Technology Information Request - Apache Tomcat 7.0

Hi, Greetings of the day! My name is Pradipto Mukherjee from Gartner Inc. We in Gartner, deliver technology research to global technology business leaders to make informed decisions on key initiatives. As part of our technology research, we maintain an internal library of various IT

A question about The Relationship between Http Session and WebSocket Session

Hello,  I'm a J2EE Programmer use Tomcat deploy my webapplication. I have a question about the relationship between Http Session and WebSocket  Session in tomcat. Is  Http Session contains WebSocket Session? or they are seperate. Please help me! Thank you very much! Server version: Apache 

Re: Re: A question about The Relationship between Http Session and WebSocket Session

OK Thanks Mark！ tong__...@163.com From: Mark Thomas Date: 2018-01-23 20:02 To: users Subject: Re: A question about The Relationship between Http Session and WebSocket Session On 23/01/18 10:35, tong__hui wrote: > Hello, > I'm a J2EE Programmer use Tomcat deploy my webapplication. > I have a

Re: Using Environment variables instead of Java -D properties for context.xml substitution

Andre, my apologies for bringing up a topic that has been repeated ad nauseum. We were thinking of a process like the following, which would eliminate "the information has to available somewhere in a file" on the actual server where Tomcat is running. > cd $TOMCAT_HOME/bin > set +o history >

Re: Using Environment variables instead of Java -D properties for context.xml substitution

Algirdas, > Am 23.01.2018 um 13:27 schrieb Algirdas Veitas : > > Andre, my apologies for bringing up a topic that has been repeated ad > nauseum. > > We were thinking of a process like the following, which would eliminate > "the information has to available somewhere in a

[ANN] Apache Tomcat 9.0.4 available

The Apache Tomcat team announces the immediate availability of Apache Tomcat 9.0.4. This is the first stable release of the 9.0.x series. Apache Tomcat 9 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC

Re: Technology Information Request - Apache Tomcat 7.0

Hi Pradipto, the question was answered by Mark Thomas just a few days ago in the following mail thread: https://marc.info/?t=15163382301=1=2 Regards, Rainer Am 23.01.2018 um 11:39 schrieb Mukherjee,Pradipto: Hi, Greetings of the day! My name is Pradipto Mukherjee from Gartner Inc.

Re: Using Environment variables instead of Java -D properties for context.xml substitution

Hi. On 23.01.2018 12:11, Algirdas Veitas wrote: Thanks for the quick reply George! We could, but the data is still available, in this case a file, versus in the output of "ps -ef | grep java". We can obviously encrypt the sensitive information. One idea, in order to support injecting

Re: A question about The Relationship between Http Session and WebSocket Session

On 23/01/18 10:35, tong__hui wrote: > Hello,  > I'm a J2EE Programmer use Tomcat deploy my webapplication. > I have a question about the relationship between Http Session and WebSocket  > Session in tomcat. > Is  Http Session contains WebSocket Session? or they are seperate. They are completely

Re: No movement at Debug mode

On Sun, 1/21/18, Alex O'Ree wrote: Subject: Re: No movement at Debug mode To: "Tomcat Users List" , "Karen Goh" Date: Sunday, January 21, 2018, 11:44 PM Do you mean you cannot get a debugger to attach to Tomcat and

Re: Using Environment variables instead of Java -D properties for context.xml substitution

Thanks for the quick reply George! We could, but the data is still available, in this case a file, versus in the output of "ps -ef | grep java". We can obviously encrypt the sensitive information. One idea, in order to support injecting Environment Variables would be to support a syntax of

Re: Using Environment variables instead of Java -D properties for context.xml substitution

BTW: > Am 23.01.2018 um 13:56 schrieb Peter Kreuser : > > Algirdas, > > > >> Am 23.01.2018 um 13:27 schrieb Algirdas Veitas : >> >> Andre, my apologies for bringing up a topic that has been repeated ad >> nauseum. >> >> We were thinking of a process

Re: Using Environment variables instead of Java -D properties for context.xml substitution

2018-01-23 16:14 GMT+03:00 Peter Kreuser : > BTW: > > >> Am 23.01.2018 um 13:56 schrieb Peter Kreuser : >> >> Algirdas, >> >> >> >>> Am 23.01.2018 um 13:27 schrieb Algirdas Veitas : >>> >>> Andre, my apologies for bringing up a topic that

Re: Using Environment variables instead of Java -D properties for context.xml substitution

Hi. Ok, so let's recurse.. On 23.01.2018 13:27, Algirdas Veitas wrote: Andre, my apologies for bringing up a topic that has been repeated ad nauseum. We were thinking of a process like the following, which would eliminate "the information has to available somewhere in a file" on the actual

How to make database connection pool show in JMX

Hello. I'd like to get some JMX stats out of the JDBC connection pools. But they don't seem to register in JMX, even though they are based on ConnectionPoolMBean. I do create the pools programmatically, by binding the factory into the JNDI, the creation snippet is copied below. When I search for

RE: Can't Get SSL to Work in 8.5

Coty, Thank you very much. That worked. The only thing is its not redirecting to SSL if you hit the regular URL. Are we missing something? Thanks Ken -Original Message- From: Coty Sutherland [mailto:csuth...@apache.org] Sent: Monday, January 22, 2018 2:24 PM To: Tomcat Users

Re: roles stripped when using login() in tomcat 8.5 but not 8.0

2018-01-22 11:25 GMT+03:00 Robert J. Carr : > Hi Mark, everyone- > > I've constructed a sample app of ~5 files. The code is bundled in the jar > file in the WEB-INF/lib directory. Here's a public url for the application > (test.war; 8K): > > >

Re: roles stripped when using login() in tomcat 8.5 but not 8.0

On Tue, Jan 23, 2018 at 9:54 AM, Konstantin Kolinko wrote: > 2018-01-22 11:25 GMT+03:00 Robert J. Carr : > > Hi Mark, everyone- > > > > I've constructed a sample app of ~5 files. The code is bundled in the > jar > > file in the WEB-INF/lib directory.

Re: Can't Get SSL to Work in 8.5

On Tue, Jan 23, 2018 at 2:16 PM, Kenneth Taylor wrote: > Coty, > > Thank you very much. That worked. The only thing is its not redirecting to > SSL if you hit the regular URL. Are we missing something? Do you have a CONFIDENTIAL transport guarantee defined for

[ANN] Apache Tomcat 8.5.27 available

The Apache Tomcat team announces the immediate availability of Apache Tomcat 8.5.27. Tomcat 8.x users should normally be using 8.5.x releases in preference to 8.0.x releases. Apache Tomcat 8 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression

logging on shutdown

Hello, I tried the latest version 9.0.4, one thing I have noticed that it does not log any output when I shut down the server. Also Rechecking version 8.5.24 and also now does not log any output. The server is shutting down correctly as its calling my context finalise listener

Fwd: logging on shutdown

The log4j2 Log4jServletContextListener contextDestroyed seems to be shutting down first, before my stuff, hence no logging. Will look into this, more a log4j2 issue. Cheers Greg -- Forwarded message -- Subject: logging on shutdown To: Tomcat Users List

Re: Using Environment variables instead of Java -D properties for context.xml substitution

It does turtle all the way downbut it would "solve" having sensitive information on the Tomcat server exposed either in a file or via "ps -ef | grep java" (and make sure they are not logged by Tomcat in the logs). Whether using the original sequence of commands shown or "prompting the

Re: Using Environment variables instead of Java -D properties for context.xml substitution

Well, there are several layers of problems here, with different ways of addressing them. Command lines are available using 'ps', so any secrets written on the command line are visible to anyone able to get a session on that host, for the duration of the command. There's no way around this that I

Re: Fw: No movement at Debug mode

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Karen, On 1/21/18 10:49 AM, Karen Goh wrote: > I want to add in additional infor : > > After I stopped the server, the console has the following error > message which beats me. > > WARNING: The web application [Hi5S] appears to have started a >

Re: Using Environment variables instead of Java -D properties for context.xml substitution

Thanks for the feedback. -Al On Tue, Jan 23, 2018 at 11:05 AM, Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Algirdas, > > On 1/23/18 6:11 AM, Algirdas Veitas wrote: > > Thanks for the quick reply George! > > > > We could, but

Re: Using Environment variables instead of Java -D properties for context.xml substitution

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 1/23/18 9:04 AM, Mark H. Wood wrote: > Well, there are several layers of problems here, with different > ways of addressing them. > > Command lines are available using 'ps', so any secrets written on > the command line are visible to

Re: Using Environment variables instead of Java -D properties for context.xml substitution

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Algirdas, On 1/23/18 6:11 AM, Algirdas Veitas wrote: > Thanks for the quick reply George! > > We could, but the data is still available, in this case a file, > versus in the output of "ps -ef | grep java". We can obviously > encrypt the sensitive