Re: Cannot redirect to html

2012-11-27 Thread basilk
I’ve got a file, containg html and locating in relative directory. When i return it in a jsp page using out.write(file>), then everything is ok. But when i return it using response.sendRedirect(file>), i’ve got a 404 error. What seems to be a problem? Please, help. Unless you provide: - the U

Re: tomcat 6.0.35 with java 7 ssl proxy request body failed

2012-11-27 Thread Johanes Soetanto
On 26 November 2012 18:22, Mark Thomas wrote: > Johanes Soetanto wrote: > >>Hi all, >> >>I am wondering whether there is a known issue with running Tomcat >>6.0.35 with Java 7 ? > > None I can think of. > >>I see lots of "(502)Unknown error 502: proxy: pass request body >>failed.." error in our A

Re: Nagios plugin script for use with JMXProxy

2012-11-27 Thread Mark Eggers
On 11/27/2012 3:14 PM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mark, On 11/27/12 6:02 PM, Mark Eggers wrote: On 11/27/2012 2:37 PM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 All, I have developed a Perl script that can be used

Re: Tomcat ssl vulnerability CVE-2009-3555

2012-11-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hermes, On 11/26/12 3:36 PM, Hermes Flying wrote: > Hi, I am running Tomcat 5.35 and I got a report that it is > vulnerable to SSL client renegotiation DoS. > > You notein your docs that this is not a Tomcat issue per se, but > JSSE issue. Please not

Re: Nagios plugin script for use with JMXProxy

2012-11-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mark, On 11/27/12 6:02 PM, Mark Eggers wrote: > First of all, thank you for this. I've been toying with a similar > idea (and plugging the entire mess into the Icenga remoting > script), but I've not had the chance. http://wiki.apache.org/tomcat/tool

Re: Nagios plugin script for use with JMXProxy

2012-11-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mark, On 11/27/12 6:02 PM, Mark Eggers wrote: > On 11/27/2012 2:37 PM, Christopher Schultz wrote: >> -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 >> >> All, >> >> I have developed a Perl script that can be used with Nagios to >> check on a Tomcat i

Re: malware found the tomcat 6.0.29

2012-11-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mark, On 11/27/12 4:23 AM, Mark Thomas wrote: > On 27/11/2012 07:21, Mohan Kumar G wrote: >> >> We have found the malware installed on the tomcat version 6.0.29 >> on two of the servers.The both servers have a war file >> (Tomcatmanagxesaxsas.war) t

Re: Nagios plugin script for use with JMXProxy

2012-11-27 Thread Mark Eggers
On 11/27/2012 2:37 PM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 All, I have developed a Perl script that can be used with Nagios to check on a Tomcat instance via the manager's JMXProxyServlet. Someone asked me to publish it, which I'm happy to do. I'm just wonde

Re: Using the Tomcat Native Library can only connect over ipv6 But not over ipv4

2012-11-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Harm-Jan, On 11/27/12 3:32 PM, Zorro wrote: > Op 27-11-2012 20:00, Christopher Schultz schreef: >> -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 >> >> Harm-Jan, >> >> On 11/26/12 3:16 PM, Zorro wrote: >>> I have now this in my server.xml: For IPv4:

Re: Shutdown.sh doesn't. At least not reliably. (7.0.25)

2012-11-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 James, On 11/27/12 3:56 PM, James Lampert wrote: > Christopher Schultz wrote: > >> Maybe use DMPJVM? Sorry for the through-Google link [PDF]: > > THANKS! Never heard of such a thing until you brought it to my > attention, and it's enough of an eye-

Nagios plugin script for use with JMXProxy

2012-11-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 All, I have developed a Perl script that can be used with Nagios to check on a Tomcat instance via the manager's JMXProxyServlet. Someone asked me to publish it, which I'm happy to do. I'm just wondering what the best thing to do is. I see several op

Re: tomcat6 with crl doesn't load

2012-11-27 Thread Daniel Mikusa
On Nov 27, 2012, at 12:56 PM, Will Nordmeyer wrote: > On Tue, Nov 27, 2012 at 12:24 PM, Daniel Mikusa wrote: >> On Nov 27, 2012, at 9:55 AM, Will Nordmeyer wrote: >> >>> I have a self signed server certificate - and the user certs have no >>> association/connection to the server cert. >> >> I a

Re: Using the Tomcat Native Library can only connect over ipv6 But not over ipv4

2012-11-27 Thread André Warnier
Zorro wrote: Op 27-11-2012 20:00, Christopher Schultz schreef: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Harm-Jan, On 11/26/12 3:16 PM, Zorro wrote: I have now this in my server.xml: For IPv4: For IPv6: With this setup I can connect to port 80 over Ipv4 And IPv6 to my Linux box. So, a

Re: Shutdown.sh doesn't. At least not reliably. (7.0.25)

2012-11-27 Thread James Lampert
Christopher Schultz wrote: Maybe use DMPJVM? Sorry for the through-Google link [PDF]: THANKS! Never heard of such a thing until you brought it to my attention, and it's enough of an eye-opener that I would have gladly forgiven even a through-LMGTFY link. DMPJVM looks like it may be just th

RE: Using the Tomcat Native Library can only connect over ipv6 But not over ipv4

2012-11-27 Thread Jeffrey Janner
> -Original Message- > From: Christopher Schultz [mailto:ch...@christopherschultz.net] > Sent: Tuesday, November 27, 2012 1:01 PM > To: Tomcat Users List > Subject: Re: Using the Tomcat Native Library can only connect over ipv6 > But not over ipv4 > > -BEGIN PGP SIGNED MESSAGE- > H

RE: Tomcat with multiple domains

2012-11-27 Thread Jeffrey Janner
> -Original Message- > From: Paul van Hoven [mailto:paul.van.ho...@googlemail.com] > Sent: Tuesday, November 27, 2012 2:13 PM > To: Tomcat Users List > Subject: Re: Tomcat with multiple domains > > Thanks for the answer. I followed the tutorial you propose ( > http://wiki.apache.org/tomcat

Re: Using the Tomcat Native Library can only connect over ipv6 But not over ipv4

2012-11-27 Thread Zorro
Op 27-11-2012 20:00, Christopher Schultz schreef: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Harm-Jan, On 11/26/12 3:16 PM, Zorro wrote: I have now this in my server.xml: For IPv4: For IPv6: With this setup I can connect to port 80 over Ipv4 And IPv6 to my Linux box. So, a recap: * NIO

Re: Tomcat with multiple domains

2012-11-27 Thread Konstantin Kolinko
2012/11/28 Paul van Hoven : > > I edited the /etc/hosts file and added the following entries: > 88.84.140.88www.2nddomain.com:8080 > 88.84.140.88www.1rstdomain.com:8080 Domain Name Service resolves host names. A port number is not part of a host name. The above two lines are invalid. ---

Re: Tomcat with multiple domains

2012-11-27 Thread Paul van Hoven
Thanks for the answer. I followed the tutorial you propose ( http://wiki.apache.org/tomcat/TomcatDevelopmentVirtualHosts ). But it is still not working. Here is my new configuration server.xml 2nddomain.com www.2nddomain.com The directory /opt/apache-tom

Re: Shutdown.sh doesn't. At least not reliably. (7.0.25)

2012-11-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 James, On 11/27/12 1:13 PM, James Lampert wrote: > Konstantin Kolinko wrote: > >> 2. Shutdown command is sent to port 8005. (8009 is a port used by >> AJP protocol connector). > > Thanks. That at least clears up a misconception on my part. > Researc

Re: Using the Tomcat Native Library can only connect over ipv6 But not over ipv4

2012-11-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Harm-Jan, On 11/26/12 3:16 PM, Zorro wrote: > I have now this in my server.xml: For IPv4: protocol="HTTP/1.1" connectionTimeout="2" redirectPort="8443" > address="0.0.0.0" /> For IPv6: protocol="HTTP/1.1" connectionTimeout="2" redirectPort="

Re: Using the Tomcat Native Library can only connect over ipv6 But not over ipv4

2012-11-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, On 11/26/12 3:14 PM, André Warnier wrote: > Also, I don't know if this is really relevant here, but I seem to > remember a parameter or attribute somewhere named > "preferIPv4Stack"/"preferIPv6Stack". That is for configuring the Java network

Re: Shutdown.sh doesn't. At least not reliably. (7.0.25)

2012-11-27 Thread James Lampert
Konstantin Kolinko wrote: 2. Shutdown command is sent to port 8005. (8009 is a port used by AJP protocol connector). Thanks. That at least clears up a misconception on my part. Researching it cleared up another misconception on my part: that the Catalina job directly owns the ports. Actually

Re: tomcat6 with crl doesn't load

2012-11-27 Thread Mark H. Wood
On Tue, Nov 27, 2012 at 12:56:38PM -0500, Will Nordmeyer wrote: > My problem comes when I attempt to implement Certificate Revocation > List checking. The Government has a root certificate and about 20-30 > different intermediate certificate authorities that could have issued > the user certificat

Re: tomcat6 with crl doesn't load

2012-11-27 Thread Will Nordmeyer
On Tue, Nov 27, 2012 at 12:48 PM, Konstantin Kolinko wrote: > 2012/11/27 Will Nordmeyer : >> OK, I upped it to 1024G and it still crashed. >> >> I tried loading with a 70M file (the root CA, and the CA directly >> responsible for my cert). That seemed to load, but when I tried going >> to a probe

Re: Shutdown.sh doesn't. At least not reliably. (7.0.25)

2012-11-27 Thread Konstantin Kolinko
2012/11/27 James Lampert : > Running Tomcat on various AS/400s (V6R1 or later OS), we've found that > shutdown.sh doesn't reliably shut down the server, and we frequently have to > shut it down forcibly (i.e., finding CATALINA on a WRKACTJOB, and giving it > a "4" with "OPTION(*IMMED)"). > > Port 8

Re: tomcat6 with crl doesn't load

2012-11-27 Thread Will Nordmeyer
On Tue, Nov 27, 2012 at 12:24 PM, Daniel Mikusa wrote: > On Nov 27, 2012, at 9:55 AM, Will Nordmeyer wrote: > >> I have a self signed server certificate - and the user certs have no >> association/connection to the server cert. > > I apologize, but I'm not exactly sure what you are trying to confi

Re: tomcat6 with crl doesn't load

2012-11-27 Thread Konstantin Kolinko
2012/11/27 Will Nordmeyer : > OK, I upped it to 1024G and it still crashed. > > I tried loading with a 70M file (the root CA, and the CA directly > responsible for my cert). That seemed to load, but when I tried going > to a probe application that I've got installed - to get memory data, > etc. I

Re: tomcat6 with crl doesn't load

2012-11-27 Thread Daniel Mikusa
On Nov 27, 2012, at 9:55 AM, Will Nordmeyer wrote: > OK, I upped it to 1024G and it still crashed. > > I tried loading with a 70M file (the root CA, and the CA directly > responsible for my cert). That seemed to load, but when I tried going > to a probe application that I've got installed - to g

RE: Shutdown.sh doesn't. At least not reliably. (7.0.25)

2012-11-27 Thread Carrillo, Dan
If you take a thread dump you'll be able to see the state of both Tomcat's threads and your own application's threads to see where it's hanging. -Original Message- From: James Lampert [mailto:jam...@touchtonecorp.com] Sent: Tuesday, November 27, 2012 9:10 AM To: Tomcat Users List Subjec

RE: Shutdown.sh doesn't. At least not reliably. (7.0.25)

2012-11-27 Thread Caldarale, Charles R
> From: James Lampert [mailto:jam...@touchtonecorp.com] > Subject: Shutdown.sh doesn't. At least not reliably. (7.0.25) > Or where I should look for indications of what it could be? Can you take a thread dump of the Tomcat process after shutdown.sh has been used? http://wiki.apache.org/tomcat/H

Shutdown.sh doesn't. At least not reliably. (7.0.25)

2012-11-27 Thread James Lampert
Running Tomcat on various AS/400s (V6R1 or later OS), we've found that shutdown.sh doesn't reliably shut down the server, and we frequently have to shut it down forcibly (i.e., finding CATALINA on a WRKACTJOB, and giving it a "4" with "OPTION(*IMMED)"). Port 8009 does appear to be open before

Re: tomcat6 with crl doesn't load

2012-11-27 Thread Will Nordmeyer
OK, I upped it to 1024G and it still crashed. I tried loading with a 70M file (the root CA, and the CA directly responsible for my cert). That seemed to load, but when I tried going to a probe application that I've got installed - to get memory data, etc. It prompts me for my cert, but then goes

Re: tomcat6 with crl doesn't load

2012-11-27 Thread Daniel Mikusa
On Nov 27, 2012, at 9:17 AM, Will Nordmeyer wrote: > Dan, > > I tried that - first attempt jstack threw exceptions and I got > nothing. So I killed the tomcat, took the crlFile back out and ran, > got a nice jstack showing everything running smoothly. > > Shut tomcat down, put the crlFile line

Re: tomcat6 with crl doesn't load

2012-11-27 Thread Will Nordmeyer
Dan, I tried that - first attempt jstack threw exceptions and I got nothing. So I killed the tomcat, took the crlFile back out and ran, got a nice jstack showing everything running smoothly. Shut tomcat down, put the crlFile line back and started up again. This time, tomcat6 doesn't hang, but it

Re: Cannot redirect to html

2012-11-27 Thread Mark Thomas
On 27/11/2012 07:45, bas...@obninsk.com wrote: > Hi. > > I’ve got a file, containg html and locating in relative directory. > When i return it in a jsp page using out.write(), > then everything is ok. > But when i return it using response.sendRedirect( file>), i’ve got a 404 error. > > What seem

Re: malware found the tomcat 6.0.29

2012-11-27 Thread Mark Thomas
On 27/11/2012 07:21, Mohan Kumar G wrote: > > We have found the malware installed on the tomcat version > 6.0.29 on two of the servers.The both servers have a war file > (Tomcatmanagxesaxsas.war) that installed several java script files to the > Tomcat webserver that allow for remote access over t

websocket connection problem

2012-11-27 Thread YinZhang
hi all: I am using apache-tomcat-7.0.32, the use of websocket to make a chat, I encountered a problem, when three people at the same time online chat, when suddenly a man unplug cable out of chat, server is unable to determine the connection is disconnected, how the server know unplugged network