-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Gary,

On 3/31/20 13:20, Hua, Gary - Saint Louis, MO - Contractor wrote:
> After we deploy our application to production in Tomcat server
> 9.0.33,  we got following error when multiple users login for some
> time and the server hangs.

Where does the server hang? On logins? Do you have a thread dump of a
"hung" server?

> When user click the "Login" button on the login form, it has a
> security realm that connect to the LDAP as in the server.xml:
>
> <Realm className="org.apache.catalina.realm.JNDIRealm" [snip]
> connectionURL="ldaps://XXXX" />
>
>
> 30-Mar-2020 12:47:29.218 INFO [https-jsse-nio-9443-exec-30]
> org.apache.catalina.realm.JNDIRealm.authenticate Exception
> performing authentication. Retrying...
>
> javax.naming.CommunicationException: Connection reset [Root
> exception is java.net.SocketException: Connection reset]; remaining
> name "XXX"
>
> at com.sun.jndi.ldap.LdapCtx.doSearch(LdapCtx.java:2002) [snip]
>
> Caused by: java.net.SocketException: Connection reset
>
> at java.net.SocketInputStream.read(SocketInputStream.java:210)
> [snip]

This often happens because a firewall terminates a long-lived
connection. When encountering an error like this, Tomcat should retry
its connection and work-around any such termination. You can see that
this is an INFO message and not an ERROR. Does Tomcat eventually log
anything suggesting that there is a successful connection?

- -chris
-----BEGIN PGP SIGNATURE-----
Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/

iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAl6DfaUACgkQHPApP6U8
pFgWcg/7BufYygaJeerkpwGuCXafQ9f/xTFTPevvgfL2PSD9/iZiYm7vOTWXqwrP
7xn8XRUEmycNROq31pfFyfDP8IJqlrRwampEoRRzVbQDXwBdeNDHlFILL7+BVrvP
0q9Wgb9WdWlPuVv/ZYMM5GLRVxhoCX68p0tRlmxpOM/U4Uiaa9eDR809GCliNWa9
+QThei2UewGfOsIQovpSU76qUuSnmcIf2iy6UJ2DkKH7mLmbyX58WW3JAX4Y1kPY
CV1jUVQ58KRcqD3bgHrEarMkAWI6AhgrXFf6MaqC8z0NPykPmeiwfAl4JY3kkUsU
LmxzJqfQoztv+NJdcsBwjV+hA81zeeAP/6NfV/q1kTocHYYea5wKSJXRFFbGUeh/
STAu2pw5yA43tZvW9Nthn2SJS1lC7XMs/izi95J+srxjxedMg3i/NfkBiaf78i42
GXnjxNIi8GBPTQZ4hEL83p8Jn1r0jd/13zCUSAcpiV8svTBlWhqPelVXti4fuL41
ssqpAmhe4A0lUDnnpiGZHld57oA5K3FJ46c6PRhjR5hu9/nQig3d3cZuqFlimnwK
79PeLquSewFTNDOVbJhhYsQzPgMOFNejo50E88AVQWIWMDqAtEzFZ87LFlLjq3cI
Hek1jV4PMpDjnaJNERJdzRMSAhXdyu5JIjkia3+s/d8B8Q+htR4=
=c9iM
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to