Re: Tomcat, iis connector and case sensitivity

[craig]

Christopher Schultz  christopherschultz.net> writes:

> Is there anything like mod_rewrite for IIS?


IIS Mod-Rewrite

http://www.micronovae.com/ModRewrite/ModRewrite.html



-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Logging servlet time and connections

[craig]

Hello,

   I need to log incoming connections to tomcat (when connected, then
disconnected), as well as the servlet it's running.  I am trying to
find out information on how long its taking to process our servlet as
well as how long connections may be queued.   Is there anything I can
turn on in tomcat to find out this information?

I haven't been able to find a reference to this anywhere.

Thanks,

Craig


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Logging servlet time and connections

[craig]

Sorry, the Tomcat version is 5.5.  See below...

Quoting "Caldarale, Charles R" :


From: cr...@thetimmermans.net [mailto:cr...@thetimmermans.net]
Subject: Logging servlet time and connections

I need to log incoming connections to tomcat


What you really need to do is tell us the version of Tomcat you're   
using.  Since you didn't, this response pertains to the current   
version (6.0.20).



(when connected, then disconnected),


Are you referring to the TCP connection?  Or the user session?


It could be user sessions if thats whats available.  Basically the  
acceptCount for the connector is much higher than the maxThread count.  
 So some connections are being held (queued?) without processing.  We  
would like to know when this is happening and for how long (if  
possible).





as well as the servlet it's running.


A request may pass through many servlets (and filters) before   
completion.  Do you want to know each one?  If so, you'll need to   
implement some logging in your webapp.


No, just when the servlet starts processing and when its complete (we  
do know the exact servlet we are worried about).  Ideally we would  
have had debug logging in the servlet, but the one we are looking at  
does not contain that information so we were hoping tomcat has  
something we can turn on that would tell us when "doPost" is called  
and when its completed.





I am trying to find out information on how long its taking to
process our servlet


Start with the AccessLogValve:
http://tomcat.apache.org/tomcat-6.0-doc/config/valve.html#Access%20Log%20Valve


as well as how long connections may be queued.


If you're referring to queuing for an actual TCP connection, that's   
not visible to Tomcat.  It's done by the OS in its TCP/IP stack, and  
 monitoring of that is OS specific - and you didn't tell us what   
you're using.


See the comment about the accept count above.

Thanks,

Craig



 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE   
PROPRIETARY MATERIAL and is thus for use only by the intended   
recipient. If you received this in error, please contact the sender   
and delete the e-mail and its attachments from all computers.



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org







-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

override 100-continue response in servlet

[Craig Perras]

Hello -

I'm writing a servlet to allow large-file uploads (with ranges and 
resume). One issue I noticed was that if the range is invalid (I do the 
checks in doPut), and I return a 416, the client (curl in this case) 
continues to upload the body (possibly gigabytes of data that will be 
discarded) because tomcat already sent the 100-continue.


Maybe I could just force the connection to close somehow, but I'd like to 
respond with the 416 instead of tomcat's immediate 100-continue. Is there 
a way to override the 100-continue behaviour so I can perform the checks 
and return 100 or 416 myself?


If not, how could I force the connection to close immediately?

thanks,
--craig

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Unable to find valid Certification Path to Requested Target

[Craig Regester]

Good afternoon,



I am trying to quickly implement SSL ability into our existing Apache Tomcat
5.5.23 installation (JDK 1.5.0_12 as base) and have gotten reasonably far
but have run into a bit of a wall.



I can navigate to https://www.sslhost.com/webapp/ and get the index page and
it shows the proper SSL cert attached, but when I try to launch the
application (Electronic Medical Record), I am getting the following error:



Error Sending POST: javax.net.ssl.SSLHandshakeException:
sun.security.validator.ValidatorException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find
valid certification path to requested target



Details

=

[SOAPException: faultCode=Error Sending POST:
javax.net.ssl.SSLHandshakeException:
sun.security.validator.ValidatorException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find
valid certification path to requested targetURL:



I do not believe it is related directly to the EMR product but instead to
perhaps the format of the cert I have from Network Solutions. I am using a
PFX file for the keystore since this cert, so my server.xml looks like this:







I believe the error has to do with the fact that the certificate we received
from Network Solutions had 3 other certs along with it:
AddTrustExternalCARoot.crt, UTNAddTrustServer_CA.crt and
NetworkSolutions_CA.crt.  I ran the following commands to get these chain
certs into the cacerts file (which I presume is what the error is
complaining about… I'm new to this):



keytool -import -trustcacerts -alias root -file
C:\SSLCerts\AddTrustExternalCARoot.crt -keystore "C:\Program
Files\Java\jdk1.5.0_12\jre\lib\security\cacerts"



keytool -import -trustcacerts –alias INTER -file
C:\SSLCerts\UTNAddTrustServer_CA.crt -keystore "C:\Program
Files\Java\jdk1.5.0_12\jre\lib\security\cacerts"



where I ran into a problem perhaps is with the third cert…



keytool -import -trustcacerts -alias INTER2 -file
C:\SSLCerts\NetworkSolutions_CA.crt -keystore "C:\Program
Files\Java\jdk1.5.0_12\jre\lib\security\cacerts"



No where I could find mentioned three certs…. Just a root and an INTER… so
what is the extra cert?



Is it right to think this is what is causing my error?



Thanks for any and all help in advance, it is greatly appreciated!



-Craig Regester

Null datasource trying to connect to JNDI connection.

[Craig Dunn]

Hi, 
 
I have an issue connecting to MSSQL 2000 from Tomcat 6.0 (Linux) using
JNDI. When I try and lookup the DataSource object it comes back as
null I have configured; 
 
In my server.xml: 
 
 
 
 
 
The class calling the data source does so like this; 
 
Context initCtx = new InitialContext(); 
Context envCtx = (Context) initCtx.lookup("java:comp/env"); 
DataSource ds = (DataSource)envCtx.lookup("jdbc/myDB"); 
 
This does not throw any exception, however, ds is null and no physical
connections are made to the database. I would appreciate any advise on
this, its driving me insane. 
 
Also, I have put the following jar's into $CATALINA_HOME/lib on the
advice of other threads; 
commons-pool-1.3.jar 
commons-dbcp-1.2.2.jar 
jtds-1.2.jar 
 
Normal jTDS connections to the same database work fine, so it's nothing
as trivial as a firewall issue. 
 
Thanks in advance 
Craig 
 


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Null datasource trying to connect to JNDI connection.

[Craig Dunn]

Did you see a factory attribute in any of the Tomcat doc for JDBC
DataSources?
http://tomcat.apache.org/tomcat-6.0-doc/jndi-datasource-examples-howto.h
tml


OK, Thanks for that - I've removed the Factory setting, placed 
everything where it is recommended, and yes, I did already have a 
web.xml entry for it - It's now opening up physical connections to the 
database, which is good... However, the following code still returns a 
null DataSource object...




Context initCtx = new InitialContext(); 
Context envCtx = (Context) initCtx.lookup("java:comp/env"); 
DataSource ds = (DataSource)envCtx.lookup("jdbc/myDB"); 


Any ideas on how to trace whats going on?  There are still no exceptions 
being thrown.


Thanks.
Craig


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Null datasource trying to connect to JNDI connection.

[Craig Dunn]

Any ideas on how to trace whats going on?  There are still no exceptions 
being thrown.



Sorry, I've figured that part out now - thanks for your help.


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Idle thread recovery?

[Craig Berry]

My tomcat 6.014 instance is configured with an HTTP 1.1 listener with
maxSpareThreads="50", but after a period of heavy use that allocates 200
connector threads, when usage falls again the extra threads never seem
to be shut down.  I'd expect to eventually see the connector thread
count fall to 50.  Is there something I'm missing?

 

-- 

Craig Berry (x 5046)

 

 

tomcat-4.1 & kaffe; IllegalArgumentException: Attribute must be readable or writable

[Craig Skinner]

  at org.apache.catalina.startup.Catalina.execute (Catalina.java:350)
   at org.apache.catalina.startup.Catalina.process (Catalina.java:129)
   at java.lang.reflect.Method.invoke0 (Method.java)
   at java.lang.reflect.Method.invoke (Method.java:255)
   at org.apache.catalina.startup.Bootstrap.main (Bootstrap.java:156)
ServerLifecycleListener: destroyMBeans: Throwable
javax.management.InstanceNotFoundException: MBeanServer cannot find MBean with 
ObjectName 
Catalina:type=Resource,resourcetype=Global,class=org.apache.catalina.UserDatabase,name=UserDatabase
   at mx4j.server.MBeanServerImpl.findMBeanMetaData (MBeanServerImpl.java:528)
   at mx4j.server.MBeanServerImpl.unregisterMBean (MBeanServerImpl.java:1165)
   at org.apache.catalina.mbeans.MBeanUtils.destroyMBean (MBeanUtils.java:1836)
   at org.apache.catalina.mbeans.ServerLifecycleListener.destroyMBeans 
(ServerLifecycleListener.java:988)
   at org.apache.catalina.mbeans.ServerLifecycleListener.destroyMBeans 
(ServerLifecycleListener.java:1169)
   at org.apache.catalina.mbeans.ServerLifecycleListener.destroyMBeans 
(ServerLifecycleListener.java:1207)
   at org.apache.catalina.mbeans.ServerLifecycleListener.destroyMBeans 
(ServerLifecycleListener.java:826)
   at org.apache.catalina.mbeans.ServerLifecycleListener.lifecycleEvent 
(ServerLifecycleListener.java:207)
   at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent 
(LifecycleSupport.java:119)
   at org.apache.catalina.core.StandardServer.stop (StandardServer.java:2172)
   at org.apache.catalina.startup.Catalina.start (Catalina.java:494)
   at org.apache.catalina.startup.Catalina.execute (Catalina.java:350)
   at org.apache.catalina.startup.Catalina.process (Catalina.java:129)
   at java.lang.reflect.Method.invoke0 (Method.java)
   at java.lang.reflect.Method.invoke (Method.java:255)
   at org.apache.catalina.startup.Bootstrap.main (Bootstrap.java:156)
Stopping service Tomcat-Standalone
Catalina.stop: LifecycleException:  Coyote connector has not been started
LifecycleException:  Coyote connector has not been started
   at org.apache.coyote.tomcat4.CoyoteConnector.stop (CoyoteConnector.java:1296)
   at org.apache.catalina.core.StandardService.stop (StandardService.java:499)
   at org.apache.catalina.core.StandardServer.stop (StandardServer.java:2178)
   at org.apache.catalina.startup.Catalina.start (Catalina.java:494)
   at org.apache.catalina.startup.Catalina.execute (Catalina.java:350)
   at org.apache.catalina.startup.Catalina.process (Catalina.java:129)
   at java.lang.reflect.Method.invoke0 (Method.java)
   at java.lang.reflect.Method.invoke (Method.java:255)
   at org.apache.catalina.startup.Bootstrap.main (Bootstrap.java:156)



$ dmesg | head

OpenBSD 4.0 (GENERIC) #1107: Sat Sep 16 19:15:58 MDT 2006
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel Pentium II ("GenuineIntel" 686-class, 512KB L2 cache) 349 MHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR
real mem  = 133709824 (130576K)
avail mem = 114581504 (111896K)
using 1657 buffers containing 6787072 bytes (6628K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(00) BIOS, date 07/19/99, BIOS32 rev. 0 @ 0xfd861, 
SMBIOS rev. 2.1 @ 0xf7d95 (32 entries)
bios0: IBM 6275500



$ pkg_info | egrep -i 'java|tomcat'

classpath-0.91  essential libraries for java
jakarta-tomcat-4.1.31p4 Java servlet 2.3 and Java server pages 1.2 server
javaPathHelper-0.2p0 helper script for launching java applications
jikes-1.22p0compile Java source into .class files (quickly!)
kaffe-1.1.7p2   kaffe.org's Java JDK1.4 compiler, runtime and libs


$ ps auxwww | fgrep kaffe

_tomcat  25274 98.3 17.9  1692 23404 p1  R  1:27PM3:43.45 
/usr/local/kaffe/jre/bin/kaffe-bin -server -Djava.net.preferIPv4Stack=true 
-Djava.awt.headless=true -Xmx128M -mx256M 
-Djava.endorsed.dirs=/usr/local/jakarta-tomcat-4.1.31/common/endorsed 
-classpath 
/usr/local/lib/tools.jar:/usr/local/jakarta-tomcat-4.1.31/bin/bootstrap.jar 
-Dcatalina.base=/var/tomcat -Dcatalina.home=/usr/local/jakarta-tomcat-4.1.31 
-Djava.io.tmpdir=/var/tomcat/temp org.apache.catalina.startup.Bootstrap start


TIA for any pointers,
-- 
Craig Skinner | http://www.kepax.co.uk | [EMAIL PROTECTED]

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: tomcat-4.1 & kaffe; IllegalArgumentException: Attribute must be readable or writable

[Craig Skinner]

On Wed, Jul 25, 2007 at 09:06:39AM -0500, Caldarale, Charles R wrote:
> > From: Craig Skinner [mailto:[EMAIL PROTECTED] 
> > Subject: tomcat-4.1 & kaffe; IllegalArgumentException: 
> > Attribute must be readable or writable
> > 
> > I have a bog standard tomcat-4.1 & kaffe install on OpenBSD 4.0 i386.
> 
> What happens when you use a real JVM?
> 

Not an option: Sun does not release a JKD for BSD. It is possible to
build one (after much patching) on a much more powerfull box than I have
:-(

About a year ago I had Debian, Sun 1.5 JDK & Tomcat 5 on this box; JSPs
took a few seconds to compile, but then they flew out the NIC faster
than PHPs. So, I don't think that the hardware is too puny to run the
app, just not man enough to build a JKD.

I'm hoping that Sun does eventually open its JDK so that binary install
is possible, & hence tomcat 5.

Any other ideas? Need my /etc/tomcat/catalina.policy file?

It is a bog standard install, no web apps yet.

Thanks.

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: tomcat-4.1 & kaffe; IllegalArgumentException: Attribute must be readable or writable

[Craig Skinner]

On Wed, Jul 25, 2007 at 09:37:21AM -0500, Caldarale, Charles R wrote:
> > Not an option: Sun does not release a JKD for BSD.
> 
> If you can upgrade to Tomcat 5.5, you only need a JRE, not a JDK,

Oh? That's a new one on me. I thought that JSP's are complied at run
time. I have jikes installed.

> and there are Linux-compatible JREs downloadable from Sun.

> > Not an option: Sun does not release a JKD for BSD.

Linux is not BSD compatible, in the same way that Solaris SPARC binaries
will not run on i386 Linux.

> Actually, even
> with Tomcat 4.1, the only part of the JDK that's needed for Tomcat is
> the javac classes from tools.jar, which are all pure Java and can be
> used independently of the rest of the JDK.
> 

I don't think that there is a problem with the complier, else I would
not be getting this:

$ ls  -lh /var/tomcat/work/Standalone/localhost/_/
total 36
-rw-r--r--  1 _tomcat  _tomcat81B Jul 21 13:06 SESSIONS.ser
-rw-r--r--  1 _tomcat  _tomcat  14.6K Jul 21 13:05 index_jsp.java

I think there is some silly mis-config, or file system permission error
as:

javax.management.RuntimeOperationsException: nested exception is 
java.lang.IllegalArgumentException: Attribute must be readable or writable
java.lang.IllegalArgumentException: Attribute must be readable or writable
   at javax.management.MBeanAttributeInfo. (MBeanAttributeInfo.java:60)

I searched for this exception and did not get anything relevant. Any
other ideas? Thanks.

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: tomcat-4.1 & kaffe; IllegalArgumentException: Attribute must be readable or writable

[Craig Skinner]

On Wed, Jul 25, 2007 at 10:31:19AM -0500, Caldarale, Charles R wrote:
> > > If you can upgrade to Tomcat 5.5, you only need a JRE, not a JDK,
> > 
> > Oh? That's a new one on me. I thought that JSP's are complied
> > at run time.
> 
> They are, but TC 5.5 and above come with Jasper built in, and thus do
> not need a JDK.

Ahh. 5.5 package for OpenBSD 4.1, the box is due an upgrade.

> Looks like there's a Linux emulator package available for OpenBSD; don't
> know how well it performs.
> 

Not for Java, used to be employed in the build process though.

OK.

Still, I did have kaffe, jikes and tomcat working on Debian, so I'm not
convinced that there is a problem with the apps, just in the config of
them.

Unless there are no other takers, thanks for the help.
-- 
Craig Skinner | http://www.kepax.co.uk | [EMAIL PROTECTED]

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Server Security

[Craig Skinner]

On Wed, Jul 25, 2007 at 01:37:03PM -0400, Len Popp wrote:
> Yes, you can run Tomcat on port 80. Some OS's (Linux, UNIX) require
> the process to have root privs to use port 80.

Why not run it on 8080 as the _tomcat user, and use the packet filter to
redirect the incoming port 80 traffic to port 8080?

If you are handicapped by using windos, your broadband router may be able
to do port forwarding from its external interface, port 80, to your
"server:8080"

See: http://www.oreilly.com/catalog/tomcat/chapter/ch06.pdf

Also covers security manager and some nice OpenBSD security tips that
can be cludged on Linux.

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Tomcat 5 and 6 Security advise

[Craig Skinner]

On Thu, Jul 26, 2007 at 10:51:01AM +0300, Peter Stavrinides wrote:
> Hi all,
> 
> I need some advice with regards to Tomcat security,

http://www.oreilly.com/catalog/tomcat/chapter/ch06.pdf


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Tomcat 5 and 6 Security advise

[Craig Skinner]

On Thu, Jul 26, 2007 at 03:24:28PM +0300, Peter Stavrinides wrote:
> It makes for interesting reading, however it was written for Tomcat 4... 
> how current is it?? and nothing is mentioned about the benefits of 
> running Apache with Tomcat for securing Tomcat in a purely Java 
> environment, please read the question Craig!

Oh, so you are the one that uses the JavaOS. I was wondering who it was.

Since you are interested in security, I assume that you are using some
sort of UNIX-a-like OS, and that reference discusses chroot, user id's,
packet filtering, etc, etc. These things don't change much WRT TC
release points.

If you are using Solaris, as I guess you are since you work for thieves,
err, a financial company, then you could use zones for tomcat & apache.

I guess you missed the items in the pdf that Chuck spoon fed you.

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Recovery from OutOfMemoryError?

[Craig Berry]

Our Tomcat-based app suffers from occasional OutOfMemoryErrors.  We have
found that we need to manually restart Tomcat when these happen;
frequently the Tomcat process appears to be working after the error, but
is actually crippled in one way or another by the loss of some key
thread.

 

We would very much like to trigger an automated Tomcat restart when an
OOME occurs.  Does anyone have suggestions on the cleanest, safest way
to arrange this?  (We're running Tomcat as a normal process under Linux,
if that matters.)

 

-- 

Craig Berry
Principal Architect and Technical Manager

PortBlue Corporation (http://www.portblue.com/)

 

 

RE: Recovery from OutOfMemoryError?

[Craig Berry]

Fixing the bug would be cool, but the "bug" is actually just too many
users contending for the same heap space, so that's going to be tough.
I'd thought of the log watcher, but that seems a rather blunt
instrument; I was thinking there might be some kind of Tomcat (or JVM)
intrinsic mechanism for this.

-Original Message-
From: Leon Rosenberg [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, July 31, 2007 9:46 AM
To: Tomcat Users List
Subject: Re: Recovery from OutOfMemoryError?

variant 1: a log watcher that checks for OOMe and restarts tomcat
variant 2: fix the bug :-)

regards
Leon

On 7/31/07, Craig Berry <[EMAIL PROTECTED]> wrote:
> Our Tomcat-based app suffers from occasional OutOfMemoryErrors.  We
have
> found that we need to manually restart Tomcat when these happen;
> frequently the Tomcat process appears to be working after the error,
but
> is actually crippled in one way or another by the loss of some key
> thread.
>
>
>
> We would very much like to trigger an automated Tomcat restart when an
> OOME occurs.  Does anyone have suggestions on the cleanest, safest way
> to arrange this?  (We're running Tomcat as a normal process under
Linux,
> if that matters.)
>
>
>
> --
>
> Craig Berry
> Principal Architect and Technical Manager
>
> PortBlue Corporation (http://www.portblue.com/)
>
>
>
>
>
>

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: Recovery from OutOfMemoryError?

[Craig Berry]

Oh, I'm not "blaming" either one.  Normally, our server is quite
adequate to handle the expected user load.  Every now and then we get a
"perfect storm" of too many users asking for too many large-memory
requests, and an OOME happens.  We're investigating ways to increase
capacity, but in the mean time, automating recovery would help keep the
3am phone calls from happening.

We're running Java 6 and Tomcat 6.  It's definitely heap space that's
running out, and we're actively profiling various load scenarios to spot
the most likely targets for memory-use reduction.  But again, a
short-term technique to automate the restart would help a lot.

-Original Message-
From: Caldarale, Charles R [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, July 31, 2007 10:00 AM
To: Tomcat Users List
Subject: RE: Recovery from OutOfMemoryError?

> From: Craig Berry [mailto:[EMAIL PROTECTED] 
> Subject: RE: Recovery from OutOfMemoryError?
> 
> Fixing the bug would be cool, but the "bug" is actually just too many
> users contending for the same heap space

Let's put it another way: your webapp and/or JVM configuration aren't
set up properly to handle the number of users you have; don't blame it
on the users (or Tomcat).

What JVM do you have installed?  What version of Tomcat?  What OS?  Are
you sure you're out of heap space, or is some other resource being
exhausted, such as file handles?  If it's really heap space, is it the
PermGen?  Do you have a memory leak in your webapp?  Have you profiled
what's going on to see the real cause of the problem?

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you
received this in error, please contact the sender and delete the e-mail
and its attachments from all computers.

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: Recovery from OutOfMemoryError?

[Craig Berry]

The trouble is that our memory demand per user session is unpredictable.
Some user sessions do things that barely touch the heap; other sessions
can make huge demands.  It depends on what the user chooses to do during
the session.  So throttling user count down to make it utterly safe
would be impractical.  Instead, statistically, it's unlikely that more
than one or two memory-hungry sessions will be active at any given time.
When we get more than that at once, we risk an OOME. 

-Original Message-
From: Andrew Miehs [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, July 31, 2007 10:01 AM
To: Tomcat Users List
Subject: Re: Recovery from OutOfMemoryError?

On 31/07/2007, at 6:52 PM, Craig Berry wrote:

> Fixing the bug would be cool, but the "bug" is actually just too many
> users contending for the same heap space, so that's going to be tough.
> I'd thought of the log watcher, but that seems a rather blunt
> instrument; I was thinking there might be some kind of Tomcat (or JVM)
> intrinsic mechanism for this.

How much heap space do you have set?! Why don't you just increase it?

If not, why not decrease the number of users you allow onto the server?

Restarting Tomcat is even more 'blunt' then allowing access to
fewer users...

Confused...

Andrew

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: Recovery from OutOfMemoryError?

[Craig Berry]

Hi, Marco,

Yes, our memory allocation sizes are carefully selected, and set near
the maximum available in 32-bit Java.  We're investigating running under
a 64-bit JVM to enable the use of additional heap space.

-Original Message-
From: Marco [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, July 31, 2007 10:40 AM
To: 'Tomcat Users List'
Subject: RE: Recovery from OutOfMemoryError?

Dear Craig,

You are familiar with, even with enough systemmemory, JVM uses limited
memory?
I your application consumes much memory, you could change settings in
the
tomcat6.conf file:

#JAVA_OPTS="-Xminf0.1 -Xmaxf0.3"
JAVA_OPTS="-Xmx1024M -Xms512M"

Or higher, depending on your systemconfiguration.
Not too high though. You need testing, for this could lead Tomcat not to
start.
(second, consider using -server setting: JAVA_OPTS="- server -Xmx1024M
-Xms512M"

More information on
http://java.sun.com/j2se/1.5.0/docs/tooldocs/solaris/java.html#standard


Marco

-Oorspronkelijk bericht-
Van: Craig Berry [mailto:[EMAIL PROTECTED] 
Verzonden: dinsdag 31 juli 2007 18:44
Aan: users@tomcat.apache.org
Onderwerp: Recovery from OutOfMemoryError?

Our Tomcat-based app suffers from occasional OutOfMemoryErrors.  We have
found that we need to manually restart Tomcat when these happen;
frequently the Tomcat process appears to be working after the error, but
is actually crippled in one way or another by the loss of some key
thread.

 

We would very much like to trigger an automated Tomcat restart when an
OOME occurs.  Does anyone have suggestions on the cleanest, safest way
to arrange this?  (We're running Tomcat as a normal process under Linux,
if that matters.)

 

-- 

Craig Berry
Principal Architect and Technical Manager

PortBlue Corporation (http://www.portblue.com/)

 

 



-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Downloading an entire website from a specific URL?

[Craig Burlock]

 Hello smart-people,

This isn't strictly a Tomcat question, however I thought you were the
people to ask:

*Can anyone recommend a utility for downloading an entire website
(including links and child pages) from a specific URL?*

I need to get a copy of a specific section of a wiki. I'm using Windows XP,
so a Windows
or DOS based utility would be awesome.

I have found a few utilities using Google, however I was wanting to know
what the Tomcat community
thought...

Any suggestions?

Re: java.io.IOException: Stream closed occurred frequently on Tomcat 7

[Craig Silk]

Hi Guofeng,

It would be really helpful if I could have the JSP page that is causing
this error and instructions on how to reproduce the error.

Thanks
Craig


On Thu, Apr 26, 2012 at 7:13 AM, Guofeng Zhang wrote:

> Hi,
>
> This is a page generated by JSP using tags developed by us. This page
> works well on JBoss 5 which using Tomcat 6.x (a branch or so). Because our
> app only use web technology, so we port the app to Tomcat 7.0.22 recently.
> When the app is access from browser for a while, "Stream closed" error
> occurred.
>
> I google the internet and do not find useful information about how to
> solve it.
>
> Your advice is appreciated.
>
> Thanks
>
> Guofeng
>
> 2012-04-25 15:47:59,679 INFO  [STDE] java.io.IOException: Stream closed
> 2012-04-25 15:47:59,679 INFO  [STDE] at
> org.apache.jasper.runtime.JspWriterImpl.ensureOpen(JspWriterImpl.java:210)
> 2012-04-25 15:47:59,679 INFO  [STDE] at
> org.apache.jasper.runtime.JspWriterImpl.write(JspWriterImpl.java:322)
> 2012-04-25 15:47:59,679 INFO  [STDE] at
> org.apache.jasper.runtime.JspWriterImpl.write(JspWriterImpl.java:353)
> 2012-04-25 15:47:59,679 INFO  [STDE] at
> org.apache.jasper.runtime.JspWriterImpl.print(JspWriterImpl.java:488)
> 2012-04-25 15:47:59,679 INFO  [STDE] at
> com.vnex.tags.VNeXBodyTagSupport.doEndTag(VNeXBodyTagSupport.java:68)
> 2012-04-25 15:47:59,679 INFO  [STDE] at
> org.apache.jsp.jsp.virtualroom.main_jsp._jspx_meth_vnex_005finstance_005f0(main_jsp.java:1333)
> 2012-04-25 15:47:59,679 INFO  [STDE] at
> org.apache.jsp.jsp.virtualroom.main_jsp._jspService(main_jsp.java:317)
> 2012-04-25 15:47:59,679 INFO  [STDE] at
> org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
> 2012-04-25 15:47:59,679 INFO  [STDE] at
> javax.servlet.http.HttpServlet.service(HttpServlet.java:722)
> 2012-04-25 15:47:59,679 INFO  [STDE] at
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:304)
> 2012-04-25 15:47:59,679 INFO  [STDE] at
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
> 2012-04-25 15:47:59,679 INFO  [STDE] at
> org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:684)
> 2012-04-25 15:47:59,679 INFO  [STDE] at
> org.apache.catalina.core.ApplicationDispatcher.doInclude(ApplicationDispatcher.java:593)
> 2012-04-25 15:47:59,679 INFO  [STDE] at
> org.apache.catalina.core.ApplicationDispatcher.include(ApplicationDispatcher.java:530)
> 2012-04-25 15:47:59,679 INFO  [STDE] at
> com.vnex.tags.GetTag.doEndTag(GetTag.java:209)
> 2012-04-25 15:47:59,679 INFO  [STDE] at
> org.apache.jsp.jsp.OLtemplate_jsp._jspx_meth_vnex_005fget_005f0(OLtemplate_jsp.java:95)
> 2012-04-25 15:47:59,679 INFO  [STDE] at
> org.apache.jsp.jsp.OLtemplate_jsp._jspService(OLtemplate_jsp.java:67)
> 2012-04-25 15:47:59,679 INFO  [STDE] at
> org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
> 2012-04-25 15:47:59,679 INFO  [STDE] at
> javax.servlet.http.HttpServlet.service(HttpServlet.java:722)
> 2012-04-25 15:47:59,679 INFO  [STDE] at
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:304)
> 2012-04-25 15:47:59,679 INFO  [STDE] at
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
> 2012-04-25 15:47:59,679 INFO  [STDE] at
> org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:684)
> 2012-04-25 15:47:59,679 INFO  [STDE] at
> org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:471)
> 2012-04-25 15:47:59,679 INFO  [STDE] at
> org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:402)
> 2012-04-25 15:47:59,679 INFO  [STDE] at
> org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:329)
> 2012-04-25 15:47:59,679 INFO  [STDE] at
> com.vnex.core.MainEntry.doRequest(MainEntry.java:453)
> 2012-04-25 15:47:59,679 INFO  [STDE] at
> com.vnex.core.MainEntry.doGet(MainEntry.java:144)
> 2012-04-25 15:47:59,679 INFO  [STDE] at
> com.vnex.core.MainEntry.doPost(MainEntry.java:159)
> 2012-04-25 15:47:59,679 INFO  [STDE] at
> javax.servlet.http.HttpServlet.service(HttpServlet.java:641)
> 2012-04-25 15:47:59,679 INFO  [STDE] at
> javax.servlet.http.HttpServlet.service(HttpServlet.java:722)
> 2012-04-25 15:47:59,679 INFO  [STDE] at
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:304)
> 2012-04-25 15:47:59,679 INFO  [STDE] at
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
>

OpenJDK 7

[Craig Silk]

Have there been any issues with OpenJDK7 compilations?

I'm seeing several errors in the build :

[javac]
/home/craig/dev/tomcat/build-deps/tomcat7-deps/dbcp/src/java/org/apache/tomcat/dbcp/dbcp/BasicDataSource.java:53:
error: BasicDataSource is not abstract and does not override abstract
method getParentLogger() in CommonDataSource
[javac] public class BasicDataSource implements DataSource {
[javac]^
[javac]
/home/craig/dev/tomcat/build-deps/tomcat7-deps/dbcp/src/java/org/apache/tomcat/dbcp/dbcp/DelegatingStatement.java:46:
error: DelegatingStatement is not abstract and does not override abstract
method isCloseOnCompletion() in Statement
[javac] public class DelegatingStatement extends AbandonedTrace
implements Statement {
[javac]^
[javac]
/home/craig/dev/tomcat/build-deps/tomcat7-deps/dbcp/src/java/org/apache/tomcat/dbcp/dbcp/DelegatingPreparedStatement.java:57:
error: DelegatingPreparedStatement is not abstract and does not override
abstract method isCloseOnCompletion() in Statement
[javac] public class DelegatingPreparedStatement extends
DelegatingStatement
[javac]^
[javac]
/home/craig/dev/tomcat/build-deps/tomcat7-deps/dbcp/src/java/org/apache/tomcat/dbcp/dbcp/DelegatingCallableStatement.java:58:
error: DelegatingCallableStatement is not abstract and does not override
abstract method getObject(String,Class) in CallableStatement
[javac] public class DelegatingCallableStatement extends
DelegatingPreparedStatement
[javac]^
[javac]   where T is a type-variable:
[javac] T extends Object declared in method
getObject(String,Class)
[javac]
/home/craig/dev/tomcat/build-deps/tomcat7-deps/dbcp/src/java/org/apache/tomcat/dbcp/dbcp/DelegatingConnection.java:65:
error: DelegatingConnection is not abstract and does not override abstract
method getNetworkTimeout() in Connection
[javac] public class DelegatingConnection extends AbandonedTrace
[javac]^
[javac]
/home/craig/dev/tomcat/build-deps/tomcat7-deps/dbcp/src/java/org/apache/tomcat/dbcp/dbcp/DelegatingDatabaseMetaData.java:41:
error: DelegatingDatabaseMetaData is not abstract and does not override
abstract method generatedKeyAlwaysReturned() in DatabaseMetaData
[javac] public class DelegatingDatabaseMetaData extends AbandonedTrace
[javac]^
[javac]
/home/craig/dev/tomcat/build-deps/tomcat7-deps/dbcp/src/java/org/apache/tomcat/dbcp/dbcp/DelegatingResultSet.java:61:
error: DelegatingResultSet is not abstract and does not override abstract
method getObject(String,Class) in ResultSet
[javac] public class DelegatingResultSet extends AbandonedTrace
implements ResultSet {
[javac]^
[javac]   where T is a type-variable:
[javac] T extends Object declared in method
getObject(String,Class)
[javac]
/home/craig/dev/tomcat/build-deps/tomcat7-deps/dbcp/src/java/org/apache/tomcat/dbcp/dbcp/PoolableCallableStatement.java:38:
error: PoolableCallableStatement is not abstract and does not override
abstract method getObject(String,Class) in CallableStatement
[javac] public class PoolableCallableStatement extends
DelegatingCallableStatement implements CallableStatement {
[javac]^
[javac]   where T is a type-variable:
[javac] T extends Object declared in method
getObject(String,Class)
[javac]
/home/craig/dev/tomcat/build-deps/tomcat7-deps/dbcp/src/java/org/apache/tomcat/dbcp/dbcp/PoolablePreparedStatement.java:41:
error: PoolablePreparedStatement is not abstract and does not override
abstract method isCloseOnCompletion() in Statement
[javac] public class PoolablePreparedStatement extends
DelegatingPreparedStatement implements PreparedStatement {
[javac]^
[javac]
/home/craig/dev/tomcat/build-deps/tomcat7-deps/dbcp/src/java/org/apache/tomcat/dbcp/dbcp/PoolingConnection.java:45:
error: PoolingConnection is not abstract and does not override abstract
method getNetworkTimeout() in Connection
[javac] public class PoolingConnection extends DelegatingConnection
implements Connection, KeyedPoolableObjectFactory {
[javac]^
[javac]
/home/craig/dev/tomcat/build-deps/tomcat7-deps/dbcp/src/java/org/apache/tomcat/dbcp/dbcp/PoolingDataSource.java:45:
error: PoolingDataSource is not abstract and does not override abstract
method getParentLogger() in CommonDataSource
[javac] public class PoolingDataSource implements DataSource {
[javac]^
[javac]
/home/craig/dev/tomcat/build-deps/tomcat7-deps/dbcp/src/java/org/apache/tomcat/dbcp/dbcp/PoolingDriver.java:52:
error: PoolingDriver is not abstract and does not override abstract method
getParentLogger() in Driver
[javac] public class PoolingDriver implements Driver {
[javac]^
[javac]
/home/craig/dev/tomcat/build-deps/tomcat7-deps/dbcp/src/java/org/apache/tomcat/dbcp/dbcp/cpdsadapter/DriverAdapterCPDS.java:87:
error: DriverAdapterCPDS is not abstract and does not override abstract
m

Re: Secure Tomcat With SSL

[Craig Taylor]

This tool has saved me a few times over:
http://sourceforge.net/projects/portecle/


On Mon, Oct 28, 2013 at 4:41 PM, Ognjen Blagojevic <
ognjen.d.blagoje...@gmail.com> wrote:

> Chris,
> Leo,
>
> On 28.10.2013 18:23, Leo Donahue - OETX wrote:
>
>> I've been having some trouble lately converting keys and certs from
>>> OpenSSL
>>> format into Java's JKS format. I follow all of the magical incantations
>>> I can find
>>> online to convert key+cert into a Java keystore but I get no love. Is
>>> there a
>>> decent guide anywhere for how to do this?
>>>
>>
>>  From my book of spells.
>>
>> Used this to configure SSL in Apache httpd for subversion edge.
>>
>> openssl pkcs12 -export -in C:/server.crt -inkey C:/server.key -name
>> svnedge -out C:/server.p12
>>
>> keytool -importkeystore -srckeystore C:/server.p12 -srcstoretype PKCS12
>> -destkeystore C:/svnedge.jks
>>
>
> During TLS handshake, server may respond with complete certificate chain
> (server certificate with all intermediate certificates) or with incomplete
> certificate chain (e.g. server certificate, without any/some intermediate
> certificates). Most servers, around 88% of them, deliver full certificate
> chain, according to research mentioned here [1].
>
> Complete certificate chain is being recognized as valid by every client
> that implements TLS (assuming that root CA certificate is in the client
> keystore). Incomplete certificate chain may be recognized as valid by some
> TLS clients (e.g. Internet Explorer), using information from X.509v3
> extension called Authority Information Access (AIA), or using previously
> validated certificate chains. Some clients will not recognize incomplete
> certificate chain as valid (e.g. openssl or Apache HTTPCommons Client).
> Even the same client may sometimes recognize incomplete certificate chains
> as valid and sometimes as invalid, thanks to caching of intermediate
> certificates. Therefore, it is best practice always to deliver complete
> certificate chain to the client.
>
> Having root CA certificate in the chain is unnecessary, as it wastes your
> bandwidth during TLS handshake (your client already have root CA
> certificate in its own keystore).
>
> Assuming that intermediate certificates (intermediates.pem), server
> certificate (server.pem) and private key (server.key) are all in PEM
> format, you need to add option -certfile to command Leo provided:
>
> openssl pkcs12 -export -out keystore.p12 -name myserver -in server.pem
> -inkey server.key -certfile intermediates.pem
>
>
> Verify that the contents of the p12 keystore with:
>
> openssl pkcs12 -in keystore.p12 -nokeys
>
> You should verify that the certificate chain is complete (up to, but
> without root CA certificate).
>
> Now, you may use that keystore for BIO and NIO connectors:
>
> keystoreFile="keystore.p12" keyAlias="myserver" keystoreType="pkcs12"
>
> Or you may convert it to JKS keystore as Leo suggests.
>
> -Ognjen
>
> [1] 
> https://bugzilla.mozilla.org/**show_bug.cgi?id=399324#c72
>
> --**--**-
> To unsubscribe, e-mail: 
> users-unsubscribe@tomcat.**apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>

Tomcat endpoints are becoming extremely unresponsive

[Craig Lynch]

We run embedded tomcat on version 8, and for some reason are consistently
seeing extreme slowness across all Tomcat endpoints at very consistent
intervals of three hours. Once a site gets into the slow state, it is never
able to recover, and stays unresponsive (requests take tens of minutes to
hours) until the service is manually restarted.



There are no resource issues that I've been able to detect (heap seems
fine, no apparent memory leaks, cpu is fine, network/db connections aren't
exhausted, etc). Tomcat does seem to receive the requests, but for some
reason does not seem to be processing them.



There is an exception that occurs right around the time the service goes
into a bad state, which is the reason I believe this to be a Tomcat issue.
The stack trace is as follows:



Exception in thread "mc-26" java.lang.IllegalMonitorStateException



at java.util.concurrent.locks.ReentrantLock$Sync.tryRelease(Unknown
Source)



at
java.util.concurrent.locks.AbstractQueuedSynchronizer.release(Unknown
Source)



at java.util.concurrent.locks.ReentrantLock.unlock(Unknown Source)



at java.util.concurrent.LinkedBlockingQueue.take(Unknown Source)



at org.apache.tomcat.util.threads.TaskQueue.take(TaskQueue.java:103)



at org.apache.tomcat.util.threads.TaskQueue.take(TaskQueue.java:31)



at java.util.concurrent.ThreadPoolExecutor.getTask(Unknown Source)



at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)



at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)



at
org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)



at java.lang.Thread.run(Unknown Source)



Having done some additional testing, I can elaborate on the state of things
when this exception occurs:

* The ReentrantLock that is throwing the exception is meant to throw the
IllegalMonitorStateException when a thread other than the thread that
created the lock tries to release it. Interestingly, when tryRelease() is
called, the owning thread is actually null, which means that the lock isn't
currently taken or owned by anyone.



* The lock's state is 0, which is consistent with the lock's owning thread
being null.



* The tryRelease funtion takes an int argument "releases", which is 1
(you'd find that in the stacktrace anyway, since it's passed in as a
constant further up, but mentioning it might save some time).



I realize that the LinkedBlockingQueue and ReentrantLock are java core
concurrency libraries, but it seems like Tomcat is getting into a bad state
once the error occurs, and is unable to exit the bad state. The executing
thread that gets this exception dies, and almost all other threads end up
staying almost all the time in an unsafe parked state. The
IllegalMonitorStateException also generally occurs in several threads after
it's shown up for the first time.



I'm not sure how to describe how to reproduce this issue, other than saying
that everyone at my company with our service installed experiences it very
reliably every three hours. We've been thus far unable to determine what
causes it, however. My personal theory is that somehow the TaskQueue is
getting into a state where it can only rarely give tasks to the executor
threads, but I don't know what causes things to enter that state. From what
we can tell, it does seem to be related to our Jersey endpoints.



If you need any additional information, just let me know and I'll be happy
to provide anything that might be useful. I've been getting most of my
information from thread/heap dumps as well as modifying local versions of
Tomcat to provide additional logging.



Most of our services are running Tomcat 8.0.32, but seem to still exhibit
the problem on versions at least as early as 8.0.15 and as late as 8.0.34.



I submitted this as a bug (59737), which Mark Thomas immediately closed
saying that there’s nothing to indicate that this is a Tomcat bug. I’m
happy to provide any additional information that might be useful, most of
I’ve looked at so far seems to point to Tomcat, though I would be ecstatic
if someone could point me to where I’m messing up J

How to stop org.apache.jasper.servlet.TldScanner.scanJars via my war file's local context.xml rather than altering Tomcat 8?

[Cothren, Craig]

I'm trying to prevent the...

[localhost-startStop-1] org.apache.jasper.servlet.TldScanner.scanJars At least 
one JAR was scanned for TLDs yet contained no TLDs. Enable debug logging for 
this logger for a complete list of JARs that were scanned but no TLDs were 
found in them. Skipping unneeded JARs during scanning can improve startup time 
and JSP compilation time.

...error from showing up for my war file deployment since I have no TLD defined.

There are many questions and answers regarding this issue be all seem to point 
to altering Tomcat's global configuration, which I do not want.

How can I, via my war file's local context.xml file, inform the scanner that no 
TLD exists and therefore a scan and subsequent warning is unnecessary?

- dacracot

smime.p7s
Description: S/MIME cryptographic signature

Re: How to stop org.apache.jasper.servlet.TldScanner.scanJars via my war file's local context.xml rather than altering Tomcat 8?

[Cothren, Craig]

I’m using tomcat 8.0.x so the 8.5 documentation may not apply, but I decided to 
try it anyway.

Added  http://tomcat.apache.org/tomcat-8.5-doc/config/jar-scanner.html
> 
> Mark
> 
> 
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
> 



smime.p7s
Description: S/MIME cryptographic signature

Tomcat Times out with CAN'T REACH THIS PAGE msg after new SSL Certs imported

[Nobles, Craig (Charles)]

Greetings - we're looking for any help available on this error we're getting 
after importing new SSL certificates.  Everything appears to go well with all 
of the SSL certificate steps but our Tomcat 9.0.26 Web Front-End server (used 
to operate our SAP Business Intelligence 4.2 SP8 environment) fails with msg 
"Can't reach this page".

In IE, the "More information" option shows msg of "There was a temporary DNS 
error" and "Error Code: INET_E_RESOURCE_NOT_FOUND".

In chrome, the msg is "This site can't be reached" - and "Server took too long 
to respond".  The additional msg below that says "ERR_CONNECTION_TIMED_OUT".

Has anyone encountered this?  How do we get Tomcat (or other) to give us more 
information on what is happening?  Our Tomcat logs are showing no information 
for this.

Thanks for any help,

Craig


*-*-*- Presbyterian_Healthcare_Services_DISCLAIMER -*-*-*
This message originates from Presbyterian Healthcare Services or one of its 
affiliated organizations.
It contains information, which may be confidential or privileged, and is 
intended only for the individual or entity named above. It is prohibited for 
anyone else to disclose, copy, distribute or use the contents of this message. 
All personal messages express views solely of the sender, which are not to be 
attributed to Presbyterian Healthcare Services or any of its affiliated 
organizations, and may not be distributed without this disclaimer. 

If you received this message in error, please notify us immediately at 
i...@phs.org 
If you would like more information about Presbyterian Healthcare Services 
please visit our web site http://www.phs.org

RE: Restarting Tomcat remotely

[Noah, Craig [USA]]

The only solution I know is to be able to remotely log into the server to run 
the shutdown/startup scripts.

Craig Noah
Booz Allen Hamilton
noah_cr...@bah.com

From: Asha K S [a...@adobe.com]
Sent: Monday, May 02, 2011 11:29 PM
To: tomcat-u...@jakarta.apache.org
Subject: Restarting Tomcat remotely

Hi,

Can anybody  please let me know if there is way to start/stop Tomcat 
remotely(Not start/stop of applications but server itself)

Thanks,
Asha

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Configuring users

[Noah, Craig [USA]]

All,

 

I'm trying to configure a user to use the manager web application.  I have
read the comments in the tomcat-users.xml file on my server and added the
following two lines to the file:

 





 

I have saved the file and restarted the server, but am still unable to get
to the manager web application.  When I try to browse to the manager web
application at http://localhost:8084/manager/, I get a 404 report stating
the requested resource is not available.  What am I missing?

 

Craig Noah

Booz Allen Hamilton

noah_cr...@bah.com

 



smime.p7s
Description: S/MIME cryptographic signature

RE: Configuring users

[Noah, Craig [USA]]

Sorry.  I'm using tomcat 6.0.26.  I made sure my changes are not within
comments.  The full file is:











-Original Message-
From: Mark Thomas [mailto:ma...@apache.org] 
Sent: Monday, November 15, 2010 9:55 AM
To: Tomcat Users List
Subject: Re: Configuring users

On 15/11/2010 15:51, Noah, Craig [USA] wrote:
> All,
> 
> I'm trying to configure a user to use the manager web application.  I have
> read the comments in the tomcat-users.xml file on my server and added the
> following two lines to the file:
> 
> 
> 
> 
> 
> I have saved the file and restarted the server, but am still unable to get
> to the manager web application.  When I try to browse to the manager web
> application at http://localhost:8084/manager/, I get a 404 report stating
> the requested resource is not available.  What am I missing?

Telling us which Tomcat version and providing the complete contents of
tomcat-users.xml would be a start. Without that, my best guess is you
didn't spot the comment markers in the default file.

Mark

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



smime.p7s
Description: S/MIME cryptographic signature

RE: Configuring users

[Noah, Craig [USA]]

Thanks, that's better.  I get prompted for a username and password, but it
won't accept the values I've configured.  No, I don't have caps lock turned
on.

-Original Message-
From: Mark Thomas [mailto:ma...@apache.org] 
Sent: Monday, November 15, 2010 10:04 AM
To: Tomcat Users List
Subject: Re: Configuring users

On 15/11/2010 16:01, Noah, Craig [USA] wrote:
> Sorry.  I'm using tomcat 6.0.26.
OK, manager is the correct role.

>  I made sure my changes are not within
> comments.  The full file is:
Looks good.

Try:
http://localhost:8084/manager/html

Mark

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



smime.p7s
Description: S/MIME cryptographic signature

RE: Configuring users

[Noah, Craig [USA]]

I don't remember making changes to the server.xml file, but here is mine:



  
  
  
  
  

  

  

  




  
  

  

  


-Original Message-
From: Mark Thomas [mailto:ma...@apache.org] 
Sent: Monday, November 15, 2010 10:13 AM
To: Tomcat Users List
Subject: Re: Configuring users

On 15/11/2010 16:07, Noah, Craig [USA] wrote:
> Thanks, that's better.  I get prompted for a username and password, but it
> won't accept the values I've configured.  No, I don't have caps lock
turned
> on.

OK. Moving in the right direction.

Clearly, from the URL you provided, the default server.xml isn't being
used. Has the Realm definition been changed? A copy of the complete
server.xml (less comments with any sensitive info replaced with ***) is
the next thing to look at.

Mark

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



smime.p7s
Description: S/MIME cryptographic signature

RE: Configuring users

[Noah, Craig [USA]]

Thank you.  That was it.  I'm using NetBeans and was trying to start the
server within the IDE.  Why can't they just use the scripts themselves?  Oh
well.   I'm up and running now.  Thanks Mark and Charles for your help.

Craig

-Original Message-
From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] 
Sent: Monday, November 15, 2010 10:23 AM
To: Tomcat Users List
Subject: RE: Configuring users

> From: Mark Thomas [mailto:ma...@apache.org] 
> Subject: Re: Configuring users

> Clearly, from the URL you provided, the default server.xml isn't being
> used. Has the Realm definition been changed? A copy of the complete
> server.xml (less comments with any sensitive info replaced with ***) is
> the next thing to look at.

Also tell us how you're launching Tomcat.  If you're doing it from inside
and IDE - don't; IDEs often substitute their own configurations rather than
using the one you specify.  Use the provided scripts and see what happens.

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you received
this in error, please contact the sender and delete the e-mail and its
attachments from all computers.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



smime.p7s
Description: S/MIME cryptographic signature

RE: String index out of range when compilling a file

[Noah, Craig [USA]]

Specifically, are you sure that your String is not null?

-Original Message-
From: Christopher Schultz [mailto:ch...@christopherschultz.net] 
Sent: Wednesday, November 17, 2010 10:42 AM
To: Tomcat Users List
Subject: Re: String index out of range when compilling a file

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

To whom it may concern,

On 11/17/2010 3:56 AM, rcabanas wrote:
> java.lang.StringIndexOutOfBoundsException: String index out of range: -1
> java.lang.String.substring(String.java:1937)
> java.lang.String.substring(String.java:1904)
> org.n52.wps.webadmin.ConfigUploadBean.compile(ConfigUploadBean.java:233)

To add to Mark's comment: this is not a problem with JSP compilation,
it's a problem with your JSP. The compiler is working correctly, your
code is not.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkzkBdcACgkQ9CaO5/Lv0PDOuQCgjuxXN93qcxEt4jGcZ/OuI6N9
4s4An0tfxOKeUUT63Kmt1jFUHvZBr3LF
=Y7Aa
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



smime.p7s
Description: S/MIME cryptographic signature

tomcat 5.5.15 - does JULI required a host tag defined realm?

[Raymond, Craig (US SSA)]

I am in the middle of converting a web server from Tomcat 5.0.25 to
5.5.15, and I am using JULI.

 

In the server.xml are three s defined, two of which have a realm
defined in the host tag.  The third has the realm defined in its
ROOT.xml context tag.  Each has a logging.properties file in its
WEB-INF/classes directory.

 

The third host (without the realm defined in server.xml) does not log to
the file defined in its logging.properties file, though the file is
created with a length of zero bytes.  The logging information is output
in the cataline.date.log file.

 

If I move the realm definition from the ROOT.xml to server.xml, the
logging occurs as expected (e.g. it is output to the file defined in
logging.properties).  It appears as if JULI requires a host defined
realm?

 

I hope I've explained the situation adequately.

 

Does anyone have ideas of this?  Is a realm in the host tag required for
JULI?

 

Thanks in advance, Craig.

 

RE: tomcat 5.5.15 - does JULI required a host tag defined realm?

[Raymond, Craig (US SSA)]

The logging.properties files are clones of the example at the bottom of
the Tomcat 5.5 docs logging.htm page, with the exception of the
..FileHandler.prefix being changed.  They reside as below for all three
servers (where ServerRootDir is different for each server):

F:/InetPub/ServerRootDir/WEB-INF/classes/logging.properties

The realm for the server in question is as below:



Thanks Boris, I appreciate the help.

Sincerely,
Craig

> -Original Message-
> From: Boris Unckel [mailto:[EMAIL PROTECTED]
> Sent: Thursday, January 26, 2006 10:45 AM
> To: Tomcat Users List
> Subject: Re: tomcat 5.5.15 - does JULI required a host tag defined
realm?
>
> SNIP
>
> No, thats more a problem of the classloader. The logging config is per
> Context Classloader. So you can place a logging properties at any
place in
> the classloader hierarchy.
> It seems that you have same the logging.properties in your webapp, but
> just
> changed the entry of the realm.
> Does the entry of the realm change the classloader (hierarchy)
behaviour?
> 
> Please send all your logging.properties and a short comment where they
> placed.
> 
> Regards
> Boris
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: tomcat 5.5.15 - does JULI required a host tag defined realm?

[Raymond, Craig (US SSA)]

Boris,
I tried your logging.properties with the addition of the .handlers to no
effect.

On one of the other servers (where we use a custom realm) I moved the
realm into the ROOT.xml file - same affect (e.g. file created, but log
info goes to catalina.date.log).

Perhaps it's a "feature".  :-)

> -Original Message-
> From: Boris Unckel [mailto:[EMAIL PROTECTED]
> SNIP
> 
> I have read your mails and points several times, I am wondering that
> this happens.
> Again: The only change is the place where the realm config appears,
> nothing else?
> After the change everything works as expected?
> 
> Please try the following in the webapp logging.properties of the third
> host:
> 
> handlers = org.apache.juli.FileHandler,
java.util.logging.ConsoleHandler
> .handlers = org.apache.juli.FileHandler,
java.util.logging.ConsoleHandler
> 
> 
> # Handler specific properties.
> # Describes specific configuration info for Handlers.
> 
> 
> org.apache.juli.FileHandler.level = FINE
> org.apache.juli.FileHandler.directory = ${catalina.base}/logs
> org.apache.juli.FileHandler.prefix = YOUR_PREFIX_HERE.
> 
> java.util.logging.ConsoleHandler.level = FINE
> java.util.logging.ConsoleHandler.formatter =
> java.util.logging.SimpleFormatter
> 
> 
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: tomcat 5.5.15 - does JULI required a host tag defined realm?

[Raymond, Craig (US SSA)]

Boris,
ASF Bugzilla # 38415
BerliOS bug # 006212

Both with a subject of
"JULI logs to catalina.date.log if no  in "

have been submitted.

If I can help (e.g. try some new code on my dev server, etc.) please let
me know.  Your help is appreciated.

Sincerely,
Craig

> -Original Message-
> From: Boris Unckel [mailto:[EMAIL PROTECTED]
> Sent: Thursday, January 26, 2006 3:58 PM
> To: Tomcat Users List
> Subject: Re: tomcat 5.5.15 - does JULI required a host tag defined
realm?
> 
> Hi,
> 
> I will try to fix this. Please post a bugzilla record with here at
> Apache (please post the id in this thread).
> Another good place for this special bug is
> http://developer.berlios.de/bugs/?group_id=5430
> of x4juli - http://www.x4juli.org
> which will suffer from the same problem (I have to check that).
> 
> Regards
> Boris
> 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: tomcat 5.5.15 - does JULI required a host tag defined realm?

[Raymond, Craig (US SSA)]

Remy, Boris,
I have downloaded and built to the latest nightly build, and the logging
is working correctly.

Thanks, Craig.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

helping building JSVC for Tomcat 8.5.45

[Goldstein, Craig A CIV DTIC ITS (USA)]

I pulled down tomcat 8.5.45 in the commons-daemon-1.2.0-native-src/unix the 
thedirectory is missing the necessary files to run the configure command. See 
contents of directory below.

apache-tomcat-8.5.45/bin/commons-daemon-1.2.0-native-src/unix

configure.in  INSTALL.txt  Makedefs.in  Makefile.in  man  native  support




our older version has the correct files.

tomcat-8.5.31/bin/commons-daemon-1.1.0-native-src/unix
config.nice  config.status  configure  configure.in  INSTALL.txt   Makedefs  
Makedefs.in  Makefile  Makefile.in  man  native  support


Is there a mirror that has the correct build in it.