-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 John,
On 2/18/20 11:47, John Larsen wrote: > It doesn't work otherwise. Before you guys changed the AJP we > always used localhost for host in workers. localhost and 127.0.0.1 and/or :: should all be synonyms of each other. If you used to use (the default) "all interfaces" as the "address" of the <Connector> and that changed to (the new default) "localhost" then you should get a connector bound to a different interface, but "localhost" from the client should still be the same thing. The only thing I can think of is that "localhost" in the JVM might be using 127.0.0.1 while the reverse proxy might resolve that to :: 9IPv4 versus IPv6 preference). In that case, changing "localhost" to "127.0.0.1" makes it clear you want to use IPv4 no matter what. - -chris > On Tue, Feb 18, 2020 at 9:27 AM Christopher Schultz < > ch...@christopherschultz.net> wrote: > > John, > > On 2/18/20 07:49, John Larsen wrote: >>>> Worker host also needs to be 127.0.0.1 in your mod_jk >>>> workers.properties file. That is if you were using >>>> host=localhost previously. > > Why? > > -chris > >>>> On Tue, Feb 18, 2020 at 5:36 AM Friderike Hofmeister < >>>> friderike.hofmeis...@mbsupport.de> wrote: >>>> >>>>> Hi, >>>>> >>>>> for our application we have to use the AJP protocol and so >>>>> I understand with Tomcat 8.5.51 we have to configure the >>>>> AJP connector as follows: >>>>> >>>>> <Connector port="8009" protocol="AJP/1.3" >>>>> address="127.0.0.1" redirectPort="8443" >>>>> secretRequired="false" secret="" /> >>>>> >>>>> With this browser error message changed to "403 -- Der >>>>> Server hat die Anfrage verstanden, verbietet aber eine >>>>> Autoriesierung." >>>>> >>>>> So, probably we have to use the attribute >>>>> allowedRequestAttributesPattern as well. But how? The >>>>> documentation gives no example and the description there >>>>> does not give me any idea how to use it. >>>>> >>>>> Regards and thanks in advance, >>>>> >>>>> Friderike Hofmeister DBA >>>>> >>>>> mb Support GmbH Friedenstr. 18 D-93053 Regensburg >>>>> >>>>> Tel.: +49 941 94 260-0 Hotline: +49 941 94 260-123 Fax: +49 >>>>> 941 94 260-111 E-Mail: friderike.hofmeister @mbsupport.de >>>>> >>>>> Web: www.mbsupport.de (http://www.mbsupport.de/) Sitz der >>>>> Gesellschaft: Regensburg >>>>> >>>>> Geschäftsführer: Martin Böddecker Handelsregister: >>>>> Amtsgericht Regensburg HRB 6469 Ust-IdNr. DE 8138 78197 >>>>> >>>>> Hinweise zur Verarbeitung Ihrer personenbezogenen Daten: >>>>> Verantwortlich für die Verarbeitung Ihrer personenbezogenen >>>>> Daten im Rahmen des vorliegenden Kontakts ist die mb >>>>> Support GmbH. Weitere Informationen zur Verarbeitung Ihrer >>>>> Daten, insbesondere zu den Ihnen zustehenden Rechten, >>>>> können Sie unserer Webseite unter >>>>> https://mbsupport.de/index.php/datenschutz entnehmen oder >>>>> auf jedem anderen Wege unter den o.g. Kontaktdaten bei uns >>>>> erfragen. >>>>> >>>>> E-Mail Disclaimer Der Inhalt dieser E-Mail ist >>>>> ausschließlich für den bezeichneten Adressaten bestimmt. >>>>> Wenn Sie nicht der vorgesehene Adressat dieser E-Mail oder >>>>> dessen Vertreter sein sollten, so beachten Sie bitte, dass >>>>> jede Form der Kenntnisnahme, Veröffentlichung, >>>>> Vervielfältigung oder Weitergabe des Inhalts dieser E-Mail >>>>> unzulässig ist. Wir bitten Sie, sich in diesem Fall mit dem >>>>> Absender der E-Mail in Verbindung zu setzen. The >>>>> information contained in this email is intended solely for >>>>> the addressee. Access to this email by anyone else is >>>>> unauthorized. If you are not the intended recipient, any >>>>> form of disclosure, reproduction, distribution or any >>>>> action taken or refrained from in reliance on it, is >>>>> prohibited and may be unlawful. Please notify the sender >>>>> immediately. >>>>> >>>>> ------------------------------------------------------------------ - --- >>>>> >>>>> > >>>>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org >>>>> For additional commands, e-mail: >>>>> users-h...@tomcat.apache.org >>>>> >>>>> >>>> >> >> --------------------------------------------------------------------- >> >> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org >> For additional commands, e-mail: users-h...@tomcat.apache.org >> >> > -----BEGIN PGP SIGNATURE----- Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/ iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAl5MKNEACgkQHPApP6U8 pFiKWg/+PiPD64J994udCDcLJbw0GFpPAvKhsXUvG3rqbrQakTr4XFQcM2Qj1Gf3 Zt4D78peTv+o/1KvLDcDuYqjVsCyGu2e2KMpc1cFtabZPFh22tl2MpmQXV6InE95 qju7evsXGkwHoS3CHeMq2yKPnIG6F3GCL+BbprGkk13spUBr2xbXNI5FxYT+wBkP Svd0JAdPrdY+kRMzQWhRtgr0KTuMzsdfPBS9ARtEfuHHL7ANCPx6ZNdOpiKzZb50 nnGvUroYub9bPie5pzstWAhCEK3wtIAUn6c296Te3rwuFdxuYAZXqPrqYKINJEyc pYS1TGOP0lJngMTu1LsRDLGJ7+JnQ9klpGRXna35tKQjpaTAJTYvoPAJxpi48DNU wORtEgpMI5Qrt7CrScX3EswqtzzlesAKnhVGybgY1FTYUkJmAp67yOFtTQwns2dB z5e5kXN1z55NQVW550YXlmKnS95XiJ6Nr8xiO3NmRu+6faET6yW1xO6R86Pbt3XP EFxMfZXECX7ltfero6U/AGYBlPbuIhjZQjIS8sBGpEJdboSuwFacn5CvGgMs7zi/ sGt/VEsck0k3NtshB5XyVgsrjsjX3tMkecBElFboUWveqh+dmYxo+FrZ9TcU9guX ZF4JDGZqsnWvQxG9MhYwWp3NaEkToiNoN3eAldR9yt1byE8B8+g= =+RTy -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
