Re: Connection.close() has already been called during login

2012-01-23 Thread Mark Thomas
On 23/01/2012 03:49, removeps-c...@yahoo.com wrote: > Am running Tomcat 7 and see this in the logs: > > SEVERE: Exception performing authentication > com.mysql.jdbc.exceptions.jdbc4.MySQLNonTransientConnectionException: > Connection.close() has already been called. Invalid operation in this state

RE: Tomcat 6.0.35-SocketException: Too many open files issue with

2012-01-23 Thread Purvis Robert (NHS CONNECTING FOR HEALTH)
Sorry to possibly state the obvious, but are there perhaps files that are not being closed? This can often happen if code goes into a "catch", and a file is not closed. Best to have a "finally" block which checks if a file is open, and closes it. Robert Purvis -Original Message- From:

Re: New development, Re: More, Re: Problem bringing up SSL with a CA certificate

2012-01-23 Thread Ognjen Blagojevic
James, On 19.1.2012 18:05, James Lampert wrote: You must find keystore with earlier generated key pair (the one you also used to generate CSR for CA), and import all three certificates into that keystore. At this point, I still don't have the keystore used to generate the CSR, but I *do* now h

RE: Cannot rid of expired Certificate ...

2012-01-23 Thread Andrew Erskine
-Original Message- From: Brooke Hedrick [mailto:brooke.t.hedr...@gmail.com] Sent: 20 January 2012 12:50 To: Tomcat Users List Subject: RE: Cannot rid of expired Certificate ... On Jan 20, 2012 6:47 AM, "Brooke Hedrick" wrote: > > H > > On Jan 20, 2012 4:23 AM, "Andrew Erskine" wrote: >

Re: Cannot rid of expired Certificate ...

2012-01-23 Thread André Warnier
Andrew Erskine wrote: ... Not sure what APR is ? To save someone else the time : See : http://apr.apache.org/ In essence, "APR" is a software library which contains a number of TCP-socket-related functions which /can/ be used by software applications (such as Apache httpd and Tomcat), as a

RE: Cannot rid of expired Certificate ...

2012-01-23 Thread Andrew Erskine
-Original Message- From: André Warnier [mailto:a...@ice-sa.com] Sent: 23 January 2012 10:46 To: Tomcat Users List Subject: Re: Cannot rid of expired Certificate ... Andrew Erskine wrote: ... > > Not sure what APR is ? > To save someone else the time : See : http://apr.apache.org/ In esse

Re: Cannot rid of expired Certificate ...

2012-01-23 Thread André Warnier
Andrew Erskine wrote: -Original Message- From: André Warnier [mailto:a...@ice-sa.com] Sent: 23 January 2012 10:46 To: Tomcat Users List Subject: Re: Cannot rid of expired Certificate ... Andrew Erskine wrote: ... Not sure what APR is ? To save someone else the time : See : http://apr

Re: Tomcat 6.0.35-SocketException: Too many open files issue with

2012-01-23 Thread gnath
Hello Robert, We are talking about an app which has been grown since years and now migrated to Tomcat. Most of the main code is migrated to use spring jdbc and spring 3.0 mvc. Would you recommend some way that i can spot the issue from inspecting the open file descriptors once the server hang

Tomcat 6.0.35 -crossing maxThreads configured count

2012-01-23 Thread gnath
Hi all, We have Tomcat 6.0.35 in our production Environment running on Linux, and we have configured to use tomcatThreadPool with maxThreads=500 and minSpareThreads=50 with default connectionTimeout(which is 6 sec). We have two connectors (http and ssl) It has been giving some problems li

Re: Tomcat 6.0.35-SocketException: Too many open files issue with

2012-01-23 Thread Daniel Mikusa
On Mon, 2012-01-23 at 05:33 -0800, gnath wrote: > Hello Robert, > > > We are talking about an app which has been grown since years and now migrated > to Tomcat. Most of the main code is migrated to use spring jdbc and spring > 3.0 mvc. > Would you recommend some way that i can spot the issue

Re: Tomcat 6.0.35 -crossing maxThreads configured count

2012-01-23 Thread Daniel Mikusa
On Mon, 2012-01-23 at 05:44 -0800, gnath wrote: > Hi all, > > > We have Tomcat 6.0.35 in our production Environment running on Linux, and we > have configured to use tomcatThreadPool with maxThreads=500 and > minSpareThreads=50 with default connectionTimeout(which is 6 sec). > We have tw

Re: Tomcat 6.0.35 -crossing maxThreads configured count

2012-01-23 Thread André Warnier
gnath wrote: Hi all, We have Tomcat 6.0.35 in our production Environment running on Linux, and we have configured to use tomcatThreadPool with maxThreads=500 and minSpareThreads=50 with default connectionTimeout(which is 6 sec). Which would be about 16 hours. I am not sure of the mean

Re: Tomcat 6.0.35 -crossing maxThreads configured count

2012-01-23 Thread Pid
On 23/01/2012 14:06, Daniel Mikusa wrote: > On Mon, 2012-01-23 at 05:44 -0800, gnath wrote: >> Hi all, >> >> >> We have Tomcat 6.0.35 in our production Environment running on Linux, and we >> have configured to use tomcatThreadPool with maxThreads=500 and >> minSpareThreads=50 with default conne

Re: Tomcat 6.0.35 -crossing maxThreads configured count

2012-01-23 Thread André Warnier
André Warnier wrote: gnath wrote: Hi all, We have Tomcat 6.0.35 in our production Environment running on Linux, and we have configured to use tomcatThreadPool with maxThreads=500 and minSpareThreads=50 with default connectionTimeout(which is 6 sec). Which would be about 16 hours. I am

RE: Cannot rid of expired Certificate ...

2012-01-23 Thread Caldarale, Charles R
> From: Andrew Erskine [mailto:a.ersk...@darasoft.com] > Subject: RE: Cannot rid of expired Certificate ... > Heres my server.xml .. Only part of it, unfortunately. > port="443" minProcessors="5" maxProcessors="75" > Jan 23, 2012 10:58:37 AM (main) (org.apache.coyote.http11.Htt

Re: Cannot rid of expired Certificate ...

2012-01-23 Thread Darryl Lewis
Some key authorities recently changed the default from 1024 to 2048 bit keys. On some occasions I've been forced to delete my keystore and start from scratch to make sure there are no unsuitable keys still in there. On 23/01/12 11:45 PM, "André Warnier" wrote: >Andrew Erskine wrote: >> -Or

Re: Tomcat 6.0.35 -crossing maxThreads configured count

2012-01-23 Thread gnath
Thanks Dan and p Sure, i will collect the thread dump once it happens again. Mean while here my server.xml content related to executor and connectors:         I understand what you are saying regarding the application owned threads, but do they show in the access logs with the prefix i me

Re: Tomcat 6.0.35 -crossing maxThreads configured count

2012-01-23 Thread gnath
Hi Andre, Sorry, my mistake. you are right. i actually meant milliseconds. However i checked my configuration again and here is what i have :  ( I have the http connector configured at 2 ms. and the secured one left at default 6 ms)         Please let me know if im doing a

Re: Tomcat 6.0.35 -crossing maxThreads configured count

2012-01-23 Thread André Warnier
gnath wrote: Hi Andre, Sorry, my mistake. you are right. i actually meant milliseconds. However i checked my configuration again and here is what i have : ( I have the http connector configured at 2 ms. and the secured one left at default 6 ms) Please let me kno

Re: Tomcat 6.0.35 -crossing maxThreads configured count

2012-01-23 Thread gnath
Please ignore my previously sent edited configuration. Here is what our configurations are without editing them :         Please let me know. I appreciate your help in looking into this Thanks G From: André Warnier To: Tomcat Users List Sent: Mond

Re: Tomcat 6.0.35 -crossing maxThreads configured count

2012-01-23 Thread Daniel Mikusa
On Mon, 2012-01-23 at 06:24 -0800, gnath wrote: > Thanks Dan and p > > Sure, i will collect the thread dump once it happens again. Mean while here > my server.xml content related to executor and connectors: > >namePrefix="catalina-exec-" > maxThreads="500" >

Re: Tomcat 6.0.35 -crossing maxThreads configured count

2012-01-23 Thread gnath
Sure i will keep monitoring the Thread count as you said using jstack and keep you posted once the server hangs again. Thanks -G From: Daniel Mikusa To: Tomcat Users List ; gnath Sent: Monday, January 23, 2012 6:44 AM Subject: Re: Tomcat 6.0.35 -crossing m

Restarting tomcat 7.0.23 on MAC OS X 10.6

2012-01-23 Thread Oliver Due Billing
I hope somebody can help me. I have a test-server on my macbook pro and it takes forever to restart the server do anyone have a clue to whats happening. I have run the configuration just fine on a windows laptop. It also takes forever with the default configuration. I just the following guide ht

Re: CVE-2012-0022 details

2012-01-23 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mark, On 1/22/12 5:08 PM, ma...@apache.org wrote: > Christopher Schultz wrote: > >> -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 >> >> David, >> >> On 1/21/12 3:02 AM, David Jorm wrote: >>> Based on reading the advisory and Tomcat patch code, it

Re: Tomcat 6.0.35-SocketException: Too many open files issue with

2012-01-23 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 G, On 1/22/12 6:18 PM, gnath wrote: > We have 2 connectors (one for http and another for https) using > the tomcatThreadPool. I have the connectionTimeout="2" for > http connector. However i was told that our https connector might > not be used b

Re: Restarting tomcat 7.0.23 on MAC OS X 10.6

2012-01-23 Thread Daniel Mikusa
On Mon, 2012-01-23 at 07:41 -0800, Oliver Due Billing wrote: > I hope somebody can help me. > > I have a test-server on my macbook pro and it takes forever to restart the > server do anyone have a clue to whats happening. What is the exact version of Java & Tomcat? Also, how many applications

Re: Tomcat 6.0.35 -crossing maxThreads configured count

2012-01-23 Thread André Warnier
gnath wrote: Please ignore my previously sent edited configuration. Here is what our configurations are without editing them : Please let me know. I appreciate your help in looking into this I have not gone back to your first message, but from the subject I guess that your conce

Re: Tomcat 6.0.35 -crossing maxThreads configured count

2012-01-23 Thread André Warnier
gnath wrote: Please ignore my previously sent edited configuration. Here is what our configurations are without editing them : Please let me know. I appreciate your help in looking into this I have not gone back to your first message, but from the subject I guess that your conce

RE: Restarting tomcat 7.0.23 on MAC OS X 10.6

2012-01-23 Thread Caldarale, Charles R
> From: Oliver Due Billing [mailto:o...@watagame.com] > Subject: Restarting tomcat 7.0.23 on MAC OS X 10.6 > I have a test-server on my macbook pro and it takes forever to > restart the server do anyone have a clue to whats happening. It may be collecting entropy. Take a thread dump, and see wh

Tomcat 7 in Java 6 on V5R4 (. . . 3 . . . 2 . . . 1 . . . crash-on-takeoff)

2012-01-23 Thread James Lampert
We're now trying to bring up Tomcat 7 on a V5R4 AS/400, after successfully doing so on V6 and V7 boxes. They have Java 6 installed, and I'm told that they installed some PTFs over the weekend, but it's still crashing on takeoff. In catalina.sh, we have: # Java 6 settings if needed

Re: Connection.close() has already been called during login

2012-01-23 Thread removeps-code
Initially I thought that my RootJDBCRealm might be the problem, but how can that be? RootJDBCRealm extends Tomcat's own JDBCRealm. It overrides authenticate to call super.authenticate and if there are 3 failures (in that super.authenticate returns null), then it locks out the user. So could t

Re: Connection.close() has already been called during login

2012-01-23 Thread Chema
>2012/1/23 : > Initially I thought that my RootJDBCRealm might be the problem, but how can > that be?  RootJDBCRealm extends Tomcat's own JDBCRealm.  It >overrides > authenticate to call super.authenticate and if there are 3 failures (in that > super.authenticate returns null), then it locks ou

Re: Connection.close() has already been called during login

2012-01-23 Thread Daniel Mikusa
On Mon, 2012-01-23 at 10:21 -0800, removeps-c...@yahoo.com wrote: > Initially I thought that my RootJDBCRealm might be the problem, but how can > that be? > RootJDBCRealm extends Tomcat's own JDBCRealm. It overrides authenticate to > call super.authenticate and if there are 3 failures (in tha

RE: Tomcat 7 in Java 6 on V5R4 (. . . 3 . . . 2 . . . 1 . . . crash-on-takeoff)

2012-01-23 Thread Caldarale, Charles R
> From: James Lampert [mailto:jam...@touchtonecorp.com] > Subject: Tomcat 7 in Java 6 on V5R4 (. . . 3 . . . 2 . . . 1 . . . > crash-on-takeoff) > In catalina.sh, we have: > > # Java 6 settings if needed > > > > ex

Re: Tomcat 6.0.35 -crossing maxThreads configured count

2012-01-23 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 G, On 1/23/12 8:44 AM, gnath wrote: > Recently i happened to check our access logs when the server hung > and stopped responding. We were printing the thread number in the > logs and i have seen the number going upto 770 (though the max is > configur

Re: Connection.close() has already been called during login

2012-01-23 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 To whom it may concern, On 1/23/12 1:21 PM, removeps-c...@yahoo.com wrote: > Initially I thought that my RootJDBCRealm might be the problem, > but how can that be? RootJDBCRealm extends Tomcat's own JDBCRealm. > It overrides authenticate to call super

Re: Connection.close() has already been called during login

2012-01-23 Thread removeps-code
--- On Mon, 1/23/12, Daniel Mikusa wrote: > From: Daniel Mikusa > Subject: Re: Connection.close() has already been called during login > To: "Tomcat Users List" > Date: Monday, January 23, 2012, 10:55 AM > On Mon, 2012-01-23 at 10:21 -0800, removeps-c...@yahoo.com > wrote: > > Initially I thoug

Re: Connection.close() has already been called during login

2012-01-23 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 To whom it may concern, On 1/23/12 2:54 PM, removeps-c...@yahoo.com wrote: > Sorry, I did not know about [LockOutRealm]. Will this class work > if you have many Tomcats on different machines (possibly load > balancing) so regardless of which exact ma

Re: parallel webapp initialization

2012-01-23 Thread David Rees
On Tue, Oct 11, 2011 at 6:42 AM, Mark Thomas wrote: > I have added a patch based on the previous patches that adds: > - threaded start/stop for Contexts > - threaded start/stop for Hosts > - threaded deployment > > Control over the number of threads is via server.xml and/or JMX. This > can be chan

Re: Connection.close() has already been called during login

2012-01-23 Thread removeps-code
My code does not talk to another cluster as I have a single Tomcat only, but just wondering how one would scale. Maybe the strategy to handle clusters is to write information, such as the list of the users to the number of times they have logged in in the last hour, into a location shared by al

Re: Connection.close() has already been called during login

2012-01-23 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 To whom it may concern, On 1/23/12 4:20 PM, removeps-c...@yahoo.com wrote: > My code does not talk to another cluster as I have a single Tomcat > only, but just wondering how one would scale. Me too. > Maybe the strategy to handle clusters is to wr

Re: Critical Problem Tomcat 7

2012-01-23 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Lau, On 1/18/12 6:52 PM, Lau Eng Huat wrote: > I have a strange problem. I have deleted a servlet from the project > in netbeans but the uncompile source code still says the file > exist. I'll bite. What does "uncomple source code" mean. Did you del

Re: Problem bringing up SSL with a CA certificate

2012-01-23 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 James, On 1/18/12 12:37 PM, James Lampert wrote: > So far, I've had complete success using self-signed certificates, > both here and on the customer box, once I found out that the CN > needs to match the domain name. ;) > But now, we're trying to ge

Re: Problem bringing up SSL with a CA certificate

2012-01-23 Thread James Lampert
Christopher Schultz wrote: Did you also put your server's key into the keystore? It seems that when the customer rep jumped the gun and submitted a CSR to Thawte before we even had Tomcat running on a self-signed certificate, he did so using IBM DCM, whose keystores are incompatible with Key

Re: Connection.close() has already been called during login

2012-01-23 Thread removeps-code
--- On Mon, 1/23/12, Christopher Schultz wrote: > From: Christopher Schultz > Subject: Re: Connection.close() has already been called during login > To: "Tomcat Users List" > Date: Monday, January 23, 2012, 2:42 PM > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > To whom it may concern,

Re: Critical Problem Tomcat 7

2012-01-23 Thread Brian Burch
On 24/01/12 08:50, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Lau, On 1/18/12 6:52 PM, Lau Eng Huat wrote: I have a strange problem. I have deleted a servlet from the project in netbeans but the uncompile source code still says the file exist. I'll bite. What do

Re: Tomcat 7 in Java 6 on V5R4 (. . . 3 . . . 2 . . . 1 . . . crash-on-takeoff)

2012-01-23 Thread James Lampert
Caldarale, Charles R wrote: One thing you didn't tell us was exactly how you start Tomcat. Have you tried starting Tomcat from a command prompt so you can see the display of the derived variables, such as CLASSPATH? We start it from a variation of the OS/400 CL program given in this blog entr

Unable to access images stored in webapps//WEB-INF/images ?

2012-01-23 Thread Alastair Baldwin
Dear Users Why am I able to access images stored here: http://localhost:8080/imageUploader/1234.jpg but not here: http://localhost:8080/imageUploader/WEB-INF/images/1234.jpg File permissions are the same Any ideas? Thanks Alastair -

Re: Unable to access images stored in webapps//WEB-INF/images ?

2012-01-23 Thread Igor Cicimov
On Tue, Jan 24, 2012 at 12:21 PM, Alastair Baldwin < alastairgbald...@yahoo.co.uk> wrote: > Dear Users > > Why am I able to access images stored here: > > http://localhost:8080/imageUploader/1234.jpg > > > but not here: > > http://localhost:8080/imageUploader/WEB-INF/images/1234.jpg > > > File per

Re: Unable to access images stored in webapps//WEB-INF/images ?

2012-01-23 Thread removeps-code
Tomcat doesn't let you access anything in the META-INF or WEB-INF folders. These folders have config for your system, and may contain passwords (such as META-INF/context.xml which has passwords for the datasources). Besides, people can get into WEB-INF/lib and WEB-INF/classes and web.xml and s

RE: Unable to access images stored in webapps//WEB-INF/images ?

2012-01-23 Thread Caldarale, Charles R
> From: removeps-c...@yahoo.com [mailto:removeps-c...@yahoo.com] > Subject: Re: Unable to access images stored in webapps//WEB-INF/images > ? > Tomcat doesn't let you access anything in the META-INF or WEB-INF folders. It's not just Tomcat - the servlet spec forbids direct client access to any

Re: Restarting tomcat 7.0.23 on MAC OS X 10.6

2012-01-23 Thread Oliver Due Billing
Did a thread dump.. I have some locked threads and it just keeps going, any smoking gun here? Oliver-Billings-MacBook-Pro:bin ob$ sudo jstack -l 18866 2012-01-24 08:26:03 Full thread dump Java HotSpot(TM) 64-Bit Server VM (20.4-b02-402 mixed mode): "http-bio-80-exec-11" daemon prio=5 tid=10d0e200

Re: parallel webapp initialization

2012-01-23 Thread Pid *
On 23 Jan 2012, at 21:12, David Rees wrote: > On Tue, Oct 11, 2011 at 6:42 AM, Mark Thomas wrote: >> I have added a patch based on the previous patches that adds: >> - threaded start/stop for Contexts >> - threaded start/stop for Hosts >> - threaded deployment >> >> Control over the number of th