sample java application to test session replication in transparen failover cluster

2009-04-28 Thread dhanesh kk
Hi Does any one have a sample java web application to share to test a transparent failover cluster in tomcat-6.0.8 (JDK 1.5.0_15) . I want to trouble shoot either my cluster or my Java application. Because sessions are expiring when I shutdown a one tomcat node . So to make sure whet

Develop & Configuration of Valve

2009-04-28 Thread Dinesh Gupta
Hi All, Have any one developed the custom Error Valve. So that if any exception occurs , I can route it as I want. Please help me. Thanks is advance Regards, Dinesh Gupta _ How fun is this? IMing with Windows Live Messenger just

Session expired in Cluster setup :

2009-04-28 Thread dhanesh kk
list, I am a newbe in tomcat clustering . I am looking to setup a transparent failover cluster with 2 tomcats. I refered the documents of tomcat5.5 and I configured a transparent failover cluster with 2 tomcat instances on 2 separate machines on same Lan. Apahce is infront of this cluste

Re: Having tomcat as an OSGi bundle

2009-04-28 Thread jochen
spring dm seems to be good at OSGI web container, but the integration with tomcat is quite complicated and it took us long time on troubleshooting, it was not easy way to work it out. Will tomcat 7 support OSGI? any one can confirm this message? I heard someone mentioned this. On Tue, Apr 28, 2009

Re: Force getting Client Cert from browser

2009-04-28 Thread Bill Barker
"i_am" wrote in message news:23286972.p...@talk.nabble.com... > > Thanks Charles. > Ok getting back to it after a looong break... > > I looked at the ssl traces and looks like client is sending server an > Alert > (21) Warning (close notify) but, > server (tomcat) seems to ignore it! > Is there

Extra Threads in background

2009-04-28 Thread David.Meldrum
Running Tomcat 6.0.18 Standalone on Windows XP. I need a background task which I implemented as a thread that I stated in the ContextListerner. In the contextInitilized() method I create and started the background process. I give it a name and made it a daemon. All that works great! The p

RE: virtual hosts and tomcat-users.xml

2009-04-28 Thread Martin Gainty
the webapplication web.xml can reference previously defined Resources (UserDatabase) as here Link to the UserDatabase instance from which we request lists of defined role names. Typically, this will be connected to the global user database with a ResourceLink element in

virtual hosts and tomcat-users.xml

2009-04-28 Thread Chris Cheshire
I am setting up a handful of virtual hosts on a server, and I have the manager app configured as per the docs. How do I configure the security for the manager app such that each virtual host has its own tomcat-users.xml though, so that the credentials of one virtual host can't be used log on to the

RE: Force getting Client Cert from browser

2009-04-28 Thread i_am
Thanks Charles. Ok getting back to it after a looong break... I looked at the ssl traces and looks like client is sending server an Alert (21) Warning (close notify) but, server (tomcat) seems to ignore it! Is there a way (config) to force tomcat to renegotiate ? I even tried to invoke Tomcat act

Re: SSL issues with Tomcat - OutOfMemory

2009-04-28 Thread Mark Thomas
Chris Stewart wrote: > I put Lambda Probe (http://www.lambdaprobe.org/d/index.htm) on the web > server to monitor some of the memory usage. Here's what I'm finding > after 20 minutes of running. Keep in mind this is without SSL enabled. Something I should have asked before - exactly what was out

Re: SSL issues with Tomcat - OutOfMemory

2009-04-28 Thread Mark Thomas
Chris Stewart wrote: > Tomcat 6.0.14. Think about upgrading as there are security issues in this version. > Windows 2003 Server. 2GB of memory on system. Java > 1.6.0_06. Again, security issues - think about upgrading > redirectPort="443" /> connectionTimeout is on the high side for typical u

Re: how to change the website name ?

2009-04-28 Thread Hassan Schroeder
On Tue, Apr 28, 2009 at 1:30 PM, bhavik shah wrote: > instead of that I want some generic name i.e. http://myname.com what kind of > configuration required for that? google "Domain Name System" (DNS) HTH, -- Hassan Schroeder hassan.schroe...@gmail.com

Re: SSL issues with Tomcat - OutOfMemory

2009-04-28 Thread Chris Stewart
I put Lambda Probe (http://www.lambdaprobe.org/d/index.htm) on the web server to monitor some of the memory usage. Here's what I'm finding after 20 minutes of running. Keep in mind this is without SSL enabled. NameUsage score PlotUsedCommitted Maximum Initial

Re: Why we need two servers (httpd and tomcat)

2009-04-28 Thread David Smith
There is another argument. Once upon a time it was standard recommended advice to put a conventional web service like Apache's Httpd in front of tomcat. All the static resources get served up by the conventional web service and only the dynamic content would come from tomcat. That was a lng

Re: Why we need two servers (httpd and tomcat)

2009-04-28 Thread George Sexton
Robin Wilson wrote: I like how your argument presumes the most foolish configuration for Apache vs. the ideal configuration if you only use tomcat. If you If you're doing the "ideal configuration" and only using tomcat, then what's the point of putting httpd on in the first place? Even if you

RE: Why we need two servers (httpd and tomcat)

2009-04-28 Thread Robin Wilson
I like how your argument presumes the most foolish configuration for Apache vs. the ideal configuration if you only use tomcat. If you want to go that route, the default tomcat install includes a bunch of 'examples' and other exploitable stuff - why not assume that they left all that at the defa

RE: Why we need two servers (httpd and tomcat)

2009-04-28 Thread Martin Gainty
what do you recommend to bulletproof Robin's installation? Martin __ Disclaimer and Confidentiality This message is confidential. If you should not be the intended receiver, then we ask politely to report. Each unauthorized forwarding or manufacturin

Re: SAML Cross-Domain SSO

2009-04-28 Thread Pid
Noam Ramonet wrote: > Hello, > > I need to implement SAML Cross-Domain SSO on Tomcat 5.5 servers. > Initially, IdP initiated post binding with out-of-band identity linking > would be fine. Could anybody recommend me an API or, better, a base > implementation? We often hear about Shibboleth deploy

SAML Cross-Domain SSO

2009-04-28 Thread Noam Ramonet
Hello, I need to implement SAML Cross-Domain SSO on Tomcat 5.5 servers. Initially, IdP initiated post binding with out-of-band identity linking would be fine. Could anybody recommend me an API or, better, a base implementation? Does anybody knows whether ASF has plans to incorporate SAML bas

Re: Why we need two servers (httpd and tomcat)

2009-04-28 Thread George Sexton
Robin Wilson wrote: As for your assertion that 2 layers of security is just complexity and not more secure - you obviously haven't run many enterprise production systems. Security in an enterprise system is all about 'layers' of protection. And sure, if they hack one layer - they are probably g

Re: Why we need two servers (httpd and tomcat)

2009-04-28 Thread George Sexton
Elmar Haneke wrote: unless you run tomcat as root it cannot listen on port 80??? You can easyly redirect port 80 to the port tomcat is listening at. A better solution is to use JSVC. There are some issues with using iptables to re-direct requests from port 80 to another port. Elmar

Re: SSL issues with Tomcat - OutOfMemory

2009-04-28 Thread Chris Stewart
On Apr 28, 2009, at 10:56 AM, Mark Thomas wrote: Chris Stewart wrote: Over the weekend we added SSL security to a Tomcat 6 instance that has been running for awhile without error. This morning, after the number of sessions increased on the machine, Tomcat began throwing 500 errors to us

Re: SSL issues with Tomcat - OutOfMemory

2009-04-28 Thread Mark Thomas
Chris Stewart wrote: > Over the weekend we added SSL security to a Tomcat 6 instance that has > been running for awhile without error. This morning, after the number > of sessions increased on the machine, Tomcat began throwing 500 errors > to users. I checked the logs and found an instance of Ou

Re: SSL issues with Tomcat - OutOfMemory

2009-04-28 Thread Chris Stewart
Running Windows 2003 Server and we're not using APR. Chris Stewart cstewart...@gmail.com On Apr 28, 2009, at 10:51 AM, Pid wrote: Chris Stewart wrote: Over the weekend we added SSL security to a Tomcat 6 instance that has been running for awhile without error. This morning, after the nu

Re: SSL issues with Tomcat - OutOfMemory

2009-04-28 Thread Pid
Chris Stewart wrote: > Over the weekend we added SSL security to a Tomcat 6 instance that has > been running for awhile without error. This morning, after the number > of sessions increased on the machine, Tomcat began throwing 500 errors > to users. I checked the logs and found an instance of Ou

SSL issues with Tomcat - OutOfMemory

2009-04-28 Thread Chris Stewart
Over the weekend we added SSL security to a Tomcat 6 instance that has been running for awhile without error. This morning, after the number of sessions increased on the machine, Tomcat began throwing 500 errors to users. I checked the logs and found an instance of OutOfMemory, followed by dozen

Re: Disable Session Replication

2009-04-28 Thread Pid
S Arvind wrote: > It is fresh as new. > > is this a solution pid? > > > > in context.xml Yes. And this will apply for all webapps in this Tomcat instance. You can apply it selectively, if needs be. p > - Arvind S > > * > "Many of lifes failure are people who did not realize how clo

Re: Disable Session Replication

2009-04-28 Thread S Arvind
It is fresh as new. is this a solution pid? in context.xml - Arvind S * "Many of lifes failure are people who did not realize how close they were to success when they gave up." -Thomas Edison * On Tue, Apr 28, 2009 at 5:01 PM, Pid wrote: > S Arvind wrote: > > I didnt configured Clu

Re: Disable Session Replication

2009-04-28 Thread Pid
S Arvind wrote: > I didnt configured Cluster or Session replication in my tomcat 6, But in my > tomcat 6 every time when restarted, all the old session got recreated > again. this i noticed with the help of sessionlistener. I dont need to > replicate the old session. How to disable it? look in: t

Disable Session Replication

2009-04-28 Thread S Arvind
I didnt configured Cluster or Session replication in my tomcat 6, But in my tomcat 6 every time when restarted, all the old session got recreated again. this i noticed with the help of sessionlistener. I dont need to replicate the old session. How to disable it? Advance Thanks, Arvind S * "Man

Re: Browser shows source of .jsp file. Why?

2009-04-28 Thread David Rush
Andre-John Mas wrote: ... > > BTW since you are using a JSP, you should be able to specify the content > type in the JSP: > > <%@ page language="java" contentType="text/html; charset=UTF-8" > pageEncoding="UTF-8"%> > Actually I tried that first, adding it to all 3 .jsp files that were included

transparent failover not working

2009-04-28 Thread dhanesh kk
list, I am a newbe in tomcat clustering . I am looking to setup a transparent failover cluster with 2 tomcats. I refered the documents of tomcat5.5 and I configured a transparent failover cluster with 2 tomcat instances on 2 separate machines on same Lan. Apahce is infront of this clust

Re: subdomain configuration in tomcat 6.0.18

2009-04-28 Thread Pid
m zyzy wrote: > I want to be able to create a subdomain ( sally10.tomydomainname.net ) > that resides in separate physical server (IP-192.168.1.11-static) on > the same LAN from the main server (www.tomydomainname.net - private > IP 192.168.1.9-static , 1 public IP -67.169.44.xx ) also running >

Re: Why we need two servers (httpd and tomcat)

2009-04-28 Thread Pid
Robin Wilson wrote: > For the record, my answer was neither stupid or reflexive. I simply pointed > out why someone might want 2 layers of servers (httpd and tomcat). And > certainly, my rationale is both sound and arguable at the same time. > > As for your assertion that 2 layers of security is

subdomain configuration in tomcat 6.0.18

2009-04-28 Thread m zyzy
I want to be able to create a subdomain ( sally10.tomydomainname.net ) that resides in separate physical server (IP-192.168.1.11-static) on the same LAN from the main server (www.tomydomainname.net - private IP 192.168.1.9-static , 1 public IP -67.169.44.xx ) also running tomcat 6.0.18, JDK 6 , b

Re: How do I host multiple websites with Apache2 and Tomcat Cluster ??

2009-04-28 Thread André Warnier
nohacks wrote: ... Currently I have my app deployed as ROOT in Tomcat. How do I change this for multiple apps? I am new to Apache and Tomcat deployments... http://wiki.apache.org/tomcat/HowTo #38 It's exactly the opposite of what you want to do, so maybe you can just take it in reverse ?

Re: How do I host multiple websites with Apache2 and Tomcat Cluster ??

2009-04-28 Thread Pid
nohacks wrote: > Hi Chris, > > Thanks for your very detailed response!! > > I will try that out Tues Morning and get back to you with any questions. > > I do have one. > > Currently I have my app deployed as ROOT in Tomcat. How do I change this for > multiple apps? I am new to Apache and Tom

Re: tomcat shutdown problem

2009-04-28 Thread Pid
S Arvind wrote: > Pid thanks very much. We found the thread from the thread dump. Problem we > did is we didnt shutdown the quartz scheduler. Now as per ur guidelines in > the context listener we did that. It currently in testing phase. Thanks.. Good news. And now you know 2 things: how to diagno

Re: Tomcat 6 and Windows 2003 -Xmx1024 Problem

2009-04-28 Thread Mirco Attocchi
as we can read here the problem seems to relate to this update KB956572, I'll try to remove it. http://www.microsoft.com/communities/newsgroups/en-us/default.aspx?dg=microsoft.public.windowsupdate&tid=291a2fa7-f325-430c-9261-e21c2709fa60&cat=en_US_56d1dd45-de9e-4fc5-9bc1-2d1d0de6daee〈=en&cr=US&slo

Re: Having tomcat as an OSGi bundle

2009-04-28 Thread Mark Thomas
Saminda Wijeratne wrote: > thanx Mark I will look at the dm server. I'm pressuming that the mail thread > [1] is infact a dead end for the tomcat osgi bundle. I wouldn't call it a dead end. There was some agreement on possible ways forward. However, no-one followed up and provided patches. The pos

Re: tomcat shutdown problem

2009-04-28 Thread S Arvind
Pid thanks very much. We found the thread from the thread dump. Problem we did is we didnt shutdown the quartz scheduler. Now as per ur guidelines in the context listener we did that. It currently in testing phase. Thanks.. "Many of lifes failure are people who did not realize how close they we

Re: Using encoded slashes safely

2009-04-28 Thread Mark Thomas
Bill Higgins wrote: > We have a servlet that acts as a proxy to other URLs from different > origins. E.g. via your web app you could get to the Google home page > via a URL like: > > http://localhost/myapp/proxy/http%3A%2F%2Fwww.google.com%2F > > Using this URL pattern, we immediately hit the Tom

Re: Why we need two servers (httpd and tomcat)

2009-04-28 Thread Elmar Haneke
> unless you run > tomcat as root it cannot listen on port 80??? You can easyly redirect port 80 to the port tomcat is listening at. Elmar - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-