Sessions not releasing for apache-tomcat 5.5.23

2008-12-18 Thread sudip pattanayak
Hi, We are using apache-tomcat for our Web Application. We do not allow to same users to log on from two instances of the application. So if the user is active from one session and then if he tries to log on from another session, we forcefully logoff the user from the previous session. But recent

Re: Installation apache tomcat

2008-12-18 Thread Steve Ochani
Send reply to: Tomcat Users List From: Vida Luz Arista To: users@tomcat.apache.org Subject:Installation apache tomcat Date sent: Thu, 18 Dec 2008 18:17:09 -0600 > Hi All > > > > I downloaded the version apache-tomcat-6.0.18-src, I follow step by > step the instructions, wh

Re: How do you determine the amount of Tomcat threads in use?

2008-12-18 Thread Mark Stevens
Thanks for the replies all, I will post back also if I come across any other methods, I'm still pretty sure prstat is not showing the threads correctly. Thanks, Mark. 2008/12/17 Kees Jan Koster > Dear Mark, > > Just a quick question on how to see threads in use, I have been using >> prstat >>

Installation apache tomcat

2008-12-18 Thread Vida Luz Arista
Hi All I downloaded the version apache-tomcat-6.0.18-src, I follow step by step the instructions, when I executed ant download, the following erro occur BUILD FAILED /opt/apache-tomcat-6.0.18-src/build.xml:701: The following error occurred while executing this line: /opt/apache-tomcat-6.0

RE: [OT] Apache 2.2.3 segfault with Jk connector 1.2.270

2008-12-18 Thread Caldarale, Charles R
> From: Gregor Schneider [mailto:rc4...@googlemail.com] > Subject: Re: [OT] Apache 2.2.3 segfault with Jk connector 1.2.270 > > Is it? Provided somebody having a jailbreaked *cough* 3G > - you've got *any* idea where to obtain a copy of the JDK? Nope; it was just mentioned by some of the Sun peopl

Re: [OT] Apache 2.2.3 segfault with Jk connector 1.2.270

2008-12-18 Thread Gregor Schneider
Hi ho Chuck, On Thu, Dec 18, 2008 at 10:10 PM, Caldarale, Charles R wrote: > > Don't need mod_jk, but Sun does have Java running on the iPhone; > unfortunately, Mr Jobs won't let them release it. > Is it? Provided somebody having a jailbreaked *cough* 3G - you've got *any* idea where to obtain a

RE: [OT] Apache 2.2.3 segfault with Jk connector 1.2.270

2008-12-18 Thread Caldarale, Charles R
> From: André Warnier [mailto:a...@ice-sa.com] > Subject: Re: Apache 2.2.3 segfault with Jk connector 1.2.27 > And please note that all the above was done on the > computer of which Chuck (or Chris?), just a few days > ago, said that it had less processing power than his > portable phone. Still t

Re: Apache 2.2.3 segfault with Jk connector 1.2.27

2008-12-18 Thread André Warnier
Rainer Jung wrote: [...] The internals of this dev version are exactly packaged in the form of an official release. So the build process works exactly the same (configure and make), no additional tools needed. True. The version will identify itself as 1.2.28-dev, so you can't hide it's no

RE: Serious security problem with mod_jk?

2008-12-18 Thread Payne, George (ghp5h)
I cannot replicate with httpd 2.2.3 (RHEL 5 version). 2.0.46 is the "supported" RHEL 3 version (2.0.46.71 full RH version). I know that's not really an excuse :). But we're hesitant to move off the supported versions. Our RHEL 3 machines will be updated in the next few months to RHEL 5, so ma

Re: Apache 2.2.3 segfault with Jk connector 1.2.27

2008-12-18 Thread Gregor Schneider
André, what does that tell you? Update early, update often... ;) Cheers Gregor -- just because your paranoid, doesn't mean they're not after you... gpgp-fp: 79A84FA526807026795E4209D3B3FE028B3170B2 gpgp-key available @ http://pgpkeys.pca.dfn.de:11371 --

Re: [SECURITY] CVE-2008-2938 - Apache Tomcat information disclosure vulnerability - Update 2

2008-12-18 Thread Gregor Schneider
Hi Mark, that means, if I haven't set "URIEncoding" and "useBodyEncodingForURI" within my connectors at all, I'm well off since the defaults are ISO-8859-1 and "false", correct? Cheers Gregor -- just because your paranoid, doesn't mean they're not after you... gpgp-fp: 79A84FA526807026795E4209

Re: Apache 2.2.3 segfault with Jk connector 1.2.27

2008-12-18 Thread André Warnier
Rainer Jung wrote: On 18.12.2008 17:22, Pieter Temmerman wrote: [...] Thanks guys. I just *knew* there was a reason why I forgot all that stuff, I just could not remember why exactly. I bet that before I do a "man patch", I'll have to update "man", and that will probably bring messages that

Re: My deployed war file has servlet-api-2.5.jar in its WEB-INF/lib folder, but Tomcat 6.0.18 displays a warning during deployment

2008-12-18 Thread Jeff Walker
Ok, this is new to me. I can see I have a lot of reading about Maven to do! Thanks David. -jeff On Thu, Dec 18, 2008 at 1:59 PM, David Smith wrote: > Then change your pom.xml so the servlet-api is in scope "provided". > This will allow the build, but not include the jar. > > --David > > Jeff Wa

Re: My deployed war file has servlet-api-2.5.jar in its WEB-INF/lib folder, but Tomcat 6.0.18 displays a warning during deployment

2008-12-18 Thread Jeff Walker
I'm certain it does, too. I'm just relatively new to Maven. I will investigate. Thanks again! -jeff On Thu, Dec 18, 2008 at 1:56 PM, Caldarale, Charles R < chuck.caldar...@unisys.com> wrote: > > From: Jeff Walker [mailto:webservices.archit...@gmail.com] > > Subject: Re: My deployed war file ha

Re: My deployed war file has servlet-api-2.5.jar in its WEB-INF/lib folder, but Tomcat 6.0.18 displays a warning during deployment

2008-12-18 Thread David Smith
Then change your pom.xml so the servlet-api is in scope "provided". This will allow the build, but not include the jar. --David Jeff Walker wrote: > Ok, > thanks Charles. > Maven requires it for build purposes, but I can instruct Maven to remove it > from the war file. > Thanks again, > -jeff >

RE: My deployed war file has servlet-api-2.5.jar in its WEB-INF/lib folder, but Tomcat 6.0.18 displays a warning during deployment

2008-12-18 Thread Caldarale, Charles R
> From: Jeff Walker [mailto:webservices.archit...@gmail.com] > Subject: Re: My deployed war file has servlet-api-2.5.jar in > its WEB-INF/lib folder, but Tomcat 6.0.18 displays a warning > during deployment > > Maven requires it for build purposes, but I can instruct Most build mechanisms allow th

Re: My deployed war file has servlet-api-2.5.jar in its WEB-INF/lib folder, but Tomcat 6.0.18 displays a warning during deployment

2008-12-18 Thread Jeff Walker
Ok, thanks Charles. Maven requires it for build purposes, but I can instruct Maven to remove it from the war file. Thanks again, -jeff On Thu, Dec 18, 2008 at 1:49 PM, Caldarale, Charles R < chuck.caldar...@unisys.com> wrote: > > From: Jeff Walker [mailto:webservices.archit...@gmail.com] > > Su

RE: My deployed war file has servlet-api-2.5.jar in its WEB-INF/lib folder, but Tomcat 6.0.18 displays a warning during deployment

2008-12-18 Thread Caldarale, Charles R
> From: Jeff Walker [mailto:webservices.archit...@gmail.com] > Subject: My deployed war file has servlet-api-2.5.jar in its > WEB-INF/lib folder, but Tomcat 6.0.18 displays a warning > during deployment > > But it seems to me that Maven is correct here in > leaving it in the war, while Tomcat shoul

My deployed war file has servlet-api-2.5.jar in its WEB-INF/lib folder, but Tomcat 6.0.18 displays a warning during deployment

2008-12-18 Thread Jeff Walker
Hi all, I've been using Tomcat at various releases for a few years, mostly at dev level, nothing in production. But recently I downloaded Tomcat 6.0.18 and tried to deploy a web service to it, and I get a strange warning come up at the Tomcat output console. ... Dec 18, 2008 1:32:01 PM org.apache.

Re: [SECURITY] CVE-2008-2938 - Apache Tomcat information disclosure vulnerability - Update 2

2008-12-18 Thread Mark Thomas
Gregor Schneider wrote: > Hi Mark, > > ehem, a bit too abstract for my taste - what's the problem with UTF-8 > here, anyways? See http://tomcat.markmail.org/search/?q=CVE-2008-2938#query:CVE-2008-2938%20order%3Adate-forward+page:1+state:facets for the original announcement that contained more det

Re: [SECURITY] CVE-2008-2938 - Apache Tomcat information disclosure vulnerability - Update 2

2008-12-18 Thread Gregor Schneider
Hi Mark, ehem, a bit too abstract for my taste - what's the problem with UTF-8 here, anyways? Do you recommend any action to be taken from site-owners? Is there any sample available which explains the issue in more detail? Cheers Gregor -- just because your paranoid, doesn't mean they're not a

RE: Serious security problem with mod_jk?

2008-12-18 Thread Terence M. Bandoian
Placing static content inside WEB-INF doesn't seem like good practice so something like: AllowOverride None deny from all should prevent unwanted access. -Terence M. Bandoian > Well, this is a bit off topic, since I had meant (and still mean) this as a > tentative bug report of a prob

Fwd: Tomcat & MySQL Server Configuration

2008-12-18 Thread Carl Crawford
I am trying to figure out the best way to configure a multi-server setup for Tomcat and MySQL. Someone gave me the a list of configuration suggestions (see link below). My question is is configuration 3 (see link below) a good way to go when scaling up from our current configuration (config. 0)?

Tomcat & MySQL Server Configuration

2008-12-18 Thread Carl Crawford
I am trying to figure out the best way to configure a multi-server setup for Tomcat and MySQL. Someone gave me the a list of configuration suggestions (see link below). My question is is configuration 3 (see link below) a good way to go when scaling up from our current configuration (config. 0)?

Re: [SECURITY] CVE-2008-2938 - Apache Tomcat information disclosure vulnerability - Update 2

2008-12-18 Thread Mark Thomas
Mark Thomas wrote: Sorry folks - I should have deleted this header before I sent the message out. > Folks, > > Any comments on the announcement below before I sent it to the usual suspects? > > Mark The important bit starts here: > CVE-2008-2938: Apache Tomcat information disclosure vulnerabil

Re: How to serve JSPs (and other resources) from within a jarfile?

2008-12-18 Thread Raymond Kroeker
See comment inline. Raymond On Thu, Dec 18, 2008 at 02:50, Simon Kitching wrote: > Mikolaj Rydzewski schrieb: >> Simon Kitching wrote: >>> I have noticed that the server.xml can be configured to point to a >>> custom DirContext class, like this: >>> >>> >>> >>> >> I don't know anythin

Re: Apache 2.2.3 segfault with Jk connector 1.2.27

2008-12-18 Thread Rainer Jung
On 18.12.2008 17:22, Pieter Temmerman wrote: Hi André, From my experience I can tell you this partly works, but!.. You need to make sure that the glibc version is the same (or older, glibc should be backwards compatible). I usually compile my linux multiplatform binaries in a RH7 machine, whi

[SECURITY] CVE-2008-2938 - Apache Tomcat information disclosure vulnerability - Update 2

2008-12-18 Thread Mark Thomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Folks, Any comments on the announcement below before I sent it to the usual suspects? Mark CVE-2008-2938: Apache Tomcat information disclosure vulnerability - Update 2 Severity: Important Vendor: Multiple (was The Apache Software Foundation) Ver

Re: Apache 2.2.3 segfault with Jk connector 1.2.27

2008-12-18 Thread Pieter Temmerman
Hi André, >From my experience I can tell you this partly works, but!.. You need to make sure that the glibc version is the same (or older, glibc should be backwards compatible). I usually compile my linux multiplatform binaries in a RH7 machine, which creates binaries that magically seem to be wo

Re: Apache 2.2.3 segfault with Jk connector 1.2.27

2008-12-18 Thread André Warnier
Rainer Jung wrote: On 18.12.2008 13:07, André Warnier wrote: Rainer Jung wrote: Could you try the following patch: http://people.apache.org/~rjung/mod_jk-dev/patches/extension_crash.patch Thanks for any feedback on the patch. Many thanks for the patch, Rainer, but.. I hate to admit it, but d

Re: Case-insensitive JDBC Realm j_security_check

2008-12-18 Thread removeps-groups
Yes, this is possible. Override JDBCRealm.authenticate. Details: 1. Class is org.apache.catalina.realm.JDBCRealm. 2. Override authenticate of 2 arguments. I guess you would convert username and/or password to lowercase and call super.authenticate. 3. The jar file containing your class, or the

Re: Apache 2.2.3 segfault with Jk connector 1.2.27

2008-12-18 Thread Rainer Jung
On 18.12.2008 13:07, André Warnier wrote: Rainer Jung wrote: Could you try the following patch: http://people.apache.org/~rjung/mod_jk-dev/patches/extension_crash.patch Thanks for any feedback on the patch. Many thanks for the patch, Rainer, but.. I hate to admit it, but despite being in this

Case-insensitive JDBC Realm j_security_check

2008-12-18 Thread Tokajac
Hello! Is it possible to adapt REALM authentication of Tomcat, so that Username and password become case insensitive? Regards -- View this message in context: http://www.nabble.com/Case-insensitive-JDBC-Realm-j_security_check-tp21073984p21073984.html Sent from the Tomcat - User mailing list

RE: Recurrent OutOfMemoryError during Eclipse publish operation to test environment

2008-12-18 Thread Caldarale, Charles R
> From: Kees de Kooter [mailto:kdekoo...@gmail.com] > Subject: Re: Recurrent OutOfMemoryError during Eclipse > publish operation to test environment > > Did you try doubling the permsize? > -XX:PermSize=256m It doesn't look like a problem with PermGen; this is a direct allocation done by Eclipse:

Re: Tomcat and problems with languages

2008-12-18 Thread André Warnier
fairyaya wrote: [...] That sounds a bit like my Manager-speaking-in-tongues of about one month ago... You may want to search this list for "Manager app language". There was never any definitive solution, but maybe some clues on what to look for. The gist of it is as follows : there is a JVM

Re: Acting on threads by socket events.

2008-12-18 Thread uprooter
Bill Barker-2 wrote: > > Can't be done unless the servlet periodically writes (and flushes) to the > OutputStream. > Many thanks bill. I don't want to periodically write as im planning to hold many connections waiting for the server. Does SOAP/TCP or NIOconnector can help me with that ? -- V

Re: Apache 2.2.3 segfault with Jk connector 1.2.27

2008-12-18 Thread André Warnier
Rainer Jung wrote: Could you try the following patch: http://people.apache.org/~rjung/mod_jk-dev/patches/extension_crash.patch Thanks for any feedback on the patch. Many thanks for the patch, Rainer, but.. I hate to admit it, but despite being in this industry for more than 30 years, I have

Re: Recurrent OutOfMemoryError during Eclipse publish operation to test environment

2008-12-18 Thread Rainer Frey
On Thursday 18 December 2008 11:38:12 bemmi wrote: > Hi, > > I'm using Tomcat 6.0.18, Eclipse 3.3.2 and JDK 1.5.0_14. I've created a > test server using my Tomcat installation and > provide these VM args in my launch configuration -Xms512m -Xmx768m > -XX:PermSize=128m. Whenever I publish a web pr

Tomcat and problems with languages

2008-12-18 Thread fairyaya
Goodmornig (or afternoon, it's depends) It's my first post here. I've a problem with a web application developped with struts and which uses different languages with properties files (so if the brower's setting is english the application will display texts in english, if it's italian twxts will be

Problem with security permissions and access denied page for ldap users

2008-12-18 Thread an...@iguanait.com
Hi, i installed bedework calendar server and i'm trying to get bedework to authenticate using LDAP. I added ldap jar files to the lib folder and added this realm to server.xml file ldap://localhost:389"; userPattern="uid={0},ou=Users,dc=mydomain,dc=com" roleBase="

Re: Recurrent OutOfMemoryError during Eclipse publish operation to test environment

2008-12-18 Thread Kees de Kooter
Did you try doubling the permsize? -XX:PermSize=256m Cheers, Kees de Kooter http://www.boplicity.net On Thu, Dec 18, 2008 at 11:38, bemmi wrote: > > Hi, > > I'm using Tomcat 6.0.18, Eclipse 3.3.2 and JDK 1.5.0_14. I've created a > test server using my Tomcat installation and > provide these V

Re: How to serve JSPs (and other resources) from within a jarfile?

2008-12-18 Thread Simon Kitching
Mikolaj Rydzewski schrieb: > Simon Kitching wrote: >> I have noticed that the server.xml can be configured to point to a >> custom DirContext class, like this: >> >> >> >> > I don't know anything about above solution. > But for sure you can precompile all JSPs, pack resulting classes

Recurrent OutOfMemoryError during Eclipse publish operation to test environment

2008-12-18 Thread bemmi
Hi, I'm using Tomcat 6.0.18, Eclipse 3.3.2 and JDK 1.5.0_14. I've created a test server using my Tomcat installation and provide these VM args in my launch configuration -Xms512m -Xmx768m -XX:PermSize=128m. Whenever I publish a web project to it I get the following error: !ENTRY org.eclipse