Re: Context root query

2012-11-21 Thread vicky007aggarwal
Thanks a lot Mark for such a elaborate explanation. Your suggestion worked i have implemented the same Cheers, Vicky On Nov 21, 2012, at 12:23 AM, Mark Eggers its_toas...@yahoo.com wrote: On 11/20/2012 10:32 AM, vicky wrote: MARK - My client has application archives files which

Page not redirected after waitFor() call on Process object.

2012-11-21 Thread Andrei Petru Mura
Hello, My issue can be related to Servlets, but it also can be related to Tomcat. I'm using tomcat 7.0.27. In my servlet's post method I have the following: protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException { if

Apache Tomcat upgrade from 6.0.20 to 6.0.36

2012-11-21 Thread Pankaj Dahiya
Dear All, We would want to upgrade from Apache Tomcat 6.0.20 to 6.0.36. I did see some information in this regard but could not find the exact steps. If someone can, please list down the required steps that will be really appreciable. Thanks much ! Regards, Pankaj Dahiya | Infosys, Chandigarh

Re: Cannot send emails on that forum.

2012-11-21 Thread Mark Thomas
On 21/11/2012 09:35, Andrei Petru Mura wrote: Hello, I try to send email on that forum, What forum? This is the Apache Tomcat user mailing list. but I get this error: Google tried to deliver your message, but it was rejected by the recipient domain. We recommend contacting the other

Re: Apache Tomcat upgrade from 6.0.20 to 6.0.36

2012-11-21 Thread André Warnier
Pankaj Dahiya wrote: Dear All, We would want to upgrade from Apache Tomcat 6.0.20 to 6.0.36. I did see some information in this regard where ? but could not find the exact steps. If someone can, please list down the required steps that will be really appreciable. If you want some

Need help to understand CVE-2007-0450

2012-11-21 Thread Aditi Sinha
Hi, We have a web server hosted on Tomcat 7.0.22. There are two connectors defined server.xml listening at port 8080 and 8443. During vulnerability scan a 3rd party tool reported CVE-2007-0450 “Apache Tomcat Directory Traversal Attack” on both ports 8080 and 8443. The tool was able to access

Re: DB Connection Pool

2012-11-21 Thread Daniel Mikusa
On Nov 21, 2012, at 5:36 AM, Milan Tomic wrote: After 1 month of Tomcat 6.0.18 running, That's a really old version, you should strongly consider upgrading to the latest Tomcat 6.0.x or 7.0.x release. I have 50 opened JDBC connections, which should be closed, but they aren't. How are you

RE: Need help to understand CVE-2007-0450

2012-11-21 Thread Caldarale, Charles R
From: Aditi Sinha [mailto:adisinha0...@gmail.com] Subject: Need help to understand CVE-2007-0450 We have a web server hosted on Tomcat 7.0.22. The tool was able to access the Tomcat manager application with the following URL : http://localhost:8080/scripts/\../manager/html As per Tomcat

Re: Need help to understand CVE-2007-0450

2012-11-21 Thread Mark Thomas
On 21/11/2012 13:40, Aditi Sinha wrote: Hi, We have a web server hosted on Tomcat 7.0.22. There are two connectors defined server.xml listening at port 8080 and 8443. During vulnerability scan a 3rd party tool reported CVE-2007-0450 “Apache Tomcat Directory Traversal Attack” on both

Re: DB Connection Pool

2012-11-21 Thread Milan Tomic
That's a really old version, you should strongly consider upgrading to the latest Tomcat 6.0.x or 7.0.x release. My SSO (old JOSSO version) works only with 6.0.18. How are you determining this? Are you looking at open connections from your database?  Are you looking at JMX stats for the

Re: Need help to understand CVE-2007-0450

2012-11-21 Thread André Warnier
Caldarale, Charles R wrote: From: Aditi Sinha [mailto:adisinha0...@gmail.com] Subject: Need help to understand CVE-2007-0450 We have a web server hosted on Tomcat 7.0.22. The tool was able to access the Tomcat manager application with the following URL :

RE: DB Connection Pool

2012-11-21 Thread Jeffrey Janner
-Original Message- From: Milan Tomic [mailto:tomicmi...@yahoo.com] Sent: Wednesday, November 21, 2012 4:36 AM To: users@tomcat.apache.org Subject: DB Connection Pool After 1 month of Tomcat 6.0.18 running, I have 50 opened JDBC connections, which should be closed, but they

Re: DB Connection Pool

2012-11-21 Thread Daniel Mikusa
On Nov 21, 2012, at 9:45 AM, Milan Tomic wrote: That's a really old version, you should strongly consider upgrading to the latest Tomcat 6.0.x or 7.0.x release. My SSO (old JOSSO version) works only with 6.0.18. How are you determining this? Are you looking at open connections from

RE: DB Connection Pool

2012-11-21 Thread Propes, Barry L
I use 6.0.29, and there was a setting I had to change to keep some connections from hanging or timing out. Although I use Tomcat's DBCP, and not OracleDataSource. I think it was this first line here. timeBetweenEvictionRunsMillis=-1 minEvictableIdleTimeMillis=28800

tagging log messages

2012-11-21 Thread Johan Gunnarsson
Is there some way to tag log messages in log4j.properties depending on different criteria? Today I am splitting up the files like this: log4j.category.foo.bar=WARN, ALOG, CATCHALL log4j.category.foo.bar.mvc.dao.core.EscenicFieldsImpl=ERROR, ALOG, CATCHALL

Re: Need help to understand CVE-2007-0450

2012-11-21 Thread Pid *
On 21 Nov 2012, at 14:59, André Warnier a...@ice-sa.com wrote: Caldarale, Charles R wrote: From: Aditi Sinha [mailto:adisinha0...@gmail.com] Subject: Need help to understand CVE-2007-0450 We have a web server hosted on Tomcat 7.0.22. The tool was able to access the Tomcat manager

Tomcat with multiple domains

2012-11-21 Thread Paul van Hoven
Hi! I'm trying to setup virtual hosts for my single tomcat webserver. I've got the following setup: Apache Tomcat 7.0.32 running on a server with one IP address. I forward any requests coming in on port 80 to port 8080 and from 443 to 8443 with a firewall rule. I have 2 domains and I would like

[ANN] Apache Tomcat 7.0.33 released

2012-11-21 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat 7.0.33. Apache Tomcat is an open source software implementation of the Java Servlet and JavaServer Pages technologies. This release contains a small number of bug fixes and improvements compared to version 7.0.32. The

Re: [ANN] Apache Tomcat 7.0.33 released

2012-11-21 Thread Tony Anecito
Many thanks to the Tomcat team for all thier hard work!   -Tony --- On Wed, 11/21/12, Mark Thomas ma...@apache.org wrote: From: Mark Thomas ma...@apache.org Subject: [ANN] Apache Tomcat 7.0.33 released To: Tomcat Announce List annou...@tomcat.apache.org Cc: annou...@apache.org, Tomcat Users

Re: [ANN] Apache Tomcat 7.0.33 released

2012-11-21 Thread Jordan Michaels
+1 You guys are awesome. Thank you for all you do. Warm Regards, Jordan Michaels On 11/21/2012 04:29 PM, Tony Anecito wrote: Many thanks to the Tomcat team for all thier hard work! -Tony --- On Wed, 11/21/12, Mark Thomas ma...@apache.org wrote: From: Mark Thomas ma...@apache.org Subject:

RE: Tomcat with multiple domains

2012-11-21 Thread Caldarale, Charles R
From: Paul van Hoven [mailto:paul.van.ho...@googlemail.com] Subject: Tomcat with multiple domains I found the following tutorial (very old) on the web: http://onjava.com/pub/a/onjava/2006/08/30/publishing-multiple-sites-using-single-tomcat.html Probably best to completely ignore anything

RE: Running two different version of tomcat on the same server

2012-11-21 Thread Kent Cole
I did exactly that. I have tomcat 6.0.26 as my current production. I installed tomcat 7.0.32 to test my app on before migrating it. I have the following environmental variable in both .bash_profile and .bashrc CATALINA_HOME=/var/apache-tomcat-6.0.26 When I run ./startup.sh from tomcat 7.0.32

RE: Issue with missing files while migrating to Tomcat 7.0.32

2012-11-21 Thread George Chacko Manchimala
Hi Chris, Sorry, I could not locate any tweakings at our end (as you had mentioned) which. Could you / anyone provide your views? Thanks and Regards, George -Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: 20 November 2012 02:10

Re: connection autoReconnect?

2012-11-21 Thread Arnaud Kleinveld
Ok. The validation query solves this problem we concluded. Confirmed with testing as well. Our Resource looks like this now Resource auth=Container driverClassName=com.mysql.jdbc.Driver name=jdbc/ type=javax.sql.DataSource username= password=xxx

Tomcat 6.0.18 Caching Question

2012-11-21 Thread Sekar, Vasanth
Hello- I am working on a project where we are migrating a web app from JRUN 4.0 to Tomcat 6.0 and facing some sort of caching problem with one of the functionality. The same jsp:include code works fine in JRUN server but in Tomcat for the page to work properly I have to clear the cache under

Re: Need help to understand CVE-2007-0450

2012-11-21 Thread Aditi Sinha
Hi Mark, Chuck, Thanks for the explanation. On checking found that, below system properties are set to true by our application for a requirement. org.apache.tomcat.util.buf.UDecoder.ALLOW_ENCODED_SLASH: true org.apache.catalina.connector.CoyoteAdapter.ALLOW_BACKSLASH: true