date:20100804

On 04/08/2010 10:49, B. Balakrishna Rao wrote:
 Hi,
 
 We are using Tomcathttp://www.coderanch.com/forums/f-56/Tomcat 6.0.18 on 
 Linux environment(Red hat Linux) for our production.
 We have enabled SSL by deploying SSL certificates. We observed that, over a 
 period of time, the memory consumption is increasing and we are facing 
 serious performance issues.
 I have taken a heap dump and analyzed it using 
 Eclipsehttp://www.myeclipseide.com/module-htmlpages-display-pid-1.html 
 Memory analyzer. What I found was, com.sun.net.ssl.internal.ssl.SSLSocketImpl 
 objects are never Garbage collected.
 The leak report by Memory analyzer is as follows:
 2,996 instances of com.sun.net.ssl.internal.ssl.SSLSocketImpl, loaded by 
 system class loader occupy 219,843,760 (62.76%) bytes
 Upon drilling down, these objects are being held by finalizer method of GC.
 I have got the following similar link:
 http://forums.sun.com/thread.jspa?threadID=5266266
 
 Can anybody tell me if there is any memory leak issues exists with Tomcat 
 6.0.18? I read somewhere that, the memory leak issue with SSL was fixed on 
 6.0.20.

Have you tried reading the changelog?

Mark



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Memory leak in using SSL with Tomcat 6.0.18

On 04/08/2010 11:54, B. Balakrishna Rao wrote:
 Hi Mark,
 
 Thanks for your reply.
 I tried reading the change log. It appears that in Tomcat 6.0.20 there is a 
 fix related to memory leak using SSL.
 What I am thinking is that if this is the issue with the Tomcat 6.0.18 or an 
 issue with my application. 
 Can you confirm if there is a memory leak issue exists in using SSL with 
 tomcat 6.0.18 on Linux environment which similar to my problem? It helps me 
 concentrate on upgrading the Tomcat in my production.
 Please let me know if you need any further details about my environment.

I'm pretty sure the fix you are referring to was fixed in 6.0.21, not
6.0.20.

I suggest you read the bug report and compare the details there to what
you are seeing to determine if they are the same.

Mark



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Memory leak in using SSL with Tomcat 6.0.18

Hi Mark,

I am trying to apply the patch that is available for the fix below:
https://issues.apache.org/bugzilla/show_bug.cgi?id=47744#c2

However, after giving the below command, putty simply hangs.

patch sslsession-memory-fix.patch

I am using Red hat Linux with Apache Tomcat 6.0.18.
Another issue: Do I need to update the tomcat-coyote.jar along with this patch?
Please refer the below text from the above link:
 If you apply the patch, update tomcat-coyote.jar..

Can you help me on this please?

Thanks,
Bala.



-Original Message-
From: Mark Thomas [mailto:ma...@apache.org]
Sent: Wednesday, August 04, 2010 4:28 PM
To: Tomcat Users List
Subject: Re: Memory leak in using SSL with Tomcat 6.0.18

On 04/08/2010 11:54, B. Balakrishna Rao wrote:
 Hi Mark,

 Thanks for your reply.
 I tried reading the change log. It appears that in Tomcat 6.0.20 there is a 
 fix related to memory leak using SSL.
 What I am thinking is that if this is the issue with the Tomcat 6.0.18 or an 
 issue with my application.
 Can you confirm if there is a memory leak issue exists in using SSL with 
 tomcat 6.0.18 on Linux environment which similar to my problem? It helps me 
 concentrate on upgrading the Tomcat in my production.
 Please let me know if you need any further details about my environment.

I'm pretty sure the fix you are referring to was fixed in 6.0.21, not
6.0.20.

I suggest you read the bug report and compare the details there to what
you are seeing to determine if they are the same.

Mark



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


DISCLAIMER
==
This e-mail may contain privileged and confidential information which is the 
property of Persistent Systems Ltd. It is intended only for the use of the 
individual or entity to which it is addressed. If you are not the intended 
recipient, you are not authorized to read, retain, copy, print, distribute or 
use this message. If you have received this communication in error, please 
notify the sender and delete all copies of this message. Persistent Systems 
Ltd. does not accept any liability for virus infected mails.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Memory leak in using SSL with Tomcat 6.0.18

On 04/08/2010 13:40, B. Balakrishna Rao wrote:
 Hi Mark,
 
 I am trying to apply the patch that is available for the fix below:
 https://issues.apache.org/bugzilla/show_bug.cgi?id=47744#c2

Why? What makes you think that is the problem you are seeing?

 However, after giving the below command, putty simply hangs.
 
 patch sslsession-memory-fix.patch

Impossible to comment given the lack of context information provided.

 I am using Red hat Linux with Apache Tomcat 6.0.18. 
 Another issue: Do I need to update the tomcat-coyote.jar along with this 
 patch?
 Please refer the below text from the above link:
  If you apply the patch, update tomcat-coyote.jar..
 
 Can you help me on this please?

Given your difficulties in applying patch, I suspect you will have
difficulties building the source too. Assuming this patch fixes the
issue you are seeing (and I have yet to see any evidence that it will)
why not just use a binary that already includes the fix?

Mark



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Tomcat 6 does not respond or freeze after startup

 From: T. Gau [mailto:t...@normad.de]
 Subject: Re: Tomcat 6 does not respond or freeze after startup

 my Windows Firewall is 'Inactive'. Instead I'm using the Ashampoo
 Firewall FREE. But I could not connect to Tomcat via telnet even 
 if I stop this firewall, too.

With Tomcat running, what does netstat -anop tcp show?  The Tomcat process 
should be listening on ports 8005, 8009, and 8080, as in the following:

  TCP  0.0.0.0:80090.0.0.0:0  LISTENING  4720
  TCP  0.0.0.0:80800.0.0.0:0  LISTENING  4720
  TCP  127.0.0.1:8005  0.0.0.0:0  LISTENING  4720

(There should also be one other port Tomcat is listening on, but its value 
varies.)

If all of that looks normal, then I'd try running Tomcat on another machine, 
preferably one with a clean installation of Windows.

 - Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: few slow requests

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Peter,

On 8/4/2010 3:33 AM, Peter Buning wrote:
Hi Chris,

Am 03.08.2010 22:08, schrieb Christopher Schultz:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Peter,

On 8/3/2010 10:55 AM, Peter Buning wrote:

Over what period of time? How often do the 106 and/or 10 responses
occur? You may be encountering some simple thing like the OS wanting to
get some of its own work done occasionally.

Try using 'sar' (you may have to install it... I don't think Debian
installs it by default).

the 106 ms is logged in the access log file. We used the %D pattern for
the request time in millis.

The source code for org.apache.catalina.valves.AccessLogValve is
available here:

http://svn.apache.org/repos/asf/tomcat/tc5.5.x/tags/TOMCAT_5_5_30/container/catalina/src/share/org/apache/catalina/valves/AccessLogValve.java

Look at the invoke menu.

Of course, I meant method, not menu. ;)

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkxZbXAACgkQ9CaO5/Lv0PBmWwCfaysShxyRIbreEALGSBAYnAWh
aBkAmQGaJBjNG+6zRF1dhgSH92z5JoKN
=CcYD
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Access XML file inside the Java File

 From: Chandana Napagoda [mailto:cnapag...@gmail.com]
 Subject: Access XML file inside the Java File

 I have Domain class it need to read file and need to return 
 File object.

Bad design.  When running inside an app server, there's no guarantee that you 
have any access to the underlying file system, other than a container-provided 
scratch area.  Much better to use ServletContext.getResourceAsStream().

 - Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.

[BSF,Tomcat] ad JSR-223 taglib for Tomcat ... (Re: Question ad alternative of BSF taglib in Tomcat ? [Fwd: In the move of some taglibs to Tomcat, the BSF taglib got retired]

2010-08-04 Thread Rony G. Flatscher (Apache)

Resending attempt.


Hi Henri,

relating to our conversation of last fall, I just wanted to point out
that Mr. Ryabenkiy posts of today (copied at the end to inform the
BSF-community) fulfills the idea of creating a jsr-223 taglib for Tomcat.

He applies the Apache License 2.0 to his work, such that it can be taken
on by ASF.

The Quercus/Resin
http://www.caucho.com/resin-3.0/quercus/tutorial/module/index.xtp
package Mr. Ryabenkiy refers to is used in his work as proof of concept
to use PHP scripts in Tomcat served JSP (which might be quite
interesting for PHP-acquantied programmers, who have no expert knowledge
of Java) !
(He also uses the scripting language ooRexx as a proof of concept for
which he wrote a JSR-223 engine.)

In effect all scripting languages can be used, that adhere to Java 6
scripting a.k.a. JSR-223 with his taglib to create scripts for JSP. It
would even be possible to use multiple scripts in different languages
for the same JSP.

It will (again) allow for JSP and Java what ASP allows for the MS world.

---rony



On 13.10.2009 08:17, Rony G. Flatscher (Apache) wrote:
 Henri Yandell wrote:
   
 Not sure where Christopher's email was, but:

 If there is any interest in a retired taglib, I'm all for it being
 merged into the Extended Taglib. Currently I plan to consider
 replacing the functionality from String Taglib (mostly as EL
 functions), Log Taglib and JNDI Taglib (perhaps).

 It sounds like BSF taglib, given it has only the two tags, might be
 very interesting if a dependency on BSF itself can be avoided (ie:
 base it on javax.script).
   
 
 +1

 If you include just the taglib (the JSR-223 to be created), then its
 usage would be restricted to Java 6 and up, such that current Java 1.4
 and 1.5 installations in the field could not take advantage of it.

 To cover Java 1.4 and 1.5 BSF 3.0 got created, which implements the
 javax.script specifications. If BSF 3.0 is included then the scripting
 support will be available from Java 1.4 on. Starting with Java 6 the
 Java 6 javax.script would prevail due to using its own package by
 placement of the classes.

 ---rony


 cut here, Mr. Ryabenskiy post of 2010-08-04
--
 Original Message 
Subject:New taglib to script JSP pages in languages other than Java
Date:   Wed, 4 Aug 2010 09:49:20 +0200
From:   Stanislav Ryabenkiy stani.ryaben...@gmail.com
To: taglibs-u...@tomcat.apache.org, d...@tomcat.apache.org



Hello,

as I haven't posted here before, I hope I won't make a mistake by
posting to both of these lists. IMHO, this announcement is relevant to
both communities.

This is to inform the taglibs-user and tomcat-dev communities of a
small new taglib which allows to script JSP pages in laqnguages other
than Java. Scriptlets and expressions using the taglib have access to
the same implicit objects normal JSP scriptlets have access to.
Internally, the taglib only depends on the javax.script interface
defined as part of JSR-223 and included in Java 6 onwards, although it
can also work with other implementations of javax.script on earlier
version of Java (such as, for instance, Bean Scripting Framework 3).
So for people who want to include scripts in their JSP pages, any
scripting language that exposes a javax.script interface can be used.

Given the nature of the project, and the existence of partial
alternatives at least for some languages (such as Quercus/Resin), I
expect interest to be quite small (if any), but if there's any
interest it could be included in the newly re-organized Extended
Taglib. Ideally, I would want Tomcat to support this kind of
functionality natively via the language attribute of the page
directive, but the taglib at least offers a simpler and
container-independent solution.

Source code can be found at:
http://stani.ryabenkiy.com/downloads/releases/script-taglib-1.0.tar.gz
The related thesis paper (with source code in appendix):
http://stani.ryabenkiy.com/downloads/papers/scripting_thesis.pdf

Kind Regards,
Stani

Re: Access XML file inside the Java File

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Chandra,

On 8/4/2010 6:28 AM, Chandana Napagoda wrote:
 I have Domain class it need to read file and need to return File object.
 When I'm getting my file object. My domain class always try to access in Bin
 (D:\Share\apache-tomcat-6.0.20\bin\connections.xml)

Maybe you have the path wrong. Maybe not. What does your code look like?

That's kind of rhetorical, since I know it looks like this:

InputStream in = new FileInputStream(connections.xml);
...

...but post your code, anyway.

 It it possible to access read file inside the War file?

Yes. Use the Servlet API to get access to your webapp's resources
instead of trying to read the disk directly. Hint: look at methods in
the ServletContext class.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkxZbvgACgkQ9CaO5/Lv0PAWcACgt9NBV9Y4Ljhc7HLDyyHJ6ksX
xJ8AoLjWH1T02loHtAAW0zOyrwKzPGp2
=ssJ1
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Tomcat 6 does not respond or freeze after startup

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

T.,

On 8/3/2010 5:46 PM, T. Gau wrote:
 @IPv6:
 As fas as I know, I'm not running IPv6. IPconfig doesn't show any IPv6
 specific.

Sure? From your own log file:

INFO: Loaded APR based Apache Tomcat Native library 1.1.20.
03.08.2010 21:33:41 org.apache.catalina.core.AprLifecycleListener init
INFO: APR capabilities: IPv6 [true], sendfile [true], accept filters
[false], random [true].

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkxZcREACgkQ9CaO5/Lv0PDATgCeJgblMBp8yvyNzRZHFxnf3KbK
6RMAmwctcSbfeOFYKVpvFEk3KzrB5onb
=4/BI
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Rewrite URLs inside HTML pages?

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Leon,

On 8/3/2010 2:45 AM, Leon Kolchinsky wrote:
 Thanks for your help Rainer/Felix,
 
 I've tested several options including mod_substitute and mod_sed and it
 seems that mod_substitute is a way to go.

Yuk: why go through the kludge of re-writing the pages when simple
configuration can make it so the pages are correct in the first place?

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkxZciMACgkQ9CaO5/Lv0PBqtQCgqVkecwM/GcfFnpZY4CeQ5M+g
weIAnjBkSVjFNpyHaRJ6b58XRXjwIu41
=x21u
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Issues with org.apache.catalina.connector.Request

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Yogeshwar,

On 8/2/2010 10:23 AM, Yogeshwar Srikrishnan wrote:
 I Keep getting this exception once in a while.The code line shows
 Object listeners[] = context.getApplicationEventListeners();
 The version of apache that we use 5.5.23.

 java.lang.NullPointerException
 at
 org.apache.catalina.connector.Request.setAttribute(Request.java:1382)
 at
 org.apache.catalina.connector.RequestFacade.setAttribute(RequestFacade.java:501)

 
 The value of context is null.Has anybody faced this issue?This doesn't
 happen all the time.

Where is the rest of the stack trace? This smacks of a cached request
object, which is totally illegal.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkxZcl0ACgkQ9CaO5/Lv0PCb5ACeMbDFyf5p/DkDcsUbnIDL9SvT
W08An05ENoNlgHY//4LaI47/f3X/7jeS
=VtwH
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Tomcat 6 does not respond or freeze after startup

 From: Christopher Schultz [mailto:ch...@christopherschultz.net]
 Subject: Re: Tomcat 6 does not respond or freeze after startup

  As fas as I know, I'm not running IPv6. IPconfig doesn't show 
  any IPv6 specific.

 Sure? From your own log file:

 INFO: APR capabilities: IPv6 [true], sendfile [true], accept filters
 [false], random [true].

I believe that the IPv6 [true] for APR shown above means only that APR was 
built with IPv6 support, not that IPv6 is actually available.

 - Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.

Re: Caching of static content

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

John,

On 8/2/2010 2:06 PM, john.rana...@thomsonreuters.com wrote:
 Can someone point me to the documentation on how to handle caching of
 static content? Images and static HTML documents are all being returned
 without cach-control response headers but I am unsure how to set these
 values. Thus the files are being retrieved each and every time. 

http://lmgtfy.com/?q=tomcat+cache-control

 Also, how to handle the situation when you want a javascript file to be
 cached but after a release you need the file to be refreshed on the
 client.

Use the Expires header, and set it to tomorrow?

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkxZcx0ACgkQ9CaO5/Lv0PCdxgCfYDhiLcflqmcIIs7DfitEvu41
heEAoLxQhkzwlVcgARRFd5Ie1xmWAJjL
=kYZ5
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Tomcat 6 does not respond or freeze after startup

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Chuck,

On 8/4/2010 10:01 AM, Caldarale, Charles R wrote:
 From: Christopher Schultz [mailto:ch...@christopherschultz.net]
 Subject: Re: Tomcat 6 does not respond or freeze after startup

 As fas as I know, I'm not running IPv6. IPconfig doesn't show 
 any IPv6 specific.

 Sure? From your own log file:

 INFO: APR capabilities: IPv6 [true], sendfile [true], accept filters
 [false], random [true].

 I believe that the IPv6 [true] for APR shown above means only that APR was 
 built with IPv6 support, not that IPv6 is actually available.

Gotcha.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkxZc0oACgkQ9CaO5/Lv0PAtuACgtHxWH7MPyp1WsYmLGbizzRSK
i2MAoIuj6Co0oYznMFWrhMWdhuLlloBc
=M0R4
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Memory leak in using SSL with Tomcat 6.0.18

Hi Mark,

I have implemented your suggestion. I have deployed my application in Tomcat 
6.0.29 version under the same environment as Tomcat 6.0.18(test environment).

After performing the similar operations on both tomcat versions one after 
another, I have taken the heap dumps from both versions.
What I observed is: Number of com.sun.net.ssl.internal.ssl.SSLSocketImpl 
objects are 10 in tomcat 6.0.18 and 7 in tomcat 6.0.29.
I can't able to say that the issue is fixed :(

Well I am attaching my original mail on this issue for your reference.

We are using Tomcat 6.0.18 on Linux environment(Red hat Linux) for our 
production.
We have enabled SSL by deploying SSL certificates. We observed that, over a 
period of time, the memory consumption is increasing and we are facing serious 
performance issues.
I have taken a heap dump and analyzed it using Eclipse Memory analyzer. What I 
found was, com.sun.net.ssl.internal.ssl.SSLSocketImpl objects are never Garbage 
collected.
The leak report by Memory analyzer is as follows:
2,996 instances of com.sun.net.ssl.internal.ssl.SSLSocketImpl, loaded by 
system class loader occupy 219,843,760 (62.76%) bytes
Upon drilling down, these objects are being held by finalizer method of GC.
I have got the following similar link:
http://forums.sun.com/thread.jspa?threadID=5266266

Can anybody tell me if there is any memory leak issues exists with Tomcat 
6.0.18? I read somewhere that, the memory leak issue with SSL was fixed on 
6.0.20.

Balakrishna Rao | Senior Software Engineer | Persistent Systems
balakrishna_...@persistent.co.in  | Cell: +91 9704373579 | Tel: +91 (40) 
30875030
Innovation in software product design, development and delivery- 
www.persistentsys.com

-Original Message-
From: Mark Thomas [mailto:ma...@apache.org]
Sent: Wednesday, August 04, 2010 6:19 PM
To: Tomcat Users List
Subject: Re: Memory leak in using SSL with Tomcat 6.0.18

On 04/08/2010 13:40, B. Balakrishna Rao wrote:
 Hi Mark,

 I am trying to apply the patch that is available for the fix below:
 https://issues.apache.org/bugzilla/show_bug.cgi?id=47744#c2

Why? What makes you think that is the problem you are seeing?

 However, after giving the below command, putty simply hangs.

 patch sslsession-memory-fix.patch

Impossible to comment given the lack of context information provided.

 I am using Red hat Linux with Apache Tomcat 6.0.18.
 Another issue: Do I need to update the tomcat-coyote.jar along with this 
 patch?
 Please refer the below text from the above link:
  If you apply the patch, update tomcat-coyote.jar..

 Can you help me on this please?

Given your difficulties in applying patch, I suspect you will have
difficulties building the source too. Assuming this patch fixes the
issue you are seeing (and I have yet to see any evidence that it will)
why not just use a binary that already includes the fix?

Mark



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


DISCLAIMER
==
This e-mail may contain privileged and confidential information which is the 
property of Persistent Systems Ltd. It is intended only for the use of the 
individual or entity to which it is addressed. If you are not the intended 
recipient, you are not authorized to read, retain, copy, print, distribute or 
use this message. If you have received this communication in error, please 
notify the sender and delete all copies of this message. Persistent Systems 
Ltd. does not accept any liability for virus infected mails.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Memory leak in using SSL with Tomcat 6.0.18

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 8/4/2010 10:06 AM, B. Balakrishna Rao wrote:
 I have implemented your suggestion. I have deployed my application 
 in Tomcat 6.0.29 version under the same environment as Tomcat
 6.0.18(test environment).
 
 After performing the similar operations on both tomcat versions one 
 after another, I have taken the heap dumps from both versions. What I
 observed is: Number of com.sun.net.ssl.internal.ssl.SSLSocketImpl
 objects are 10 in tomcat 6.0.18 and 7 in tomcat 6.0.29.

 I can't able to say that the issue is fixed :(

Neither of these object counts seem unreasonable. Both are much better
than the original report of nearly 3000 object instances.

What is maxThreads set to? I would imagine that there would be a number
SSLSocketImpl objects around for each current connection, plus some that
hadn't yet been GC'd.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkxZdVUACgkQ9CaO5/Lv0PAPVgCgljnlorFrcO3FYLY6otoUErxh
M+0Anjo11qs18M5XLOOzQTQlJ5RF/xwY
=iAZ5
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Memory leak in using SSL with Tomcat 6.0.18

Hi Chris,

Please note that, the 2,996 count is on production environment.
The counts 7 and 10 are on my local environment.

Below is the procedure I am following on my local environment to test this:

Log in - do some operations - log out.
I am calling session.invalidate() method upon log out. After that, I am taking 
the heap dump. Eclipse Memory Analyzer tool will do a full GC before it produce 
the results. Hence, com.sun.net.ssl.internal.ssl.SSLSocketImpl should be GCed??


Thanks,
Bala.


-Original Message-
From: Christopher Schultz [mailto:ch...@christopherschultz.net] 
Sent: Wednesday, August 04, 2010 7:43 PM
To: Tomcat Users List
Subject: Re: Memory leak in using SSL with Tomcat 6.0.18

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 8/4/2010 10:06 AM, B. Balakrishna Rao wrote:
 I have implemented your suggestion. I have deployed my application 
 in Tomcat 6.0.29 version under the same environment as Tomcat
 6.0.18(test environment).
 
 After performing the similar operations on both tomcat versions one 
 after another, I have taken the heap dumps from both versions. What I
 observed is: Number of com.sun.net.ssl.internal.ssl.SSLSocketImpl
 objects are 10 in tomcat 6.0.18 and 7 in tomcat 6.0.29.

 I can't able to say that the issue is fixed :(

Neither of these object counts seem unreasonable. Both are much better
than the original report of nearly 3000 object instances.

What is maxThreads set to? I would imagine that there would be a number
SSLSocketImpl objects around for each current connection, plus some that
hadn't yet been GC'd.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkxZdVUACgkQ9CaO5/Lv0PAPVgCgljnlorFrcO3FYLY6otoUErxh
M+0Anjo11qs18M5XLOOzQTQlJ5RF/xwY
=iAZ5
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


DISCLAIMER
==
This e-mail may contain privileged and confidential information which is the 
property of Persistent Systems Ltd. It is intended only for the use of the 
individual or entity to which it is addressed. If you are not the intended 
recipient, you are not authorized to read, retain, copy, print, distribute or 
use this message. If you have received this communication in error, please 
notify the sender and delete all copies of this message. Persistent Systems 
Ltd. does not accept any liability for virus infected mails.

Re: Is it possible to set up an alias to a directory?

2010-08-04 Thread Hassan Schroeder

On Wed, Aug 4, 2010 at 1:39 AM, Andrew Knight
and...@leftfieldpublishing.com wrote:

 I can see a couple of them working well. I've been testing the domestic sites 
 as
 symlinks to a /cms directory, and

 displays the relevant content (virtual host or symlink directory). This way is
 just runs as just 1 WAR file and I do not need to worry.

Just keep in mind that undeploying a WAR *may* also remove the
contents of any directories symlinked from the expanded WAR  :-)
(yes, that's the voice of experience...)

FWIW,
-- 
Hassan Schroeder  hassan.schroe...@gmail.com
twitter: @hassan

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Is the Apache ISAPI Redirector Chopping Off Cookie Data?

2010-08-04 Thread Richard G Curry

Mark,
Thank you for your time on this. It is just as I suspected from the one message 
I found, which I suspect may have been from you. 

I have a follow-up question on this; making this switch in the cookie format 
will have a broad impact on our web apps that use the GetAccess product to 
generate this cookie format as it is now. In the note I referenced, it stated 
that The value needs to be quoted for this to work. Tomcat will do this 
automatically if necessary. That said, if we change to the v1 cookie format, 
will Tomcat strip the quotes when it is passed to the servlet making the 
'request.getCookies()' call? 

Some of our apps use GetAccess but are not using Tomcat, they are ASP.NET 
pages. Does anyone know if IIS does this stripping as well?

___
«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»
___
Rick Curry
Common Services -  Software Development
E2 - 066, MS 5210
972-431-9178 (Voice)
972-585-7585 (Pager)
To send a (short) Text Message to my Pager:
9725857...@page.metrocall.com

-Original Message-
From: Mark Thomas [mailto:ma...@apache.org] 
Sent: Tuesday, August 03, 2010 9:39 AM
To: Tomcat Users List
Subject: Re: Is the Apache ISAPI Redirector Chopping Off Cookie Data?

On 03/08/2010 15:35, Richard G Curry wrote:
 Cookie content follows:
 GAUSERINFO=first_name=RICHARDlast_name=CURRYmiddle_initial=Gcorpora
 te_id=XXX

That cookie is not spec complaint. You can't use the '=' in a v0 cookie value. 
You need to switch to v1 cookies and quote the value.

Mark



The information transmitted is intended only for the person or entity to
which it is addressed and may contain confidential and/or privileged 
material.  If the reader of this message is not the intended recipient,
you are hereby notified that your access is unauthorized, and any review,
dissemination, distribution or copying of this message including any 
attachments is strictly prohibited.  If you are not the intended
recipient, please contact the sender and delete the material from any
computer.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Is it possible to set up an alias to a directory?

2010-08-04 Thread André Warnier


Hassan Schroeder wrote:

On Wed, Aug 4, 2010 at 1:39 AM, Andrew Knight
and...@leftfieldpublishing.com wrote:


I can see a couple of them working well. I've been testing the domestic sites as
symlinks to a /cms directory, and



displays the relevant content (virtual host or symlink directory). This way is
just runs as just 1 WAR file and I do not need to worry.


Just keep in mind that undeploying a WAR *may* also remove the
contents of any directories symlinked from the expanded WAR  :-)
(yes, that's the voice of experience...)



Was that not fixed/changed/made optional in some recent version of Tomcat ?


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Is the Apache ISAPI Redirector Chopping Off Cookie Data?

On 04/08/2010 15:31, Richard G Curry wrote:
 I have a follow-up question on this; making this switch in the cookie format 
 will have a broad impact on our web apps that use the GetAccess product to 
 generate this cookie format as it is now. In the note I referenced, it stated 
 that The value needs to be quoted for this to work. Tomcat will do this 
 automatically if necessary. That said, if we change to the v1 cookie format, 
 will Tomcat strip the quotes when it is passed to the servlet making the 
 'request.getCookies()' call?

It should but other products have been known to choke when quotes are
present.

 Some of our apps use GetAccess but are not using Tomcat, they are ASP.NET 
 pages. Does anyone know if IIS does this stripping as well?

Another option - assuming a recent enough Tomcat version is:
-Dorg.apache.tomcat.util.http.ServerCookie.ALLOW_EQUALS_IN_VALUE=true

Mark

 
 ___
 «¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»
 ___
 Rick Curry
 Common Services -  Software Development
 E2 - 066, MS 5210
 972-431-9178 (Voice)
 972-585-7585 (Pager)
 To send a (short) Text Message to my Pager:
 9725857...@page.metrocall.com
 
 -Original Message-
 From: Mark Thomas [mailto:ma...@apache.org] 
 Sent: Tuesday, August 03, 2010 9:39 AM
 To: Tomcat Users List
 Subject: Re: Is the Apache ISAPI Redirector Chopping Off Cookie Data?
 
 On 03/08/2010 15:35, Richard G Curry wrote:
 Cookie content follows:
 GAUSERINFO=first_name=RICHARDlast_name=CURRYmiddle_initial=Gcorpora
 te_id=XXX
 
 That cookie is not spec complaint. You can't use the '=' in a v0 cookie 
 value. You need to switch to v1 cookies and quote the value.
 
 Mark
 
 
 
 The information transmitted is intended only for the person or entity to
 which it is addressed and may contain confidential and/or privileged 
 material.  If the reader of this message is not the intended recipient,
 you are hereby notified that your access is unauthorized, and any review,
 dissemination, distribution or copying of this message including any 
 attachments is strictly prohibited.  If you are not the intended
 recipient, please contact the sender and delete the material from any
 computer.
 
 
 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org
 




-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Is it possible to set up an alias to a directory?

2010-08-04 Thread Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00

On 04/08/2010 15:32, André Warnier wrote:
 Hassan Schroeder wrote:
 On Wed, Aug 4, 2010 at 1:39 AM, Andrew Knight
 and...@leftfieldpublishing.com wrote:

 I can see a couple of them working well. I've been testing the
 domestic sites as
 symlinks to a /cms directory, and

 displays the relevant content (virtual host or symlink directory).
 This way is
 just runs as just 1 WAR file and I do not need to worry.

 Just keep in mind that undeploying a WAR *may* also remove the
 contents of any directories symlinked from the expanded WAR  :-)
 (yes, that's the voice of experience...)

 
 Was that not fixed/changed/made optional in some recent version of Tomcat ?

Nope. And no plans to change.

Maybe you were thinking of the alias feature in Tomcat 7?

Mark



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Is it possible to set up an alias to a directory?

2010-08-04 Thread Hassan Schroeder

On Wed, Aug 4, 2010 at 7:32 AM, André Warnier a...@ice-sa.com wrote:

 Just keep in mind that undeploying a WAR *may* also remove the
 contents of any directories symlinked from the expanded WAR  :-)
 (yes, that's the voice of experience...)

 Was that not fixed/changed/made optional in some recent version of Tomcat ?

Dunno, but I would make sure any symlinked directories have current
backups before testing  :-)

Just sayin'...
-- 
Hassan Schroeder  hassan.schroe...@gmail.com
twitter: @hassan

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Mike Wilde is out of the office

2010-08-04 Thread Michael Wilde


I will be out of the office starting  04/08/2010 and will not return until
06/08/2010.

If you have any urgent production Healthcare issues please contact Iain B
Miller, Tam Kyle or George Rae.

If urgent please raise an incident in the TST DBAMR USD queue.

Tomcat 6.0.18/ IIS 6.0 /SSL

I am trying to get Tomcat and IIS configured on my secure web server (SSL)
so that I can access my deployed web application via https and NOT over
http. Connection to non-SSL works, but I cannot have that connection due to
security.

I want to run Tomcat through IIS, and I have configured it using the
isapi_redirect.dll (thanks to Electronjockey). However, when I try and hit
my https://site/geoportal my credentials do not carry me through to the web
application, instead I receive Internet Explorer Cannot Display Webpage.
Can someone help me out on how to configure my server.xml and interpretting
my log files please? I have even tried to export my server certificate, and
call it using the keystore:, still not working. I'm a Tomcat green horn,
any help would be awesome.

Isapi_redirect.log file: Looks like some sort of authentication is being
passed, then the ajp13 is not found?

[Wed Aug 04 11:51:15.901 2010] [10712:8360] [debug] jk_isapi_plugin.c
(3108): Service protocol=HTTP/1.1 method=GET host=150.125.174.70
addr=150.125.174.70 name=mywebsite port=443 auth=SSL/PCT user=EIMS\john.doe
uri=/jakarta/isapi_redirect.dll
[Wed Aug 04 11:51:15.916 2010] [10712:8360] [debug] jk_isapi_plugin.c
(3120): Service request headers=5 attributes=9 chunked=no content-length=0
available=0
[Wed Aug 04 11:51:15.932 2010] [10712:8360] [debug] jk_worker.c (116): did
not find a worker ajp13
[Wed Aug 04 11:51:15.948 2010] [10712:8360] [debug] jk_isapi_plugin.c
(2162): could not get a worker for name ajp13
[Wed Aug 04 11:51:15.979 2010] [10712:8360] [error] jk_isapi_plugin.c
(2210): could not get a worker for name ajp13

Here is the meat of my server.xml (pretty sure it's wrong):

!-- A Connector represents an endpoint by which requests are received
 and responses are returned. Documentation at :
 Java HTTP Connector: /docs/config/http.html (blocking 
non-blocking)
 Java AJP  Connector: /docs/config/ajp.html
 APR (HTTP/AJP) Connector: /docs/apr.html
 Define a non-SSL HTTP/1.1 Connector on port 8080
--
Connector port=8080 protocol=HTTP/1.1 
   connectionTimeout=2 
   redirectPort=80 /
!-- A Connector using the shared thread pool--

Connector executor=tomcatThreadPool
   port=8009 protocol=HTTP/1.1 
   connectionTimeout=2 
   redirectPort=443 /
   
!-- Define a SSL HTTP/1.1 Connector on port 8443
 This connector uses the JSSE configuration, when using APR, the 
 connector should be using the OpenSSL style configuration
 described in the APR documentation --

Connector port=8443 protocol=HTTP/1.1 SSLEnabled=true
   maxThreads=150 scheme=https secure=true
   clientAuth=false sslProtocol=TLSv1
   keystoreFile=C:\Program Files (x86)\Apache Software
Foundation\Tomcat 6.0\conf\cert.pfx 
   keystorePass=mypassword
   keystoreType=pkcs12 /

!-- Define an AJP 1.3 Connector on port 8009 --
Connector port=8009 protocol=AJP/1.3 redirectPort=8443 /

Thanks Jason.





smime.p7s
Description: S/MIME cryptographic signature

Re: Memory leak in using SSL with Tomcat 6.0.18

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

B.,

On 8/4/2010 10:19 AM, B. Balakrishna Rao wrote:
 Please note that, the 2,996 count is on production environment.
 The counts 7 and 10 are on my local environment.

Ok.

 Below is the procedure I am following on my local environment to test this:
 
 Log in - do some operations - log out.
 I am calling session.invalidate() method upon log out.

Whether you log out of not shouldn't have anything to do with these
objects staying around.

 After that, I am taking the heap dump. Eclipse Memory Analyzer tool
 will do a full GC before it produce the results. Hence, 
 com.sun.net.ssl.internal.ssl.SSLSocketImpl should be GCed??

Most likely.

Since you're using a profiler, can you show us what the stack trace is
of the code that created the SSLSocketImpl objects?

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkxZmNEACgkQ9CaO5/Lv0PA3DwCdEpwgPIclWBmmlfM+wD5VX0w4
YPIAn2P5+aVG9u8UswVYPEd5ctXh2jO1
=kV3t
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Mike Wilde is out of the office

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Mike,

You sure seem to be out of the office a lot.

Are they paying you well over there?

Also, it seems you have returned (today is 2010-08-04, at least in
Washington, DC): you should either disable your out-of-office reminder
or update the dates ;)

- -chris

On 8/4/2010 11:22 AM, Michael Wilde wrote:
 
 I will be out of the office starting  04/08/2010 and will not return until
 06/08/2010.
 
 If you have any urgent production Healthcare issues please contact Iain B
 Miller, Tam Kyle or George Rae.
 
 If urgent please raise an incident in the TST DBAMR USD queue.
 
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkxZmdMACgkQ9CaO5/Lv0PCmTQCgpW1sw4KGLoylJzXYKt7uTofU
9PEAoJLaY/6pPi18gqFoQhE8WRRB/eY9
=L0w0
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: [OT] Mike Wilde is out of the office

2010-08-04 Thread Bob Hall



--- On Wed, 8/4/10 at 9:48 AM, Christopher Schultz 
ch...@christopherschultz.net wrote:

 Mike,
 
 You sure seem to be out of the office a lot.
 
 Are they paying you well over there?
 
 Also, it seems you have returned (today is 2010-08-04, at
 least in
 Washington, DC): you should either disable your
 out-of-office reminder
 or update the dates ;)
 
 - -chris
 

Or he's using DD/MM/.  In any case, he should configure his out-of-office 
reminder to *not* be sent to user lists...

- Bob


  

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Mike Wilde is out of the office

2010-08-04 Thread Martin Gainty


a couple of days is nothing to worry about
 
Anna Chapman was subscribed to a email support list for an Apache build project 
(think yiddish for acculumator of knowledge)
her autoresponder sent Anna is Out of Office messages to everyone on the that 
email list for Anna from June 29 until July 10
gratefully..Anna is Out of Office Messages stopped when she got back home
http://www.bbc.co.uk/news/10442223

Martin 
__ 
Verzicht und Vertraulichkeitanmerkung/Note de déni et de confidentialité
 
Diese Nachricht ist vertraulich. Sollten Sie nicht der vorgesehene Empfaenger 
sein, so bitten wir hoeflich um eine Mitteilung. Jede unbefugte Weiterleitung 
oder Fertigung einer Kopie ist unzulaessig. Diese Nachricht dient lediglich dem 
Austausch von Informationen und entfaltet keine rechtliche Bindungswirkung. 
Aufgrund der leichten Manipulierbarkeit von E-Mails koennen wir keine Haftung 
fuer den Inhalt uebernehmen.
Ce message est confidentiel et peut être privilégié. Si vous n'êtes pas le 
destinataire prévu, nous te demandons avec bonté que pour satisfaire informez 
l'expéditeur. N'importe quelle diffusion non autorisée ou la copie de ceci est 
interdite. Ce message sert à l'information seulement et n'aura pas n'importe 
quel effet légalement obligatoire. Étant donné que les email peuvent facilement 
être sujets à la manipulation, nous ne pouvons accepter aucune responsabilité 
pour le contenu fourni.



 

 Date: Wed, 4 Aug 2010 12:48:19 -0400
 From: ch...@christopherschultz.net
 To: users@tomcat.apache.org
 Subject: Re: Mike Wilde is out of the office
 
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
 Mike,
 
 You sure seem to be out of the office a lot.
 
 Are they paying you well over there?
 
 Also, it seems you have returned (today is 2010-08-04, at least in
 Washington, DC): you should either disable your out-of-office reminder
 or update the dates ;)
 
 - -chris
 
 On 8/4/2010 11:22 AM, Michael Wilde wrote:
  
  I will be out of the office starting 04/08/2010 and will not return until
  06/08/2010.
  
  If you have any urgent production Healthcare issues please contact Iain B
  Miller, Tam Kyle or George Rae.
  
  If urgent please raise an incident in the TST DBAMR USD queue.
  
 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.4.10 (MingW32)
 Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
 
 iEYEARECAAYFAkxZmdMACgkQ9CaO5/Lv0PCmTQCgpW1sw4KGLoylJzXYKt7uTofU
 9PEAoJLaY/6pPi18gqFoQhE8WRRB/eY9
 =L0w0
 -END PGP SIGNATURE-
 
 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Tomcat 6.0.18/ IIS 6.0 /SSL

2010-08-04 Thread Rainer Jung


On 04.08.2010 18:07, Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 wrote:



I am trying to get Tomcat and IIS configured on my secure web server
(SSL) so that I can access my deployed web application via https and NOT
over http. Connection to non-SSL works, but I cannot have that
connection due to security.

I want to run Tomcat through IIS, and I have configured it using the
isapi_redirect.dll (thanks to Electronjockey). However, when I try and
hit my https://site/geoportal https://site/geoportal my credentials do
not carry me through to the web application, instead I receive Internet
Explorer Cannot Display Webpage. Can someone help me out on how to
configure my server.xml and interpretting my log files please? I have
even tried to export my server certificate, and call it using the
keystore:, still not working. I'm a Tomcat green horn, any help would
be awesome.

Isapi_redirect.log file: Looks like some sort of authentication is being
passed, then the ajp13 is not found?

[Wed Aug 04 11:51:15.901 2010] [10712:8360] [debug] jk_isapi_plugin.c
(3108): Service protocol=HTTP/1.1 method=GET host=150.125.174.70
addr=150.125.174.70 name=mywebsite port=443 auth=SSL/PCT
user=EIMS\john.doe uri=/jakarta/isapi_redirect.dll

[Wed Aug 04 11:51:15.916 2010] [10712:8360] [debug] jk_isapi_plugin.c
(3120): Service request headers=5 attributes=9 chunked=no
content-length=0 available=0

[Wed Aug 04 11:51:15.932 2010] [10712:8360] [debug] jk_worker.c (116):
did not find a worker ajp13
[Wed Aug 04 11:51:15.948 2010] [10712:8360] [debug] jk_isapi_plugin.c
(2162): could not get a worker for name ajp13
[Wed Aug 04 11:51:15.979 2010] [10712:8360] [error] jk_isapi_plugin.c
(2210): could not get a worker for name ajp13


Hard to tell without knowing the version of the isapi redirector, not 
having your configuration. This looks like:


- it is trying to use a worker named ajp13 to connect to Tomcat. Lile y 
you have configured the redirector to use this worker within your 
uriworkermap.properties file


- the redirector doesn't know how to use this worker. Either you are 
missing the workers.properties configuration file or there is no 
definition for a worker named ajp13 in the file.


A good starting point for a workers.properties file is the example file 
contained in the source distribution of version 1.2.30. Please do also 
use this version of the redirector.


Note: from the point of view of Tomcat it doesn't really matter whether 
you are talking http or https in the browser. This protocol is only used 
between the browser and IIS. Between IIS and Tomcat when using the isapi 
redirector the protocol is always AJP13 (it is just coincidence, that 
this is the same name as the name of the worker in your logs). The 
protocol is similar to HTTP but binary and it transports the information 
whether the browser used http or https, so Tomcat is aware of this. This 
protocol does not use the http or https connectors in server.xml, only 
the AJP13 connector.



Here is the meat of my server.xml (pretty sure it's wrong):

!-- A Connector represents an endpoint by which requests are received
and responses are returned. Documentation at :
Java HTTP Connector: /docs/config/http.html (blocking  non-blocking)
Java AJP Connector: /docs/config/ajp.html
APR (HTTP/AJP) Connector: /docs/apr.html
Define a non-SSL HTTP/1.1 Connector on port 8080
--
Connector port=8080 protocol=HTTP/1.1
connectionTimeout=2
redirectPort=80 /
!-- A Connector using the shared thread pool--

Connector executor=tomcatThreadPool
port=8009 protocol=HTTP/1.1
connectionTimeout=2
redirectPort=443 /

!-- Define a SSL HTTP/1.1 Connector on port 8443
This connector uses the JSSE configuration, when using APR, the
connector should be using the OpenSSL style configuration
described in the APR documentation --

Connector port=8443 protocol=HTTP/1.1 SSLEnabled=true
maxThreads=150 scheme=https secure=true
clientAuth=false sslProtocol=TLSv1
keystoreFile=C:\Program Files (x86)\Apache Software Foundation\Tomcat
6.0\conf\cert.pfx
keystorePass=mypassword
keystoreType=pkcs12 /

!-- Define an AJP 1.3 Connector on port 8009 --
Connector port=8009 protocol=AJP/1.3 redirectPort=8443 /


Two connectors, both on port 8009, will not work. Use the latter one.

Regards,

Rainer

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: few slow requests

2010-08-04 Thread Peter Buning

Thanks again!

Am 04.08.2010 15:38, schrieb Christopher Schultz:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Peter,

On 8/4/2010 3:33 AM, Peter Buning wrote:

Hi Chris,

Am 03.08.2010 22:08, schrieb Christopher Schultz:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Peter,

On 8/3/2010 10:55 AM, Peter Buning wrote:

Over what period of time? How often do the 106 and/or 10 responses
occur? You may be encountering some simple thing like the OS wanting to
get some of its own work done occasionally.

Try using 'sar' (you may have to install it... I don't think Debian
installs it by default).

the 106 ms is logged in the access log file. We used the %D pattern for
the request time in millis.

The source code for org.apache.catalina.valves.AccessLogValve is
available here:

http://svn.apache.org/repos/asf/tomcat/tc5.5.x/tags/TOMCAT_5_5_30/container/catalina/src/share/org/apache/catalina/valves/AccessLogValve.java

Look at the invoke menu.

Of course, I meant method, not menu. ;)

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkxZbXAACgkQ9CaO5/Lv0PBmWwCfaysShxyRIbreEALGSBAYnAWh
aBkAmQGaJBjNG+6zRF1dhgSH92z5JoKN
=CcYD
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: [OT] Mike Wilde is out of the office

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Bob,

On 8/4/2010 1:08 PM, Bob Hall wrote:
 Or he's using DD/MM/.  In any case, he should configure his out-of-office 
 reminder to *not* be sent to user lists...

D'oh. I hadn't even thought of that. One reason why I always try to use
-mm-dd.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkxZqeUACgkQ9CaO5/Lv0PDsjgCfSCKxkY73i5y1khTYh8uIDQDs
bdoAnRYOPqPpIP8dzrQVXswPu+zlNpdA
=zFLZ
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: UTF-8 encoding in Tomcat 6.0

2010-08-04 Thread Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Erik,

On 7/30/2010 1:55 PM, Erik Bunn wrote:
 7.x Connector has the exact same options. I'll restate, though, that 
 setting the Connector URIEncoding in TC7.x won't currently help when
 decoding GET parameters in a no-content-type case - without the
 filter, they will be mangled as ISO-8859-1. If this is different from
 previous behaviour, maybe I should report a bug.

It works perfectly well for me when using URIEncoding=UTF-8.

The Content-Type of the request is never consulted for any reason in
this case, so its presence should not change anything as you indicate above.

Can you give us a repeatable example?

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkxZsggACgkQ9CaO5/Lv0PCcNwCgo6fRS4vA5VsbMtrGGx1MwY/r
uQEAoK97EqwJFtp77yOSaeHUD6gtGh5a
=6RL/
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: [OT] java.security.NoSuchAlgorithmException: No implementation for AES/CBC/NoPad

2010-08-04 Thread Kuga

Hi,
Thanks for the response,
I am trying to do that, however, am unable to install the JRE, getting the
following error:

I am having Linux FC(Fedora) 12 - 64 bit system. I am trying to install JRE
1.6.0_17, and get the following error when trying to install (
jre-6u17-linux-x64.bin).

Do you agree to the above license terms? [yes or no]
yes
Unpacking...
Checksumming...
Extracting...
./jre-6u17-linux-x64-rpm.bin: line 368: ./install.sfx.3884: cannot execute
binary file

I also did the chmod a+x jre

Can anyone help to respond to this issue,
Thanks
Kuga

n828cl wrote:

From: Kuga [mailto:kvisagam...@infoblox.com]
Subject: RE: [OT] java.security.NoSuchAlgorithmException: No
implementation for AES/CBC/NoPad

Please see the attached jce.jar.

Jars are not allowed as attachments on this list - and sending jce.jar to
an international list may be illegal.

I am in the US. Wonder how to resolve such issues?

Along with jce.jar (88256 bytes for JRE/JDK 6u21b06), there are also
policy files that control what algorithms the JVM can exercise, and
certificates used to verify the signing on security-related jars. If any
of these are messed up, that might cause registration failure for the
services.

You might try to download and install a clean JVM from Sun/Oracle, not
using whichever package manager your Linux employs. If that works, then
whoever packaged your previous JVM installation broke it.

- Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you
received this in error, please contact the sender and delete the e-mail
and its attachments from all computers.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

--
View this message in context:
http://old.nabble.com/java.security.NoSuchAlgorithmException%3A-No-implementation-for-AES-CBC-NoPad-tp24410804p29349713.html
Sent from the Tomcat - User mailing list archive at Nabble.com.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Tomcat 6.0.18/ IIS 6.0 /SSL

Jung,
I'm still getting the errors.

Connector port=8080 protocol=Java HTTP   What protocol should I use
here (do not want to expose)
   connectionTimeout=2 
   redirectPort=80 / 


Connector port=8443 protocol=HTTP/1.1 SSLEnabled=true
-Does this look right?
   maxThreads=150 scheme=https secure=true
   clientAuth=false sslProtocol=TLSv1
   keystoreFile=C:\Program Files (x86)\Apache Software
Foundation\Tomcat 6.0\conf\cert.pfx 
   keystorePass=password
   keystoreType=pkcs12 /


Connector port=8009 protocol=AJP/1.3 redirectPort=8443 /
-Is this where my actual authentication is taking place?

-Original Message-
From: Rainer Jung [mailto:rainer.j...@kippdata.de] 
Sent: Wednesday, August 04, 2010 1:38 PM
To: Tomcat Users List
Subject: Re: Tomcat 6.0.18/ IIS 6.0 /SSL

On 04.08.2010 18:07, Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 wrote:


 I am trying to get Tomcat and IIS configured on my secure web server
 (SSL) so that I can access my deployed web application via https and 
 NOT over http. Connection to non-SSL works, but I cannot have that 
 connection due to security.

 I want to run Tomcat through IIS, and I have configured it using the 
 isapi_redirect.dll (thanks to Electronjockey). However, when I try and 
 hit my https://site/geoportal https://site/geoportal my credentials 
 do not carry me through to the web application, instead I receive 
 Internet Explorer Cannot Display Webpage. Can someone help me out on 
 how to configure my server.xml and interpretting my log files please? 
 I have even tried to export my server certificate, and call it using 
 the keystore:, still not working. I'm a Tomcat green horn, any help 
 would be awesome.

 Isapi_redirect.log file: Looks like some sort of authentication is 
 being passed, then the ajp13 is not found?

 [Wed Aug 04 11:51:15.901 2010] [10712:8360] [debug] jk_isapi_plugin.c
 (3108): Service protocol=HTTP/1.1 method=GET host=150.125.174.70 
 addr=150.125.174.70 name=mywebsite port=443 auth=SSL/PCT 
 user=EIMS\john.doe uri=/jakarta/isapi_redirect.dll

 [Wed Aug 04 11:51:15.916 2010] [10712:8360] [debug] jk_isapi_plugin.c
 (3120): Service request headers=5 attributes=9 chunked=no 
 content-length=0 available=0

 [Wed Aug 04 11:51:15.932 2010] [10712:8360] [debug] jk_worker.c (116):
 did not find a worker ajp13
 [Wed Aug 04 11:51:15.948 2010] [10712:8360] [debug] jk_isapi_plugin.c
 (2162): could not get a worker for name ajp13 [Wed Aug 04 11:51:15.979 
 2010] [10712:8360] [error] jk_isapi_plugin.c
 (2210): could not get a worker for name ajp13

Hard to tell without knowing the version of the isapi redirector, not having
your configuration. This looks like:

- it is trying to use a worker named ajp13 to connect to Tomcat. Lile y you
have configured the redirector to use this worker within your
uriworkermap.properties file

- the redirector doesn't know how to use this worker. Either you are missing
the workers.properties configuration file or there is no definition for a
worker named ajp13 in the file.

A good starting point for a workers.properties file is the example file
contained in the source distribution of version 1.2.30. Please do also use
this version of the redirector.

Note: from the point of view of Tomcat it doesn't really matter whether you
are talking http or https in the browser. This protocol is only used between
the browser and IIS. Between IIS and Tomcat when using the isapi redirector
the protocol is always AJP13 (it is just coincidence, that this is the same
name as the name of the worker in your logs). The protocol is similar to
HTTP but binary and it transports the information whether the browser used
http or https, so Tomcat is aware of this. This protocol does not use the
http or https connectors in server.xml, only the AJP13 connector.

 Here is the meat of my server.xml (pretty sure it's wrong):

 !-- A Connector represents an endpoint by which requests are 
 received and responses are returned. Documentation at :
 Java HTTP Connector: /docs/config/http.html (blocking  non-blocking) 
 Java AJP Connector: /docs/config/ajp.html APR (HTTP/AJP) Connector: 
 /docs/apr.html Define a non-SSL HTTP/1.1 Connector on port 8080
 --
 Connector port=8080 protocol=HTTP/1.1
 connectionTimeout=2
 redirectPort=80 /
 !-- A Connector using the shared thread pool--

 Connector executor=tomcatThreadPool
 port=8009 protocol=HTTP/1.1
 connectionTimeout=2
 redirectPort=443 /

 !-- Define a SSL HTTP/1.1 Connector on port 8443 This connector uses 
 the JSSE configuration, when using APR, the connector should be using 
 the OpenSSL style configuration described in the APR documentation --

 Connector port=8443 protocol=HTTP/1.1 SSLEnabled=true
 maxThreads=150 scheme=https secure=true
 clientAuth=false sslProtocol=TLSv1
 keystoreFile=C:\Program Files (x86)\Apache Software Foundation\Tomcat

Re: FW: Mascot Server update now available

2010-08-04 Thread Mark Shifman

I just installed the new patch for Mascot.
and mascot is running.
mas

On 08/02/2010 06:57 PM, Kathryn Stone wrote:
 Hi guys-
 
  
 
 Can you do the update on the Linux?  Thanks
 
  
 
 Kathy
 
  
 
 MS  Proteomics Resource
 
 W.M. Keck Biotechnology Resource Laboratory
 
 Rm G001
 
 300 George Street
 
 New Haven CT 06511
 
  
 
 kathryn.st...@yale.edu
 
  
 
 *From:* Matrix Science Technical Support [mailto:supp...@matrixscience.com]
 *Sent:* Monday, August 02, 2010 6:50 PM
 *To:* Kathy Stone
 *Subject:* Mascot Server update now available
 
  
 
 Dear Kathy Stone,
 
 An update for Mascot 2.3 for Linux is now available for download.
 
 Separate downloads are available for the 64 bit and 32 bit versions:
 - 64 bit:
 http://www.matrixscience.com/patch/mascot_2_3_01_patch_x86_64-linux.tar.bz2
 - 32 bit:
 http://www.matrixscience.com/patch/mascot_2_3_01_patch_i86_rh80.tar.bz2
 
 You will be required to enter a user name and password to download the
 update:
 User name: yu_ks
 Password: 84r2hr93
 
 This patch should only be used on a Mascot 2.3 installation. It will not
 update files from 2.2.x and earlier versions.
 
 To install the software:
 
 * check that there are no searches running on the server
 * stop the ms-monitor.exe daemon
 * copy the patch to /usr/local/mascot (or to wherever Mascot is
   installed)
 * bunzip2 mascot_2_3_01_patch_x86_64-linux.tar.bz2
 * tar xvf mascot_2_3_01_patch_x86_64-linux.tar
 * If Apache is configured to run under apache rather than nobody
   (the latter being the values in the tar archive), then the
   permissions will now be wrong.  To fix this:
 find . -user nobody | xargs chown apache:apache
 * start the ms-monitor.exe daemon
 
 (For the 32 bit release, substitute the 32 bit filename in the above
 commands)
 
 A list of the changes made can be found at
 http://www.matrixscience.com/mascot_support.html#2.3.
 
 Please don't hesitate to contact me if you have any questions.
 
 Best regards,
 
 Richard Jacob
 -- 
 Richard Jacob
 Country Manager, North America
 Matrix Science Inc.
 225 Franklin St., 26th fl.,
 Boston, MA 02110, USA
 Tel: (800) 716 6702
 Fax: (800) 716 6704
 richa...@matrixscience.com
 http://www.matrixscience.com
 

-- 
 Mark Shifman MD. Ph.D.
 Yale Center for Medical Informatics
 Phone (203)737-5219
 mark.shif...@yale.edu

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: FW: Mascot Server update now available Disregard this message

2010-08-04 Thread Mark Shifman

Mea culpa, Mea Culpa
mas

On 08/04/2010 03:26 PM, Mark Shifman wrote:
 I just installed the new patch for Mascot.
 and mascot is running.
...

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Caching of static content

2010-08-04 Thread john.ranaudo

Uh..thanks..it was not a good day when I asked this question. My apologies :)

-Original Message-
From: Christopher Schultz [mailto:ch...@christopherschultz.net] 
Sent: Wednesday, August 04, 2010 10:03 AM
To: Tomcat Users List
Subject: Re: Caching of static content

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

John,

On 8/2/2010 2:06 PM, john.rana...@thomsonreuters.com wrote:
 Can someone point me to the documentation on how to handle caching of 
 static content? Images and static HTML documents are all being 
 returned without cach-control response headers but I am unsure how to 
 set these values. Thus the files are being retrieved each and every time.

http://lmgtfy.com/?q=tomcat+cache-control

 Also, how to handle the situation when you want a javascript file to 
 be cached but after a release you need the file to be refreshed on the 
 client.

Use the Expires header, and set it to tomorrow?

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkxZcx0ACgkQ9CaO5/Lv0PCdxgCfYDhiLcflqmcIIs7DfitEvu41
heEAoLxQhkzwlVcgARRFd5Ie1xmWAJjL
=kYZ5
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Tomcat 6.0.18/ IIS 6.0 /SSL

2010-08-04 Thread Rainer Jung


On 04.08.2010 20:58, Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 wrote:

Jung,
I'm still getting the errors.


Why shouldn't you?
Did you actually read my post?
Which parts didn't you understand?


Connector port=8080 protocol=Java HTTP   What protocol should I use
here (do not want to expose)
connectionTimeout=2
redirectPort=80 /


This connector is *not* involved when using

Browser - IIS/Redirector - Tomcat


 Connector port=8443 protocol=HTTP/1.1 SSLEnabled=true
-Does this look right?
maxThreads=150 scheme=https secure=true
clientAuth=false sslProtocol=TLSv1
   keystoreFile=C:\Program Files (x86)\Apache Software
Foundation\Tomcat 6.0\conf\cert.pfx
keystorePass=password
   keystoreType=pkcs12 /


This one neither.


Connector port=8009 protocol=AJP/1.3 redirectPort=8443 /
-Is this where my actual authentication is taking place?
This connector should be used depending on your redirector config which 
we haven't seen yet.


The error message you provided doesn't have to do with authentication. 
Authentication problems might show up after you solved your worker 
configuration problem. Until now your IIS doesn't even talk to Tomcat.


Regards,

Rainer



-Original Message-
From: Rainer Jung [mailto:rainer.j...@kippdata.de]
Sent: Wednesday, August 04, 2010 1:38 PM
To: Tomcat Users List
Subject: Re: Tomcat 6.0.18/ IIS 6.0 /SSL

On 04.08.2010 18:07, Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 wrote:



I am trying to get Tomcat and IIS configured on my secure web server
(SSL) so that I can access my deployed web application via https and
NOT over http. Connection to non-SSL works, but I cannot have that
connection due to security.

I want to run Tomcat through IIS, and I have configured it using the
isapi_redirect.dll (thanks to Electronjockey). However, when I try and
hit my https://site/geoportalhttps://site/geoportal  my credentials
do not carry me through to the web application, instead I receive
Internet Explorer Cannot Display Webpage. Can someone help me out on
how to configure my server.xml and interpretting my log files please?
I have even tried to export my server certificate, and call it using
the keystore:, still not working. I'm a Tomcat green horn, any help
would be awesome.

Isapi_redirect.log file: Looks like some sort of authentication is
being passed, then the ajp13 is not found?

[Wed Aug 04 11:51:15.901 2010] [10712:8360] [debug] jk_isapi_plugin.c
(3108): Service protocol=HTTP/1.1 method=GET host=150.125.174.70
addr=150.125.174.70 name=mywebsite port=443 auth=SSL/PCT
user=EIMS\john.doe uri=/jakarta/isapi_redirect.dll

[Wed Aug 04 11:51:15.916 2010] [10712:8360] [debug] jk_isapi_plugin.c
(3120): Service request headers=5 attributes=9 chunked=no
content-length=0 available=0

[Wed Aug 04 11:51:15.932 2010] [10712:8360] [debug] jk_worker.c (116):
did not find a worker ajp13
[Wed Aug 04 11:51:15.948 2010] [10712:8360] [debug] jk_isapi_plugin.c
(2162): could not get a worker for name ajp13 [Wed Aug 04 11:51:15.979
2010] [10712:8360] [error] jk_isapi_plugin.c
(2210): could not get a worker for name ajp13


Hard to tell without knowing the version of the isapi redirector, not having
your configuration. This looks like:

- it is trying to use a worker named ajp13 to connect to Tomcat. Lile y you
have configured the redirector to use this worker within your
uriworkermap.properties file

- the redirector doesn't know how to use this worker. Either you are missing
the workers.properties configuration file or there is no definition for a
worker named ajp13 in the file.

A good starting point for a workers.properties file is the example file
contained in the source distribution of version 1.2.30. Please do also use
this version of the redirector.

Note: from the point of view of Tomcat it doesn't really matter whether you
are talking http or https in the browser. This protocol is only used between
the browser and IIS. Between IIS and Tomcat when using the isapi redirector
the protocol is always AJP13 (it is just coincidence, that this is the same
name as the name of the worker in your logs). The protocol is similar to
HTTP but binary and it transports the information whether the browser used
http or https, so Tomcat is aware of this. This protocol does not use the
http or https connectors in server.xml, only the AJP13 connector.


Here is the meat of my server.xml (pretty sure it's wrong):

!-- A Connector represents an endpoint by which requests are
received and responses are returned. Documentation at :
Java HTTP Connector: /docs/config/http.html (blocking  non-blocking)
Java AJP Connector: /docs/config/ajp.html APR (HTTP/AJP) Connector:
/docs/apr.html Define a non-SSL HTTP/1.1 Connector on port 8080
--
Connector port=8080 protocol=HTTP/1.1
connectionTimeout=2
redirectPort=80 /
!-- A Connector using the shared thread pool--

RE: Tomcat 6.0.18/ IIS 6.0 /SSL

2010-08-04 Thread Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00

I did read your post and I changed the Port Number.
  
Connector port=8009 protocol=AJP/1.3 redirectPort=8443 / 
This connector should be used depending on your redirector config which we
haven't seen yet

Here is my workers.properties:

worker.list=worker1
worker.worker1.type=ajp13
worker.worker1.host=127.0.0.1
worker.worker1.port=8009 

Here is my uriworkermap.properties:

/geoportal|/*=worker1

-Original Message-
From: Rainer Jung [mailto:rainer.j...@kippdata.de] 
Sent: Wednesday, August 04, 2010 3:40 PM
To: Tomcat Users List
Subject: Re: Tomcat 6.0.18/ IIS 6.0 /SSL

On 04.08.2010 20:58, Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 wrote:
 Jung,
 I'm still getting the errors.

Why shouldn't you?
Did you actually read my post?
Which parts didn't you understand?

 Connector port=8080 protocol=Java HTTP   What protocol should I
use
 here (do not want to expose)
 connectionTimeout=2
 redirectPort=80 /

This connector is *not* involved when using

Browser - IIS/Redirector - Tomcat

  Connector port=8443 protocol=HTTP/1.1 SSLEnabled=true
 -Does this look right?
 maxThreads=150 scheme=https secure=true
 clientAuth=false sslProtocol=TLSv1
  keystoreFile=C:\Program Files (x86)\Apache Software 
 Foundation\Tomcat 6.0\conf\cert.pfx
 keystorePass=password
  keystoreType=pkcs12 /

This one neither.

 Connector port=8009 protocol=AJP/1.3 redirectPort=8443 / 
 -Is this where my actual authentication is taking place?
This connector should be used depending on your redirector config which we
haven't seen yet.

The error message you provided doesn't have to do with authentication. 
Authentication problems might show up after you solved your worker
configuration problem. Until now your IIS doesn't even talk to Tomcat.

Regards,

Rainer


 -Original Message-
 From: Rainer Jung [mailto:rainer.j...@kippdata.de]
 Sent: Wednesday, August 04, 2010 1:38 PM
 To: Tomcat Users List
 Subject: Re: Tomcat 6.0.18/ IIS 6.0 /SSL

 On 04.08.2010 18:07, Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00
wrote:


 I am trying to get Tomcat and IIS configured on my secure web server
 (SSL) so that I can access my deployed web application via https and 
 NOT over http. Connection to non-SSL works, but I cannot have that 
 connection due to security.

 I want to run Tomcat through IIS, and I have configured it using the 
 isapi_redirect.dll (thanks to Electronjockey). However, when I try 
 and hit my https://site/geoportalhttps://site/geoportal  my 
 credentials do not carry me through to the web application, instead I 
 receive Internet Explorer Cannot Display Webpage. Can someone help 
 me out on how to configure my server.xml and interpretting my log files
please?
 I have even tried to export my server certificate, and call it using 
 the keystore:, still not working. I'm a Tomcat green horn, any help 
 would be awesome.

 Isapi_redirect.log file: Looks like some sort of authentication is 
 being passed, then the ajp13 is not found?

 [Wed Aug 04 11:51:15.901 2010] [10712:8360] [debug] jk_isapi_plugin.c
 (3108): Service protocol=HTTP/1.1 method=GET host=150.125.174.70 
 addr=150.125.174.70 name=mywebsite port=443 auth=SSL/PCT 
 user=EIMS\john.doe uri=/jakarta/isapi_redirect.dll

 [Wed Aug 04 11:51:15.916 2010] [10712:8360] [debug] jk_isapi_plugin.c
 (3120): Service request headers=5 attributes=9 chunked=no 
 content-length=0 available=0

 [Wed Aug 04 11:51:15.932 2010] [10712:8360] [debug] jk_worker.c (116):
 did not find a worker ajp13
 [Wed Aug 04 11:51:15.948 2010] [10712:8360] [debug] jk_isapi_plugin.c
 (2162): could not get a worker for name ajp13 [Wed Aug 04 
 11:51:15.979 2010] [10712:8360] [error] jk_isapi_plugin.c
 (2210): could not get a worker for name ajp13

 Hard to tell without knowing the version of the isapi redirector, not 
 having your configuration. This looks like:

 - it is trying to use a worker named ajp13 to connect to Tomcat. Lile 
 y you have configured the redirector to use this worker within your 
 uriworkermap.properties file

 - the redirector doesn't know how to use this worker. Either you are 
 missing the workers.properties configuration file or there is no 
 definition for a worker named ajp13 in the file.

 A good starting point for a workers.properties file is the example 
 file contained in the source distribution of version 1.2.30. Please do 
 also use this version of the redirector.

 Note: from the point of view of Tomcat it doesn't really matter 
 whether you are talking http or https in the browser. This protocol is 
 only used between the browser and IIS. Between IIS and Tomcat when 
 using the isapi redirector the protocol is always AJP13 (it is just 
 coincidence, that this is the same name as the name of the worker in 
 your logs). The protocol is similar to HTTP but binary and it 
 transports the information whether the

Re: Tomcat 6.0.18/ IIS 6.0 /SSL

2010-08-04 Thread Rainer Jung


On 04.08.2010 21:50, Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 wrote:

I did read your post and I changed the Port Number.

Connector port=8009 protocol=AJP/1.3 redirectPort=8443 /
This connector should be used depending on your redirector config which we
haven't seen yet

Here is my workers.properties:

worker.list=worker1
worker.worker1.type=ajp13
worker.worker1.host=127.0.0.1
worker.worker1.port=8009

Here is my uriworkermap.properties:

/geoportal|/*=worker1


This didn't work, since the log snippet said it tried to use a worker 
named ajp13, not worker1.


Regards,

Rainer


-Original Message-
From: Rainer Jung [mailto:rainer.j...@kippdata.de]
Sent: Wednesday, August 04, 2010 3:40 PM
To: Tomcat Users List
Subject: Re: Tomcat 6.0.18/ IIS 6.0 /SSL

On 04.08.2010 20:58, Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 wrote:

Jung,
I'm still getting the errors.


Why shouldn't you?
Did you actually read my post?
Which parts didn't you understand?


Connector port=8080 protocol=Java HTTP   What protocol should I

use

here (do not want to expose)
 connectionTimeout=2
 redirectPort=80 /


This connector is *not* involved when using

Browser -  IIS/Redirector -  Tomcat


  Connector port=8443 protocol=HTTP/1.1 SSLEnabled=true
-Does this look right?
 maxThreads=150 scheme=https secure=true
 clientAuth=false sslProtocol=TLSv1
   keystoreFile=C:\Program Files (x86)\Apache Software
Foundation\Tomcat 6.0\conf\cert.pfx
 keystorePass=password
   keystoreType=pkcs12 /


This one neither.


Connector port=8009 protocol=AJP/1.3 redirectPort=8443 /
-Is this where my actual authentication is taking place?

This connector should be used depending on your redirector config which we
haven't seen yet.

The error message you provided doesn't have to do with authentication.
Authentication problems might show up after you solved your worker
configuration problem. Until now your IIS doesn't even talk to Tomcat.

Regards,

Rainer



-Original Message-
From: Rainer Jung [mailto:rainer.j...@kippdata.de]
Sent: Wednesday, August 04, 2010 1:38 PM
To: Tomcat Users List
Subject: Re: Tomcat 6.0.18/ IIS 6.0 /SSL

On 04.08.2010 18:07, Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00

wrote:



I am trying to get Tomcat and IIS configured on my secure web server
(SSL) so that I can access my deployed web application via https and
NOT over http. Connection to non-SSL works, but I cannot have that
connection due to security.

I want to run Tomcat through IIS, and I have configured it using the
isapi_redirect.dll (thanks to Electronjockey). However, when I try
and hit my https://site/geoportalhttps://site/geoportal   my
credentials do not carry me through to the web application, instead I
receive Internet Explorer Cannot Display Webpage. Can someone help
me out on how to configure my server.xml and interpretting my log files

please?

I have even tried to export my server certificate, and call it using
the keystore:, still not working. I'm a Tomcat green horn, any help
would be awesome.

Isapi_redirect.log file: Looks like some sort of authentication is
being passed, then the ajp13 is not found?

[Wed Aug 04 11:51:15.901 2010] [10712:8360] [debug] jk_isapi_plugin.c
(3108): Service protocol=HTTP/1.1 method=GET host=150.125.174.70
addr=150.125.174.70 name=mywebsite port=443 auth=SSL/PCT
user=EIMS\john.doe uri=/jakarta/isapi_redirect.dll

[Wed Aug 04 11:51:15.916 2010] [10712:8360] [debug] jk_isapi_plugin.c
(3120): Service request headers=5 attributes=9 chunked=no
content-length=0 available=0

[Wed Aug 04 11:51:15.932 2010] [10712:8360] [debug] jk_worker.c (116):
did not find a worker ajp13
[Wed Aug 04 11:51:15.948 2010] [10712:8360] [debug] jk_isapi_plugin.c
(2162): could not get a worker for name ajp13 [Wed Aug 04
11:51:15.979 2010] [10712:8360] [error] jk_isapi_plugin.c
(2210): could not get a worker for name ajp13


Hard to tell without knowing the version of the isapi redirector, not
having your configuration. This looks like:

- it is trying to use a worker named ajp13 to connect to Tomcat. Lile
y you have configured the redirector to use this worker within your
uriworkermap.properties file

- the redirector doesn't know how to use this worker. Either you are
missing the workers.properties configuration file or there is no
definition for a worker named ajp13 in the file.

A good starting point for a workers.properties file is the example
file contained in the source distribution of version 1.2.30. Please do
also use this version of the redirector.

Note: from the point of view of Tomcat it doesn't really matter
whether you are talking http or https in the browser. This protocol is
only used between the browser and IIS. Between IIS and Tomcat when
using the isapi redirector the protocol is always AJP13 (it is just
coincidence, that this is the same name as the name

RE: Tomcat 6.0.18/ IIS 6.0 /SSL

2010-08-04 Thread Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00

Rainer,
Do you have a suggestion? Do I need to change my worker.properties? Sorry,
I'm new to Tomcat, I appreciate your help. 

-Original Message-
From: Rainer Jung [mailto:rainer.j...@kippdata.de] 
Sent: Wednesday, August 04, 2010 4:09 PM
To: Tomcat Users List
Subject: Re: Tomcat 6.0.18/ IIS 6.0 /SSL

On 04.08.2010 21:50, Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 wrote:
 I did read your post and I changed the Port Number.

 Connector port=8009 protocol=AJP/1.3 redirectPort=8443 / This 
 connector should be used depending on your redirector config which we 
 haven't seen yet

 Here is my workers.properties:

 worker.list=worker1
 worker.worker1.type=ajp13
 worker.worker1.host=127.0.0.1
 worker.worker1.port=8009

 Here is my uriworkermap.properties:

 /geoportal|/*=worker1

This didn't work, since the log snippet said it tried to use a worker named
ajp13, not worker1.

Regards,

Rainer

 -Original Message-
 From: Rainer Jung [mailto:rainer.j...@kippdata.de]
 Sent: Wednesday, August 04, 2010 3:40 PM
 To: Tomcat Users List
 Subject: Re: Tomcat 6.0.18/ IIS 6.0 /SSL

 On 04.08.2010 20:58, Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00
wrote:
 Jung,
 I'm still getting the errors.

 Why shouldn't you?
 Did you actually read my post?
 Which parts didn't you understand?

 Connector port=8080 protocol=Java HTTP   What protocol should I
 use
 here (do not want to expose)
  connectionTimeout=2
  redirectPort=80 /

 This connector is *not* involved when using

 Browser -  IIS/Redirector -  Tomcat

   Connector port=8443 protocol=HTTP/1.1 SSLEnabled=true
 -Does this look right?
  maxThreads=150 scheme=https secure=true
  clientAuth=false sslProtocol=TLSv1
 keystoreFile=C:\Program Files (x86)\Apache
Software 
 Foundation\Tomcat 6.0\conf\cert.pfx
  keystorePass=password
 keystoreType=pkcs12 /

 This one neither.

 Connector port=8009 protocol=AJP/1.3 redirectPort=8443 / 
 -Is this where my actual authentication is taking place?
 This connector should be used depending on your redirector config 
 which we haven't seen yet.

 The error message you provided doesn't have to do with authentication.
 Authentication problems might show up after you solved your worker 
 configuration problem. Until now your IIS doesn't even talk to Tomcat.

 Regards,

 Rainer

 -Original Message-
 From: Rainer Jung [mailto:rainer.j...@kippdata.de]
 Sent: Wednesday, August 04, 2010 1:38 PM
 To: Tomcat Users List
 Subject: Re: Tomcat 6.0.18/ IIS 6.0 /SSL

 On 04.08.2010 18:07, Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00
 wrote:

 I am trying to get Tomcat and IIS configured on my secure web server
 (SSL) so that I can access my deployed web application via https and 
 NOT over http. Connection to non-SSL works, but I cannot have that 
 connection due to security.

 I want to run Tomcat through IIS, and I have configured it using the 
 isapi_redirect.dll (thanks to Electronjockey). However, when I try
 and hit my https://site/geoportalhttps://site/geoportal   my
 credentials do not carry me through to the web application, instead 
 I receive Internet Explorer Cannot Display Webpage. Can someone 
 help me out on how to configure my server.xml and interpretting my 
 log files
 please?
 I have even tried to export my server certificate, and call it using 
 the keystore:, still not working. I'm a Tomcat green horn, any 
 help would be awesome.

 Isapi_redirect.log file: Looks like some sort of authentication is 
 being passed, then the ajp13 is not found?

 [Wed Aug 04 11:51:15.901 2010] [10712:8360] [debug] 
 jk_isapi_plugin.c
 (3108): Service protocol=HTTP/1.1 method=GET host=150.125.174.70 
 addr=150.125.174.70 name=mywebsite port=443 auth=SSL/PCT 
 user=EIMS\john.doe uri=/jakarta/isapi_redirect.dll

 [Wed Aug 04 11:51:15.916 2010] [10712:8360] [debug] 
 jk_isapi_plugin.c
 (3120): Service request headers=5 attributes=9 chunked=no 
 content-length=0 available=0

 [Wed Aug 04 11:51:15.932 2010] [10712:8360] [debug] jk_worker.c (116):
 did not find a worker ajp13
 [Wed Aug 04 11:51:15.948 2010] [10712:8360] [debug] 
 jk_isapi_plugin.c
 (2162): could not get a worker for name ajp13 [Wed Aug 04
 11:51:15.979 2010] [10712:8360] [error] jk_isapi_plugin.c
 (2210): could not get a worker for name ajp13

 Hard to tell without knowing the version of the isapi redirector, not 
 having your configuration. This looks like:

 - it is trying to use a worker named ajp13 to connect to Tomcat. Lile 
 y you have configured the redirector to use this worker within your 
 uriworkermap.properties file

 - the redirector doesn't know how to use this worker. Either you are 
 missing the workers.properties configuration file or there is no 
 definition for a worker named ajp13 in the file.

 A good starting point for a workers.properties file is the example 
 file contained in

Re: Tomcat 6 does not respond or freeze after startup


 Hello,

I have executed 'netstat -anopb tcp' with the following result:
TCP0.0.0.0:8009   0.0.0.0:0  LISTENING
3436[java.exe]
TCP0.0.0.0:8080   0.0.0.0:0  LISTENING
3436[java.exe]
TCP127.0.0.1:8005 0.0.0.0:0  LISTENING
3436  [java.exe]


I could not find another listening port for java.exe.

BUT the requests to the frozen Tomcat results into
TCP127.0.0.1:8080 127.0.0.1:2049 CLOSE_WAIT
3436[java.exe]
TCP127.0.0.1:8080 127.0.0.1:2050 CLOSE_WAIT
3436[java.exe]
TCP127.0.0.1:8080 127.0.0.1:1992 CLOSE_WAIT
3436[java.exe]
TCP127.0.0.1:8080 127.0.0.1:1991 CLOSE_WAIT
3436[java.exe]
TCP127.0.0.1:8080 127.0.0.1:2051 CLOSE_WAIT
3436[java.exe]
TCP127.0.0.1:8080 127.0.0.1:1990 CLOSE_WAIT
3436[java.exe]
TCP127.0.0.1:8080 127.0.0.1:1989 CLOSE_WAIT
3436[java.exe]
TCP127.0.0.1:8080 127.0.0.1:2043 CLOSE_WAIT
3436[java.exe]
TCP127.0.0.1:8080 127.0.0.1:2042 CLOSE_WAIT
3436[java.exe]

Any ideas what happens here?


Later this week I will try to setup a virtual machine running WinXP and 
Tomcat to check again.



Kind regards,

T.Gau



Caldarale, Charles R schrieb am 04.08.2010 15:32:

From: T. Gau [mailto:t...@normad.de]
Subject: Re: Tomcat 6 does not respond or freeze after startup

my Windows Firewall is 'Inactive'. Instead I'm using the Ashampoo
Firewall FREE. But I could not connect to Tomcat via telnet even
if I stop this firewall, too.

With Tomcat running, what does netstat -anop tcp show?  The Tomcat process 
should be listening on ports 8005, 8009, and 8080, as in the following:

   TCP  0.0.0.0:80090.0.0.0:0  LISTENING  4720
   TCP  0.0.0.0:80800.0.0.0:0  LISTENING  4720
   TCP  127.0.0.1:8005  0.0.0.0:0  LISTENING  4720

(There should also be one other port Tomcat is listening on, but its value 
varies.)

If all of that looks normal, then I'd try running Tomcat on another machine, 
preferably one with a clean installation of Windows.

  - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org




-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Tomcat 6 does not respond or freeze after startup


 Hello,

I assumed that I'm not running IPv6 because ipconfig didn't show an IPv6 
address. Any ideas how to play safe?



Kind regards,

T. Gau



Christopher Schultz schrieb am 04.08.2010 15:54:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

T.,

On 8/3/2010 5:46 PM, T. Gau wrote:

@IPv6:
As fas as I know, I'm not running IPv6. IPconfig doesn't show any IPv6
specific.

Sure? From your own log file:

INFO: Loaded APR based Apache Tomcat Native library 1.1.20.
03.08.2010 21:33:41 org.apache.catalina.core.AprLifecycleListener init
INFO: APR capabilities: IPv6 [true], sendfile [true], accept filters
[false], random [true].

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkxZcREACgkQ9CaO5/Lv0PDATgCeJgblMBp8yvyNzRZHFxnf3KbK
6RMAmwctcSbfeOFYKVpvFEk3KzrB5onb
=4/BI
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org




-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Tomcat 6 does not respond or freeze after startup

2010-08-04 Thread André Warnier


Hi T.

T. Gau wrote:

 Hello,

I have executed 'netstat -anopb tcp' with the following result:
TCP0.0.0.0:8009   0.0.0.0:0  LISTENING
3436[java.exe]
TCP0.0.0.0:8080   0.0.0.0:0  LISTENING
3436[java.exe]
TCP127.0.0.1:8005 0.0.0.0:0  LISTENING
3436  [java.exe]


I could not find another listening port for java.exe.


The above is perfectly normal and classical.  It shows
- a listening port 8080, for the HTTP Connector
- a listening port 8009, for the AJP Connector
- a listening port 8005, for the Tomcat shutdown connector




BUT the requests to the frozen Tomcat results into
TCP127.0.0.1:8080 127.0.0.1:2049 CLOSE_WAIT
3436[java.exe]
TCP127.0.0.1:8080 127.0.0.1:2050 CLOSE_WAIT
3436[java.exe]
TCP127.0.0.1:8080 127.0.0.1:1992 CLOSE_WAIT
3436[java.exe]
TCP127.0.0.1:8080 127.0.0.1:1991 CLOSE_WAIT
3436[java.exe]
TCP127.0.0.1:8080 127.0.0.1:2051 CLOSE_WAIT
3436[java.exe]
TCP127.0.0.1:8080 127.0.0.1:1990 CLOSE_WAIT
3436[java.exe]
TCP127.0.0.1:8080 127.0.0.1:1989 CLOSE_WAIT
3436[java.exe]
TCP127.0.0.1:8080 127.0.0.1:2043 CLOSE_WAIT
3436[java.exe]
TCP127.0.0.1:8080 127.0.0.1:2042 CLOSE_WAIT
3436[java.exe]

Any ideas what happens here?



That is more interesting. If the situation above is transitory (just lasts a few seconds), 
then it might be normal.  If the situation above persists for a long tine, then it shows 
that Tomcat (or something within Tomcat) is not properly closing its end of client 
sockets, and that the objects containing these sockets are lingering on the Heap, waiting 
to be collected.
I'm sure someone else on this list could suggest a scenario where a badly-behaved 
application could achieve this.

(or a very large keepAlive setting ?)


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Tomcat 6 does not respond or freeze after startup

 From: T. Gau [mailto:t...@normad.de]
 Subject: Re: Tomcat 6 does not respond or freeze after startup

 I assumed that I'm not running IPv6 because ipconfig 
 didn't show an IPv6 address. Any ideas how to play safe?

Look at the properties of each Network Connection and see if the Microsoft 
TCP/IP version 6 box is checked.

 - Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.

Re: Tomcat 6 does not respond or freeze after startup


 Hello,

the CLOSE_WAIT connections are persistent (waiting 10+min now). The 
FIN_WAIT counterparts from the browser disapear after some time.


As a reminder: The Tomcat installation is untouched. No configuration 
and no deployed applications besides these allready packaged with Tomcat.



Kind regards,

T. Gau


André Warnier schrieb am 04.08.2010 23:11:

Hi T.

T. Gau wrote:

 Hello,

I have executed 'netstat -anopb tcp' with the following result:
TCP0.0.0.0:8009   0.0.0.0:0  LISTENING
3436[java.exe]
TCP0.0.0.0:8080   0.0.0.0:0  LISTENING
3436[java.exe]
TCP127.0.0.1:8005 0.0.0.0:0  LISTENING
3436  [java.exe]


I could not find another listening port for java.exe.


The above is perfectly normal and classical.  It shows
- a listening port 8080, for the HTTP Connector
- a listening port 8009, for the AJP Connector
- a listening port 8005, for the Tomcat shutdown connector




BUT the requests to the frozen Tomcat results into
TCP127.0.0.1:8080 127.0.0.1:2049 CLOSE_WAIT
3436[java.exe]
TCP127.0.0.1:8080 127.0.0.1:2050 CLOSE_WAIT
3436[java.exe]
TCP127.0.0.1:8080 127.0.0.1:1992 CLOSE_WAIT
3436[java.exe]
TCP127.0.0.1:8080 127.0.0.1:1991 CLOSE_WAIT
3436[java.exe]
TCP127.0.0.1:8080 127.0.0.1:2051 CLOSE_WAIT
3436[java.exe]
TCP127.0.0.1:8080 127.0.0.1:1990 CLOSE_WAIT
3436[java.exe]
TCP127.0.0.1:8080 127.0.0.1:1989 CLOSE_WAIT
3436[java.exe]
TCP127.0.0.1:8080 127.0.0.1:2043 CLOSE_WAIT
3436[java.exe]
TCP127.0.0.1:8080 127.0.0.1:2042 CLOSE_WAIT
3436[java.exe]

Any ideas what happens here?



That is more interesting. If the situation above is transitory (just 
lasts a few seconds), then it might be normal.  If the situation above 
persists for a long tine, then it shows that Tomcat (or something 
within Tomcat) is not properly closing its end of client sockets, and 
that the objects containing these sockets are lingering on the Heap, 
waiting to be collected.
I'm sure someone else on this list could suggest a scenario where a 
badly-behaved application could achieve this.

(or a very large keepAlive setting ?)


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org




-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Tomcat 6 does not respond or freeze after startup


 Check: No IPv6.


Kind regards.


Caldarale, Charles R schrieb am 04.08.2010 23:23:

From: T. Gau [mailto:t...@normad.de]
Subject: Re: Tomcat 6 does not respond or freeze after startup

I assumed that I'm not running IPv6 because ipconfig
didn't show an IPv6 address. Any ideas how to play safe?

Look at the properties of each Network Connection and see if the Microsoft TCP/IP 
version 6 box is checked.

  - Chuck



THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.




-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Tomcat 6 does not respond or freeze after startup

2010-08-04 Thread André Warnier

T. Gau wrote:

Hello,

the CLOSE_WAIT connections are persistent (waiting 10+min now). The
FIN_WAIT counterparts from the browser disapear after some time.

As a reminder: The Tomcat installation is untouched. No configuration
and no deployed applications besides these allready packaged with Tomcat.

Ok. But from the netstat dislay below, it looks as if a number of processes *local to the
server* and with PID's 2049,2050,1992,1991 etc.. /have/ connected to Tomcat on port 8080.

What are these processes, and are they still alive when you take this netstat
screenshot ?

Can you briefly remind us of what kind of request to Tomcat these clients are issuing, and
what happens in them while they wait/don't wait for a response ?

(A long time ago, I got some ps.exe program - probably in a Windows/NT Toolkit - which
is easier than the Task Manager to look this up and cut/paste.
Apparently still available in some form :
http://technet.microsoft.com/en-us/sysinternals/bb795532.aspx

)

Kind regards,

T. Gau

André Warnier schrieb am 04.08.2010 23:11:

Hi T.

T. Gau wrote:

Hello,

I have executed 'netstat -anopb tcp' with the following result:
TCP0.0.0.0:8009 0.0.0.0:0 LISTENING
3436[java.exe]
TCP0.0.0.0:8080 0.0.0.0:0 LISTENING
3436[java.exe]
TCP127.0.0.1:8005 0.0.0.0:0 LISTENING
3436 [java.exe]

I could not find another listening port for java.exe.

The above is perfectly normal and classical. It shows
- a listening port 8080, for the HTTP Connector
- a listening port 8009, for the AJP Connector
- a listening port 8005, for the Tomcat shutdown connector

BUT the requests to the frozen Tomcat results into
TCP127.0.0.1:8080 127.0.0.1:2049 CLOSE_WAIT
3436[java.exe]
TCP127.0.0.1:8080 127.0.0.1:2050 CLOSE_WAIT
3436[java.exe]
TCP127.0.0.1:8080 127.0.0.1:1992 CLOSE_WAIT
3436[java.exe]
TCP127.0.0.1:8080 127.0.0.1:1991 CLOSE_WAIT
3436[java.exe]
TCP127.0.0.1:8080 127.0.0.1:2051 CLOSE_WAIT
3436[java.exe]
TCP127.0.0.1:8080 127.0.0.1:1990 CLOSE_WAIT
3436[java.exe]
TCP127.0.0.1:8080 127.0.0.1:1989 CLOSE_WAIT
3436[java.exe]
TCP127.0.0.1:8080 127.0.0.1:2043 CLOSE_WAIT
3436[java.exe]
TCP127.0.0.1:8080 127.0.0.1:2042 CLOSE_WAIT
3436[java.exe]

Any ideas what happens here?

That is more interesting. If the situation above is transitory (just
lasts a few seconds), then it might be normal. If the situation above
persists for a long tine, then it shows that Tomcat (or something
within Tomcat) is not properly closing its end of client sockets, and
that the objects containing these sockets are lingering on the Heap,
waiting to be collected.
I'm sure someone else on this list could suggest a scenario where a
badly-behaved application could achieve this.

(or a very large keepAlive setting ?)

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Rewrite URLs inside HTML pages?

2010-08-04 Thread Leon Kolchinsky

Hi,

Hmm.
Interesting.
Of course I'd like to make it work with simple configuration or/and with
JkHTTPSIndicator.

I'm just not clear on how to make this simple configuration.

As I've said there is no SSL handling on the server side. All SSL request
handled on the load balance level which in turn talks to Apache (configured
to talk to Tomcat via mod_jk) via http.

myserv.mydomain.com - Tomcat server's Domain name
sakai-stg.mydomain.com - Load balancer's Domain name

Clients coming to Load Balancer's URL https://sakai-stg.mydomain.com need to
use internal links (submit forms etc.) which appear as http://
sakai-stg.mydomain.com/. on the served pages.
Submitting forms is not working in that scenario since the links should look
like this inside the pages - https://sakai-stg.mydomain.com/.


Please see my mod_jk.conf, workers.properties, 01myserv.mydomain.com.conf
files below.

Can you come up with a solution without using mod_substitute as I do now?

[r...@myserv mod_sed]# cat /etc/httpd/conf/mod_jk.conf
LoadModule jk_module modules/mod_jk.so

# mod_jk config
# Where to find workers.properties
# Update this path to match your conf directory location (put
workers.properties next to httpd.conf)
JkWorkersFile /etc/httpd/conf/workers.properties
# Where to put jk shared memory
# Update this path to match your local state directory or logs directory
JkShmFile /var/log/httpd/mod_jk.shm
# Where to put jk logs
# Update this path to match your logs directory location (put mod_jk.log
next to access_log)
JkLogFile /var/log/httpd/mod_jk.log
# Set the jk log level [debug/error/info]
JkLogLevel info
# Select the timestamp log format
JkLogStampFormat [%a %b %d %H:%M:%S %Y] 
#JkOptions indicate to send SSL KEY SIZE,
JkOptions +ForwardKeySize +ForwardURICompat -ForwardDirectories
# JkRequestLogFormat set the request format
JkRequestLogFormat %w %V %T
# Globally deny access to the WEB-INF directory
LocationMatch '.*WEB-INF.*'
AllowOverride None
deny from all
/LocationMatch

[r...@myserv mod_sed]#
[r...@myserv mod_sed]# cat /etc/httpd/conf/workers.properties
#
# This file provides minimal jk configuration properties needed to
# connect to Tomcat.
#
# We define a workers named worker1 and worker2
workers.tomcat_home=/srv/tomcat/
workers.java_home=/srv/jdk
ps=/

worker.list=worker1
worker.worker1.type=ajp13
worker.worker1.host=localhost
worker.worker1.port=8009
worker.worker1.lbfactor=1


# Load-balancing behaviour (add when you have more than 1 worker and change
worker.workerX.host and worker.list accordingly)
# worker.loadbalancer.type=lb

# Status worker for managing load balancer (add when you have more than 1
worker)
worker.status.type=status

[r...@myserv mod_sed]#
[r...@myserv mod_sed]# cat
/etc/httpd/conf/vhosts.d/01myserv.mydomain.com.conf
LoadModule substitute_module modules/mod_substitute.so

NameVirtualHost *:80

VirtualHost *:80
ServerName myserv.mydomain.com
ServerAdmin leon.kolchin...@mydomain.com
ServerAlias sakai-stg

# Just in case
DocumentRoot /srv/sakai

# if not specified, the global error log is used
ErrorLog /var/log/httpd/myserv.mydomain.com-error_log
CustomLog /var/log/httpd/myserv.mydomain.com-access_log combined
# don't loose time with IP address lookups
HostnameLookups Off
# needed for named virtual hosts
UseCanonicalName Off

# Add index.jsp to DirectoryIndex files
DirectoryIndex index.php index.html index.htm index.shtml index.php4
index.php3 index.phtml index.cgi index.jsp

JkMount /* worker1

AddOutputFilterByType SUBSTITUTE text/html
Substitute s|http://myserv|https://sakai-stg|i
Substitute s|http://sakai-stg|https://sakai-stg|i

/VirtualHost


Best Regards,
Leon



On Wed, Aug 4, 2010 at 23:58, Christopher Schultz 
ch...@christopherschultz.net wrote:

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1

 Leon,

 On 8/3/2010 2:45 AM, Leon Kolchinsky wrote:
  Thanks for your help Rainer/Felix,
 
  I've tested several options including mod_substitute and mod_sed and it
  seems that mod_substitute is a way to go.

 Yuk: why go through the kludge of re-writing the pages when simple
 configuration can make it so the pages are correct in the first place?

 - -chris
 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.4.10 (MingW32)
 Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

 iEYEARECAAYFAkxZciMACgkQ9CaO5/Lv0PBqtQCgqVkecwM/GcfFnpZY4CeQ5M+g
 weIAnjBkSVjFNpyHaRJ6b58XRXjwIu41
 =x21u
 -END PGP SIGNATURE-

 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org




-- 
Leon Kolchinsky
Senior Software Specialist (Collaborative Applications)
ITS Research Support Services
Monash e-Research Centre (MeRC)
Monash University
tel: +61 3 99059560

Tomcat 6 64 bit and IIS 7 64 bit integration not working

2010-08-04 Thread Twinkle Chokshi

Hi All

I'm having troubles integrating IIS 7 64bit with Tomcat 6 64bit on a Window 7 
OS. I'm also using 64bit isap_redirect.dll. The tomcat logs have no info in 
regards to the IIS connection.

The IIS server returns an HTTP 500.0 - Internal Server error. With the 
following detailed error message

Module IsapiFilterModule
Notification AuthenticateRequest
Handler chemalert
Error Code 0x80070001
Requested URL http://localhost:80/chemalert
Physical Path C:\CA-Intranet\Tomcat\webapps\chemalert
Logon Method Anonymous
Logon User Anonymous

Any suggestions please?

Thanks
Twinkle

RE: Memory leak in using SSL with Tomcat 6.0.18

Hi Chris,

Attached is the image for incoming references for 
com.sun.net.ssl.internal.ssl.SSLSocketImpl objects.
Please let me know if you want any further details.

Thanks,


-Original Message-
From: Christopher Schultz [mailto:ch...@christopherschultz.net] 
Sent: Wednesday, August 04, 2010 10:14 PM
To: Tomcat Users List
Subject: Re: Memory leak in using SSL with Tomcat 6.0.18

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

B.,

On 8/4/2010 10:19 AM, B. Balakrishna Rao wrote:
 Please note that, the 2,996 count is on production environment.
 The counts 7 and 10 are on my local environment.

Ok.

 Below is the procedure I am following on my local environment to test this:
 
 Log in - do some operations - log out.
 I am calling session.invalidate() method upon log out.

Whether you log out of not shouldn't have anything to do with these
objects staying around.

 After that, I am taking the heap dump. Eclipse Memory Analyzer tool
 will do a full GC before it produce the results. Hence, 
 com.sun.net.ssl.internal.ssl.SSLSocketImpl should be GCed??

Most likely.

Since you're using a profiler, can you show us what the stack trace is
of the code that created the SSLSocketImpl objects?

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkxZmNEACgkQ9CaO5/Lv0PA3DwCdEpwgPIclWBmmlfM+wD5VX0w4
YPIAn2P5+aVG9u8UswVYPEd5ctXh2jO1
=kV3t
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


DISCLAIMER
==
This e-mail may contain privileged and confidential information which is the 
property of Persistent Systems Ltd. It is intended only for the use of the 
individual or entity to which it is addressed. If you are not the intended 
recipient, you are not authorized to read, retain, copy, print, distribute or 
use this message. If you have received this communication in error, please 
notify the sender and delete all copies of this message. Persistent Systems 
Ltd. does not accept any liability for virus infected mails.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Prioritizing incoming requests