Re: Struts Vulnerability

2017-09-07 Thread Guang Chao
On Thu, Sep 7, 2017 at 7:18 AM, Sean Son wrote: > Hello all > > I am new to the mailing list as well as new to Apache Struts. We all heard > in the news about the vulnerability affecting Apache Struts. I have been > tasked to determine which of our servers have Struts running on them. I > have

Re: Page cannot be displayed , TOMCAT installation on windows 2012 R2

2017-09-07 Thread Guang Chao
On Tue, Sep 5, 2017 at 6:38 PM, ford royal wrote: > HI team, > > > > I have installed Tomcat on windows 2012 r2 , but I get page cannot be > displayed when I try to open http:\\localhost:8080I have given Java path > also but still no.Java 8 update 144 tomcat is 8.5.20 > please guide > > Can you

Re: web.xml

2017-09-07 Thread Guang Chao
On Wed, Sep 6, 2017 at 6:16 AM, Alejandro Vargas M. < alejandro.var...@kymsolutions.com> wrote: > Good afternoon, > > I have a website on a client, and they ran a vulnerability test, and it > throws a vulnerability that any user can see web.xml from a web browser, > > how can I hide to see web.xml

Re: TomCat stops after few seconds

2017-09-07 Thread Guang Chao
On Wed, Sep 6, 2017 at 6:09 PM, Irene Almendros wrote: > Good morning, > > I am having the following problem with TomCat: I open Tomcat Monitor and > start the service but after a few seconds, it stops. The Apache service is > running. > > One week ago, my windows updated to the latest version bu

Re: Struts Vulnerability

2017-09-07 Thread Greg Huber
>2) Does Apache Struts only run on Apache Webserver and Tomcat? Should run on java based servers Glassfish, Websphere etc >3) Is there a simple way to determine if a server has Struts installed, >instead of logging into each of the servers and checking the programs >list? You could try and execu

Re: For some reason, the AUTHBIND approach isn't working with 8.5

2017-09-07 Thread Guang Chao
On Thu, Sep 7, 2017 at 8:02 AM, James H. H. Lampert < jam...@touchtonecorp.com> wrote: > A little over a month ago, I had a problem with getting Tomcat 7 to bind > to port 443 on Debian. > > We solved that problem with the "authbind" approach. > > Now, I'm attempting to do the same with Tomcat 8.5

Re: Page cannot be displayed , TOMCAT installation on windows 2012 R2

2017-09-07 Thread ford royal
Hello Chao Issue got resolved after installing with admin privileges Best Regards, Thank you, Cheers. :-)) On Thu, 9/7/17, Guang Chao wrote: Subject: Re: Page cannot be displayed , TOMCAT installation on windows 2012 R2 To: "Tomcat Users List" , "f

Re: Struts Vulnerability

2017-09-07 Thread Guang Chao
On Thu, Sep 7, 2017 at 3:17 PM, Greg Huber wrote: > >2) Does Apache Struts only run on Apache Webserver and Tomcat? > > Should run on java based servers Glassfish, Websphere etc > > >3) Is there a simple way to determine if a server has Struts installed, > >instead of logging into each of the ser

Re: BIO: Async servlet with it's own thread pool; but get connection refused!

2017-09-07 Thread Guang Chao
On Thu, Sep 7, 2017 at 3:59 AM, Yasser Zamani wrote: > Hi there, > > I'm studying Servlet 3's async API using tomcat. I see following strange > behavior from tomcat in a very simple test app! > > I have following JMeter test plan: > Number of threads (users): 700 > Ramp-Up period (in seconds): 23

Re: ISAPI and IIS 10 Logging Issue

2017-09-07 Thread tomcat
On 06.09.2017 22:07, Thomas, Michael wrote: -- On 01.09.2017 22:21, Thomas, Michael wrote: All, When using the ISAPI Handler Mapping in IIS 10 on Windows 2016, the IIS logs are not identifying the URI Stem (cs-uri-stem) and

Apache Tomcat 4.1.30 - not working with iSeries after upgrading the OS to V7R3 which uses Java 7/Java 8

2017-09-07 Thread Ananthi K4
Hello, We have installed Apache Tomcat version 4.1.30 on our iSeries server. Recently we have upgraded the OS400 Operating System from Version 7.1 to 7.3 where Java 7 and Java 8 are introduced. After this upgrade, Tomcat is giving an HTTP status 500 exception report. We explored the Tomcat port

Re: BIO: Async servlet with it's own thread pool; but get connection refused!

2017-09-07 Thread Mark Thomas
On 06/09/17 20:59, Yasser Zamani wrote: > Hi there, > > I'm studying Servlet 3's async API using tomcat. I see following strange > behavior from tomcat in a very simple test app! You are also using the BIO connector which, since it is blocking, doesn't offer any benefits when using async. You'd

RE: TomCat stops after few seconds

2017-09-07 Thread Irene Almendros
Good morning, Many thanks for your reply. I updated again windows to the latest version (1703) and TomCat is working properly again. Is possible that windows and Tomcat share some config files so that when windows is downgraded Tomcat stops working fine? Thanks. -Original Message- Fro

Re: For some reason, the AUTHBIND approach isn't working with 8.5

2017-09-07 Thread Emmanuel Bourg
Le 7/09/2017 à 02:02, James H. H. Lampert a écrit : > Now, I'm attempting to do the same with Tomcat 8.5, and it's not working. > > > I think I did everything the same as before. I uncommented AUTHBIND in > /etc/default/tomcat8, and set it to "AUTHBIND=yes"; an > /etc/authbind/byuid/109 (the uid

RE: [External] Re: Security Headers Implementation in Tomcat 6.x version

2017-09-07 Thread Mohammad Nayeem
Hi Chris, We currently have 7.0.42 version which does not support security headers, so we have taken jar files from 7.0.63 and replaced with the those in 7.0.42 library folder. We were able to successfully start our tomcat instance and we got the login page of our application hosted on it, but th

RE: [External] Re: Security Headers Implementation in Tomcat 6.x version

2017-09-07 Thread Mohammad Nayeem
Hello Olaf, We have tried yours as well as Chris's suggestions, but in both the cases the functionality of the application is lost. We have installed apace and configured mod_jk connector along with a load-balancer for 2 tomcat servers. We were able to successfully start apache and we got the lo

Re: [External] Re: Security Headers Implementation in Tomcat 6.x version

2017-09-07 Thread Mark H. Wood
On Thu, Sep 07, 2017 at 04:07:25PM +0530, Mohammad Nayeem wrote: > We have installed apace and configured mod_jk connector along with a > load-balancer for 2 tomcat servers. > > We were able to successfully start apache and we got the login page of our > application hosted on it, but the functiona

Apache Tomcat 4.1.30 - not working with OS400 after upgrading the OS to V7R3 which uses Java 7/Java 8

2017-09-07 Thread Vinay A S
Hello, We have installed Apache Tomcat version 4.1.30 on our iSeries server. Recently we have upgraded the OS400 Operating System from Version 7.1 to 7.3 where Java 7 and Java 8 are introduced. After this upgrade, Tomcat is giving an HTTP status 500 exception report. We explored the Tomcat portal

Getting a WAR last deployment timestamp thru JMX ?

2017-09-07 Thread Laurent Perez
Hi I'm exposing some webapp metrics over a JSON servlet. I'd like to output the deployment timestamp of my webapp, when war is redeployed by tomcat using the built-in /manager/. I looked into the manager and could not find a timestamp. Is there some magic JMX query available to obtain the last de

Re: Apache Tomcat 4.1.30 - not working with OS400 after upgrading the OS to V7R3 which uses Java 7/Java 8

2017-09-07 Thread tomcat
On 07.09.2017 16:21, Vinay A S wrote: Hello, We have installed Apache Tomcat version 4.1.30 on our iSeries server. I don't even know what to tell you. Some of the people on this list may not even have been born yet, when that version was released. (Ok, I am pushing it a bit; it was 2004, 13

Re: For some reason, the AUTHBIND approach isn't working with 8.5

2017-09-07 Thread James H. H. Lampert
On 9/7/17, 3:15 AM, Emmanuel Bourg wrote: You didn't change the TOMCAT8_USER variable in /etc/default/tomcat8 and authbind is installed, right? What is the output of (as root): su tomcat8 -s /bin/bash -c "authbind --deep /bin/bash -c 'netcat -v -p 443 -l'" Well, all that does is ask me for a no

SOLVED, Re: For some reason, the AUTHBIND approach isn't working with 8.5

2017-09-07 Thread James H. H. Lampert
Emmanuel Bourg wrote: You didn't change the TOMCAT8_USER variable in /etc/default/tomcat8 and authbind is installed, right? What is the output of (as root): su tomcat8 -s /bin/bash -c "authbind --deep /bin/bash -c 'netcat -v -p 443 -l'" and my reply ended: The only difference I see is the hom

This is weird (cross-posted to Tomcat and Debian Lists): Tomcat 8.5 is going to /var/lib/tomcat7/webapps/ROOT

2017-09-07 Thread James H. H. Lampert
I've got two separate boxes, both running Debian Jessie, with both Tomcat 7.0.56 and Tomcat 8.5.14 installed, all of the installations via an apt-get from Debian's repositories. On one of the boxes (Tomcat 8.5 installed alongside Tomcat 7 with no previous Tomcat 8), Tomat 8 is somehow pulling

Re: This is weird (cross-posted to Tomcat and Debian Lists): Tomcat 8.5 is going to /var/lib/tomcat7/webapps/ROOT

2017-09-07 Thread Pete Helgren
Longshotsomething in .profile of the user the Tomcat instance is running under? Pete Helgren www.petesworkshop.com GIAC Secure Software Programmer-Java Twitter - Sys_i_Geek IBM_i_Geek On 9/7/2017 1:10 PM, James H. H. Lampert wrote: I've got two separate boxes, both running Debian Jessie, w

Re: BIO: Async servlet with it's own thread pool; but get connection refused!

2017-09-07 Thread Yasser Zamani
At first thanks a lot for your reply! On 9/7/2017 1:43 PM, Mark Thomas wrote: > On 06/09/17 20:59, Yasser Zamani wrote: >> Hi there, >> >> I'm studying Servlet 3's async API using tomcat. I see following strange >> behavior from tomcat in a very simple test app! > > You are also using the BIO conn

Re: 8.5 - multiple host configuration question

2017-09-07 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Chris, On 9/5/17 3:39 PM, Chris Cheshire wrote: > On Tue, Sep 5, 2017 at 2:07 PM, Christopher Schultz >> If I were king, I'd set things up like this: >> >> 1. Tomcat is installed in /usr/local/tomcat (or >> /usr/local/tomcat-x.y.z, or /opt/whateve

Re: 8.5 - multiple host configuration question

2017-09-07 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Chris, On 9/5/17 4:42 PM, Chris Cheshire wrote: > On Tue, Sep 5, 2017 at 2:07 PM, Christopher Schultz > wrote: >> If I were king, I'd set things up like this: >> >> 1. Tomcat is installed in /usr/local/tomcat (or >> /usr/local/tomcat-x.y.z, or /

Re: This is weird (cross-posted to Tomcat and Debian Lists): Tomcat 8.5 is going to /var/lib/tomcat7/webapps/ROOT

2017-09-07 Thread James H. H. Lampert
Pete Helgren (on the Tomcat List) wrote: Longshotsomething in .profile of the user the Tomcat instance is running under? Neither the "tomcat7" nor "tomcat8" users have .profile files. This is interesting. I got rid of the Tomcat 8.5 catalina.out files on both boxes (the one where everythi

Re: Converting an SSL connector tag from Tomcat 7 format to Tomcat 8.5 format -- WHAT GOES WHERE?

2017-09-07 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 James, On 9/6/17 3:52 PM, James H. H. Lampert wrote: > On 9/6/17, 11:19 AM, Mark Thomas wrote: > >> The old format will work with 8.5.x. >> >> What were the stack traces? > > And Alejandro Vargas wanted to see the stack traces, too. > > Seeing a

Connect to another servlet during init

2017-09-07 Thread Kendall Shaw
A web application that is not mine needs to be initialized after it starts before some resources are available. Manually, I would start tomcat (9.0.0.M9 on redhat linux) then request http://example.com:8080/start-up. The web application has a servlet configured with 1. I am attempting to do th

Re: Apache Tomcat 4.1.30 - not working with iSeries after upgrading the OS to V7R3 which uses Java 7/Java 8

2017-09-07 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Ananthi, On 9/7/17 5:12 AM, Ananthi K4 wrote: > We have installed Apache Tomcat version 4.1.30 on our iSeries > server. Recently we have upgraded the OS400 Operating System from > Version 7.1 to 7.3 where Java 7 and Java 8 are introduced. After > th

Re: TomCat stops after few seconds

2017-09-07 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Irene, On 9/7/17 5:25 AM, Irene Almendros wrote: > Many thanks for your reply. I updated again windows to the latest > version (1703) and TomCat is working properly again. Is possible > that windows and Tomcat share some config files so that when >

Re: Getting a WAR last deployment timestamp thru JMX ?

2017-09-07 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Laurent, On 9/7/17 10:52 AM, Laurent Perez wrote: > I'm exposing some webapp metrics over a JSON servlet. I'd like to > output the deployment timestamp of my webapp, when war is > redeployed by tomcat using the built-in /manager/. I looked into > th

Re: For some reason, the AUTHBIND approach isn't working with 8.5

2017-09-07 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Guang, On 9/7/17 3:22 AM, Guang Chao wrote: > On Thu, Sep 7, 2017 at 8:02 AM, James H. H. Lampert < > jam...@touchtonecorp.com> wrote: > >> A little over a month ago, I had a problem with getting Tomcat 7 >> to bind to port 443 on Debian. >> >> W

Session delete

2017-09-07 Thread Alejandro Vargas M.
Is there anyway to delete a session in Tomcat when the user not logout correctly from the application, normally they not logged out correctly, they just click on the "X" (they said), they click the close button of Internet Explorer. I tried with $(window).unload using JS, but it works on every

Re: SOLVED, Re: For some reason, the AUTHBIND approach isn't working with 8.5

2017-09-07 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 James, On 9/7/17 12:18 PM, James H. H. Lampert wrote: > Emmanuel Bourg wrote: >>> You didn't change the TOMCAT8_USER variable in >>> /etc/default/tomcat8 and authbind is installed, right? >>> >>> What is the output of (as root): >>> >>> su tomcat8

Re: BIO: Async servlet with it's own thread pool; but get connection refused!

2017-09-07 Thread Mark Thomas
On 07/09/17 22:22, Yasser Zamani wrote: > At first thanks a lot for your reply! > > On 9/7/2017 1:43 PM, Mark Thomas wrote: >> On 06/09/17 20:59, Yasser Zamani wrote: >>> Hi there, >>> >>> I'm studying Servlet 3's async API using tomcat. I see following strange >>> behavior from tomcat in a very s

Re: Connect to another servlet during init

2017-09-07 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Kendall, On 9/7/17 5:36 PM, Kendall Shaw wrote: > A web application that is not mine needs to be initialized after > it starts before some resources are available. Manually, I would > start tomcat (9.0.0.M9 on redhat linux) then request > http://ex

Re: Session delete

2017-09-07 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Alejandro, On 9/7/17 5:49 PM, Alejandro Vargas M. wrote: > Is there anyway to delete a session in Tomcat when the user not > logout correctly from the application, normally they not logged out > correctly, they just click on the "X" (they said), the

Re: Connect to another servlet during init

2017-09-07 Thread Kendall Shaw
On 9/7/17, 3:06 PM, "Christopher Schultz" wrote: Kendall, On 9/7/17 5:36 PM, Kendall Shaw wrote: > A web application that is not mine needs to be initialized after > it starts before some resources are available. Manually, I would > start tomcat (9.0.0.M9 on redhat linux)

Re: BIO: Async servlet with it's own thread pool; but get connection refused!

2017-09-07 Thread Yasser Zamani
Thanks for your attention. Now I downloaded a fresh apache-tomcat-7.0.81-windows-x64 and chenged it's connector in same way (BIO,20,20,10). I get same result, fortunately :) OUTPUT: Using CATALINA_BASE: "C:\Users\user\.IntelliJIdea2016.3\system\tomcat\Unnamed_Async-Servlet-Example_2" Using CAT

Re: Apache Tomcat 4.1.30 - not working with iSeries after upgrading the OS to V7R3 which uses Java 7/Java 8

2017-09-07 Thread James H. H. Lampert
On 9/7/17, 2:43 PM, Christopher Schultz wrote: It sounds like James H.H. Lampert may be able to help you with your problem. He's been pounding his head against his AS/400 environment for years. Greetings! I finally get a chance to talk about something I know, rather than beg for help about so

More, Re: This is weird (cross-posted to Tomcat and Debian Lists): Tomcat 8.5 is going to /var/lib/tomcat7/webapps/ROOT

2017-09-07 Thread James H. H. Lampert
Just for grins, I put a trivial static context (nothing more than a directory containing a simple "index.html" file) into /var/lib/tomcat8/webapps. Tomcat 8.5 found it. So it's only the root context that's somehow getting redirected. But on the other hand, if I rename var/lib/tomcat7/webapps/R

RE: More, Re: This is weird (cross-posted to Tomcat and Debian Lists): Tomcat 8.5 is going to /var/lib/tomcat7/webapps/ROOT

2017-09-07 Thread Caldarale, Charles R
> From: James H. H. Lampert [mailto:jam...@touchtonecorp.com] > Subject: More, Re: This is weird (cross-posted to Tomcat and Debian Lists): > Tomcat 8.5 is going to /var/lib/tomcat7/webapps/ROOT > If I remember right, Linux file systems can have not only symbolic links > to files, but also multi

Still more, Re: This is weird (cross-posted to Tomcat and Debian Lists): Tomcat 8.5 is going to /var/lib/tomcat7/webapps/ROOT

2017-09-07 Thread James H. H. Lampert
I also stuck a similar named trivial static context into /var/lib/tomcat7/webapps (with a different directory name: "foobar" in Tomcat 8, "bozbar" in Tomcat 7). In theory, Tomcat 8.5 should be able to see the foobar context, but not the bozbar context; this is also true in practice. So it's

Re: BIO: Async servlet with it's own thread pool; but get connection refused!

2017-09-07 Thread Yasser Zamani
On 9/7/2017 12:15 PM, Guang Chao wrote: > On Thu, Sep 7, 2017 at 3:59 AM, Yasser Zamani > wrote: > >> Hi there, >> >> I'm studying Servlet 3's async API using tomcat. I see following strange >> behavior from tomcat in a very simple test app! >> >> I have following JMeter test plan: >> Number of