Re: CVE-2012-4534 Apache Tomcat denial of service

Jim, Check your Tomcat version. http://localhost:8080/ Stephen On Dec 4, 2012, at 2:47 PM, Mark Thomas wrote: > CVE-2012-4534 Apache Tomcat denial of service > > Severity: Important > > Vendor: The Apache Software Foundation > > Versions Affected: > - Tomcat 7.0.0 to 7.0.27 > - Tomcat 6.0.

Re: JSP page that will not update

Konstantin >> >> I have set meta tags for no cache, no pragma, etc., all to no avail. > > What do you mean? > tags inside HTML document are useless for this. You have to set > HTTP headers. OK, but can you point me to where I might learn how to do this? >> >> What is most interesting is that a

Re: JSP page that will not update

, please. I appreciate you time. Stephen Caine On Oct 6, 2011, at 7:47 PM, Konstantin Kolinko wrote: > 2011/10/7 Stephen Caine : >> List users, >> >> I recently updated to Tomcat 5.5.34 from 5.5.7. Keeping all the >> configuration files the same, I now notice that a

JSP page that will not update

. Has Tomcat 5.5.34 introduced some change that might account for what I am experiencing? 2. Is there a setting in Tomcat that can be tweaked to address my issue? Thank you, Stephen Caine - To unsubscribe, e-mail: users-unsubscr

Re: Java update from Apple broke Tomcat

Rob, We use Tomcat 6.0.28 on Mac OS X 10.6.4 with the latest Java update and it seems to start up just fine. Stephen Caine Soft Breeze Systems, LLC On Nov 1, 2010, at 1:55 PM, Rob Tanner wrote: > Hi, > > While I run production on Linux servers, I do my development on my iMac. >

Re: Tabbed browsers sharing session - work around.

Rob, The way you describe session sharing is indeed a problem. The way we deal with this is to use a separate database table to keep track of window ids. A unique value is assigned when a window is opened and maintained until the window is closed. Although the session may be the same for all

Re: Session problem

d fit with what he's describing. > > Jason > > > On Tue, Aug 24, 2010 at 3:37 PM, Stephen Caine wrote: >> Jason, >> >> As each window shares the same session, a change to the session value in one >> window will effect the session value in the othe

Re: Session problem

Jason, As each window shares the same session, a change to the session value in one window will effect the session value in the others. Stephen Caine On Aug 24, 2010, at 5:21 PM, Jason Britton wrote: > I would make sure that the link for your "Messages" tab is going to the sam

Re: Expression Language Changes

Mark, Thank you. I'll check it out. > >> Where can I find a full and complete list of changes made to the expression >> language (EL) starting with Tomcat v5.5.7 through Tomcat v6.0.20? I need >> for this to be a detailed as possible. > > http://svn.apache.org/viewvc/tomcat/

Expression Language Changes

Where can I find a full and complete list of changes made to the expression language (EL) starting with Tomcat v5.5.7 through Tomcat v6.0.20? I need for this to be a detailed as possible. Thank you, Stephen Caine CommonGround Softworks, Inc

Re: Problem with maximum threads

X in previous posts to this list. Stephen On Apr 21, 2009, at 9:38 AM, Caldarale, Charles R wrote: From: Stephen Caine [mailto:step...@commongrnd.com] Subject: Re: Problem with maximum threads However, the maximum number of threads Tomcat will handle is somewhere about 2400. I'm curious:

Re: Problem with maximum threads

Anand, As others will surely tell you, there is something amiss in your application that spawns threads. However, the maximum number of threads Tomcat will handle is somewhere about 2400. So, if you are getting an error at 1000 threads, look somewhere else. Stephen Caine Soft Breeze

Re: JavaBridge Payment Gateway Issue on Tomcat

Gaurav To the best of my knowledge, JavaBridge is no longer supported. Use JNI. Stephen Caine Soft Breeze Systems, LLC On Mar 7, 2009, at 1:39 AM, Gaurav Pruthi wrote: Dear All, I am facing a strange issue in tomcat from last 2 months. I have 2 websites which are running on PHP

Re: Java Crash

d by Apple), no problems were found. Also, no other process results in a JVM crash. Only when JFreeChart is run does the JVM crash. This is an X-Serve, dual core intel that has 12 gigs of RAM running OS X 10.5. Stephen Caine Soft Bree

Re: Java Crash

mode on a Mac OS X 10.5.6 under both Tomcat 5.5.26 and 6.0.18 for many months, and has never produced such a crash. On Jan 23, 2009, at 1:56 PM, Stephen Caine wrote: Jonathan, that is almost certainly an Apple Java issue. If by charting, you mean graphics, then even more so. The Java2D

Re: Java Crash

). Stephen Caine - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Java Crash

All, Whenever I attempt to access a charting jsp, I get an invalid memory access error and the JVM just crashes. Here are the relevant portions of the java crash log. Any thoughts would be appreciated. Is this an Apple Java issue?? Stephen Caine CommonGround Softworks, Inc

Re: Appeal to Tomcat developers

Andre, In regards to contacting IS people (not developers or specialists) who use Tomcat in production environments, please contact me off-list. I think I can help to point you in the right direction and get you access to the resources you are requesting. Thank you, Stephen Caine

Re: Preventing File Access

&w=2 Thank you for the reference. Stephen Caine CommonGround Softworks, Inc. - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Preventing File Access

you, Stephen Caine CommonGround Softworks, Inc. - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: URL Import Question

Mark, On Apr 29, 2008, at 2:29 AM, Mark Thomas wrote: Stephen Caine wrote: We are using a c:import url tag. Under most circumstances this works just fine, but when it is iterated hundreds of times within the same page, it causes the java process to quickly exhaust threads. This is on a

URL Import Question

large. Thank you, Stephen Caine Soft Breeze Systems, LLC - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: URL Import Question

Mark, The correct procedure is to create a new message with a new subject. This will start a new thread. Actually, this is what I thought I did. My sincere apologies. Would it be better for me to start a new thread or should I just let this go? Stephen --

URL Import Question

large. Thank you, Stephen Caine Soft Breeze Systems, LLC - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: Threads

Yong, Add to here: export JAVA_OPTS="-d64 -Xms1024m -Xmx1024m -XX:+MaxFDLimit -server - Djava.awt.headless=false" Thank you. Stephen - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PRO

Re: Threads

Chuck, There are some thread-specific parameters you can play with, in particular -Xss. But as others have pointed out, changing one factor moves the limits on others. Your best bet (assuming you really, really need that many threads) is to run in a 64-bit process, also as previously s

Re: Threads

" cd "$CATALINA_HOME" cd bin ./startup.sh Where (and how) is the 64 bit flag set? Thank you for your assistance. Stephen Caine Soft Breeze Systems, LLC - To start a new topic, e-mail: users@tomcat.apache.org To unsubsc

Re: Threads

he size of the heap (from 1 to 1 gigs). Thanks, Stephen Caine Soft Breeze Systems, LLC - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Threads

threads? Any advice will be appreciated. Stephen Caine Soft Breeze Systems, LLC - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: Tomcat native lib on OS X

Lorenzo, We use Tomcat on OS X 10.5 and not only does it run great, the improvements in memory management (true 64 bit) are impressive. Stephen Caine Soft Breeze Systems, LLC Isn't there anyone who got the native stuff working on a Mac? I followed all the steps. I compiled the s

Re: How to increase Tomcat webserver speed?

memory and CPU processing speed, Tomcat is very fast. Stephen Caine Soft Breeze Systems, LLC - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL

Tomcat 6 Installation Path

All, We are attempting to install Tomcat 6 on a OS X, but are running into a problem. Our installation path has a space in a file name. Using Tomcat 5, this works just fine, but with Tomcat 6, we receive the following error (from the log): java.lang.NoClassDefFoundError: 3/Tomcat_Qilan/

Re: SSL port number

Markus, Stephen Caine wrote: A simple way to restart Tomcat from a non-root user would be nice. Interesting wish. A non-root user with the right to control my system services is approximately the last thing I would want to see. Well, if you can set a 'user' option for startu

Re: SSL port number

Well, since you asked... ... or use jsvc which lets Tomcat drop privileges after binding to a privileged port and which is distributed with the Tomcat archives. Did you use it? did you like it? We have no reason but the port to give the tomcat-user any privilege (even if only at booting);

Re: SSL port number (was: Re: Tomcat SSL/HTTPS Performance vs Apache)

Markus, I previously posted a question about port redirection which was answered. I was referring to that previous post. Stephen We use Tomcat SSL without Apache and it has been very stable. The only issue has been the using port 8443 as some firewalls block access. Why don't you t

Re: Tomcat SSL/HTTPS Performance vs Apache

Anthony, Has anyone done any performance analysis of Tomcat's SSL performance, especially compared to Apache. It is rumored that Tomcat is unusable without Apache in front for SSL, but I wonder if that is true. We use Tomcat SSL without Apache and it has been very stable. The only iss

Re: Removing the port identifier

Matthew, Thank you for your response. Apart from using iptables (which may or may not work in OS X), the Tomcat setup link, "http:// tomcat.apache.org/tomcat-6.0-doc/setup.html", seems to be the best way to go. the only way to get rid of the port number is to have something listening on

Re: Removing the port identifier

Hassan, I appreciate the link. Stephen Nope; see the reference to jsvc here: - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTE

Re: Removing the port identifier

Chris, Thank you for the suggestion. I will investigate. Stephen Tomcat does not require you to run it as root in order to use port 443. There are various techniques, including using a web server such as Apache httpd to front Tomcat, iptables (or similar) tricks to re-route ports, or using

Removing the port identifier

Is there a way to remove the port number from a https request where the original url looks something like this: https://host_name:8443/ The approach to change the server.xml file (where the connector port is changed from 8443 to 443) is not practical for us. When this is done, Tomcat requ

Re: TomCat users' list, forum or documentation ?

Sven, Before your give up with Tomcat Not at all. I'm very happily using it with Confluence, JIRA and JForum ... I just have to debug the JForum installation, but that's not a Tomcat problem. Sorry I misunderstood you. I wish you luck. Stephen Caine CommonGround Soft

Re: TomCat users' list, forum or documentation ?

x27;s fine, but you don't have to. Tomcat is a great performer, fast, reliable and stable. I agree that it's internals can be difficult for the user who just wants to create a web application, but that's were Qilan comes into play. Qilan is a Mac OS X application. Stephe

Re: Tomcat memory usage.

hindrance, however experience has shown us that this limitation has minimal impact. Stephen Caine Soft Breeze Systems, LLC - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional

Re: Perm Gen not being released in GC

ation ratios - is this the main area I should be looking into? We see this same behavior. I too am interested in comments from others. We are running on a OS X Server; JVM v1.5. Stephen Caine Soft Breeze Systems, LLC - To

Re: Using Tomcat with JSPs on Mac OS X

to run Tomcat with your own webapps. The download can be obtained at http://cgs.qilan.com:8080/qilan/ Qilanv3Download Stephen Caine CommonGround Softworks, Inc. I've recently installed Tomcat 5.0.25 on my Mac OS X (10.4), and have used it successfully with servlets (using Java 1.5).

Re: Tomcat Memory Status?

o the excellent advise others have provided, don't overlook Permanent Generational Memory (PermGen). If you load lot's of pages with many classes, you can easily exceed default values. Stephen Caine Soft Breeze Systems, LLC ---

Re: connection pool

Edward, Where can I get JDBC driver for Microsoft Access2000? Try the HXTT driver. It works very well. Stephen Caine CommonGround Softworks, Inc. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail

Directory Permissions

directories. Thank you for any advice you can offer. Stephen Caine CommonGround Softworks, Inc. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: Sad: Tomcat 5.5.x crashes almost every single day.

guring out JVM memory requires a bit of homework, testing and careful evaluation. And after a lot of reading, I am only beginning to understand how all this stuff works. Patience and persistence helps. Stephen Caine CommonGround Soft

How to set a charset

specification calls for the space, and without it, the charset is ignored. By the way, this library has been deprecated, do you know what library has replaced its functionality? Thank you (and others) for your assistance. Stephen Caine CommonGround Softworks, Inc.

Re: How to set a charset

rage format is MacRoman. The database displays the characters correctly. Stephen Caine CommonGround Softworks, Inc. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

How to set a charset

in web.xml) contextDefaultEncoding UTF-8 Thank you, Stephen Caine CommonGround Softworks, Inc. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-ma

Re: java.lang.OutOfMemoryError: PermGen space

isn't free, but has lots of bells and whistles - and support.) Thank you and Wade for your suggestions. I have some reading to do. Stephen Caine CommonGround Softworks, Inc. - To unsubscribe, e-mail: [EMAIL PROTECTED]

Re: java.lang.OutOfMemoryError: PermGen space

detailed measurement, that has to be taken with a large chunk of salt. Thank you for your thoughts. I am using a Quad 4 Mac OS X with a 1.4.2 JVM. Any recommendations for testing tools so I can monitor memory allocations, garbage collection and the like? Stephen Caine CommonGround

Re: java.lang.OutOfMemoryError: PermGen space

ur 'out of memory' problems. Any insights as to why? Stephen Caine CommonGround Softworks, Inc. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: java.lang.OutOfMemoryError: PermGen space

r a while, but eventually we got an out of memory error. We have struggled with correct allocations and continue to tweak our settings. I hope this is helpful. Stephen Caine CommonGround Softworks, Inc. - To unsubscribe,

OS X and Tomcat

JT, I'd love to see some performance benchmarks, or just your impression regarding the quad Mac OS X server once you sort our your Tomcat/java stuff. If I could get the Java OPTS correct for memory settings, the results would be more meaningful. My initial impression is that pages come

Adjusting Memory

mory, the 'out of memory' error was returned. Thank you in advance. Stephen Caine CommonGround Softworks, Inc. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: New Tomcat install problem

Terry, Oops, the server address is: http://cgs.qilan.com:8080/qilan/ Qilanv3Download Sorry, Stephen Caine CommonGround Softworks, Inc, - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL

Re: New Tomcat install problem

t or one of the Java support files. Qilan is our product. Another thought is to look at the Activity Monitor for the 'java' process. Inspect the process and check for open files and ports. This should tell you want has loaded and where it is being referenced. Good luck, Stephen Cai