Re: Performance & *SpareThreads

2011-05-24 Thread McAfe
Hi Chris, My reply as follows Mcafe[20110523] and thanks for the reply - McAfe Christopher Schultz-2 wrote: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > McAfe, > > On 5/24/2011 3:01 AM, McAfe wrote: >> Apache 2.2 (using mod_jk) >> >> The testing result I've use Jmeter (configure

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread André Warnier
Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marc, On 5/24/2011 10:56 AM, Marc Boorshtein wrote: I've setup a pretty generic httpd(2.2.19)+mod_jk to tomcat 6 on Oracle Linux 5 (CentOS 5 equiv) with SSL setup. With JkExtractSSL and the correct SSLOptions in the http

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marc, On 5/24/2011 5:37 PM, Christopher Schultz wrote: > Looking at the mod_jk code, it appears that the only variables that are > included by using JkExtractSSL are those shown above. If you want more, > you'll have to use JkEnvVar. > > I can confir

Re: Control character in cookie value or attribute

2011-05-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chuck, On 5/24/2011 5:28 PM, Caldarale, Charles R wrote: >> From: Christopher Schultz [mailto:ch...@christopherschultz.net] >> Subject: Re: Control character in cookie value or attribute > >> On 5/24/2011 5:09 PM, Dan Checkoway wrote: >>> -}

Re: Control character in cookie value or attribute

2011-05-24 Thread Dan Checkoway
Hope you don't mind...I opened a ticket for this: https://issues.apache.org/bugzilla/show_bug.cgi?id=51260 Dan On Tue, May 24, 2011 at 5:28 PM, Caldarale, Charles R wrote: >> From: Christopher Schultz [mailto:ch...@christopherschultz.net] >> Subject: Re: Control character in cookie value or att

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marc, On 5/24/2011 5:20 PM, Christopher Schultz wrote: > On 5/24/2011 4:59 PM, Christopher Schultz wrote: >> Instead, they are stored in the request /attributes/. > > Specifically, these: > > javax.servlet.request.cipher_suite - as a String > javax.

RE: Control character in cookie value or attribute

2011-05-24 Thread Caldarale, Charles R
> From: Christopher Schultz [mailto:ch...@christopherschultz.net] > Subject: Re: Control character in cookie value or attribute > On 5/24/2011 5:09 PM, Dan Checkoway wrote: > > -} else if (CookieSupport.isHttpToken(value) && > > -!CookieSupport.ALLOW_HTTP_SEPARATORS_IN_V0

Re: Control character in cookie value or attribute

2011-05-24 Thread Dan Checkoway
I wasn't gonna say anything about that, but I did consult my "operator precedence" reference while looking at it... :-) +1 on parens! Dan On Tue, May 24, 2011 at 5:21 PM, Christopher Schultz wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Dan, > > On 5/24/2011 5:09 PM, Dan Checkow

Re: Control character in cookie value or attribute

2011-05-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dan, On 5/24/2011 5:09 PM, Dan Checkoway wrote: > -} else if (CookieSupport.isHttpToken(value) && > -!CookieSupport.ALLOW_HTTP_SEPARATORS_IN_V0 || > -CookieSupport.isV0Token(value) && > -CookieSu

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marc, On 5/24/2011 4:59 PM, Christopher Schultz wrote: > Instead, they are stored in the request /attributes/. Specifically, these: javax.servlet.request.cipher_suite - as a String javax.servlet.request.key_size - as an Integer javax.servlet.req

Re: Control character in cookie value or attribute

2011-05-24 Thread Dan Checkoway
Ah, thanks! I see now that setting ALLOW_HTTP_SEPARATORS_IN_V0=true bypasses that check in a few spots. Probably what Chuck was alluding to in his reply... The one spot it wouldn't bypass is line 292 in ServerCookie.java. You guys could switch the order of the logical checks in there, i.e.: -

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marc, On 5/24/2011 10:56 AM, Marc Boorshtein wrote: > I've setup a pretty generic httpd(2.2.19)+mod_jk to tomcat 6 on Oracle > Linux 5 (CentOS 5 equiv) with SSL setup. With JkExtractSSL and the > correct SSLOptions in the httpd configuration files.

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marc, On 5/24/2011 4:13 PM, Marc Boorshtein wrote: >> Marc, >> >> On 5/24/2011 11:39 AM, Marc Boorshtein wrote: >>> SSLOptions +StdEnvVars >>> SSLOptions +ExportCertData >>> >>> JkExtractSSL On >>> >>> >> >> I'm not entirely sure about the JkExtractS

RE: Static Resources - Runtime Problems

2011-05-24 Thread Jay, Michael
Thanks! -Original Message- From: Bill Miller [mailto:millebi.subscripti...@gmail.com] Sent: Tuesday, May 24, 2011 4:32 PM To: 'Tomcat Users List' Subject: RE: Static Resources - Runtime Problems Using a filter would insert the entry point of the Servlet into an entire path with the opt

Re: Static Resources - Runtime Problems

2011-05-24 Thread Mark Thomas
On 24/05/2011 21:21, Jay, Michael wrote: > That was gnawing at the back of my mind a little bit. So how would you have > an entry point servlet run at a simple address without consuming everything > in that path? If the context is /hrsurvey and all the other servlets are > mapped with that assum

Re: Control character in cookie value or attribute

2011-05-24 Thread Mark Thomas
On 24/05/2011 21:25, Dan Checkoway wrote: > This is super low priority, since I assume somebody is passing junk in a > Set-Cookie header, but I'd love to get to the bottom of it (I'm of the "no > request left behind" mindset), and I'm still in the dark about what Tomcat > doesn't like about what it

RE: Static Resources - Runtime Problems

2011-05-24 Thread Bill Miller
Using a filter would insert the entry point of the Servlet into an entire path with the option of allowing/not allowing it to continue down the call chain. -->FilterA->FilterB->RealServlet | +->SomethingInteresting FilterA will have the ability to examine the request and pass it to som

Re: Control character in cookie value or attribute

2011-05-24 Thread Dan Checkoway
This is super low priority, since I assume somebody is passing junk in a Set-Cookie header, but I'd love to get to the bottom of it (I'm of the "no request left behind" mindset), and I'm still in the dark about what Tomcat doesn't like about what it's being passed. Can you guys shed any light on w

RE: Static Resources - Runtime Problems

2011-05-24 Thread Jay, Michael
That was gnawing at the back of my mind a little bit. So how would you have an entry point servlet run at a simple address without consuming everything in that path? If the context is /hrsurvey and all the other servlets are mapped with that assumed as a prefix, can there not be anything mapped

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread Marc Boorshtein
> Marc, > > On 5/24/2011 11:39 AM, Marc Boorshtein wrote: >> SSLOptions +StdEnvVars >> SSLOptions +ExportCertData >> >> JkExtractSSL On >> >> > > I'm not entirely sure about the JkExtractSSL option, but some other > mod_jk options are not copied into all virtual hosts. You might want to > try movi

RE: Static Resources - Runtime Problems

2011-05-24 Thread Caldarale, Charles R
> From: Jay, Michael [mailto:em...@ufl.edu] > Subject: RE: Static Resources - Runtime Problems > I haven't mapped the .htm to anything. Actually, you have: > > HRSurveyLogin > / > That will send everything to HRSurveyLogin, including anything it redirect

RE: Static Resources - Runtime Problems

2011-05-24 Thread Jay, Michael
I appreciate you trying to be helpful rather than otherwise. The current state of the code is simply an exploration, a debugging exercise, though one that is causing a lot of frustration and costing a lot of time. I'm not sure how to get the full trace. It goes beyond what I can capture in the

Re: Static Resources - Runtime Problems

2011-05-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Michael, On 5/24/2011 10:47 AM, Jay, Michael wrote: > I apologize for the insufficient data. The goal is to foward the > user to google.com to login and on successful authentication, reveal > the original page desired. The original author used a .jsp

Re: Overriding error page displayed when a context fails to initialize

2011-05-24 Thread André Warnier
Caldarale, Charles R wrote: From: Sai Pullabhotla [mailto:sai.pullabho...@jmethods.com] Subject: Re: Overriding error page displayed when a context fails to initialize What I'm looking for is a way to override the error pages of Tomcat at the global level (not application/context specific) T

Re: restricted utilization on "@WebServlet" annotation of Servlet 3.0

2011-05-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kerotan, On 5/24/2011 1:28 PM, kerotan wrote: > Tomcat 7.0.14 > My servlet programs with "@WebServlet" annotation have three problems as > follows: > 1. A servlet program with "@WebServlet" > annotation(@WebServlet(name="HelloServlet", urlPatterns=

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marc, On 5/24/2011 11:39 AM, Marc Boorshtein wrote: > SSLOptions +StdEnvVars > SSLOptions +ExportCertData > > JkExtractSSL On > > I'm not entirely sure about the JkExtractSSL option, but some other mod_jk options are not copied into all virtual ho

Re: Performance & *SpareThreads

2011-05-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 McAfe, On 5/24/2011 3:01 AM, McAfe wrote: > Apache 2.2 (using mod_jk) > > The testing result I've use Jmeter (configured 100 thread per-second) it > will die when thread(Jmeter) between 200 ~ 300 AJP expects to have persistent connections. What is y

restricted utilization on "@WebServlet" annotation of Servlet 3.0

2011-05-24 Thread kerotan
Dear Sirs, Tomcat 7.0.14 Servlet 3.0 Windows XP SP3 x86 My servlet programs with "@WebServlet" annotation have three problems as follows: 1. A servlet program with "@WebServlet" annotation(@WebServlet(name="HelloServlet", urlPatterns={"/hello"})) cantno

restricted utilization on "@WebServlet" annotation of Servlet 3.0

2011-05-24 Thread kerotan
Dear Sirs, Tomcat 7.0.14 Servlet 3.0 Windows XP SP3 x86版 My servlet programs with "@WebServlet" annotation have three problems as follows: 1. A servlet program with "@WebServlet" annotation(@WebServlet(name="HelloServlet", urlPatterns={"/hello"})) cantn

RE: Overriding error page displayed when a context fails to initialize

2011-05-24 Thread Caldarale, Charles R
> From: Sai Pullabhotla [mailto:sai.pullabho...@jmethods.com] > Subject: Re: Overriding error page displayed when a context fails to > initialize > What I'm looking for is a way to override the error pages of > Tomcat at the global level (not application/context specific) There's no such mecha

Re: Overriding error page displayed when a context fails to initialize

2011-05-24 Thread Sai Pullabhotla
Thanks for the reply, Chris. We do several things during context initialization with the ServletContextListener hook. The contextInitialized method may not complete for various reasons, sometimes with checked exceptions and sometimes with unchecked exceptions. We just let Tomcat/JVM handle the unc

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread Marc Boorshtein
> > And your SSLOptions are what exactly? > > Also Tomcat and mod_jk version info might be relevant. > oadModulejk_module modules/mod_jk.so LoadFile "/home/sys/ssl-poc/webgate/access/oblix/lib/libgcc_s.so.1" LoadFile "/home/sys/ssl-poc/webgate/access/oblix/lib/libstdc++.so.5" SSLOptions +St

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread Mark Thomas
On 24/05/2011 15:56, Marc Boorshtein wrote: > I've setup a pretty generic httpd(2.2.19)+mod_jk to tomcat 6 on Oracle > Linux 5 (CentOS 5 equiv) with SSL setup. With JkExtractSSL and the > correct SSLOptions in the httpd configuration files. And your SSLOptions are what exactly? Also Tomcat and m

RE: Static Resources - Runtime Problems

2011-05-24 Thread Mikolaj Rydzewski
On Tue, 24 May 2011 10:47:32 -0400, Jay, Michael wrote: IMHO code that follows pattern try { ... something } catch (Exception e) { System.out("oops"); } ... try { ... something } catch (Exception e) { System.out("oops"); } deserves only /dev/null as a permanent storage destination. -- Miko

JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread Marc Boorshtein
I've setup a pretty generic httpd(2.2.19)+mod_jk to tomcat 6 on Oracle Linux 5 (CentOS 5 equiv) with SSL setup. With JkExtractSSL and the correct SSLOptions in the httpd configuration files. I can see the SSL environment variables in /cgi-bin/printenv but no headers or environment variables in th

RE: Static Resources - Runtime Problems

2011-05-24 Thread Jay, Michael
I apologize for the insufficient data. The goal is to foward the user to google.com to login and on successful authentication, reveal the original page desired. The original author used a .jsp that simply produces itself. But that's a separate issue--I think. I've not been able to capture an ex

Re: Session Expiry Issue on Tomcat 5.5.27

2011-05-24 Thread Harsimranjit singh Kler
hi Using Session.setMaxInactiveInterval() so expecting it overwrite web.xml 's expirytime. >keep-alive parameter for the connector Where to set this value can u explain? thanks On Tue, May 24, 2011 at 4:43 PM, Martin Gainty wrote: > > 2 things to look at: > keep-alive parameter for the c

RE: Static Resources - Runtime Problems

2011-05-24 Thread Martin Gainty
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org >

RE: Static Resources - Runtime Problems

2011-05-24 Thread Caldarale, Charles R
> From: Caldarale, Charles R > Subject: RE: Static Resources - Runtime Problems > C) Configuring a loop in your filter declarations. Post > your WEB-INF/web.xml so we can look at it. Might not be in filter declarations; could easily be just the servlet mapping you've set up. - Chuck THIS

RE: Static Resources - Runtime Problems

2011-05-24 Thread Caldarale, Charles R
> From: Jay, Michael [mailto:em...@ufl.edu] > Subject: Static Resources - Runtime Problems > I must be overlooking something very basic. A) Not telling us the version of Tomcat you're using, the JVM level, the platform it's all running on, and whether or not you're running Tomcat stand-alone o

Static Resources - Runtime Problems

2011-05-24 Thread Jay, Michael
I'm finding that whether I use a redirect() or a forward() to a static resource, my server goes crazy. at org.apache.catalina.core.ApplicationHttpRequest.getSession(ApplicationHttpRequest.java:572) at javax.servlet.http.HttpServletRequestWrapper.getSession(HttpServletRequestWrapper.java:22

Re: Overriding error page displayed when a context fails to initialize

2011-05-24 Thread chris derham
On Tue, May 24, 2011 at 9:59 AM, Sai Pullabhotla < sai.pullabho...@jmethods.com> wrote: > I've a web application with two contexts "ROOT" and "mycontext". Both > contexts have custom error pages defined in the web.xml and everything > works as expected in most cases. The only problem is that if my

Overriding error page displayed when a context fails to initialize

2011-05-24 Thread Sai Pullabhotla
I've a web application with two contexts "ROOT" and "mycontext". Both contexts have custom error pages defined in the web.xml and everything works as expected in most cases. The only problem is that if my context, mycontext, fails to initialize (e.g. database is unavailable), and if some one tries

RE: Session Expiry Issue on Tomcat 5.5.27

2011-05-24 Thread Caldarale, Charles R
> From: Harsimranjit singh Kler [mailto:simran...@gmail.com] > Subject: Session Expiry Issue on Tomcat 5.5.27 > we see that some session are expired even if there is some > activity going on and the user gets logged out. Are you sure the session is expiring, or is it perhaps being explicitly

Re: CrawlerSessionManagerValve question

2011-05-24 Thread André Warnier
Mark Thomas wrote: On 24/05/2011 12:50, Martin Kouba wrote: What is the reason NOT to assume that request with more than one User-Agent header originates from a bot? See lines 133, 134 in Tomcat 7.0.14. Simply that none of the samples I looked at had multiple UA headers and a suggestion from a

Re: CrawlerSessionManagerValve question

2011-05-24 Thread Mark Thomas
On 24/05/2011 12:50, Martin Kouba wrote: > What is the reason NOT to assume that request with more than one > User-Agent header originates from a bot? > See lines 133, 134 in Tomcat 7.0.14. Simply that none of the samples I looked at had multiple UA headers and a suggestion from another committer

CrawlerSessionManagerValve question

2011-05-24 Thread Martin Kouba
What is the reason NOT to assume that request with more than one User-Agent header originates from a bot? See lines 133, 134 in Tomcat 7.0.14. Thanks Martin - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For addi

RE: Session Expiry Issue on Tomcat 5.5.27

2011-05-24 Thread Martin Gainty
2 things to look at: keep-alive parameter for the connector session-timeout in web.xml do the logs confirm the webapp is producing activity when the connection is closed? Martin -- __ Verzicht und Vertraulichkeitanmerkung/Note de déni et de confidenti

RE: java.lang.ClassNotFoundException - JSP pages

2011-05-24 Thread Tom Wolf
The problem is that one of my web-apps compiles JSP at run-time - so that we can update them on-the-fly. BTW, I'm still not getting this error today - so it looks like it is either the checkInterval flag, reduction of memory usage or minimizing the catalina/stdout logging (we had some unneces

Performance & *SpareThreads

2011-05-24 Thread McAfe
Hi, I got few question would like ask hope someone answer my question, below is the server information Windows 2003 server Tomcat 6.0 (configured java initial / maximum memory pool: 1024 MB) Apache 2.2 (using mod_jk) Java 1.6 The testing result I've use Jmeter (configured 100 thread per-second)