RE: Need help for a problem on migrating from Tomcat-8 to Tomcat-9

[Saha, Rajib]

Hi Chris,

I got your point.

Actually, this service for us is a core service of our product, which control 
several core servers on it.
But, we will Definity see the options to unblock the dependency as you said.

Regards
Rajib

-Original Message-
From: Christopher Schultz 
Sent: 27 February 2024 19:51
To: users@tomcat.apache.org
Subject: Re: Need help for a problem on migrating from Tomcat-8 to Tomcat-9

[You don't often get email from ch...@christopherschultz.net. Learn why this is 
important at https://aka.ms/LearnAboutSenderIdentification ]

Rajib,

On 2/26/24 23:43, Saha, Rajib wrote:
> Hi Mark,
>
> Thanks for your explanation and suggestion.
> For my use case, I have used the below option and its working fine.
> =
> --ServiceUser="LocalSystem"
> =
>
> Thank you very much for showing the way. 

I'm glad you got your service working.

But.

Your next task should be to determine why you need to run your service
as (essentially) local-Administrator and fix it so you don't have to.
Anyone who is able to take control of your application will have
complete control of the local machine.

This is a huge red-flag from a security standpoint.

-chris

> -Original Message-
> From: Mark Thomas 
> Sent: 26 February 2024 14:23
> To: users@tomcat.apache.org
> Subject: Re: Need help for a problem on migrating from Tomcat-8 to Tomcat-9
>
> [You don't often get email from ma...@apache.org. Learn why this is important 
> at https://aka.ms/LearnAboutSenderIdentification ]
>
> On 26/02/2024 06:11, Saha, Rajib wrote:
>> Hi Experts,
>>
>> In our product, we are using Tomcat [OriginalFileName:  prunsrv.exe] for 
>> creating a service[Say, Service-A]. It's a huge product running in market 
>> for last 20 years.
>> We are in progress of moving from Tomcat-8 to tomcat-9.
>>
>> When we are creating the Service-A with Tomcat-8 [tomcat8.exe]. In 
>> "Services" desktop app, we can see the service is created with "Local 
>> System" in "Log On as".
>> When we are creating the Service-A with Tomcat-9 [tomcat9.exe]. in 
>> "Services" desktop app, we can see the service is created with "Local 
>> service" in "Log On as".
>>
>> Looks like "Local service" has less power than "Local System".
>> Due to it, Service-A created with Tomcat-9 failing for several operation 
>> inside product.
>
> That should be a security concern. Local System is broadly equivalent to
> local administrator. You generally don't want to be running Tomcat under
> Local System.
>
>> Can somebody suggest, how we can create a service with tomcat-9, with the 
>> privilege of "Local System"?
>
> Have you looked at the documentation?
>
> https://tomcat.apache.org/tomcat-9.0-doc/windows-service-howto.html
>
> Look for "--ServiceUser"
>
> Mark
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Need help for a problem on migrating from Tomcat-8 to Tomcat-9

[Christopher Schultz]

Rajib,

On 2/26/24 23:43, Saha, Rajib wrote:

Hi Mark,

Thanks for your explanation and suggestion.
For my use case, I have used the below option and its working fine.
=
--ServiceUser="LocalSystem"
=

Thank you very much for showing the way. 


I'm glad you got your service working.

But.

Your next task should be to determine why you need to run your service 
as (essentially) local-Administrator and fix it so you don't have to. 
Anyone who is able to take control of your application will have 
complete control of the local machine.


This is a huge red-flag from a security standpoint.

-chris


-Original Message-
From: Mark Thomas 
Sent: 26 February 2024 14:23
To: users@tomcat.apache.org
Subject: Re: Need help for a problem on migrating from Tomcat-8 to Tomcat-9

[You don't often get email from ma...@apache.org. Learn why this is important 
at https://aka.ms/LearnAboutSenderIdentification ]

On 26/02/2024 06:11, Saha, Rajib wrote:

Hi Experts,

In our product, we are using Tomcat [OriginalFileName:  prunsrv.exe] for 
creating a service[Say, Service-A]. It's a huge product running in market for 
last 20 years.
We are in progress of moving from Tomcat-8 to tomcat-9.

When we are creating the Service-A with Tomcat-8 [tomcat8.exe]. In "Services" desktop app, we can 
see the service is created with "Local System" in "Log On as".
When we are creating the Service-A with Tomcat-9 [tomcat9.exe]. in "Services" desktop app, we can 
see the service is created with "Local service" in "Log On as".

Looks like "Local service" has less power than "Local System".
Due to it, Service-A created with Tomcat-9 failing for several operation inside 
product.


That should be a security concern. Local System is broadly equivalent to
local administrator. You generally don't want to be running Tomcat under
Local System.


Can somebody suggest, how we can create a service with tomcat-9, with the privilege of 
"Local System"?


Have you looked at the documentation?

https://tomcat.apache.org/tomcat-9.0-doc/windows-service-howto.html

Look for "--ServiceUser"

Mark

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Need help for a problem on migrating from Tomcat-8 to Tomcat-9

[Saha, Rajib]

Hi Mark,

Thanks for your explanation and suggestion.
For my use case, I have used the below option and its working fine.
=
--ServiceUser="LocalSystem"
=

Thank you very much for showing the way. 

Regards
Rajib

-Original Message-
From: Mark Thomas 
Sent: 26 February 2024 14:23
To: users@tomcat.apache.org
Subject: Re: Need help for a problem on migrating from Tomcat-8 to Tomcat-9

[You don't often get email from ma...@apache.org. Learn why this is important 
at https://aka.ms/LearnAboutSenderIdentification ]

On 26/02/2024 06:11, Saha, Rajib wrote:
> Hi Experts,
>
> In our product, we are using Tomcat [OriginalFileName:  prunsrv.exe] for 
> creating a service[Say, Service-A]. It's a huge product running in market for 
> last 20 years.
> We are in progress of moving from Tomcat-8 to tomcat-9.
>
> When we are creating the Service-A with Tomcat-8 [tomcat8.exe]. In "Services" 
> desktop app, we can see the service is created with "Local System" in "Log On 
> as".
> When we are creating the Service-A with Tomcat-9 [tomcat9.exe]. in "Services" 
> desktop app, we can see the service is created with "Local service" in "Log 
> On as".
>
> Looks like "Local service" has less power than "Local System".
> Due to it, Service-A created with Tomcat-9 failing for several operation 
> inside product.

That should be a security concern. Local System is broadly equivalent to
local administrator. You generally don't want to be running Tomcat under
Local System.

> Can somebody suggest, how we can create a service with tomcat-9, with the 
> privilege of "Local System"?

Have you looked at the documentation?

https://tomcat.apache.org/tomcat-9.0-doc/windows-service-howto.html

Look for "--ServiceUser"

Mark

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Need help for a problem on migrating from Tomcat-8 to Tomcat-9

[Mark Thomas]

On 26/02/2024 06:11, Saha, Rajib wrote:

Hi Experts,

In our product, we are using Tomcat [OriginalFileName:  prunsrv.exe] for 
creating a service[Say, Service-A]. It's a huge product running in market for 
last 20 years.
We are in progress of moving from Tomcat-8 to tomcat-9.

When we are creating the Service-A with Tomcat-8 [tomcat8.exe]. In "Services" desktop app, we can 
see the service is created with "Local System" in "Log On as".
When we are creating the Service-A with Tomcat-9 [tomcat9.exe]. in "Services" desktop app, we can 
see the service is created with "Local service" in "Log On as".

Looks like "Local service" has less power than "Local System".
Due to it, Service-A created with Tomcat-9 failing for several operation inside 
product.


That should be a security concern. Local System is broadly equivalent to 
local administrator. You generally don't want to be running Tomcat under 
Local System.



Can somebody suggest, how we can create a service with tomcat-9, with the privilege of 
"Local System"?


Have you looked at the documentation?

https://tomcat.apache.org/tomcat-9.0-doc/windows-service-howto.html

Look for "--ServiceUser"

Mark

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Need help for a problem on migrating from Tomcat-8 to Tomcat-9

[Saha, Rajib]

Hi Experts,

In our product, we are using Tomcat [OriginalFileName:  prunsrv.exe] for 
creating a service[Say, Service-A]. It's a huge product running in market for 
last 20 years.
We are in progress of moving from Tomcat-8 to tomcat-9.

When we are creating the Service-A with Tomcat-8 [tomcat8.exe]. In "Services" 
desktop app, we can see the service is created with "Local System" in "Log On 
as".
When we are creating the Service-A with Tomcat-9 [tomcat9.exe]. in "Services" 
desktop app, we can see the service is created with "Local service" in "Log On 
as".

Looks like "Local service" has less power than "Local System".
Due to it, Service-A created with Tomcat-9 failing for several operation inside 
product.

Can somebody suggest, how we can create a service with tomcat-9, with the 
privilege of "Local System"?

Please let me know, if any more details is required from my side.

Regards
Rajib

Re: Need Help : Unable to write back a response error code from ReadListener#onError

[Adwait Kumar Singh]

Sorry for the wrong bug id. This is the one I filed,
https://bz.apache.org/bugzilla/show_bug.cgi?id=68037


On Tue, Oct 31, 2023 at 3:24 PM Adwait Kumar Singh 
wrote:

> AFAIK the response is not being committed.
>
> I created a bug for this with a reproducible test case,
> https://bz.apache.org/bugzilla/show_bug.cgi?id=54123
>
>
> On Tue, Oct 31, 2023 at 12:49 PM Mark Thomas  wrote:
>
>>
>>
>> On 30/10/2023 22:25, Adwait Kumar Singh wrote:
>> > Hi,
>> >
>> > I am using the async Servlet API and NIO, by setting a ReadListener.
>> >
>> > In the onError of the ReadListener, I am catching a
>> SocketTimeoutException
>> > and trying to send back an error code 408. Here is the simplified
>> example
>> > of what I am trying to do,
>> >
>> > @Override
>> >> public void onError(Throwable failure) {
>> >>  if(failure instanceof SocketTimeoutException) {
>> >>  response.sendError(408);
>> >>  request.getAsyncContext().complete();
>> >>  }
>> >> }
>> >>
>> >>
>> > However, Tomcat just refuses to send back the error I want and instead
>> just
>> > closes the connection. Am I missing something trivial or is this
>> supposed
>> > to be achieved in a different way?
>> >
>> > I am using Tomcat 9.0.82 and the Http11NioEndpoint.
>>
>> Has the response already been committed?
>>
>> If not, a minimal (ideally a single servlet) web application that
>> demonstrates the issue is often the easiest way for developers to
>> re-create the problem.
>>
>> Mark
>>
>> -
>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>> For additional commands, e-mail: users-h...@tomcat.apache.org
>>
>>

Re: Need Help : Unable to write back a response error code from ReadListener#onError

[Adwait Kumar Singh]

AFAIK the response is not being committed.

I created a bug for this with a reproducible test case,
https://bz.apache.org/bugzilla/show_bug.cgi?id=54123


On Tue, Oct 31, 2023 at 12:49 PM Mark Thomas  wrote:

>
>
> On 30/10/2023 22:25, Adwait Kumar Singh wrote:
> > Hi,
> >
> > I am using the async Servlet API and NIO, by setting a ReadListener.
> >
> > In the onError of the ReadListener, I am catching a
> SocketTimeoutException
> > and trying to send back an error code 408. Here is the simplified example
> > of what I am trying to do,
> >
> > @Override
> >> public void onError(Throwable failure) {
> >>  if(failure instanceof SocketTimeoutException) {
> >>  response.sendError(408);
> >>  request.getAsyncContext().complete();
> >>  }
> >> }
> >>
> >>
> > However, Tomcat just refuses to send back the error I want and instead
> just
> > closes the connection. Am I missing something trivial or is this supposed
> > to be achieved in a different way?
> >
> > I am using Tomcat 9.0.82 and the Http11NioEndpoint.
>
> Has the response already been committed?
>
> If not, a minimal (ideally a single servlet) web application that
> demonstrates the issue is often the easiest way for developers to
> re-create the problem.
>
> Mark
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>

Re: Need Help : Unable to write back a response error code from ReadListener#onError

[Mark Thomas]

On 30/10/2023 22:25, Adwait Kumar Singh wrote:

Hi,

I am using the async Servlet API and NIO, by setting a ReadListener.

In the onError of the ReadListener, I am catching a SocketTimeoutException
and trying to send back an error code 408. Here is the simplified example
of what I am trying to do,

@Override

public void onError(Throwable failure) {
 if(failure instanceof SocketTimeoutException) {
 response.sendError(408);
 request.getAsyncContext().complete();
 }
}



However, Tomcat just refuses to send back the error I want and instead just
closes the connection. Am I missing something trivial or is this supposed
to be achieved in a different way?

I am using Tomcat 9.0.82 and the Http11NioEndpoint.


Has the response already been committed?

If not, a minimal (ideally a single servlet) web application that 
demonstrates the issue is often the easiest way for developers to 
re-create the problem.


Mark

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Need Help : Unable to write back a response error code from ReadListener#onError

[Adwait Kumar Singh]

FYI, I am doing the async processing on the Container thread itself, just
that I yield the thread back if I can't read without blocking.

Based on the code here
,
I see that the error is only dispatched if the request is not being
executed in the container thread.

On Mon, Oct 30, 2023 at 3:25 PM Adwait Kumar Singh 
wrote:

> Hi,
>
> I am using the async Servlet API and NIO, by setting a ReadListener.
>
> In the onError of the ReadListener, I am catching a SocketTimeoutException
> and trying to send back an error code 408. Here is the simplified example
> of what I am trying to do,
>
> @Override
>> public void onError(Throwable failure) {
>> if(failure instanceof SocketTimeoutException) {
>> response.sendError(408);
>> request.getAsyncContext().complete();
>> }
>> }
>>
>>
> However, Tomcat just refuses to send back the error I want and instead
> just closes the connection. Am I missing something trivial or is this
> supposed to be achieved in a different way?
>
> I am using Tomcat 9.0.82 and the Http11NioEndpoint.
>
>
> Thanks,
> Adwait.
>

Need Help : Unable to write back a response error code from ReadListener#onError

[Adwait Kumar Singh]

Hi,

I am using the async Servlet API and NIO, by setting a ReadListener.

In the onError of the ReadListener, I am catching a SocketTimeoutException
and trying to send back an error code 408. Here is the simplified example
of what I am trying to do,

@Override
> public void onError(Throwable failure) {
> if(failure instanceof SocketTimeoutException) {
> response.sendError(408);
> request.getAsyncContext().complete();
> }
> }
>
>
However, Tomcat just refuses to send back the error I want and instead just
closes the connection. Am I missing something trivial or is this supposed
to be achieved in a different way?

I am using Tomcat 9.0.82 and the Http11NioEndpoint.


Thanks,
Adwait.

Re: Need Help : Tomcat 9.0.75 not honoring session timeout configured in tomcat web.xml for FORM Authentication

[Christopher Schultz]

Channa,

On 10/27/23 00:07, Channa Puchakayala wrote:

Tomcat Version : 9.0.75

Operating System: Windows and Linux

Bits: 64

Tomcat 9.0.75 not honoring  session timeout configured in 
tomcat/conf/web.xml for FORM Authentication and it is effecting customers.


==

    

     30 // 30 minutes

     

=

Verified the Tomcat source code

-FormAuthenticator overriding above configured session timeout setting 
(30 minutes)  with value (120 seconds)


-As per FormAuthenticator.Java, this change/issue started from Tomcat 
Version : 9.0.74 for FORM Authentication and it overwrites the original 
session-timeout value


-This issue/behavior not observed in 9.0.73

Verified the Tomcat documentation

-Verified the tomcat changelog, there is a fix/change went in Tomcat 
9.0.74 below related to FORM Based Authentication Session @ 
https://tomcat.apache.org/tomcat-9.0-doc/changelog.html 
, looks which 
is causing this issue.



Can you please state clearly what the issue actually is? This is 
documented behavior of Tomcat. There is a well-documented setting that 
you can adjust if necessary.


Are you reporting a problem? If so, it is not clear from your message above.

What test did you perform?
What did you expect to happen?
What actually happened that was different from your expectation?

-chris


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Need Help : Tomcat 9.0.75 not honoring session timeout configured in tomcat web.xml for FORM Authentication

[Mark Thomas]

1. Do not cross-post the same question to multiple lists.

2. Do not post the same question multiple times if you don't get an 
answer as quickly as you would like. We all all volunteers here. If you 
want a guaranteed SLA then pick you preferred vendor and pay for support.


Mark


27 Oct 2023 05:07:20 Channa Puchakayala 
:



Hi All,
 

Tomcat Version : 9.0.75
Operating System: Windows and Linux
Bits: 64   
 

Tomcat 9.0.75 not honoring  session timeout configured in 
tomcat/conf/web.xml for FORM Authentication and it is effecting 
customers.

==
   
    30 // 30 minutes
    
=
 

Verified the Tomcat source code
-    FormAuthenticator overriding above configured session timeout 
setting (30 minutes)  with value (120 seconds)
-    As per FormAuthenticator.Java, this change/issue started from 
Tomcat Version : 9.0.74 for FORM Authentication and it overwrites the 
original session-timeout value

-    This issue/behavior not observed in 9.0.73
 

Verified the Tomcat documentation
-    Verified the tomcat changelog, there is a fix/change went in 
Tomcat 9.0.74 below related to FORM Based Authentication Session @ 
https://tomcat.apache.org/tomcat-9.0-doc/changelog.html, looks which is 
causing this issue.


--
Harden the FORM authentication process against DoS attacks by using a 
reduced session timeout if the FORM authentication process creates a 
session. The duration of this timeout is configured by 
the *authenticationSessionTimeout* attribute of the FORM authenticator. 
(markt)


-
 

Is it bug ? Could you please help/suggest.
 

Thanks
Channa
 


This electronic communication and the information and any files 
transmitted with it, or attached to it, are confidential and are 
intended solely for the use of the individual or entity to whom it is 
addressed and may contain information that is confidential, legally 
privileged, protected by privacy laws, or otherwise restricted from 
disclosure to anyone else. If you are not the intended recipient or the 
person responsible for delivering the e-mail to the intended recipient, 
you are hereby notified that any use, copying, distributing, 
dissemination, forwarding, printing, or copying of this e-mail is 
strictly prohibited. If you received this e-mail in error, please 
return the e-mail to the sender, delete it from your computer, and 
destroy any printed copy of it.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Need Help : Tomcat 9.0.75 not honoring session timeout configured in tomcat web.xml for FORM Authentication

[Channa Puchakayala]

Hi All,



Tomcat Version : 9.0.75

Operating System: Windows and Linux

Bits: 64



Tomcat 9.0.75 not honoring  session timeout configured in
tomcat/conf/web.xml for FORM Authentication and it is effecting customers.

==

   

30 // 30 minutes



=



Verified the Tomcat source code

-FormAuthenticator overriding above configured session timeout
setting (30 minutes)  with value (120 seconds)

-As per FormAuthenticator.Java, this change/issue started from
Tomcat Version : 9.0.74 for FORM Authentication and it overwrites the
original session-timeout value

-This issue/behavior not observed in 9.0.73



Verified the Tomcat documentation

-Verified the tomcat changelog, there is a fix/change went in
Tomcat 9.0.74 below related to FORM Based Authentication Session @
https://tomcat.apache.org/tomcat-9.0-doc/changelog.html, looks which is
causing this issue.

--

Harden the FORM authentication process against DoS attacks by using a
reduced session timeout if the FORM authentication process creates a
session. The duration of this timeout is configured by the
authenticationSessionTimeout attribute of the FORM authenticator. (markt)

-



Is it bug ? Could you please help/suggest.



Thanks

Channa

-- 
This electronic communication and the information and any files transmitted 
with it, or attached to it, are confidential and are intended solely for 
the use of the individual or entity to whom it is addressed and may contain 
information that is confidential, legally privileged, protected by privacy 
laws, or otherwise restricted from disclosure to anyone else. If you are 
not the intended recipient or the person responsible for delivering the 
e-mail to the intended recipient, you are hereby notified that any use, 
copying, distributing, dissemination, forwarding, printing, or copying of 
this e-mail is strictly prohibited. If you received this e-mail in error, 
please return the e-mail to the sender, delete it from your computer, and 
destroy any printed copy of it.


smime.p7s
Description: S/MIME Cryptographic Signature

Re: Fwd: SSL Configuration Help :

[Christopher Schultz]

Elavarasan,

On 10/6/23 06:32, Elavarasan Pugazhendi wrote:

Hi,

I have a pfx certificate and am trying to import it into a keystore before
configuring it within the tomcat but not able to add the pfx certificate. I
followed the below steps but wasn't able to add the certificate

Tomcat: 9.0.62
OS: RHEL 8

1. keytool -genkey -alias tomcat.net -keyalg RSA -keystore tomcat.jks
Entered the Q .
2. Using the pfx file. I create .crt and .key file using the below command
openssl pkcs12 -in crt.pfx -nocerts -out mykey.key
openssl pkcs12 -in crt.pfx -clcerts -nokeys -out mycert.crt
3. export certificate
openssl pkcs12 -export -in mykey.key -chain -CAfile crt.pfx -name
otomcat.net -out tomcat.jks


This last one won't work, at least not the way you expect. openssl can't 
create a JKS file, only PKCS12 / p12 / pfx. By using the openssl pkcs12 
-export command above, you will likely destroy your tomcat.jks file or 
just get a failure.


It's not entirely clear what you are trying to do. Are you trying to 
create a self-signed certificate, or are you trying to get your server 
certificate signed by a Certificate Authority?


If you just need a self-signed cert, then your first command should be 
sufficient -- just remember to set certificateAlias="tomcat.net" if you 
use that alias when creating your initial file. I would recommend using. 
a PKCS12 file when originally creating the keystore, just because JKS 
isn't supported by anything other than Java. All you need to do is make 
sure you have "-keystoretype PKCS12". With your version of Java, that 
may be the default already, but it doesn't hurt to be specific.


-chris

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Fwd: SSL Configuration Help :

[Elavarasan Pugazhendi]

Hi,

I have a pfx certificate and am trying to import it into a keystore before
configuring it within the tomcat but not able to add the pfx certificate. I
followed the below steps but wasn't able to add the certificate

Tomcat: 9.0.62
OS: RHEL 8

1. keytool -genkey -alias tomcat.net -keyalg RSA -keystore tomcat.jks
Entered the Q .
2. Using the pfx file. I create .crt and .key file using the below command
openssl pkcs12 -in crt.pfx -nocerts -out mykey.key
openssl pkcs12 -in crt.pfx -clcerts -nokeys -out mycert.crt
3. export certificate
openssl pkcs12 -export -in mykey.key -chain -CAfile crt.pfx -name
otomcat.net -out tomcat.jks

I receive an error loading the certificate crt.pfx.

How can I import crt.pfx into my keystore? or how can I generate my CAfile?

JP

Re: Need help tomcat

[Mark Thomas]

Asking the same question over and over again isn't going to change the 
answer.


You need to contact the Eclipse community.

If we knew how Eclipse was determining the Tomcat version we might be 
able to suggest ways to trick Eclipse into thinking Tomcat 10.1.x was an 
earlier, supported version.


Mark


On 03/10/2023 06:27, Deepak Lalchandani wrote:

Mark,
   In Apache Tomcat website I can install 10.1 only ,when I
configure the server by clicking on Add server and select location of
tomcat server, it adds 10.1.3 and the error with red symbol appears


On Mon, 2 Oct 2023, 11:07 pm Deepak Lalchandani, 
wrote:


Hi Mark,
   In Apache Tomcat website I can install 10.1 only ,when I
configure the server by clicking on Add server and select location of
tomcat  server, it adds 10.1.3 and the  error with red symbol appears

Regards,
Deepak


On Mon, 2 Oct 2023, 10:58 pm Mark Thomas,  wrote:


On 02/10/2023 18:23, Deepak Lalchandani wrote:

The Apache Tomcat installation at this directory is version 10.1.13. A
Tomcat 10.0 installation is expected
The above is error message I'm getting.
Please resolve and screenshots are detached from e mail


The error looks pretty clear to me.

Eclipse is expecting an instance of Tomcat 10.0.x.

You are trying to use it with an instance of Tomcat 10.1.x.

This would be an issue for the Eclipse plugin you are using to either
provide support for 10.1.x or provide a workaround so you can use Tomcat
10.1.x.

Mark




On Mon, 2 Oct 2023, 5:31 pm Alex O'Ree,  wrote:


Assuming windows sc delete servicename

On Mon, Oct 2, 2023, 7:44 AM jean-frederic clere 
wrote:


On 10/1/23 09:02, Deepak Lalchandani wrote:

I have deleted and Uninstalled all tomcat services but despite that

the

tomcat service exists in services window . I want to delete the

services

permanently which is not happening

Please help

Deepak



Have you tried to remove the service using
https://commons.apache.org/proper/commons-daemon/procrun.html

//DS is the option to delete the service

--
Cheers

Jean-Frederic


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org






-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org






-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: need help in solving CVE-2020-1938 error regards

[Nithin P]

thanks mark,





Nithin P








 On Tue, 03 Oct 2023 15:05:31 +0530 Mark Thomas  wrote ---



On 03/10/2023 06:16, Nithin P wrote: 
> Hi, 
> 
> I'm using Apache Ofbiz v18.12.06 While I'm trying to upload an image for 
> vulnerability scanning it shows CVE-2020-1938. I have tried to update to the 
> latest version having the same issue, Does Anyone know where the tomcat conf 
> files are stored in the Apache OFBiz application or how to disable ajp 8009 
> protocol in Apache OFBiz thanks in advance. 
 
Those are all questions best asked to the Apache Ofbiz project. The 
Tomcat community has no visibility of how Ofbiz is using and/or 
configuring Tomcat. 
 
If Ofbiz is using server.xml (you can search for that file) you could 
try removing the AJP Connector element from that file. If Ofbiz is using 
embedded Tomcat then you'll definitely need to ask the Ofbiz folks. 
 
Mark 
 
- 
To unsubscribe, e-mail: mailto:users-unsubscr...@tomcat.apache.org 
For additional commands, e-mail: mailto:users-h...@tomcat.apache.org
This message contains confidential information and is intended only for the 
individual named. If you are not the named addressee you should not 
disseminate, distribute or copy this e-mail. You cannot use or forward any 
attachments in the email. Please notify the sender immediately by e-mail if you 
have received this e-mail by mistake and delete this e-mail from your system. 
Finally, the opinions disclosed by the sender do not have to reflect those of 
the company, therefore the company refuses to take any liability for the damage 
caused by the content of this email. Yobitel Communications Limited,  #11, 
Kingsley Mews, Ley Street, Ilford, London - IG1 4BT, United Kingdom.   
www.yobitel.com

Re: need help in solving CVE-2020-1938 error regards

[Mark Thomas]

On 03/10/2023 06:16, Nithin P wrote:

Hi,

I'm using Apache Ofbiz v18.12.06 While I'm trying to upload an image for 
vulnerability scanning it shows CVE-2020-1938. I have tried to update to the 
latest version having the same issue, Does Anyone know where the tomcat conf 
files are stored in the Apache OFBiz application or how to disable ajp 8009 
protocol in Apache OFBiz thanks in advance.


Those are all questions best asked to the Apache Ofbiz project. The 
Tomcat community has no visibility of how Ofbiz is using and/or 
configuring Tomcat.


If Ofbiz is using server.xml (you can search for that file) you could 
try removing the AJP Connector element from that file. If Ofbiz is using 
embedded Tomcat then you'll definitely need to ask the Ofbiz folks.


Mark

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Need help tomcat

[Nithin P]

Nithin P








 On Tue, 03 Oct 2023 10:57:15 +0530 Deepak Lalchandani 
 wrote ---



Mark, 
 In Apache Tomcat website I can install 10.1 only ,when I 
configure the server by clicking on Add server and select location of 
tomcat server, it adds 10.1.3 and the error with red symbol appears 
 
 
On Mon, 2 Oct 2023, 11:07 pm Deepak Lalchandani, 
<mailto:deepakl.2...@gmail.com> 
wrote: 
 
> Hi Mark, 
>   In Apache Tomcat website I can install 10.1 only ,when I 
> configure the server by clicking on Add server and select location of 
> tomcat  server, it adds 10.1.3 and the  error with red symbol appears 
> 
> Regards, 
> Deepak 
> 
> 
> On Mon, 2 Oct 2023, 10:58 pm Mark Thomas, <mailto:ma...@apache.org> wrote: 
> 
>> On 02/10/2023 18:23, Deepak Lalchandani wrote: 
>> > The Apache Tomcat installation at this directory is version 10.1.13. A 
>> > Tomcat 10.0 installation is expected 
>> > The above is error message I'm getting. 
>> > Please resolve and screenshots are detached from e mail 
>> 
>> The error looks pretty clear to me. 
>> 
>> Eclipse is expecting an instance of Tomcat 10.0.x. 
>> 
>> You are trying to use it with an instance of Tomcat 10.1.x. 
>> 
>> This would be an issue for the Eclipse plugin you are using to either 
>> provide support for 10.1.x or provide a workaround so you can use Tomcat 
>> 10.1.x. 
>> 
>> Mark 
>> 
>> 
>> > 
>> > On Mon, 2 Oct 2023, 5:31 pm Alex O'Ree, <mailto:alexo...@apache.org> 
>> > wrote: 
>> > 
>> >> Assuming windows sc delete servicename 
>> >> 
>> >> On Mon, Oct 2, 2023, 7:44 AM jean-frederic clere 
>> >> <mailto:jfcl...@gmail.com> 
>> >> wrote: 
>> >> 
>> >>> On 10/1/23 09:02, Deepak Lalchandani wrote: 
>> >>>> I have deleted and Uninstalled all tomcat services but despite that 
>> the 
>> >>>> tomcat service exists in services window . I want to delete the 
>> services 
>> >>>> permanently which is not happening 
>> >>>> 
>> >>>> Please help 
>> >>>> 
>> >>>> Deepak 
>> >>>> 
>> >>> 
>> >>> Have you tried to remove the service using 
>> >>> https://commons.apache.org/proper/commons-daemon/procrun.html 
>> >>> 
>> >>> //DS is the option to delete the service 
>> >>> 
>> >>> -- 
>> >>> Cheers 
>> >>> 
>> >>> Jean-Frederic 
>> >>> 
>> >>> 
>> >>> - 
>> >>> To unsubscribe, e-mail: mailto:users-unsubscr...@tomcat.apache.org 
>> >>> For additional commands, e-mail: mailto:users-h...@tomcat.apache.org 
>> >>> 
>> >>> 
>> > 
>>




 >>>>>Hi, 



I'm using Apache Ofbiz v18.12.06 While I'm trying to upload an image for 
vulnerability scanning it shows CVE-2020-1938. I have tried to update to the 
latest version having the same issue, Does Anyone know where the tomcat conf 
files are stored in the Apache OFBiz application or how to disable ajp 8009 
protocol in Apache OFBiz thanks in advance.




>> - 
>> To unsubscribe, e-mail: mailto:users-unsubscr...@tomcat.apache.org 
>> For additional commands, e-mail: mailto:users-h...@tomcat.apache.org 
>> 
>>
This message contains confidential information and is intended only for the 
individual named. If you are not the named addressee you should not 
disseminate, distribute or copy this e-mail. You cannot use or forward any 
attachments in the email. Please notify the sender immediately by e-mail if you 
have received this e-mail by mistake and delete this e-mail from your system. 
Finally, the opinions disclosed by the sender do not have to reflect those of 
the company, therefore the company refuses to take any liability for the damage 
caused by the content of this email. Yobitel Communications Limited,  #11, 
Kingsley Mews, Ley Street, Ilford, London - IG1 4BT, United Kingdom.   
www.yobitel.com

Re: Need help tomcat

[Deepak Lalchandani]

Mark,
  In Apache Tomcat website I can install 10.1 only ,when I
configure the server by clicking on Add server and select location of
tomcat server, it adds 10.1.3 and the error with red symbol appears


On Mon, 2 Oct 2023, 11:07 pm Deepak Lalchandani, 
wrote:

> Hi Mark,
>   In Apache Tomcat website I can install 10.1 only ,when I
> configure the server by clicking on Add server and select location of
> tomcat  server, it adds 10.1.3 and the  error with red symbol appears
>
> Regards,
> Deepak
>
>
> On Mon, 2 Oct 2023, 10:58 pm Mark Thomas,  wrote:
>
>> On 02/10/2023 18:23, Deepak Lalchandani wrote:
>> > The Apache Tomcat installation at this directory is version 10.1.13. A
>> > Tomcat 10.0 installation is expected
>> > The above is error message I'm getting.
>> > Please resolve and screenshots are detached from e mail
>>
>> The error looks pretty clear to me.
>>
>> Eclipse is expecting an instance of Tomcat 10.0.x.
>>
>> You are trying to use it with an instance of Tomcat 10.1.x.
>>
>> This would be an issue for the Eclipse plugin you are using to either
>> provide support for 10.1.x or provide a workaround so you can use Tomcat
>> 10.1.x.
>>
>> Mark
>>
>>
>> >
>> > On Mon, 2 Oct 2023, 5:31 pm Alex O'Ree,  wrote:
>> >
>> >> Assuming windows sc delete servicename
>> >>
>> >> On Mon, Oct 2, 2023, 7:44 AM jean-frederic clere 
>> >> wrote:
>> >>
>> >>> On 10/1/23 09:02, Deepak Lalchandani wrote:
>> >>>> I have deleted and Uninstalled all tomcat services but despite that
>> the
>> >>>> tomcat service exists in services window . I want to delete the
>> services
>> >>>> permanently which is not happening
>> >>>>
>> >>>> Please help
>> >>>>
>> >>>> Deepak
>> >>>>
>> >>>
>> >>> Have you tried to remove the service using
>> >>> https://commons.apache.org/proper/commons-daemon/procrun.html
>> >>>
>> >>> //DS is the option to delete the service
>> >>>
>> >>> --
>> >>> Cheers
>> >>>
>> >>> Jean-Frederic
>> >>>
>> >>>
>> >>> -
>> >>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>> >>> For additional commands, e-mail: users-h...@tomcat.apache.org
>> >>>
>> >>>
>> >
>>
>> -
>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>> For additional commands, e-mail: users-h...@tomcat.apache.org
>>
>>

need help in solving CVE-2020-1938 error regards

[Nithin P]

Hi, 



I'm using Apache Ofbiz v18.12.06 While I'm trying to upload an image for 
vulnerability scanning it shows CVE-2020-1938. I have tried to update to the 
latest version having the same issue, Does Anyone know where the tomcat conf 
files are stored in the Apache OFBiz application or how to disable ajp 8009 
protocol in Apache OFBiz thanks in advance.
This message contains confidential information and is intended only for the 
individual named. If you are not the named addressee you should not 
disseminate, distribute or copy this e-mail. You cannot use or forward any 
attachments in the email. Please notify the sender immediately by e-mail if you 
have received this e-mail by mistake and delete this e-mail from your system. 
Finally, the opinions disclosed by the sender do not have to reflect those of 
the company, therefore the company refuses to take any liability for the damage 
caused by the content of this email. Yobitel Communications Limited,  #11, 
Kingsley Mews, Ley Street, Ilford, London - IG1 4BT, United Kingdom.   
www.yobitel.com

Re: Need help tomcat

[Deepak Lalchandani]

Hi Mark,
  In Apache Tomcat website I can install 10.1 only ,when I
configure the server by clicking on Add server and select location of
tomcat  server, it adds 10.1.3 and the  error with red symbol appears

Regards,
Deepak


On Mon, 2 Oct 2023, 10:58 pm Mark Thomas,  wrote:

> On 02/10/2023 18:23, Deepak Lalchandani wrote:
> > The Apache Tomcat installation at this directory is version 10.1.13. A
> > Tomcat 10.0 installation is expected
> > The above is error message I'm getting.
> > Please resolve and screenshots are detached from e mail
>
> The error looks pretty clear to me.
>
> Eclipse is expecting an instance of Tomcat 10.0.x.
>
> You are trying to use it with an instance of Tomcat 10.1.x.
>
> This would be an issue for the Eclipse plugin you are using to either
> provide support for 10.1.x or provide a workaround so you can use Tomcat
> 10.1.x.
>
> Mark
>
>
> >
> > On Mon, 2 Oct 2023, 5:31 pm Alex O'Ree,  wrote:
> >
> >> Assuming windows sc delete servicename
> >>
> >> On Mon, Oct 2, 2023, 7:44 AM jean-frederic clere 
> >> wrote:
> >>
> >>> On 10/1/23 09:02, Deepak Lalchandani wrote:
> >>>> I have deleted and Uninstalled all tomcat services but despite that
> the
> >>>> tomcat service exists in services window . I want to delete the
> services
> >>>> permanently which is not happening
> >>>>
> >>>> Please help
> >>>>
> >>>> Deepak
> >>>>
> >>>
> >>> Have you tried to remove the service using
> >>> https://commons.apache.org/proper/commons-daemon/procrun.html
> >>>
> >>> //DS is the option to delete the service
> >>>
> >>> --
> >>> Cheers
> >>>
> >>> Jean-Frederic
> >>>
> >>>
> >>> -
> >>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> >>> For additional commands, e-mail: users-h...@tomcat.apache.org
> >>>
> >>>
> >
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>

Re: Need help tomcat

[Mark Thomas]

On 02/10/2023 18:23, Deepak Lalchandani wrote:

The Apache Tomcat installation at this directory is version 10.1.13. A
Tomcat 10.0 installation is expected
The above is error message I'm getting.
Please resolve and screenshots are detached from e mail


The error looks pretty clear to me.

Eclipse is expecting an instance of Tomcat 10.0.x.

You are trying to use it with an instance of Tomcat 10.1.x.

This would be an issue for the Eclipse plugin you are using to either 
provide support for 10.1.x or provide a workaround so you can use Tomcat 
10.1.x.


Mark




On Mon, 2 Oct 2023, 5:31 pm Alex O'Ree,  wrote:


Assuming windows sc delete servicename

On Mon, Oct 2, 2023, 7:44 AM jean-frederic clere 
wrote:


On 10/1/23 09:02, Deepak Lalchandani wrote:

I have deleted and Uninstalled all tomcat services but despite that the
tomcat service exists in services window . I want to delete the services
permanently which is not happening

Please help

Deepak



Have you tried to remove the service using
https://commons.apache.org/proper/commons-daemon/procrun.html

//DS is the option to delete the service

--
Cheers

Jean-Frederic


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org






-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: [EXTERNAL] - Need help tomcat

[Deepak Lalchandani]

The Apache Tomcat installation at this directory is version 10.1.13. A
Tomcat 10.0 installation is expected



On Mon, 2 Oct 2023, 1:43 pm Olaf Kock,  wrote:

>
> On 02.10.23 10:07, Deepak Lalchandani wrote:
> > Hi Please advice , Where to send the screenshot
> >
> Hi Deepak,
>
> You're dealing with textual messages, right? Just send the text - it's
> easier to read, search for etc anyway.
>
> Olaf
>
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>

Re: Need help tomcat

[Deepak Lalchandani]

The Apache Tomcat installation at this directory is version 10.1.13. A
Tomcat 10.0 installation is expected
The above is error message I'm getting.
Please resolve and screenshots are detached from e mail

On Mon, 2 Oct 2023, 5:31 pm Alex O'Ree,  wrote:

> Assuming windows sc delete servicename
>
> On Mon, Oct 2, 2023, 7:44 AM jean-frederic clere 
> wrote:
>
>> On 10/1/23 09:02, Deepak Lalchandani wrote:
>> > I have deleted and Uninstalled all tomcat services but despite that the
>> > tomcat service exists in services window . I want to delete the services
>> > permanently which is not happening
>> >
>> > Please help
>> >
>> > Deepak
>> >
>>
>> Have you tried to remove the service using
>> https://commons.apache.org/proper/commons-daemon/procrun.html
>>
>> //DS is the option to delete the service
>>
>> --
>> Cheers
>>
>> Jean-Frederic
>>
>>
>> -
>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>> For additional commands, e-mail: users-h...@tomcat.apache.org
>>
>>

Re: Need help tomcat

[Alex O'Ree]

Assuming windows sc delete servicename

On Mon, Oct 2, 2023, 7:44 AM jean-frederic clere  wrote:

> On 10/1/23 09:02, Deepak Lalchandani wrote:
> > I have deleted and Uninstalled all tomcat services but despite that the
> > tomcat service exists in services window . I want to delete the services
> > permanently which is not happening
> >
> > Please help
> >
> > Deepak
> >
>
> Have you tried to remove the service using
> https://commons.apache.org/proper/commons-daemon/procrun.html
>
> //DS is the option to delete the service
>
> --
> Cheers
>
> Jean-Frederic
>
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>

Re: Need help tomcat

[jean-frederic clere]

On 10/1/23 09:02, Deepak Lalchandani wrote:

I have deleted and Uninstalled all tomcat services but despite that the
tomcat service exists in services window . I want to delete the services
permanently which is not happening

Please help

Deepak



Have you tried to remove the service using 
https://commons.apache.org/proper/commons-daemon/procrun.html


//DS is the option to delete the service

--
Cheers

Jean-Frederic


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: [EXTERNAL] - Need help tomcat

[Olaf Kock]

On 02.10.23 10:07, Deepak Lalchandani wrote:

Hi Please advice , Where to send the screenshot


Hi Deepak,

You're dealing with textual messages, right? Just send the text - it's 
easier to read, search for etc anyway.


Olaf


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: [EXTERNAL] - Need help tomcat

[Deepak Lalchandani]

Hi Please advice , Where to send the screenshot

On Mon, 2 Oct 2023, 12:36 pm Simon Matter,  wrote:

> > Yes I have deleted them and again I have sent a email with screenshot.
> > Please check that.
> >
> > Regards,
> > Deepak
>
> Hi,
>
> please note that attachments are not delivered on this mailing list.
>
> Regards,
> Simon
>
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>

Re: [EXTERNAL] - Need help tomcat

[Simon Matter]

> Yes I have deleted them and again I have sent a email with screenshot.
> Please check that.
>
> Regards,
> Deepak

Hi,

please note that attachments are not delivered on this mailing list.

Regards,
Simon


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: [EXTERNAL] - Need help tomcat

[Deepak Lalchandani]

Yes I have deleted them and again I have sent a email with screenshot.
Please check that.

Regards,
Deepak

On Mon, 2 Oct 2023, 4:05 am Jason Tan,  wrote:

> Did you use one of these methods to remove the window service of Tomcat ?
>
> https://helpdeskgeek.com/windows-xp-tips/4-ways-to-delete-or-remove-a-service-in-windows/
>
> Best Regards,
> Jason Tan
> -Original Message-
> From: Deepak Lalchandani 
> Sent: Sunday, October 1, 2023 6:03 PM
> To: users@tomcat.apache.org; Deepak Lalchandani 
> Subject: [EXTERNAL] - Need help tomcat
>
> CAUTION: This email originated from outside of the organization. Do not
> click links or open attachments unless you recognize the sender and know
> the content is safe. If you feel that the email is suspicious, please
> report it using PhishAlarm.
>
>
> I have deleted and Uninstalled all tomcat services but despite that the
> tomcat service exists in services window . I want to delete the services
> permanently which is not happening
>
> Please help
>
> Deepak
>

Re: Need help tomcat

[Deepak Lalchandani]

The Apache Tomcat installation at this directory is version 10.1.13. A
Tomcat 10.0 installation is expected


Screenshot  attached

Please provide steps to correct this
I installed tomcat 10.1 from apache website


Thanks and Regards,
Deepak

On Mon, 2 Oct 2023, 2:44 am Frank Tornack,  wrote:

> Hi
>
> do you mean windows services or systemd services?
> In powershell you can use this 2 lines
> Remove-Service -Name "YourServiceName"
> sc.exe delete "YourServiceName"
>
> this should remove the service and registry for the service
>
>
> Am Sonntag, dem 01.10.2023 um 12:32 +0530 schrieb Deepak Lalchandani:
> > I have deleted and Uninstalled all tomcat services but despite that
> > the
> > tomcat service exists in services window . I want to delete the
> > services
> > permanently which is not happening
> >
> > Please help
> >
> > Deepak
>
>

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Need help tomcat

[Deepak Lalchandani]

I have deleted and Uninstalled all tomcat services but despite that the
tomcat service exists in services window . I want to delete the services
permanently which is not happening

Please help

Deepak

Re: SSL Cert install help.

[Christopher Schultz]

Bill,

On 9/22/23 13:25, Bill wrote:

Hello All,
  I may have started my SSL Cert install & config at step 2 instead of
step 1... :-(


Most mistakes are recoverable :)


Basically I have created my key store, my p12 file and have my cert all in
a sub directory of the conf directory.


All of those things are usually in the same file. What files do you 
actually have, and what is in each of them, specifically? If you have a 
keystore of any kind (including p12 files), post the output of:


$  keytool -list -keystore [filename]


I have updated the server xml with my connectors per online directions.
Yet my SSL (https) cert/site doesn't work.


Can you please post your  configuration, replacing any secrets?

Also, what do you mean "doesn't work"? Tomcat does not start? 
Connections are refused? Browser doesn't like server's cert? Can't 
complete handshake?



The catalina logs do not provide a whole lot of help for me as a TC novice.
I did see this in the log:

(org.apache.catalina.core.AprLifecycleListener.lifecycleEvent The Apache
Tomcat Native library which allows using OpenSSL was not found on the
java.library.path: [/usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib])


This is a warning. If you don't intend to use tcnative, you can disable 
the AprLifecycleListener and it will no longer emit that message.



but I'm pretty sure I didn't install native, but the regular version of TC.


The "native" connector is just a Connector, not all of Tomcat. The 
"regular" version of Tomcat supports several types of connectors, the 
"native" one included.



So my question is, was I supposed to install or turn something on before
beginning the process of key store and p12 file and connector configuration?


No, if you have your keystore in order and refer to it properly in the 
config then that's all you should need.


-chris

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

SSL Cert install help.

[Bill]

Hello All,
 I may have started my SSL Cert install & config at step 2 instead of
step 1... :-(

Basically I have created my key store, my p12 file and have my cert all in
a sub directory of the conf directory.

I have updated the server xml with my connectors per online directions.
Yet my SSL (https) cert/site doesn't work.

The catalina logs do not provide a whole lot of help for me as a TC novice.
I did see this in the log:

(org.apache.catalina.core.AprLifecycleListener.lifecycleEvent The Apache
Tomcat Native library which allows using OpenSSL was not found on the
java.library.path: [/usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib])

but I'm pretty sure I didn't install native, but the regular version of TC.
So my question is, was I supposed to install or turn something on before
beginning the process of key store and p12 file and connector configuration?
If yes, what ?
Thanks for any help. B

AW: Java Connector help needed

[Thomas Hoffmann (Speed4Trade GmbH)]

Hello Charlie,

> -Ursprüngliche Nachricht-
> Von: Charlie DiDonato 
> Gesendet: Sonntag, 13. August 2023 18:08
> An: users@tomcat.apache.org
> Betreff: Java Connector help needed
> 
> Hi All,
> I am migrating from tomcat 8.5x to 9.0.78
> 
> Below is my server .xml
> 
> I don't have Apache webserver fronting this yet on my local machine
> (Windows 10).
> 
> It is a Java app.
> 
> 
> 
> Here is the part that I feel is relevant, but the full config is listed below 
> that.-
> 
> I order to see that tomcat is working without Apache WS, do I need to also
> create an HTTP1.1 connector in addition to AJP connector?

The browser only speaks HTTP protocol. So yes, if you want to bypass Apache 
Frontend-server you need an http connector on tomcat side.

> 
> And what should happen when I define a redirectPort ?

The redirect Port is only used, when Tomcat needs to redirect HTTP to HTTPS.
If you only use HTTP or only HTTPS, this attribute is not used.

> And finally, how do I access tomcat URL to hit tomcat and bypass Apache WS?

This depends on your infrastructure. You can use a separate http(s) port. E.g. 
80/443 is used by Apache and 8080 is used by Tomcat.
Then you can used http://:8080/ to access Tomcat directly. Of 
course, firewall etc. must allow this traffic.
 
> Thanks
> 
> Charlie DiDonato
> 
> 
> 
> 
> 
> 
> 
> 
> 
>  
>address="192.168.0.28"
> 
>port="8009"
> 
>redirectPort="8020"
> 
>secretRequired="false"
> 
>maxParameterCount="1000"
> 
>/>
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
>/>
> 
>   
> 
>   
> 
>SSLEngine="on" />
> 
>   
> 
>className="org.apache.catalina.core.JreMemoryLeakPreventionListener"
> />
> 
>className="org.apache.catalina.mbeans.GlobalResourcesLifecycleListener"
> />
> 
>className="org.apache.catalina.core.ThreadLocalLeakPreventionListener"
> />
> 
> 
> 
>   
> 
>   
> 
> 
> 
>  
>   type="org.apache.catalina.UserDatabase"
> 
>   description="User database that can be updated and saved"
> 
>   factory="org.apache.catalina.users.MemoryUserDatabaseFactory"
> 
>   pathname="conf/tomcat-users.xml" />
> 
>   
> 
> 
> 
>   
> 
>   
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
>  
>address="192.168.0.28"
> 
>port="8009"
> 
>redirectPort="8020"
> 
>secretRequired="false"
> 
>maxParameterCount="1000"
> 
>/>
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
>   
> 
> 
> 
>   
> 
> 
> 
> 
> 
>   
> 
>   
> 
> 
> 
>  
>resourceName="UserDatabase"/>
> 
>   
> 
> 
> 
>
> unpackWARs="true" autoDeploy="true">
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
>  directory="logs"
> 
>prefix="localhost_access_log" suffix=".txt"
> 
>pattern="%h %l %u %t %r %s %b" />
> 
> 
> 
>   
> 
> 
> 
>   
> 
> 


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Java Connector help needed

[Charlie DiDonato]

Hi All,
I am migrating from tomcat 8.5x to 9.0.78

Below is my server .xml

I don't have Apache webserver fronting this yet on my local machine (Windows
10).

It is a Java app.

 

Here is the part that I feel is relevant, but the full config is listed
below that.-

I order to see that tomcat is working without Apache WS, do I need to also
create an HTTP1.1 connector in addition to AJP connector?

And what should happen when I define a redirectPort ?

And finally, how do I access tomcat URL to hit tomcat and bypass Apache WS?

Thanks

Charlie DiDonato

 

 







 

 

 

 

 

 









  

  

  

  

  

  

  

  

 

  

  





  

 

  

  

 





 

 















 









 



 





 

  

  

  

 

 

  

  





  

 

  

 





 





 

  



  

Re: AW: Too many certificates in chain?!? Help!

[James H. H. Lampert]

On 5/23/23 10:02 AM, Rob Sargent wrote:


Does pathLen:0 mean "no limit" or "no go"?


Well given that the "Basic Constraints" are exactly the same, across the 
board, in *both* the keystores that worked fine and the keystore that 
blew up, I don't think that's a factor. And the fact that the keystore 
that blew up changed file length on the outbound FTP trip and changed 
back to the original file length on the inbound binary-mode FTP trip 
(and is the only time I can recall *ever* seeing a keystore change file 
length) probably *is* a factor.


--
JHHL

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: AW: Too many certificates in chain?!? Help!

[Rob Sargent]

On 5/23/23 10:13, James H. H. Lampert wrote:

On 5/23/23 8:31 AM, Christopher Schultz wrote:
Can you dump the whole cert (e.g. keytool -list -v -alias 'certname') 
for each cert and see if any of the certificates specify a maximum 
chain length somewhere? Evidently, it's an extension to the X.509 spec:


Comparing one that worked with one that blew up, they have the same 
values for all of the "basic constraints" sections: the site cert shows

BasicConstraints:[
  CA:false
  PathLen: undefined
]


the intermediate cert shows

BasicConstraints:[
  CA:true
  PathLen:0
]



Does pathLen:0 mean "no limit" or "no go"?


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: AW: Too many certificates in chain?!? Help!

[James H. H. Lampert]

On 5/23/23 8:31 AM, Christopher Schultz wrote:
Can you dump the whole cert (e.g. keytool -list -v -alias 'certname') 
for each cert and see if any of the certificates specify a maximum chain 
length somewhere? Evidently, it's an extension to the X.509 spec:


Comparing one that worked with one that blew up, they have the same 
values for all of the "basic constraints" sections: the site cert shows

BasicConstraints:[
  CA:false
  PathLen: undefined
]


the intermediate cert shows

BasicConstraints:[
  CA:true
  PathLen:0
]


and the root cert shows

BasicConstraints:[
  CA:true
  PathLen: no limit
]


As I said last week, given that (1) I could not reproduce the problem in 
four different attempts, and (2) the file size on the "problem" keystore 
changed when the keystore was sent to the customer box, *and then 
changed back* when I sent it back, I'm chalking this up to an extremely 
freaky fluke.


But thanks, Christopher, for taking a look at the problem.

--
JHHL

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: AW: Too many certificates in chain?!? Help!

[Christopher Schultz]

James,

On 5/18/23 16:01, James H. H. Lampert wrote:

On 5/18/23 12:18 AM, Thomas Hoffmann (Speed4Trade GmbH) wrote:

Which version of tomcat do you use?
Is the stack trace truncated in your mail? Is there a "caused by ..." 
further down the stacktrace?


It looks like the error is thrown deeper in SSLUtil when creating the 
ssl context.

Maybe you can post the full stack trace.


It just gets weirder.

FYI, The customer box is on Tomcat 8.5.73, running under IBM Java 
8.0.7.20 - pap6480sr7fp20-20221020_01(SR7 FP20), under OS/400 V7R3M0.


I fired up one of our on-site AS/400s (V6R1M0), with a Tomcat server 
(7.0.108, running under Java 6), and started plugging in keystores. 
First, I plugged in the initial self-signed keystore. No problem; 
launched just fine. Then I plugged in the signed-and-chained keystore. 
Still no problem; launched just fine. Then I plugged in a copy of the 
signed-and-chained keystore that I'd sent back from the customer box. 
STILL no problem!


I also did a "keytool -list -v -keystore x.ks" on both the new 
keystore and the one that worked, on my own Mac. No problems at all, and 
they looked very similar. But when I tried doing it on the customer 
AS/400, I got very similar error messages to what's in catalina.out.


I don't ordinarily send attachments to list servers, but the "how to ask 
questions the smart way" said it should be OK, if small and relevant, 
and stacktraces tend to get a bit garbled if sent inline, so I've 
attached a brief catalina.out excerpt.


The Connector failing to initialize is 
org.apache.coyote.http11.Http11Protocol-443 so that's the one configure 
for port 443. Please double-check the configuration to see where your 
keystore is located and verify that you have a small number of 
certificates in that keystore.


"Too many" implies that the chain is too long and usually the "too long" 
number is something reasonable like 10 or so. A chain of 3 certificates 
should definitely be okay.


Can you dump the whole cert (e.g. keytool -list -v -alias 'certname') 
for each cert and see if any of the certificates specify a maximum chain 
length somewhere? Evidently, it's an extension to the X.509 spec:


https://docs.oracle.com/javase/8/docs/api/java/security/cert/X509Certificate.html#getBasicConstraints--

Otherwise, you might want to check the value of the system property 
jdk.tls.maxCertificateChainLength. The default is 10[1] but it can 
probably be set to something lower. It's possible someone decided that 
cert chains in that environment should be very short. You might be able 
to override using CATALINA_OPTS or equivalent on OS/400.


-chris

[1] https://www.oracle.com/java/technologies/javase/8u271-relnotes.html

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

AW: AW: AW: Too many certificates in chain?!? Help!

[Thomas Hoffmann (Speed4Trade GmbH)]

Hello James,

> -Ursprüngliche Nachricht-
> Von: James H. H. Lampert 
> Gesendet: Freitag, 19. Mai 2023 00:33
> An: Tomcat Users List 
> Betreff: Re: AW: AW: Too many certificates in chain?!? Help!
> 
> On 5/18/23 1:57 PM, Thomas Hoffmann (Speed4Trade GmbH) wrote:
> 
> > So the error is raised not by tomcat but by the ibm JDK.
> 
> Yes. The results reported in my latest email say as much.
> 
> Those results also say that there's something different -- radically 
> different,
> judging from the amount of red that showed up in Hex Fiend -- between a
> keystore signed and chained on my new M2 Mac Mini, and a keystore signed
> and chained on my old 2017 iMac, both starting from the same original
> keystore, and the same CA certs, using the same version of KeyStore
> Explorer.
> 
> Just now, I thought I'd found something: I thought maybe it was the "Zulu-8"
> ARM-native Java 8 JVM that is currently the default on the M2 Mini. I
> temporarily pulled Zulu-8 out, forcing KeyStore Explorer to run under an
> Intel-native JVM. I tried signing and chaining the keystore, putting it on the
> customer box, and doing a keytool -list -v on it. It liked it. No 
> out-of-memory,
> no excessive (and maddeningly unspecified) chain length. And I was
> immediately certain that it was the Zulu-8.
> 
> But then I tried putting Zulu-8 back in, and doing the sign-and-chain
> operation under it. And it passed the keytool test just fine. Twice, with a
> reboot of my Mini in between.
> 
> Just for grins, I also ran the keytool test on all five keystore versions on 
> our
> cloud AS/400 (where it would NOT be good to shut down the Tomcat server).
> There, too, the *only* one that failed was the one that failed on the
> customer box. I did, however, notice something else:
> all five of them are 5486 bytes long at this end. As is the one that I sent 
> back
> from the customer box. And all of the ones that worked properly are 5486
> bytes as received on both remote AS/400s. But the bad one was 5515 bytes
> long as received on both remote AS/400s!
> 
> I'm sorely tempted to fire up the local AS/400 I was using earlier today,
> AGAIN!, and see how big it was, as received (being transferred directly,
> rather than through a private FTP server).
> 
> At this point, I'm calling it a fluke. Some freak glitch with that specific 
> sign-
> and-chain operation, that caused AS/400s to not like it.
> Unless somebody else has a better explanation.
> 
> --
> JHHL
> 

I am not familiar with IBM JDK and AS 400.
Maybe you can create all the PEM-Files (base64 encoded), private/public key and 
intermediates and assemble the jks file on the target machine?

Greetings,
Thomas

Re: AW: AW: Too many certificates in chain?!? Help!

[James H. H. Lampert]

On 5/18/23 1:57 PM, Thomas Hoffmann (Speed4Trade GmbH) wrote:


So the error is raised not by tomcat but by the ibm JDK.


Yes. The results reported in my latest email say as much.

Those results also say that there's something different -- radically 
different, judging from the amount of red that showed up in Hex Fiend -- 
between a keystore signed and chained on my new M2 Mac Mini, and a 
keystore signed and chained on my old 2017 iMac, both starting from the 
same original keystore, and the same CA certs, using the same version of 
KeyStore Explorer.


Just now, I thought I'd found something: I thought maybe it was the 
"Zulu-8" ARM-native Java 8 JVM that is currently the default on the M2 
Mini. I temporarily pulled Zulu-8 out, forcing KeyStore Explorer to run 
under an Intel-native JVM. I tried signing and chaining the keystore, 
putting it on the customer box, and doing a keytool -list -v on it. It 
liked it. No out-of-memory, no excessive (and maddeningly unspecified) 
chain length. And I was immediately certain that it was the Zulu-8.


But then I tried putting Zulu-8 back in, and doing the sign-and-chain 
operation under it. And it passed the keytool test just fine. Twice, 
with a reboot of my Mini in between.


Just for grins, I also ran the keytool test on all five keystore 
versions on our cloud AS/400 (where it would NOT be good to shut down 
the Tomcat server). There, too, the *only* one that failed was the one 
that failed on the customer box. I did, however, notice something else: 
all five of them are 5486 bytes long at this end. As is the one that I 
sent back from the customer box. And all of the ones that worked 
properly are 5486 bytes as received on both remote AS/400s. But the bad 
one was 5515 bytes long as received on both remote AS/400s!


I'm sorely tempted to fire up the local AS/400 I was using earlier 
today, AGAIN!, and see how big it was, as received (being transferred 
directly, rather than through a private FTP server).


At this point, I'm calling it a fluke. Some freak glitch with that 
specific sign-and-chain operation, that caused AS/400s to not like it. 
Unless somebody else has a better explanation.


--
JHHL

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

AW: AW: Too many certificates in chain?!? Help!

[Thomas Hoffmann (Speed4Trade GmbH)]

Hello James,

> -Ursprüngliche Nachricht-
> Von: James H. H. Lampert 
> Gesendet: Donnerstag, 18. Mai 2023 22:01
> An: Tomcat Users List 
> Betreff: Re: AW: Too many certificates in chain?!? Help!
> 
> On 5/18/23 12:18 AM, Thomas Hoffmann (Speed4Trade GmbH) wrote:
> > Which version of tomcat do you use?
> > Is the stack trace truncated in your mail? Is there a "caused by ..." 
> > further
> down the stacktrace?
> >
> > It looks like the error is thrown deeper in SSLUtil when creating the ssl
> context.
> > Maybe you can post the full stack trace.
> 
> It just gets weirder.
> 
> FYI, The customer box is on Tomcat 8.5.73, running under IBM Java
> 8.0.7.20 - pap6480sr7fp20-20221020_01(SR7 FP20), under OS/400 V7R3M0.
> 
> I fired up one of our on-site AS/400s (V6R1M0), with a Tomcat server
> (7.0.108, running under Java 6), and started plugging in keystores.
> First, I plugged in the initial self-signed keystore. No problem; launched 
> just
> fine. Then I plugged in the signed-and-chained keystore.
> Still no problem; launched just fine. Then I plugged in a copy of the signed-
> and-chained keystore that I'd sent back from the customer box.
> STILL no problem!
> 
> I also did a "keytool -list -v -keystore x.ks" on both the new keystore 
> and
> the one that worked, on my own Mac. No problems at all, and they looked
> very similar. But when I tried doing it on the customer AS/400, I got very
> similar error messages to what's in catalina.out.
> 
> I don't ordinarily send attachments to list servers, but the "how to ask
> questions the smart way" said it should be OK, if small and relevant, and
> stacktraces tend to get a bit garbled if sent inline, so I've attached a brief
> catalina.out excerpt.
> 
> --
> JHHL


The relevant line is:

Caused by: java.io.IOException: Too many certificates in chain
at com.ibm.crypto.provider.JavaKeyStore.engineLoad(Unknown Source)

So the error is raised not by tomcat but by the ibm JDK.
It seems the IBM version does something different than other JDKs

Unfortunately, I can't find any sources. Maybe its closed source from IBM.

Do you have to use the IBM JDK or can you use the same JDK as on your working 
machine?

Greetings,
Thomas

RE: AW: Too many certificates in chain?!? Help!

[jonmcalexander]

Maybe just a bad keystore or binary copy or some type of corruption.


Dream * Excel * Explore * Inspire
Jon McAlexander
Senior Infrastructure Engineer
Asst. Vice President
He/His

Middleware Product Engineering
Enterprise CIO | EAS | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.


> -Original Message-
> From: James H. H. Lampert 
> Sent: Thursday, May 18, 2023 3:42 PM
> To: Tomcat Users List 
> Subject: Re: AW: Too many certificates in chain?!? Help!
> 
> Weirder and weirder. (And hopefully, my previous email, with a catalina.out
> excerpt as an attachment, actually got distributed to the
> List.)
> 
> I copied the cert and the unsigned keystore from my new Mac (M2 Mini,
> running Ventura) to my old Mac (2017 iMac, running Catalina), and signing
> and chaining it there (again, in KeyStore Explorer).
> 
> I did a diff on the two signed/chained keystores. The file lengths are the
> same, but diff found (but didn't specify) the differences.
> 
> I put the version from the iMac on the customer box, and tried a keytool -list
> -v on it, from the customer box. It choked on the one from yesterday, signed
> and chained on the M2 Mini, but it liked the one from today, signed and
> chained on the 2017 iMac.
> 
> I installed "Hex Fiend," and did a binary comparison of the two signed,
> chained keystores. It showed *A LOT* of red.
> 
> --
> JHHL
> 
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: AW: Too many certificates in chain?!? Help!

[James H. H. Lampert]

Weirder and weirder. (And hopefully, my previous email, with a 
catalina.out excerpt as an attachment, actually got distributed to the 
List.)


I copied the cert and the unsigned keystore from my new Mac (M2 Mini, 
running Ventura) to my old Mac (2017 iMac, running Catalina), and 
signing and chaining it there (again, in KeyStore Explorer).


I did a diff on the two signed/chained keystores. The file lengths are 
the same, but diff found (but didn't specify) the differences.


I put the version from the iMac on the customer box, and tried a keytool 
-list -v on it, from the customer box. It choked on the one from 
yesterday, signed and chained on the M2 Mini, but it liked the one from 
today, signed and chained on the 2017 iMac.


I installed "Hex Fiend," and did a binary comparison of the two signed, 
chained keystores. It showed *A LOT* of red.


--
JHHL

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: AW: Too many certificates in chain?!? Help!

[jonmcalexander]

Hi James,

Take a look at this URL:

https://stackoverflow.com/questions/64721644/javax-net-ssl-sslprotocolexception-the-certificate-chain-length-11-exceeds-th

It may help,

Dream * Excel * Explore * Inspire
Jon McAlexander
Senior Infrastructure Engineer
Asst. Vice President
He/His

Middleware Product Engineering
Enterprise CIO | EAS | Middleware | Infrastructure Solutions

8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508

jonmcalexan...@wellsfargo.com
This message may contain confidential and/or privileged information. If you are 
not the addressee or authorized to receive this for the addressee, you must not 
use, copy, disclose, or take any action based on this message or any 
information herein. If you have received this message in error, please advise 
the sender immediately by reply e-mail and delete this message. Thank you for 
your cooperation.

> -Original Message-
> From: James H. H. Lampert 
> Sent: Thursday, May 18, 2023 3:01 PM
> To: Tomcat Users List 
> Subject: Re: AW: Too many certificates in chain?!? Help!
> 
> On 5/18/23 12:18 AM, Thomas Hoffmann (Speed4Trade GmbH) wrote:
> > Which version of tomcat do you use?
> > Is the stack trace truncated in your mail? Is there a "caused by ..." 
> > further
> down the stacktrace?
> >
> > It looks like the error is thrown deeper in SSLUtil when creating the ssl
> context.
> > Maybe you can post the full stack trace.
> 
> It just gets weirder.
> 
> FYI, The customer box is on Tomcat 8.5.73, running under IBM Java
> 8.0.7.20 - pap6480sr7fp20-20221020_01(SR7 FP20), under OS/400 V7R3M0.
> 
> I fired up one of our on-site AS/400s (V6R1M0), with a Tomcat server
> (7.0.108, running under Java 6), and started plugging in keystores.
> First, I plugged in the initial self-signed keystore. No problem; launched 
> just
> fine. Then I plugged in the signed-and-chained keystore.
> Still no problem; launched just fine. Then I plugged in a copy of the signed-
> and-chained keystore that I'd sent back from the customer box.
> STILL no problem!
> 
> I also did a "keytool -list -v -keystore x.ks" on both the new keystore 
> and
> the one that worked, on my own Mac. No problems at all, and they looked
> very similar. But when I tried doing it on the customer AS/400, I got very
> similar error messages to what's in catalina.out.
> 
> I don't ordinarily send attachments to list servers, but the "how to ask
> questions the smart way" said it should be OK, if small and relevant, and
> stacktraces tend to get a bit garbled if sent inline, so I've attached a brief
> catalina.out excerpt.
> 
> --
> JHHL

Re: AW: Too many certificates in chain?!? Help!

[James H. H. Lampert]

On 5/18/23 12:18 AM, Thomas Hoffmann (Speed4Trade GmbH) wrote:

Which version of tomcat do you use?
Is the stack trace truncated in your mail? Is there a "caused by ..." further 
down the stacktrace?

It looks like the error is thrown deeper in SSLUtil when creating the ssl 
context.
Maybe you can post the full stack trace.


It just gets weirder.

FYI, The customer box is on Tomcat 8.5.73, running under IBM Java 
8.0.7.20 - pap6480sr7fp20-20221020_01(SR7 FP20), under OS/400 V7R3M0.


I fired up one of our on-site AS/400s (V6R1M0), with a Tomcat server 
(7.0.108, running under Java 6), and started plugging in keystores. 
First, I plugged in the initial self-signed keystore. No problem; 
launched just fine. Then I plugged in the signed-and-chained keystore. 
Still no problem; launched just fine. Then I plugged in a copy of the 
signed-and-chained keystore that I'd sent back from the customer box. 
STILL no problem!


I also did a "keytool -list -v -keystore x.ks" on both the new 
keystore and the one that worked, on my own Mac. No problems at all, and 
they looked very similar. But when I tried doing it on the customer 
AS/400, I got very similar error messages to what's in catalina.out.


I don't ordinarily send attachments to list servers, but the "how to ask 
questions the smart way" said it should be OK, if small and relevant, 
and stacktraces tend to get a bit garbled if sent inline, so I've 
attached a brief catalina.out excerpt.


--
JHHL17-May-2023 19:33:28.162 INFO [main] org.apache.coyote.AbstractProtocol.init 
Initializing ProtocolHandler ["https-jsse-nio-443"]
JVMDUMP039I Processing dump event "systhrow", detail 
"java/lang/OutOfMemoryError" at 2023/05/17 19:33:32 - please wait.
JVMDUMP032I JVM requested System dump using 
'//core.20230517.193332.26378.0001.dmp' in response to an event
JVMDUMP010I System dump written to //core.20230517.193332.26378.0001.dmp
JVMDUMP032I JVM requested Heap dump using 
'//heapdump.20230517.193332.26378.0002.phd' in response to an event
JVMDUMP010I Heap dump written to //heapdump.20230517.193332.26378.0002.phd
JVMDUMP032I JVM requested Java dump using 
'//javacore.20230517.193332.26378.0003.txt' in response to an event
JVMDUMP010I Java dump written to //javacore.20230517.193332.26378.0003.txt
JVMDUMP032I JVM requested Snap dump using 
'//Snap.20230517.193332.26378.0004.trc' in response to an event
JVMDUMP010I Snap dump written to //Snap.20230517.193332.26378.0004.trc
JVMDUMP013I Processed dump event "systhrow", detail 
"java/lang/OutOfMemoryError".
17-May-2023 19:34:12.173 SEVERE [main] 
org.apache.catalina.core.StandardService.initInternal Failed to initialize 
connector [Connector[org.apache.coyote.http11.Http11Protocol-443]]
org.apache.catalina.LifecycleException: Protocol handler initialization failed
at 
org.apache.catalina.connector.Connector.initInternal(Connector.java:1076)
at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:136)
at 
org.apache.catalina.core.StandardService.initInternal(StandardService.java:552)
at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:136)
at 
org.apache.catalina.core.StandardServer.initInternal(StandardServer.java:843)
at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:136)
at org.apache.catalina.startup.Catalina.load(Catalina.java:639)
at org.apache.catalina.startup.Catalina.load(Catalina.java:662)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at 
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:90)
at 
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:55)
at java.lang.reflect.Method.invoke(Method.java:508)
at org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:305)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:475)
Caused by: java.lang.IllegalArgumentException: Too many certificates in chain
at 
org.apache.tomcat.util.net.AbstractJsseEndpoint.createSSLContext(AbstractJsseEndpoint.java:100)
at 
org.apache.tomcat.util.net.AbstractJsseEndpoint.initialiseSsl(AbstractJsseEndpoint.java:72)
at org.apache.tomcat.util.net.NioEndpoint.bind(NioEndpoint.java:246)
at 
org.apache.tomcat.util.net.AbstractEndpoint.init(AbstractEndpoint.java:1161)
at 
org.apache.tomcat.util.net.AbstractJsseEndpoint.init(AbstractJsseEndpoint.java:222)
at org.apache.coyote.AbstractProtocol.init(AbstractProtocol.java:599)
at 
org.apache.coyote.http11.AbstractHttp11Protocol.init(AbstractHttp11Protocol.java:80)
at 
org.apache.catalina.connector.Connector.initInternal(Connector.java:1074)
... 13 more
Caused by: java.io.IOException: Too many certificates in chain
at com.ibm.crypto.provider.JavaKeyStore.engineLoad(Unknown Source)
at com.ibm.crypto.provider.bg.engineLoad(Unknown Source)
at com.ibm.crypto.provider.JavaKeyStore$DualFormatJKS.engineLoad(Unknown 
Source)
at 

AW: Too many certificates in chain?!? Help!

[Thomas Hoffmann (Speed4Trade GmbH)]

Hello James,

> -Ursprüngliche Nachricht-
> Von: James H. H. Lampert 
> Gesendet: Donnerstag, 18. Mai 2023 02:00
> An: Tomcat Users List 
> Betreff: Too many certificates in chain?!? Help!
> 
> Ladies and Gentlemen:
> 
> I just had to revert a customer Tomcat server immediately after plugging in a
> new keystore.
> 
> It failed in protocol handler initialization.
> 
>Caused by: java.lang.IllegalArgumentException: Too many certificates in
> chain   at
> org.apache.tomcat.util.net.AbstractJsseEndpoint.createSSLContext(Abstract
> JsseEndpoint.java:100)
>   at
> org.apache.tomcat.util.net.AbstractJsseEndpoint.initialiseSsl(AbstractJsseEn
> dpoint.java:72)
> 
>   at org.apache.tomcat.util.net.NioEndpoint.bind(NioEndpoint.java:246)
> 
>   at
> org.apache.tomcat.util.net.AbstractEndpoint.init(AbstractEndpoint.java:1161
> )
> 
>   at
> org.apache.tomcat.util.net.AbstractJsseEndpoint.init(AbstractJsseEndpoint.j
> ava:222)
> 
>   at org.apache.coyote.AbstractProtocol.init(AbstractProtocol.java:599)
> 
>   at
> org.apache.coyote.http11.AbstractHttp11Protocol.init(AbstractHttp11Protoc
> ol.java:80)
> 
>   at
> org.apache.catalina.connector.Connector.initInternal(Connector.java:1074)
> 
>   . . .
> 
> I've never seen anything like this before. According to KeyStore Explorer
> 5.4.4, the chain consists of a root, an intermediate, and the signed 
> certificate
> for the web site. And the root and intermediate are exactly the same root
> and intermediate as the last good keystore.
> 
> Can anybody shed any light on what went wrong?
> 
> Tomorrow morning, I'm going to try plugging the keystore into a Tomcat
> server on an AS/400 in the office, to see if I can reproduce it.
> 
> --
> James H. H. Lampert
> 

Which version of tomcat do you use?
Is the stack trace truncated in your mail? Is there a "caused by ..." further 
down the stacktrace?

It looks like the error is thrown deeper in SSLUtil when creating the ssl 
context.
Maybe you can post the full stack trace.

Greetings,
Thomas

Re: Too many certificates in chain?!? Help!

[James H. H. Lampert]

On 5/17/23 5:10 PM, Jason Tan wrote:

Have a look at this. 
https://success.qualys.com/discussions/s/question/0D52L4To0DUSAZ/your-ssl-server-test-incorrectly-reports-an-incomplete-chain


That's actually my own thread, from a few years ago.

The problem here is not an incomplete chain, and neither is it prior 
problem of the supporting certs being *included* in the keystore, rather 
than *chained* (a subtlety I didn't understand at the time).


That problem caused security scans to raise red flags. This one is 
keeping Tomcat from opening the port.


--
JHHL


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Too many certificates in chain?!? Help!

[Jason Tan]

Hi James,
Have a look at this. 
https://success.qualys.com/discussions/s/question/0D52L4To0DUSAZ/your-ssl-server-test-incorrectly-reports-an-incomplete-chain
You might have the issue where your chain length is 1 when it should be 3. You 
may need to redo your certs.
Best Regards,
Jason Tan 
-Original Message-
From: James H. H. Lampert  
Sent: Thursday, May 18, 2023 10:00 AM
To: Tomcat Users List 
Subject: Too many certificates in chain?!? Help!

Ladies and Gentlemen:

I just had to revert a customer Tomcat server immediately after plugging in a 
new keystore.

It failed in protocol handler initialization.

   Caused by: java.lang.IllegalArgumentException: Too many certificates in 
chain   at
org.apache.tomcat.util.net.AbstractJsseEndpoint.createSSLContext(AbstractJsseEndpoint.java:100)
  at
org.apache.tomcat.util.net.AbstractJsseEndpoint.initialiseSsl(AbstractJsseEndpoint.java:72)
 

  at org.apache.tomcat.util.net.NioEndpoint.bind(NioEndpoint.java:246) 

  at
org.apache.tomcat.util.net.AbstractEndpoint.init(AbstractEndpoint.java:1161) 

  at
org.apache.tomcat.util.net.AbstractJsseEndpoint.init(AbstractJsseEndpoint.java:222)
 

  at org.apache.coyote.AbstractProtocol.init(AbstractProtocol.java:599) 

  at
org.apache.coyote.http11.AbstractHttp11Protocol.init(AbstractHttp11Protocol.java:80)
 

  at
org.apache.catalina.connector.Connector.initInternal(Connector.java:1074) 

  . . .

I've never seen anything like this before. According to KeyStore Explorer 
5.4.4, the chain consists of a root, an intermediate, and the signed 
certificate for the web site. And the root and intermediate are exactly the 
same root and intermediate as the last good keystore.

Can anybody shed any light on what went wrong?

Tomorrow morning, I'm going to try plugging the keystore into a Tomcat server 
on an AS/400 in the office, to see if I can reproduce it.

--
James H. H. Lampert

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Too many certificates in chain?!? Help!

[James H. H. Lampert]

Ladies and Gentlemen:

I just had to revert a customer Tomcat server immediately after plugging 
in a new keystore.


It failed in protocol handler initialization.

  Caused by: java.lang.IllegalArgumentException: Too many certificates 
in chain
  at 
org.apache.tomcat.util.net.AbstractJsseEndpoint.createSSLContext(AbstractJsseEndpoint.java:100)
  at 
org.apache.tomcat.util.net.AbstractJsseEndpoint.initialiseSsl(AbstractJsseEndpoint.java:72) 

  at org.apache.tomcat.util.net.NioEndpoint.bind(NioEndpoint.java:246) 

  at 
org.apache.tomcat.util.net.AbstractEndpoint.init(AbstractEndpoint.java:1161) 

  at 
org.apache.tomcat.util.net.AbstractJsseEndpoint.init(AbstractJsseEndpoint.java:222) 

  at org.apache.coyote.AbstractProtocol.init(AbstractProtocol.java:599) 

  at 
org.apache.coyote.http11.AbstractHttp11Protocol.init(AbstractHttp11Protocol.java:80) 

  at 
org.apache.catalina.connector.Connector.initInternal(Connector.java:1074) 


 . . .

I've never seen anything like this before. According to KeyStore 
Explorer 5.4.4, the chain consists of a root, an intermediate, and the 
signed certificate for the web site. And the root and intermediate are 
exactly the same root and intermediate as the last good keystore.


Can anybody shed any light on what went wrong?

Tomorrow morning, I'm going to try plugging the keystore into a Tomcat 
server on an AS/400 in the office, to see if I can reproduce it.


--
James H. H. Lampert

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: [OT] Apache Tomcat 10.0.26 Shortcut issue in our environment - Need Help

[Christopher Schultz]

Sriharikumar,

On 4/5/23 07:04, P M, SRIHARIKUMAR (Consultant) wrote:
While validating source for Apache Tomcat 10.0.26, The shortcut is 
throwing error while launching. Please find the results below


Tomcat Version : 10.0.26


End of life: https://tomcat.apache.org/tomcat-10.0-eol.html


Operating system : Windows 10
I was sure this was EOL as well, but it's not. Microsoft just pretends 
it doesn't exist anymore ;)



Dependency : JAVA SDK 11 is installed.

*Error :*“ The item referred to by this shortcut cannot be accessed. You 
may not have appropriate Permission”.


Method tried but still could not make shortcut work:

 1. Searched in Google and tried removing shortcut and created manually.
 2. Rebooted the system and checked.
 3. Started the Tomcat Service Manually and checked.


Does this work?


 4. Provided Permission to the Shortcut pointing exe and tried.
 5. Tried more than 5 Machines to make sure if its due to any machine
related issue.

 1. Error while launching Configure Tomcat Shortcut.

 2. Error while launching Monitor Tomcat Shortcut.

 3. Error while launching Tomcat Manager Shortcut.



Do you need to use a shortcut? What happens if you point your service 
directly at the binary?


-chris

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Apache Tomcat 10.0.26 Shortcut issue in our environment - Need Help

[Rob Sargent]

> On Apr 5, 2023, at 5:04 AM, P M, SRIHARIKUMAR (Consultant) 
>  wrote:
> 
> 
> Hi Team,
>  
> While validating source for Apache Tomcat 10.0.26, The shortcut is throwing 
> error while launching. Please find the results below
>  
> Tomcat Version : 10.0.26
>  
> Operating system : Windows 10
>  
> Dependency : JAVA SDK 11 is installed.
>  
> Error : “ The item referred to by this shortcut cannot be accessed. You may 
> not have appropriate Permission”.
>  
> Method tried but still could not make shortcut work:
>  
> Searched in Google and tried removing shortcut and created manually.
> Rebooted the system and checked.
> Started the Tomcat Service Manually and checked.
> Provided Permission to the Shortcut pointing exe and tried.
> Tried more than 5 Machines to make sure if its due to any machine related 
> issue.
>  
> Error while launching Configure Tomcat Shortcut.
>  
>  

Pictures don’t work on this list. Get the text (as text)
> 
>  
>  
> Error while launching Monitor Tomcat Shortcut.
>  
>  
> 
>  
>  
> Error while launching Tomcat Manager Shortcut.
>  
>  
> 
>  
>  
> Thanks & Regards
> Sriharikumar PM
>  
>  

Re: Apache Tomcat 10.0.26 Shortcut issue in our environment - Need Help

[Kevin Huntly]

Hi Sriharikumar,

It looks like the images were stripped from the email... When you have a
chance, can you run the following on the Tomcat executable:

Open Powershell
Navigate to the Tomcat installation directory
Run the following:
  - Get-Acl tomcat.exe

On Wed, Apr 5, 2023, 07:04 P M, SRIHARIKUMAR (Consultant)
 wrote:

> Hi Team,
>
>
>
> While validating source for Apache Tomcat 10.0.26, The shortcut is
> throwing error while launching. Please find the results below
>
>
>
> Tomcat Version : 10.0.26
>
>
>
> Operating system : Windows 10
>
>
>
> Dependency : JAVA SDK 11 is installed.
>
>
>
> *Error :* “ The item referred to by this shortcut cannot be accessed. You
> may not have appropriate Permission”.
>
>
>
> Method tried but still could not make shortcut work:
>
>
>
>1. Searched in Google and tried removing shortcut and created manually.
>2. Rebooted the system and checked.
>3. Started the Tomcat Service Manually and checked.
>4. Provided Permission to the Shortcut pointing exe and tried.
>5. Tried more than 5 Machines to make sure if its due to any machine
>related issue.
>
>
>
>1. Error while launching Configure Tomcat Shortcut.
>
>
>
>
>
>
>
>
>
>1. Error while launching Monitor Tomcat Shortcut.
>
>
>
>
>
>
>
>
>
>1. Error while launching Tomcat Manager Shortcut.
>
>
>
>
>
>
>
>
>
> Thanks & Regards
>
> Sriharikumar PM
>
>
>
>
>

Apache Tomcat 10.0.26 Shortcut issue in our environment - Need Help

[P M, SRIHARIKUMAR (Consultant)]

Hi Team,

While validating source for Apache Tomcat 10.0.26, The shortcut is throwing 
error while launching. Please find the results below

Tomcat Version : 10.0.26

Operating system : Windows 10

Dependency : JAVA SDK 11 is installed.

Error : " The item referred to by this shortcut cannot be accessed. You may not 
have appropriate Permission".

Method tried but still could not make shortcut work:


  1.  Searched in Google and tried removing shortcut and created manually.
  2.  Rebooted the system and checked.
  3.  Started the Tomcat Service Manually and checked.
  4.  Provided Permission to the Shortcut pointing exe and tried.
  5.  Tried more than 5 Machines to make sure if its due to any machine related 
issue.


  1.  Error while launching Configure Tomcat Shortcut.


[cid:image003.png@01D967D6.F9D4DEC0]



  1.  Error while launching Monitor Tomcat Shortcut.


[cid:image005.png@01D967D6.F9D4DEC0]



  1.  Error while launching Tomcat Manager Shortcut.


[cid:image002.png@01D961AE.E6EFCFA0]


Thanks & Regards
Sriharikumar PM

Re: Please help me install Tomcat

[TRS-80]

Amn Ojee Uw  writes:

> I've tried to install Tomcat, different version, like so :
> /# Download the latest release of tomcat 10.1.5//
> //wget
> https://downloads.apache.org/tomcat/tomcat-8/v8.5.85/bin/apache-tomcat-8.5.85.tar.gz//
> //
> //# Create tomcat directory//
> //sudo mkdir /opt/tomcat//
> //
> //# Extract the binary file with tar command in the /opt/tomcat path//
> //sudo tar -xvf apache-tomcat-8.5.85.tar.gz -C /opt/tomcat
> --strip-components=1//

[...]

> I really don't even know what to do with that info. I am an enthusiast
> programmer and not a trained computer programmer, thus I find this
> kind of things really challenging.

Given these comments, I am not understanding why you are trying to
install from tarball when it appears to me that Tomcat is available in
the Debian repos (at least in Bookworm and Sid):

https://packages.debian.org/search?keywords=tomcat

It looks like 'tomcat10' is the package name you are looking for.

-- 
Cheers,
TRS-80


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: [EXTERNAL EMAIL] Please help me install Tomcat

[logo]

automatically 
prevented

from changing kind on system/package/debian-s>//
//Jan 19 19:38:58 arbolone sudo[5571]:   jamiil : TTY=pts/0 ;
PWD=/home/jamiil/Downloads ; USER=root ; COMMAND=/usr/bi>//
//Jan 19 19:38:58 arbolone sudo[5571]: pam_unix(sudo:session): session
opened for user root(uid=0) by (uid=1000)//
//Jan 19 19:38:59 arbolone gnome-shell[1443]: Window manager warning:
Buggy client sent a _NET_ACTIVE_WINDOW message w>//
//Jan 19 19:39:01 arbolone gnome-shell[1443]: libinput error: client
bug: timer event10 debounce short: scheduled expi>//
//Jan 19 19:39:05 arbolone gnome-shell[1443]: libinput error: event10 
-

Logitech Wireless Mouse: client bug: event pro>//
//Jan 19 19:40:13 arbolone sudo[5571]: pam_unix(sudo:session): session
closed for user root//
//Jan 19 19:40:27 arbolone sudo[5672]:   jamiil : TTY=pts/0 ;
PWD=/home/jamiil/Downloads ; USER=root ; COMMAND=/usr/bi>//
//Jan 19 19:40:27 arbolone sudo[5672]: pam_unix(sudo:session): session
opened for user root(uid=0) by (uid=1000)//
//Jan 19 19:40:27 arbolone sudo[5672]: pam_unix(sudo:session): session
closed for user root//
//Jan 19 19:40:41 arbolone sudo[5691]:   jamiil : TTY=pts/0 ;
PWD=/home/jamiil/Downloads ; USER=root ; COMMAND=/usr/bi>//
//Jan 19 19:40:41 arbolone sudo[5691]: pam_unix(sudo:session): session
opened for user root(uid=0) by (uid=1000)//
//Jan 19 19:40:41 arbolone sudo[5691]: pam_unix(sudo:session): session
closed for user root//
//Jan 19 19:40:57 arbolone sudo[5713]:   jamiil : TTY=pts/0 ;
PWD=/home/jamiil/Downloads ; USER=root ; COMMAND=/usr/bi>//
//Jan 19 19:40:57 arbolone sudo[5713]: pam_unix(sudo:session): session
opened for user root(uid=0) by (uid=1000)//
//Jan 19 19:40:57 arbolone sudo[5713]: pam_unix(sudo:session): session
closed for user root//
//Jan 19 19:42:28 arbolone gnome-shell[1443]: libinput error: event10 
-

Logitech Wireless Mouse: client bug: event pro>//
//Jan 19 19:42:28 arbolone gnome-shell[1443]: libinput error: event10 
-

Logitech Wireless Mouse: WARNING: log rate lim>//
//lines 2916-2938/2938 (END)/


I really don't even know what to do with that info. I am an enthusiast
programmer and not a trained computer programmer, thus I find this 
kind

of things really challenging.

an anyone help?


/Thanks/



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: [EXTERNAL EMAIL] Please help me install Tomcat

[Niranjan Rao]

71]: pam_unix(sudo:session): session
closed for user root//
//Jan 19 19:40:27 arbolone sudo[5672]:   jamiil : TTY=pts/0 ;
PWD=/home/jamiil/Downloads ; USER=root ; COMMAND=/usr/bi>//
//Jan 19 19:40:27 arbolone sudo[5672]: pam_unix(sudo:session): session
opened for user root(uid=0) by (uid=1000)//
//Jan 19 19:40:27 arbolone sudo[5672]: pam_unix(sudo:session): session
closed for user root//
//Jan 19 19:40:41 arbolone sudo[5691]:   jamiil : TTY=pts/0 ;
PWD=/home/jamiil/Downloads ; USER=root ; COMMAND=/usr/bi>//
//Jan 19 19:40:41 arbolone sudo[5691]: pam_unix(sudo:session): session
opened for user root(uid=0) by (uid=1000)//
//Jan 19 19:40:41 arbolone sudo[5691]: pam_unix(sudo:session): session
closed for user root//
//Jan 19 19:40:57 arbolone sudo[5713]:   jamiil : TTY=pts/0 ;
PWD=/home/jamiil/Downloads ; USER=root ; COMMAND=/usr/bi>//
//Jan 19 19:40:57 arbolone sudo[5713]: pam_unix(sudo:session): session
opened for user root(uid=0) by (uid=1000)//
//Jan 19 19:40:57 arbolone sudo[5713]: pam_unix(sudo:session): session
closed for user root//
//Jan 19 19:42:28 arbolone gnome-shell[1443]: libinput error: event10 -
Logitech Wireless Mouse: client bug: event pro>//
//Jan 19 19:42:28 arbolone gnome-shell[1443]: libinput error: event10 -
Logitech Wireless Mouse: WARNING: log rate lim>//
//lines 2916-2938/2938 (END)/


I really don't even know what to do with that info. I am an enthusiast
programmer and not a trained computer programmer, thus I find this kind
of things really challenging.

an anyone help?


/Thanks/


--
*Niranjan Rao | Sr.Architect
**Paymentus
**Paymentus Corporation***/The Real-Time Bill Payment Company^TM //^
/
860 Hillview Court Suite 220 Milpitas CA 95035
www.paymentus.com <http://www.paymentus.com/>

Please help me install Tomcat

[Amn Ojee Uw]

me-shell[1443]: libinput error: event10 - 
Logitech Wireless Mouse: client bug: event pro>//
//Jan 19 19:42:28 arbolone gnome-shell[1443]: libinput error: event10 - 
Logitech Wireless Mouse: WARNING: log rate lim>//

//lines 2916-2938/2938 (END)/


I really don't even know what to do with that info. I am an enthusiast 
programmer and not a trained computer programmer, thus I find this kind 
of things really challenging.


an anyone help?


/Thanks/

Re: Tomcat 10.1.4 HTTP Status 404 and 500 Help

[John Barrow]

Mark,

Thanks for your corrections. I have updated my internal "How to" guide that
I created when I first used Tomcat to build my servlets and it appears that
some of my deductions from that initial research and "getting it to work"
were misguided.

John

On Wed, 11 Jan 2023, 09:28 Mark Thomas,  wrote:

>
>
> On 10/01/2023 22:34, John Barrow wrote:
> > Hi Anthony,
> >
> > Not an expert, but have managed to deploy simple servlets. A couple of
> > observations, not sure why using ROOT, you should have your own folder
> for
> > your application (e.g. myFirstApp\...).
>
> Not true. ROOT is an acceptable option here.
>
> > Also, I have found that the main app folder (e.g. myFirstApp) must start
> > with a lowercase letter (I don't know reason for this but have it in my
> > notes) otherwise the servlets won't be found when accessing them through
> a
> > browser.
>
> Also not true. You may be mixing the rules for Java package names with
> those for context paths.
>
> > Finally, the default install for TomCat has several example servlets
> > already written so check that they work first and then take the sources
> and
> > clone them, using them as a guide for your own servlets.
> >
> > John
> >
> > PS: Probably worth reviewing what file names you use (see your
> webapps.xml
> > file) when making public requests so as not to inadvertently offend
> anyone.
>
> +1
>
> Mark
>
> >
> > On Tue, 10 Jan 2023, 18:59 Anthony Dell'Anno,
> >  wrote:
> >
> >> Good afternoon,
> >>
> >>  I'm trying to run my first servlet on Tomcat, and am continually
> >> getting an HTTP Status 404 (I've also gotten 500 previously, with the
> root
> >> cause being an apparent compiler mismatch (it would say that it's being
> >> compiled by version 63.0, which is Java 19, but that the latest version
> >> that was currently accepted was version 59.0, or Java 15), but then
> after
> >> upgrading to JDK 19, changing the JAVA_HOME variable and trying to run,
> it
> >> would still give me the same error)?
> >>
> >>  I have my Servlet, called HelloWorldServlet, located in the
> >> "C:\apache-tomcat-10.1.4\webapps\ROOT\WEB-INF\classes\" directory, with
> the
> >> web.xml file being located outside of the classes folder, directly
> inside
> >> of the WEB-INF folder.
> >>
> >>  I've included both files. StackOverflow wasn't much help as of
> yet, so
> >> I'm hoping that the Tomcat Users community can help me solve this so
> that I
> >> can continue learning servlets. I'm working on building my own software
> >> company.
> >>
> >> Any help is appreciated.
> >>
> >> Thank you very much,
> >>
> >> Anthony Dell'Anno
> >>
> >> -
> >> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> >> For additional commands, e-mail: users-h...@tomcat.apache.org
> >
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>

Re: Tomcat 10.1.4 HTTP Status 404 and 500 Help

[Mark Thomas]

On 10/01/2023 22:34, John Barrow wrote:

Hi Anthony,

Not an expert, but have managed to deploy simple servlets. A couple of
observations, not sure why using ROOT, you should have your own folder for
your application (e.g. myFirstApp\...).


Not true. ROOT is an acceptable option here.


Also, I have found that the main app folder (e.g. myFirstApp) must start
with a lowercase letter (I don't know reason for this but have it in my
notes) otherwise the servlets won't be found when accessing them through a
browser.


Also not true. You may be mixing the rules for Java package names with 
those for context paths.



Finally, the default install for TomCat has several example servlets
already written so check that they work first and then take the sources and
clone them, using them as a guide for your own servlets.

John

PS: Probably worth reviewing what file names you use (see your webapps.xml
file) when making public requests so as not to inadvertently offend anyone.


+1

Mark



On Tue, 10 Jan 2023, 18:59 Anthony Dell'Anno,
 wrote:


Good afternoon,

 I'm trying to run my first servlet on Tomcat, and am continually
getting an HTTP Status 404 (I've also gotten 500 previously, with the root
cause being an apparent compiler mismatch (it would say that it's being
compiled by version 63.0, which is Java 19, but that the latest version
that was currently accepted was version 59.0, or Java 15), but then after
upgrading to JDK 19, changing the JAVA_HOME variable and trying to run, it
would still give me the same error)?

 I have my Servlet, called HelloWorldServlet, located in the
"C:\apache-tomcat-10.1.4\webapps\ROOT\WEB-INF\classes\" directory, with the
web.xml file being located outside of the classes folder, directly inside
of the WEB-INF folder.

 I've included both files. StackOverflow wasn't much help as of yet, so
I'm hoping that the Tomcat Users community can help me solve this so that I
can continue learning servlets. I'm working on building my own software
company.

Any help is appreciated.

Thank you very much,

Anthony Dell'Anno

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org




-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Tomcat 10.1.4 HTTP Status 404 and 500 Help

[Christopher Schultz]

Anthony,

On 1/10/23 13:58, Anthony Dell'Anno wrote:

I'm trying to run my first servlet on Tomcat


Welcome!


and am continually getting an HTTP Status 404 (I've also gotten 500
previously, with the root cause being an apparent compiler mismatch
(it would say that it's being compiled by version 63.0, which is Java
19, but that the latest version that was currently accepted was
version 59.0, or Java 15), but then after upgrading to JDK 19,
changing the JAVA_HOME variable and trying to run, it would still
give me the same error)?


Any error like "Unsupported class version 63.0" or similar will be due 
to a JVM mismatch. There are three ways to correct this:


1. Compile with an earlier JVM
2. Run with a later JVM
3. Specify the target JVM with the compiler. This can be done with the 
"-target" compiler switch in modern compilers


I have my Servlet, called HelloWorldServlet, located in the 
"C:\apache-tomcat-10.1.4\webapps\ROOT\WEB-INF\classes\" directory


This isn't a good choice, but will work. I can get back to this, later. 
Is your servlet compiled into a .class file, or do you have a .java file 
in that directory (or both, which is fine)?



with the web.xml file being located outside of the classes folder,
directly inside of the WEB-INF folder.


That's where it belongs. The "ROOT" directory contains the entire web 
application, and WEB-INF is a special directory which can contain:


classes/**/*.class [classes, usually your application]
lib/*.jar [libraries, usually from elsewhere]
web.xml [the deployment descriptor]

I've included both files. StackOverflow wasn't much help as of yet, 
The mailing list often strips attachments, but your plain-text 
attachment made it through. It's much less helpful as an attachment than 
if it were inline, so I'm going to post it here so I can comment on it, 
and also so others can read it without having to detach it:


(I've performed some light editing, which I hope you'll understand.)




  
  

HelloWorldServlet
webapps.HelloXXXServlet
  

  
HelloWorldServlet

/HelloWorld

  




What is the name of the servlet class itself? You said you have a file 
in WEB-INF/classes called HelloWorldServlet. If that's the class name, 
then it should be in the file HelloWorldServlet.class. In your 
configuration, you have servlet.HelloXXXServlet which is definitely wrong.


If your class name is actually HelloXXXServlet, then you need:

  
  

HelloWorldServlet
HelloXXXServlet
  

The servlet class needs to be the "fully qualified name" of the class, 
which will be the package name (which is nothing in your case) followed 
by a period (if it's in a package, which it isn't) followed by the short 
name of the class (HelloXXXServlet).


The "webapps." was completely incorrect, and it's not clear to me 
exactly what the class name actually is, but I think you should be able 
to get it from here.


The  is something you can make-up and is only used within 
web.xml for the purposes of defining a  and then mapping it 
later in  (and other things, actually, but you aren't 
working with any of those quite yet).


Back to the "don't put your files into WEB-INF/classes" comment I made 
above: it's a good idea to put all of your code into "packages". In 
Java, that means:


1. Putting your class source e.g. HelloXXXServlet.java into a directory 
which matches the package. So if your package will be 
"anthony.dellanno", then you need to have your file in 
src/anthony/dellanno/HelloXXXServlet.java. When compiled, this file 
needs to go into WEB-INF/classes/anthony/dellanno/HelloXXXSServlet.class


2. In your .java file, you need to add at this at the top of the file:

package anthony.dellanno;

Once you do that, you'll change the "fully qualified class name" in 
web.xml to this:


  
HelloWorldServlet
anthony.dellanno.HelloXXXServlet
  

And everything else is the same.


so I'm hoping that the Tomcat Users community can help me solve this
so that I can continue learning servlets. I'm working on building my
own software  company.
I highly recommend that anyone working with Java Servlets actually read 
the Java Servlet Specification -- whatever version makes sense for you 
to read. Almost any of them would be good, since there is little change 
between versions for the most part.


Nick Williams wrote a comprehensive (and I mean comprehensive!) book in 
2014 which – despite its age (9 years ago) – is still entirely relevant. 
It's called Professional Java for Web Applications. It guides you 
through these basics and goes all the way up through databases, 
WebSocket, and using the Spring Framework (which he favors in the book; 
other frameworks are available as well).


You can also probably find something similar as your local library if 
you don't want to pay $50 for a dead tree that takes up space on your 
shelf forever.


Hope that he

Re: Tomcat 10.1.4 HTTP Status 404 and 500 Help

[John Barrow]

Hi Anthony,

Not an expert, but have managed to deploy simple servlets. A couple of
observations, not sure why using ROOT, you should have your own folder for
your application (e.g. myFirstApp\...).

Also, I have found that the main app folder (e.g. myFirstApp) must start
with a lowercase letter (I don't know reason for this but have it in my
notes) otherwise the servlets won't be found when accessing them through a
browser.

Finally, the default install for TomCat has several example servlets
already written so check that they work first and then take the sources and
clone them, using them as a guide for your own servlets.

John

PS: Probably worth reviewing what file names you use (see your webapps.xml
file) when making public requests so as not to inadvertently offend anyone.

On Tue, 10 Jan 2023, 18:59 Anthony Dell'Anno,
 wrote:

> Good afternoon,
>
> I'm trying to run my first servlet on Tomcat, and am continually
> getting an HTTP Status 404 (I've also gotten 500 previously, with the root
> cause being an apparent compiler mismatch (it would say that it's being
> compiled by version 63.0, which is Java 19, but that the latest version
> that was currently accepted was version 59.0, or Java 15), but then after
> upgrading to JDK 19, changing the JAVA_HOME variable and trying to run, it
> would still give me the same error)?
>
> I have my Servlet, called HelloWorldServlet, located in the
> "C:\apache-tomcat-10.1.4\webapps\ROOT\WEB-INF\classes\" directory, with the
> web.xml file being located outside of the classes folder, directly inside
> of the WEB-INF folder.
>
>     I've included both files. StackOverflow wasn't much help as of yet, so
> I'm hoping that the Tomcat Users community can help me solve this so that I
> can continue learning servlets. I'm working on building my own software
> company.
>
> Any help is appreciated.
>
> Thank you very much,
>
> Anthony Dell'Anno
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org

Tomcat 10.1.4 HTTP Status 404 and 500 Help

[Anthony Dell'Anno]

Good afternoon, 
    I'm trying to run my first servlet on Tomcat, and am continually getting an 
HTTP Status 404 (I've also gotten 500 previously, with the root cause being an 
apparent compiler mismatch (it would say that it's being compiled by version 
63.0, which is Java 19, but that the latest version that was currently accepted 
was version 59.0, or Java 15), but then after upgrading to JDK 19, changing the 
JAVA_HOME variable and trying to run, it would still give me the same error)?

I have my Servlet, called HelloWorldServlet, located in the 
"C:\apache-tomcat-10.1.4\webapps\ROOT\WEB-INF\classes\" directory, with the 
web.xml file being located outside of the classes folder, directly inside of 
the WEB-INF folder.
    I've included both files. StackOverflow wasn't much help as of yet, so I'm 
hoping that the Tomcat Users community can help me solve this so that I can 
continue learning servlets. I'm working on building my own software  company.

Any help is appreciated.
Thank you very much,
Anthony Dell'Anno 

	 
	
		 
		
			HelloWorldServlet 
			webapps.HelloMotherFuckerServlet 
			
		 
		
		 
		
			HelloWorldServlet 
			/HelloWorld 
			
			
			
	 
	

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Help Needed for installation of apache-tomcat-8.5.5

[Olaf Kock]

On 08.10.22 05:09, Verma, Sahil wrote:


Hi Team,

We have a requirement to install Tomcat 8.5.5 version in Linux 
environment. Please help with steps of downloading the package and 
installation steps.


Linux version -  Red Hat Enterprise Linux release 8.6



You have a requirement to install a 6 years old version of a software on 
a current Enterprise-labelled OS?


I'd say: Start with the documentation 
(https://tomcat.apache.org/tomcat-8.5-doc/setup.html), but use the 
current release - if you want to use Tomcat 8.5, use 8.5.82 (at the time 
of writing this)


If you need other steps, please be more specific about what you need.

Olaf

Help Needed for installation of apache-tomcat-8.5.5

[Verma, Sahil]

Hi Team,



We have a requirement to install Tomcat 8.5.5 version in Linux environment. 
Please help with steps of downloading the package and installation steps.

Linux version -  Red Hat Enterprise Linux release 8.6


Thanks and Regards,
Sahil Verma
AMS Middleware shared Team.

[cid:image001.jpg@01D8DAF1.15A5CAB0]

Galaxy IT Park, Tower-A 44/45, Sector 62, Noida-201307, India
Mobile: +91-9643206413 | sverm...@dxc.com<mailto:sverm...@dxc.com> | 
www.dxc.technology<http://www.dxc.technology/>
OoO:
dxc.technology<http://www.dxc.technology/> / 
Twitter<https://twitter.com/dxctechnology> / 
Facebook<https://www.facebook.com/DXCTechnology/> / 
LinkedIn<https://www.linkedin.com/company/dxctechnology>

DXC Technology India Private Limited - 9th Floor, Block-D Littlewood Tower, 
TRIL Info Park Ramanujan IT City, Rajiv Gandhi Salai, Taramani, Chennai - 
600113. CIN: U72900TN2015FTC102489.
DXC Technology Company -- This message is transmitted to you by or on behalf of 
DXC Technology Company or one of its affiliates. It is intended exclusively for 
the addressee. The substance of this message, along with any attachments, may 
contain proprietary, confidential or privileged information or information that 
is otherwise legally exempt from disclosure. Any unauthorized review, use, 
disclosure or distribution is prohibited. If you are not the intended recipient 
of this message, you are not authorized to read, print, retain, copy or 
disseminate any part of this message. If you have received this message in 
error, please destroy and delete all copies and notify the sender by return 
e-mail. Regardless of content, this e-mail shall not operate to bind DXC 
Technology Company or any of its affiliates to any order or other contract 
unless pursuant to explicit written agreement or government initiative 
expressly permitting the use of e-mail for such purpose.

Re: Help with deploying multiple .WAR files in Tomcat

[Shakila Rajaiah]

Thank you - let me look into this.Shakila.
Shakila Rajaiah  *  e-mail: sraja...@yahoo.com  
 

On Thursday, August 4, 2022 at 05:49:02 PM EDT, Noelette Stout 
 wrote:  
 
 It looks like you have multiple locations/instances of the same jar file 
(jasper-el.jar by the looks of the error message). This is typically included 
with tomcat. Are you also including a version with your application?
Caused by: java.lang.IllegalArgumentException: More than one fragment with the 
name [org_apache_jasper_el] was found. This is not legal with relative 
ordering. See section 8.2.2 2c of the Servlet specification for details. 
Consider using absolute ordering.  


On Thu, Aug 4, 2022 at 1:21 PM Shakila Rajaiah  
wrote:

Hello Tomcat users,
Can someone help me find the correct documentation to deploy more than one war 
file on Tomcat server. The information available on the web is confusing.
I followed this instruction  and dropped both test1.war and test2.war files in 
the webapps folder. Test1.war seems to have deployed correctly. Howeevr I 
received multiple error messages with deploying test2.war. The errors are 
highlighted in yellow.Simply drop both war files into Tomcat's webapps folder. 
That is all you need to do. By default, Tomcat expands ("explodes" some say) 
each war (technically a zip file) into a folder and automatically deploys the 
app for you. This happens on the fly if Tomcat is already running, or on 
startup when you launch Tomcat.

and this is the error message that I received.
 .             _            __ _ _/\\ / ___'_ __ _ _(_)_ __  __ _ \ \ \ \ ( 
)\___ | '_ | '_| | '_ \/ _` | \ \ \ \\\/  ___)| |_)| | | | | || (_| |  ) ) ) ) 
'  || .__|_| |_|_| |_\__, | / / / 
/=|_|==|___/=/_/_/_/:: Spring Boot ::                
(v2.4.5)
022-08-02 14:47:48.459  INFO 1148 --- [           main] 
c.c.d.p.app.Test1Application   : Starting Test1Application v0.0.1-SNAPSHOT 
using Java 1.8.0_291 on  with PID 1148 
(C:\apache-tomcat-9.0.46\webapps\citilink\WEB-INF\classes started by 
sr46\bin)022-08-02 14:47:48.475  INFO 1148 --- [           main] 
c.c.d.p.app.Test1Application   : No active profile set, falling back to default 
profiles: default022-08-02 14:47:51.319  INFO 1148 --- [           main] 
w.s.c.ServletWebServerApplicationContext : Root WebApplicationContext: 
initialization completed in 2703 ms022-08-02 14:47:52.319  INFO 1148 --- [      
     main] o.s.s.concurrent.ThreadPoolTaskExecutor  : Initializing 
ExecutorService 'applicationTaskExecutor'022-08-02 14:47:52.819  INFO 1148 --- 
[           main] o.s.s.c.ThreadPoolTaskScheduler          : Initializing 
ExecutorService 'taskScheduler'022-08-02 14:47:52.866  INFO 1148 --- [          
 main] c.c.d.p.app.Test1Application   : Started Test1Application in 5.811 
seconds (JVM running for 12.214)2-Aug-2022 14:47:52.897 INFO [main] 
org.apache.catalina.startup.HostConfig.deployWAR Deployment of web application 
archive [C:\apache-tomcat-9.0.46\webapps\test1.war] has finished in [9,766] 
ms2-Aug-2022 14:47:52.897 INFO [main] 
org.apache.catalina.startup.HostConfig.deployWAR Deploying web application 
archive [C:\apache-tomcat-9.0.46\webapps\Test2-0.0.1-SNAPSHOT.war]2-Aug-2022 
14:47:53.116 SEVERE [main] org.apache.catalina.startup.HostConfig.deployWAR 
Error deploying web application archive 
[C:\apache-tomcat-9.0.46\webapps\Test2-0.0.1-SNAPSHOT.war]       
java.lang.IllegalStateException: Error starting child               at 
org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:720) 
              at 
org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:690)         
      at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:692)  
             at 
org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:1023)          
     at 
org.apache.catalina.startup.HostConfig$DeployWar.run(HostConfig.java:1903)      
         at java.util.concurrent.Executors$RunnableAdapter.call(Unknown Source) 
              at java.util.concurrent.FutureTask.run(Unknown Source)            
   at 
org.apache.tomcat.util.threads.InlineExecutorService.execute(InlineExecutorService.java:75)
               at java.util.concurrent.AbstractExecutorService.submit(Unknown 
Source)               at 
org.apache.catalina.startup.HostConfig.deployWARs(HostConfig.java:824)          
     at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:474)  
             at 
org.apache.catalina.startup.HostConfig.start(HostConfig.java:1611)              
 at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:319)  
             at 
org.apache.catalina.util.LifecycleBase.fireLifecycleEvent(LifecycleBase.java:123)
               at 
org.apache.catalina.util.LifecycleBase.setStateInternal(LifecycleBase.java:423) 
              at 
org.apache.catalina.util.LifecycleBase.setState(LifecycleBas

Re: Help with deploying multiple .WAR files in Tomcat

[Konstantin Kolinko]

чт, 4 авг. 2022 г. в 22:21, Shakila Rajaiah :
>
> Hello Tomcat users,
> Can someone help me find the correct documentation to deploy more than one 
> war file on Tomcat server. The information available on the web is confusing.
> I followed this instruction

1. This mailing list expects e-mails to be in plain text. As such, any
link that you might have had above, and any yellow highlighting of the
text are lost.

 > and dropped both test1.war and test2.war files in the webapps
folder. Test1.war seems to have deployed correctly. Howeevr I received
multiple error messages with deploying test2.war. The errors are
highlighted in yellow.
> Simply drop both war files into Tomcat's webapps folder. That is all you need 
> to do. By default, Tomcat expands ("explodes" some say) each war (technically 
> a zip file) into a folder and automatically deploys the app for you. This 
> happens on the fly if Tomcat is already running, or on startup when you 
> launch Tomcat.
>
> and this is the error message that I received.
>
> [...]

> org.apache.catalina.startup.HostConfig.deployWAR Deploying web application 
> archive [C:\apache-tomcat-9.0.46\webapps\Test2-0.0.1-SNAPSHOT.war]

2. The above name of a war file means that it will be unpacked as
"Test2-0.0.1-SNAPSHOT". Thus the root URL of your web application will
look like the following:

http://localhost:8080/Test2-0.0.1-SNAPSHOT/

If that is what you are expecting, then OK.

See
https://tomcat.apache.org/tomcat-9.0-doc/config/context.html#Naming

> Caused by: java.lang.IllegalArgumentException: More than one fragment with 
> the name [org_apache_jasper_el] was found. This is not legal with relative 
> ordering. See section 8.2.2 2c of the Servlet specification for details. 
> Consider using absolute ordering.

3.The above message mentions the Servlet Specification.

Links to different versions of the specification may be found here:

https://cwiki.apache.org/confluence/display/TOMCAT/Specifications


4. Regarding "org_apache_jasper_el".

It looks like your war includes a library that provides implementation
of EL (expression language, as used in JSPs).

An implementation of EL is provided by Tomcat. As well as
implementations of the Servlet, JSP and WebSocket APIs.

If your pom.xml file references such dependencies, annotate them with
"provided", so that they are not packed into a war
file.

https://maven.apache.org/guides/introduction/introduction-to-dependency-mechanism.html#Dependency_Scope

Best regards,
Konstantin Kolinko

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Help with deploying multiple .WAR files in Tomcat

[David Rush]

We successfully deploy multiple webapps by simply dropping .war files into
the webapps directory all the time.  No problems here.  Just sharing my
perspective.

David

On Thu, Aug 4, 2022 at 4:10 PM James H. H. Lampert
 wrote:

> Multiple WAR files work fine for us. But we don't simply "drop [the WAR
> files] in the webapps folder (and for the most part, that *doesn't* work
> for us, even with *only one* webapp).
>
> We always deploy through the Manager webapp (which we always customize
> to increase the allowable WAR file size by an order of magnitude, every
> time we update somebody's Tomcat), and there are plenty of installations
> where we have multiple nearly-identical contexts based on completely
> identical WAR files (and note that another customization we make when
> installing Tomcat is to disable re-expansion of WAR files when Tomcat
> launches, since that would overwrite parameters manually inserted into
> the contexts after deployment).
>
> --
> JHHL
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>

-- 

E-Mail to and from me, in connection with the transaction 
of public 
business, is subject to the Wyoming Public Records 
Act and may be 
disclosed to third parties.

Re: Help with deploying multiple .WAR files in Tomcat

[James H. H. Lampert]

Multiple WAR files work fine for us. But we don't simply "drop [the WAR 
files] in the webapps folder (and for the most part, that *doesn't* work 
for us, even with *only one* webapp).


We always deploy through the Manager webapp (which we always customize 
to increase the allowable WAR file size by an order of magnitude, every 
time we update somebody's Tomcat), and there are plenty of installations 
where we have multiple nearly-identical contexts based on completely 
identical WAR files (and note that another customization we make when 
installing Tomcat is to disable re-expansion of WAR files when Tomcat 
launches, since that would overwrite parameters manually inserted into 
the contexts after deployment).


--
JHHL

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Help with deploying multiple .WAR files in Tomcat

[Noelette Stout]

It looks like you have multiple locations/instances of the same jar file
(jasper-el.jar by the looks of the error message). This is typically
included with tomcat. Are you also including a version with your
application?

Caused by: java.lang.IllegalArgumentException: More than one fragment with
the name [org_apache_jasper_el] was found. This is not legal with relative
ordering. See section 8.2.2 2c of the Servlet specification for details.
Consider using absolute ordering.


On Thu, Aug 4, 2022 at 1:21 PM Shakila Rajaiah 
wrote:

> Hello Tomcat users,
> Can someone help me find the correct documentation to deploy more than one
> war file on Tomcat server. The information available on the web is
> confusing.
> I followed this instruction  and dropped both test1.war and test2.war
> files in the webapps folder. Test1.war seems to have deployed correctly.
> Howeevr I received multiple error messages with deploying test2.war. The
> errors are highlighted in yellow.Simply drop both war files into Tomcat's
> webapps folder. That is all you need to do. By default, Tomcat expands
> ("explodes" some say) each war (technically a zip file) into a folder and
> automatically deploys the app for you. This happens on the fly if Tomcat is
> already running, or on startup when you launch Tomcat.
>
> and this is the error message that I received.
>  .     ___ _ _/\\ / ___'_ __ _ _(_)_ __  __ _ \ \
> \ \ ( )\___ | '_ | '_| | '_ \/ _` | \ \ \ \\\/  ___)| |_)| | | | | || (_|
> |  ) ) ) ) '  || .__|_| |_|_| |_\__, | / / /
> /=|_|==|___/=/_/_/_/:: Spring Boot ::
> (v2.4.5)
> 022-08-02 14:47:48.459  INFO 1148 --- [   main]
> c.c.d.p.app.Test1Application   : Starting Test1Application v0.0.1-SNAPSHOT
> using Java 1.8.0_291 on  with PID 1148
> (C:\apache-tomcat-9.0.46\webapps\citilink\WEB-INF\classes started by
> sr46\bin)022-08-02 14:47:48.475  INFO 1148 --- [   main]
> c.c.d.p.app.Test1Application   : No active profile set, falling back to
> default profiles: default022-08-02 14:47:51.319  INFO 1148 --- [
>  main] w.s.c.ServletWebServerApplicationContext : Root
> WebApplicationContext: initialization completed in 2703 ms022-08-02
> 14:47:52.319  INFO 1148 --- [   main]
> o.s.s.concurrent.ThreadPoolTaskExecutor  : Initializing ExecutorService
> 'applicationTaskExecutor'022-08-02 14:47:52.819  INFO 1148 --- [
>  main] o.s.s.c.ThreadPoolTaskScheduler  : Initializing
> ExecutorService 'taskScheduler'022-08-02 14:47:52.866  INFO 1148 --- [
>  main] c.c.d.p.app.Test1Application   : Started Test1Application in
> 5.811 seconds (JVM running for 12.214)2-Aug-2022 14:47:52.897 INFO [main]
> org.apache.catalina.startup.HostConfig.deployWAR Deployment of web
> application archive [C:\apache-tomcat-9.0.46\webapps\test1.war] has
> finished in [9,766] ms2-Aug-2022 14:47:52.897 INFO [main]
> org.apache.catalina.startup.HostConfig.deployWAR Deploying web application
> archive
> [C:\apache-tomcat-9.0.46\webapps\Test2-0.0.1-SNAPSHOT.war]2-Aug-2022
> 14:47:53.116 SEVERE [main] org.apache.catalina.startup.HostConfig.deployWAR
> Error deploying web application archive
> [C:\apache-tomcat-9.0.46\webapps\Test2-0.0.1-SNAPSHOT.war]
>  java.lang.IllegalStateException: Error starting child   at
> org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:720)
>  at
> org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:690)
>at
> org.apache.catalina.core.StandardHost.addChild(StandardHost.java:692)
>  at
> org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:1023)
>  at
> org.apache.catalina.startup.HostConfig$DeployWar.run(HostConfig.java:1903)
>  at java.util.concurrent.Executors$RunnableAdapter.call(Unknown
> Source)   at java.util.concurrent.FutureTask.run(Unknown
> Source)   at
> org.apache.tomcat.util.threads.InlineExecutorService.execute(InlineExecutorService.java:75)
>  at java.util.concurrent.AbstractExecutorService.submit(Unknown
> Source)   at
> org.apache.catalina.startup.HostConfig.deployWARs(HostConfig.java:824)
>  at
> org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:474)
>  at
> org.apache.catalina.startup.HostConfig.start(HostConfig.java:1611)
>  at
> org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:319)
>  at
> org.apache.catalina.util.LifecycleBase.fireLifecycleEvent(LifecycleBase.java:123)
>  at
> org.apache.catalina.util.LifecycleBase.setStateInternal(LifecycleBase.java:423)
>  at
> org.apache.catalina.util.LifecycleBase.setState(LifecycleBase.java:366)
>at
> o

Help with deploying multiple .WAR files in Tomcat

[Shakila Rajaiah]

Hello Tomcat users,
Can someone help me find the correct documentation to deploy more than one war 
file on Tomcat server. The information available on the web is confusing.
I followed this instruction  and dropped both test1.war and test2.war files in 
the webapps folder. Test1.war seems to have deployed correctly. Howeevr I 
received multiple error messages with deploying test2.war. The errors are 
highlighted in yellow.Simply drop both war files into Tomcat's webapps folder. 
That is all you need to do. By default, Tomcat expands ("explodes" some say) 
each war (technically a zip file) into a folder and automatically deploys the 
app for you. This happens on the fly if Tomcat is already running, or on 
startup when you launch Tomcat.

and this is the error message that I received.
 .             _            __ _ _/\\ / ___'_ __ _ _(_)_ __  __ _ \ \ \ \ ( 
)\___ | '_ | '_| | '_ \/ _` | \ \ \ \\\/  ___)| |_)| | | | | || (_| |  ) ) ) ) 
'  || .__|_| |_|_| |_\__, | / / / 
/=|_|==|___/=/_/_/_/:: Spring Boot ::                
(v2.4.5)
022-08-02 14:47:48.459  INFO 1148 --- [           main] 
c.c.d.p.app.Test1Application   : Starting Test1Application v0.0.1-SNAPSHOT 
using Java 1.8.0_291 on  with PID 1148 
(C:\apache-tomcat-9.0.46\webapps\citilink\WEB-INF\classes started by 
sr46\bin)022-08-02 14:47:48.475  INFO 1148 --- [           main] 
c.c.d.p.app.Test1Application   : No active profile set, falling back to default 
profiles: default022-08-02 14:47:51.319  INFO 1148 --- [           main] 
w.s.c.ServletWebServerApplicationContext : Root WebApplicationContext: 
initialization completed in 2703 ms022-08-02 14:47:52.319  INFO 1148 --- [      
     main] o.s.s.concurrent.ThreadPoolTaskExecutor  : Initializing 
ExecutorService 'applicationTaskExecutor'022-08-02 14:47:52.819  INFO 1148 --- 
[           main] o.s.s.c.ThreadPoolTaskScheduler          : Initializing 
ExecutorService 'taskScheduler'022-08-02 14:47:52.866  INFO 1148 --- [          
 main] c.c.d.p.app.Test1Application   : Started Test1Application in 5.811 
seconds (JVM running for 12.214)2-Aug-2022 14:47:52.897 INFO [main] 
org.apache.catalina.startup.HostConfig.deployWAR Deployment of web application 
archive [C:\apache-tomcat-9.0.46\webapps\test1.war] has finished in [9,766] 
ms2-Aug-2022 14:47:52.897 INFO [main] 
org.apache.catalina.startup.HostConfig.deployWAR Deploying web application 
archive [C:\apache-tomcat-9.0.46\webapps\Test2-0.0.1-SNAPSHOT.war]2-Aug-2022 
14:47:53.116 SEVERE [main] org.apache.catalina.startup.HostConfig.deployWAR 
Error deploying web application archive 
[C:\apache-tomcat-9.0.46\webapps\Test2-0.0.1-SNAPSHOT.war]       
java.lang.IllegalStateException: Error starting child               at 
org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:720) 
              at 
org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:690)         
      at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:692)  
             at 
org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:1023)          
     at 
org.apache.catalina.startup.HostConfig$DeployWar.run(HostConfig.java:1903)      
         at java.util.concurrent.Executors$RunnableAdapter.call(Unknown Source) 
              at java.util.concurrent.FutureTask.run(Unknown Source)            
   at 
org.apache.tomcat.util.threads.InlineExecutorService.execute(InlineExecutorService.java:75)
               at java.util.concurrent.AbstractExecutorService.submit(Unknown 
Source)               at 
org.apache.catalina.startup.HostConfig.deployWARs(HostConfig.java:824)          
     at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:474)  
             at 
org.apache.catalina.startup.HostConfig.start(HostConfig.java:1611)              
 at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:319)  
             at 
org.apache.catalina.util.LifecycleBase.fireLifecycleEvent(LifecycleBase.java:123)
               at 
org.apache.catalina.util.LifecycleBase.setStateInternal(LifecycleBase.java:423) 
              at 
org.apache.catalina.util.LifecycleBase.setState(LifecycleBase.java:366)         
      at 
org.apache.catalina.core.ContainerBase.startInternal(ContainerBase.java:936)    
           at 
org.apache.catalina.core.StandardHost.startInternal(StandardHost.java:829)      
         at 
org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)            
   at 
org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1384) 
              at 
org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1374) 
              at java.util.concurrent.FutureTask.run(Unknown Source)            
   at 
org.apache.tomcat.util.threads.InlineExecutorService.execute(InlineExecutorService.java:75)
               at java.util.concurrent.AbstractExecutorService.submit(Unkno

Re: Help Needed

[Christopher Schultz]

Mohan,

On 6/27/22 02:17, Mohan T wrote:

Dear All,

We have deployed a application in tomcat 8.5  and  while accessing

http://sebswarcnv08.ramco:8081/samldemo-0.0.1-SNAPSHOT/hello

Error retrieving metadata from 
https://dev-67198606.okta.com/app/exk5htsyx3S4UcaHA5d7/sso/saml/metadata
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: 
PKIX path building failed: 
sun.security.provider.certpath.SunCertPathBuilderException: unable to find 
valid certification path to requested target


A stack trace will help, here.

The URL you have above has a TLS Certificate signed by DigiCert, which 
is a well-trusted Certificate Authority so, unless you have done 
something specific with your trust store for that connection, it's not 
likely the problem.


Because you are using SAML, I suspect that the error occurs when 
validating the SAML response itself, and your trust store does not 
contain the certificate required to validate the signed SAML response.


-chris

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

AW: Help Needed

[Thomas Hoffmann (Speed4Trade GmbH)]

Hello Mohan,

> -Ursprüngliche Nachricht-
> Von: Mohan T 
> Gesendet: Montag, 27. Juni 2022 08:18
> An: Tomcat Users List 
> Betreff: Help Needed
> 
> Dear All,
> 
> We have deployed a application in tomcat 8.5  and  while accessing
> 
> http://sebswarcnv08.ramco:8081/samldemo-0.0.1-SNAPSHOT/hello
> 
> Error retrieving metadata from https://dev-
> 67198606.okta.com/app/exk5htsyx3S4UcaHA5d7/sso/saml/metadata
> javax.net.ssl.SSLHandshakeException:
> sun.security.validator.ValidatorException: PKIX path building failed:
> sun.security.provider.certpath.SunCertPathBuilderException: unable to find
> valid certification path to requested target
> 
> Kindly  help us in overcoming thie.
> 
> Thanks
> 
> Mohan

The target server uses SSL. The server therefore has a private key and the 
client must have the corresponding public key.
The error message tells, that your client doesn't have the public key and 
therefore doesn't trust the servers private key.
Usually the private key is signed by a certificate authority or for development 
it can also be self-signed.
Check the "certificate tree" in the browser to check which party has signed the 
private key and get the public key of the root certificate.
This public key must be imported into the java truststore.

Here is an example of that tree / chain of trust: 
https://i.stack.imgur.com/julIO.png 

Greetings, Thomas

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Help Needed

[Mohan T]

Dear All,

We have deployed a application in tomcat 8.5  and  while accessing

http://sebswarcnv08.ramco:8081/samldemo-0.0.1-SNAPSHOT/hello

Error retrieving metadata from 
https://dev-67198606.okta.com/app/exk5htsyx3S4UcaHA5d7/sso/saml/metadata
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: 
PKIX path building failed: 
sun.security.provider.certpath.SunCertPathBuilderException: unable to find 
valid certification path to requested target

Kindly  help us in overcoming thie.

Thanks

Mohan
.
DISCLAIMER: This communication contains information which is confidential and 
the copyright of Ramco Systems Ltd, its subsidiaries or a third party 
("Ramco"). This email may also contain legally privileged information. 
Confidentiality and legal privilege attached to this communication are not 
waived or lost by reason of mistaken delivery to you.This email is intended to 
be read or used by the addressee only. If you are not the intended recipient, 
any use, distribution, disclosure or copying of this email is strictly 
prohibited without the express written approval of Ramco. Please delete and 
destroy all copies and email Ramco at le...@ramco.com immediately. Any views 
expressed in this communication are those of the individual sender, except 
where the sender specifically states them to be the views of Ramco. Except as 
required by law, Ramco does not represent, warrant and/or guarantee that the 
integrity of this communication has been maintained nor that the communication 
is free of errors, virus, interception or interference. If you do not wish to 
receive such communications, please forward this communication to 
market...@ramco.com and express your wish not to receive such communications 
henceforth.

Re: Help Needed for Root cause - ApacheTomcat services stopped

[Christopher Schultz]

Sahil,

On 5/11/22 14:56, Verma, Sahil wrote:

Yes, we are using both Apache & Tomcat environment.

Apache - 2.4.25 version
Tomcat - 8.5.5 version


If this version number is correct, you should *seriously* consider 
upgrading to the latest Tomcat 8.5.x release. That release is more than 
5 years old and contains published security vulnerabilities.



You are correct, we got this error in Apache webserver logs. We are
attaching both Apache httpd (error.log) and Tomcat (Catalina.out) logs

Please let us know if any other information required.


Are you sure you actually have a problem? Or is the only problem that 
you are seeing this message in your log files?


For example, are you observing any decrease in availability or 
performance when you see these messages appear in the logs?


-chris


-Original Message-
From: Mark Thomas 
Sent: Wednesday, May 11, 2022 11:39 PM
To: users@tomcat.apache.org
Subject: Re: Help Needed for Root cause - ApacheTomcat services stopped

That is an Apache Web Server (httpd) log message, not an Apache Tomcat log 
message. Are you sure you are using Apache Tomcat?

Mark


On 11/05/2022 19:01, Verma, Sahil wrote:

Hi Team,



In our production environment, ApacheTomcat services went down. We
have checked the logs and found below error -



[Thu May 05 10:34:51.441668 2022] [mpm_event:error] [pid 27440:tid
140464737793792] AH00484: server reached MaxRequestWorkers setting,
consider raising the MaxRequestWorkers setting



Please help to find the root cause of the issue why services got stopped. 
Kindly let us know if any other information required.

Apache version - 2.2
OS - Linux


Thanks,
Sahil

DXC Technology India Private Limited - 9th Floor, Block-D Littlewood Tower, 
TRIL Info Park Ramanujan IT City, Rajiv Gandhi Salai, Taramani, Chennai - 
600113. CIN: U72900TN2015FTC102489.
DXC Technology Company -- This message is transmitted to you by or on behalf of 
DXC Technology Company or one of its affiliates. It is intended exclusively for 
the addressee. The substance of this message, along with any attachments, may 
contain proprietary, confidential or privileged information or information that 
is otherwise legally exempt from disclosure. Any unauthorized review, use, 
disclosure or distribution is prohibited. If you are not the intended recipient 
of this message, you are not authorized to read, print, retain, copy or 
disseminate any part of this message. If you have received this message in 
error, please destroy and delete all copies and notify the sender by return 
e-mail. Regardless of content, this e-mail shall not operate to bind DXC 
Technology Company or any of its affiliates to any order or other contract 
unless pursuant to explicit written agreement or government initiative 
expressly permitting the use of e-mail for such purpose.



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Help Needed for Root cause - ApacheTomcat services stopped

[Verma, Sahil]

Hi Thomas,

Thank you very much for the valuable information. It will surely help us to 
find the root cause of the issue. We are monitoring our environment as per your 
suggestions.

Regards,
Sahil

-Original Message-
From: Thomas Hoffmann (Speed4Trade GmbH) 

Sent: Thursday, May 12, 2022 12:01 PM
To: Tomcat Users List 
Subject: AW: Help Needed for Root cause - ApacheTomcat services stopped

Hello Sahil,

> -Ursprüngliche Nachricht-
> Von: Verma, Sahil 
> Gesendet: Mittwoch, 11. Mai 2022 20:56
> An: Tomcat Users List 
> Betreff: RE: Help Needed for Root cause - ApacheTomcat services
> stopped
>
> Hi Mark,
> Good day!
>
> Thank you very much for the reply!
>
> Yes, we are using both Apache & Tomcat environment.
>
> Apache - 2.4.25 version
> Tomcat - 8.5.5 version
> OS - Linux
>
>
> You are correct, we got this error in Apache webserver logs. We are
> attaching both Apache httpd (error.log) and Tomcat (Catalina.out) logs
>
> Please let us know if any other information required.
>
> Thanks,
> Sahil
>
>
>
> -Original Message-
> From: Mark Thomas 
> Sent: Wednesday, May 11, 2022 11:39 PM
> To: users@tomcat.apache.org
> Subject: Re: Help Needed for Root cause - ApacheTomcat services
> stopped
>
> That is an Apache Web Server (httpd) log message, not an Apache Tomcat
> log message. Are you sure you are using Apache Tomcat?
>
> Mark
>
>
> On 11/05/2022 19:01, Verma, Sahil wrote:
> > Hi Team,
> >
> >
> >
> > In our production environment, ApacheTomcat services went down. We
> > have checked the logs and found below error -
> >
> >
> >
> > [Thu May 05 10:34:51.441668 2022] [mpm_event:error] [pid 27440:tid
> > 140464737793792] AH00484: server reached MaxRequestWorkers setting,
> > consider raising the MaxRequestWorkers setting
> >
> >
> >
> > Please help to find the root cause of the issue why services got stopped.
> Kindly let us know if any other information required.
> >
> > Apache version - 2.2
> > OS - Linux
> >
> >
> > Thanks,
> > Sahil
> >

Tomcat-Logs looks fine (except some warnings which doesn’t matter here).

The MaxRequestWorkers is documented here:
https://clicktime.symantec.com/3VtPgJ8rmEck16yTrydmCdA6xU?u=https%3A%2F%2Fhttpd.apache.org%2Fdocs%2F2.4%2Fen%2Fmod%2Fmpm_common.html%23maxrequestworkers

You actually have a load or performance issue. This is usually related to your 
application or environment.
You can activate the access-log (either on apache or tomcat side) to view the 
number of requests.
Also log the processing time to see if some requests are taking too long.
Another option would be to activate and check tomcat-manager about the 
currently processed requests or use Apachetop 
(https://clicktime.symantec.com/3WxaHnjWYoWZzcQmX18dHkP6xU?u=https%3A%2F%2Flinux.die.net%2Fman%2F1%2Fapachetop)

I can think of two possible cases:
1) Requests are taking too long (performance issue in the application) and thus 
the number of workers get exhausted
2) You have a high load / number or requests. If you still have CPU and memory 
left, you can increase the workers in the Apache configuration

Greetings,
Thomas


DXC Technology India Private Limited - 9th Floor, Block-D Littlewood Tower, 
TRIL Info Park Ramanujan IT City, Rajiv Gandhi Salai, Taramani, Chennai - 
600113. CIN: U72900TN2015FTC102489.
DXC Technology Company -- This message is transmitted to you by or on behalf of 
DXC Technology Company or one of its affiliates. It is intended exclusively for 
the addressee. The substance of this message, along with any attachments, may 
contain proprietary, confidential or privileged information or information that 
is otherwise legally exempt from disclosure. Any unauthorized review, use, 
disclosure or distribution is prohibited. If you are not the intended recipient 
of this message, you are not authorized to read, print, retain, copy or 
disseminate any part of this message. If you have received this message in 
error, please destroy and delete all copies and notify the sender by return 
e-mail. Regardless of content, this e-mail shall not operate to bind DXC 
Technology Company or any of its affiliates to any order or other contract 
unless pursuant to explicit written agreement or government initiative 
expressly permitting the use of e-mail for such purpose.

AW: Help Needed for Root cause - ApacheTomcat services stopped

[Thomas Hoffmann (Speed4Trade GmbH)]

Hello Sahil,

> -Ursprüngliche Nachricht-
> Von: Verma, Sahil 
> Gesendet: Mittwoch, 11. Mai 2022 20:56
> An: Tomcat Users List 
> Betreff: RE: Help Needed for Root cause - ApacheTomcat services stopped
> 
> Hi Mark,
> Good day!
> 
> Thank you very much for the reply!
> 
> Yes, we are using both Apache & Tomcat environment.
> 
> Apache - 2.4.25 version
> Tomcat - 8.5.5 version
> OS - Linux
> 
> 
> You are correct, we got this error in Apache webserver logs. We are attaching
> both Apache httpd (error.log) and Tomcat (Catalina.out) logs
> 
> Please let us know if any other information required.
> 
> Thanks,
> Sahil
> 
> 
> 
> -Original Message-
> From: Mark Thomas 
> Sent: Wednesday, May 11, 2022 11:39 PM
> To: users@tomcat.apache.org
> Subject: Re: Help Needed for Root cause - ApacheTomcat services stopped
> 
> That is an Apache Web Server (httpd) log message, not an Apache Tomcat log
> message. Are you sure you are using Apache Tomcat?
> 
> Mark
> 
> 
> On 11/05/2022 19:01, Verma, Sahil wrote:
> > Hi Team,
> >
> >
> >
> > In our production environment, ApacheTomcat services went down. We
> > have checked the logs and found below error -
> >
> >
> >
> > [Thu May 05 10:34:51.441668 2022] [mpm_event:error] [pid 27440:tid
> > 140464737793792] AH00484: server reached MaxRequestWorkers setting,
> > consider raising the MaxRequestWorkers setting
> >
> >
> >
> > Please help to find the root cause of the issue why services got stopped.
> Kindly let us know if any other information required.
> >
> > Apache version - 2.2
> > OS - Linux
> >
> >
> > Thanks,
> > Sahil
> >

Tomcat-Logs looks fine (except some warnings which doesn’t matter here).

The MaxRequestWorkers is documented here:
https://httpd.apache.org/docs/2.4/en/mod/mpm_common.html#maxrequestworkers

You actually have a load or performance issue. This is usually related to your 
application or environment.
You can activate the access-log (either on apache or tomcat side) to view the 
number of requests.
Also log the processing time to see if some requests are taking too long.
Another option would be to activate and check tomcat-manager about the 
currently processed requests or use Apachetop 
(https://linux.die.net/man/1/apachetop)

I can think of two possible cases:
1) Requests are taking too long (performance issue in the application) and thus 
the number of workers get exhausted
2) You have a high load / number or requests. If you still have CPU and memory 
left, you can increase the workers in the Apache configuration

Greetings,
Thomas

RE: Help Needed for Root cause - ApacheTomcat services stopped

[Verma, Sahil]

Hi Mark,
Good day!

Thank you very much for the reply!

Yes, we are using both Apache & Tomcat environment.

Apache - 2.4.25 version
Tomcat - 8.5.5 version
OS - Linux 


You are correct, we got this error in Apache webserver logs. We are attaching 
both Apache httpd (error.log) and Tomcat (Catalina.out) logs

Please let us know if any other information required.

Thanks,
Sahil



-Original Message-
From: Mark Thomas  
Sent: Wednesday, May 11, 2022 11:39 PM
To: users@tomcat.apache.org
Subject: Re: Help Needed for Root cause - ApacheTomcat services stopped

That is an Apache Web Server (httpd) log message, not an Apache Tomcat log 
message. Are you sure you are using Apache Tomcat?

Mark


On 11/05/2022 19:01, Verma, Sahil wrote:
> Hi Team,
> 
> 
> 
> In our production environment, ApacheTomcat services went down. We 
> have checked the logs and found below error -
> 
> 
> 
> [Thu May 05 10:34:51.441668 2022] [mpm_event:error] [pid 27440:tid 
> 140464737793792] AH00484: server reached MaxRequestWorkers setting, 
> consider raising the MaxRequestWorkers setting
> 
> 
> 
> Please help to find the root cause of the issue why services got stopped. 
> Kindly let us know if any other information required.
> 
> Apache version - 2.2
> OS - Linux
> 
> 
> Thanks,
> Sahil
> 
> DXC Technology India Private Limited - 9th Floor, Block-D Littlewood Tower, 
> TRIL Info Park Ramanujan IT City, Rajiv Gandhi Salai, Taramani, Chennai - 
> 600113. CIN: U72900TN2015FTC102489.
> DXC Technology Company -- This message is transmitted to you by or on behalf 
> of DXC Technology Company or one of its affiliates. It is intended 
> exclusively for the addressee. The substance of this message, along with any 
> attachments, may contain proprietary, confidential or privileged information 
> or information that is otherwise legally exempt from disclosure. Any 
> unauthorized review, use, disclosure or distribution is prohibited. If you 
> are not the intended recipient of this message, you are not authorized to 
> read, print, retain, copy or disseminate any part of this message. If you 
> have received this message in error, please destroy and delete all copies and 
> notify the sender by return e-mail. Regardless of content, this e-mail shall 
> not operate to bind DXC Technology Company or any of its affiliates to any 
> order or other contract unless pursuant to explicit written agreement or 
> government initiative expressly permitting the use of e-mail for such purpose.
> 

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

-bash-4.1$ cat error_log.20220505
rm: cannot remove `/share/images/pdf/Statementkimpickett20220505.zip': No such 
file or directory
rm: cannot remove `/share/images/pdf/Statementcweishuhn20220505.zip': No such 
file or directory
[Thu May 05 10:34:51.441668 2022] [mpm_event:error] [pid 27440:tid 
140464737793792] AH00484: server reached MaxRequestWorkers setting, consider 
raising the MaxRequestWorkers setting
[Thu May 05 11:28:16.826878 2022] [core:warn] [pid 27440:tid 140464737793792] 
AH00045: child process 27465 still did not exit, sending a SIGTERM
[Thu May 05 11:28:16.826994 2022] [core:warn] [pid 27440:tid 140464737793792] 
AH00045: child process 27466 still did not exit, sending a SIGTERM
[Thu May 05 11:28:16.827047 2022] [core:warn] [pid 27440:tid 140464737793792] 
AH00045: child process 27467 still did not exit, sending a SIGTERM
[Thu May 05 11:28:16.827098 2022] [core:warn] [pid 27440:tid 140464737793792] 
AH00045: child process 27698 still did not exit, sending a SIGTERM
[Thu May 05 11:28:16.827151 2022] [core:warn] [pid 27440:tid 140464737793792] 
AH00045: child process 27896 still did not exit, sending a SIGTERM
[Thu May 05 11:28:16.827205 2022] [core:warn] [pid 27440:tid 140464737793792] 
AH00045: child process 27971 still did not exit, sending a SIGTERM
[Thu May 05 11:28:16.827254 2022] [core:warn] [pid 27440:tid 140464737793792] 
AH00045: child process 28071 still did not exit, sending a SIGTERM
[Thu May 05 11:28:16.827307 2022] [core:warn] [pid 27440:tid 140464737793792] 
AH00045: child process 28135 still did not exit, sending a SIGTERM
[Thu May 05 11:28:18.829711 2022] [core:warn] [pid 27440:tid 140464737793792] 
AH00045: child process 27465 still did not exit, sending a SIGTERM
[Thu May 05 11:28:18.829835 2022] [core:warn] [pid 27440:tid 140464737793792] 
AH00045: child process 27466 still did not exit, sending a SIGTERM
[Thu May 05 11:28:18.829901 2022] [core:warn] [pid 27440:tid 140464737793792] 
AH00045: child process 27467 still did not exit, sending a SIGTERM
[Thu May 05 11:28:18.829970 2022] [core:warn] [pid 27440:tid 140464737793792] 
AH00045: child process 27698 still did not exit, sending a SIGTERM
[Thu 

Re: Help Needed for Root cause - ApacheTomcat services stopped

[Mark Thomas]

That is an Apache Web Server (httpd) log message, not an Apache Tomcat 
log message. Are you sure you are using Apache Tomcat?


Mark


On 11/05/2022 19:01, Verma, Sahil wrote:

Hi Team,



In our production environment, ApacheTomcat services went down. We have checked 
the logs and found below error -



[Thu May 05 10:34:51.441668 2022] [mpm_event:error] [pid 27440:tid 
140464737793792] AH00484: server reached MaxRequestWorkers setting, consider 
raising the MaxRequestWorkers setting



Please help to find the root cause of the issue why services got stopped. 
Kindly let us know if any other information required.

Apache version - 2.2
OS - Linux


Thanks,
Sahil

DXC Technology India Private Limited - 9th Floor, Block-D Littlewood Tower, 
TRIL Info Park Ramanujan IT City, Rajiv Gandhi Salai, Taramani, Chennai - 
600113. CIN: U72900TN2015FTC102489.
DXC Technology Company -- This message is transmitted to you by or on behalf of 
DXC Technology Company or one of its affiliates. It is intended exclusively for 
the addressee. The substance of this message, along with any attachments, may 
contain proprietary, confidential or privileged information or information that 
is otherwise legally exempt from disclosure. Any unauthorized review, use, 
disclosure or distribution is prohibited. If you are not the intended recipient 
of this message, you are not authorized to read, print, retain, copy or 
disseminate any part of this message. If you have received this message in 
error, please destroy and delete all copies and notify the sender by return 
e-mail. Regardless of content, this e-mail shall not operate to bind DXC 
Technology Company or any of its affiliates to any order or other contract 
unless pursuant to explicit written agreement or government initiative 
expressly permitting the use of e-mail for such purpose.



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Help Needed for Root cause - ApacheTomcat services stopped

[Verma, Sahil]

Hi Team,



In our production environment, ApacheTomcat services went down. We have checked 
the logs and found below error -



[Thu May 05 10:34:51.441668 2022] [mpm_event:error] [pid 27440:tid 
140464737793792] AH00484: server reached MaxRequestWorkers setting, consider 
raising the MaxRequestWorkers setting



Please help to find the root cause of the issue why services got stopped. 
Kindly let us know if any other information required.

Apache version - 2.2
OS - Linux


Thanks,
Sahil

DXC Technology India Private Limited - 9th Floor, Block-D Littlewood Tower, 
TRIL Info Park Ramanujan IT City, Rajiv Gandhi Salai, Taramani, Chennai - 
600113. CIN: U72900TN2015FTC102489.
DXC Technology Company -- This message is transmitted to you by or on behalf of 
DXC Technology Company or one of its affiliates. It is intended exclusively for 
the addressee. The substance of this message, along with any attachments, may 
contain proprietary, confidential or privileged information or information that 
is otherwise legally exempt from disclosure. Any unauthorized review, use, 
disclosure or distribution is prohibited. If you are not the intended recipient 
of this message, you are not authorized to read, print, retain, copy or 
disseminate any part of this message. If you have received this message in 
error, please destroy and delete all copies and notify the sender by return 
e-mail. Regardless of content, this e-mail shall not operate to bind DXC 
Technology Company or any of its affiliates to any order or other contract 
unless pursuant to explicit written agreement or government initiative 
expressly permitting the use of e-mail for such purpose.

AW: help with high cpu usage

[Thomas Hoffmann (Speed4Trade GmbH)]

Hello Alan,

I currently don't have an appropriate setup here, so just the principle method 
:.
Use "top - H" or htop to identify the tomcat threads with highest CPU usage.
Write down thread ids.
Create Java stack of tomcat, e. G. use jstack, kill - 3  or 
jvisualvm.
Within the stack trace there is a tid which identifies the thread. Maybe you 
need to convert between decimal and hex to find the right Thread.

Hope this helps,
Thomas

Von: Alan F 
Gesendet: Freitag, 4. Februar 2022 13:00:29
An: Tomcat Users List
Betreff: RE: help with high cpu usage

Hello Thomas,

Thanks for your input here, what's your weapon of choice to identify this 
thread bar thread dump? I just downloaded jvmtop from github but that didn't 
seem to give me any clue at all about independent threads.

Cheers

Alan

-Original Message-
From: Thomas Hoffmann (Speed4Trade GmbH) 

Sent: 04 February 2022 09:18
To: Tomcat Users List 
Subject: AW: help with high cpu usage

Hello,

when I encounter high CPU usage, it's best to identify the thread Id which is 
eating CPU.
Making a thread dump, you can then search for  the thread id within this dump.
This works good for long lasting threads. If the CPU eating thread changes 
quickly, it's harder to figure out.

Greetings,
Thomas

Von: Alan F 
Gesendet: Freitag, 4. Februar 2022 00:02:49
An: Tomcat Users List
Betreff: Re: help with high cpu usage

John thanks so much !! Will pass this on tomorrow. Cheers.

From: john.e.gr...@wellsfargo.com.INVALID 
Sent: 03 February 2022 22:45
To: users@tomcat.apache.org 
Subject: RE: help with high cpu usage

Alan,


> -Original Message-
> From: Alan F 
> Sent: Thursday, February 03, 2022 2:51 PM
> To: Tomcat Users List 
> Subject: RE: help with high cpu usage
>
> My bad here are the correct dumps 10 secs apart
>
> https://urldefense.com/v3/__https://fastthread.io/my-thread-
> report.jsp?p=c2hhcmVkLzIwMjIvMDIvMy8tLWFwaS0zNzY2ZmZmNy0wZDgyL
> TRhZTItYmE3Mi0zMWQyYTYwN2M1ZjgudHh0&__;!!F9svGWnIaVPGSwU!-
> fDbBdZmwXsUn9QT9ftL8f4PTLoASDZOXCeB4UEo7qKgcIHhANQVT6VMoGvG
> st67ghaaLsg$
>
>
> https://urldefense.com/v3/__https://fastthread.io/my-thread-
> report.jsp?p=c2hhcmVkLzIwMjIvMDIvMy8tLWFwaS00NTE3MWUxNy1jYWRi
> LTRkY2UtODBlNS1lMDk0YTJjNTg1OGEudHh0&__;!!F9svGWnIaVPGSwU!-
> fDbBdZmwXsUn9QT9ftL8f4PTLoASDZOXCeB4UEo7qKgcIHhANQVT6VMoGvG
> st67j-3O5xU$
>
>
>
>
> -Original Message-
> From: john.e.gr...@wellsfargo.com.INVALID
> 
> Sent: 03 February 2022 19:33
> To: users@tomcat.apache.org
> Subject: RE: help with high cpu usage
>
> Alan,
>
>
> > -Original Message-
> > From: Alan F 
> > Sent: Thursday, February 03, 2022 12:19 PM
> > To: Tomcat Users List 
> > Subject: help with high cpu usage
> >
> > Had some issues today with one prod host. One is fine the other has
> > stuck around 80%Cpu.
> > Ive taken a thread dump from both hosts and would appreciate someone
> > give a once over what it may be before I kill and restart. They are
> > clustered nodes so running identical apps and loadbalanced by a
> > hardware
> balancer.
> >
> > Node1 is ok (relatively!)
> > https://urldefense.com/v3/__https://fastthread.io/my-thread-
> >
> report.jsp?p=c2hhcmVkLzIwMjIvMDIvMy8tLWFwaS1hODllYzBkZS01OGJjLTQ
> >
> 2ZDQtYWRhNS1kYjkxZjM2NjI1ZTAudHh0&__;!!F9svGWnIaVPGSwU!91fvMc
> > RzcMYr95RrClT-eCrcDNp3fKUDpupDSNtn-mDKbTl_dmUSa0LaAolXlhipl-
> > Fk2pQ$
> >
> >
> > Node 2 still has high CPU usage
> > https://urldefense.com/v3/__https://fastthread.io/my-thread-
> >
> report.jsp?p=c2hhcmVkLzIwMjIvMDIvMy8tLWFwaS0yN2I0YWY4Mi05OWFhL
> >
> TQ3YjYtOGQ2My0wMDMwZjlkNDQzNjMudHh0&__;!!F9svGWnIaVPGSwU!9
> > 1fvMcRzcMYr95RrClT-eCrcDNp3fKUDpupDSNtn-
> > mDKbTl_dmUSa0LaAolXlhipkmLFr3E$
>
> Taking thread dumps was a good idea but I see very little activity on node 2.
> It looks like two threads are in Hibernate's
> EntityEntryContext.downgradeLocks() method, one is taking the thread
> dump itself, and another is reading a request from a client, I think.
> I would not expect this to add up to 80% CPU usage unless one of those
> threads is stuck in a loop.  Comparing multiple thread dumps taken
> 5-10 seconds apart would help answer this question.  How much GC is
> there?  Could these Hibernate queries be pulling a huge amount of data
> from the DB, thus causing a lot of GC activity?
>
> Node 1 looks idle except for the thread taking the thread dump.
>
> Do you know for sure that it's the Tomcat process that is using the CPU?

Of the 3 dumps from the same node, the first two are 3 hours apart, yet the two 
query threads seem to still be doing the s

RE: help with high cpu usage

[Alan F]

Hello Thomas,

Thanks for your input here, what's your weapon of choice to identify this 
thread bar thread dump? I just downloaded jvmtop from github but that didn't 
seem to give me any clue at all about independent threads.

Cheers

Alan

-Original Message-
From: Thomas Hoffmann (Speed4Trade GmbH) 
 
Sent: 04 February 2022 09:18
To: Tomcat Users List 
Subject: AW: help with high cpu usage

Hello,

when I encounter high CPU usage, it's best to identify the thread Id which is 
eating CPU.
Making a thread dump, you can then search for  the thread id within this dump.
This works good for long lasting threads. If the CPU eating thread changes 
quickly, it's harder to figure out.

Greetings,
Thomas

Von: Alan F 
Gesendet: Freitag, 4. Februar 2022 00:02:49
An: Tomcat Users List
Betreff: Re: help with high cpu usage

John thanks so much !! Will pass this on tomorrow. Cheers.

From: john.e.gr...@wellsfargo.com.INVALID 
Sent: 03 February 2022 22:45
To: users@tomcat.apache.org 
Subject: RE: help with high cpu usage

Alan,


> -Original Message-
> From: Alan F 
> Sent: Thursday, February 03, 2022 2:51 PM
> To: Tomcat Users List 
> Subject: RE: help with high cpu usage
>
> My bad here are the correct dumps 10 secs apart
>
> https://urldefense.com/v3/__https://fastthread.io/my-thread-
> report.jsp?p=c2hhcmVkLzIwMjIvMDIvMy8tLWFwaS0zNzY2ZmZmNy0wZDgyL
> TRhZTItYmE3Mi0zMWQyYTYwN2M1ZjgudHh0&__;!!F9svGWnIaVPGSwU!-
> fDbBdZmwXsUn9QT9ftL8f4PTLoASDZOXCeB4UEo7qKgcIHhANQVT6VMoGvG
> st67ghaaLsg$
>
>
> https://urldefense.com/v3/__https://fastthread.io/my-thread-
> report.jsp?p=c2hhcmVkLzIwMjIvMDIvMy8tLWFwaS00NTE3MWUxNy1jYWRi
> LTRkY2UtODBlNS1lMDk0YTJjNTg1OGEudHh0&__;!!F9svGWnIaVPGSwU!-
> fDbBdZmwXsUn9QT9ftL8f4PTLoASDZOXCeB4UEo7qKgcIHhANQVT6VMoGvG
> st67j-3O5xU$
>
>
>
>
> -Original Message-
> From: john.e.gr...@wellsfargo.com.INVALID
> 
> Sent: 03 February 2022 19:33
> To: users@tomcat.apache.org
> Subject: RE: help with high cpu usage
>
> Alan,
>
>
> > -Original Message-
> > From: Alan F 
> > Sent: Thursday, February 03, 2022 12:19 PM
> > To: Tomcat Users List 
> > Subject: help with high cpu usage
> >
> > Had some issues today with one prod host. One is fine the other has 
> > stuck around 80%Cpu.
> > Ive taken a thread dump from both hosts and would appreciate someone 
> > give a once over what it may be before I kill and restart. They are 
> > clustered nodes so running identical apps and loadbalanced by a 
> > hardware
> balancer.
> >
> > Node1 is ok (relatively!)
> > https://urldefense.com/v3/__https://fastthread.io/my-thread-
> >
> report.jsp?p=c2hhcmVkLzIwMjIvMDIvMy8tLWFwaS1hODllYzBkZS01OGJjLTQ
> >
> 2ZDQtYWRhNS1kYjkxZjM2NjI1ZTAudHh0&__;!!F9svGWnIaVPGSwU!91fvMc
> > RzcMYr95RrClT-eCrcDNp3fKUDpupDSNtn-mDKbTl_dmUSa0LaAolXlhipl-
> > Fk2pQ$
> >
> >
> > Node 2 still has high CPU usage
> > https://urldefense.com/v3/__https://fastthread.io/my-thread-
> >
> report.jsp?p=c2hhcmVkLzIwMjIvMDIvMy8tLWFwaS0yN2I0YWY4Mi05OWFhL
> >
> TQ3YjYtOGQ2My0wMDMwZjlkNDQzNjMudHh0&__;!!F9svGWnIaVPGSwU!9
> > 1fvMcRzcMYr95RrClT-eCrcDNp3fKUDpupDSNtn-
> > mDKbTl_dmUSa0LaAolXlhipkmLFr3E$
>
> Taking thread dumps was a good idea but I see very little activity on node 2.
> It looks like two threads are in Hibernate's
> EntityEntryContext.downgradeLocks() method, one is taking the thread 
> dump itself, and another is reading a request from a client, I think.  
> I would not expect this to add up to 80% CPU usage unless one of those 
> threads is stuck in a loop.  Comparing multiple thread dumps taken 
> 5-10 seconds apart would help answer this question.  How much GC is 
> there?  Could these Hibernate queries be pulling a huge amount of data 
> from the DB, thus causing a lot of GC activity?
>
> Node 1 looks idle except for the thread taking the thread dump.
>
> Do you know for sure that it's the Tomcat process that is using the CPU?

Of the 3 dumps from the same node, the first two are 3 hours apart, yet the two 
query threads seem to still be doing the same thing.  (I verified that the 
timestamps in the dumps are different but maybe I made a mistake.)  They are 
both making the Hibernate downgradeLocks call.  This is occurring in the 
context of committing a transaction.  That definitely makes it look like those 
threads are somehow either stuck or are looping.

The 3rd dump has those same two threads actually making queries to Oracle.  So 
within about 10 seconds, we have two threads committing transactions followed 
by making additional queries.

Definitely show these to the developers if you haven't already.

I didn't fo

AW: help with high cpu usage

[Thomas Hoffmann (Speed4Trade GmbH)]

Hello,

when I encounter high CPU usage, it's best to identify the thread Id which is 
eating CPU.
Making a thread dump, you can then search for  the thread id within this dump.
This works good for long lasting threads. If the CPU eating thread changes 
quickly, it's harder to figure out.

Greetings,
Thomas

Von: Alan F 
Gesendet: Freitag, 4. Februar 2022 00:02:49
An: Tomcat Users List
Betreff: Re: help with high cpu usage

John thanks so much !! Will pass this on tomorrow. Cheers.

From: john.e.gr...@wellsfargo.com.INVALID 
Sent: 03 February 2022 22:45
To: users@tomcat.apache.org 
Subject: RE: help with high cpu usage

Alan,


> -Original Message-
> From: Alan F 
> Sent: Thursday, February 03, 2022 2:51 PM
> To: Tomcat Users List 
> Subject: RE: help with high cpu usage
>
> My bad here are the correct dumps 10 secs apart
>
> https://urldefense.com/v3/__https://fastthread.io/my-thread-
> report.jsp?p=c2hhcmVkLzIwMjIvMDIvMy8tLWFwaS0zNzY2ZmZmNy0wZDgyL
> TRhZTItYmE3Mi0zMWQyYTYwN2M1ZjgudHh0&__;!!F9svGWnIaVPGSwU!-
> fDbBdZmwXsUn9QT9ftL8f4PTLoASDZOXCeB4UEo7qKgcIHhANQVT6VMoGvG
> st67ghaaLsg$
>
>
> https://urldefense.com/v3/__https://fastthread.io/my-thread-
> report.jsp?p=c2hhcmVkLzIwMjIvMDIvMy8tLWFwaS00NTE3MWUxNy1jYWRi
> LTRkY2UtODBlNS1lMDk0YTJjNTg1OGEudHh0&__;!!F9svGWnIaVPGSwU!-
> fDbBdZmwXsUn9QT9ftL8f4PTLoASDZOXCeB4UEo7qKgcIHhANQVT6VMoGvG
> st67j-3O5xU$
>
>
>
>
> -Original Message-
> From: john.e.gr...@wellsfargo.com.INVALID
> 
> Sent: 03 February 2022 19:33
> To: users@tomcat.apache.org
> Subject: RE: help with high cpu usage
>
> Alan,
>
>
> > -Original Message-
> > From: Alan F 
> > Sent: Thursday, February 03, 2022 12:19 PM
> > To: Tomcat Users List 
> > Subject: help with high cpu usage
> >
> > Had some issues today with one prod host. One is fine the other has
> > stuck around 80%Cpu.
> > Ive taken a thread dump from both hosts and would appreciate someone
> > give a once over what it may be before I kill and restart. They are
> > clustered nodes so running identical apps and loadbalanced by a hardware
> balancer.
> >
> > Node1 is ok (relatively!)
> > https://urldefense.com/v3/__https://fastthread.io/my-thread-
> >
> report.jsp?p=c2hhcmVkLzIwMjIvMDIvMy8tLWFwaS1hODllYzBkZS01OGJjLTQ
> >
> 2ZDQtYWRhNS1kYjkxZjM2NjI1ZTAudHh0&__;!!F9svGWnIaVPGSwU!91fvMc
> > RzcMYr95RrClT-eCrcDNp3fKUDpupDSNtn-mDKbTl_dmUSa0LaAolXlhipl-
> > Fk2pQ$
> >
> >
> > Node 2 still has high CPU usage
> > https://urldefense.com/v3/__https://fastthread.io/my-thread-
> >
> report.jsp?p=c2hhcmVkLzIwMjIvMDIvMy8tLWFwaS0yN2I0YWY4Mi05OWFhL
> >
> TQ3YjYtOGQ2My0wMDMwZjlkNDQzNjMudHh0&__;!!F9svGWnIaVPGSwU!9
> > 1fvMcRzcMYr95RrClT-eCrcDNp3fKUDpupDSNtn-
> > mDKbTl_dmUSa0LaAolXlhipkmLFr3E$
>
> Taking thread dumps was a good idea but I see very little activity on node 2.
> It looks like two threads are in Hibernate's
> EntityEntryContext.downgradeLocks() method, one is taking the thread
> dump itself, and another is reading a request from a client, I think.  I would
> not expect this to add up to 80% CPU usage unless one of those threads is
> stuck in a loop.  Comparing multiple thread dumps taken 5-10 seconds apart
> would help answer this question.  How much GC is there?  Could these
> Hibernate queries be pulling a huge amount of data from the DB, thus
> causing a lot of GC activity?
>
> Node 1 looks idle except for the thread taking the thread dump.
>
> Do you know for sure that it's the Tomcat process that is using the CPU?

Of the 3 dumps from the same node, the first two are 3 hours apart, yet the two 
query threads seem to still be doing the same thing.  (I verified that the 
timestamps in the dumps are different but maybe I made a mistake.)  They are 
both making the Hibernate downgradeLocks call.  This is occurring in the 
context of committing a transaction.  That definitely makes it look like those 
threads are somehow either stuck or are looping.

The 3rd dump has those same two threads actually making queries to Oracle.  So 
within about 10 seconds, we have two threads committing transactions followed 
by making additional queries.

Definitely show these to the developers if you haven't already.

I didn't follow what you said about the GC.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: help with high cpu usage

[Alan F]

John thanks so much !! Will pass this on tomorrow. Cheers.

From: john.e.gr...@wellsfargo.com.INVALID 
Sent: 03 February 2022 22:45
To: users@tomcat.apache.org 
Subject: RE: help with high cpu usage

Alan,


> -Original Message-
> From: Alan F 
> Sent: Thursday, February 03, 2022 2:51 PM
> To: Tomcat Users List 
> Subject: RE: help with high cpu usage
>
> My bad here are the correct dumps 10 secs apart
>
> https://urldefense.com/v3/__https://fastthread.io/my-thread-
> report.jsp?p=c2hhcmVkLzIwMjIvMDIvMy8tLWFwaS0zNzY2ZmZmNy0wZDgyL
> TRhZTItYmE3Mi0zMWQyYTYwN2M1ZjgudHh0&__;!!F9svGWnIaVPGSwU!-
> fDbBdZmwXsUn9QT9ftL8f4PTLoASDZOXCeB4UEo7qKgcIHhANQVT6VMoGvG
> st67ghaaLsg$
>
>
> https://urldefense.com/v3/__https://fastthread.io/my-thread-
> report.jsp?p=c2hhcmVkLzIwMjIvMDIvMy8tLWFwaS00NTE3MWUxNy1jYWRi
> LTRkY2UtODBlNS1lMDk0YTJjNTg1OGEudHh0&__;!!F9svGWnIaVPGSwU!-
> fDbBdZmwXsUn9QT9ftL8f4PTLoASDZOXCeB4UEo7qKgcIHhANQVT6VMoGvG
> st67j-3O5xU$
>
>
>
>
> -Original Message-
> From: john.e.gr...@wellsfargo.com.INVALID
> 
> Sent: 03 February 2022 19:33
> To: users@tomcat.apache.org
> Subject: RE: help with high cpu usage
>
> Alan,
>
>
> > -Original Message-
> > From: Alan F 
> > Sent: Thursday, February 03, 2022 12:19 PM
> > To: Tomcat Users List 
> > Subject: help with high cpu usage
> >
> > Had some issues today with one prod host. One is fine the other has
> > stuck around 80%Cpu.
> > Ive taken a thread dump from both hosts and would appreciate someone
> > give a once over what it may be before I kill and restart. They are
> > clustered nodes so running identical apps and loadbalanced by a hardware
> balancer.
> >
> > Node1 is ok (relatively!)
> > https://urldefense.com/v3/__https://fastthread.io/my-thread-
> >
> report.jsp?p=c2hhcmVkLzIwMjIvMDIvMy8tLWFwaS1hODllYzBkZS01OGJjLTQ
> >
> 2ZDQtYWRhNS1kYjkxZjM2NjI1ZTAudHh0&__;!!F9svGWnIaVPGSwU!91fvMc
> > RzcMYr95RrClT-eCrcDNp3fKUDpupDSNtn-mDKbTl_dmUSa0LaAolXlhipl-
> > Fk2pQ$
> >
> >
> > Node 2 still has high CPU usage
> > https://urldefense.com/v3/__https://fastthread.io/my-thread-
> >
> report.jsp?p=c2hhcmVkLzIwMjIvMDIvMy8tLWFwaS0yN2I0YWY4Mi05OWFhL
> >
> TQ3YjYtOGQ2My0wMDMwZjlkNDQzNjMudHh0&__;!!F9svGWnIaVPGSwU!9
> > 1fvMcRzcMYr95RrClT-eCrcDNp3fKUDpupDSNtn-
> > mDKbTl_dmUSa0LaAolXlhipkmLFr3E$
>
> Taking thread dumps was a good idea but I see very little activity on node 2.
> It looks like two threads are in Hibernate's
> EntityEntryContext.downgradeLocks() method, one is taking the thread
> dump itself, and another is reading a request from a client, I think.  I would
> not expect this to add up to 80% CPU usage unless one of those threads is
> stuck in a loop.  Comparing multiple thread dumps taken 5-10 seconds apart
> would help answer this question.  How much GC is there?  Could these
> Hibernate queries be pulling a huge amount of data from the DB, thus
> causing a lot of GC activity?
>
> Node 1 looks idle except for the thread taking the thread dump.
>
> Do you know for sure that it's the Tomcat process that is using the CPU?

Of the 3 dumps from the same node, the first two are 3 hours apart, yet the two 
query threads seem to still be doing the same thing.  (I verified that the 
timestamps in the dumps are different but maybe I made a mistake.)  They are 
both making the Hibernate downgradeLocks call.  This is occurring in the 
context of committing a transaction.  That definitely makes it look like those 
threads are somehow either stuck or are looping.

The 3rd dump has those same two threads actually making queries to Oracle.  So 
within about 10 seconds, we have two threads committing transactions followed 
by making additional queries.

Definitely show these to the developers if you haven't already.

I didn't follow what you said about the GC.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: help with high cpu usage

[John.E.Gregg]

Alan,


> -Original Message-
> From: Alan F 
> Sent: Thursday, February 03, 2022 2:51 PM
> To: Tomcat Users List 
> Subject: RE: help with high cpu usage
> 
> My bad here are the correct dumps 10 secs apart
> 
> https://urldefense.com/v3/__https://fastthread.io/my-thread-
> report.jsp?p=c2hhcmVkLzIwMjIvMDIvMy8tLWFwaS0zNzY2ZmZmNy0wZDgyL
> TRhZTItYmE3Mi0zMWQyYTYwN2M1ZjgudHh0&__;!!F9svGWnIaVPGSwU!-
> fDbBdZmwXsUn9QT9ftL8f4PTLoASDZOXCeB4UEo7qKgcIHhANQVT6VMoGvG
> st67ghaaLsg$
> 
> 
> https://urldefense.com/v3/__https://fastthread.io/my-thread-
> report.jsp?p=c2hhcmVkLzIwMjIvMDIvMy8tLWFwaS00NTE3MWUxNy1jYWRi
> LTRkY2UtODBlNS1lMDk0YTJjNTg1OGEudHh0&__;!!F9svGWnIaVPGSwU!-
> fDbBdZmwXsUn9QT9ftL8f4PTLoASDZOXCeB4UEo7qKgcIHhANQVT6VMoGvG
> st67j-3O5xU$
> 
> 
> 
> 
> -Original Message-
> From: john.e.gr...@wellsfargo.com.INVALID
> 
> Sent: 03 February 2022 19:33
> To: users@tomcat.apache.org
> Subject: RE: help with high cpu usage
> 
> Alan,
> 
> 
> > -Original Message-
> > From: Alan F 
> > Sent: Thursday, February 03, 2022 12:19 PM
> > To: Tomcat Users List 
> > Subject: help with high cpu usage
> >
> > Had some issues today with one prod host. One is fine the other has
> > stuck around 80%Cpu.
> > Ive taken a thread dump from both hosts and would appreciate someone
> > give a once over what it may be before I kill and restart. They are
> > clustered nodes so running identical apps and loadbalanced by a hardware
> balancer.
> >
> > Node1 is ok (relatively!)
> > https://urldefense.com/v3/__https://fastthread.io/my-thread-
> >
> report.jsp?p=c2hhcmVkLzIwMjIvMDIvMy8tLWFwaS1hODllYzBkZS01OGJjLTQ
> >
> 2ZDQtYWRhNS1kYjkxZjM2NjI1ZTAudHh0&__;!!F9svGWnIaVPGSwU!91fvMc
> > RzcMYr95RrClT-eCrcDNp3fKUDpupDSNtn-mDKbTl_dmUSa0LaAolXlhipl-
> > Fk2pQ$
> >
> >
> > Node 2 still has high CPU usage
> > https://urldefense.com/v3/__https://fastthread.io/my-thread-
> >
> report.jsp?p=c2hhcmVkLzIwMjIvMDIvMy8tLWFwaS0yN2I0YWY4Mi05OWFhL
> >
> TQ3YjYtOGQ2My0wMDMwZjlkNDQzNjMudHh0&__;!!F9svGWnIaVPGSwU!9
> > 1fvMcRzcMYr95RrClT-eCrcDNp3fKUDpupDSNtn-
> > mDKbTl_dmUSa0LaAolXlhipkmLFr3E$
> 
> Taking thread dumps was a good idea but I see very little activity on node 2.
> It looks like two threads are in Hibernate's
> EntityEntryContext.downgradeLocks() method, one is taking the thread
> dump itself, and another is reading a request from a client, I think.  I would
> not expect this to add up to 80% CPU usage unless one of those threads is
> stuck in a loop.  Comparing multiple thread dumps taken 5-10 seconds apart
> would help answer this question.  How much GC is there?  Could these
> Hibernate queries be pulling a huge amount of data from the DB, thus
> causing a lot of GC activity?
> 
> Node 1 looks idle except for the thread taking the thread dump.
> 
> Do you know for sure that it's the Tomcat process that is using the CPU?

Of the 3 dumps from the same node, the first two are 3 hours apart, yet the two 
query threads seem to still be doing the same thing.  (I verified that the 
timestamps in the dumps are different but maybe I made a mistake.)  They are 
both making the Hibernate downgradeLocks call.  This is occurring in the 
context of committing a transaction.  That definitely makes it look like those 
threads are somehow either stuck or are looping.

The 3rd dump has those same two threads actually making queries to Oracle.  So 
within about 10 seconds, we have two threads committing transactions followed 
by making additional queries.

Definitely show these to the developers if you haven't already.

I didn't follow what you said about the GC.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: help with high cpu usage

[Alan F]

My bad here are the correct dumps 10 secs apart

https://fastthread.io/my-thread-report.jsp?p=c2hhcmVkLzIwMjIvMDIvMy8tLWFwaS0zNzY2ZmZmNy0wZDgyLTRhZTItYmE3Mi0zMWQyYTYwN2M1ZjgudHh0;


https://fastthread.io/my-thread-report.jsp?p=c2hhcmVkLzIwMjIvMDIvMy8tLWFwaS00NTE3MWUxNy1jYWRiLTRkY2UtODBlNS1lMDk0YTJjNTg1OGEudHh0;




-Original Message-
From: john.e.gr...@wellsfargo.com.INVALID  
Sent: 03 February 2022 19:33
To: users@tomcat.apache.org
Subject: RE: help with high cpu usage

Alan,


> -Original Message-
> From: Alan F 
> Sent: Thursday, February 03, 2022 12:19 PM
> To: Tomcat Users List 
> Subject: help with high cpu usage
> 
> Had some issues today with one prod host. One is fine the other has 
> stuck around 80%Cpu.
> Ive taken a thread dump from both hosts and would appreciate someone 
> give a once over what it may be before I kill and restart. They are 
> clustered nodes so running identical apps and loadbalanced by a hardware 
> balancer.
> 
> Node1 is ok (relatively!)
> https://urldefense.com/v3/__https://fastthread.io/my-thread-
> report.jsp?p=c2hhcmVkLzIwMjIvMDIvMy8tLWFwaS1hODllYzBkZS01OGJjLTQ
> 2ZDQtYWRhNS1kYjkxZjM2NjI1ZTAudHh0&__;!!F9svGWnIaVPGSwU!91fvMc
> RzcMYr95RrClT-eCrcDNp3fKUDpupDSNtn-mDKbTl_dmUSa0LaAolXlhipl-
> Fk2pQ$
> 
> 
> Node 2 still has high CPU usage
> https://urldefense.com/v3/__https://fastthread.io/my-thread-
> report.jsp?p=c2hhcmVkLzIwMjIvMDIvMy8tLWFwaS0yN2I0YWY4Mi05OWFhL
> TQ3YjYtOGQ2My0wMDMwZjlkNDQzNjMudHh0&__;!!F9svGWnIaVPGSwU!9
> 1fvMcRzcMYr95RrClT-eCrcDNp3fKUDpupDSNtn-
> mDKbTl_dmUSa0LaAolXlhipkmLFr3E$

Taking thread dumps was a good idea but I see very little activity on node 2.  
It looks like two threads are in Hibernate's 
EntityEntryContext.downgradeLocks() method, one is taking the thread dump 
itself, and another is reading a request from a client, I think.  I would not 
expect this to add up to 80% CPU usage unless one of those threads is stuck in 
a loop.  Comparing multiple thread dumps taken 5-10 seconds apart would help 
answer this question.  How much GC is there?  Could these Hibernate queries be 
pulling a huge amount of data from the DB, thus causing a lot of GC activity?

Node 1 looks idle except for the thread taking the thread dump.

Do you know for sure that it's the Tomcat process that is using the CPU?

RE: help with high cpu usage

[Alan F]

HI John,

Thankyou kindly for taking the time here. 

First of all looking back at the historical chart for the day I observed node 2 
rise in cpu activity about 11am this morning and stayed high node1 has dropped 
back to idle.


##Do you know for sure that its the Tomcat process that is using the CPU?##
A simple top -i showing the only process still running here at 189% is a java 
process under tomcat account.

24667 tomcat20   0  365.6g  17.2g  23080 S 189.7 54.9   2663:45 java

I have taken 2 dumps here 10 secs apart if this helps at all? 

https://fastthread.io/my-thread-report.jsp?p=c2hhcmVkLzIwMjIvMDIvMy8tLWFwaS0zNzY2ZmZmNy0wZDgyLTRhZTItYmE3Mi0zMWQyYTYwN2M1ZjgudHh0;


https://fastthread.io/my-thread-report.jsp?p=c2hhcmVkLzIwMjIvMDIvMy8tLWFwaS0yMzFjOGYzZS01MjYzLTRiYWYtOTJjMS1jN2RiMWRlZmEwN2QudHh0;


We do have Prometheus hooked in via jmx with Grafana but im struggling to see 
anything glaring apart from GC I see old Gen taking about 5hrs before it drops 
back one node2 as opposed to 3 on node 1. 



-Original Message-
From: john.e.gr...@wellsfargo.com.INVALID  
Sent: 03 February 2022 19:33
To: users@tomcat.apache.org
Subject: RE: help with high cpu usage

Alan,


> -Original Message-
> From: Alan F 
> Sent: Thursday, February 03, 2022 12:19 PM
> To: Tomcat Users List 
> Subject: help with high cpu usage
> 
> Had some issues today with one prod host. One is fine the other has 
> stuck around 80%Cpu.
> Ive taken a thread dump from both hosts and would appreciate someone 
> give a once over what it may be before I kill and restart. They are 
> clustered nodes so running identical apps and loadbalanced by a hardware 
> balancer.
> 
> Node1 is ok (relatively!)
> https://urldefense.com/v3/__https://fastthread.io/my-thread-
> report.jsp?p=c2hhcmVkLzIwMjIvMDIvMy8tLWFwaS1hODllYzBkZS01OGJjLTQ
> 2ZDQtYWRhNS1kYjkxZjM2NjI1ZTAudHh0&__;!!F9svGWnIaVPGSwU!91fvMc
> RzcMYr95RrClT-eCrcDNp3fKUDpupDSNtn-mDKbTl_dmUSa0LaAolXlhipl-
> Fk2pQ$
> 
> 
> Node 2 still has high CPU usage
> https://urldefense.com/v3/__https://fastthread.io/my-thread-
> report.jsp?p=c2hhcmVkLzIwMjIvMDIvMy8tLWFwaS0yN2I0YWY4Mi05OWFhL
> TQ3YjYtOGQ2My0wMDMwZjlkNDQzNjMudHh0&__;!!F9svGWnIaVPGSwU!9
> 1fvMcRzcMYr95RrClT-eCrcDNp3fKUDpupDSNtn-
> mDKbTl_dmUSa0LaAolXlhipkmLFr3E$

Taking thread dumps was a good idea but I see very little activity on node 2.  
It looks like two threads are in Hibernate's 
EntityEntryContext.downgradeLocks() method, one is taking the thread dump 
itself, and another is reading a request from a client, I think.  I would not 
expect this to add up to 80% CPU usage unless one of those threads is stuck in 
a loop.  Comparing multiple thread dumps taken 5-10 seconds apart would help 
answer this question.  How much GC is there?  Could these Hibernate queries be 
pulling a huge amount of data from the DB, thus causing a lot of GC activity?

Node 1 looks idle except for the thread taking the thread dump.

Do you know for sure that it's the Tomcat process that is using the CPU?

RE: help with high cpu usage

[John.E.Gregg]

Alan,


> -Original Message-
> From: Alan F 
> Sent: Thursday, February 03, 2022 12:19 PM
> To: Tomcat Users List 
> Subject: help with high cpu usage
> 
> Had some issues today with one prod host. One is fine the other has stuck
> around 80%Cpu.
> Ive taken a thread dump from both hosts and would appreciate someone
> give a once over what it may be before I kill and restart. They are clustered
> nodes so running identical apps and loadbalanced by a hardware balancer.
> 
> Node1 is ok (relatively!)
> https://urldefense.com/v3/__https://fastthread.io/my-thread-
> report.jsp?p=c2hhcmVkLzIwMjIvMDIvMy8tLWFwaS1hODllYzBkZS01OGJjLTQ
> 2ZDQtYWRhNS1kYjkxZjM2NjI1ZTAudHh0&__;!!F9svGWnIaVPGSwU!91fvMc
> RzcMYr95RrClT-eCrcDNp3fKUDpupDSNtn-mDKbTl_dmUSa0LaAolXlhipl-
> Fk2pQ$
> 
> 
> Node 2 still has high CPU usage
> https://urldefense.com/v3/__https://fastthread.io/my-thread-
> report.jsp?p=c2hhcmVkLzIwMjIvMDIvMy8tLWFwaS0yN2I0YWY4Mi05OWFhL
> TQ3YjYtOGQ2My0wMDMwZjlkNDQzNjMudHh0&__;!!F9svGWnIaVPGSwU!9
> 1fvMcRzcMYr95RrClT-eCrcDNp3fKUDpupDSNtn-
> mDKbTl_dmUSa0LaAolXlhipkmLFr3E$

Taking thread dumps was a good idea but I see very little activity on node 2.  
It looks like two threads are in Hibernate's 
EntityEntryContext.downgradeLocks() method, one is taking the thread dump 
itself, and another is reading a request from a client, I think.  I would not 
expect this to add up to 80% CPU usage unless one of those threads is stuck in 
a loop.  Comparing multiple thread dumps taken 5-10 seconds apart would help 
answer this question.  How much GC is there?  Could these Hibernate queries be 
pulling a huge amount of data from the DB, thus causing a lot of GC activity?

Node 1 looks idle except for the thread taking the thread dump.

Do you know for sure that it's the Tomcat process that is using the CPU?

help with high cpu usage

[Alan F]

Had some issues today with one prod host. One is fine the other has stuck 
around 80%Cpu. 
Ive taken a thread dump from both hosts and would appreciate someone give a 
once over what it may be before I kill and restart. They are clustered nodes so 
running identical apps and loadbalanced by a hardware balancer.

Node1 is ok (relatively!)
https://fastthread.io/my-thread-report.jsp?p=c2hhcmVkLzIwMjIvMDIvMy8tLWFwaS1hODllYzBkZS01OGJjLTQ2ZDQtYWRhNS1kYjkxZjM2NjI1ZTAudHh0;


Node 2 still has high CPU usage
https://fastthread.io/my-thread-report.jsp?p=c2hhcmVkLzIwMjIvMDIvMy8tLWFwaS0yN2I0YWY4Mi05OWFhLTQ3YjYtOGQ2My0wMDMwZjlkNDQzNjMudHh0;

Re: help with Valve

[Rob Sargent]

On 11/23/21 10:55 AM, Mark Thomas wrote:

On 23/11/2021 17:42, Rob Sargent wrote:
Thank you.  Does this look like a believable deployment (presuming 
the property is in fact set)?


    cat ./localhost/sgs/META-INF/context-valve.xml
   
   


No.

A context.xml file placed in META-INF must be called context.xml

The contents needs to look like this:


    
    



Note the quotes on maxDays. The parser might let you get away without 
them but the standard Tomcat config files always use them.





Double thank-you.

Mark

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org




-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: help with Valve

[Mark Thomas]

On 23/11/2021 17:42, Rob Sargent wrote:
Thank you.  Does this look like a believable deployment (presuming the 
property is in fact set)?


    cat ./localhost/sgs/META-INF/context-valve.xml
       
       


No.

A context.xml file placed in META-INF must be called context.xml

The contents needs to look like this:







Note the quotes on maxDays. The parser might let you get away without 
them but the standard Tomcat config files always use them.


Mark

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: help with Valve

[Rob Sargent]

Thank you.  Does this look like a believable deployment (presuming the 
property is in fact set)?


   cat ./localhost/sgs/META-INF/context-valve.xml
  
  


On 11/23/21 10:38 AM, Mark Thomas wrote:

On 23/11/2021 16:48, Rob Sargent wrote:

Is the Access Log Valve available for use in an embedded environment?


Yes.

Mark


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: help with Valve

[Mark Thomas]

On 23/11/2021 16:48, Rob Sargent wrote:

Is the Access Log Valve available for use in an embedded environment?


Yes.

Mark


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

help with Valve

[Rob Sargent]

Is the Access Log Valve available for use in an embedded environment?

Re: Help needed reg Context

[Mark Thomas]

On 13/10/2021 14:19, Mohan T wrote:

Dear All,

We are using Tomcat 8.5 on Suse linix.

We are deploying one of our artifacts as below

hub#app#classic#admin.war

The components are also deployed and the context is also created 
Successfully.


Is there any other alternative way to set the context other than using 
*#*.


Please guide us.


Move the WAR file *outside* of the Host's appBase. i.e. You need to move 
it out of the webapps directory.


You then have two options.

1. Recommended
Add a file named
$CATALINA_BASE/conf/Catalina/localhost/hub#app#classic#admin.xml

with the following content:



2. Not recommended
Nest the following inside the Host element in server.xml


Mark

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Help needed reg Context

[Mohan T]

Dear All,

We are using Tomcat 8.5 on Suse linix.

We are deploying one of our artifacts as below

hub#app#classic#admin.war

The components are also deployed and the context is also created Successfully.

Is there any other alternative way to set the context other than using # .

[cid:image001.png@01D7C063.1175FF40]

Please guide us.

Thanks

Mohan


DISCLAIMER: This communication contains information which is confidential and 
the copyright of Ramco Systems Ltd, its subsidiaries or a third party 
("Ramco"). This email may also contain legally privileged information. 
Confidentiality and legal privilege attached to this communication are not 
waived or lost by reason of mistaken delivery to you.This email is intended to 
be read or used by the addressee only. If you are not the intended recipient, 
any use, distribution, disclosure or copying of this email is strictly 
prohibited without the express written approval of Ramco. Please delete and 
destroy all copies and email Ramco at le...@ramco.com immediately. Any views 
expressed in this communication are those of the individual sender, except 
where the sender specifically states them to be the views of Ramco. Except as 
required by law, Ramco does not represent, warrant and/or guarantee that the 
integrity of this communication has been maintained nor that the communication 
is free of errors, virus, interception or interference. If you do not wish to 
receive such communications, please forward this communication to 
market...@ramco.com and express your wish not to receive such communications 
henceforth.

Re: Help Needed

[Christopher Schultz]

Mohan,

On 8/8/21 08:45, Mohan T wrote:

There is no specific upgrade to the environment.


Did you see the reply to your message I sent on August 6th?

We are introducing new components and the permission is being set for 
them in catalina.policy file.


Are your JAR files signed? The error says they are not signed. (And 
presumably you are requiring them to be signed.)



Attaching the Catalina.policy file for reference.


Your attachment has been stripped. Find another way to communicate the
policy. Copy/paste in the message ought to work.


openjdk version "1.8.0_131"
OpenJDK Runtime Environment (build 1.8.0_131-b12)
OpenJDK 64-Bit Server VM (build 25.131-b12, mixed mode)


FYI This is also quite old.

-chris


*From:*Mohan T
*Sent:* 07 August 2021 08:00
*To:* 'Tomcat Users List' 
*Subject:* RE: Help Needed

Dear All,

Any inputs on this. We are not getting a break in this.

Kindly help us in taking things forward.

Thanks

Mohan

*From:*Mohan T
*Sent:* 06 August 2021 09:21
*To:* Tomcat Users List <mailto:users@tomcat.apache.org>>

*Subject:* Help Needed

Dear All,

*/_We are using Tomcat 8.5 on Suse LINUX. _/*

We enabled JAvA security in  tomcat and invoking the Catalina.sh. We are 
facing some permission issues in the environment.


We could see the below error messages.

access: access allowed ("java.util.logging.LoggingPermission" "control")

java.lang.Exception: Stack trace

     at java.lang.Thread.dumpStack(Thread.java:1336)

     at 
java.security.AccessControlContext.checkPermission(AccessControlContext.java:419)


     at 
java.security.AccessController.checkPermission(AccessController.java:884)


     at 
java.lang.SecurityManager.checkPermission(SecurityManager.java:549)


     at 
java.util.logging.LogManager.checkPermission(LogManager.java:1586)


     at java.util.logging.Logger.checkPermission(Logger.java:422)

     at java.util.logging.Logger.removeHandler(Logger.java:1764)

     at 
org.apache.juli.ClassLoaderLogManager.resetLoggers(ClassLoaderLogManager.java:393)


     at 
org.apache.juli.ClassLoaderLogManager.shutdown(ClassLoaderLogManager.java:377)


     at 
org.apache.juli.ClassLoaderLogManager$Cleaner.run(ClassLoaderLogManager.java:81)


policy: getPermissions:

     PD CodeSource: 
(file:/home/ilas/tomcat8.5_tech/apache-tomcat-8.5.35/bin/tomcat-juli.jar 
)


     PD ClassLoader: sun.misc.Launcher$AppClassLoader@3d4eac69 
<mailto:sun.misc.Launcher$AppClassLoader@3d4eac69>


     PD Principals: 

policy: evaluate codesources:

     Policy CodeSource: (file:/usr/java/jdk1.8.0_162/jre/lib/- signer certificates>)


     Active CodeSource: 
(file:/home/ilas/tomcat8.5_tech/apache-tomcat-8.5.35/bin/tomcat-juli.jar 
)


Thanks

Mohan

DISCLAIMER: This communication contains information which is 
confidential and the copyright of Ramco Systems Ltd, its subsidiaries or 
a third party (“Ramco”). This email may also contain legally privileged 
information. Confidentiality and legal privilege attached to this 
communication are not waived or lost by reason of mistaken delivery to 
you.This email is intended to be read or used by the addressee only. If 
you are not the intended recipient, any use, distribution, disclosure or 
copying of this email is strictly prohibited without the express written 
approval of Ramco. Please delete and destroy all copies and email Ramco 
at le...@ramco.com immediately. Any views expressed in this 
communication are those of the individual sender, except where the 
sender specifically states them to be the views of Ramco. Except as 
required by law, Ramco does not represent, warrant and/or guarantee that 
the integrity of this communication has been maintained nor that the 
communication is free of errors, virus, interception or interference. If 
you do not wish to receive such communications, please forward this 
communication to market...@ramco.com and express your wish not to 
receive such communications henceforth.



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Help Needed

[Mohan T]

Hi,

There is no specific upgrade to the environment .

We are introducing new components and the permission is being set for them in 
catalina.policy file.

Attaching the Catalina.policy file for reference.

openjdk version "1.8.0_131"
OpenJDK Runtime Environment (build 1.8.0_131-b12)
OpenJDK 64-Bit Server VM (build 25.131-b12, mixed mode)

Thanks

Mohan

From: Mohan T
Sent: 07 August 2021 08:00
To: 'Tomcat Users List' 
Subject: RE: Help Needed

Dear All,

Any inputs on this. We are not getting a break in this.

Kindly help us in taking things forward.

Thanks

Mohan

From: Mohan T
Sent: 06 August 2021 09:21
To: Tomcat Users List mailto:users@tomcat.apache.org>>
Subject: Help Needed

Dear All,

We are using Tomcat 8.5 on Suse LINUX.

We enabled JAvA security in  tomcat and invoking the Catalina.sh. We are facing 
some permission issues in the environment.

We could see the below error messages.

access: access allowed ("java.util.logging.LoggingPermission" "control")
java.lang.Exception: Stack trace
at java.lang.Thread.dumpStack(Thread.java:1336)
at 
java.security.AccessControlContext.checkPermission(AccessControlContext.java:419)
at 
java.security.AccessController.checkPermission(AccessController.java:884)
at java.lang.SecurityManager.checkPermission(SecurityManager.java:549)
at java.util.logging.LogManager.checkPermission(LogManager.java:1586)
at java.util.logging.Logger.checkPermission(Logger.java:422)
at java.util.logging.Logger.removeHandler(Logger.java:1764)
at 
org.apache.juli.ClassLoaderLogManager.resetLoggers(ClassLoaderLogManager.java:393)
at 
org.apache.juli.ClassLoaderLogManager.shutdown(ClassLoaderLogManager.java:377)
at 
org.apache.juli.ClassLoaderLogManager$Cleaner.run(ClassLoaderLogManager.java:81)
policy: getPermissions:
PD CodeSource: 
(file:/home/ilas/tomcat8.5_tech/apache-tomcat-8.5.35/bin/tomcat-juli.jar )
PD ClassLoader: 
sun.misc.Launcher$AppClassLoader@3d4eac69<mailto:sun.misc.Launcher$AppClassLoader@3d4eac69>
PD Principals: 
policy: evaluate codesources:
Policy CodeSource: (file:/usr/java/jdk1.8.0_162/jre/lib/- )
Active CodeSource: 
(file:/home/ilas/tomcat8.5_tech/apache-tomcat-8.5.35/bin/tomcat-juli.jar )

Thanks

Mohan
DISCLAIMER: This communication contains information which is confidential and 
the copyright of Ramco Systems Ltd, its subsidiaries or a third party 
("Ramco"). This email may also contain legally privileged information. 
Confidentiality and legal privilege attached to this communication are not 
waived or lost by reason of mistaken delivery to you.This email is intended to 
be read or used by the addressee only. If you are not the intended recipient, 
any use, distribution, disclosure or copying of this email is strictly 
prohibited without the express written approval of Ramco. Please delete and 
destroy all copies and email Ramco at le...@ramco.com immediately. Any views 
expressed in this communication are those of the individual sender, except 
where the sender specifically states them to be the views of Ramco. Except as 
required by law, Ramco does not represent, warrant and/or guarantee that the 
integrity of this communication has been maintained nor that the communication 
is free of errors, virus, interception or interference. If you do not wish to 
receive such communications, please forward this communication to 
market...@ramco.com and express your wish not to receive such communications 
henceforth.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org