Re: This is weird: can't bind to 443

2017-08-06 Thread Igal @ Lucee.org
On 8/6/2017 9:23 AM, Mark Thomas wrote: Are those recordings available? I'm specifically interested in the Tomcat ones. Yes, they are available on YouTube. For some reason, nobody has bothered to link them to the ASF's YouTube channel... I've created a playlist for the videoed Tomcat session

Re: This is weird: can't bind to 443

2017-08-06 Thread Mark Thomas
On 04/08/17 22:39, Christopher Schultz wrote: > Igal, > > On 8/3/17 3:11 PM, Igal @ Lucee.org wrote: >> Hi Chris, > >> On 8/3/2017 11:39 AM, Christopher Schultz wrote: >>> On 8/3/17 2:22 PM, Igal @ Lucee.org wrote: Was it priced? What would have been the cost for doing that? >>> The cost was

Re: This is weird: can't bind to 443

2017-08-04 Thread Igal @ Lucee.org
Chris, On 8/4/2017 2:39 PM, Christopher Schultz wrote: Yes, they are available on YouTube. For some reason, nobody has bothered to link them to the ASF's YouTube channel... they are a "playlist" for ApacheCon 2017 - Miami: https://www.youtube.com/playlist?list=PLbzoR-pLrL6pLDCyPxByWQwYTL-JrF5Rp

Re: This is weird: can't bind to 443

2017-08-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Igal, On 8/3/17 3:11 PM, Igal @ Lucee.org wrote: > Hi Chris, > > On 8/3/2017 11:39 AM, Christopher Schultz wrote: >> On 8/3/17 2:22 PM, Igal @ Lucee.org wrote: >>> Was it priced? What would have been the cost for doing that? >> The cost was $3000/r

Re: This is weird: can't bind to 443

2017-08-03 Thread Mark Thomas
On 03/08/17 20:11, Igal @ Lucee.org wrote: > Hi Chris, > > On 8/3/2017 11:39 AM, Christopher Schultz wrote: >> On 8/3/17 2:22 PM, Igal @ Lucee.org wrote: >>> Was it priced? What would have been the cost for doing that? >> The cost was $3000/room/day (as quoted to me by Shane Curcuru -- I >> asked

Re: This is weird: can't bind to 443

2017-08-03 Thread Igal @ Lucee.org
Hi Chris, On 8/3/2017 11:39 AM, Christopher Schultz wrote: On 8/3/17 2:22 PM, Igal @ Lucee.org wrote: Was it priced? What would have been the cost for doing that? The cost was $3000/room/day (as quoted to me by Shane Curcuru -- I asked because I was curious at the time). Thanks for the info.

Re: This is weird: can't bind to 443

2017-08-03 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Igal, On 8/3/17 2:22 PM, Igal @ Lucee.org wrote: > Hi Mark, > > On 8/3/2017 11:05 AM, Mark Thomas wrote: >> On 03/08/17 17:59, Igal @ Lucee.org wrote: >>> >>> Too bad there are no video recordings of these presentations. >>> I'd love to watch them

Re: This is weird: can't bind to 443

2017-08-03 Thread Igal @ Lucee.org
Hi Mark, On 8/3/2017 11:05 AM, Mark Thomas wrote: On 03/08/17 17:59, Igal @ Lucee.org wrote: Too bad there are no video recordings of these presentations. I'd love to watch them and I'm sure that many users would as well. Unfortunately, not everyone can attend the conventions due to one reaso

Re: This is weird: can't bind to 443

2017-08-03 Thread Mark Thomas
On 03/08/17 17:59, Igal @ Lucee.org wrote: > On 8/3/2017, Christopher Schultz wrote: >> For my money, I'd front Tomcat with something else, if only for >> load-balancing and fail-over capabilities. If you have a reverse >> proxy, the port number becomes irrelevant. > +1 > >> http://schd.ws/hosted_

Re: This is weird: can't bind to 443

2017-08-03 Thread Igal @ Lucee.org
On 8/3/2017, Christopher Schultz wrote: For my money, I'd front Tomcat with something else, if only for load-balancing and fail-over capabilities. If you have a reverse proxy, the port number becomes irrelevant. +1 http://schd.ws/hosted_files/apachecon2017/93/TomcatOpenSSL.pdf Start on slide 1

Re: This is weird: can't bind to 443

2017-08-03 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 8/3/17 9:56 AM, Mark H. Wood wrote: > I'm always surprised that so little mention is made of the Commons > Daemon approach: > > http://tomcat.apache.org/tomcat-7.0-doc/setup.html#Unix_daemon > > which, among other things, lets Tomcat get

Re: This is weird: can't bind to 443

2017-08-03 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Chuck, On 8/2/17 11:54 PM, Caldarale, Charles R wrote: >> From: Igal @ Lucee.org [mailto:i...@lucee.org] Subject: Re: This >> is weird: can't bind to 443 > >> I agree about the "one more thing to go wrong", but

Re: This is weird: can't bind to 443

2017-08-03 Thread Mark H. Wood
I'm always surprised that so little mention is made of the Commons Daemon approach: http://tomcat.apache.org/tomcat-7.0-doc/setup.html#Unix_daemon which, among other things, lets Tomcat get privileged ports the same way that HTTPD (like most other daemons) does: start privileged, acquire protec

RE: This is weird: can't bind to 443

2017-08-02 Thread Caldarale, Charles R
> From: Igal @ Lucee.org [mailto:i...@lucee.org] > Subject: Re: This is weird: can't bind to 443 > I agree about the "one more thing to go wrong", but fronting Tomcat with > a Web Server gives a performance hit? I mean, sure, now requests for > Tomcat have anoth

Re: This is weird: can't bind to 443

2017-08-02 Thread Igal @ Lucee.org
Chris, On 8/2/2017 3:10 PM, Christopher Schultz wrote: On 8/2/17 3:13 PM, Igal @ Lucee.org wrote: On 8/2/2017 11:48 AM, Caldarale, Charles R wrote: I recommend fronting Tomcat with a web server like nginx or httpd, This is an okay solution but it requires another component to be installed/conf

Re: This is weird: can't bind to 443

2017-08-02 Thread James H. H. Lampert
With a little futzing around, setting up 443 as an authbind-able port, and (as Christopher noted) correcting the spelling in the pathname, the AUTHBIND option worked perfectly. Thanks for pointing me in the right direction. Now that I think about it, I don't think any of the Linux installation

Re: This is weird: can't bind to 443

2017-08-02 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Igal, On 8/2/17 3:13 PM, Igal @ Lucee.org wrote: > On 8/2/2017 11:48 AM, Caldarale, Charles R wrote: >>> From: James H. H. Lampert [mailto:jam...@touchtonecorp.com] >>> Subject: Re: This is weird: can't bind to 443 >&

Re: This is weird: can't bind to 443

2017-08-02 Thread Igal @ Lucee.org
On 8/2/2017 11:48 AM, Caldarale, Charles R wrote: From: James H. H. Lampert [mailto:jam...@touchtonecorp.com] Subject: Re: This is weird: can't bind to 443 Binding on ports < 1024 on Linux require elevated permissions, no? If so, somebody please elaborate. That's a Linux restri

RE: This is weird: can't bind to 443

2017-08-02 Thread Caldarale, Charles R
> From: James H. H. Lampert [mailto:jam...@touchtonecorp.com] > Subject: Re: This is weird: can't bind to 443 > > Binding on ports < 1024 on Linux require elevated permissions, no? > If so, somebody please elaborate. That's a Linux restriction/feature - must be s

Re: This is weird: can't bind to 443

2017-08-02 Thread James H. H. Lampert
On 8/2/17, 11:26 AM, Igal @ Lucee.org wrote: On 8/2/2017 11:13 AM, James H. H. Lampert wrote: I've just got finished moving a Tomcat instance's HTTPS connector from 8443 to 443, on a Google Compute Engine Debian instance (from Bitnami's canned Trac image). Something I've done literally dozens of

Re: This is weird: can't bind to 443

2017-08-02 Thread Igal @ Lucee.org
On 8/2/2017 11:13 AM, James H. H. Lampert wrote: I've just got finished moving a Tomcat instance's HTTPS connector from 8443 to 443, on a Google Compute Engine Debian instance (from Bitnami's canned Trac image). Something I've done literally dozens of times on AS/400s, along with the occasional

This is weird: can't bind to 443

2017-08-02 Thread James H. H. Lampert
I've just got finished moving a Tomcat instance's HTTPS connector from 8443 to 443, on a Google Compute Engine Debian instance (from Bitnami's canned Trac image). Something I've done literally dozens of times on AS/400s, along with the occasional WinDoze and Linux box. Always without incident.