Re: EL 2.2 in Tomcat 7 RC1/RC2 does not fully support method invocation, such as "#{helloWorldController.doSomething(helloWorldModel)}"
On 25/05/2010 20:35, John Wu wrote: > Same failure observed on Tomcat 7 RC1 and RC2. I can now reproduce this. The fix is next on my todo list. Note I echo Konstantin's comments about trying to get EL 2.2 working in Tomcat 6. If it works, great - but it will be by luck rather than design. If it doesn't, it isn't going to get fixed. Tomact 6 supports EL 2.1. EL 2.2 support requires Tomcat 7. Mark > > > Konstantin Kolinko wrote: >> >> 2010/5/25 John Wu : >>> >>> I tried to use JSF 2.0 + Facelets (no JSP at all) in Tomcat 6 with EL 2.2 >>> (extracted from Tomcat 7 RC2), and failed. >> >> You cannot cut some random part of Tomcat 7, >> drop it into Tomcat 6 and expect it to work. >> >> Regardless of what Tomcat 7 version you are using as a donor. You are >> like a surgeon in some horror story. >> >> Run Tomcat 7 as a whole and it should work. >> >> Best regards, >> Konstantin Kolinko >> >> - >> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org >> For additional commands, e-mail: users-h...@tomcat.apache.org >> >> >> > - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Tomcat 6.0 always uses default host in multi-host config
> From: Jeffrey Janner [mailto:jeffrey.jan...@polydyne.com] > Subject: RE: Tomcat 6.0 always uses default host in multi-host config > > OK, to answer my own question on this, useIPVHosts is > essentially a way to save some configuration writing > at the expense of doing a reverse-DNS lookup on every > access, correct? No. Setting useIPVHosts to true says to use the local IP address rather than the HTTP "host" header value for determining which to give the request to. > You can do it my way below, and have everything clearly > spelled out It's only clearly spelled out to you, since you implemented. Looks like a lot more work and overhead to me, and certainly no simpler. > or you can use this config trick and let TC manage it for you. It's clearly not a trick. > But in a config setting useIPVHost="true" will only route > it to the correct host if the IP resolves to the host name > or alias Which is exactly what the useIPVHosts setting is documented to do. > Aside from probably only needing to configure one port 80 > connector, and probably allocating fewer resources as a > result, is there any other advantage to the parameter? That seems to be a significant advantage to me. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Question on workers.properties file
> From: dB. [mailto:dbl...@dblock.org] > Subject: RE: Question on workers.properties file > > "IIS and/or Apache do things that Tomcat does not, or not well." > For my personal education, do you have any production-type examples? PHP and other external CGI mechanisms, for starters (at least for httpd; I can't - or won't - speak about IIS). - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
JK Status "URI Mappings" empty
mod_jk 1.2.28, apache 2.2.3 (-43.el5) When viewing status in the JK Status Manager, our list of URI Mappings displays all the mappings accurately, but the statistical/informational values are all empty. Server URI Match Type Source Reply Timeout Fail on Status Active DisabledStopped Use Server Errors webserver [*:81]/urimap/* Wildcharuriworkermap-1 - - - - 0 (or from text view:) Map: id=1 server="webserver [*:81]" uri="/urimap/*" type="Wildchar" source="uriworkermap" reply_timeout="-1" fail_on_status="" active="" disabled="" stopped="" use_server_errors="0" My only success in searching for this behavior was finding public examples of other peoples' JK Status with the same non-values. Thanks, Bob - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Tomcat 6.0 always uses default host in multi-host config
OK, to answer my own question on this, useIPVHosts is essentially a way to save some configuration writing at the expense of doing a reverse-DNS lookup on every access, correct? You can do it my way below, and have everything clearly spelled out, or you can use this config trick and let TC manage it for you. In my config, if it comes in on an IP, it always goes to the same host. But in a config setting useIPVHost="true" will only route it to the correct host if the IP resolves to the host name or alias, otherwise it goes to the default host. Aside from probably only needing to configure one port 80 connector, and probably allocating fewer resources as a result, is there any other advantage to the parameter? Please educate me. Jeff (not the OP) -Original Message- From: Jeffrey Janner [mailto:jeffrey.jan...@polydyne.com] Sent: Tuesday, May 25, 2010 9:30 AM To: Tomcat Users List Subject: RE: Tomcat 6.0 always uses default host in multi-host config Is there a turtorial on the useIPVhosts attribute and how it is "supposed" to work somewhere? The statement in the on-line documentation is woefully insufficient. If you want true default host processing based on incoming IP, you can always set up multiple services: . . *** NOTICE * This message is intended for the use of the individual or entity to which it is addressed and may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient or the employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by reply or by telephone (call us collect at 512-343-9100) and immediately delete this message and all its attachments. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: virtualbox processors
Please insert credits to begin. p On 25 May 2010, at 19:49, Yucca Nel wrote: > anyone care to enlighten me if the amount of processors assigned to > guest in virtualbox go according to virtual or not? > > IOW does assigning 2 processors mean that I am assigning 2 cores or > 2 virtual cores? In a quad core what ia optimal for a guest? > > Many many thanks and didn't mean to post this here but this list > seem very clued up - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Question on workers.properties file
Thank you, I really meant that using IIS for authentication only is a hack. Now Tomcat can do Integrated Auth as well as IIS, if not better (with a lot more granularity). "IIS and/or Apache do things that Tomcat does not, or not well." For my personal education, do you have any production-type examples? Thx dB. dB. @ dblock.org Moscow|Geneva|Seattle|New York -Original Message- From: André Warnier [mailto:a...@ice-sa.com] Sent: Tuesday, May 25, 2010 4:10 PM To: Tomcat Users List Subject: Re: Question on workers.properties file dB. wrote: > IMHO the IIS redirection is a total hack. It's a lot of additional load, a > whole other web server to deal with, configure and administer. Because you're > merely hiding Tomcat behind IIS you're not really getting rid of your tomcat > server, you're just masking the problem. > > I'll allow myself to theorize that Jakarta redirector was a stop gap solution > because people didn't want a Windows-only valve to do NTLM or because they > couldn't write one. > dB, I believe that you are missing the point. Tomcat does things that Apache and/or IIS do not, running Java webapps being the main one. IIS and/or Apache do things that Tomcat does not, or not well. There are legitimate cases for using an Apache or IIS front-end to Tomcat, most of which having nothing to do with authentication. And that is where one uses the Jk redirector. You are right that using an IIS front-end /only/ to do authentication is a bit of a hack, but that is the express purpose here. Basically, the OP is just trying to retrieve in Tomcat the user-id that should be there anyway at the IIS level, because in the OP's particular case it was the easiest path to follow, application-wise. That it turns out to be such a difficult birth is mainly because of the OP's lack of familiarity with the IIS/JKRedirector/Tomcat configuration, not because of any flaw in the redirector or in the OP's basic plan. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org No virus found in this incoming message. Checked by AVG - www.avg.com Version: 9.0.819 / Virus Database: 271.1.1/2894 - Release Date: 05/25/10 02:26:00 - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Question on workers.properties file
dB. wrote: IMHO the IIS redirection is a total hack. It's a lot of additional load, a whole other web server to deal with, configure and administer. Because you're merely hiding Tomcat behind IIS you're not really getting rid of your tomcat server, you're just masking the problem. I'll allow myself to theorize that Jakarta redirector was a stop gap solution because people didn't want a Windows-only valve to do NTLM or because they couldn't write one. dB, I believe that you are missing the point. Tomcat does things that Apache and/or IIS do not, running Java webapps being the main one. IIS and/or Apache do things that Tomcat does not, or not well. There are legitimate cases for using an Apache or IIS front-end to Tomcat, most of which having nothing to do with authentication. And that is where one uses the Jk redirector. You are right that using an IIS front-end /only/ to do authentication is a bit of a hack, but that is the express purpose here. Basically, the OP is just trying to retrieve in Tomcat the user-id that should be there anyway at the IIS level, because in the OP's particular case it was the easiest path to follow, application-wise. That it turns out to be such a difficult birth is mainly because of the OP's lack of familiarity with the IIS/JKRedirector/Tomcat configuration, not because of any flaw in the redirector or in the OP's basic plan. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: EL 2.2 in Tomcat 7 RC1/RC2 does not fully support method invocation, such as "#{helloWorldController.doSomething(helloWorldModel)}"
Same failure observed on Tomcat 7 RC1 and RC2. Konstantin Kolinko wrote: > > 2010/5/25 John Wu : >> >> I tried to use JSF 2.0 + Facelets (no JSP at all) in Tomcat 6 with EL 2.2 >> (extracted from Tomcat 7 RC2), and failed. > > You cannot cut some random part of Tomcat 7, > drop it into Tomcat 6 and expect it to work. > > Regardless of what Tomcat 7 version you are using as a donor. You are > like a surgeon in some horror story. > > Run Tomcat 7 as a whole and it should work. > > Best regards, > Konstantin Kolinko > > - > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > > > -- View this message in context: http://old.nabble.com/EL-2.2-in-Tomcat-7-RC1-RC2-does-not-fully-support-method-invocation%2C-such-as-%22-%7BhelloWorldController.doSomething%28helloWorldModel%29%7D%22-tp28671969p28672549.html Sent from the Tomcat - User mailing list archive at Nabble.com. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: EL 2.2 in Tomcat 7 RC1/RC2 does not fully support method invocation, such as "#{helloWorldController.doSomething(helloWorldModel)}"
2010/5/25 John Wu : > > I tried to use JSF 2.0 + Facelets (no JSP at all) in Tomcat 6 with EL 2.2 > (extracted from Tomcat 7 RC2), and failed. You cannot cut some random part of Tomcat 7, drop it into Tomcat 6 and expect it to work. Regardless of what Tomcat 7 version you are using as a donor. You are like a surgeon in some horror story. Run Tomcat 7 as a whole and it should work. Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: EL 2.2 in Tomcat 7 RC1/RC2 does not fully support method invocation, such as "#{helloWorldController.doSomething(helloWorldModel)}"
Issue stays on Tomcat 7 RC1 and RC2. I can't download RC3 at the moment,
will try it tomorrow.
John Wu
n828cl wrote:
>
>> From: John Wu [mailto:johnwu@gmail.com]
>> Subject: EL 2.2 in Tomcat 7 RC1/RC2 does not fully support method
>> invocation, such as
>> "#{helloWorldController.doSomething(helloWorldModel)}"
>>
>> I tried to use JSF 2.0 + Facelets (no JSP at all) in Tomcat 6
>> with EL 2.2 (extracted from Tomcat 7 RC2), and failed.
>
> And what happens if you try it with Tomcat 7 (currently at RC3)?
>
> - Chuck
>
>
> THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
> MATERIAL and is thus for use only by the intended recipient. If you
> received this in error, please contact the sender and delete the e-mail
> and its attachments from all computers.
>
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>
>
--
View this message in context:
http://old.nabble.com/EL-2.2-in-Tomcat-7-RC1-RC2-does-not-fully-support-method-invocation%2C-such-as-%22-%7BhelloWorldController.doSomething%28helloWorldModel%29%7D%22-tp28671969p28672254.html
Sent from the Tomcat - User mailing list archive at Nabble.com.
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
virtualbox processors
anyone care to enlighten me if the amount of processors assigned to guest in virtualbox go according to virtual or not? IOW does assigning 2 processors mean that I am assigning 2 cores or 2 virtual cores? In a quad core what ia optimal for a guest? Many many thanks and didn't mean to post this here but this list seem very clued up
RE: EL 2.2 in Tomcat 7 RC1/RC2 does not fully support method invocation, such as "#{helloWorldController.doSomething(helloWorldModel)}"
> From: John Wu [mailto:johnwu@gmail.com]
> Subject: EL 2.2 in Tomcat 7 RC1/RC2 does not fully support method
> invocation, such as
> "#{helloWorldController.doSomething(helloWorldModel)}"
>
> I tried to use JSF 2.0 + Facelets (no JSP at all) in Tomcat 6
> with EL 2.2 (extracted from Tomcat 7 RC2), and failed.
And what happens if you try it with Tomcat 7 (currently at RC3)?
- Chuck
THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you received
this in error, please contact the sender and delete the e-mail and its
attachments from all computers.
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
EL 2.2 in Tomcat 7 RC1/RC2 does not fully support method invocation, such as "#{helloWorldController.doSomething(helloWorldModel)}"
I tried to use JSF 2.0 + Facelets (no JSP at all) in Tomcat 6 with EL 2.2 (extracted from Tomcat 7 RC2), and failed. see http://old.nabble.com/MyFaces-2.0.0-doest-not-fully-support-EL-2.2-method-invocation-tt28669825.html and http://old.nabble.com/using-new-el-api-2.2-with-myfaces2.0-and-tomcat6-ts28649111.html. I can successfully run the app in an embeded Jetty 7, for both JSF RI 2.0.2 and MyFaces 2.0.0. I tried to create a test case for Tomcat+EL-2.2. Because of the complexity, I gave up. But the attached project at http://old.nabble.com/file/p28669825/jsf-2.0-el-2.2.zip is good enough for testing purpose. -- View this message in context: http://old.nabble.com/EL-2.2-in-Tomcat-7-RC1-RC2-does-not-fully-support-method-invocation%2C-such-as-%22-%7BhelloWorldController.doSomething%28helloWorldModel%29%7D%22-tp28671969p28671969.html Sent from the Tomcat - User mailing list archive at Nabble.com. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Help to import SSL certificate to Tomcat
On 25/05/2010 14:00, Gustavo Mauro wrote: > > Hello all, > I am currently deploying a solution (B.O. Server) that uses both IIS 6 > and Tomcat 5; this last one just as a servlet handler. > This web site though must be secure and reached only via HTTPS (tcp > 443/8443). > The SSL certificate was generated to IIS and, using its tools, exported > as an PKC12 key file to be used on Tomcat. However, the keystore is not being > recognized and I am somehow clueless on what to do to fix the problem. So is IIS handling the SSL or is Tomcat? If it's the latter, have you read the following instructions? http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html > What I did: > 1) from IIS Management Console, I exported the already installed and working > certificate to a *.pfx file. > 2) edited tomcat's server.xml file as below: > > maxThreads="150" > minSpareThreads="25" > maxSpareThreads="75" > enableLookups="false" > disableUploadTimeout="true" > acceptCount="100" > debug="1" > scheme="https" > secure="true" > clientAuth="false" > sslProtocol="TLS" > keystoretype="PKCS12" > keystoreFile="e:\bo01_w3svc1_cert.pfx" > keystorePass="password" /> A KeyStore is not a certificate file. See the above link for more information. p > 3) started both IIS 6 and Tomcat 5 (installed by BOE) > > 4) IIS works fine, while Tomcat throws me the error below: > May 20, 2010 4:15:36 PM org.apache.coyote.http11.Http11Protocol init > INFO: Initializing Coyote HTTP/1.1 on http-8080 > May 20, 2010 4:15:36 PM org.apache.coyote.http11.Http11Protocol init > SEVERE: Error initializing endpoint > java.io.IOException: Invalid keystore format > at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:629) > at java.security.KeyStore.load(KeyStore.java:652) > at > org.apache.tomcat.util.net.jsse.JSSESocketFactory.getStore(JSSESocketFactory.java:278) > at > org.apache.tomcat.util.net.jsse.JSSESocketFactory.getKeystore(JSSESocketFactory.java:220) > at > org.apache.tomcat.util.net.jsse.JSSE14SocketFactory.getKeyManagers(JSSE14SocketFactory.java:143) > at > org.apache.tomcat.util.net.jsse.JSSE14SocketFactory.init(JSSE14SocketFactory.java:109) > at > org.apache.tomcat.util.net.jsse.JSSESocketFactory.createSocket(JSSESocketFactory.java:88) > at > org.apache.tomcat.util.net.PoolTcpEndpoint.initEndpoint(PoolTcpEndpoint.java:259) > at org.apache.coyote.http11.Http11Protocol.init(Http11Protocol.java:137) > at > org.apache.coyote.tomcat5.CoyoteConnector.initialize(CoyoteConnector.java:1429) > at > org.apache.catalina.core.StandardService.initialize(StandardService.java:609) > at > org.apache.catalina.core.StandardServer.initialize(StandardServer.java:2384) > at org.apache.catalina.startup.Catalina.load(Catalina.java:507) > at org.apache.catalina.startup.Catalina.load(Catalina.java:528) > at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) > at > sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) > at > sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) > at java.lang.reflect.Method.invoke(Method.java:324) > > I searched the net for advices, but none of the posts successfully solved the > problem. > > Does anyone know what may be going on here? > > Thanks, > > Gustavo. > > > _ > QUEM VOCÊ QUER SER HOJE NO MESSENGER? TRANSFORME SUA FOTO, É GRÁTIS. > http://ilm.windowslive.com.br/?ocid=ILM:ILM:Hotmail:Tagline:1x1:Tagline signature.asc Description: OpenPGP digital signature
RE: Portlet Won't Deploy Unless Tomcat Started Via Eclipse
Are you referring to the first period in "D2DFaceletViewHandler.java.lang.ClassNotFoundException"? That does look a little odd. I've tried re-creating the issue/log entry to double check, but can't seem to reproduce that exact error. Yes, the jar file with that class is included in the war. Shelli -Original Message- From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] Sent: Tuesday, May 25, 2010 9:27 AM To: Tomcat Users List Subject: RE: Portlet Won't Deploy Unless Tomcat Started Via Eclipse > From: Shelli Orton [mailto:shelli.or...@sjrb.ca] > Subject: Portlet Won't Deploy Unless Tomcat Started Via Eclipse > > May 21, 2010 9:29:02 PM com.sun.faces.util.Util createInstance > SEVERE: Cant instantiate class: > com.icesoft.faces.facelets.D2DFaceletViewHandler.java.lang.ClassNotFound > Exception: com.icesoft.faces.facelets.D2DFaceletViewHandler The above looks rather odd; did some whitespace get squeezed out and replaced by a period? Does com.icesoft.faces.facelets.D2DFaceletViewHandler really exist in the .war file, or is located somewhere else that Eclipse happens to include on the classpath? - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Tomcat 6.0 always uses default host in multi-host config
Putting an Alias element in the Host solved the problem. I initially had no Alias elements, then added one using the public IP. Logs indicated that Tomcat could not connect to that IP; changing the IP to the local IP (identical to the IP defined in the name attribute in the Connector) seems to have done the trick. Thanks, Konstantin for pointing me in the right direction. www.firstdomain.com 192.168.100.100 www.seconddomain.com 192.168.100.200 - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: stuck confused an need help please
They have to be on the classpath. The base configuration file ends up in WEB-INF/classes. I've always put my hbm.xml files alongside the classes they map. Make sure that there is only one copy of your JDBC driver in your classpath as well, and that it's in the right location. /mde/ --- On Tue, 5/25/10, Yucca Nel wrote: > From: Yucca Nel > hello and than you. I will spend next > few hours fixing this. I need to fix hibernate catalog too > as it is still trying to create tables in my test > datatabase > probably because catalogs are defined for test database in > entity hbm.xml mappings? > > Do these mappings ususally go in the WEB-INF classes > directory or can I put them with other metadata directly in > WEB-INF? > > I am not too sure on the username being incorrect for my > credentials defined in xml as I made sure to check for > trailing and leading whitespace but will look again.I will > also fix the error handle and path to error page - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Portlet Won't Deploy Unless Tomcat Started Via Eclipse
> From: Shelli Orton [mailto:shelli.or...@sjrb.ca] > Subject: Portlet Won't Deploy Unless Tomcat Started Via Eclipse > > May 21, 2010 9:29:02 PM com.sun.faces.util.Util createInstance > SEVERE: Cant instantiate class: > com.icesoft.faces.facelets.D2DFaceletViewHandler.java.lang.ClassNotFound > Exception: com.icesoft.faces.facelets.D2DFaceletViewHandler The above looks rather odd; did some whitespace get squeezed out and replaced by a period? Does com.icesoft.faces.facelets.D2DFaceletViewHandler really exist in the .war file, or is located somewhere else that Eclipse happens to include on the classpath? - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Where to place log4j.properties
2010/5/25 Søren Blidorf : > Hi. > > > > Where in my war file should log4j.properties be? > > > > I have it in WEB-INF/classes but it seems like it can’t be found. Der skal den være på runtime. > > > > I get: No appender could be found for logger (org.apache.jasper.JspC) when I > compile. > Hvad er dit logging-API -- refererer din javakode direkte til log4j eller bruger du commons-logging eller tilsvarende? Du skal også have log4j.jar i WEB-INF/lib Faktisk tror jeg at den citerede fejlmeddelse betyder at commons-logging ikke kan finde log4j.jar, så check lige at den er i WEB-INF/lib mvh Erik - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Portlet Won't Deploy Unless Tomcat Started Via Eclipse
Hi, I am using Liferay with Tomcat 6.0 distribution and am having some issues with deploying a portlet. I believe the issue is related to how Tomcat starts up so am hoping someone on this list can help. I created a Maven archetype based on one of our Liferay projects that uses IceFaces. I created a basic project from the archetype in Eclipse (3.5 with m2eclipse). I started up the Liferay/Tomcat server via Eclipse (liferay-portal-5.2.3-tomcat-6.0), copied the war file to the deploy directory and it deploys fine and I can add the portlet to my Liferay page. However, if I start up Tomcat via the startup.bat script and deploy the war, things go wrong. Either it doesn't deploy the portlet because of errors (see below) or it deploys it and then immediately undeploys (unregisters) it. We tried deploying a portlet built using the same archetype in NetBeans and starting the server via NetBeans and got the same problems. We tried deploying the war built in Eclipse in the server started by NetBeans and got the same problems. So, we're thinking there's something off with the war file but Eclipse does some magic when it starts up Liferay/Tomcat that allow this portlet to be deployed anyway. In Eclipse, the run configuration is set up as: Program arguments: run VM arguments: -Dcatalina.base="C:\Program Files\liferay-portal-5.2.3-tomcat-6.0\tomcat-6.0.18" -Dcatalina.home="C:\Program Files\liferay-portal-5.2.3-tomcat-6.0\tomcat-6.0.18" -Dwtp.deploy="C:\Program Files\liferay-portal-5.2.3-tomcat-6.0\tomcat-6.0.18\webapps" -Djava.endorsed.dirs="C:\Program Files\liferay-portal-5.2.3-tomcat-6.0\tomcat-6.0.18\endorsed" -XX:MaxPermSize=512m -Djava.io.tmpdir="C:\Program Files\liferay-portal-5.2.3-tomcat-6.0\tomcat-6.0.18\temp" No environment variables have been set and everything else is default. Does anyone know what magic Eclipse may be performing on Tomcat startup and/or what the config issue with the war could be? Thanks in advance for any help/direction. Shelli Error deploying portlet: INFO: Initializing Sun's JavaServer Faces implementation (1.2-NIGHTLY_20060407) for context '/IceFacesPortlet-1.0' May 21, 2010 9:29:02 PM com.sun.faces.util.Util createInstance SEVERE: Cant instantiate class: com.icesoft.faces.facelets.D2DFaceletViewHandler.java.lang.ClassNotFound Exception: com.icesoft.faces.facelets.D2DFaceletViewHandler at org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader .java:1387) at org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader .java:1233) at com.sun.faces.util.Util.loadClass(Util.java:176) at com.sun.faces.util.Util.createInstance(Util.java:606) at com.sun.faces.config.ConfigureListener.configure(ConfigureListener.java: 947) at com.sun.faces.config.ConfigureListener.configure(ConfigureListener.java: 774) at com.sun.faces.config.ConfigureListener.contextInitialized(ConfigureListe ner.java:535) at com.sun.faces.config.GlassFishConfigureListener.contextInitialized(Glass FishConfigureListener.java:49) at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.j ava:3843) at org.apache.catalina.core.StandardContext.start(StandardContext.java:4342 ) at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.ja va:791) at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:771) at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:525) at org.apache.catalina.startup.HostConfig.deployDirectory(HostConfig.java:9 26) at org.apache.catalina.startup.HostConfig.deployDirectories(HostConfig.java :889) at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:492) at org.apache.catalina.startup.HostConfig.check(HostConfig.java:1217) at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:29 3) at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSu pport.java:117) at org.apache.catalina.core.ContainerBase.backgroundProcess(ContainerBase.j ava:1337) at org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.proc essChildren(ContainerBase.java:1601) at org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.proc essChildren(ContainerBase.java:1610) at org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.run( ContainerBase.java:1590) at java.lang.Thread.run(Thread.java:595) May 21, 2010 9:29:02 PM com.sun.faces.config.ConfigureListener contextInitialized INFO: Completed initializing Sun's JavaServer Faces implementation (1.2-NIGHTLY_20060407) for context '/IceFacesPortlet-1.0' May 21, 2010 9:29:02 PM org.apache.catalina.core.StandardContext start SEVERE: Error listenerStart May 21, 2010 9:29:02 PM org.apache.catalina.core.StandardContext start SEVERE: Context [/IceFacesPortlet-1.0] startup failed due to previous errors
Where to place log4j.properties
Hi. Where in my war file should log4j.properties be? I have it in WEB-INF/classes but it seems like it cant be found. I get: No appender could be found for logger (org.apache.jasper.JspC) when I compile. Soren, DK
RE: on Windows 7, i can't use service.bat to install windows service, tried both 6.0.24 and 6.0.26
"Run as Administrator" -- That solved my problem on Windows 7, thanks! -Original Message- From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] Sent: Tuesday, May 25, 2010 10:46 AM To: Tomcat Users List Subject: RE: on Windows 7, i can't use service.bat to install windows service, tried both 6.0.24 and 6.0.26 > From: Feng Fan [mailto:f...@tibco.com] > Subject: on Windows 7, i can't use service.bat to install windows > service, tried both 6.0.24 and 6.0.26 > > I found that I can't use service.bat to install tomcat as > a service on Windows 7. Welcome to UAC. You have to run service.bat from a command prompt that's started with "Run as Administrator", even if your normal account has administrator privileges. Right-click on a Command Prompt icon and you'll see it in the menu. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Tomcat 6.0 always uses default host in multi-host config
> From: Jeff [mailto:jwi...@cox.net] > Subject: Re: Tomcat 6.0 always uses default host in multi-host config > > TC writes to the access logs for the default host, which would be > expected. Show us real information - in particular the HTTP headers. Use Wireshark or equivalent if that's not in the access log. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: on Windows 7, i can't use service.bat to install windows service, tried both 6.0.24 and 6.0.26
> From: Feng Fan [mailto:f...@tibco.com] > Subject: on Windows 7, i can't use service.bat to install windows > service, tried both 6.0.24 and 6.0.26 > > I found that I can't use service.bat to install tomcat as > a service on Windows 7. Welcome to UAC. You have to run service.bat from a command prompt that's started with "Run as Administrator", even if your normal account has administrator privileges. Right-click on a Command Prompt icon and you'll see it in the menu. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Tomcat 6.0 always uses default host in multi-host config
TC writes to the access logs for the default host, which would be expected. On 5/25/2010 8:18 AM, Caldarale, Charles R wrote: From: Jeff [mailto:jwi...@cox.net] Subject: Re: Tomcat 6.0 always uses default host in multi-host config Standard HTTP exhibits the same behavior: if the default host is firstdomain.com, http://seconddomain.com still accesses the ROOT app for firstdomain.com So turn on the AccessLogValve and/or take Wireshark traces and see what's really in the request. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org No virus found in this incoming message. Checked by AVG - www.avg.com Version: 9.0.819 / Virus Database: 271.1.1/2895 - Release Date: 05/25/10 01:26:00
on Windows 7, i can't use service.bat to install windows service, tried both 6.0.24 and 6.0.26
Hi, I found that I can't use service.bat to install tomcat as a service on Windows 7. However tomcat's Windows EXE installer still works successfully. I tried both 6.0.24 and 6.0.26. Do you know if there is a fix to service.bat? I want to install our web applications as a Service, so I can't just use the default tomcat EXE installer. Thanks. -Feng
RE: Tomcat 6.0 always uses default host in multi-host config
> From: Jeffrey Janner [mailto:jeffrey.jan...@polydyne.com] > Subject: RE: Tomcat 6.0 always uses default host in multi-host config > > noticed the OP's server.xml is missing the Service > element and the Connectors are under the Engine. Besides no one else noticing (embarrassing), it's indicative that the OP isn't giving us accurate information, or Tomcat is a lot more flexible than it should be. The misplaced elements might well be the problem (assuming the OP's message is a correct representation of server.xml). - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Tomcat 6.0 always uses default host in multi-host config
On Tue, May 25, 2010 at 7:29 AM, Jeffrey Janner wrote: > ... but noticed the OP's server.xml is missing the Service element > and the Connectors are under the Engine. +1 -- I was just going to comment that if this server.xml snippet is really the entire file, it doesn't look valid; there's also no wrapping Server element. Perhaps the OP could post the entire thing, including the changes that have been suggested throughout this thread, once more? -- Hassan Schroeder hassan.schroe...@gmail.com twitter: @hassan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Tomcat 6.0 always uses default host in multi-host config
Is there a turtorial on the useIPVhosts attribute and how it is "supposed" to work somewhere? The statement in the on-line documentation is woefully insufficient. If you want true default host processing based on incoming IP, you can always set up multiple services: . . Or is this just completely wrong for Tomcat 6.x? I've not upgraded to that yet, but noticed the OP's server.xml is missing the Service element and the Connectors are under the Engine. Jeff -Original Message- From: Jeff [mailto:jwi...@cox.net] Sent: Tuesday, May 25, 2010 9:04 AM To: Tomcat Users List Subject: Re: Tomcat 6.0 always uses default host in multi-host config No. And again, if I change the default host in the config, the app that is displayed is different, so I don't think that's the issue. On 5/25/2010 8:56 AM, Pid wrote: > On 25/05/2010 14:13, Jeff wrote: > >> The application does not automatically redirect to 443. >> >> Standard HTTP exhibits the same behavior: if the default host is >> firstdomain.com, http://seconddomain.com still accesses the ROOT app for >> firstdomain.com >> > There's no chance you uploaded the apps to the wrong domain is there? > > > p > > >> On 5/25/2010 7:48 AM, Pid wrote: >> >>> On 25/05/2010 13:00, Jeff wrote: >>> >>> I did not have Alias elements inside the Host elements. I did try both w/ and w/o www. so I didn't consider that an issue. After adding Alias elements, the problem persisted. There are ROOT.xml Contexts in both $CATALINA_HOME/conf/Catalina/firstdomain.com and $CATALINA_HOME/conf/Catalina/seconddomain.com Both are simple: >>> The debug attribute hasn't been used for a while, remove it. >>> The two other attributes are also useless, remove them. >>> >>> If the above is your entire Context definition you can omit the file >>> entirely. >>> >>> Can you disable the HTTPS connectors entirely, temporarily, or does the >>> application automatically redirect to a secure channel for all requests? >>> >>> >>> p >>> >>> >>> >>> On 5/25/2010 5:06 AM, Pid wrote: > On 25/05/2010 10:44, Jeff wrote: > > > >> I have two IP-based virtual hosts configured in a standalone Tomcat >> server. Each host has its own SSL certificate and keystore. Tomcat >> appears to behave as if only the default host is defined. When I hit >> seconddomain.com, Tomcat serves the ROOT app for firstdomain.com and >> writes to firstdomain.com access log. When I try >> https://seconddomain.com, the domain is untrusted, which I suspect is >> because Tomcat is using the cert for firstdomain. >> >> If I change the defaultHost value to seconddomain.com, the behavior >> flips and Tomcat serves the ROOT app for seconddomain.com when I try >> http://firstdomain.com. >> >> >> > Are you requesting firstdomain.com or www.firstdomain.com? > You have no Alias elements set inside the Host element. > > Also, are there any Context definitions? Either in > META-INF/context.xml > or e.g. tomcat/conf/Catalina/firstdomain.com/ > > > p > > > > > >> AFAIK, the server.xml configuration below should work. Any clues as to >> what is wrong? >> >> TIA >> >> * Tomcat 6.0.26 (stand alone) >> * Red Hat Enterprise 5 (Linux 2.6.18-164.15.1.el5 on x86_64) >> * IP-based virtual hosting >> * Tomcat running as daemon via JSVC >> * server.xml: >> >> 1. >> 2. >> 3.> 4. connectionTimeout="2" >> 5. redirectPort="443" >> 6. useIPVHosts="true" /> >> 7. >> 8.> 9. protocol="org.apache.coyote.http11.Http11Protocol" >> 10. SSLEnabled="true" >> 11. maxThreads="150" scheme="https" secure="true" >> 12. clientAuth="false" sslProtocol="TLS" >> 13. keystoreFile="/usr/share/tomcat/.keystore" >> 14. keystorePass="changeit" /> >> 15. >> 16.> 17. protocol="org.apache.coyote.http11.Http11Protocol" >> 18. SSLEnabled="true" >> 19. maxThreads="150" scheme="https" secure="true" >> 20. clientAuth="false" sslProtocol="TLS" >> 21. keystoreFile="/usr/share/tomcat/.keystore2" >> 22. keystorePass="changeit" /> >> 23. >> 24.> 25. appBase="/home/websites/firstdomain.com/webapps" >> 26. unpackWARs="true" >> 27. autoDeploy="true"> >> 28.> 29. dir
Re: Tomcat 6.0 always uses default host in multi-host config
No. And again, if I change the default host in the config, the app that is displayed is different, so I don't think that's the issue. On 5/25/2010 8:56 AM, Pid wrote: On 25/05/2010 14:13, Jeff wrote: The application does not automatically redirect to 443. Standard HTTP exhibits the same behavior: if the default host is firstdomain.com, http://seconddomain.com still accesses the ROOT app for firstdomain.com There's no chance you uploaded the apps to the wrong domain is there? p On 5/25/2010 7:48 AM, Pid wrote: On 25/05/2010 13:00, Jeff wrote: I did not have Alias elements inside the Host elements. I did try both w/ and w/o www. so I didn't consider that an issue. After adding Alias elements, the problem persisted. There are ROOT.xml Contexts in both $CATALINA_HOME/conf/Catalina/firstdomain.com and $CATALINA_HOME/conf/Catalina/seconddomain.com Both are simple: The debug attribute hasn't been used for a while, remove it. The two other attributes are also useless, remove them. If the above is your entire Context definition you can omit the file entirely. Can you disable the HTTPS connectors entirely, temporarily, or does the application automatically redirect to a secure channel for all requests? p On 5/25/2010 5:06 AM, Pid wrote: On 25/05/2010 10:44, Jeff wrote: I have two IP-based virtual hosts configured in a standalone Tomcat server. Each host has its own SSL certificate and keystore. Tomcat appears to behave as if only the default host is defined. When I hit seconddomain.com, Tomcat serves the ROOT app for firstdomain.com and writes to firstdomain.com access log. When I try https://seconddomain.com, the domain is untrusted, which I suspect is because Tomcat is using the cert for firstdomain. If I change the defaultHost value to seconddomain.com, the behavior flips and Tomcat serves the ROOT app for seconddomain.com when I try http://firstdomain.com. Are you requesting firstdomain.com or www.firstdomain.com? You have no Alias elements set inside the Host element. Also, are there any Context definitions? Either in META-INF/context.xml or e.g. tomcat/conf/Catalina/firstdomain.com/ p AFAIK, the server.xml configuration below should work. Any clues as to what is wrong? TIA * Tomcat 6.0.26 (stand alone) * Red Hat Enterprise 5 (Linux 2.6.18-164.15.1.el5 on x86_64) * IP-based virtual hosting * Tomcat running as daemon via JSVC * server.xml: 1. 2. 3. 7. 8. 15. 16. 23. 24. 28. 34. 35. 36. 40. 46. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Tomcat 6.0 always uses default host in multi-host config
On 25/05/2010 14:13, Jeff wrote: > The application does not automatically redirect to 443. > > Standard HTTP exhibits the same behavior: if the default host is > firstdomain.com, http://seconddomain.com still accesses the ROOT app for > firstdomain.com There's no chance you uploaded the apps to the wrong domain is there? p > On 5/25/2010 7:48 AM, Pid wrote: >> On 25/05/2010 13:00, Jeff wrote: >> >>> I did not have Alias elements inside the Host elements. I did try both >>> w/ and w/o www. so I didn't consider that an issue. After adding Alias >>> elements, the problem persisted. >>> >>> There are ROOT.xml Contexts in both >>> $CATALINA_HOME/conf/Catalina/firstdomain.com and >>> $CATALINA_HOME/conf/Catalina/seconddomain.com >>> >>> Both are simple: >>> >>> >>> >> The debug attribute hasn't been used for a while, remove it. >> The two other attributes are also useless, remove them. >> >> If the above is your entire Context definition you can omit the file >> entirely. >> >> Can you disable the HTTPS connectors entirely, temporarily, or does the >> application automatically redirect to a secure channel for all requests? >> >> >> p >> >> >> >>> On 5/25/2010 5:06 AM, Pid wrote: >>> On 25/05/2010 10:44, Jeff wrote: > I have two IP-based virtual hosts configured in a standalone Tomcat > server. Each host has its own SSL certificate and keystore. Tomcat > appears to behave as if only the default host is defined. When I hit > seconddomain.com, Tomcat serves the ROOT app for firstdomain.com and > writes to firstdomain.com access log. When I try > https://seconddomain.com, the domain is untrusted, which I suspect is > because Tomcat is using the cert for firstdomain. > > If I change the defaultHost value to seconddomain.com, the behavior > flips and Tomcat serves the ROOT app for seconddomain.com when I try > http://firstdomain.com. > > Are you requesting firstdomain.com or www.firstdomain.com? You have no Alias elements set inside the Host element. Also, are there any Context definitions? Either in META-INF/context.xml or e.g. tomcat/conf/Catalina/firstdomain.com/ p > AFAIK, the server.xml configuration below should work. Any clues as to > what is wrong? > > TIA > > * Tomcat 6.0.26 (stand alone) > * Red Hat Enterprise 5 (Linux 2.6.18-164.15.1.el5 on x86_64) > * IP-based virtual hosting > * Tomcat running as daemon via JSVC > * server.xml: > > 1. > 2. > 3. 4. connectionTimeout="2" > 5. redirectPort="443" > 6. useIPVHosts="true" /> > 7. > 8. 9. protocol="org.apache.coyote.http11.Http11Protocol" > 10. SSLEnabled="true" > 11. maxThreads="150" scheme="https" secure="true" > 12. clientAuth="false" sslProtocol="TLS" > 13. keystoreFile="/usr/share/tomcat/.keystore" > 14. keystorePass="changeit" /> > 15. > 16. 17. protocol="org.apache.coyote.http11.Http11Protocol" > 18. SSLEnabled="true" > 19. maxThreads="150" scheme="https" secure="true" > 20. clientAuth="false" sslProtocol="TLS" > 21. keystoreFile="/usr/share/tomcat/.keystore2" > 22. keystorePass="changeit" /> > 23. > 24. 25. appBase="/home/websites/firstdomain.com/webapps" > 26. unpackWARs="true" > 27. autoDeploy="true"> > 28. 29. directory="/home/websites/firstdomain.com/logs" > 30. prefix="firstdomain.com_access." > 31. suffix=".log" > 32. pattern="common" > 33. resolveHosts="false"/> > 34. > 35. > 36. 37. appBase="/home/websites/seconddomain.com/webapps" > 38. unpackWARs="true" > 39. autoDeploy="true"> > 40. 41. directory="/home/websites/seconddomain.com/logs" > 42. prefix="seconddomain.com_access." > 43. suffix=".log" > 44. pattern="common" > 45. resolveHosts="false" /> > 46. > > - > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > > > >>> - >>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org >>> For additional commands, e-mail: users-h...@tomcat.apache.org >>> >>> >> >> > > --
Re: Too many open files
On 25.05.2010 11:54, André Warnier wrote: pri...@samea.de wrote: Hello, I have a problem with my little CORBA-Servlet. Allways I get this error: java.net.SocketException: Too many open files sun.nio.ch.Net.socket0(Native Method) sun.nio.ch.Net.socket(Net.java:97) sun.nio.ch.SocketChannelImpl.(SocketChannelImpl.java:84) sun.nio.ch.SelectorProviderImpl.openSocketChannel(SelectorProviderImpl.java:37) java.nio.channels.SocketChannel.open(SocketChannel.java:105) java.nio.channels.SocketChannel.open(SocketChannel.java:145) com.sun.corba.se.impl.transport.DefaultSocketFactoryImpl.createSocket(DefaultSocketFactoryImpl.java:60) com.sun.corba.se.impl.transport.SocketOrChannelConnectionImpl.(SocketOrChannelConnectionImpl.java:188) com.sun.corba.se.impl.transport.SocketOrChannelConnectionImpl.(SocketOrChannelConnectionImpl.java:218) com.sun.corba.se.impl.transport.SocketOrChannelContactInfoImpl.createConnection(SocketOrChannelContactInfoImpl.java:101) com.sun.corba.se.impl.protocol.CorbaClientRequestDispatcherImpl.beginRequest(CorbaClientRequestDispatcherImpl.java:152) com.sun.corba.se.impl.protocol.CorbaClientDelegateImpl.request(CorbaClientDelegateImpl.java:118) com.sun.corba.se.impl.protocol.CorbaClientDelegateImpl.is_a(CorbaClientDelegateImpl.java:211) org.omg.CORBA.portable.ObjectImpl._is_a(ObjectImpl.java:112) I use: Tomcat 6.0.26 on Linux JVM: 1.6.0_20-b02 At first sight, it doesn't look as if this is a Tomcat issue. It seems more of an issue within your servlet. Is this servlet opening its own connection to something else? If yes, then you probably forget to close this connection when you are done with it, and they accumulate until the OS tells your process that it has too many open sockets at the same time. Doing a "netstat -an" would probably provide more information. If you are under Unix/Linux, you can also try "lsof", but only studying the options is already quite a challenge. On Linux you can get the most important file descriptor info also by looking at the proc filesystem. If your process has process id (PID) XYZ, then do: ls -l /proc/XYZ/fd It will list all open file descriptors, so you can find out, why there are so many open ones (are they files, sockets, ...). If they are sockets, you can list the association betweeb the sockets and the PID (=XYZ) using netstat -anp Finally if you think you will need only a bit more descriptors, then have a look at the "ulimit" command (man ulimit). There are hard and soft limits. You can look at the active limits with "ulimit -a" and "ulimit -H -a". The one you are interested in is "open files". You might be able to set another limit with "ulimit -n". Regards, Rainer - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Tomcat 6.0 always uses default host in multi-host config
> From: Jeff [mailto:jwi...@cox.net] > Subject: Re: Tomcat 6.0 always uses default host in multi-host config > > Standard HTTP exhibits the same behavior: if the default host is > firstdomain.com, http://seconddomain.com still accesses the ROOT app > for firstdomain.com So turn on the AccessLogValve and/or take Wireshark traces and see what's really in the request. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: too many open files
> From: Pid [mailto:p...@pidster.com] > Subject: Re: too many open files > > > I had a look at my servlet, but it closes the connection after > > doing a request. > > Does it close the connection if the request throws an error? And as previously suggested, use netstat to find out if the excess files really are sockets. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Question on workers.properties file
On 25.05.2010 13:44, André Warnier wrote: Savoy, Melinda wrote: Ranier, I do not want the user to get prompted at all. I need this to work as a single sign-on (seamless to the user). Is that not possible? I had tested where when I got the prompt then I got the Domain\User name but I am needing to avoid the login dialog box altogether. Rainer got prompted because he did this test on a "loose" XP workstation, and he was not yet logged into any domain. If the workstation is part of a Windows domain, and the user already logged into the domain, there will be no extra prompt. Right, I didn't test that, but I would expect the same as you. What Rainer did, was confirm that when conditions are right for IIS to authenticate, and the setup is right for this authentication to be passed to Tomcat, it is, and the gerRemoteUser() returns the logged-in id. The issue you have, is in the basic setup of how some URLs are or are not passed to the "right" Tomcat worker. I believe you have one "virtual website" or whatever IIS calls it, too many, and that the URLs that are of interest here are not being passed through the channel you think, and therefore either IIS does not authenticate these SCIMIS URLs (and consequently does not pass this authentication to Tomcat). Can you tell us precisely : - which URLs should be authenticated (give some examples) - which sub-directories are present under the (tomcat-dir)/webapps directory (where (tomcat-dir) is the top of your Tomcat installation. Then we might be able to work out how the virtual websites and redirector should be configured to make this all work as it should. Good plan. Regards, Rainer - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: mod_jk stability issues
On 25.05.2010 14:48, LES wrote: I can't believe I missed the millisecond thing. :) No problem, it's our fault not using consistent time units. The latest 1.2.30 has a useful default configuration in the src tarball. But yours looks good too. Regards, Rainer - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Tomcat 6.0 always uses default host in multi-host config
The application does not automatically redirect to 443. Standard HTTP exhibits the same behavior: if the default host is firstdomain.com, http://seconddomain.com still accesses the ROOT app for firstdomain.com On 5/25/2010 7:48 AM, Pid wrote: On 25/05/2010 13:00, Jeff wrote: I did not have Alias elements inside the Host elements. I did try both w/ and w/o www. so I didn't consider that an issue. After adding Alias elements, the problem persisted. There are ROOT.xml Contexts in both $CATALINA_HOME/conf/Catalina/firstdomain.com and $CATALINA_HOME/conf/Catalina/seconddomain.com Both are simple: The debug attribute hasn't been used for a while, remove it. The two other attributes are also useless, remove them. If the above is your entire Context definition you can omit the file entirely. Can you disable the HTTPS connectors entirely, temporarily, or does the application automatically redirect to a secure channel for all requests? p On 5/25/2010 5:06 AM, Pid wrote: On 25/05/2010 10:44, Jeff wrote: I have two IP-based virtual hosts configured in a standalone Tomcat server. Each host has its own SSL certificate and keystore. Tomcat appears to behave as if only the default host is defined. When I hit seconddomain.com, Tomcat serves the ROOT app for firstdomain.com and writes to firstdomain.com access log. When I try https://seconddomain.com, the domain is untrusted, which I suspect is because Tomcat is using the cert for firstdomain. If I change the defaultHost value to seconddomain.com, the behavior flips and Tomcat serves the ROOT app for seconddomain.com when I try http://firstdomain.com. Are you requesting firstdomain.com or www.firstdomain.com? You have no Alias elements set inside the Host element. Also, are there any Context definitions? Either in META-INF/context.xml or e.g. tomcat/conf/Catalina/firstdomain.com/ p AFAIK, the server.xml configuration below should work. Any clues as to what is wrong? TIA * Tomcat 6.0.26 (stand alone) * Red Hat Enterprise 5 (Linux 2.6.18-164.15.1.el5 on x86_64) * IP-based virtual hosting * Tomcat running as daemon via JSVC * server.xml: 1. 2. 3. 7. 8. 15. 16. 23. 24. 28. 34. 35. 36. 40. 46. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Question on workers.properties file
On 25.05.2010 12:22, Savoy, Melinda wrote: Ranier, in^^ :) I do not want the user to get prompted at all. I need this to work as a single sign-on (seamless to the user). Is that not possible? I had tested where when I got the prompt then I got the Domain\User name but I am needing to avoid the login dialog box altogether. Thank you for taking the time to test and your help. That's an IIS question. The described test shows us, that the redirector forwards correctly the user identity, once it is established by IIS. The IIS configuration window for authentication allows several types of authentication. You might need to play around with those options. It is also possible, that some of those might only be supported by MSIE. Regards, Rainer - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: too many open files
On 25/05/2010 11:38, pri...@samea.de wrote: > Hello, > > I had a look at my servlet, but it closes the connection after > doing a request. Does it close the connection if the request throws an error? p > Further it crashes by opening the nameserver. > > Thanks for your help. > > br, > > Markus > > >> pri...@samea.de wrote: >>> Hello, >>> >>> I have a problem with my little CORBA-Servlet. >>> Allways I get this error: >>> >>> java.net.SocketException: Too many open files >>> sun.nio.ch.Net.socket0(Native Method) >>> sun.nio.ch.Net.socket(Net.java:97) >>> sun.nio.ch.SocketChannelImpl.(SocketChannelImpl.java:84) >>> >>> sun.nio.ch.SelectorProviderImpl.openSocketChannel(SelectorProviderImpl.java:37) >>> >>> >>> java.nio.channels.SocketChannel.open(SocketChannel.java:105) >>> java.nio.channels.SocketChannel.open(SocketChannel.java:145) >>> >>> com.sun.corba.se.impl.transport.DefaultSocketFactoryImpl.createSocket(DefaultSocketFactoryImpl.java:60) >>> >>> >>> com.sun.corba.se.impl.transport.SocketOrChannelConnectionImpl.(SocketOrChannelConnectionImpl.java:188) >>> >>> >>> >>> com.sun.corba.se.impl.transport.SocketOrChannelConnectionImpl.(SocketOrChannelConnectionImpl.java:218) >>> >>> >>> >>> com.sun.corba.se.impl.transport.SocketOrChannelContactInfoImpl.createConnection(SocketOrChannelContactInfoImpl.java:101) >>> >>> >>> >>> com.sun.corba.se.impl.protocol.CorbaClientRequestDispatcherImpl.beginRequest(CorbaClientRequestDispatcherImpl.java:152) >>> >>> >>> >>> com.sun.corba.se.impl.protocol.CorbaClientDelegateImpl.request(CorbaClientDelegateImpl.java:118) >>> >>> >>> >>> com.sun.corba.se.impl.protocol.CorbaClientDelegateImpl.is_a(CorbaClientDelegateImpl.java:211) >>> >>> >>> org.omg.CORBA.portable.ObjectImpl._is_a(ObjectImpl.java:112) >>> >>> I use: Tomcat 6.0.26 on Linux JVM: 1.6.0_20-b02 >>> >> At first sight, it doesn't look as if this is a Tomcat issue. It seems >> more of an issue within your servlet. >> Is this servlet opening its own connection to something else? >> If yes, then you probably forget to close this connection when you are >> done with it, and they accumulate until the OS tells your process that >> it has too many open sockets at the same time. >> >> Doing a "netstat -an" would probably provide more information. >> >> If you are under Unix/Linux, you can also try "lsof", but only studying >> the options is already quite a challenge. >> >> - >> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org >> For additional commands, e-mail: users-h...@tomcat.apache.org > signature.asc Description: OpenPGP digital signature
Help to import SSL certificate to Tomcat
Hello all, I am currently deploying a solution (B.O. Server) that uses both IIS 6 and Tomcat 5; this last one just as a servlet handler. This web site though must be secure and reached only via HTTPS (tcp 443/8443). The SSL certificate was generated to IIS and, using its tools, exported as an PKC12 key file to be used on Tomcat. However, the keystore is not being recognized and I am somehow clueless on what to do to fix the problem. What I did: 1) from IIS Management Console, I exported the already installed and working certificate to a *.pfx file. 2) edited tomcat's server.xml file as below: 3) started both IIS 6 and Tomcat 5 (installed by BOE) 4) IIS works fine, while Tomcat throws me the error below: May 20, 2010 4:15:36 PM org.apache.coyote.http11.Http11Protocol init INFO: Initializing Coyote HTTP/1.1 on http-8080 May 20, 2010 4:15:36 PM org.apache.coyote.http11.Http11Protocol init SEVERE: Error initializing endpoint java.io.IOException: Invalid keystore format at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:629) at java.security.KeyStore.load(KeyStore.java:652) at org.apache.tomcat.util.net.jsse.JSSESocketFactory.getStore(JSSESocketFactory.java:278) at org.apache.tomcat.util.net.jsse.JSSESocketFactory.getKeystore(JSSESocketFactory.java:220) at org.apache.tomcat.util.net.jsse.JSSE14SocketFactory.getKeyManagers(JSSE14SocketFactory.java:143) at org.apache.tomcat.util.net.jsse.JSSE14SocketFactory.init(JSSE14SocketFactory.java:109) at org.apache.tomcat.util.net.jsse.JSSESocketFactory.createSocket(JSSESocketFactory.java:88) at org.apache.tomcat.util.net.PoolTcpEndpoint.initEndpoint(PoolTcpEndpoint.java:259) at org.apache.coyote.http11.Http11Protocol.init(Http11Protocol.java:137) at org.apache.coyote.tomcat5.CoyoteConnector.initialize(CoyoteConnector.java:1429) at org.apache.catalina.core.StandardService.initialize(StandardService.java:609) at org.apache.catalina.core.StandardServer.initialize(StandardServer.java:2384) at org.apache.catalina.startup.Catalina.load(Catalina.java:507) at org.apache.catalina.startup.Catalina.load(Catalina.java:528) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) at java.lang.reflect.Method.invoke(Method.java:324) I searched the net for advices, but none of the posts successfully solved the problem. Does anyone know what may be going on here? Thanks, Gustavo. _ QUEM VOCÊ QUER SER HOJE NO MESSENGER? TRANSFORME SUA FOTO, É GRÁTIS. http://ilm.windowslive.com.br/?ocid=ILM:ILM:Hotmail:Tagline:1x1:Tagline
Re: Tomcat 6.0 always uses default host in multi-host config
On 25/05/2010 13:00, Jeff wrote: > I did not have Alias elements inside the Host elements. I did try both > w/ and w/o www. so I didn't consider that an issue. After adding Alias > elements, the problem persisted. > > There are ROOT.xml Contexts in both > $CATALINA_HOME/conf/Catalina/firstdomain.com and > $CATALINA_HOME/conf/Catalina/seconddomain.com > > Both are simple: > > The debug attribute hasn't been used for a while, remove it. The two other attributes are also useless, remove them. If the above is your entire Context definition you can omit the file entirely. Can you disable the HTTPS connectors entirely, temporarily, or does the application automatically redirect to a secure channel for all requests? p > On 5/25/2010 5:06 AM, Pid wrote: >> On 25/05/2010 10:44, Jeff wrote: >> >>> I have two IP-based virtual hosts configured in a standalone Tomcat >>> server. Each host has its own SSL certificate and keystore. Tomcat >>> appears to behave as if only the default host is defined. When I hit >>> seconddomain.com, Tomcat serves the ROOT app for firstdomain.com and >>> writes to firstdomain.com access log. When I try >>> https://seconddomain.com, the domain is untrusted, which I suspect is >>> because Tomcat is using the cert for firstdomain. >>> >>> If I change the defaultHost value to seconddomain.com, the behavior >>> flips and Tomcat serves the ROOT app for seconddomain.com when I try >>> http://firstdomain.com. >>> >> Are you requesting firstdomain.com or www.firstdomain.com? >> You have no Alias elements set inside the Host element. >> >> Also, are there any Context definitions? Either in META-INF/context.xml >> or e.g. tomcat/conf/Catalina/firstdomain.com/ >> >> >> p >> >> >> >>> AFAIK, the server.xml configuration below should work. Any clues as to >>> what is wrong? >>> >>> TIA >>> >>> * Tomcat 6.0.26 (stand alone) >>> * Red Hat Enterprise 5 (Linux 2.6.18-164.15.1.el5 on x86_64) >>> * IP-based virtual hosting >>> * Tomcat running as daemon via JSVC >>> * server.xml: >>> >>> 1. >>> 2. >>> 3.>> 4. connectionTimeout="2" >>> 5. redirectPort="443" >>> 6. useIPVHosts="true" /> >>> 7. >>> 8.>> 9. protocol="org.apache.coyote.http11.Http11Protocol" >>>10. SSLEnabled="true" >>>11. maxThreads="150" scheme="https" secure="true" >>>12. clientAuth="false" sslProtocol="TLS" >>>13. keystoreFile="/usr/share/tomcat/.keystore" >>>14. keystorePass="changeit" /> >>>15. >>>16.>>17. protocol="org.apache.coyote.http11.Http11Protocol" >>>18. SSLEnabled="true" >>>19. maxThreads="150" scheme="https" secure="true" >>>20. clientAuth="false" sslProtocol="TLS" >>>21. keystoreFile="/usr/share/tomcat/.keystore2" >>>22. keystorePass="changeit" /> >>>23. >>>24.>>25. appBase="/home/websites/firstdomain.com/webapps" >>>26. unpackWARs="true" >>>27. autoDeploy="true"> >>>28.>>29. directory="/home/websites/firstdomain.com/logs" >>>30. prefix="firstdomain.com_access." >>>31. suffix=".log" >>>32. pattern="common" >>>33. resolveHosts="false"/> >>>34. >>>35. >>>36.>>37. appBase="/home/websites/seconddomain.com/webapps" >>>38. unpackWARs="true" >>>39. autoDeploy="true"> >>>40.>>41. directory="/home/websites/seconddomain.com/logs" >>>42. prefix="seconddomain.com_access." >>>43. suffix=".log" >>>44. pattern="common" >>>45. resolveHosts="false" /> >>>46. >>> >>> - >>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org >>> For additional commands, e-mail: users-h...@tomcat.apache.org >>> >>> >> >> > > - > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > signature.asc Description: OpenPGP digital signature
Re: mod_jk stability issues
Thank you for the help. You spend a great deal of time help folks on here (as evidenced by the absurd number of times you have answered questions like this :))...and it is appreciated. I can't believe I missed the millisecond thing. :) I'll check the log and the dump for the individual problems and post to this thread with the results (or more questions). LES Rainer Jung-3 wrote: > > On 24.05.2010 23:36, LES wrote: >> >> I am having some trouble keeping a mod_jk setup stable. At this point, I >> feel like I am too far into trial and error mode and would like some help >> figuring out how to identify the problem. >> >> My current setup involves, two linux (RHEL 5) server each running two >> tomcat >> instances (6.0.20). A third RHEL 5 box is running apache (2.2.3) with >> mod_jk(1.2.28). I am using terracotta to "cluster" the tomcat sessions. >> >> The problem that I am having is that under small load (and unfortunately, >> intermittently), I get random nodes that produce errors. Typically these >> errors indicate that mod_jk can no longer contact tomcat (see excerpts >> below). In most cases, the the user request just hangs (never returns). >> So, it also appears that the errors are not causing a session failover -- >> though I need to confirm that again after my recent round of changes. In >> most cases, these nodes that are in error recover on their own. However, >> during the failure event, I get a bunch of unhappy users. I am hoping to >> find a way to make the nodes more stable and then address the fail-over >> aspect. >> >> I have tried different mod_jk parameters and think I have settled on a >> decent set of them. I have all of the garbage collection information >> logging out and do not seem to have any gc events that are taking longer >> than the request timeout. I am gathering jvm and os stats and do not see >> a >> hardware constraint (memory, cpu, io). So, I am a bit of a loss on where >> to >> look. >> >> I am pasting in all of the relevant files/excerpts that I can think of. >> I >> appreciate any advice on what additional data to gather to shed light on >> this problem (outright solutions are welcome too :)). >> >> Please let me know if there is any other information that would be >> helpful. >> >> Thanx, >> LES >> >> >> * workers.properties ** >> # Define 1 real worker using ajp13 >> worker.list=lb,jkstatus,cas >> # Set properties for worker1 (ajp13) >> worker.template.type=ajp13 >> worker.template.retries=4 >> worker.template.lbfactor=1 >> worker.template.reply_timeout=30 >> worker.template.max_reply_timeouts=4 >> worker.template.connection_pool_timeout=60 >> worker.template.ping_mode=A >> #worker.template.socket_timeout=10 > > This is in milliseconds, I guess you want 1: > >> worker.template.socket_connect_timeout=10 >> >> worker.tomcat01-instance1.reference=worker.template >> worker.tomcat01-instance1.host=tomcat01.barnhardt.local >> worker.tomcat01-instance1.port=8009 >> >> worker.tomcat01-instance2.reference=worker.template >> worker.tomcat01-instance2.host=tomcat01.barnhardt.local >> worker.tomcat01-instance2.port=18009 >> >> worker.tomcat02-instance1.reference=worker.template >> worker.tomcat02-instance1.host=tomcat02.barnhardt.local >> worker.tomcat02-instance1.port=8009 >> >> worker.tomcat02-instance2.reference=worker.template >> worker.tomcat02-instance2.host=tomcat02.barnhardt.local >> worker.tomcat02-instance2.port=18009 >> >> worker.cas.type=ajp13 >> worker.cas.host=localhost >> worker.cas.port=8009 >> worker.cas.lbfactor=1 >> worker.cas.connection_pool_timeout=600 >> worker.cas.socket_keepalive=1 > > I don't like the raw socket_timeout, but well ... > >> worker.cas.socket_timeout=60 >> >> # Set properties for lb which use the other workers >> worker.lb.type=lb >> #worker.lb.method=B >> worker.lb.sticky_session=True >> worker.lb.balance_workers=tomcat01-instance1,tomcat01-instance2,tomcat02-instance1,tomcat02-instance2 >> >> # Define a 'jkstatus' worker using status >> worker.jkstatus.type=status >> *** >> >> >> ** Errors from log *** >> >> //This particular error(info) seems to happen constantly - is it a >> normal operational thing? > > Yes, it is not an error, it is an "info2 message. It simply says that > all connections from your apache process to tomcat were closed and a > fresh one had to be opened. > >> [Mon May 24 10:22:56 2010] [26131:4045374208] [info] >> ajp_send_request::jk_ajp_common.c (1496): (tomcat02-instance2) all >> endpoints >> are disconnected, detected by connect check (1), cping (0), send (0) >> [Mon May 24 11:55:21 2010] [2711:4045374208] [info] >> ajp_send_request::jk_ajp_common.c (1496): (tomcat02-instance1) all >> endpoints >> are disconnected, detected by connect check (1), cping (0), send (0) >> [Mon May 24 13:08:25 2010] [27439:4045374208] [info] >> ajp_send_request::jk_ajp_common.c (1496): (tomcat01-instance1) all >> endpoints >> ar
Re: Tomcat 6.0 always uses default host in multi-host config
Neither suggestion worked. On 5/25/2010 5:52 AM, Konstantin Kolinko wrote: 2010/5/25 Jeff: Any clues as to what is wrong? 6. useIPVHosts="true" /> Thus you should use IP addresses as host names (or as aliases). 8. Your HTTPS connectors do not have the "useIPVHosts" flag set. The above are just my guesses, but I hope that it helps. Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org No virus found in this incoming message. Checked by AVG - www.avg.com Version: 9.0.819 / Virus Database: 271.1.1/2894 - Release Date: 05/24/10 13:26:00
RE: Question on workers.properties file
IMHO the IIS redirection is a total hack. It's a lot of additional load, a whole other web server to deal with, configure and administer. Because you're merely hiding Tomcat behind IIS you're not really getting rid of your tomcat server, you're just masking the problem. I'll allow myself to theorize that Jakarta redirector was a stop gap solution because people didn't want a Windows-only valve to do NTLM or because they couldn't write one. If you end up using waffle, please do let me know. Good luck. dB. @ dblock.org Moscow|Geneva|Seattle|New York -Original Message- From: Savoy, Melinda [mailto:melindasa...@texashealth.org] Sent: Monday, May 24, 2010 8:30 PM To: Tomcat Users List Subject: RE: Question on workers.properties file Yes. dB, we are a microsoft shop for all practical purposes. We were the first Java web app that was created here at our company and now since JCIFS is not NTLMv2 compliant we had thought we'd go ahead and use IIS that is being used for everything else internet and intranet wise. Thanks for the info again. I had actually emailed you last week asking if the web.xml setting were required and you stated they were not. I think I'm very close to getting this IIS-Tomcat integration resolved but if I cannot get it to work by the end of the week I'll probably try Waffle. There does not seem to be a lot of documentation on the IIS side to make this work so it seems to be more complicated than I had anticipated. I'm trying to recheck, as Andre suggested, again tomorrow and hope that I can get this to work. Regards. From: dB. [dbl...@dblock.org] Sent: Monday, May 24, 2010 18:09 To: Tomcat Users List Subject: RE: Question on workers.properties file I am curious whether you're using IIS for anything other than single sign-on / authentication? If you're not, check out http://waffle.codeplex.com - there's a new Negotiate (Kerberos + NTLM) authenticator. This could remove IIS from your entire picture. dB. @ dblock.org Moscow|Geneva|Seattle|New York -Original Message- From: Savoy, Melinda [mailto:melindasa...@texashealth.org] Sent: Monday, May 24, 2010 7:03 PM To: Tomcat Users List; Tomcat Users List Subject: RE: Question on workers.properties file Andre, Sorry for creating confusion on the other post. I will stick with this post as well. I made changes to the setting here: I think the problem is right there, and in the worker mappings you mentioned earlier : >> /examples/*=scmisWorker >> /examples/*.jsp=scmisWorker >> /examples/servlet/*=scmisWorker to /*=scmisWorker /*.jsp=scmisWorker /servlet/*=scmisWorker That is why in the log that I had sent stated it as such. I have looked on the Apache Tomcat website to find documentation on the setup of IIS with Tomcat. I made the change above because I had forgotten to change it from the example that I found in the documentation, again my apologies for that. Given the settings that I identified in IIS I can not get authenticated. That is why I think it is an authentication issue. I have gone back and checked each setting but cannot find a problem. That is why I sent my setting so that perhaps someone on this list might see something that I have overlooked. I'll keep trying. Thanks. From: André Warnier [...@ice-sa.com] Sent: Monday, May 24, 2010 15:49 To: Tomcat Users List Subject: Re: Question on workers.properties file Savoy, Melinda wrote: > Andre, > > Thanks for the reply. I was finally able to get my the LOG file created. I > had NOT setup my virtual website, SCMIS, in addition to the JAKARTA virtual > website in IIS and consequently I kept using Tomcat to authenticate instead > of using IIS to do so and it was never hitting my website > > I think it has something to do with the settings in my IIS setting. I still > cannot get the value from getRemoteUser() because the user is blank as is > indicated in the log below. ANY help/direction would be greatly appreciated. > > The URL that I am using to access my SCMIS virtual website is: > http://localhost/SCMIS/index.jsp > > In IIS I have the following: > > Default Web Site - Anonymous access checked and Integrated Windows > authentication unchecked > Jakarta - virtual web site and Anonymous access checked and Integrated > Windows authentication unchecked > SCMIS - virtual web site and Anonymous access unchecked and Integrated > Windows authentication checked > > I have attached the entries in the log file that just happened: I think the problem is right there, and in the worker mappings you mentioned earlier : >> /examples/*=scmisWorker >> /examples/*.jsp=scmisWorker >> /examples/servlet/*=scmisWorker Now in your logfile, you have : [Mon May 24 10:10:02.781 2010] [8124:7912] [debug] jk_uri_worker_map.c (850): Attempting to map context URI '/servlet/*=scmisWorker' source 'uriworkermap' [Mon May 24 10:10:02.781 2010] [812
Re: Tomcat 6.0 always uses default host in multi-host config
I did not have Alias elements inside the Host elements. I did try both w/ and w/o www. so I didn't consider that an issue. After adding Alias elements, the problem persisted. There are ROOT.xml Contexts in both $CATALINA_HOME/conf/Catalina/firstdomain.com and $CATALINA_HOME/conf/Catalina/seconddomain.com Both are simple: On 5/25/2010 5:06 AM, Pid wrote: On 25/05/2010 10:44, Jeff wrote: I have two IP-based virtual hosts configured in a standalone Tomcat server. Each host has its own SSL certificate and keystore. Tomcat appears to behave as if only the default host is defined. When I hit seconddomain.com, Tomcat serves the ROOT app for firstdomain.com and writes to firstdomain.com access log. When I try https://seconddomain.com, the domain is untrusted, which I suspect is because Tomcat is using the cert for firstdomain. If I change the defaultHost value to seconddomain.com, the behavior flips and Tomcat serves the ROOT app for seconddomain.com when I try http://firstdomain.com. Are you requesting firstdomain.com or www.firstdomain.com? You have no Alias elements set inside the Host element. Also, are there any Context definitions? Either in META-INF/context.xml or e.g. tomcat/conf/Catalina/firstdomain.com/ p AFAIK, the server.xml configuration below should work. Any clues as to what is wrong? TIA * Tomcat 6.0.26 (stand alone) * Red Hat Enterprise 5 (Linux 2.6.18-164.15.1.el5 on x86_64) * IP-based virtual hosting * Tomcat running as daemon via JSVC * server.xml: 1. 2. 3. 7. 8. 15. 16. 23. 24. 28. 34. 35. 36. 40. 46. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Question on workers.properties file
Savoy, Melinda wrote: Ranier, I do not want the user to get prompted at all. I need this to work as a single sign-on (seamless to the user). Is that not possible? I had tested where when I got the prompt then I got the Domain\User name but I am needing to avoid the login dialog box altogether. Rainer got prompted because he did this test on a "loose" XP workstation, and he was not yet logged into any domain. If the workstation is part of a Windows domain, and the user already logged into the domain, there will be no extra prompt. What Rainer did, was confirm that when conditions are right for IIS to authenticate, and the setup is right for this authentication to be passed to Tomcat, it is, and the gerRemoteUser() returns the logged-in id. The issue you have, is in the basic setup of how some URLs are or are not passed to the "right" Tomcat worker. I believe you have one "virtual website" or whatever IIS calls it, too many, and that the URLs that are of interest here are not being passed through the channel you think, and therefore either IIS does not authenticate these SCIMIS URLs (and consequently does not pass this authentication to Tomcat). Can you tell us precisely : - which URLs should be authenticated (give some examples) - which sub-directories are present under the (tomcat-dir)/webapps directory (where (tomcat-dir) is the top of your Tomcat installation. Then we might be able to work out how the virtual websites and redirector should be configured to make this all work as it should. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Tomcat 6.0 always uses default host in multi-host config
2010/5/25 Jeff : > Any clues as to what is wrong? > 6. useIPVHosts="true" /> Thus you should use IP addresses as host names (or as aliases). > 8. 9. protocol="org.apache.coyote.http11.Http11Protocol" > 10. SSLEnabled="true" > 11. maxThreads="150" scheme="https" secure="true" > 12. clientAuth="false" sslProtocol="TLS" > 13. keystoreFile="/usr/share/tomcat/.keystore" > 14. keystorePass="changeit" /> Your HTTPS connectors do not have the "useIPVHosts" flag set. The above are just my guesses, but I hope that it helps. Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: stuck confused an need help please
hello and than you. I will spend next few hours fixing this. I need to fix hibernate catalog too as it is still trying to create tables in my test datatabase probably because catalogs are defined for test database in entity hbm.xml mappings? Do these mappings ususally go in the WEB-INF classes directory or can I put them with other metadata directly in WEB-INF? I am not too sure on the username being incorrect for my credentials defined in xml as I made sure to check for trailing and leading whitespace but will look again.I will also fix the error handle and path to error page Better get to work and many thanks ... :) From: "Mark Eggers" Sent: Tuesday, May 25, 2010 12:26 PM To: "Tomcat Users List" Subject: Re: stuck confused an need help please OK - I have a huge message that I'm going to cut and paste into this one, rather than finding the original and editing it online. I'm going to edit in place and try to point out some issues. I'll ask some questions along the way. I am trying to tweak my web application at thejarbar.org to be bug free. Currrntly here is an issue whn clicking the "tutorials button as you can view in your browser. I am getting some kind of exceptions as ell listed in the following stack trace and don't know how to osolve after days of trying. I have been getting mysql SELECT privilege denied exception even though user has all access to database. code deleted . . . although I recommend reworking in with try, catch, and finally blocks. Otherwise you WILL have connection leaks. As a first timer I would likw to know how a typical hibernate webapp is moved from development to production please have a look at the page if you have the time Use the same database names in both cases. Unfortunately, the URL will be different. One way is to parametrize your build to use different hibernate.cfg.xml files. You could also use Ant and appropriate build.properties files. Finally, you could spend some time with Maven. here is a log of all errors related to clicking that link ERROR main org.apache.catalina.core.ContainerBase.[Catalina] - Exception opening database connection java.sql.SQLException: Access denied for user ' yucca123_tom'@'localhost' (using password: YES) This looks like you cannot even connect. As others have pointed out, there is a space in front of the user name. I'm also a bit confused here. You say (further down or in another message), that you have the JDBC driver in your WEB-INF/lib folder, but this looks like you are using Tomcat's database pooling? If you're using Tomcat's database pooling, do not put the driver jars in WEB-INF/lib. If you're using Hibernate to control the connections, then don't put the driver jars in Tomcat's lib. See this link for a complete explanation of how to set everything up. http://wiki.apache.org/tomcat/TomcatHibernate The only way I was able to sort of reproduce your error was by changing the attribute resource="username" in my context.xml file to resource=" username". Adding a space to the username property in hibernate.cfg.xml caused no error. Fix your configuration files here. INFO main org.apache.catalina.core.StandardContext - The listener "com.sun.faces.config.ConfigureListener" is already configured for this context. The duplicate definition has been ignored. INFO main org.apache.catalina.core.StandardContext - The listener "com.sun.faces.config.ConfigureListener" is already configured for this context. The duplicate definition has been ignored. Are you using the database login ID to create tables? This is a very dangerous practice. One slip concerning SQL injection and you'll have a completely destroyed database. ERROR TP-Processor2 org.hibernate.tool.hbm2ddl.SchemaUpdate - Unsuccessful: create table jarbartest.user_roles (user_name varchar not null, role_name varchar not null, primary key (user_name, role_name)) Fix your HQL ERROR TP-Processor2 org.hibernate.tool.hbm2ddl.SchemaUpdate - You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'not null, role_name varchar not null, primary key (user_name, role_name))' at line 1 ERROR TP-Processor2 org.hibernate.tool.hbm2ddl.SchemaUpdate - Unsuccessful: create table jarbartest.usercomments (commentID int unsigned not null, commentMade varchar not null, dateMade datetime not null, flagged bit not null, page_id varchar not null, made_by varchar(20) not null, primary key (commentID)) Fix your HQL ERROR TP-Processor2 org.hibernate.tool.hbm2ddl.SchemaUpdate - You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'not null, dateMade datetime not null, flagged bit not null, page_id varchar not ' at line 1 ERROR TP-Processor2 org.hibernate.tool.hbm2ddl.SchemaUpdate - Unsuccessful: create table jarbartest.users (user_name varchar not null, first_name varchar not null, last_name varch
RE: too many open files
Hello, I had a look at my servlet, but it closes the connection after doing a request. Further it crashes by opening the nameserver. Thanks for your help. br, Markus >pri...@samea.de wrote: >> Hello, >> >> I have a problem with my little CORBA-Servlet. >> Allways I get this error: >> >> java.net.SocketException: Too many open files >> sun.nio.ch.Net.socket0(Native Method) >> sun.nio.ch.Net.socket(Net.java:97) >> sun.nio.ch.SocketChannelImpl.(SocketChannelImpl.java:84) >> >> sun.nio.ch.SelectorProviderImpl.openSocketChannel(SelectorProviderImpl.java:37) >> >> >> java.nio.channels.SocketChannel.open(SocketChannel.java:105) >> java.nio.channels.SocketChannel.open(SocketChannel.java:145) >> >> com.sun.corba.se.impl.transport.DefaultSocketFactoryImpl.createSocket(DefaultSocketFactoryImpl.java:60) >> >> >> com.sun.corba.se.impl.transport.SocketOrChannelConnectionImpl.(SocketOrChannelConnectionImpl.java:188) >> >> >> >> com.sun.corba.se.impl.transport.SocketOrChannelConnectionImpl.(SocketOrChannelConnectionImpl.java:218) >> >> >> >> com.sun.corba.se.impl.transport.SocketOrChannelContactInfoImpl.createConnection(SocketOrChannelContactInfoImpl.java:101) >> >> >> >> com.sun.corba.se.impl.protocol.CorbaClientRequestDispatcherImpl.beginRequest(CorbaClientRequestDispatcherImpl.java:152) >> >> >> >> com.sun.corba.se.impl.protocol.CorbaClientDelegateImpl.request(CorbaClientDelegateImpl.java:118) >> >> >> >> com.sun.corba.se.impl.protocol.CorbaClientDelegateImpl.is_a(CorbaClientDelegateImpl.java:211) >> >> >> org.omg.CORBA.portable.ObjectImpl._is_a(ObjectImpl.java:112) >> >> I use: Tomcat 6.0.26 on Linux JVM: 1.6.0_20-b02 >> >At first sight, it doesn't look as if this is a Tomcat issue. It seems >more of an issue within your servlet. >Is this servlet opening its own connection to something else? >If yes, then you probably forget to close this connection when you are >done with it, and they accumulate until the OS tells your process that >it has too many open sockets at the same time. > >Doing a "netstat -an" would probably provide more information. > >If you are under Unix/Linux, you can also try "lsof", but only studying >the options is already quite a challenge. > >- >To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org >For additional commands, e-mail: users-h...@tomcat.apache.org
Re: stuck confused an need help please
OK - I have a huge message that I'm going to cut and paste into this one, rather than finding the original and editing it online. I'm going to edit in place and try to point out some issues. I'll ask some questions along the way. > I am trying to tweak my web application at thejarbar.org to be bug > free. Currrntly here is an issue whn clicking the "tutorials button as > you can view in your browser. I am getting some kind of exceptions as > ell listed in the following stack trace and don't know how to osolve > after days of trying. I have been getting mysql SELECT privilege > denied exception even though user has all access to database. code deleted . . . although I recommend reworking in with try, catch, and finally blocks. Otherwise you WILL have connection leaks. > As a first timer I would likw to know how a typical hibernate webapp > is moved from development to production please have a look at the page > if you have the time Use the same database names in both cases. Unfortunately, the URL will be different. One way is to parametrize your build to use different hibernate.cfg.xml files. You could also use Ant and appropriate build.properties files. Finally, you could spend some time with Maven. > here is a log of all errors related to clicking that link > ERROR main org.apache.catalina.core.ContainerBase.[Catalina] - > Exception opening database connection java.sql.SQLException: Access > denied for user ' yucca123_tom'@'localhost' (using password: YES) This looks like you cannot even connect. As others have pointed out, there is a space in front of the user name. I'm also a bit confused here. You say (further down or in another message), that you have the JDBC driver in your WEB-INF/lib folder, but this looks like you are using Tomcat's database pooling? If you're using Tomcat's database pooling, do not put the driver jars in WEB-INF/lib. If you're using Hibernate to control the connections, then don't put the driver jars in Tomcat's lib. See this link for a complete explanation of how to set everything up. http://wiki.apache.org/tomcat/TomcatHibernate The only way I was able to sort of reproduce your error was by changing the attribute resource="username" in my context.xml file to resource=" username". Adding a space to the username property in hibernate.cfg.xml caused no error. Fix your configuration files here. > INFO main org.apache.catalina.core.StandardContext - The listener > "com.sun.faces.config.ConfigureListener" is already configured for this > context. The duplicate definition has been ignored. > INFO main org.apache.catalina.core.StandardContext - The listener > "com.sun.faces.config.ConfigureListener" is already configured for this > context. The duplicate definition has been ignored. Are you using the database login ID to create tables? This is a very dangerous practice. One slip concerning SQL injection and you'll have a completely destroyed database. > ERROR TP-Processor2 org.hibernate.tool.hbm2ddl.SchemaUpdate - > Unsuccessful: > create table jarbartest.user_roles (user_name varchar not null, > role_name > varchar not null, primary key (user_name, role_name)) Fix your HQL > ERROR TP-Processor2 org.hibernate.tool.hbm2ddl.SchemaUpdate - You have an > error in your SQL syntax; check the manual that corresponds to your MySQL > server version for the right syntax to use near 'not null, role_name > varchar > not null, primary key (user_name, role_name))' at line 1 > ERROR TP-Processor2 org.hibernate.tool.hbm2ddl.SchemaUpdate - Unsuccessful: > create table jarbartest.usercomments (commentID int unsigned not null, > commentMade varchar not null, dateMade datetime not null, flagged bit not > null, page_id varchar not null, made_by varchar(20) not null, primary key > (commentID)) Fix your HQL > ERROR TP-Processor2 org.hibernate.tool.hbm2ddl.SchemaUpdate - You have an > error in your SQL syntax; check the manual that corresponds to your MySQL > server version for the right syntax to use near 'not null, dateMade datetime > not null, flagged bit not null, page_id varchar not ' at line 1 > ERROR TP-Processor2 org.hibernate.tool.hbm2ddl.SchemaUpdate - Unsuccessful: > create table jarbartest.users (user_name varchar not null, first_name > varchar not null, last_name varchar not null, user_email varchar not null, > ip_address varchar not null, user_pass varchar not null, primary key > (user_name)) Fix your HQL > ERROR TP-Processor2 org.hibernate.tool.hbm2ddl.SchemaUpdate - You have an > error in your SQL syntax; check the manual that corresponds to your MySQL > server version for the right syntax to use near 'not null, first_name > varchar not null, last_name varchar not null, user_email va' at line 1 > ERROR TP-Processor2 org.hibernate.tool.hbm2ddl.SchemaUpdate - Unsuccessful: > alter table jarbartest.usercomments add index FKAA77CEBF792FED2F (made_by), > add constraint FKAA77CEBF792FED2F foreign key (made_by) references > jarbartest.users (user_name) This is assi
RE: Question on workers.properties file
Ranier, I do not want the user to get prompted at all. I need this to work as a single sign-on (seamless to the user). Is that not possible? I had tested where when I got the prompt then I got the Domain\User name but I am needing to avoid the login dialog box altogether. Thank you for taking the time to test and your help. -Original Message- From: Rainer Jung [mailto:rainer.j...@kippdata.de] Sent: Tuesday, May 25, 2010 5:14 AM To: Tomcat Users List Subject: Re: Question on workers.properties file On 25.05.2010 12:02, André Warnier wrote: > Melinda, > > from one of your previous posts : > > In IIS I have the following: > > Default Web Site - Anonymous access checked and Integrated Windows > authentication unchecked > Jakarta - virtual web site and Anonymous access checked and Integrated > Windows authentication unchecked > SCMIS - virtual web site and Anonymous access unchecked and Integrated > Windows authentication checked > > I believe the above is wrong : you should only have the first two. > The "SCMIS site" should in fact be a "sub-case" of the Jakarta "virtual > site". > All this is a bit confusing since we are dealing here with two classes > of products and two distinct vocabularies : the Microsoft vocabulary for > IIS (with "virtual websites" etc..), and the vocabulary for Tomcat. I did a small test on XP using IIS 5.1. I switched the default web site *and* the jakarta virtual web site *both* from "Anonymous" to "Anonymous" unchecked and "Integrated Windows" checked. With those setting I get prompted for User and PW by IIS and the Username is forwarded to Tomcat in the usual windows style notation MACHINE\USER. When setting tomcatAuthentication="false" on the AJP connector, a call to request.getRemoteUser() returns the string "MACHINE\USER" (MACHINE and USER replaced by my actual data). The redirector log contains Service protocol=HTTP/1.1 method=GET host=127.0.0.1 addr=127.0.0.1 name=localhost port=80 auth=NTLM user=MACHINE\USER uri=/user.jsp and the Tomcat access log contains the info too: 127.0.0.1 - MACHINE\USER [25/May/2010:12:09:03 +0200] "GET /user.jsp HTTP/1.1" 200 21 Regards, Rainer - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org The information contained in this message and any attachments is intended only for the use of the individual or entity to which it is addressed, and may contain information that is PRIVILEGED, CONFIDENTIAL, and exempt from disclosure under applicable law. If you are not the intended recipient, you are prohibited from copying, distributing, or using the information. Please contact the sender immediately by return e-mail and delete the original message from your system. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Question on workers.properties file
Andre, Just to get some clarification. When you say that SCMIS should be a "sub-case" of the Jakarta virtual website, are you saying that SCMIS should be a virtual website within the Jakarta virtual website? Just want to confirm my understanding. Thanks again for all your help. -Original Message- From: André Warnier [mailto:a...@ice-sa.com] Sent: Tuesday, May 25, 2010 5:02 AM To: Tomcat Users List Subject: Re: Question on workers.properties file Melinda, from one of your previous posts : In IIS I have the following: Default Web Site - Anonymous access checked and Integrated Windows authentication unchecked Jakarta - virtual web site and Anonymous access checked and Integrated Windows authentication unchecked SCMIS - virtual web site and Anonymous access unchecked and Integrated Windows authentication checked I believe the above is wrong : you should only have the first two. The "SCMIS site" should in fact be a "sub-case" of the Jakarta "virtual site". All this is a bit confusing since we are dealing here with two classes of products and two distinct vocabularies : the Microsoft vocabulary for IIS (with "virtual websites" etc..), and the vocabulary for Tomcat. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org The information contained in this message and any attachments is intended only for the use of the individual or entity to which it is addressed, and may contain information that is PRIVILEGED, CONFIDENTIAL, and exempt from disclosure under applicable law. If you are not the intended recipient, you are prohibited from copying, distributing, or using the information. Please contact the sender immediately by return e-mail and delete the original message from your system. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Question on workers.properties file
On 25.05.2010 12:14, Rainer Jung wrote: On 25.05.2010 12:02, André Warnier wrote: Melinda, from one of your previous posts : In IIS I have the following: Default Web Site - Anonymous access checked and Integrated Windows authentication unchecked Jakarta - virtual web site and Anonymous access checked and Integrated Windows authentication unchecked SCMIS - virtual web site and Anonymous access unchecked and Integrated Windows authentication checked I believe the above is wrong : you should only have the first two. The "SCMIS site" should in fact be a "sub-case" of the Jakarta "virtual site". All this is a bit confusing since we are dealing here with two classes of products and two distinct vocabularies : the Microsoft vocabulary for IIS (with "virtual websites" etc..), and the vocabulary for Tomcat. I did a small test on XP using IIS 5.1. I switched the default web site *and* the jakarta virtual web site *both* from "Anonymous" to "Anonymous" unchecked and "Integrated Windows" checked. With those setting I get prompted for User and PW by IIS and the Username is forwarded to Tomcat in the usual windows style notation MACHINE\USER. When setting tomcatAuthentication="false" on the AJP connector, a call to request.getRemoteUser() returns the string "MACHINE\USER" (MACHINE and USER replaced by my actual data). The redirector log contains Service protocol=HTTP/1.1 method=GET host=127.0.0.1 addr=127.0.0.1 name=localhost port=80 auth=NTLM user=MACHINE\USER uri=/user.jsp and the Tomcat access log contains the info too: 127.0.0.1 - MACHINE\USER [25/May/2010:12:09:03 +0200] "GET /user.jsp HTTP/1.1" 200 21 Post Scriptum: I neve got it straight, after which configuration changes you had to restart iIS. Keep in mind, that usually there are three services in the Windows service administration, that make up IIS. Something like "WWW publishing", "HTTP-SSL" and "IIS Admin". When you change config and it doesn't work, retry after stopping all of those and starting them again. Regards, Rainer - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Question on workers.properties file
On 25.05.2010 12:02, André Warnier wrote: Melinda, from one of your previous posts : In IIS I have the following: Default Web Site - Anonymous access checked and Integrated Windows authentication unchecked Jakarta - virtual web site and Anonymous access checked and Integrated Windows authentication unchecked SCMIS - virtual web site and Anonymous access unchecked and Integrated Windows authentication checked I believe the above is wrong : you should only have the first two. The "SCMIS site" should in fact be a "sub-case" of the Jakarta "virtual site". All this is a bit confusing since we are dealing here with two classes of products and two distinct vocabularies : the Microsoft vocabulary for IIS (with "virtual websites" etc..), and the vocabulary for Tomcat. I did a small test on XP using IIS 5.1. I switched the default web site *and* the jakarta virtual web site *both* from "Anonymous" to "Anonymous" unchecked and "Integrated Windows" checked. With those setting I get prompted for User and PW by IIS and the Username is forwarded to Tomcat in the usual windows style notation MACHINE\USER. When setting tomcatAuthentication="false" on the AJP connector, a call to request.getRemoteUser() returns the string "MACHINE\USER" (MACHINE and USER replaced by my actual data). The redirector log contains Service protocol=HTTP/1.1 method=GET host=127.0.0.1 addr=127.0.0.1 name=localhost port=80 auth=NTLM user=MACHINE\USER uri=/user.jsp and the Tomcat access log contains the info too: 127.0.0.1 - MACHINE\USER [25/May/2010:12:09:03 +0200] "GET /user.jsp HTTP/1.1" 200 21 Regards, Rainer - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Tomcat 6.0 always uses default host in multi-host config
On 25/05/2010 10:44, Jeff wrote: > I have two IP-based virtual hosts configured in a standalone Tomcat > server. Each host has its own SSL certificate and keystore. Tomcat > appears to behave as if only the default host is defined. When I hit > seconddomain.com, Tomcat serves the ROOT app for firstdomain.com and > writes to firstdomain.com access log. When I try > https://seconddomain.com, the domain is untrusted, which I suspect is > because Tomcat is using the cert for firstdomain. > > If I change the defaultHost value to seconddomain.com, the behavior > flips and Tomcat serves the ROOT app for seconddomain.com when I try > http://firstdomain.com. Are you requesting firstdomain.com or www.firstdomain.com? You have no Alias elements set inside the Host element. Also, are there any Context definitions? Either in META-INF/context.xml or e.g. tomcat/conf/Catalina/firstdomain.com/ p > AFAIK, the server.xml configuration below should work. Any clues as to > what is wrong? > > TIA > > * Tomcat 6.0.26 (stand alone) > * Red Hat Enterprise 5 (Linux 2.6.18-164.15.1.el5 on x86_64) > * IP-based virtual hosting > * Tomcat running as daemon via JSVC > * server.xml: > >1. >2. >3. 4. connectionTimeout="2" >5. redirectPort="443" >6. useIPVHosts="true" /> >7. >8. 9. protocol="org.apache.coyote.http11.Http11Protocol" > 10. SSLEnabled="true" > 11. maxThreads="150" scheme="https" secure="true" > 12. clientAuth="false" sslProtocol="TLS" > 13. keystoreFile="/usr/share/tomcat/.keystore" > 14. keystorePass="changeit" /> > 15. > 16.17. protocol="org.apache.coyote.http11.Http11Protocol" > 18. SSLEnabled="true" > 19. maxThreads="150" scheme="https" secure="true" > 20. clientAuth="false" sslProtocol="TLS" > 21. keystoreFile="/usr/share/tomcat/.keystore2" > 22. keystorePass="changeit" /> > 23. > 24.25. appBase="/home/websites/firstdomain.com/webapps" > 26. unpackWARs="true" > 27. autoDeploy="true"> > 28.29. directory="/home/websites/firstdomain.com/logs" > 30. prefix="firstdomain.com_access." > 31. suffix=".log" > 32. pattern="common" > 33. resolveHosts="false"/> > 34. > 35. > 36.37. appBase="/home/websites/seconddomain.com/webapps" > 38. unpackWARs="true" > 39. autoDeploy="true"> > 40.41. directory="/home/websites/seconddomain.com/logs" > 42. prefix="seconddomain.com_access." > 43. suffix=".log" > 44. pattern="common" > 45. resolveHosts="false" /> > 46. > > - > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > signature.asc Description: OpenPGP digital signature
Re: Question on workers.properties file
Melinda, from one of your previous posts : In IIS I have the following: Default Web Site - Anonymous access checked and Integrated Windows authentication unchecked Jakarta - virtual web site and Anonymous access checked and Integrated Windows authentication unchecked SCMIS - virtual web site and Anonymous access unchecked and Integrated Windows authentication checked I believe the above is wrong : you should only have the first two. The "SCMIS site" should in fact be a "sub-case" of the Jakarta "virtual site". All this is a bit confusing since we are dealing here with two classes of products and two distinct vocabularies : the Microsoft vocabulary for IIS (with "virtual websites" etc..), and the vocabulary for Tomcat. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Too many open files
On 25/05/2010 10:26, pri...@samea.de wrote: > Hello, > > I have a problem with my little CORBA-Servlet. > Allways I get this error: > > java.net.SocketException: Too many open files > sun.nio.ch.Net.socket0(Native Method) > sun.nio.ch.Net.socket(Net.java:97) > sun.nio.ch.SocketChannelImpl.(SocketChannelImpl.java:84) > > sun.nio.ch.SelectorProviderImpl.openSocketChannel(SelectorProviderImpl.java:37) > > java.nio.channels.SocketChannel.open(SocketChannel.java:105) > java.nio.channels.SocketChannel.open(SocketChannel.java:145) > > com.sun.corba.se.impl.transport.DefaultSocketFactoryImpl.createSocket(DefaultSocketFactoryImpl.java:60) > > com.sun.corba.se.impl.transport.SocketOrChannelConnectionImpl.(SocketOrChannelConnectionImpl.java:188) > > > com.sun.corba.se.impl.transport.SocketOrChannelConnectionImpl.(SocketOrChannelConnectionImpl.java:218) > > > com.sun.corba.se.impl.transport.SocketOrChannelContactInfoImpl.createConnection(SocketOrChannelContactInfoImpl.java:101) > > > com.sun.corba.se.impl.protocol.CorbaClientRequestDispatcherImpl.beginRequest(CorbaClientRequestDispatcherImpl.java:152) > > > com.sun.corba.se.impl.protocol.CorbaClientDelegateImpl.request(CorbaClientDelegateImpl.java:118) > > > com.sun.corba.se.impl.protocol.CorbaClientDelegateImpl.is_a(CorbaClientDelegateImpl.java:211) > > org.omg.CORBA.portable.ObjectImpl._is_a(ObjectImpl.java:112) > > I use: Tomcat 6.0.26 on Linux JVM: 1.6.0_20-b02 > > Thanks for your help. Please start a completely new email, rather than replying to an existing one and editing the subject & body - which is called thread-hijacking. p > br, > > Markus > > - > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > signature.asc Description: OpenPGP digital signature
Re: Too many open files
pri...@samea.de wrote: Hello, I have a problem with my little CORBA-Servlet. Allways I get this error: java.net.SocketException: Too many open files sun.nio.ch.Net.socket0(Native Method) sun.nio.ch.Net.socket(Net.java:97) sun.nio.ch.SocketChannelImpl.(SocketChannelImpl.java:84) sun.nio.ch.SelectorProviderImpl.openSocketChannel(SelectorProviderImpl.java:37) java.nio.channels.SocketChannel.open(SocketChannel.java:105) java.nio.channels.SocketChannel.open(SocketChannel.java:145) com.sun.corba.se.impl.transport.DefaultSocketFactoryImpl.createSocket(DefaultSocketFactoryImpl.java:60) com.sun.corba.se.impl.transport.SocketOrChannelConnectionImpl.(SocketOrChannelConnectionImpl.java:188) com.sun.corba.se.impl.transport.SocketOrChannelConnectionImpl.(SocketOrChannelConnectionImpl.java:218) com.sun.corba.se.impl.transport.SocketOrChannelContactInfoImpl.createConnection(SocketOrChannelContactInfoImpl.java:101) com.sun.corba.se.impl.protocol.CorbaClientRequestDispatcherImpl.beginRequest(CorbaClientRequestDispatcherImpl.java:152) com.sun.corba.se.impl.protocol.CorbaClientDelegateImpl.request(CorbaClientDelegateImpl.java:118) com.sun.corba.se.impl.protocol.CorbaClientDelegateImpl.is_a(CorbaClientDelegateImpl.java:211) org.omg.CORBA.portable.ObjectImpl._is_a(ObjectImpl.java:112) I use: Tomcat 6.0.26 on Linux JVM: 1.6.0_20-b02 At first sight, it doesn't look as if this is a Tomcat issue. It seems more of an issue within your servlet. Is this servlet opening its own connection to something else? If yes, then you probably forget to close this connection when you are done with it, and they accumulate until the OS tells your process that it has too many open sockets at the same time. Doing a "netstat -an" would probably provide more information. If you are under Unix/Linux, you can also try "lsof", but only studying the options is already quite a challenge. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Tomcat 6.0 always uses default host in multi-host config
I have two IP-based virtual hosts configured in a standalone Tomcat server. Each host has its own SSL certificate and keystore. Tomcat appears to behave as if only the default host is defined. When I hit seconddomain.com, Tomcat serves the ROOT app for firstdomain.com and writes to firstdomain.com access log. When I try https://seconddomain.com, the domain is untrusted, which I suspect is because Tomcat is using the cert for firstdomain. If I change the defaultHost value to seconddomain.com, the behavior flips and Tomcat serves the ROOT app for seconddomain.com when I try http://firstdomain.com. AFAIK, the server.xml configuration below should work. Any clues as to what is wrong? TIA * Tomcat 6.0.26 (stand alone) * Red Hat Enterprise 5 (Linux 2.6.18-164.15.1.el5 on x86_64) * IP-based virtual hosting * Tomcat running as daemon via JSVC * server.xml: 1. 2. 3. 7. 8. 15. 16. 23. 24. 28. 34. 35. 36. 40. 46. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: mod_jk stability issues
On 24.05.2010 23:36, LES wrote: I am having some trouble keeping a mod_jk setup stable. At this point, I feel like I am too far into trial and error mode and would like some help figuring out how to identify the problem. My current setup involves, two linux (RHEL 5) server each running two tomcat instances (6.0.20). A third RHEL 5 box is running apache (2.2.3) with mod_jk(1.2.28). I am using terracotta to "cluster" the tomcat sessions. The problem that I am having is that under small load (and unfortunately, intermittently), I get random nodes that produce errors. Typically these errors indicate that mod_jk can no longer contact tomcat (see excerpts below). In most cases, the the user request just hangs (never returns). So, it also appears that the errors are not causing a session failover -- though I need to confirm that again after my recent round of changes. In most cases, these nodes that are in error recover on their own. However, during the failure event, I get a bunch of unhappy users. I am hoping to find a way to make the nodes more stable and then address the fail-over aspect. I have tried different mod_jk parameters and think I have settled on a decent set of them. I have all of the garbage collection information logging out and do not seem to have any gc events that are taking longer than the request timeout. I am gathering jvm and os stats and do not see a hardware constraint (memory, cpu, io). So, I am a bit of a loss on where to look. I am pasting in all of the relevant files/excerpts that I can think of. I appreciate any advice on what additional data to gather to shed light on this problem (outright solutions are welcome too :)). Please let me know if there is any other information that would be helpful. Thanx, LES * workers.properties ** # Define 1 real worker using ajp13 worker.list=lb,jkstatus,cas # Set properties for worker1 (ajp13) worker.template.type=ajp13 worker.template.retries=4 worker.template.lbfactor=1 worker.template.reply_timeout=30 worker.template.max_reply_timeouts=4 worker.template.connection_pool_timeout=60 worker.template.ping_mode=A #worker.template.socket_timeout=10 This is in milliseconds, I guess you want 1: worker.template.socket_connect_timeout=10 worker.tomcat01-instance1.reference=worker.template worker.tomcat01-instance1.host=tomcat01.barnhardt.local worker.tomcat01-instance1.port=8009 worker.tomcat01-instance2.reference=worker.template worker.tomcat01-instance2.host=tomcat01.barnhardt.local worker.tomcat01-instance2.port=18009 worker.tomcat02-instance1.reference=worker.template worker.tomcat02-instance1.host=tomcat02.barnhardt.local worker.tomcat02-instance1.port=8009 worker.tomcat02-instance2.reference=worker.template worker.tomcat02-instance2.host=tomcat02.barnhardt.local worker.tomcat02-instance2.port=18009 worker.cas.type=ajp13 worker.cas.host=localhost worker.cas.port=8009 worker.cas.lbfactor=1 worker.cas.connection_pool_timeout=600 worker.cas.socket_keepalive=1 I don't like the raw socket_timeout, but well ... worker.cas.socket_timeout=60 # Set properties for lb which use the other workers worker.lb.type=lb #worker.lb.method=B worker.lb.sticky_session=True worker.lb.balance_workers=tomcat01-instance1,tomcat01-instance2,tomcat02-instance1,tomcat02-instance2 # Define a 'jkstatus' worker using status worker.jkstatus.type=status *** ** Errors from log *** //This particular error(info) seems to happen constantly - is it a normal operational thing? Yes, it is not an error, it is an "info2 message. It simply says that all connections from your apache process to tomcat were closed and a fresh one had to be opened. [Mon May 24 10:22:56 2010] [26131:4045374208] [info] ajp_send_request::jk_ajp_common.c (1496): (tomcat02-instance2) all endpoints are disconnected, detected by connect check (1), cping (0), send (0) [Mon May 24 11:55:21 2010] [2711:4045374208] [info] ajp_send_request::jk_ajp_common.c (1496): (tomcat02-instance1) all endpoints are disconnected, detected by connect check (1), cping (0), send (0) [Mon May 24 13:08:25 2010] [27439:4045374208] [info] ajp_send_request::jk_ajp_common.c (1496): (tomcat01-instance1) all endpoints are disconnected, detected by connect check (1), cping (0), send (0) So I'd say somethoing gets stuck in your tomcat (likely: your webapp) and mod_jk detects that by use of the reply timeout. Since you have a 5 minute reply timeout, chances are good to find those request and the cause for their hanging or excessively long response time by use of - a tomcat access log with an improved patern containing "%D" and if your Tomcat is recent enough also "%I" - and regular thread dumps This error happens intermittently and seems to cause some the the cluster problems I mentioned above [Mon May 24 07:19:21 2010] [27432:4045374208] [error] ajp_get_reply::jk_ajp_common.c (1926): (tomcat01-instance2)
Too many open files
Hello, I have a problem with my little CORBA-Servlet. Allways I get this error: java.net.SocketException: Too many open files sun.nio.ch.Net.socket0(Native Method) sun.nio.ch.Net.socket(Net.java:97) sun.nio.ch.SocketChannelImpl.(SocketChannelImpl.java:84) sun.nio.ch.SelectorProviderImpl.openSocketChannel(SelectorProviderImpl.java:37) java.nio.channels.SocketChannel.open(SocketChannel.java:105) java.nio.channels.SocketChannel.open(SocketChannel.java:145) com.sun.corba.se.impl.transport.DefaultSocketFactoryImpl.createSocket(DefaultSocketFactoryImpl.java:60) com.sun.corba.se.impl.transport.SocketOrChannelConnectionImpl.(SocketOrChannelConnectionImpl.java:188) com.sun.corba.se.impl.transport.SocketOrChannelConnectionImpl.(SocketOrChannelConnectionImpl.java:218) com.sun.corba.se.impl.transport.SocketOrChannelContactInfoImpl.createConnection(SocketOrChannelContactInfoImpl.java:101) com.sun.corba.se.impl.protocol.CorbaClientRequestDispatcherImpl.beginRequest(CorbaClientRequestDispatcherImpl.java:152) com.sun.corba.se.impl.protocol.CorbaClientDelegateImpl.request(CorbaClientDelegateImpl.java:118) com.sun.corba.se.impl.protocol.CorbaClientDelegateImpl.is_a(CorbaClientDelegateImpl.java:211) org.omg.CORBA.portable.ObjectImpl._is_a(ObjectImpl.java:112) I use: Tomcat 6.0.26 on Linux JVM: 1.6.0_20-b02 Thanks for your help. br, Markus - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: stuck confused an need help please
--- On Tue, 5/25/10 at 12:20 AM, Yucca Nel wrote: > I know what the exception is saying but I can only swear > that I am providing correct credentials. > Did you notice: > There is leading white space in the user name: ' yucca123_tom'. - Bob - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: stuck confused an need help please
Hello and thank you, one user (yucca123_tom) for container managed security for tomcat and another for my application using hibernate (yucca123_hiber) I keep making sure that I provide ALL privileges and correct credentials in metedata but see same results? I know what the exception is saying but I can only swear that I am providing correct credentials. -- From: "Bob Hall" Sent: Tuesday, May 25, 2010 9:15 AM To: "Tomcat Users List" Subject: Re: stuck confused an need help please --- On Mon, 5/24/10 at 11:52 PM, Yucca Nel wrote: Could someone please help me understand what thia stack trace is saying? catalina.log File Type: ASCII English text, with very long lines INFO main org.apache.catalina.startup.Catalina - Initialization processed in 875 ms INFO main org.apache.catalina.core.StandardService - Starting service Catalina INFO main org.apache.catalina.core.StandardEngine - Starting Servlet Engine: Apache Tomcat/6.0.20 ERROR main org.apache.catalina.core.ContainerBase.[Catalina] - Exception opening database connection java.sql.SQLException: Access denied for user ' yucca123_tom'@'localhost' (using password: YES) There is leading white space in the user name: ' yucca123_tom'. There are also errors in your DDL SQL that will need to be fixed after your app is able to connect to the DB. ERROR TP-Processor2 org.hibernate.tool.hbm2ddl.SchemaUpdate - ALTER command denied to user 'yucca123_hiber'@'localhost' for table 'usercomments' ERROR TP-Processor2 org.hibernate.util.JDBCExceptionReporter - SELECT command denied to user 'yucca123_hiber'@'localhost' for table 'usercomments' Don't know why there are two DB users in play: yucca123_tom and yucca123_hiber Apparently, the latter was able to connect to MySQL but could not access a table. Are you sure the table exists? Did you grant select on the table to yucca123_hiber? - Bob - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: stuck confused an need help please
--- On Mon, 5/24/10 at 11:52 PM, Yucca Nel wrote: > Could someone please help me understand what thia stack > trace is saying? > > catalina.log > File Type: ASCII English text, with very long lines > > INFO main org.apache.catalina.startup.Catalina - > Initialization processed in 875 ms > INFO main org.apache.catalina.core.StandardService - > Starting service Catalina > INFO main org.apache.catalina.core.StandardEngine - > Starting Servlet Engine: Apache Tomcat/6.0.20 > ERROR main > org.apache.catalina.core.ContainerBase.[Catalina] - > Exception opening database connection > java.sql.SQLException: Access denied for user ' yucca123_tom'@'localhost' > (using password: YES) There is leading white space in the user name: ' yucca123_tom'. There are also errors in your DDL SQL that will need to be fixed after your app is able to connect to the DB. > ERROR TP-Processor2 org.hibernate.tool.hbm2ddl.SchemaUpdate > - ALTER command denied to user 'yucca123_hiber'@'localhost' > for table 'usercomments' > ERROR TP-Processor2 > org.hibernate.util.JDBCExceptionReporter - SELECT command > denied to user 'yucca123_hiber'@'localhost' for table > 'usercomments' Don't know why there are two DB users in play: yucca123_tom and yucca123_hiber Apparently, the latter was able to connect to MySQL but could not access a table. Are you sure the table exists? Did you grant select on the table to yucca123_hiber? - Bob - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
