date:20101021

> From: Keith Masten [mailto:spmdt...@gmail.com] 
> Subject: Re: Securing A Directory Listing

> The realm definition for this tomcat instance is in
> the server.xml.

That partially answers the question.  As the doc says: "You may nest a Realm 
inside any Catalina container Engine, Host, or Context."  Where's yours?

> Should the realm defined in the web.xml be
> defined/referenced somewhere?

Probably not, as long as you're comfortable with using the same  for all 
webapps that require authentication.

> Just tried the basic setup again and no luck.

What is meant by "no luck"?  I don't recall any Tomcat error message with that 
phrasing...

> When prompted, I should enter id - bob, pw - bob according
> to my tomcat-users.xml, correct???

Correct, as long as the  is BASIC.  Might want to post your 
current WEB-INF/web.xml file.

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Securing A Directory Listing

Not sure how to answer your Realm question.  The realm in the web.xml is not
referenced anywhere.  The realm definition for this tomcat instance is in
the server.xml.  Should the realm defined in the web.xml be
defined/referenced somewhere?

Just tried the basic setup again and no luck.  When prompted, I should enter
id - bob, pw - bob according to my tomcat-users.xml, correct???

On Thu, Oct 21, 2010 at 2:18 PM, Caldarale, Charles R <
chuck.caldar...@unisys.com> wrote:

> > From: Keith Masten [mailto:spmdt...@gmail.com]
> > Subject: Re: Securing A Directory Listing
>
> > login dialog is presented, but no matter what Id/pw I
> > provide I cannot login.
>
> For initial testing purposes, try BASIC for the  and put
> unencrypted passwords in the  list.  Once that's working, then
> move on to DIGEST mode.
>
> Where is your  element located?
>
>  - Chuck
>
>
> THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
> MATERIAL and is thus for use only by the intended recipient. If you received
> this in error, please contact the sender and delete the e-mail and its
> attachments from all computers.
>
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>

RE: javax.naming.NamingException: Cannot create resource instance

2010-10-21 Thread Propes, Barry L

I know it's allowed in TC 4. I was saying not allowed in 5, or after 5.0 or 5.5.

-Original Message-
From: Aparna1 V [mailto:aparna...@tcs.com]
Sent: Thursday, October 21, 2010 10:55 AM
To: Tomcat Users List
Subject: RE: javax.naming.NamingException: Cannot create resource instance

Hi Barry,

 That is allowed in TC 4.

From:
"Propes, Barry L " 
To:
Tomcat Users List 
Date:
10/21/2010 09:21 PM
Subject:
RE: javax.naming.NamingException: Cannot create resource instance

Not sure, but I don't think you need all those attributes separated like that.

 In TC4 you had to do that -- but not so after 5.0, or at least 5.5

And on top of that, you've got two ResourceLink name attributes pointing to the 
same class with different names.

Not sure, but is that allowed?

-Original Message-
From: Aparna1 V [mailto:aparna...@tcs.com]
Sent: Thursday, October 21, 2010 10:25 AM
To: users@tomcat.apache.org
Subject: javax.naming.NamingException: Cannot create resource instance

I am getting the following error:

PoolName = 2005pool PoolJndiRef = jdbc/global05 Init Param: jdbc/global05
javax.naming.NamingException: Cannot create resource instance
 at

Please advise as to what could be wrong since im using the server.xml that i 
was using with the tomcat 4.

Thanks,
Aparna

=-=-=
Notice: The information contained in this e-mail message and/or attachments to 
it may contain confidential or privileged information. If you are not the 
intended recipient, any dissemination, use, review, distribution, printing or 
copying of the information contained in this e-mail message and/or attachments 
to it are strictly prohibited. If you have received this communication in 
error, please notify us by reply e-mail or telephone and immediately and 
permanently delete the message and any attachments. Thank you

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

=-=-=
Notice: The information contained in this e-mail message and/or attachments to 
it may contain confidential or privileged information. If you are not the 
intended recipient, any dissemination, use, review, distribution, printing or 
copying of the information contained in this e-mail message and/or attachments 
to it are strictly prohibited. If you have received this communication in 
error, please notify us by reply e-mail or telephone and immediately and 
permanently delete the message and any attachments. Thank you

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Missing property "keepAliveTimeout" on Connector in 6.0.29?

> From: Christopher Schultz [mailto:ch...@christopherschultz.net] 
> Subject: Missing property "keepAliveTimeout" on Connector in 6.0.29?

> I'm updating all my software to re-do my performance testing and I'm
> getting a warning during startup:

> [SetAllPropertiesRule]{Server/Service/Connector} Setting property
> 'keepAliveTimeout' to '15000' did not find a matching property

Works for me on 6.0.29, for both APR and non-APR s, running on Win7.



JConsole shows the configured values in the Connector MBean.

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.

RE: Securing A Directory Listing

> From: Keith Masten [mailto:spmdt...@gmail.com] 
> Subject: Re: Securing A Directory Listing

> login dialog is presented, but no matter what Id/pw I 
> provide I cannot login.

For initial testing purposes, try BASIC for the  and put 
unencrypted passwords in the  list.  Once that's working, then 
move on to DIGEST mode.

Where is your  element located?

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Missing property "keepAliveTimeout" on Connector in 6.0.29?

2010-10-21 Thread Christopher Schultz

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

All,

I'm updating all my software to re-do my performance testing and I'm
getting a warning during startup:

[SetAllPropertiesRule]{Server/Service/Connector} Setting property
'keepAliveTimeout' to '15000' did not find a matching property

The documentation says that keepAliveTimeout is still a valid setting.
Did something change?

Thanks,
- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkzAkHQACgkQ9CaO5/Lv0PDx1wCdFtlY5bGYEsfOQ3QWetyBkA1o
I9MAnjYGVffsPgfnJUUFxyv+L+Tx4S/T
=QF8v
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Source Address based Realms

2010-10-21 Thread Aggarwal, Ajay

Thanks for the pointers!

-Original Message-
From: André Warnier [mailto:a...@ice-sa.com] 
Sent: Thursday, October 21, 2010 3:55 AM
To: Tomcat Users List
Subject: Re: Source Address based Realms

Aggarwal, Ajay wrote:
> bump... looking for ideas... anybody?

If the question finally is "..without using *container-based* 
authentication/authorisation", then have a look at

http://securityfilter.sourceforge.net/

There is good explanation of the difference between the "container-based" and 
"filter-based" approach to AAA, and maybe it already offers what you want.

Another good place to look would be

http://www.tuckey.org/urlrewrite/

which is not properly-speaking an authentication filter, but which may help in 
your purpose.

Both of these are open-source, so it should not be very hard to add the 
functionality you 
want, if it is not there already.





> 
> -Original Message-
> From: Aggarwal, Ajay [mailto:ajay.aggar...@stratus.com] 
> Sent: Tuesday, October 19, 2010 10:29 AM
> To: Tomcat Users List
> Subject: RE: Source Address based Realms
> 
> Sorry. I meant...
> 
> "Is there another way to achieve this, i.e. without using Realms or
> mixing valve/filters with Realms?"
> 
> -Original Message-
> From: Aggarwal, Ajay [mailto:ajay.aggar...@stratus.com] 
> Sent: Tuesday, October 19, 2010 9:45 AM
> To: users@tomcat.apache.org
> Subject: Source Address based Realms
> 
> I need to treat my clients differently depending on where they came
> from. I need to trust all requests coming locally (i.e. from
> 127.0.0.1/localhost) and not require them to authentication. However all
> external requests need to go through authentication. Is there a way to
> configure Realms in Tomcat to accommodate this? 
> 
>  
> 
> Is there another way to achieve this, i.e. without using Realms or
> missing valve/filters with Realms?
> 
>  
> 
> -Ajay
> 
> 
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
> 
> 
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
> 
> 


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Source Address based Realms

2010-10-21 Thread Aggarwal, Ajay

Servlet filter was the first thing that came to my mind, but I was
hoping to leverage tomcat's built-in Realm support, if I could.

Thanks for your suggestions.

-Ajay

-Original Message-
From: Srinivasa Rao.Kandula [mailto:srinivas_j...@yahoo.com] 
Sent: Wednesday, October 20, 2010 4:46 PM
To: Tomcat Users List
Subject: Re: Source Address based Realms

I'm providing my comments assuming that you are a Java developer.

1. Do you see any issues using a Servlet filter for doing this?
2. You could use realms if you can access ServletRequest object
which will give 
you the IP address of the client. But I don't think you can access 
ServletRequest object in relam class in tomcat. I know you can do it
with JBoss
3. You may be able to write custom callback handlers and
callback and get 
client IP to realm(a wild guess)

 Regards,
Srinivas.





From: "Aggarwal, Ajay" 
To: Tomcat Users List 
Sent: Wed, October 20, 2010 12:53:42 PM
Subject: RE: Source Address based Realms

bump... looking for ideas... anybody?

-Original Message-
From: Aggarwal, Ajay [mailto:ajay.aggar...@stratus.com] 
Sent: Tuesday, October 19, 2010 10:29 AM
To: Tomcat Users List
Subject: RE: Source Address based Realms

Sorry. I meant...

"Is there another way to achieve this, i.e. without using Realms or
mixing valve/filters with Realms?"

-Original Message-
From: Aggarwal, Ajay [mailto:ajay.aggar...@stratus.com] 
Sent: Tuesday, October 19, 2010 9:45 AM
To: users@tomcat.apache.org
Subject: Source Address based Realms

I need to treat my clients differently depending on where they came
from. I need to trust all requests coming locally (i.e. from
127.0.0.1/localhost) and not require them to authentication. However all
external requests need to go through authentication. Is there a way to
configure Realms in Tomcat to accommodate this? 



Is there another way to achieve this, i.e. without using Realms or
missing valve/filters with Realms?



-Ajay


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


  

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Securing A Directory Listing

login dialog is presented, but no matter what Id/pw I provide I cannot
login.
Here is the web.xml that I am using and the tomcat-users.xml



  
  
  
  
  
  
  
  
  
  



http://java.sun.com/xml/ns/j2ee";
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee
http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd";
version="2.4">
  Vision Application Logs


  
applogs
/*
  
  
vsn-offsh
  



  DIGEST
  applogs



  vsn-offsh






On Thu, Oct 21, 2010 at 9:43 AM, Keith Masten  wrote:

> I made the change Chuck suggested and it now prompts me for userid/pw.  I
> now have to setup the proper user access to make the setup complete.
>
>
> On Thu, Oct 21, 2010 at 9:34 AM, Keith Masten  wrote:
>
>> Thank you for pointing that out Chuck, I will make that adjustment.
>>
>>
>> On Thu, Oct 21, 2010 at 9:16 AM, Caldarale, Charles R <
>> chuck.caldar...@unisys.com> wrote:
>>
>>> > From: Keith Masten [mailto:spmdt...@gmail.com]
>>> > Subject: Re: Securing A Directory Listing
>>>
>>> > This does not work.
>>>
>>> Be more specific.
>>>
>>> > /applogs/*
>>>
>>> I suspect you erroneously included the path to the webapp in the above.
>>>  I you specify just "/*", the entire webapp will be protected; what you have
>>> protects only /applogs underneath the webapp.
>>>
>>>  - Chuck
>>>
>>>
>>> THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
>>> MATERIAL and is thus for use only by the intended recipient. If you received
>>> this in error, please contact the sender and delete the e-mail and its
>>> attachments from all computers.
>>>
>>>
>>> -
>>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>>> For additional commands, e-mail: users-h...@tomcat.apache.org
>>>
>>>
>>
>

Re: tomcat 6.0.29 hung


Jason Britton wrote:

Hi Martin,
In researching my jstack not working issue I too came across the make sure
you run jstack as the same user that tomcat is running as.  So I did try
su'ing to my tomcat user and issuing the jstack -F -l -m  command to no
avail.  After I reproduce my application deadlock again this morning
(hopefully) I'll try jstack again without the -F and I'll also try the kill
-QUIT.  I did not have to enable JMX on this particular tomcat instance in
order to use jvisualvm.  I don't think jmx comes in to play when using
jvisualvm.  I just went into our server room and pulled up a terminal window
right off the server's desktop in order to launch jvisualvm (going to hookup
cygwin/x instead shortly).

...

This previous thread from a couple of days ago may shed a bit of light on the 
issue :

Tomcat 6.0.29 - Windows Service - JMX


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: tomcat 6.0.29 hung

2010-10-21 Thread Jason Britton

Hi Martin,
In researching my jstack not working issue I too came across the make sure
you run jstack as the same user that tomcat is running as.  So I did try
su'ing to my tomcat user and issuing the jstack -F -l -m  command to no
avail.  After I reproduce my application deadlock again this morning
(hopefully) I'll try jstack again without the -F and I'll also try the kill
-QUIT.  I did not have to enable JMX on this particular tomcat instance in
order to use jvisualvm.  I don't think jmx comes in to play when using
jvisualvm.  I just went into our server room and pulled up a terminal window
right off the server's desktop in order to launch jvisualvm (going to hookup
cygwin/x instead shortly).

Even though jvisualvm was unable to retrieve stacktraces for the threaddumps
and pull them into it's GUI for display ("exception while walking
stacktrace") every time I issued a thread dump command through jvisualvm it
did indeed dump all my thread info + stacktraces into my tomcat logs, it
just couldn't pull it into the GUI for some reason.

Wesley: I now do think my initial kill -QUIT worked as well, I just didn't
check the right log or for some reason was expecting it to dump to the
command line rather than in my tomcat logs where it did go.

Mark: Definitely going to update those dbcp libs.  First step for me is to
try and find a way to reliably reproduce hangup so I'll have a test case to
come back to in order to verify any subsequent fixes actually did the job.

Thanks for the input -   Jason






On Thu, Oct 21, 2010 at 6:02 AM, Martin Kuen  wrote:

> jason,
>
> Out of personal interest I have a question about the way you use jstack. I
> came across this "jstack cannot take dump of hung process" problem before.
> I
> once witnessed the same exceptions when chasing a deadlock.
>
> This happened to me on ubuntu 10.4.0 (and 10.4.1) 64-bit using sun's jdk
> 1.6.0_21
>
> My mistake was to invoke jstack as a different user, that is, not the user
> which is running the given java application (e.g. root instead of tomcat6).
> Invoking jstack with the -F option as root showed these exceptions, whereas
> kill -QUIT didn't produce anything and jstack without -F failed as well.
>
> As a quick workaround I changed /etc/passwd to allow the user tomcat6 to
> use
> a shell. Issuing a "su tomcat6" as root I was able to get jstack (and kill
> -QUIT) working. Disclaimer: I don't know how tomcat is packaged for Red
> Hat.
>
> I tried to check this with so. who actually claimed that his jvm was hung
> when he tried to get a stack-trace. However, I was told that the problem no
> longer exists (no hung jvm anymore) and the investigation ceased.
>
> This is were you come into play :)
>
> It appears to me that "hung application" alone does not imply that "-F" is
> required. So, if my application enters a infinite loop or gets stuck in a
> deadlock my application is unresponsive and will most likely be referred to
> as "hung", but the vm is actually functioning perfectly. It's just my
> application, that, well, . . . .
>
> In my case I was able to get a stacktrace from an application which was
> stuck in a deadlock (log4j with multiple appenders, multiple threads using
> the same Logger instance) without using "-F" at all.
>
> When you use jvisualvm you most likely do so by enabling (and connecting
> through) jmx (true?). I believe it's correct to claim that this is at least
> a different way of attaching to the vm, than using jstack from the
> comandline. Could be the reason why you were "suddenly" able to get a
> thread
> dump.
>
> Could you give it a shot?
>
>
> Best Regards,
>
> Martin
>

RE: javax.naming.NamingException: Cannot create resource instance

2010-10-21 Thread Aparna1 V

Hi Barry,

 That is allowed in TC 4. 

From:
"Propes, Barry L " 
To:
Tomcat Users List 
Date:
10/21/2010 09:21 PM
Subject:
RE: javax.naming.NamingException: Cannot create resource instance

Not sure, but I don't think you need all those attributes separated like 
that.

 In TC4 you had to do that -- but not so after 5.0, or at least 5.5

And on top of that, you've got two ResourceLink name attributes pointing 
to the same class with different names.

Not sure, but is that allowed?

-Original Message-
From: Aparna1 V [mailto:aparna...@tcs.com]
Sent: Thursday, October 21, 2010 10:25 AM
To: users@tomcat.apache.org
Subject: javax.naming.NamingException: Cannot create resource instance

I am getting the following error:

PoolName = 2005pool PoolJndiRef = jdbc/global05
Init Param: jdbc/global05
javax.naming.NamingException: Cannot create resource instance
 at

Please advise as to what could be wrong since im using the server.xml that
i was using with the tomcat 4.

Thanks,
Aparna

=-=-=
Notice: The information contained in this e-mail
message and/or attachments to it may contain
confidential or privileged information. If you are
not the intended recipient, any dissemination, use,
review, distribution, printing or copying of the
information contained in this e-mail message
and/or attachments to it are strictly prohibited. If
you have received this communication in error,
please notify us by reply e-mail or telephone and
immediately and permanently delete the message
and any attachments. Thank you

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

=-=-=
Notice: The information contained in this e-mail
message and/or attachments to it may contain 
confidential or privileged information. If you are 
not the intended recipient, any dissemination, use, 
review, distribution, printing or copying of the 
information contained in this e-mail message 
and/or attachments to it are strictly prohibited. If 
you have received this communication in error, 
please notify us by reply e-mail or telephone and 
immediately and permanently delete the message 
and any attachments. Thank you

RE: javax.naming.NamingException: Cannot create resource instance

2010-10-21 Thread Propes, Barry L

Not sure, but I don't think you need all those attributes separated like that.

 In TC4 you had to do that -- but not so after 5.0, or at least 5.5

And on top of that, you've got two ResourceLink name attributes pointing to the 
same class with different names.

Not sure, but is that allowed?

-Original Message-
From: Aparna1 V [mailto:aparna...@tcs.com]
Sent: Thursday, October 21, 2010 10:25 AM
To: users@tomcat.apache.org
Subject: javax.naming.NamingException: Cannot create resource instance








  

I am getting the following error:


PoolName = 2005pool PoolJndiRef = jdbc/global05
Init Param: jdbc/global05
javax.naming.NamingException: Cannot create resource instance
 at

Please advise as to what could be wrong since im using the server.xml that
i was using with the tomcat 4.

Thanks,
Aparna


=-=-=
Notice: The information contained in this e-mail
message and/or attachments to it may contain
confidential or privileged information. If you are
not the intended recipient, any dissemination, use,
review, distribution, printing or copying of the
information contained in this e-mail message
and/or attachments to it are strictly prohibited. If
you have received this communication in error,
please notify us by reply e-mail or telephone and
immediately and permanently delete the message
and any attachments. Thank you



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: tomcat 6.0.29 hung

2010-10-21 Thread Mark Thomas

On 20/10/2010 20:20, Jason Britton wrote:
> commons-dbcp-1.2.1.jar
> and
> commons-pool-1.3.jar

Lots of sync related fixes since then. I'd strongly recommend and upgrade.

Mark



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: javax.naming.NamingException: Cannot create resource instance

> From: Aparna1 V [mailto:aparna...@tcs.com] 
> Subject: javax.naming.NamingException: Cannot create resource instance

> Please advise as to what could be wrong since im using the 
> server.xml that i was using with the tomcat 4. 

You just answered your own question.  The configuration of Tomcat 6 is very, 
very different from that in Tomcat 4; you need to start over, reinstall Tomcat 
6, edit the server.xml for you needs *based on the Tomcat 6 configuration 
rules*, not just carry over the Tomcat 4 settings.

http://tomcat.apache.org/tomcat-6.0-doc/config/index.html

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

javax.naming.NamingException: Cannot create resource instance

2010-10-21 Thread Aparna1 V

Hi,

I am migrating my application from tomcat 4 to tomcat 6.0. But the data 
sources are not being created. 


I have configured the datasources in the server.xml as follows: 
Im trying to connect to sql server 2005. 


server.xml


 
 

 
serverName
NYCITASD074
 
portNumber
1433
 
databaseName
FBRAE_GLOBAL
 
factory
 
com.microsoft.jdbcx.sqlserver.SQLServerDataSourceFactory
 
driverClassName
 
com.microsoft.sqlserver.jdbc.SQLServerXADataSource
 
loginTimeout
3000
 
selectMethod
cursor
 
driverName
SQLServer2005
 
description
SQL 2005 datasource
 
user
user-id
 
password
password
 

 

 
factory
 com.microsoft.pool.PoolDataSourceFactory
 
className
com.microsoft.pool.PoolDataSource
 
poolName
2005pool
 
maxConnections
100
 
minConnections
1
 
checkEvery
2
 
idleTimeout
5
 
dsJndiName
jdbc/sql_2005
 
description
MSSQL_Pool05 




  
  

 

 



 
 







  
 
I am getting the following error: 


PoolName = 2005pool PoolJndiRef = jdbc/global05
Init Param: jdbc/global05
javax.naming.NamingException: Cannot create resource instance
 at 
org.apache.naming.factory.ResourceFactory.getObjectInstance(ResourceFactory.java:142)
 at 
javax.naming.spi.NamingManager.getObjectInstance(NamingManager.java:304)
 at 
org.apache.naming.NamingContext.lookup(NamingContext.java:793)
 at 
org.apache.naming.NamingContext.lookup(NamingContext.java:140)
 at 
org.apache.naming.NamingContext.lookup(NamingContext.java:781)
 at 
org.apache.naming.NamingContext.lookup(NamingContext.java:153)
 at 
org.apache.naming.factory.ResourceLinkFactory.getObjectInstance(ResourceLinkFactory.java:97)
 at 
javax.naming.spi.NamingManager.getObjectInstance(NamingManager.java:304)
at org.apache.naming.NamingContext.lookup(NamingContext.java:793)
 at 
org.apache.naming.NamingContext.lookup(NamingContext.java:140)
 at 
org.apache.naming.NamingContext.lookup(NamingContext.java:781)
 at 
org.apache.naming.NamingContext.lookup(NamingContext.java:153)
 at 
com.microsoft.pool.JNDITool.getPoolDataSource(JNDITool.java:103)
 at 
com.microsoft.pool.PoolHandler.createPool(PoolHandler.java:48)
 at 
com.microsoft.pool.PoolHandler.init(PoolHandler.java:75)
 at 
org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1173)
 at 
org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:993)
 at 
org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:4187)
 at 
org.apache.catalina.core.StandardContext.start(StandardContext.java:4496)
 at 
org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1045)
 at 
org.apache.catalina.core.StandardHost.start(StandardHost.java:722)
 at 
org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1045)
 at 
org.apache.catalina.core.StandardEngine.start(StandardEngine.java:443)
 at 
org.apache.catalina.core.StandardService.start(StandardService.java:516)
 at 
org.apache.catalina.core.StandardServer.start(StandardServer.java:710)
 at 
org.apache.catalina.startup.Catalina.start(Catalina.java:593)
 at sun.reflect.NativeMethodAccessorImpl.invoke0(Native 
Method)
 at 
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
 at 
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
 at java.lang.reflect.Method.invoke(Method.java:597)
 at 
org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:289)
 at 
org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:414)
java.lang.NullPointerException
 at 
com.microsoft.pool.JNDITool.getPoolDataSource(JNDITool.java:123)
 at 
com.microsoft.pool.PoolHandler.createPool(PoolHandler.java:48)
 at 
com.microsoft.pool.PoolHandler.init(PoolHandler.java:75)
 at 
org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1173)
 at 
org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:993)
 at 
org.apache.catalina.core.StandardContext.loadOnStartup(StandardC

Re: Recursive dependency between the tomcat-catalina-ha and tomcat-catalina

2010-10-21 Thread Mark Thomas

On 20/10/2010 21:39, Ivan wrote:
> Hi,
> From the pom file of tomcat-catalina-ha, it depends on the
> tomcat-catalina. But one class HTMLManagerServlet in the tomcat-catalina has
> a reference to a class BackupManager in the tomcat-catalina-ha.  Is there a
> way to remove the recursive dependency between those two components ?
Yes. Ugly, but possible.

> By the way, there mightbe a NullPointerException issue while using the
> BackupManager in the HTMLManagerServlet.

Really? Where?

Mark

> ---> line.523
>  Manager manager = ctxt.getManager();
> if (manager instanceof BackupManager && showProxySessions) {
> args[5] = new Integer(
> 
> ((BackupManager)manager).getActiveSessionsFull());
> } else if (ctxt.getManager() != null){
> args[5] = new Integer(manager.getActiveSessions());
> } else {
> args[5] = new Integer(0);
> }
> <---
>  thanks.
> 




-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Securing A Directory Listing

I made the change Chuck suggested and it now prompts me for userid/pw.  I
now have to setup the proper user access to make the setup complete.

On Thu, Oct 21, 2010 at 9:34 AM, Keith Masten  wrote:

> Thank you for pointing that out Chuck, I will make that adjustment.
>
>
> On Thu, Oct 21, 2010 at 9:16 AM, Caldarale, Charles R <
> chuck.caldar...@unisys.com> wrote:
>
>> > From: Keith Masten [mailto:spmdt...@gmail.com]
>> > Subject: Re: Securing A Directory Listing
>>
>> > This does not work.
>>
>> Be more specific.
>>
>> > /applogs/*
>>
>> I suspect you erroneously included the path to the webapp in the above.  I
>> you specify just "/*", the entire webapp will be protected; what you have
>> protects only /applogs underneath the webapp.
>>
>>  - Chuck
>>
>>
>> THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
>> MATERIAL and is thus for use only by the intended recipient. If you received
>> this in error, please contact the sender and delete the e-mail and its
>> attachments from all computers.
>>
>>
>> -
>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>> For additional commands, e-mail: users-h...@tomcat.apache.org
>>
>>
>

Re: Securing A Directory Listing

Thank you for pointing that out Chuck, I will make that adjustment.

On Thu, Oct 21, 2010 at 9:16 AM, Caldarale, Charles R <
chuck.caldar...@unisys.com> wrote:

> > From: Keith Masten [mailto:spmdt...@gmail.com]
> > Subject: Re: Securing A Directory Listing
>
> > This does not work.
>
> Be more specific.
>
> > /applogs/*
>
> I suspect you erroneously included the path to the webapp in the above.  I
> you specify just "/*", the entire webapp will be protected; what you have
> protects only /applogs underneath the webapp.
>
>  - Chuck
>
>
> THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
> MATERIAL and is thus for use only by the intended recipient. If you received
> this in error, please contact the sender and delete the e-mail and its
> attachments from all computers.
>
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>

Re: Securing A Directory Listing

HTTP-404 error, resource not available.  This error has been consistent with
all of the variations that I have tried.  Tomcat starts just fine.  Realm is
defined in the server.xml.
This is the realm entry in the server.xml.


  
  
  


and this is resource entry that I thought would make this work.






On Thu, Oct 21, 2010 at 9:12 AM, Edson Carlos Ericksson Richter <
edsonrich...@hotmail.com> wrote:

> Please clarify what do you mean by "does not work":
>
> 0) Did you created the realm in Server.xml or in your context xml file?
> 1) Error on Tomcat (Tomcat wont start anymore)
> 2) HTTP Error 500 (or other HTTP error)?
> 3) Directory is not secured (you can still access without login request)?
> 4) Login request window is shown, but you can't authenticate?
> 5) Login request window is shown, you can authenticate, but then you get an
> HTTP error?
> 6) Tomcat starts, but there are lots of error messages in tomcat log?
> 7) Something else?
>
> Regards,
>
> Edson
>
>
> Em 21/10/2010 12:05, Keith Masten escreveu:
>
>  This is the web.xml that I am using.  This does not work.
>>
>> 
>> http://java.sun.com/xml/ns/j2ee";
>> xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
>> xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee
>> http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd";
>> version="2.4">
>>   Vision Application Logs
>> 
>> 
>>   
>> applogs
>> /applogs/*
>>   
>>   
>> tomcat
>>   
>> 
>> 
>> 
>>   BASIC
>>   applogs
>> 
>> 
>> 
>>   tomcat
>> 
>> 
>>
>>
>> On Wed, Oct 20, 2010 at 4:23 PM, Prastein, Rebeccah H<
>> rebeccah.h.prast...@questdiagnostics.com>  wrote:
>>
>>  For the benefit of the original poster:
>>>
>>> If you don't specify any http-methods for the web-resource-collection,
>>> the default behavior is that all methods are protected.
>>> If you specify one or more http-methods, the behavior is that those
>>> specified are protected, and any that are not specified are not
>>> protected.
>>>
>>> Rebeccah
>>>
>>>
>>>
>>> -Original Message-
>>> From: Edson Carlos Ericksson Richter [mailto:edsonrich...@hotmail.com]
>>> Sent: Wednesday, October 20, 2010 2:15 PM
>>> To: users@tomcat.apache.org
>>> Subject: Re: Securing A Directory Listing
>>>
>>> Sure, there are more HTTP methods that someone would want to protect
>>> from.
>>>
>>> Thanks for pointing out.
>>>
>>> Regards,
>>>
>>> Edson.
>>>
>>> Em 20/10/2010 18:51, Mark Thomas escreveu:
>>>
 On 20/10/2010 15:09, Edson Carlos Ericksson Richter wrote:

> 
> Secure Area  
> /mysecurearea
> GET
> 
>
 Bad advice. Don't put the http-method in there.

 Mark



 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org




>>> -
>>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>>> For additional commands, e-mail: users-h...@tomcat.apache.org
>>>
>>> --
>>> The contents of this message, together with any attachments, are
>>> intended only for the use of the person(s) to which they are
>>> addressed and may contain confidential and/or privileged
>>> information. Further, any medical information herein is
>>> confidential and protected by law. It is unlawful for unauthorized
>>> persons to use, review, copy, disclose, or disseminate confidential
>>> medical information. If you are not the intended recipient,
>>> immediately advise the sender and delete this message and any
>>> attachments. Any distribution, or copying of this message, or any
>>> attachment, is prohibited.
>>>
>>> -
>>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>>> For additional commands, e-mail: users-h...@tomcat.apache.org
>>>
>>>
>>>
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>

RE: Securing A Directory Listing

> From: Keith Masten [mailto:spmdt...@gmail.com] 
> Subject: Re: Securing A Directory Listing

> This does not work.

Be more specific.

> /applogs/*

I suspect you erroneously included the path to the webapp in the above.  I you 
specify just "/*", the entire webapp will be protected; what you have protects 
only /applogs underneath the webapp.

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Securing A Directory Listing

2010-10-21 Thread Edson Carlos Ericksson Richter


Please clarify what do you mean by "does not work":

0) Did you created the realm in Server.xml or in your context xml file?
1) Error on Tomcat (Tomcat wont start anymore)
2) HTTP Error 500 (or other HTTP error)?
3) Directory is not secured (you can still access without login request)?
4) Login request window is shown, but you can't authenticate?
5) Login request window is shown, you can authenticate, but then you get 
an HTTP error?

6) Tomcat starts, but there are lots of error messages in tomcat log?
7) Something else?

Regards,

Edson


Em 21/10/2010 12:05, Keith Masten escreveu:

This is the web.xml that I am using.  This does not work.


http://java.sun.com/xml/ns/j2ee";
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee
http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd";
version="2.4">
   Vision Application Logs


   
 applogs
 /applogs/*
   
   
 tomcat
   



   BASIC
   applogs



   tomcat




On Wed, Oct 20, 2010 at 4:23 PM, Prastein, Rebeccah H<
rebeccah.h.prast...@questdiagnostics.com>  wrote:


For the benefit of the original poster:

If you don't specify any http-methods for the web-resource-collection,
the default behavior is that all methods are protected.
If you specify one or more http-methods, the behavior is that those
specified are protected, and any that are not specified are not
protected.

Rebeccah



-Original Message-
From: Edson Carlos Ericksson Richter [mailto:edsonrich...@hotmail.com]
Sent: Wednesday, October 20, 2010 2:15 PM
To: users@tomcat.apache.org
Subject: Re: Securing A Directory Listing

Sure, there are more HTTP methods that someone would want to protect
from.

Thanks for pointing out.

Regards,

Edson.

Em 20/10/2010 18:51, Mark Thomas escreveu:

On 20/10/2010 15:09, Edson Carlos Ericksson Richter wrote:


Secure Area  
/mysecurearea
GET


Bad advice. Don't put the http-method in there.

Mark



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org





-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

--
The contents of this message, together with any attachments, are
intended only for the use of the person(s) to which they are
addressed and may contain confidential and/or privileged
information. Further, any medical information herein is
confidential and protected by law. It is unlawful for unauthorized
persons to use, review, copy, disclose, or disseminate confidential
medical information. If you are not the intended recipient,
immediately advise the sender and delete this message and any
attachments. Any distribution, or copying of this message, or any
attachment, is prohibited.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org





-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Securing A Directory Listing

This is the web.xml that I am using.  This does not work.


http://java.sun.com/xml/ns/j2ee";
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee
http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd";
version="2.4">
  Vision Application Logs


  
applogs
/applogs/*
  
  
tomcat
  



  BASIC
  applogs



  tomcat




On Wed, Oct 20, 2010 at 4:23 PM, Prastein, Rebeccah H <
rebeccah.h.prast...@questdiagnostics.com> wrote:

> For the benefit of the original poster:
>
> If you don't specify any http-methods for the web-resource-collection,
> the default behavior is that all methods are protected.
> If you specify one or more http-methods, the behavior is that those
> specified are protected, and any that are not specified are not
> protected.
>
> Rebeccah
>
>
>
> -Original Message-
> From: Edson Carlos Ericksson Richter [mailto:edsonrich...@hotmail.com]
> Sent: Wednesday, October 20, 2010 2:15 PM
> To: users@tomcat.apache.org
> Subject: Re: Securing A Directory Listing
>
> Sure, there are more HTTP methods that someone would want to protect
> from.
>
> Thanks for pointing out.
>
> Regards,
>
> Edson.
>
> Em 20/10/2010 18:51, Mark Thomas escreveu:
> > On 20/10/2010 15:09, Edson Carlos Ericksson Richter wrote:
> >> 
> >> Secure Area 
> >> /mysecurearea
> >> GET
> >> 
> > Bad advice. Don't put the http-method in there.
> >
> > Mark
> >
> >
> >
> > -
> > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> > For additional commands, e-mail: users-h...@tomcat.apache.org
> >
> >
> >
>
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
> --
> The contents of this message, together with any attachments, are
> intended only for the use of the person(s) to which they are
> addressed and may contain confidential and/or privileged
> information. Further, any medical information herein is
> confidential and protected by law. It is unlawful for unauthorized
> persons to use, review, copy, disclose, or disseminate confidential
> medical information. If you are not the intended recipient,
> immediately advise the sender and delete this message and any
> attachments. Any distribution, or copying of this message, or any
> attachment, is prohibited.
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>

Re: [OT] VisualVM, (was Re: tomcat 6.0.29 hung)

On 21/10/2010 13:49, Jason Britton wrote:
> I'll definitely will take a look at the standalone release.  Thanks for the
> info.  I'm going to throw Cygwin/X on my desktop machine to hopefully be
> able to pull up jvisualvm remotely and/or just use standalone version.
> Perhaps Cygwin/X would also allow you to pull up VisualGC remotely?

If you can fire VisualVM up on the target machine and make an X window
connection, VNC or similar then you're in business.

Check out the Tools > Plugin menu for extra stuff.

VisualGC is now part of VisualVM.  I think it needs to be on the local
machine because it does something which requires direct access to the
process.


p

> On Thu, Oct 21, 2010 at 2:25 AM, Pid  wrote:
> 
>> On 21/10/2010 00:11, Jason Britton wrote:
>>
>>> Highly recommend trying out jvisualvm (it's in your jdk bin) if you're
>>> running 1.6.
>>
>> There's a standalone release - 1.3.1 - with more plugins & some slightly
>> shinier toys.
>>
>>  https://visualvm.dev.java.net/
>>
>> Even if you can't run it on the same machine as the Tomcat process
>> you're inspecting, it's still pretty handy.  If there was just a way to
>> get VisualGC to work remotely...
>>
>>
>> p
>>
>>
>>
> 



0x62590808.asc
Description: application/pgp-keys


signature.asc
Description: OpenPGP digital signature

Re: tomcat 6.0.29 hung

2010-10-21 Thread Wesley Acheson

On Thu, Oct 21, 2010 at 1:11 AM, Jason Britton  wrote:
> Thankfully when I pulled up jvisualvm on the server and issued thread dumps,
> even though the stacktraces for the threads did not come up within jvisualvm
> the thread stacktraces were dumped to stdout.

I think this is quite likely to be the result of kill -QUIT you
mentioned earlier.

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: tomcat 6.0.29 hung

2010-10-21 Thread Martin Kuen

jason,

Out of personal interest I have a question about the way you use jstack. I
came across this "jstack cannot take dump of hung process" problem before. I
once witnessed the same exceptions when chasing a deadlock.

This happened to me on ubuntu 10.4.0 (and 10.4.1) 64-bit using sun's jdk
1.6.0_21

My mistake was to invoke jstack as a different user, that is, not the user
which is running the given java application (e.g. root instead of tomcat6).
Invoking jstack with the -F option as root showed these exceptions, whereas
kill -QUIT didn't produce anything and jstack without -F failed as well.

As a quick workaround I changed /etc/passwd to allow the user tomcat6 to use
a shell. Issuing a "su tomcat6" as root I was able to get jstack (and kill
-QUIT) working. Disclaimer: I don't know how tomcat is packaged for Red Hat.

I tried to check this with so. who actually claimed that his jvm was hung
when he tried to get a stack-trace. However, I was told that the problem no
longer exists (no hung jvm anymore) and the investigation ceased.

This is were you come into play :)

It appears to me that "hung application" alone does not imply that "-F" is
required. So, if my application enters a infinite loop or gets stuck in a
deadlock my application is unresponsive and will most likely be referred to
as "hung", but the vm is actually functioning perfectly. It's just my
application, that, well, . . . .

In my case I was able to get a stacktrace from an application which was
stuck in a deadlock (log4j with multiple appenders, multiple threads using
the same Logger instance) without using "-F" at all.

When you use jvisualvm you most likely do so by enabling (and connecting
through) jmx (true?). I believe it's correct to claim that this is at least
a different way of attaching to the vm, than using jstack from the
comandline. Could be the reason why you were "suddenly" able to get a thread
dump.

Could you give it a shot?


Best Regards,

Martin

RE: Error while running jsp with MYSQL DB Connections\

2010-10-21 Thread Maximilian Stocker

A jsp page with database connections? That's poor.

There is a bug in *your* code. You should find that bug and fix it. Then the 
problem will go away.

-Original Message-
From: Amal Thayyil [mailto:amalthay...@gmail.com]
Sent: Thursday, October 21, 2010 4:27 AM
To: users@tomcat.apache.org
Subject: Error while running jsp with MYSQL DB Connections\

I am getting the following error and tomcat gets stuck while running a jsp
page with MYSQL DB Connections.

Tomcat Version is 6.0.29

SEVERE: The web application [/] is still processing a request that has yet
to finish. This is very likely to create a memory leak. You can control the
time allowed for requests to finish by using the unloadDelay attribute of
the standard Context implementation.

Thanks,
AST

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Restart problem

2010-10-21 Thread Artur Osmanov

Hi Charles,

thank you for your tip. I solved now my problem. My application waited for a
service wich was not initialized before the application. A classical
deadlock which of course do not appear when I start Tomcat first (with the
needed service) and then deploy my application ;-)

kind regards
Artur Osmanov

2010/10/20 Caldarale, Charles R 

> > From: Artur Osmanov [mailto:a.osma...@52north.org]
> > Subject: Restart problem
>
> > But if I stop Tomcat and start it again Tomcat hangs
> > and nothing works anymore.
>
> Have you tried taking a thread dump?
>
> > Tomcat version: Apache Tomcat/6.0.29 with default configuration
> > Windows 7 Professional 64bit
> > hibernate 3.5.2
> > postgresql 8.3
>
> JVM version?
>
> Running Tomcat from scripts or as a service?
>
>  - Chuck
>
>
> THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
> MATERIAL and is thus for use only by the intended recipient. If you received
> this in error, please contact the sender and delete the e-mail and its
> attachments from all computers.
>
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>
>


-- 
Artur Osmanov

52°North GmbH
| Martin-Luther-King-Weg 24
| D - 48155 Muenster
| phone +49 (0)251.396371-0
| http://52north.org/

Re: [OT] VisualVM, (was Re: tomcat 6.0.29 hung)

2010-10-21 Thread Jason Britton

I'll definitely will take a look at the standalone release.  Thanks for the
info.  I'm going to throw Cygwin/X on my desktop machine to hopefully be
able to pull up jvisualvm remotely and/or just use standalone version.
Perhaps Cygwin/X would also allow you to pull up VisualGC remotely?

On Thu, Oct 21, 2010 at 2:25 AM, Pid  wrote:

> On 21/10/2010 00:11, Jason Britton wrote:
>
> > Highly recommend trying out jvisualvm (it's in your jdk bin) if you're
> > running 1.6.
>
> There's a standalone release - 1.3.1 - with more plugins & some slightly
> shinier toys.
>
>  https://visualvm.dev.java.net/
>
> Even if you can't run it on the same machine as the Tomcat process
> you're inspecting, it's still pretty handy.  If there was just a way to
> get VisualGC to work remotely...
>
>
> p
>
>
>

Re: Issue while running jsp page containing DB connections

On 21/10/2010 09:23, Amal Thayyil wrote:
> Hi,
> 
> I am getting the following error and tomcat gets stuck while running a jsp
> page with MYSQL DB Connections.
> 
> Tomcat Version is 6.0.29
> 
> SEVERE: The web application [/] is still processing a request that has yet
> to finish. This is very likely to create a memory leak. You can control the
> time allowed for requests to finish by using the unloadDelay attribute of
> the standard Context implementation.

This message occurs when an application is shutting down and a request
is still running.  What is the JSP actually doing, has it finished
displaying when you try to shutdown the app?


p


> 
> Thanks,
> AST
> 



0x62590808.asc
Description: application/pgp-keys


signature.asc
Description: OpenPGP digital signature

Re: Container managed security and Proxy support

On 21/10/2010 08:46, André Warnier wrote:
> Pid wrote:
>> On 20/10/2010 17:02, Oliver Wulff wrote:
>>> Thanks. To recap, I configure AJP13 with tomcatAuthentication equals to
>>> false but I still need the login-config and security-constraints in the
>>> web.xml...
>>>
>>> Where can I let tomcat know to which roles a user belongs to?
>>
>> That has to be done via Realm, AFAIK.  Which means you can't use the AJP
>> method.
>>
> Are you sure ?
> 
> The tomcatAuthentication="false" attribute means that Tomcat will pick
> up the user-id, as transmitted by the front-end webserver through the
> Connector, instead of trying to get it himself.
> But it should not mean that, with this user-id, Tomcat cannot perform
> other AAA steps, such as determining if that user-id in in Role X.

The authn/authz parts occur as separate steps in the Realm - but now you
mention it, I'll need to check to see what the actual behaviour is.

Not got time at the minute to set it up though, so if anyone wants to
try it...


p




0x62590808.asc
Description: application/pgp-keys


signature.asc
Description: OpenPGP digital signature

[OT] VisualVM, (was Re: tomcat 6.0.29 hung)

On 21/10/2010 00:11, Jason Britton wrote:

> Highly recommend trying out jvisualvm (it's in your jdk bin) if you're
> running 1.6.

There's a standalone release - 1.3.1 - with more plugins & some slightly
shinier toys.

 https://visualvm.dev.java.net/

Even if you can't run it on the same machine as the Tomcat process
you're inspecting, it's still pretty handy.  If there was just a way to
get VisualGC to work remotely...

p

0x62590808.asc
Description: application/pgp-keys

signature.asc
Description: OpenPGP digital signature

Re: Rotating Tomcat-Logs

Tobias Crefeld wrote:

We have problems to manage Tomcats Logs. Logfiles like catalina.out or
application specific logging is not the problem, but there are some
files that are created each day new by tomcat (Tomcat-6):
localhost.2010-02-27.log
manager.2010-02-16.log
host-manager.2009-08-30.log
admin.2010-07-10.log
catalina.2010-10-20.log

From what I read till now JULI should be able to offer some rotation
features, so I tried several new settings in
tomcat/conf/logging.properties but it seems that it has little effect.

Our goal is to delete all log data that is older than e.g. 3 months.
The file naming schema doesn't matter. Additionally I would prefer if
the usually empty files (actually all files mentioned above except
"catalina.*.log") aren't been created at all.

Hi Tobias.

I am having the same kind of issue, on and off. I have started several times to try and
find a "general" solution to manage these logs, but until now I have always been
interrupted by more urgent things, and never brought this to a conclusion.
In addition, it is somewhat of a moving target, since Linux distributions seem to each
superpose their own schemes to the standard Tomcat scheme (like using jsvc, and/or
re-directing to SYSLOG e.g.).

Anyway, I am interested in finding a scheme, based on JULI, and which :
- would generally-speaking start by directing ALL Tomcat logs to one single file, NOT
rotated by JULI
- would use the system facilities (aka logrotate), to rotate, compress and archive this
logfile as I see fit, not as JULI sees fit.
- would provide a simple path to, /when needed/, provide more specific logfiles for one or
the other application.

(but not the current standard unmanageable mess)
- create a Tomcat FAQ that explains how to do the above, so that other sysadmin-types can
enjoy the fruits of my labor

There is already a lot of scattered information on this topic in the archives of this
list, but to my knowledge nothing really comprehensive at one single location.

Would you like to work at this together ?

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Error while running jsp with MYSQL DB Connections\

2010-10-21 Thread Amal Thayyil

I am getting the following error and tomcat gets stuck while running a jsp
page with MYSQL DB Connections.

Tomcat Version is 6.0.29

SEVERE: The web application [/] is still processing a request that has yet
to finish. This is very likely to create a memory leak. You can control the
time allowed for requests to finish by using the unloadDelay attribute of
the standard Context implementation.

Thanks,
AST

Issue while running jsp page containing DB connections

2010-10-21 Thread Amal Thayyil

Hi,

I am getting the following error and tomcat gets stuck while running a jsp
page with MYSQL DB Connections.

Tomcat Version is 6.0.29

SEVERE: The web application [/] is still processing a request that has yet
to finish. This is very likely to create a memory leak. You can control the
time allowed for requests to finish by using the unloadDelay attribute of
the standard Context implementation.

Thanks,
AST

Rotating Tomcat-Logs

2010-10-21 Thread Tobias Crefeld

We have problems to manage Tomcats Logs. Logfiles like catalina.out or
application specific logging is not the problem, but there are some
files that are created each day new by tomcat (Tomcat-6):
 localhost.2010-02-27.log
 manager.2010-02-16.log
 host-manager.2009-08-30.log
 admin.2010-07-10.log
 catalina.2010-10-20.log

From what I read till now JULI should be able to offer some rotation
features, so I tried several new settings in
tomcat/conf/logging.properties but it seems that it has little effect.

Our goal is to delete all log data that is older than e.g. 3 months.
The file naming schema doesn't matter. Additionally I would prefer if
the usually empty files (actually all files mentioned above except
"catalina.*.log") aren't been created at all.


Regards,
 Tobias.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: How does Tomcat on Mac OS X Server handle requests to different domain names?


Thomas Hauk wrote:

On Oct 20, 2010, at 3:22 AM, Pid wrote:

Presumably by 'different servlet' you mean different 'web application
which contains one or more servlets'?


I'm not sure what kind of distinction you're trying to get at here, so let me 
phrase what I need in another way.

I have brandedapp1.war and brandedapp2.war that I want to deploy to Tomcat.

brandedapp1 should respond to all requests sent to http://myapp.example.com/ and brandedapp2 should respond to all requests sent to http://myapp.anotherexample.com/ 


Assume that the DNS is already set up for myapp.example.com and 
myapp.anotherexample.com (i.e. both FQDNs point to my server's IP address)


You'll need to configure DNS to point name records at the public IP
address of the server,


Already done.


and once you've done that configure Tomcat to
support Virtual Hosts.


Can you describe this in more detail?


Start here :

http://tomcat.apache.org/tomcat-6.0-doc/virtual-hosting-howto.html




Use the special name 'ROOT' for each application and it will serve
resource on the default path.


Can you describe this in more detail?



Start here :

http://wiki.apache.org/tomcat/HowTo

at #39




T

--
"Live every week like it's Shark Week"
  -- Tracy Morgan


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org





-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Source Address based Realms


Aggarwal, Ajay wrote:

bump... looking for ideas... anybody?


If the question finally is "..without using *container-based* 
authentication/authorisation", then have a look at


http://securityfilter.sourceforge.net/

There is good explanation of the difference between the "container-based" and 
"filter-based" approach to AAA, and maybe it already offers what you want.


Another good place to look would be

http://www.tuckey.org/urlrewrite/

which is not properly-speaking an authentication filter, but which may help in 
your purpose.

Both of these are open-source, so it should not be very hard to add the functionality you 
want, if it is not there already.








-Original Message-
From: Aggarwal, Ajay [mailto:ajay.aggar...@stratus.com] 
Sent: Tuesday, October 19, 2010 10:29 AM

To: Tomcat Users List
Subject: RE: Source Address based Realms

Sorry. I meant...

"Is there another way to achieve this, i.e. without using Realms or
mixing valve/filters with Realms?"

-Original Message-
From: Aggarwal, Ajay [mailto:ajay.aggar...@stratus.com] 
Sent: Tuesday, October 19, 2010 9:45 AM

To: users@tomcat.apache.org
Subject: Source Address based Realms

I need to treat my clients differently depending on where they came
from. I need to trust all requests coming locally (i.e. from
127.0.0.1/localhost) and not require them to authentication. However all
external requests need to go through authentication. Is there a way to
configure Realms in Tomcat to accommodate this? 

 


Is there another way to achieve this, i.e. without using Realms or
missing valve/filters with Realms?

 


-Ajay


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org





-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Container managed security and Proxy support