Re: OOME issue in Tomcat 6.0.18(with SSL)

2013-06-11 Thread Chirag Dewan
Hi Chuck, Tried the same on 6.0.37 its the same issue. I am using JVM 1.6.0.39  and both my client and server are on separate linux x86 machines. The issue is with one of my client as it seems. HttpClient 3.1. A code snippet from both my clients: 3.1 MultiThreadedHttpConnectionManager

Re: Possible to expose a Tomcat Realm instance through JNDI ?

2013-06-11 Thread Tobias Gierke
Hi Oliver, I think I now understand your issue. I was faced with a similar problem and could not figure out how to get the roles of an authenticated user through the servlet API. It seems to only allow the question 'request.isUserInRole(role)'. But does not seem to provide a way to get a list

Re: Possible to expose a Tomcat Realm instance through JNDI ?

2013-06-11 Thread Tobias Gierke
Hi, -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Tobias, On 6/11/13 11:20 AM, Tobias Gierke wrote: In my web app, I'd like to re-use the (server-wide) Tomcat Realm that is already being used for HTTP Basic authentication but couldn't find a way how to get hold of the actual Realm instance.

RE: OOME issue in Tomcat 6.0.18(with SSL)

2013-06-11 Thread Caldarale, Charles R
> From: Chirag Dewan [mailto:chirag.dewa...@yahoo.in] > Subject: OOME issue in Tomcat 6.0.18(with SSL) > I am using Embedded Tomcat 6.0.18. Which is nearly five years old. Many, many fixes (including serious security-related ones) have gone in since that version was released; you should see i

OOME issue in Tomcat 6.0.18(with SSL)

2013-06-11 Thread Chirag Dewan
Hi All, I am facing an Out of Memory Issue with my application. I am using Embedded Tomcat 6.0.18. I have a simple servlet deployed which does nothing but set the HTTPResponse and return it. Now I have 2 testing clients Client 1: HTTPClient 3.1 with MultiThreadedHttpConnectionManager with SSL

RE: Class cast exception when starting tomcat 7.0.1

2013-06-11 Thread Caldarale, Charles R
> From: Jane Muse [mailto:jm...@rocketsoftware.com] > Subject: Class cast exception when starting tomcat 7.0.1 > I'm getting a class cast exception when starting up tomcat 7.0.1 You can't be serious. That version was never released, and would be almost three years old if it had been. Use the

Class cast exception when starting tomcat 7.0.1

2013-06-11 Thread Jane Muse
I'm getting a class cast exception when starting up tomcat 7.0.1. I've migrated from 6.0.18 to 7.0.1. I got the same error when migrating directly to 7.0.4. The error is: SEVERE: Begin event threw exception Throwable occurred: java.lang.ClassCastException: org.apache.catalina.deploy.SecurityCon

Re: Windows service for tomcat7

2013-06-11 Thread André Warnier
akshata chas wrote: Hi, I'm trying to install tomcat service for Windows 7 manually on my system through command prompt. I tried with">>service.bat install MyProject" but it looks like service doesn't get installed properly because I can see the service in the list but when I start it, it throw

TCNative with FIPS OpenSSL throws fingerprint error in FIPS mode

2013-06-11 Thread Steve Nickels
Hi all, I've been trying to compile tcnative on Windows with a FIPS-compatible build of OpenSSL. I've been successful building and running tcnative this way, at least until I turn on FIPS mode on the AprLifecycleListener config in Tomcat. When FIPSMode is set to "off", Tomcat works fine, and SS

Re: Windows service for tomcat7

2013-06-11 Thread David kerber
On 6/11/2013 5:06 PM, akshata chas wrote: Hi, I'm trying to install tomcat service for Windows 7 manually on my system through command prompt. I tried with">>service.bat install MyProject" but it looks like service doesn't get installed properly because I can see the service in the list but whe

Windows service for tomcat7

2013-06-11 Thread akshata chas
Hi, I'm trying to install tomcat service for Windows 7 manually on my system through command prompt. I tried with">>service.bat install MyProject" but it looks like service doesn't get installed properly because I can see the service in the list but when I start it, it throws error. Any idea on

Re: http request (no only session) replication in cluster

2013-06-11 Thread Ja kub
Andre, Christopher thx for response, requirement is system should be possible to process 160 req/sec (200 is better to multiply) and system is kind of failover proxy itself there are 2 backing webservices, each can answer max 20s, it there is timeout on first, I must call the second, if there is t

Re: tomcat + mysql xa setup

2013-06-11 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 이재만, Full disclosure: I've never done XA with any RDBMS. On 6/10/13 7:15 PM, 이재만 wrote: > how do i setup xa(2pc) on the tomcat with mysql ??? please anybody > tell me setup process.. 1. Make sure you are using Connector/J 5.0 or later [1] 2. Make

Re: http request (no only session) replication in cluster

2013-06-11 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 André, On 6/11/13 11:32 AM, André Warnier wrote: > Christopher Schultz wrote: >> -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 >> >> Ja, >> >> On 6/11/13 9:54 AM, Ja kub wrote: >>> What can be done to guarantee failover in below scenario: >>> >

Re: Possible to expose a Tomcat Realm instance through JNDI ?

2013-06-11 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Tobias, On 6/11/13 11:20 AM, Tobias Gierke wrote: > In my web app, I'd like to re-use the (server-wide) Tomcat Realm > that is already being used for HTTP Basic authentication but > couldn't find a way how to get hold of the actual Realm instance. >

Re: Tomcat7 and SPNEGO configuration questions

2013-06-11 Thread Felix Schumacher
Am 10.06.2013 23:35, schrieb james.henderson: I am in a similar situation to Edward. My authentication says something like: principal's key obtained from the keytab Acquire TGT using AS Exchange default etypes for default_tkt_enctypes: 23 18 17. KrbAsReq calling createMessage KrbAsReq in creat

Re: Tomcat7 and SPNEGO configuration questions

2013-06-11 Thread Felix Schumacher
Am 10.06.2013 22:06, schrieb Edward Siewick: I've tried an AES128 keytab and matching krb5.conf; this didn't get any further. Could you try an arc4 one? Felix Edward From: Edward Siewick [esiew...@ementum.com] Sent: Monday, June 10, 2013 3:31 PM To:

Re: Tomcat7 and SPNEGO configuration questions

2013-06-11 Thread Felix Schumacher
Hi Edward, Am 10.06.2013 21:31, schrieb Edward Siewick: Felix, Thanks for the example. And yes, I agree -- my setup isn't getting far enough to attempt an authentication of an end user. I *think* I've got the keytab and MSA aspect working. So two possibilities seem worth digging at. First, th

Re: Mapping security role outside of servlet specification

2013-06-11 Thread Felix Schumacher
Am 05.06.2013 13:42, schrieb Ilya Kazakevich: Hello, I use "probe" app for several tomcats. It's security model is based on servlet API security: security roles and constraints are provided in web.xml and mapped for each servlet it has. I use JNDIRealm to authenticate users via LDAP (actually AD

RE: Tomcat7 and SPNEGO configuration questions

2013-06-11 Thread Edward Siewick
Pardon my apparent dislexia: > This snippet is from openjdk; > http://cr.openjdk.java.net/~weijun/6966259/webrev.01/src/share/classes/sun/security/krb5/internal/KDCRep.java.html. > There's also Oracle's > http://www.docjar.com/html/api/sun/security/krb5/internal/KDCReq.java.html. > It doesn't h

RE: Possible to expose a Tomcat Realm instance through JNDI ?

2013-06-11 Thread Tanglin, Oliver
I think I now understand your issue. I was faced with a similar problem and could not figure out how to get the roles of an authenticated user through the servlet API. It seems to only allow the question 'request.isUserInRole(role)'. But does not seem to provide a way to get a list of roles tha

Re: Possible to expose a Tomcat Realm instance through JNDI ?

2013-06-11 Thread Tobias Gierke
Hi Oliver, I don't think there is a HTTP Basic authentication realm. The authentication type is declared in the of your web.xml and can be used in conjunction with a number of different realm implementations. Exactly what do you mean by re-use? Does this mean you are doing authentication fro

RE: Tomcat7 and SPNEGO configuration questions

2013-06-11 Thread Edward Siewick
James, Regarding your question a), HTTP 401 is a tangle of both "not authenticated" and "not authorized". You're at least getting through authentication of the end user. At least that's my interpretation of Krb5Context logging of "KrbApReq: authenticate succeed." and logged values for mySeqNum

RE: Possible to expose a Tomcat Realm instance through JNDI ?

2013-06-11 Thread Tanglin, Oliver
I don't think there is a HTTP Basic authentication realm. The authentication type is declared in the of your web.xml and can be used in conjunction with a number of different realm implementations. Exactly what do you mean by re-use? Does this mean you are doing authentication from within your

Re: http request (no only session) replication in cluster

2013-06-11 Thread André Warnier
Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Ja, On 6/11/13 9:54 AM, Ja kub wrote: What can be done to guarantee failover in below scenario: 2 tomcats behind cisco loadbalancer 1 http request can last very long about 50 seconds - response from webservice can take

Possible to expose a Tomcat Realm instance through JNDI ?

2013-06-11 Thread Tobias Gierke
Hi, In my web app, I'd like to re-use the (server-wide) Tomcat Realm that is already being used for HTTP Basic authentication but couldn't find a way how to get hold of the actual Realm instance. I spent quite some time looking for a solution (complicated by the fact that most Google hits ac

Re: Customizing SSL in HttpClient

2013-06-11 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Martin, On 6/11/13 6:12 AM, Martin Gainty wrote: > if you want JSSE Handshaking to be enabled on server enable > AprLifecycle Listener on server.xml e.g. className="org.apache.catalina.core.AprLifecycleListener" > SSLEngine="on" /> This is absolut

Re: Customizing SSL in HttpClient

2013-06-11 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Anil, On 6/11/13 1:53 AM, Anil Goyal -X (anigoyal - Aricent Technologies at Cisco) wrote: > > > -Original Message- From: Christopher Schultz > [mailto:ch...@christopherschultz.net] Sent: Monday, June 10, 2013 > 7:51 PM To: Tomcat Users Lis

Re: Customizing SSL in HttpClient

2013-06-11 Thread Konstantin Kolinko
2013/6/11 Anil Goyal -X (anigoyal - Aricent Technologies at Cisco) : > > Please consider the code flow as below: > > HttpClient client = new HttpClient(); > portNumber = secure ? LocalNetworkConstants.DEFAULT_HTTPS_PORT : > LocalNetworkConstants.DEFAULT_HTTP_PORT; // DEFAULT_HTTPS_PORT=8444 and >

Re: http request (no only session) replication in cluster

2013-06-11 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Ja, On 6/11/13 9:54 AM, Ja kub wrote: > What can be done to guarantee failover in below scenario: > > 2 tomcats behind cisco loadbalancer 1 http request can last very > long about 50 seconds - response from webservice can take so long > load is 20

Re: "undefined reference to `TLSv1_1_client_method"

2013-06-11 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Chuck, On 6/11/13 9:46 AM, Caldarale, Charles R wrote: >> From: Christopher Schultz [mailto:ch...@christopherschultz.net] >> Subject: Re: "undefined reference to `TLSv1_1_client_method" > >>> by launching this command: ./configure >>> --prefix=/us

Re: Illegal access: this web application instance has been stopped already and NoClassDefFoundError

2013-06-11 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Bob, On 6/11/13 1:05 AM, ruxing bao wrote: > Sorry,I can't get any more of the stack trace. > > We wrapped zookeepr client as a spring bean and invoked method > "close" of zookeeper in "destory-method" of bean,in that method > "close",zookeeper S

http request (no only session) replication in cluster

2013-06-11 Thread Ja kub
What can be done to guarantee failover in below scenario: 2 tomcats behind cisco loadbalancer 1 http request can last very long about 50 seconds - response from webservice can take so long load is 200 requests per second I must response in max 4 seconds more than backing webservice is there somet

RE: "undefined reference to `TLSv1_1_client_method"

2013-06-11 Thread Caldarale, Charles R
> From: Christopher Schultz [mailto:ch...@christopherschultz.net] > Subject: Re: "undefined reference to `TLSv1_1_client_method" > > by launching this command: ./configure --prefix=/usr/local/apache2 > > --enable-so --enable-mods-shared=all --with-included-apr > > --with-ssl="/opt/apache-tomcat-7

Re: "undefined reference to `TLSv1_1_client_method"

2013-06-11 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 To whom it may concern, On 6/11/13 7:58 AM, de...@cines.fr wrote: > With apache 2.4.4, i tried , without success, to build binaries. > I've got this error each time : > > > ab.o: In function `main': /opt/httpd-2.4.4/support/ab.c:2271: > undefined

RE: Illegal access: this web application instance has been stopped already and NoClassDefFoundError

2013-06-11 Thread ruxing bao
Yes, my reply caused some confusion. I mean that currently zookeeper jar is palced in the my web appllication's WEB-INF/lib directory. thanks, Bob > From: chuck.caldar...@unisys.com > To: users@tomcat.apache.org > Date: Tue, 11 Jun 2013 07:15:20 -0500 > Subject: RE: Illegal access: this web app

RE: SSL Issue- Support required.

2013-06-11 Thread Caldarale, Charles R
> From: B S, Veena [mailto:veena@hp.com] > Subject: SSL Issue- Support required. > Tomcat version: 6.0 > The SSL configuration is done as per the standard SSL set up link > http://tomcat.apache.org/tomcat-5.5-doc/ssl-howto.html . If you're using Tomcat 6, you have no reason to look at Tom

RE: Illegal access: this web application instance has been stopped already and NoClassDefFoundError

2013-06-11 Thread Caldarale, Charles R
> From: ruxing bao [mailto:brxonl...@hotmail.com] > Subject: RE: Illegal access: this web application instance has been stopped > already and NoClassDefFoundError > Zookeeper jar had been under CLASSPATH. Do not ever use the CLASSPATH environment variable. In a Tomcat environment, it is prop

Re: SSL Issue- Support required.

2013-06-11 Thread chris derham
> > Please help to trouble shoot this issue. > > ** > > More information on this would be provided as per the request. > > ** ** > > Thanks > > ** ** > > *Regards* > > *Veena B S* > > ** ** > The mailing list strips attachments. Please try again, sending a plain text email without any attac

"undefined reference to `TLSv1_1_client_method"

2013-06-11 Thread derri
Hi everybody, With apache 2.4.4, i tried , without success, to build binaries. I've got this error each time : ab.o: In function `main': /opt/httpd-2.4.4/support/ab.c:2271: undefined reference to `TLSv1_1_client_method' /opt/httpd-2.4.4/support/ab.c:2273: undefined reference to `TLSv1_2_

RE: Illegal access: this web application instance has been stopped already and NoClassDefFoundError

2013-06-11 Thread ruxing bao
Hi, Zookeeper jar had been under CLASSPATH. thanks, bob > From: mgai...@hotmail.com > To: users@tomcat.apache.org > Subject: RE: Illegal access: this web application instance has been stopped > already and NoClassDefFoundError > Date: Tue, 11 Jun 2013 06:37:52 -0400 > > I > > > > > org

SSL Issue- Support required.

2013-06-11 Thread B S, Veena
Hello Team, Objective : Help and Support required to troubleshoot SSL issue on Tomcat. This Web application server would be used to Launch SAP Business Object's Login Page. Tomcat version: 6.0 Operation System: [cid:image002.jpg@01CE66C5.C2D32110] As of Now status : http://loca

RE: Illegal access: this web application instance has been stopped already and NoClassDefFoundError

2013-06-11 Thread Martin Gainty
I > > > org.apache.zookeeper.ClientCnxn$SendThread.run(ClientCnxn.java:1115) > > > > > > > > Caused by: java.lang.ClassNotFoundException: > > org.apache.zookeeper.server.ZooTrace MG>put zookeeper*.jar on CLASSPATH > > > at > > > org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassL

[ANN] Apache Tomcat 7.0.41 released

2013-06-11 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat 7.0.41. Apache Tomcat is an open source software implementation of the Java Servlet, JavaServer Pages and Java Expression Language technologies. This release contains a number of bug fixes and improvements compared to

RE: Customizing SSL in HttpClient

2013-06-11 Thread Anil Goyal -X (anigoyal - Aricent Technologies at Cisco)
Hi, Netstat -an | grep 443 gives below output tcp0 0 :::8443 :::* LISTEN tcp0 0 :::443 :::* LISTEN unix 2 [ ] DGRAM662443 -Original Message

RE: Customizing SSL in HttpClient

2013-06-11 Thread Martin Gainty
Anil if you want JSSE Handshaking to be enabled on server enable AprLifecycle Listener on server.xml e.g. Any WebServer (including Tomcat) has no knowledge of external HTML Servers around it you should use netstat >netstat -ab | grep 443 Tell us what you see Martin ___

Re: mod_jk worker activation not working anymore in 1.2.37?

2013-06-11 Thread David Gubler
Am 10.06.2013 22:20, schrieb Rainer Jung: Looking at the current changelog, ... Fix status worker not updating parameters for all members. (mturk) That is http://svn.apache.org/viewvc?view=revision&revision=1354021 Yes that should be it. If the OP compiles himself, jus