Re: tomcat-connectors mod_jk.dsp file will not load in Visual Studio 2005

2009-06-04 Thread Mladen Turk
Andy Wang wrote: Hi all, I was able to get mod_jk building fine using Makefile.vc, but couldn't get the .dsp file loaded into Visual Studio 2005. If you are using HTTPD binaries from ASF use the Visual Studio 6 and Platform SDK (Windows 2003 R2 inclusive) VS 2005 will force usage of MSVCRT71

Re: tomcat-connectors mod_jk.dsp file will not load in Visual Studio 2005

2009-06-04 Thread Mladen Turk
Andy Wang wrote: Hi all, I was able to get mod_jk building fine using Makefile.vc, but couldn't get the .dsp file loaded into Visual Studio 2005. Anyone know if there's a trick to this, or should I just not care (it does build and seem to work fine with the Makefile). When Visual Studio 200

Re: Service Specific Error 0

2009-06-04 Thread aditya darbha
HiI am using Tomcat version 5.5. We are using a 32 bit version. However for a 64 bit wrapper of Tomcat, an error pops up saying Loading Error "Cannot Find the File specified [prunsrv.c]" Thanks and Regards Aditya On Thu, Jun 4, 2009 at 7:19 PM, Peter Crowther wrote: > Exact Tomcat version?

RE: Re: concurrent connections with mod_jk/apache/tomcat

2009-06-04 Thread Caldarale, Charles R
> From: Jason Joseph [mailto:jjos...@keystreams.com] > Subject: Re: Re: concurrent connections with mod_jk/apache/tomcat > > after reading things online I thought the best practice for production > environments was for tomcat to handle dynamic requests and apache to > handle static content. Based

Re: [SECURITY] CVE-2009-0580 Apache Tomcat User enumeration vulnerability with FORM authentication

2009-06-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Rémy, On 6/4/2009 1:04 PM, Rémy Maucherat wrote: > On Thu, Jun 4, 2009 at 6:48 PM, Christopher Schultz > wrote: >> I don't see any information disclosure vulnerability in the first place, >> and I don't see how your patch would have fixed it. >> >> ?

RE: custom header

2009-06-04 Thread Martin Gainty
to run a test harness you can probably try this test harness for Ajp13 subbing header and header value here p.appendInt(3); p.appendString("my header"); p.appendString("my header value"); /* * Copyright 1999-2004 The Apache Software Foundation * * Licensed under t

Re: Tomcat issue

2009-06-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mark, On 6/4/2009 7:42 AM, Mark Thomas wrote: > Yadav, Sushma wrote: >> We are using Tomcat5.5 on LINUX plaftform.Tomcat is used by web client >> of our one of the application known as Serena Dimensions. > > That could be one of 28 different 5.5.x ve

Re: Having trouble with Tomcat 6.0.20 embedded in Red5

2009-06-04 Thread Mondain
The "fix" didn't work, I still see the same error. I set the same name on the Service and the Engine now, previously the Service (Embedded) did not have a name set. Here is the relevant portion of the code: embedded = new Embedded(); embedded.createLoader(originalClassLoader); embedded.setCatalinaB

RE: how to setup Tomcat 6.x fixes

2009-06-04 Thread Meline, Kirk Alan. (ARC)[PEROT SYSTEMS]
Thank you Mark. I appreciate it. Kirk -Original Message- From: Mark Thomas [mailto:ma...@apache.org] Sent: Thursday, June 04, 2009 4:24 AM To: Tomcat Users List Subject: Re: how to setup Tomcat 6.x fixes Meline, Kirk Alan. (ARC)[PEROT SYSTEMS] wrote: > Hi > > Where can I get instructio

RE: how to setup Tomcat 6.x fixes

2009-06-04 Thread Meline, Kirk Alan. (ARC)[PEROT SYSTEMS]
Thank you Chuck for the advise. I was told to put the project on hold for now but can use your instructions if needed. Thanks Kirk -Original Message- From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] Sent: Wednesday, June 03, 2009 8:27 PM To: Tomcat Users List Subject: RE:

custom header

2009-06-04 Thread Anthony J. Biacco
Is there a way to set a custom HTTP header from tomcat/mod_jk for the AJP connector? Short of changing the tomcat/mod_jk source code, that is. I have requests go from apache -> mod_jk -> tomcat, multiple servers, and I want to see in a Response header what tomcat my request is getting processed by.

Re: ISAPI incorrect function

2009-06-04 Thread dljohnson69
Yes, tomcat is running. The IIS was shutdown by me on that log reference. Latest log, server.xml and worker.properties here. workers.properties worker.list=wlb worker.wlb.type=ajp13 worker.wlb.host=localhost worker.wlb.port=8010 server.xml

Re: Re: concurrent connections with mod_jk/apache/tomcat

2009-06-04 Thread Jason Joseph
Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jason, On 6/4/2009 5:06 PM, Jason Joseph wrote: I am currently in development of an app which we are testing through tomcat6 (websphere specifically). Now that we are moving to production we wanted to use apache (Apach

Re: Having trouble with Tomcat 6.0.20 embedded in Red5

2009-06-04 Thread Mondain
Thank you, Charles.. I'll give that a shot. Paul On Thu, Jun 4, 2009 at 1:08 PM, Caldarale, Charles R < chuck.caldar...@unisys.com> wrote: > > From: Mondain [mailto:mond...@gmail.com] > > Subject: Re: Having trouble with Tomcat 6.0.20 embedded in Red5 > > > > everything is setup programically usi

Re: server to client notification

2009-06-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jackose, On 6/4/2009 9:07 AM, Jackose wrote: > Say for example, I have four clients and a server. If client1 sends the > message "hi", the server receives the message "hi" and the server must send > this "hi" message to clients1,2,3 & 4. This isn't r

RE: concurrent connections with mod_jk/apache/tomcat

2009-06-04 Thread Caldarale, Charles R
> From: Jason Joseph [mailto:jjos...@keystreams.com] > Subject: concurrent connections with mod_jk/apache/tomcat > > I am currently in development of an app which we are testing through > tomcat6 (websphere specifically). Which is it - Tomcat or WebSphere? > we wanted to use apache (Apache 2.2.8

Re: concurrent connections with mod_jk/apache/tomcat

2009-06-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jason, On 6/4/2009 5:06 PM, Jason Joseph wrote: > I am currently in development of an app which we are testing through > tomcat6 (websphere specifically). Now that we are moving to production > we wanted to use apache (Apache 2.2.8) to serve up static

Re: AJAX Calls not resetting tomcat's session timeout

2009-06-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 To whom it may concern, On 6/4/2009 4:13 PM, universeprojects.com wrote: > Caldarale, Charles R wrote: >> 3) What flavor are you using? > > 3. Catalina? (Does that make sense? I'm a little newbish) Whatever defaults > with tomcat The default would b

concurrent connections with mod_jk/apache/tomcat

2009-06-04 Thread Jason Joseph
First time posting on the tomcat list so bear with me if this doesn't make any sense :) I am currently in development of an app which we are testing through tomcat6 (websphere specifically). Now that we are moving to production we wanted to use apache (Apache 2.2.8) to serve up static content

Re: ISAPI incorrect function

2009-06-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 dl, On 6/4/2009 1:27 PM, dljohnson69 wrote: > The isapi.log is the only one I know of (maybe the same)let me know if the > name of any other logs you think would help. Here is the error part of the > isapi.log > > [Thu Jun 04 10:32:59.985 2009] [427

Re: how to convert struts based apps from tomcat4 to tomcat5.5?

2009-06-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chuck, On 6/4/2009 1:56 PM, Caldarale, Charles R wrote: >> From: Christopher Schultz [mailto:ch...@christopherschultz.net] >> Subject: Re: how to convert struts based apps from tomcat4 to >> tomcat5.5? >> >> I'm not convinced this has anything to d

RE: AJAX Calls not resetting tomcat's session timeout

2009-06-04 Thread universeprojects.com
1. Using cookies 2. Ok I'll look into it 3. Catalina? (Does that make sense? I'm a little newbish) Whatever defaults with tomcat 4. Nothing like that no. One thing, I think I may have been using 6.0.7. I've since re-installed to 6.0.14 and will be watching to see if it has any effect. (I was

RE: Having trouble with Tomcat 6.0.20 embedded in Red5

2009-06-04 Thread Caldarale, Charles R
> From: Mondain [mailto:mond...@gmail.com] > Subject: Re: Having trouble with Tomcat 6.0.20 embedded in Red5 > > everything is setup programically using Embedded. O.k., that makes things a bit more interesting. Looks like you'll need to call setName() with the same value for both the Service (E

Re: Having trouble with Tomcat 6.0.20 embedded in Red5

2009-06-04 Thread Mondain
In red5 we don't use a server.xml, everything is setup programically using Embedded. Paul On Thu, Jun 4, 2009 at 10:52 AM, Caldarale, Charles R < chuck.caldar...@unisys.com> wrote: > > From: Joseph S [mailto:j...@selectacast.net] > > Subject: Re: Having trouble with Tomcat 6.0.20 embedded in Red5

RE: AJAX Calls not resetting tomcat's session timeout

2009-06-04 Thread Caldarale, Charles R
> From: universeprojects.com [mailto:nikolasarmstr...@gmail.com] > Subject: RE: AJAX Calls not resetting tomcat's session timeout > > Version 6.0.14 There were a few session-related fixes made since 6.0.14, but a brief scan of the changelog doesn't reveal anything that matches your symptoms. I

Re: [SECURITY] CVE-2009-0580 Apache Tomcat User enumeration vulnerability with FORM authentication

2009-06-04 Thread Len Popp
It looks to me like the change fixes an NPE when a null or nonsense password is given. The NPE would allow an attacker to determine if a username is valid (without having to know the password). Not the most serious security breach, but login protocols aren't supposed to let you guess usernames. --

RE: AJAX Calls not resetting tomcat's session timeout

2009-06-04 Thread universeprojects.com
Version 6.0.14 Thanks for the help! Caldarale, Charles R wrote: > >> From: universeprojects.com [mailto:nikolasarmstr...@gmail.com] >> Subject: AJAX Calls not resetting tomcat's session timeout >> >> my actual server is apache tomcat version 6. > > Which exact level of Tomcat version 6? >

RE: how to convert struts based apps from tomcat4 to tomcat5.5?

2009-06-04 Thread Caldarale, Charles R
> From: Christopher Schultz [mailto:ch...@christopherschultz.net] > Subject: Re: how to convert struts based apps from tomcat4 to > tomcat5.5? > > I'm not convinced this has anything to do with a bug in Tomcat. May have been a bug in that Tomcat was not detecting illegal use of abstract classes

RE: AJAX Calls not resetting tomcat's session timeout

2009-06-04 Thread Caldarale, Charles R
> From: universeprojects.com [mailto:nikolasarmstr...@gmail.com] > Subject: AJAX Calls not resetting tomcat's session timeout > > my actual server is apache tomcat version 6. Which exact level of Tomcat version 6? - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETAR

RE: Having trouble with Tomcat 6.0.20 embedded in Red5

2009-06-04 Thread Caldarale, Charles R
> From: Joseph S [mailto:j...@selectacast.net] > Subject: Re: Having trouble with Tomcat 6.0.20 embedded in Red5 > > I'm also having a problem with 6.0.20. This happens on startup, and > some webapps don't work. Post your server.xml so we can see if it fits the bug report Mark T referred to. -

Re: Having trouble with Tomcat 6.0.20 embedded in Red5

2009-06-04 Thread Joseph S
I'm also having a problem with 6.0.20. This happens on startup, and some webapps don't work. Jun 4, 2009 12:24:20 AM org.apache.catalina.connector.MapperListener init WARNING: Error registering contexts java.lang.NullPointerException at org.apache.catalina.connector.MapperListener.regist

AJAX Calls not resetting tomcat's session timeout

2009-06-04 Thread universeprojects.com
I'm developing a web-app using netbeans with glassfish v2 and my actual server is apache tomcat version 6. My application makes an AJAX call to the server to check for updates once every second. When I'm testing on glassfish, the session stays alive past the 1 minute timeout (because of the AJAX

Re: ISAPI incorrect function

2009-06-04 Thread dljohnson69
The isapi.log is the only one I know of (maybe the same)let me know if the name of any other logs you think would help. Here is the error part of the isapi.log [Thu Jun 04 10:32:59.985 2009] [4272:4316] [info] ajp_connection_tcp_get_message::jk_ajp_common.c (1143): (wlb) can't receive the respon

Re: ISAPI incorrect function

2009-06-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 dl, On 6/4/2009 10:42 AM, dljohnson69 wrote: > I now have a simple workers.properties and uri file with the latest 1.2.28 > redirector but no matter what I try I only get "incorrect function" returned > to the browser. 1st error in log is > [error] j

RE: Understanding GC Logs

2009-06-04 Thread Caldarale, Charles R
> From: CrystalCracker [mailto:sudarshan.acha...@gmail.com] > Subject: RE: Understanding GC Logs > > Not sure what you mean by pooling those. I am using JBoss cache. Which I'm not familiar with, so I can't really offer much advice about it. The GC log does show some rather ugly usage patterns -

Re: [SECURITY] CVE-2009-0580 Apache Tomcat User enumeration vulnerability with FORM authentication

2009-06-04 Thread Rémy Maucherat
On Thu, Jun 4, 2009 at 6:48 PM, Christopher Schultz wrote: > I don't see any information disclosure vulnerability in the first place, > and I don't see how your patch would have fixed it. > > ??! The behavior was different if the user is not found of if the password is wrong. (ok, the security is

Re: how to convert struts based apps from tomcat4 to tomcat5.5?

2009-06-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Maurizio, On 6/4/2009 10:20 AM, Maurizio Rottin wrote: > as Caldarale, Charles R said it seems that "Your code may be dependent > on a bug in 4.1 that was fixed in later Tomcat levels", indeed with > version 5.5 and 6.0 tomcat throws an error. Then we

Re: How to reference Shared Libraries with TOMCAT

2009-06-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chuck, On 6/3/2009 11:31 AM, Caldarale, Charles R wrote: >> From: Christopher Schultz [mailto:ch...@christopherschultz.net] >> Subject: Re: How to reference Shared Libraries with TOMCAT >> >> # First clear out the user classpath CLASSPATH= > > But

Re: [SECURITY] CVE-2009-0580 Apache Tomcat User enumeration vulnerability with FORM authentication

2009-06-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mark, On 6/3/2009 11:42 AM, Mark Thomas wrote: > CVE-2009-0580: Tomcat information disclosure vulnerability I know I'm likely to get a vague response, but could you provide some more info about this issue? > Due to insufficient error checking in som

Re: Having trouble with Tomcat 6.0.20 embedded in Red5

2009-06-04 Thread Mark Thomas
Mondain wrote: > Using Tomcat 6.0.20 an error occurs in MapperListener and I cant find any > new information on using Tomcat Embed. Looks like https://issues.apache.org/bugzilla/show_bug.cgi?id=47316 Mark - To unsubscribe, e-m

Re: Authentication from the browser

2009-06-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alec, On 6/3/2009 12:25 PM, Alec Swan wrote: > Bill, thank you for your feedback. I read up on CLIENT-CERT and am now > surprised that Bill was the only one to mention it. It sounds like > CLIENT-CERT is the scheme that we should. We can generate cert

RE: Understanding GC Logs

2009-06-04 Thread CrystalCracker
>> If what you're caching is large arrays, you might want to consider breaking them up into smaller >>chunks of the same size, and pooling those. Not sure what you mean by pooling those. I am using JBoss cache. >>You might also think about tracking your cache entries via SoftReference objects,

Re: tomcat-connectors mod_jk.dsp file will not load in Visual Studio 2005

2009-06-04 Thread Andy Wang
I had no dependency issues on libhttpd, I was nmake -f Makefile.vc just worked for me once the proper environment variables were set. I just can't load the .dsp file and convert it to a vproj file. libhttpd should have been built with Apache, not the tomcat-connectors, so I guess I'm not sure

ISAPI incorrect function

2009-06-04 Thread dljohnson69
I now have a simple workers.properties and uri file with the latest 1.2.28 redirector but no matter what I try I only get "incorrect function" returned to the browser. 1st error in log is [error] jk_shm_calculate_size::jk_shm.c (120): Could not get member list for lb worker from map [error] valid

Having trouble with Tomcat 6.0.20 embedded in Red5

2009-06-04 Thread Mondain
Using Tomcat 6.0.20 an error occurs in MapperListener and I cant find any new information on using Tomcat Embed. The problematic area in 6.0.20 is here: private void registerHost(ObjectName objectName) throws Exception { String name=objectName.getKeyProperty("host"); if(

Re: how to convert struts based apps from tomcat4 to tomcat5.5?

2009-06-04 Thread Maurizio Rottin
2009/5/30 Christopher Schultz : > So, is basically calling news.getAbstr() (or > news.getTitle()) and it is returning null, which throws an error. > > I suspect that either your news object is null, or the title or abstract > of the news item is null. My guess is that 'news' is null. > > Maybe yo

RE: Understanding GC Logs

2009-06-04 Thread Caldarale, Charles R
> From: CrystalCracker [mailto:sudarshan.acha...@gmail.com] > Subject: Re: Understanding GC Logs > > I have a caching layer which is configured to evict objects from memory > after 3 minutes of idle time. I have profiled and see all those objects > in cache get evicted after some idle time. The t

RE: Service Specific Error 0

2009-06-04 Thread Peter Crowther
Exact Tomcat version? There are over 50 versions of "Tomcat5". Server 2008 x86 or x64? Are you using the 32-bit or 64-bit version of the service wrapper? - Peter > -Original Message- > From: aditya darbha [mailto:adityadar...@gmail.com] > Sent: 04 June 2009 14:39 > To: To

Service Specific Error 0

2009-06-04 Thread aditya darbha
Hi AllWhen I install Apache Tomcat using net start Tomcat5 in Windows 2003 32bit it starts the service with the specified credentials. However when I start the service using the same command net start Tomcat5 in Windows 2008, the service gets created, but it is not started even though the sta

Re: Understanding GC Logs

2009-06-04 Thread CrystalCracker
>>- what was hanging on to the 0.5Gb of memory in the 15 second period >>above between the 2nd and 3rd GC. I have a caching layer which is configured to evict objects from memory after 3 minutes of idle time. I have profiled and see all those objects in cache get evicted after some idle time. Is

Re: server to client notification

2009-06-04 Thread Jackose
Hello Josh & Ronald, Thank you fro your response. Say for example, I have four clients and a server. If client1 sends the message "hi", the server receives the message "hi" and the server must send this "hi" message to clients1,2,3 & 4. And there may be a scenario to send some messages

[SECURITY] CVE-2009-0783 Apache Tomcat Information disclosure

2009-06-04 Thread Mark Thomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 CVE-2009-0783: Apache Tomcat information disclosure vulnerability Severity: low Vendor: The Apache Software Foundation Versions Affected: Tomcat 6.0.0 to 6.0.18 Tomcat 5.5.0 to 5.5.27 Tomcat 4.1.0 to 4.1.39 The unsupported Tomcat 3.x, 4.0.x and 5.0

RE: tomcat-connectors mod_jk.dsp file will not load in Visual Studio 2005

2009-06-04 Thread Martin Gainty
Andy there is a dependency for libhttpd but when you try to build libhttpd you are displayed this error Configuration: libhttpd - Win32 Release Creating include/os.h Generating test_char.h from gen_test_char.exe '.\server\gen_test_char.exe' is not recogni

RE: java.net.SocketException: Too many open files

2009-06-04 Thread Lawrence Lamprecht
Greetings All, I had the exact same issue at one time a while ago, my resolution was the setting of the max number of files that was aloowed to be opened by the OS which affected the tomcat application. After I increased the max-files setting, all was resolved. Kind regards / Met vriendelijke

Re: Tomcat issue

2009-06-04 Thread Mark Thomas
Yadav, Sushma wrote: > We are using Tomcat5.5 on LINUX plaftform.Tomcat is used by web client > of our one of the application known as Serena Dimensions. That could be one of 28 different 5.5.x versions. Which one is it? > From past few days out tomcat shutdowns on daily basis or withinh an > int

Re: Understanding GC Logs

2009-06-04 Thread Mark Thomas
CrystalCracker wrote: > I am just trying to learn and understand the GC logs. (I did read the sun's > docs on GC tuning). > > jdk1.6.0_07 > -Xms2g -Xmx2g -Xss256k > -XX:+UseLargePages -XX:+PrintGCDetails > -verbose:gc -Xloggc:/var/log/gc.log > -XX:PermSize=512m -XX:MaxPermSize=512m > > It is r

Re: server to client notification

2009-06-04 Thread Ronald Klop
client <---> tomcatServer <---> notificationServer 1. client sends request to tomcatServer 2. tomcatServer calls notificationServer.waitForEvent() (this can wait forever if there is no event) 3. tomcatServer get event and send response to the client. Warning: step 2 takes up 1 thread. You can o

Re: how to setup Tomcat 6.x fixes

2009-06-04 Thread Mark Thomas
Meline, Kirk Alan. (ARC)[PEROT SYSTEMS] wrote: > Hi > > Where can I get instructions on setting up our Tomcat server with the new > fixes? I have downloaded the new fixes but cannot see any instructions on > the web site. If you mean "How do apply the fixes for the security issues fixed in 6.0

Re: server to client notification

2009-06-04 Thread Josh Gooding
Hello Jackson, Can you give us an example on a situation you are looking to have notification for please. It might help better answer your question. Warm regards, - Josh On Thu, Jun 4, 2009 at 3:21 AM, Jackose wrote: > > Hi All, > I want to know whether there is any way to invoke a pag

server to client notification

2009-06-04 Thread Jackose
Hi All, I want to know whether there is any way to invoke a page or send notification from server to client. I am using tomcat 5. If possible, could you please explain me how to do it with a sample example. Awaiting for your response. Thanks, Jackson -- View this message in context: htt