Re: [OT] Running out of httpd worker threads (was: WELCOME to users@tomcat.apache.org)
Sahil, On 5/11/22 13:56, Verma, Sahil wrote: In our production environment, ApacheTomcat services went down. We have checked the logs and found below error - [Thu May 05 10:34:51.441668 2022] [mpm_event:error] [pid 27440:tid 140464737793792] AH00484: server reached MaxRequestWorkers setting, consider raising the MaxRequestWorkers setting Please help to find the root cause of the issue why services got stopped. Kindly let us know if any other information required. This is actually a log message from Apache httpd, not Apache Tomcat. There are, however, plenty of Apache httpd experts on this mailing list as well. Note that the log message says [error] but it's not telling you there was a failure, it's just telling you that your server is under enough load (simultaneous client requests) that you may want to reconfigure the server to handle more requests. Whether that's appropriate depends upon how stresses your hardware is under those circumstances. -chris -Original Message- From: users-h...@tomcat.apache.org Sent: Wednesday, May 11, 2022 11:25 PM To: Verma, Sahil Subject: WELCOME to users@tomcat.apache.org Hi! This is the ezmlm program. I'm managing the users@tomcat.apache.org mailing list. I'm working for my owner, who can be reached at users-ow...@tomcat.apache.org. Acknowledgment: I have added the address sverm...@dxc.com to the users mailing list. Welcome to users@tomcat.apache.org! Please save this message so that you know the address you are subscribed under, in case you later want to unsubscribe or change your subscription address. --- Administrative commands for the users list --- I can handle administrative requests automatically. Please do not send them to the list address! Instead, send your message to the correct command address: To subscribe to the list, send a message to: To remove your address from the list, send a message to: Send mail to the following for info and FAQ for this list: Similar addresses exist for the digest list: To get messages 123 through 145 (a maximum of 100 per request), mail: To get an index with subject and author for messages 123-456 , mail: They are always returned as sets of 100, max 2000 per request, so you'll actually get 100-499. To receive all messages with the same subject as message 12345, send a short message to: The messages should contain one line or word of text to avoid being treated as sp@m, but I will ignore their content. Only the ADDRESS you send to is important. You can start a subscription for an alternate address, for example "john@host.domain", just add a hyphen and your address (with '=' instead of '@') after the command word: To stop subscription for this address, mail: In both cases, I'll send a confirmation message to that address. When you receive it, simply reply to it to complete your subscription. If despite following these instructions, you do not get the desired results, please contact my owner at users-ow...@tomcat.apache.org. Please be patient, my owner is a lot slower than I am ;-) --- Enclosed is a copy of the request I received. Return-Path: Received: (qmail 52135 invoked by uid 99); 11 May 2022 17:54:43 - Received: from spamproc1-he-de.apache.org (HELO spamproc1-he-de.apache.org) (116.203.196.100) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 11 May 2022 17:54:43 + Received: from localhost (localhost [127.0.0.1]) by spamproc1-he-de.apache.org (ASF Mail Server at spamproc1-he-de.apache.org) with ESMTP id BCD701FF0FC for ; Wed, 11 May 2022 17:54:42 + (UTC) X-Virus-Scanned: Debian amavisd-new at spamproc1-he-de.apache.org X-Spam-Flag: NO X-Spam-Score: 0.099 X-Spam-Level: X-Spam-Status: No, score=0.099 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, POISEN_SPAM_PILL=0.1, POISEN_SPAM_PILL_1=0.1, POISEN_SPAM_PILL_3=0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=disabled Authentication-Results: spamproc1-he-de.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=dxc.com Received: from mx1-he-de.apache.org ([116.203.227.195]) by localhost (spamproc1-he-de.apache.org [116.203.196.100]) (amavisd-new, port 10024) with ESMTP id TcSHZayvXWFL for ; Wed, 11 May 2022 17:54:41 + (UTC) Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=67.219.250.2; helo=mail1.bemta35.messagelabs.com; envelope-from=sverm...@dxc.com; receiver= Received: from mail1.bemta35.messagelabs.com (mail1.bemta35.messagelabs.com [67.219.250.2]) by mx1-he-de.apache.org (ASF Mail Server at mx1-he-de.apache.org) with ESMTPS id 68A197ED15 for ; Wed, 11 May 2022 17:54:41 + (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=dxc.com; s=DXCSelector1; t=1652291673; i=@dxc.com;
RE: WELCOME to users@tomcat.apache.org
Hi Team, In our production environment, ApacheTomcat services went down. We have checked the logs and found below error - [Thu May 05 10:34:51.441668 2022] [mpm_event:error] [pid 27440:tid 140464737793792] AH00484: server reached MaxRequestWorkers setting, consider raising the MaxRequestWorkers setting Please help to find the root cause of the issue why services got stopped. Kindly let us know if any other information required. Thanks and Regards, Sahil Verma -Original Message- From: users-h...@tomcat.apache.org Sent: Wednesday, May 11, 2022 11:25 PM To: Verma, Sahil Subject: WELCOME to users@tomcat.apache.org Hi! This is the ezmlm program. I'm managing the users@tomcat.apache.org mailing list. I'm working for my owner, who can be reached at users-ow...@tomcat.apache.org. Acknowledgment: I have added the address sverm...@dxc.com to the users mailing list. Welcome to users@tomcat.apache.org! Please save this message so that you know the address you are subscribed under, in case you later want to unsubscribe or change your subscription address. --- Administrative commands for the users list --- I can handle administrative requests automatically. Please do not send them to the list address! Instead, send your message to the correct command address: To subscribe to the list, send a message to: To remove your address from the list, send a message to: Send mail to the following for info and FAQ for this list: Similar addresses exist for the digest list: To get messages 123 through 145 (a maximum of 100 per request), mail: To get an index with subject and author for messages 123-456 , mail: They are always returned as sets of 100, max 2000 per request, so you'll actually get 100-499. To receive all messages with the same subject as message 12345, send a short message to: The messages should contain one line or word of text to avoid being treated as sp@m, but I will ignore their content. Only the ADDRESS you send to is important. You can start a subscription for an alternate address, for example "john@host.domain", just add a hyphen and your address (with '=' instead of '@') after the command word: To stop subscription for this address, mail: In both cases, I'll send a confirmation message to that address. When you receive it, simply reply to it to complete your subscription. If despite following these instructions, you do not get the desired results, please contact my owner at users-ow...@tomcat.apache.org. Please be patient, my owner is a lot slower than I am ;-) --- Enclosed is a copy of the request I received. Return-Path: Received: (qmail 52135 invoked by uid 99); 11 May 2022 17:54:43 - Received: from spamproc1-he-de.apache.org (HELO spamproc1-he-de.apache.org) (116.203.196.100) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 11 May 2022 17:54:43 + Received: from localhost (localhost [127.0.0.1]) by spamproc1-he-de.apache.org (ASF Mail Server at spamproc1-he-de.apache.org) with ESMTP id BCD701FF0FC for ; Wed, 11 May 2022 17:54:42 + (UTC) X-Virus-Scanned: Debian amavisd-new at spamproc1-he-de.apache.org X-Spam-Flag: NO X-Spam-Score: 0.099 X-Spam-Level: X-Spam-Status: No, score=0.099 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, POISEN_SPAM_PILL=0.1, POISEN_SPAM_PILL_1=0.1, POISEN_SPAM_PILL_3=0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=disabled Authentication-Results: spamproc1-he-de.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=dxc.com Received: from mx1-he-de.apache.org ([116.203.227.195]) by localhost (spamproc1-he-de.apache.org [116.203.196.100]) (amavisd-new, port 10024) with ESMTP id TcSHZayvXWFL for ; Wed, 11 May 2022 17:54:41 + (UTC) Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=67.219.250.2; helo=mail1.bemta35.messagelabs.com; envelope-from=sverm...@dxc.com; receiver= Received: from mail1.bemta35.messagelabs.com (mail1.bemta35.messagelabs.com [67.219.250.2]) by mx1-he-de.apache.org (ASF Mail Server at mx1-he-de.apache.org) with ESMTPS id 68A197ED15 for ; Wed, 11 May 2022 17:54:41 + (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=dxc.com; s=DXCSelector1; t=1652291673; i=@dxc.com; bh=AYlNUORjdD96V1Y7SYiGLP3+0Wb+gqh5r3FxfEiUC1c=; h=From:To:Subject:Date:Message-ID:References:In-Reply-To: Content-Type:Content-Transfer-Encoding:MIME-Version; b=UK0SFURP0WREua4cv3m1B3TmSXKRewRpNRYo6yHjtvcdJ+vq08mzOB0BjoCHOtE+y 0szQAsWsxszpz+393b3hAcB14bqusqHMOILJkjJ97LJv7tv8YF4fU61cXKuQ9sIbau 2u3ntI8OG28UBHW/hBPrWHbZPeW9NEKHiJvJu9V7qL9b9ZWF9QU5CvFItMCh90wStP lG5jPOQD+e8YheAmwZG2Pediiuc62orpW0D6uh8SQqJQ6fgYVS17LTE8uwZ/ufI+/z dg3z1eOFPwHUuPxPdb6DfT1Cqfi1CL11COKkz/d37m9+W
Re: WELCOME to users@tomcat.apache.org
Hi My code is running on local host and i am hitting one of my urls as below curl -k -vv --http1.1 "https://localhost:8443/versa/login; -H 'Host: google.com' Now i m a trying to read the url in my code using following StringBuffer url = httpServletRequest.getRequestURL(); The value is always as follows whether the protocal HTTP/1.1 or HTTP/2 https://google.com/versa/login how to read the original url here? --- Thanks and Regards, Anurag Sharma. From: users-h...@tomcat.apache.org Sent: 11 March 2021 17:40 To: Anurag Sharma Subject: WELCOME to users@tomcat.apache.org Hi! This is the ezmlm program. I'm managing the users@tomcat.apache.org mailing list. I'm working for my owner, who can be reached at users-ow...@tomcat.apache.org. Acknowledgment: I have added the address anur...@versa-networks.com to the users mailing list. Welcome to users@tomcat.apache.org! Please save this message so that you know the address you are subscribed under, in case you later want to unsubscribe or change your subscription address. --- Administrative commands for the users list --- I can handle administrative requests automatically. Please do not send them to the list address! Instead, send your message to the correct command address: To subscribe to the list, send a message to: To remove your address from the list, send a message to: Send mail to the following for info and FAQ for this list: Similar addresses exist for the digest list: To get messages 123 through 145 (a maximum of 100 per request), mail: To get an index with subject and author for messages 123-456 , mail: They are always returned as sets of 100, max 2000 per request, so you'll actually get 100-499. To receive all messages with the same subject as message 12345, send a short message to: The messages should contain one line or word of text to avoid being treated as sp@m, but I will ignore their content. Only the ADDRESS you send to is important. You can start a subscription for an alternate address, for example "john@host.domain", just add a hyphen and your address (with '=' instead of '@') after the command word: To stop subscription for this address, mail: In both cases, I'll send a confirmation message to that address. When you receive it, simply reply to it to complete your subscription. If despite following these instructions, you do not get the desired results, please contact my owner at users-ow...@tomcat.apache.org. Please be patient, my owner is a lot slower than I am ;-) --- Enclosed is a copy of the request I received. Return-Path: Received: (qmail 80583 invoked by uid 99); 12 Mar 2021 01:40:36 - Received: from spamproc1-he-de.apache.org (HELO spamproc1-he-de.apache.org) (116.203.196.100) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 12 Mar 2021 01:40:36 + Received: from localhost (localhost [127.0.0.1]) by spamproc1-he-de.apache.org (ASF Mail Server at spamproc1-he-de.apache.org) with ESMTP id 6241A1FF39B for ; Fri, 12 Mar 2021 01:40:35 + (UTC) X-Virus-Scanned: Debian amavisd-new at spamproc1-he-de.apache.org X-Spam-Flag: NO X-Spam-Score: 0.199 X-Spam-Level: X-Spam-Status: No, score=0.199 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.2, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=disabled Authentication-Results: spamproc1-he-de.apache.org (amavisd-new); dkim=pass (1024-bit key) header.d=versanetworks.onmicrosoft.com Received: from mx1-ec2-va.apache.org ([116.203.227.195]) by localhost (spamproc1-he-de.apache.org [116.203.196.100]) (amavisd-new, port 10024) with ESMTP id XeJgKn7lPAGk for ; Fri, 12 Mar 2021 01:40:33 + (UTC) Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=40.107.243.134; helo=nam12-dm6-obe.outbound.protection.outlook.com; envelope-from=anur...@versa-networks.com; receiver= Received: from NAM12-DM6-obe.outbound.protection.outlook.com (mail-dm6nam12on2134.outbound.protection.outlook.com [40.107.243.134]) by mx1-ec2-va.apache.org (ASF Mail Server at mx1-ec2-va.apache.org) with ESMTPS id 70BEFBD09A for ; Fri, 12 Mar 2021 01:40:33 + (UTC) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=d5WMtT+wHRhm6Vaux09IZJSxhuyixarP00zCWVw9arvAkg/mvX5iCVcdbcrxIjVhubbwzZGxfGWMABd04CBGjiEhwUqWfUP+qtL6R5bLMXImq8WXUKy8BlER1hHredOilgSisxQQl41TtxOwWYTsJ/NRT7zTW6V55np3avAcvxHnvbeAFpiAVArtRlUwMGqsx+Omdp754wvO0XUqoXqnsb0VTv7bDVCRYCEFWuxd6KFTUGYA68WqsQDesc8gQLspWNRwlKSj5u/SvKEPH9l+yqGY39+mF5Hd4yzg9v7jkRtTZpDah6x7UdKMgh1cVyQpkF7BWq2REs7J3ECxQKN5uQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-Sen
Tomcat authentication with IIS front-end (was: WELCOME to users@tomcat.apache.org)
The key conditions for all this to happen as planned are thus : - IIS must be set up to authenticate the browser requests, using Windows Integrated Authentication. - the Tomcat AJP Connector must have the attribute 'tomcatAuthentication="false"' set (it already has, so this is ok already) - the webapp must be set up so as to retrieve the user-id from Tomcat (container-based authentication) To check all this, I suggest that you temporarily get rid of the "Siebel complication" and do the following : create and install under Tomcat a simple webapp (or JSP page), which does just one thing : retrieve the current user-id from Tomcat, and print it as a response. Arrange for the corresponding webapp URL to be proxied by IIS to Tomcat. And then call this webapp URL from a user browser (through IIS of course). If the setup is correct, then when you call that webapp, it should automatically show the Windows login user-id of the user (without any login dialog happening on the user side). (I am a terrible Java programmer, and unfortunately unable to tell you exactly how to create such a webapp/JSP; but someone else on this list hopefully can help). Thanks & Regards, Suraj Agrawal -Original Message----- From: André Warnier (tomcat) [mailto:a...@ice-sa.com] Sent: Thursday, January 4, 2018 9:07 AM To: users@tomcat.apache.org Subject: Re: WELCOME to users@tomcat.apache.org Hi. On 03.01.2018 18:31, Agrawal, Suraj (CORP) wrote: Hi Team, We are currently working on "Apache Tomcat Version 8.0.22". We are using Apache to host javacontainer for Rest calls for our Siebel application. The javacontainer is listening to Port 9001 as below- We are trying to setup Windows Authentication in Apache by using Reverse Proxy with IIS, and have followed the below steps as per the Apache documentation. ---Steps followed : There are three steps to configuring IIS to provide Windows authentication. They are: 1. Configure IIS as a reverse proxy for Tomcat (see the IIS Web Server How-To). This is done and working as expected There is a bit of confusing information in the page http://tomcat.apache.org/connectors-doc/webserver_howto/iis.html in that it talks (in the title and elsewhere) of the "ISAPI redirector", but then later it mentions "The mod_jk module uses the AJP protocol to send requests to the Tomcat containers". In fact, "mod_jk" and "ISAPI redirector" are functionaly the same thing (and probably much the same code), but - mod_jk is the plugin proxy module to use with an Apache httpd webserver front-end (under Linux and/or Windows) - isapi_redirector is the plugin proxy module to use with an IIS webserver front-end (Windows only) But /both/ use the same protocol to talk with the back-end Tomcat, and that protocol is AJP, not HTTP. So in both cases, what they are "talking to" is the AJP Connector in Tomcat, and not the HTTP Connector. The AJP protocol is somewhat different from HTTP : - both essentially carry the same information (requests and responses) but - HTTP carries all its information back and forth in a text form as per HTTP RFC - AJP encodes some of this information in a binary form (a bit more efficient) - one of the "binary" parameters which the AJP protocol does transmit from the front-end to the back-end, is the authenticated user-id on the front-end, if any. (HTTP does not normally do this in any standard way). At the Tomcat level (the AJP Connector), the attribute "tomcatAuthentication" (true/false) serves to tell Tomcat to either "believe" (false) the user-id that it receives from the front-end through AJP, or to ignore it (true) and do its own authentication anyway. At the Tomcat level, this "tomcatAuthentication" attribute only makes sense with the AJP Connector (and protocol). See : http://tomcat.apache.org/tomcat-8.5-doc/config/ajp.html#Common_Attributes (tomcatAuthentication AND tomcatAuthorization) while here : http://tomcat.apache.org/tomcat-8.5-doc/config/http.html#Common_Attributes this attribute is not mentioned (so if you add it, it will simply be ignored). 2. Configure IIS to use Windows authentication This is done and working as expected 3. Configure Tomcat to use the authentication user information from IIS by setting the tomcatAuthentication attribute on the AJP connector to false. Alternatively, set the tomcatAuthorization attribute to true to allow IIS to authenticate, while Tomcat performs the authorization. Right. But on which Tomcat connector did you set this ? (HTTP or AJP ?) Q1 We were able to configure the reverse proxy with Anon user but the Windows authentication is failing at Apache level with below error :- Thread[http-nio-9001-exec-15,5,main][2017-12-27 13:17:12.637] [null] Error while login : The username cannot be empty. Please select a username. Your problem may be there
RE: WELCOME to users@tomcat.apache.org
Thanks Andre for the help, We are routing the request from IIS 7.5 to Apache using reverse Proxy. It seems like Apache is not allowing the authentication nor its accepting the username and password passed from IIS. -- The AJP connector details in Server to XML were uncommented as shown in below, we added tomcatAuthentication="false" and still it was failing with empty username and password error. -- We are currently on Apache Tomcat 8.0.22, this is installation was part of our Siebel application suite, thus could not have all the necessary connector setting installed in it. Is there a way we can check and install AJP connector on the top of Apache Tomcat we got as a part of Siebel Application. -- Also with IIS we were using [UserSpecSource = Server] and [UserSpec = REMOTE_USER], are they the correct value for Tomcat webserver as well. Thanks & Regards, Suraj Agrawal -Original Message- From: André Warnier (tomcat) [mailto:a...@ice-sa.com] Sent: Thursday, January 4, 2018 9:07 AM To: users@tomcat.apache.org Subject: Re: WELCOME to users@tomcat.apache.org Hi. On 03.01.2018 18:31, Agrawal, Suraj (CORP) wrote: > Hi Team, > > We are currently working on "Apache Tomcat Version 8.0.22". We are > using Apache to host javacontainer for Rest calls for our Siebel > application. The javacontainer is listening to Port 9001 as below- > > protocol="HTTP/1.1"/> > > We are trying to setup Windows Authentication in Apache by using Reverse > Proxy with IIS, and have followed the below steps as per the Apache > documentation. > > ---Steps followed : > There are three steps to configuring IIS to provide Windows authentication. > They are: > 1. Configure IIS as a reverse proxy for Tomcat (see the IIS Web Server > How-To). > This is done and working as expected There is a bit of confusing information in the page http://tomcat.apache.org/connectors-doc/webserver_howto/iis.html in that it talks (in the title and elsewhere) of the "ISAPI redirector", but then later it mentions "The mod_jk module uses the AJP protocol to send requests to the Tomcat containers". In fact, "mod_jk" and "ISAPI redirector" are functionaly the same thing (and probably much the same code), but - mod_jk is the plugin proxy module to use with an Apache httpd webserver front-end (under Linux and/or Windows) - isapi_redirector is the plugin proxy module to use with an IIS webserver front-end (Windows only) But /both/ use the same protocol to talk with the back-end Tomcat, and that protocol is AJP, not HTTP. So in both cases, what they are "talking to" is the AJP Connector in Tomcat, and not the HTTP Connector. The AJP protocol is somewhat different from HTTP : - both essentially carry the same information (requests and responses) but - HTTP carries all its information back and forth in a text form as per HTTP RFC - AJP encodes some of this information in a binary form (a bit more efficient) - one of the "binary" parameters which the AJP protocol does transmit from the front-end to the back-end, is the authenticated user-id on the front-end, if any. (HTTP does not normally do this in any standard way). At the Tomcat level (the AJP Connector), the attribute "tomcatAuthentication" (true/false) serves to tell Tomcat to either "believe" (false) the user-id that it receives from the front-end through AJP, or to ignore it (true) and do its own authentication anyway. At the Tomcat level, this "tomcatAuthentication" attribute only makes sense with the AJP Connector (and protocol). See : http://tomcat.apache.org/tomcat-8.5-doc/config/ajp.html#Common_Attributes (tomcatAuthentication AND tomcatAuthorization) while here : http://tomcat.apache.org/tomcat-8.5-doc/config/http.html#Common_Attributes this attribute is not mentioned (so if you add it, it will simply be ignored). > > 2. Configure IIS to use Windows authentication > This is done and working as expected > > 3. Configure Tomcat to use the authentication user information from IIS by > setting the tomcatAuthentication attribute on the AJP connector to false. > Alternatively, set the tomcatAuthorization attribute to true to allow IIS to > authenticate, while Tomcat performs the authorization. > Right. But on which Tomcat connector did you set this ? (HTTP or AJP ?) > Q1 We were able to configure the reverse proxy with Anon user but the > Windows authentication is failing at Apache level with below error :- > Thread[http-nio-9001-exec-15,5,main] [2017-12-27 13:17:12.637] [null] Error > while login : The username cannot be empty. Please select a username. > Your problem may be there, with this "anonymous" authentication at the IIS level. Maybe the isapi_redirector interprets this as &qu
Re: WELCOME to users@tomcat.apache.org
e IIS/ISAPI redirector side, make sure that the settings specify the correct (AJP) port. This is all quite logical, but a bit convoluted, due to the many ways in which you can use a front-end with Tomcat, and the many ways in which one can do authentication/authorization in the WWW. I have found that it often helps to draw a schema in advance, such as browser <--(1)--> front-end (2) <-(4)---> tomcat (5) + proxy module (3) + Connector(6) where : (1) is the protocol used between the browser and the front-end http server (HTTP or HTTPS) (2) is the front-end webserver (Apache httpd or IIS (or others)), which can be doing its own authentication/authorization or not (3) is the proxy module add-on to (2). There are a number of possibilities here, depending on (2) and (4) (4) is the protocol used between the front-end webserver and Tomcat (HTTP, HTTPS or AJP) (5) is Tomcat, which can be doing its own authentication/authorization or not (6) is the Tomcat Connector, which depends on (3) and (4) Depending on the circumstances and on what you want to achieve in the end, the variable elements above allow for a lot of combinations. And that of course makes it rather difficult to provide a fully comprehensive, all-in-one-place documentation. Thanks & Regards, Suraj Agrawal -Original Message- From: users-h...@tomcat.apache.org [mailto:users-h...@tomcat.apache.org] Sent: Wednesday, January 3, 2018 12:03 PM To: Agrawal, Suraj (CORP) <suraj.agra...@adp.com> Subject: WELCOME to users@tomcat.apache.org Hi! This is the ezmlm program. I'm managing the users@tomcat.apache.org mailing list. I'm working for my owner, who can be reached at users-ow...@tomcat.apache.org. Acknowledgment: I have added the address suraj.agra...@adp.com to the users mailing list. Welcome to users@tomcat.apache.org! Please save this message so that you know the address you are subscribed under, in case you later want to unsubscribe or change your subscription address. --- Administrative commands for the users list --- I can handle administrative requests automatically. Please do not send them to the list address! Instead, send your message to the correct command address: To subscribe to the list, send a message to: <users-subscr...@tomcat.apache.org> To remove your address from the list, send a message to: <users-unsubscr...@tomcat.apache.org> Send mail to the following for info and FAQ for this list: <users-i...@tomcat.apache.org> <users-...@tomcat.apache.org> Similar addresses exist for the digest list: <users-digest-subscr...@tomcat.apache.org> <users-digest-unsubscr...@tomcat.apache.org> To get messages 123 through 145 (a maximum of 100 per request), mail: <users-get.123_...@tomcat.apache.org> To get an index with subject and author for messages 123-456 , mail: <users-index.123_...@tomcat.apache.org> They are always returned as sets of 100, max 2000 per request, so you'll actually get 100-499. To receive all messages with the same subject as message 12345, send a short message to: <users-thread.12...@tomcat.apache.org> The messages should contain one line or word of text to avoid being treated as sp@m, but I will ignore their content. Only the ADDRESS you send to is important. You can start a subscription for an alternate address, for example "john@host.domain", just add a hyphen and your address (with '=' instead of '@') after the command word:
Re: WELCOME to users@tomcat.apache.org
http server (HTTP or HTTPS) (2) is the front-end webserver (Apache httpd or IIS (or others)), which can be doing its own authentication/authorization or not (3) is the proxy module add-on to (2). There are a number of possibilities here, depending on (2) and (4) (4) is the protocol used between the front-end webserver and Tomcat (HTTP, HTTPS or AJP) (5) is Tomcat, which can be doing its own authentication/authorization or not (6) is the Tomcat Connector, which depends on (3) and (4) Depending on the circumstances and on what you want to achieve in the end, the variable elements above allow for a lot of combinations. And that of course makes it rather difficult to provide a fully comprehensive, all-in-one-place documentation. Thanks & Regards, Suraj Agrawal -Original Message- From: users-h...@tomcat.apache.org [mailto:users-h...@tomcat.apache.org] Sent: Wednesday, January 3, 2018 12:03 PM To: Agrawal, Suraj (CORP) <suraj.agra...@adp.com> Subject: WELCOME to users@tomcat.apache.org Hi! This is the ezmlm program. I'm managing the users@tomcat.apache.org mailing list. I'm working for my owner, who can be reached at users-ow...@tomcat.apache.org. Acknowledgment: I have added the address suraj.agra...@adp.com to the users mailing list. Welcome to users@tomcat.apache.org! Please save this message so that you know the address you are subscribed under, in case you later want to unsubscribe or change your subscription address. --- Administrative commands for the users list --- I can handle administrative requests automatically. Please do not send them to the list address! Instead, send your message to the correct command address: To subscribe to the list, send a message to: <users-subscr...@tomcat.apache.org> To remove your address from the list, send a message to: <users-unsubscr...@tomcat.apache.org> Send mail to the following for info and FAQ for this list: <users-i...@tomcat.apache.org> <users-...@tomcat.apache.org> Similar addresses exist for the digest list: <users-digest-subscr...@tomcat.apache.org> <users-digest-unsubscr...@tomcat.apache.org> To get messages 123 through 145 (a maximum of 100 per request), mail: <users-get.123_...@tomcat.apache.org> To get an index with subject and author for messages 123-456 , mail: <users-index.123_...@tomcat.apache.org> They are always returned as sets of 100, max 2000 per request, so you'll actually get 100-499. To receive all messages with the same subject as message 12345, send a short message to: <users-thread.12...@tomcat.apache.org> The messages should contain one line or word of text to avoid being treated as sp@m, but I will ignore their content. Only the ADDRESS you send to is important. You can start a subscription for an alternate address, for example "john@host.domain", just add a hyphen and your address (with '=' instead of '@') after the command word:
RE: WELCOME to users@tomcat.apache.org
Hi Team, We are currently working on "Apache Tomcat Version 8.0.22". We are using Apache to host javacontainer for Rest calls for our Siebel application. The javacontainer is listening to Port 9001 as below- We are trying to setup Windows Authentication in Apache by using Reverse Proxy with IIS, and have followed the below steps as per the Apache documentation. ---Steps followed : There are three steps to configuring IIS to provide Windows authentication. They are: 1. Configure IIS as a reverse proxy for Tomcat (see the IIS Web Server How-To). This is done and working as expected 2. Configure IIS to use Windows authentication This is done and working as expected 3. Configure Tomcat to use the authentication user information from IIS by setting the tomcatAuthentication attribute on the AJP connector to false. Alternatively, set the tomcatAuthorization attribute to true to allow IIS to authenticate, while Tomcat performs the authorization. Q1 We were able to configure the reverse proxy with Anon user but the Windows authentication is failing at Apache level with below error :- Thread[http-nio-9001-exec-15,5,main][2017-12-27 13:17:12.637] [null] Error while login : The username cannot be empty. Please select a username. Q2 Our configuration is using "HTTP" protocol, do we need to change the server.xml entry for 9001 to use AJP protocol and then add entry " tomcatAuthentication=False" Q3 Do we need to install AJP connector on top of Tomcat or its installed by default, or we do not need it for Windows Authentication. Thanks & Regards, Suraj Agrawal -Original Message- From: users-h...@tomcat.apache.org [mailto:users-h...@tomcat.apache.org] Sent: Wednesday, January 3, 2018 12:03 PM To: Agrawal, Suraj (CORP) <suraj.agra...@adp.com> Subject: WELCOME to users@tomcat.apache.org Hi! This is the ezmlm program. I'm managing the users@tomcat.apache.org mailing list. I'm working for my owner, who can be reached at users-ow...@tomcat.apache.org. Acknowledgment: I have added the address suraj.agra...@adp.com to the users mailing list. Welcome to users@tomcat.apache.org! Please save this message so that you know the address you are subscribed under, in case you later want to unsubscribe or change your subscription address. --- Administrative commands for the users list --- I can handle administrative requests automatically. Please do not send them to the list address! Instead, send your message to the correct command address: To subscribe to the list, send a message to: <users-subscr...@tomcat.apache.org> To remove your address from the list, send a message to: <users-unsubscr...@tomcat.apache.org> Send mail to the following for info and FAQ for this list: <users-i...@tomcat.apache.org> <users-...@tomcat.apache.org> Similar addresses exist for the digest list: <users-digest-subscr...@tomcat.apache.org> <users-digest-unsubscr...@tomcat.apache.org> To get messages 123 through 145 (a maximum of 100 per request), mail: <users-get.123_...@tomcat.apache.org> To get an index with subject and author for messages 123-456 , mail: <users-index.123_...@tomcat.apache.org> They are always returned as sets of 100, max 2000 per request, so you'll actually get 100-499. To receive all messages with the same subject as message 12345, send a short message to: <users-thread.12...@tomcat.apache.org> The messages should contain one line or word of text to avoid being treated as sp@m, but I will ignore their content. Only the ADDRESS you send to is important. You can start a subscription for an alternate address, for example "john@host.domain", just add a hyphen and your address (with '=' instead of '@') after the command word:
Re: WELCOME to users@tomcat.apache.org
On 23 Jan 2013, at 02:52, DHARMENDRA SETHI sethi.dharmen...@gmail.com wrote: Hi I just installed Eclipse (Version: Juno Service Release 1 Build id: 20120920-0800) and want to know the how to make Tomcat node show up in window - preferences. I know I am missing the plugin but am not sure which plugin to download? This would be an Eclipse question and one that is probably well documented there. p I have following software downloaded/installed - [image: Inline image 2] Thanks DK On Tue, Jan 22, 2013 at 9:22 PM, users-h...@tomcat.apache.org wrote: Hi! This is the ezmlm program. I'm managing the users@tomcat.apache.org mailing list. I'm working for my owner, who can be reached at users-ow...@tomcat.apache.org. Acknowledgment: I have added the address sethi.dharmen...@gmail.com to the users mailing list. Welcome to users@tomcat.apache.org! Please save this message so that you know the address you are subscribed under, in case you later want to unsubscribe or change your subscription address. --- Administrative commands for the users list --- I can handle administrative requests automatically. Please do not send them to the list address! Instead, send your message to the correct command address: To subscribe to the list, send a message to: users-subscr...@tomcat.apache.org To remove your address from the list, send a message to: users-unsubscr...@tomcat.apache.org Send mail to the following for info and FAQ for this list: users-i...@tomcat.apache.org users-...@tomcat.apache.org Similar addresses exist for the digest list: users-digest-subscr...@tomcat.apache.org users-digest-unsubscr...@tomcat.apache.org To get messages 123 through 145 (a maximum of 100 per request), mail: users-get.123_...@tomcat.apache.org To get an index with subject and author for messages 123-456 , mail: users-index.123_...@tomcat.apache.org They are always returned as sets of 100, max 2000 per request, so you'll actually get 100-499. To receive all messages with the same subject as message 12345, send a short message to: users-thread.12...@tomcat.apache.org The messages should contain one line or word of text to avoid being treated as sp@m, but I will ignore their content. Only the ADDRESS you send to is important. You can start a subscription for an alternate address, for example john@host.domain, just add a hyphen and your address (with '=' instead of '@') after the command word: users-subscribe-john=host.dom...@tomcat.apache.org To stop subscription for this address, mail: users-unsubscribe-john=host.dom...@tomcat.apache.org In both cases, I'll send a confirmation message to that address. When you receive it, simply reply to it to complete your subscription. If despite following these instructions, you do not get the desired results, please contact my owner at users-ow...@tomcat.apache.org. Please be patient, my owner is a lot slower than I am ;-) --- Enclosed is a copy of the request I received. Return-Path: sethi.dharmen...@gmail.com Received: (qmail 2373 invoked by uid 99); 23 Jan 2013 02:22:46 - Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 23 Jan 2013 02:22:46 + X-ASF-Spam-Status: No, hits=1.5 required=5.0 tests=HTML_MESSAGE,RCVD_IN_DNSWL_LOW,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of sethi.dharmendra@gmail.comdesignates 209.85.223.178 as permitted sender) Received: from [209.85.223.178] (HELO mail-ie0-f178.google.com) (209.85.223.178) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 23 Jan 2013 02:22:37 + Received: by mail-ie0-f178.google.com with SMTP id c12so13119109ieb.9 for users-sc.1358907612.mngongokjnbjkkgiplli-sethi.dharmendra= gmail@tomcat.apache.org; Tue, 22 Jan 2013 18:22:16 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:x-received:in-reply-to:references:date:message-id :subject:from:to:content-type; bh=rxIXeyPfIacgJ3qKEtynw4l7yO4GjiUyRCZb6wEmNC4=; b=gWGZnR3RJqWQ5vzfH91Wef2WRHW7+KkGl//jkdbd1DhZFyitvQjBzmcuAnzYYbtO7U w2tiqSgH3VBI8oPdKDcBpEMKnd4u2K1KF1VdOQeRkANNwF9a6cQj7vr+URovcoKmXRAM HuU1lBaL+28tiyXQvDZWuksM2cPsahtFs0+IvnhtWjiIJoP5rcHg4D4fOhYI2A6QLraj qF2fTGSnKgWWUYFIZgigTLctGUm1ixd2TkfYU8fe08RLcgjb2U6Z2EZHLrwj5xNro48J aVhGcZE2PbaewvApOdUITlgMXEn31aYMNsgEnXZb2RYUxArl6kQCGn9Had1d3HtcFbV8 gOvQ== MIME-Version: 1.0 X-Received: by 10.43.125.133 with SMTP id gs5mr16234899icc.54.1358907736763; Tue, 22 Jan 2013 18:22:16 -0800 (PST) Received: by 10.64.78.69 with HTTP; Tue, 22 Jan 2013 18:22:16 -0800 (PST) In-Reply-To: 1358907612.97014.ez...@tomcat.apache.org References: 1358907612.97014.ez...@tomcat.apache.org Date: Tue, 22 Jan 2013 21:22:16 -0500 Message-ID: CALnLOBzg3WUjCB0i=et__sbEu5tngsO= aw2iqq4b3+whold
Re: WELCOME to users@tomcat.apache.org
Hi there, We have recently switched to tomcat-5.5, on SuSE 9.3, and I ran into a strange problem that was not there before. I am using a custom script from catalina.out rotation. It works much the same way as cronolog, except it is much simpler and does more (if anyone wants to see/use it, let me know ;) ). The script is invoked using the same approach, from catalina.sh: I replace $CATALINA_BASE/logs/catalina.out 21 with | /u00/tomcat/bin/logger $CATALINA_BASE/logs/catalina 21 This used to work perfectly. But with ver.5.5, some startup and shutdown messages escape to the terminal. The rest goes to the script as before. It seems that for those messages, tomcat explicitly uses a file descriptor that corresponds to the terminal, or some such thing. Anyone has an idea why this is happening, and how I can capture the runaways? Any help would be greatly appreciated. Regards, Andy Tsouladze Escaping startup messages: May 8, 2007 5:45:41 PM org.apache.catalina.core.AprLifecycleListener lifecycleEvent INFO: The Apache Tomcat Native library which allows optimal performance in production environments was not found on the java.library.path: /usr/java/jre1.5.0_11/lib/amd64/server:/usr/java/jre1.5.0_11/lib/amd64:/usr/ java/jre1.5.0_11/../lib/amd64 May 8, 2007 5:45:41 PM org.apache.coyote.http11.Http11BaseProtocol init INFO: Initializing Coyote HTTP/1.1 on http-8080 May 8, 2007 5:45:42 PM org.apache.coyote.http11.Http11BaseProtocol init INFO: Initializing Coyote HTTP/1.1 on http-8443 May 8, 2007 5:45:42 PM org.apache.catalina.startup.Catalina load INFO: Initialization processed in 1776 ms May 8, 2007 5:45:42 PM org.apache.catalina.core.StandardService start INFO: Starting service Catalina May 8, 2007 5:45:42 PM org.apache.catalina.core.StandardEngine start INFO: Starting Servlet Engine: Apache Tomcat/5.5.17 May 8, 2007 5:45:42 PM org.apache.catalina.core.StandardHost start INFO: XML validation disabled May 8, 2007 5:45:43 PM org.apache.catalina.core.StandardContext start SEVERE: Error listenerStart May 8, 2007 5:45:43 PM org.apache.catalina.core.StandardContext start SEVERE: Context [/axis] startup failed due to previous errors May 8, 2007 5:45:44 PM org.apache.coyote.http11.Http11BaseProtocol start INFO: Starting Coyote HTTP/1.1 on http-8080 May 8, 2007 5:45:44 PM org.apache.coyote.http11.Http11BaseProtocol start INFO: Starting Coyote HTTP/1.1 on http-8443 May 8, 2007 5:45:44 PM org.apache.jk.common.ChannelSocket init INFO: JK: ajp13 listening on /0.0.0.0:8009 May 8, 2007 5:45:44 PM org.apache.jk.server.JkMain start INFO: Jk running ID=0 time=0/82 config=null May 8, 2007 5:45:44 PM org.apache.catalina.storeconfig.StoreLoader load INFO: Find registry server-registry.xml at classpath resource May 8, 2007 5:45:44 PM org.apache.catalina.startup.Catalina start INFO: Server startup in 2181 ms Escaping shutdown messages: May 8, 2007 5:47:25 PM org.apache.coyote.http11.Http11BaseProtocol pause INFO: Pausing Coyote HTTP/1.1 on http-8080 May 8, 2007 5:47:25 PM org.apache.coyote.http11.Http11BaseProtocol pause INFO: Pausing Coyote HTTP/1.1 on http-8443 csapp02:/u00/jakarta/bin # May 8, 2007 5:47:26 PM org.apache.catalina.core.StandardService stop INFO: Stopping service Catalina May 8, 2007 5:47:26 PM org.apache.coyote.http11.Http11BaseProtocol destroy INFO: Stopping Coyote HTTP/1.1 on http-8080 May 8, 2007 5:47:26 PM org.apache.coyote.http11.Http11BaseProtocol destroy INFO: Stopping Coyote HTTP/1.1 on http-8443 May 8, 2007 5:47:26 PM org.apache.catalina.core.AprLifecycleListener lifecycleEvent INFO: Failed shutdown of Apache Portable Runtime - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: WELCOME to users@tomcat.apache.org
Hello! I installed java 1.6 and tomcat 5.5.15 on a machine. (this combo works fine on other machines) When i try to start tomcat it writes the following errors to the log file: [2006-06-14 11:17:47] [173 javajni.c] [error] Given module not exists. [2006-06-14 11:17:47] [924 prunsrv.c] [error] Failed creating java C:\Program Files\Java\jre1.6.0\bin\client\jvm.dll [2006-06-14 11:17:47] [1179 prunsrv.c] [error] ServiceStart returned 1 [2006-06-14 11:17:47] [info] Run service finished. Does anybody knows the the sulotion to this problem? Thx: Zsolt ___ Tanuljon nyelveket, szakmát levelező módszerrel! Angol és német kezdő tanfolyamainkon online házi feladat lehetőség. www.elo.hu/free - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: WELCOME to users@tomcat.apache.org
This is a JVM topic specifically your LD_LIBRARY_PATH needs to be updated.. Martin- * This email message and any files transmitted with it contain confidential information intended only for the person(s) to whom this email message is addressed. If you have received this email message in error, please notify the sender immediately by telephone or email and destroy the original message without making a copy. Thank you. - Original Message - From: tzsoci [EMAIL PROTECTED] To: users@tomcat.apache.org Sent: Wednesday, June 14, 2006 6:36 AM Subject: Re: WELCOME to users@tomcat.apache.org Hello! I installed java 1.6 and tomcat 5.5.15 on a machine. (this combo works fine on other machines) When i try to start tomcat it writes the following errors to the log file: [2006-06-14 11:17:47] [173 javajni.c] [error] Given module not exists. [2006-06-14 11:17:47] [924 prunsrv.c] [error] Failed creating java C:\Program Files\Java\jre1.6.0\bin\client\jvm.dll [2006-06-14 11:17:47] [1179 prunsrv.c] [error] ServiceStart returned 1 [2006-06-14 11:17:47] [info] Run service finished. Does anybody knows the the sulotion to this problem? Thx: Zsolt ___ Tanuljon nyelveket, szakmát levelező módszerrel! Angol és német kezdő tanfolyamainkon online házi feladat lehetőség. www.elo.hu/free - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: WELCOME to users@tomcat.apache.org
Thanks for the answer. Could you describe it a little bit? Thx Zsolt Martin Gainty [EMAIL PROTECTED] írta: This is a JVM topic specifically your LD_LIBRARY_PATH needs to be updated.. Martin- * This email message and any files transmitted with it contain confidential information intended only for the person(s) to whom this email message is addressed. If you have received this email message in error, please notify the sender immediately by telephone or email and destroy the original message without making a copy. Thank you. - Original Message - From: tzsoci [EMAIL PROTECTED] To: users@tomcat.apache.org Sent: Wednesday, June 14, 2006 6:36 AM Subject: Re: WELCOME to users@tomcat.apache.org Hello! I installed java 1.6 and tomcat 5.5.15 on a machine. (this combo works fine on other machines) When i try to start tomcat it writes the following errors to the log file: [2006-06-14 11:17:47] [173 javajni.c] [error] Given module not exists. [2006-06-14 11:17:47] [924 prunsrv.c] [error] Failed creating java C:\Program Files\Java\jre1.6.0\bin\client\jvm.dll [2006-06-14 11:17:47] [1179 prunsrv.c] [error] ServiceStart returned 1 [2006-06-14 11:17:47] [info] Run service finished. Does anybody knows the the sulotion to this problem? Thx: Zsolt _ __ Tanuljon nyelveket, szakmát levelező módszerrel! Angol és német kezdő tanfolyamainkon online házi feladat lehetőség. www.elo.hu/free - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] ___ Tanuljon nyelveket, szakmát levelező módszerrel! Angol és német kezdő tanfolyamainkon online házi feladat lehetőség. www.elo.hu/free - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
