Parallel deployment and session replication

2011-08-12 Thread Aristedes Maniatis
I am an enthusiastic user of the new parallel deployment feature of tomcat 7. But I'm a little unclear about how it interacts with session replication. If I have a cluster of tomcat instances: instance1/A#001.war instance2/A#001.war instance3/A#001.war And they are all replicating sessions (sa

RE: auth-constraint

2011-08-12 Thread markt
"Caldarale, Charles R" wrote: >> From: Bijesh Vijayan [mailto:bijes v...@gmail.com] >> Subject: Re: auth-constraint > >> Is there a way in tomcat 7 to mention the roles outside of web.xml. > >Read section 8 of the servlet 3.0 spec; you might be able to use a >web-fragment.xml to list the roles.

RE: auth-constraint

2011-08-12 Thread Caldarale, Charles R
> From: Bijesh Vijayan [mailto:bije...@gmail.com] > Subject: Re: auth-constraint > Is there a way in tomcat 7 to mention the roles outside of web.xml. Read section 8 of the servlet 3.0 spec; you might be able to use a web-fragment.xml to list the roles. - Chuck THIS COMMUNICATION MAY CONTAI

Re: auth-constraint

2011-08-12 Thread Bijesh Vijayan
> Probably a bug in the version of Tomcat 5.?.? that you were using. See this > bugzilla entry: 5.26 Is there a way in tomcat 7 to mention the roles outside of web.xml. Bijesh. On Fri, Aug 12, 2011 at 4:14 PM, Caldarale, Charles R wrote: >> From: Bijesh Vijayan [mailto:bije...@gmail.com] >> S

Re: Cannot make war file as default app

2011-08-12 Thread exquisite
Thanks Chris for your reply. Yeah im trying the ROOT.war way too and here i have one more issue with that: Now when i renamed my war to ROOT.war and drop it in webapps folder (without any context in server.xml), it deploys fine for the first time as the root app (Creates a ROOT folder in webap

Re: Parallel Deployment & Sessions: What am I Missing?

2011-08-12 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jonathan, On 8/12/2011 3:02 PM, Jonathan Rosenberg wrote: > Mystery solved, I think. > > I did a little more digging around & discovered that my cookie had > two JSESSIONID values. I didn't even know this was possible. Yep, cookies can have multiple

Re: Cannot make war file as default app

2011-08-12 Thread exquisite
Thanks Chuck for your point. Now when i renamed my war to ROOT.war and drop it in webapps folder (without any context in server.xml), it deploys fine for the first time as the root app (Creates a ROOT folder in webapps),  but if i make any change to any of my jsps and drop the new ROOT.war fil

RE: auth-constraint

2011-08-12 Thread Caldarale, Charles R
> From: Bijesh Vijayan [mailto:bije...@gmail.com] > Subject: auth-constraint > I was having the following entry in my application web.xml in tomcat 5. You need to be precise when stating Tomcat versions; Tomcat 5.what.what? > > * > Let's look at section 12.7 of the servlet spec: "The spec

auth-constraint

2011-08-12 Thread Bijesh Vijayan
Hi, I was having the following entry in my application web.xml in tomcat 5. * I was getting all the roles from the Database. When I migrated to tomcat 7, I need to mention all the roles in application web.xml.

Re: Parallel Deployment & Sessions: What am I Missing?

2011-08-12 Thread Jonathan Rosenberg
Mystery solved, I think. I did a little more digging around & discovered that my cookie had two JSESSIONID values. I didn't even know this was possible. Neither of the values matched Tomcat's session id & the browser was unable to update the cookie's JSESSIONID properly (no surprise). I deleted

Re: Get SSO ID on server

2011-08-12 Thread Chema
> Why bother? > > " > As soon as the user logs out of one web application (for example, by > invalidating the corresponding session if form based login is used), the > user's sessions in all web applications will be invalidated. Any > subsequent attempt to access a protected resource in any applica

Re: Parallel Deployment & Sessions: What am I Missing?

2011-08-12 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jonathan, On 8/12/2011 2:14 PM, Jonathan Rosenberg wrote: > I am using the same browser instance. Just reloading the page. Good. > Tomcat manager confirms the existence of a session. I am the only > user of this test machine, os no confusion ther

RE: nested context issue in tomcat 7

2011-08-12 Thread Caldarale, Charles R
> From: Bijesh Vijayan [mailto:bije...@gmail.com] > Subject: Re: nested context issue in tomcat 7 > So you mean to say that my URL should be changed for the > second context ? No, continue to use the slash in the URL; only the location in the file system contains the # as a place-holder for th

Re: Parallel Deployment & Sessions: What am I Missing?

2011-08-12 Thread Jonathan Rosenberg
I just reverified that session info is being sent (i.e., JSESSIONID). Yes, that's the client cookie. -- Jonathan Rosenberg Founder & Executive Director Tabby's Place, a Cat Sanctuary http://www.tabbysplace.org/ On Fri, Aug 12, 2011 at 2:32 PM, Christopher Schultz wrote: > -BEGIN PGP SIGNED

Re: nested context issue in tomcat 7

2011-08-12 Thread Bijesh Vijayan
Thanks Charles / Thomas, > This is not supported. You need to move > /home/bijesh/webapps/Employee/Reports > to > /home/bijesh/webapps/Employee#Reports > > and then specify your context as: > Thanks, I will be moving the Reports to /home/bijesh/webapps/Employee#Reports >> Where can I mention t

Re: Get SSO ID on server

2011-08-12 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chema, On 8/12/2011 3:51 AM, Chema wrote: >> Why do you need a consistent ID between the two apps? > > Because I'll store this ID into a record in database. The apps > checking every 60 sec if this record exists and, if dont , perform a > logout Why

Re: Parallel Deployment & Sessions: What am I Missing?

2011-08-12 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chuck, On 8/12/2011 2:13 PM, Caldarale, Charles R wrote: >> From: Caldarale, Charles R Subject: RE: Parallel Deployment & >> Sessions: What am I Missing? > >>> Results surprise me ('NEW version ') > >> Why is that surprising? To quote from the doc:

Re: Cannot make war file as default app

2011-08-12 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 G, On 8/12/2011 4:55 AM, exquisite wrote: > Hey Mark, I think i figured out what's going on with my > configuration and I feel that the Tomcat Documentation is not too > clear explaining this particular step. > > I have been editing the server.xml in

Re: Parallel Deployment & Sessions: What am I Missing?

2011-08-12 Thread Jonathan Rosenberg
Chris, I am using the same browser instance. Just reloading the page. Tomcat manager confirms the existence of a session. I am the only user of this test machine, os no confusion there. Are there any config settings that would disable parallel deployment? I'm at a loss, since this test case i

RE: Parallel Deployment & Sessions: What am I Missing?

2011-08-12 Thread Caldarale, Charles R
> From: Caldarale, Charles R > Subject: RE: Parallel Deployment & Sessions: What am I Missing? > > Results surprise me ('NEW version ') > Why is that surprising? To quote from the doc: > "If no session information is present in the request, use the latest version." You might want to sniff the

RE: Parallel Deployment & Sessions: What am I Missing?

2011-08-12 Thread Caldarale, Charles R
> From: shmol...@gmail.com [mailto:shmol...@gmail.com] On Behalf Of Jonathan > Rosenberg > Subject: Re: Parallel Deployment & Sessions: What am I Missing? > 1) Copy foo##001.war to webapps & visit /foo. > Results as expected ('old version'). Fine so far. > 2) Copy foo##002.war to webapps & re

Re: Parallel Deployment & Sessions: What am I Missing?

2011-08-12 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jonathan, On 8/12/2011 11:02 AM, Jonathan Rosenberg wrote: > 1) Copy foo##001.war to webapps & visit /foo. Results as expected > ('old version'). 2) Copy foo##002.war to webapps & reload /foo. > Results surprise me ('NEW version ') > > What am I mi

Re: nested context issue in tomcat 7

2011-08-12 Thread Mark Thomas
On 12/08/2011 18:23, Bijesh Vijayan wrote: > Thanks Charles, > >> What is the appBase setting for the named localhost? > /home/bijesh/webapps > Where can I mention the path.my URLs are > http://localhost:8080/Employee/logon.do > http://localhost:8080/Employee/Reports/first.do > Thanks for the s

RE: nested context issue in tomcat 7

2011-08-12 Thread Caldarale, Charles R
> From: Bijesh Vijayan [mailto:bije...@gmail.com] > Subject: Re: nested context issue in tomcat 7 > Where can I mention the path.my URLs are > http://localhost:8080/Employee/logon.do > http://localhost:8080/Employee/Reports/first.do The path is derived from the name of the .xml file containing t

Re: nested context issue in tomcat 7

2011-08-12 Thread Bijesh Vijayan
Thanks Charles, > What is the appBase setting for the named localhost? /home/bijesh/webapps >> file name = CATALINA_BASE/conf/Catalina/localhost/Employee.xml >>> docBase="./Employee" >>

How do I log to a filename based on the full context name?

2011-08-12 Thread chris derham
Reading http://www.javacodegeeks.com/2011/06/zero-downtime-deployment-and-rollback.html?m=1, it states If you do not use the full context name of the application in the log file name, you may end up in a situation where both versions of a web application are writing into the same log file So how

RE: nested context issue in tomcat 7

2011-08-12 Thread Caldarale, Charles R
> From: Bijesh Vijayan [mailto:bije...@gmail.com] > Subject: nested context issue in tomcat 7 > file name = CATALINA_BASE/conf/Catalina/localhost/Employee.xml > docBase="./Employee" > c

Re: nested context issue in tomcat 7

2011-08-12 Thread Bijesh Vijayan
Thanks Andre, > If that interpretation is correct, it would mean that docBase is "wherever > Tomcat happens to be running now" + a subdirectory "Employee". > Is that what you mean here ? No I mean my doc base is outside the tomcat directory. I mean my context to be inside the appBase(/home/bijesh/

Re: nested context issue in tomcat 7

2011-08-12 Thread André Warnier
Bijesh Vijayan wrote: ... file name = CATALINA_BASE/conf/Catalina/localhost/Employee.xml Hi. I find this docBase "suspicious", in the sense that it is (I think ) an absolute path specification, based on "." which usually means "the current directory". If that i

nested context issue in tomcat 7

2011-08-12 Thread Bijesh Vijayan
I have a appBase(/home/bijesh/webapps/) outside by CATALINA_BASE(same as CATALINA_HOME - /home/bijesh/tomcat). I have 2 context files, one file name = CATALINA_BASE/conf/Catalina/localhost/Employee.xml file name = CATALINA_BASE/conf/Catalina/localhost/Employee#Repo

Re: Parallel Deployment & Sessions: What am I Missing?

2011-08-12 Thread Jonathan Rosenberg
So, it's gotta be something simple I'm missing. I decided to construct a trivial test of parallel deployment. Couldn't be simpler (http://www.javacodegeeks.com/2011/06/zero-downtime-deployment-and-rollback.html?m=1): $ mkdir WEB-INF $ echo "" > WEB-INF/web.xml $ echo 'old version ' > index.jsp $

RE: Cannot make war file as default app

2011-08-12 Thread Caldarale, Charles R
> From: exquisite [mailto:gautam_exquis...@yahoo.com] > Subject: Re: Cannot make war file as default app > i did not want to rename my war to ROOT.war And thereby make a lot more work for yourself. Simply rename it and be done. Using the horribly outdated and restrictive mechanism of placing

RE: Sticky Session Not Working With Apache 2.0.54 and Tomcat 7.0.8

2011-08-12 Thread Lataxes, Karl
The jvmRoute's for both server.xmls are properly set to the worker names and are not commented out. This was the first thing I verified. Here are the settings in workers.properties (worker tomcat7A identical to tomcat7C except for port, since both are running on the same server for

[SECURITY] CVE-2011-2481: Apache Tomcat information disclosure vulnerability

2011-08-12 Thread Mark Thomas
CVE-2011-2481: Apache Tomcat information disclosure vulnerability Severity: low Vendor: The Apache Software Foundation Versions Affected: Tomcat 7.0.0 to 7.0.16 Previous versions are not affected. Description: The re-factoring of XML validation for Tomcat 7.0.x re-introduced the vulnerability p

[SECURITY] CVE-2011-2729: Commons Daemon fails to drop capabilities (Apache Tomcat)

2011-08-12 Thread Mark Thomas
CVE-2011-2729: Commons Daemon fails to drop capabilities (Apache Tomcat) Severity: Important Vendor: The Apache Software Foundation Versions Affected: Tomcat 7.0.0 to 7.0.19 Tomcat 6.0.30 to 6.0.32 Tomcat 5.5.32 to 5.5.33 Description: Due to a bug in the capabilities code, jsvc (the service wra

Re: Availability of Tomcat 5.5.34

2011-08-12 Thread Jim Jagielski
My plan is to T&R 5.5.34 the week after next… I'm traveling next week :/ On Aug 12, 2011, at 12:25 AM, Sachin Mankapure wrote: > > Hi Jim, > > Is there any update on release date of 5.5.34? > > Thanks, > -Sachin > > > Jim Jagielski wrote: >> >> I am tempted to do a release next week... we s

Re: Apache Tomcat unable to send the request. tomcat throwing 502 Gate Way error

2011-08-12 Thread Pid
On 12/08/2011 12:31, rakesh k wrote: > Hi Igor Cicimov > > Thank you very much for replying .. > port="8082" protocol="HTTP/1.1" >connectionTimeout="2" >redirectPort="8443" /> > That doesn't answer the question. Please remove all of the co

Re: Apache Tomcat unable to send the request. tomcat throwing 502 Gate Way error

2011-08-12 Thread rakesh k
Hi Igor Cicimov Thank you very much for replying .. I am heryby attaching the proxy pass which we used to connect tomcat through apache. ProxyPass / balancer://msf/ stickysession=JSESSIONID|jsessionid BalancerMember http://localhost:8082 route=msf1 This is what we use in the prod

Re: Apache Tomcat unable to send the request. tomcat throwing 502 Gate Way error

2011-08-12 Thread Igor Cicimov
I can't see the connection between the Connector you showed and port 8082. What is listening on port 8082? Also what is your "tomcatThreadPool" executor configuration? On Fri, Aug 12, 2011 at 7:56 PM, rakesh k wrote: > Hi All > > I am using Apache tomcat 6.0.18 version > > I am not sure, why th

Apache Tomcat unable to send the request. tomcat throwing 502 Gate Way error

2011-08-12 Thread rakesh k
Hi All I am using Apache tomcat 6.0.18 version I am not sure, why the tomcat is giving us this problem. While doing Load testing we are sending 5000 requests at a time, where we are getting 4-5 Bad gate way error. Please find the error details below [Wed Aug 10 01:00:50 2011] [error] (103)Softw

Apache Tomcat unable to send the request. tomcat throwing 502 Gate Way error

2011-08-12 Thread rakesh k
Hi All I am not sure, why the tomcat is giving us this problem. While doing Load testing we are sending 5000 requests at a time, where we are getting 4-5 Bad gate way error. Please find the error details below [Wed Aug 10 01:00:50 2011] [error] (103)Software caused connection abort: proxy: pass

[ANN] Apache Tomcat 7.0.20 released

2011-08-12 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat 7.0.20 Apache Tomcat 7.0.20 includes bug fixes and the following new features and fixes compared to version 7.0.19: - JSP files with dependencies in JARs are no longer recompiled on every access thereby improving performa

Re: Cannot make war file as default app

2011-08-12 Thread exquisite
Hi P, As i mentioned in my initial thread that i did not want to rename my war to ROOT.war so i haven't tried that route but i think i figured out whats going on and posted my findings already. Thank you guys for your time and please suggest if im wrong with my solution i posted in my previou

Re: Cannot make war file as default app

2011-08-12 Thread exquisite
Hey Mark, I think i figured out what's going on with my configuration and I feel that the Tomcat Documentation is not too clear explaining this particular step. I have been editing the server.xml in the $CATALINA_HOME/conf  directory, dropped my war in $CATALINA_HOME/webapps directory but by def

Re: Cannot make war file as default app

2011-08-12 Thread Pid
On 12/08/2011 09:32, exquisite wrote: > Hi Mark, > > I tried that way as well but i get the same issue. Tomcat does not even > deploy my war. All it says on console is ' Server startup in xxx ms" and > stays there forever. > > Im getting confused and wondering if there is any mistake in the Tom

Re: Cannot make war file as default app

2011-08-12 Thread exquisite
Hi Mark, I tried that way as well but i get the same issue. Tomcat does not even deploy my war. All it says on console is ' Server startup in xxx ms" and stays there forever. Im getting confused and wondering if there is any mistake in the Tomcat documentation. Please suggest. thanks G _

Re: Cannot make war file as default app

2011-08-12 Thread Mark Thomas
On 12/08/2011 09:04, exquisite wrote: > Hello, > > I followed the below steps from Tomcat Wiki for making my war file as the > default webapp, but tomcat is not deploying my war: > > How do I make my web application be the Tomcat default application? > > Method 2.2 > If you really know what y

Re: Sticky Session Not Working With Apache 2.0.54 and Tomcat 7.0.8

2011-08-12 Thread Rainer Jung
On 11.08.2011 15:32, Lataxes, Karl wrote: > OK, I'm getting close. On the server side, I'm adding a "Set-Cookie" header > containing the session id I want to use. The client emulator I am using has > similarly been modified to add a "Cookie" header with the session id sent by > the server, but

Re: Cannot make war file as default app

2011-08-12 Thread exquisite
Sorry i Missed to update the Tomcat version im using: I have Tomcat 6.0.32 running on Windows 7 and JDK 1.5 Please help. Thanks G From: exquisite To: "users@tomcat.apache.org" Sent: Friday, August 12, 2011 1:04 AM Subject: Cannot make war file as default app

Re: Parallel Deployment & Sessions: What am I Missing?

2011-08-12 Thread Pid
On 12/08/2011 04:01, Jonathan Rosenberg wrote: > Trying to fall asleep and just had a thought on my problem: are > context-param values shared across different context versions (as > implemented in parallel deployment)? Nope. The apps are self-contained. C > -- > JR > On Aug 11, 2011 6:10 P

Cannot make war file as default app

2011-08-12 Thread exquisite
Hello, I followed the below steps from Tomcat Wiki for making my war file as the default webapp, but tomcat is not deploying my war: How do I make my web application be the Tomcat default application? Method 2.2 If you really know what you are doing.. - leave your war file in CATALINA_BASE/w

Re: Get SSO ID on server

2011-08-12 Thread Chema
> Why do you need a consistent ID between the two apps? Because I'll store this ID into a record in database. The apps checking every 60 sec if this record exists and, if dont , perform a logout - To unsubscribe, e-mail: users-un

Re: Generating SSL certificates

2011-08-12 Thread Pid
On 12/08/2011 02:26, Darryl Lewis wrote: > Our certificates are about to expire and I need to generate new ones for > tomcat. I'm using keytool, but getting a strange error. Please start an entirely new thread, rather than replying to an existing email & just editing the subject & body (which is

Re: Get SSO ID on server

2011-08-12 Thread Pid
On 11/08/2011 22:31, Christopher Schultz wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Chema, > > On 8/11/2011 5:00 PM, Chema wrote: >> How I can get SSO ID on a servlet? > > Get the cookie value for JSESSIONIDSSO. > >> I want to know this ID without browser sends a cookie to se