Re: Cryptominer malware and Tomcat

2020-06-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Pete, On 6/17/20 17:44, Pete Helgren wrote: > I am going to guess that it is one of these two known > vulnerabilities: > > CST-7111: RCE via JSON deserialization (LPS-88051/LPE-165981) The > JSONDeserializer of Flexjson allows the instantiation of

Re: Version migration problems

2020-06-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Niranjan, On 6/18/20 13:47, Niranjan Rao wrote: > I am trying to migrate from 7.0.73 to 9.0.36 and facing > challenges. > > Java version and operating system version remains same in both > cases. ... and what are those versions? > I have

Re: Version migration problems

2020-06-19 Thread Mark Thomas
On 19/06/2020 13:19, Christopher Schultz wrote: > Niranjan, > > On 6/18/20 13:47, Niranjan Rao wrote: >> I am trying to migrate from 7.0.73 to 9.0.36 and facing >> challenges. > >> Java version and operating system version remains same in both >> cases. > > ... and what are those versions? >

Re: Is it possible to get a callback notification when a http/http2 connection is opened/closed

2020-06-19 Thread Mark Thomas
On 17/06/2020 10:52, Arshiya Shariff wrote: > Hi All, > Can we get a callback notification when a http/http2 connection is > opened/closed in Embedded tomcat . Sorry, no. Mark - To unsubscribe, e-mail:

Strange crash-on-takeoff, Tomcat 7.0.104

2020-06-19 Thread James H. H. Lampert
Ladies and Gentlemen: In preparation for updating a customer box, I installed Tomcat 7.0.104 on our own AS/400 (64-bit Java 6 JVM). 7.0.93 works just fine on our box, but 7.0.104 seems to crash on takeoff, producing no log files, just a spool file consisting of the single line *-D Any

Re: Strange crash-on-takeoff, Tomcat 7.0.104

2020-06-19 Thread calder
On Fri, Jun 19, 2020, 15:15 James H. H. Lampert wrote: > Ladies and Gentlemen: > > In preparation for updating a customer box, I installed Tomcat 7.0.104 > on our own AS/400 (64-bit Java 6 JVM). > > 7.0.93 works just fine on our box, but 7.0.104 seems to crash on > takeoff, producing no log

Re: Strange crash-on-takeoff, Tomcat 7.0.104

2020-06-19 Thread Mark Thomas
On 19/06/2020 21:14, James H. H. Lampert wrote: > Ladies and Gentlemen: > > In preparation for updating a customer box, I installed Tomcat 7.0.104 > on our own AS/400 (64-bit Java 6 JVM). > > 7.0.93 works just fine on our box, but 7.0.104 seems to crash on > takeoff, producing no log files, just

Re: Strange crash-on-takeoff, Tomcat 7.0.104

2020-06-19 Thread James H. H. Lampert
On 6/19/20 3:20 PM, Mark Thomas wrote: https://bz.apache.org/bugzilla/show_bug.cgi?id=64501 Hmm. I'm now looking through the entire catalina.sh script in both versions. (First, I looked through the startup.sh script; that appears to be identical in both versions.) First thing I noticed was

Re: Version migration problems

2020-06-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Niranjan, On 6/19/20 13:17, Niranjan Rao wrote: > Hi Mark/Chris, > > Thank you for the reply. > > It's a spring application, related controllers/methods basically > return page name as return "pages/Login". > > The view resolver maps it

Re: Strange crash-on-takeoff, Tomcat 7.0.104

2020-06-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 James, On 6/19/20 16:14, James H. H. Lampert wrote: > Ladies and Gentlemen: > > In preparation for updating a customer box, I installed Tomcat > 7.0.104 on our own AS/400 (64-bit Java 6 JVM). > > 7.0.93 works just fine on our box, but 7.0.104 seems

Re: Strange crash-on-takeoff, Tomcat 7.0.104

2020-06-19 Thread calder
On Fri, Jun 19, 2020, 15:33 James H. H. Lampert wrote: > On 6/19/20 1:26 PM, calder wrote: > > a) are both Tomcat instances installed on that same server? > > Yes > > > b) if yes, is the 7.0.93 instance running when you launch the 7.0.104 > > instance? > > No. > > We've done this procedure

Re: Strange crash-on-takeoff, Tomcat 7.0.104

2020-06-19 Thread James H. H. Lampert
On 6/19/20 1:24 PM, Christopher Schultz wrote: My guess is that the system-property-setting part of catalina.sh (or some other script) is getting fouled-up. What script(s) are you running to start Tomcat? Remember, we're talking about IBM Midrange systems, not *nix. So bash is entirely

Re: Version migration problems

2020-06-19 Thread Niranjan Rao
Hi Mark/Chris, Thank you for the reply. It's a spring application, related controllers/methods basically return page name as return "pages/Login". The view resolver maps it WEB-INF/jsp/pages/Login.jsp. Login.jsp has entry that says This entry gets resolved correctly in V7, but V9 I get

Re: Strange crash-on-takeoff, Tomcat 7.0.104

2020-06-19 Thread James H. H. Lampert
On 6/19/20 1:26 PM, calder wrote: a) are both Tomcat instances installed on that same server? Yes b) if yes, is the 7.0.93 instance running when you launch the 7.0.104 instance? No. We've done this procedure before: installing a new version, doing the setup in the new version, then

broken pipe error keeps increasing open files

2020-06-19 Thread Ayub Khan
tomcat 8.5 broken pipe increases open files on ubuntu AWS If there is slow response from db I see this stack trace and the open files goes high and the only way to open files go down is to remove the instance from Amazon load balancer. Is there a way to keep the open files low even when Broken

Re: Strange crash-on-takeoff, Tomcat 7.0.104 (Trying again)

2020-06-19 Thread James H. H. Lampert
On 6/19/20 1:24 PM, Christopher Schultz wrote: My guess is that the system-property-setting part of catalina.sh (or some other script) is getting fouled-up. What script(s) are you running to start Tomcat? Remember, we're talking about IBM Midrange systems, not *nix. So bash is entirely

Re: Strange crash-on-takeoff, Tomcat 7.0.104

2020-06-19 Thread James H. H. Lampert
On 6/19/20 2:27 PM, calder wrote: a) it's worth asking the obvious ... are the file permissions correct for the new TCp installation, i.e , such as read/write in "logs" subdir and execute permissions for the TC scripts? Unless something weird is going on with the apache-tomcat-7.0.104.zip