Tomcat-native | best memory choice
Hi there, I've two questions about using Tomcat. We currently using Tomcat in version 5.5.23 on 64 Bit - Linux (several instances configured with 1GB of ram | as Webserver | ~30 Clients). A friend of mine told me that's not a benefite to run the tomcat jvm with more than 512 MB memory, because the jvm needs more time to reorganize itself as to process the jobs. Is this statement correct? The second one is about the tomcat-native libs. If we install them, will it be a large performance boost? In the docs they told about scability and performance. Will the end-user get an advantage of this? Thx for the reply So long! _ Messenger Online Treff: Spontan chatten, über Hobbies reden, sofort Spass haben? Jetzt klicken! http://redirect.gimas.net/?n=M0811xMOTDE
RE: Tomcat-native | best memory choice
> No, and hasn't been for over ten years. The time spent in garbage collection is proportional to the number of live objects in the heap, not the size of the heap. The number of live objects usually correlates to the number of active connections in a Tomcat environment. Make sure you have enough RAM on the system to support the Java heap size plus the code and other data areas and the OS; otherwise you will get into paging and performance will suffer dramatically. i thought as much. thx for the reply! > From: [EMAIL PROTECTED] > To: users@tomcat.apache.org > Date: Thu, 6 Nov 2008 07:49:07 -0600 > Subject: RE: Tomcat-native | best memory choice > > > From: Chris [mailto:[EMAIL PROTECTED] > > Subject: Tomcat-native | best memory choice > > > > A friend of mine told me that's not a benefite to run the > > tomcat jvm with more than 512 MB memory, because the jvm > > needs more time to reorganize itself as to process the jobs. > > Is this statement correct? > > No, and hasn't been for over ten years. The time spent in garbage collection > is proportional to the number of live objects in the heap, not the size of > the heap. The number of live objects usually correlates to the number of > active connections in a Tomcat environment. Make sure you have enough RAM on > the system to support the Java heap size plus the code and other data areas > and the OS; otherwise you will get into paging and performance will suffer > dramatically. > > > The second one is about the tomcat-native libs. If we install > > them, will it be a large performance boost? > > If you're using SSL, you will probably see some increase in performance. > However, with just 30 users (or is that 30 concurrent requests? - big > difference), it's unlikely that you have any real performance concerns. > There's a tradeoff between configuration and installation complexity and > performance; if you're not pushing the limits, keep it simple. > > > Will the end-user get an advantage of this? > > In nearly all cases, it's application architecture that is the overriding > performance factor. If you really want to speed things up, take a long hard > look at how your webapp does what needs to be done. > > - Chuck > > > THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY > MATERIAL and is thus for use only by the intended recipient. If you received > this in error, please contact the sender and delete the e-mail and its > attachments from all computers. > > - > To start a new topic, e-mail: users@tomcat.apache.org > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > _ Messenger Online Treff: Spontan chatten, über Hobbies reden, sofort Spass haben? Jetzt klicken! http://redirect.gimas.net/?n=M0811xMOTDE
Chunked encoding not terminated with native library
Hi, I'm using Tomcat 7.0.8 on Ubuntu 10.10. When using the APR based Tomcat Native Library (libtcnative), responses from Tomcat are being sent with a chunked encoding, but the "0" terminating the chunked response isn't sent until exactly 1 minute later. The response is being written to an org.apache.catalina.connector.CoyoteOutputStream. The following calls are made: out.write(resp); out.flush(); out.close(); If I just remove the libtcnative-1.so, so that Tomcat loads without using it, then the response still uses chunked encoding, but the terminating "0" is sent immediately, with the rest of the response. Any ideas would be appreciated. Thanks, Chris - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Chunked encoding not terminated with native library
Hi All, Yesterday I created bug 50906 for this issue: https://issues.apache.org/bugzilla/show_bug.cgi?id=50906 Since then I've got some more details to add: - I'm running with nginx in front of tomcat - The 60 second timeout is happening in nginx and not tomcat - Regardless of whether or not I'm using libtcnative, I don't see the terminating "0\r\n\r\n" being sent by tomcat to nginx - When *not* using libtcnative, the connection is closed after writing the response; there's a FIN, in addition to ACK on the last TCP packet from tomcat. Nginx seems to use this to infer the end of the response and add the "0\r\n\r\n" to the reply sent to the client. - When using libtcnative, there is no FIN on the last TCP ACK packet, and the connection stays open. One minute later nginx times out waiting for the response to complete and adds the "0\r\n\r\n" to the response to the client. - I notice that if I use curl to make a request directly to tomcat (instead of going through nginx), then I do see the terminating "0\r\n\r\n". I still see a difference in that tomcat disconnects immediately after the reply when *not* using the native library. Any ideas? Thanks, Chris On March 9, 2011 04:56:22 pm Mark Thomas wrote: > On 09/03/2011 21:49, Chris wrote: > > Hi, > > I'm using Tomcat 7.0.8 on Ubuntu 10.10. > > > > When using the APR based Tomcat Native Library (libtcnative), responses > > from Tomcat are being sent with a chunked encoding, but the "0" terminating > > the chunked response isn't sent until exactly 1 minute later. > > > > The response is being written to an > > org.apache.catalina.connector.CoyoteOutputStream. The following calls are > > made: > > out.write(resp); > > out.flush(); > > out.close(); > > > > If I just remove the libtcnative-1.so, so that Tomcat loads without using > > it, then the response still uses chunked encoding, but the terminating "0" > > is sent immediately, with the rest of the response. > > > > Any ideas would be appreciated. > > Sounds like a bug. Please create a bugzilla entry. > > Mark > > - > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > > - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Chunked encoding not terminated with native library
I've narrowed this down even further. As I mentioned below, the "0\r\n\r\n" was not being sent to nginx, although it was being sent to curl. The difference was that nginx was doing a GET HTTP/1.0, while curl was using HTTP/1.1. If I configure curl to use HTTP/1.0 then I get the same result: no "0\r\n\r\n" is sent. So, to summarize: - GET HTTP/1.0 results in no terminating "0\r\n\r\n" for the chunked response, regardless of whether libtcnative is being used. - The difference when using libtcnative is that the connection isn't terminated after the response is sent. Chris On March 10, 2011 10:33:00 am Chris wrote: > Hi All, > Yesterday I created bug 50906 for this issue: > https://issues.apache.org/bugzilla/show_bug.cgi?id=50906 > > Since then I've got some more details to add: > > - I'm running with nginx in front of tomcat > - The 60 second timeout is happening in nginx and not tomcat > - Regardless of whether or not I'm using libtcnative, I don't see the > terminating "0\r\n\r\n" being sent by tomcat to nginx > - When *not* using libtcnative, the connection is closed after writing the > response; there's a FIN, in addition to ACK on the last TCP packet from > tomcat. Nginx seems to use this to infer the end of the response and add the > "0\r\n\r\n" to the reply sent to the client. > - When using libtcnative, there is no FIN on the last TCP ACK packet, and the > connection stays open. One minute later nginx times out waiting for the > response to complete and adds the "0\r\n\r\n" to the response to the client. > - I notice that if I use curl to make a request directly to tomcat (instead > of going through nginx), then I do see the terminating "0\r\n\r\n". I still > see a difference in that tomcat disconnects immediately after the reply when > *not* using the native library. > > Any ideas? > > Thanks, > Chris > > On March 9, 2011 04:56:22 pm Mark Thomas wrote: > > On 09/03/2011 21:49, Chris wrote: > > > Hi, > > > I'm using Tomcat 7.0.8 on Ubuntu 10.10. > > > > > > When using the APR based Tomcat Native Library (libtcnative), responses > > > from Tomcat are being sent with a chunked encoding, but the "0" > > > terminating the chunked response isn't sent until exactly 1 minute later. > > > > > > The response is being written to an > > > org.apache.catalina.connector.CoyoteOutputStream. The following calls are > > > made: > > > out.write(resp); > > > out.flush(); > > > out.close(); > > > > > > If I just remove the libtcnative-1.so, so that Tomcat loads without using > > > it, then the response still uses chunked encoding, but the terminating > > > "0" is sent immediately, with the rest of the response. > > > > > > Any ideas would be appreciated. > > > > Sounds like a bug. Please create a bugzilla entry. > > > > Mark > > > > - > > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > > For additional commands, e-mail: users-h...@tomcat.apache.org > > > > > - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Chunked encoding not terminated with native library
I should also mention that I'm doing Servlet 3.0 async requests: AsyncContext context= req.startAsync(); ... context.complete(); I've also tried using AJP instead of HTTP between tomcat and nginx, and I see similar behaviour; tomcat doesn't terminate the reply when using APR. Anyone have any ideas about what's going on, any workarounds, or even places in the tomcat code to look for possible errors? Thanks, Chris On March 10, 2011 12:37:00 pm Chris wrote: > I've narrowed this down even further. > > As I mentioned below, the "0\r\n\r\n" was not being sent to nginx, although > it was being sent to curl. The difference was that nginx was doing a GET > HTTP/1.0, while curl was using HTTP/1.1. If I configure curl to use HTTP/1.0 > then I get the same result: no "0\r\n\r\n" is sent. > > So, to summarize: > - GET HTTP/1.0 results in no terminating "0\r\n\r\n" for the chunked > response, regardless of whether libtcnative is being used. > - The difference when using libtcnative is that the connection isn't > terminated after the response is sent. > > Chris > > On March 10, 2011 10:33:00 am Chris wrote: > > Hi All, > > Yesterday I created bug 50906 for this issue: > > https://issues.apache.org/bugzilla/show_bug.cgi?id=50906 > > > > Since then I've got some more details to add: > > > > - I'm running with nginx in front of tomcat > > - The 60 second timeout is happening in nginx and not tomcat > > - Regardless of whether or not I'm using libtcnative, I don't see the > > terminating "0\r\n\r\n" being sent by tomcat to nginx > > - When *not* using libtcnative, the connection is closed after writing the > > response; there's a FIN, in addition to ACK on the last TCP packet from > > tomcat. Nginx seems to use this to infer the end of the response and add > > the "0\r\n\r\n" to the reply sent to the client. > > - When using libtcnative, there is no FIN on the last TCP ACK packet, and > > the connection stays open. One minute later nginx times out waiting for the > > response to complete and adds the "0\r\n\r\n" to the response to the client. > > - I notice that if I use curl to make a request directly to tomcat (instead > > of going through nginx), then I do see the terminating "0\r\n\r\n". I still > > see a difference in that tomcat disconnects immediately after the reply > > when *not* using the native library. > > > > Any ideas? > > > > Thanks, > > Chris > > > > On March 9, 2011 04:56:22 pm Mark Thomas wrote: > > > On 09/03/2011 21:49, Chris wrote: > > > > Hi, > > > > I'm using Tomcat 7.0.8 on Ubuntu 10.10. > > > > > > > > When using the APR based Tomcat Native Library (libtcnative), responses > > > > from Tomcat are being sent with a chunked encoding, but the "0" > > > > terminating the chunked response isn't sent until exactly 1 minute > > > > later. > > > > > > > > The response is being written to an > > > > org.apache.catalina.connector.CoyoteOutputStream. The following calls > > > > are made: > > > > out.write(resp); > > > > out.flush(); > > > > out.close(); > > > > > > > > If I just remove the libtcnative-1.so, so that Tomcat loads without > > > > using it, then the response still uses chunked encoding, but the > > > > terminating "0" is sent immediately, with the rest of the response. > > > > > > > > Any ideas would be appreciated. > > > > > > Sounds like a bug. Please create a bugzilla entry. > > > > > > Mark > > > > > > - > > > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > > > For additional commands, e-mail: users-h...@tomcat.apache.org > > > > > > > > > - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Chunked encoding not terminated with native library
1. Yes, tomcat is sending the header: "Transfer-Encoding: chunked" 2. I've also tried using close() instead of flush() and I've seen the same chunked encoding. 3. The nginx reverse proxying with the HttpProxyModule only supports HTTP/1.0 according to the "Synopsis" section here: http://wiki.nginx.org/HttpProxyModule Based on my reading of the HTTP spec, closing the connection seems to be a valid alternative to sending the terminating "0\r\n\r\n". Any ideas about why the connection wouldn't be closed when using APR? On March 11, 2011 09:35:56 am Christopher Schultz wrote: > Chris, > > On 3/10/2011 12:37 PM, Chris wrote: > > As I mentioned below, the "0\r\n\r\n" was not being sent to nginx, > > although it was being sent to curl. The difference was that nginx was doing > > a GET HTTP/1.0, while curl was using HTTP/1.1. If I configure curl to use > > HTTP/1.0 then I get the same result: no "0\r\n\r\n" is sent. > > > > So, to summarize: > > - GET HTTP/1.0 results in no terminating "0\r\n\r\n" for the chunked > > response, regardless of whether libtcnative is being used. > > - The difference when using libtcnative is that the connection isn't > > terminated after the response is sent. > > Good catch with the HTTP 1.0 versus 1.1. > > I'm not exactly an expert at HTTP spec and compliance, but I'm pretty > sure that the following are true: > > 1. HTTP 1.0 does not support chunked encoding, therefore Tomcat is >somewhat correct in it's failure to send a trailing 0\r\n\r\n. >Does Tomcat send a "chunked" response header? > > 2. Calling response.flush() often triggers the use of chunked encoding, >which could cause Tomcat to make a poor decision when HTTP 1.0 is >involved. > > Is it possible to configure nginx to use HTTP 1.1? I would think you'd > want to use 1.1 anyway. > > -chris > > - > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > > - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Chunked encoding extensions
Hi folks I am looking information on how to extend the tomcat chunked encoding functionality. >From looking at the code I have found ChunkedInputFilter.java and ChunkedOutputFilter.java, these appear to be the filters responsible. From what I can see they are invoked depending on whether the response/ request has a content Length set, if no length then we add the chunked filter. Now this is all fantastic so far, what I would like to do is extend the code so that it implements the chunk encoding extensions as mentioned in the rfc2616. The reason being is that occassionally I would like my application layer to be able to specify a chunk extension within the chunk header thats about to be written, this will allow me to communicate some extra information to the http endpoint with which i am communicating with, per chunk.This will be link to link, and wont involve any SW in between the 2 links. What do you think is the best solution here, should i directly update the current Chunked filters ? If so how can I pass information down from my application to them ? My application is a servlet which accepts http posts, thus I have access to the response object, which I believe the chunked filters can also access. Maybe we can add an interface here, and use it to communicate. Im using tomcat 6.0.29. Maybe there is a way to do this without altering the current code, some how disabling the chunked filters and adding my own filters in to the chain? Comments appreciated, im new to tomcat and java, so go easy ;p Thanks Chris
Calling AsyncContext.complete() in thread not started by AsyncContext.start()
I'm using tomcat 7.0.8 on Ubuntu 10.10. I've got a servlet doing Servlet 3.0 asynchronous processing, using HttpServletRequest.startAsync(). The AsyncContext.complete() is later called from a different thread, but it's *not* one that was started by AsyncContext.start(). I'm wondering if anyone can comment about whether calling complete() in this way might cause problems. In general things seem to be working but I'm seeing behaviour in some situations that leads me to believe requests may not be properly completed/closed. The servlet 3.0 spec had the following to say. It seems that my thread may not have the "Web Application Environment" but I'm not sure exactly what that means: -- Java Enterprise Edition features such as Section 15.2.2, “Web Application Environment” on page 15-174 and Section 15.3.1, “Propagation of Security Identity in EJB™ Calls” on page 15-176 are available only to threads executing the initial request or when the request is dispatched to the container via the AsyncContext.dispatch method. Java Enterprise Edition features may be available to other threads operating directly on the response object via the AsyncContext.start(Runnable) method -- Thanks, Chris - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Calling AsyncContext.complete() in thread not started by AsyncContext.start()
Thanks for the comments Mark. I've upgraded to 7.0.11 and the issues I was seeing seem to be gone. You only mentioned the HTTP APR connecter, but I've noticed a difference for both HTTP APR and AJP APR. Does it make sense that the fix also affects AJP? Thanks, Chris On March 13, 2011 06:49:16 pm Mark Thomas wrote: > On 13/03/2011 22:33, Chris wrote: > > I'm wondering if anyone can comment about whether calling complete() in > > this way might cause problems. In general things seem to be working but I'm > > seeing behaviour in some situations that leads me to believe requests may > > not be properly completed/closed. > > Providing the calls are in the right order, you should be fine. If you > are using the HTTP APR/native connector you should upgrade to 7.0.11 > since that fixes a bug with Servlet 3.0 async on non-Windows platforms > with that connector (BIO & NIO were fine). > > If you have a simple, test case that demonstrates a bug then please open > a bugzilla entry and add your test case. Please keep it as simple as > possible (ideally a single Servlet) and include the source. > > > The servlet 3.0 spec had the following to say. It seems that my thread may > > not have the "Web Application Environment" but I'm not sure exactly what > > that means: > > In Tomcat JNDI calls may not work. In a full J2EE container, security > context information (that passes current user info to EJB calls) might > not work. > > Mark > > - > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > > - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Help needed with SpnegoAuthenticator authentication
Any help with this would be very much appreciated. We are trying to proof of concept this to return the remote user's domain login name to use it in a Web application. Attempting to use a keytab method to hopefully negate any requirement for exposing the kerberos principal delegate in any server configuration files. We have a test configuration for SpnegoAuthenticator authentication using Apache Tomcat/7.0.47 in sandbox environment. From a remote client workstation we are seeing an HTTP 500 error when testing and looking for some insight as to what is wrong or missing in our test environment. Environment: Apache Tomcat/7.0.47 Java JDK/JRE 1.7.0_45 Test Workstation: Windows 7 x64 (domain joined) Test Server: Windows Server 2008 R2 When testing see Log dump ---> Nov 14, 2013 10:04:50 PM org.apache.catalina.authenticator.SpnegoAuthenticator authenticate SEVERE: Unable to login as the service principal javax.security.auth.login.LoginException: Unable to obtain password from user at com.sun.security.auth.module.Krb5LoginModule.promptForPass(Unknown Source) at com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Unknown Source) at com.sun.security.auth.module.Krb5LoginModule.login(Unknown Source) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source) at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source) at java.lang.reflect.Method.invoke(Unknown Source) at javax.security.auth.login.LoginContext.invoke(Unknown Source) at javax.security.auth.login.LoginContext.access$000(Unknown Source) at javax.security.auth.login.LoginContext$4.run(Unknown Source) at javax.security.auth.login.LoginContext$4.run(Unknown Source) at java.security.AccessController.doPrivileged(Native Method) at javax.security.auth.login.LoginContext.invokePriv(Unknown Source) at javax.security.auth.login.LoginContext.login(Unknown Source) at org.apache.catalina.authenticator.SpnegoAuthenticator.authenticate(SpnegoAuthenticator.java:214) at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:574) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:171) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:100) at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:953) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:408) at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1041) at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:603) at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:310) at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) at java.lang.Thread.run(Unknown Source) SPN is delegated to the domain account with UPN: svctomca...@mydom.int (Setspn –a http/tomcatsvr.mydom.int:8080 svctomcatdv) * Domain Controller DC1 is Server 2008 R2 * Windows server hosting Tomcat is Server 2008 R2 * PC is Windows 7 and configured to automatically login in Intranet zone identified by *.mydom.int Keytab generated using the ktpass.exe utility with command: ktpass /crypto AES256-SHA1 /princ svctomca...@mydom.int /pass * /kvno 0 /ptype KRB5_NT_SRV_INST /out "C:\temp\tc.keytab" Tomcat Java options set are: -Dcatalina.home=C:\Program Files\Apache Software Foundation\Tomcat 7.0 -Dcatalina.base=C:\Program Files\Apache Software Foundation\Tomcat 7.0 -Djava.endorsed.dirs=C:\Program Files\Apache Software Foundation\Tomcat 7.0\endorsed -Djava.io.tmpdir=C:\Program Files\Apache Software Foundation\Tomcat 7.0\temp -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.util.logging.config.file=C:\Program Files\Apache Software Foundation\Tomcat 7.0\conf\logging.properties -Djava.security.krb5.conf=C:\Program Files\Apache Software Foundation\Tomcat 7.0\conf\krb5.ini -Djava.security.auth.login.config=C:\Program Files\Apache Software Foundation\Tomcat 7.0\conf\jaas.conf -Djavax.security.auth.useSubjectCredsOnly=false -Dsun.security.krb5.debug=true Context.xml has the Spnego Valve declared --- Web.xml has security constraints, roles, and SPNEGO authentication methods --- All JSP Files *.jsp role1 The role that is required to access the pages role1 SPNEGO Krb5.ini –- [libdefaults] default_realm = MYDOM.INT
Re: Connector Port Issue
Anyone happen to know where in the server.xml file the attributes go for clientAuth and sslEnabledProtocols? I'm running Tomcat 10. Seems like I tried putting them under everything (Connector, SSLHostConfig, Certificate) but still get the warning in the logs: failed to set property. Thanks,ChrisOn Thursday, August 5, 2021, 03:37:54 PM EDT, Peter Kreuser wrote: Chris, > Am 05.08.2021 um 18:32 schrieb Rob Sargent : > > >> Caused by: java.lang.IllegalArgumentException: No SSLHostConfig >>element was found with the hostName [_default_] to match the >>defaultSSLHostConfigName for the connector [https-jsse-nio-9443] >> > The ssl-Options are not attributes on the connector, but the SSLHostConfig http://tomcat.apache.org/tomcat-10.0-doc/config/http.html#Common_Attributes http://tomcat.apache.org/tomcat-10.0-doc/config/http.html#SSL_Support Peter > Isn’t that the real issue? > > > - > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org >
Re: Checksum Validation of Release 9.0.53 on a Mac
> On Sep 23, 2021, at 10:48 AM, Darryl Philip Baker > wrote: > > I am trying to download and validate the binary release 53 file name is > apache-tomcat-9.0.53.tar.gz using openssl and the SHA256 checksum from the > link on the download web page. The target system for the installation is > running RHEL7. The checksums don’t match. I don’t know if I am doing things > wrong or there is an issue. If I am doing something wrong please let me know. > > Here is what I am doing and the output on my Mac (11.6): > $ /usr/bin/openssl sha256 apache-tomcat-9.0.53.tar.gz > SHA256(apache-tomcat-9.0.53.tar.gz)= > 7b3e456ed76b0b42d99767985dc3774b22e2388834994f8539272eb7c05ab6fd > $ > > The displayed checksum from the link on the download page is: > ee731b2d0c3ab7e14fa924dcb8d598707cedf714c9ce1f2c2d907a1fd51e26f7eec1343c3dc39e240ff64dac2e0213f154d23e5f94a430f429165b5df51f786f > Darryl, The checksums are pgp and sha512. On my Mac I used $ shasum -a 512 apache-tomcat-9.0.53.tar.gz and the checksums match. Chris - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Conditional access logs
Tomcat 9. I wanted to separate out access logs for external api calls to log different info than the standard access log line. For example, the api key used which is set as a request header. Adding that to the pattern was easy. However the conditional logging was clunky. I found the ‘conditionIf’ and ‘conditionUnless’ attributes for the access log valve, but these only work on request attributes, not headers (at least that’s what the documentation says). I have created a filter that copies the values from the request headers to equivalent attributes, just so the condition can work. This is where it feels clunky, especially since the access log valve has replacement parameters for logging request headers. Is there a technical reason why the condition checking can’t work on request headers in the valve? If not, can this be considered as a feature request please? Thanks - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Conditional access logs
> On Apr 22, 2022, at 7:21 PM, Aleks wrote:
>
> Hi.
>
>> On Thu, 21 Apr 2022 17:07:27 -0400
>> Chris Cheshire wrote:
>>
>> Tomcat 9.
>>
>> I wanted to separate out access logs for external api calls to log different
>> info than the standard access log line. For example, the api key used which
>> is set as a request header.
>>
>> Adding that to the pattern was easy.
>>
>> However the conditional logging was clunky. I found the ‘conditionIf’ and
>> ‘conditionUnless’ attributes for the access log valve, but these only work on
>> request attributes, not headers (at least that’s what the documentation
>> says).
>>
>> I have created a filter that copies the values from the request headers to
>> equivalent attributes, just so the condition can work. This is where it
>> feels clunky, especially since the access log valve has replacement
>> parameters for logging request headers.
>
> I have solved a similar issue with https://logback.qos.ch/access.html and
> https://logback.qos.ch/manual/loggingSeparation.html
>
> That's the relevant snipplet for logback-access.xml. It uses the powerful
> filter feature from logback https://logback.qos.ch/manual/filters.html .
>
> I attach the configmap definition which shows the whole config.
>
> ```
>
>
>
>
>
> if(event.getRequestURI().contains("/health"))
>return true;
> return false;
>
>
> DENY
>
> ```
>
> The log back access filter can be used to filter based on some AccessEvent
> like
> a request header.
>
> https://logback.qos.ch/manual/filters.html#access_EvalutorFilter
> https://logback.qos.ch/xref/ch/qos/logback/access/spi/AccessEvent.html
>
> I think that you can also define based on the request header which logger
> should be used but I never had such a requirement .
>
> Just replace the tomcat access valve with the logback one.
>
> ```
> quiet="false" filename="conf/logback-access.xml"/>
> ```
>
> It was required to add this lib to the ext dir of tomcat.
> Maybe there are some newer versions available.
>
> ```
> ls -1 /opt/apache/tomcat/base/lib/ext/
> commons-compiler-3.1.3.jar
> jackson-annotations-2.9.9.jar
> jackson-core-2.9.9.jar
> jackson-databind-2.9.9.3.jar
> janino-3.1.3.jar
> logback-access-1.2.3.jar
> logback-core-1.2.3.jar
> logstash-logback-encoder-6.6.jar
>
> ```
>
>> Is there a technical reason why the condition checking can’t work on request
>> headers in the valve? If not, can this be considered as a feature request
>> please?
>>
>> Thanks
>
>
> Regards
> Alex
Thanks, I’ll take a look at this. I already use logback for the app logging so
this is familiar. I forgot they even had an access logger.
Chris
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Conditional access logs
> On Apr 22, 2022, at 1:32 PM, Tim Funk wrote: > > I don't think there is a technical reason why it couldn't be added. I think > the hard part is getting the config wording/naming correct > > Alternatively, I think an out of the box workaround could also be Tomcat's > RewriteValve where the condition matches on header and sets the > "environment variable" > https://tomcat.apache.org/tomcat-9.0-doc/rewrite.html > > You can submit a feature enhancement request in the bug database > https://tomcat.apache.org/bugreport.html#How_to_submit_patches_and_enhancement_requests > > -Tim Good to know. I’m going to try the logback route first - if that fails I’ll look at an enhancement request or patch. Chris > > >> On Thu, Apr 21, 2022 at 5:08 PM Chris Cheshire wrote: >> >> Tomcat 9. >> >> I wanted to separate out access logs for external api calls to log >> different info than the standard access log line. For example, the api key >> used which is set as a request header. >> >> Adding that to the pattern was easy. >> >> However the conditional logging was clunky. I found the ‘conditionIf’ and >> ‘conditionUnless’ attributes for the access log valve, but these only work >> on request attributes, not headers (at least that’s what the documentation >> says). >> >> I have created a filter that copies the values from the request headers to >> equivalent attributes, just so the condition can work. This is where it >> feels clunky, especially since the access log valve has replacement >> parameters for logging request headers. >> >> Is there a technical reason why the condition checking can’t work on >> request headers in the valve? If not, can this be considered as a feature >> request please? >> >> >> - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
[OT] Re: DBAs?
On Apr 2, 2023, at 4:41 PM, Kevin Huntly wrote:Are there any DBAs in here? If so, are you aware of a MySQL user mailinglist? I'm having an issue with some stored procedures and need some helpHave you tried the forums?MySQL Forumsforums.mysql.com
Re: File "catalina.out" not being created/populated when using Tomcat 9.0.31 + Ubuntu 20.04, and content goes to the Ubuntu syslog instead?
> On Jun 22, 2020, at 4:44 AM, calder wrote: > > On Mon, Jun 22, 2020, 01:04 Brian wrote > > [ snip ] > > - For some reason, the people at Ubuntu/Debian/Linux decided that Tomcat's >> log should be found inside syslog, instead of staying independent inside >> "catalina.out". Why is that? I don't know and I don't like it! > > [ snip ] > . > Sorry - don't have a specific answer for your Ubuntu implementation. > . > However, this is one reason we do not use "distro-specific" Tomcat > installations (to include implementations of WebSphere and WebLogic). > . > For example, we grab the plain vanilla Tomcat ZIP and extract it to "/opt/" > (as in "/opt/tomcat/") - we now have complete control over its > configuration and runtime instantiation. +1 Also it is far better to use a logging framework than writing directly to System.out as you have more control over when and where the logs are written. You can use java.util.logging (juli) directly or even a facade like SLF4j and then use whatever implementation you like behind it. The advantage of the facade is that the implementation (logback, log4j, juli) can be changed with configuration and a new jar instead of code changes everywhere you write to the logs. With either method you can write logs at different levels (trace, debug, info, warn error - juli does use different names though, same idea) and turn them on/off in configuration and even dynamically. Chris - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Join tables from different databases with tomcat datasource
> On Jan 11, 2021, at 1:19 PM, Jerry Malcolm wrote: > > I have a query that needs to access tables in two different databases on the > same mysql instance. I see how that can be done with the JOIN syntax in > mysql. But datasource pools reference a single database, correct? I really > need to 'join' two datasources for one sql call. I found info on doing this > by embedding TC in the Spring framework. But I was hoping to not have to do > a major restructuring. Is there a way to get a connection that attaches to > two separate databases? > > If the databases are on the same MySQL instance, just adjust the grants for the user to be able to access tables in both datasources. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
[OT] visualvm time stamps
My googlefu is failing me here. I am trying to figure out some anomalous database connection behavior in my tomcat web app. I have enabled JMX/RMI and have visualvm running on my local machine. I found the ability to monitor the active connections as a live chart, and it has an export data function. This export creates a csv with what is supposed to be a time stamp and a count but the time stamp is in a 5.6 format. I have never seen this before. How do I convert this into something normal - millis since epoch or even a human readable ISO format? Example 44295.607552 Chris - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: [OT] visualvm time stamps
> On Apr 11, 2021, at 12:24 PM, Suvendu Sekhar Mondal wrote: > > Hi Chris, > >> On Sat, Apr 10, 2021 at 12:33 AM Chris Cheshire wrote: >> >> My googlefu is failing me here. >> >> I am trying to figure out some anomalous database connection behavior in my >> tomcat web app. I have enabled JMX/RMI and have visualvm running on my local >> machine. >> >> I found the ability to monitor the active connections as a live chart, and >> it has an export data function. This export creates a csv with what is >> supposed to be a time stamp and a count but the time stamp is in a 5.6 >> format. I have never seen this before. How do I convert this into something >> normal - millis since epoch or even a human readable ISO format? >> >> Example >> 44295.607552 >> > > As far as I know, out of the box visualvm(I have 2.0.2) do not have > any option to export CPU/GC/Heap details. Are you using any plugins to > export data? > Sorry - using the mbeans plugin. For this example, I am looking at the “active” attribute of a data source. Double click on the value to bring up a real time chart. Right click on the chart and select “save data as ...” to export as a CSV. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: [OT] visualvm time stamps
> On Apr 9, 2021, at 3:02 PM, Chris Cheshire wrote: > > My googlefu is failing me here. > > I am trying to figure out some anomalous database connection behavior in my > tomcat web app. I have enabled JMX/RMI and have visualvm running on my local > machine. > > I found the ability to monitor the active connections as a live chart, and it > has an export data function. This export creates a csv with what is supposed > to be a time stamp and a count but the time stamp is in a 5.6 format. I have > never seen this before. How do I convert this into something normal - millis > since epoch or even a human readable ISO format? > > Example > 44295.607552 > > Chris > When all else fails ... RTFS So it’s the number of days since 1900. Why? Because Excel (and Lotus 1-2-3) /facepalm https://github.com/oracle/visualvm/blob/cbfb4426b25637fb5466705f76271cfcb5209090/plugins/mbeans/src/org/graalvm/visualvm/modules/mbeans/Formatter.java#L125
Re: [OT] visualvm time stamps
> On Apr 12, 2021, at 5:00 PM, Christopher Schultz > wrote: > > Chris, > > On 4/12/21 12:50, Chris Cheshire wrote: >>>> On Apr 9, 2021, at 3:02 PM, Chris Cheshire wrote: >>> My googlefu is failing me here. >>> I am trying to figure out some anomalous database connection behavior in my >>> tomcat web app. I have enabled JMX/RMI and have visualvm running on my >>> local machine. >>> I found the ability to monitor the active connections as a live chart, and >>> it has an export data function. This export creates a csv with what is >>> supposed to be a time stamp and a count but the time stamp is in a 5.6 >>> format. I have never seen this before. How do I convert this into something >>> normal - millis since epoch or even a human readable ISO format? >>> Example >>> 44295.607552 >>> Chris >> When all else fails ... RTFS >> So it’s the number of days since 1900. Why? Because Excel (and Lotus 1-2-3) > > Well... they chose to use days-since-epoch and chose a different epoch than > you did. Since it's all arbitrary and relative, why is yours better than > theirs? Because it doesn’t include a kludgy bug fix for a broken assumption about leap years and 1900 ;) In any case, yes it’s just a different epoch. In 20+ years of writing software I have never come across it and was completely baffled at how to make sense of it and my googlefu failed me. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Reload rewrite rules
Tomcat 9.0.45 - is there a way to reload the config for the rewrite valve at runtime without reloading the web app entirely? JMX operation perhaps? - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Connector Port Issue
Trying to figure out why I'm seeing the following errors in the log. I'm sure they are the reason why I cannot connect to my server via a browser on the specified port. Any help is greatly appreciated. Tomcat 10.0.7 is running (x below are intentionally left out): catalina.out 05-Aug-2021 12:37:04.048 WARNING [main] org.apache.tomcat.util.digester.SetPropertiesRule.begin Match [Server/Service/Connector] failed to set property [ciphers] to [TLS_RSA_WITH_AES_256_GCM_SHA384,x] 05-Aug-2021 12:37:04.048 WARNING [main] org.apache.tomcat.util.digester.SetPropertiesRule.begin Match [Server/Service/Connector] failed to set property [keystoreFile] to [certs/keyStore.jks] 05-Aug-2021 12:37:04.018 WARNING [main] org.apache.tomcat.util.digester.SetPropertiesRule.begin Match [Server/Service/Connector] failed to set property [clientAuth] to [false] 05-Aug-2021 12:37:04.049 WARNING [main] org.apache.tomcat.util.digester.SetPropertiesRule.begin Match [Server/Service/Connector] failed to set property [keystoreType] to [jks] 05-Aug-2021 12:37:04.049 WARNING [main] org.apache.tomcat.util.digester.SetPropertiesRule.begin Match [Server/Service/Connector] failed to set property [keystorePass] to [] 05-Aug-2021 12:37:04.050 WARNING [main] org.apache.tomcat.util.digester.SetPropertiesRule.begin Match [Server/Service/Connector] failed to set property [sslEnabledProtocols] to [TLSv1.2] 05-Aug-2021 12:37:45.916 INFO [main] org.apache.catalina.core.AprLifecycleListener.lifecycleEvent The Apache Tomcat Native library which allows using OpenSSL was not found on the java.library.path: [/usr/java/packages/lib/amd64:/usr/lib64:/lib64:/lib:/usr/lib] 05-Aug-2021 12:37:46.301 INFO [main] org.apache.coyote.AbstractProtocol.init Initializing ProtocolHandler ["https-jsse-nio-9443"] 05-Aug-2021 12:37:46.330 SEVERE [main] org.apache.catalina.util.LifecycleBase.handleSubClassException Failed to initialize component [Connector[org.apache.coyote.http11.Http11NioProtocol-9443]] org.apache.catalina.LifecycleException: Protocol handler initialization failed at org.apache.catalina.connector.Connector.initInternal(Connector.java:1054) at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:136) at org.apache.catalina.core.StandardService.initInternal(StandardService.java:561) at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:136) at org.apache.catalina.core.StandardServer.initInternal(StandardServer.java:1049) at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:136) at org.apache.catalina.startup.Catalina.load(Catalina.java:747) at org.apache.catalina.startup.Catalina.load(Catalina.java:769) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) at org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:305) at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:475) Caused by: java.lang.IllegalArgumentException: No SSLHostConfig element was found with the hostName [_default_] to match the defaultSSLHostConfigName for the connector [https-jsse-nio-9443] server.xml --> Thanks,Chris
Re: Connector Port Issue
Thank you. I will check out the info. chris On Thursday, August 5, 2021, 03:37:54 PM EDT, Peter Kreuser wrote: Chris, > Am 05.08.2021 um 18:32 schrieb Rob Sargent : > > >> Caused by: java.lang.IllegalArgumentException: No SSLHostConfig >>element was found with the hostName [_default_] to match the >>defaultSSLHostConfigName for the connector [https-jsse-nio-9443] >> > The ssl-Options are not attributes on the connector, but the SSLHostConfig http://tomcat.apache.org/tomcat-10.0-doc/config/http.html#Common_Attributes http://tomcat.apache.org/tomcat-10.0-doc/config/http.html#SSL_Support Peter > Isn’t that the real issue? > > > - > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org >
vvodd mod_jk problem
Hello I have a working mod_jk on w2ksrv that works perfectly to tc5.5.17. The very odd thing is that I had to rebuild the system with a different drive and fully updated patches for the os. The odd part is that with the identical software, apache, tc, nics, etc. the system fails. Further the working version always tried to connect apache to tomcat on port 1612 and worked. Now the new system only tries on 1456 and fails. This is very wierd to me. There is no place I can tell apache/mod_jk which port to connect on. Of course apache connects perfectly if everything is done as localhost and not out through the internet first. Ideas? I hate to have to hire covalent. - Talk is cheap. Use Yahoo! Messenger to make PC-to-Phone calls. Great rates starting at 1¢/min.
Re: Separate JVM's for TOMCAT
* [EMAIL PROTECTED] wrote (23/06/06 09:50): > Hi , > Can anyone tell me how to make two separate JVM of a single installation > of tomcat server. > Remember I dont want different context , but tow separate JVM , is it > possible ? > Or tomcat will only be the solution ? You can use the badly-documented CATALINA_BASE environment variable. It's mentioned on this page: http://tomcat.apache.org/tomcat-5.5-doc/appdev/deployment.html but the best documentation is probably in comments in the catalina.sh script. The way it works is reasonably straightforward. The "base" directory contains subdirs for conf, logs, webapps, and work (and temp, normally). CATALINA_HOME is the same for all instances, and contains subdirs for bin, common, and shared. You can use catalina.sh (or .bat) with different CATALINA_HOME settings to start/stop your different instances. Chris - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Separate JVM's for TOMCAT
* Chris Lear wrote (23/06/06 10:09): > * [EMAIL PROTECTED] wrote (23/06/06 09:50): >> Hi , >> Can anyone tell me how to make two separate JVM of a single installation >> of tomcat server. >> Remember I dont want different context , but tow separate JVM , is it >> possible ? >> Or tomcat will only be the solution ? > > You can use the badly-documented CATALINA_BASE environment variable. > > It's mentioned on this page: > http://tomcat.apache.org/tomcat-5.5-doc/appdev/deployment.html > but the best documentation is probably in comments in the catalina.sh > script. > > The way it works is reasonably straightforward. The "base" directory > contains subdirs for conf, logs, webapps, and work (and temp, normally). > CATALINA_HOME is the same for all instances, and contains subdirs for > bin, common, and shared. You can use catalina.sh (or .bat) with > different CATALINA_HOME settings to start/stop your different instances. I meant different CATALINA_BASE settings, of course. CATALINA_HOME should always be the same. Sorry about that. Chris - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
url encoding of % in path info part
I seem to have some odd behaviour on tomcat 4.0.x - I know this is an old version - we're not the only app running underneath it and one of the others doesn't support later versions :( We have a servlet which matches the url pattern /html/* In this servlet we first tracelog that we enter the doGet and then call getPathInfo() to get the rest of the info. Now - this works very well apart from this one issue. If the path info part of the URL contains a % /app/html/foo/bar+5%/baz then tomcat (correctly as far as I can see) throws a 400 error about syntax. So - we url encode the % /app/html/foo/bar+5%25/baz Now - tomcat no longer errors - nothing in catalina logs - but - the doGet method on the servlet no longer gets called at all. Any info on why this is happening (false assumption on my part, bug in tomcat, bug in my code, bug in url encoding etc)? Totally lost at this end. Encoding other chars (e.g. øæå) seems to work just fine. Chris - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: How to do the precompilation on jsp
* Raju Balugu wrote (03/08/06 10:14): Hi All, We are using the clearcase for version control(vob).My requirement is like..I need to do the precompilation before going to ran a build?is there any utilities in tomcat end or third partys.(as the jasper-compiler is so fast we are palning to do this).please share your experience on precompile the jsp files There's an ant task for this (if I've understood you). See http://tomcat.apache.org/tomcat-4.1-doc/jasper-howto.html#Web%20Application%20Compilation Chris - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: How to do the precompilation on jsp
* Chris Lear wrote (03/08/06 11:48): * Raju Balugu wrote (03/08/06 10:14): Hi All, We are using the clearcase for version control(vob).My requirement is like..I need to do the precompilation before going to ran a build?is there any utilities in tomcat end or third partys.(as the jasper-compiler is so fast we are palning to do this).please share your experience on precompile the jsp files There's an ant task for this (if I've understood you). See http://tomcat.apache.org/tomcat-4.1-doc/jasper-howto.html#Web%20Application%20Compilation Or, slightly more up to date: http://tomcat.apache.org/tomcat-5.5-doc/jasper-howto.html#Web%20Application%20Compilation - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: multiple instances of tomcat
* Pratap Parne wrote (03/08/06 15:50): how to setup and deploy applications on multiple instances of tomcat on a single box.can anyone give me the steps to do that You need to use different CATALINA_BASE variables for the different instances. It's badly documented (in my opinion), but you can try here: http://www.google.co.uk/search?q=+site%3Atomcat.apache.org+tomcat+catalina_base And read the comments in catalina.sh (or catalina.bat) Basically, you need to set CATALINA_BASE to a directory that contains directories called conf, logs, temp, and webapps. A work directory will be created there as well. You can have several of these. The bin, common, server, and shared directories should all be in the directory that CATALINA_HOME points to. You need only one of these. Then make sure your different tomcats don't try to bind to the same ports, and you're away. Chris - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Is there a way so specify a wildcard in host/alias to avoid dealing with bunch of virtual hosts?
* David Gagnon wrote (03/08/06 17:12): Hi all, I have a lot of virtual hosts on my network. I need all of them to access the same application on a tomcat 5.5. I know there are the ALIAS directive in server.xml but the problem is that new virtual host may be added when the application is running and I don't want to manually manage them. So is there a way to have a host/application that will accept request from any virtual host? I checked the code in Mapper.java and there is no use of wildcard there. Like: c1.toto.com c2.toto.com c3.toto.com c4.toto.com Is there any solution ? Thanks for the help! In server.xml something like should do it. The defaultHost tells tomcat what to do with requests to hostnames that aren't otherwise mapped. Chris - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: FYI tomcat 100% load SSL
* Oscar Mechanic wrote (07/08/06 12:04): > For those of you who ever have this problem > > Symptoms > > 1) Cannot connect to tomcat after a period of time > 2) Heavy load on startup > 3) Various strangeness with SSL certs e.g. WEB browsers reject > certs/incomplete TLS handshake > > Observed case > > Tomcat version we tried jakarta-tomcat-5.0.12 and jakarta-tomcat-5.5.17 > we are using openssl to generate certs. OS is linux 2.6.17 (Newest) on > our own distribution. After reboot tomcat works fine modprobe random and > we cannot connect to tomcat on SSL ports and the load goes high. > > We dont know where the problem lies i.e. in kernel/distro/tomcat/java > but one check you might think of taking if you see similar difficulties. > Is to reboot without random module or rmmod and restart tomcat. We also > tried 1.4 to 1.5_02 & 1.5_06 and still the same problem. > > Sorry I cant be more specific but I am behind my deadline and its > working now. So no more /dev/random for this release. Been at this for a > few days. /dev/random blocks if it doesn't have enough entropy to produce randomness. /dev/urandom doesn't, but is a bit less random as a result. Some people link /dev/random to /dev/urandom to get round the problem. But you can tell java to use urandom via a command-line switch (-Djava.security.egd=file:/dev/urandom). This could be the cause of the bug observed here. This might also be interesting: http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=4705093 Chris - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Strange error referencing JRE when integrating with MyEclipse
Hey everyone... Quick question that will probably take 5 seconds to answer... I'm using the following configuration: - Tomcat 5.5 - MyEclilpse 5.0 (Eclipse 3.2) - J2sdk1.4.2_12 I set MyEclipse to point at the 1.4 version of the JDK (the only one on my system as far as I can tell). When I try to startup the server from Eclipse, I get the following error: This release of Apache Tomcat was packaged to run on J2SE 5.0 or later. It can be run on earlier JVMs by downloading and installing a compatibility package from the Apache Tomcat binary download page. I'm a bit confused as to why it's giving me this error - since Tomcat appears to be running fine on my machine (I can access localhost:8080/ just fine). Any ideas? Thanks, Chris
RE: Strange error referencing JRE when integrating with MyEclipse
I don't have any other versions of Tomcat running - I do have Apache 2.2 running in the background, though. I'll give the compatibility package a shot (we have to use the JDK 1.4 because we're using a third-party ECM suite that needs that particular version). I assume I can't install both on the same machine? From: Steve Ochani [mailto:[EMAIL PROTECTED] Sent: Tuesday, August 08, 2006 11:48 AM To: Chris Styduhar; Tomcat Users List Subject: Re: Strange error referencing JRE when integrating with MyEclipse > Hey everyone... > > > > Quick question that will probably take 5 seconds to answer... I'm > using the following configuration: > > > > - Tomcat 5.5 > > - MyEclilpse 5.0 (Eclipse 3.2) > > - J2sdk1.4.2_12 > > > > I set MyEclipse to point at the 1.4 version of the JDK (the only one > on my system as far as I can tell). When I try to startup the server > from Eclipse, I get the following error: > > > > This release of Apache Tomcat was packaged to run on J2SE 5.0 > > or later. It can be run on earlier JVMs by downloading and > > installing a compatibility package from the Apache Tomcat > > binary download page. > > > > I'm a bit confused as to why it's giving me this error - since Tomcat > appears to be running fine on my machine (I can access localhost:8080/ > just fine). > Are you sure you don't already have an instance of tomcat running, that is not 5.5. >From my readings TC 5.5 does need java 5/ jdk 1.5 but as the error states you can use tc 5.5 with a "compatibility package", which are a set of files that you can download from the same page where tc 5.5 is downloaded from.
RE: Apache + Tomcat configuration: static / dynamic content (with ROOT application deployed)
Place the static content in Apache in the directories that would be
referenced by Tomcat. The way you did it will work but it is not
recommended especially if you would like to deploy WAR files quickly and
the static content does not change often. You can deploy the files to a
different document root in apache and this solution will still work.
You were close in what you needed to do. You are only missing a few
entries
JkUnmount /images/
JkUnmount /webappA/images/
JkUnmount /webappB/images/
Jkmount will include an entire tree.
Jkunmount excludes parts of the directory tree.
-Original Message-
From: Hua Hou [mailto:[EMAIL PROTECTED]
Sent: Wednesday, August 30, 2006 10:11 AM
To: tomcat-user@jakarta.apache.org; users@tomcat.apache.org
Subject: Apache + Tomcat configuration: static / dynamic content (with
ROOT application deployed)
I think this question had been asked before. But when I searched the
tomcat user group, I don't find a satisfactory answer.
Here is my question: How to configure Apache & Tomcat so that Apache
handles static content for virtual host with more than one web
applications?
My web application directories are as following:
/webapps/
/webapps/webappA/
/webapps/webappB/
/webapps/ROOT/
I have three web applications (contexts): the default(""),
webappA("/webappA"), and webappB("/webappB"). Each application has both
static content and dynamic content (JSP/servlet).
in Apache httpd.conf, I have the following virtual host definition:
NameVirtualHost *:80
ServerName www.myserver.com
DocumentRoot "F:/Tomcat5.5/webapps"
JkMount /servlet/* worker1
JkMount /*.jsp worker1
With this configuration, everything works, except that the static
content for the default application (/ROOT) can't be loaded by Apache
because Apache can't find the content.
If I change the DocumentRoot to:
DocumentRoot "F:/Tomcat5.5/webapps/ROOT"
The static content for the default application can be loaded by Apache,
but the static content for the other two web apps can't be loaded
(outside of DocumentRoot).
How can I configure virtual host so that the above problem can be
solved?
I did figure out a workaround, here it is:
NameVirtualHost *:80
ServerName www.myserver.com
DocumentRoot "F:/Tomcat5.5/webapps/ROOT"
Alias /webappA/ F:/Tomcat5.5/webapps/webappA
Alias /webappB/ F:/Tomcat5.5/webapps/webappB
JkMount /servlet/* worker1
JkMount /*.jsp worker1
With the above configuration, all static / dynamic content for all the
three web apps can be loaded properly. However, is this a standard /
recommended configuration?
Your help will be greatly appreciated!
Best Regard,
Hua Hou
-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
RE: Moving to JBoss
You should be able to migrate all your apps with little and generally no changes. It really depends on the options you used to build your apps. If it is too Tomcat specific (generally with db access) you may have to make some modifications to your data access layer. Best thing to try is drop your war's in the default/deploy directory and your required libs in default/lib and try it out. -Original Message- From: Jim Weir [mailto:[EMAIL PROTECTED] Sent: Saturday, September 16, 2006 1:49 PM To: users@tomcat.apache.org Subject: Moving to JBoss I have an webapp that requires a J2EE app server and I was looking at JBOSS because it has Tomcat as the servlet engine, I am hoping it would be easy to migrate all my webapps over. I have Apache with the JK connector. Does anyone know the simplest way to do it? Thanks, Jim _ Got something to buy, sell or swap? Try Windows Live Expo ttp://clk.atdmt.com/MSN/go/msnnkwex001001msn/direct/01/?href=http:// expo.live.com/ - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Help with Tomcat Clustering and load balancing
You'll probably want to use mod_proxy_ajp I've had pretty good success with it. I'm not sure why you would be using an active-hot standby-hot standby instead of active-active-hot standby but who am I to judge =o) Get a configuration working with it first on one server then work towards the hot stand bys Your apache load balancing config will look like this if you want to use mod_proxy_ajp: ServerName www.mydomain.com DocumentRoot /www/www.mydomain.com/html ReWriteEngine on # will preserve the host name in the request so you can use virtual # domains on the apache side ProxyPreserveHost On # prevents reverse proxying ProxyRequests Off ProxyVia Off # proxy rewrite rule ProxyPass / balancer://hotcluster/ BalancerMember ajp://1.2.3.4:8009 loadfactor=1 # The below servers are the hot standbys BalancerMember ajp://1.2.3.5:8009 status=+H BalancerMember ajp://1.2.3.6:8009 status=+H ProxySet lbmethod=bytraffic You can also use straight up mod_proxy by changing the ajp:// references to http:// and change the ports 8009 to 8080. I believe if you do so it will not scale as well because the AJP interface transfers data from Tomcat to Apache HTTP via a binary format versus the straight up text interface. Hope this helps, Chris Berthold -Original Message- From: Anil Ranka [mailto:[EMAIL PROTECTED] Sent: Thursday, September 28, 2006 9:50 AM To: users@tomcat.apache.org Subject: Help with Tomcat Clustering and load balancing Hi All, I am new with Tomcat Clustering feature. I have configured my three tomcats nodes in cluster mode and they are talking to each other no issues. Out these three nodes N1, N2 and N3 only one node will be ACTIVE node and rest two will be PASSIVE. ACTIVE means my app will be loaded on only one node. When this ACTIVE node goes down, using clustering mechanism I am able to load my APP on next node from list. This scenario works very well. NO ISSUES!!! Now to out side world I have to give URL so that they can submit jobs to this clustered nodes. Here I get lost. I am assuming I need load balancer/proxy will which will route my request to ACTIVE node. My question is : How to configure load balancer/proxy server to rote my request to any specific ACTIVE node. I tries tomcat web apps load balance, it does url redirect and I loose my request data. Any help/pointer will be highly appreciated. Thanks Anil S. Ranka - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Help with Tomcat Clustering and load balancing
What version of apache are you using? -Original Message- From: Anil Ranka [mailto:[EMAIL PROTECTED] Sent: Thursday, September 28, 2006 3:37 PM To: Tomcat Users List Subject: Re: Help with Tomcat Clustering and load balancing Hi, I have tried your suggestion, When I run my apache on windows env, I am getting following error BalancerMember Unknow status parameter option for line : BalancerMember ajp://1.2.3.5:8009 status=+H Any clue. Thanks Anil S. Ranka On 9/28/06, Chris Berthold <[EMAIL PROTECTED]> wrote: > > You'll probably want to use mod_proxy_ajp I've had pretty good success > with it. I'm not sure why you would be using an active-hot standby-hot > standby instead of active-active-hot standby but who am I to judge =o) > > Get a configuration working with it first on one server then work > towards the hot stand bys > > Your apache load balancing config will look like this if you want to use > mod_proxy_ajp: > > > ServerName www.mydomain.com > DocumentRoot /www/www.mydomain.com/html > > ReWriteEngine on > > # will preserve the host name in the request so you can use virtual > # domains on the apache side > ProxyPreserveHost On > # prevents reverse proxying > ProxyRequests Off > ProxyVia Off > > # proxy rewrite rule > ProxyPass / balancer://hotcluster/ > > > > BalancerMember ajp://1.2.3.4:8009 loadfactor=1 > # The below servers are the hot standbys > BalancerMember ajp://1.2.3.5:8009 status=+H > BalancerMember ajp://1.2.3.6:8009 status=+H > ProxySet lbmethod=bytraffic > > > > > You can also use straight up mod_proxy by changing the ajp:// references > to http:// and change the ports 8009 to 8080. I believe if you do so it > will not scale as well because the AJP interface transfers data from > Tomcat to Apache HTTP via a binary format versus the straight up text > interface. > > Hope this helps, > Chris Berthold > > -Original Message- > From: Anil Ranka [mailto:[EMAIL PROTECTED] > Sent: Thursday, September 28, 2006 9:50 AM > To: users@tomcat.apache.org > Subject: Help with Tomcat Clustering and load balancing > > Hi All, > > I am new with Tomcat Clustering feature. I have configured my three > tomcats nodes in cluster mode and they are talking to each other no > issues. > Out these three nodes N1, N2 and N3 only one node will be ACTIVE node > and > rest two will be PASSIVE. ACTIVE means my app will be loaded on only one > node. When this ACTIVE node goes down, using clustering mechanism I am > able > to load my APP on next node from list. This scenario works very well. > > NO ISSUES!!! > > Now to out side world I have to give URL so that they can submit jobs to > this clustered nodes. Here I get lost. I am assuming I need load > balancer/proxy will which will route my request to ACTIVE node. > > My question is : How to configure load balancer/proxy server to rote my > request to any specific ACTIVE node. > > I tries tomcat web apps load balance, it does url redirect and I loose > my > request data. > > Any help/pointer will be highly appreciated. > > Thanks > Anil S. Ranka > > - > To start a new topic, e-mail: users@tomcat.apache.org > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Help with Tomcat Clustering and load balancing
I replied to your direct message but important for the list. The hot standby feature was added in 2.2.4 development, my bad, its already in the docs too. I've never used it so I'm not quite sure how you would do the hot stand by on 2.2.3 or older with the mod_proxy load balancer. You can use mod_jk which does provide those features. I stopped using mod_jk because it doesn't work properly with my firewall that segregates my segments. One dropped connection a boom mod_jk gets confused. -Original Message- From: Anil Ranka [mailto:[EMAIL PROTECTED] Sent: Thursday, September 28, 2006 3:56 PM To: Tomcat Users List Subject: Re: Help with Tomcat Clustering and load balancing Chris, I am using Apache 2.2.3 on Windows XP. D:\sam\apache\Apache2.2\bin>httpd.exe -v Server version: Apache/2.2.3 Server built: Jul 27 2006 16:49:49 Thanks Anil S. Ranka On 9/28/06, Chris Berthold <[EMAIL PROTECTED]> wrote: > > What version of apache are you using? > > -Original Message- > From: Anil Ranka [mailto:[EMAIL PROTECTED] > Sent: Thursday, September 28, 2006 3:37 PM > To: Tomcat Users List > Subject: Re: Help with Tomcat Clustering and load balancing > > Hi, > I have tried your suggestion, When I run my apache on windows env, I > am > getting following error > > BalancerMember Unknow status parameter option > > for line : BalancerMember ajp://1.2.3.5:8009 status=+H > > Any clue. > > Thanks > Anil S. Ranka > > On 9/28/06, Chris Berthold <[EMAIL PROTECTED]> wrote: > > > > You'll probably want to use mod_proxy_ajp I've had pretty good success > > with it. I'm not sure why you would be using an active-hot > standby-hot > > standby instead of active-active-hot standby but who am I to judge =o) > > > > Get a configuration working with it first on one server then work > > towards the hot stand bys > > > > Your apache load balancing config will look like this if you want to > use > > mod_proxy_ajp: > > > > > > ServerName www.mydomain.com > > DocumentRoot /www/www.mydomain.com/html > > > > ReWriteEngine on > > > > # will preserve the host name in the request so you can use virtual > > # domains on the apache side > > ProxyPreserveHost On > > # prevents reverse proxying > > ProxyRequests Off > > ProxyVia Off > > > > # proxy rewrite rule > > ProxyPass / balancer://hotcluster/ > > > > > > > > BalancerMember ajp://1.2.3.4:8009 loadfactor=1 > > # The below servers are the hot standbys > > BalancerMember ajp://1.2.3.5:8009 status=+H > > BalancerMember ajp://1.2.3.6:8009 status=+H > > ProxySet lbmethod=bytraffic > > > > > > > > > > You can also use straight up mod_proxy by changing the ajp:// > references > > to http:// and change the ports 8009 to 8080. I believe if you do so > it > > will not scale as well because the AJP interface transfers data from > > Tomcat to Apache HTTP via a binary format versus the straight up text > > interface. > > > > Hope this helps, > > Chris Berthold > > > > -Original Message- > > From: Anil Ranka [mailto:[EMAIL PROTECTED] > > Sent: Thursday, September 28, 2006 9:50 AM > > To: users@tomcat.apache.org > > Subject: Help with Tomcat Clustering and load balancing > > > > Hi All, > > > > I am new with Tomcat Clustering feature. I have configured my three > > tomcats nodes in cluster mode and they are talking to each other no > > issues. > > Out these three nodes N1, N2 and N3 only one node will be ACTIVE node > > and > > rest two will be PASSIVE. ACTIVE means my app will be loaded on only > one > > node. When this ACTIVE node goes down, using clustering mechanism I am > > able > > to load my APP on next node from list. This scenario works very well. > > > > NO ISSUES!!! > > > > Now to out side world I have to give URL so that they can submit jobs > to > > this clustered nodes. Here I get lost. I am assuming I need load > > balancer/proxy will which will route my request to ACTIVE node. > > > > My question is : How to configure load balancer/proxy server to rote > my > > request to any specific ACTIVE node. > > > > I tries tomcat web apps load balance, it does url redirect and I loose > > my > > request data. > > > > Any help/pointer will be highly appreciated. > > > > Thanks > > Anil S. Ranka > > > > - > > To start a new topic, e-mail: users@tomcat.apache.org > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > For additional commands, e-mail: [EMAIL PROTECTED] > > > > > > - > To start a new topic, e-mail: users@tomcat.apache.org > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Tomcat / CPanel
If you are using Apache and mod_jk as a frontend to Tomcat, mod_rewrite doesn't work. In my limited experience, mod_rewrite seems to handle the request AFTER mod_jk, therefore the rewritten URLs get handled by apache and a 404 is displayed. I found a way around it by writing a simple Filter, matched requests are then rewritten by a regular expression before the request dispatcher is called to redirect to the correct URL. I can't help you with CPANEL though, sorry. Regards, Chris. On 27 Oct 2005, at 06:12, enLogica wrote: Does anyone know if Tomcat is Compatible with CPanel? And if so, is it a reasonable production server configuration? One additional semi-related question. I have been told that apache has a mod_rewrite which is great for masking querystring-driven urls and turning them into more search-engine friendly urls (e.g. xyz.com/?page=123 would become xyz.com/123.htm). Does anyone know if this Apache mod is compatible with cPanel as well? Thanks. Neal - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - Chris Birch www.axonbirch.com mailto:[EMAIL PROTECTED] Tel: 0845 125 9427 Fax: 0161 491 4031 Axon Birch, PO Box 139, Cheadle, SK8 4XL Axon Birch - Making Software Simple. - - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Deploying WAR to a context path
Hi, I know there are several different ways to do what I want but I would like to be able to do it this way so there are fewer errors at 1AM. Is there a way to make the HTML interface of the Tomcat 5.5 manager (/manager/html) deploy a war file to a specific context path? I have tried playing around with context.xml but Tomcat seems to only care about the directory the war (and the war file's name) is deployed to. I know if you use the "Deploy directory or WAR file located on server" section instead of the "WAR file to deploy" section you can manually do it. The code supports what I want to do: that is upload a war and tell it which context path, but it just seems like the web interface doesn't support it. Is there some simple way to force it to deploy to a context path that is different to the war file name? (other than what i mentioned above) Thanks, Chris
default TC4+ security and tips
Hello If I have changed the default admin & manager passwords and have a personal firewall preventing anything other than http & http:8080 access, is it still possible for people to view the tomcat-users.xml file? With only those two protocols open (plus udp 53 for dns)it should be impossible. What is the best practice for running TC "hardened"? Run it as a seperate user with read only? To implement jaas/how? Any recommendations, url would be appreciated. tia. __ Start your day with Yahoo! - Make it your home page! http://www.yahoo.com/r/hs - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
default security w/TC4+ tips
Hello If I have changed the default admin & manager passwords and have a personal firewall preventing anything other than http & http:8080 access, is it still possible for people to view the tomcat-users.xml file? With only those two protocols open (plus udp 53 for dns)it should be impossible. What is the best practice for running TC "hardened"? Run it as a seperate user with read only? To implement jaas/how? Any recommendations, url would be appreciated. tia. __ Yahoo! Mail - PC Magazine Editors' Choice 2005 http://mail.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
ssl deployment recommendations
Hello I am setting up a cc processing component of my application. Can anyone recommend how to deploy the ssl layer? Do I do it from Tomcat w/Struts ssl? I assume that would require me to config Tomcat to send out over 443. Do I configure ssl at the Apache layer and use mod jk? This will leave the cc# exposed between Apache & Tomcat. Is that a problem? I am a newbie on this so any insight would be appreciated. __ Yahoo! Mail - PC Magazine Editors' Choice 2005 http://mail.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: ssl deployment recommendations
Hi Hassan Sorry I was not clear. It is for inbound connections to client browsers. Where do I begin? I assume I need to front it with Apache which means modjk, correct? tia. --- Hassan Schroeder <[EMAIL PROTECTED]> wrote: > Chris Pat wrote: > > > I am setting up a cc processing component of my > > application. Can anyone recommend how to deploy > the > > ssl layer? > > I'm not sure what your question is; are you talking > about setting > up Tomcat to use SSL for inbound connections, or > doing encrypted > *outbound* requests from your app to an > authorization gateway? > > -- > Hassan Schroeder - > [EMAIL PROTECTED] > Webtuitive Design === (+1) 408-938-0567 === > http://webtuitive.com > > dream. code. > > > > - > To unsubscribe, e-mail: > [EMAIL PROTECTED] > For additional commands, e-mail: > [EMAIL PROTECTED] > > __ Yahoo! Music Unlimited Access over 1 million songs. Try it free. http://music.yahoo.com/unlimited/ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Reading users.xml without restarting Tomcat
> From: Roland Rabben [mailto:[EMAIL PROTECTED] > Hi, > To the best of my knowledge I must restart Tomcat to be able to read > changes made to the "users.xml" file. Is there an API (or another way) > that forces Tomcat to read the "users.xml" file without restarting > Tomcat? Try the admin servlet, that allows you to make changes to your user/group definitions and apply the changes without taking tomcat down. cheers, Chris - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Sharing session across http and https connections
Hi, I'm sure this has been solved and documented already but I can't find any information, if anyone can help me or point me in the right direction, I'd be very grateful. I have an Apache->mod_jk->Tomcat installation. I'm running two sites on Apache for the same domain but one is HTTP and the other is HTTPS. I'd like to be able to share a java user session across both the HTTP and HTTPS requests from a single user but a separate session is created for the secure and unsecure connection. Does anyone know how to have a single session for a user regardless of whether they are connecting to the application via the secure or unsecure route? Many Thanks, Chris. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Sharing session across http and https connections
Thanks for pointing out the gotcha Nick. The sites are both running on the same server, so I'll follow Tim's suggestion. Many Thanks for your responses, Chris. On 29 Nov 2005, at 17:24, Duan, Nick wrote: You can't do this if both sites are on different machines since tomcat user ID (defined as a cookie by default), is tied to an url. If both sites are on different machines, you may have to use url-rewritting for session tracking instead of using the default cookies. ND -Original Message----- From: Chris Birch [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 29, 2005 11:57 AM To: Tomcat Users List Subject: Sharing session across http and https connections Hi, I'm sure this has been solved and documented already but I can't find any information, if anyone can help me or point me in the right direction, I'd be very grateful. I have an Apache->mod_jk->Tomcat installation. I'm running two sites on Apache for the same domain but one is HTTP and the other is HTTPS. I'd like to be able to share a java user session across both the HTTP and HTTPS requests from a single user but a separate session is created for the secure and unsecure connection. Does anyone know how to have a single session for a user regardless of whether they are connecting to the application via the secure or unsecure route? Many Thanks, Chris. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: SSL Certificate Beginner Question
* Bill Barker wrote (30/11/05 05:42): > "Scott Purcell" <[EMAIL PROTECTED]> wrote in message > news:[EMAIL PROTECTED] >> Real helpful ... I searched on SRV.12 and it brought up a bunch of links >> that have nothing to do with Tomcat config of SSL. >> >> I probably posted a lame request. Let me try again. >> >> I have purchased a certificate via Verisign, and I have installed the >> certificate into a keystore. I am running Windows XP and Tomcat 5.5.12. >> I put the keystore and Cert.cer in the Tomcat/bin directory for >> organiation. >> I read that the default is usually in the home directory where tomcat is >> installed on Unix. But that is another OS. >> >> I followed the docs here under Tomcat 5 SSL and ran across this: >> http://tomcat.apache.org/tomcat-5.5-doc/ssl-howto.html >> > > There are two likely problems, but I don't know which one applies to you. > > 1) Since you are using 5.5.12, if you installed the libtcnative.dll with > Tomcat, then you need to configure SSL via > http://tomcat.apache.org/tomcat-5.5-doc/apr.html. In particular, you need > to extract the private-key into an OpenSSL format. Alternatively, you can > rename the dll for now, and work on just getting the Java Connector working. > > 2) You imported your cert into a different keystore file than the one that > use used to generate the CSR. Import the cert into the original one and you > will be fine. If you used OpenSSL to generate the CSR, than the easiest is > to convert to a pkcs12 keystore as described above. Alternatively, you can > try using http://www.comu.de/docs/tomcat_ssl.htm. > 3) (Maybe a long shot) Windows xp firewall is blocking the port. Does netstat -ln show anything listening on port 8443? Do the tomcat logs mention port 8443? - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Apache 2.2 and mod_proxy_ajp
* Jess Holle wrote (02/12/05 13:53): > I have some vague recollection that performance of mod_proxy_ajp tested > just /slightly /better than mod_jk. But where is the information on this? I joined this list a few days ago after Googling like crazy for information on the most sensible and supported way to connect apache to tomcat (or whether to drop it and just use the http connector). In the end, I'm using mod_jk, because I couldn't find *anything* helpful on the web about configuring or using mod_proxy_ajp, apart from some theoretical examples that tended to be incompatibile with one another. The only thing people seem to agree on is that mod_jk2 is no use, though that had the option of unix sockets, which I would have thought would be a good thing. I might revert to using the http connector. The reasons for not doing this are: 1) I want apache to do SSL, 2) I don't want to run tomcat as root, and using local port forwarding is a hassle, and 3) there's a bit more flexibility in the apache route. Chris > > Tim Funk wrote: > >> Performance (IIRC while reading on the mailing lists) is about the >> same. mod_proxy_ajp should be easier to configure and install since it >> comes bundled with apache and it should be much easier to install than >> jk. >> >> - >> To unsubscribe, e-mail: [EMAIL PROTECTED] >> For additional commands, e-mail: [EMAIL PROTECTED] > > - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
TC 5 ssl not starting up
Hello I have BOTH TC4 & TC5 running and it works fine for http. I have followed the apache docs and created a keystore with all the defaults that exists in c:\winnt\profiles\adminstrator I made the changes below and even after server restart and url of https://localhost:9443 cannot get to start. Can anyone answer what I am doing wrong? tia __ Yahoo! DSL Something to write home about. Just $16.99/mo. or less. dsl.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
TC 5 ssl not starting for me
Hello I have BOTH TC4 & TC5 running and it works fine for http. I have followed the apache docs and created a keystore with all the defaults that exists in c:\winnt\profiles\adminstrator I made the changes below and even after server restart and url of https://localhost:9443 cannot start. Can anyone answer what I am doing wrong? tia __ Yahoo! DSL Something to write home about. Just $16.99/mo. or less. dsl.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Compiling JSPs - how to ignore files with certain extensions.
I have a web app structured as follows: myapp/footer.jspf myapp/header.jspf myapp/index.jsp myapp/taglibs.jspf myapp/WEB-INF/... I would like to add a target to my Ant build.xml to precompile the JSPs, so that I can check they do not reference any unknown custom tags. However, JspC appears to be trying to compile the files ending in ".jspf" as well as ".jsp". This is causing the compile to fail, as the jspf files are fragments that are included into index.jsp: <%@ include file="taglibs.jspf" %> do some stuff that might result in redirects ... <%@ include file="header.jspf" %> body of the page ... <%@ include file="footer.jspf" %> The taglibs fragment contains the taglib definitions common to all my pages, while the header and footer contain "boilerplate" HTML common to all my pages. Is there anyway to prevent JspC from attempting to compile the fragment files? I can see in the JspC JavaDocs that you can list and add extensions that will get compiled, but not remove them. Chris - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Compiling JSPs - how to ignore files with certain extensions.
Tim Funk wrote: What tomcat version and commands are you using? IIRC - jspf files by default are not precompiled. I started with Tomcat 5.0.30, but have switched to 5.5.12. The ant targets that I am using is similar to the ones in the Tomcat docs: The "build" target that "init-jsp" depends on builds my Java code and places it into myapp/WEB-INF/classes. When I run "ant build-jsp" it fails on the line with the following: BUILD FAILED /home/chris/myapp/WEB-INF/build.xml:470: org.apache.jasper.JasperException: file:/home/chris/myapp/header.jspf(49,74) The attribute prefix fn does not correspond to any imported tag library However, in taglibs.jspf, the functions JSTL is included and the jar file is in myapp/WEB-INF/lib. This is why I suspect that JspC is trying to compile header.jspf. Chris - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Compiling JSPs - how to ignore files with certain extensions.
Tim Funk wrote: I suspect that you have a file which includes header.jspf - and that parent file is not including the fn tag lib. (The (potentially) bad error message is another issue) -Tim Yes, there was one file with a .jsp extension that didn't include taglibs.jspf before header.jspf. Now the JspC task causes the JVM to run out of memory (java.lang.OutOfMemoryError), but it's not complaining about header.jspf anymore! Chris - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Compiling JSPs - how to ignore files with certain extensions.
Tim Funk wrote: For the OOM error - you might want to add compile="false" to your jsp2 task so compilation is not done. (.tag files still end up being compiled but thats a different issue) Then for your javac task add (increase as appropriate) fork='true' memoryInitialSize='192m' memoryMaximumSize='356m' Many thanks. Your suggestions (and a bit of fiddling with ulimit) fixed the out of memory error. Chris - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Question concerning java.lang.NoClassDefFoundError: javax/servlet/ServletContext
NoClassDefinition errors are normally thrown if the class or JAR isn't
in the classpath, the only other time this happens is when the
ClassLoader isn't able to load the class path because an exception is
thrown on any static initialisers.
(This is conjecture...) It may be the ServletContext has a static { ...
} block that is throwing an error for some reason, the class can't be
loaded and is therefore not available, hence the NoClassDefinition
found error.
However, I don't understand why your code is moaning about
ServletContext when it doesn't look like you are anywhere near it.
Kind Regards,
Chris.
On 6 Dec 2005, at 17:44, Armand Rock wrote:
Hello David,
I included all jar & zip files on my computer, including j2ee.jar and
I'm
still having the problem.
I have just noticed a weird behaviour though, if I try to reload the
jsp
right after the jsp fails the first
time it seems to run without throwing the exception. If I restart
Tomcat
and try again the problem starts
again. I could get this to work in theory by forcing it to run
through the
code once on startup
but I shouldn't have to do that and I honestly would prefer getting it
to
work as it should.
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Re: Problems ip based virtual hosting apache2+tomcat5.0.19
* Jens Werdin wrote (14/12/05 15:28): > Hi all, > > I have an apache 2.0.49 with some ip based virual hosts. > What i try to do is giving each virtual host its own webapplication. > > Apache and tomcat are working. its working if I try with localhost. > when i try the ip address of a virtual hosts i always get the answer. > "no host matches server name 192." > What i tried so far is configuring a worker for each host, a connector for > each worker and a host with name="192." > > in detail: > worker.worker4.host=192.168.2.124 > worker.worker4.port=8124 > > > > Try something like this rather abbreviated example: Warning: not tested. I've only ever used one service in each tomcat instance. I run a different tomcat instance for each IP address. Tomcat needs the defaultHost to be set, or it tends to refuse to talk when no name matches. Getting different defaults for different IP addresses will need separate services. You could run them on the same IP address but different ports instead of different addresses - it would come to the same thing. Chris - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
multiple Tomcat5 service-how
Hello I have three sites I want to publish w/cc transactions with Tomcat5. Is it possible to do it with one installation of TC and three separate certificates and three separate static IPs? I assume I would create three Services. However I cannot see where to hardcode in the specific IP and where designate a different webapps directory for each Service. Is this really only possible with modjk2 and Apache? tia. __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: multiple Tomcat5 service-how
* Chris Pat wrote (14/12/05 17:25): > Hello > I have three sites I want to publish w/cc transactions > with Tomcat5. Is it possible to do it with one > installation of TC and three separate certificates and > three separate static IPs? > > I assume I would create three Services. However I > cannot see where to hardcode in the specific IP and > where designate a different webapps directory for each > Service. The IP address goes into the connector. It's called address. The webapps directory is set in the host. It's called appBase. Have a look at http://tomcat.apache.org/tomcat-5.5-doc/config/ for all the options. eg: Chris - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: URL rewiting best practise?
Hi Kris, I found that I couldn't use mod_rewrite infront of mod_jk on apache. It seems that mod_jk handles matching requests before mod_rewrite, therefore a transformed request never gets the chance to be processed by mod_jk again and a 404 is always thrown. To get around this, I wrote my own (very simple) web application filter which you can download and use as you wish: http://www.axonbirch.com/java/SearchEngineFriendlyFilter.java This means that the java application does the rewriting. It's not terribly efficient, I'm sure many improvements could be made and if you have some feedback or improvements to make, they would be gratefully received. Kind Regards, Chris. On 15 Dec 2005, at 10:37, Kristian Rink wrote: Hi all; currently I'm into deploying a small jsp/servlet based application which more or less utilizes a dispatcher servlet to provide .jsp-based content. For that, I'm into using URLs like http://foobar:8080/Site?path=home/users to, in example, show the site section "home -> users". For now, I'd like to do URL rewriting in order to provide users with an URL like http://foobar:8080/home/users or maybe http://foobar:8080/Site/home/users to see the same content. My initial idea was to use apache, mod_jk and mod_rewrite to do right this, but don't feel too good about that idea because sooner or later the site URL will also have to carry around a session ID and in that I am afraid that URL rewriting will get me into trouble. So, my question: What is the best way of doing URL rewriting in such a situation? Does tomcat provide any ways of achieving what I want? TIA and bye, Kris -- Kristian Rink * http://zimmer428.net * jab: [EMAIL PROTECTED] icq: 48874445 * fon: ++49 176 2447 2771 "Be yourself the kind of change you want to see in this world." (Gandhi) - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Problem with pdf in tomcat 4.1.29
I have a jsp page that grabs a pdf from a blob in a database and sends it to the browser inline. It works fine for firefox and most ie users but for some it displays it in a separate window or doesn't display at all. I am using tomcat 4.1.29 with jk going through iis 5. Here are the headers: Headers for 'http://www.practical.com.au/web/downloadFile.jsp?vfkey=104' HTTP/1.1 200 OK Server: Microsoft-IIS/5.0 Date: Tue, 10 Jan 2006 23:33:51 GMT X-Powered-By: ASP.NET Set-Cookie: JSESSIONID=5DA445035BFEFFB189E828434381EB24; Path=/web Pragma: public Cache-Control: max-age=0 Content-Disposition: inline;filename="See Map.pdf" Accept-Ranges: none Content-Type: application/pdf;charset=ISO-8859-1 Content-Length: 543974 Does anyone have any idea what I am doing wrong? Is there something wrong with the headers? Would upgrading tomcat have a good chance of fixing the problem? I can send the jsp source if that would help? - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Using Tomcat 5.5 as a standalone web server
I would consider integrating this as part of your application and stay just standalone tomcat (or load balanced tomcat). Keep it simple. http://www.opensymphony.com/oscache/ Very useful. __ This email has been scanned for all viruses by the MessageLabs SkyScan service. For more information on a proactive anti-virus service working around the clock, around the globe, visit http://www.messagelabs.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
tomcat 5 ssl w/multiple IPs
Hello Sorry for the naivete of this question, but do I really need to a dedicated NIC for each of the static IPs I want run SSL sites on? Cant I just use a subnet mask or slap the NIC in promiscuous mode for all IPs in a range? How do hosting farms do it? They cant have dedicated NICs for all the thousands of ssl sites, or do they? __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: tomcat 5 ssl w/multiple IPs
Hi Peter Ouch, I should have know that. Thanks. --- Peter Crowther <[EMAIL PROTECTED]> wrote: > > From: Chris Pat [mailto:[EMAIL PROTECTED] > > do I > > really need to a dedicated NIC for each of the > static > > IPs I want run SSL sites on? > > No. The configuration mechanism depends on your OS, > however. > > Windows boxes can have at least 20 IP addresses > bound to one adapter. Get the adapter properties, > double-click TCP/IP, click the Advanced button, and > fill in pairs of IP address and subnet mask. > > Linux boxes can have multiple IP addresses bound to > 'virtual' adapters eth0:0, eth0:1, eth0:2... up to > (presumably) some kernel limit. These virtual > adapters are then each configured separately. > > Haven't tried it on other OSs, so don't know the > precise mechanism. > > - Peter > > - > To unsubscribe, e-mail: > [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
jk2 BufferOverflow error
Hi All, We are having trouble getting our web connector set up so that it is stable. We have managed to set it up OK on a couple of sites with slightly different configurations, but on our new production server, it seems to be unstable and fail quite frequently. Sometimes when we go to hit one of our JSPs, we just end up with the error message list at the end of this message. - Is this some sort of C Stack Trace related to the web connector? - Is it possible that it is simply due to an incorrect configuration? We have set it up successfully on a couple of other servers. On this server, it seems to work sometimes and die others. Once it dies though, it needs a few restarts before it comes back to life. However, you can still always access Tomcat directly via the port (eg 8080). Our setup is; - MS Windows Server 2003 - Apache Tomcat 5.5.15 Server - IIS Version 6 - Latest version of JK2 connector. Ideally, it'd just be nice to find out if this is a known error (I can't find info on Google or anywhere other that the JK2 source), and if so, if there is a possible workaround. I was also wondering if it could be something similar to a Bug raised in Bugzilla (http://issues.apache.org/bugzilla/show_bug.cgi?id=35715). Any ideas are much appreciated. Regards, Chris snippet of error message below> ERROR msg_ajp.getString(): BufferOverflowException %d %d msg_ajp.getBytes(): BufferOverflowException %d %d BAD MESSAGE:msgAjp.receive(): Bad signature %x%x msgAjp.receive(): Incoming message is too big %d msgAjp.copy(): destination buffer too small %d/%d msg.appendFromServer(): appendInt failed msgAjp.appendFromServer() error reading from server mutex.lock() mutex.trylock() mutex.unlock() c:\WRKPLACE\PROJECTS\jtc\jk\native2\common\jk_mutex.c mutex.%d() mechanism usersignal vm worker.jni channel.jni procMutex shm channel.socket channel.un run status lb ajp13 config uri endpoint uriEnv uriMap jk2_registry_init: Assertion failed, env==NULL p³ô\³ôL³ôD³ô4³ô(³ô_³ô³ô ³ôø²ôä²ôWWW-AuthenticateStatus Servlet-Engine Set-Cookie2 Set-Cookie LocationLast-Modified DateContent-Length Content-LanguageContent-TypeMKACTIVITY BASELINE-CONTROLMERGE LABEL UPDATE MKWORKSPACE SEARCH UNCHECKOUT CHECKOUTCHECKIN VERSION-CONTROL REPORT ACL UNLOCK LOCKMOVECOPYMKCOL PROPPATCH PROPFINDTRACE OPTIONS DELETE PUT HEADPOSTGET user-agent referer pragma cookie2 content-length content-type connection cookie authorization languageencodingcharset accept JSESSIONID handle.request() Error serializing the message head serialize.request() serialized %s handle.request() Error serializing attribute %s=%s handle.request() Error serializing end marker handle.request() Error serializing secret handle.request() Error serializing SSL key size handle.request() Error serializing SSL sessionBottom of Form ... Lots more stuff ... vm.attach() error %d c:\WRKPLACE\PROJECTS\jtc\jk\native2\common\jk_vm_default.c vm.attach() GetEnv failed %d vm.attach() allready attached vm.detach() cannot detach from JVM. vm.detach() ok vm.open2() done Fail-> could not create JVM, code: %d vm.open1() error attaching %d vm.open2() try to attach to existing vm. abort exitvm.openJvm2() Classpath: %s vm.openJvm2() Option: %s ; -Djava.class.path= vm.detect() found: %X expecting 1.2 vm.detect() Fail-> can't get default vm init args " width=1 height=1>
Which option to choose? Tomcats native HTTP server or IIS/Apache with connectors?
Hi All, I am trying to determine which will deliver better performance; 1) Tomcat's Native HTTP server 2) IIS or Apache with JK2 connectors I have read in one book (Professional Apache Tomcat 5 SE - Chapter 11) the following info; "Performance-Tomcat is inherently slower than a Web server. Therefore, it is better for the Web server to serve up static content, while Tomcat handles the dynamic content (JSPs and Servlets). Passing requests for static HTML pages, images, and style sheets through a Servlet container written in Java is not as efficient compared to a Web server." However, this book was written in 2004. The current documentation regarding Tomcat 5.5.x connectors at <http://tomcat.apache.org/tomcat-5.5-doc/connectors.html> specifies a contradictory view; "When using a single server, the performance when using a native webserver in front of the Tomcat instance is most of the time significantly worse than a standalone Tomcat with its default HTTP connector, even if a large part of the web application is made of static files. If integration with the native webserver is needed for any reason, an AJP connector will provide faster performance than proxied HTTP. AJP clustering is the most efficient from the Tomcat perspective. It is otherwise functionally equivalent to HTTP clustering." Any ideas on which provides better performance would be appreciated. Another point to note is that we require virtual directories for various reasons. Is it possible to set these up using Tomcat's native HTTP server? If not, this may force the issue of which architecture we use. Once again, any help is appreciated. Regards, Chris Connaught honoured AIM 'Decade of Excellence' Award Connaught awarded Partnering Contractor of the Year 2005 Connaught wins AIM 'Company of the Year' award 2004 West of England Business of the Year Award Winner 2003 Why not visit our website http://www.connaught.plc.uk Disclaimer: The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete this message. Connaught plc, Head Office 01392 444546 The presence of this footer indicates that this message has been scanned for viruses by Network Associates Group Shield - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Is the JK Connector the definite one to use as a web connector?
Hi All, I have just read various configuration documents for jk2 and jk. It seems as though support for jk2 is no longer available. Is jk the recommended connector to use now? It seems odd...like I am using a previous version. Also, I'd still love to hear from anyone about my previous question on whether Tomcat's native HTTP server is a better option than using a setup such as IIS or Apache and a connector like JK. See my previous e-mail pasted below; Thanks, Chris Previous question on performance of Tomcat native HTTP server vs Apache/IIS and connectors. Hi All, I am trying to determine which will deliver better performance; 1) Tomcat's Native HTTP server 2) IIS or Apache with JK2 connectors I have read in one book (Professional Apache Tomcat 5 SE - Chapter 11) the following info; "Performance-Tomcat is inherently slower than a Web server. Therefore, it is better for the Web server to serve up static content, while Tomcat handles the dynamic content (JSPs and Servlets). Passing requests for static HTML pages, images, and style sheets through a Servlet container written in Java is not as efficient compared to a Web server." However, this book was written in 2004. The current documentation regarding Tomcat 5.5.x connectors at <http://tomcat.apache.org/tomcat-5.5-doc/connectors.html> specifies a contradictory view; "When using a single server, the performance when using a native webserver in front of the Tomcat instance is most of the time significantly worse than a standalone Tomcat with its default HTTP connector, even if a large part of the web application is made of static files. If integration with the native webserver is needed for any reason, an AJP connector will provide faster performance than proxied HTTP. AJP clustering is the most efficient from the Tomcat perspective. It is otherwise functionally equivalent to HTTP clustering." Any ideas on which provides better performance would be appreciated. Another point to note is that we require virtual directories for various reasons. Is it possible to set these up using Tomcat's native HTTP server? If not, this may force the issue of which architecture we use. Once again, any help is appreciated. Regards, Chris Connaught honoured AIM 'Decade of Excellence' Award Connaught awarded Partnering Contractor of the Year 2005 Connaught wins AIM 'Company of the Year' award 2004 West of England Business of the Year Award Winner 2003 Why not visit our website http://www.connaught.plc.uk Disclaimer: The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete this message. Connaught plc, Head Office 01392 444546 The presence of this footer indicates that this message has been scanned for viruses by Network Associates Group Shield - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Is the JK Connector the definite one to use as a web connecto r?
Hi Rémy, Thanks for the reply. If that is the case, is it possible to set up virtual directories with Tomcat's native HTTP server? Any hints on what config files to look in would be appreciated. I did a search on Google and didn't turn up to much valuable info. Thanks again for the reply, Chris -Original Message- From: Remy Maucherat [mailto:] Sent: 17 January 2006 15:51 To: Tomcat Users List Subject: Re: Is the JK Connector the definite one to use as a web connector? On 1/17/06, Chris Mooring <[EMAIL PROTECTED]> wrote: > Hi All, > > I have just read various configuration documents for jk2 and jk. It seems as > though support for jk2 is no longer available. > Is jk the recommended connector to use now? It seems odd...like I am using a > previous version. > > Also, I'd still love to hear from anyone about my previous question on > whether Tomcat's native HTTP server is a better option than using a setup > such as IIS or Apache and a connector like JK. See my previous e-mail pasted > below; > > Thanks, > Chris > > Previous question on performance of Tomcat native HTTP server vs Apache/IIS > and connectors. > > Hi All, > > I am trying to determine which will deliver better performance; > 1) Tomcat's Native HTTP server > > 2) IIS or Apache with JK2 connectors If you have only one server, 1 will be faster and easier to maintain in almost all situations (proxying, even with a fairly optimized protocol like AJP, is quite expensive). -- x Rémy Maucherat Developer & Consultant JBoss Group (Europe) SàRL x - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Connaught honoured AIM 'Decade of Excellence' Award Connaught awarded Partnering Contractor of the Year 2005 Connaught wins AIM 'Company of the Year' award 2004 West of England Business of the Year Award Winner 2003 Why not visit our website http://www.connaught.plc.uk Disclaimer: The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete this message. Connaught plc, Head Office 01392 444546 The presence of this footer indicates that this message has been scanned for viruses by Network Associates Group Shield - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Is the JK Connector the definite one to use as a web connecto r?
Hi Mladen, Thanks for the info. I think unless I can set up virtual directories on the Tomcat HTTP server, I might be forced into using another webserver and connector (jk - soon to be jk3 ;)). I didn't know about that ab command either. That looks pretty useful. Thanks mate, Chris -Original Message- From: Mladen Turk [mailto:] Sent: 17 January 2006 16:03 To: Tomcat Users List Subject: Re: Is the JK Connector the definite one to use as a web connector? Chris Mooring wrote: > Hi All, > > I have just read various configuration documents for jk2 and jk. It seems as > though support for jk2 is no longer available. > Is jk the recommended connector to use now? It seems odd...like I am using a > previous version. > Right, use jk. In month or so it will be renamed to jk3 so all the oddity will be lost :) > Also, I'd still love to hear from anyone about my previous question on > whether Tomcat's native HTTP server is a better option than using a setup > such as IIS or Apache and a connector like JK. See my previous e-mail pasted > below; > If you don't need a special things from native web server, then using Tomcat Native will give you much higher performance if you compare native web server and Tomcat. Just as an example for ab -n 50 -c xx localhost:// (1k file) Tomcat + Native: 14600 req/sec Apache 2.0.54 : 9200 req/sec What's interesting is that you can replicate that by yourself :) Regards, Mladen. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Connaught honoured AIM 'Decade of Excellence' Award Connaught awarded Partnering Contractor of the Year 2005 Connaught wins AIM 'Company of the Year' award 2004 West of England Business of the Year Award Winner 2003 Why not visit our website http://www.connaught.plc.uk Disclaimer: The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete this message. Connaught plc, Head Office 01392 444546 The presence of this footer indicates that this message has been scanned for viruses by Network Associates Group Shield - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Is the JK Connector the definite one to use as a web connecto r?
Hi Georg, Thanks for your reply. Sorry if I appear a little naïve with regards to my terminology. I have mainly only had to mess around with IIS's GUI and its terminology :) However, you are right. All I need to be able to do is to map a specific URL path to a local directory. I think your example will work fine. Armed with this new info, I think I should be able to achieve what I want without using a front end web server and connector. I will go and play and see what I can discover :) Thanks again. Chris -Original Message- From: Georg Sauer-Limbach [mailto:[EMAIL PROTECTED] Sent: 18 January 2006 00:09 To: Tomcat Users List Subject: Re: Is the JK Connector the definite one to use as a web connecto r? Chris Mooring wrote: > Thanks for the info. I think unless I can set up virtual directories on the > Tomcat HTTP server, I might be forced into using another webserver and > connector (jk - soon to be jk3 ;)). What do you mean exactly by "virtual directories"? If it is something like mapping URL paths to file system paths, then you can achieve something with Tomcat's element in server.xml, which maps the virtual (URL) 'path' to the physical docBase directory. Note that 'path' is not limited to one directory part, ie /urlPath/plus/more is also possible. Furthermore, inside the web.xml deployment descriptors you can specify which servlet/JSP is invoked for a certain URL pattern. See element. Regards, Georg - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Connaught honoured AIM 'Decade of Excellence' Award Connaught awarded Partnering Contractor of the Year 2005 Connaught wins AIM 'Company of the Year' award 2004 West of England Business of the Year Award Winner 2003 Why not visit our website http://www.connaught.plc.uk Disclaimer: The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete this message. Connaught plc, Head Office 01392 444546 The presence of this footer indicates that this message has been scanned for viruses by Network Associates Group Shield - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Problem with JK connector
Hi Michael, Could it be that your request headers are > 8K ? I was having some funny issues with JK2 this week where my page would suddenly show some sort of c stack trace about a BufferOverFlow Exception (we are no longer using JK2), but someone sent me this information; "It looks like requests can only be 8k long: <http://tomcat.apache.org/tomcat-4.1-doc/jk2/common/ajpv13a.html> What happens if the request headers > max packet size? There is no provision to send a second packet of request headers in case there are more than 8K (I think this is correctly handled for response headers, though I'm not certain). I don't know if there is a way to get more than 8K worth of data into that initial set of request headers, but I'll bet there is (combine long cookies with long ssl information and a lot of environment variables, and you should hit 8K easily). I think the connector would just fail before trying to send any headers in this case, but I'm not certain. http://tomcat.apache.org/tomcat-5.0-doc/catalina/docs/api/constant-values.ht ml#org.apache.ajp.Ajp13.MAX_READ_SIZE " Hopefully this is of some use. Chris -Original Message- From: Michael Li [mailto:[EMAIL PROTECTED] Sent: 18 January 2006 15:08 To: users@tomcat.apache.org Subject: Problem with JK connector Hi there, Currently we use apache 1.3 and tomcat 4.1.31. We tried to connect them through JK. Everything works fine, except some special http headers are gone.=20 Because we user entrust direct, which will set some special http header in the http request. The servlets will check those headers to check the user identity. =20 If you have any tips, please let me know. Thanks! michael Connaught honoured AIM 'Decade of Excellence' Award Connaught awarded Partnering Contractor of the Year 2005 Connaught wins AIM 'Company of the Year' award 2004 West of England Business of the Year Award Winner 2003 Why not visit our website http://www.connaught.plc.uk Disclaimer: The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete this message. Connaught plc, Head Office 01392 444546 The presence of this footer indicates that this message has been scanned for viruses by Network Associates Group Shield - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Problem with JK connector
* Chris Mooring wrote (18/01/06 15:11): > Hi Michael, > > Could it be that your request headers are > 8K ? I was having some funny > issues with JK2 this week where my page would suddenly show some sort of c > stack trace about a BufferOverFlow Exception (we are no longer using JK2), > but someone sent me this information; > > "It looks like requests can only be 8k long: > <http://tomcat.apache.org/tomcat-4.1-doc/jk2/common/ajpv13a.html> > > What happens if the request headers > max packet size? There is no provision > to send a second packet of request headers in case there are more than 8K (I > think this is correctly handled for response headers, though I'm not > certain). I don't know if there is a way to get more than 8K worth of data > into that initial set of request headers, but I'll bet there is (combine > long cookies with long ssl information and a lot of environment variables, > and you should hit 8K easily). I think the connector would just fail before > trying to send any headers in this case, but I'm not certain. > > http://tomcat.apache.org/tomcat-5.0-doc/catalina/docs/api/constant-values.ht > ml#org.apache.ajp.Ajp13.MAX_READ_SIZE > " I would like to know whether a) request headers really are limited like this, and b) there's anything I can do about it. We have a web application running under tomcat, and we're using quite a lot of Ajax code, which sends user data to the server via xmlhttp. I've noticed that when using ajp the POST data is corrupted if there is a lot of data (it's rare in practice, but quite recreatable). Without ajp, this doesn't happen. However, it's perfectly possible to upload a large file via a web form using ajp. If I switch to accessing tomcat directly (and this is easy, because I have tomcat on port 8080, and apache on port 80 forwarding to exactly the same tomcat instance) the large POSTs work fine, so I don't think there's anything wrong with the application. Does anyone know any more about this? I'm prepared to dump ajp, but I quite want to keep it if possible, because running apache is convenient for a variety of reasons. Chris - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: how to configure the tomcat 5.5.12 for a port 80 in linux (Gentoo)??
* Dhaval Patel wrote (19/01/2006 02:13): > Hi, > >For detail information about the problem and solution, visit: > http://wiki.apache.org/tomcat/HowTo#head-18d1c3f3fa702a1be769340784515eecce6e0ac9 Also see http://tomcat.apache.org/tomcat-5.0-doc/setup.html for info on jsvc. You'd have to replace /etc/init.d/tomcat with something like the bundled Tomcat.sh file (appropriately tweaked) > >The quick solution is to to administer (start, stop, edit) tomcat only as > a root. And the way to do that in Gentoo is to edit /etc/conf.d/tomcat and change the CATALINA_USER variable. But don't do it unless you don't mind people having a go at you for misadministration of a linux machine. Chris - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Shutdown problem in Tomcat Version 5.5.12 ("Protocol handler pause failed")
A variant on many postings I've found, unfortunately none of the remedies work. Been googling furiously to no avail. Surely tomcat on Fedora can't be this broken out of the box, can it? Problem: Tomcat fails to shut down in response to shutdown.sh script. Hangs, eventually throws exception with dreaded "Protocol handler pause failed" message. I have tried both values for LD_ASSUME_KERNEL as per release notes. It changes the behavior slightly, but the problem remains (more below). Environment: - A freshly built & updated fedora RC4 install: 2.6.14-1.1656_FC4 - A completely unmodified Tomcat Version 5.5.12 - I untarred it and ran it. - Sun's jdk1.5.0_06 Repro: 1) run startup.sh 2) hit localhost:8080 in browser, works 3) run shutdown.sh 4) log shows: Jan 19, 2006 11:08:27 PM org.apache.coyote.http11.Http11BaseProtocol pause INFO: Pausing Coyote HTTP/1.1 on http-8080 It hangs for a minute or so, then throws: Jan 19, 2006 11:03:48 PM org.apache.catalina.connector.Connector pause SEVERE: Protocol handler pause failed java.net.ConnectException: Connection timed out at java.net.PlainSocketImpl.socketConnect(Native Method) at java.net.PlainSocketImpl.doConnect(PlainSocketImpl.java:333) at java.net.PlainSocketImpl.connectToAddress(PlainSocketImpl.java:195) at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:182) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:366) at java.net.Socket.connect(Socket.java:507) at java.net.Socket.connect(Socket.java:457) at java.net.Socket.(Socket.java:365) at java.net.Socket.(Socket.java:207) at org.apache.jk.common.ChannelSocket.unLockSocket(ChannelSocket.java:463) at org.apache.jk.common.ChannelSocket.pause(ChannelSocket.java:270) at org.apache.jk.server.JkMain.pause(JkMain.java:679) at org.apache.jk.server.JkCoyoteHandler.pause(JkCoyoteHandler.java:162) at org.apache.catalina.connector.Connector.pause(Connector.java:1031) at org.apache.catalina.core.StandardService.stop(StandardService.java:491) at org.apache.catalina.core.StandardServer.stop(StandardServer.java:714)at org.apache.catalina.startup.Catalina.stop(Catalina.java:586) at org.apache.catalina.startup.Catalina.start(Catalina.java:561) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) at java.lang.reflect.Method.invoke(Method.java:585) at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:275) at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:413) Interestingly enough, lsof shows different behaviors depending on the value of the LD_ASSSUME_KERNEL variable. With no variable set, # lsof -P | grep java | grep 8080 java 6555 chris 10u IPv6 329120 TCP *:8080 (LISTEN) setting LD_ASSUME_KERNEL=2.2.5 results in about 40 threads listening on the port (in the hung state): # lsof -P | grep java | grep 8080 java 6652 chris 12u IPv6 331547 TCP *:8080 (LISTEN) java 6653 chris 12u IPv6 331547 TCP *:8080 (LISTEN) ...etc setting it to 2.4.1 yields the more entertaining: # lsof -P | grep java | grep 8080 java 6779 chris mem REG 253,0 14656364980808 /lib/obsolete/linuxthreads/i686/libc-2.3.5.so java 6779 chris 12u IPv6 334251 TCP *:8080 (LISTEN) java 6780 chris mem REG 253,0 14656364980808 /lib/obsolete/linuxthreads/i686/libc-2.3.5.so java 6780 chris 12u IPv6 334251 TCP *:8080 (LISTEN) ... but the behavior is the same. This is awful, I'm losing faith. I actually booted the XP partition today... -- Chris Abajian <[EMAIL PROTECTED]> thePlatform, Inc. (206) 839-0600 ext. 216 - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Overlapping contexts?
Hi All, I was just wondering if it is possible to have "overlapping contexts"? I am not sure if this will make sense so I'll try and explain it with a little example; Basically, I'd like to be able to have two *similar* URL's map to separate locations on the filesystem; Example; localhost/myapp/index.jsp (refers to C:\myapp\index.jsp) localhost/myapp/external/index.jsp (refers to Z:\otherapp\index.jsp) Ideally, I'd like to achieve this using Tomcat's element in server.xml. The important part here is that both contexts begin with /myapp! However, the last time I tried this, I had several different errors when Tomcat started up. I believe this may be due to the fact that with Tomcat 5.5 and above you shouldn't have context tags in server.xml. Therefore, I tried similar things in conf/context.xml with much similar results (errors). I then tried separate context files in C:\tomcat5\work\Catalina\localhost but this didn't work either. Can someone tell me if what I am trying to do is possible? If so, a hint in the right direction would also be appreciated ;) Regards, Chris Connaught honoured AIM 'Decade of Excellence' Award Connaught awarded Partnering Contractor of the Year 2005 Connaught wins AIM 'Company of the Year' award 2004 West of England Business of the Year Award Winner 2003 Why not visit our website http://www.connaught.plc.uk Disclaimer: The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete this message. Connaught plc, Head Office 01392 444546 The presence of this footer indicates that this message has been scanned for viruses by Network Associates Group Shield - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Overlapping contexts?
Hi Markus,
I just have to say that you are a champ!
I checked your proposed solution, and it seems to work fine. I will mess
around with it a bit and see how I go.
Thanks again,
Chris
-Original Message-
From: Markus Schönhaber [mailto:[EMAIL PROTECTED]
Sent: 23 January 2006 11:35
To: Tomcat Users List
Subject: Re: Overlapping contexts?
Chris Mooring wrote:
> I was just wondering if it is possible to have "overlapping contexts"? I
am
> not sure if this will make sense so I'll try and explain it with a little
> example;
>
> Basically, I'd like to be able to have two *similar* URL's map to separate
> locations on the filesystem;
>
> Example;
> localhost/myapp/index.jsp (refers to C:\myapp\index.jsp)
> localhost/myapp/external/index.jsp (refers to Z:\otherapp\index.jsp)
>
> Ideally, I'd like to achieve this using Tomcat's
>
> ... >
> ... >
>
> element in server.xml. The important part here is that both contexts begin
> with /myapp!
>
> However, the last time I tried this, I had several different errors when
> Tomcat started up. I believe this may be due to the fact that with Tomcat
> 5.5 and above you shouldn't have context tags in server.xml. Therefore, I
> tried similar things in conf/context.xml with much similar results
> (errors). I then tried separate context files in
> C:\tomcat5\work\Catalina\localhost but this didn't work either.
If you store your information in individual files in
.../conf/Catalina/localhost
("conf", not "work"), the path-Attribute is ignored and the path information
is derived from the name of the XML-file. So if you want to define a
which shall be accessible via
http://your.server/myapp
the XML-file has to be named "myapp.xml".
http://tomcat.apache.org/tomcat-5.5-doc/config/context.html
If the 's path shall contain slashes, replace them with "#" in the
file name.
I don't know if this works but what you could try is the following:
put the two s you mention above each in an individual XML-file
under
.../conf/Catalina/localhost
and name the first "myapp.xml" and the second "myapp#external.xml".
Regards
mks
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Connaught honoured AIM 'Decade of Excellence' Award
Connaught awarded Partnering Contractor of the Year 2005
Connaught wins AIM 'Company of the Year' award 2004
West of England Business of the Year Award Winner 2003
Why not visit our website http://www.connaught.plc.uk
Disclaimer:
The information transmitted is intended only for the person or entity to
which it is addressed and may contain confidential and/or privileged
material. Any review, retransmission, dissemination or other use of, or
taking of any action in reliance upon, this information by persons or
entities other than the intended recipient is prohibited. If you received
this in error, please contact the sender and delete this message.
Connaught plc, Head Office 01392 444546
The presence of this footer indicates that this message has been scanned for
viruses by Network Associates Group Shield
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
RE: Connection Pool Woes
Its poor practise to have a sql: jstl tag in production ready code. > How do you deal with this when using pure JSTL sql calls using a > connection? How does JSTL sql library release the connection at the > end of a page to ensure that connections don't get leaked? For reasons exactly like this. __ This email has been scanned for all viruses by the MessageLabs SkyScan service. For more information on a proactive anti-virus service working around the clock, around the globe, visit http://www.messagelabs.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
mod_jk wierdness
Hello Attached is the full trace, but can anyone please explain second below. The workers.properties file is immediately below. It eventually does some type of core dump. The site is up, working on the specified ip, just not working with the mod_jk. Any help much appreciated. workers.properties workers.tomcat_home e:\Program\Tomcat 5.5 workers.java_home=$JAVA_HOME ps\ worker.list=connect_op, connect_sb worker.connect_op.port=12345 worker.connect_op.host=localhost worker.connect_op.type=ajp13 worker.connect_sb.port=12346 worker.connect_sb.host=localhost worker.connect_sb.type=ajp13 from mod_jk.log [Sat Feb 04 07:54:00 2006] [8196:8192] [debug] jk_worker.c (236): creating worker connect_op [Sat Feb 04 07:54:00 2006] [8196:8192] [debug] jk_worker.c (141): about to create instance connect_op of ajp13 [Sat Feb 04 07:54:00 2006] [8196:8192] [debug] jk_worker.c (154): about to validate and init connect_op [Sat Feb 04 07:54:00 2006] [8196:8192] [debug] jk_ajp_common.c (1806): worker connect_op contact is 'localhost:12345' ... [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_worker.c (248): removing old connect_op worker __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com [Sat Feb 04 07:54:00 2006] [8196:8192] [debug] jk_shm.c (91): Initialized shared memory size=66560 free=65536 addr=0x4dcd98 [Sat Feb 04 07:54:00 2006] [8196:8192] [debug] mod_jk.c (2350): Initialized shm:memory [Sat Feb 04 07:54:00 2006] [8196:8192] [debug] jk_uri_worker_map.c (323): rule map size is 0 [Sat Feb 04 07:54:00 2006] [8196:8192] [debug] jk_worker.c (236): creating worker connect_op [Sat Feb 04 07:54:00 2006] [8196:8192] [debug] jk_worker.c (141): about to create instance connect_op of ajp13 [Sat Feb 04 07:54:00 2006] [8196:8192] [debug] jk_worker.c (154): about to validate and init connect_op [Sat Feb 04 07:54:00 2006] [8196:8192] [debug] jk_ajp_common.c (1806): worker connect_op contact is 'localhost:12345' [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1895): setting socket keepalive to 0 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1934): setting socket timeout to -1 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1938): setting socket buffer size to 0 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1942): setting connection recycle timeout to 0 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1946): setting cache timeout to 0 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1950): setting connect timeout to 0 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1954): setting reply timeout to 0 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1958): setting prepost timeout to 0 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1962): setting recovery opts to 0 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1966): setting number of retries to 3 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1843): setting connection cache size to 250 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_worker.c (248): removing old connect_op worker [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_worker.c (236): creating worker connect_sb [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_worker.c (141): about to create instance connect_sb of ajp13 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_worker.c (154): about to validate and init connect_sb [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1806): worker connect_sb contact is 'localhost:12346' [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1895): setting socket keepalive to 0 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1934): setting socket timeout to -1 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1938): setting socket buffer size to 0 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1942): setting connection recycle timeout to 0 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1946): setting cache timeout to 0 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1950): setting connect timeout to 0 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1954): setting reply timeout to 0 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1958): setting prepost timeout to 0 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1962): setting recovery opts to 0 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1966): setting number of retries to 3 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1843): setting connection cache size to 250 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_worker.c (248): removing old connect_sb worker [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] mod_jk.c (1747): Shmem cleanup [S
mod_jk weirdness
Hello Attached is the full trace, but can anyone please explain second below. The workers.properties file is immediately below. It eventually does some type of core dump. The site is up, working on the specified ip, just not working with the mod_jk. Any help much appreciated. workers.properties workers.tomcat_home e:\Program\Tomcat 5.5 workers.java_home=$JAVA_HOME ps\ worker.list=connect_op, connect_sb worker.connect_op.port=12345 worker.connect_op.host=localhost worker.connect_op.type=ajp13 worker.connect_sb.port=12346 worker.connect_sb.host=localhost worker.connect_sb.type=ajp13 from mod_jk.log [Sat Feb 04 07:54:00 2006] [8196:8192] [debug] jk_worker.c (236): creating worker connect_op [Sat Feb 04 07:54:00 2006] [8196:8192] [debug] jk_worker.c (141): about to create instance connect_op of ajp13 [Sat Feb 04 07:54:00 2006] [8196:8192] [debug] jk_worker.c (154): about to validate and init connect_op [Sat Feb 04 07:54:00 2006] [8196:8192] [debug] jk_ajp_common.c (1806): worker connect_op contact is 'localhost:12345' ... [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_worker.c (248): removing old connect_op worker __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com [Sat Feb 04 07:54:00 2006] [8196:8192] [debug] jk_shm.c (91): Initialized shared memory size=66560 free=65536 addr=0x4dcd98 [Sat Feb 04 07:54:00 2006] [8196:8192] [debug] mod_jk.c (2350): Initialized shm:memory [Sat Feb 04 07:54:00 2006] [8196:8192] [debug] jk_uri_worker_map.c (323): rule map size is 0 [Sat Feb 04 07:54:00 2006] [8196:8192] [debug] jk_worker.c (236): creating worker connect_op [Sat Feb 04 07:54:00 2006] [8196:8192] [debug] jk_worker.c (141): about to create instance connect_op of ajp13 [Sat Feb 04 07:54:00 2006] [8196:8192] [debug] jk_worker.c (154): about to validate and init connect_op [Sat Feb 04 07:54:00 2006] [8196:8192] [debug] jk_ajp_common.c (1806): worker connect_op contact is 'localhost:12345' [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1895): setting socket keepalive to 0 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1934): setting socket timeout to -1 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1938): setting socket buffer size to 0 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1942): setting connection recycle timeout to 0 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1946): setting cache timeout to 0 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1950): setting connect timeout to 0 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1954): setting reply timeout to 0 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1958): setting prepost timeout to 0 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1962): setting recovery opts to 0 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1966): setting number of retries to 3 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1843): setting connection cache size to 250 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_worker.c (248): removing old connect_op worker [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_worker.c (236): creating worker connect_sb [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_worker.c (141): about to create instance connect_sb of ajp13 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_worker.c (154): about to validate and init connect_sb [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1806): worker connect_sb contact is 'localhost:12346' [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1895): setting socket keepalive to 0 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1934): setting socket timeout to -1 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1938): setting socket buffer size to 0 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1942): setting connection recycle timeout to 0 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1946): setting cache timeout to 0 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1950): setting connect timeout to 0 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1954): setting reply timeout to 0 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1958): setting prepost timeout to 0 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1962): setting recovery opts to 0 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1966): setting number of retries to 3 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_ajp_common.c (1843): setting connection cache size to 250 [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] jk_worker.c (248): removing old connect_sb worker [Sat Feb 04 07:54:01 2006] [8196:8192] [debug] mod_jk.c (1747): Shmem cleanup [S
RE: mod_jk weirdness
Hi Darren Thanks. That appears right, however I dont know how to make the worker resolve the Tomcat->Apache connection? Do I have to make some entry in http.conf for the Tomcat->Apache communication? Ideas? Thanks. --- Darren Hall <[EMAIL PROTECTED]> wrote: > Chris, > > Not sure if this is helpful but it appears the next > step that is failing is > the actual connection to tomcat from apache (unless > you've left this part of > your mod_jk.log out of your post). > > Here's the mod_jk.log output of a test I did on my > local machine. The first > worker 'testworker' connects successfully; while the > second 'newworker' > fails at about the same point you appear to be > failing. In the below case, > 'newworker' fails because it can't resolve the > tomcat address after it sets > the contact for 'newworker'. Don't know if this > helps or not... > > Darren > > > [Mon Feb 06 09:49:03 2006] [2756:3108] [debug] > jk_worker.c (141): about to > create instance testworker of ajp13 > [Mon Feb 06 09:49:03 2006] [2756:3108] [debug] > jk_worker.c (154): about to > validate and init testworker > [Mon Feb 06 09:49:03 2006] [2756:3108] [debug] > jk_ajp_common.c (1806): > worker testworker contact is 'localhost:8009' > [Mon Feb 06 09:49:03 2006] [2756:3108] [debug] > jk_ajp_common.c (1895): > setting socket keepalive to 0 > [Mon Feb 06 09:49:03 2006] [2756:3108] [debug] > jk_ajp_common.c (1934): > setting socket timeout to -1 > [Mon Feb 06 09:49:03 2006] [2756:3108] [debug] > jk_ajp_common.c (1938): > setting socket buffer size to 0 > [Mon Feb 06 09:49:03 2006] [2756:3108] [debug] > jk_ajp_common.c (1942): > setting connection recycle timeout to 0 > [Mon Feb 06 09:49:03 2006] [2756:3108] [debug] > jk_ajp_common.c (1946): > setting cache timeout to 0 > [Mon Feb 06 09:49:03 2006] [2756:3108] [debug] > jk_ajp_common.c (1950): > setting connect timeout to 0 > [Mon Feb 06 09:49:03 2006] [2756:3108] [debug] > jk_ajp_common.c (1954): > setting reply timeout to 0 > [Mon Feb 06 09:49:03 2006] [2756:3108] [debug] > jk_ajp_common.c (1958): > setting prepost timeout to 0 > [Mon Feb 06 09:49:03 2006] [2756:3108] [debug] > jk_ajp_common.c (1962): > setting recovery opts to 0 > [Mon Feb 06 09:49:03 2006] [2756:3108] [debug] > jk_ajp_common.c (1966): > setting number of retries to 3 > [Mon Feb 06 09:49:03 2006] [2756:3108] [debug] > jk_ajp_common.c (1843): > setting connection cache size to 250 > [Mon Feb 06 09:49:03 2006] [2756:3108] [debug] > jk_worker.c (248): removing > old testworker worker > [Mon Feb 06 09:49:03 2006] [2756:3108] [debug] > jk_worker.c (236): creating > worker newworker > [Mon Feb 06 09:49:03 2006] [2756:3108] [debug] > jk_worker.c (141): about to > create instance newworker of ajp13 > [Mon Feb 06 09:49:03 2006] [2756:3108] [debug] > jk_worker.c (154): about to > validate and init newworker > [Mon Feb 06 09:49:03 2006] [2756:3108] [debug] > jk_ajp_common.c (1806): > worker newworker contact is 'www.local.org:8009' > [Mon Feb 06 09:49:03 2006] [2756:3108] [error] > jk_ajp_common.c (1815): can't > resolve tomcat address localhost > [Mon Feb 06 09:49:03 2006] [2756:3108] [error] > jk_ajp_common.c (1818): > invalid host and port www.local.org 8009 > [Mon Feb 06 09:49:03 2006] [2756:3108] [debug] > jk_ajp_common.c (2012): up to > 0 endpoints to close > [Mon Feb 06 09:49:03 2006] [2756:3108] [error] > jk_worker.c (158): validate > failed for newworker > [Mon Feb 06 09:49:03 2006] [2756:3108] [error] > jk_worker.c (256): failed to > create worker newworker > [Mon Feb 06 09:49:03 2006] [2756:3108] [debug] > jk_worker.c (212): > close_workers will destroy worker testworker > > > -Original Message- > From: Chris Pat [mailto:[EMAIL PROTECTED] > Sent: Saturday, February 04, 2006 9:23 AM > To: Tomcat > Subject: mod_jk weirdness > > Hello > Attached is the full trace, but can anyone please > explain second below. The workers.properties file > is > immediately below. It eventually does some type of > core dump. The site is up, working on the specified > ip, just not working with the mod_jk. Any help much > appreciated. > > workers.properties > workers.tomcat_home e:\Program\Tomcat 5.5 > workers.java_home=$JAVA_HOME > ps\ > worker.list=connect_op, connect_sb > > worker.connect_op.port=12345 > worker.connect_op.host=localhost > worker.connect_op.type=ajp13 > > worker.connect_sb.port=12346 > worker.connect_sb.host=localhost > worker.connect_sb.type=ajp13 > > > from mod_jk.log > [Sat Feb 04 07:54:00 2006] [8196:8192] [de
Re: Which direction: mod_jk or mod_proxy_ajp? (was: why use mod_jk?)
* Brad O'Hearne wrote (24/02/06 15:14): > Josh, > > Thanks a lot for your answer. I am using Apache 2.2.x. Now onto my > next question. Bill Barker suggested the httpd.conf / mod_proxy_ajp > directive side of the equation. Doesn't there have to be a connector > in tomcat's server.xml which will allow listening for the ajp > protocol? Is there documentation on this somewhere? http://tomcat.apache.org/tomcat-5.5-doc/config/ajp.html In fact, the http://tomcat.apache.org/tomcat-5.5-doc/config/index.html page is a good place to go for a lot of things. I generally find tomcat documentation hard to read and hard to understand (I find httpd.conf much more to my taste), but it's generally possible to get there in the end, and better than following half-baked how-tos. The server.xml that ships with tomcat has an ajp connector by default, I think. By the way, I had a very similar battle getting mod_jk going, except that once I found that mod_proxy_ajp only worked in a version of apache I wasn't using, and that mod_jk2 was obsolete (whereas mod_jk wasn't), and I made the choice of mod_jk, setting it up wasn't actually too bad. However, I've found that a large POST to a web page through mod_jk can get mangled (and the mod_jk debug log simply doesn't show chunks of it), whereas direct to tomcat works fine. So I slightly mistrust ajp. There's not much documentation on the protocol, and what exists suggests that not very many people in the world really know what's going on with it. Chris - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Problem with getting ppt file from tomcat JSP server via https/SSL
Hi, Summary: Please tell me what headers Tomcat sets when it serves out a plain file, and how I can control those headers. Long version: I'm using Tomcat 5.0.28 for a small webapp. It sits behind Apache, which does SSL and forwards requests to Tomcat via mod_jk. Anyhow, in the documentation area for my webapp users I tossed a few HTML files and power-point files, and added links on JSP pages right to those files. Clicking on the links to the HTML works fine, the tomcat server pushes them across wonderfully. The problems arise when an IE user clicks on a link to a powerpoint file. (It works fine in Firefox.) I first had to extend web.xml for the appropriate mime-type. This is documented partly in Tomcat bugzilla bug # 27617 (and I'm trying to get that reopened). That change got me one step farther, but there are still problems. It appears that IE 6 is very sensitive to Cache-Control headers. Here are some links that get into the problem: http://support.microsoft.com/default.aspx?scid=kb;en-us;812935 http://forum.java.sun.com/thread.jspa?threadID=233446&start=0&tstart=0 http://www.alexking.org/blog/2004/11/03/workaround-for-iessl-problem The workarounds suggested by the sites above focus on removing or altering the Pragma and Cache-Control headers. I'd like to do that, but cannot find anything about doing that on a default basis. Sure, I can set/remove headers on a JSP response object, but in the case of a simple file, I'm not coding a JSP page nor manipulating any response object. Finally my questions: I believe that Tomcat sets headers when it shovels out a file. Is that right? If so, how can I control what headers are set? I suspect the workaround may be do put a little JSP page in place that adjusts the headers and somehow dumps out the content of the file, but ugh, I'm don't like the sound of all that complexity. Please reply (cc me directly if you don't mind), thanks in advance! chris... - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Problem with getting ppt file from tomcat JSP server via https/SSL
Chris Lott wrote: Hi, Summary: Please tell me what headers Tomcat 5.0.28 sets when it serves out a plain file, and how I can control those headers. .. I found more detail and found a possible solution. I still welcome your comments. To figure out what headers Tomcat sets in responses, I turned on the RequestDumperValve in the server.xml file. There I saw that every single request -- whether .gif, .html, .css, .ppt, or .jsp -- gets "Cache-Control: no-cache" and "Pragma: no cache" in the response headers. So that answers my first question. (And the Apache sitting in front of Tomcat seems to have no influence here whatsoever.) A possible solution came from here: http://www.jspinsider.com/content/dev/afessh/another-filter-every-site-should-have.html where Jayson Falkner discusses using servlet filters to set response headers so web browsers will cache items like pictures and other static content. I used this approach with some success. I still have one question and/or a suggestion: it seems that Tomcat needs some configuration setting so users like me can tell the container what caching policy to apply by default. Maybe it exists, but I have not found it. Possibly an enhancement, sort of like a mime-types file, would allow the caching policy to be set based on file suffixes or file-name patterns. Thanks for listening, and I would sure appreciate guidance if I'm all wet here, or confirmation that I'm on the right path. chris... - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
overheads on multiple connectors
Hi, I would like to how much performance/resource consumption impact there will be for the configuration of 1) having a single tomcat instance with 10 connectors all listening on different ports. The total max threads for all the connectors are 500. 2) having a single tomcat instance with only 1 connector with 500 max threads. We have flexibility in configuring the ports clients use. One of the reasons we would like to do (1) is to make it easier to capture/monitor/manipulate specific traffic by ports. However, I want to know what will be the cost for doing so. Will the answer changed based on the type of connectors I will be using? (e.g. CoyoteConnector with 4.1.18 or HTTP connector with 5.5.15) We are currently on 4.1.18 and planning to go to 5.5.15 and wondering is there any limitation/performance/resource consumption impact by implementing (1). Thanks, --Chris - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: what is favicon.ico? what its significance?
* Pusukuri, Kishore_Kumar wrote (13/03/06 10:41): > > what is favicon.ico? what its significance? This link might help: http://www.google.co.uk/search?q=favicon.ico - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: overheads on multiple connectors
Let me rephrase original my question. Is it an abnormal configuration to have roughly 20 connectors all listening on different ports for 5.5.15? Have anyone had similar configuration for their production environment with heavy traffic? Thanks, --Chris > -Original Message- > From: Chris Fong > Sent: Tuesday, March 07, 2006 3:03 PM > To: 'users@tomcat.apache.org' > Subject: overheads on multiple connectors > > Hi, > > I would like to how much performance/resource consumption impact there > will be for the configuration of > > 1) having a single tomcat instance with 10 connectors all listening on > different ports. The total max threads for all the connectors are 500. > > 2) having a single tomcat instance with only 1 connector with 500 max > threads. > > We have flexibility in configuring the ports clients use. One of the > reasons we would like to do (1) is to make it easier to > capture/monitor/manipulate specific traffic by ports. However, I want to > know what will be the cost for doing so. > > Will the answer changed based on the type of connectors I will be using? > (e.g. CoyoteConnector with 4.1.18 or HTTP connector with 5.5.15) We are > currently on 4.1.18 and planning to go to 5.5.15 and wondering is there > any limitation/performance/resource consumption impact by implementing (1). > > Thanks, > > --Chris - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: overheads on multiple connectors
Thanks for the replies. > : Where are you getting this 20 connection count from? Those must be > : currently open connections to clients? Actually, I am talking about connector (Http Connector) instead of connection. > To the Chris, I personally don't think it is the norm since your average > site usually don't get that kind of load. I would start with 2 or 3 and > scale up as needed. I have gotten request to separate traffic to multiple ports so that Network Engineer can manage/debug network traffic easier (by port). I totally agree this will make troubleshooting easier, but I am also afraid there is performance cost in implementing this. The tomcat instance could get very busy some times with only 1 connector. (3k+ requests every minute) Therefore, I am wondering once I starts having 20 connectors (listening on 20 different ports), will the performance be affected by a lot. Thanks, --Chris > -Original Message- > From: Long [mailto:[EMAIL PROTECTED] > Sent: Tuesday, March 21, 2006 8:52 PM > To: Tomcat Users List > Subject: Re: overheads on multiple connectors > > : From: "David Rees" <[EMAIL PROTECTED]> > : > : On 3/21/06, Chris Fong <[EMAIL PROTECTED]> wrote: > : > Let me rephrase original my question. > : > > : > Is it an abnormal configuration to have roughly 20 connectors all > : > listening on different ports for 5.5.15? Have anyone had similar > : > configuration for their production environment with heavy traffic? > : > : You're going to have to clarify your question. You should only see > : Tomcat listening on a couple (2-3) of ports at any time depending on > : your connector setup. One for Tomcat administration (shutdown, by > : default port 8005), One for HTTP (by default port 8080) and another > : for AJP (by default port 8009 if configured). > : > : Where are you getting this 20 connection count from? Those must be > : currently open connections to clients? > > Well, it is possible to configure multiple AJP connectors, each listening > on a different port. It typically is used with JK2 workers and/or a load > balancer. > > To the Chris, I personally don't think it is the norm since your average > site usually don't get that kind of load. I would start with 2 or 3 and > scale > up as needed. > > Long > www.edgesoft.ca - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Setting the context path for expanded WARs
Trying to figure out how to change the context path for a WAR file install in the webapps dir (Tomcat 5.5.16); for example: webapps/foo-1.2.0.war ...is expanded into a folder of the same name (minus the .war). So far, so good - this is as expected. However, the context path is now set to /foo- 1.2.0 - how can I setup Tomcat so the context path for this application is '/foo', regardless of the WAR name? I've tried the META-INF/context.xml - setting path="/foo", with no luck - the only URL that works is /foo- 1.2.0. Thanks, Chris.
inscrutable TC 5.5.12 startup
Hello I hope someone can doesnt mind a little coaching. I am sure this is brain-fade, however I have a struts app in TC 5.5.12 that gives a cfne for a PlugIn that does not exist. Yes I know that is impossible, ultimately, however I have searched the application's web/struts-config.xml, the server's server.xml, search in the classpath, search in the project path, search in the server root within files for the class, searched project root within files for the class, all to no avail. Now obviously TC thinks it is being called, it is a PlugIn class, so it must be somewhere I am just out of places to look. Any tips? tia. __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: inscrutable TC 5.5.12 startup
Hello Sorry to self-answer, but for edification purposes. I undeployed all other apps and it worked. That means the config in another app was being used in the startup of the one in question. I thought this was impossible. I checked in the shared and the PlugIn class was not there. I ass-umed that the individual apps, from their xml startup configuration, were "firewalled" from each other. Well thank you for tolerating the chatter. Chris Pat <[EMAIL PROTECTED]> wrote: Hello I hope someone can doesnt mind a little coaching. I am sure this is brain-fade, however I have a struts app in TC 5.5.12 that gives a cfne for a PlugIn that does not exist. Yes I know that is impossible, ultimately, however I have searched the application's web/struts-config.xml, the server's server.xml, search in the classpath, search in the project path, search in the server root within files for the class, searched project root within files for the class, all to no avail. Now obviously TC thinks it is being called, it is a PlugIn class, so it must be somewhere I am just out of places to look. Any tips? tia. __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - Yahoo! Messenger with Voice. Make PC-to-Phone Calls to the US (and 30+ countries) for 2¢/min or less.
question with mod_jk behind a firewall and needing constant reboots
I am using Apache 2.0.54 with mod_jk 1.2.14 to connect to a Tomcat 5.5 install under JBoss 4.0.4RC1 which the JBoss service is in one segment and the web service is on another segment of my SonicWall 2040 firewall. The problem I am having is I have to reboot the apache web server every so often. When accessing the web server it seems as if it will wait indefinitely and never load a page from Tomcat. I've tried using the keep alive and different combinations of socket timeouts and cache/nocache and have failed miserably. Performance is not critical but getting to the web page is. What can I do to keep this problem from occurring? Is there a way I can force a new thread to be generated with each request? Chris Berthold IT Systems Analyst Commercial Refrigerator Door Company 941 . 371 . 8110 x 205
Re: Tomcat 5.5.16: strange redirecting
* Velpi wrote (27/04/06 15:49): Hi, I used a fresh install of Tomcat 5.5.16 on the Windows platform to confirm what I was seeing: a request to http://localhost/manager results in a redirect to http://localhost/manager/? The same thing happens with (one of) my servlets when it receives no parameters: http://idp.example.be/shibboleth-idp/SSO becomes http://idp.example.be/shibboleth-idp/SSO/? (which contains a filter that redirects with its own URL as a parameter -which is wrong now because of the /? -) It is certainly new from Tomcat v5.5.12, probably first emerged in 5.5.16. Does anyone have a clue what causes it or how to fix it? Might it be due to this bug? http://issues.apache.org/bugzilla/show_bug.cgi?id=38113 The CAS SSO mechanism is broken by this. There's a one-line fix in the cas client code to work round it, but it looks like downgrading or upgrading is probably the best answer. Chris - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Restricting access to Tomcat
* Edward Quick wrote (28/04/06 09:09): > Hi, > > I have an Apache mod_jk Tomcat server set up on the same host, and want to > restrict access to the Tomcat so that only the Apache on the localhost can > connect to port 8009. > > I tried using org.apache.catalina.valves.RemoteAddrValve, with > allow="127.0.0.1", but the issue is that Tomcat picks up the IP address of > the client, and not the Apache which is passing traffic onto it. > > Is there a way round this? Won't that do it? Chris - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Restricting access to Tomcat
* Edward Quick wrote (28/04/06 10:53): > >> > Hi, >> > >> > I have an Apache mod_jk Tomcat server set up on the same host, and want >>to >> > restrict access to the Tomcat so that only the Apache on the localhost >>can >> > connect to port 8009. >> > >> > I tried using org.apache.catalina.valves.RemoteAddrValve, with >> > allow="127.0.0.1", but the issue is that Tomcat picks up the IP address >>of >> > the client, and not the Apache which is passing traffic onto it. >> > >> > Is there a way round this? >> >> >>>address="127.0.0.1"> >> >>Won't that do it? >> >>Chris >> > > I don't think so because that's saying, bind the ajp listener to the > localhost. It's not saying restrict access to the ajp listener to localhost. If it's bound to the loopback interface only, then only local applications will be able to connect to it. Nothing else can access 127.0.0.1. Try it, and then try using telnet i.p.add.ress 8009 from a different machine You should get connection refused. I'm fairly confident that this solves your problem. Chris - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Restricting access to Tomcat
* Edward Quick wrote (28/04/06 13:07): >>* Edward Quick wrote (28/04/06 10:53): >> > >> >> > >> >> > I have an Apache mod_jk Tomcat server set up on the same host, and [...] > > Thanks, I know what you mean but my problem is the Apache is not on the same > box as the Tomcat. Sorry. I misunderstood your original post. I thought you meant they were on the same machine. Chris - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: My Tomcat just not start
It sounds more like an issue with you JAVA_HOME environment variable. Make sure you point your JAVA_HOME at your JDK path. If you have run the upgrade that comes with the JAVA JRE then it only upgrades the JRE and not the JDK. You can only use the JRE if you precompile EVERYTHING. Great for a high performance high volume production environment but if not the JDK needs to compile your JSP's at runtime. I'd suggest downloading the newest JDK from sun's site just to be sure. The first path in the install is the path that needs to go into your system environment variable for JAVA_HOME. Chris Berthold IT Systems Analyst Commercial Refrigerator Door Company 941 . 371 . 8110 x 205 -Original Message- From: Rodrigo Tenorio [mailto:[EMAIL PROTECTED] Sent: Monday, May 01, 2006 1:00 PM To: Tomcat Users List Subject: Re: My Tomcat just not start Yes, I've tryed... But the ".bat" that Manivanaan mentioned do not exist im my Tomcat's directories... Well... Thanks... I will try reinstall JDK, Tomcat and Eclipse. Lung Chan escreveu: > hmm > > did you try to launche tomcat manually? > > with batch file that's in Tomcat/bin/ ? > > eclipse working you said, > then tomcat should work > > Sorry can't help you. > I installe tomcat pretty easily, didn't run into any trouble. > > > On 5/1/06, Rodrigo Tenorio <[EMAIL PROTECTED]> wrote: >> >> Lung >> >> My Virtual Machine configuration in Java tab is "C:\Arquivos de >> programas\Java\jre1.5.0_06\bin\client\jvm.dll"... >> I notice that you say-me to try >> "C:\Java\jdk1.5.0_06\jre\bin\client\jvm.dll", but my jdk in same Java >> diractory is "jdk1.5.0_04". >> I don't know how to explain, but Tomcat functioned normally when I tried >> to start it in Eclipse... >> >> Manivanaan >> >> Well, this file do not exist in my Tomcat directory. >> I'm starting to believe that it must be this... >> >> >> I caught all the installation of the JVM, Tomcat and Eclipse in the >> computer science sector of the college. >> He functions well with the Eclipse... >> >> Now I was still more lost... >> >> - >> To unsubscribe, e-mail: [EMAIL PROTECTED] >> For additional commands, e-mail: [EMAIL PROTECTED] >> >> > - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
