Re: Running chat.xhtml example returns: Info: WebSocket closed

2014-03-24 Thread Kanagavelu Sugumar
Team, 1) I downloaded "apache-tomcat-7.0.52" to my windows 7 (32 bit machine); 2) Then i ran C:\apache-tomcat-7.0.52\bin\startup.bat 3) Now trying http://localhost:8080/examples/websocket/chat.xhtml on chrome browser, I am getting Info: WebSocket closed in the big textArea. localhost_access_log

Is it possible to have unpackWAR not unpacking anything, even in work folder?

2014-03-24 Thread Sebastien Tardif
I was glad to discover that an option called unpackWAR exists, because my War has thousands of files and my configuration use a slow share drive, and so that's taking a very long time to unpack... but when I use the option it still unpack but in a more hidden place, called the "work' folder.

Apache / Tomcat consultant needed?

2014-03-24 Thread Matthew Turany
Hi, Apologies if this is the wrong place to post this and if so it would be great if you could let me know where I should direct it. We're a software developer located in Australia, one of our products uses Apache as a reverse proxy to multiple tomcat instances each supporting numerous customers.

Re: CSRF protection in Tomcat 7

2014-03-24 Thread Akash Jain
On Mon, Mar 24, 2014 at 1:37 PM, Konstantin Kolinko wrote: > 2014-03-25 0:24 GMT+04:00 Akash Jain : > > Yes, it uses LinkedHashMap internally which is not thread safe. > > > http://tomcat.10.x6.nabble.com/CsrfPreventionFilter-LRU-cache-td2113069.html > > > > A 3 years old thread? > > The rules her

Re: CSRF protection in Tomcat 7

2014-03-24 Thread Akash Jain
On Mon, Mar 24, 2014 at 1:33 PM, Daniel Mikusa wrote: > On Mar 24, 2014, at 4:24 PM, Akash Jain wrote: > > > Yes, it uses LinkedHashMap internally which is not thread safe. > > > http://tomcat.10.x6.nabble.com/CsrfPreventionFilter-LRU-cache-td2113069.html > > First, please don't top post. The co

Re: CSRF protection in Tomcat 7

2014-03-24 Thread Konstantin Kolinko
2014-03-25 0:24 GMT+04:00 Akash Jain : > Yes, it uses LinkedHashMap internally which is not thread safe. > http://tomcat.10.x6.nabble.com/CsrfPreventionFilter-LRU-cache-td2113069.html > A 3 years old thread? The rules here: http://tomcat.apache.org/lists.html#tomcat-users -> 1. your version = ?

Re: tomcat 7 Manager access

2014-03-24 Thread Mark Eggers
Please don't top-post. On 3/24/2014 1:19 PM, Berg, James wrote: I posted my entire tomcat-users.xml. I took out all of the comments to try to avoid the error. :-) Jim Did you edit your server.xml file? However I imagine this error in server.xml would trigger other issues . . . Start with a

Re: CSRF protection in Tomcat 7

2014-03-24 Thread Daniel Mikusa
On Mar 24, 2014, at 4:24 PM, Akash Jain wrote: > Yes, it uses LinkedHashMap internally which is not thread safe. > http://tomcat.10.x6.nabble.com/CsrfPreventionFilter-LRU-cache-td2113069.html First, please don’t top post. The convention adopted by this list is to reply inline or at the bottom.

Re: CSRF protection in Tomcat 7

2014-03-24 Thread Akash Jain
Yes, it uses LinkedHashMap internally which is not thread safe. http://tomcat.10.x6.nabble.com/CsrfPreventionFilter-LRU-cache-td2113069.html On Mon, Mar 24, 2014 at 1:09 PM, Daniel Mikusa wrote: > On Mar 24, 2014, at 3:49 PM, Akash Jain wrote: > > > How can I prevent CSRF protection using Tomca

RE: tomcat 7 Manager access

2014-03-24 Thread Berg, James
I posted my entire tomcat-users.xml. I took out all of the comments to try to avoid the error. :-) Jim -Original Message- From: Mark Eggers [mailto:its_toas...@yahoo.com] Sent: Monday, March 24, 2014 4:17 PM To: Tomcat Users List Subject: Re: tomcat 7 Manager access On 3/24/2014 12:30

Re: tomcat 7 Manager access

2014-03-24 Thread Mark Eggers
On 3/24/2014 12:30 PM, Berg, James wrote: When I try to navigate to the any of the Manager links from the first page, I get a login popup. I have tried all of the usernames in the tomcat-users.xml and all I get back is a fresh login popup. It looks like there is a bug in the org.apache.tomcat.u

Re: CSRF protection in Tomcat 7

2014-03-24 Thread Daniel Mikusa
On Mar 24, 2014, at 3:49 PM, Akash Jain wrote: > How can I prevent CSRF protection using Tomcat 7 ? > > I have heard that tomcat 7 provides CSRF filter > http://tomcat.apache.org/tomcat-7.0-doc/api/org/apache/catalina/filters/CsrfPreventionFilter.html Yes. The manager application uses it. You

Re: CSRF protection in Tomcat 7

2014-03-24 Thread Akash Jain
Thanks. Do you know if tomcat 7 inbuilt CSRF has nonce thread safe issue ? On Mon, Mar 24, 2014 at 12:52 PM, Rossen Stoyanchev < rstoyanc...@gopivotal.com> wrote: > Spring Security provides CSRF protection as well: > > http://docs.spring.io/spring-security/site/docs/3.2.2.RELEASE/reference/htmls

Re: CSRF protection in Tomcat 7

2014-03-24 Thread Rossen Stoyanchev
Spring Security provides CSRF protection as well: http://docs.spring.io/spring-security/site/docs/3.2.2.RELEASE/reference/htmlsingle/#csrf On Mon, Mar 24, 2014 at 3:49 PM, Akash Jain wrote: > How can I prevent CSRF protection using Tomcat 7 ? > > I have heard that tomcat 7 provides CSRF filter

CSRF protection in Tomcat 7

2014-03-24 Thread Akash Jain
How can I prevent CSRF protection using Tomcat 7 ? I have heard that tomcat 7 provides CSRF filter http://tomcat.apache.org/tomcat-7.0-doc/api/org/apache/catalina/filters/CsrfPreventionFilter.html But is it thread safe ? Or shall we do a custom protection in our spring 3 application ?

tomcat 7 Manager access

2014-03-24 Thread Berg, James
When I try to navigate to the any of the Manager links from the first page, I get a login popup. I have tried all of the usernames in the tomcat-users.xml and all I get back is a fresh login popup. It looks like there is a bug in the org.apache.tomcat.util.digester.Digester for 7.0.52 which is

Re: Detecting out-of-memory condition

2014-03-24 Thread Howard W. Smith, Jr.
On Mon, Mar 24, 2014 at 1:57 PM, Caldarale, Charles R < chuck.caldar...@unisys.com> wrote: > > From: James H. H. Lampert [mailto:jam...@touchtonecorp.com] > > Subject: Detecting out-of-memory condition > > > We have noticed that after a certain amount of continuous uptime, Tomcat > > eventually ru

Re: consultation on Manager Tomcat 7.0.29

2014-03-24 Thread Daniel Mikusa
On Mar 24, 2014, at 1:29 PM, Jose Irrazabal wrote: > Hi All, > > I use Apache Tomcat/7.0.29 to deploy my applications and I would like to > know about the information that is displayed in the Server Status in the > Manager of Tomcat in the option "http-bio-8080" where I see the Threads > this wa

Re: Detecting out-of-memory condition

2014-03-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 James, On 3/24/14, 1:38 PM, James H. H. Lampert wrote: > We have noticed that after a certain amount of continuous uptime, > Tomcat eventually runs out of memory. :( > Now, I was always taught that the only thing that's supposed to be > capable o

Re: Fwd: mod_jk release

2014-03-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Chris, On 3/24/14, 6:27 AM, chris derham wrote: > I had a email thread going a while back - > http://tomcat.10.x6.nabble.com/64bit-windows-mod-jk-connector-download-for-apache-httpd-2-4-td4893904.html. > > The thread ended with Christopher Schultz

RE: Detecting out-of-memory condition

2014-03-24 Thread Caldarale, Charles R
> From: James H. H. Lampert [mailto:jam...@touchtonecorp.com] > Subject: Detecting out-of-memory condition > We have noticed that after a certain amount of continuous uptime, Tomcat > eventually runs out of memory. Your app has a memory leak. > At any rate, is there a good way specific to Tomc

Re: Could I ask something about tomcat's catalina categorize?

2014-03-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 To whom it may concern, On 3/24/14, 3:55 AM, jacky...@ifishbone.com wrote: > Dear Apache SoftwareFundation FYI this is a communicty of volunteers. None of us speaks for the ASF itself. > Could I categorize catalina.out by virtual host ? Is any set

Detecting out-of-memory condition

2014-03-24 Thread James H. H. Lampert
We have noticed that after a certain amount of continuous uptime, Tomcat eventually runs out of memory. Now, I was always taught that the only thing that's supposed to be capable of causing a memory leak in Java is unintended object retention. At any rate, is there a good way specific to Tomc

consultation on Manager Tomcat 7.0.29

2014-03-24 Thread Jose Irrazabal
Hi All, I use Apache Tomcat/7.0.29 to deploy my applications and I would like to know about the information that is displayed in the Server Status in the Manager of Tomcat in the option "http-bio-8080" where I see the Threads this way: Max threads: 200 Current thread count: 190 Current thread busy

clustermembers don't detect shutdown of other members

2014-03-24 Thread D.R.
Hi, we are using tomcat 6.0.39 on linux machines. I've implemented a clustering via tribes for exchanging messages with static membership. We are not using mutlicast as it does not work with linux vserver. We are not using session replication. We just want to exchange some commands. Everything wor

Re: Concurrency - Servlet created instances accessing static classes

2014-03-24 Thread Mark Thomas
On 24/03/2014 16:08, John Smith wrote: > I should know this, but I want to confirm with smarter people on the board. > > Assume the following: > 1. Servlet receives an HTTP POST request. doPost(...) is called. > 2. doPost(..) instantiates class X with each request > 3. Class X calls a static metho

RE: Concurrency - Servlet created instances accessing static classes

2014-03-24 Thread Caldarale, Charles R
> From: John Smith [mailto:tomcat.ran...@gmail.com] > Subject: Concurrency - Servlet created instances accessing static classes > Assume the following: > 1. Servlet receives an HTTP POST request. doPost(...) is called. > 2. doPost(..) instantiates class X with each request First terminology prob

Re: Concurrency - Servlet created instances accessing static classes

2014-03-24 Thread J Java
if you are accessing any static variables in method Y,it can cause concurrency issues. Thanks, Shailesh. On Mon, Mar 24, 2014 at 9:38 PM, John Smith wrote: > I should know this, but I want to confirm with smarter people on the board. > > Assume the following: > 1. Servlet receives an HTTP POST

Concurrency - Servlet created instances accessing static classes

2014-03-24 Thread John Smith
I should know this, but I want to confirm with smarter people on the board. Assume the following: 1. Servlet receives an HTTP POST request. doPost(...) is called. 2. doPost(..) instantiates class X with each request 3. Class X calls a static method of class Y Assuming I have no synchronization in

RE: [Bug 56301] Websockets not working after 8.0.0-RC10

2014-03-24 Thread Caldarale, Charles R
> From: Cyril Auburtin [mailto:cyril.aubur...@gmail.com] > Subject: Re: [Bug 56301] Websockets not working after 8.0.0-RC10 > Tomcat 8.0.0-RC10 is the stable version or is it 8.0.3? No version of Tomcat 8 has been released as stable. Look here: http://tomcat.apache.org/whichversion.html

Re: [Bug 56301] Websockets not working after 8.0.0-RC10

2014-03-24 Thread Cyril Auburtin
Thanks Mark for your useful reply, I thought the 8.0.1 version was supposed to be more stable than RCs? I'm still not sure about what you said about it I would first want to have an easy and stable servlet embedded server, it could be tomcat, glassfish or any other. Once I have this, I would be gl

Re: [Bug 56301] Websockets not working after 8.0.0-RC10

2014-03-24 Thread Mark Thomas
On 22/03/2014 19:15, Cyril Auburtin wrote: > Hi, thanks for your reply > > please see https://issues.apache.org/bugzilla/attachment.cgi?id=31426 with > the tomcat 8.0.1 (http://search.maven.org/#browse%7C-317025378) > and https://issues.apache.org/bugzilla/attachment.cgi?id=31427 with tomcat > 8.0

Re: Could I ask something about tomcat's catalina categorize?

2014-03-24 Thread Jacky_He
Forgive my rude . I should specific clearly about what I using before asking . Thany you very much for giving detailed explain and suggestions , I woud try the "SwallowOutput " attribute for my tomcat environment and do some testing later . Sincerely Thank you for reply . Tomcat version : 6

Re: Could I ask something about tomcat's catalina categorize?

2014-03-24 Thread André Warnier
jacky...@ifishbone.com wrote: Dear Apache SoftwareFundation Could I categorize catalina.out by virtual host ? Is any setting can do that? I have been finding the answer for two weeks but still got nothing. Could give me a answer and reply . Thank you very much. Hi. When asking such type o

Fwd: mod_jk release

2014-03-24 Thread chris derham
All, I had a email thread going a while back - http://tomcat.10.x6.nabble.com/64bit-windows-mod-jk-connector-download-for-apache-httpd-2-4-td4893904.html. The thread ended with Christopher Schultz and mladen suggesting that I ask the maintainer of apache lounge to include builds of mod_jk on his s

Re: Could I ask something about tomcat's catalina categorize?

2014-03-24 Thread Jacky_He
Dear Apache SoftwareFundation Could I categorize catalina.out by virtual host ? Is any setting can do that? I have been finding the answer for two weeks but still got nothing. Could give me a answer and reply . Thank you very much.

Could I ask something about tomcat's catalina categorize?

2014-03-24 Thread Jacky_He
Dear Apache SoftwareFundation Could I categorize catalina.out by virtual host ? Is any setting can do that? I have been finding the answer for two weeks but still got nothing. Could give me a answer and reply . Thank you very much.

Could I ask something about tomcat's catalina categorize?

2014-03-24 Thread Jacky_He
Dear Apache SoftwareFundation Could I categorize catalina.out by virtual host ? Is any setting can do that? I have been finding the answer for two weeks but still got nothing. Could give me a answer and reply . Thank you very much.