Re: Does Tomcat server printout System.out.print infor?

2019-05-14 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Karen,

On 5/14/19 07:45, Karen Goh wrote:
> On Tue, 5/14/19, Christopher Schultz 
> wrote: On 5/11/19 22:39, Karen Goh wrote:
>> Currently, I am uploading a new .war file up to my hosting 
>> company.
>> 
>>> However, I am puzzled how things work and would like to check
>>> what is the norm out there. They are using httpd apache server
>>> and tomcat.>> Basically, I have subscribed a private Tomcat
>>> server so I get an instance of Tomcat server - 8.0.27.
> 
>> That version is no longer supported by the "vendor" (Apache). You
>>  should tell your hosting company that you want a supported
>> version if they are going to charge you for it :)
> 
> May I know what version should I go for ?

I would ask for 8.5.40 (or close) or 9.0.19 (or close). Those are the
two currently support versions undergoing active development. Tomcat
7.0.x is still supported, but not much work is being done there anymore.

>> What kind of access do you have for the server? If you have shell
>>  access, you can probably get the logs. Using System.out.println
>> is not a great idea as it's pretty inflexible. It's better to use
>> a "proper" logging system where you can specify the log file
>> name, etc.
> 
> I do have access to the Catalina log.

Good.

> The technical support guy just told me that they have put in the 
> logging jar for me in their Tomcat server!

That shouldn't be necessary. System.out.println usually goes to
catalina.out, so you should already be all set. It's possible to
redirect it on a per-context basis, but then it just goes into another
file, also in the logs/ directory. Do you have any other log files in
there alongside catalina.out?


>> If you are using container-managed authentication (which is what
>>  Tomcat Realms provide), then you have to trust the hosting 
>> provider. There is no way to prevent the hosting provider from 
>> seeing any secrets you have in that configuration.
> 
> I am now mulling if I should use JWT.  In this case, I can skip
> the Realm configuration in tomcat right ?

I have no experience with JWT. But if you don't trust your hosting
provider, how can you trust them not to intercept your traffic, look
at your databases, etc.? Your realm configuration is the least of your
worries.

- -chris
-BEGIN PGP SIGNATURE-
Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/
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=/ZG2
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Does Tomcat server printout System.out.print infor?

2019-05-14 Thread Karen Goh



On Tue, 5/14/19, Christopher Schultz  wrote:

 Subject: Re: Does Tomcat server printout System.out.print infor?
 To: users@tomcat.apache.org
 Date: Tuesday, May 14, 2019, 5:37 AM
 
 -BEGIN PGP SIGNED
 MESSAGE-
 Hash: SHA256
 
 Karen,
 
 On 5/11/19 22:39, Karen Goh wrote:
 > Currently, I am uploading a new .war file
 up to my hosting
 > company.
 > 
 > However, I am
 puzzled how things work and would like to check what
 > is the norm out there.
 > 
 > They are using httpd
 apache server and tomcat.
 > 
 > Basically, I have subscribed a private
 Tomcat server so I get an 
 > instance of
 Tomcat server - 8.0.27.
 That version is no
 longer supported by the "vendor" (Apache). You
 should tell your hosting company that you want
 a supported version if
 they are going to
 charge you for it :)
 
May I know what version should I go for ?
 >
 But, the re-start of server is not in my control.
 > 
 > I would like to know
 if this is the normal environment in a web
 > hosting company ?
 
 Inconvenient, perhaps, but not necessarily out
 of the ordinary.
 
 >
 Another thing is that, in my newly uploaded war file, I
 don't get
 > to see any
 System.out.println infor in my code, which I believe it 
 > should be printed out, as per my last log
 file indication in the
 > web hosting
 company.
 
 If it's
 "their" instance and not yours, then you probably
 won't see
 that. What kind of access do
 you have for the server? If you have
 shell
 access, you can probably get the logs. Using
 System.out.println
 is not a great idea as
 it's pretty inflexible. It's better to use a
 "proper" logging system where you can
 specify the log file name, etc.
 
I do have access to the Catalina log.
The technical support guy just told me that they have put in the logging jar 
for me in their Tomcat server!
 > What they told me is "Only if there
 is system level operation. For 
 >
 example, unloading/reloading a war file would have
 logged."
 > 
 > So,
 please help me know if it is not possible to see 
 > system.out.print infor as what I have put
 in the code in my java 
 > class ?
 > 
 > Another thing is
 that I am going to put in the Tomcat Realm for the
 >  log-in module and I am wondering where
 is the privacy since I do
 > not have the
 full control over Tomcat in this web hosting
 > environment ?
 
 If you are using container-managed
 authentication (which is what
 Tomcat Realms
 provide), then you have to trust the hosting provider.
 There is no way to prevent the hosting provider
 from seeing any
 secrets you have in that
 configuration.

I am now mulling if I should use JWT.  In this case, I can skip the Realm 
configuration in tomcat right ?
 
 - -chris
 -BEGIN PGP SIGNATURE-
 Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/
 
 iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAlzZ450ACgkQHPApP6U8
 pFi/EhAAhVS64ib8GzAl6PNLISm/rYeZ765eFg9eqRwCpPnss6ZuW/kD9moznKhN
 cj17X84itq3VihkRV+S/xnVM8TZ7OG71dwyhgrQUDcixuU9F37GVF16K5/gqHrF1
 cu5QrMWw9oPFIEUWEi3jaUJF233Jm9y5IgHCyyieAbcDiCm5Gl9NVd1opQHWBkKZ
 YqH0xGVGxADAf9QiFnkmX5ZEq2REaGr6sV5b2oKgQCKv2iEoCvWxFYuyqG1iIbz1
 wgbHqOy/adSdqvN704HcMaLTB7sfWBppp5RQyzN4Pz0Dx45845JRTWEdZpZ+YTop
 1Xa1NhkYd/MqV+VZoi0Ivd+pvva5cGKR4zPFKXW9KRFw3Gl+cLoQPlyXxN8k3yZv
 PDCDlRqAFoAZakJ6BC4HHarAPJzRWGPON1UWhtXR7VdLXCRhcLcMMZg1UX3n9HJ+
 ycw3haS99/0GPs1kMLNZ2Jk0QGf7v/lrU84PDQG8l27hJ8p4lJ4TqwxqMR0Nx9Uv
 iTpGodreOFJ+FXDegxYZNyrnOyOAuVl6Qi3iTz5bphuUa0FLrcX8pSJIt5PtgEFj
 qr71idqFeagCbbDJw/CtqchhEsTLyvfTFoNcTD2C5xuoG/Bo113/SKi4ffWTagxz
 y+nNPdRaKZ+dR+JotM37+7BYKxtNGnabaNT4nMUT04pHOdCmPSw=
 =kD0S
 -END PGP
 SIGNATURE-
 
 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org
 
 

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Does Tomcat server printout System.out.print infor?

2019-05-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Karen,

On 5/11/19 22:39, Karen Goh wrote:
> Currently, I am uploading a new .war file up to my hosting
> company.
> 
> However, I am puzzled how things work and would like to check what
> is the norm out there.
> 
> They are using httpd apache server and tomcat.
> 
> Basically, I have subscribed a private Tomcat server so I get an 
> instance of Tomcat server - 8.0.27.
That version is no longer supported by the "vendor" (Apache). You
should tell your hosting company that you want a supported version if
they are going to charge you for it :)

> But, the re-start of server is not in my control.
> 
> I would like to know if this is the normal environment in a web
> hosting company ?

Inconvenient, perhaps, but not necessarily out of the ordinary.

> Another thing is that, in my newly uploaded war file, I don't get
> to see any System.out.println infor in my code, which I believe it 
> should be printed out, as per my last log file indication in the
> web hosting company.

If it's "their" instance and not yours, then you probably won't see
that. What kind of access do you have for the server? If you have
shell access, you can probably get the logs. Using System.out.println
is not a great idea as it's pretty inflexible. It's better to use a
"proper" logging system where you can specify the log file name, etc.

> What they told me is "Only if there is system level operation. For 
> example, unloading/reloading a war file would have logged."
> 
> So, please help me know if it is not possible to see 
> system.out.print infor as what I have put in the code in my java 
> class ?
> 
> Another thing is that I am going to put in the Tomcat Realm for the
>  log-in module and I am wondering where is the privacy since I do
> not have the full control over Tomcat in this web hosting
> environment ?

If you are using container-managed authentication (which is what
Tomcat Realms provide), then you have to trust the hosting provider.
There is no way to prevent the hosting provider from seeing any
secrets you have in that configuration.

- -chris
-BEGIN PGP SIGNATURE-
Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/
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=kD0S
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Does Tomcat server printout System.out.print infor?

2019-05-12 Thread John Dale
It is pretty normal.  If you don't want to deal with the systems
administration of your server, you can lease a tomcat instance and
deploy your war file.   A host will typically help you with some of
the configuration and management, and notify you if you have deployed
some naughty code that is consuming server resources.  This is
somewhere in between a WUSIWUG and a fill cloud server instance of,
say, Linux.

On 5/11/19, Karen Goh  wrote:
> Hello experts,
>
> Currently, I am uploading a new .war file up to my hosting company.
>
> However, I am puzzled how things work and would like to check what is the
> norm out there.
>
> They are using httpd apache server and tomcat.
>
> Basically, I have subscribed a private Tomcat server so I get an instance of
> Tomcat server - 8.0.27.
>
> But, the re-start of server is not in my control.
>
> I would like to know if this is the normal environment in a web hosting
> company ?
>
> Another thing is that, in my newly uploaded war file, I don't get to see any
> System.out.println infor in my code, which I believe it should be printed
> out, as per my last log file indication in the web hosting company.
>
> What they told me is
> "Only if there is system level operation. For example, unloading/reloading a
> war file would have logged."
>
> So, please help me know if it is not possible to see system.out.print infor
> as what I have put in the code in my java class ?
>
> Another thing is that I am going to put in the Tomcat Realm for the log-in
> module and I am wondering where is the privacy since I do not have the full
> control over Tomcat in this web hosting environment ?
>
> Thanks & regards,
> Karen
>
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Does Tomcat server printout System.out.print infor?

2019-05-11 Thread Karen Goh



On Sun, 5/12/19, Jason Wee  wrote:

 Subject: Re: Does Tomcat server printout System.out.print infor?
 To: "Tomcat Users List" , "Karen Goh" 

 Date: Sunday, May 12, 2019, 10:52 AM
 
 default tomcat , when you print,
 logging should goes to catalina.out.
 In any
 case, check logging.properties in tomcat directory on where
 the
 logging configured.
 
 as for realm, it can be configure in the
 context element, which mean
 in the
 META-INF/context.xml, see
 https://tomcat.apache.org/tomcat-8.0-doc/realm-howto.html#Configuring_a_Realm

Thanks for your fast response.
I went to the URL link but there is no concrete example as to how to set the 
Realm inside context.xml.

Could you kindly point me to some examples that I can follow ?

Furthermore, my web host directory setting is like this:

tomcat
---> conf
---> Catalina -> this will open up with server.xml, tomcat-users.xml, web.xml 
-> websitename.com
->test1.websitename.com
->test2.websitename.com
logs

How do I enable the logging in this case to show my system.out.println infor ?

and the META-INF/context.xml do you mean in my web app before I make it into 
ROOT.WAR I have to do the configuration before I built it into ROOT.war so 
there is no need for me to touch anything on the web host directory right ?

 
 On Sun, May 12, 2019 at 10:40 AM Karen Goh
 
 wrote:
 >
 > Hello
 experts,
 >
 >
 Currently, I am uploading a new .war file up to my hosting
 company.
 >
 > However,
 I am puzzled how things work and would like to check what is
 the norm out there.
 >
 > They are using httpd apache server and
 tomcat.
 >
 > Basically,
 I have subscribed a private Tomcat server so I get an
 instance of Tomcat server - 8.0.27.
 >
 > But, the re-start of server is not in my
 control.
 >
 > I would
 like to know if this is the normal environment in a web
 hosting company ?
 >
 >
 Another thing is that, in my newly uploaded war file, I
 don't get to see any System.out.println infor in my
 code, which I believe it should be printed out, as per my
 last log file indication in the web hosting company.
 >
 > What they told me
 is
 > "Only if there is system level
 operation. For example, unloading/reloading a war file would
 have logged."
 >
 >
 So, please help me know if it is not possible to see
 system.out.print infor as what I have put in the code in my
 java class ?
 >
 >
 Another thing is that I am going to put in the Tomcat Realm
 for the log-in module and I am wondering where is the
 privacy since I do not have the full control over Tomcat in
 this web hosting environment ?
 >
 > Thanks & regards,
 >
 Karen
 >
 >
 >
 -
 > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 > For additional commands, e-mail: users-h...@tomcat.apache.org
 >
 

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Does Tomcat server printout System.out.print infor?

2019-05-11 Thread Jason Wee
default tomcat , when you print, logging should goes to catalina.out.
In any case, check logging.properties in tomcat directory on where the
logging configured.

as for realm, it can be configure in the context element, which mean
in the META-INF/context.xml, see
https://tomcat.apache.org/tomcat-8.0-doc/realm-howto.html#Configuring_a_Realm

On Sun, May 12, 2019 at 10:40 AM Karen Goh  wrote:
>
> Hello experts,
>
> Currently, I am uploading a new .war file up to my hosting company.
>
> However, I am puzzled how things work and would like to check what is the 
> norm out there.
>
> They are using httpd apache server and tomcat.
>
> Basically, I have subscribed a private Tomcat server so I get an instance of 
> Tomcat server - 8.0.27.
>
> But, the re-start of server is not in my control.
>
> I would like to know if this is the normal environment in a web hosting 
> company ?
>
> Another thing is that, in my newly uploaded war file, I don't get to see any 
> System.out.println infor in my code, which I believe it should be printed 
> out, as per my last log file indication in the web hosting company.
>
> What they told me is
> "Only if there is system level operation. For example, unloading/reloading a 
> war file would have logged."
>
> So, please help me know if it is not possible to see system.out.print infor 
> as what I have put in the code in my java class ?
>
> Another thing is that I am going to put in the Tomcat Realm for the log-in 
> module and I am wondering where is the privacy since I do not have the full 
> control over Tomcat in this web hosting environment ?
>
> Thanks & regards,
> Karen
>
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Does Tomcat server printout System.out.print infor?

2019-05-11 Thread Karen Goh
Hello experts,

Currently, I am uploading a new .war file up to my hosting company.

However, I am puzzled how things work and would like to check what is the norm 
out there.

They are using httpd apache server and tomcat.  

Basically, I have subscribed a private Tomcat server so I get an instance of 
Tomcat server - 8.0.27.

But, the re-start of server is not in my control.  

I would like to know if this is the normal environment in a web hosting company 
?

Another thing is that, in my newly uploaded war file, I don't get to see any 
System.out.println infor in my code, which I believe it should be printed out, 
as per my last log file indication in the web hosting company.

What they told me is 
"Only if there is system level operation. For example, unloading/reloading a 
war file would have logged."

So, please help me know if it is not possible to see system.out.print infor as 
what I have put in the code in my java class ?

Another thing is that I am going to put in the Tomcat Realm for the log-in 
module and I am wondering where is the privacy since I do not have the full 
control over Tomcat in this web hosting environment ?

Thanks & regards,
Karen


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org