Tomcat Security - Disable the http connector

Hi, If I only allow connections to tomcat through apache (mod_jk), is it ok then to turn off the the http connector, ie (for example in tomcat 6) So that tomcat only listens on the AJP port? Thanks. Best Regards, Jacob --

Re: Cookie Rookie - cannot delete session cookie

Mike- I dont see the attribute 'duration' with either accessor or mutator the attribute maxAge which when set to -1 will delete the cookie Take a look at http://java.sun.com/products/servlet/2.2/javadoc/javax/servlet/http/Cookie.html javax.servlet.http.Cookie.setMaxAge(-1); HTH/ M-- This email m

Re: How to load a static class on Tomcat startup

On 6/1/07, Caldarale, Charles R <[EMAIL PROTECTED]> wrote: > From: Andrea Sacco [mailto:[EMAIL PROTECTED] > Subject: How to load a static class on Tomcat startup > > I want to know how I can configure Tomcat to load my > Singleton class on his startup routine? Make the Singleton class implemen

Re: About deploying

On 6/1/07, Trond Kristiansen <[EMAIL PROTECTED]> wrote: Hello! This is my first post so I hope it ended up at the right place. I have only used tomcat on my laptop Integrated in my Netbeans IDE, but now I've got my fist web host and they use a shared tomcat 4.1 I think. They have given my i WE

Re: Tomcat session varibale

On 6/1/07, ibozo <[EMAIL PROTECTED]> wrote: Hello all, I have created a file of servlet pages that publish those pages in Tomcat 6. I have a log in page, programmed by servlet and also another page that activates the application acording to the given parameters by serching webserver. I should

Re: Tomcat changing date format in catalina.out after restart

Dear Rainer simply great, it's exact that the guy who restart the server did it restarting services with webmin. Not as the good user. As he told me he rebooted the server I didn't saw the mistake. Thanks a lot for your helpful suggestions. Regards Daniele On Jun 02, 2007 12:50 AM, Rainer

Re: Tomcat changing date format in catalina.out after restart

Depending on the way you start the application, the Locale could have changed, bacause a differet user or the same user with a newer shell profile started the process. You should be able to find out the environment of the running process on the linux system by looking at /proc/PID/environ, whe

RE: Re: Tomcat TLS with PKCS11 token

Thanks for the reply, however I think I've tried that and got some errors stating that Tomcat couldn't find the keystore file. Here is a snippet of my server.xml file >From Tomcat 5.5.23 - (I know I mentioned Tomcat 6 in the original thread but that was a mistake) mailto:[EMAIL PROTECTED] On Beh

Re: [OT] Connection Pool and Connections

Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 lightbulb, (I marked this as off-topic since it's really a JDBC/DBCP issue, not a Tomcat one. I'm still happy to answer.) lightbulb432 wrote: Is it possible that myStatement1 and myStatement2 would be run using different

Tomcat changing date format in catalina.out after restart

Hi,   my client have Apache 2.0.40, Tomcat 5.0.19 on a redhat 8.0 3.2-7 (2.4.20-28-8) and tomcat works on a distant oracle db.     the client called me because his tomcat/oracle application giving various problems.   We restarted the server but the tomcat log disk was full (/usr), so it wasn't

Re: tomcat comet, not working...

forgive my ignorance please, but what exactly is tomcat comet anyway?? I have never heard of it before so "enlighten" me about it. Márton Szabolcs wrote: Hi! Ive been trying to use tomcat comet for about a week, but i have no success. I have tomcat 6.0.13, with windows xp. I install the tomc

Tomcat session varibale

Hello all, I have created a file of servlet pages that publish those pages in Tomcat 6. I have a log in page, programmed by servlet and also another page that activates the application acording to the given parameters by serching webserver. I should use the taken variable on the log in page in

Re: Connection Pool and Connections

Hi LightBulb... No its not going to work like I think you want it to... Statement stmt= con.createStatement(); ResultSet resultSet = stmt.executeQuery(sSql); //For Select and say Statement stmt = con.createStatement(); recs

Re: NIOSelector busy wait

Filip Hanik - Dev Lists wrote: Jeanfrancois Arcand wrote: Hi, Sebastiaan van Erk wrote: Hi, Filip Hanik - Dev Lists wrote: it will return 0 after the timeout has expired if there was no events. most likely its not a bug in the JDK but in your linux kernel/distro I just found the Sun bug r

RE: How to load a static class on Tomcat startup

> From: Andrea Sacco [mailto:[EMAIL PROTECTED] > Subject: How to load a static class on Tomcat startup > > I want to know how I can configure Tomcat to load my > Singleton class on his startup routine? Sounds like you need a Listener: http://tomcat.apache.org/tomcat-6.0-doc/config/engine.html#L

Re: [OT] Connection Pool and Connections

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 lightbulb, (I marked this as off-topic since it's really a JDBC/DBCP issue, not a Tomcat one. I'm still happy to answer.) lightbulb432 wrote: > Is it possible that myStatement1 and myStatement2 would be run using > different physical database connect

Re: NIOSelector busy wait

Filip Hanik - Dev Lists wrote: Sebastiaan van Erk wrote: Hi, Filip Hanik - Dev Lists wrote: it will return 0 after the timeout has expired if there was no events. most likely its not a bug in the JDK but in your linux kernel/distro I just found the Sun bug report + workaround confirming this

Re: installing Java and Tomcat

These guys sell one http://www.advancedinstaller.com/features/jre-installer.html These guys give it away http://sourceforge.net/project/downloading.php?groupname=nsis&filename=nsis-2.27-src.tar.bz2&use_mirror=puzzle Both JRE and Tomcat have windows EXE packages... Any installer should allow you

Re: [maybe not solved] comet read event

Hmm, ok. Sending the headers up causes the comet servlet to behave as I expected, one BEGIN event generated on the first client request and one READ event generated on the second request. In my simple test, the comet servlet doesn't receive the headers as data. If I don't send up the headers on

Re: NIOSelector busy wait

Jeanfrancois Arcand wrote: Hi, Sebastiaan van Erk wrote: Hi, Filip Hanik - Dev Lists wrote: it will return 0 after the timeout has expired if there was no events. most likely its not a bug in the JDK but in your linux kernel/distro I just found the Sun bug report + workaround confirming this

About deploying

Hello! This is my first post so I hope it ended up at the right place. I have only used tomcat on my laptop Integrated in my Netbeans IDE, but now I've got my fist web host and they use a shared tomcat 4.1 I think. They have given my i WEB-INF folder with subfolder, jsp, classes and lib. In

How to load a static class on Tomcat startup

Hello everybody, I want to know how I can configure Tomcat to load my Singleton class on his startup routine? This class implement a cache that I want to stay in memory until Tomcat is shutted down. I've read about context but it seem to load the class only on a particular URL request.. I want

Re: Tomcat Hogging CPU

Omar: What version of Tomcat do you use? -- Original message -- From: Omar Eljumaily <[EMAIL PROTECTED]> > What's your definition of a "connection?" Is it a session? I've had an > average of about 300 active sessions which amounted to about 15,000 > unique visits per

Re: NIOSelector busy wait

Hi, Sebastiaan van Erk wrote: Hi, Filip Hanik - Dev Lists wrote: it will return 0 after the timeout has expired if there was no events. most likely its not a bug in the JDK but in your linux kernel/distro I just found the Sun bug report + workaround confirming this issue as a Linux JDK bug.

Connection Pool and Connections

When using the tomcat-dbcp DataSource, when my web application code gets a connection: myConnection = myDataSource.getConnection(); then executes multiple separate statements myStatement1 = myConnection.createStatement(); myStatement1.execute(); myStatement2 = myConnection.createStatement(); m

Re: [solved] comet read event

you're treading dangerous waters my friend. the comet is somewhat like a real socket, and sending up new HTTP headers might end up just being data for the Comet servlet. Filip Peter Warren wrote: My client code was the problem. I had been thinking of the comet interaction with the server as

Re: APR not working

you might have the wrong version of APR or tcnative, when the system stops, do a kill -3 on the process to get the thread dump Filip [EMAIL PROTECTED] wrote: TOMCAT: 6.0.13 OS: linux-2.6.18-4-686 JAVA: java-1.5.0-sun-1.5.0.10 i tried to run with APR, followed http://tomcat.apache.org/tomcat

Re: NIOSelector busy wait

Sebastiaan van Erk wrote: Hi, Filip Hanik - Dev Lists wrote: it will return 0 after the timeout has expired if there was no events. most likely its not a bug in the JDK but in your linux kernel/distro I just found the Sun bug report + workaround confirming this issue as a Linux JDK bug. The w

RE: Deploying WS on Tomcat

> From: Carlos S. Zamudio [mailto:[EMAIL PROTECTED] > Subject: Deploying WS on Tomcat > > I am wondering what the mechanisms are for Tomcat to free > up resources once it has completed the calculation request. Standard Java garbage collection rules apply. > What happens now is that I quickly ru

Re: [solved] comet read event

My client code was the problem. I had been thinking of the comet interaction with the server as similar to a socket, open it once and then read and write merrily from either end. I forgot that comet is still operating over http and the client needs to send http headers for each request. So the f

Re: Load Balance sticky_session=True, am I missing something?

Unfortunately most of the generic HowTos are very outdated. If you like to contribute a docs patch: http://tomcat.apache.org/connectors-doc/miscellaneous/doccontrib.html Regards, Rainer Tim Alberts wrote: That's what I was missing, thank you. Although I think adding a reference to this in t

Deploying WS on Tomcat

Hi,. I have a general question about deploying Web Services on Tomcat (6). I'm trying to set up a sort of compute server on Tomcat where web services requests are called to execute an algorithm and return the results. I use AXIS2 for the WS communication protocol. I'm running benchmarks on CPU a

Re: Load Balance sticky_session=True, am I missing something?

That's what I was missing, thank you. Although I think adding a reference to this in the mod_jk configuration might be helpful? Say somewhere in the page: http://tomcat.apache.org/connectors-doc/generic_howto/loadbalancers.html Rainer Jung wrote: Concerning the load balancer worker: you n

I would like a new session each time I start my application

Hi, I have an application that works under tomcat. Each time I run my application I have the same sessionID. Is there a way to generate a differente sessionID each time I start my application? Thanks - To start a new topic, e-mai

RE: adding authentication to unprotected page

yes, you can do what I suggested...I tried it out and it worked just fine. -Original Message- From: Ryan [mailto:[EMAIL PROTECTED] Sent: Thursday, May 31, 2007 6:10 PM To: users@tomcat.apache.org Subject: adding authentication to unprotected page Hi All, I was wondering if any of you ha

RE: adding authentication to unprotected page

not sure which version you're using, but it seems like you could add the page (package/protected/index.html) to the attribute, and then in the security constraint, make it protected. Would that not work? -Original Message- From: Ryan [mailto:[EMAIL PROTECTED] Sent: Thursday, Ma

Re: Tomcat Hogging CPU

which tomcat version exactly? tomcat 5.0.19 - 5.0.30 had a weird bug with session synchronization, if you have one of those versions try kill -QUIT tomcat (not sure how to perform the same under windows, maybe with jmap). and check the threaddump. One of your thread is consuming CPU, maybe in an i

RE: [OT] Arithmetic Exception

Thanks for the response; I will check the code. Dwight At 08:52 AM 6/1/2007, you wrote: > From: Dwight Farris [mailto:[EMAIL PROTECTED] > Subject: Arithmetic Exception > > I am receiving what I interpret as a 'divide by zero' error - > > java.lang.ArithmeticException: / by zero > at > e

Re: Cookie Rookie - cannot delete session cookie

Ding! Thanks to all who repsonded. I had already implemented all that everyone else had suggested, but the one item I overlooked was resetting the path in the remove method of my cookie class to match when it was created. Thanks you for making my friday A LOT brighter! Torgeir Veimo

RE: [OT] Arithmetic Exception

> From: Dwight Farris [mailto:[EMAIL PROTECTED] > Subject: Arithmetic Exception > > I am receiving what I interpret as a 'divide by zero' error - > > java.lang.ArithmeticException: / by zero > at > edu.uc.cohorts.util.Util.calcCohortAllotment(Util.java:123) "Doctor, doctor, it hurts w

Re: installing Java and Tomcat

Alexander Nakhimovsky wrote: Is there an installer, for any platform, that bundles JRE and Tomcat, installs JRE first and configures Tomcat to use that JRE? Would such an installer be possible? The JRE & Tomcat are supplied under separate licenses, so that's likely to prevent them being distri

Re: Tomcat Hogging CPU

Tomcat 5.0 Java 1.5 Thank you. -- Original message -- From: "Leon Rosenberg" <[EMAIL PROTECTED]> > tomcat and java versions would help a lot :-) > Leon > > On 5/31/07, [EMAIL PROTECTED] wrote: > > We have been experiencing a problem where Tomcat causes CPU usage to g

Arithmetic Exception

Hello Everyone, I am receiving what I interpret as a 'divide by zero' error - StandardWrapperValve[action]: Servlet.service() for servlet action threw exception java.lang.ArithmeticException: / by zero at edu.uc.cohorts.util.Util.calcCohortAllotment(Util.java:123) at edu.uc.coh

Re: WebApp really slow, Where do I start looking?

start with monitoring. Find out which action/servlet/whatever is taking time. Go further down and check where the time is spent (a service object or something). Narrow it down, than solve it :-) regards Leon On 6/1/07, Stéphane Hanser <[EMAIL PROTECTED]> wrote: > You are right about synchroniz

Re: Why use tomcat + apache + mod_*

http://tomcat.apache.org/faq/connectors.html#vs -Tim Albert Shih wrote: Hi all I'm really newbie and maybe my question is stupid. But something the admin to put a apache with mod_something between users(Internet) and the tomcat server ? It's for perf ? for load-balancing ? security ? ---

Re: installing Java and Tomcat

You could do it by yourself with innosetup for windows based systems. René On Fri, 1 Jun 2007 11:19:59 -0400 "Alexander Nakhimovsky" <[EMAIL PROTECTED]> wrote: Is there an installer, for any platform, that bundles JRE and Tomcat, installs JRE first and configures Tomcat to use that JRE? Wou

Why use tomcat + apache + mod_*

Hi all I'm really newbie and maybe my question is stupid. But something the admin to put a apache with mod_something between users(Internet) and the tomcat server ? It's for perf ? for load-balancing ? security ? Regards. -- Albert SHIH Observatoire de Paris Meudon SIO batiment 15 Heure local

installing Java and Tomcat

Is there an installer, for any platform, that bundles JRE and Tomcat, installs JRE first and configures Tomcat to use that JRE? Would such an installer be possible? Alexander Nakhimovsky Computer Science Department Colgate University Hamilton NY 13346 http://cs.colgate.edu/~sasha Director, Proje

Re: permgen w hibernate and webapp reload

On a side note: If you're experiencing memory errors on Hibernate initialisation (the logs would verify) Then I would Suggest setting Hibernate's lazy-init="true" CAVEAT: If using in combination with Spring I would look at Session Management via OpenSessionInViewFilter M-- This email message

Re: WebApp really slow, Where do I start looking?

Are the database and the tomcat server on the same machine? Can you explain a little more about your synchronized code? I have done several really big web apps with iBATIS, and haven't needed to sync anything... Larry On 6/1/07, Stéphane Hanser <[EMAIL PROTECTED]> wrote: You are right about s

Re: Cookie Rookie - cannot delete session cookie

On 1 Jun 2007, at 14:48, Mike Peremsky wrote: I am pretty new to cookies and am having an issue. I create a cookie in my servlet and write it to the response to last the lifetime of the session (duration = -1). When the user clicks the logout button I find the cookie, reset the duration to

Re: Cookie Rookie - cannot delete session cookie

Hi, To delete a cookie you have to set its max age to 0. Calling invalidate on the httpsession will delete the cookie that holds the session id, wont it? request.getSession().invalidate() Ben On 6/1/07, Tim Funk <[EMAIL PROTECTED]> wrote: There is nothing in the servelt api to explicitly del

Re: Cookie Rookie - cannot delete session cookie

Most likely you are using a JSP and unless you have page session='false' - a session (and new cookie of the same name) will be created on the next request. -Tim Mike Peremsky wrote: Yes, but why is it not being deleted when I get the cookie (request.getCookies()), then reset the duration to

Re: Cookie Rookie - cannot delete session cookie

Yes, but why is it not being deleted when I get the cookie (request.getCookies()), then reset the duration to 0 (cookie.setMaxAge(0)) and re-add it to the response (response.addCookie(cookie)) Tim Funk <[EMAIL PROTECTED]> wrote: There is nothing in the servelt api to explicitly delete the ses

Re: Cookie Rookie - cannot delete session cookie

There is nothing in the servelt api to explicitly delete the session cookie. -Tim Mike Peremsky wrote: I am pretty new to cookies and am having an issue. I create a cookie in my servlet and write it to the response to last the lifetime of the session (duration = -1). When the user clicks the

Cookie Rookie - cannot delete session cookie

I am pretty new to cookies and am having an issue. I create a cookie in my servlet and write it to the response to last the lifetime of the session (duration = -1). When the user clicks the logout button I find the cookie, reset the duration to 0 then re-add the cookie to the response. But when

RE: permgen w hibernate and webapp reload

> From: Rene Guenther [mailto:[EMAIL PROTECTED] > Subject: Re: permgen w hibernate and webapp reload > > But those blog entries are the most entertaining ones: > http://my.opera.com/karmazilla/blog/2007/03/13/good-riddance-p > ermgen-outofmemoryerror > http://my.opera.com/karmazilla/blog/2007/03/

Re: permgen w hibernate and webapp reload

Hi, The permgen problem with hibernate was due to a bug in CGLIB, used by hibernate, which prevented classloaders from being garbage collected and as such, the permgen memory used allocated during classloading could not be freed at unload of webapp. This is supposed to be fixed since quite a good a

Re: permgen w hibernate and webapp reload

Some encounter this problem also with jetty. Related to PermGen errors are often tools like hibernate, spring, cglib, tomcat and sun's java implementation (instead of BEAs JRockit). I recently found the following Links: http://wiki.caucho.com/OutOfMemoryError http://opensource.atlassian.com/pr

permgen w hibernate and webapp reload

I seen the problem with permgen errors when one is redeploying a webapp that uses hibernate described in a number of places, but I haven't seen any solution for it. The Tomcat FAQ even suggest that this is a problem with WebAppClassLoaders, http://tomcat.apache.org/ faq/memory.html#why . T

APR not working

TOMCAT: 6.0.13 OS: linux-2.6.18-4-686 JAVA: java-1.5.0-sun-1.5.0.10 i tried to run with APR, followed http://tomcat.apache.org/tomcat-6.0-doc/apr.html ./configure && make && make install worked fine starting tomcat with CATALINA_OPTS="-Djava.awt.headless=true -Xmx128M -server -Djava.library.

Re: adding authentication to unprotected page

You need to read up on Tomcats form based authentication I think thats what you asking. Form actually looks like this User name: Password: but you have to tell tomcat to use it... ie set up all sorts of stuff in the Web.xml Its called Declarative security. So if some1 trie

RE: WebApp really slow, Where do I start looking?

> From: Stéphane Hanser [mailto:[EMAIL PROTECTED] > However, removing some synchronized blocks will cause > concurrent access > issues when a user "mass clicks". Is it possible to configure > tomcat to > queue one's requests instead of executing the in parallel ? Not in all cases. The browser

Re: WebApp really slow, Where do I start looking?

Queueing request will get you in same situation as if you put a big synchronized block around all your code. You should reduce the size of synchronized block to the smallest amount of time possible to limit threads waiting (and as such avoid long working synchronized methods). If possible, if an ob

Re: Tomcat 5.5 + Apache 2.2 + mod_proxy_ajp

I cant see the above configuration ;) I'm just wondering if you using the auto generation arrangement... I use mod_jk, and there is a way to get tomcat to generate it for you. If its the same, then yes if you use that arrangement you have to restart, or tell apache to reload the config files...

Re: Load Balance sticky_session=True, am I missing something?

Tim... it looks almost right, I took snippets from some of my configs that work ... where I could see a difference. Tomcat has has a built in load balancing option... that needs the session persistance that you thinking about... you dont need it for the JK arrangement. They 2 difference sche

RE: WebApp really slow, Where do I start looking?

You are right about synchronized blocks. I removed every synchronized instruction for tests purposes and it "unleashed the cpu" ;) It may be a problem with memory too. By disabling the cache of iBatis I noticed an overloading of the CPU, which is understandable considering the circumstance. Howev

Re: WebApp really slow, Where do I start looking?

Considering CPU usage, it is not 1) a java memory problem, if java memory was full, garbage collector would start using lots of cpu 2) a time consuming java code. It might be one of following 1) synchronized blocks in your code, that would prevent 2 simultaneoous users from doing some operations.

Re: NIOSelector busy wait

Hi, Filip Hanik - Dev Lists wrote: it will return 0 after the timeout has expired if there was no events. most likely its not a bug in the JDK but in your linux kernel/distro I just found the Sun bug report + workaround confirming this issue as a Linux JDK bug. http://bugs.sun.com/bugdatabas

WebApp really slow, Where do I start looking?

Hello, I've been working on my project for months now, it is my first WebApp project. Yesterday, I deployed the project on my dedicated server and a soon as I reached about 80 users, the webapp became really slow. However, the cpu usage of the server was very low (never more than 15-20%). I h

RE: Problem with mod_jk / tomcat on file streaming

Hello, Here is the log after changing the JkLogLevel to "trace" ( most of the beginning of the log were removed as it indicates the data receives from the stream ) You see below the log when the stream is cut prematurely after sequence "1ff0" ... [Fri Jun 01 16:20:38 2007] [18003:1744] [debug] aj

Re: Problem with mod_jk / tomcat on file streaming

Try to reproduce on a test system. If you can do that, use JkLogLevel trace and post the final parts, where you expect the problem to happen. MAHAINDRA Ketut wrote: Hello, This is what I have inside my mod_jk.conf for Apache --- LoadModule jk_module modules/mod_jk.so JkWorkersFile /etc/ht

RE: Problem with mod_jk / tomcat on file streaming

Hello, This is what I have inside my mod_jk.conf for Apache --- LoadModule jk_module modules/mod_jk.so JkWorkersFile /etc/httpd/conf.d/workers.properties JkLogFile /etc/httpd/logs/mod_jk.log JkLogLevel info JkLogStampFormat "[%a %b %d %H:%M:%S %Y] " JkOptions +ForwardKeySize +

Re: Problem with mod_jk / tomcat on file streaming

Have a look at the flush options on http://tomcat.apache.org/connectors-doc/reference/apache.html and maybe at the various timeouts at http://tomcat.apache.org/connectors-doc/reference/workers.html There is also a Timeout directive for Apache httpd. If you can't find it out, post your config

Re: Load Balance sticky_session=True, am I missing something?

Concerning the load balancer worker: you need to set jvmRoute in server.xml on your Tomcat servers. The value of the respective jvmRoute has to be wrkr1 and wrkr2. This will add that string to the session id (JSESSSIONID cookie or jsessionid= URL part) and mod_jk strips it from there to learn,

Problem with mod_jk / tomcat on file streaming

Hello all, I have a problem when using Tomcat 5.5.23 and apache/mod_jk 1.2.23. I have a piece of code that will stream a file when a download request is made by a user. ... response.setContentType("application/octet-stream"); response.setContentLength((int)fDownload.length()); response.

Re: adding authentication to unprotected page

Ryan wrote: Hi All, I was wondering if any of you had experience with this. I want to add a form on the homepage of an application that allows the user to quickly log in (see below) and take them to the protected page. I've never done this before and unfortunately the form below doesn't seem