date:20100224

Hi,

I have jvm's, running tomcat and our application, exiting mysteriously,
and was wondering if anyone could give me some advice on how to debug
this thing.

There is nothing in catalina.out, nor our application logs, and no
hotspot error file. GC log looks normal. No trace in system logs.

I am left completely clueless :(, has anyone dealt with a problem like
this before?

Any help appreciated.

- Tomcat 6.0.24
- TC native 1.1.18
- APR 1.3.9 
- Sun JDK 6u18
- Debian Lenny, 2.6.31.10-amd64

2 servlets, one as ROOT. 2 HTTP connectors that use TCNative/APR.

JAVA_OPTS ( ):

-verbose:gc
-Djava.awt.headless=true
-Dsun.net.inetaddr.ttl=60
-Dfile.encoding=UTF-8
-Djava.io.tmpdir=$TMP_DIR
-Djava.library.path=/usr/local/lib
-Djava.endorsed.dirs=$CATALINA_BASE/endorsed
-Dcatalina.base=$CATALINA_BASE
-Dcatalina.home=$CATALINA_HOME
-Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager
-Djava.util.logging.config.file=$CATALINA_BASE/conf/logging.properties
-XX:+PrintGCDetails
-Xloggc:$CATALINA_BASE/logs/gc.log
-XX:+UseConcMarkSweepGC
-XX:CMSInitiatingOccupancyFraction=70
-Xms$JAVA_HEAP_SIZE
-Xmx$JAVA_HEAP_SIZE
-XX:NewSize=$JAVA_EDEN_SIZE
-XX:MaxNewSize=$JAVA_EDEN_SIZE
-XX:PermSize=$JAVA_PERM_SIZE
-XX:MaxPermSize=$JAVA_PERM_SIZE
-Xss$JAVA_STCK_SIZE
-XX:+UseLargePages



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: jvm exits without trace

I thought I'd add the connector definitions too, :

   Connector port=80
protocol=org.apache.coyote.http11.Http11AprProtocol
   compression=1024 keepAliveTimeout=6
maxKeepAliveRequests=-1
   enableLookups=false redirectPort=443 maxThreads=150
pollerSize=32768
   pollerThreadCount=4/

Connector port=443
protocol=org.apache.coyote.http11.Http11AprProtocol SSLEnabled=true
   enableLookups=false maxThreads=10 scheme=https
secure=true
   SSLCertificateFile=/etc/ssl/private/something.crt
   SSLCertificateKeyFile=/etc/ssl/private/something.key
   SSLCACertificateFile=/etc/ssl/certs/ca.crt/


On Wed, 2010-02-24 at 10:23 +0100, Taylan Develioglu wrote:
 Hi,
 
 I have jvm's, running tomcat and our application, exiting mysteriously,
 and was wondering if anyone could give me some advice on how to debug
 this thing.
 
 There is nothing in catalina.out, nor our application logs, and no
 hotspot error file. GC log looks normal. No trace in system logs.
 
 I am left completely clueless :(, has anyone dealt with a problem like
 this before?
 
 Any help appreciated.
 
 - Tomcat 6.0.24
 - TC native 1.1.18
 - APR 1.3.9 
 - Sun JDK 6u18
 - Debian Lenny, 2.6.31.10-amd64
 
 2 servlets, one as ROOT. 2 HTTP connectors that use TCNative/APR.
 
 JAVA_OPTS ( ):
 
 -verbose:gc
 -Djava.awt.headless=true
 -Dsun.net.inetaddr.ttl=60
 -Dfile.encoding=UTF-8
 -Djava.io.tmpdir=$TMP_DIR
 -Djava.library.path=/usr/local/lib
 -Djava.endorsed.dirs=$CATALINA_BASE/endorsed
 -Dcatalina.base=$CATALINA_BASE
 -Dcatalina.home=$CATALINA_HOME
 -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager
 -Djava.util.logging.config.file=$CATALINA_BASE/conf/logging.properties
 -XX:+PrintGCDetails
 -Xloggc:$CATALINA_BASE/logs/gc.log
 -XX:+UseConcMarkSweepGC
 -XX:CMSInitiatingOccupancyFraction=70
 -Xms$JAVA_HEAP_SIZE
 -Xmx$JAVA_HEAP_SIZE
 -XX:NewSize=$JAVA_EDEN_SIZE
 -XX:MaxNewSize=$JAVA_EDEN_SIZE
 -XX:PermSize=$JAVA_PERM_SIZE
 -XX:MaxPermSize=$JAVA_PERM_SIZE
 -Xss$JAVA_STCK_SIZE
 -XX:+UseLargePages
 



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: jvm exits without trace


On 24/02/2010 09:36, Taylan Develioglu wrote:

I thought I'd add the connector definitions too, :

Connector port=80
protocol=org.apache.coyote.http11.Http11AprProtocol
compression=1024 keepAliveTimeout=6
maxKeepAliveRequests=-1
enableLookups=false redirectPort=443 maxThreads=150
pollerSize=32768
pollerThreadCount=4/

 Connector port=443
protocol=org.apache.coyote.http11.Http11AprProtocol SSLEnabled=true
enableLookups=false maxThreads=10 scheme=https
secure=true
SSLCertificateFile=/etc/ssl/private/something.crt
SSLCertificateKeyFile=/etc/ssl/private/something.key
SSLCACertificateFile=/etc/ssl/certs/ca.crt/


On Wed, 2010-02-24 at 10:23 +0100, Taylan Develioglu wrote:

Hi,

I have jvm's, running tomcat and our application, exiting mysteriously,
and was wondering if anyone could give me some advice on how to debug
this thing.

There is nothing in catalina.out, nor our application logs, and no
hotspot error file. GC log looks normal. No trace in system logs.

I am left completely clueless :(, has anyone dealt with a problem like
this before?

Any help appreciated.

- Tomcat 6.0.24
- TC native 1.1.18
- APR 1.3.9
- Sun JDK 6u18
- Debian Lenny, 2.6.31.10-amd64

2 servlets, one as ROOT. 2 HTTP connectors that use TCNative/APR.

JAVA_OPTS ( ):

 -verbose:gc
 -Djava.awt.headless=true
 -Dsun.net.inetaddr.ttl=60
 -Dfile.encoding=UTF-8
 -Djava.io.tmpdir=$TMP_DIR
 -Djava.library.path=/usr/local/lib
 -Djava.endorsed.dirs=$CATALINA_BASE/endorsed
 -Dcatalina.base=$CATALINA_BASE
 -Dcatalina.home=$CATALINA_HOME
 -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager
-Djava.util.logging.config.file=$CATALINA_BASE/conf/logging.properties
 -XX:+PrintGCDetails
 -Xloggc:$CATALINA_BASE/logs/gc.log
 -XX:+UseConcMarkSweepGC
 -XX:CMSInitiatingOccupancyFraction=70
 -Xms$JAVA_HEAP_SIZE
 -Xmx$JAVA_HEAP_SIZE
 -XX:NewSize=$JAVA_EDEN_SIZE
 -XX:MaxNewSize=$JAVA_EDEN_SIZE
 -XX:PermSize=$JAVA_PERM_SIZE
 -XX:MaxPermSize=$JAVA_PERM_SIZE
 -Xss$JAVA_STCK_SIZE
 -XX:+UseLargePages


There's no actual heap size settings in the above.  But you get a couple 
of points for trying.


Google Linux Out Of Memory killer or OOM Killer and then check the 
server logs carefully.  (e.g. /var/log/messages)



p


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org




-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: using my own LifecycleListener


On 24/02/2010 09:14, STEINER Stephan wrote:

As above, you're using the wrong Listener type.  LifecycleListener is

an

interface from org.apache.catalina and is not part of the Servlet Spec.



  You need:



  javax.servlet.ServletContextListener


Thanks, that did the trick. Glad I got that answer before going
completely mad ;)


Yep.  We're all mad as a box of frogs here, what with our reading of the 
docs and specs and so on.  Cuh-uh-razy.  Beep beep.



p


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org




-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: jvm exits without trace

The GC log shows plenty of heap space left in all the spaces.

I purposely didn't bother replacing the variables because I figured they
would not be relevant.

But if you think they might provide clues they're as follows:

JAVA_HEAP_SIZE=18432M
JAVA_EDEN_SIZE=$(($(echo $JAVA_HEAP_SIZE|sed 's/M$\|G$//')/6))M
JAVA_PERM_SIZE=128M
JAVA_STCK_SIZE=128K

EDEN_SIZE is 1/6th of total heap.

And I said there was nothing in the system logs.
But you get a couple of points for trying.

On Wed, 2010-02-24 at 10:44 +0100, Pid wrote:
 On 24/02/2010 09:36, Taylan Develioglu wrote:
  I thought I'd add the connector definitions too, :
 
  Connector port=80
  protocol=org.apache.coyote.http11.Http11AprProtocol
  compression=1024 keepAliveTimeout=6
  maxKeepAliveRequests=-1
  enableLookups=false redirectPort=443 maxThreads=150
  pollerSize=32768
  pollerThreadCount=4/
 
   Connector port=443
  protocol=org.apache.coyote.http11.Http11AprProtocol SSLEnabled=true
  enableLookups=false maxThreads=10 scheme=https
  secure=true
  SSLCertificateFile=/etc/ssl/private/something.crt
  SSLCertificateKeyFile=/etc/ssl/private/something.key
  SSLCACertificateFile=/etc/ssl/certs/ca.crt/
 
 
  On Wed, 2010-02-24 at 10:23 +0100, Taylan Develioglu wrote:
  Hi,
 
  I have jvm's, running tomcat and our application, exiting mysteriously,
  and was wondering if anyone could give me some advice on how to debug
  this thing.
 
  There is nothing in catalina.out, nor our application logs, and no
  hotspot error file. GC log looks normal. No trace in system logs.
 
  I am left completely clueless :(, has anyone dealt with a problem like
  this before?
 
  Any help appreciated.
 
  - Tomcat 6.0.24
  - TC native 1.1.18
  - APR 1.3.9
  - Sun JDK 6u18
  - Debian Lenny, 2.6.31.10-amd64
 
  2 servlets, one as ROOT. 2 HTTP connectors that use TCNative/APR.
 
  JAVA_OPTS ( ):
 
   -verbose:gc
   -Djava.awt.headless=true
   -Dsun.net.inetaddr.ttl=60
   -Dfile.encoding=UTF-8
   -Djava.io.tmpdir=$TMP_DIR
   -Djava.library.path=/usr/local/lib
   -Djava.endorsed.dirs=$CATALINA_BASE/endorsed
   -Dcatalina.base=$CATALINA_BASE
   -Dcatalina.home=$CATALINA_HOME
   -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager
  -Djava.util.logging.config.file=$CATALINA_BASE/conf/logging.properties
   -XX:+PrintGCDetails
   -Xloggc:$CATALINA_BASE/logs/gc.log
   -XX:+UseConcMarkSweepGC
   -XX:CMSInitiatingOccupancyFraction=70
   -Xms$JAVA_HEAP_SIZE
   -Xmx$JAVA_HEAP_SIZE
   -XX:NewSize=$JAVA_EDEN_SIZE
   -XX:MaxNewSize=$JAVA_EDEN_SIZE
   -XX:PermSize=$JAVA_PERM_SIZE
   -XX:MaxPermSize=$JAVA_PERM_SIZE
   -Xss$JAVA_STCK_SIZE
   -XX:+UseLargePages
 
 There's no actual heap size settings in the above.  But you get a couple 
 of points for trying.
 
 Google Linux Out Of Memory killer or OOM Killer and then check the 
 server logs carefully.  (e.g. /var/log/messages)
 
 
 p
 
  -
  To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
  For additional commands, e-mail: users-h...@tomcat.apache.org
 
 
 
 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org
 



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: jvm exits without trace

2010-02-24 Thread Konstantin Kolinko

2010/2/24 Taylan Develioglu tdevelio...@ebuddy.com:
 Hi,

 I have jvm's, running tomcat and our application, exiting mysteriously,
 and was wondering if anyone could give me some advice on how to debug
 this thing.

 There is nothing in catalina.out, nor our application logs, and no
 hotspot error file. GC log looks normal. No trace in system logs.

 I am left completely clueless :(, has anyone dealt with a problem like
 this before?


There is currently a thread named Tomcat dies suddenly
Look there for starters.  While that is unlikely your case, most ideas
of diagnosing such an issue are mentioned in the first dozen of
messages of that thread.

http://marc.info/?t=12632496092r=1w=2
http://marc.info/?t=12633901125r=1w=2
http://marc.info/?t=12647949758r=6w=2
http://marc.info/?t=12660960545r=1w=2

Best regards,
Konstantin Kolinko

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: sending request to tomcat failed.....

2010-02-24 Thread Munirathinavel


Hi...
  I'm using the following files in Tomcat  Apache.

workers.properties:

workers.tomcat_home=D:/tomcat6.0.18
workers.java_home=C:/Program Files/Java/jdk1.6.0_16

ps=/


worker.list=worker1
worker.worker1.type=ajp13
worker.worker1.host=
worker.worker1.port=8009
worker.worker1.connection_pool_timeout=600
worker.worker1.connect_timeout=6
worker.worker1.prepost_timeout=6
worker.worker1.socket_keepalive=1
worker.worker1.socket_timeout=60
worker.worker1.lbfactor=1
worker.loadbalancer.type=lb
worker.loadbalancer.balance_workers= worker1
worker.inprocess.type=jni

server.xml
Server port=8006 shutdown=SHUTDOWN
  Listener className=org.apache.catalina.core.AprLifecycleListener
SSLEngine=on /
  Listener className=org.apache.catalina.core.JasperListener /
  Listener className=org.apache.catalina.mbeans.ServerLifecycleListener
/
  Listener
className=org.apache.catalina.mbeans.GlobalResourcesLifecycleListener /
  GlobalNamingResources
Resource name=UserDatabase auth=Container
  type=org.apache.catalina.UserDatabase
  description=User database that can be updated and saved
  factory=org.apache.catalina.users.MemoryUserDatabaseFactory
  pathname=conf/tomcat-users.xml /
  /GlobalNamingResources
  Service name=Catalina
Connector debug=0 enableLookups=false port=8009 
protocol=AJP/1.3 
 maxThreads=150 minSpareThreads=25 maxSpareThreads=75
acceptCount=100
  minProcessors=5 maxProcessors=100 connectionTimeout=6
disableUploadTimeout=true redirectPort=8443/
   Engine name=Catalina defaultHost= debug=0 
  Realm className=org.apache.catalina.realm.UserDatabaseRealm
 resourceName=UserDatabase/
  Host name=  appBase=gateway
unpackWARs=true autoDeploy=true
xmlValidation=false xmlNamespaceAware=false

Listener className = 
org.apache.jk.config.ApacheConfig
workersConfig=conf/workers.properties
modJk=D:/Apache2.2/modules/mod_jk.so jkLog=logs/mod_jk.log
jkDebug=info noRoot=false/
  /Host
/Engine
  /Service

/Server

context.xml
?xml version='1.0' encoding='utf-8'?

 
   Context

 WatchedResourceWEB-INF/web.xml/WatchedResource
Resource name=jdbc/vehrentDB auth=Container
type=javax.sql.DataSource 
maxActive=50
maxIdle=10
minIdle=30
username= password=  
driverClassName=com.microsoft.sqlserver.jdbc.SQLServerDriver
 url=jdbc:sqlserver://:1433; 

databaseName=;user=;password=;
numTestsPerEvictionRun=15  
timeBetweenEvictionRunsMillis=90
minEvictableIdleTimeMillis=90 
testWhileIdle=true
testOnBorrow=false
removeAbandoned=true 
removeAbandonedTimeout=300
logAbandoned=true 
/
Resource name=jdbc/empowerDB auth=Container
type=javax.sql.DataSource 
maxActive=8
maxIdle=4
minIdle=2
username= password=
driverClassName=com.microsoft.sqlserver.jdbc.SQLServerDriver
  
url=jdbc:sqlserver://:1433;databaseName=;user=;password=;
numTestsPerEvictionRun=15 
timeBetweenEvictionRunsMillis=90
minEvictableIdleTimeMillis=90 
testWhileIdle=true
testOnBorrow=false
removeAbandoned=true 
removeAbandonedTimeout=300
logAbandoned=true 
/
/Context 
virtual-host.conf
NameVirtualHost *:80
VirtualHost *:80
ServerAdmin xx
DocumentRoot D:/Apache2.2/htdocs/gateway
ServerName xx
ServerAlias xx
ErrorLog logs/gateway-error.log
CustomLog logs/gateway-access.log common

JkMount /* worker1
JkUnMount /*js/*.js worker1
JkUnMount /*.jpeg worker1
JkUnMount /*.png worker1
JkUnMount /*.gif worker1
JkUnMount /*.html worker1
JkUnMount /*.jpg worker1
JkUnMount /*.css worker1
JkUnMount /*.swf worker1
/VirtualHost

  Due to this issue i'm not able to proceed further.Can you please reply
me soon.Hoping for the nice reply.




Peter Crowther wrote:
 
 On 18 February 2010 13:55, Munirathinavel munirathina...@gmail.com
 wrote:
 I'm using apache2.2 + tomcat6.0.18 + mod_jk1.2.28 for my portal.While
 doing
 load test with 20  more users i'm getting the following message in
 mod_jk.logand in browser also page is not getting loaded...
 [...]
 [Thu Feb 18 18:35:07 2010][1528:2244] [info] jk_ajp_common.c (1788):
 Writing

RE: Trouble with CLIENT-CERT authentication method

2010-02-24 Thread Martin Gainty


could you clarify if this failure is from client to server or server to client?
and who/what is generating the cert?


thanks,
Martin Gainty 
__ 
Verzicht und Vertraulichkeitanmerkung/Note de déni et de confidentialité

Diese Nachricht ist vertraulich. Sollten Sie nicht der vorgesehene Empfaenger 
sein, so bitten wir hoeflich um eine Mitteilung. Jede unbefugte Weiterleitung 
oder Fertigung einer Kopie ist unzulaessig. Diese Nachricht dient lediglich dem 
Austausch von Informationen und entfaltet keine rechtliche Bindungswirkung. 
Aufgrund der leichten Manipulierbarkeit von E-Mails koennen wir keine Haftung 
fuer den Inhalt uebernehmen.

Ce message est confidentiel et peut être privilégié. Si vous n'êtes pas le 
destinataire prévu, nous te demandons avec bonté que pour satisfaire informez 
l'expéditeur. N'importe quelle diffusion non autorisée ou la copie de ceci est 
interdite. Ce message sert à l'information seulement et n'aura pas n'importe 
quel effet légalement obligatoire. Étant donné que les email peuvent facilement 
être sujets à la manipulation, nous ne pouvons accepter aucune responsabilité 
pour le contenu fourni.



 

 Date: Tue, 23 Feb 2010 15:07:03 -0800
 Subject: Re: Trouble with CLIENT-CERT authentication method
 From: kevmacmi...@gmail.com
 To: users@tomcat.apache.org
 
 On 2/19/10, Christopher Schultz ch...@christopherschultz.net wrote:
  So, with clientAuth=false, how do you get a client certificate to use
  for authentication? Or, does the presence of the CLIENT-CERT in web.xml
  trigger an SSL-renegotiation where the client cert /is/ requested from
  the client.
 
 The presence of CLIENT-CERT:
 
 login-config
 auth-methodCLIENT-CERT/auth-method
 /login-config
 
 in web.xml triggers the renegotiation and the client cert is requested
 from the client. As Mark pointed out, this exposes the TLS bug
 CVE-2009-355 so be warned!
 
 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org
 
  
_
Hotmail: Powerful Free email with security by Microsoft.
http://clk.atdmt.com/GBL/go/201469230/direct/01/

Bayeux Support

2010-02-24 Thread kevind


Hi,

Does Tomcat have a Bayeux Implementation. I have seen posts that suggest it
does (the BayeuxServlet implementation of ComentProcessor), but cannot see
any reference to it in 6.0.24.

Has it been released, or is it on a RoadMap.

- kevin.
-- 
View this message in context: 
http://old.nabble.com/Bayeux-Support-tp27714159p27714159.html
Sent from the Tomcat - User mailing list archive at Nabble.com.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Tomcat dies suddenly


George,

Thanks for the thoughts.

My first thought was that the problem was hardware related and that the 
reason I could not see the problem was that the memtest86 did not 
sufficiently stress the machine to change the temperature enough to cause a 
failure.  Subsequently, I built up another server with entirely different 
architecture (AMD vs Intel, different memory, different disks, etc.) and it 
failed in exactly the same manner.  I have added memory to this second 
server just to test that we were not running out of  memory by some fluke 
but those tests failed in exactly the same manner.  My conclusion is that 
the problem is not hardware but rather either the Sun JVM (the only one I 
have used) or an errant piece of native code somewhere.  I have tried to 
find the errant code by reducing the machine to the absolute minimum 
required to run the applicxation and that also showed the same failure. 
Chris suggested using strace (which I have) but I inadvertently overwrote 
the file containing the failure (not one of my brighter moves.)


Thanks,

Carl
- Original Message - 
From: George Sexton geor...@mhsoftware.com

To: 'Tomcat Users List' users@tomcat.apache.org
Sent: Tuesday, February 23, 2010 7:45 PM
Subject: RE: Tomcat dies suddenly




-Original Message-
From: Carl [mailto:c...@etrak-plus.com]
Sent: Tuesday, February 23, 2010 5:09 AM
To: Tomcat Users List
Subject: Re: Tomcat dies suddenly

Just an update.

After 8 1/2 days, on the newly built Slackware machine with the JRE in
the
Slackware distribution removed bebore installing the operating system
and
using the newest version of the mysql-connector, the system failed in
exactly the same fashion as the previous attempts: ran beautifully
right up
to the point of failure and the failure was the JVM being stopped with
a
reported seg fault.

Changed this server to the IBM JVM.  Tested it locally (directly
accessed
the IP within the DMZ) and it worked great.  Switched it to production
early
this morning (4:30AM before people start coming onto the system) and
everything seemed good.  Then, specific customers (the rest were able
to
come in just fine) starting getting 404's (we use only https, didn't
have a



Carl,

Just out of curiosity, have you tried building out machines with DIFFERENT 
hardware. E.G. building out a server using an IBM or HP computer, rather 
than than the ones you already have. If I recall correctly, you started this 
thread out with SIG 11's.


SIG 11's on Linux are quite often hardware problems. I know you've done 
memtest, but sometimes that's not enough. Here's a link to a problem I had:


http://archive.lug.boulder.co.us/Week-of-Mon-20071210/035903.html

To make a long story short, there was random disk corruption that was 
happening. When I stopped using the on-board controller and went to a PCI 
one, the computer would reboot itself under heavy load. Some of the static 
burn-in utilities can miss hardware defects because they don't actually 
stress the system. E.G. power, CPU, disks, etc. The problem was a specific 
rev of a specific motherboard.


I think you need to step back, get a computer from a different manufacturer 
and test. You've tried different OS's, different JVMs, different everything, 
but different hardware. By your own admission, the app used run flawlessly 
on an older server.


When you've eliminated everything else, the thing that remains, however 
unlikely must be the culprit.





George Sexton
MH Software, Inc.
http://www.mhsoftware.com/
Voice: 303 438 9585



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: jvm exits without trace

Thank you Konstantin, I've read the thread you mentioned.

I should have mentioned the mysterious exit happens on several different
servers with different hardware and configuration. So it's very unlikely
it's being caused by a hardware issue.

It's also not the oom killer as I mentioned before, I already
investigated those possibilities.

I'm suspecting jni with tomcat native and apr now, I believe native code
outside the jvm could very well cause a crash like this but my ignorance
on the subject isn't helping.

I've had strange behavior with libapr 1.3 and apache on machines with
debian 5.0 that synchronize their clock using clock slew (ntpdate) and
decreased the ntpdate frequency to see if that helps. ((as you can tell
I'm getting a bit desperate)


On Wed, 2010-02-24 at 11:28 +0100, Konstantin Kolinko wrote:
 2010/2/24 Taylan Develioglu tdevelio...@ebuddy.com:
  Hi,
 
  I have jvm's, running tomcat and our application, exiting mysteriously,
  and was wondering if anyone could give me some advice on how to debug
  this thing.
 
  There is nothing in catalina.out, nor our application logs, and no
  hotspot error file. GC log looks normal. No trace in system logs.
 
  I am left completely clueless :(, has anyone dealt with a problem like
  this before?
 
 
 There is currently a thread named Tomcat dies suddenly
 Look there for starters.  While that is unlikely your case, most ideas
 of diagnosing such an issue are mentioned in the first dozen of
 messages of that thread.
 
 http://marc.info/?t=12632496092r=1w=2
 http://marc.info/?t=12633901125r=1w=2
 http://marc.info/?t=12647949758r=6w=2
 http://marc.info/?t=12660960545r=1w=2
 
 Best regards,
 Konstantin Kolinko
 
 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org
 



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Bayeux Support

2010-02-24 Thread Mark Thomas


On 24/02/2010 11:04, kevind wrote:


Hi,

Does Tomcat have a Bayeux Implementation. I have seen posts that suggest it
does (the BayeuxServlet implementation of ComentProcessor), but cannot see
any reference to it in 6.0.24.

Has it been released, or is it on a RoadMap.


It is one of the extras modules. I don't recall any releases. You'd have 
to build from source.


Mark



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Multiple Tomcat servers, one war location

2010-02-24 Thread James Law

Hi

My googlefoo seems to be lacking here as I'm unable to find any info on
how I could set this up.

In essence I have multiple machines in a cluster and ideally I'd like to
have a central network share for war files to be kept. As it would save
me copying an updated war file to each individual machine, and means I
know they are all using the same war version.

Obviously keeping the exploded folder on the local machine.

Can anyone give me assistance or maybe a better way of implementing
this? Or even just point me to the place I need to be reading.

All machines are running WinXP and Tomcat 6.0.24

Thanks

 



Search all of our current vacancies at www.generic-software.com

Please consider the environment - do you really need to print this email?

The information contained within this message is intended for the addressee 
only and may contain confidential and/or privileged information. If you are 
not the addressee, please delete this message and notify the sender - you 
should not copy, distribute or disclose its contents to other parties.
 
Any images, documents, views or opinions expressed in this message are 
those of the sender and do not necessarily represent those of Triad
Group PLC or any of its affiliates. No reliance may be placed on this 
message without written confirmation from an authorised company 
representative, and no actions should be taken based on its contents.
 
Generic, a division of Triad Group Plc. Registered in England No. 2285049 @
Weyside Park, Catteshall Lane, Godalming, Surrey, GU7 1XE
Tel: 01908 278450
VAT Registered No: 657 9199 72

Re: Encoding problem with Tomcat (hibernate) + Postgres


davefu wrote:

Hi, this is my setup:

- Debian Lenny 
- Tomcat 5.5
- Postgres 8.3 


I'm running an app which is failing everytime it tries to get some data from
the DB with characters like [ÁÉÍÓÚáéíóú]. By failing I mean the
application isn't showing the data it should when Tomcat throws querys to
Postgres.


Hola.
There is no problem with your English, you are doing fine.

Where is it showing this (wrong) data ?
Do you mean in the result page which you see in the browser ?
Have you saved this page to disk, and examined it with an editor, to see 
what is really contained in that html file ?




I don't know what the exact problem might be, but let me give you (1) my 
sympathy, because these problems are usually horrible, and (2) a 
recommendation first of all, before even starting to decipher the problem :


You have to question *everything* you see, and not take anything for 
granted.


For example, when you edit a logfile with an editor, you have to 
question whether what you see on the screen through this editor, is 
really what is in the logfile, byte-by-byte.
If possible, use a non-UTF8 locale, and an editor which is /not/ UTF-8 
aware, and really shows you the /bytes/ in the logfile, rather than the 
/characters/.  It may be less readable, but at least you will be sure 
that you really see what is in the logfile.


Then you have to ask yourself the question : does the program which 
writes the logfile, write it as characters using a UTF-8 encoding, or 
not ? (it is not as evident as one may think at first)


This may all sound silly, but I can guarantee that if you do not ask 
yourself these questions first, and at every step, you may be going down 
the wrong track when trying to understand what is going on.


For example, when you say that you see this in the logfile :
...(TRANSLATE(upper(cxfaexpedi0_.nombre_madre),
'ÃÃ#137;ÃÃ#147;Ã#154;Ã¡Ã©ÃÃ³ÃºÃ±Ã#145;', 'AEIOUAEIOUNN')like
TRANSLATE(upper('%MARÃA%')...

is that first capital A tilde really one byte /in the logfile/, or is 
it itself already the 2-byte UTF-8 encoding of the capital A tilde 
character, which you see on your screen as a single A tilde character, 
because your editor and your locale have conspired to translate it 
visually ?


(and, when you post it here, has it been re-encoded one more time by the 
 email program ? ;-) )


(Note that it also looks like, in the snippet above, you have more than 
just UTF-8 encoding going on; there are also entities such as 
#137;. Where do these come from ?)


Next, when you change a setting which has an impact on the encoding, do 
it one change at a time, and double-check the result along the lines 
above.  Some of the things which may have an impact are :

- the default system locale
- the locale of the process which is running the database
- the encoding settings of the database itself
- the locale of the process under which Tomcat is running
- whether or not the application streams which are used to communicate 
with the database use the default platform encoding, or have a 
specific encoding specified when opening the stream
- the locale of the process you are using to run the editor which you 
use to look at the logfiles

- the settings of that editor
- and probably quite a few others which I forget

Each one of these may cause some intermediate translation which is not 
evident at first.


Another example : XML files have, by definition, a default encoding 
which is UTF-8, or else the encoding is specified in the leading XML 
declaration.  XML parsers know this, and will read the file in the 
appropriate encoding. The same is probably true for HTML parsers 
(although in that case the default should be ISO-8859-1).

So for example a JSP page that Tomcat uses, will always be read correctly.
But the same is not true for sockets that Tomcat may open to talk to 
some external software.  If such a socket is opened without specifying 
an encoding, then it will default to the default platform encoding, 
which in the case of Tomcat is the encoding of the process running the 
JVM which runs Tomcat.
And the same is also not true for anything that goes over the HTTP 
protocol.  There the default is ISO-8859-1, unless explicitly specified 
otherwise.


So yes, it is a mess, be prepared.
But it is also interesting.




-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Multiple Tomcat servers, one war location

2010-02-24 Thread James Law

Thanks Mark, that was a quick response!
I had a feeling that would be a case, for some reason I was under the
impression you could separate the locations.
Batch file it is then
Thanks again

-Original Message-
From: Mark Thomas [mailto:ma...@apache.org] 
Sent: 24 February 2010 11:41
To: Tomcat Users List
Subject: Re: Multiple Tomcat servers, one war location

On 24/02/2010 11:31, James Law wrote:
 Hi

 My googlefoo seems to be lacking here as I'm unable to find any info
on
 how I could set this up.

 In essence I have multiple machines in a cluster and ideally I'd like
to
 have a central network share for war files to be kept. As it would
save
 me copying an updated war file to each individual machine, and means I
 know they are all using the same war version.

WAR files served directly from network shares are usually a bad idea...

 Obviously keeping the exploded folder on the local machine.

... as you have realised. There is, unfortunately, no easy way to split 
the WAR location and the DIR location.

 Can anyone give me assistance or maybe a better way of implementing
 this? Or even just point me to the place I need to be reading.

 All machines are running WinXP and Tomcat 6.0.24

I'd do something along the lines of the following:
- have the WARs in a shared location
- run a script every x minutes on each server that polls the share and 
copies any updated WARs to the local appBase

You could extend this to remove deleted WARs etc but be sure to handle 
the error case of the share being down correctly.

HTH,

Mark

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Search all of our current vacancies at www.generic-software.com

Please consider the environment - do you really need to print this email?

The information contained within this message is intended for the addressee 
only and may contain confidential and/or privileged information. If you are 
not the addressee, please delete this message and notify the sender - you 
should not copy, distribute or disclose its contents to other parties.

Any images, documents, views or opinions expressed in this message are 
those of the sender and do not necessarily represent those of Triad
Group PLC or any of its affiliates. No reliance may be placed on this 
message without written confirmation from an authorised company 
representative, and no actions should be taken based on its contents.

Generic, a division of Triad Group Plc. Registered in England No. 2285049 @
Weyside Park, Catteshall Lane, Godalming, Surrey, GU7 1XE
Tel: 01908 278450
VAT Registered No: 657 9199 72

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Multiple Tomcat servers, one war location

2010-02-24 Thread Mark Thomas


On 24/02/2010 11:31, James Law wrote:

Hi

My googlefoo seems to be lacking here as I'm unable to find any info on
how I could set this up.

In essence I have multiple machines in a cluster and ideally I'd like to
have a central network share for war files to be kept. As it would save
me copying an updated war file to each individual machine, and means I
know they are all using the same war version.


WAR files served directly from network shares are usually a bad idea...


Obviously keeping the exploded folder on the local machine.


... as you have realised. There is, unfortunately, no easy way to split 
the WAR location and the DIR location.



Can anyone give me assistance or maybe a better way of implementing
this? Or even just point me to the place I need to be reading.

All machines are running WinXP and Tomcat 6.0.24


I'd do something along the lines of the following:
- have the WARs in a shared location
- run a script every x minutes on each server that polls the share and 
copies any updated WARs to the local appBase


You could extend this to remove deleted WARs etc but be sure to handle 
the error case of the share being down correctly.


HTH,

Mark



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: jvm exits without trace


Taylan Develioglu wrote:

Hi,

I have jvm's, running tomcat and our application, exiting mysteriously,
and was wondering if anyone could give me some advice on how to debug
this thing.

There is nothing in catalina.out, nor our application logs, and no
hotspot error file. GC log looks normal. No trace in system logs.

I am left completely clueless :(, has anyone dealt with a problem like
this before?

This sounds eerily like the problem discussed in the other current 
thread Tomcat dies suddenly.

Maybe some of the things mentioned in that thread can give you some ideas ?

In the meantime, have a look for core dumps in the Tomcat bin directory 
for example.
Or, run Tomcat in a command window instead of as a daemon, and check if 
there is a Segfault ?


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: sending request to tomcat failed.....


Hi.

Apologising for top-posting in this case.

the configuration files below look like you have re-used some old files 
left over from some old versions of just about everything.


I suggest that you check the current Tomcat documentation for Tomcat 
6.0, and remove/correct all the settings and attributes which are no 
longer used and/or supported.

They just confuse things a lot, for you and for everyone else.
For example, if I compare this
http://tomcat.apache.org/tomcat-6.0-doc/config/ajp.html
with your Connector below, I see several attributes in your Connector 
which seem to have no current equivalent in the documentation.

The same with your workers.properties file.
Check here :
http://tomcat.apache.org/connectors-doc/reference/workers.html

In other words, for now just put this in your workers.properties file, 
and remove all the rest :


worker.list=worker1
worker.worker1.type=ajp13
worker.worker1.host=
worker.worker1.port=8009

(you can re-introduce some other parameters later, if you really need 
them. But the above is the basic config and is enough in your case).



Finally, as I believe I already answered before, the error that you see 
in the logfile looks very much like you do not have a problem with the 
settings, but you have a problem with the connection between the browser 
and the server.  It looks like the /client/ (the browser) is closing the 
connection with the server (Apache), before Tomcat and mod_jk are able 
to finish sending a response to it.
Using a browser plugin like HttpFox (for Firefox) may help you determine 
whay this is the case.





Munirathinavel wrote:

Hi...
  I'm using the following files in Tomcat  Apache.

workers.properties:

workers.tomcat_home=D:/tomcat6.0.18
workers.java_home=C:/Program Files/Java/jdk1.6.0_16

ps=/


worker.list=worker1
worker.worker1.type=ajp13
worker.worker1.host=
worker.worker1.port=8009
worker.worker1.connection_pool_timeout=600
worker.worker1.connect_timeout=6
worker.worker1.prepost_timeout=6
worker.worker1.socket_keepalive=1
worker.worker1.socket_timeout=60
worker.worker1.lbfactor=1
worker.loadbalancer.type=lb
worker.loadbalancer.balance_workers= worker1
worker.inprocess.type=jni

server.xml
Server port=8006 shutdown=SHUTDOWN
  Listener className=org.apache.catalina.core.AprLifecycleListener
SSLEngine=on /
  Listener className=org.apache.catalina.core.JasperListener /
  Listener className=org.apache.catalina.mbeans.ServerLifecycleListener
/
  Listener
className=org.apache.catalina.mbeans.GlobalResourcesLifecycleListener /
  GlobalNamingResources
Resource name=UserDatabase auth=Container
  type=org.apache.catalina.UserDatabase
  description=User database that can be updated and saved
  factory=org.apache.catalina.users.MemoryUserDatabaseFactory
  pathname=conf/tomcat-users.xml /
  /GlobalNamingResources
  Service name=Catalina
	Connector debug=0 enableLookups=false port=8009 protocol=AJP/1.3 
	 maxThreads=150 minSpareThreads=25 maxSpareThreads=75

acceptCount=100
  minProcessors=5 maxProcessors=100 connectionTimeout=6
disableUploadTimeout=true redirectPort=8443/
   Engine name=Catalina defaultHost= debug=0 
  Realm className=org.apache.catalina.realm.UserDatabaseRealm
 resourceName=UserDatabase/
  Host name=  appBase=gateway
unpackWARs=true autoDeploy=true
xmlValidation=false xmlNamespaceAware=false

Listener className = 
org.apache.jk.config.ApacheConfig
workersConfig=conf/workers.properties
modJk=D:/Apache2.2/modules/mod_jk.so jkLog=logs/mod_jk.log
jkDebug=info noRoot=false/
  /Host
/Engine
  /Service

/Server

context.xml
?xml version='1.0' encoding='utf-8'?

 
   Context


 WatchedResourceWEB-INF/web.xml/WatchedResource
Resource name=jdbc/vehrentDB auth=Container
  	type=javax.sql.DataSource 
	  	maxActive=50

maxIdle=10
minIdle=30
	  	username= password=  
		driverClassName=com.microsoft.sqlserver.jdbc.SQLServerDriver
	 url=jdbc:sqlserver://:1433;	  
		databaseName=;user=;password=;
  	numTestsPerEvictionRun=15 			 
timeBetweenEvictionRunsMillis=90
minEvictableIdleTimeMillis=90 
		testWhileIdle=true
		testOnBorrow=false
		removeAbandoned=true 
		removeAbandonedTimeout=300
  	logAbandoned=true 
	/

Resource name=jdbc/empowerDB auth=Container
  	type=javax.sql.DataSource 
		maxActive=8

maxIdle=4
minIdle=2
username= password=
driverClassName=com.microsoft.sqlserver.jdbc.SQLServerDriver

Re: jvm exits without trace


Taylan,

I am the person who started the Tomcat dies suddenly thread which I still 
haven't resolved.  I am curious about the pattern of failures you are 
experiencing because they may provide some clues to my problem.  In my case, 
the system will run for 15 minutes to 10 days before failing (most of the 
time it is several days to a week.)  It appears to die from a seg fault in 
the JVM (I am using Sun 1.6.0_18 but have tried previous versions)... you 
may be able to see the cause of the failure from the core file (the core 
files on my systems were in several directories so you may have to do a 
'find' to locate them.)  Load may be a factor but the failures generally 
come after the load has been heavy for a while.  I am running a couple of 
applications and it seems the failures are more frequent when people are 
hitting the additional apps (the primary app is always used, the remaining 
apps are used sporatically.)


How does this compare to what you are experiencing?

Thanks,

Carl

- Original Message - 
From: Taylan Develioglu tdevelio...@ebuddy.com

To: Tomcat Users List users@tomcat.apache.org; p...@pidster.com
Sent: Wednesday, February 24, 2010 5:09 AM
Subject: Re: jvm exits without trace



The GC log shows plenty of heap space left in all the spaces.

I purposely didn't bother replacing the variables because I figured they
would not be relevant.

But if you think they might provide clues they're as follows:

JAVA_HEAP_SIZE=18432M
JAVA_EDEN_SIZE=$(($(echo $JAVA_HEAP_SIZE|sed 's/M$\|G$//')/6))M
JAVA_PERM_SIZE=128M
JAVA_STCK_SIZE=128K

EDEN_SIZE is 1/6th of total heap.

And I said there was nothing in the system logs.
But you get a couple of points for trying.

On Wed, 2010-02-24 at 10:44 +0100, Pid wrote:

On 24/02/2010 09:36, Taylan Develioglu wrote:
 I thought I'd add the connector definitions too, :

 Connector port=80
 protocol=org.apache.coyote.http11.Http11AprProtocol
 compression=1024 keepAliveTimeout=6
 maxKeepAliveRequests=-1
 enableLookups=false redirectPort=443 
 maxThreads=150

 pollerSize=32768
 pollerThreadCount=4/

  Connector port=443
 protocol=org.apache.coyote.http11.Http11AprProtocol SSLEnabled=true
 enableLookups=false maxThreads=10 scheme=https
 secure=true
 SSLCertificateFile=/etc/ssl/private/something.crt
 SSLCertificateKeyFile=/etc/ssl/private/something.key
 SSLCACertificateFile=/etc/ssl/certs/ca.crt/


 On Wed, 2010-02-24 at 10:23 +0100, Taylan Develioglu wrote:
 Hi,

 I have jvm's, running tomcat and our application, exiting 
 mysteriously,

 and was wondering if anyone could give me some advice on how to debug
 this thing.

 There is nothing in catalina.out, nor our application logs, and no
 hotspot error file. GC log looks normal. No trace in system logs.

 I am left completely clueless :(, has anyone dealt with a problem like
 this before?

 Any help appreciated.

 - Tomcat 6.0.24
 - TC native 1.1.18
 - APR 1.3.9
 - Sun JDK 6u18
 - Debian Lenny, 2.6.31.10-amd64

 2 servlets, one as ROOT. 2 HTTP connectors that use TCNative/APR.

 JAVA_OPTS ( ):

  -verbose:gc
  -Djava.awt.headless=true
  -Dsun.net.inetaddr.ttl=60
  -Dfile.encoding=UTF-8
  -Djava.io.tmpdir=$TMP_DIR
  -Djava.library.path=/usr/local/lib
  -Djava.endorsed.dirs=$CATALINA_BASE/endorsed
  -Dcatalina.base=$CATALINA_BASE
  -Dcatalina.home=$CATALINA_HOME
  -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager
 -Djava.util.logging.config.file=$CATALINA_BASE/conf/logging.properties
  -XX:+PrintGCDetails
  -Xloggc:$CATALINA_BASE/logs/gc.log
  -XX:+UseConcMarkSweepGC
  -XX:CMSInitiatingOccupancyFraction=70
  -Xms$JAVA_HEAP_SIZE
  -Xmx$JAVA_HEAP_SIZE
  -XX:NewSize=$JAVA_EDEN_SIZE
  -XX:MaxNewSize=$JAVA_EDEN_SIZE
  -XX:PermSize=$JAVA_PERM_SIZE
  -XX:MaxPermSize=$JAVA_PERM_SIZE
  -Xss$JAVA_STCK_SIZE
  -XX:+UseLargePages

There's no actual heap size settings in the above.  But you get a couple
of points for trying.

Google Linux Out Of Memory killer or OOM Killer and then check the
server logs carefully.  (e.g. /var/log/messages)


p

 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org





-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org





-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail:

Re: jvm exits without trace


Carl wrote:

Taylan,


...



How does this compare to what you are experiencing?

Well, I note at least the crashes without traces in the logs, and the 
common usage of SSL.

Is Taylan getting any Segfaults ?

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: jvm exits without trace


On 24/02/2010 11:16, Taylan Develioglu wrote:

Thank you Konstantin, I've read the thread you mentioned.

I should have mentioned the mysterious exit happens on several different
servers with different hardware and configuration. So it's very unlikely
it's being caused by a hardware issue.

It's also not the oom killer as I mentioned before, I already
investigated those possibilities.

I'm suspecting jni with tomcat native and apr now, I believe native code
outside the jvm could very well cause a crash like this but my ignorance
on the subject isn't helping.

I've had strange behavior with libapr 1.3 and apache on machines with
debian 5.0 that synchronize their clock using clock slew (ntpdate) and
decreased the ntpdate frequency to see if that helps. ((as you can tell
I'm getting a bit desperate)


Can you disable APR, use the alternative SSL configuration or is that 
not possible?


Also, would be it be possible to use an earlier 1.6 JVM* or perhaps even 
a completely different one?  I can't remember, offhand, what (if any) 
results Carl had with other JVMs.



p


* Perhaps there's a subtle bug in recent releases of the JVM.



On Wed, 2010-02-24 at 11:28 +0100, Konstantin Kolinko wrote:

2010/2/24 Taylan Develioglutdevelio...@ebuddy.com:

Hi,

I have jvm's, running tomcat and our application, exiting mysteriously,
and was wondering if anyone could give me some advice on how to debug
this thing.

There is nothing in catalina.out, nor our application logs, and no
hotspot error file. GC log looks normal. No trace in system logs.

I am left completely clueless :(, has anyone dealt with a problem like
this before?



There is currently a thread named Tomcat dies suddenly
Look there for starters.  While that is unlikely your case, most ideas
of diagnosing such an issue are mentioned in the first dozen of
messages of that thread.

http://marc.info/?t=12632496092r=1w=2
http://marc.info/?t=12633901125r=1w=2
http://marc.info/?t=12647949758r=6w=2
http://marc.info/?t=12660960545r=1w=2

Best regards,
Konstantin Kolinko

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org





-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org




-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Tomcat loading dlls


On 24/02/2010 10:16, StrongSteve wrote:


Just one thing I forgot to ask.

Using the PATH Variable works fine when starting the Tomcat from a command
shell.

Nevertheless if I start the Tomcat from within Eclipse (MyEclipse), it does
not care if the directory is specified in the PATH or not. The DLL is not
being loaded. In order for it to work I have to append the directory to the
library path when starting the Tomcat from within Eclipse.

Why is this so? Am I doing something wrong? I mean it is the same Tomcat.
Just once started from within Eclipse.


It's the same Tomcat installation, but Eclipse is very likely to be 
using it's own configuration files to launch it.


You'll probably find some info about this in the Eclipse docs.


p



Thanks in Advance!
Stefan


StrongSteve wrote:


Using the PATH Variable worked fine.

Just some quick questions for a better understanding:

If a Java program calls System.loadLibrary(XXX), are all directories
specified by the PATH varibale searched for a DLL called XXX? In case
there are more directories specified that do contain a DLL called XXX,
which one is taken? The first occurence specified in the PATH Variable,
the last one?

Can anyone explain the difference between PATH, CLASSPATH and
java.library.path. I am a little stuck on when to use use which property.

Thanks in Advance for your time!

Greetings
Stefan


n828cl wrote:



From: StrongSteve [mailto:ste...@starkeweb.org]
Subject: Tomcat loading dlls

Do I place the needed dlls into another directory and alter an
environmental variable (f.e. java.library.path, PATH, CLASSPATH,
...) or do i alter catalina.bat/startup.bat?


Since you're on Windows, the easiest approach is just to insure the DLLs
are somewhere in the PATH - if you're running Tomcat from the .bat
scripts.  If you want to modify the PATH variable to include an
additional directory, do that with setenv.bat; don't modify catalina.bat
or startup.bat.

If you're running Tomcat as a Windows service, set the java.libary.path
system property in the Java tab of the tomcat?w.exe program to point to
the directory where the DLLs are.  (Fill in the ? with the level of
Tomcat you're using - which you didn't tell us.)

  - Chuck



THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you
received this in error, please contact the sender and delete the e-mail
and its attachments from all computers.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org











-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: sending request to tomcat failed..

2010-02-24 Thread Munirathinavel


Hi...
  I'm using the following files in Tomcat  Apache.

workers.properties:

workers.tomcat_home=D:/tomcat6.0.18
workers.java_home=C:/Program Files/Java/jdk1.6.0_16

ps=/


worker.list=worker1
worker.worker1.type=ajp13
worker.worker1.host=
worker.worker1.port=8009
worker.worker1.connection_pool_timeout=600
worker.worker1.connect_timeout=6
worker.worker1.prepost_timeout=6
worker.worker1.socket_keepalive=1
worker.worker1.socket_timeout=60
worker.worker1.lbfactor=1
worker.loadbalancer.type=lb
worker.loadbalancer.balance_workers= worker1
worker.inprocess.type=jni

server.xml
Server port=8006 shutdown=SHUTDOWN
  Listener className=org.apache.catalina.core.AprLifecycleListener
SSLEngine=on /
  Listener className=org.apache.catalina.core.JasperListener /
  Listener className=org.apache.catalina.mbeans.ServerLifecycleListener
/
  Listener
className=org.apache.catalina.mbeans.GlobalResourcesLifecycleListener /
  GlobalNamingResources
Resource name=UserDatabase auth=Container
  type=org.apache.catalina.UserDatabase
  description=User database that can be updated and saved
  factory=org.apache.catalina.users.MemoryUserDatabaseFactory
  pathname=conf/tomcat-users.xml /
  /GlobalNamingResources
  Service name=Catalina
Connector debug=0 enableLookups=false port=8009
protocol=AJP/1.3
 maxThreads=150 minSpareThreads=25 maxSpareThreads=75
acceptCount=100
  minProcessors=5 maxProcessors=100 connectionTimeout=6
disableUploadTimeout=true redirectPort=8443/
   Engine name=Catalina defaultHost= debug=0 
  Realm className=org.apache.catalina.realm.UserDatabaseRealm
 resourceName=UserDatabase/
  Host name=  appBase=gateway
unpackWARs=true autoDeploy=true
xmlValidation=false xmlNamespaceAware=false

Listener className =
org.apache.jk.config.ApacheConfig workersConfig=conf/workers.properties
modJk=D:/Apache2.2/modules/mod_jk.so jkLog=logs/mod_jk.log
jkDebug=info noRoot=false/
  /Host
/Engine
  /Service
   
/Server

context.xml
?xml version='1.0' encoding='utf-8'?

 
   Context

 WatchedResourceWEB-INF/web.xml/WatchedResource
Resource name=jdbc/vehrentDB auth=Container
  type=javax.sql.DataSource
  maxActive=50
  maxIdle=10
minIdle=30
  username= password=  
   
driverClassName=com.microsoft.sqlserver.jdbc.SQLServerDriver
 url=jdbc:sqlserver://:1433;  
   
databaseName=;user=;password=;
  numTestsPerEvictionRun=15 
timeBetweenEvictionRunsMillis=90
minEvictableIdleTimeMillis=90
testWhileIdle=true
testOnBorrow=false
removeAbandoned=true
removeAbandonedTimeout=300
  logAbandoned=true
/
Resource name=jdbc/empowerDB auth=Container
  type=javax.sql.DataSource
maxActive=8
maxIdle=4
minIdle=2
username= password=
   
driverClassName=com.microsoft.sqlserver.jdbc.SQLServerDriver
 
url=jdbc:sqlserver://:1433;databaseName=;user=;password=;
numTestsPerEvictionRun=15
timeBetweenEvictionRunsMillis=90
minEvictableIdleTimeMillis=90
testWhileIdle=true
  testOnBorrow=false
removeAbandoned=true
removeAbandonedTimeout=300
  logAbandoned=true
/
/Context
virtual-host.conf
NameVirtualHost *:80
VirtualHost *:80
ServerAdmin xx
DocumentRoot D:/Apache2.2/htdocs/gateway
ServerName xx
ServerAlias xx
ErrorLog logs/gateway-error.log
CustomLog logs/gateway-access.log common

JkMount /* worker1
JkUnMount /*js/*.js worker1
JkUnMount /*.jpeg worker1
JkUnMount /*.png worker1
JkUnMount /*.gif worker1
JkUnMount /*.html worker1
JkUnMount /*.jpg worker1
JkUnMount /*.css worker1
JkUnMount /*.swf worker1
/VirtualHost
   
  Due to this issue i'm not able to proceed further.Can you please reply
me soon.Hoping for the nice r
-- 
View this message in context: 
http://old.nabble.com/Re%3A-sending-request-to-tomcat-failed..-tp27714196p27714196.html
Sent from the Tomcat - User mailing list archive at Nabble.com.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: sending request to tomcat failed..


On 24/02/2010 13:08, Munirathinavel wrote:


Hi...
   I'm using the following files in Tomcat  Apache.

workers.properties:

 workers.tomcat_home=D:/tomcat6.0.18
 workers.java_home=C:/Program Files/Java/jdk1.6.0_16

ps=/


worker.list=worker1
 worker.worker1.type=ajp13
 worker.worker1.host=
 worker.worker1.port=8009
 worker.worker1.connection_pool_timeout=600
 worker.worker1.connect_timeout=6
 worker.worker1.prepost_timeout=6
 worker.worker1.socket_keepalive=1
 worker.worker1.socket_timeout=60
 worker.worker1.lbfactor=1
worker.loadbalancer.type=lb
worker.loadbalancer.balance_workers= worker1


The line below looks like a bad idea.


worker.inprocess.type=jni

server.xml
Server port=8006 shutdown=SHUTDOWN
   Listener className=org.apache.catalina.core.AprLifecycleListener
SSLEngine=on /
   Listener className=org.apache.catalina.core.JasperListener /
   Listener className=org.apache.catalina.mbeans.ServerLifecycleListener
/
   Listener
className=org.apache.catalina.mbeans.GlobalResourcesLifecycleListener /
   GlobalNamingResources
 Resource name=UserDatabase auth=Container
   type=org.apache.catalina.UserDatabase
   description=User database that can be updated and saved
   factory=org.apache.catalina.users.MemoryUserDatabaseFactory
   pathname=conf/tomcat-users.xml /
   /GlobalNamingResources
   Service name=Catalina
 Connector debug=0 enableLookups=false port=8009
protocol=AJP/1.3
  maxThreads=150 minSpareThreads=25 maxSpareThreads=75
acceptCount=100
   minProcessors=5 maxProcessors=100 connectionTimeout=6
disableUploadTimeout=true redirectPort=8443/
Engine name=Catalina defaultHost= debug=0
   Realm className=org.apache.catalina.realm.UserDatabaseRealm
  resourceName=UserDatabase/
   Host name=  appBase=gateway
 unpackWARs=true autoDeploy=true
 xmlValidation=false xmlNamespaceAware=false

 Listener className =
org.apache.jk.config.ApacheConfig workersConfig=conf/workers.properties
modJk=D:/Apache2.2/modules/mod_jk.so jkLog=logs/mod_jk.log
jkDebug=info noRoot=false/


As André said, probably best to start over with a fresh, up-to-date 
configuration.  I may have missed which version of mod_jk you're using, 
can you tell us?



p


   /Host
 /Engine
   /Service

/Server

context.xml
?xml version='1.0' encoding='utf-8'?


Context

  WatchedResourceWEB-INF/web.xml/WatchedResource
 Resource name=jdbc/vehrentDB auth=Container
   type=javax.sql.DataSource
   maxActive=50
   maxIdle=10
 minIdle=30
   username= password=

driverClassName=com.microsoft.sqlserver.jdbc.SQLServerDriver
  url=jdbc:sqlserver://:1433;

databaseName=;user=;password=;
   numTestsPerEvictionRun=15
timeBetweenEvictionRunsMillis=90
 minEvictableIdleTimeMillis=90
 testWhileIdle=true
 testOnBorrow=false
 removeAbandoned=true
 removeAbandonedTimeout=300
   logAbandoned=true
 /
 Resource name=jdbc/empowerDB auth=Container
   type=javax.sql.DataSource
 maxActive=8
 maxIdle=4
 minIdle=2
 username= password=

driverClassName=com.microsoft.sqlserver.jdbc.SQLServerDriver

url=jdbc:sqlserver://:1433;databaseName=;user=;password=;
 numTestsPerEvictionRun=15
 timeBetweenEvictionRunsMillis=90
 minEvictableIdleTimeMillis=90
 testWhileIdle=true
   testOnBorrow=false
 removeAbandoned=true
 removeAbandonedTimeout=300
   logAbandoned=true
 /
/Context
virtual-host.conf
NameVirtualHost *:80
VirtualHost *:80
 ServerAdmin xx
 DocumentRoot D:/Apache2.2/htdocs/gateway
 ServerName xx
 ServerAlias xx
 ErrorLog logs/gateway-error.log
 CustomLog logs/gateway-access.log common

 JkMount /* worker1
 JkUnMount /*js/*.js worker1
 JkUnMount /*.jpeg worker1
 JkUnMount /*.png worker1
 JkUnMount /*.gif worker1
 JkUnMount /*.html worker1
 JkUnMount /*.jpg worker1
 JkUnMount /*.css worker1
 JkUnMount /*.swf worker1
/VirtualHost

   Due to this issue i'm not able to proceed further.Can you please reply
me soon.Hoping for the nice r



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: jvm exits without trace

Hello Carl,

The failures we've seen are in anywhere between 8 hours to a week of
runtime. Most of them have (still) been running for almost a month
without failure. There are ~100 machines.

From the top of my head, I think we've had about 10+ failures now.

We have also had failures with hotspot error files (hs_err) present, and
the cause specified was indeed SIGSEGV indicating a page fault. But I
don't know if the two are related.

We also use jdk 1.6.0_18, I'm downgrading the machines to 1.6.0_16 when
the situation allows (during regular updates of the application, or a
crash) to see if that helps.

It might be useful to note that the failures happen with tomcat 6.0.20
as well as 6.0.24.

As far as load concerns, I haven't had a failure on an idle machines.
The machines are well loaded, but only at a fraction limit in regards to
load and cpu utilization.  
Most memory is commited to tomcat, where a 24G machine would have 18G
allocated to heap, 128M to permgen and some unspecified amount would get
used by jni for apr. About 4G remains free after calculating taking into
account the jvm itsself.
A 16G machine would have 12G allocated to the heap.

Besides the fact that our apps heavily use nio and mina I wouldn't say
there's anything else noteworthy. There can be anywhere up to 1
concurrents on one machine.

I had searched for coredumps, but no luck. Running tomcat on the
foreground might show something, but then again I could be waiting for a
month for it to happen.

On Wed, 2010-02-24 at 12:42 +0100, Carl wrote:
 Taylan,
 
 I am the person who started the Tomcat dies suddenly thread which I still 
 haven't resolved.  I am curious about the pattern of failures you are 
 experiencing because they may provide some clues to my problem.  In my case, 
 the system will run for 15 minutes to 10 days before failing (most of the 
 time it is several days to a week.)  It appears to die from a seg fault in 
 the JVM (I am using Sun 1.6.0_18 but have tried previous versions)... you 
 may be able to see the cause of the failure from the core file (the core 
 files on my systems were in several directories so you may have to do a 
 'find' to locate them.)  Load may be a factor but the failures generally 
 come after the load has been heavy for a while.  I am running a couple of 
 applications and it seems the failures are more frequent when people are 
 hitting the additional apps (the primary app is always used, the remaining 
 apps are used sporatically.)
 
 How does this compare to what you are experiencing?
 
 Thanks,
 
 Carl
 
 - Original Message - 
 From: Taylan Develioglu tdevelio...@ebuddy.com
 To: Tomcat Users List users@tomcat.apache.org; p...@pidster.com
 Sent: Wednesday, February 24, 2010 5:09 AM
 Subject: Re: jvm exits without trace
 
 
  The GC log shows plenty of heap space left in all the spaces.
 
  I purposely didn't bother replacing the variables because I figured they
  would not be relevant.
 
  But if you think they might provide clues they're as follows:
 
  JAVA_HEAP_SIZE=18432M
  JAVA_EDEN_SIZE=$(($(echo $JAVA_HEAP_SIZE|sed 's/M$\|G$//')/6))M
  JAVA_PERM_SIZE=128M
  JAVA_STCK_SIZE=128K
 
  EDEN_SIZE is 1/6th of total heap.
 
  And I said there was nothing in the system logs.
  But you get a couple of points for trying.
 
  On Wed, 2010-02-24 at 10:44 +0100, Pid wrote:
  On 24/02/2010 09:36, Taylan Develioglu wrote:
   I thought I'd add the connector definitions too, :
  
   Connector port=80
   protocol=org.apache.coyote.http11.Http11AprProtocol
   compression=1024 keepAliveTimeout=6
   maxKeepAliveRequests=-1
   enableLookups=false redirectPort=443 
   maxThreads=150
   pollerSize=32768
   pollerThreadCount=4/
  
Connector port=443
   protocol=org.apache.coyote.http11.Http11AprProtocol SSLEnabled=true
   enableLookups=false maxThreads=10 scheme=https
   secure=true
   SSLCertificateFile=/etc/ssl/private/something.crt
   SSLCertificateKeyFile=/etc/ssl/private/something.key
   SSLCACertificateFile=/etc/ssl/certs/ca.crt/
  
  
   On Wed, 2010-02-24 at 10:23 +0100, Taylan Develioglu wrote:
   Hi,
  
   I have jvm's, running tomcat and our application, exiting 
   mysteriously,
   and was wondering if anyone could give me some advice on how to debug
   this thing.
  
   There is nothing in catalina.out, nor our application logs, and no
   hotspot error file. GC log looks normal. No trace in system logs.
  
   I am left completely clueless :(, has anyone dealt with a problem like
   this before?
  
   Any help appreciated.
  
   - Tomcat 6.0.24
   - TC native 1.1.18
   - APR 1.3.9
   - Sun JDK 6u18
   - Debian Lenny, 2.6.31.10-amd64
  
   2 servlets, one as ROOT. 2 HTTP connectors that use TCNative/APR.
  
   JAVA_OPTS ( ):
  
-verbose:gc
-Djava.awt.headless=true
-Dsun.net.inetaddr.ttl=60
-Dfile.encoding=UTF-8

Re: jvm exits without trace


Taylan,


The failures we've seen are in anywhere between 8 hours to a week of
runtime.


The timing of the failures seems similar.


We have also had failures with hotspot error files (hs_err) present, and
the cause specified was indeed SIGSEGV indicating a page fault.


I have never seen any hs_* files but have seen core files where strace 
showed the jvm stopped on a seg fault.



We also use jdk 1.6.0_18, I'm downgrading the machines to 1.6.0_16 when
the situation allows (during regular updates of the application, or a
crash) to see if that helps.


I have used jdk 1.6.0_17 and 1.6.0_18 with the same results... have not 
tried 1.6.0_16.  Please post your results of this trial.



Running tomcat on the
foreground might show something, but then again I could be waiting for a
month for it to happen.


Yes, this has been part of my problem as anytime we change something, we 
have to wait a week for the server to fail.


In one sense, I am fortunate that I have a little more flexibility than you. 
I have two servers (different hardware) but only need one in service at a 
time.  Therefore, I always have one server I can test ideas on although I 
have never been able to develop a meaningful stress test, i.e., the only way 
I can test a change is to put it in production.


Thanks,

Carl

- Original Message - 
From: Taylan Develioglu tdevelio...@ebuddy.com

To: Tomcat Users List users@tomcat.apache.org
Sent: Wednesday, February 24, 2010 8:31 AM
Subject: Re: jvm exits without trace



Hello Carl,

The failures we've seen are in anywhere between 8 hours to a week of
runtime. Most of them have (still) been running for almost a month
without failure. There are ~100 machines.


From the top of my head, I think we've had about 10+ failures now.


We have also had failures with hotspot error files (hs_err) present, and
the cause specified was indeed SIGSEGV indicating a page fault. But I
don't know if the two are related.

We also use jdk 1.6.0_18, I'm downgrading the machines to 1.6.0_16 when
the situation allows (during regular updates of the application, or a
crash) to see if that helps.

It might be useful to note that the failures happen with tomcat 6.0.20
as well as 6.0.24.

As far as load concerns, I haven't had a failure on an idle machines.
The machines are well loaded, but only at a fraction limit in regards to
load and cpu utilization.
Most memory is commited to tomcat, where a 24G machine would have 18G
allocated to heap, 128M to permgen and some unspecified amount would get
used by jni for apr. About 4G remains free after calculating taking into
account the jvm itsself.
A 16G machine would have 12G allocated to the heap.

Besides the fact that our apps heavily use nio and mina I wouldn't say
there's anything else noteworthy. There can be anywhere up to 1
concurrents on one machine.

I had searched for coredumps, but no luck. Running tomcat on the
foreground might show something, but then again I could be waiting for a
month for it to happen.

On Wed, 2010-02-24 at 12:42 +0100, Carl wrote:

Taylan,

I am the person who started the Tomcat dies suddenly thread which I 
still

haven't resolved.  I am curious about the pattern of failures you are
experiencing because they may provide some clues to my problem.  In my 
case,

the system will run for 15 minutes to 10 days before failing (most of the
time it is several days to a week.)  It appears to die from a seg fault 
in

the JVM (I am using Sun 1.6.0_18 but have tried previous versions)... you
may be able to see the cause of the failure from the core file (the core
files on my systems were in several directories so you may have to do a
'find' to locate them.)  Load may be a factor but the failures generally
come after the load has been heavy for a while.  I am running a couple of
applications and it seems the failures are more frequent when people are
hitting the additional apps (the primary app is always used, the 
remaining

apps are used sporatically.)

How does this compare to what you are experiencing?

Thanks,

Carl

- Original Message - 
From: Taylan Develioglu tdevelio...@ebuddy.com

To: Tomcat Users List users@tomcat.apache.org; p...@pidster.com
Sent: Wednesday, February 24, 2010 5:09 AM
Subject: Re: jvm exits without trace


 The GC log shows plenty of heap space left in all the spaces.

 I purposely didn't bother replacing the variables because I figured 
 they

 would not be relevant.

 But if you think they might provide clues they're as follows:

 JAVA_HEAP_SIZE=18432M
 JAVA_EDEN_SIZE=$(($(echo $JAVA_HEAP_SIZE|sed 's/M$\|G$//')/6))M
 JAVA_PERM_SIZE=128M
 JAVA_STCK_SIZE=128K

 EDEN_SIZE is 1/6th of total heap.

 And I said there was nothing in the system logs.
 But you get a couple of points for trying.

 On Wed, 2010-02-24 at 10:44 +0100, Pid wrote:
 On 24/02/2010 09:36, Taylan Develioglu wrote:
  I thought I'd add the connector definitions too, :
 
  Connector port=80

Re: jvm exits without trace

It's possible, 
I'm going to try an earlier jvm first. u16 was the previous one running
production, will try moving back to u16.

If that fails removing APR is the next thing to try out.

After that I'm going to try beating the dev team with a stick (I know
you're reading this!).

This is incredibly frustrating, thanks for all the help.

 Can you disable APR, use the alternative SSL configuration or is that 
 not possible?
 
 Also, would be it be possible to use an earlier 1.6 JVM* or perhaps even 
 a completely different one?  I can't remember, offhand, what (if any) 
 results Carl had with other JVMs.
 
 
 p
 
 
 * Perhaps there's a subtle bug in recent releases of the JVM.
 
 
  On Wed, 2010-02-24 at 11:28 +0100, Konstantin Kolinko wrote:
  2010/2/24 Taylan Develioglutdevelio...@ebuddy.com:
  Hi,
 
  I have jvm's, running tomcat and our application, exiting mysteriously,
  and was wondering if anyone could give me some advice on how to debug
  this thing.
 
  There is nothing in catalina.out, nor our application logs, and no
  hotspot error file. GC log looks normal. No trace in system logs.
 
  I am left completely clueless :(, has anyone dealt with a problem like
  this before?
 
 
  There is currently a thread named Tomcat dies suddenly
  Look there for starters.  While that is unlikely your case, most ideas
  of diagnosing such an issue are mentioned in the first dozen of
  messages of that thread.
 
  http://marc.info/?t=12632496092r=1w=2
  http://marc.info/?t=12633901125r=1w=2
  http://marc.info/?t=12647949758r=6w=2
  http://marc.info/?t=12660960545r=1w=2
 
  Best regards,
  Konstantin Kolinko
 
  -
  To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
  For additional commands, e-mail: users-h...@tomcat.apache.org
 
 
 
 
  -
  To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
  For additional commands, e-mail: users-h...@tomcat.apache.org
 
 
 
 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org
 



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: jvm exits without trace

I'll be sure to post an update if u16 resolves it. Or any other progress
for that matter.

In the meantime don't be shy either :)

On Wed, 2010-02-24 at 14:52 +0100, Carl wrote:
 Taylan,
 
  The failures we've seen are in anywhere between 8 hours to a week of
  runtime.
 
 The timing of the failures seems similar.
 
  We have also had failures with hotspot error files (hs_err) present, and
  the cause specified was indeed SIGSEGV indicating a page fault.
 
 I have never seen any hs_* files but have seen core files where strace 
 showed the jvm stopped on a seg fault.
 
  We also use jdk 1.6.0_18, I'm downgrading the machines to 1.6.0_16 when
  the situation allows (during regular updates of the application, or a
  crash) to see if that helps.
 
 I have used jdk 1.6.0_17 and 1.6.0_18 with the same results... have not 
 tried 1.6.0_16.  Please post your results of this trial.
 
  Running tomcat on the
  foreground might show something, but then again I could be waiting for a
  month for it to happen.
 
 Yes, this has been part of my problem as anytime we change something, we 
 have to wait a week for the server to fail.
 
 In one sense, I am fortunate that I have a little more flexibility than you. 
 I have two servers (different hardware) but only need one in service at a 
 time.  Therefore, I always have one server I can test ideas on although I 
 have never been able to develop a meaningful stress test, i.e., the only way 
 I can test a change is to put it in production.
 
 Thanks,
 
 Carl



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Tomcat loading dlls

 From: StrongSteve [mailto:ste...@starkeweb.org]
 Subject: RE: Tomcat loading dlls

 In order for it to work I have to append the directory to
 the library path when starting the Tomcat from within Eclipse.

 Why is this so? Am I doing something wrong? I mean it is the same
 Tomcat.

No, it's not the same Tomcat.  Eclipse insists on using its own configuration 
and startup scripts, ignoring whatever you've established for the standalone 
Tomcat.

 - Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Tomcat loading dlls

 From: StrongSteve [mailto:ste...@starkeweb.org]
 Subject: RE: Tomcat loading dlls

 If a Java program calls System.loadLibrary(XXX), are all directories
 specified by the PATH varibale searched for a DLL called XXX?

For Windows, yes, in the order specified on the PATH variable.  For Linux, the 
LD_LIBRARY_PATH variable is used.  Both are overridden by the java.library.path 
system property, if present.

 Can anyone explain the difference between PATH, CLASSPATH and
 java.library.path.

PATH is where the OS searches for executables, and also where a Windows JVM 
searches for loadLibrary() references by default.  Unless the java.library.path 
system property is explicitly set, the Windows Java launchers set it to the 
value of PATH.  You may specify java.library.path on the command line to avoid 
the overhead of searching through PATH, which is often a rather long list, and 
might encounter DLL versions you didn't want to load.

The CLASSPATH environment variable is a hold-over from the early days of Java, 
and really should never be used.  It sets the default location for where the 
JVM should search for class files.  Such a location should be specified on the 
command line via the -cp parameter or the java.class.path system property.  
(Apple should be ashamed of themselves for setting CLASSPATH in the system 
environment variables whenever QuickTime is installed or updated on Windows - 
that's extremely obnoxious behavior.)  The use of CLASSPATH has caused an 
incredible amount of confusion and grief over the years.

 - Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Tomcat dies suddenly

 From: Carl [mailto:c...@etrak-plus.com]
 Subject: RE: Tomcat dies suddenly

(I switched this comment to Carl's original thread, since that's where it 
applies.)

 the core files on my systems were in several directories

I wonder if the above is a clue to what's going on.  I've always seen core 
files written to the current directory of the dying process, never scattered 
around arbitrarily.  Tomcat's current directory should be $CATALINA_HOME/bin; 
if one of the webapps is changing the current directory, could that be 
contributing to the failure by confusing other code or the JVM?  (Or is this 
just another of the many red herrings?)

 - Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.

[OT] Batch-processing of emailed log4j log messages

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

All,

We use log4j for logging in our webapps, and I'm considering enabling
email notifications of errors. Not that it would ever happen (of
course!), but I want to avoid a situation where some bug is triggered
and thousands of log messages are emitted, each sent individually to me.

I checked the Javadoc for SMTPAppender and it looks like there is some
sort of buffering going on, but there appear to be very few options for
controlling the frequency of message sending (I'd probably want ~5
minute intervals or so).

It looks like I can use a TriggeringEventEvaluator coupled with a
background thread that, say, issues a SEND EMAIL NOW message at
intervals so flush whatever buffer exists in the appender.

Has anyone ever done anything like this before? If so, do you have any tips?

Thanks,
- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkuFP0sACgkQ9CaO5/Lv0PCdggCfRwTq12uW0xNw4Bwjzfw9J8cH
4mUAn3gvtxAqAfVv584n2JirYu4DtNNB
=fGQ0
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Trouble with CLIENT-CERT authentication method

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Kevin,

On 2/23/2010 6:07 PM, Kevin Mills wrote:
 On 2/19/10, Christopher Schultz ch...@christopherschultz.net wrote:
 So, with clientAuth=false, how do you get a client certificate to use
 for authentication? Or, does the presence of the CLIENT-CERT in web.xml
 trigger an SSL-renegotiation where the client cert /is/ requested from
 the client.
 
 The presence of CLIENT-CERT:
 
  login-config
  auth-methodCLIENT-CERT/auth-method
  /login-config
 
 in web.xml triggers the renegotiation and the client cert is requested
 from the client.  As Mark pointed out, this exposes the TLS bug
 CVE-2009-355 so be warned!

So, setting auth-method to CLIENT-CERT triggers an SSL renegotiation.
What if the Connector is set to clientAuth=want or
clientAuth=true? Will the initial SSL negotiation carry the client
certificate and therefore avoid CVE-2009-355?

Thanks,
- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkuFP6gACgkQ9CaO5/Lv0PAs6gCZAXQ5c1cbjbw8U48p527U08h9
wukAmwZ40uKqBalI+W21EvMrloxLM3Hx
=bTUA
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: [OT] Tomcat dies suddenly

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Chuck,

On 2/24/2010 10:00 AM, Caldarale, Charles R wrote:
 From: Carl [mailto:c...@etrak-plus.com]
 Subject: RE: Tomcat dies suddenly

 the core files on my systems were in several directories

 I wonder if the above is a clue to what's going on.  I've always seen
 core files written to the current directory of the dying process,
 never scattered around arbitrarily.  Tomcat's current directory
 should be $CATALINA_HOME/bin;

Mine never is, but I run using catalina.sh, which doesn't execute a 'cd'
anywhere. Maybe this happens when running as a Windows service or
something, but I don't see this behavior when running on *NIX.

 if one of the webapps is changing the
 current directory, could that be contributing to the failure by
 confusing other code or the JVM?  (Or is this just another of the
 many red herrings?)

I suppose that's possible. Carl, are the core files all from the same
run? If so, something is very very wrong. Otherwise, maybe the reason
why you couldn't find any traces of your crash was that your CWD was
changing from what you expected it to be to some random subdirectory.
shrug

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkuFQnoACgkQ9CaO5/Lv0PBZYACgjd19BIr41ucOAenBQVE7//S6
ltoAnRyndQdsC8h70kshy1p7bkVgi6nY
=+ndQ
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Tomcat dies suddenly

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Carl,

On 2/23/2010 6:00 PM, Carl wrote:
 There was no core dump or hs_* file.

:(

 The strace output looks like it was overwritten this morning at 
 1:00AM, crap, double crap.

Try something like this:

#!/bin/sh

while(1) ; do
  strace -o /logs/strace.log java ...
  mv /logs/strace.log /logs/strace.log.`date '+%Y-%m-%d:%H:%M:%S'`
done

This should preserve your logs across restarts.

 What's the consensus on moving to the IBM JVM or rerunning this test
 (Sun JVM) to failure to get a good strace output?

Well, switching to IBM  may fix your problem, but I think we're all very
interested in what you find. If you're willing to continue, we're
willing to keep reading.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkuFQ7AACgkQ9CaO5/Lv0PDd9gCeLaaWIuitwbPcDtDk2JQIEYug
U1EAnRGm9weoAcmaTmOoGG13cemTCbuD
=SN9a
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Apache 2.2.3 - mod_proxy_ajp - Tomcat 6.0.13 Loadbalancing

2010-02-24 Thread jkv


We are using the above setup to load balance http and https request, for
https request
Apache is configured to serve the certificates and the request is actually
being processed
by 3 tomcat instances running behind. We are getting a strange log in apache 

[error] ajp_read_header: ajp_ilink_receive failed
[error] (120006)APR does not understand this error code: proxy: read
response failed from (null) (localhost)

This happens when my tomcat which is handling ajp request got through https
in Apache.

I have another question like when my Apache forwards a request to tomcat and
my tomcat takes too long
to respond will the same request be routed to a different tomcat?? 
We have not configured sticky sessions in Apache, 

We are having many instances where in my application in TomcatA throws
exception (because it waits to connect to another host which takes too long)
before responding back to Apache and I can see logs in other tomcats, say
TomcatB and TomcatC with a session Id x.NodeA, why does
this occur and can this be eliminated??

Apache configurations are as follows

Proxy balancer://tomcatcluster
Order deny,allow
Allow from all
BalancerMember ajp://localhost:8109/test route=NodeA
BalancerMember ajp://localhost:8209/test route=NodeB
BalancerMember ajp://localhost:8309/test route=NodeC
/Proxy

ProxyPass /test balancer://tomcatcluster lbmethod=byrequests nofailover=On
ProxyPassReverse /test  ajp://localhost:8109/test
ProxyPassReverse /test  ajp://localhost:8209/test
ProxyPassReverse /test  ajp://localhost:8309/test

Thanks in advance.
-- 
View this message in context: 
http://old.nabble.com/Apache-2.2.3---mod_proxy_ajp---Tomcat-6.0.13-Loadbalancing-tp27714229p27714229.html
Sent from the Tomcat - User mailing list archive at Nabble.com.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Trouble with CLIENT-CERT authentication method

2010-02-24 Thread Mark Thomas


On 24/02/2010 15:03, Christopher Schultz wrote:

So, settingauth-method  to CLIENT-CERT triggers an SSL renegotiation.
What if theConnector  is set to clientAuth=want or
clientAuth=true? Will the initial SSL negotiation carry the client
certificate and therefore avoid CVE-2009-355?


Yes. But test carefully as there is a wide variety in client behaviour. 
I've heard reports of some mobile clients renegotiating every few 
requests. A real case of YMMV.


Mark



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Is it possible to replace the HttpSession implementation in Tomcat?

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Tsirkin,

On 2/24/2010 2:21 AM, Tsirkin Evgeny wrote:
 On Tue, Feb 23, 2010 at 11:50 PM, Christopher Schultz 
 ch...@christopherschultz.net wrote:
 
 -BEGIN PGP SIGNED MESSAGE- What's flow-resuming is ?How a
 request can be resumed ?Doesn't this goes
 againt the idea
 of http is staitless ,that's vrey interesting?


 So,the flow-resuming you were talking about is just the mechanism of
 storing the
 request parameters and url and use them again after successful
 authentication,right?

It also stores POST message bodies up to a certain size.

 Yes,this probably would not work with custom session ,since tomcat probably
 stores the parameters and url in session.

Tomcat definitely does, under the session note, which is a
Tomcat-specific implementation detail.

 For this particular issue however i have implemented my own mechanism
 using custom cookies (server side cookies).

Server-side cookies? Sounds like a winner.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkuFRPIACgkQ9CaO5/Lv0PBRhgCgwCBL4uSvYBN2epjoLJormtWH
YOMAoL47gA31p86jAYmvklsoCb9mQfGe
=bL2J
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Session id is invalid occurs randomly

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Ron,

On 2/24/2010 1:50 AM, Ron McNulty wrote:
 Check what else they have open when they access your application.
 There could be another J2EE application that does not scope it's
 session cookies correctly. We have had ongoing problems with SAP
 portal servers scoping session cookies across our whole domain,
 rather than scoping to the server they are running on. When this
 happens, you get a session that does not belong to you. Ask them to
 browse their cookies and tell you the scope (there are many Firefox
 plugins that will make this easy).
 
 Personally I think it is a shortcoming of the J2EE Servlet
 specification - all session cookies are named JSESSIONID. This is not
 honoured by some IBM products, but Tomcat adheres faithfully to the
 spec.

Tomcat's implementation can handle multiple JSESSIONID cookies: if
multiple cookies are present, it will loop-over them to see if any are
valid. Tomcat will take the first valid JSESSIONID cookie and ignore the
others.

Unless there are session id collisions between webapps, this should not
be the problem (instead, what the OP would observe is users masquerading
as other users: oops).

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkuFRakACgkQ9CaO5/Lv0PCnhgCgsbtHGVnnmOmKH9TojubDuAv/
9wIAoL9Nf46c8xfyWSORm9enuzdb4sVm
=aG5M
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Issue in Porting application from tomcat 5.0 to 5.5

2010-02-24 Thread hanumesh.m


Hi, 
  I am migrating a java application which was developed using jdk1.4 and
tomcat 5.0 to Jdk1.5 and tomcat 5.5.

I am able to compile, but when I am deploying through Eclipse, if I am using
server location as default ie
Server location: 
  Use Workspace metadata (does not modify tomcat installation)

and 
Deploy path:
wtp webapps.. 

Application works fine

But if I choose server settings
Server location:
 User Tomcat Installation
Deploy Path:
 Tomcat/webapps

Then application is not working. 


org.apache.jasper.JasperException: Unable to compile class for JSP

Generated servlet error:
D:\Tomcat
5.5\work\Catalina\localhost\IMFSLatest\org\apache\jsp\jsp\UserLogin_jsp.java:6:
package com.mcdonalds.webapp.imfs.util does not exist
import com.mcdonalds.webapp.imfs.util.AuthencationUtil;
  ^


Generated servlet error:
D:\Tomcat
5.5\work\Catalina\localhost\IMFSLatest\org\apache\jsp\jsp\UserLogin_jsp.java:9:
package com.mcdonalds.webapp.imfs.util does not exist
import com.mcdonalds.webapp.imfs.util.AuthencationUtil;
  ^
An error occurred at line: 6 in the jsp file: /jsp/UserLogin.jsp
Generated servlet error:
D:\Tomcat
5.5\work\Catalina\localhost\IMFSLatest\org\apache\jsp\jsp\UserLogin_jsp.java:463:
package org.apache.struts.taglib.bean does not exist
org.apache.struts.taglib.bean.MessageTag _jspx_th_bean_message_0 =
(org.apache.struts.taglib.bean.MessageTag)
_jspx_tagPool_bean_message_key_nobody.get(org.apache.struts.taglib.bean.MessageTag.class);


^

If anybody has come across the same problem and able to solve, plz help..

Thanks in advance,
Hanumesh


-- 
View this message in context: 
http://old.nabble.com/Issue-in-Porting-application-from-tomcat-5.0-to-5.5-tp27714230p27714230.html
Sent from the Tomcat - User mailing list archive at Nabble.com.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Bayeux Support

 From: kevind [mailto:ked...@cisco.com]
 Subject: Bayeux Support

 Does Tomcat have a Bayeux Implementation.

Mark T already answered your question four hours ago.

 - Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Question about SSL

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Chuck,

On 2/23/2010 5:18 PM, Caldarale, Charles R wrote:
 From: Christopher Schultz [mailto:ch...@christopherschultz.net]
 Subject: Re: Question about SSL

 1. transport-guarantee doesn't apply (I think) to the login page that
 Tomcat serves, even if you set it.

 If the requested resource is covered by the security constraint that
 includes the transport-guarantee of CONFIDENTIAL, the login page will
 be protected. The redirect to the SSL port happens before the login.

Good to know. I'd have to check the behavior of:

1. Request protected resource, non-CONFIDENTIAL
2. Tomcat responds with login page, login page is configured as CONFIDENTIAL

In this case, is the user redirected to the login page using SSL? Is the
(potentially newly-created) JSESSIONID cookie set to secure or not? I'm
not currently using Tomcat-based auth, and I'm too lazy to test right
now: do you know off the top of your head?

 That last one can be a real PITA: if you're looking for secure-auth
 /only/, then you'll have to design your pages to ensure that your
 cookies are always in non-secure-mode but that j_security_check does
 get sent over HTTPS.

 And, as we keep trying to drum into people, having an encrypted login
 but unencrypted pages serves little purpose, since the now trusted 
 jsessionid is visible to anyone who can see the traffic - such as
 your neighbor on your cable-based ISP.

Actually, I disagree with your conclusion, here. If you have a trivial
and/or not-particularly-sensitive webapp that requires a login, using
SSL for the credentialing process isn't a bad idea: people tend to use
the same password all over the place. If someone can sniff your
JSESSIONID, yes, they can steal your session and maybe steal all your
favorite kitten memorabilia. On the other hand, if they sniff your
username and password, they might be able to get into your online
banking system.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkuFRxIACgkQ9CaO5/Lv0PDVEACfSb93sNr7bGfSctNzW2quru4d
YbcAoJMr5aJuGJTGFZyZ0hlc/pa2xBxR
=vXVl
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Question about SSL

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Leo,

On 2/23/2010 6:18 PM, Leo Donahue - PLANDEVX wrote:
 My sysadmin suggested we disable IIS and let Tomcat handle the SSL
 certificates, since it seems easier to implement.

Removing unnecessary complexity is always a good idea.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkuFR1gACgkQ9CaO5/Lv0PCDZgCfdkVPCR/R/Pb476Stp4HWWjAz
C8cAnR6U886AGHv4aoTldwtrrQGJwgcI
=CNd6
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Session id is invalid occurs randomly

2010-02-24 Thread Tsirkin Evgeny

I guess changing the cookie name can help here:
org.apache.catalina.SESSION_COOKIE_NAME
See:
http://tomcat.apache.org/tomcat-6.0-doc/config/systemprops.html
Note that this is per jvm setting ,so all the apps on
the given server will get this cookie name .
Which in turn is probably NOT a problem as Christopher have already
pointed out.
Evgeny

On Wed, Feb 24, 2010 at 5:28 PM, Christopher Schultz 
ch...@christopherschultz.net wrote:

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1

 Ron,

 On 2/24/2010 1:50 AM, Ron McNulty wrote:
  Check what else they have open when they access your application.
  There could be another J2EE application that does not scope it's
  session cookies correctly. We have had ongoing problems with SAP
  portal servers scoping session cookies across our whole domain,
  rather than scoping to the server they are running on. When this
  happens, you get a session that does not belong to you. Ask them to
  browse their cookies and tell you the scope (there are many Firefox
  plugins that will make this easy).
 
  Personally I think it is a shortcoming of the J2EE Servlet
  specification - all session cookies are named JSESSIONID. This is not
  honoured by some IBM products, but Tomcat adheres faithfully to the
  spec.

 Tomcat's implementation can handle multiple JSESSIONID cookies: if
 multiple cookies are present, it will loop-over them to see if any are
 valid. Tomcat will take the first valid JSESSIONID cookie and ignore the
 others.

 Unless there are session id collisions between webapps, this should not
 be the problem (instead, what the OP would observe is users masquerading
 as other users: oops).

 - -chris
 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.4.10 (MingW32)
 Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

 iEYEARECAAYFAkuFRakACgkQ9CaO5/Lv0PCnhgCgsbtHGVnnmOmKH9TojubDuAv/
 9wIAoL9Nf46c8xfyWSORm9enuzdb4sVm
 =aG5M
 -END PGP SIGNATURE-

 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Issue in Porting application from tomcat 5.0 to 5.5

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hanumesh,

On 2/24/2010 10:28 AM, hanumesh.m wrote:
   I am migrating a java application which was developed using jdk1.4 and
 tomcat 5.0 to Jdk1.5 and tomcat 5.5.

Why not go all the way to 6.0.x? The migration procedure is practically
the same, and 6.0.x is reliable.

 I am able to compile, but when I am deploying through Eclipse, if I am using
 server location as default ie
 Server location: 
   Use Workspace metadata (does not modify tomcat installation)
 
 and 
 Deploy path:
 wtp webapps.. 

I have no idea what all that means.

 Application works fine

Great!

 But if I choose server settings
 Server location:
  User Tomcat Installation
 Deploy Path:
  Tomcat/webapps
 
 Then application is not working. 

:(

 package com.mcdonalds.webapp.imfs.util does not exist
 package com.mcdonalds.webapp.imfs.util does not exist
 package org.apache.struts.taglib.bean does not exist

It sounds like your libraries aren't being deployed properly. Can you
tell is what is in your webapp's WEB-INF/lib directory? I would expect
struts-[something].jar and maybe imfs-util.jar plus some others.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkuFSD8ACgkQ9CaO5/Lv0PAHwwCdH3oDEx2mDYm5W5ygZy06vGeY
MtQAoME7acoQL/GsIndGQtH1LlnK7c3R
=Eehd
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Question about SSL

 From: Christopher Schultz [mailto:ch...@christopherschultz.net]
 Subject: Re: Question about SSL

 1. Request protected resource, non-CONFIDENTIAL
 2. Tomcat responds with login page, login page is configured as
 CONFIDENTIAL

I can't remember if that works; it would only be useful if the resumed request 
stayed with HTTPS.  I've never found a case where encrypting the login without 
encrypting the protected resource makes any sense.

 In this case, is the user redirected to the login page using SSL?

My recollection is that the login page is SSL, and the cookie is secure, but 
I'd have to double-check.  We've managed to convince people that a secure login 
for unsecure resources is pretty much pointless.

 - Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.

Re: sending request to tomcat failed.....

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Pid,

On 2/18/2010 9:18 AM, Pid wrote:
 My guess is that his server.xml contains a load of spurious config,
 which may or may not be messing up his mod_jk config.

I'll try my hand at divination: he's using the ModJkListener to re-write
his configuration every time Tomcat starts.

 But then I'd also bet that his problem manifests as an NPE in one of the
 JSPs, because either the load testing script doesn't handle cookies
 properly, his URLs aren't encoded properly or his JSPs don't properly
 handle borked data conditions.

More likely that worker.connect_timeout != connector.connectionTimeout
and/or worker.connection_pool_size or httpd.maxActive  connector.maxActive.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkuFSdQACgkQ9CaO5/Lv0PDhIwCfTRUUAGgI9i1JSXTHkFlAvHDF
0XgAn2cDupgcO5AP3lAebYccy47dtMSn
=OGfL
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: sending request to tomcat failed.....

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

All,

I suppose I can't claim divination, here, since this was posted before I
made my prediction, but I swear I didn't read it.

On 2/24/2010 5:30 AM, Munirathinavel wrote:
   worker.worker1.connection_pool_timeout=600

[snip]

   Connector connectionTimeout=6

Boom!

worker.connection_pool_timeout is in sec, while
Connector.connectionTimeout is in ms. You want
connectionTimeout=60, just like the example in the documentation:
http://tomcat.apache.org/connectors-doc/generic_howto/timeouts.html

debug=0
maxThreads=150
minSpareThreads=25
maxSpareThreads=75
minProcessors=5
maxProcessors=100
acceptCount=100
disableUploadTimeout=true

All that crap is useless. Read the documentation:
http://tomcat.apache.org/tomcat-6.0-doc/config/ajp.html

   Listener className = 
 org.apache.jk.config.ApacheConfig
 workersConfig=conf/workers.properties
 modJk=D:/Apache2.2/modules/mod_jk.so jkLog=logs/mod_jk.log
 jkDebug=info noRoot=false/

Double boom!

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkuFS+0ACgkQ9CaO5/Lv0PC3mgCggdmm9miw0CVhwiaMCYAaINEv
E5AAoKxnSKmDcsFmrrwEmK7gHz8ZXPaM
=qqKD
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: NioConnector limits and comet requests

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

James,

On 2/24/2010 12:09 AM, James Roper wrote:
 The acceptCount works just like it does on the other processors, it gets
 passed to the ServerSocket as the backlog parameter.  This limit will be
 reached if the acceptor thread(s) aren't able to accept new requests
 quickly enough.  This is where behaviour differs from the default HTTP
 connector, all the acceptor threads do is add the channel to a poller
 which uses the NIO selectors to wait on activity, and then return
 quickly.  As far as I can see, the number of active selectors can be
 unlimited, is that right?  Would there be any advantages in limiting
 this?  What would happen if such a limit was reached?  On the default
 HTTP connector though, when new requests arrive, the handler will block
 until it can get a free worker thread, so the acceptCount limit could
 easily be reached.  In order to reach the acceptCount limit in the NIO
 connector, the server would have to be under a massive amount of load,
 such that the accept thread never gets scheduled to accept new
 connections.  This would be a difficult limit to reach, so the
 acceptCount is possibly not a very useful parameter for the NIO connector.

I'm an expert in neither the NIO Connector nor Comet, but your logic
seems reasonable: if the NIO selector thread simply queues incoming
requests. If that queue is unbounded, the server may never catch up and
suffer an OOME. I don't see any options to limit the queue size.

 There is another pool for comet requests, this is the connections map in
 the NIO connector.  This is unlimited, and it's used to store all comet
 requests that are not currently being processed by a worker thread. 
 Would there be any advantages to limiting this?  What would happen if
 such a limit was reached?

Again, I agree with your reasoning: unbounded queues like these could
cause major problems.

 The poller threads just select on all the active channels, and hand work
 off to the worker threads.  The number of threads allowed in this pool
 enforce no limits on concurrent requests.

Are they handed directly to worker threads, or are they queued somewhere
and the worker thread waits on the queue? If the workers are used
directly, and there is no queue, then there is no problem: the poller
thread will block waiting for a worker thread.

 I know that part of the
 advantage of NIO is that it handles DoS situations that are caused by
 making a small number of requests that read/write very slowly much
 better than the thread per request model, so such limits may be
 unlimited by default, but some applications may be able to benefit from
 setting a limit in Tomcat.

If your conclusions are correct, I agree that limits should be settable
for these queues.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkuFTy4ACgkQ9CaO5/Lv0PA69gCdG320VVZ0dLjTCWx7bMJTKMSE
+ScAn2gW6djAnNljNKzLEKDh/N7Q3/ip
=0XyC
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: sending request to tomcat failed.....


Christopher Schultz wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

All,

I suppose I can't claim divination, here, since this was posted before I
made my prediction, but I swear I didn't read it.

On 2/24/2010 5:30 AM, Munirathinavel wrote:

worker.worker1.connection_pool_timeout=600


[snip]


Connector connectionTimeout=6


Boom!

worker.connection_pool_timeout is in sec, while
Connector.connectionTimeout is in ms. You want
connectionTimeout=60, just like the example in the documentation:
http://tomcat.apache.org/connectors-doc/generic_howto/timeouts.html


Or, as the OP has already been told several times,
1) he should read the doc and clean up his configuration to match the 
version he is using

2) he should not use parameters he does not understand
3) he should use only the minimal set of configuration settings, for the 
workers and connections that are really necessary
4) he should read the answers he receives, instead of repeating the same 
question over and over




-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Tomcat dies suddenly


Chuck,

The first core that I saw was in $CATALINA_HOME/bin as expected.  The next 
crash produced one at root.  I thought this might have been because there is 
a cron process that runs a shell script in the /usr/local/tomcat_wars 
directory that restarts Tomcat (using shutdown.sh and startup.sh in the 
$CATALINA_HOME/bin directory) at 1:00AM so I just never paid it much 
attention.


Red herrings, green herrings, blue herrings... who knows anymore?

Thanks,

Carl



- Original Message - 
From: Caldarale, Charles R chuck.caldar...@unisys.com

To: Tomcat Users List users@tomcat.apache.org
Sent: Wednesday, February 24, 2010 10:00 AM
Subject: RE: Tomcat dies suddenly



From: Carl [mailto:c...@etrak-plus.com]
Subject: RE: Tomcat dies suddenly


(I switched this comment to Carl's original thread, since that's where it 
applies.)



the core files on my systems were in several directories


I wonder if the above is a clue to what's going on.  I've always seen core 
files written to the current directory of the dying process, never 
scattered around arbitrarily.  Tomcat's current directory should be 
$CATALINA_HOME/bin; if one of the webapps is changing the current 
directory, could that be contributing to the failure by confusing other 
code or the JVM?  (Or is this just another of the many red herrings?)


- Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you 
received this in error, please contact the sender and delete the e-mail 
and its attachments from all computers.






-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: [OT] Batch-processing of emailed log4j log messages

2010-02-24 Thread Mark H. Wood

An alternative approach:  you could pump the messages through a
mailing-list digest builder.  You may get 100 messages in five
minutes, but you only get interrupted once.

Sorry, I've never run a digested list so I don't have a name handy.

-- 
Mark H. Wood, Lead System Programmer   mw...@iupui.edu
Friends don't let friends publish revisable-form documents.


pgpKRZKNFSpY2.pgp
Description: PGP signature

Re: [OT] Tomcat dies suddenly


Chris,

As I said in an email a minute ago, I use a cron process to stop Tomcat, 
copy in new war's and restart Tomcat at 1:00AM.  The script is pretty 
simple:


JAVA_HOME=/usr/local/java; export JAVA_HOME

cd /usr/local/tomcat/bin
./shutdown.sh
sleep 60

rm -rf /usr/local/tomcat/webapps/livonia
rm -rf /usr/local/tomcat/webapps/default
rm -rf /usr/local/tomcat/webapps/paragon

cp /usr/local/tomcat_wars/etrak-plus.war 
/usr/local/tomcat/webapps/livonia.war


cp /usr/local/tomcat_wars/etrak-plus.war 
/usr/local/tomcat/webapps/default.war


cp /usr/local/tomcat_wars/etrak-plus.war 
/usr/local/tomcat/webapps/paragon.war


cp /usr/local/tomcat_wars/etrak-plus.war /usr/local/tomcat/webapps/test.war

sleep 30

strace -o /usr/local/tomcat/logs/trace_log.txt 
/usr/local/tomcat/bin/startup.sh


exit

I am reworking the strace part to rotate the logs.

Thanks,

Carl


- Original Message - 
From: Christopher Schultz ch...@christopherschultz.net

To: Tomcat Users List users@tomcat.apache.org
Sent: Wednesday, February 24, 2010 10:15 AM
Subject: Re: [OT] Tomcat dies suddenly



-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Chuck,

On 2/24/2010 10:00 AM, Caldarale, Charles R wrote:

From: Carl [mailto:c...@etrak-plus.com]
Subject: RE: Tomcat dies suddenly

the core files on my systems were in several directories


I wonder if the above is a clue to what's going on.  I've always seen
core files written to the current directory of the dying process,
never scattered around arbitrarily.  Tomcat's current directory
should be $CATALINA_HOME/bin;


Mine never is, but I run using catalina.sh, which doesn't execute a 'cd'
anywhere. Maybe this happens when running as a Windows service or
something, but I don't see this behavior when running on *NIX.


if one of the webapps is changing the
current directory, could that be contributing to the failure by
confusing other code or the JVM?  (Or is this just another of the
many red herrings?)


I suppose that's possible. Carl, are the core files all from the same
run? If so, something is very very wrong. Otherwise, maybe the reason
why you couldn't find any traces of your crash was that your CWD was
changing from what you expected it to be to some random subdirectory.
shrug

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkuFQnoACgkQ9CaO5/Lv0PBZYACgjd19BIr41ucOAenBQVE7//S6
ltoAnRyndQdsC8h70kshy1p7bkVgi6nY
=+ndQ
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org





-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: [OT] Tomcat dies suddenly


On 24/02/2010 15:15, Christopher Schultz wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Chuck,

On 2/24/2010 10:00 AM, Caldarale, Charles R wrote:

From: Carl [mailto:c...@etrak-plus.com]
Subject: RE: Tomcat dies suddenly

the core files on my systems were in several directories


I wonder if the above is a clue to what's going on.  I've always seen
core files written to the current directory of the dying process,
never scattered around arbitrarily.  Tomcat's current directory
should be $CATALINA_HOME/bin;


I usually see dumps in $CATALINA_HOME/logs, which is where I am 
habitually if I'm starting up from a script.



p



Mine never is, but I run using catalina.sh, which doesn't execute a 'cd'
anywhere. Maybe this happens when running as a Windows service or
something, but I don't see this behavior when running on *NIX.



if one of the webapps is changing the
current directory, could that be contributing to the failure by
confusing other code or the JVM?  (Or is this just another of the
many red herrings?)


I suppose that's possible. Carl, are the core files all from the same
run? If so, something is very very wrong. Otherwise, maybe the reason
why you couldn't find any traces of your crash was that your CWD was
changing from what you expected it to be to some random subdirectory.
shrug

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkuFQnoACgkQ9CaO5/Lv0PBZYACgjd19BIr41ucOAenBQVE7//S6
ltoAnRyndQdsC8h70kshy1p7bkVgi6nY
=+ndQ
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org




-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: [OT] Batch-processing of emailed log4j log messages


On 24/02/2010 17:17, Mark H. Wood wrote:

An alternative approach:  you could pump the messages through a
mailing-list digest builder.  You may get 100 messages in five
minutes, but you only get interrupted once.

Sorry, I've never run a digested list so I don't have a name handy.


That's smart, like it.


p




-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: [OT] Batch-processing of emailed log4j log messages


Pid wrote:

On 24/02/2010 17:17, Mark H. Wood wrote:

An alternative approach:  you could pump the messages through a
mailing-list digest builder.  You may get 100 messages in five
minutes, but you only get interrupted once.

Sorry, I've never run a digested list so I don't have a name handy.


That's smart, like it.

Another similar but simpler way would be to have the application write 
messages to a simple logfile, and then have a separate application (like 
a shell script under cron), which runs at the frequency you want, pick 
up the content of that file, mail it to you all at once, optionally 
archive the logfile (cat  somewhere.else), and reset the logfile 
(truncate it to 0 size).



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: [OT] Batch-processing of emailed log4j log messages


André Warnier wrote:

Pid wrote:

On 24/02/2010 17:17, Mark H. Wood wrote:

An alternative approach:  you could pump the messages through a
mailing-list digest builder.  You may get 100 messages in five
minutes, but you only get interrupted once.

Sorry, I've never run a digested list so I don't have a name handy.


That's smart, like it.

Another similar but simpler way would be to have the application write 
messages to a simple logfile, and then have a separate application (like 
a shell script under cron), which runs at the frequency you want, pick 
up the content of that file, mail it to you all at once, optionally 
archive the logfile (cat  somewhere.else), and reset the logfile 
(truncate it to 0 size).




A bit of awk (or perl) magic might even summarise this with neat
.. above message repeated nn times ..
stuff.
Come to think of it, the whole thing in perl is probably a 10-liner, 
using a hundreth of the memory you'd need with Java.


Boom, troll, flame,...



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Question about SSL

The docs say you can change the location of the .keystore file.  Where should 
it go?

The docs show server.xml has it here:  keystoreFile=${user.home}/.keystore

That would be the root directory where tomcat is installed?  
 

-Original Message-
From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] 
Sent: Wednesday, February 24, 2010 8:44 AM
To: Tomcat Users List
Subject: RE: Question about SSL

 From: Christopher Schultz [mailto:ch...@christopherschultz.net]
 Subject: Re: Question about SSL
 
 1. Request protected resource, non-CONFIDENTIAL 2. Tomcat responds 
 with login page, login page is configured as CONFIDENTIAL

I can't remember if that works; it would only be useful if the resumed request 
stayed with HTTPS.  I've never found a case where encrypting the login without 
encrypting the protected resource makes any sense.

 In this case, is the user redirected to the login page using SSL?

My recollection is that the login page is SSL, and the cookie is secure, but 
I'd have to double-check.  We've managed to convince people that a secure login 
for unsecure resources is pretty much pointless.
 
 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: [OT] Batch-processing of emailed log4j log messages

2010-02-24 Thread Peter Crowther

On 24 February 2010 18:38, André Warnier a...@ice-sa.com wrote:
 Come to think of it, the whole thing in perl is probably a 10-liner, using a
 hundreth of the memory you'd need with Java.

Yep, absolutely - the kind of processing that perl was designed for,
and is very good at.

I'd make other comments about perl's ancestry and its use as a
general-purpose programming language, but then I'd be responding to
the troll with a flame ;-).

- Peter

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Question about SSL

 From: Leo Donahue - PLANDEVX [mailto:leodona...@mail.maricopa.gov]
 Subject: RE: Question about SSL

 The docs say you can change the location of the .keystore file.  Where
 should it go?

Wherever the administrative policies of the site say it should go.

 The docs show server.xml has it here:
 keystoreFile=${user.home}/.keystore
 That would be the root directory where tomcat is installed?  

No, that's the home directory of whatever userid Tomcat is running under.

 - Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Question about SSL

Generating the .keystore is not tied to the user issuing the java command is 
it?  Can I move the .keystore file to home directory of the account tomcat is 
running under, or do I have to log in as that tomcat account and issue the java 
command?

-Original Message-
From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] 
Sent: Wednesday, February 24, 2010 12:12 PM
To: Tomcat Users List
Subject: RE: Question about SSL

 From: Leo Donahue - PLANDEVX [mailto:leodona...@mail.maricopa.gov]
 Subject: RE: Question about SSL

 The docs say you can change the location of the .keystore file.  Where 
 should it go?

Wherever the administrative policies of the site say it should go.

 The docs show server.xml has it here:
 keystoreFile=${user.home}/.keystore
 That would be the root directory where tomcat is installed?  

No, that's the home directory of whatever userid Tomcat is running under.

 - Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Question about SSL

 From: Leo Donahue - PLANDEVX [mailto:leodona...@mail.maricopa.gov]
 Subject: RE: Question about SSL

 Generating the .keystore is not tied to the user issuing the java
 command is it?

No.

 Can I move the .keystore file to home directory of the
 account tomcat is running under

You can place the .keystore file anywhere you want, as long as you configure 
Tomcat to know where it is.

 - Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Question about SSL

https://localhost:8443 

Using IE6, I get a message saying you are about to view a page over a secure 
connection, but the page never loads.  No errors in the logs.  The ROOT webapp 
is still there, no lock icon in the browser.

IE6 status bar just says: Opening page https://localhost:8443/...; 

And eventually, IE6 responds with The page cannot be displayed.



-Original Message-
From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] 
Sent: Wednesday, February 24, 2010 12:46 PM
To: Tomcat Users List
Subject: RE: Question about SSL

 From: Leo Donahue - PLANDEVX [mailto:leodona...@mail.maricopa.gov]
 Subject: RE: Question about SSL
 
 Generating the .keystore is not tied to the user issuing the java 
 command is it?

No.

 Can I move the .keystore file to home directory of the account tomcat 
 is running under

You can place the .keystore file anywhere you want, as long as you configure 
Tomcat to know where it is.

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Question about SSL

Leo Donahue - PLANDEVX wrote:
https://localhost:8443

Using IE6, I get a message saying you are about to view a page over a secure
connection, but the page never loads. No errors in the logs. The ROOT webapp
is still there, no lock icon in the browser.

IE6 status bar just says: Opening page https://localhost:8443/...;

And eventually, IE6 responds with The page cannot be displayed.

Maybe you should read this :
http://www.bbc.co.uk/blogs/thereporters/maggieshiels/2010/02/last_rites_for_microsofts_most.html
(and I totally agree with the author, that its demise will be feted by
developers worldwide)

More seriously : IE6 has (had ?) this feature called friendly error
messages which basically hides what the server is really saying, and
displays an internal and useless error page instead, always the same.

You can turn it off, somewhere in the preferences.

Better : there exists an IE add-on, called Fiddler2, which does about
the same as similar add-ons for Firefox like HttpFox e.g.
It allows you to /really/ see what the browser is sending, and what it
receives from the server.

Better yet : use Firefox with the HttpFox add-on.

And the ultimate, but not for the faint-hearted : you can use a program
like Wireshark to grab and memorise and see absolutely every TCP/IP
packet circulating on the wire, even the ones you never wanted to know
about.

All of that does not solve your problem, but at least it should give you
an idea of what is really going on.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Question about SSL

2010-02-24 Thread Propes, Barry L

I feel his pain. We're still on IE6. : (

But yes, like Andre says, go to Tools | Options or Internet Options | Advanced 
and uncheck the Show friendly HTTP error messages box.

-Original Message-
From: André Warnier [mailto:a...@ice-sa.com] 
Sent: Wednesday, February 24, 2010 3:22 PM
To: Tomcat Users List
Subject: Re: Question about SSL

Leo Donahue - PLANDEVX wrote:
 https://localhost:8443

 Using IE6, I get a message saying you are about to view a page over a secure 
 connection, but the page never loads.  No errors in the logs.  The ROOT 
 webapp is still there, no lock icon in the browser.

 IE6 status bar just says: Opening page https://localhost:8443/...; 

 And eventually, IE6 responds with The page cannot be displayed.

Maybe you should read this :
http://www.bbc.co.uk/blogs/thereporters/maggieshiels/2010/02/last_rites_for_microsofts_most.html
(and I totally agree with the author, that its demise will be feted by 
developers worldwide)

More seriously : IE6 has (had ?) this feature called friendly error messages 
which basically hides what the server is really saying, and displays an 
internal and useless error page instead, always the same.
You can turn it off, somewhere in the preferences.

Better : there exists an IE add-on, called Fiddler2, which does about the same 
as similar add-ons for Firefox like HttpFox e.g.
It allows you to /really/ see what the browser is sending, and what it receives 
from the server.

Better yet : use Firefox with the HttpFox add-on.

And the ultimate, but not for the faint-hearted : you can use a program like 
Wireshark to grab and memorise and see absolutely every TCP/IP packet 
circulating on the wire, even the ones you never wanted to know about.

All of that does not solve your problem, but at least it should give you an 
idea of what is really going on.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Question about SSL

This is the command I issued:
keytool -genkey -alias tomcat -keyalg RSA -keystore C:\Documents and 
Settings\tomcat_user\.keystore

I noticed that java 1.6.0.14 doesn't have this -genkey argument, it has 
-genkeypair.  Is that a problem?

Server.xml:
Connector port=8443 SSLEnabled=true
   maxThreads=150 scheme=https secure=true
   keystoreFile=${user.home}/.keystore 
keystorePass=mycustompassword
   clientAuth=false sslProtocol=TLS / 

Is the ${user.home} syntax literal or does it use the path shown in the java 
command?

We have wireshark, I'll get my sysadmin to run it.

I did uncheck the show friendly HTTP errors.  I'll let you know when the page 
dies, it takes a long time to get anything back.

I appreciate all the feedback.


-Original Message-
From: André Warnier [mailto:a...@ice-sa.com] 
Sent: Wednesday, February 24, 2010 2:22 PM
To: Tomcat Users List
Subject: Re: Question about SSL

Leo Donahue - PLANDEVX wrote:
 https://localhost:8443
 
 Using IE6, I get a message saying you are about to view a page over a secure 
 connection, but the page never loads.  No errors in the logs.  The ROOT 
 webapp is still there, no lock icon in the browser.
 
 IE6 status bar just says: Opening page https://localhost:8443/...; 
 
 And eventually, IE6 responds with The page cannot be displayed.
 

Maybe you should read this :
http://www.bbc.co.uk/blogs/thereporters/maggieshiels/2010/02/last_rites_for_microsofts_most.html
(and I totally agree with the author, that its demise will be feted by 
developers worldwide)

More seriously : IE6 has (had ?) this feature called friendly error messages 
which basically hides what the server is really saying, and displays an 
internal and useless error page instead, always the same.
You can turn it off, somewhere in the preferences.

Better : there exists an IE add-on, called Fiddler2, which does about the same 
as similar add-ons for Firefox like HttpFox e.g.
It allows you to /really/ see what the browser is sending, and what it receives 
from the server.

Better yet : use Firefox with the HttpFox add-on.

And the ultimate, but not for the faint-hearted : you can use a program like 
Wireshark to grab and memorise and see absolutely every TCP/IP packet 
circulating on the wire, even the ones you never wanted to know about.

All of that does not solve your problem, but at least it should give you an 
idea of what is really going on.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Question about SSL

 From: Propes, Barry L [mailto:barry.l.pro...@citi.com]
 Subject: RE: Question about SSL

 I feel his pain. We're still on IE6. : (

Also note that IE6 has serious problems doing SSL over anything other than port 
443.  (Another example of Microsoft thinking it knows better than you do.)

 - Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Question about SSL

 From: Leo Donahue - PLANDEVX [mailto:leodona...@mail.maricopa.gov]
 Subject: RE: Question about SSL

 keytool -genkey -alias tomcat -keyalg RSA -keystore C:\Documents and
 Settings\tomcat_user\.keystore

Is Tomcat actually running under the tomcat_user account?

I'd recommend that you place the .keystore file in a fixed location and 
configure that in Tomcat so that you're not subject to the whims of Windows 
deciding what your home directory happens to be at any given instant.

 Is the ${user.home} syntax literal or does it use the path shown in the
 java command?

The XML parser in Tomcat will substitute the value of the Java system property 
user.home for the reference.  What user.home gets set to depends on how you 
start Tomcat and the version of Windows you're running.

 - Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Tomcat dies suddenly

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Carl,

On 2/24/2010 12:10 PM, Carl wrote:
 The first core that I saw was in $CATALINA_HOME/bin as expected.  The
 next crash produced one at root.  I thought this might have been because
 there is a cron process that runs a shell script in the
 /usr/local/tomcat_wars directory that restarts Tomcat (using shutdown.sh
 and startup.sh in the $CATALINA_HOME/bin directory) at 1:00AM so I just
 never paid it much attention.

That is likely to be the problem. If 'root' runs your cron jobs, you
might want to change your cron job to specifically use the Tomcat user:
it's a lot safer than having root run Tomcat for you :)

Some cron software allows you to set the effective uid for a job. If
yours doesn't, you can always do 'su -c 'strace ...' - tomcat_user' in
your cron job, or directly in your script.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkuFo/4ACgkQ9CaO5/Lv0PCroQCfXytB+dQ5HMofV6O5oTop4eu2
TvEAoLfzXSSztuaC0cxNHqrcNoJUliCm
=pGtT
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: [OT] Batch-processing of emailed log4j log messages

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

André,

On 2/24/2010 1:38 PM, André Warnier wrote:
 André Warnier wrote:
 Pid wrote:
 On 24/02/2010 17:17, Mark H. Wood wrote:
 An alternative approach:  you could pump the messages through a
 mailing-list digest builder.  You may get 100 messages in five
 minutes, but you only get interrupted once.

 Sorry, I've never run a digested list so I don't have a name handy.

 That's smart, like it.

 Another similar but simpler way would be to have the application write
 messages to a simple logfile, and then have a separate application
 (like a shell script under cron), which runs at the frequency you
 want, pick up the content of that file, mail it to you all at once,
 optionally archive the logfile (cat  somewhere.else), and reset the
 logfile (truncate it to 0 size).


 A bit of awk (or perl) magic might even summarise this with neat
 .. above message repeated nn times ..
 stuff.
 Come to think of it, the whole thing in perl is probably a 10-liner,
 using a hundreth of the memory you'd need with Java.

Care to throw down the gauntlet with some code? I'd love to see
something that can coalesce log messages in such a way.

Remember that some log messages have more than one line of output, like
stack traces and all that.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkuFpIEACgkQ9CaO5/Lv0PAK5ACguqe97/s9cT3q+WZq3rhCFPrt
PqgAoLkvo68RbdnYPxe0aLtf0+aOph+h
=ivAP
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Question about SSL

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Chuck,

On 2/24/2010 5:00 PM, Caldarale, Charles R wrote:
 From: Propes, Barry L [mailto:barry.l.pro...@citi.com]
 Subject: RE: Question about SSL

 I feel his pain. We're still on IE6. : (

 Also note that IE6 has serious problems doing SSL over anything other
 than port 443.  (Another example of Microsoft thinking it knows
 better than you do.)

Could you provide a reference for this? I'd like to read more about MSIE
and SSL problems.

Thanks,
- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkuFpQIACgkQ9CaO5/Lv0PCvaQCeNiUwfP4ciOHaG021I83/7oXu
R0UAn2RcexBcoHcxqtew2h0g2G8oc5wE
=oMm4
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Question about SSL

 From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] 
 Subject: RE: Question about SSL

 keytool -genkey -alias tomcat -keyalg RSA -keystore C:\Documents and 
 Settings\tomcat_user\.keystore

 Is Tomcat actually running under the tomcat_user account?

Yes.

 I'd recommend that you place the .keystore file in a fixed location and 
 configure that in Tomcat so that you're not subject to the whims of Windows
 deciding what your home directory happens to be at any given instant.

Alright, I'll try it.

 Is the ${user.home} syntax literal or does it use the path shown in 
 the java command?

 The XML parser in Tomcat will substitute the value of the Java system 
 property user.home for the reference.  What user.home gets set to depends on 
 how 
 you start Tomcat and the version of Windows you're running.

We're on Windows 2003 R2 SP2
Tomcat is installed as a service from the zip file, running under local windows 
account: tomcat_user
In windows, the service account shows up as:  .\tomcat_user
I have that service set to start manually.

I've also stopped the IIS Admin service, WWW Web, and the HTTP SSL that are all 
part of IIS.  No changes, the page just tries to load

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: [OT] Batch-processing of emailed log4j log messages


Christopher Schultz wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

André,


..


Care to throw down the gauntlet with some code? I'd love to see
something that can coalesce log messages in such a way.


Me and my big mouth.
This was meant to be a troll, triggering a flame.  It wasn't meant 
seriously.
But ok, I'll bite, because it's something I might need too some day. 
Give me a couple of days though, I'm pretty busy right now.




Remember that some log messages have more than one line of output, like
stack traces and all that.


But those are unlikely to have repeating lines.  And I can cheat, 
replacing the message above by

 .. above line repeated nn times ..

Send me a sample of your logfile, I'd like to see the look of your 
timestamps.



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Question about SSL

 From: Christopher Schultz [mailto:ch...@christopherschultz.net]
 Subject: Re: Question about SSL

 Could you provide a reference for this? I'd like to read more about
 MSIE and SSL problems.

http://www-01.ibm.com/support/docview.wss?uid=swg1PK37731
http://www.servlets.com/archive/servlet/ReadMsg?msgId=538662listName=jetty-discuss
http://forum.springsource.org/archive/index.php/t-23941.html

etc.

 - Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.

Re: [OT] Batch-processing of emailed log4j log messages


Peter Crowther wrote:

On 24 February 2010 18:38, André Warnier a...@ice-sa.com wrote:

Come to think of it, the whole thing in perl is probably a 10-liner, using a
hundreth of the memory you'd need with Java.


Yep, absolutely - the kind of processing that perl was designed for,
and is very good at.

I'd make other comments about perl's ancestry and its use as a
general-purpose programming language, but then I'd be responding to
the troll with a flame ;-).

Very unfair of you to defuse a sneaky gramme-sized provocation attempt 
with a pound of reasonableness.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Question about SSL

 From: Leo Donahue - PLANDEVX [mailto:leodona...@mail.maricopa.gov]
 Subject: RE: Question about SSL

 In windows, the service account shows up as:  .\tomcat_user
 I have that service set to start manually.

If you used the tomcat6w.exe program to set the service's logon account, that 
may have been ignored, at least on some versions of Windows.  I have to change 
it with the Services console snap-in.

Regardless, I wouldn't count on Windows getting the home directory right when 
running as a service.

 - Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: [OT] Tomcat dies suddenly

2010-02-24 Thread Konstantin Kolinko

2010/2/24 Carl c...@etrak-plus.com:
 rm -rf /usr/local/tomcat/webapps/livonia
 rm -rf /usr/local/tomcat/webapps/default
 rm -rf /usr/local/tomcat/webapps/paragon
1). test  webapp not mentioned
2). note that there are also webapp files in the work/ directory and
there might be a context file in a subdirectory of conf (e.g.
conf/Catalina/localhost/)   If you need a 100% clean run, you may want
to consider explicitly removing all the files from the webapp working
directory in work/.

 strace -o /usr/local/tomcat/logs/trace_log.txt
 /usr/local/tomcat/bin/startup.sh

Note that startup.sh  (aka catalina.sh start) will spawn a new process.
I have never used strace myself, but it unlikely will be able to follow that.

You should try catalina.sh run instead.


Best regards,
Konstantin Kolinko

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Question about SSL