RE: No binary distribution for mod_jk?

2016-07-22 Thread Jäkel , Guido
>-Original Message- >From: Christopher Schultz [mailto:ch...@christopherschultz.net] >Sent: Thursday, July 21, 2016 5:51 PM >To: Tomcat Users List >Subject: Re: No binary distribution for mod_jk? > >-BEGIN PGP SIGNED MESSAGE- >Hash: SHA256 > >Paul, > >On 7/20/16 12:12 PM, Paul

RE: OutOfMemoryError: PermGen space

2016-07-22 Thread Jäkel , Guido
>-Original Message- >From: Berneburg, Cris J. - US [mailto:cberneb...@caci.com] >Sent: Thursday, July 21, 2016 6:18 PM >To: Tomcat Users List >Subject: RE: OutOfMemoryError: PermGen space > >Mark > >Thanks again for taking the time to assist with the OutOfMemoryError. BLUF, >it looks

RE: A complex issue concerning the application lifecycle, MBeans and Spring

2016-07-14 Thread Jäkel , Guido
Hi Mark, OK - as a newbie I read this from the stack trace: ... >20160713-161427.340 ERROR [catalina-exec-64] [] [[/]] StandardWrapper.Throwable >[...] >at > org.springframework.web.servlet.HttpServletBean.init(HttpServletBean.java:136) >at

RE: OutOfMemoryError: PermGen space

2016-07-19 Thread Jäkel , Guido
>In Visual VM, under File, Compare Memory Snapshots, it does not see the >snapshots I generated. The snapshots appear to >be extension *.apps, but the compare function looks for files with extension >*.nps. I don't know how to get the compare >function to work. > >Not sure where to go from

RE: A complex issue concerning the application lifecycle, MBeans and Spring

2016-07-13 Thread Jäkel , Guido
>So it would appear that if the Connectors are disabled, the monitoring system >is not able >to reach Tomcat, and the problem does not occur then. > >So would it not be possible to create some little piece of software, which >would >temporarily "suspend" or "disable" the Connectors, while the

A complex issue concerning the application lifecycle, MBeans and Spring

2016-07-13 Thread Jäkel , Guido
Dear Developers, I have an elaborate issue migrating from Tomcat 6.0.41 to 8.0.36 (currently using java 8.0.66 on Gentoo Linux, but this is not of importance I think): It is related to the build-in manager application used as a jmxproxy. And to initialization of the Spring framework during an

RE: A complex issue concerning the application lifecycle, MBeans and Spring

2016-07-13 Thread Jäkel , Guido
>> Dear André, >> >> thank you for quickly announcing your idea for an workaround. But you right >> see the limits, and the more important >impact of disabling the connectors is that it will also disable the traffic to >all the other running applications (and we have a >bunch of it on each of

RE: A complex issue concerning the application lifecycle, MBeans and Spring

2016-07-18 Thread Jäkel , Guido
Hi Mark, I just applied the patchset to the released source tarball of 8.0.36 and with performing some cycling and deployments of applications I confirm the issue has gone as expected. with thanks again Guido >-Original Message- >From: Guido Jäkel [mailto:g.jae...@dnb.de] >Sent:

RE: [SOLVED] mod_jk/1.2.37 Apache/2.4.7 (Ubuntu): AJP established connections pile up, connection_pool_timeout has no effect?

2016-09-01 Thread Jäkel , Guido
>From: Hildegard Meier [mailto:daku8...@gmx.de] >Sent: Thursday, September 01, 2016 10:14 AM >To: users@tomcat.apache.org >Subject: [SOLVED] mod_jk/1.2.37 Apache/2.4.7 (Ubuntu): AJP established >connections pile up, connection_pool_timeout has >no effect? > >Dear Guido, > >many thanks for Your

RE: mod_jk/1.2.37 Apache/2.4.7 (Ubuntu): AJP established connections pile up, connection_pool_timeout has no effect?

2016-08-31 Thread Jäkel , Guido
Dear Hildegard, you wrote, you're using the worker MPM. What are the pool sizes for child workers and it's threads, i.e. the values for ServerLimit, ThreadsPerChild? And what's the minimum thread pool size, i.e. MinSpareThreads? Note that the AJP connection pool is used per child (and per

RE: mod_jk/1.2.37 Apache/2.4.7 (Ubuntu): AJP established connections pile up, connection_pool_timeout has no effect?

2016-08-31 Thread Jäkel , Guido
Dear Hildegard, I wrote: >Note that the AJP connection pool is used per child (and per tomcat backend >definition if you're using more than one). You >use connection_pool_minsize=1. Please also note, that the spare threads will >no gather to the lowest possible number of >childs. May this

RE: CLOSE_WAIT between Application (Tomcat) and Apache HTTPD

2017-05-11 Thread Jäkel , Guido
Dear Adhavan, I think this is quiet normal, because the browser clients "in front" will reuse connections (using keep-alive at TCP level) but an in-between load balancer may be not work or configured in this way and will use a new connection for each request to the backend. Then, you'll see a

RE: Help with Tomcat Automatic Application Deployment

2018-05-08 Thread Jäkel , Guido
Dear Srinath, take a look at the Configuration Elements for /Context/WatchedResource Probably included at the main context.xml file or the one of your application (, see https://tomcat.apache.org/tomcat-8.5-doc/config/context.html). Greetings Guido >-Original Message-

RE: Amazon EC2 Tomcat 7.0.85 not starting up due to some memory issue .Please mask if

2018-05-17 Thread Jäkel , Guido
Dear Kiran, there might be many other ways to compromise your server. But I wonder about the application you run on you Tomcat and if you know about the wide-used exploit in the Java JSF library "Primefaces" (see https://www.exploit-db.com/exploits/43733/). With greetings Guido

RE: Contexts: can there be a hierarchy?

2018-08-24 Thread Jäkel , Guido
Dear Chuck, >It's a hierarchy for the URLs, but not from a webapp location, construction, >or execution perspective - /foo/bar is completely independent of /foo, not >inside or a subset of it. Reading that I understand what you have pointed out and of course fully agree to it :) Greetings

RE: [OT] What can prevent sessions from timeouting apart from real requests

2018-08-27 Thread Jäkel , Guido
Dear Leon, I suggest to use the Tomcat Manager Application to investigate the session data: * Use the Session Display (/manager/html/sessions?path=/foo) to take a look on the different Timers (Creation Time, Last Accessed Time, Used Time, Inactive Timemm,TTL) or even the session data * Use

RE: Tomcat Valve

2018-08-27 Thread Jäkel , Guido
Dear Lance I don't know the motivation for your usecase. But note that the access log is written after handling the complete request (therefore its able to log the number of bytes send) and, because it's typical buffered, with a delay, too. This means, that a request is listed there only in

RE: Contexts: can there be a hierarchy?

2018-08-23 Thread Jäkel , Guido
Dear Chales (and James) why do you call it not really a hierachy? If you name the deployments e.g. ROOT.war foo.war foo#bar.war then the "expected" will happen: The longest context path will match to the corresponding container: * all /foo/bar{,/.*} will be served by

RE: Cluster more than 2 tomcat servers

2018-09-07 Thread Jäkel , Guido
Dear Tim, maybe you can do an "independent" check using the JGroups lib stand-alone, which offers two sets of a cluster demo. This may help to narrow down the issue to the Tomcat setup or the "other" (OS or network configuration) areas. Please refer to

RE: mod_proxy_http and "Expect: 100-continue" don't play well

2018-07-05 Thread Jäkel , Guido
Dear Michael, i don't know if this issue also take happen with it, but may be using mod_jk an option for you, also? Greetings Guido >-Original Message- >From: Michael Osipov [mailto:micha...@apache.org] >Sent: Wednesday, July 04, 2018 9:26 PM >To: users@tomcat.apache.org >Subject:

RE: RE: mod_proxy_http and "Expect: 100-continue" don't play well

2018-07-05 Thread Jäkel , Guido
Dear Michael, I wasn't faced by this yes, but what's about adding something like RequestHeader unset Expect early at the Apache httpd? Greetings Guido >-Original Message- >From: Michael Osipov [mailto:1983-01...@gmx.net] >Sent: Thursday, July 05, 2018

RE: Protocol handler initialization failed, Address already in use

2018-07-10 Thread Jäkel , Guido
Dear Sergey, does this actually happen on a restart situation (with less than about 5min pausing time)? Then maybe you have a dangling connection (close/time waiting) on the TCP stack from the shutdown of a client connection (or the reverse proxy). Please check if any is still open after

RE: Certificate based database authentication

2018-07-11 Thread Jäkel , Guido
Dear Will, I agree to Your approach. Said that, I also don't have any experience with the concrete question, but from my Tomcat and Java experience, I would say that -- from a quick look -- the docs

RE: mod_proxy_http and "Expect: 100-continue" don't play well

2018-07-06 Thread Jäkel , Guido
:07 PM >To: Tomcat Users List >Subject: Re: mod_proxy_http and "Expect: 100-continue" don't play well > >Am 2018-07-05 um 14:44 schrieb Jäkel, Guido: >> Dear Michael, >> >> I wasn't faced by this yes, but what's about adding something like >> >

RE: Tomcat stop and start using bash script

2018-06-29 Thread Jäkel , Guido
Hi also, to archive a full graceful shutdown, it's also save to just send a SIGTERM to the JVM running the Tomcat. This will result in invoking exactly the same mechanisms as the official top-level methods described by André without the need to start an extra VM. The PID should be available

mod_jk: Forwarding URLs containing escaped slashes (e.g. for REST services) fail with syntactical-wrong double-escaping

2018-06-20 Thread Jäkel , Guido
Hi all, I have problems to pass (REST-) URLs containing escaped slashes ('%2F') in path elements using the Apache httpd and mod_jk to the application server (in fact not Tomcat, but Wildfy. But this is of no matter, here). This kind of URL may be accepted by the httpd using the option

RE: mod_jk: Forwarding URLs containing escaped slashes (e.g. for REST services) fail with syntactical-wrong double-escaping

2018-06-20 Thread Jäkel , Guido
Dear Markus, I'm not using Tomcat as backend here. And in addition, this will not help in case of syntactically wrong URL patterns like '%252F' produced by mod_jk. thank you, anyway -- maybe emphasizing this option is useful for others here using Tomcat. Guido >-Original Message-

RE: problem in starting tomcat

2018-06-28 Thread Jäkel , Guido
>> When I am trying to start my server I got following error as: >> A fatal error has been detected by the Java Runtime Environment: >> # >> #  SIGSEGV (0xb) at pc=0x7fd4f206e28a, pid=2412, tid=2412 >> # >> # JRE version:  (11.0+18) (build ) >> # Java VM: Java HotSpot(TM) 64-Bit Server VM

RE: Tomcat embedded with Apache Solr

2018-10-15 Thread Jäkel , Guido
Dear Christopher, my 5ct on that: We're using Solr for years like (and together with) all other Webapps on Tomcat (and since some month on Wildfly) in a "classic" (non-cloud) setup without any the need for special tweaks. There is no official support for an webapp artifact since some Versions,

RE: JVM keystores and CA

2018-10-23 Thread Jäkel , Guido
Dear Igor, >> 3. In case JAVA_HOME/lib/security/cacerts is my trust store (the default) I >> would >> expect Java to use the system store(s) too in case a certificate can not be >> validated >> simply because a CA is missing in the Java store. Example, DigiCert Global >> Root G2 CA is missing

RE: JVM keystores and CA

2018-10-23 Thread Jäkel , Guido
Dear Igor and others, in this context maybe the attached Java program together with this script is useful for you ... #!/bin/bash if [ -z "$1" ]; then cat >&2 <<-EOT syntax : $0 [-d] [-a] purpose: check ssl certificate path. Use [#]

RE: JVM keystores and CA

2018-10-23 Thread Jäkel , Guido
>Just to make it clear, when I mentioned Java8u91 as an example I meant for >the time when lets say Java8u81 was latest at that moment. In that case >when using the built in JVM store you would encounter failed connections to >servers with G2 signed certificates. Then as you said you would need to

RE: Number of Web Applications in one Tomcat

2018-10-30 Thread Jäkel , Guido
>-Original Message- >From: Torsten Krah [mailto:krah...@gmail.com] >Sent: Tuesday, October 30, 2018 2:55 PM >To: users@tomcat.apache.org >Subject: Re: Number of Web Applications in one Tomcat > >Am Dienstag, den 30.10.2018, 14:39 +0100 schrieb Ahmed, Tarek: >> "With Tomcat 7.0.23+ you can

RE: Number of Web Applications in one Tomcat: THANKS!

2018-10-31 Thread Jäkel , Guido
>Has anyone ever attacked one of your web applications? There are some >fun ways to make an application use a huge amount of memory. Just >because the applications themselves are behaving doesn't mean that all >the users are behaving. > >For example, do you have a max POST size set for your

RE: Default context.xml with parallel deployment

2018-11-08 Thread Jäkel , Guido
Dear Giles, what aspects do you use in you myapplication#foo.xml ? You may symlink this files from an application-specific master template, e.g. myapplication.xml greeatings Guido >-Original Message- >From: Gilles SCHLIENGER [mailto:gilles.schlien...@cncc.fr] >Sent: Thursday,

RE: log4j: Logging to same file from multiple contexts?

2018-10-09 Thread Jäkel , Guido
Dear Dave, I walk through that years before, too. Yes - you can't let write different Log4J Appenders to the same file or you get this garbage. Yes - you have property resolving here, but there are no properties you need. We did a solution using an additional servlet called at application

RE: SSL on Tomcat

2018-09-28 Thread Jäkel , Guido
Dear Loai, Your client can't very (don't trust) the certificate (chain) of the target. Either target's certificate is not an "official" one (e.g. self signed) or your clients JVM certificate trust chain is not up to date. I you like I may send you a small java commandline tool to check the

RE: Application hanging on Tomcat 7.0.54

2018-09-27 Thread Jäkel , Guido
Dear Louis, I would recommend to use a tool like JVisualVM (with Plugins*) to take a look on this things while it's still running or have blocked. You may live watch things like running threads or the Java heap occupation or investigate JVM, Java and Tomcat parameters (and even run some

RE: Request for a technical review

2018-12-13 Thread Jäkel , Guido
Dear Mallory and Mark, then I'm the one of the rare who use an "unusual" setups for more than 10 years :) . On a staged farm of about 3*10 Tomcat's we run a whole bunch of "webapps"; most of them in at least two instances for failover. But I never configured more than one Service and one

RE: Using tomcat manager to deploy to several services

2018-12-05 Thread Jäkel , Guido
Dear Frank, I don't agree that this is "better". It will trigger the same things in the backend in the end. And obviously don't need the Tomcat Connector to be available. This might be important in situation with some malfunctions caused by near-OOM or out-of-request-workers (caused by long

RE: Using tomcat manager to deploy to several services

2018-12-04 Thread Jäkel , Guido
Dear Frank, I guess you have configured autodeployment of the WARs. And it seems to me that you want to use a tree in a filesystem to place your deployments. Given that, you may use an arbitrary way to place the WARs to that location, because it's not the Tomcat Manager application that

RE: Using tomcat manager to deploy to several services

2018-12-05 Thread Jäkel , Guido
>Does it really ? If some tomcat code is at that time processing a client POST >request, >which potentially modifies data on the server (or a back-end database), is >ditto tomcat >code "informed" of the JVM shutdown, and does it have time to interrupt the >processing in >some

RE: tomcat manager gui hangs on web-app reload for one web-app not others

2018-09-14 Thread Jäkel , Guido
Dear Bill, usually the Tomcat is configured in such a way that it watches the file .../WEB-INF/web.xml of your application an reload the application then. If you use autodeploy of a WAR, it's the same with the archive file. Said that, may you please try to reload your application by just

RE: Monitoring resources comsumption at context level

2019-04-05 Thread Jäkel , Guido
Hi, that's a question that is not specific to Zabbix or Tomcat but to all kind of cases that use *one* JVM to run more than one "Application". And that's also an open point to me since nearly decades. Some years ago I googled something that is called "Classmexer" (as a subproject(?) of

RE: Monitoring resources comsumption at context level

2019-04-05 Thread Jäkel , Guido
>Some years ago I googled something that is called "Classmexer" (as a >subproject(?) of something that is called "Javamex" > > https://www.javamex.com/classmexer/ > I just noticed, that I also have bookmarked an post called "Instrumentation Memory Counter"

RE: Crash in http connector random once a day

2019-03-14 Thread Jäkel , Guido
>From: Daniel Castilla | thin(k)design [mailto:d...@thin-k-design.com] >Sent: Thursday, March 14, 2019 12:37 PM >To: Jäkel, Guido ; users@tomcat.apache.org >Subject: Re: Crash in http connector random once a day > >Dear Guido, > >thanks for the reply. The requests are reach

RE: Crash in http connector random once a day

2019-03-14 Thread Jäkel , Guido
Dear Daniel, a request is logged in the access log after it has finished. (In addition, on Tomcat the log is flushed with some delay, but that's not the problem here). But if the request is stall while processing, there's no hint in the access log. Therefore: Is there an application log that

RE: How to add an header field to all requests unconditionally

2019-03-13 Thread Jäkel , Guido
Dear Thomas, you may include a filter servlet into the application to modify the response header. A quick search offers e.g. https://gist.github.com/danlangford/3669475 , which states to implement a generic, configurable Response Header Filter. You may compile this servlet independent from an

RE: How to add an header field to all requests unconditionally

2019-03-13 Thread Jäkel , Guido
>-Original Message- >From: André Warnier (tomcat) [mailto:a...@ice-sa.com] >Sent: Wednesday, March 13, 2019 12:11 PM >To: users@tomcat.apache.org >Subject: Re: How to add an header field to all requests unconditionally > >The OP wants to insert a *Request* header, not a Response header.

RE: Followup2: Changed behaviour of Tomcat Deployment/Context/Lifecycle Manager concerning symbolic links

2019-03-13 Thread Jäkel , Guido
t; >On Tue, 12 Mar. 2019, 9:45 pm Jäkel, Guido, wrote: > >Correct me if I'm wrong. The original reason of this discussion if the file >extension does not end with war right? I don't see from test above that the >links do not ends with war. Or is it because of trailing dot at the

Changed behaviour of Tomcat Deployment/Context/Lifecycle Manager concerning symbolic links

2019-03-08 Thread Jäkel , Guido
Dear Mark Thomas, other developers and list members, caused by the requirement of an external software product, I currently have to upgrade a Tomcat-8.5 installation from Tomcat-8.5.23 to >=8.5.32 and therefore I concretely choose 8.5.38. As I expect from a minor update, in the first moment

RE: Followup2: Changed behaviour of Tomcat Deployment/Context/Lifecycle Manager concerning symbolic links

2019-03-11 Thread Jäkel , Guido
>-Original Message- >From: Rainer Jung [mailto:rainer.j...@kippdata.de] >Sent: Monday, March 11, 2019 9:03 AM >To: Tomcat Users List ; Michael Osipov > >Subject: Re: Followup2: Changed behaviour of Tomcat >Deployment/Context/Lifecycle Manager concerning symbolic links > >Am 11.03.2019 um

RE: Followup2: Changed behaviour of Tomcat Deployment/Context/Lifecycle Manager concerning symbolic links

2019-03-12 Thread Jäkel , Guido
>-Original Message- >From: Mark Thomas [mailto:ma...@apache.org] >Sent: Tuesday, March 12, 2019 12:51 AM >To: users@tomcat.apache.org >Subject: Re: Followup2: Changed behaviour of Tomcat >Deployment/Context/Lifecycle Manager concerning symbolic links >Looking at the code in

Followup: Changed behaviour of Tomcat Deployment/Context/Lifecycle Manager concerning symbolic links

2019-03-08 Thread Jäkel , Guido
My investigations so far: This is thrown by java/org/apache/catalina/webresources/StandardRoot.java protected WebResourceSet createMainResourceSet() { String docBase = context.getDocBase(); WebResourceSet mainResourceSet; if (docBase == null) {

RE: request.getContextPath() behind a proxy (apache/nginx)

2019-02-05 Thread Jäkel , Guido
>On 05/02/2019 08:23, Johan Compagner wrote: >> problem is that our customers are doing this. >> also they can have 1 tomcat with a few webapps that they want to map under >> different domains >> >> so that would mean for them starting 3 different tomcats under 3 different >> ports and configure

Followup2: Changed behaviour of Tomcat Deployment/Context/Lifecycle Manager concerning symbolic links

2019-03-08 Thread Jäkel , Guido
the motivation to "fully expand" the path here at Java level instead of delegating this to the underlying OS? greetings Guido >-Original Message- >From: Jäkel, Guido [mailto:g.jae...@dnb.de] >Sent: Friday, March 08, 2019 11:39 AM >To: 'Tomcat Users List' >S

RE: Configuring log format for console output (catalina.out)

2019-05-22 Thread Jäkel , Guido
Dear Joan, by use of the common scripts, the file catalina.out will contain the console output (stdout/tderr) of the *JVM* process and -- if not configured in another way -- of the applications. Therefore, you have to deal with the features of output formatting of current JVMs. Or -- as me

RE: Tomcat Bandwidth Utilization Tool

2019-08-30 Thread Jäkel , Guido
Dear Michael, you may read the statistic values provided by the Connector (and others like busy works, load, heap usage or even the request scoreboard) via JXM or even (by help of the JMX Proxy Servlet) via HTTP. You may contact me if you need more advice. greetings Guido >-Original

AW: remote jmx monitoring through ssh tunnel

2019-12-13 Thread Jäkel , Guido
Dear all, some time ago, I also need to pass JXM through a tunneled connection (using STunnel). The Problem with JMX via RMI is that here is more than one connection and involved in the handshake is an IP address that is different on both ends of the tunnel. A solution was to use an

AW: JVM job for Tomcat taking lots and lots of CPU

2020-02-13 Thread Jäkel , Guido
Dear James, Dear others, I just get notice of this long thread. Sorry, if already give this suggestion. But James: If it's possible, you may use (J)VisualVM with the "VisualGC" Plugin to get some live impressions of "what's going on" with the heaps. To my experience this visual perceptions is