Re: ConnectionPoolMBean should not expose plain-text DB password

2012-10-05 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Te, On 10/5/12 1:51 PM, Te Li wrote: > I am not familiar with JIoEndpoint discussed in > https://issues.apache.org/bugzilla/show_bug.cgi?id=53139. > > The issue I'm facing is something different. Apparently, some > effort was made to hide the DB pas

Re: ConnectionPoolMBean should not expose plain-text DB password

2012-10-05 Thread Shanti Suresh
Hi Te, Yes, it would be very nice if the DB passwords don't get exposed via JMX. If we could have an additional role to get and set some of the sensitive MBeans, that would be really nice. More simply, if getDbProperties() can also simply return some dummy warning information, that will work. Th

Re: ConnectionPoolMBean should not expose plain-text DB password

2012-10-05 Thread Te Li
I am not familiar with JIoEndpoint discussed in https://issues.apache.org/bugzilla/show_bug.cgi?id=53139. The issue I'm facing is something different. Apparently, some effort was made to hide the DB password, but the DB password is still exposed via another getter (getDbProperties()). This seems t

RE: Not sure what to make of this, Re: bringing up HTTPS on Tomcat

2012-10-05 Thread Phoenix, Merka
IBM's documentation on this web page: http://publib.boulder.ibm.com/infocenter/wsdoc400/v6r0/topic/com.ibm.websphere.iseries.doc/info/ae/ae/secmigjsse.htm provides instructions on how to export the certificates from DCM into Java keystores. As they mention below, they've moved away from using the

Re: Reloading context.xml

2012-10-05 Thread Konstantin Kolinko
2012/10/5 Anjib Mulepati : > > Quick question. If I made change to (\META_INF\context.xml) file do i have > to restart tomcat server to load changes? > You need to undeploy & deploy your web application. Recent versions of Tomcat 7 should do that automatically if autoDeploy is enabled on the Host

Re: Not sure what to make of this, Re: bringing up HTTPS on Tomcat

2012-10-05 Thread James Lampert
Mark H. Wood wrote: I have no idea what DCM is or does. Maybe it works with PKCS #12 files, which can carry both parts in a single container. That part isn't really relevant here (I hope), but to clarify: DCM = Digital Certificate Manager. It's part of the IBM Midrange operating system (i.e,

Re: Not sure what to make of this, Re: bringing up HTTPS on Tomcat

2012-10-05 Thread Mark H. Wood
On Thu, Oct 04, 2012 at 11:49:45AM -0700, James Lampert wrote: > We have a customer (who shall remain nameless), who had previously > ignored our instructions and used IBM DCM instead of Keytool to produce > a keystore, and had it signed, all the while blissfully ignorant of the > fact that none

Reloading context.xml

2012-10-05 Thread Anjib Mulepati
Hi All, Quick question. If I made change to (\META_INF\context.xml) file do i have to restart tomcat server to load changes? Thanks - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail

Re: ConnectionPoolMBean should not expose plain-text DB password

2012-10-05 Thread Shanti Suresh
Hi Te, Will it be an option for you to create a JSP as was recently discussed in this list, to expose just the particular MBeans that you need? Thanks. -Shanti On Thu, Oct 4, 2012 at 3:06 PM, Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED ME

Re: high CPU usage on tomcat 7

2012-10-05 Thread Shanti Suresh
Hi Kirill, Do you happen to have a QA or a test environment by any chance? 25GB is very big for a JVM heap size. Some questions I have are: (1) What does the application do? How many concurrent users do you have? (2) What was the heap set at before you increased it to 25GB? (3) Why did you thi

Re: Tomcat 7.0.30 JAR Scanner ClassCastException

2012-10-05 Thread Shanti Suresh
Hi Jesse, I have a JSP which will tell which library loads which class. This has helped me immensely in troubleshooting a challenging library conflict that we ran into recently. Please place this JSP in apache-tomcat-7.0.23/webapps/ROOT/. Invoke it as: http:///whichjar.jsp And keying in the n