Re: confusion of tomcat downloading

[Seak, Teng-Fong]

Caldarale, Charles R wrote:

>>From: blueberry lake [mailto:[EMAIL PROTECTED] 
>>Subject: Re: confusion of tomcat downloading
>>
>>Someone told me before that combine apache and tomcat 
>>together and run tomcat behind apahce can kind of 
>>improve the security of the website.
>>
>>
>
>Urban legend, partly based on people generally being more familiar with
>httpd than they are with Tomcat.  There's nothing intrinsically more
>secure about one or the other.  There has been some discussion of this
>on the mailing list in the past; you can check the archives for more
>info.
>
> - Chuck
>  
>
If JSP and PHP are to be suppoerted in a server, what would
everybody suggest?  Tomcat behind Apache?  Or a PHP parser module
(probably written in Java) running inside Tomcat?

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Solved JSVC Daemon Permissions

[wapace]

Well ... now I know why no one responded to this one . . .  While my init.d  
script was changing ownership of tomcat's  directories and files to user 
"tomcat", it wasn't handling file permissions.  Very simple fix was to run 
chmod recursively on the directory setting the permissions properly and now 
everything works as expected.
> 
> From: <[EMAIL PROTECTED]>
> Date: 2005/11/13 Sun AM 10:42:00 EST
> To: 
> Subject: JSVC Daemon Permissions
> 
> OS: Open SuSE 10.0
> Tomcat Version:  Tomcat 5.5.12
> I've successfully compiled JSVC, written my init script and am able to launch 
> Tomcat at system startup.  I'm a total newbie to both Linux and Tomcat and 
> had been working through a Tomcat tutorial.  One exercise in the tutorial 
> covered file upload (something my finished app will require).  Previously I 
> had been launching Tomcat as Root using startup.sh.  The file upload exercise 
> works as expected - shows the directory listing and allows the user to upload 
> files as long as I start Tomcat as Root.  Running as user "tomcat" under jsvc 
> shows the directory but no files and will not allow the user to upload.  I 
> know this is a permissions problem with user tomcat but don't know where to 
> fix it.  Once in production, I cannot run Tomcat as Root.  Any suggestions 
> would be greatly appreciated.
> Thanks.
> 
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 
> 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Re: HTTP 404 error when mod_jk 1.2.15 connects apache 2.0.55 and tomcat 5.0.

[wapace]

netstat (or your distribution's equivalent command) should do the trick.
> 
> From: blueberry lake <[EMAIL PROTECTED]>
> Date: 2005/11/30 Wed PM 03:34:58 EST
> To: Tomcat Users List 
> Subject: Re: Re: HTTP 404 error when mod_jk 1.2.15 connects apache 2.0.55 and 
> tomcat 5.0.28 on unix
> 
> Finally, I found the problem is that port 8009 is already used by some other
> application.   I used another port, then everything works fine.
> 
> Thank you both, martin and wapace!
> 
> btw, do you know how to check if a port number has been used in UNIX?
> 
> On 11/30/05, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
> >
> > And add a JkAutoAlias line to httpd.conf if you're not going to mount
> > individual directories.
> > >
> > > From: "Martin Gainty" <[EMAIL PROTECTED]>
> > > Date: 2005/11/30 Wed PM 02:53:22 EST
> > > To: "Tomcat Users List" 
> > > Subject: Re: HTTP 404 error when mod_jk 1.2.15 connects apache 2.0.55and 
> > > tomcat
> > 5.0.28 on unix
> > >
> > > Good Afternoon Blueberry-
> > > I have some excerpts from
> > > http://tomcat.apache.org/connectors-doc/howto/apache.html
> > >
> > > I would uninstall mod_jk, clean off the TOMCAT_HOME/conf/jk folder then
> > > reinstall mod_jk 1.2.15
> > > following the doc:
> > >   If you've previously configured Apache to use mod_jserv, remove any
> > > ApJServMount directives from your httpd.conf.
> > >
> > >   If you're including tomcat-apache.conf or tomcat.conf, you'll want to
> > > remove them as well - they are specific to mod_jserv.
> > >
> > >   Remember The mod_jserv configuration directives are not compatible
> > with
> > > mod_jk !
> > >
> > > assuming your TOMCAT is properly installed and your
> > > $TOMCAT_HOME/conf/server.xml has this entry
> > > 
> > >  > > modJk="/path/to/mod_jk.so" />
> > >   
> > > where path specified by modJk is configured correctly (usually
> > > /usr/lib/apache)
> > >
> > > be sure to turn on automatic config option in Apache configuration file
> > > called httpd.conf
> > > e.g.
> > > #To be added at the end of your httpd.conf
> > > Include /var/tomcat3/conf/jk/mod_jk.conf-auto
> > >
> > > Then restart Tomcat and mod_jk.conf should be automatically generated
> > >
> > > be sure to read the docs for proper installation procedure
> > > HTH
> > > Martin-
> > > - Original Message -
> > > From: "blueberry lake" <[EMAIL PROTECTED]>
> > > To: "Tomcat Users List" ; "Martin Gainty"
> > > <[EMAIL PROTECTED]>
> > > Sent: Wednesday, November 30, 2005 1:19 PM
> > > Subject: Re: HTTP 404 error when mod_jk 1.2.15 connects apache 2.0.55and
> > > tomcat 5.0.28 on unix
> > >
> > >
> > > Thanks for helping.
> > > http://localhost:7888/manager/html gives me the same HTTP 404 error.
> > >
> > >
> > > On 11/30/05, Martin Gainty <[EMAIL PROTECTED]> wrote:
> > > >
> > > > Good Morning Blueberry
> > > > if you go to http://localhost:8081/manager/html
> > > > what happens when you Reload jsp-examples ?
> > > > Martin-
> > > > - Original Message -
> > > > From: "blueberry lake" <[EMAIL PROTECTED]>
> > > > To: 
> > > > Sent: Wednesday, November 30, 2005 10:39 AM
> > > > Subject: HTTP 404 error when mod_jk 1.2.15 connects apache 2.0.55 and
> > > > tomcat
> > > > 5.0.28 on unix
> > > >
> > > >
> > > > Hi all,
> > > >
> > > > I installed apache 2.0.55, tomcat 5.0.28, and mod_jk 1.2.15 on a
> > > > solaris 5.9unix machine.
> > > > Before I connected apache and tomcat, both of them work fine if I
> > start
> > > > them
> > > > up as seperate servers.
> > > > Mod_jk is complied from source code and mod_jk.so is copied to
> > > > apache/modules/
> > > >
> > > >
> > > > The connected system gives me the tomcat welcome page for URL
> > > > http://localhost:7888/
> > > > ( I changed apache to listen to port 7888. ), which seems fine. The
> > > > problem
> > > > is that when
> > > > I access the URLs like  http://localhost:7888/jsp-examples/, I got the
> > > > following error:
> > > > =
> > > > HTTP 404
> > > >
> > > > type Status report
> > > >
> > > > message /jsp-examples/
> > > >
> > > > description The requested resource (/jsp-examples/) is not available.
> > > >
> > > > Apache/Tomcat 5.0.28
> > > > ==
> > > >
> > > >
> > > > For tomcat, I comment out the 8080 port (http) so that to make sure it
> > > > stops
> > > > the http service and only handles the requests
> > > > on port 8009 from apache. That's the only modification I did in
> > tomcat.
> > > >
> > > > For apache, I add workers.properties file and edit httpd.conf,
> > both  in
> > > > conf/ subdirectory.
> > > > The workers.properties is like:
> > > > ==
> > > > workers.tomcat_home=/usr/local/jakarta-tomcat-5.0.28
> > > > workers.java_home=/usr/j2sdk1.4.2_03
> > > > ps=/
> > > > worker.list=worker1
> > > >
> > > > worker.worker1.port=8009
> > > > worker.worker1.host=localhost
> > > > worker.worker1.type=ajp13
> > > > worker.worker1.lbfactor=50
> > > > ==
> > > >
> > > 

Recursive Tagfile and JSP Precompilation

[Peter L]

Hello,
I'm trying to precompile JSP's for a JBoss(4.0.1) / Tomcat(5.0) server
and everything is cool except I get a ClassNotFoundException when a
Recursive Tagfile is encountered

[jasper2] SEVERE: ERROR-the file
'\WEB-INF\pages\templates\resolveResultsDialog.jsp' generated the
following general exception:
[jasper2] java.lang.ClassNotFoundException:
org.apache.taglibs.standard.tlv.JstlCoreTLV
[jasper2] at java.net.URLClassLoader$1.run(URLClassLoader.java:199)
[jasper2] at java.security.AccessController.doPrivileged(Native Method)
[jasper2] at java.net.URLClassLoader.findClass(URLClassLoader.java:187)
[jasper2] at java.lang.ClassLoader.loadClass(ClassLoader.java:289)
[jasper2] at java.lang.ClassLoader.loadClass(ClassLoader.java:235)
[jasper2] at
org.apache.jasper.compiler.TagLibraryInfoImpl.createValidator(TagLibraryInf=
oImpl.java:645)
[jasper2] at
org.apache.jasper.compiler.TagLibraryInfoImpl.parseTLD(TagLibraryInfoImpl.j=
ava:246)
[jasper2] at
org.apache.jasper.compiler.TagLibraryInfoImpl.(TagLibraryInfoImpl.jav=
a:162)
   

If I comment out the actual line of recursion inside the tag file I
can generate, compile, deploy and use all the servlets just fine
(except for the missing functionality).

I understand we use a jstl.jar and a standard.jar that are a little
suspect.  But given that there are no other similar jars available
during the process then it should be fine (That and I upgraded them to
1.1.2 temporarily and got the same result).

Questions:
- Why does dynamic compilation work?  What is Tomcat doing differently?
- Is there a Jasper configuration inside Tomcat I can inspect? (I
couldn't find it in server.xml)

Bonus Questions:
- Is there an easy way to precompile jsp's (for error checking and
initial speed) and retain runtime customizability?
- Will this rash ever go away? 

Thank you in advance for your consideration / help,
Pete

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: Problem with default context when moving from 5.5.7 to 5.5.12

[Caldarale, Charles R]

> From: Jason Burrows [mailto:[EMAIL PROTECTED] 
> Subject: Problem with default context when moving from 5.5.7 to 5.5.12
> 
> Previously, I had a context.xml file in my tomcat\conf directory with
> this context tag (removed sub elements for brevity):
> 
>  crossContext="true">
> 
> 
> This worked fine for me in 5.5.7 (on many machines).

But it shouldn't have.  I suspect this was one of the bugs fixed between
.7 and .12, where the documented rules are more tightly enforced.

> After installing 5.5.12, I see there is a context element in this file
> already.

As I understand it, the conf/context.xml provides global settings
applicable to all webapps; it is not there to define a context for any
particular webapp, just extend the context for each.

> How do I set up a default context in 5.5.12 for a web application that
> is not located in the web apps directory (I could do this for 5.5.7
> and before using the method described above).

Rename your context.xml file to ROOT.xml (case sensitive) and put it in
conf/Catalina/localhost (assuming that's the only  you have
defined).  Remove the path attribute if it's still in there.  Include a
docBase attribute that specifies the location of your webapp (you
probably already have that).  Delete the webapps/ROOT directory.
Restart Tomcat.

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you
received this in error, please contact the sender and delete the e-mail
and its attachments from all computers.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: JDBC/MySQL user login goes stale

[Rajiv Singla]

David,

  I was having the same problem. 
  autoReconnect=true does not work because it has been deprecated.
  Timeout is due to default setting of 'interactive_timeout' and 'wait_timeout' 
properties in config file (my.ini) under MySql server, which is 28800 secs or 8 
hours.

I have put the following lines in my config file and now it is working fine.
  
#The number of seconds the server waits for activity on an interactive 
connection before closing it.
interactive_timeout=99
#The number of seconds the server waits for activity on a connection before 
closing it
wait_timeout=99


You can change the timeout values as you may want. Above values are max. values.

Rajiv 



-Original Message-
From: David W. Brown [mailto:[EMAIL PROTECTED]
Sent: Tuesday, November 29, 2005 1:51 PM
To: users@tomcat.apache.org
Subject: JDBC/MySQL user login goes stale


Hello TC dev and Gurus, I have a webapp comprised of several Servlets and JSP 
pages. The webapp is functioning very well but after a few hours of no 
connections or interaction the TC webapp loses its connection with the MySQL 
DB. We are using the server.xml defined JDBC/MySQL security model using the 
users and user_roles tables DB structure. The logins work perfectly until a few 
hours of (like overnight) in attendance. Even thought the TC Servlet server is 
still up and running logins all fail. After restarting TC the login mechanism 
works perfectly. Particulars follow. Please advise.

TC Servlet server 5.5.7
MySQL 4.1

OS Windows XP (whistler).

David Brown
IT/Systems
USM-I KBR-Central
APO AE 09316

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: Deploying in ROOT folder using a war file

[Caldarale, Charles R]

> From: Vivek Mohan [mailto:[EMAIL PROTECTED] 
> Subject: Re: Deploying in ROOT folder using a war file
> 
> Tomcat is extracting the files to localhost/_ because thats where it
> knows it has to extract anything from the ROOT application.

However, that's true only if using the unpackWARs="false" setting.  In
that case, Tomcat extracts some of an app's .war file into a
work/Catalina/localhost/ directory (where "_" is substituted
for "ROOT" for some unknown reason, presumably historical).

I just zip'd up my webapps/ROOT directory into a ROOT.war file in the
webapps directory, deleted the now redundant webapps/ROOT, and restarted
Tomcat.  The result, as expected, was recreation of webapps/ROOT during
Tomcat initialization.  This is on level 5.5.12; I've never used any of
the 4.x levels.

The only way I could duplicate the behavior reported by the original
poster was by setting unpackWARs to "false".  Are you really, really
sure you have it set to "true"?  Can you try using a newer version of
Tomcat?

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you
received this in error, please contact the sender and delete the e-mail
and its attachments from all computers.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: SSL Information 5.5.12

[Caldarale, Charles R]

> From: Scott Purcell [mailto:[EMAIL PROTECTED] 
> Subject: SSL Information 5.5.12
> 
> Evidently the tcnative-1.dll had issues.

Besides the configuration differences, there was also a problem reported
with using the new APR native library on 64-bit platforms.  I don't
remember if or how that was ever resolved.

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you
received this in error, please contact the sender and delete the e-mail
and its attachments from all computers.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: admin tool?

[Caldarale, Charles R]

> From: Scott Purcell [mailto:[EMAIL PROTECTED] 
> Subject: admin tool?
> 
> Is this a valid module, I see if on the Apache Downloads 
> page. And if so it appears that most threads are from people 
> who cannot get it installed. So does it work, and is it 
> installed easily, or should one just buy a commercial server 
> and bypass this kind of problems?



I think a lot of the problems people have with the admin app are a
result of them trying to make it more complicated than it really is.
All you have to do is download it, unzip into the same directory
structure you installed Tomcat in, add a userid/password/role to
tomcat-users.xml in the conf directory, and restart Tomcat.  That's it.
I've seen people ignoring the directory layout that's built into the zip
file, installing it in bizarre places, hacking up server.xml in the
mistaken belief that they had to change something, etc.  It's really
very easy.  (Don't think it will have much effect on your SSL issues,
though.)

Personally, I think the commercial web servers are a bit of a sucker
hole - the vendors sell you the software, then pretty much insist that
you hire their witch doctors to get it to run in your environment.
(Which is not to say that there aren't companies out there that would
love to take your money to "help" you with Tomcat or JBoss.)

I think the key thing to remember is not to make things more complicated
than you need.



 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you
received this in error, please contact the sender and delete the e-mail
and its attachments from all computers.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Deploying in ROOT folder using a war file

[Vivek Mohan]

Tomcat is extracting the files to localhost/_ because thats where it
knows it has to extract anything from the ROOT application.

--
Vivek.

On 12/1/05, Gautam Gothoskar <[EMAIL PROTECTED]> wrote:
> Mark,
>   I have deleted the ROOT folder from the webapps
> directory. I have the unpackWARs set to true in the
> host element in server.xml. My tomcat version is
> 4.1.24.
>   What tomcat does is it loads up the servlet on
> startup as I have specified it in web.xml. It extracts
> the WEB-INF/classes and lib folder required for the
> servlet in TOMCAT_HOME/work/Standalone/localhost/_
> directory. It extracts the jsps and other files as and
> when required. But the problem is with stylesheets and
> javascript files. These files are not explicitly
> called and hence never get extracted. So the jsp does
> not find those files.
>   I also have no ides why tomcat is extracting the
> files to TOMCAT_HOME/work/Standalone/localhost/_ .
>
> Thanks,
> Gautam.
>
>
>
> --- Mark Thomas <[EMAIL PROTECTED]> wrote:
>
> > Gautam Gothoskar wrote:
> > > Hi Mark,
> > >   Thanks for the quick reply. But in doing the way
> > you
> > > have mentioned, tomcat does NOT expand the classes
> > etc
> > > in the ROOT folder. The application does get
> > loaded
> > > and work. I was wondering if there is any way that
> > the
> > > war file could be expanded in the ROOT folder?
> > >
> > > regards,
> > > Gautam.
> >
> > Any existing ROOT folder has to be deleted before
> > any new ROOT.war is
> > expanded. This assumes, of course, that you have set
> > unpackWARs=true
> >
> > Mark
> >
> >
> >
> -
> > To unsubscribe, e-mail:
> > [EMAIL PROTECTED]
> > For additional commands, e-mail:
> > [EMAIL PROTECTED]
> >
> >
>
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: How to deploy my webapp as root context webapp without tomcat loading it twice?

[Vivek Mohan]

Like I mentioned in my problem statement:

I don't want to move my application into ROOT folder or rename it to ROOT.
And unlike as you said Mark, putting autoDeploy=false doesn't help in this case.

Is this (loading a webapp twice if the context path and the docBase
path is different) a feature of Tomcat? Can't this be turned off?

--
Vivek.

On 12/1/05, Joe Riopel <[EMAIL PROTECTED]> wrote:
> Since this was brought up..
>
> I moved my default ROOT folder out my webapps directory ( to a temp
> dir on my server ), because I wanted a different app to the be the
> default application. So I moved my application's direcotry to
> webapps/ROOT and everything has been working fine. Is there anything
> "wrong" with doing it that way ? Like I said, everything has been
> working great so far, which has been about 3 months.
>
> Thanks,
> Joe
>
> On 11/30/05, Mark Thomas <[EMAIL PROTECTED]> wrote:
> > Vivek Mohan wrote:
> > > Question:
> > >
> > > I want to have myWebapp as the root context webapp in my tomcat
> > > server. And I don't want to rename it to "ROOT". Is there a way by
> > > which I can avoid tomcat from loading myWebapp twice?
> >
> > Options:
> > - Don't put it in the appbase directory.
> > - Turn off autoDeploy
> > - Live with renaming it to ROOT
> >
> > Mark
> >
> >
> > -
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> >
> >
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

SSL Information 5.5.12

[Scott Purcell]

First off, thank you Wendy for the link for searching the archives
http://www.nabble.com/SSL-Setup-t536274.html#a1446749

After two days of posting that I was having issues with SSL on Tomcat 5.5.12 
and that I would get no log files, etc, I searched up and down the archives, 
and found the problem. See link above.

Evidently the tcnative-1.dll had issues. When I renamed the tcnative-1.dll, all 
of a sudden, I begin receiving tons of logs in regards to my SSL set up.

So for those hacking with SSL on Tomcat 5.5.12, you may want to note this.

Sincerely
Scott

admin tool?

[Scott Purcell]

I am using Tomcat 5.5.12 on XP. I am having a bad time trying to get SSL up and 
working. Anyway, after days of searching, I have found some threads where 
people are using the "admin" tool or something like this, to install the 
certificates, etc. Problems with this install start off at no logs generating 
to show errors, etc.

Is this a valid module, I see if on the Apache Downloads page. And if so it 
appears that most threads are from people who cannot get it installed. So does 
it work, and is it installed easily, or should one just buy a commercial server 
and bypass this kind of problems?

Re: mailing list question

[Wendy Smoak]

On 11/30/05, Scott Purcell <[EMAIL PROTECTED]> wrote:
>
> Is there a searchable Tomcat mailing list? I posted a question a while back 
> and was hoping to re-read it?  I found many sites, but none look like the 
> real Tomcat mailing list.

My new favorite place to search is Nabble, because I can search across
both the user and dev lists at once.
   http://www.nabble.com/Tomcat-f303.html

Other places include http://www.mail-archive.com and
http://marc.theaimsgroup.com .

--
Wendy

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

mailing list question

[Scott Purcell]

Is there a searchable Tomcat mailing list? I posted a question a while back and 
was hoping to re-read it?  I found many sites, but none look like the real 
Tomcat mailing list.

The latest google search brought me here
http://mail-archives.apache.org/mod_mbox/tomcat-dev/200511.mbox/date
and that pretty much is not in date order and I do not even see anything from 
the past 2 weeks?

I went to the FAQs and have been searching with no luck.

Thanks

Re: Certificate Revocation Lists in Tomcat 5.5

[Martin Gainty]

The answer here is "definite maybe"
If the certificate issuer does not support Online Certificate Status 
Protocol (OCSP)
Then there is no ability to verify that the certificate is invalid as the 
ability to determine 'revoked status' in itself fails


To this day this is a known bug with CRLs
and one which should force more verifiable security precautions such as 
Kerberos from MIT

or perhaps the use of Public Key Encryption (PKI)

Martin-

- Original Message - 
From: "Kennedy Roberts" <[EMAIL PROTECTED]>

To: "Tomcat Users List" 
Sent: Wednesday, November 30, 2005 2:49 PM
Subject: Re: Certificate Revocation Lists in Tomcat 5.5



Martin,

Thanks again for you input.  The reason I ask about "quirks" is because I 
have seen examples using crlFiles (not the 's') rather than crlFile.  The 
value for this parameter then used a wildcard to point to all of the files 
in a certain directory.  Have you seen it used like this?


And just to clarify: once I do have a CRL, if I point to it in this 
manner, and also have client authentication enabled, I should be barred 
from accessing the site with a revoked certificate, correct?


Thanks,

Kennedy


- Original Message - 
From: "Martin Dubuc" <[EMAIL PROTECTED]>

To: "Tomcat Users List" 
Sent: Wednesday, November 30, 2005 2:45 PM
Subject: Re: Certificate Revocation Lists in Tomcat 5.5



1) crlFile is a standard parameter for Connector since
Tomcat 5.5.10 if my recollection is right.

2) There are no quirks in using it.

Martin

--- Kennedy Roberts <[EMAIL PROTECTED]> wrote:


After doing some research, I have found a few
examples of
{tomcat.home}/conf/server.xml files online that use
the "crlFiles" param as
part of a connector.  Is this a standard parameter
that can be used in the
server.xml file?  I ask because the sites where I
have found these examples
are not clear in whether this is some "added"
functionality.  The reason I
don't try it out myself is because at this point I
don't have a CRL which
contains any of the certificates we use in our
development environment.

To summarize:

1)  Is the crlFiles param a standard 
element?

2) Has (does) anyone use this param, and are there
any quirks to using it.

Thanks,

Kennedy


- Original Message - 
From: "Martin Dubuc" <[EMAIL PROTECTED]>

To: "Tomcat Users List" 
Sent: Tuesday, November 29, 2005 3:11 PM
Subject: RE: Certificate Revocation Lists in Tomcat
5.5


> CRL support is present in Tomcat 5.5.12.
>
> I am not an expert on Tomcat CRL support but what
I
> know is the following:
>
> - You will need to recompile some of the
> tomcat-util.jar classes with JDK 1.5 because
Tomcat
> 5.5.12 was compiled with JDK 1.4. The classes to
be
> recompiled are:
> org.apache.tomcat.util.net.jsse.JSSE15Factory and
>
org.apache.tomcat.util.net.jsse.JSSE15SocketFactory
> classes.
> - The crlFile property needs to be added inside
your
> SSL Connector in the server.xml file. The value is
the
> location of the CRL file on your system.
>
> Regards,
>
> Martin
>
> --- "Duan, Nick" <[EMAIL PROTECTED]>
wrote:
>
>> Tomcat currently doesn't support cert validation
>> against CRL.  You may
>> want to use Apache's mod_ssl to do the CRL
checking.
>>  You will have to
>> use mod_jk to connect Apache web server with
tomcat.
>>
>> SSL is very computational intensive.  Use
Apache's
>> httpd to do the SSL
>> work is more efficient than to use Java-based
>> tomcat.
>>
>> ND
>>
>> -Original Message-
>> From: Kennedy Roberts
[mailto:[EMAIL PROTECTED]
>> Sent: Tuesday, November 29, 2005 10:55 AM
>> To: users@tomcat.apache.org
>> Subject: Certificate Revocation Lists in Tomcat
5.5
>>
>> Hi all,
>>
>> We've recently migrated our (SSL enabled) web
>> application from
>> SunOne to
>> Tomcat 5.5, and I can't find any information on
>> handling Certificate
>> Revocation Lists in Tomcat.  In SunOne, there was
a
>> function in the
>> administration console that let you import a CRL.
>> Is there any
>> equivalent
>> in Tomcat, or perhaps some other command line
>> equivalent?
>>
>> Thanks for your help.
>>
>> -Kennedy
>>
>>
>>
>


-

>> To unsubscribe, e-mail:
>> [EMAIL PROTECTED]
>> For additional commands, e-mail:
>> [EMAIL PROTECTED]
>>
>>
>>
>


-

>> To unsubscribe, e-mail:
>> [EMAIL PROTECTED]
>> For additional commands, e-mail:
>> [EMAIL PROTECTED]
>>
>>
>
>
>
>
>
> __
> Yahoo! Mail - PC Magazine Editors' Choice 2005
> http://mail.yahoo.com
>
>


-

> To unsubscribe, e-mail:
[EMAIL PROTECTED]
> For additional commands, e-mail:
[EMAIL PROTECTED]
>




-

To unsubscribe, e-mail:
[EMAIL PROTECTED]
For additional commands, e-mail:
[EMAIL PROTECTED]








__
Yahoo! Mail - PC Magazine Edi

Recursive Tagfile and JSP Precompilation

[Peter L]

Hello,
I'm trying to precompile JSP's for a JBoss(4.0.1) / Tomcat(5.0) server
and everything is cool except I get a ClassNotFoundException when a
Recursive Tagfile is encountered

[jasper2] SEVERE: ERROR-the file
'\WEB-INF\pages\templates\resolveResultsDialog.jsp' generated the
following general exception:
[jasper2] java.lang.ClassNotFoundException:
org.apache.taglibs.standard.tlv.JstlCoreTLV
[jasper2] at java.net.URLClassLoader$1.run(URLClassLoader.java:199)
[jasper2] at java.security.AccessController.doPrivileged(Native Method)
[jasper2] at java.net.URLClassLoader.findClass(URLClassLoader.java:187)
[jasper2] at java.lang.ClassLoader.loadClass(ClassLoader.java:289)
[jasper2] at java.lang.ClassLoader.loadClass(ClassLoader.java:235)
[jasper2] at
org.apache.jasper.compiler.TagLibraryInfoImpl.createValidator(TagLibraryInfoImpl.java:645)
[jasper2] at
org.apache.jasper.compiler.TagLibraryInfoImpl.parseTLD(TagLibraryInfoImpl.java:246)
[jasper2] at
org.apache.jasper.compiler.TagLibraryInfoImpl.(TagLibraryInfoImpl.java:162)
   

If I comment out the actual line of recursion inside the tag file I
can generate, compile, deploy and use all the servlets just fine
(except for the missing functionality).

I understand we use a jstl.jar and a standard.jar that are a little
suspect.  But given that there are no other similar jars available
during the process then it should be fine (That and I upgraded them to
1.1.2 temporarily and got the same result).

Questions:
- Why does dynamic compilation work?  What is Tomcat doing differently?
- Is there a Jasper configuration inside Tomcat I can inspect? (I
couldn't find it in server.xml)

Bonus Questions:
- Is there an easy way to precompile jsp's (for error checking and
initial speed) and retain runtime customizability?
- Will this rash ever go away? 

Thank you in advance for your consideration / help,
Pete

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Problem with default context when moving from 5.5.7 to 5.5.12

[Jason Burrows]

Hi all -

I have recently upgraded from Tomcat 5.5.7 to 5.5.12 and now I am
having problems getting my default context to work correctly.  I very
well may have been doing this incorrectly the first time, but I still
need to figure out how to get it working again.  In this specific
case, I am trying to get Tomcat to use an external directory for the
docBase for development purposes, and as I say, it was working
correctly before.  For the moment, I have no other webapps installed
at all.

Previously, I had a context.xml file in my tomcat\conf directory with
this context tag (removed sub elements for brevity):




This worked fine for me in 5.5.7 (on many machines).

After installing 5.5.12, I see there is a context element in this file
already.  If I replace it with mine, it changes nothing (Tomcat starts
and loads no webapps).  If I add mine to the file, it also changes
nothing.  I can in fact add garbage or poorly formed XML to this file
and Tomcat will start up correctly, loading no web apps, reporting no
errors.  No matter what I do to this file, Tomcat loads, but does not
load my application.

If I take my old context.xml file and move it to
tomcat\conf\Catalina\localhost, then it will load my application (I
can tell from log output, but I cannot access the servlets at all). 
This also causes the context.xml file in tomcat\conf to be loaded as
well, and if I have errors there they will be reported.  I should also
mention that in all of these cases (if my app is loading or not
loading) when I point my web browser at http://localhost I get a blank
page with no content.  I get the same result no matter what I put
there, even things I'd expect an error for like
http://localhost/test/blablabla/asfdd.html.  Tomcat doesn't even
generate errors about these attempts in the logs, it just reports that
everything started up correctly, the server is running, and that's the
last I hear from it.

So this tells me this:
5.5.7 would read tomcat\conf\context.xml all the time, but 5.5.12 will
only read it if you have a context file for your specific host (I
imagine it would also read this file if you had a webapp in the
webapps folder as well, but I don't).

In the change logs from 5.5.7 to 5.5.12, the only references I can see
related to the context.xml file are:

-Harmonize processing of the context.xml defaults with the way web.xml
is processed (remm)
-context.xml should be a redeploy resource, and add prioritization for
redeploy resources. (remm)

These don't seem to be related to my situation.

In further reading the Tomcat documentation, I find
(http://tomcat.apache.org/tomcat-5.5-doc/config/context.html):

"Please note that for tomcat 5, unlike tomcat 4.x, it is NOT
recommended to place  elements directly in the server.xml
file."

Then later it says:

"If you specify a context path of an empty string (""), you are
defining the default web application for this Host, which will process
all requests not assigned to other Contexts. The value of this field
must not be set except when statically defining a Context in
server.xml, as it will be infered from the filenames used for either
the .xml context file or the docBase."

...and it also says:

"In addition, you MUST define a Context with a context path equal to a
zero-length string."

So I'm not sure what the correct thing to do is.  I am told NOT to put
context elements in the server.xml file, then I am told that I should
define contexts with an empty string in the server.xml file, and then
I am told that I must define a context with a zero-length string. 
This information is contradictory, so I'm not sure what the correct
course of action is.

So, to sum it up:

How do I set up a default context in 5.5.12 for a web application that
is not located in the web apps directory (I could do this for 5.5.7
and before using the method described above).

Thanks for any help you can offer.

Jason

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: File Download not working for anchor tags

[GB Developer]

Display and generation are two separate issues and I'm confused about which
is which for the OP.

does the anchor tag link to an actual real file on the filesystem somewhere,
like: 
click to download

or are you linking to a dynamically generated file, as from a servlet:
click to
download


in the first case, you're using JSP to display the link and it's more likely
a web-server MIME type that is missing. Are you using TC stand-alone or
fronted with Apache? 

in the second case, you need to worry about setting headers in your
servlet/JSP (the generating servlet/jsp, _not_ the display one) both for
content type and that disposition setting which is the FAQ that Tim linked
to, because now you're generating the contents of the linked "file" in a JSP
or servlet (so actually, not a file, but rather a streamed response).



> -Original Message-
> From: Mike [mailto:[EMAIL PROTECTED] 
> Sent: Wednesday, November 30, 2005 5:36 PM
> To: Tomcat Users List
> Subject: Re: File Download not working for anchor tags
> 
> 
> 
> I'm using a JSP page for displaying the anchor actually.  
> The anchor is 
> linked to a file, either a .xls or .csv file.
> 
>Mike
> 
> At 04:09 PM 11/30/2005, you wrote:
> >I assume you are using a servlet since JSPs always return a 
> >Content-Type.
> >Try setting Content-Type in your servlet so the headers are 
> identical.
> >
> >Mark
> >
> >Mike wrote:
> >>Hi Mark,
> >>   I compared them and the Content-Type is not showing in 
> 4.1.31.  In
> >> 4.1.18 it shows as "text/plain".
> >>   Thanks,
> >>   Mike Gilby
> >>At 02:47 PM 11/30/2005, you wrote:
> >>


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Tomcat 5.5.12- APR Connector - SSL configuration

[Remy Maucherat]

On 12/1/05, Nate Rock <[EMAIL PROTECTED]> wrote:
>  debug="5"
> maxHttpHeaderSize="8192"
> maxThreads="150"
> minSpareThreads="25"
> maxSpareThreads="75"
> enableLookups="false"
> disableUploadTimeout="true"
> acceptCount="100"
> SSLEngine="on"
> SSLCertificateFile="c:\certs\server\server.cer"
> SSLCertificateKeyFile="c:\certs\server\serverKey.key"
> />
>
> Woo Hoo! Nothing in the log file...

The proper configuration is actually something like:
>   scheme="https" secure="true"
   SSLEngine="on"
   SSLCertificateFile="${catalina.base}/conf/localhost.crt"
   SSLCertificateKeyFile="${catalina.base}/conf/localhost.key" />

I just tested again, it still works perfectly well.

--
x
Rémy Maucherat
Developer & Consultant
JBoss Group (Europe) SàRL
x

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: File Download not working for anchor tags

[Mark Thomas]

Mike wrote:


   I'm using a JSP page for displaying the anchor actually.  The anchor 
is linked to a file, either a .xls or .csv file.


  Mike


In which case, the default servlet will be responsible for serving the 
content. I'll go and take a look at the changes between 4.1.18 and 4.1.31.


Mark



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: File Download not working for anchor tags

[Mike]

   I'm using a JSP page for displaying the anchor actually.  The anchor is 
linked to a file, either a .xls or .csv file.


  Mike

At 04:09 PM 11/30/2005, you wrote:
I assume you are using a servlet since JSPs always return a Content-Type. 
Try setting Content-Type in your servlet so the headers are identical.


Mark

Mike wrote:

   Hi Mark,
  I compared them and the Content-Type is not showing in 4.1.31.  In 
4.1.18 it shows as "text/plain".

  Thanks,
  Mike Gilby
At 02:47 PM 11/30/2005, you wrote:

Assuming the content is the same, this has to be a headers issue. Try 
installing ieHTTPHeaders (or the erquivalent for your browser) and 
compare the differences between 4.1.18 and 4.1.31.


Mark

Mike wrote:


Hello,
  I'm reposting this error for hopefully more help.  I wrote before 
that I encountered a bug with the 4.1.31 version of Tomcat. When I use 
an anchor tag for a file, and I click on the link, it does not show the
file download message "Do you want to open or save this file?" with the 
open
and save options. Instead, it displays the file in the browser.   It 
use to work in Tomcat 4.1.18.  I've tried setting the "Confirm open 
after download" check box for file types, writing the 
response.contentType and response.header in the downloaded file, and I 
tried valves in the server.xml file for different authenticators to no 
avail.   I even copied the 4.1.18 Tomcat server.xml file I use to have 
into the Tomcat 4.1.31 version, and it still doesn't work.

Any help would be appreciated.
Thanks,
  Mike

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]






-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Tomcat 5.5.12- APR Connector - SSL configuration

[Remy Maucherat]

> Lines 639-650 of the org.apache.coyote.Http11AprProtocol.java
>
> // FIXME: SSL implementation
> /*
> if( proto.secure ) {
> SSLSupport sslSupport=null;
> if(proto.sslImplementation != null)
> sslSupport = 
> proto.sslImplementation.getSSLSupport(socket);
> processor.setSSLSupport(sslSupport);
> } else {
> processor.setSSLSupport( null );
> }
> processor.setSocket( socket );
> */
>
> Whoops...
>
> Not knowing the intimate details of how the Tomcat/APR connectors function, I 
> might be incorrect in my assumption, but it looks like the SSL code is in 
> fact commented out.
>
> Going to post a bug for this if someone doesn't do it by the time I get 
> home... =D - cheers!

If you do that, I'll close it as INVALID 5 minutes later.

--
x
Rémy Maucherat
Developer & Consultant
JBoss Group (Europe) SàRL
x

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: Help with session-timeout

[Dave Morrow]

Thanks Rob.  I'll keep this investigation open.  It's really annoying
me. 



David A. Morrow
Technical Systems Lead
Autodata Solutions Company
[EMAIL PROTECTED]
http://www.autodata.net

* PLEASE NOTE THAT EFFECTIVE DEC 1,2005 MY TELEPHONE NUMBER WILL CHANGE
*

NEW !!! Tel: (519) 963-3020
Fax: (519) 451-6615 

< Poor planning on your part does not necessarily constitute an
emergency on my part! >

This message has originated from Autodata Solutions. The attached
material is the Confidential and Proprietary Information of Autodata
Solutions. This email and any files transmitted with it are confidential
and intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please delete
this message and notify the Autodata system administrator at
[EMAIL PROTECTED] 

-Original Message-
From: Rob Dickey [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, November 29, 2005 2:23 PM
To: Dave Morrow
Cc: 'Tomcat Users List'
Subject: RE: Help with session-timeout

Are there any other services involved (JDBC, etc.) that are referenced
by or in the session, or where the sessions are dependent? Just
wondering why TC threads are invalidating the session...

Another option to test is add a line of code in your login process
(whatever establishes the HttpSession object) and manually set the
timeout with the
HttpSession.setMaxInactiveInterval() method.  I believe this method
overrides any descriptor settings.

Of course, having said all of that, your descriptors should work as you
have specified.  Perhaps the "multiple applications" or other service
timeout descriptors are influencing the session timeouts...I've seen
stranger things happen...you might find this link useful as a test of
your TC session timeout setup...
http://www.jguru.com/faq/view.jsp?EID=127074

HTH,
Rob

-Original Message-
From: Dave Morrow [mailto:[EMAIL PROTECTED]
Sent: Tuesday, November 29, 2005 10:48 AM
To: Tomcat Users List
Subject: Help with session-timeout

Hi all.  I have a server with multiple applications running under Tomcat
5.5

In /conf/web.xml  is set to 30

In /webapps/myapp/WEB-INF/web.xml  is set
to
-1 (infinite)

Users are being timed out of their sessions after 30 minutes as opposed
to never being timed out.  

Can anyone assist with this?  Any help would be greatly appreciated.


David A. Morrow
Technical Systems Lead
Autodata Solutions Company
[EMAIL PROTECTED]
http://www.autodata.net

* PLEASE NOTE THAT EFFECTIVE DEC 1,2005 MY TELEPHONE NUMBER WILL CHANGE
*

NEW !!! Tel: (519) 963-3020
Fax: (519) 451-6615 

< Poor planning on your part does not necessarily constitute an
emergency on my part! >

This message has originated from Autodata Solutions. The attached
material is the Confidential and Proprietary Information of Autodata
Solutions. This email and any files transmitted with it are confidential
and intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please delete
this message and notify the Autodata system administrator at
[EMAIL PROTECTED] 



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: File Download not working for anchor tags

[Mark Thomas]

I assume you are using a servlet since JSPs always return a 
Content-Type. Try setting Content-Type in your servlet so the headers 
are identical.


Mark

Mike wrote:


   Hi Mark,

  I compared them and the Content-Type is not showing in 4.1.31.  In 
4.1.18 it shows as "text/plain".


  Thanks,

  Mike Gilby

At 02:47 PM 11/30/2005, you wrote:

Assuming the content is the same, this has to be a headers issue. Try 
installing ieHTTPHeaders (or the erquivalent for your browser) and 
compare the differences between 4.1.18 and 4.1.31.


Mark

Mike wrote:


Hello,
  I'm reposting this error for hopefully more help.  I wrote before 
that I encountered a bug with the 4.1.31 version of Tomcat. When I 
use an anchor tag for a file, and I click on the link, it does not 
show the
file download message "Do you want to open or save this file?" with 
the open
and save options. Instead, it displays the file in the browser.   It 
use to work in Tomcat 4.1.18.  I've tried setting the "Confirm open 
after download" check box for file types, writing the 
response.contentType and response.header in the downloaded file, and 
I tried valves in the server.xml file for different authenticators to 
no avail.   I even copied the 4.1.18 Tomcat server.xml file I use to 
have into the Tomcat 4.1.31 version, and it still doesn't work.

Any help would be appreciated.
Thanks,
  Mike

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]






-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]






-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: Tomcat 5.5.12- APR Connector - SSL configuration

[Nate Rock]

Thx Remy, but still not working... I did however discover why it's not working 
so read on...

Remy's comment about reading *all" the documentation highlights my point about 
the APR SSL documentation being unclear... According to the APR/SSL 
documentation on the Tomcat site, (and verified in the source) the only 
attribute that is "Required" for the connector is the SSLCertificateFile 
attribute so that's all I tried at first. Since the default value for SSLEngine 
is "off" wouldn't the SSLEngine="on" be "required" to use SSL on the connector? 

I also skimmed through the attributes by reading the first sentence of the 
description, and when I see "Name of the SSLEngine to use."  I say "I don't 
need an external SSL engine... On to the next attribute". It might be more 
clear to make a second attribute that toggles ssl on/off in the connector and 
one that specifies an engine other than the default.



This makes a clear seperation from enabling SSL in the connector and a 
deviation from the default SSL engine. In the above mentioned suggestion the 
SSLEnable attribute should be a required attribute for the connector. Just my 
two cents, I know about the SSLEngine so I don't need the added clarification, 
it might also be the way that OpenSSL handles it's SSLEngine attribute, and if 
that's the case, something pointing out that the attribute is "required" would 
be super helpful.

Now that the doc discussion is over lets get to the root of the problem...

After Remy's advice I tried the SSLEngine="on" with only the SSLCertificate 
attribute and turned my debug level to 5 to get maximum debugging info.



Here is what I got in the log file:

Nov 30, 2005 4:53:21 PM org.apache.coyote.http11.Http11AprProtocol init
INFO: Initializing Coyote HTTP/1.1 on http-80
Nov 30, 2005 4:53:22 PM org.apache.coyote.http11.Http11AprProtocol init
SEVERE: Error initializing endpoint
java.lang.Exception: Unable to load certificate key c:\certs\server\server.cer 
(error:0906D06C:PEM routines:PEM_read_bio:no start line)
at org.apache.tomcat.jni.SSLContext.setCertificate(Native Method)
at org.apache.tomcat.util.net.AprEndpoint.init(AprEndpoint.java:592)
at 
org.apache.coyote.http11.Http11AprProtocol.init(Http11AprProtocol.java:115)
at 
org.apache.catalina.connector.Connector.initialize(Connector.java:1016)
at 
org.apache.catalina.core.StandardService.initialize(StandardService.java:580)
at 
org.apache.catalina.core.StandardServer.initialize(StandardServer.java:762)
at org.apache.catalina.startup.Catalina.load(Catalina.java:488)
at org.apache.catalina.startup.Catalina.load(Catalina.java:508)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at 
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at 
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:247)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:412)
Nov 30, 2005 4:53:22 PM org.apache.catalina.startup.Catalina load
SEVERE: Catalina.start
LifecycleException:  Protocol handler initialization failed: 
java.lang.Exception: Unable to load certificate key c:\certs\server\server.cer 
(error:0906D06C:PEM routines:PEM_read_bio:no start line)
at 
org.apache.catalina.connector.Connector.initialize(Connector.java:1018)
at 
org.apache.catalina.core.StandardService.initialize(StandardService.java:580)
at 
org.apache.catalina.core.StandardServer.initialize(StandardServer.java:762)
at org.apache.catalina.startup.Catalina.load(Catalina.java:488)
at org.apache.catalina.startup.Catalina.load(Catalina.java:508)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at 
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at 
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:247)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:412)

This makes sense because how can the server encrypt anything that matches it's 
public key with out having signed it with the private key? /;)  So I added in 
the SSLCertificateFile attribute.



Woo Hoo! Nothing in the log file...

Nov 30, 2005 4:57:10 PM org.apache.coyote.http11.Http11AprProtocol init
INFO: Initializing Coyote HTTP/1.1 on http-80
Nov 30, 2005 4:57:11 PM org.apache.coyote.http11.Http11AprProtocol init
INFO: Initializing Coyote HTTP/1.1 on http-443
Nov 30, 2005 4:57:11 PM org.apache.catalina.startup.Catalina load

I then try connecting to the server using http://server/ but STILL nothing...

Not being one to be thwarted so easily (and having found and posted a c

Re: How to deploy my webapp as root context webapp without tomcat loading it twice?

[Joe Riopel]

Since this was brought up..

I moved my default ROOT folder out my webapps directory ( to a temp
dir on my server ), because I wanted a different app to the be the
default application. So I moved my application's direcotry to
webapps/ROOT and everything has been working fine. Is there anything
"wrong" with doing it that way ? Like I said, everything has been
working great so far, which has been about 3 months.

Thanks,
Joe

On 11/30/05, Mark Thomas <[EMAIL PROTECTED]> wrote:
> Vivek Mohan wrote:
> > Question:
> >
> > I want to have myWebapp as the root context webapp in my tomcat
> > server. And I don't want to rename it to "ROOT". Is there a way by
> > which I can avoid tomcat from loading myWebapp twice?
>
> Options:
> - Don't put it in the appbase directory.
> - Turn off autoDeploy
> - Live with renaming it to ROOT
>
> Mark
>
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: File Download not working for anchor tags

[Mike]

   Hi Mark,

  I compared them and the Content-Type is not showing in 4.1.31.  In 
4.1.18 it shows as "text/plain".


  Thanks,

  Mike Gilby

At 02:47 PM 11/30/2005, you wrote:
Assuming the content is the same, this has to be a headers issue. Try 
installing ieHTTPHeaders (or the erquivalent for your browser) and compare 
the differences between 4.1.18 and 4.1.31.


Mark

Mike wrote:

Hello,
  I'm reposting this error for hopefully more help.  I wrote before that 
I encountered a bug with the 4.1.31 version of Tomcat. When I use an 
anchor tag for a file, and I click on the link, it does not show the

file download message "Do you want to open or save this file?" with the open
and save options. Instead, it displays the file in the browser.   It use 
to work in Tomcat 4.1.18.  I've tried setting the "Confirm open after 
download" check box for file types, writing the response.contentType and 
response.header in the downloaded file, and I tried valves in the 
server.xml file for different authenticators to no avail.   I even copied 
the 4.1.18 Tomcat server.xml file I use to have into the Tomcat 4.1.31 
version, and it still doesn't work.

Any help would be appreciated.
Thanks,
  Mike

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]






-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Tomcat 5.5.12- APR Connector - SSL configuration

[Remy Maucherat]

On 11/30/05, Nate Rock <[EMAIL PROTECTED]> wrote:
> All to no avail =(

Cool, but how about really reading *all* the APR documentation. For
example, there's a SSLEngine attribute, also.

--
x
Rémy Maucherat
Developer & Consultant
JBoss Group (Europe) SàRL
x

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Deploying in ROOT folder using a war file

[Gautam Gothoskar]

Mark,
  I have deleted the ROOT folder from the webapps
directory. I have the unpackWARs set to true in the
host element in server.xml. My tomcat version is
4.1.24.
  What tomcat does is it loads up the servlet on
startup as I have specified it in web.xml. It extracts
the WEB-INF/classes and lib folder required for the
servlet in TOMCAT_HOME/work/Standalone/localhost/_
directory. It extracts the jsps and other files as and
when required. But the problem is with stylesheets and
javascript files. These files are not explicitly
called and hence never get extracted. So the jsp does
not find those files. 
  I also have no ides why tomcat is extracting the
files to TOMCAT_HOME/work/Standalone/localhost/_ .

Thanks,
Gautam.



--- Mark Thomas <[EMAIL PROTECTED]> wrote:

> Gautam Gothoskar wrote:
> > Hi Mark,
> >   Thanks for the quick reply. But in doing the way
> you
> > have mentioned, tomcat does NOT expand the classes
> etc
> > in the ROOT folder. The application does get
> loaded
> > and work. I was wondering if there is any way that
> the
> > war file could be expanded in the ROOT folder?
> > 
> > regards,
> > Gautam.
> 
> Any existing ROOT folder has to be deleted before
> any new ROOT.war is 
> expanded. This assumes, of course, that you have set
> unpackWARs=true
> 
> Mark
> 
> 
>
-
> To unsubscribe, e-mail:
> [EMAIL PROTECTED]
> For additional commands, e-mail:
> [EMAIL PROTECTED]
> 
> 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: File Download not working for anchor tags

[Mark Thomas]

Assuming the content is the same, this has to be a headers issue. Try 
installing ieHTTPHeaders (or the erquivalent for your browser) and 
compare the differences between 4.1.18 and 4.1.31.


Mark

Mike wrote:

Hello,

  I'm reposting this error for hopefully more help.  I wrote before that 
I encountered a bug with the 4.1.31 version of Tomcat. When I use an 
anchor tag for a file, and I click on the link, it does not show the
file download message "Do you want to open or save this file?" with the 
open
and save options. Instead, it displays the file in the browser.   It use 
to work in Tomcat 4.1.18.  I've tried setting the "Confirm open after 
download" check box for file types, writing the response.contentType and 
response.header in the downloaded file, and I tried valves in the 
server.xml file for different authenticators to no avail.   I even 
copied the 4.1.18 Tomcat server.xml file I use to have into the Tomcat 
4.1.31 version, and it still doesn't work.


Any help would be appreciated.

Thanks,

  Mike



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]






-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Deploying in ROOT folder using a war file

[Mark Thomas]

Gautam Gothoskar wrote:

Hi Mark,
  Thanks for the quick reply. But in doing the way you
have mentioned, tomcat does NOT expand the classes etc
in the ROOT folder. The application does get loaded
and work. I was wondering if there is any way that the
war file could be expanded in the ROOT folder?

regards,
Gautam.


Any existing ROOT folder has to be deleted before any new ROOT.war is 
expanded. This assumes, of course, that you have set unpackWARs=true


Mark


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: apache + mod_jk + tomcat. Manager application problem

[Markus Schönhaber]

Mirek Kopriva wrote:
> Hi I have a strange problem.
> When I install tomcat + apache + mod_jk. Everything seems to work fine
> (our application, examples...) except the tomcat's Manager application.
> Anybody has an idea why?
> I'm using
> apache 2.0.52
> mod_jk 1.2.15
> rtomcat 5.5.12
> Thanks a lot for any help.

Well, it would be much easier for the list to help you, if you did provide 
some basic information about your problem. For example:
- What exactly are you doing to trigger the error?
- What exactly *is* the error (for example: what does your browser display, 
what's in Tomcat's logfiles etc.)?
- Does the same problem show up if you access tomcat directly and not via 
httpd + jk?

Wild assed guess: You didn't download and install the Administration Web 
Application from
http://tomcat.apache.org/download-55.cgi

Regards
  mks

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

File Download not working for anchor tags

[Mike]

Hello,

  I'm reposting this error for hopefully more help.  I wrote before that I 
encountered a bug with the 4.1.31 version of Tomcat. When I use an anchor 
tag for a file, and I click on the link, it does not show the

file download message "Do you want to open or save this file?" with the open
and save options. Instead, it displays the file in the browser.   It use to 
work in Tomcat 4.1.18.  I've tried setting the "Confirm open after 
download" check box for file types, writing the response.contentType and 
response.header in the downloaded file, and I tried valves in the 
server.xml file for different authenticators to no avail.   I even copied 
the 4.1.18 Tomcat server.xml file I use to have into the Tomcat 4.1.31 
version, and it still doesn't work.


Any help would be appreciated.

Thanks,

  Mike



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: apache + mod_jk + tomcat. Manager application problem

[Nate Rock]

How exactly is the Tomact Manager not working correctly? Does it not
come up at all? Give you an error? Etc. More information = good ;) 

Also, are you using the normal Tomcat connector or the native APR
connector?

After I track down the HTTPS connector not working issue, I will be
regression testing the Apache/JK/Tomcat setup so I might as well know
what I am getting myself into.

   -rOcK 

-Original Message-
From: Mirek Kopriva [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, November 30, 2005 3:26 PM
To: users@tomcat.apache.org
Subject: apache + mod_jk + tomcat. Manager application problem

Hi I have a strange problem.
When I install tomcat + apache + mod_jk. Everything seems to work fine
(our application, examples...) except the tomcat's Manager application.
Anybody has an idea why?
I'm using
apache 2.0.52
mod_jk 1.2.15
rtomcat 5.5.12
Thanks a lot for any help.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

apache + mod_jk + tomcat. Manager application problem

[Mirek Kopriva]

Hi I have a strange problem.
When I install tomcat + apache + mod_jk. Everything seems to work fine
(our application, examples...) except the tomcat's Manager application.
Anybody has an idea why?
I'm using
apache 2.0.52
mod_jk 1.2.15
rtomcat 5.5.12
Thanks a lot for any help.

Re: Tomcat 5.5.12- APR Connector - SSL configuration

[Dhaval Patel]

Hi Nate,

  Welcome aboard. I am waiting for the answer of this problem since a long time.
I have searched this mailing list but no body answered it correctly. You can
search on the list archive of Nov. 2005, you will find my messages. I have
searched on google about it, but could not find anything. I found that tomcat
documentation is the only (and insuffiecient) source of this. 

  You are third person that has this problem. Looks like there is bug. Hope we
will get solution.

Regards.
D

--- Nate Rock <[EMAIL PROTECTED]> wrote:

> Someone may have already posted this, but since I just joined the
> mailing list, I figured it might help someone else if it hasn't already
> been sent.
> 
> I am having trouble getting an HTTPS connection to my tomcat server
> using the native APR connector under Tomcat 5.5.12. 
> 
> I am familiar with how to set up HTTPS connectors in 5.0.28 so I figured
> it would be easy to set up in 5.5.12 using the APR connector, but I
> think I am just missing something simple.
> 
> Under Tomcat 5.0.28 here is what we were using:
> 
>maxHttpHeaderSize="8192"
>   maxThreads="150" 
>   minSpareThreads="25" 
>   maxSpareThreads="75"
>   enableLookups="false" 
>   disableUploadTimeout="true"
>   acceptCount="100" 
>   scheme="https" 
>   secure="true"
>   clientAuth="false"
>   sslProtocol="SSL" 
>   keystoreFile="c:\certs\server\server.p12" 
>   keystorePass="serverPassword" 
>   keystoreType="PKCS12"
>   />
> 
> After reading the docs located at 
> 
> http://tomcat.apache.org/tomcat-5.5-doc/apr.html
> 
> I took a stab at using the existing server.p12 file and exported the
> certificate in PEM encoding using Keystore Explorer 2.0 and saved it to
> c:\certs\server\server.cer
> 
> When opening it in a text editor, I get the following which looks
> correct.
> 
> -BEGIN CERTIFICATE-
> MIICqzCCAhSgAwIBAgIBAjANBgkqhkiG9w0BAQQFADCBgTEZMBcGA1UEAxMQcm9j
> a2hvd3NlLmljLm9yZzEYMBYGA1UEChMPSW5maW5pdGUgQ2FtcHVzMRMwEQYDVQQL
> EwpIb3N0aW5nIENBMRQwEgYDVQQHEwtBcmRlbiBIaWxsczESMBAGA1UECBMJTWlu
> bmVzb3RhMQswCQYDVQQGEwJVUzAeFw0wNTExMjkyMTQ1MTVaFw0wNjExMjQyMTQ1
> MTVaMIGDMRkwFwYDVQQDExByb2NraG93c2UuaWMub3JnMRgwFgYDVQQKEw9JbmZp
> bml0ZSBDYW1wdXMxFTATBgNVBAsTDFNpdGUgTWFuYWdlcjEUMBIGA1UEBxMLQXJk
> ZW4gSGlsbHMxEjAQBgNVBAgTCU1pbm5lc290YTELMAkGA1UEBhMCVVMwgZ8wDQYJ
> KoZIhvcNAQEBBQADgY0AMIGJAoGBAKhU44dOUQAaHPokbNbcoFvQpleL4zCJ6xKH
> C3nP0bQzB9XoXHNp/ec4EKOGhwfITbo8eEhAdXrAZNNEcH0BQYtd7QaT1GMqyJrV
> bQbcNBBqJnu9N4l8jAfclKp+6kMy2V4i6PIJB2E1zxTgS9ourhg36NGc1RCbUazz
> 0ussu8nbAgMBAAGjLzAtMAwGA1UdEwQFMAMBAQAwHQYDVR0lBBYwFAYIKwYBBQUH
> AwIGCCsGAQUFBwMBMA0GCSqGSIb3DQEBBAUAA4GBAIGX1f3uCQgIpqa+rVJgZ2se
> FRRTPbZ576jpTqJtPlAARPCqBw2uM5tG36FV+dW9kVeWG3Y1GafLgpFUD5j/nl2p
> p47mUjYhQFqEzOkoW3WuNspKuDkd5TACn721vECdaUVTUEmpJ5XBb9Q710chv9ZO
> v6h8ZTNOoU2cvqJV3MhC
> -END CERTIFICATE-
> 
> I then added the following connector to my server.xml
> 
>maxHttpHeaderSize="8192"
>   maxThreads="150" 
>   minSpareThreads="25" 
>   maxSpareThreads="75"
>   enableLookups="false" 
>   disableUploadTimeout="true"
>   acceptCount="100" 
>   SSLCertificateFile="c:\certs\server\server.cer"
>   />
> 
> But when I try to connect to the server using https://server/ the
> browser times out and I get a page cannot be found error.
> 
> Thinking that it needed the private key as well I exported the primary
> key in PEM format and saved it to c:\certs\server\server.pem
> 
> When I open it in a text editor, I get the following which also looks
> correct
> 
> -BEGIN PRIVATE KEY-
> MIICdgIBADANBgkqhkiG9w0BAQEFAASCAmAwggJcAgEAAoGBAKhU44dOUQAaHPok
> bNbcoFvQpleL4zCJ6xKHC3nP0bQzB9XoXHNp/ec4EKOGhwfITbo8eEhAdXrAZNNE
> cH0BQYtd7QaT1GMqyJrVbQbcNBBqJnu9N4l8jAfclKp+6kMy2V4i6PIJB2E1zxTg
> S9ourhg36NGc1RCbUazz0ussu8nbAgMBAAECgYB5M8YwIn/IJwU+RwPnISyFb5KV
> 7q9Cv8t2p63no29G5Id7ybbnkyWyWngAhlirjdoJgojI3UC5hdYTGHA2UbUyzRe6
> Fm5y26opOBYYfyLwu3hvVjYoIyhTX+QNfCRFcKNrIBKecmGmh+YIZwGGlru/1zHn
> fp4YmVodfJqEARRfIQJBANESeiK95X1EBXEwNIah3KuxvdJlMNc4oMLuCdLuGm7I
> 9ViBYI+3giiFKZjGvtwfeNHWyiU5s4PnnAOd48pJdHcCQQDOHWl+CkQ/OxRTrxI8
> P+++Ucn35h/TsnVmTMfGYoiGYwYvx46rSZ3a++0TKwUDVn3KXEBzIMKslw61yiEU
> fyK9AkEAwZf3amYms3iiBW5apPQKjx21pLW4pQG1suqSRDPgXAdPUBX04P9O0dCE
> dQhLwS6PRNc8NX4ZoSF9EMhKHo0n/wJAcYnII7L6Fy6vKs3kqKW7pcYeEF2GqLHE
> c97VqVV7yTNhJA60a2x49TkTRhzLfSQ21LLumbyxICtx4ff/MvA5rQJAYOc1Dqmp
> kSl7vTrSeUuO4yRPi/R7ALRs6dqQQTtQ9egC1F+3sgIWb6rdJOBsdtEeFx0AGgfF
> +p3VdiyrJl2h5Q==
> -END PRIVATE KEY-
> 
> I then modified the following connector in my server.xml
> 
>maxHttpHeaderSize="8192"
>   maxThreads="150" 
>   minSpareThreads="25" 
>   maxSpareThreads="75"
>   enableLookups="false" 
>   

Tomcat 5.5.12- APR Connector - SSL configuration

[Nate Rock]

Someone may have already posted this, but since I just joined the
mailing list, I figured it might help someone else if it hasn't already
been sent.

I am having trouble getting an HTTPS connection to my tomcat server
using the native APR connector under Tomcat 5.5.12. 

I am familiar with how to set up HTTPS connectors in 5.0.28 so I figured
it would be easy to set up in 5.5.12 using the APR connector, but I
think I am just missing something simple.

Under Tomcat 5.0.28 here is what we were using:



After reading the docs located at 

http://tomcat.apache.org/tomcat-5.5-doc/apr.html

I took a stab at using the existing server.p12 file and exported the
certificate in PEM encoding using Keystore Explorer 2.0 and saved it to
c:\certs\server\server.cer

When opening it in a text editor, I get the following which looks
correct.

-BEGIN CERTIFICATE-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-END CERTIFICATE-

I then added the following connector to my server.xml



But when I try to connect to the server using https://server/ the
browser times out and I get a page cannot be found error.

Thinking that it needed the private key as well I exported the primary
key in PEM format and saved it to c:\certs\server\server.pem

When I open it in a text editor, I get the following which also looks
correct

-BEGIN PRIVATE KEY-
MIICdgIBADANBgkqhkiG9w0BAQEFAASCAmAwggJcAgEAAoGBAKhU44dOUQAaHPok
bNbcoFvQpleL4zCJ6xKHC3nP0bQzB9XoXHNp/ec4EKOGhwfITbo8eEhAdXrAZNNE
cH0BQYtd7QaT1GMqyJrVbQbcNBBqJnu9N4l8jAfclKp+6kMy2V4i6PIJB2E1zxTg
S9ourhg36NGc1RCbUazz0ussu8nbAgMBAAECgYB5M8YwIn/IJwU+RwPnISyFb5KV
7q9Cv8t2p63no29G5Id7ybbnkyWyWngAhlirjdoJgojI3UC5hdYTGHA2UbUyzRe6
Fm5y26opOBYYfyLwu3hvVjYoIyhTX+QNfCRFcKNrIBKecmGmh+YIZwGGlru/1zHn
fp4YmVodfJqEARRfIQJBANESeiK95X1EBXEwNIah3KuxvdJlMNc4oMLuCdLuGm7I
9ViBYI+3giiFKZjGvtwfeNHWyiU5s4PnnAOd48pJdHcCQQDOHWl+CkQ/OxRTrxI8
P+++Ucn35h/TsnVmTMfGYoiGYwYvx46rSZ3a++0TKwUDVn3KXEBzIMKslw61yiEU
fyK9AkEAwZf3amYms3iiBW5apPQKjx21pLW4pQG1suqSRDPgXAdPUBX04P9O0dCE
dQhLwS6PRNc8NX4ZoSF9EMhKHo0n/wJAcYnII7L6Fy6vKs3kqKW7pcYeEF2GqLHE
c97VqVV7yTNhJA60a2x49TkTRhzLfSQ21LLumbyxICtx4ff/MvA5rQJAYOc1Dqmp
kSl7vTrSeUuO4yRPi/R7ALRs6dqQQTtQ9egC1F+3sgIWb6rdJOBsdtEeFx0AGgfF
+p3VdiyrJl2h5Q==
-END PRIVATE KEY-

I then modified the following connector in my server.xml



I also tried putting a few of the other attributes in that are SSL
specific but it's still a no-go:



And



And



All to no avail =(

I figure someone has gotten this working =D any assistance would be
muchly appreciated!!!

*Note* the PEM encoding above is valid as is the password for the
private key. This information isn't being used in production and is a
certificate I generated for testing purposes so feel free to use it to
test anything out.

   -rOcK

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: Error: Io exception: Connection reset

[KUMAR, NANDA [AG-Contractor/1000]]

Thanks once again.

-Nanda


-Original Message-
From: Tobias Meyer [mailto:[EMAIL PROTECTED]
Sent: Wednesday, November 30, 2005 2:51 PM
To: 'Tomcat Users List'
Subject: Re: Error: Io exception: Connection reset 


ValidationQuery does an additional query before the connection is returned
from the pool.
If the Validation fails, the pooled connection is dropped and a new
connection is initiated.

see:
http://jakarta.apache.org/commons/dbcp/configuration.html

Cheers,
Tobias

-Ursprüngliche Nachricht-
Von: KUMAR, NANDA [AG-Contractor/1000] [mailto:[EMAIL PROTECTED]
Gesendet: Mittwoch, 30. November 2005 16:29
An: 'Tomcat Users List'
Betreff: RE: Error: Io exception: Connection reset 


Thanks Tobias,
 I will try as you mentioned below. Could you please let me know what
"validationQuery" parameter does and where I can find these information on
tomcat documentation.

-Nanda

-Original Message-
From: Tobias Meyer [mailto:[EMAIL PROTECTED]
Sent: Wednesday, November 30, 2005 12:38 AM
To: 'Tomcat Users List'
Subject: AW: Error: Io exception: Connection reset 


Maybe the user hit the "stop" button on the browser while downloading a page
or binary.

IIRC this will give you IOExceptions in your servlet when trying to push
more data in the "dead" connection.

It could also be your firewall, that times out connections which have not
been used for some time.
If you use tomcat connection pooling, try using 

validationQuery
select 1

in the ResourceParams of your jdbc connection definition in server.xml 
(see tomcat documentation for details)


Hth,
Tobias

> -Ursprüngliche Nachricht-
> Von: KUMAR, NANDA [AG-Contractor/1000] 
> [mailto:[EMAIL PROTECTED]
> Gesendet: Mittwoch, 30. November 2005 00:54
> An: users@tomcat.apache.org
> Betreff: Error: Io exception: Connection reset 
> 
> 
> Very often we are getting Io Exception: Connection reset 
> error. There is a
> firewall between tomcat app server and DB server.
> I wonder whether firewall is closing the connection or what 
> could be the
> reason. Please let me know how to get rid of this error. 
> 
> Thanks in advance.
> 
> 
> 
> --
> ---
> This e-mail message may contain privileged and/or 
> confidential information, and is intended to be received only 
> by persons entitled to receive such information. If you have 
> received this e-mail in error, please notify the sender 
> immediately. Please delete it and all attachments from any 
> servers, hard drives or any other media. Other use of this 
> e-mail by you is strictly prohibited.
> 
> 
> All e-mails and attachments sent and received are subject to 
> monitoring, reading and archival by Monsanto. The recipient 
> of this e-mail is solely responsible for checking for the 
> presence of "Viruses" or other "Malware". Monsanto accepts no 
> liability for any damage caused by any such code transmitted 
> by or accompanying this e-mail or any attachment.
> --
> ---
> 
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
This e-mail message may contain privileged and/or confidential information,
and is intended to be received only by persons entitled to receive such
information. If you have received this e-mail in error, please notify the
sender immediately. Please delete it and all attachments from any servers,
hard drives or any other media. Other use of this e-mail by you is strictly
prohibited.


All e-mails and attachments sent and received are subject to monitoring,
reading and archival by Monsanto. The recipient of this e-mail is solely
responsible for checking for the presence of "Viruses" or other "Malware".
Monsanto accepts no liability for any damage caused by any such code
transmitted by or accompanying this e-mail or any attachment.

-


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
This e-mail message may contain privileged and/or confidential information, and 
i

Re: Error: Io exception: Connection reset

[Tobias Meyer]

ValidationQuery does an additional query before the connection is returned
from the pool.
If the Validation fails, the pooled connection is dropped and a new
connection is initiated.

see:
http://jakarta.apache.org/commons/dbcp/configuration.html

Cheers,
Tobias

-Ursprüngliche Nachricht-
Von: KUMAR, NANDA [AG-Contractor/1000] [mailto:[EMAIL PROTECTED]
Gesendet: Mittwoch, 30. November 2005 16:29
An: 'Tomcat Users List'
Betreff: RE: Error: Io exception: Connection reset 


Thanks Tobias,
 I will try as you mentioned below. Could you please let me know what
"validationQuery" parameter does and where I can find these information on
tomcat documentation.

-Nanda

-Original Message-
From: Tobias Meyer [mailto:[EMAIL PROTECTED]
Sent: Wednesday, November 30, 2005 12:38 AM
To: 'Tomcat Users List'
Subject: AW: Error: Io exception: Connection reset 


Maybe the user hit the "stop" button on the browser while downloading a page
or binary.

IIRC this will give you IOExceptions in your servlet when trying to push
more data in the "dead" connection.

It could also be your firewall, that times out connections which have not
been used for some time.
If you use tomcat connection pooling, try using 

validationQuery
select 1

in the ResourceParams of your jdbc connection definition in server.xml 
(see tomcat documentation for details)


Hth,
Tobias

> -Ursprüngliche Nachricht-
> Von: KUMAR, NANDA [AG-Contractor/1000] 
> [mailto:[EMAIL PROTECTED]
> Gesendet: Mittwoch, 30. November 2005 00:54
> An: users@tomcat.apache.org
> Betreff: Error: Io exception: Connection reset 
> 
> 
> Very often we are getting Io Exception: Connection reset 
> error. There is a
> firewall between tomcat app server and DB server.
> I wonder whether firewall is closing the connection or what 
> could be the
> reason. Please let me know how to get rid of this error. 
> 
> Thanks in advance.
> 
> 
> 
> --
> ---
> This e-mail message may contain privileged and/or 
> confidential information, and is intended to be received only 
> by persons entitled to receive such information. If you have 
> received this e-mail in error, please notify the sender 
> immediately. Please delete it and all attachments from any 
> servers, hard drives or any other media. Other use of this 
> e-mail by you is strictly prohibited.
> 
> 
> All e-mails and attachments sent and received are subject to 
> monitoring, reading and archival by Monsanto. The recipient 
> of this e-mail is solely responsible for checking for the 
> presence of "Viruses" or other "Malware". Monsanto accepts no 
> liability for any damage caused by any such code transmitted 
> by or accompanying this e-mail or any attachment.
> --
> ---
> 
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
This e-mail message may contain privileged and/or confidential information,
and is intended to be received only by persons entitled to receive such
information. If you have received this e-mail in error, please notify the
sender immediately. Please delete it and all attachments from any servers,
hard drives or any other media. Other use of this e-mail by you is strictly
prohibited.


All e-mails and attachments sent and received are subject to monitoring,
reading and archival by Monsanto. The recipient of this e-mail is solely
responsible for checking for the presence of "Viruses" or other "Malware".
Monsanto accepts no liability for any damage caused by any such code
transmitted by or accompanying this e-mail or any attachment.

-


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: Re: HTTP 404 error when mod_jk 1.2.15 connects apache 2.0.55 and tomcat 5.0.28 on unix

[Nate Rock]

Use the netstat command and it will show all network interfaces/ports
being used on a machine.

For more detailed options when using netstat, refer to the page below.

http://userpages.umbc.edu/~jack/ifsm498/netstat.html

   -rOcK 

-Original Message-
From: blueberry lake [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, November 30, 2005 2:35 PM
To: Tomcat Users List
Subject: Re: Re: HTTP 404 error when mod_jk 1.2.15 connects apache
2.0.55 and tomcat 5.0.28 on unix

Finally, I found the problem is that port 8009 is already used by some
other
application.   I used another port, then everything works fine.

Thank you both, martin and wapace!

btw, do you know how to check if a port number has been used in UNIX?

On 11/30/05, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
>
> And add a JkAutoAlias line to httpd.conf if you're not going to mount 
> individual directories.
> >
> > From: "Martin Gainty" <[EMAIL PROTECTED]>
> > Date: 2005/11/30 Wed PM 02:53:22 EST
> > To: "Tomcat Users List" 
> > Subject: Re: HTTP 404 error when mod_jk 1.2.15 connects apache 
> > 2.0.55and tomcat
> 5.0.28 on unix
> >
> > Good Afternoon Blueberry-
> > I have some excerpts from
> > http://tomcat.apache.org/connectors-doc/howto/apache.html
> >
> > I would uninstall mod_jk, clean off the TOMCAT_HOME/conf/jk folder 
> > then reinstall mod_jk 1.2.15 following the doc:
> >   If you've previously configured Apache to use mod_jserv, remove 
> > any ApJServMount directives from your httpd.conf.
> >
> >   If you're including tomcat-apache.conf or tomcat.conf, you'll want

> > to remove them as well - they are specific to mod_jserv.
> >
> >   Remember The mod_jserv configuration directives are not compatible
> with
> > mod_jk !
> >
> > assuming your TOMCAT is properly installed and your 
> > $TOMCAT_HOME/conf/server.xml has this entry 
> >  > modJk="/path/to/mod_jk.so" />
> >   
> > where path specified by modJk is configured correctly (usually
> > /usr/lib/apache)
> >
> > be sure to turn on automatic config option in Apache configuration 
> > file called httpd.conf e.g.
> > #To be added at the end of your httpd.conf
> > Include /var/tomcat3/conf/jk/mod_jk.conf-auto
> >
> > Then restart Tomcat and mod_jk.conf should be automatically 
> > generated
> >
> > be sure to read the docs for proper installation procedure HTH
> > Martin-
> > - Original Message -
> > From: "blueberry lake" <[EMAIL PROTECTED]>
> > To: "Tomcat Users List" ; "Martin Gainty"
> > <[EMAIL PROTECTED]>
> > Sent: Wednesday, November 30, 2005 1:19 PM
> > Subject: Re: HTTP 404 error when mod_jk 1.2.15 connects apache 
> > 2.0.55and tomcat 5.0.28 on unix
> >
> >
> > Thanks for helping.
> > http://localhost:7888/manager/html gives me the same HTTP 404 error.
> >
> >
> > On 11/30/05, Martin Gainty <[EMAIL PROTECTED]> wrote:
> > >
> > > Good Morning Blueberry
> > > if you go to http://localhost:8081/manager/html
> > > what happens when you Reload jsp-examples ?
> > > Martin-
> > > - Original Message -
> > > From: "blueberry lake" <[EMAIL PROTECTED]>
> > > To: 
> > > Sent: Wednesday, November 30, 2005 10:39 AM
> > > Subject: HTTP 404 error when mod_jk 1.2.15 connects apache 2.0.55 
> > > and tomcat
> > > 5.0.28 on unix
> > >
> > >
> > > Hi all,
> > >
> > > I installed apache 2.0.55, tomcat 5.0.28, and mod_jk 1.2.15 on a 
> > > solaris 5.9unix machine.
> > > Before I connected apache and tomcat, both of them work fine if I
> start
> > > them
> > > up as seperate servers.
> > > Mod_jk is complied from source code and mod_jk.so is copied to 
> > > apache/modules/
> > >
> > >
> > > The connected system gives me the tomcat welcome page for URL 
> > > http://localhost:7888/ ( I changed apache to listen to port 7888. 
> > > ), which seems fine. The problem is that when I access the URLs 
> > > like  http://localhost:7888/jsp-examples/, I got the following 
> > > error:
> > > =
> > > HTTP 404
> > >
> > > type Status report
> > >
> > > message /jsp-examples/
> > >
> > > description The requested resource (/jsp-examples/) is not
available.
> > >
> > > Apache/Tomcat 5.0.28
> > > ==
> > >
> > >
> > > For tomcat, I comment out the 8080 port (http) so that to make 
> > > sure it stops the http service and only handles the requests on 
> > > port 8009 from apache. That's the only modification I did in
> tomcat.
> > >
> > > For apache, I add workers.properties file and edit httpd.conf,
> both  in
> > > conf/ subdirectory.
> > > The workers.properties is like:
> > > ==
> > > workers.tomcat_home=/usr/local/jakarta-tomcat-5.0.28
> > > workers.java_home=/usr/j2sdk1.4.2_03
> > > ps=/
> > > worker.list=worker1
> > >
> > > worker.worker1.port=8009
> > > worker.worker1.host=localhost
> > > worker.worker1.type=ajp13
> > > worker.worker1.lbfactor=50
> > > ==
> > >
> > >
> > >
> > > The httpd.conf has the following modification:
> > > ===
>

Re: Re: HTTP 404 error when mod_jk 1.2.15 connects apache 2.0.55 and tomcat 5.0.28 on unix

[blueberry lake]

Finally, I found the problem is that port 8009 is already used by some other
application.   I used another port, then everything works fine.

Thank you both, martin and wapace!

btw, do you know how to check if a port number has been used in UNIX?

On 11/30/05, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
>
> And add a JkAutoAlias line to httpd.conf if you're not going to mount
> individual directories.
> >
> > From: "Martin Gainty" <[EMAIL PROTECTED]>
> > Date: 2005/11/30 Wed PM 02:53:22 EST
> > To: "Tomcat Users List" 
> > Subject: Re: HTTP 404 error when mod_jk 1.2.15 connects apache 2.0.55and 
> > tomcat
> 5.0.28 on unix
> >
> > Good Afternoon Blueberry-
> > I have some excerpts from
> > http://tomcat.apache.org/connectors-doc/howto/apache.html
> >
> > I would uninstall mod_jk, clean off the TOMCAT_HOME/conf/jk folder then
> > reinstall mod_jk 1.2.15
> > following the doc:
> >   If you've previously configured Apache to use mod_jserv, remove any
> > ApJServMount directives from your httpd.conf.
> >
> >   If you're including tomcat-apache.conf or tomcat.conf, you'll want to
> > remove them as well - they are specific to mod_jserv.
> >
> >   Remember The mod_jserv configuration directives are not compatible
> with
> > mod_jk !
> >
> > assuming your TOMCAT is properly installed and your
> > $TOMCAT_HOME/conf/server.xml has this entry
> > 
> >  > modJk="/path/to/mod_jk.so" />
> >   
> > where path specified by modJk is configured correctly (usually
> > /usr/lib/apache)
> >
> > be sure to turn on automatic config option in Apache configuration file
> > called httpd.conf
> > e.g.
> > #To be added at the end of your httpd.conf
> > Include /var/tomcat3/conf/jk/mod_jk.conf-auto
> >
> > Then restart Tomcat and mod_jk.conf should be automatically generated
> >
> > be sure to read the docs for proper installation procedure
> > HTH
> > Martin-
> > - Original Message -
> > From: "blueberry lake" <[EMAIL PROTECTED]>
> > To: "Tomcat Users List" ; "Martin Gainty"
> > <[EMAIL PROTECTED]>
> > Sent: Wednesday, November 30, 2005 1:19 PM
> > Subject: Re: HTTP 404 error when mod_jk 1.2.15 connects apache 2.0.55and
> > tomcat 5.0.28 on unix
> >
> >
> > Thanks for helping.
> > http://localhost:7888/manager/html gives me the same HTTP 404 error.
> >
> >
> > On 11/30/05, Martin Gainty <[EMAIL PROTECTED]> wrote:
> > >
> > > Good Morning Blueberry
> > > if you go to http://localhost:8081/manager/html
> > > what happens when you Reload jsp-examples ?
> > > Martin-
> > > - Original Message -
> > > From: "blueberry lake" <[EMAIL PROTECTED]>
> > > To: 
> > > Sent: Wednesday, November 30, 2005 10:39 AM
> > > Subject: HTTP 404 error when mod_jk 1.2.15 connects apache 2.0.55 and
> > > tomcat
> > > 5.0.28 on unix
> > >
> > >
> > > Hi all,
> > >
> > > I installed apache 2.0.55, tomcat 5.0.28, and mod_jk 1.2.15 on a
> > > solaris 5.9unix machine.
> > > Before I connected apache and tomcat, both of them work fine if I
> start
> > > them
> > > up as seperate servers.
> > > Mod_jk is complied from source code and mod_jk.so is copied to
> > > apache/modules/
> > >
> > >
> > > The connected system gives me the tomcat welcome page for URL
> > > http://localhost:7888/
> > > ( I changed apache to listen to port 7888. ), which seems fine. The
> > > problem
> > > is that when
> > > I access the URLs like  http://localhost:7888/jsp-examples/, I got the
> > > following error:
> > > =
> > > HTTP 404
> > >
> > > type Status report
> > >
> > > message /jsp-examples/
> > >
> > > description The requested resource (/jsp-examples/) is not available.
> > >
> > > Apache/Tomcat 5.0.28
> > > ==
> > >
> > >
> > > For tomcat, I comment out the 8080 port (http) so that to make sure it
> > > stops
> > > the http service and only handles the requests
> > > on port 8009 from apache. That's the only modification I did in
> tomcat.
> > >
> > > For apache, I add workers.properties file and edit httpd.conf,
> both  in
> > > conf/ subdirectory.
> > > The workers.properties is like:
> > > ==
> > > workers.tomcat_home=/usr/local/jakarta-tomcat-5.0.28
> > > workers.java_home=/usr/j2sdk1.4.2_03
> > > ps=/
> > > worker.list=worker1
> > >
> > > worker.worker1.port=8009
> > > worker.worker1.host=localhost
> > > worker.worker1.type=ajp13
> > > worker.worker1.lbfactor=50
> > > ==
> > >
> > >
> > >
> > > The httpd.conf has the following modification:
> > > ===
> > > #
> > > Listen 7888
> > >
> > > #
> > > LoadModulejk_module  modules/mod_jk.so
> > >
> > > #
> > > #config of mod_jk
> > > #
> > > JkWorkersFile /usr/local/apache2.0.55/conf/workers.properties
> > > JkLogFile /usr/local/jakarta-tomcat-5.0.28/logs/mod_jk.log
> > > JkLogLevelinfo
> > > JkLogStampFormat "[%a %b %d %H:%M:%S %Y] "
> > > JkOptions +ForwardKeySize +ForwardURICompat -ForwardDirectories
> > > JkRequestLogFormat "%w %V %T"
> 

Re: Deploying in ROOT folder using a war file

[Gautam Gothoskar]

Hi Mark,
  Thanks for the quick reply. But in doing the way you
have mentioned, tomcat does NOT expand the classes etc
in the ROOT folder. The application does get loaded
and work. I was wondering if there is any way that the
war file could be expanded in the ROOT folder?

regards,
Gautam.

--- Mark Thomas <[EMAIL PROTECTED]> wrote:

> Gautam Gothoskar wrote:
> 
> Options:
> - Name your web-app ROOT.war
> - Put your web-app outside the appbase and place a
> ROOT.xml in the appbase
> 
> Mark
> 
> > Hi!
> >   I have the following issue:
> >   I have a war file (myapp.war) which when
> deployed in
> > tomcat is accessible by using the url
> > http://localhost:8080/myapp. Tomcat creates a
> folder
> > called 'myapp' in the webapps directory. But I
> need to
> > configure the app in such a way that the the app
> is
> > accessible without any context path
> > (http://localhost:8080). This is possible if I
> copy
> > the expanded files from myapp folder into the ROOT
> > folder. But how do I tell tomcat to extract the
> files
> > into the ROOT folder instead of creating a 'myapp'
> > folder for deployment?
> >I tried using myapp.xml file in the webapps
> folder
> > and adding the following content to it:
> >
> >
> >What this does is it creates the myapp folder
> but
> > the application is accessible using both urls:
> > http://localhost:8080/myapp as well as
> > http://localhost:8080/. I also see that 2 servlet
> > instances are loaded in memory.
> > 
> >Any help will be appreciated.
> > 
> >  Thanks,
> >  Gautam.
> > 
> >
>
-
> > To unsubscribe, e-mail:
> [EMAIL PROTECTED]
> > For additional commands, e-mail:
> [EMAIL PROTECTED]
> > 
> > 
> 
> 
> 
>
-
> To unsubscribe, e-mail:
> [EMAIL PROTECTED]
> For additional commands, e-mail:
> [EMAIL PROTECTED]
> 
> 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Deploying in ROOT folder using a war file

[Mark Thomas]

Gautam Gothoskar wrote:

Options:
- Name your web-app ROOT.war
- Put your web-app outside the appbase and place a ROOT.xml in the appbase

Mark


Hi!
  I have the following issue:
  I have a war file (myapp.war) which when deployed in
tomcat is accessible by using the url
http://localhost:8080/myapp. Tomcat creates a folder
called 'myapp' in the webapps directory. But I need to
configure the app in such a way that the the app is
accessible without any context path
(http://localhost:8080). This is possible if I copy
the expanded files from myapp folder into the ROOT
folder. But how do I tell tomcat to extract the files
into the ROOT folder instead of creating a 'myapp'
folder for deployment?
   I tried using myapp.xml file in the webapps folder
and adding the following content to it:
   
   
   What this does is it creates the myapp folder but
the application is accessible using both urls:
http://localhost:8080/myapp as well as
http://localhost:8080/. I also see that 2 servlet
instances are loaded in memory.

   Any help will be appreciated.

 Thanks,
 Gautam.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]






-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Deploying in ROOT folder using a war file

[Gautam Gothoskar]

Hi!
  I have the following issue:
  I have a war file (myapp.war) which when deployed in
tomcat is accessible by using the url
http://localhost:8080/myapp. Tomcat creates a folder
called 'myapp' in the webapps directory. But I need to
configure the app in such a way that the the app is
accessible without any context path
(http://localhost:8080). This is possible if I copy
the expanded files from myapp folder into the ROOT
folder. But how do I tell tomcat to extract the files
into the ROOT folder instead of creating a 'myapp'
folder for deployment?
   I tried using myapp.xml file in the webapps folder
and adding the following content to it:
   
   
   What this does is it creates the myapp folder but
the application is accessible using both urls:
http://localhost:8080/myapp as well as
http://localhost:8080/. I also see that 2 servlet
instances are loaded in memory.

   Any help will be appreciated.

 Thanks,
 Gautam.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Problems with Mod JK (Apache 2.052 and Tomcat 5.5.9)

[Luka Andrejasic]

I tried your version and I tried deleting acceptCount and className out of 
the connector settings and nothing has changed. I am still getting the Error 
500, when trying to access "server.domain.com". Other apache only virtual 
domains work without problems.


The error log still says :
[Wed Nov 30 14:34:42 2005] [info]  jk_handler::mod_jk.c (1993): Could not 
find a worker for worker name=ajp13w


What else could it be?

Thanks,
Luka

- Original Message - 
From: "Duan, Nick" <[EMAIL PROTECTED]>

To: "Tomcat Users List" 
Sent: Wednesday, November 30, 2005 8:45 PM
Subject: RE: Problems with Mod JK (Apache 2.052 and Tomcat 5.5.9)


I see.  It still looks like a connector configuration problem.  It seems
that your connector config was using an older format, not the one for
5.5.  For instance, the acceptCount and className shouldn't be part of
the AJP connector setting.

You may want to try the one I posted or configure one according to
http://tomcat.apache.org/tomcat-5.5-doc/config/ajp.html

ND

-Original Message-
From: Luka Andrejasic [mailto:[EMAIL PROTECTED]
Sent: Wednesday, November 30, 2005 11:37 AM
To: Tomcat Users List
Subject: Re: Problems with Mod JK (Apache 2.052 and Tomcat 5.5.9)

Thanks for the assistance Nick.

I think the connector is alreary defined in the current configuration.
Perhaps you overlooked that line :

   

Should I delete this one and try yours? The same error occured when they

were placed side by side (yours on top).

Thanks for helping.

Luka

- Original Message - 
From: "Duan, Nick" <[EMAIL PROTECTED]>

To: "Tomcat Users List" 
Sent: Wednesday, November 30, 2005 3:58 PM
Subject: RE: Problems with Mod JK (Apache 2.052 and Tomcat 5.5.9)


Well, the log msg is complaining about not able to find the worker.
Apparently your tomcat wasn't configured for listening to ajp13 request
from httpd.  A connector entry for ajp13 should be added to server.xml
file.  At least it was not listed in your email.

   
   

ND

-Original Message-
From: Luka Andrejasic [mailto:[EMAIL PROTECTED]
Sent: Tuesday, November 29, 2005 9:24 PM
To: Tomcat Users List
Subject: Re: Problems with Mod JK (Apache 2.052 and Tomcat 5.5.9)

"I remember workers.properties is  located in apache/conf/, the same
directory with httpd.conf.."
The file workers.properties is located under Tomcat`s conf directory,
not
Apache`s.

In workers.properties I only have the following and that should be
enough :
worker.list=ajp13w
worker.ajp13w.port=8009
worker.ajp13w.host=localhost
worker.ajp13w.type=ajp13
worker.ajp13w.cachesize=10
worker.ajp13w.cache_timeout=1200
worker.ajp13w.socket_timeout=3600

Any other idea what else it might be?

Thanks for the reply and trying to help.

Luka

- Original Message - 
From: "blueberry lake" <[EMAIL PROTECTED]>

To: "Tomcat Users List" 
Sent: Wednesday, November 30, 2005 3:06 AM
Subject: Re: Problems with Mod JK (Apache 2.052 and Tomcat 5.5.9)


Since I am a new user of mod_jk, please correct me if I am wrong.

In your apache httpd.conf, you set:
"JkWorkersFile "/var/tomcat/conf/workers.properties"
I remember workers.properties is  located in apache/conf/, the same
directory with httpd.conf..

And, do you indicate the location of tomcat in workers.properties, such
as
workers.tomcat_home=/.../tomcat/?

-b

On 11/29/05, Luka Andrejasic <[EMAIL PROTECTED]> wrote:


Hello guys,

I am trying to figure this one out for weeks. Nothing seems to work

and I

am running out of ideas. The problem seems to be with Mod JK, as

Apache

and
Tomcat work without problems on their own.

Below are all the main configuration files, as well as the error log

(at

the bottom) :

// System Configuration :

- OS : RedHat Linux ES 4.0 (2.6.9-22.0.1)
- Apache : 2.0.52
- Tomcat : 5.5.9
- MySQL : 4.1.12
- Mod JK : 1.2.15




// Mod JK Installation :

   tar -xzf jakarta-tomcat-connectors-jk-1.2.15-src.tar.gz
   cd jakarta-tomcat-connectors-jk-1.2.15-src
   cd jk
   cd native
   ./buildconf.sh
   ./configure --enable-EAPI --with-apxs=/usr/sbin/apxs
   make
   make install

   cp ./apache-2.0/mod_jk.so /etc/httpd/modules




// Apache Virtual Domains :

NameVirtualHost *:80



   ServerAdmin [EMAIL PROTECTED]
   DocumentRoot /var/tomcat/webapps/ROOT
   ServerName domain.com
   ServerAlias server.domain.com
   ErrorLog /home/virtual/domain.com/logs/error_log
   CustomLog /home/virtual/domain.com/logs/access_log combined

   
   Options Indexes FollowSymLinks
   DirectoryIndex index.jsp index.html index.htm

 
   AllowOverride None
   deny from all
 

 
   AllowOverride None
   deny from all
 

 JkWorkersFile "/var/tomcat/conf/workers.properties"
 JkShmFile "/var/tomcat/conf/shm.file"
 JkLogFile /var/tomcat/logs/mod_jk.txt
 JkLogLevel info
 JkAutoAlias /var/tomcat/webapps/ROOT

 JkMount /backup/*  ajp13w
 JkMount /config/*  ajp13w
 JkMount /files/*  ajp13w
 JkMount /logs/*  ajp13w
 JkMount /servlet/*  ajp13w

Re: Need More Error Logs .. How to

[Martin Gainty]

Good Afternoon Scott-

Following Matt Raibles how to implement SSL page at 
http://raibledesigns.com/wiki/Wiki.jsp?page=ApacheSSL


in httpd.conf after all the SSL config statements you should see
ErrorLog logs/ssl.log
LogLevel info
# You can later change "info" to "warn" if everything is OK

HTH,
M-




- Original Message - 
From: "Scott Purcell" <[EMAIL PROTECTED]>

To: 
Sent: Wednesday, November 30, 2005 2:06 PM
Subject: Need More Error Logs .. How to


I am trying to get SSL running on Tomcat 5.5.12 on XP. As I am playing 
around, trying different server.xml changes, I am trying to find some type 
of log to help assist me in what is not working. Anyway, it is a new Tomcat 
install, and under $TOMCAT_HOME/logs I see stderr, stdout and some localhost 
file. Problem is, I am not seeing any errors when trying to use the "https" 
protocol. A lot of threads describe errors from Tomcat with bad Keystores, 
or Passwords, but I am not seeing any "system" type errors.


Is there a way to turn-up Tomcats internal logging so I can see these types 
of logs, so I can try and get my ssl problem resolved? PS I have been 
tailing each of the log files available uneder logs, and there are no 
indicators of my problem.



Regards
Scott



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Re: HTTP 404 error when mod_jk 1.2.15 connects apache 2.0.55 and tomcat 5.0.28 on unix

[wapace]

And add a JkAutoAlias line to httpd.conf if you're not going to mount 
individual directories.
> 
> From: "Martin Gainty" <[EMAIL PROTECTED]>
> Date: 2005/11/30 Wed PM 02:53:22 EST
> To: "Tomcat Users List" 
> Subject: Re: HTTP 404 error when mod_jk 1.2.15 connects apache 2.0.55 and 
> tomcat 5.0.28 on unix
> 
> Good Afternoon Blueberry-
> I have some excerpts from 
> http://tomcat.apache.org/connectors-doc/howto/apache.html
> 
> I would uninstall mod_jk, clean off the TOMCAT_HOME/conf/jk folder then 
> reinstall mod_jk 1.2.15
> following the doc:
>   If you've previously configured Apache to use mod_jserv, remove any 
> ApJServMount directives from your httpd.conf.
> 
>   If you're including tomcat-apache.conf or tomcat.conf, you'll want to 
> remove them as well - they are specific to mod_jserv.
> 
>   Remember The mod_jserv configuration directives are not compatible with 
> mod_jk !
> 
> assuming your TOMCAT is properly installed and your 
> $TOMCAT_HOME/conf/server.xml has this entry
> 
>  modJk="/path/to/mod_jk.so" />
>   
> where path specified by modJk is configured correctly (usually 
> /usr/lib/apache)
> 
> be sure to turn on automatic config option in Apache configuration file 
> called httpd.conf
> e.g.
> #To be added at the end of your httpd.conf
> Include /var/tomcat3/conf/jk/mod_jk.conf-auto
> 
> Then restart Tomcat and mod_jk.conf should be automatically generated
> 
> be sure to read the docs for proper installation procedure
> HTH
> Martin-
> - Original Message - 
> From: "blueberry lake" <[EMAIL PROTECTED]>
> To: "Tomcat Users List" ; "Martin Gainty" 
> <[EMAIL PROTECTED]>
> Sent: Wednesday, November 30, 2005 1:19 PM
> Subject: Re: HTTP 404 error when mod_jk 1.2.15 connects apache 2.0.55 and 
> tomcat 5.0.28 on unix
> 
> 
> Thanks for helping.
> http://localhost:7888/manager/html gives me the same HTTP 404 error.
> 
> 
> On 11/30/05, Martin Gainty <[EMAIL PROTECTED]> wrote:
> >
> > Good Morning Blueberry
> > if you go to http://localhost:8081/manager/html
> > what happens when you Reload jsp-examples ?
> > Martin-
> > - Original Message -
> > From: "blueberry lake" <[EMAIL PROTECTED]>
> > To: 
> > Sent: Wednesday, November 30, 2005 10:39 AM
> > Subject: HTTP 404 error when mod_jk 1.2.15 connects apache 2.0.55 and
> > tomcat
> > 5.0.28 on unix
> >
> >
> > Hi all,
> >
> > I installed apache 2.0.55, tomcat 5.0.28, and mod_jk 1.2.15 on a
> > solaris 5.9unix machine.
> > Before I connected apache and tomcat, both of them work fine if I start
> > them
> > up as seperate servers.
> > Mod_jk is complied from source code and mod_jk.so is copied to
> > apache/modules/
> >
> >
> > The connected system gives me the tomcat welcome page for URL
> > http://localhost:7888/
> > ( I changed apache to listen to port 7888. ), which seems fine. The
> > problem
> > is that when
> > I access the URLs like  http://localhost:7888/jsp-examples/, I got the
> > following error:
> > =
> > HTTP 404
> >
> > type Status report
> >
> > message /jsp-examples/
> >
> > description The requested resource (/jsp-examples/) is not available.
> >
> > Apache/Tomcat 5.0.28
> > ==
> >
> >
> > For tomcat, I comment out the 8080 port (http) so that to make sure it
> > stops
> > the http service and only handles the requests
> > on port 8009 from apache. That's the only modification I did in tomcat.
> >
> > For apache, I add workers.properties file and edit httpd.conf, both  in
> > conf/ subdirectory.
> > The workers.properties is like:
> > ==
> > workers.tomcat_home=/usr/local/jakarta-tomcat-5.0.28
> > workers.java_home=/usr/j2sdk1.4.2_03
> > ps=/
> > worker.list=worker1
> >
> > worker.worker1.port=8009
> > worker.worker1.host=localhost
> > worker.worker1.type=ajp13
> > worker.worker1.lbfactor=50
> > ==
> >
> >
> >
> > The httpd.conf has the following modification:
> > ===
> > #
> > Listen 7888
> >
> > #
> > LoadModulejk_module  modules/mod_jk.so
> >
> > #
> > #config of mod_jk
> > #
> > JkWorkersFile /usr/local/apache2.0.55/conf/workers.properties
> > JkLogFile /usr/local/jakarta-tomcat-5.0.28/logs/mod_jk.log
> > JkLogLevelinfo
> > JkLogStampFormat "[%a %b %d %H:%M:%S %Y] "
> > JkOptions +ForwardKeySize +ForwardURICompat -ForwardDirectories
> > JkRequestLogFormat "%w %V %T"
> > #
> > JkMount  /*  worker1
> > JkMount  /*/*  worker1
> > JkMount  /*/*/*  worker1
> > JkMount  /*/*/*/*  worker1
> > #
> > # End of mod_jk
> >
> >
> > Also the log files seem don't give me much useful info, for example, the
> > mod_jk.log file has the following line:
> > [Tue Nov 29 15:33:54 2005] worker1 [localhost] 0.089465
> >
> > ANy suggestions are overwelcome!
> >
> > -b
> >
> > -
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> >
> >
> 
> ---

Re: HTTP 404 error when mod_jk 1.2.15 connects apache 2.0.55 and tomcat 5.0.28 on unix

[Martin Gainty]

Good Afternoon Blueberry-
I have some excerpts from 
http://tomcat.apache.org/connectors-doc/howto/apache.html


I would uninstall mod_jk, clean off the TOMCAT_HOME/conf/jk folder then 
reinstall mod_jk 1.2.15

following the doc:
 If you've previously configured Apache to use mod_jserv, remove any 
ApJServMount directives from your httpd.conf.


 If you're including tomcat-apache.conf or tomcat.conf, you'll want to 
remove them as well - they are specific to mod_jserv.


 Remember The mod_jserv configuration directives are not compatible with 
mod_jk !


assuming your TOMCAT is properly installed and your 
$TOMCAT_HOME/conf/server.xml has this entry


   modJk="/path/to/mod_jk.so" />

 
where path specified by modJk is configured correctly (usually 
/usr/lib/apache)


be sure to turn on automatic config option in Apache configuration file 
called httpd.conf

e.g.
#To be added at the end of your httpd.conf
   Include /var/tomcat3/conf/jk/mod_jk.conf-auto

Then restart Tomcat and mod_jk.conf should be automatically generated

be sure to read the docs for proper installation procedure
HTH
Martin-
- Original Message - 
From: "blueberry lake" <[EMAIL PROTECTED]>
To: "Tomcat Users List" ; "Martin Gainty" 
<[EMAIL PROTECTED]>

Sent: Wednesday, November 30, 2005 1:19 PM
Subject: Re: HTTP 404 error when mod_jk 1.2.15 connects apache 2.0.55 and 
tomcat 5.0.28 on unix



Thanks for helping.
http://localhost:7888/manager/html gives me the same HTTP 404 error.


On 11/30/05, Martin Gainty <[EMAIL PROTECTED]> wrote:


Good Morning Blueberry
if you go to http://localhost:8081/manager/html
what happens when you Reload jsp-examples ?
Martin-
- Original Message -
From: "blueberry lake" <[EMAIL PROTECTED]>
To: 
Sent: Wednesday, November 30, 2005 10:39 AM
Subject: HTTP 404 error when mod_jk 1.2.15 connects apache 2.0.55 and
tomcat
5.0.28 on unix


Hi all,

I installed apache 2.0.55, tomcat 5.0.28, and mod_jk 1.2.15 on a
solaris 5.9unix machine.
Before I connected apache and tomcat, both of them work fine if I start
them
up as seperate servers.
Mod_jk is complied from source code and mod_jk.so is copied to
apache/modules/


The connected system gives me the tomcat welcome page for URL
http://localhost:7888/
( I changed apache to listen to port 7888. ), which seems fine. The
problem
is that when
I access the URLs like  http://localhost:7888/jsp-examples/, I got the
following error:
=
HTTP 404

type Status report

message /jsp-examples/

description The requested resource (/jsp-examples/) is not available.

Apache/Tomcat 5.0.28
==


For tomcat, I comment out the 8080 port (http) so that to make sure it
stops
the http service and only handles the requests
on port 8009 from apache. That's the only modification I did in tomcat.

For apache, I add workers.properties file and edit httpd.conf, both  in
conf/ subdirectory.
The workers.properties is like:
==
workers.tomcat_home=/usr/local/jakarta-tomcat-5.0.28
workers.java_home=/usr/j2sdk1.4.2_03
ps=/
worker.list=worker1

worker.worker1.port=8009
worker.worker1.host=localhost
worker.worker1.type=ajp13
worker.worker1.lbfactor=50
==



The httpd.conf has the following modification:
===
#
Listen 7888

#
LoadModulejk_module  modules/mod_jk.so

#
#config of mod_jk
#
JkWorkersFile /usr/local/apache2.0.55/conf/workers.properties
JkLogFile /usr/local/jakarta-tomcat-5.0.28/logs/mod_jk.log
JkLogLevelinfo
JkLogStampFormat "[%a %b %d %H:%M:%S %Y] "
JkOptions +ForwardKeySize +ForwardURICompat -ForwardDirectories
JkRequestLogFormat "%w %V %T"
#
JkMount  /*  worker1
JkMount  /*/*  worker1
JkMount  /*/*/*  worker1
JkMount  /*/*/*/*  worker1
#
# End of mod_jk


Also the log files seem don't give me much useful info, for example, the
mod_jk.log file has the following line:
[Tue Nov 29 15:33:54 2005] worker1 [localhost] 0.089465

ANy suggestions are overwelcome!

-b

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Certificate Revocation Lists in Tomcat 5.5

[Kennedy Roberts]

Martin,

Thanks again for you input.  The reason I ask about "quirks" is because I 
have seen examples using crlFiles (not the 's') rather than crlFile.  The 
value for this parameter then used a wildcard to point to all of the files 
in a certain directory.  Have you seen it used like this?


And just to clarify: once I do have a CRL, if I point to it in this manner, 
and also have client authentication enabled, I should be barred from 
accessing the site with a revoked certificate, correct?


Thanks,

Kennedy


- Original Message - 
From: "Martin Dubuc" <[EMAIL PROTECTED]>

To: "Tomcat Users List" 
Sent: Wednesday, November 30, 2005 2:45 PM
Subject: Re: Certificate Revocation Lists in Tomcat 5.5



1) crlFile is a standard parameter for Connector since
Tomcat 5.5.10 if my recollection is right.

2) There are no quirks in using it.

Martin

--- Kennedy Roberts <[EMAIL PROTECTED]> wrote:


After doing some research, I have found a few
examples of
{tomcat.home}/conf/server.xml files online that use
the "crlFiles" param as
part of a connector.  Is this a standard parameter
that can be used in the
server.xml file?  I ask because the sites where I
have found these examples
are not clear in whether this is some "added"
functionality.  The reason I
don't try it out myself is because at this point I
don't have a CRL which
contains any of the certificates we use in our
development environment.

To summarize:

1)  Is the crlFiles param a standard 
element?

2) Has (does) anyone use this param, and are there
any quirks to using it.

Thanks,

Kennedy


- Original Message - 
From: "Martin Dubuc" <[EMAIL PROTECTED]>

To: "Tomcat Users List" 
Sent: Tuesday, November 29, 2005 3:11 PM
Subject: RE: Certificate Revocation Lists in Tomcat
5.5


> CRL support is present in Tomcat 5.5.12.
>
> I am not an expert on Tomcat CRL support but what
I
> know is the following:
>
> - You will need to recompile some of the
> tomcat-util.jar classes with JDK 1.5 because
Tomcat
> 5.5.12 was compiled with JDK 1.4. The classes to
be
> recompiled are:
> org.apache.tomcat.util.net.jsse.JSSE15Factory and
>
org.apache.tomcat.util.net.jsse.JSSE15SocketFactory
> classes.
> - The crlFile property needs to be added inside
your
> SSL Connector in the server.xml file. The value is
the
> location of the CRL file on your system.
>
> Regards,
>
> Martin
>
> --- "Duan, Nick" <[EMAIL PROTECTED]>
wrote:
>
>> Tomcat currently doesn't support cert validation
>> against CRL.  You may
>> want to use Apache's mod_ssl to do the CRL
checking.
>>  You will have to
>> use mod_jk to connect Apache web server with
tomcat.
>>
>> SSL is very computational intensive.  Use
Apache's
>> httpd to do the SSL
>> work is more efficient than to use Java-based
>> tomcat.
>>
>> ND
>>
>> -Original Message-
>> From: Kennedy Roberts
[mailto:[EMAIL PROTECTED]
>> Sent: Tuesday, November 29, 2005 10:55 AM
>> To: users@tomcat.apache.org
>> Subject: Certificate Revocation Lists in Tomcat
5.5
>>
>> Hi all,
>>
>> We've recently migrated our (SSL enabled) web
>> application from
>> SunOne to
>> Tomcat 5.5, and I can't find any information on
>> handling Certificate
>> Revocation Lists in Tomcat.  In SunOne, there was
a
>> function in the
>> administration console that let you import a CRL.
>> Is there any
>> equivalent
>> in Tomcat, or perhaps some other command line
>> equivalent?
>>
>> Thanks for your help.
>>
>> -Kennedy
>>
>>
>>
>


-

>> To unsubscribe, e-mail:
>> [EMAIL PROTECTED]
>> For additional commands, e-mail:
>> [EMAIL PROTECTED]
>>
>>
>>
>


-

>> To unsubscribe, e-mail:
>> [EMAIL PROTECTED]
>> For additional commands, e-mail:
>> [EMAIL PROTECTED]
>>
>>
>
>
>
>
>
> __
> Yahoo! Mail - PC Magazine Editors' Choice 2005
> http://mail.yahoo.com
>
>


-

> To unsubscribe, e-mail:
[EMAIL PROTECTED]
> For additional commands, e-mail:
[EMAIL PROTECTED]
>




-

To unsubscribe, e-mail:
[EMAIL PROTECTED]
For additional commands, e-mail:
[EMAIL PROTECTED]








__
Yahoo! Mail - PC Magazine Editors' Choice 2005
http://mail.yahoo.com

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Certificate Revocation Lists in Tomcat 5.5

[Martin Dubuc]

1) crlFile is a standard parameter for Connector since
Tomcat 5.5.10 if my recollection is right.

2) There are no quirks in using it.

Martin

--- Kennedy Roberts <[EMAIL PROTECTED]> wrote:

> After doing some research, I have found a few
> examples of 
> {tomcat.home}/conf/server.xml files online that use
> the "crlFiles" param as 
> part of a connector.  Is this a standard parameter
> that can be used in the 
> server.xml file?  I ask because the sites where I
> have found these examples 
> are not clear in whether this is some "added"
> functionality.  The reason I 
> don't try it out myself is because at this point I
> don't have a CRL which 
> contains any of the certificates we use in our
> development environment.
> 
> To summarize:
> 
> 1)  Is the crlFiles param a standard 
> element?
> 
> 2) Has (does) anyone use this param, and are there
> any quirks to using it.
> 
> Thanks,
> 
> Kennedy
> 
> 
> - Original Message - 
> From: "Martin Dubuc" <[EMAIL PROTECTED]>
> To: "Tomcat Users List" 
> Sent: Tuesday, November 29, 2005 3:11 PM
> Subject: RE: Certificate Revocation Lists in Tomcat
> 5.5
> 
> 
> > CRL support is present in Tomcat 5.5.12.
> >
> > I am not an expert on Tomcat CRL support but what
> I
> > know is the following:
> >
> > - You will need to recompile some of the
> > tomcat-util.jar classes with JDK 1.5 because
> Tomcat
> > 5.5.12 was compiled with JDK 1.4. The classes to
> be
> > recompiled are:
> > org.apache.tomcat.util.net.jsse.JSSE15Factory and
> >
> org.apache.tomcat.util.net.jsse.JSSE15SocketFactory
> > classes.
> > - The crlFile property needs to be added inside
> your
> > SSL Connector in the server.xml file. The value is
> the
> > location of the CRL file on your system.
> >
> > Regards,
> >
> > Martin
> >
> > --- "Duan, Nick" <[EMAIL PROTECTED]>
> wrote:
> >
> >> Tomcat currently doesn't support cert validation
> >> against CRL.  You may
> >> want to use Apache's mod_ssl to do the CRL
> checking.
> >>  You will have to
> >> use mod_jk to connect Apache web server with
> tomcat.
> >>
> >> SSL is very computational intensive.  Use
> Apache's
> >> httpd to do the SSL
> >> work is more efficient than to use Java-based
> >> tomcat.
> >>
> >> ND
> >>
> >> -Original Message-
> >> From: Kennedy Roberts
> [mailto:[EMAIL PROTECTED]
> >> Sent: Tuesday, November 29, 2005 10:55 AM
> >> To: users@tomcat.apache.org
> >> Subject: Certificate Revocation Lists in Tomcat
> 5.5
> >>
> >> Hi all,
> >>
> >> We've recently migrated our (SSL enabled) web
> >> application from
> >> SunOne to
> >> Tomcat 5.5, and I can't find any information on
> >> handling Certificate
> >> Revocation Lists in Tomcat.  In SunOne, there was
> a
> >> function in the
> >> administration console that let you import a CRL.
> >> Is there any
> >> equivalent
> >> in Tomcat, or perhaps some other command line
> >> equivalent?
> >>
> >> Thanks for your help.
> >>
> >> -Kennedy
> >>
> >>
> >>
> >
>
-
> >> To unsubscribe, e-mail:
> >> [EMAIL PROTECTED]
> >> For additional commands, e-mail:
> >> [EMAIL PROTECTED]
> >>
> >>
> >>
> >
>
-
> >> To unsubscribe, e-mail:
> >> [EMAIL PROTECTED]
> >> For additional commands, e-mail:
> >> [EMAIL PROTECTED]
> >>
> >>
> >
> >
> >
> >
> >
> > __
> > Yahoo! Mail - PC Magazine Editors' Choice 2005
> > http://mail.yahoo.com
> >
> >
>
-
> > To unsubscribe, e-mail:
> [EMAIL PROTECTED]
> > For additional commands, e-mail:
> [EMAIL PROTECTED]
> > 
> 
> 
>
-
> To unsubscribe, e-mail:
> [EMAIL PROTECTED]
> For additional commands, e-mail:
> [EMAIL PROTECTED]
> 
> 





__ 
Yahoo! Mail - PC Magazine Editors' Choice 2005 
http://mail.yahoo.com

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: Problems with Mod JK (Apache 2.052 and Tomcat 5.5.9)

[Duan, Nick]

I see.  It still looks like a connector configuration problem.  It seems
that your connector config was using an older format, not the one for
5.5.  For instance, the acceptCount and className shouldn't be part of
the AJP connector setting.

You may want to try the one I posted or configure one according to
http://tomcat.apache.org/tomcat-5.5-doc/config/ajp.html

ND

-Original Message-
From: Luka Andrejasic [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, November 30, 2005 11:37 AM
To: Tomcat Users List
Subject: Re: Problems with Mod JK (Apache 2.052 and Tomcat 5.5.9)

Thanks for the assistance Nick.

I think the connector is alreary defined in the current configuration. 
Perhaps you overlooked that line :



Should I delete this one and try yours? The same error occured when they

were placed side by side (yours on top).

Thanks for helping.

Luka

- Original Message - 
From: "Duan, Nick" <[EMAIL PROTECTED]>
To: "Tomcat Users List" 
Sent: Wednesday, November 30, 2005 3:58 PM
Subject: RE: Problems with Mod JK (Apache 2.052 and Tomcat 5.5.9)


Well, the log msg is complaining about not able to find the worker.
Apparently your tomcat wasn't configured for listening to ajp13 request
from httpd.  A connector entry for ajp13 should be added to server.xml
file.  At least it was not listed in your email.




ND

-Original Message-
From: Luka Andrejasic [mailto:[EMAIL PROTECTED]
Sent: Tuesday, November 29, 2005 9:24 PM
To: Tomcat Users List
Subject: Re: Problems with Mod JK (Apache 2.052 and Tomcat 5.5.9)

"I remember workers.properties is  located in apache/conf/, the same
directory with httpd.conf.."
The file workers.properties is located under Tomcat`s conf directory,
not
Apache`s.

In workers.properties I only have the following and that should be
enough :
worker.list=ajp13w
worker.ajp13w.port=8009
worker.ajp13w.host=localhost
worker.ajp13w.type=ajp13
worker.ajp13w.cachesize=10
worker.ajp13w.cache_timeout=1200
worker.ajp13w.socket_timeout=3600

Any other idea what else it might be?

Thanks for the reply and trying to help.

Luka

- Original Message - 
From: "blueberry lake" <[EMAIL PROTECTED]>
To: "Tomcat Users List" 
Sent: Wednesday, November 30, 2005 3:06 AM
Subject: Re: Problems with Mod JK (Apache 2.052 and Tomcat 5.5.9)


Since I am a new user of mod_jk, please correct me if I am wrong.

In your apache httpd.conf, you set:
 "JkWorkersFile "/var/tomcat/conf/workers.properties"
I remember workers.properties is  located in apache/conf/, the same
directory with httpd.conf..

And, do you indicate the location of tomcat in workers.properties, such
as
workers.tomcat_home=/.../tomcat/?

-b

On 11/29/05, Luka Andrejasic <[EMAIL PROTECTED]> wrote:
>
> Hello guys,
>
> I am trying to figure this one out for weeks. Nothing seems to work
and I
> am running out of ideas. The problem seems to be with Mod JK, as
Apache
> and
> Tomcat work without problems on their own.
>
> Below are all the main configuration files, as well as the error log
(at
> the bottom) :
>
> // System Configuration :
>
> - OS : RedHat Linux ES 4.0 (2.6.9-22.0.1)
> - Apache : 2.0.52
> - Tomcat : 5.5.9
> - MySQL : 4.1.12
> - Mod JK : 1.2.15
>
>
>
>
> // Mod JK Installation :
>
>tar -xzf jakarta-tomcat-connectors-jk-1.2.15-src.tar.gz
>cd jakarta-tomcat-connectors-jk-1.2.15-src
>cd jk
>cd native
>./buildconf.sh
>./configure --enable-EAPI --with-apxs=/usr/sbin/apxs
>make
>make install
>
>cp ./apache-2.0/mod_jk.so /etc/httpd/modules
>
>
>
>
> // Apache Virtual Domains :
>
> NameVirtualHost *:80
>
>
> 
>ServerAdmin [EMAIL PROTECTED]
>DocumentRoot /var/tomcat/webapps/ROOT
>ServerName domain.com
>ServerAlias server.domain.com
>ErrorLog /home/virtual/domain.com/logs/error_log
>CustomLog /home/virtual/domain.com/logs/access_log combined
>
>
>Options Indexes FollowSymLinks
>DirectoryIndex index.jsp index.html index.htm
>
>  
>AllowOverride None
>deny from all
>  
>
>  
>AllowOverride None
>deny from all
>  
>
>  JkWorkersFile "/var/tomcat/conf/workers.properties"
>  JkShmFile "/var/tomcat/conf/shm.file"
>  JkLogFile /var/tomcat/logs/mod_jk.txt
>  JkLogLevel info
>  JkAutoAlias /var/tomcat/webapps/ROOT
>
>  JkMount /backup/*  ajp13w
>  JkMount /config/*  ajp13w
>  JkMount /files/*  ajp13w
>  JkMount /logs/*  ajp13w
>  JkMount /servlet/*  ajp13w
>  JkMount /sql/*  ajp13w
>  JkMount /temp/*  ajp13w
>  JkMount /*.jsp  ajp13w
>
>
> 
>
>
>
>
> // File server.xml :
>
>  debug="0"
> port="8005"
> shutdown="SHUTDOWN">
>
>debug="0"/>
>
>debug="0"/>
>
>debug="0"/>
>
>   
>auth="Container"
>   type="org.apache.catalina.UserDatabase"
>   description="User database that can be updated and
saved"
>
factory="org.apache.catalina.users.Memory

Re: confusion of tomcat downloading

[Mark Thomas]

blueberry lake wrote:

On page http://tomcat.apache.org/download-55.cgi, there are several choices
for tomcat 5.x, like core, deployer, embedded, admin web application, etc.,
can anyone explain berifly what their difference are?
Thanks.



There is a read me file right above the downloads links on the 5.5.x 
downloads page that answers this very question.


Mark


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Certificate Revocation Lists in Tomcat 5.5

[Kennedy Roberts]

After doing some research, I have found a few examples of 
{tomcat.home}/conf/server.xml files online that use the "crlFiles" param as 
part of a connector.  Is this a standard parameter that can be used in the 
server.xml file?  I ask because the sites where I have found these examples 
are not clear in whether this is some "added" functionality.  The reason I 
don't try it out myself is because at this point I don't have a CRL which 
contains any of the certificates we use in our development environment.


To summarize:

1)  Is the crlFiles param a standard  element?

2) Has (does) anyone use this param, and are there any quirks to using it.

Thanks,

Kennedy


- Original Message - 
From: "Martin Dubuc" <[EMAIL PROTECTED]>

To: "Tomcat Users List" 
Sent: Tuesday, November 29, 2005 3:11 PM
Subject: RE: Certificate Revocation Lists in Tomcat 5.5



CRL support is present in Tomcat 5.5.12.

I am not an expert on Tomcat CRL support but what I
know is the following:

- You will need to recompile some of the
tomcat-util.jar classes with JDK 1.5 because Tomcat
5.5.12 was compiled with JDK 1.4. The classes to be
recompiled are:
org.apache.tomcat.util.net.jsse.JSSE15Factory and
org.apache.tomcat.util.net.jsse.JSSE15SocketFactory
classes.
- The crlFile property needs to be added inside your
SSL Connector in the server.xml file. The value is the
location of the CRL file on your system.

Regards,

Martin

--- "Duan, Nick" <[EMAIL PROTECTED]> wrote:


Tomcat currently doesn't support cert validation
against CRL.  You may
want to use Apache's mod_ssl to do the CRL checking.
 You will have to
use mod_jk to connect Apache web server with tomcat.

SSL is very computational intensive.  Use Apache's
httpd to do the SSL
work is more efficient than to use Java-based
tomcat.

ND

-Original Message-
From: Kennedy Roberts [mailto:[EMAIL PROTECTED]
Sent: Tuesday, November 29, 2005 10:55 AM
To: users@tomcat.apache.org
Subject: Certificate Revocation Lists in Tomcat 5.5

Hi all,

We've recently migrated our (SSL enabled) web
application from
SunOne to
Tomcat 5.5, and I can't find any information on
handling Certificate
Revocation Lists in Tomcat.  In SunOne, there was a
function in the
administration console that let you import a CRL.
Is there any
equivalent
in Tomcat, or perhaps some other command line
equivalent?

Thanks for your help.

-Kennedy




-

To unsubscribe, e-mail:
[EMAIL PROTECTED]
For additional commands, e-mail:
[EMAIL PROTECTED]




-

To unsubscribe, e-mail:
[EMAIL PROTECTED]
For additional commands, e-mail:
[EMAIL PROTECTED]








__
Yahoo! Mail - PC Magazine Editors' Choice 2005
http://mail.yahoo.com

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: How to deploy my webapp as root context webapp without tomcat loading it twice?

[Mark Thomas]

Vivek Mohan wrote:

Question:

I want to have myWebapp as the root context webapp in my tomcat
server. And I don't want to rename it to "ROOT". Is there a way by
which I can avoid tomcat from loading myWebapp twice?


Options:
- Don't put it in the appbase directory.
- Turn off autoDeploy
- Live with renaming it to ROOT

Mark


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: SSL Certificate Beginner Question

[David Wall]

I did not include a security constraint.
Is this needed for SSL? I spend some time looking at this element, and I was under the impression that it was for form authentication? 
 

You don't really need it for SSL testing, but you'd want to do it in 
your production world because it basically instructs Tomcat to FORCE SSL 
to be used when going to a given URL-pattern (that portion of your web 
app that requires https).  That is, if the user accesses your site with 
http://, the port 80 Connector (or 8080 if testing or using a 
non-standard port) has a "redirectPort" element that causes Tomcat to 
automatically issue a redirect using https:// (in production, this 
is typically set to redirectPort="443" for standard HTTPS).


But if you just say https:// or https://:8443, then it should 
let you test before the constraint is used.


David

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: SSL Certificate Beginner Question

[Scott Purcell]

I did not include a security constraint.
Is this needed for SSL? I spend some time looking at this element, and I was 
under the impression that it was for form authentication? 




-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
Sent: Wednesday, November 30, 2005 10:16 AM
To: Tomcat Users List
Subject: Re: SSL Certificate Beginner Question


Did you include a security contraint element in your web.xml file? Something 
like this:

  

  HTTPS for all of these pages of the 
application.
  /secure/*


  CONFIDENTIAL

  


[EMAIL PROTECTED] wrote:
> Real helpful ... I searched on SRV.12 and it brought up a bunch of links
> that have nothing to do with Tomcat  config of SSL.
> I probably posted a lame request. Let me try again.
> I have purchased a certificate via Verisign, and I have installed the
> certificate into a keystore. I am running Windows XP and Tomcat 5.5.12.
> I put the keystore and Cert.cer in the Tomcat/bin directory for organiation.
> I read that the default is usually in the home directory where tomcat is
> installed on Unix. But that is another OS.
> I followed the docs here under Tomcat 5 SSL and ran across this:
> http://tomcat.apache.org/tomcat-5.5-doc/ssl-howto.html
> 
> The final step is to configure your secure socket in the
> $CATALINA_HOME/conf/server.xml file, where $CATALINA_HOME represents the
> directory into which you installed Tomcat 5. An example  element
> for an SSL connector is included in the default server.xml file installed
> with Tomcat. It will look something like this:
> 
>  <-- Define a SSL Coyote HTTP/1.1 Connector on port 8443 -->
> 
> 
> 
> Anyway I uncommented this snippet from my Tomcat server.xml file and
> restarted. But I cannot hit https://localhost:8443 like the read-me states.
> I have checked all $TOMCAT_HOME/logs and see nothing. It just hangs when
> trying to call it. I can hit http://localhost and all is happy. But the
> certificate states it is coming from a certain URL. So I am not sure how
> that all works.
> 
> I hope this may help someone feed me back some relevant information.
> Scott
> 
> - Original Message -
> From: "Hassan Schroeder" <[EMAIL PROTECTED]>
> To: "Tomcat Users List" 
> Sent: Tuesday, November 29, 2005 9:37 PM
> Subject: Re: SSL Certificate Beginner Question
> 
> > Scott Purcell wrote:
> >
> > > How do I configure some of my pages to use https? I do not know
> > > where to begin on this?
> >
> > Begin with the Servlet Spec. -- SRV.12 (Security) would be apropos :-)
> >
> > HTH!
> > --
> > Hassan Schroeder - [EMAIL PROTECTED]
> > Webtuitive Design ===  (+1) 408-938-0567   === http://webtuitive.com
> >
> >   dream.  code.
> >
> >
> >
> > -
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> >
> 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Need More Error Logs .. How to

[Scott Purcell]

I am trying to get SSL running on Tomcat 5.5.12 on XP. As I am playing around, 
trying different server.xml changes, I am trying to find some type of log to 
help assist me in what is not working. Anyway, it is a new Tomcat install, and 
under $TOMCAT_HOME/logs I see stderr, stdout and some localhost file. Problem 
is, I am not seeing any errors when trying to use the "https" protocol. A lot 
of threads describe errors from Tomcat with bad Keystores, or Passwords, but I 
am not seeing any "system" type errors.

Is there a way to turn-up Tomcats internal logging so I can see these types of 
logs, so I can try and get my ssl problem resolved? PS I have been tailing each 
of the log files available uneder logs, and there are no indicators of my 
problem.


Regards
Scott



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Servlet can't be found by Tomcat 5.5

[Milan Tomic]

Hi,

I have created one small demo app and when I deploy it to JBoss 4.0 (Tomcat
5.5), although I have mapped my servlet to >demo/DemoServlet<, I can't
access it with browser. I got 404 HTTP error. I have spent whole day trying
to figure it out what is wrong. I could send all sources and binaries to
someone willing to help. Some files are in the attachment. Please help me.

Thank you,
Milan

http://www.jboss.org/j2ee/dtd/jboss-web_4_0.dtd";>



   
   

   
   

   
   
   
  ejb/Registar
  ejb/Registar
   

  

   


http://java.sun.com/dtd/web-app_2_3.dtd";>


   







   
  DemoServlet
  Demo Servlet
  
  demoapp.servlet.ModelServlet

   

  

   
  DemoServlet
  /demo/DemoServlet
   

   

   

  

   

   
  
  ejb/Registar
  Session
  demoapp.interfaces.RegistarHome
  demoapp.interfaces.Registar
   


package demoapp.servlet;

import java.util.*;
import java.io.*;
import javax.servlet.*;
import javax.servlet.http.*;
import javax.naming.*;
import javax.rmi.PortableRemoteObject;
import demoapp.interfaces.*;
import demoapp.jb.*;

/**
 * @web.servlet
 *  name="DemoServlet"
 *  display-name="Demo Servlet"
 *  description="Model"
 * 
 * @web.servlet-mapping
 *  url-pattern="/demo/DemoServlet"
 * 
 * @web.ejb-ref
 *  name="ejb/Registar"
 *  type="Session"
 *  home="demoapp.interfaces.RegistarHome"
 *  remote="demoapp.interfaces.Registar"
 *  description="Reference to the Registar EJB"
 * 
 * @jboss.ejb-ref-jndi
 *  ref-name="ejb/Registar"
 *  jndi-name="ejb/Registar"
 */

public class ModelServlet extends HttpServlet {

  private RegistarHome home = null;

  public void init(ServletConfig conf) throws ServletException  {
try {
Context context = new InitialContext();
Object ref = context.lookup("ejb/Registar");
home = (RegistarHome) PortableRemoteObject.narrow(ref, RegistarHome.class);
} catch (Exception e) {
throw new ServletException("Lookup of ejb/Registar failed");
}
  }

  public void doPost (HttpServletRequest req, HttpServletResponse res)
  throws ServletException, IOException {

// do someting
  }
}

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: HTTP 404 error when mod_jk 1.2.15 connects apache 2.0.55 and tomcat 5.0.28 on unix

[blueberry lake]

Thanks for helping.
http://localhost:7888/manager/html gives me the same HTTP 404 error.


On 11/30/05, Martin Gainty <[EMAIL PROTECTED]> wrote:
>
> Good Morning Blueberry
> if you go to http://localhost:8081/manager/html
> what happens when you Reload jsp-examples ?
> Martin-
> - Original Message -
> From: "blueberry lake" <[EMAIL PROTECTED]>
> To: 
> Sent: Wednesday, November 30, 2005 10:39 AM
> Subject: HTTP 404 error when mod_jk 1.2.15 connects apache 2.0.55 and
> tomcat
> 5.0.28 on unix
>
>
> Hi all,
>
> I installed apache 2.0.55, tomcat 5.0.28, and mod_jk 1.2.15 on a
> solaris 5.9unix machine.
> Before I connected apache and tomcat, both of them work fine if I start
> them
> up as seperate servers.
> Mod_jk is complied from source code and mod_jk.so is copied to
> apache/modules/
>
>
> The connected system gives me the tomcat welcome page for URL
> http://localhost:7888/
> ( I changed apache to listen to port 7888. ), which seems fine. The
> problem
> is that when
> I access the URLs like  http://localhost:7888/jsp-examples/, I got the
> following error:
> =
> HTTP 404
>
> type Status report
>
> message /jsp-examples/
>
> description The requested resource (/jsp-examples/) is not available.
>
> Apache/Tomcat 5.0.28
> ==
>
>
> For tomcat, I comment out the 8080 port (http) so that to make sure it
> stops
> the http service and only handles the requests
> on port 8009 from apache. That's the only modification I did in tomcat.
>
> For apache, I add workers.properties file and edit httpd.conf, both  in
> conf/ subdirectory.
> The workers.properties is like:
> ==
> workers.tomcat_home=/usr/local/jakarta-tomcat-5.0.28
> workers.java_home=/usr/j2sdk1.4.2_03
> ps=/
> worker.list=worker1
>
> worker.worker1.port=8009
> worker.worker1.host=localhost
> worker.worker1.type=ajp13
> worker.worker1.lbfactor=50
> ==
>
>
>
> The httpd.conf has the following modification:
> ===
> #
> Listen 7888
>
> #
> LoadModulejk_module  modules/mod_jk.so
>
> #
> #config of mod_jk
> #
> JkWorkersFile /usr/local/apache2.0.55/conf/workers.properties
> JkLogFile /usr/local/jakarta-tomcat-5.0.28/logs/mod_jk.log
> JkLogLevelinfo
> JkLogStampFormat "[%a %b %d %H:%M:%S %Y] "
> JkOptions +ForwardKeySize +ForwardURICompat -ForwardDirectories
> JkRequestLogFormat "%w %V %T"
> #
> JkMount  /*  worker1
> JkMount  /*/*  worker1
> JkMount  /*/*/*  worker1
> JkMount  /*/*/*/*  worker1
> #
> # End of mod_jk
>
>
> Also the log files seem don't give me much useful info, for example, the
> mod_jk.log file has the following line:
> [Tue Nov 29 15:33:54 2005] worker1 [localhost] 0.089465
>
> ANy suggestions are overwelcome!
>
> -b
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>

RE: Error: Io exception: Connection reset

[KUMAR, NANDA [AG-Contractor/1000]]

Thanks a lot Martin.

Nanda

-Original Message-
From: Martin Gainty [mailto:[EMAIL PROTECTED]
Sent: Wednesday, November 30, 2005 10:13 AM
To: Tomcat Users List
Subject: Re: Error: Io exception: Connection reset


This is Straight from the Tomcat 5.0 docs located at
http://tomcat.apache.org/tomcat-5.0-doc/jndi-resources-howto.html

validationQuery - SQL query that can be used by the pool to validate 
connections before they are returned to the application. If specified, this 
query MUST be an SQL SELECT statement that returns at least one row.

Viel Gluck,
Martin Gainty

- Original Message - 
From: "KUMAR, NANDA [AG-Contractor/1000]" <[EMAIL PROTECTED]>
To: "'Tomcat Users List'" 
Sent: Wednesday, November 30, 2005 10:29 AM
Subject: RE: Error: Io exception: Connection reset


Thanks Tobias,
 I will try as you mentioned below. Could you please let me know what
"validationQuery" parameter does and where I can find these information on
tomcat documentation.

-Nanda

-Original Message-
From: Tobias Meyer [mailto:[EMAIL PROTECTED]
Sent: Wednesday, November 30, 2005 12:38 AM
To: 'Tomcat Users List'
Subject: AW: Error: Io exception: Connection reset


Maybe the user hit the "stop" button on the browser while downloading a page
or binary.

IIRC this will give you IOExceptions in your servlet when trying to push
more data in the "dead" connection.

It could also be your firewall, that times out connections which have not
been used for some time.
If you use tomcat connection pooling, try using

validationQuery
select 1

in the ResourceParams of your jdbc connection definition in server.xml
(see tomcat documentation for details)


Hth,
Tobias

> -Ursprüngliche Nachricht-
> Von: KUMAR, NANDA [AG-Contractor/1000]
> [mailto:[EMAIL PROTECTED]
> Gesendet: Mittwoch, 30. November 2005 00:54
> An: users@tomcat.apache.org
> Betreff: Error: Io exception: Connection reset
>
>
> Very often we are getting Io Exception: Connection reset
> error. There is a
> firewall between tomcat app server and DB server.
> I wonder whether firewall is closing the connection or what
> could be the
> reason. Please let me know how to get rid of this error.
>
> Thanks in advance.
>
>
>
> --
> ---
> This e-mail message may contain privileged and/or
> confidential information, and is intended to be received only
> by persons entitled to receive such information. If you have
> received this e-mail in error, please notify the sender
> immediately. Please delete it and all attachments from any
> servers, hard drives or any other media. Other use of this
> e-mail by you is strictly prohibited.
>
>
> All e-mails and attachments sent and received are subject to
> monitoring, reading and archival by Monsanto. The recipient
> of this e-mail is solely responsible for checking for the
> presence of "Viruses" or other "Malware". Monsanto accepts no
> liability for any damage caused by any such code transmitted
> by or accompanying this e-mail or any attachment.
> --
> ---
>
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
This e-mail message may contain privileged and/or confidential information, 
and is intended to be received only by persons entitled to receive such 
information. If you have received this e-mail in error, please notify the 
sender immediately. Please delete it and all attachments from any servers, 
hard drives or any other media. Other use of this e-mail by you is strictly 
prohibited.


All e-mails and attachments sent and received are subject to monitoring, 
reading and archival by Monsanto. The recipient of this e-mail is solely 
responsible for checking for the presence of "Viruses" or other "Malware". 
Monsanto accepts no liability for any damage caused by any such code 
transmitted by or accompanying this e-mail or any attachment.

-


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Problems with Mod JK (Apache 2.052 and Tomcat 5.5.9)

[Luka Andrejasic]

Thanks for the assistance Nick.

I think the connector is alreary defined in the current configuration. 
Perhaps you overlooked that line :


   

Should I delete this one and try yours? The same error occured when they 
were placed side by side (yours on top).


Thanks for helping.

Luka

- Original Message - 
From: "Duan, Nick" <[EMAIL PROTECTED]>

To: "Tomcat Users List" 
Sent: Wednesday, November 30, 2005 3:58 PM
Subject: RE: Problems with Mod JK (Apache 2.052 and Tomcat 5.5.9)


Well, the log msg is complaining about not able to find the worker.
Apparently your tomcat wasn't configured for listening to ajp13 request
from httpd.  A connector entry for ajp13 should be added to server.xml
file.  At least it was not listed in your email.

   
   

ND

-Original Message-
From: Luka Andrejasic [mailto:[EMAIL PROTECTED]
Sent: Tuesday, November 29, 2005 9:24 PM
To: Tomcat Users List
Subject: Re: Problems with Mod JK (Apache 2.052 and Tomcat 5.5.9)

"I remember workers.properties is  located in apache/conf/, the same
directory with httpd.conf.."
The file workers.properties is located under Tomcat`s conf directory,
not
Apache`s.

In workers.properties I only have the following and that should be
enough :
worker.list=ajp13w
worker.ajp13w.port=8009
worker.ajp13w.host=localhost
worker.ajp13w.type=ajp13
worker.ajp13w.cachesize=10
worker.ajp13w.cache_timeout=1200
worker.ajp13w.socket_timeout=3600

Any other idea what else it might be?

Thanks for the reply and trying to help.

Luka

- Original Message - 
From: "blueberry lake" <[EMAIL PROTECTED]>

To: "Tomcat Users List" 
Sent: Wednesday, November 30, 2005 3:06 AM
Subject: Re: Problems with Mod JK (Apache 2.052 and Tomcat 5.5.9)


Since I am a new user of mod_jk, please correct me if I am wrong.

In your apache httpd.conf, you set:
"JkWorkersFile "/var/tomcat/conf/workers.properties"
I remember workers.properties is  located in apache/conf/, the same
directory with httpd.conf..

And, do you indicate the location of tomcat in workers.properties, such
as
workers.tomcat_home=/.../tomcat/?

-b

On 11/29/05, Luka Andrejasic <[EMAIL PROTECTED]> wrote:


Hello guys,

I am trying to figure this one out for weeks. Nothing seems to work

and I

am running out of ideas. The problem seems to be with Mod JK, as

Apache

and
Tomcat work without problems on their own.

Below are all the main configuration files, as well as the error log

(at

the bottom) :

// System Configuration :

- OS : RedHat Linux ES 4.0 (2.6.9-22.0.1)
- Apache : 2.0.52
- Tomcat : 5.5.9
- MySQL : 4.1.12
- Mod JK : 1.2.15




// Mod JK Installation :

   tar -xzf jakarta-tomcat-connectors-jk-1.2.15-src.tar.gz
   cd jakarta-tomcat-connectors-jk-1.2.15-src
   cd jk
   cd native
   ./buildconf.sh
   ./configure --enable-EAPI --with-apxs=/usr/sbin/apxs
   make
   make install

   cp ./apache-2.0/mod_jk.so /etc/httpd/modules




// Apache Virtual Domains :

NameVirtualHost *:80



   ServerAdmin [EMAIL PROTECTED]
   DocumentRoot /var/tomcat/webapps/ROOT
   ServerName domain.com
   ServerAlias server.domain.com
   ErrorLog /home/virtual/domain.com/logs/error_log
   CustomLog /home/virtual/domain.com/logs/access_log combined

   
   Options Indexes FollowSymLinks
   DirectoryIndex index.jsp index.html index.htm

 
   AllowOverride None
   deny from all
 

 
   AllowOverride None
   deny from all
 

 JkWorkersFile "/var/tomcat/conf/workers.properties"
 JkShmFile "/var/tomcat/conf/shm.file"
 JkLogFile /var/tomcat/logs/mod_jk.txt
 JkLogLevel info
 JkAutoAlias /var/tomcat/webapps/ROOT

 JkMount /backup/*  ajp13w
 JkMount /config/*  ajp13w
 JkMount /files/*  ajp13w
 JkMount /logs/*  ajp13w
 JkMount /servlet/*  ajp13w
 JkMount /sql/*  ajp13w
 JkMount /temp/*  ajp13w
 JkMount /*.jsp  ajp13w
   






// File server.xml :



  
className="org.apache.catalina.mbeans.ServerLifecycleListener"

debug="0"/>

  

  

  

saved"



factory="org.apache.catalina.users.MemoryUserDatabaseFactory

"
  pathname="conf/tomcat-users.xml"/>
  

  




mapperClass="org.apache.catalina.core.StandardEngineMapper"

name="Catalina">

  


wrapperClass="org.apache.catalina.core.StandardWrapper"/>


  

  



  






// File workers.properties :

worker.list=ajp13w
worker.ajp13w.port=8009
worker.ajp13w.host=localhost
worker.ajp13w.type=ajp13
worker.ajp13w.cachesize=10
worker.ajp13w.cache_timeout=1200
worker.ajp13w.socket_timeout=3600




// File mod_jk.txt (Log File) :

[Tue Nov 29 18:39:57 2005] [info]  jk_handler::mod_jk.c (1993): Could

not

find a worker for worker name=ajp13w




If you need anything else in order to pinpoint the problem, please

tell me

and I will provide it right away. I really hope someone can help me

with

this.

Have a great day.

Best Regards,
Luka Andrejasic




-

Re: HTTP 404 error when mod_jk 1.2.15 connects apache 2.0.55 and tomcat 5.0.28 on unix

[Martin Gainty]

Good Morning Blueberry
if you go to http://localhost:8081/manager/html
what happens when you Reload jsp-examples ?
Martin-
- Original Message - 
From: "blueberry lake" <[EMAIL PROTECTED]>

To: 
Sent: Wednesday, November 30, 2005 10:39 AM
Subject: HTTP 404 error when mod_jk 1.2.15 connects apache 2.0.55 and tomcat 
5.0.28 on unix



Hi all,

I installed apache 2.0.55, tomcat 5.0.28, and mod_jk 1.2.15 on a
solaris 5.9unix machine.
Before I connected apache and tomcat, both of them work fine if I start them
up as seperate servers.
Mod_jk is complied from source code and mod_jk.so is copied to
apache/modules/


The connected system gives me the tomcat welcome page for URL
http://localhost:7888/
( I changed apache to listen to port 7888. ), which seems fine. The problem
is that when
I access the URLs like  http://localhost:7888/jsp-examples/, I got the
following error:
=
HTTP 404

type Status report

message /jsp-examples/

description The requested resource (/jsp-examples/) is not available.

Apache/Tomcat 5.0.28
==


For tomcat, I comment out the 8080 port (http) so that to make sure it stops
the http service and only handles the requests
on port 8009 from apache. That's the only modification I did in tomcat.

For apache, I add workers.properties file and edit httpd.conf, both  in
conf/ subdirectory.
The workers.properties is like:
==
workers.tomcat_home=/usr/local/jakarta-tomcat-5.0.28
workers.java_home=/usr/j2sdk1.4.2_03
ps=/
worker.list=worker1

worker.worker1.port=8009
worker.worker1.host=localhost
worker.worker1.type=ajp13
worker.worker1.lbfactor=50
==



The httpd.conf has the following modification:
===
#
Listen 7888

#
LoadModulejk_module  modules/mod_jk.so

#
#config of mod_jk
#
JkWorkersFile /usr/local/apache2.0.55/conf/workers.properties
JkLogFile /usr/local/jakarta-tomcat-5.0.28/logs/mod_jk.log
JkLogLevelinfo
JkLogStampFormat "[%a %b %d %H:%M:%S %Y] "
JkOptions +ForwardKeySize +ForwardURICompat -ForwardDirectories
JkRequestLogFormat "%w %V %T"
#
JkMount  /*  worker1
JkMount  /*/*  worker1
JkMount  /*/*/*  worker1
JkMount  /*/*/*/*  worker1
#
# End of mod_jk


Also the log files seem don't give me much useful info, for example, the
mod_jk.log file has the following line:
[Tue Nov 29 15:33:54 2005] worker1 [localhost] 0.089465

ANy suggestions are overwelcome!

-b

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: SSL Certificate Beginner Question

[frankburns]

Did you include a security contraint element in your web.xml file? Something 
like this:

  

  HTTPS for all of these pages of the 
application.
  /secure/*


  CONFIDENTIAL

  


[EMAIL PROTECTED] wrote:
> Real helpful ... I searched on SRV.12 and it brought up a bunch of links
> that have nothing to do with Tomcat  config of SSL.
> I probably posted a lame request. Let me try again.
> I have purchased a certificate via Verisign, and I have installed the
> certificate into a keystore. I am running Windows XP and Tomcat 5.5.12.
> I put the keystore and Cert.cer in the Tomcat/bin directory for organiation.
> I read that the default is usually in the home directory where tomcat is
> installed on Unix. But that is another OS.
> I followed the docs here under Tomcat 5 SSL and ran across this:
> http://tomcat.apache.org/tomcat-5.5-doc/ssl-howto.html
> 
> The final step is to configure your secure socket in the
> $CATALINA_HOME/conf/server.xml file, where $CATALINA_HOME represents the
> directory into which you installed Tomcat 5. An example  element
> for an SSL connector is included in the default server.xml file installed
> with Tomcat. It will look something like this:
> 
>  <-- Define a SSL Coyote HTTP/1.1 Connector on port 8443 -->
> 
> 
> 
> Anyway I uncommented this snippet from my Tomcat server.xml file and
> restarted. But I cannot hit https://localhost:8443 like the read-me states.
> I have checked all $TOMCAT_HOME/logs and see nothing. It just hangs when
> trying to call it. I can hit http://localhost and all is happy. But the
> certificate states it is coming from a certain URL. So I am not sure how
> that all works.
> 
> I hope this may help someone feed me back some relevant information.
> Scott
> 
> - Original Message -
> From: "Hassan Schroeder" <[EMAIL PROTECTED]>
> To: "Tomcat Users List" 
> Sent: Tuesday, November 29, 2005 9:37 PM
> Subject: Re: SSL Certificate Beginner Question
> 
> > Scott Purcell wrote:
> >
> > > How do I configure some of my pages to use https? I do not know
> > > where to begin on this?
> >
> > Begin with the Servlet Spec. -- SRV.12 (Security) would be apropos :-)
> >
> > HTH!
> > --
> > Hassan Schroeder - [EMAIL PROTECTED]
> > Webtuitive Design ===  (+1) 408-938-0567   === http://webtuitive.com
> >
> >   dream.  code.
> >
> >
> >
> > -
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> >
> 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Error: Io exception: Connection reset

[Martin Gainty]

This is Straight from the Tomcat 5.0 docs located at
http://tomcat.apache.org/tomcat-5.0-doc/jndi-resources-howto.html

validationQuery - SQL query that can be used by the pool to validate 
connections before they are returned to the application. If specified, this 
query MUST be an SQL SELECT statement that returns at least one row.


Viel Gluck,
Martin Gainty

- Original Message - 
From: "KUMAR, NANDA [AG-Contractor/1000]" <[EMAIL PROTECTED]>

To: "'Tomcat Users List'" 
Sent: Wednesday, November 30, 2005 10:29 AM
Subject: RE: Error: Io exception: Connection reset


Thanks Tobias,
I will try as you mentioned below. Could you please let me know what
"validationQuery" parameter does and where I can find these information on
tomcat documentation.

-Nanda

-Original Message-
From: Tobias Meyer [mailto:[EMAIL PROTECTED]
Sent: Wednesday, November 30, 2005 12:38 AM
To: 'Tomcat Users List'
Subject: AW: Error: Io exception: Connection reset


Maybe the user hit the "stop" button on the browser while downloading a page
or binary.

IIRC this will give you IOExceptions in your servlet when trying to push
more data in the "dead" connection.

It could also be your firewall, that times out connections which have not
been used for some time.
If you use tomcat connection pooling, try using

validationQuery
select 1

in the ResourceParams of your jdbc connection definition in server.xml
(see tomcat documentation for details)


Hth,
Tobias


-Ursprüngliche Nachricht-
Von: KUMAR, NANDA [AG-Contractor/1000]
[mailto:[EMAIL PROTECTED]
Gesendet: Mittwoch, 30. November 2005 00:54
An: users@tomcat.apache.org
Betreff: Error: Io exception: Connection reset


Very often we are getting Io Exception: Connection reset
error. There is a
firewall between tomcat app server and DB server.
I wonder whether firewall is closing the connection or what
could be the
reason. Please let me know how to get rid of this error.

Thanks in advance.



--
---
This e-mail message may contain privileged and/or
confidential information, and is intended to be received only
by persons entitled to receive such information. If you have
received this e-mail in error, please notify the sender
immediately. Please delete it and all attachments from any
servers, hard drives or any other media. Other use of this
e-mail by you is strictly prohibited.


All e-mails and attachments sent and received are subject to
monitoring, reading and archival by Monsanto. The recipient
of this e-mail is solely responsible for checking for the
presence of "Viruses" or other "Malware". Monsanto accepts no
liability for any damage caused by any such code transmitted
by or accompanying this e-mail or any attachment.
--
---


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
This e-mail message may contain privileged and/or confidential information, 
and is intended to be received only by persons entitled to receive such 
information. If you have received this e-mail in error, please notify the 
sender immediately. Please delete it and all attachments from any servers, 
hard drives or any other media. Other use of this e-mail by you is strictly 
prohibited.



All e-mails and attachments sent and received are subject to monitoring, 
reading and archival by Monsanto. The recipient of this e-mail is solely 
responsible for checking for the presence of "Viruses" or other "Malware". 
Monsanto accepts no liability for any damage caused by any such code 
transmitted by or accompanying this e-mail or any attachment.

-


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

jk connector conflict with previous jk2

[Patrice Durosay]

Hello all,

I've just installed jk 1.2.15  from sources to replace jk2, with
Apache 2.0.46 from rpm & rpm-dev and tomcat 5.0.27.
When I launch tomcat, the log says that jk2 is listening :

30 nov. 2005 16:31:51 org.apache.jk.common.ChannelSocket init
INFO: JK2: ajp13 listening on /0.0.0.0:8009
30 nov. 2005 16:31:51 org.apache.jk.server.JkMain start
INFO: Jk running ID=0 time=1/80  config=null
30 nov. 2005 16:31:51 org.apache.catalina.startup.Catalina start


In fact,
- jk2 is not loaded in httpd.conf
- {tomcat_home}conf/jk2.properties has been removed
So I don't understand how jk2 can be listening on port 8009.
I can't access all of my site's functionnalities

Question :
How can I be sure that jk is listening on port 8009 and not  jk2 ?


Any Commentary or advice is welcome.


Cordially

Patrice Durosay





Configs :

httpd.conf :
...
LoadModule jk_module  modules/mod_jk.so

 JkWorkersfile conf/workers.properties
 JkLogFile logs/mod_jk.log
 JkLogLevel trace
 JkLogStampFormat "[%a %b %d %H:%M:%S %Y]"
 JkOptions +ForwardKeySize +ForwardURICompat +ForwardDirectories
 JkRequestLogFormat "%w %V %T"
 JkMount /expresso/* tomworker
 JkMount /servlets-examples/* tomworker
 JkMount /*.jsp  tomworker

...
NameVirtualHost *:80

  ServerName MyTomcatWeb.MyDomain
  DocumentRoot /usr/local/java/tomcat/webapps/ROOT/
  ErrorLog logs/MyTomcatWeb.log
  TransferLog logs/MyTomcatWeb_transfer.log
  ServerAdmin [EMAIL PROTECTED]
  DirectoryIndex frame.jsp index.jsp index.html


workers.properties :
workers.tomcat_home=/usr/java/tomcat
workers.java_home=/usr/java
ps=/
worker.list=tomworker
worker.tomworker.type=ajp13
worker.tomworker.host=MyTomcatWeb.MyDomain
worker.tomworker.port=8009
worker.tomworker.lbfactor=50
worker.tomworker.cachesize=10
worker.tomworker.cache_timeout=600
worker.tomworker.socket_keepalive=1
worker.tomworker.socket_timeout=300
# # Announce a "status" worker
[status:status]
info=Status worker. Displays runtime information.
# # Uri mapping
[uri:/jkstatus/*]
group=status:status
# Uri mapping
[uri:/jsp-examples/*]
# Uri mapping
[uri:/expresso/*]
# Uri mapping
[uri:/MyTomcatWeb/*]

server.xml :

 
 className="org.apache.catalina.mbeans.GlobalResourcesLifecycleListener"

   debug="0"/>

 
   
   
   
   
 
   factory
   org.apache.catalina.users.MemoryUserDatabaseFactory
 
 
   pathname
   conf/tomcat-users.xml
 
   
 

 

   

   
 

 
 

   

   
 
   
 




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: confusion of tomcat downloading

[Caldarale, Charles R]

> From: blueberry lake [mailto:[EMAIL PROTECTED] 
> Subject: Re: confusion of tomcat downloading
> 
> Someone told me before that combine apache and tomcat 
> together and run tomcat behind apahce can kind of 
> improve the security of the website.

Urban legend, partly based on people generally being more familiar with
httpd than they are with Tomcat.  There's nothing intrinsically more
secure about one or the other.  There has been some discussion of this
on the mailing list in the past; you can check the archives for more
info.

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you
received this in error, please contact the sender and delete the e-mail
and its attachments from all computers.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

HTTP 404 error when mod_jk 1.2.15 connects apache 2.0.55 and tomcat 5.0.28 on unix

[blueberry lake]

Hi all,

I installed apache 2.0.55, tomcat 5.0.28, and mod_jk 1.2.15 on a
solaris 5.9unix machine.
Before I connected apache and tomcat, both of them work fine if I start them
up as seperate servers.
Mod_jk is complied from source code and mod_jk.so is copied to
apache/modules/


The connected system gives me the tomcat welcome page for URL
http://localhost:7888/
( I changed apache to listen to port 7888. ), which seems fine. The problem
is that when
I access the URLs like  http://localhost:7888/jsp-examples/, I got the
following error:
=
HTTP 404

type Status report

message /jsp-examples/

description The requested resource (/jsp-examples/) is not available.

Apache/Tomcat 5.0.28
==


For tomcat, I comment out the 8080 port (http) so that to make sure it stops
the http service and only handles the requests
on port 8009 from apache. That's the only modification I did in tomcat.

For apache, I add workers.properties file and edit httpd.conf, both  in
conf/ subdirectory.
The workers.properties is like:
==
workers.tomcat_home=/usr/local/jakarta-tomcat-5.0.28
workers.java_home=/usr/j2sdk1.4.2_03
ps=/
worker.list=worker1

worker.worker1.port=8009
worker.worker1.host=localhost
worker.worker1.type=ajp13
worker.worker1.lbfactor=50
==



The httpd.conf has the following modification:
===
#
Listen 7888

#
LoadModulejk_module  modules/mod_jk.so

#
#config of mod_jk
#
JkWorkersFile /usr/local/apache2.0.55/conf/workers.properties
JkLogFile /usr/local/jakarta-tomcat-5.0.28/logs/mod_jk.log
JkLogLevelinfo
JkLogStampFormat "[%a %b %d %H:%M:%S %Y] "
JkOptions +ForwardKeySize +ForwardURICompat -ForwardDirectories
JkRequestLogFormat "%w %V %T"
#
JkMount  /*  worker1
JkMount  /*/*  worker1
JkMount  /*/*/*  worker1
JkMount  /*/*/*/*  worker1
#
# End of mod_jk


Also the log files seem don't give me much useful info, for example, the
mod_jk.log file has the following line:
[Tue Nov 29 15:33:54 2005] worker1 [localhost] 0.089465

ANy suggestions are overwelcome!

-b

Re: confusion of tomcat downloading

[blueberry lake]

Someone told me before that combine apache and tomcat together and run
tomcat behind apahce can kind of improve the security of the website. That's
the reason I want to connectted tomcat and apache with mod_jk together.
(unfortunately, the connected system does not work quite right.)

But when I read some articles about apache and tomcat, it seems that the
connected system is mainly focus on load balance. If tha'ts the reason,
maybe I can just go with tomcat standalone since it always works great for
me.

Thanks.

-b

On 11/30/05, Caldarale, Charles R <[EMAIL PROTECTED]> wrote:
>
> > From: blueberry lake [mailto:[EMAIL PROTECTED]
> > Subject: Re: confusion of tomcat downloading
> >
> > I downloaded tomcat for unix, and want it to run inside apache.
>
> To repeat: Tomcat does not run _inside_ Apache httpd, but it can be
> configured to work with httpd as a front-end using the AJP13 connector.
> But unless you're doing load balancing or some such, why do you think
> you want httpd?
>
> - Chuck
>
>
> THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
> MATERIAL and is thus for use only by the intended recipient. If you
> received this in error, please contact the sender and delete the e-mail
> and its attachments from all computers.
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>

mod_jk loadbalancing problem - very weird

[Mirek Kopriva]

Hello,
We are experiencing some weird problems with linux + tomcat + apache +
mod_jk + ssl.
We have a loadbalancing solution which is working for a couple of hours
(about 5) and
than it just stops responding. After playing with the workers properties a
bit
(adding socket_timeout, cache_timeout, recycle_timeout) the application
stops
for a bit and after few minutes starts working again.

I was thinking it could be because of some socket limitations which gets
exhausted
and causes the application to freeze for a while.

It's difficult to collect any usefull information as these things are
happening about once, maximaly twice a day.
There are about 10 users testing it.
tomcat is 5.5.12, apache 2.0.52 mod_jk-1.2.15

Before I set up the timeouts this is what was in the mod_jk.log, after that
the logs are empty.

[Mon Nov 28 10:29:53 2005] [error] ajp_service::jk_ajp_common.c (1758):
Error connecting to tomcat. Tomcat is probably not started or is listening
on the wrong port. worker=ajp132 failed
[Tue Nov 29 07:05:26 2005] [error] ajp_get_reply::jk_ajp_common.c (1503):
Tomcat is down or refused connection. No response has been sent to the
client (yet)
[Tue Nov 29 07:05:26 2005] [error] ajp_get_reply::jk_ajp_common.c (1503):
Tomcat is down or refused connection. No response has been sent to the
client (yet)
[Tue Nov 29 07:05:26 2005] [error] ajp_service::jk_ajp_common.c (1715):
receiving reply from tomcat failed without recovery in send loop 0
[Tue Nov 29 07:05:26 2005] [error] ajp_service::jk_ajp_common.c (1715):
receiving reply from tomcat failed without recovery in send loop 0
[Tue Nov 29 07:05:26 2005] [error] service::jk_lb_worker.c (687):
unrecoverable error 502, request failed. Tomcat failed in the middle of
request, we can't recover to another instance.

And here is my workers.properties
worker.list=loadbalancer
#, ajp131, ajp132

worker.loadbalancer.type=lb
worker.loadbalancer.balance_workers=ajp131, ajp132
worker.loadbalancer.sticky_session=True

# Workers
worker.ajp131.port=8009
worker.ajp131.host=127.0.0.1
worker.ajp131.type=ajp13
worker.ajp131.lbfactor=1
#worker use up to 1 sockets, which will stay no more than 10mn in cache
worker.ajp131.cachesize=1
worker.ajp131.cache_timeout=600
worker.ajp131.socket_timeout=180
#worker ask operating system to send KEEP-ALIVE signal on the connection
worker.ajp131.socket_keepalive=1
#worker want ajp13 connection to be dropped after 5mn (recycle)
worker.ajp131.recycle_timeout=300

worker.ajp132.port=8009
worker.ajp132.host=10.241.154.124
worker.ajp132.type=ajp13
worker.ajp132.lbfactor=2
#worker use up to 1 sockets, which will stay no more than 10mn in cache
worker.ajp132.cachesize=1
worker.ajp132.cache_timeout=600
worker.ajp132.socket_timeout=180
#worker ask operating system to send KEEP-ALIVE signal on the connection
worker.ajp132.socket_keepalive=1
#worker want ajp13 connection to be dropped after 5mn (recycle)
worker.ajp132.recycle_timeout=300

Any ideas for solutions or pointers how to debug this whole damn stuff are
wery welcomed.
Thanks a lot.

RE: Error: Io exception: Connection reset

[KUMAR, NANDA [AG-Contractor/1000]]

Thanks Tobias,
 I will try as you mentioned below. Could you please let me know what
"validationQuery" parameter does and where I can find these information on
tomcat documentation.

-Nanda

-Original Message-
From: Tobias Meyer [mailto:[EMAIL PROTECTED]
Sent: Wednesday, November 30, 2005 12:38 AM
To: 'Tomcat Users List'
Subject: AW: Error: Io exception: Connection reset 


Maybe the user hit the "stop" button on the browser while downloading a page
or binary.

IIRC this will give you IOExceptions in your servlet when trying to push
more data in the "dead" connection.

It could also be your firewall, that times out connections which have not
been used for some time.
If you use tomcat connection pooling, try using 

validationQuery
select 1

in the ResourceParams of your jdbc connection definition in server.xml 
(see tomcat documentation for details)


Hth,
Tobias

> -Ursprüngliche Nachricht-
> Von: KUMAR, NANDA [AG-Contractor/1000] 
> [mailto:[EMAIL PROTECTED]
> Gesendet: Mittwoch, 30. November 2005 00:54
> An: users@tomcat.apache.org
> Betreff: Error: Io exception: Connection reset 
> 
> 
> Very often we are getting Io Exception: Connection reset 
> error. There is a
> firewall between tomcat app server and DB server.
> I wonder whether firewall is closing the connection or what 
> could be the
> reason. Please let me know how to get rid of this error. 
> 
> Thanks in advance.
> 
> 
> 
> --
> ---
> This e-mail message may contain privileged and/or 
> confidential information, and is intended to be received only 
> by persons entitled to receive such information. If you have 
> received this e-mail in error, please notify the sender 
> immediately. Please delete it and all attachments from any 
> servers, hard drives or any other media. Other use of this 
> e-mail by you is strictly prohibited.
> 
> 
> All e-mails and attachments sent and received are subject to 
> monitoring, reading and archival by Monsanto. The recipient 
> of this e-mail is solely responsible for checking for the 
> presence of "Viruses" or other "Malware". Monsanto accepts no 
> liability for any damage caused by any such code transmitted 
> by or accompanying this e-mail or any attachment.
> --
> ---
> 
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
This e-mail message may contain privileged and/or confidential information, and 
is intended to be received only by persons entitled to receive such 
information. If you have received this e-mail in error, please notify the 
sender immediately. Please delete it and all attachments from any servers, hard 
drives or any other media. Other use of this e-mail by you is strictly 
prohibited.


All e-mails and attachments sent and received are subject to monitoring, 
reading and archival by Monsanto. The recipient of this e-mail is solely 
responsible for checking for the presence of "Viruses" or other "Malware". 
Monsanto accepts no liability for any damage caused by any such code 
transmitted by or accompanying this e-mail or any attachment.
-


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Java databases as alternative to MySQL on OS X Server? (OT)

[Mike Sabroff]

Cloudscape, now owned by IBM is a good choice. It can be run as a 
Standalone server or as an imbedded db running within the JVM with your 
code. I haven't used it lately, but developed some stuff a few years ago 
when Sun use to ship it with the J2EE package.


Richard Schilling wrote:


You might try a Java Data Objects implementation:

www.objectdb.com
java.sun.com/products/jdo/index.jsp


These are pure object databases, and are reasonably fast.  The Sun's 
reference implementation of JDO is not intended for production use but 
it's great as a development toolkit.


Richard Schilling

Mieke Banderas wrote:


Given the sad, sad performance findings at:
"No More Apple Mysteries, Part Two"
Date: September 1st, 2005


are there any javabased DB alternatives, that may perform better than
MySQL (or PostgreSQL for that matter)? I prefer free, open sourced 
DBs or

otherwise with a license that could fit a small business/non profit
organisation.

I don't enough of JVMs to know if Javabased DBs are usually better
performancewise than MySQL/PostgreSQL, but my thought was that if
everything is kept within the JVM, the weak performance spots in OS X
would be minimized as threads would be handled within JVM rather than
within OS X. Threads being being the prime suspect in the weak MySQL
performance in OS X according Anandtech.

Do you have any thought and/or suggestions on this issue? Experiences 
you

could share?
My server runs Mac OS X Server 10.2.6 with Java 1.4.1/1.3.1. I can't use
Java 1.5 just yet.




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]






-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



--
Mike Sabroff
Web Services Developer
[EMAIL PROTECTED]
920-568-8379


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: SSL Port Question Config

[Caldarale, Charles R]

> From: Scott Purcell [mailto:[EMAIL PROTECTED] 
> Subject: SSL Port Question Config
> 
> Could anyone clarify what port SSL should be using, and why 
> the 8443 vs 443 (which looks standard)?

443 is the default https port, just as 80 is the default http port.  You
can configure those to be anything you want, based on the requirements
of your particular installation.

Tomcat is distributed with a default configuration suitable for testing,
not necessarily production.  There are several configuration changes
you'd want to make for a production environment, port numbers being one
of them.

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you
received this in error, please contact the sender and delete the e-mail
and its attachments from all computers.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: confusion of tomcat downloading

[Caldarale, Charles R]

> From: blueberry lake [mailto:[EMAIL PROTECTED] 
> Subject: Re: confusion of tomcat downloading
> 
> I downloaded tomcat for unix, and want it to run inside apache.

To repeat: Tomcat does not run _inside_ Apache httpd, but it can be
configured to work with httpd as a front-end using the AJP13 connector.
But unless you're doing load balancing or some such, why do you think
you want httpd?

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you
received this in error, please contact the sender and delete the e-mail
and its attachments from all computers.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: confusion of tomcat downloading

[blueberry lake]

I downloaded tomcat for unix, and want it to run inside apache.
It seems I should go with the core version.


On 11/29/05, Scott Purcell <[EMAIL PROTECTED]> wrote:
>
> What OS are you wanting to install Tomcat on?
> And did you want to just run Tomcat Standalone, or put it inside Apache?
>
>
> - Original Message -
> From: "blueberry lake" <[EMAIL PROTECTED]>
> To: 
> Sent: Tuesday, November 29, 2005 7:47 PM
> Subject: confusion of tomcat downloading
>
>
> On page http://tomcat.apache.org/download-55.cgi, there are several
> choices
> for tomcat 5.x, like core, deployer, embedded, admin web application,
> etc.,
> can anyone explain berifly what their difference are?
> Thanks.
>
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>

RE: Problems with Mod JK (Apache 2.052 and Tomcat 5.5.9)

[Duan, Nick]

Well, the log msg is complaining about not able to find the worker.
Apparently your tomcat wasn't configured for listening to ajp13 request
from httpd.  A connector entry for ajp13 should be added to server.xml
file.  At least it was not listed in your email.




ND

-Original Message-
From: Luka Andrejasic [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, November 29, 2005 9:24 PM
To: Tomcat Users List
Subject: Re: Problems with Mod JK (Apache 2.052 and Tomcat 5.5.9)

"I remember workers.properties is  located in apache/conf/, the same
directory with httpd.conf.."
The file workers.properties is located under Tomcat`s conf directory,
not 
Apache`s.

In workers.properties I only have the following and that should be
enough :
worker.list=ajp13w
worker.ajp13w.port=8009
worker.ajp13w.host=localhost
worker.ajp13w.type=ajp13
worker.ajp13w.cachesize=10
worker.ajp13w.cache_timeout=1200
worker.ajp13w.socket_timeout=3600

Any other idea what else it might be?

Thanks for the reply and trying to help.

Luka

- Original Message - 
From: "blueberry lake" <[EMAIL PROTECTED]>
To: "Tomcat Users List" 
Sent: Wednesday, November 30, 2005 3:06 AM
Subject: Re: Problems with Mod JK (Apache 2.052 and Tomcat 5.5.9)


Since I am a new user of mod_jk, please correct me if I am wrong.

In your apache httpd.conf, you set:
 "JkWorkersFile "/var/tomcat/conf/workers.properties"
I remember workers.properties is  located in apache/conf/, the same
directory with httpd.conf..

And, do you indicate the location of tomcat in workers.properties, such
as
workers.tomcat_home=/.../tomcat/?

-b

On 11/29/05, Luka Andrejasic <[EMAIL PROTECTED]> wrote:
>
> Hello guys,
>
> I am trying to figure this one out for weeks. Nothing seems to work
and I
> am running out of ideas. The problem seems to be with Mod JK, as
Apache 
> and
> Tomcat work without problems on their own.
>
> Below are all the main configuration files, as well as the error log
(at
> the bottom) :
>
> // System Configuration :
>
> - OS : RedHat Linux ES 4.0 (2.6.9-22.0.1)
> - Apache : 2.0.52
> - Tomcat : 5.5.9
> - MySQL : 4.1.12
> - Mod JK : 1.2.15
>
>
>
>
> // Mod JK Installation :
>
>tar -xzf jakarta-tomcat-connectors-jk-1.2.15-src.tar.gz
>cd jakarta-tomcat-connectors-jk-1.2.15-src
>cd jk
>cd native
>./buildconf.sh
>./configure --enable-EAPI --with-apxs=/usr/sbin/apxs
>make
>make install
>
>cp ./apache-2.0/mod_jk.so /etc/httpd/modules
>
>
>
>
> // Apache Virtual Domains :
>
> NameVirtualHost *:80
>
>
> 
>ServerAdmin [EMAIL PROTECTED]
>DocumentRoot /var/tomcat/webapps/ROOT
>ServerName domain.com
>ServerAlias server.domain.com
>ErrorLog /home/virtual/domain.com/logs/error_log
>CustomLog /home/virtual/domain.com/logs/access_log combined
>
>
>Options Indexes FollowSymLinks
>DirectoryIndex index.jsp index.html index.htm
>
>  
>AllowOverride None
>deny from all
>  
>
>  
>AllowOverride None
>deny from all
>  
>
>  JkWorkersFile "/var/tomcat/conf/workers.properties"
>  JkShmFile "/var/tomcat/conf/shm.file"
>  JkLogFile /var/tomcat/logs/mod_jk.txt
>  JkLogLevel info
>  JkAutoAlias /var/tomcat/webapps/ROOT
>
>  JkMount /backup/*  ajp13w
>  JkMount /config/*  ajp13w
>  JkMount /files/*  ajp13w
>  JkMount /logs/*  ajp13w
>  JkMount /servlet/*  ajp13w
>  JkMount /sql/*  ajp13w
>  JkMount /temp/*  ajp13w
>  JkMount /*.jsp  ajp13w
>
>
> 
>
>
>
>
> // File server.xml :
>
>  debug="0"
> port="8005"
> shutdown="SHUTDOWN">
>
>debug="0"/>
>
>debug="0"/>
>
>debug="0"/>
>
>   
>auth="Container"
>   type="org.apache.catalina.UserDatabase"
>   description="User database that can be updated and
saved"
>
factory="org.apache.catalina.users.MemoryUserDatabaseFactory
> "
>   pathname="conf/tomcat-users.xml"/>
>   
>
>   debug="0"
>name="Catalina">
>
>className="org.apache.coyote.tomcat5.CoyoteConnector"
>   connectionTimeout="2"
>   debug="0"
>   enableLookups="false"
>   minProcessors="32"
>   maxProcessors="384"
>   port="8009"
>   protocolHandlerClassName="
> org.apache.jk.server.JkCoyoteHandler"
>   protocol="AJP/1.3"
>   redirectPort="8443"
>   useURIValidationHack="false"/>
>
>  debug="0"
> defaultHost="server.domain.com"
>
mapperClass="org.apache.catalina.core.StandardEngineMapper"
> name="Catalina">
>
>appBase="webapps"
> autoDeploy="true"
> debug="0"
> name="server.domain.com"
> unpackWARS="true"
> xmlValidation="false"
> xmlNamespaceAware="false">
>
>   cooki

SSL Port Question Config

[Scott Purcell]

I am trying to configure my Tomcat 5.5.12 running on XP to use SSL. I have 
received my certificate from 'Verisign' and put it into my keystore like the 
docs state.

After that I followed the Tomcat docs, and uncommented out this bit from the 
conf/server.xml



and added my keystoreFile and keystorePass  as attributes in the above.

I then added a https://localhost:8443

Could anyone clarify what port SSL should be using, and why the 8443 vs 443 
(which looks standard)?


Also, if I am missing any steps, please let me know.

Regards
Scott



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: How to test connection pooling - Resolved

[Manisha Sathe]

I do not know when i am going to get over from such
silly mistakes... but I was putting MaxActive - 1 ??
(whereas i wanted to put 100)

Any way thanks a lot for trying to help me out

regards
Manisha


--- "Lucuk, Pete" <[EMAIL PROTECTED]> wrote:

>  
> >So you mean to say you did not get error for second
> request 
> >and it created a new connection ?
> 
> Yes, that is what I am saying
> 
> 
>  (But this is for Oracle8i). 
> >Whether it means there is a problem for MSSQL ?
> 
> Yeah, I do not know what it means for MSSQL.
> I know I have read the netbeans forums and people
> have head massive
> problems with MSSQL and Netbeans Tomcat
> 
> >
> >regards
> >Manisha 
> >
> >--- "Lucuk, Pete" <[EMAIL PROTECTED]> wrote:
> >
> >> I used Tomcat 4.1 and got the.
> >> 
> >>"create only one connection at first and then
> create 
> >more connections 
> >> as needed"
> >> 
> >> behavior and it works fine, no errors.
> >> 
> >> Also, I am using Oracle 8i and use the Oracle
> jdbc driver 
> >ojdbc14.jar 
> >> Different that commons stuff you are using.
> >> 
> >> >-Original Message-
> >> >From: Manisha Sathe
> >> [mailto:[EMAIL PROTECTED]
> >> >Sent: Tuesday, November 29, 2005 1:44 PM
> >> >To: Tomcat Users List
> >> >Subject: RE: How to test connection pooling
> >> >
> >> >Hi,
> >> >
> >> >After some testing on Tomcat 5 / Tomcat 4.1, i
> am
> >> finding some
> >> >strange behaviour.
> >> >I could figure out how to check number of
> >> conections on MSSQL. 
> >> >It is Enterprise Manager -> Management ->
> Current
> >> Processes -
> >> >u have to refresh it now and then.
> >> >
> >> >1)For Tomcat 5, it does create a pool of
> >> connections at start
> >> >depending on initial size. And it uses it from
> >> those depending
> >> >upon availability. I tested this using some big
> >> loops.
> >> >
> >> >2)But for Tomcat 4.1 - it does not create a pool
> of
> >> conections
> >> >but only ONE connection. I thought if trafic
> >> increases it
> >> >might add new connections to it.
> >> >So again tested with 2 requests and used a big
> loop
> >> so that
> >> >first request will make use of connection object
> >> for
> >> >sufficient time and will not release it. 
> >> >
> >> >I was expecting second request should create new
> >> connection in
> >> >a pool, but it did not, it waited for existing
> >> connection to
> >> >become free and later it gave error saying:
> >> >
> >> >Error message
> >> >
> >> >java.sql.SQLException: SQLException from
> connection
> >> >manager:
> >> org.apache.commons.dbcp.SQLNestedException:
> >> >Cannot get a connection, pool exhausted, cause:
> >> >Timeout waiting for idle object
> >> >--
> >> >
> >> >
> >> >Now whether it means that Tomcat 4.1 does not
> >> create pooling
> >> >at all ? Am i missing any settings ? For 4.1 am
> i
> >> suppose to
> >> >use any different jars ?
> >> >
> >> >I even tested the same for MySQL. The result is
> >> same.
> >> >Pls Pls help me, i am stuck like anything.
> >> >
> >> >regards
> >> >Manisha
> >> >
> >> >--- andy gordon <[EMAIL PROTECTED]> wrote:
> >> >
> >> >> Show Processlist will show the number of
> initial
> >> connections
> >> >at start
> >> >> but does it show what subsystem a connection
> is
> >> bound to? what if
> >> >> there are multiple tomcat's connected to one
> >> database. How do you
> >> >> differentiate?
> >> >> 
> >> >> "Lucuk, Pete" <[EMAIL PROTECTED]> wrote: 
> >> Manisha,
> >> >> 
> >> >> I do not know how you check in MSSQL.
> >> >> But, just an FYI
> >> >> 
> >> >> If you setup your connection to ten, ten do
> not
> >> automatically get
> >> >> created, only one, and as your app requires
> more
> >> connections, more
> >> >> connections will be created up to a max of
> ten.
> >> >> 
> >> >> Took me a couple days to figure out that one
> >> >> 
> >> >> >-Original Message-
> >> >> >From: Manisha Sathe
> >> >> [mailto:[EMAIL PROTECTED]
> >> >> >Sent: Tuesday, November 29, 2005 10:45 AM
> >> >> >To: users@tomcat.apache.org
> >> >> >Subject: How to test connection pooling
> >> >> >
> >> >> >I am on tomcat 4.1
> >> >> >
> >> >> >I am using JDBC connection pooling for MSSQL
> and
> >> >> singleton
> >> >> >class for JNDI lookup (only once) and get
> >> >> connection.
> >> >> >
> >> >> >Everything is working file. But how to test
> that
> >> >> connection
> >> >> >pool for 10 (where initial size specified is
> 10)
> >> >> has been created ?
> >> >> >
> >> >> >I know for mysql it is 'show processlist' and
> >> this
> >> >> gives out
> >> >> >initial number of connections at start. Same
> >> thing
> >> >> how can i
> >> >> >do it for mssql ?
> >> >> >
> >> >> >regards
> >> >> >Manisha
> >> >> >
> >> >> >
> >> >> >
> >> >> >
> >> >> >
> >> >> > 
> >> >> >__
> >> >> >Start your day with Yahoo! - Make it your
> home
> >> >> page! 
> >> >> >http://www.yahoo.com/r/hs
> >> >> >
> >> >>
> >>
>
>>>--

Tomcat undeploys application(context)

[Darius]

Hello,

I have test environment with tomcat 5.0.30 on Debian testing. Test
application is configured as such:


Evrything is working fine, except when trying to deploy new application.
Which is done by simply deleting old content and puting new jsp pages,
libs and compiled classes. After that, tomcat removes application context
(response is "The requested resource (/test) is not available"). Logs
show only few errors about null pointers, missing classes, etc.  (which is
ok, because of deleting and copying).
After restasrting tomcat, everything works fine.

How to prevent tomcat to remove application? Is this behavior normal?

DJ

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Singleton memory leak after redeploying.

[Remy Maucherat]

On 11/30/05, Remy Maucherat <[EMAIL PROTECTED]> wrote:
> This issue also affects Hibernate. As it doesn't seem to be a Tomcat
> bug, but would be good to have a fix for, I've added possible
> workarounds for that (reflection code which sets as many static fields
> as possible to null in loaded classes when stopping the classloader)
> in the latest Tomcat code (which you need to get from SVN). It would
> need testing.

To test this, recompile the class here and replace the original in
catalina.jar (or put in in the appropriate folder under
server/classes):
http://svn.apache.org/viewcvs.cgi/*checkout*/tomcat/container/tc5.5.x/catalina/src/share/org/apache/catalina/loader/WebappClassLoader.java?rev=348448&content-type=text%2Fplain

--
x
Rémy Maucherat
Developer & Consultant
JBoss Group (Europe) SàRL
x

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Singleton memory leak after redeploying.

[Remy Maucherat]

On 11/28/05, kurrele <[EMAIL PROTECTED]> wrote:
> Hi to everyone!! This is my first email to this list, hope is the correct
> one.
>
> I've been analyzing my code with a profiler (JProbe) because I was getting
> an
> OutOfMemoryException after a few redeploys of my application.
>
> After some tests, it turned out that my static fields were not GCed after
> redeploying, getting stuck with the classloader which loaded my classes.
>
> After that, I searched the bugzilla and found
>   *Bug# *(Memory Leak in Classloader/Manager deploy/undeploy)*:*
> 20758
> where it says that the bug has been FIXED.
>
> I tested it in Tomcat 4.1.24 and 5.0.28 getting the same result (memory leak
> in static fields).
>
> I attach here the servlet and singleton of my simple test webapp.
>
> ---
> public class Test extends HttpServlet
> {
>
> MySingleton singleton = MySingleton.getInstance();
>
> public void init(ServletConfig config) throws ServletException
> {
> super.init(config);
>
> }
>
> public void destroy()
> {
> singleton = null;
> }
>
> protected void processRequest(HttpServletRequest request,
> HttpServletResponse response)
> throws ServletException, IOException
> {
> response.setContentType("text/html");
> PrintWriter out = response.getWriter();
> out.println("JProbe TEST
> singletonJProbe TEST
> singleton");
> out.close();
> }
> protected void doGet(HttpServletRequest request, HttpServletResponse
> response)
> throws ServletException, IOException
> {
> processRequest(request, response);
> }
>
> protected void doPost(HttpServletRequest request, HttpServletResponse
> response)
> throws ServletException, IOException
> {
> processRequest(request, response);
> }
> }
>
>
> -
> public class MySingleton
> {
>
> private static MySingleton _instance = new MySingleton();
>
> public byte[] _charWidths = new byte[1024*1024];  // 1Meg mem
> allocation!!.
>
> private MySingleton()
> {}
>
> public static MySingleton getInstance()
> {
> return _instance;
> }
>
> public void finalize()
> {
> System.out.println("!!! END-MySingleton !!!");
> _instance = null;
> }
> }
>
>
> -
>
> After redeploying this simple webapp a 1Meg leak can be found due to
> MySingleton not being GCed.
>
> Please I want to know If I'm leaving out something, the bug is not really
> fixed or I need to take another approach.

This issue also affects Hibernate. As it doesn't seem to be a Tomcat
bug, but would be good to have a fix for, I've added possible
workarounds for that (reflection code which sets as many static fields
as possible to null in loaded classes when stopping the classloader)
in the latest Tomcat code (which you need to get from SVN). It would
need testing.

--
x
Rémy Maucherat
Developer & Consultant
JBoss Group (Europe) SàRL
x

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: eclipse and remote deployment?

[Nigel Garner]

Hi,

The best tool set that I have found is Eclipse 3.x with the Eclipse Web
Tools project plugin. The final release is not release is not out yet but I
have found the 0.7 release to be stable and very useful.

Nigel

On 30/11/05, Kristian Rink <[EMAIL PROTECTED]> wrote:
>
> Hi all;
>
> just wondering what sort of tool you're using (if any) in order to work
> with eclipse and any remote tomcat installation. So far, I'm using the
> sysdeo-tomcat eclipse plugin which only seems to do well with a local
> tomcat installation (fine for my testbed system, but at work I need to
> have something else). Is there any way of deploying applications and
> possibly remotely (re)starting contexts in any running tomcat from
> within eclipse?
>
> TIA and bye,
> Kris
>
>
> --
> Kristian Rink *  http://zimmer428.net * jab: [EMAIL PROTECTED]
> icq: 48874445 *  fon: ++49 176 2447 2771
>
> "Be yourself the kind of change you want to see in this world." (Gandhi)
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>

RE: Until which Apache-Tomcat version can I use the JVM 1.4.2_10?

[Bachler, Elisabeth (Elisabeth)]

 Thank you very much


-Original Message-
From: Markus Schönhaber [mailto:[EMAIL PROTECTED]
Sent: miércoles, 30 de noviembre de 2005 12:19
To: Tomcat Users List
Subject: Re: Until which Apache-Tomcat version can I use the JVM
1.4.2_10?


Bachler, Elisabeth (Elisabeth) wrote:
> SOrry for the certainly stupid question but what is the core distribution?

Well, Tomcat itself. In other words, for the latest Tomcat 5.5.x this would
be 
the file apache-tomcat-5.5.12.(zip|tar.gz|exe) you can download from
http://tomcat.apache.org/download-55.cgi
when you click on one of the links this page below
5.5.12
  Binary Distibutions
- Core:

Regards
  mks

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: preferred tomcat version

[Tim Funk]

5.5.12
Why? It gets the most developer attention if you find a bug.

-Tim

mukesh wrote:


Hi friends,

I am using Redhat Linux 7.0 and Apache web server (not tomcat). 

 


Which is the preferred version of tomcat I should use to add the
JSP/Servlet to my apache we server (and why)? And that tomcat version must
support mod_jk in order to connect it to apache (thankfully this has been
suggested by someone on this list)



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: web app to show session state for all server sessions

[Tim Funk]

If I had to do it - I would use MBeans. See the manager application and 
JMXProxy servlet in the manager application for details on querying jmx.


There might be a gotcha. You might run into occasional ClassNotFound 
exceptions or similar when trying to display the value of the attributes in 
sessions since your classloader is a different classloader than the webapp 
where the session lives.


-Tim

John MccLain wrote:


I want to write a webapp that, when a request is made, will display session
state ( a display of attributes and values within a session) for all
sessions running in a Tomcat server. I wish the display to be similar to the
folowing:
App
session
attribute = value


My question is, can this be done - querying other context sessions, and
would it be done with MBeans, or is there a better way? Can someone point me
to documentation on how to do something like this




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Singleton memory leak after redeploying.

[Rodrigo Ruiz]

Hi, I would like to add my two cents :-)

If I know that a class will only be instantiated once or twice, I 
usually prefer to declare the logger field as non-static.
I put in this category Stateless Session EJBs, servlets, filters, 
listeners, JSPs, and any singleton classes I implement by myself.


Also, on webapps, I tend to use the ServletContext as a singleton 
instance container, instead of using the singleton pattern, whenever I 
can. The performance is a bit worse, but it can be reduced by storing a 
local reference in the classes that access them, and I gain some 
benefits too: no need to manually free resources on context 
undeployment, and the ability to put those classes on the common or 
shared directory of Tomcat, and still have separate instances for each 
webapp using them.


I usually create a simple factory class like:

class XXXFactory {
 private static XXX singleton = null;
 private static Object lock = new Object();

 public static XXX getInstance(ServletContext ctx) {
   XXX instance;
   synchronized (lock) {
 if (ctx == null) {
   if (singleton == null) singleton = new XXX();
   instance = singleton;
 } else {
   instance = (XXX)ctx.getAttribute(XXX.class.getName());
   if (instance == null) {
 instance = new XXX();
 ctx.setAttribute(XXX.class.getName(), instance);
   }
 }
   }
   return instance;
 }
}

Another option is to use the commons discovery framework, but sometimes 
I just prefer a simpler solution. :-)


HTH,
Rodrigo Ruiz

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: web.xml question

[Tim Funk]

I think that can work (if you can ensure the URL flow will adhere to your specs)

-Tim

Robert Palmer wrote:

I was planning on doing this by having Apache handle the SSL and using 
its configuration file to differentiate between SSL'd areas of the site 
and non-SSL'd areas. Is this an option or should i rethink this?


Tim Funk wrote:

I would bet they are not using security constraints as defined in 
web.xml. I would bet they are using a 3rd party solution implemented 
as a Servlet Filter or something application server specific to handle 
this login issue. Notice they do not use JSESSIONID but something 
called BV_SessionID as parameter in the query string. A quick google 
search seems to show they use BroadVision.


-Tim

Dean Searle wrote:


Tim,

I'm not an expert with tomcat but how does a site like samsclub.com do
it then? I use their site a lot and it runs jsp's and most of the stuff
is unsecure (http) but when I get ready to do the actual purchase and
log in it is a secure site (https). Is there something that they are
doing, possibly masquerading the url or something?

Again not an expert, but something I have been interested in for some
time myself.

Dean 8-)

-Original Message-
From: Tim Funk [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 
29, 2005 10:34 AM

To: Tomcat Users List
Subject: Re: web.xml question

Security constraints are only imposed on the incoming URL.

Long story short - you'll need to place the entire webapp in SSL. There
is no clean way to use declarative statements to force the login to be
SSL and the rest of the webapp be nonssl.

-Tim 




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Java client does not re-use TCP/IP connections.

[Tim Funk]

This has nothing to do with tomcat. Please use the appropriate list.

-Tim

Magyar, Bence wrote:

Sorry,
  I'm quite new with all of this.  I've created a java client to my tomcat web service 
using the Java2WSDL2 utility and WSDL2Java utility.  Correct me if I'm wrong, I believe 
this is called the "stub" client model.  At any rate, my main() function in my 
client looks like:
   
  // get the web service...

   service = new WSDefinitionServiceLocator();
   
   // Now use the service to get a stub to the service

   ws = service.getMyWebService();
  
   Stub s = (Stub) ws;

   s.setMaintainSession(true);
   
  After this is set up, I can correctly call methods on my service such as 
   
  ws.Method1();

  ws.Method2();
   
  For each one of these invocations, my client creates a new TCP/IP connection to the service instead of reusing the existing one.  Am I missing some critical parameter 
  in my Stub class?  I'm not sure how else to configure the client.  If anyone could 
  point me in the right direction, it would be much appreciated. Thanks!


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Until which Apache-Tomcat version can I use the JVM 1.4.2_10?

[Markus Schönhaber]

Bachler, Elisabeth (Elisabeth) wrote:
> SOrry for the certainly stupid question but what is the core distribution?

Well, Tomcat itself. In other words, for the latest Tomcat 5.5.x this would be 
the file apache-tomcat-5.5.12.(zip|tar.gz|exe) you can download from
http://tomcat.apache.org/download-55.cgi
when you click on one of the links this page below
5.5.12
  Binary Distibutions
- Core:

Regards
  mks

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: Until which Apache-Tomcat version can I use the JVM 1.4.2_10?

[Bachler, Elisabeth (Elisabeth)]

SOrry for the certainly stupid question but what is the core distribution?

Elisabeth


-Original Message-
From: Markus Schönhaber [mailto:[EMAIL PROTECTED]
Sent: miércoles, 30 de noviembre de 2005 12:08
To: Tomcat Users List
Subject: Re: Until which Apache-Tomcat version can I use the JVM
1.4.2_10?


Bachler, Elisabeth (Elisabeth) wrote:
> I need to use the JVM 1.4.2_10 (I think the name is correct)... I am using
> at the moment Apache-Tomcat 5.5.9. Can I use this Tomcat version with the
> JVM 1.4.2_10?

Yes, but besides the core distibution, you'll need the JDK 1.4 Compatability

Package.

> SO my question is: Until which version can I use the JVM 1.4.2_10?

Until the latest and greatest. As stated above, you'll need the JDK 1.4 
Compatability Package to make Tomcat 5.5.x work with JDK 1.4.

Regards
  mks

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Until which Apache-Tomcat version can I use the JVM 1.4.2_10?

[Markus Schönhaber]

Bachler, Elisabeth (Elisabeth) wrote:
> I need to use the JVM 1.4.2_10 (I think the name is correct)... I am using
> at the moment Apache-Tomcat 5.5.9. Can I use this Tomcat version with the
> JVM 1.4.2_10?

Yes, but besides the core distibution, you'll need the JDK 1.4 Compatability 
Package.

> SO my question is: Until which version can I use the JVM 1.4.2_10?

Until the latest and greatest. As stated above, you'll need the JDK 1.4 
Compatability Package to make Tomcat 5.5.x work with JDK 1.4.

Regards
  mks

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

How to deploy my webapp as root context webapp without tomcat loading it twice?

[Vivek Mohan]

Hi,

Scenario:

I've a webapplication in my tomcat4 installation, called myWebapp.
I've configured it to be my root webapplication since I want users to
be able to access it using the url: "http::". Here's a
snippet of my server.xml:




 
   
 


myWebapp has a init servlet which is loaded on startup. Besides doing
other things like instantiating db connection pool, this servlet
configures the log4j for the application logging.

Issue:

When I start the tomcat server, I find, through logs of the application (and
of log4j), that the init servlet is executed twice.
Essentially, the webapp is loaded twice. This creates a problem with
myWebapp since the logger is configured twice (resulting in
cross-locks and hence Rolling fails).

Question:

I want to have myWebapp as the root context webapp in my tomcat
server. And I don't want to rename it to "ROOT". Is there a way by
which I can avoid tomcat from loading myWebapp twice?

Thanks in advance,
Vivek.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

eclipse and remote deployment?

[Kristian Rink]

Hi all;

just wondering what sort of tool you're using (if any) in order to work
with eclipse and any remote tomcat installation. So far, I'm using the
sysdeo-tomcat eclipse plugin which only seems to do well with a local
tomcat installation (fine for my testbed system, but at work I need to
have something else). Is there any way of deploying applications and
possibly remotely (re)starting contexts in any running tomcat from
within eclipse?

TIA and bye,
Kris


-- 
Kristian Rink *  http://zimmer428.net * jab: [EMAIL PROTECTED]
icq: 48874445 *  fon: ++49 176 2447 2771

"Be yourself the kind of change you want to see in this world." (Gandhi)

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: Vedr.: Until which Apache-Tomcat version can I use the JVM 1. 4.2_10?

[Bachler, Elisabeth (Elisabeth)]

Thanks
Elisabeth

-Original Message-
From: Thomas Nybro Bolding [mailto:[EMAIL PROTECTED]
Sent: miercoles, 30 de noviembre de 2005 11:34
To: Tomcat Users List
Subject: Vedr.: Until which Apache-Tomcat version can I use the JVM
1.4.2_10?


Any version of Tomcat will do - just download the "JDK 1.4 Compability 
Package" from http://tomcat.apache.org/download-55.cgi

/Thomas







"Bachler, Elisabeth (Elisabeth)" <[EMAIL PROTECTED]>
30-11-2005 09:48
Besvar venligst til "Tomcat Users List"

 
Til:"'Tomcat Users List'" 
cc: 
Vedr.:  Until which Apache-Tomcat version can I use the JVM
1.4.2_10?



Hello again,

I need to use the JVM 1.4.2_10 (I think the name is correct)... I am using
at the moment Apache-Tomcat 5.5.9. Can I use this Tomcat version with the
JVM 1.4.2_10?

SO my question is: Until which version can I use the JVM 1.4.2_10?

THank you
ELisabeth

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





___
Vi goer opmaerksom paa, at denne e-mail kan indeholde fortrolig information.
Hvis du ved en fejltagelse modtager e-mailen, beder vi dig venligst
informere afsender om fejlen ved at bruge svar-funktionen. Samtidig beder vi
dig slette e-mailen i dit system uden at videresende eller kopiere den.
Selv om e-mailen og ethvert vedhaeftet bilag efter vores overbevisning er
fri for virus og andre fejl, som kan paavirke computeren eller it-systemet,
hvori den modtages og laeses, aabnes den paa modtagerens eget ansvar. Vi
paatager os ikke noget ansvar for tab og skade, som er opstaaet i
forbindelse med at modtage og bruge e-mailen.
___
Please note that this message may contain confidential information. If you
have received this message by mistake, please inform the sender of the
mistake by sending a reply, then delete the message from your system without
making, distributing or retaining any copies of it.
Although we believe that the message and any attachments are free from
viruses and other errors that might affect the computer or IT system where
it is received and read, the recipient opens the message at his or her own
risk. We assume no responsibility for any loss or damage arising from the
receipt or use of this message.



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: unix user auth within servlets/jsps?

[Kristian Rink]

Hi Tim,@list;

Tim Funk schrieb:
> I think there is a JAAS plugin which allows unix password authentication
> so using JaasRealm will probably be the way to go.

So I'll see whether I can find something appropriate for that and give
it a try - thanks.


> I think somewhere on sun.com there are some jsp / servlet mailing lists.

Hmm, so far I haven't yet found any useful ones; there's a bunch of
-interest lists which seem to be dead or asleep...

Anyhow, thanks and bye,
Kris


-- 
Kristian Rink *  http://zimmer428.net * jab: [EMAIL PROTECTED]
icq: 48874445 *  fon: ++49 176 2447 2771

"Be yourself the kind of change you want to see in this world." (Gandhi)

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Vedr.: Until which Apache-Tomcat version can I use the JVM 1.4.2_10?

[Thomas Nybro Bolding]

Any version of Tomcat will do - just download the "JDK 1.4 Compability 
Package" from http://tomcat.apache.org/download-55.cgi

/Thomas







"Bachler, Elisabeth (Elisabeth)" <[EMAIL PROTECTED]>
30-11-2005 09:48
Besvar venligst til "Tomcat Users List"

 
Til:"'Tomcat Users List'" 
cc: 
Vedr.:  Until which Apache-Tomcat version can I use the JVM 1.4.2_10?



Hello again,

I need to use the JVM 1.4.2_10 (I think the name is correct)... I am using
at the moment Apache-Tomcat 5.5.9. Can I use this Tomcat version with the
JVM 1.4.2_10?

SO my question is: Until which version can I use the JVM 1.4.2_10?

THank you
ELisabeth

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





___
Vi goer opmaerksom paa, at denne e-mail kan indeholde fortrolig information. 
Hvis du ved en fejltagelse modtager e-mailen, beder vi dig venligst informere 
afsender om fejlen ved at bruge svar-funktionen. Samtidig beder vi dig slette 
e-mailen i dit system uden at videresende eller kopiere den.
Selv om e-mailen og ethvert vedhaeftet bilag efter vores overbevisning er fri 
for virus og andre fejl, som kan paavirke computeren eller it-systemet, hvori 
den modtages og laeses, aabnes den paa modtagerens eget ansvar. Vi paatager os 
ikke noget ansvar for tab og skade, som er opstaaet i forbindelse med at 
modtage og bruge e-mailen.
___
Please note that this message may contain confidential information. If you have 
received this message by mistake, please inform the sender of the mistake by 
sending a reply, then delete the message from your system without making, 
distributing or retaining any copies of it.
Although we believe that the message and any attachments are free from viruses 
and other errors that might affect the computer or IT system where it is 
received and read, the recipient opens the message at his or her own risk. We 
assume no responsibility for any loss or damage arising from the receipt or use 
of this message.

Re: Client Authentication

[Markus Plail]

Dobson Paul L Contr 84 MSUG/GBMLBR <[EMAIL PROTECTED]> writes:

> Thanks for the additional insight into client authentication.
>
> The smart card and IE are set up correctly to prompt for a valid
> certificate.  I know this because that is how it works when I visit
> other web sites on our network that has client authentication
> implimented.  I have a feeling the problem I am having has something
> to do with Tomcat not knowing what to validate clients against.
>
> Does Tomcat use the value in the keystoreFile property to determine
> what certificates to validate client against?  If so, what entries
> should be in the keystore? If not how do I let tomcat know that CA to
> validate against?

At the moment I do not know what truststoreFile is exactly for, but for
client authentication you need to set:

 truststoreFile="${catalina.home}/conf/vnet/portalTruststore.jks"
 truststorePass="verysecret" />

In this keystore reside all the certificates with which you can
authenticate yourself on the server.

regards
Markus


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: SSL Certificate Beginner Question

[Chris Lear]

* Bill Barker wrote (30/11/05 05:42):
> "Scott Purcell" <[EMAIL PROTECTED]> wrote in message 
> news:[EMAIL PROTECTED]
>> Real helpful ... I searched on SRV.12 and it brought up a bunch of links
>> that have nothing to do with Tomcat  config of SSL.
>>
>> I probably posted a lame request. Let me try again.
>>
>> I have purchased a certificate via Verisign, and I have installed the
>> certificate into a keystore. I am running Windows XP and Tomcat 5.5.12.
>> I put the keystore and Cert.cer in the Tomcat/bin directory for 
>> organiation.
>> I read that the default is usually in the home directory where tomcat is
>> installed on Unix. But that is another OS.
>>
>> I followed the docs here under Tomcat 5 SSL and ran across this:
>> http://tomcat.apache.org/tomcat-5.5-doc/ssl-howto.html
>>
> 
> There are two likely problems, but I don't know which one applies to you.
> 
> 1) Since you are using 5.5.12, if you installed the libtcnative.dll with 
> Tomcat, then you need to configure SSL via 
> http://tomcat.apache.org/tomcat-5.5-doc/apr.html.  In particular, you need 
> to extract the private-key into an OpenSSL format.  Alternatively, you can 
> rename the dll for now, and work on just getting the Java Connector working.
> 
> 2) You imported your cert into a different keystore file than the one that 
> use used to generate the CSR.  Import the cert into the original one and you 
> will be fine.  If you used OpenSSL to generate the CSR, than the easiest is 
> to convert to a pkcs12 keystore as described above.  Alternatively, you can 
> try using http://www.comu.de/docs/tomcat_ssl.htm.
> 

3) (Maybe a long shot) Windows xp firewall is blocking the port. Does
netstat -ln show anything listening on port 8443? Do the tomcat logs
mention port 8443?

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Until which Apache-Tomcat version can I use the JVM 1.4.2_10?

[Bachler, Elisabeth (Elisabeth)]

Hello again,

I need to use the JVM 1.4.2_10 (I think the name is correct)... I am using
at the moment Apache-Tomcat 5.5.9. Can I use this Tomcat version with the
JVM 1.4.2_10?

SO my question is: Until which version can I use the JVM 1.4.2_10?

THank you
ELisabeth

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]