Tomcat behind Apache reverse proxy

2009-08-11 Thread Rainer Frey
We develop an application that is heavily using different kind of web services (SOAP, Hessian) and only has few JSPs that are used with a browser. We bundle Tomcat (6.0.20) as server runtime. Some customers (with varying degree of experience) want to use this behind Apache HTTPD as reverse

Regarding Realm Authentication

2009-08-11 Thread Razat Gupta (razgupta)
Hi All, We are using Tomcat 5 on Linux OS. For validating userids available in Active Directory using LDAP, JNDI based realm is implemented using Realm tags in Tomcat's server.xml file and this authentication layer is provided for a particular WAR file available in webapps directory. Apart from

Re: Regarding Realm Authentication

2009-08-11 Thread Mark Thomas
Razat Gupta (razgupta) wrote: Hi All, We are using Tomcat 5 on Linux OS. For validating userids available in Active Directory using LDAP, JNDI based realm is implemented using Realm tags in Tomcat's server.xml file and this authentication layer is provided for a particular WAR file

Re: Tomcat behind Apache reverse proxy

2009-08-11 Thread Mark Thomas
Rainer Frey wrote: Some customers (with varying degree of experience) want to use this behind Apache HTTPD as reverse proxy and ask us for instructions. What would you recommend to describe in a general instruction document without knowing more details of the customers environment,

RE: Regarding Realm Authentication

2009-08-11 Thread Razat Gupta (razgupta)
Hi Mark, Thanks for the reply. Earlier we used to have Tomcat 4 and Apache 1.3 integrated using mod_jk and we were doing this without using tomcat 6. I am a bit new to the system, so I am not sure what exact implementation has been done to achieve this in Tomcat 4 and Apache 1.3. Do u

Re: Regarding Realm Authentication

2009-08-11 Thread Mark Thomas
Razat Gupta (razgupta) wrote: Hi Mark, Thanks for the reply. Earlier we used to have Tomcat 4 and Apache 1.3 integrated using mod_jk and we were doing this without using tomcat 6. I am a bit new to the system, so I am not sure what exact implementation has been done to achieve this

RE: avoiding ssl vulnerabilities in tomcat

2009-08-11 Thread sunil chandran
Hello all,   OK i will upgrade. But what all changes required to update to tomcat 5. what all changes reuired to upgrade to tomcat 4.1.40     --- On Mon, 10/8/09, Caldarale, Charles R chuck.caldar...@unisys.com wrote: From: Caldarale, Charles R chuck.caldar...@unisys.com Subject: RE: avoiding

Context elements not applied since version 6.0.20

2009-08-11 Thread GOOSSENS Wim
Hi all, After upgrading from tomcat 6.0.18 to 6.0.20 , elements in $CATALINA_BASE/conf/context.xml or in $CATALINA_BASE/conf/[enginename]/[hostname]/context.xml.default are no longer available (loaded) for the webapps. According to the documentation and the behavior until 6.0.18, they

Re: avoiding ssl vulnerabilities in tomcat

2009-08-11 Thread Mark Thomas
sunil chandran wrote: Hello all, OK i will upgrade. But what all changes required to update to tomcat 5. what all changes reuired to upgrade to tomcat 4.1.40 You may as well do the job properly and upgrade to 6.0.20. For you app? No changes should be required. For your Tomcat

Re: Context elements not applied since version 6.0.20

2009-08-11 Thread Mark Thomas
GOOSSENS Wim wrote: Hi all, After upgrading from tomcat 6.0.18 to 6.0.20 , elements in $CATALINA_BASE/conf/context.xml or in $CATALINA_BASE/conf/[enginename]/[hostname]/context.xml.default are no longer available (loaded) for the webapps. According to the documentation and the

RE: Context elements not applied since version 6.0.20

2009-08-11 Thread GOOSSENS Wim
Yes, but I was wondering if maybe there was a parameter I missed. Something similar to deployXML. I understand there is nothing like that. I should have asked it here before posting the bug report. Thanks for helping. Regards Wim -Oorspronkelijk bericht- Van: Mark Thomas

RE: Can a connector be nested in a context?

2009-08-11 Thread Payne, George (ghp5h)
Thanks very much Mark. I cannot find where I read this now. Either it's already been fixed or..I just can't find it. George -Original Message- From: Mark Thomas [mailto:ma...@apache.org] Sent: Monday, August 10, 2009 4:58 PM To: Tomcat Users List Subject: Re: Can a connector be

Re: Tomcat behind Apache reverse proxy

2009-08-11 Thread Rainer Frey
On Tuesday 11 August 2009 10:40:48 Mark Thomas wrote: Rainer Frey wrote: Some customers (with varying degree of experience) want to use this behind Apache HTTPD as reverse proxy and ask us for instructions. What would you recommend to describe in a general instruction document without

Re: Tomcat behind Apache reverse proxy

2009-08-11 Thread Rainer Frey (Inxmail GmbH)
On Tuesday 11 August 2009 15:37:54 Rainer Frey wrote: Also, properties from catalina.properties and from Java System Properties are expanded, but it seems that catalina.properties takes precedence. I find this surprising, because system properties are in my perception more dynamic and

RE: Tomcat 6 shutdown hangs server when using JDK 6.0_15

2009-08-11 Thread Dan Denton
Thanks Filip for the reply, but as I said in my original post, this is running on a virtual machine, so hardware isn't a factor. In addition, this only started when I began using JDK 6 instead of 5, and only continues to happen if I use JDK 6. If I use 5, there's no problem. I will test this

Tomcat load balancing

2009-08-11 Thread Chetan Chheda
Hello folks, I have 2 resource hungry processes that need to run on 2 separate tomcats. I have setup mod_jk to load balance between the 2 tomcats, but sometimes they end up on the same one. Is there a way to guarantee they run on separate tomcats? Is there an option to do load

Re: Tomcat behind Apache reverse proxy

2009-08-11 Thread Mark Thomas
Rainer Frey wrote: On Tuesday 11 August 2009 10:40:48 Mark Thomas wrote: Rainer Frey wrote: Some customers (with varying degree of experience) want to use this behind Apache HTTPD as reverse proxy and ask us for instructions. What would you recommend to describe in a general instruction

Re: Tomcat behind Apache reverse proxy

2009-08-11 Thread Mark Thomas
Rainer Frey (Inxmail GmbH) wrote: On Tuesday 11 August 2009 15:37:54 Rainer Frey wrote: Also, properties from catalina.properties and from Java System Properties are expanded, but it seems that catalina.properties takes precedence. I find this surprising, because system properties are in my

Re: slight problem with Tomcat and Httpd working together.

2009-08-11 Thread Josh Gooding
Chris, My thanks to you and Chuck for clarifying that. The reason that I set up httpd on the machine is for PHP and other possible languages. I was trying to be a little more future thinking, however, since PHP is no longer an option for these guys, I'll just nix the httpd server and move back

TR: pb redeploy with Tomcat 5.5.24

2009-08-11 Thread support-disserto
---English version Hello, I encounter a problem when I redeploy my WAR with Tomcat. One of the used libraries throws an error when I try to

RE: slight problem with Tomcat and Httpd working together.

2009-08-11 Thread Caldarale, Charles R
From: Josh Gooding [mailto:josh.good...@gmail.com] Subject: Re: slight problem with Tomcat and Httpd working together. I downloaded the APR for Tomcat. Dumb question, is there already a binary distribution someplace? For Windows, yes; it's in the docs: http://tomcat.apache.org/native-doc/

Re: slight problem with Tomcat and Httpd working together.

2009-08-11 Thread Josh Gooding
Even better, I got what I was looking for. Where do I put the DLL that I want to use? in wondows or in what tomcat directory? On Tue, Aug 11, 2009 at 10:27 AM, Josh Gooding josh.good...@gmail.comwrote: Chris, My thanks to you and Chuck for clarifying that. The reason that I set up httpd

RE: slight problem with Tomcat and Httpd working together.

2009-08-11 Thread Caldarale, Charles R
From: Josh Gooding [mailto:josh.good...@gmail.com] Subject: Re: slight problem with Tomcat and Httpd working together. Where do I put the DLL that I want to use? In Tomcat's bin directory. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is

Re: TR: pb redeploy with Tomcat 5.5.24

2009-08-11 Thread Ognjen Blagojevic
Hi, 1. What is the exact error being thrown? (copy paste the stack trace, if any) 2. Are you using Tomcat 5.5.23? Can you switch to fresh version of tomcat (6.0.20)? It is probably more stable and with less bugs. If you can't reproduce the problem on the latest version, that probably means

Re: Tomcat behind Apache reverse proxy

2009-08-11 Thread Rainer Frey
On Tuesday 11 August 2009 16:10:07 Mark Thomas wrote: Rainer Frey wrote: [...] Mark, thanks for your patient help with my questions. I really appreciate this. Also, properties from catalina.properties and from Java System Properties are expanded, but it seems that catalina.properties takes

Re: Tomcat behind Apache reverse proxy

2009-08-11 Thread Mark Thomas
Rainer Frey wrote: On Tuesday 11 August 2009 16:10:07 Mark Thomas wrote: Rainer Frey wrote: [...] Mark, thanks for your patient help with my questions. I really appreciate this. Also, properties from catalina.properties and from Java System Properties are expanded, but it seems that

Re: Is encryption of AJP traffic between Apache and Tomcat possible out of the box?

2009-08-11 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Tim, On 8/10/2009 8:15 PM, Tim Funk wrote: An ssh tunnel is also easy too. (but can also open other security holes depending on how its deployed and the requirements) ssh tunnels also have the possibility of going down. If you want to use an ssh

Re: slight problem with Tomcat and Httpd working together.

2009-08-11 Thread Josh Gooding
NVM chuck, I believe it's in the native docs. I looked at the link right after you posted. I couldn't find the native link on apaches site. T/Y sir On Tue, Aug 11, 2009 at 10:46 AM, Caldarale, Charles R chuck.caldar...@unisys.com wrote: From: Josh Gooding [mailto:josh.good...@gmail.com]

Re: slight problem with Tomcat and Httpd working together.

2009-08-11 Thread Josh Gooding
HEY!!! It's in there and working. Aug 11, 2009 10:58:47 AM org.apache.catalina.core.AprLifecycleListener init INFO: Loaded APR based Apache Tomcat Native library 1.1.14. Aug 11, 2009 10:58:47 AM org.apache.catalina.core.AprLifecycleListener init INFO: APR capabilities: IPv6 [false], sendfile

RE: TR: pb redeploy with Tomcat 5.5.24

2009-08-11 Thread support-disserto
Hello, 1) Here is the exact error : [ERROR] vxml - 1-aXRnb21zLWFzMDFvLmlwcDkzLmN2ZjsxMjQ2MDI4ODk5NjA0OzAuMzA2ODg3MzM4ODIwMzE5MT Y= 8:--Uncaught Exception-- class javax.servlet.ServletException :: Problems during license check: license unreadable

RE: slight problem with Tomcat and Httpd working together.

2009-08-11 Thread Caldarale, Charles R
From: Josh Gooding [mailto:josh.good...@gmail.com] Subject: Re: slight problem with Tomcat and Httpd working together. HEY!!! It's in there and working. Congratulations. INFO: Loaded APR based Apache Tomcat Native library 1.1.14. That version is out of date; the current one is here:

Re: TR: pb redeploy with Tomcat 5.5.24

2009-08-11 Thread André Warnier
support-disserto wrote: Hello, 1) Here is the exact error : [ERROR] vxml - 1-aXRnb21zLWFzMDFvLmlwcDkzLmN2ZjsxMjQ2MDI4ODk5NjA0OzAuMzA2ODg3MzM4ODIwMzE5MT Y= 8:--Uncaught Exception-- class javax.servlet.ServletException :: Problems during license check: license unreadable That doesn't

RE: Tomcat 6 shutdown hangs server when using JDK 6.0_15

2009-08-11 Thread Dan Denton
I have tested this on another server, and this time not a VM, which I think rules out issues with it being a virtual machine. The entire server hung immediately after issuing a shutdown to tomcat. To summarize, this issue only seems to come about when using a tomcat 6 instance while running

RE: Tomcat 6 shutdown hangs server when using JDK 6.0_15

2009-08-11 Thread Steve Ochani
Send reply to: Tomcat Users List users@tomcat.apache.org From: Dan Denton dden...@remitpro.com To: Tomcat Users List users@tomcat.apache.org Date sent: Tue, 11 Aug 2009 08:51:46 -0500 Subject:RE: Tomcat 6 shutdown hangs

RE: Tomcat 6 shutdown hangs server when using JDK 6.0_15

2009-08-11 Thread Caldarale, Charles R
From: Dan Denton [mailto:dden...@remitpro.com] Subject: RE: Tomcat 6 shutdown hangs server when using JDK 6.0_15 I'm using the tomcat out-of-the-box tomcat instance in the archive from apache.org, and the version of java was installed using the jdk-6u15- linux-i586.bin binary file obtained

Re: slight problem with Tomcat and Httpd working together.

2009-08-11 Thread Josh Gooding
Excellent, and just for the record, for those who read this on the archives, be SURE you get the correct version of the binaries for your version of Tomcat (32-bit / 64 bit). Tomcat is running on a dual core opteron (64-bit production server) and has been modified to run with the 64 bit

Re: How to define a Realm as a global resource and use it as a ResourceLink?

2009-08-11 Thread Eric B.
You can also use a Context element in conf/Catalina/[host]/[appName].xml, which will override the one in the webapp's META-INF/context.xml file. This allows a site administrator to control the container-supplied resources - including the realm - that the webapp will use. Good point. Hadn't

Re: Re: Trouble configuring LDAP authentication

2009-08-11 Thread Eric B.
Geofrey Rainey geofrey.rai...@tvnz.co.nz wrote in message news:fcff2ec7a020964fbc98b17f17a88ac4018ba...@akvxch01.tvnzad.tvnz.co.nz... I remember the big issue I faced regarding the JNDIRealm auth were the parameters in my Realm definition, there was one line that once added Everything

Re: How to define a Realm as a global resource and use it as a ResourceLink?

2009-08-11 Thread Eric B.
Pooling Resources: you might want to try other AppServers such as GF and Weblogic for either pooling and/or persistence provider support (as specified by J2EE Connector Architecture) https://glassfish.dev.java.net/javaee5/integration-tech/glassfish_connpooling.html Identity and

Re: How to define a Realm as a global resource and use it as a ResourceLink?

2009-08-11 Thread Eric B.
Martin Gainty mgai...@hotmail.com wrote in message news:blu142-w7c108f09ee2529b84ca6eae...@phx.gbl... server.xml should contain this JNDIRealm specification defined globally Realm className=org.apache.catalina.realm.JNDIRealm !-- The LDAP Address of your DC --

RE: slight problem with Tomcat and Httpd working together.

2009-08-11 Thread Caldarale, Charles R
From: Josh Gooding [mailto:josh.good...@gmail.com] Subject: Re: slight problem with Tomcat and Httpd working together. be SURE you get the correct version of the binaries for your version of Tomcat (32-bit / 64 bit). Tomcat itself is pure Java, so it is neither 32- nor 64-bit sensitive.

RE: How to define a Realm as a global resource and use it as a ResourceLink?

2009-08-11 Thread Martin Gainty
JAAS handles all authentications and authorisation thru plugins such as Oracle Internet Directory LDAP they also have a nice admin interface so you can visually see all the plugins drop a line when you're ready to switch *gruss* Martin __ Verzicht

Re: Need some SSL Config help.

2009-08-11 Thread Josh Gooding
ok back to the topic at hand here. I have removed httpd from my server, installed APR, and have gotten my cert file from my hosting company. it is in pfx format. Now I found some information on the net: http://tp.its.yale.edu/pipermail/cas/2005-July/001337.html It was saying that I can just

Re: Log4j vs JULI configuration discrepancy

2009-08-11 Thread Eric B.
Mark Thomas ma...@apache.org wrote in message news:4a7c9110.50...@apache.org... Eric B. wrote: Hi, In catalina.properties, modify the following entry as shown: common.loader=${catalina.base}/lib,${catalina.home}/lib,${catalina.home}/lib/*.jar then you can place log4j.properties in

RE: Re: Re: Trouble configuring LDAP authentication

2009-08-11 Thread Geofrey Rainey
Interesting. My configuration uses the latter - by doing a bind, getting the user object, and comparing it locally. Thanks. -Original Message- From: news [mailto:n...@ger.gmane.org] On Behalf Of Eric B. Sent: Wednesday, 12 August 2009 7:03 a.m. To: users@tomcat.apache.org Subject: Re:

Setting Context Path in Tomcat

2009-08-11 Thread carbotex
How do one go about setting tomcat in this kind of environment? I have 3 war files, app1.war, app2.war, app3.war I want to setup tomcat so all three webapps are under the same folder/directory/group. http://www.clienthost.com/group1/app1/index.jsp http://www.clienthost.com/group1/app2/index.jsp

RE: Setting Context Path in Tomcat

2009-08-11 Thread Caldarale, Charles R
From: carbotex [mailto:carbo...@gmail.com] Subject: Setting Context Path in Tomcat How do one go about setting tomcat in this kind of environment? First by telling us what version of Tomcat you're using. Since you didn't bother to do that, I'll base the response on 6.0.20.

Re: Log4j vs JULI configuration discrepancy

2009-08-11 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Eric, On 8/11/2009 5:25 PM, Eric B. wrote: My webapp uses log4j to log data to stdout. When using Juli (in the default configuration), everything that is displayed in stdout is logged to catalina.out. However, when I switch to log4j, this

Re: Log4j vs JULI configuration discrepancy

2009-08-11 Thread Eric B.
Christopher Schultz ch...@christopherschultz.net wrote in message news:4a8223c7.1030...@christopherschultz.net... My webapp uses log4j to log data to stdout. When using Juli (in the default configuration), everything that is displayed in stdout is logged to catalina.out. However, when I

RE: Log4j vs JULI configuration discrepancy

2009-08-11 Thread Caldarale, Charles R
From: news [mailto:n...@ger.gmane.org] On Behalf Of Eric B. Subject: Re: Log4j vs JULI configuration discrepancy I don't understand why when using Juli anything that webapp's log4j logs to Stdout gets logged to a file, however, when using log4j with tomcat this behaviour isn't replicated.

Re: Need some SSL Config help.

2009-08-11 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Josh, On 8/11/2009 4:47 PM, Josh Gooding wrote: ok back to the topic at hand here. I have removed httpd from my server, installed APR, and have gotten my cert file from my hosting company. it is in pfx format. Now I found some information on