Hi Chris,
My reply as follows Mcafe[20110523] and thanks for the reply
- McAfe
Christopher Schultz-2 wrote:
>
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> McAfe,
>
> On 5/24/2011 3:01 AM, McAfe wrote:
>> Apache 2.2 (using mod_jk)
>>
>> The testing result I've use Jmeter (configure
Christopher Schultz wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Marc,
On 5/24/2011 10:56 AM, Marc Boorshtein wrote:
I've setup a pretty generic httpd(2.2.19)+mod_jk to tomcat 6 on Oracle
Linux 5 (CentOS 5 equiv) with SSL setup. With JkExtractSSL and the
correct SSLOptions in the http
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Marc,
On 5/24/2011 5:37 PM, Christopher Schultz wrote:
> Looking at the mod_jk code, it appears that the only variables that are
> included by using JkExtractSSL are those shown above. If you want more,
> you'll have to use JkEnvVar.
>
> I can confir
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Chuck,
On 5/24/2011 5:28 PM, Caldarale, Charles R wrote:
>> From: Christopher Schultz [mailto:ch...@christopherschultz.net]
>> Subject: Re: Control character in cookie value or attribute
>
>> On 5/24/2011 5:09 PM, Dan Checkoway wrote:
>>> -}
Hope you don't mind...I opened a ticket for this:
https://issues.apache.org/bugzilla/show_bug.cgi?id=51260
Dan
On Tue, May 24, 2011 at 5:28 PM, Caldarale, Charles R
wrote:
>> From: Christopher Schultz [mailto:ch...@christopherschultz.net]
>> Subject: Re: Control character in cookie value or att
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Marc,
On 5/24/2011 5:20 PM, Christopher Schultz wrote:
> On 5/24/2011 4:59 PM, Christopher Schultz wrote:
>> Instead, they are stored in the request /attributes/.
>
> Specifically, these:
>
> javax.servlet.request.cipher_suite - as a String
> javax.
> From: Christopher Schultz [mailto:ch...@christopherschultz.net]
> Subject: Re: Control character in cookie value or attribute
> On 5/24/2011 5:09 PM, Dan Checkoway wrote:
> > -} else if (CookieSupport.isHttpToken(value) &&
> > -!CookieSupport.ALLOW_HTTP_SEPARATORS_IN_V0
I wasn't gonna say anything about that, but I did consult my "operator
precedence" reference while looking at it... :-) +1 on parens!
Dan
On Tue, May 24, 2011 at 5:21 PM, Christopher Schultz
wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> Dan,
>
> On 5/24/2011 5:09 PM, Dan Checkow
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Dan,
On 5/24/2011 5:09 PM, Dan Checkoway wrote:
> -} else if (CookieSupport.isHttpToken(value) &&
> -!CookieSupport.ALLOW_HTTP_SEPARATORS_IN_V0 ||
> -CookieSupport.isV0Token(value) &&
> -CookieSu
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Marc,
On 5/24/2011 4:59 PM, Christopher Schultz wrote:
> Instead, they are stored in the request /attributes/.
Specifically, these:
javax.servlet.request.cipher_suite - as a String
javax.servlet.request.key_size - as an Integer
javax.servlet.req
Ah, thanks! I see now that setting ALLOW_HTTP_SEPARATORS_IN_V0=true
bypasses that check in a few spots. Probably what Chuck was alluding
to in his reply...
The one spot it wouldn't bypass is line 292 in ServerCookie.java. You
guys could switch the order of the logical checks in there, i.e.:
-
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Marc,
On 5/24/2011 10:56 AM, Marc Boorshtein wrote:
> I've setup a pretty generic httpd(2.2.19)+mod_jk to tomcat 6 on Oracle
> Linux 5 (CentOS 5 equiv) with SSL setup. With JkExtractSSL and the
> correct SSLOptions in the httpd configuration files.
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Marc,
On 5/24/2011 4:13 PM, Marc Boorshtein wrote:
>> Marc,
>>
>> On 5/24/2011 11:39 AM, Marc Boorshtein wrote:
>>> SSLOptions +StdEnvVars
>>> SSLOptions +ExportCertData
>>>
>>> JkExtractSSL On
>>>
>>>
>>
>> I'm not entirely sure about the JkExtractS
Thanks!
-Original Message-
From: Bill Miller [mailto:millebi.subscripti...@gmail.com]
Sent: Tuesday, May 24, 2011 4:32 PM
To: 'Tomcat Users List'
Subject: RE: Static Resources - Runtime Problems
Using a filter would insert the entry point of the Servlet into an entire path
with the opt
On 24/05/2011 21:21, Jay, Michael wrote:
> That was gnawing at the back of my mind a little bit. So how would you have
> an entry point servlet run at a simple address without consuming everything
> in that path? If the context is /hrsurvey and all the other servlets are
> mapped with that assum
On 24/05/2011 21:25, Dan Checkoway wrote:
> This is super low priority, since I assume somebody is passing junk in a
> Set-Cookie header, but I'd love to get to the bottom of it (I'm of the "no
> request left behind" mindset), and I'm still in the dark about what Tomcat
> doesn't like about what it
Using a filter would insert the entry point of the Servlet into an entire path
with the option of allowing/not allowing it to continue down the call chain.
-->FilterA->FilterB->RealServlet
|
+->SomethingInteresting
FilterA will have the ability to examine the request and pass it to som
This is super low priority, since I assume somebody is passing junk in a
Set-Cookie header, but I'd love to get to the bottom of it (I'm of the "no
request left behind" mindset), and I'm still in the dark about what Tomcat
doesn't like about what it's being passed.
Can you guys shed any light on w
That was gnawing at the back of my mind a little bit. So how would you have an
entry point servlet run at a simple address without consuming everything in
that path? If the context is /hrsurvey and all the other servlets are mapped
with that assumed as a prefix, can there not be anything mapped
> Marc,
>
> On 5/24/2011 11:39 AM, Marc Boorshtein wrote:
>> SSLOptions +StdEnvVars
>> SSLOptions +ExportCertData
>>
>> JkExtractSSL On
>>
>>
>
> I'm not entirely sure about the JkExtractSSL option, but some other
> mod_jk options are not copied into all virtual hosts. You might want to
> try movi
> From: Jay, Michael [mailto:em...@ufl.edu]
> Subject: RE: Static Resources - Runtime Problems
> I haven't mapped the .htm to anything.
Actually, you have:
>
> HRSurveyLogin
> /
>
That will send everything to HRSurveyLogin, including anything it redirect
I appreciate you trying to be helpful rather than otherwise. The current state
of the code is simply an exploration, a debugging exercise, though one that is
causing a lot of frustration and costing a lot of time. I'm not sure how to
get the full trace. It goes beyond what I can capture in the
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Michael,
On 5/24/2011 10:47 AM, Jay, Michael wrote:
> I apologize for the insufficient data. The goal is to foward the
> user to google.com to login and on successful authentication, reveal
> the original page desired. The original author used a .jsp
Caldarale, Charles R wrote:
From: Sai Pullabhotla [mailto:sai.pullabho...@jmethods.com]
Subject: Re: Overriding error page displayed when a context fails to initialize
What I'm looking for is a way to override the error pages of
Tomcat at the global level (not application/context specific)
T
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Kerotan,
On 5/24/2011 1:28 PM, kerotan wrote:
> Tomcat 7.0.14
> My servlet programs with "@WebServlet" annotation have three problems as
> follows:
> 1. A servlet program with "@WebServlet"
> annotation(@WebServlet(name="HelloServlet", urlPatterns=
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Marc,
On 5/24/2011 11:39 AM, Marc Boorshtein wrote:
> SSLOptions +StdEnvVars
> SSLOptions +ExportCertData
>
> JkExtractSSL On
>
>
I'm not entirely sure about the JkExtractSSL option, but some other
mod_jk options are not copied into all virtual ho
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
McAfe,
On 5/24/2011 3:01 AM, McAfe wrote:
> Apache 2.2 (using mod_jk)
>
> The testing result I've use Jmeter (configured 100 thread per-second) it
> will die when thread(Jmeter) between 200 ~ 300
AJP expects to have persistent connections. What is y
Dear Sirs,
Tomcat 7.0.14
Servlet 3.0
Windows XP SP3 x86
My servlet programs with "@WebServlet" annotation have three problems as
follows:
1. A servlet program with "@WebServlet"
annotation(@WebServlet(name="HelloServlet", urlPatterns={"/hello"}))
cantno
Dear Sirs,
Tomcat 7.0.14
Servlet 3.0
Windows XP SP3 x86版
My servlet programs with "@WebServlet" annotation have three problems as
follows:
1. A servlet program with "@WebServlet"
annotation(@WebServlet(name="HelloServlet", urlPatterns={"/hello"}))
cantn
> From: Sai Pullabhotla [mailto:sai.pullabho...@jmethods.com]
> Subject: Re: Overriding error page displayed when a context fails to
> initialize
> What I'm looking for is a way to override the error pages of
> Tomcat at the global level (not application/context specific)
There's no such mecha
Thanks for the reply, Chris.
We do several things during context initialization with the
ServletContextListener hook. The contextInitialized method may not
complete for various reasons, sometimes with checked exceptions and
sometimes with unchecked exceptions. We just let Tomcat/JVM handle the
unc
>
> And your SSLOptions are what exactly?
>
> Also Tomcat and mod_jk version info might be relevant.
>
oadModulejk_module modules/mod_jk.so
LoadFile "/home/sys/ssl-poc/webgate/access/oblix/lib/libgcc_s.so.1"
LoadFile "/home/sys/ssl-poc/webgate/access/oblix/lib/libstdc++.so.5"
SSLOptions +St
On 24/05/2011 15:56, Marc Boorshtein wrote:
> I've setup a pretty generic httpd(2.2.19)+mod_jk to tomcat 6 on Oracle
> Linux 5 (CentOS 5 equiv) with SSL setup. With JkExtractSSL and the
> correct SSLOptions in the httpd configuration files.
And your SSLOptions are what exactly?
Also Tomcat and m
On Tue, 24 May 2011 10:47:32 -0400, Jay, Michael wrote:
IMHO code that follows pattern
try {
... something
} catch (Exception e) {
System.out("oops");
}
...
try {
... something
} catch (Exception e) {
System.out("oops");
}
deserves only /dev/null as a permanent storage destination.
--
Miko
I've setup a pretty generic httpd(2.2.19)+mod_jk to tomcat 6 on Oracle
Linux 5 (CentOS 5 equiv) with SSL setup. With JkExtractSSL and the
correct SSLOptions in the httpd configuration files. I can see the
SSL environment variables in /cgi-bin/printenv but no headers or
environment variables in th
I apologize for the insufficient data. The goal is to foward the user to
google.com to login and on successful authentication, reveal the original page
desired. The original author used a .jsp that simply produces itself. But
that's a separate issue--I think. I've not been able to capture an ex
hi
Using Session.setMaxInactiveInterval() so expecting it overwrite web.xml
's expirytime.
>keep-alive parameter for the connector
Where to set this value can u explain?
thanks
On Tue, May 24, 2011 at 4:43 PM, Martin Gainty wrote:
>
> 2 things to look at:
> keep-alive parameter for the c
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
> From: Caldarale, Charles R
> Subject: RE: Static Resources - Runtime Problems
> C) Configuring a loop in your filter declarations. Post
> your WEB-INF/web.xml so we can look at it.
Might not be in filter declarations; could easily be just the servlet mapping
you've set up.
- Chuck
THIS
> From: Jay, Michael [mailto:em...@ufl.edu]
> Subject: Static Resources - Runtime Problems
> I must be overlooking something very basic.
A) Not telling us the version of Tomcat you're using, the JVM level, the
platform it's all running on, and whether or not you're running Tomcat
stand-alone o
I'm finding that whether I use a redirect() or a forward() to a static
resource, my server goes crazy.
at
org.apache.catalina.core.ApplicationHttpRequest.getSession(ApplicationHttpRequest.java:572)
at
javax.servlet.http.HttpServletRequestWrapper.getSession(HttpServletRequestWrapper.java:22
On Tue, May 24, 2011 at 9:59 AM, Sai Pullabhotla <
sai.pullabho...@jmethods.com> wrote:
> I've a web application with two contexts "ROOT" and "mycontext". Both
> contexts have custom error pages defined in the web.xml and everything
> works as expected in most cases. The only problem is that if my
I've a web application with two contexts "ROOT" and "mycontext". Both
contexts have custom error pages defined in the web.xml and everything
works as expected in most cases. The only problem is that if my
context, mycontext, fails to initialize (e.g. database is
unavailable), and if some one tries
> From: Harsimranjit singh Kler [mailto:simran...@gmail.com]
> Subject: Session Expiry Issue on Tomcat 5.5.27
> we see that some session are expired even if there is some
> activity going on and the user gets logged out.
Are you sure the session is expiring, or is it perhaps being explicitly
Mark Thomas wrote:
On 24/05/2011 12:50, Martin Kouba wrote:
What is the reason NOT to assume that request with more than one
User-Agent header originates from a bot?
See lines 133, 134 in Tomcat 7.0.14.
Simply that none of the samples I looked at had multiple UA headers and
a suggestion from a
On 24/05/2011 12:50, Martin Kouba wrote:
> What is the reason NOT to assume that request with more than one
> User-Agent header originates from a bot?
> See lines 133, 134 in Tomcat 7.0.14.
Simply that none of the samples I looked at had multiple UA headers and
a suggestion from another committer
What is the reason NOT to assume that request with more than one
User-Agent header originates from a bot?
See lines 133, 134 in Tomcat 7.0.14.
Thanks
Martin
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For addi
2 things to look at:
keep-alive parameter for the connector
session-timeout in web.xml
do the logs confirm the webapp is producing activity when the connection is
closed?
Martin --
__
Verzicht und Vertraulichkeitanmerkung/Note de déni et de confidenti
The problem is that one of my web-apps compiles JSP at run-time - so that we
can update them on-the-fly.
BTW, I'm still not getting this error today - so it looks like it is either the
checkInterval flag, reduction of memory usage or minimizing the catalina/stdout
logging (we had some unneces
Hi,
I got few question would like ask hope someone answer my question, below is
the server information
Windows 2003 server
Tomcat 6.0 (configured java initial / maximum memory pool: 1024 MB)
Apache 2.2 (using mod_jk)
Java 1.6
The testing result I've use Jmeter (configured 100 thread per-second)
50 matches
Mail list logo