote: With the Receiver using address="0.0.0.0" I see the same issues you do. I'm not yet convinced that is a bug. If this is known to essentially always not-work... should we log something at startup? I wouldn't refuse to configure, since anyone using

Re: Persistent Manager Implementation Question

Miguel, On 2/8/24 15:49, Miguel Vidal wrote: Im trying to configure correctly in 2 different applications : Persistent Manager Implementation using a mysqldb as a datasource. Do you have both PersistentManager configurations pointing at the same database and same set of tables? I think it

Re: Operation not permitted errors [EXTERNAL]

ne if it's a general Java issue or the specific Tomcat-hosted environment that won't work? -chris -Original Message----- From: Christopher Schultz Sent: Tuesday, February 6, 2024 4:18 PM To: users@tomcat.apache.org Subject: Re: Operation not permitted errors [EXTERNAL] ** CAUTION: Extern

Re: Operation not permitted errors

Shawn, On 2/6/24 13:52, Beard, Shawn wrote: An application we have running in Tomcat 9 using Java 8 is throwing this error when trying to create a file: java.nio.file.FileSystemException /path/to/filesystem/202311WEB/040389461310_08_37_246.jpg: Operation not permitted at

Re: Web socket connections scalability

Saurav, On 2/5/24 12:07, Saurav Sarkar wrote: We are on Tomcat 9.0.44 . I understand NIO HTTP connector is used by default in Tomcat. We are planning to enable web socket communication. I would like to understand how many parallel web socket connections can be opened ? A lot. I understand

Re: Return a custom page in the event of a client requesting a non-existent resource on tomcat9

Kaushal and Mark, On 2/4/24 15:00, Mark Thomas wrote: On 02/02/2024 18:48, Kaushal Shriyan wrote: Hi, I am running tomcat version 9.0.84 on Red Hat Enterprise Linux release 8.7 (Ootpa). Is there a way to configure the server to return a custom page in the event of a client requesting a

Re: Session Cookie Logging

Dan, On 2/1/24 11:54, Dan McLaughlin wrote: I was able to identify the problem - there was a session configuration with cookie configuration in the catalina-base/web.xml file. catalina-base/conf/web.xml? I did mention on 26 Jan that this wasn't a good idea and could be causing this kind of

Re: Cannot start java issue after Tomcat9 and JDK 11 updates

Lori, On 2/1/24 10:35, Lori Kilen wrote: Hello, I have a Windows server (v2019) and I've updated java to Corretto jdk11.0.22_7 and Tomcat to 9.0.85. I added Tomcat as a Windows Service. I can start Tomcat from CMD using startup.bat and I can open localhost:8080 in a browser to display

Re: Rotating/archiving catalina.out

Aryeh, On 1/29/24 15:28, Aryeh Friedman wrote: We need to shrink the size of catalina.out but looking at the logging documentation I do not see any way to do this with the standard logging.properties (or else where). Due to the nature of the production site we never bring it completely down

Re: Session Cookie Logging

Dan, On 1/26/24 02:44, Dan McLaughlin wrote: Well, so much for that theory. __Secure-JSESSIONID still sets the sessionCookiePath to /. I even removed the entire session-config from the web.xml and turned on copyXML to extract the secure#Foo.xml out to the conf/Catalina/localhost folder. Based

Re: Cannot Start Tomcat Windows Service_01/21/24

To whom it may concern, On 1/21/24 2:59 PM, support wrote: I receive the Windows error below every time I try to start the Tomcat Windows service after modifying the server.xml file to require TLS. I used the instructions below and other online sources to find the proper syntax to modify

Re: EOL - Tomcat versions

Aryeh, On 1/20/24 4:19 AM, Aryeh Friedman wrote: Top posting since my comments are not 100% relevant to the issue in the thread (i.e. related but not in detail). It would be nice if Tomcat published EOL's since there are applications (like HIPAA webapps [I do remote cardiac monitoring]) that

Re: EOL - Tomcat versions

Francisco, On 1/19/24 14:06, Francisco Dellanio Leite Alencar wrote: Is it possible to consider that the minimum support time of Apache Tomcat 9.0.X is until 2027 (10 years since Released)? Did you take a look at the mailing list thread references? -chris On 2024/01/08 08:42:28 Mark Thomas

Re: Getting Two times login page issue.

Mohit, Please don't hijack threads. On 1/18/24 20:08, Chaudhary, Mohit wrote: Hello Team , We are facing a issue with the tomcat application login URL , where it is asking twice for login to the user , with first login it will redirect again to the login page , while reentering the

Re: Consultation on disabling insecure HTTP requests in Tomcat

Marc, etc., On 1/18/24 05:10, Mark Thomas wrote: On 18/01/2024 09:22, 2460873257 wrote: Hi Tomcat Experts：        I'm trying to Looking for a solution to disable the tomcat * Options request, Why? +1 What's wrong with OPTIONS requests? They allow some basic security checks to succeed

Re: Tomcat dbcp2 connection pool configuration

Hello, On 1/11/24 11:08, அருள்ராஜன் அ லை wrote: Hi We are using Tomcat 9.0.84 and Tomcat DBCP2 connection pool and the DB is Oracle 19c. We are seeing the closed connections and the standment objects are not cleared even after the connection says closed. Anybody faced similar issue ? Here is

Re: Problems with cross app uploads (migrating from 9.0.35 to 9.0.84)

Aryeh, On 1/11/24 15:07, Aryeh Friedman wrote: TL;DR (see inline for details): Problem found and worked around (root cause still unknown but likely a bug in OpenJDK 21's standard lib [see below]) On Thu, Jan 11, 2024 at 8:43 AM Christopher Schultz wrote: Aryeh, On 1/10/24 17:48, Aryeh

  1   2   3   4   5   6   7   8   9   10   >