Thanks for the pointers.  I did not realize that I had setup Tomcat emails to 
go to a folder and didn't see people's responses.  Sorry about that.

To clarify: We were making changes to our webapp and re-deploying and the 
changes were not showing up.  We think this was happening because of the 
shutdown problem I stated earlier.  There was more than one Tomcat running.  
Also, there were some configuration issues that could have contributed to the 
problem, maybe, and it is also possible that our build system picked up an old 
config file that had the unpackWars flag set to false.  My use of the "caching" 
was simply a way of describing this problem.

Also that JVM flag is supposed to disable connecting via a debugger, or any 
other application that uses the JVM Attach mechanism.  If that flag is not set 
then anyone who has network access can connect to any webapp in Tomcat, say 
with a debugger, and access sensitive information.  If you run any JVM 
directly, with that flag set, you will not be able to connect to it, even if a 
debugger is configured.  So if its not working with Tomcat then it is a 
potential security problem.  Re-producing it is easy.  Simply set the flag and 
then run Tomcat and then connect with a debugger.  Of course to use a debugger 
you also have to configure it in the properties you start Tomcat with, but some 
JVM Attach apps may work without requiring that.

Thanks.
Ken

Disclaimer: This email from DMBGroup LLC, DMB Consulting Services LLC, or the 
personnel associated with either entity (collectively "DMB") and attachments, 
contain CONFIDENTIAL, PRIVILEGED AND PROPRIETARY information for exclusive use 
of the addressee individual(s) or entity. Unauthorized viewing, copying, 
disclosure, distribution or use of this e-mail or attachments may be subject to 
legal restriction or sanction. If received in error, notify sender immediately 
by return e-mail and delete original message and attachments. Nothing contained 
in this e-mail or attachments shall satisfy the requirements for a writing 
unless specifically stated. Nothing contained herein shall constitute a 
contract or electronic signature under the Electronic Signatures in Global and 
National Commerce Act, any version of the Uniform Electronic Transactions Act 
or any other statute governing electronic transactions. Opinions and statements 
expressed in this e-mail and any attachments are those of the individual sender 
and not necessarily of DMB. DMB does not guarantee this e-mail transmission is 
secured, error or virus-free. Neither DMB nor the sender of this e-mail accepts 
liability for errors or omissions in the contents of this e-mail, which arise 
as a result of e-mail transmission. .



---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to