Re: Upgrading from 9.0.20 to 9.0.34 AJP connector issue

2020-04-30 Thread tomcat/perl
On 01.05.2020 00:09, Darryl Philip Baker wrote: I am trying to browse to one of the JKmount URLs in this case https://myserver.northwestern.edu/LmsSync/. When I point the symbolic link to the 9.0.20 installation, it works fine. When I point the symbolic link to the 9.0.34 installation, it I ge

Re: Upgrading from 9.0.20 to 9.0.34 AJP connector issue

2020-04-30 Thread Darryl Philip Baker
I am trying to browse to one of the JKmount URLs in this case https://myserver.northwestern.edu/LmsSync/. When I point the symbolic link to the 9.0.20 installation, it works fine. When I point the symbolic link to the 9.0.34 installation, it I get a 404 error. Darryl Baker, GSEC (he/him/his) S

Re: Losing session between calls from mobile phone

2020-04-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 AJ, On 4/30/20 16:22, AJ Chen wrote: > The session problem happens when testing without SSL. If you aren't using SSL, setting secure="true" on the connector will cause a problem, here. All Cookies will be created with secure="true" and the browser

Re: Upgrading from 9.0.20 to 9.0.34 AJP connector issue

2020-04-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Darryl, On 4/30/20 07:59, Darryl Philip Baker wrote: > I am trying to upgrade a development environment from 9.0.20 to > 9.0.34 and I am having issues getting the tomcat-connectors-1.2.46 > (mod_jk) to work in with the new version. Can you be more

Re: Losing session between calls from mobile phone

2020-04-30 Thread AJ Chen
The session problem happens when testing without SSL. I'll try to test with Tomcat session manager example app. Thanks, Chris. -aj On Wed, Apr 29, 2020 at 3:05 PM Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > AJ, > > On 4/29/2

Re: Issue with AJP listener

2020-04-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Martin, On 4/30/20 05:02, Martin Grigorov wrote: > Hi, > > On Thu, Apr 30, 2020 at 11:15 AM Mark Thomas > wrote: > >> On 29/04/2020 18:11, Christopher Schultz wrote: >>> Mark, >>> >>> On 4/28/20 13:33, Mark Thomas wrote: On 28/04/2020 16:30, S

Re: Issue with AJP listener

2020-04-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 4/30/20 04:15, Mark Thomas wrote: > On 29/04/2020 18:11, Christopher Schultz wrote: >> Mark, >> >> On 4/28/20 13:33, Mark Thomas wrote: >>> On 28/04/2020 16:30, Satya Kishore Thumu wrote: Hi Chris, Post the Ghostcat changes tomcat now

Re: Some questions regarding the TLS1.2 port 443 continuously communicating and too many open threads

2020-04-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Raghav, On 4/30/20 03:02, Ragavendhiran Bhiman (rabhiman) wrote: > Hello Chris, > > Please see my reply below in line. > > Thanks & Regards, > > Raghav > > On 30/04/20, 9:23 AM, "Christopher Schultz" wrote: > > Raghav, > > On 4/29/20 22:26, Ragave

Re: Upgrading from 9.0.20 to 9.0.34 AJP connector issue [EXTERNAL]

2020-04-30 Thread Darryl Philip Baker
Thank you for your suggestions. I don't see any difference in the results. I think I have logging turned up all the way but nothing in the way of errors from Tomcat. I'm looking at HTTPD now. Darryl Baker, GSEC (he/him/his) Sr. System Administrator Distributed Application Platform Services Nor

[ANN] Apache Tomcat Native 1.2.24 released

2020-04-30 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat Native 1.2.24 stable. The key features of this release are: - Improvements to the build system - Update Windows binaries to APR 1.7.0 and OpenSSL 1.1.1g Please refer to the change log for the complete list of changes: ht

RE: Upgrading from 9.0.20 to 9.0.34 AJP connector issue [EXTERNAL]

2020-04-30 Thread Beard, Shawn M.
My workers is identical to yours and it works. Here is our connector config that is working. Might want to try removing address="127.0.0.1" and/or tomcatAuthentication="false" The fix for the Ghostcat vulnerability created some config challenges on the ajp protocol. I'm pretty sure it’

Upgrading from 9.0.20 to 9.0.34 AJP connector issue

2020-04-30 Thread Darryl Philip Baker
I am trying to upgrade a development environment from 9.0.20 to 9.0.34 and I am having issues getting the tomcat-connectors-1.2.46 (mod_jk) to work in with the new version. The Apache HTTPD configuration remains unchanged the paths pass through a symbolic link I change to switch versions. The wo

RE: Issue with AJP listener

2020-04-30 Thread Satya Kishore Thumu
Hi Mark, But that would have been the problem even earlier when Tomcat was listening on all available ip's on the machine. If not listening on two port's may be we should try to use IPv6 loopback rather than Mapped IPv4 address when IPv6 is Enabled. That would be inline with apache's resolution of

Re: Issue with AJP listener

2020-04-30 Thread Mark Thomas
On 30/04/2020 10:02, Martin Grigorov wrote: > Hi, > > On Thu, Apr 30, 2020 at 11:15 AM Mark Thomas wrote: > >> On 29/04/2020 18:11, Christopher Schultz wrote: >>> Mark, >>> >>> On 4/28/20 13:33, Mark Thomas wrote: On 28/04/2020 16:30, Satya Kishore Thumu wrote: > Hi Chris, Post the Ghos

Re: Issue with AJP listener

2020-04-30 Thread Martin Grigorov
Hi, On Thu, Apr 30, 2020 at 11:15 AM Mark Thomas wrote: > On 29/04/2020 18:11, Christopher Schultz wrote: > > Mark, > > > > On 4/28/20 13:33, Mark Thomas wrote: > >> On 28/04/2020 16:30, Satya Kishore Thumu wrote: > >>> Hi Chris, Post the Ghostcat changes tomcat now listens only on > >>> ipv4 by

Re: Issue with AJP listener

2020-04-30 Thread Mark Thomas
On 29/04/2020 18:11, Christopher Schultz wrote: > Mark, > > On 4/28/20 13:33, Mark Thomas wrote: >> On 28/04/2020 16:30, Satya Kishore Thumu wrote: >>> Hi Chris, Post the Ghostcat changes tomcat now listens only on >>> ipv4 by default, what if somebody is using on IPv6, Tomcat starts >>> to listen

Re: suspected memory leak in io.netty.buffer.PoolChunk

2020-04-30 Thread Martin Grigorov
Hi, On Thu, Apr 30, 2020 at 10:04 AM Ragavendhiran Bhiman (rabhiman) wrote: > Hi All, > > When I analysed the heap dump the primary suspect shows that 54.21% > occupied by the from io.netty.buffer.PoolChunk memory leak. > io.netty.* is from Netty project (https://netty.io/index.html) It seems y

Re: suspected memory leak in io.netty.buffer.PoolChunk

2020-04-30 Thread Ragavendhiran Bhiman (rabhiman)
Hi All, When I analysed the heap dump the primary suspect shows that 54.21% occupied by the from io.netty.buffer.PoolChunk memory leak. Kindly help me to proceed further to solve the problem. Apache used version is 8.5.29. Thanks & Regards, Raghav On 29/04/20, 6:53 PM, "Ragavendhiran Bhiman (r

Re: Some questions regarding the TLS1.2 port 443 continuously communicating and too many open threads

2020-04-30 Thread Ragavendhiran Bhiman (rabhiman)
Hello Chris, Please see my reply below in line. Thanks & Regards, Raghav On 30/04/20, 9:23 AM, "Christopher Schultz" wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Raghav, On 4/29/20 22:26, Ragavendhiran Bhiman (rabhiman) wrote: > The below is the executer elem