Reloadable attribute not working

2007-05-19 Thread lightbulb432

When I update a servlet class and it gets compiled automatically into
WEB-INF/classes, my context does not reload automatically. It is only when I
restart Tomcat that the changes to the servlet are viewable.

I am using Tomcat 6 and have set reloadable to true in context.xml in my
META-INF/context.xml file.

I'm running Tomcat 6 embedded, where I use the Bootstrap class to start the
server initially.

Why might this not be working?

Thanks.
-- 
View this message in context: 
http://www.nabble.com/Reloadable-attribute-not-working-tf3781575.html#a10694472
Sent from the Tomcat - User mailing list archive at Nabble.com.


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Suspected mod_jk connection problems

2007-05-19 Thread Pid

Martin Gainty wrote:
I used to work with a Sys Admin whose expertise was chaing the sys admin 
password
when asked about issues such as interconnecting thru Pix he would say 
let me get back to you..it sounds like this sys admin is working for you 
now

Anyway here is a quick tutorial on configuring pix
http://www.linuxhomenetworking.com/wiki/index.php/Quick_HOWTO_:_Ch02_:_Introduction_to_Networking 


You'll have to do some fun things like setting up arp tables and such
This will guarantee that IP x.x.x.x:PortX will be forwarded to 
y.y.y.y:PortY
the other thing that you can do is open up your subnet mask which is 
probably set to something massively restrictive like 255.255.255.254

HTH/


Uh, what?



This email message and any files transmitted with it contain confidential
information intended only for the person(s) to whom this email message is
addressed.  If you have received this email message in error, please notify
the sender immediately by telephone or email and destroy the original
message without making a copy.  Thank you.

- Original Message - From: tomcat [EMAIL PROTECTED]
To: tomcat-user-jakarta.apache.org users@tomcat.apache.org
Sent: Thursday, May 17, 2007 5:05 PM
Subject: Suspected mod_jk connection problems



Hello All,

I have a server that is not too heavily trafficked (yet!) that, to the 
user appears to hang on pages. This appears to be happening most often 
to users outside my network, as it has not been encountered by our 
developers unless they are working from home.


I am not seeing any network issues, internally, but I do see these 
errors in my jk.log quite a lot:


[error] ajp_service::jk_ajp_common.c (1659): Client connection aborted 
or network problems


I've looked this error up in my search engines with no hits. Any 
suggestions on what to look for or how to clear this up?


Configuration:
CentOS 4.4
Apache 2.0.52
Jakarta-Tomcat 5.5.7
mod_jk-1.2.8

Thanks,
Glenn


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]






smime.p7s
Description: S/MIME Cryptographic Signature


Re: Prevent unwanted requests

2007-05-19 Thread Pid
This is less programmatical than pragmatical but you could try not 
putting your .java files on the web server...


:oP


Lucas Galfaso wrote:

I think that a new servlet to filter these files is not the proper
approach, and you should use a filter :)

- LG

On 5/18/07, Milanez, Marcus [EMAIL PROTECTED] wrote:

Is it possible to prevent the request os unwatned extensions, like
*.bak, *.java and so on, through web.xml file? My solution was creating
a servlet that gets mapped to this extensions, but I could realize that
it doesn't work along with DWR for example...  The problem is that when
I invoke something like myapp/dwr/file.java, this URL is mapped to dwr
servlet instead of ForbiddenFilesController. Does anybody know how to
solve that?


My web.xml contains the following lines:

...
servlet-mapping
servlet-nameForbiddenFilesController/servlet-name
url-pattern*.java/url-pattern
/servlet-mapping

servlet-mapping
servlet-namedwr-invoker/servlet-name
url-pattern/dwr/*/url-pattern
/servlet-mapping
...

And my controller has the following lines of code:

@Override
protected void doGet(HttpServletRequest req, HttpServletResponse
resp)
throws ServletException, IOException {

//proibido
resp.setStatus(HttpServletResponse.SC_FORBIDDEN);
//resp.getWriter().close();
return;

}

@Override
protected void doPost(HttpServletRequest req,
HttpServletResponse resp)
throws ServletException, IOException {

//proibido
resp.setStatus(HttpServletResponse.SC_FORBIDDEN);
//resp.getWriter().close();
super.doPost(req, resp);
}

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]






smime.p7s
Description: S/MIME Cryptographic Signature


Re: UserDatabase security

2007-05-19 Thread Pid
I'm trying to write a regex that will turn Mr Kewl's posts into 
something readable, if anyone would care to help.  If there's sufficient 
interest I'll start a project on SourceForge to turn it into a plugin 
for Outlook, Thunderbird etc.


p



Johnny Kewl wrote:

Hi Jerome...
Dont think its possible with tomcat doesnt have an encrypted 
password store.
But I think you right... its part of a more general issue... namely that 
the server as a user, is a power user, and has to be able to get at 
resources on the machine... so you got this power user guarding all 
other users. Now if the passwords are used in a web only context... not 
too big a problem... but if the password is also the users XP password, 
and they have access to the company's treasury... its a huge problem.
Now you will see that this is also an issue on other systems... even 
systems that have the privilege of being able to integrate with the 
subsystem... like for example IIS on Active Directory.
Where the password will not be stored normally... ie the hash of the 
password is stored and thats protected behind admin priveleges... this 
all breaks down because of the way BASIC and DIGEST authentication 
works... you will see that then they have to store the original 
password (as a reversible process) because without it... its not 
possible to make Digest and Basic work... those systems need to get at 
the original plain text password.
I think BASIC could be made to work with a hash, but I dont think Digest 
can work at all without it (plain text password) and on the web 
Digest is the better scheme... Basic is very vunerable.
Anyway... the thing is... theres tradeoffs... so if u looking for a 
foolproof scheme... you not going to find it.
I do think that Tomcat could do with an encrypted password storage 
scheme... ie there is a master password, stored as a hash... and only 
the system can get to it and decrypt the passwords stored in users.xml. 
But having said that... how would that work with other realms because 
now they have to interoperate... and that means there has to be an 
single point of security access... it all gets very complicated.


I've just made my own simple security solution for servlets, maybe you 
want to look at it.
http://coolese.100free.com/   Its called GangBang... yeah I know... my 
imagination is in the gutter ha ha... but its called that because it 
allows for single sign on across domains, and multiple machines.


Anyway... I'm getting there because wots on your mind also worried me 
and I want to tell you how GangBang handles it.
Like Tomcat it has a plain visible password store... because its easy, 
and for many systems its all you need.
BUT... then what I did instead of going for the preconfigured realm 
idea... is just expose an interface... so the system can be told to ask 
another little class for the password and user roles. So wot this does 
is allow you to do anything you want... for example if you wanted to 
store encrypted passwords in your database... you can. Dont know enough 
about LDAP to really comment but I imagine one could set up a one way 
password scheme on it AND a reversible scheme just for your web 
server... point is you can code wot ever u have 2.
In your case you could encrypt the passwords and store them in a 
file... behind a master password with a little salt... in your web-app.
Security in theory should be visible... ie you should be able to tell 
people the scheme and its still difficult... but I'm beginning to think 
that in a cross platform system like tomcat... its near impossible... so 
all I came up with is a way to let the programmer do whatever they want.
Can it stop someone hacking Tomcat as a power user no... I dont 
think anything can... that like trying to keep an administrator out of a 
system.

But can you make it damn difficult to get at sensitive passwords yes.

... have fun

- Original Message - From: Jerome Benezech [EMAIL PROTECTED]
To: users@tomcat.apache.org
Sent: Friday, May 18, 2007 6:29 AM
Subject: UserDatabase  security



Hi,
I have a question regarding Tomcat server UserDatabase
on Linux.
When choosing a MemoryUserDatabase, tomcat users and
passwords are declared in a tomcat-users.xml file. The
tomcat user running the server must have read
permission on this file.
At the same time, all webapps running in tomcat are
running under the same Linux user ('tomcat'). So any
webapp can access this file and display its content.

My app is hosted on a shared Linux server. With the
present configuration, I can retrieve this file and
display every user login/password, then if I wanted
to, I could go into somebody else' webapp manager and
undeploy it.
I am a bit worried that somebody would do that to
me...

Is there a way to ensure that only the root user can
read this file ?


Thanks
Jerome




Jerome Benezech
[EMAIL PROTECTED]

-
To start a new topic, e-mail: 

Re: Overriding Default Servlet?

2007-05-19 Thread Johnny Kewl

Thanks everyone for the info magic mailing list this!
My interest in the default servlet is 2 fold

A Resin user asked whether tomcat could do this
  path-mapping url-pattern=/activeadv/*
real-path=/doc_root/activeadv//

  path-mapping url-pattern=/includes/*
real-path=/doc_root/includes//

I thought... be kind of cool to add that functionality and maybe extend it 
to full paths on HTML PDF files
files... so one can serve up isolated sites installed on a machine (outside 
of a web-app)... like for example the SUN tutorial.   its a nice way do turn 
tomcat into a full document system for entire machine... as well as allow 
for some additional mapping... a question that seems to come up over and 
over again... naturally JSPs will have to be relative paths.


The other thing... is that if one looks at the default servlet code... the 
thing can do XSLT XML transformations, but one cant see that functionality 
in the Generic servlet


So I guess from previous discussion... the thing to do its create a 
DefaultHttpServlet which extends HttpServlet.

Use Tims trick
{
  getServletContext().getNamedDispatcher(default)
 .forward(request, response);
  return;
}
to pull in the safe functionality... ie exclude things like PUTs... and make 
default file serving something that one can turn on and off in the 
Servlet that
extends DefaultHttpServlet probably best way is as overridable 
function call super if you want default file serving etc...

Then... Recreate the XSLT XML inheritable functionality

Regards... Johnny 



-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: UserDatabase security

2007-05-19 Thread Johnny Kewl

Ha ha... if you get it working, I'll buy it from you ;)

- Original Message - 
From: Pid [EMAIL PROTECTED]

To: Tomcat Users List users@tomcat.apache.org
Sent: Saturday, May 19, 2007 11:00 AM
Subject: Re: UserDatabase  security


I'm trying to write a regex that will turn Mr Kewl's posts into 
something readable, if anyone would care to help.  If there's sufficient 
interest I'll start a project on SourceForge to turn it into a plugin 
for Outlook, Thunderbird etc.



-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Tomcat WebDAV Security

2007-05-19 Thread Colin71

Hi,

I want to use tomcat/webdav as a simple file server.

The only restriction is that I want files with certain extensions to be read
only
and all other files read/write (i.e. files with suffix myext.xls to be read
only where filenames can be file1.myext.xls).

I have tried to do this by adjusting parameters in the webdav/web.xml file
but I can't figure out a way of doing the above.
I can do this if I have 2 user logins, where one is read/write and the other
is read only but not for a single user
(whereby I attempt to configure multiple security constraints or
url-patterns for a given user role).

My question is, is this possible using the webdav/web.xml file or do I need
to look into jaas realms or something else?

Thanks,

Colin

-- 
View this message in context: 
http://www.nabble.com/Tomcat-WebDAV-Security-tf3782245.html#a10696324
Sent from the Tomcat - User mailing list archive at Nabble.com.


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [OT] UserDatabase security

2007-05-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Pid,

Pid wrote:
 I'm trying to write a regex that will turn Mr Kewl's posts into 
 something readable, if anyone would care to help.

How about:

s/wot/what/g
s/\.\.\./.\n/g

That ought to help quite a bit ;)

- -chris

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGTvfc9CaO5/Lv0PARAkn6AJ9MkGkHU09lg6xte3Ci/t+s6h0GQQCfV5Cj
79znBPu/CRQrfk9fTMhP5p0=
=54O0
-END PGP SIGNATURE-

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Marking servlet ... as unavailable

2007-05-19 Thread Philipp Führer - netzbeben

Hi Joe,

the problem is, that the UnavailableException is buggy in some tomcat
versions.
If thrown, tomcat will set the servlet as unavailable but won't print
the exception message.
Use the newest tomcat-version. Or change all UnavailableException to
ServletException, so
you will see the exception message. But in this case don't forget that
tomcat won't set the
servlet as unavailable.

regards,
Philipp


I could be wrong, but it appeared that when the Servlet was flagged
as unavailable, that THAT would cause a series of other problems
which the stackTrace() showed, not what actually caused it to
be flagged as unavailable.

If you're right, that it was flagged outside of Tomcat, than there
isn't anything more to show about the problem, but this:

Mar 4, 2007 12:11:22 PM org.apache.catalina.core.ApplicationContext log
INFO: Marking servlet ClientWMIClassesServlet as unavailable

seemed to say that catalina flagged it, at least that's what I
thought..

I tried switching from compiling with jikes to going back to
javac, deleting and reinstalling Java and several other things.
It wasn't an easy thing to
fix.  Whatever it didn't like is commented out, and I still
have to resolve that.


Thanks,

Joe Siebenmann

--

Your logs stated:

SEVERE: Allocate exception for servlet ClientWMIClassesServlet
java.lang.VerifyError: (class: com/jps/NetMgt/ClientWMIClassesServlet, method: 
doGet signature: 
(Ljavax/servlet/http/HttpServletRequest;Ljavax/servlet/http/HttpServletResponse;)V)

 Incompatible argument to function
 at java.lang.Class.getDeclaredConstructors0(Native Method)
 at java.lang.Class.privateGetDeclaredConstructors(Class.java:2357)
 at java.lang.Class.getConstructor0(Class.java:2671)
 at java.lang.Class.newInstance0(Class.java:321)
 at java.lang.Class.newInstance(Class.java:303)


I am not sure what additionnal informations you would like tomcat to
provide. This error occured while creating an instance of servlet. This
exception comes from the inside of java.lang over which tomcat has no
control. Apart from the exception message it showed you in stdout,
tomcat has no more informations to provide you with.

Side note,
Subclasses of |LinkageError| indicate that a class has some dependency
on another class; however, the latter class has incompatibly changed
after the compilation of the former class.

It could be in your case your compiler got crazy, your .class got
truncated or altered during transfert. Probably just a clean and rebuild
is enough to solve it.



Mar 4, 2007 12:11:22 PM org.apache.catalina.core.ApplicationContext log
INFO: Marking servlet ClientWMIClassesServlet as unavailable
Mar 4, 2007 12:11:22 PM org.apache.catalina.core.ApplicationDispatcher invoke
SEVERE: Allocate exception for servlet ClientWMIClassesServlet
java.lang.VerifyError: (class: com/jps/NetMgt/ClientWMIClassesServlet, method: 
doGet signature: 
(Ljavax/servlet/http/HttpServletRequest;Ljavax/servlet/http/HttpServletResponse;)V)

 Incompatible argument to function
at java.lang.Class.getDeclaredConstructors0(Native Method)
at java.lang.Class.privateGetDeclaredConstructors(Class.java:2357)
at java.lang.Class.getConstructor0(Class.java:2671)
at java.lang.Class.newInstance0(Class.java:321)
at java.lang.Class.newInstance(Class.java:303)
at 
org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1055)
at 
org.apache.catalina.core.StandardWrapper.allocate(StandardWrapper.java:757)
at 
org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:641)
at 
org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:463)
at 
org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:398)
at 
org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:301)

at com.jps.NetMgt.ClientWMIServlet.doGet(Unknown Source)
at com.jps.NetMgt.ClientWMIServlet.doPost(Unknown Source)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:709)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:252)
at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)
at 
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213)
at 
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178)
at 
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126)
at 
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105)
at 
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107)
  

Re: Tomcat WebDAV Security

2007-05-19 Thread Mark Thomas
Colin71 wrote:
 My question is, is this possible using the webdav/web.xml file or do I need
 to look into jaas realms or something else?

This should work but I haven't tested it:
 - set the readonly init-param for the webdav servlet to false
 - use security constraints to limit the methods permitted on
different files (see SRV.12.8 in the Servlet spec)

HTH,

Mark


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [OT] UserDatabase security

2007-05-19 Thread Pid

Christopher Schultz wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Pid,

Pid wrote:
I'm trying to write a regex that will turn Mr Kewl's posts into 
something readable, if anyone would care to help.


How about:

s/wot/what/g
s/\.\.\./.\n/g


Many thanks.
I will add your first rule, and:

  s/\bu\b/you/g


That ought to help quite a bit ;)


I started with:

  s/([^\.]{72,})\.{3,}\s+?/$1.\n\n/g
  s/\.{3,}/, /g

but then realised (after a coffee) that the latter rule on it's own is 
more effective, especially if you:


  s/\.\s+/.\n\/g
  s/\n+/\n\n/g



- -chris

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGTvfc9CaO5/Lv0PARAkn6AJ9MkGkHU09lg6xte3Ci/t+s6h0GQQCfV5Cj
79znBPu/CRQrfk9fTMhP5p0=
=54O0
-END PGP SIGNATURE-

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]






smime.p7s
Description: S/MIME Cryptographic Signature


[CVE-2007-1355] Tomcat documentation XSS vulnerabilities

2007-05-19 Thread Mark Thomas
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

CVE-2007-1355: Tomcat documentation XSS vulnerabilities

Severity:
Moderate (Cross-site scripting)

Vendor:
The Apache Software Foundation

Versions Affected:
Tomcat 4.0.0 to 4.0.6
Tomcat 4.1.0 to 4.1.36
Tomcat 5.0.0 to 5.0.30
Tomcat 5.5.0 to 5.5.23
Tomcat 6.0.0 to 6.0.10

Description:
The Tomcat documentation web application includes a sample application
that contains multiple XSS vulnerabilities.

Mitigation:
Undeploy the Tomcat documentation web application.

Credit:
These issues were discovered by Ferruh Mavituna.

Example:
http://server/tomcat-docs/appdev/sample/web/hello.jsp?test=scriptalert(document.domain)/script


References:
http://tomcat.apache.org/security.html

Mark Thomas
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGTxLXb7IeiTPGAkMRAhPzAKDxibK3Cn9Dq+2ZrlhZszmwPAJufACfdvjv
AH8zWtQXPUbBVgDS+6KoNOE=
=/6Zd
-END PGP SIGNATURE-

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



tomcat-dbcp from Maven

2007-05-19 Thread lightbulb432

The tomcat-dbcp library doesn't seem to be available from the Maven
repository for Tomcat at http://tomcat.apache.org/dev/dist/m2-repository or
repo1.maven.org...am I just missing another maven repository that I should
be looking at, or must I manually install this JAR into my own local
repository?

Also, when will the latest version of the JARs (later than 6.0.10) be
uploaded to the repository at
http://tomcat.apache.org/dev/dist/m2-repository - what's the process for
deciding when it's appropriate to upload Tomcat releases to the Maven
repositories for Tomcat?

Thanks.
-- 
View this message in context: 
http://www.nabble.com/tomcat-dbcp-from-Maven-tf3782721.html#a10697671
Sent from the Tomcat - User mailing list archive at Nabble.com.


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Prevent unwanted requests

2007-05-19 Thread Rashmi Rubdi

I agree, there's no need to place .java files, the .class files under
/WEB-INF/ are sufficient.

Unless you're writing an Applet, which has to exist outside /WEB-INF/
, all other classes are protected from browser/ client access when
they're under /WEB-INF/

-Rashmi

On 5/19/07, Pid [EMAIL PROTECTED] wrote:

This is less programmatical than pragmatical but you could try not
putting your .java files on the web server...

:oP



-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: Reloadable attribute not working

2007-05-19 Thread Caldarale, Charles R
 From: lightbulb432 [mailto:[EMAIL PROTECTED] 
 Subject: Reloadable attribute not working
 
 I am using Tomcat 6 and have set reloadable to true in 
 context.xml in my META-INF/context.xml file.

Does a conf/Catalina/[host]/[appname].xml file exist? (I don't actually
know if embedded uses a conf directory.)  Such a file would override the
one in META-INF/context.xml in a non-embedded Tomcat.

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you
received this in error, please contact the sender and delete the e-mail
and its attachments from all computers.

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: Reloadable attribute not working

2007-05-19 Thread lightbulb432

There's no folders under CATALINA_BASE/conf, but I have a guess as to what's
going on and perhaps you could comment.

I'm using the invoker servlet - could that be a reason, or does it have
nothing to do with this? 

Also, could it be why no .java and .class files are generated in my work
directory?

What other effects might one expect using the invoker servlet?



Caldarale, Charles R wrote:
 
 From: lightbulb432 [mailto:[EMAIL PROTECTED] 
 Subject: Reloadable attribute not working
 
 I am using Tomcat 6 and have set reloadable to true in 
 context.xml in my META-INF/context.xml file.
 
 Does a conf/Catalina/[host]/[appname].xml file exist? (I don't actually
 know if embedded uses a conf directory.)  Such a file would override the
 one in META-INF/context.xml in a non-embedded Tomcat.
 
  - Chuck
 
 
 THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
 MATERIAL and is thus for use only by the intended recipient. If you
 received this in error, please contact the sender and delete the e-mail
 and its attachments from all computers.
 
 -
 To start a new topic, e-mail: users@tomcat.apache.org
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 
 
 

-- 
View this message in context: 
http://www.nabble.com/Reloadable-attribute-not-working-tf3781575.html#a10698303
Sent from the Tomcat - User mailing list archive at Nabble.com.


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: javax.servlet.ServletException: Java heap space

2007-05-19 Thread Rashmi Rubdi

On 5/18/07, Aurélien Allienne [EMAIL PROTECTED] wrote:

Hi,

I have this error : javax.servlet.ServletException: Java heap space

But I can find how I can change this in catalina.sh.

Can you have the solution?


Here are some memory configuration information:
http://tomcat.apache.org/faq/memory.html

The solution may not depend on the version of Tomcat, JDK etc you're
using, but it helps for us to know just in case it does.



Cordially

Aurelien Allienne



-Regards
Rashmi

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: displaying customized error page in tomcat 5.5.12

2007-05-19 Thread Len Popp

That doesn't work for me. The ErrorDocument 503 declaration in
httpd.conf only works when Tomcat is completely down, not when a
single webapp is stopped or reloading. As long as Tomcat is running,
you'll get Tomcat's error pages. And, you can't override this in
Tomcat's conf/web.xml, only in each webapp's web.xml, which makes it
impossible to customize the 503 page. :-(

(I've tested all this with Tomcat 5.5, Apache web server 2.0, JK 1.2.
Maybe it's different with Tomcat 6 or Apache 2.2.)
--
Len

On 5/18/07, Tim Lucia [EMAIL PROTECTED] wrote:



 -Original Message-
 From: Abdul Qayyum [mailto:[EMAIL PROTECTED]
 Sent: Friday, May 18, 2007 3:54 AM
 To: Tomcat Users List
 Subject: Re: displaying customized error page in tomcat 5.5.12

 You are right Tim,
 How I came to know about this might explain why !

 I changed my war file to ROOT.war as this is situation in our website's
 tomcat.
 Now when I go to localhost:8080/ my application is displayed properly
 something like localhost:8080/eApp gives the custom 404 page I designed
 and
 placed in newly renamed ROOT folder.

 But When I am trying to reload my root using manager/html and at the same
 time trying to access localhost:8080/, tomcat do not show custom page
 rather
 it sends a blank page.

 So, is apache web server is the only option left for me ??
 can virtual hosting be used here ??

I don't know.  I use

ErrorDocument 503 /maintenance.html
ErrorDocument 404 /404.html

in my httpd.conf and httpd sends the custom error page for me.  Maybe
someone else can offer you a different solution.

Tim


 Thanks and Regards:
 Quayum Sagri


 On 5/17/07, Tim Lucia [EMAIL PROTECTED] wrote:
 
  That will work, but only if the root (/) context is available and
 running.
  This may or may not solve some or all of your problem(s).
 
  Tim
 
   -Original Message-
   From: Abdul Qayyum [mailto:[EMAIL PROTECTED]
   Sent: Thursday, May 17, 2007 12:08 PM
   To: Tomcat Users List
   Subject: Re: displaying customized error page in tomcat 5.5.12
  
   Hi Tim,
   Thanks for that explanation.
   We are not using any web server, so, I cannot configure in httpd file.
  
   I resolved the problem using the same error-page tag. I have placed
 my
   custom error page in webapps/ROOT directory.
  
   Thanks for your support.
  
   On 5/17/07, Tim Lucia [EMAIL PROTECTED] wrote:
   
   
   
 -Original Message-
 From: Abdul Qayyum [mailto:[EMAIL PROTECTED]
 Sent: Thursday, May 17, 2007 2:01 AM
 To: Tomcat Users List
 Subject: Re: displaying customized error page in tomcat 5.5.12

 Hi Tim Lucia,

 I'm guessing you can add a global error-page to Tomcat's
   conf/web.xml,
 but

 then it would apply to all apps on the server.  This may or may
  not
work
 for
 you.

 This is my target. If my tomcat recieves a context which is not in
  my
 tomcat, it should send customised page.
 And this is applicable to all the apps on server. What can be the
   reason
 for
 it, not working for me?
   
I don't know.  I've never tried it.  You'll have to give specific
   reasons
why it's not working, including configuration files as appropriate.
 I
   did
this via httpd.
   
 Please Let me know WHAT IS FRONTING with httpd.  please give me
 any
links
 if
 you have for that.
 how to front my tomcat with httpd. Also I do not have any file
 named
 httpd.conf in my tomcat.
   
I meant using Apache's httpd web server in front of Tomcat,
 connecting
   the
two via mod_jk or mod_proxy.  See
http://tomcat.apache.org/connectors-doc/reference/apache.html for
 more
ideas.  In this case, I do send a custom 404 from httpd, regardless
 of
whether it was local or came from Tomcat.
   
Tim
   

 Thank you very much.

 On 5/16/07, Tim Lucia [EMAIL PROTECTED] wrote:
 
  In order for the custom error page to be used, the application
  must
   be
  deployed.  I.e., Tomcat can give a custom 404 for
  /mycontext/badpagerequested.jsp but if there is no context
/mycontext
  because the app is not (yet) deployed, Tomcat cannot know about
  your
  custom
  error page.
 
  I'm guessing you can add a global error-page to Tomcat's
   conf/web.xml,
 but
  then it would apply to all apps on the server.  This may or may
  not
work
  for
  you.



 If you have fronted Tomcat with httpd, you might be able to use
  custom
 error
  pages there instead.  JK will send a 503 if the application is
 not
  currently
  available.
 
  Tim
 
 
   -Original Message-
   From: Abdul Qayyum [mailto:[EMAIL PROTECTED]
   Sent: Wednesday, May 16, 2007 6:27 AM
   To: users@tomcat.apache.org
   Subject: displaying customized error page in tomcat 5.5.12
  
   Hi all,
I found that while we are updating our application, the
   

Re: javax.servlet.ServletException: Java heap space

2007-05-19 Thread Aurélien Allienne

Thank, but tomcat use 64Mb by default. I can do change this parameter?


Re: javax.servlet.ServletException: Java heap space

2007-05-19 Thread Rashmi Rubdi

On 5/19/07, Aurélien Allienne [EMAIL PROTECTED] wrote:

Thank, but tomcat use 64Mb by default. I can do change this parameter?



Example:

JAVA_OPTS=-server -Xms128m -Xmx384m

catalina.sh (Unix/Linux)

or

catalina.bat (MS Windows)

Additional documents:

http://www.google.com/search?sitesearch=tomcat.apache.orgq=JAVA_OPTSSearch=Search+Site

-Rashmi

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Missing ETag in 304 Header

2007-05-19 Thread Rashmi Rubdi

On 5/16/07, Joe Mun [EMAIL PROTECTED] wrote:

Hi guys... so according to the HTTP 1.1 spec (
http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html), 304 Not Modified
responses must include the ETag in the header.


Well, according to RFC 2616's section 10.3.5 on  304 Not Modified

- ETag and/or Content-Location, if the header would have been sent
   in a 200 response to the same request   , but the header is
sent in a 304 response.

That's why there's no ETag


I am serving a static text file, and the header only returns:

HTTP/1.x 304 Not Modified
Server: Apache-Coyote/1.1
Date: Wed, etc...


A 304 however returns If-None-Match which includes entity-tag , which
is the same as ETag for the requested resource.

RFC2616
14.26 If-None-Match
If-None-Match = If-None-Match : ( * | 1#entity-tag )


Status=Not Modified - 304
If-None-Match=  W/13035-1163859776458



Status=OK - 200
Etag=W/13035-1163859776458




Is there a reason that the Etag is not being included?


Because it is not supposed to be included --- see above.


Is there a way to
configure Tomcat to include this? My company is working with a caching
solution provider, and they are complaining about the missing ETag.


The caching provider should be looking for Http Status code.

If they status code is 200 , then they should look for Etag header, if
the status code is 304 then they should look for If-None-Match header.



thanks.



-Rashmi

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Missing ETag in 304 Header

2007-05-19 Thread Len Popp

I think you've got that wrong.

1. Spec says:
The response MUST include the following header fields: ... - ETag
and/or Content-Location, if the header would have been sent in a 200
response to the same request

2. ETag header *was* sent in a 200 response to the same request. (See
the header logs I posted earlier.)

3. Therefore, the 304 response must include the ETag.
(I'm pretty sure that's right, it seems straightforward to me.)
--
Len

On 5/19/07, Rashmi Rubdi [EMAIL PROTECTED] wrote:

On 5/16/07, Joe Mun [EMAIL PROTECTED] wrote:
 Hi guys... so according to the HTTP 1.1 spec (
 http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html), 304 Not Modified
 responses must include the ETag in the header.

Well, according to RFC 2616's section 10.3.5 on  304 Not Modified

- ETag and/or Content-Location, if the header would have been sent
in a 200 response to the same request   , but the header is
sent in a 304 response.

That's why there's no ETag

 I am serving a static text file, and the header only returns:

 HTTP/1.x 304 Not Modified
 Server: Apache-Coyote/1.1
 Date: Wed, etc...

A 304 however returns If-None-Match which includes entity-tag , which
is the same as ETag for the requested resource.

RFC2616
14.26 If-None-Match
If-None-Match = If-None-Match : ( * | 1#entity-tag )


Status=Not Modified - 304
If-None-Match=  W/13035-1163859776458



Status=OK - 200
Etag=W/13035-1163859776458



 Is there a reason that the Etag is not being included?

Because it is not supposed to be included --- see above.

 Is there a way to
 configure Tomcat to include this? My company is working with a caching
 solution provider, and they are complaining about the missing ETag.

The caching provider should be looking for Http Status code.

If they status code is 200 , then they should look for Etag header, if
the status code is 304 then they should look for If-None-Match header.


 thanks.


-Rashmi

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Missing ETag in 304 Header

2007-05-19 Thread Rashmi Rubdi

I might be wrong but I have a few doubts

On 5/19/07, Len Popp [EMAIL PROTECTED] wrote:

I think you've got that wrong.

1. Spec says:
The response MUST include the following header fields: ... - ETag
and/or Content-Location, if the header would have been sent in a 200
response to the same request


By *same request* , I think you are saying that the request was sent
from the same browser instance.

So on first load of the static resource
http://localhost:8080/tomcat.gif , the Http Status is 200

On second load (when browser is refreshed), but the static resource is
now cached and so  the Http Status is 304.

But HTTP is stateless, how will the server know about the *same request* ?

Please correct me if I'm wrong, but it is my understanding that when
the browser is refreshed , a new request is sent hence, it is not the
*same request* .



2. ETag header *was* sent in a 200 response to the same request. (See
the header logs I posted earlier.)

3. Therefore, the 304 response must include the ETag.
(I'm pretty sure that's right, it seems straightforward to me.)
--
Len


-Regards
Rashmi

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: javax.servlet.ServletException: Java heap space

2007-05-19 Thread Martin Gainty

e.g. set MaxHeap to 512MB

For all Java Processes
[unix]export JVM_OPTS =-Xmx512M
[windows] SET JVM_OPTS=-Xmx256m

For Tomcat only
[unix] export TOMCAT_OPTS=3D-DXmx=3D512m
[Windows] set TOMCAT_OPTS=3D-DXmx=3D512m

Does this help?
M--
This email message and any files transmitted with it contain confidential
information intended only for the person(s) to whom this email message is
addressed.  If you have received this email message in error, please notify
the sender immediately by telephone or email and destroy the original
message without making a copy.  Thank you.

- Original Message - 
From: Aurélien Allienne [EMAIL PROTECTED]

To: Tomcat Users List users@tomcat.apache.org
Sent: Saturday, May 19, 2007 1:09 PM
Subject: Re: javax.servlet.ServletException: Java heap space



Thank, but tomcat use 64Mb by default. I can do change this parameter?




-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Missing ETag in 304 Header

2007-05-19 Thread Rashmi Rubdi

On 5/19/07, Rashmi Rubdi [EMAIL PROTECTED] wrote:

 1. Spec says:
 The response MUST include the following header fields: ... - ETag
 and/or Content-Location, if the header would have been sent in a 200
 response to the same request


Just to test this, I created a JSP and put a jsp:froward tag inside
the JSP, that *forwards* the
*same request* to the static resource.

In this case I got back an ETag, because the request to the JSP
returns a 200 status code, and on JSP forward the same 200 status code
is maintained.

But as mentioned in my previous post, I think the browser refresh
generates a new request, so the server would not know whether the
static resource was requested from the same request or a new request.

So then, the fact that the ETag doesn't appear is correct behavior IMHO.

-Rashmi.

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Missing ETag in 304 Header

2007-05-19 Thread Len Popp

It's hypothetical. It says *if* the header *would have* been sent in
a 200 response to the same request. I can know what Tomcat would have
done, because I've seen what it *does* do with requests that are
identical. In my test case, Tomcat *would have* included an ETag
header *if* it responded 200 (because that's what it always does when
it responds 200), therefore it *must* include an ETag header when it
responds with a 304.
--
Len

On 5/19/07, Rashmi Rubdi [EMAIL PROTECTED] wrote:

I might be wrong but I have a few doubts

On 5/19/07, Len Popp [EMAIL PROTECTED] wrote:
 I think you've got that wrong.

 1. Spec says:
 The response MUST include the following header fields: ... - ETag
 and/or Content-Location, if the header would have been sent in a 200
 response to the same request

By *same request* , I think you are saying that the request was sent
from the same browser instance.

So on first load of the static resource
http://localhost:8080/tomcat.gif , the Http Status is 200

On second load (when browser is refreshed), but the static resource is
now cached and so  the Http Status is 304.

But HTTP is stateless, how will the server know about the *same request* ?

Please correct me if I'm wrong, but it is my understanding that when
the browser is refreshed , a new request is sent hence, it is not the
*same request* .


 2. ETag header *was* sent in a 200 response to the same request. (See
 the header logs I posted earlier.)

 3. Therefore, the 304 response must include the ETag.
 (I'm pretty sure that's right, it seems straightforward to me.)
 --
 Len

-Regards
Rashmi

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Missing ETag in 304 Header

2007-05-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Rashmi,

Rashmi Rubdi wrote:
 1. Spec says:
 The response MUST include the following header fields: ... - ETag
 and/or Content-Location, if the header would have been sent in a 200
 response to the same request
 
 By *same request* , I think you are saying that the request was sent
 from the same browser instance.

I think it means for any two requests that are indistinguishable from
each other. In this case, I totally agree with Len.

Len, I recommend you cross-post this (if you haven't already) to the
tomcat-dev mailing list to see what they have to say.

- -chris

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGT2WW9CaO5/Lv0PARAg9FAJ0XdEvzyyfB7RH/oifKPuK+DwBH8wCffLE1
7A1h+GbA/tlh6xNuMuAOL2Y=
=Igah
-END PGP SIGNATURE-

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Missing ETag in 304 Header

2007-05-19 Thread Rashmi Rubdi

On 5/19/07, Christopher Schultz [EMAIL PROTECTED] wrote:

Rashmi,

Rashmi Rubdi wrote:
 1. Spec says:
 The response MUST include the following header fields: ... - ETag
 and/or Content-Location, if the header would have been sent in a 200
 response to the same request

 By *same request* , I think you are saying that the request was sent
 from the same browser instance.

I think it means for any two requests that are indistinguishable from
each other. In this case, I totally agree with Len.


Thank you both for clarifying, I understand what you're saying.

I don't mean to go off-track but, since If-None-Match header is being
returned for Http Status 304 , I thought it might be a good idea to
look at it's definition too.

http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.26

The above definition mentions ETag , and the condition when it should
be returned in the response header, but it seems a little unclear to
me, because the sentence starts with Instead... , it doesn't fully
explain the context.

If any of the entity tags match the entity tag of the entity that
would have been returned in the response to a similar GET request
(without the If-None-Match header) on that resource, or if * is
given and any current entity exists for that resource, then the server
MUST NOT perform the requested method, unless required to do so
because the resource's modification date fails to match that supplied
in an If-Modified-Since header field in the request.

Instead, if the request method was GET or HEAD, the server SHOULD
respond with a 304 (Not Modified) response, including the cache-
related header fields (particularly ETag) of one of the entities that
matched. For all other request methods, the server MUST respond with a
status of 412 (Precondition Failed).

And the definition of ETag :
http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.19

mentions entity-tag , which is also the value of a few other caching tags:

If-Match
If-None-Match
Vary

The value of the above tags returns the same checksum for the static
resource as the ETag does.

I think ETag's value will only change if the static file's modified
date changes according to it's definition here:
http://en.wikipedia.org/wiki/HTTP_ETag

So why have 2 headers with the same checksum for the same static
resource when one would suffice? Unless the checksum is going to be
different... which I doubt because it is calculate based on the i-node
number , last modified time and size (in Apache though, not sure how
Tomcat calculates it.).


Len, I recommend you cross-post this (if you haven't already) to the
tomcat-dev mailing list to see what they have to say.

- -chris



-Regards
Rashmi

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Missing ETag in 304 Header

2007-05-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Rashmi,

Rashmi Rubdi wrote:
 Thank you both for clarifying, I understand what you're saying.

[snip]

 And the definition of ETag :
 http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.19
 
 mentions entity-tag , which is also the value of a few other caching tags:
 
 If-Match
 If-None-Match
 Vary

Just because each of these headers has an entity-tag as its value does
not mean that the server can just pick one and shove an Etag-appropriate
value into the header. The entity-tag is just a data type. It's like
saying the 'Date' header returns a date and the 'Last-Modified-Date'
header also returns a date, therefore you can use the headers
interchangeably.

 The value of the above tags returns the same checksum for the static
 resource as the ETag does.

Really? That doesn't sound right. The Vary header does not contain any
checksum of any kind. (At least not in the HTTP 1.1 spec).

 I think ETag's value will only change if the static file's modified
 date changes according to it's definition here:
 http://en.wikipedia.org/wiki/HTTP_ETag
 
 So why have 2 headers with the same checksum for the same static
 resource when one would suffice? Unless the checksum is going to be
 different... which I doubt because it is calculate based on the i-node
 number , last modified time and size (in Apache though, not sure how
 Tomcat calculates it.).

I'm not really sure what you're talking about, here. It seems clear that
the Etag ought to be sent with a 304 response if that same request would
have returned an Etag with a 200 response instead. The fact that the
Etag shouldn't change isn't the issue... it's the fact that it should be
sent in the response regardless of 2xx or 3xx response.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGT3GC9CaO5/Lv0PARAtlNAJ0VofZyKlWiwoAVDE4f6dse1QxXLACfVRap
RdLFVUr9U7HNh1NTeP7iyyM=
=jwsf
-END PGP SIGNATURE-

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Missing ETag in 304 Header

2007-05-19 Thread Rashmi Rubdi

On 5/19/07, Christopher Schultz [EMAIL PROTECTED] wrote:

Rashmi,

Rashmi Rubdi wrote:
 Thank you both for clarifying, I understand what you're saying.

[snip]

 And the definition of ETag :
 http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.19

 mentions entity-tag , which is also the value of a few other caching tags:

 If-Match
 If-None-Match
 Vary

Just because each of these headers has an entity-tag as its value does
not mean that the server can just pick one and shove an Etag-appropriate
value into the header. The entity-tag is just a data type. It's like
saying the 'Date' header returns a date and the 'Last-Modified-Date'
header also returns a date, therefore you can use the headers
interchangeably.


Got it.

I just wasn't sure if they could be used interchangeably or not, may be not.


 The value of the above tags returns the same checksum for the static
 resource as the ETag does.

Really? That doesn't sound right. The Vary header does not contain any
checksum of any kind. (At least not in the HTTP 1.1 spec).


I got confused about the Vary header because over here:
http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.19  it says:
The headers used with entity tags are described in sections 14.24,
14.26 and 14.44.   where 14.44 points to the Vary header. So you're
right the Vary header does not contain a checksum of any kind.

But as mentioned previously If-Match and If-None-Match do contain the
checksum that represents entity-tag.


 I think ETag's value will only change if the static file's modified
 date changes according to it's definition here:
 http://en.wikipedia.org/wiki/HTTP_ETag

 So why have 2 headers with the same checksum for the same static
 resource when one would suffice? Unless the checksum is going to be
 different... which I doubt because it is calculate based on the i-node
 number , last modified time and size (in Apache though, not sure how
 Tomcat calculates it.).

I'm not really sure what you're talking about, here. It seems clear that
the Etag ought to be sent with a 304 response if that same request would
have returned an Etag with a 200 response instead.


As you mentioned it may be a good idea to check with the Dev list or
may be we could file a bug.



The fact that the
Etag shouldn't change isn't the issue... it's the fact that it should be
sent in the response regardless of 2xx or 3xx response.


Got it.


- -chris


-Regards
Rashmi

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Missing ETag in 304 Header

2007-05-19 Thread Len Popp

On 5/19/07, Christopher Schultz [EMAIL PROTECTED] wrote:

Len, I recommend you cross-post this (if you haven't already) to the
tomcat-dev mailing list to see what they have to say.


I will do this, today if I have time.
--
Len

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: transaction manager cannot load in Tomcat 6

2007-05-19 Thread Rashmi Rubdi

On 5/17/07, Molina, Teresa [EMAIL PROTECTED] wrote:

I've been trying to use Tomcat 6 (with Java 6) on FC6, but I cannot seem
to get the third-party transaction manager integrated as in previous
versions. I have configured everything just as in Tomcat 5.5, but there
seems to be a change in the classloading structure, which simply
prevents the classes from loading.

Originally, I had the all the necessary Objectweb (JOTM is my
transaction manager) in a directory outside of the CATALINA_BASE but had
appended them to the beginning of the classpath in setclasspath.sh,
which is how it currently works. With the failure to initialize, I moved
all needed jars into CATALINA_BASE/bin, after first trying
CATALINA_BASE/lib.


I don't know anything about Objectweb or JOTM transaction manager, but
just trying to point a few corrections with the configuration.

I think you should keep the JAR files in the lib folder and not the bin folder.

I did configure MySQL JDBC Datasource (for connection pooling)
successfully, so I have some basic idea about it how it is supposed to
be configured for Oracle and MySQL.


My suspicion is that there's a class that is needed
by the Objectweb DataSourceFactory that was previously included but is
no longer found, due to a change in the classloading architecture; but,
that's almost purely theoretical.

This is the error from catalina.out:

WARNING: Failed to register in JMX: javax.naming.NamingException: Could
not create resource factory instance [Root exception is
java.lang.NoClassDefFoundError: Could not initialize class
org.objectweb.jndi.DataSourceFactory]


I would try to connect directly without using JNDI first, to make sure
a direct connection works.


This is what's configured as a global resource in server.xml:
Resource name=AdminCop
min=1
max=1
auth=Container
type=javax.sql.DataSource
factory=org.objectweb.jndi.DataSourceFactory
   driverClassName=oracle.jdbc.driver.OracleDriver
username=xxx
password=xxx
url=jdbc:oracle:thin:@localhost::XXX /



Where have you placed the above Resource / tag ?

It should be placed either inside your applications Context node
(please note that it is possible that your Context node could be
defined outside server.xml, in that case you would place it where ever
the Context node is defined --- may be in server.xml or may be
outside)

, or in GlobalNamingResources node.

I'm not sure if you can use min and max attributes above. I couldn't
find any attributes with those names here:
http://jakarta.apache.org/commons/dbcp/configuration.html


I have, of course, read the appropriate JNDI How-To, but, as I say, I
have configured all resources, properties, paths, etc, exactly the same
as in Tomcat 5.5 with no luck. Any help would be greatly appreciated.

Thanks!

-- Teresa



Regards
Rashmi

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: transaction manager cannot load in Tomcat 6

2007-05-19 Thread Rashmi Rubdi

On 5/19/07, Rashmi Rubdi [EMAIL PROTECTED] wrote:

 This is what's configured as a global resource in server.xml:
 Resource name=AdminCop
 min=1
 max=1
 auth=Container
 type=javax.sql.DataSource
 factory=org.objectweb.jndi.DataSourceFactory
driverClassName=oracle.jdbc.driver.OracleDriver
 username=xxx
 password=xxx
 url=jdbc:oracle:thin:@localhost::XXX /



In addition to the configuration checks I've mentioned in my previous
post, also check that you've configured the web.xml correctly.

Here's my configuration for reference, it works with Tomcat 6.0.10 and
Oracle 10g

---
web.xml
---
resource-ref
descriptionOracle Datasource example/description
res-ref-namejdbc/myoracle/res-ref-name
res-typejavax.sql.DataSource/res-type
res-authContainer/res-auth
/resource-ref

---
Context xml  or server.xml Context tag
---

Context path= docBase=... reloadable=true debug=true

Resource name=jdbc/myoracle auth=Container 
type=javax.sql.DataSource
maxActive=20 maxIdle=10  maxWait=-1
username=x password=x 
driverClassName=oracle.jdbc.OracleDriver
url=jdbc:oracle:thin:@Venus:1521:XE/

/Context

--
Place ojdbc14_g.jar under
\apache-tomcat-6.0.10\lib\  folder

-Regards
Rashmi

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Tomcat error log analyzer

2007-05-19 Thread confusionvalley

Hi all,

Is there any tool to analyse the Apache Tomcat logs and detect errors such as 
Exceptions? 
I know that it is very easy to do a little application to check these errors 
but I really would like to know the names of tools that can do this kind of job.
The only log analyzers I know is AWStats, Analos, Webalizer... but all these 
are used to generate statistics... It doesn't check for errors in the log files.

Best regards, 
Nuno Rodrigues