Re: Issues with the tomcat connector (On W2k8 + IIS7.5)
On 03/13/2012 12:09 AM, Alex Samad - Yieldbroker wrote: [snip] Try the RC binaries from http://people.apache.org/~mturk/tomcat-connectors/jk-1.2.33/ Does this one crashes as well? Okay, got your build from there. 1) it loads up with single application thread (so not a web garden) but then failed OK, cool. 2) I tried it as a web garden, so 4 processes failed bad !!! Suppose the previous versions do the same. This is what I see in the event log ERROR- Faulting application name: w3wp.exe, version: 7.5.7601.17514, time stamp: 0x4ce7afa2 Faulting module name: isapi_redirect.dll, version: 1.2.33.0, time stamp: 0x4f59bc9e Exception code: 0xc005 Fault offset: 0x00039e82 This looks like referencing null memory. Is there anything in the jk.log before that if you turn log level to trace? Faulting process id: 0x154c Faulting application start time: 0x01cd00a34e76bf11 Faulting application path: c:\windows\system32\inetsrv\w3wp.exe Faulting module path: C:\YB\Shared\dev.yieldbroker.com\ajpconfig\isapi_redirect.dll Report Id: 8ded0aa6-6c96-11e1-a357-005056b7000a Bit more curious as to why my build didn't work I have VS 2010 install, I built first with 32bit to get the programme built Then I opened a Win64 command window and build the dll there. Mine is about 100K small, so I am guessing I am missing something ... I build that using WinDDK so it links to msvcrt.dll instead msvcrtXXX.dll. Anyhow suppose you missed something with win32/win64 environment settings. Try to build directly from 1.2.33-src.zip I fixed the need to run win32 build before win64 so you can build 64-bit directly. Tested that with vs2010 and it builds flawlessly. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Tomcat advantages
HI All, I am new to tomcat I just want to know that is tomcat a server where i can run my web application or can it do anything more? can you please explain Regards Vinay
Re: Precompile JSPs, avoid thousands of servlets?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Nick, On 3/12/12 4:43 PM, Nick Williams wrote: > We maintain a very large application, with somewhere around 2,000 > JSP files (in addition to ~250,000 lines of pure Java). We have > decided it is about time we ship our application with precompiled > JSP files. Hmm... do you have complete control over the version of Tomcat that your clients use? > Our first challenge is that we support Tomcat, GlassFish, WebLogic > and WebSphere, so our JSPs have to be precompiled in such a way > that they will run in any of those web containers. We’ll overcome > that challenge I’m sure; if we have to include some extra > libraries, we’ll make it work. You are toast, as far as Tomcat's precompiler is concerned. The JSP compiler uses Tomcat-specific classes and they are not part of any public API (that is, not stable) so they are very sensitive to the exact version of Tomcat -- sometimes down to the point release (like 7.0.22 and 7.0.23 might be incompatible). My recommendation would be to allow your webapp to be precompiled at (or, rather, immediately before) deploy-time by providing different procedures (maybe ant tasks?) for each container. > Our second challenge is the 11,500-line web.xml file that results > from this process. I understand that Ant does a lot of the hard > work for me, but a web.xml file this large bothers me, even if I > don’t have to look at it during every day development. What’s more, > we’re actually trying to *move away* from having a web.xml file (of > any real substance) and using new Servlet 3.0 features. Note that there are glaring problems with web-fragments including questions about precedence in the face of conflicts for things like overlapping url-patterns, etc. My recommendation would be to stick with a single monolithic web.xml except in cases where you have a definite isolated chunk of features that can be encapsulated into a separate JAR file. > I could swear I saw an example a while ago (while searching Google, > of course) of a web.xml file with a single servlet that responded > to requests for ALL JSPs that had be precompiled, but I can’t find > it anywhere anymore. I’m sure I *could* write my own servlet to > accomplish this, but I’d sure like to use something existing that > already has common usage. Maybe the "invoker" servlet? I'm not entirely sure if I'm kidding, actually. > Does anyone have any ideas? Perhaps JSP isn't the best solution for you... how much dynamic-ness do you need in all these content-generating files? Maybe another technology (Freemarker? I don't think Velocity has a precompiler...) would meet you needs better than JSP, though switching content-generation frameworks isn't a task I would wish on a bitter enemy). - -chris -BEGIN PGP SIGNATURE- Version: GnuPG/MacGPG2 v2.0.17 (Darwin) Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk9etWwACgkQ9CaO5/Lv0PBFMwCgoiB1f1TERHAwtEaLm+zgBq2X MQEAniSMx+hMCqTUuuIev1Ruehn0DK3x =AbQf -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Web service not starting up as expected
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Debbie, On 3/12/12 1:48 PM, Debbie Shapiro wrote: > -Original Message- From: Christopher Schultz > [mailto:ch...@christopherschultz.net] >> For my money, I'd off-load the actual report-generation to an >> out-of-process (duh) process and pick-up the result when it's >> done. That way, your webapp doesn't become unstable even if one >> report runs out of memory. > > Yes, in our situation, it's usually someone running a HUGE report > that takes the server down. Your last paragraph, how would one > off-load the report-generation? Is it possible to do this with a > third party application? I don't have access to their code. I'm > just implementing their solution. You'd have to talk to the vendor about that. Given that they don't seem very responsive to other issues (leaking memory like a sieve), they will probably tell you that their reporting solution is first-rate and there's no reason to take it out-of-band. Depending on the types of reports, you could look into using JasperReports (no-cost, OSS... we use it). You *do* have to write your own reports, but the framework is there and no webapp is required unless you want one. - -chris -BEGIN PGP SIGNATURE- Version: GnuPG/MacGPG2 v2.0.17 (Darwin) Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk9es0QACgkQ9CaO5/Lv0PD/dwCgt7lnSAwIsh0Bl0ozz0tRCocc O0wAnjLNVWIq22RnWONGI1GX9oXK4Xlt =v2wl -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Issues with the tomcat connector (On W2k8 + IIS7.5)
[snip] > > Try the RC binaries from > http://people.apache.org/~mturk/tomcat-connectors/jk-1.2.33/ > > Does this one crashes as well? Okay, got your build from there. 1) it loads up with single application thread (so not a web garden) but then failed 2) I tried it as a web garden, so 4 processes failed bad !!! This is what I see in the event log ERROR- Faulting application name: w3wp.exe, version: 7.5.7601.17514, time stamp: 0x4ce7afa2 Faulting module name: isapi_redirect.dll, version: 1.2.33.0, time stamp: 0x4f59bc9e Exception code: 0xc005 Fault offset: 0x00039e82 Faulting process id: 0x154c Faulting application start time: 0x01cd00a34e76bf11 Faulting application path: c:\windows\system32\inetsrv\w3wp.exe Faulting module path: C:\YB\Shared\dev.yieldbroker.com\ajpconfig\isapi_redirect.dll Report Id: 8ded0aa6-6c96-11e1-a357-005056b7000a Bit more curious as to why my build didn't work I have VS 2010 install, I built first with 32bit to get the programme built Then I opened a Win64 command window and build the dll there. Mine is about 100K small, so I am guessing I am missing something ... Alex > > > Regards > -- > ^TM > > - > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Tomcat 7 Cluster Issue
I am using a windows 2003 server 32 bit standard edition SP2 with IIS 6. I have an isapi_redirect.dll v.1.2.31 communicating to tomcat via ajp1.3. JDK version was 7.03, and tomcat version is 7.0.26. Tomcat is installed as a service using the service.bat, and I am running two containers in the clustered environment. Session replication is in memory, and communication is limited to within the server, i.e. not to any external server. I can provide complete configuration files or more detail if needed. Thanks very much for your help. -Original Message- From: Pid [mailto:p...@pidster.com] Sent: Monday, March 12, 2012 5:13 PM To: Tomcat Users List Subject: Re: Tomcat 7 Cluster Issue On 12/03/2012 17:30, Pid * wrote: > I will try to reproduce using your config, shortly. The only warning I get on OSX with JDK 1.7.0 is that FarmWarDeployer only works when the Cluster is defined inside a Host. Can you provide as much detail as possible about your OS & JDK 7 version please? p >>> className="org.apache.catalina.ha.deploy.FarmWarDeployer" tempDir="/tmp/war-temp/" deployDir="/tmp/war-deploy/" watchDir="/tmp/war-listen/" watchEnabled="false"/> >>> className="org.apache.catalina.ha.session.JvmRouteSessionIDBinderLi st e ner"/> >>> className="org.apache.catalina.ha.session.ClusterSessionListener"/> >>> className="org.apache.catalina.realm.LockOutRealm"> >>> className="org.apache.catalina.realm.UserDatabaseRealm" resourceName="UserDatabase"/> >> unpackWARs="true" autoDeploy="true"> >>> className="org.apache.catalina.valves.AccessLogValve" directory="logs" prefix="localhost_access_log." suffix=".txt" pattern="%h %l %u %t "%r" %s %b"/> -- [key:62590808]
Re: Tomcat 7 Cluster Issue
On 12/03/2012 17:30, Pid * wrote: > I will try to reproduce using your config, shortly. The only warning I get on OSX with JDK 1.7.0 is that FarmWarDeployer only works when the Cluster is defined inside a Host. Can you provide as much detail as possible about your OS & JDK 7 version please? p >>> className="org.apache.catalina.ha.deploy.FarmWarDeployer" tempDir="/tmp/war-temp/" deployDir="/tmp/war-deploy/" watchDir="/tmp/war-listen/" watchEnabled="false"/> >>> className="org.apache.catalina.ha.session.JvmRouteSessionIDBinderList e ner"/> >>> className="org.apache.catalina.ha.session.ClusterSessionListener"/> >>> className="org.apache.catalina.realm.LockOutRealm"> >>> className="org.apache.catalina.realm.UserDatabaseRealm" resourceName="UserDatabase"/> >> unpackWARs="true" autoDeploy="true"> >>> className="org.apache.catalina.valves.AccessLogValve" directory="logs" prefix="localhost_access_log." suffix=".txt" pattern="%h %l %u %t "%r" %s %b"/> -- [key:62590808] signature.asc Description: OpenPGP digital signature
Re: Web service not starting up as expected
On 09/03/2012 18:09, Debbie Shapiro wrote: > Mar 7, 2012 11:30:06 PM org.apache.catalina.loader.WebappClassLoader > clearReferencesThreads > SEVERE: The web application [/sree] appears to have started a thread named > [AWT-Windows] but has failed to stop it. This is very likely to create a > memory leak. > Mar 7, 2012 11:30:06 PM org.apache.catalina.loader.WebappClassLoader > clearReferencesThreads > SEVERE: The web application [/sree] appears to have started a thread named > [Thread-3] but has failed to stop it. This is very likely to create a memory > leak. > Mar 7, 2012 11:30:06 PM org.apache.catalina.loader.WebappClassLoader > clearReferencesThreads > SEVERE: The web application [/sree] appears to have started a thread named > [Thread-8] but has failed to stop it. This is very likely to create a memory > leak. NB The message above is a SEVERE error, and not a WARNING as the developers you quote have stated. One possible side effect of leaving threads running is that a Tomcat instance might not completely shutdown even having completed it's own internal stop processes, because the JVM is waiting for those threads to complete their work (if they are not daemon threads). p -- [key:62590808] signature.asc Description: OpenPGP digital signature
Precompile JSPs, avoid thousands of servlets?
We maintain a very large application, with somewhere around 2,000 JSP files (in addition to ~250,000 lines of pure Java). We have decided it is about time we ship our application with precompiled JSP files. The Ant tasks from Tomcat to support this effort have been extremely helpful, and I have no serious complaints about them. We can even use our own package name for the JSPs. Great! Our first challenge is that we support Tomcat, GlassFish, WebLogic and WebSphere, so our JSPs have to be precompiled in such a way that they will run in any of those web containers. We’ll overcome that challenge I’m sure; if we have to include some extra libraries, we’ll make it work. Our second challenge is the 11,500-line web.xml file that results from this process. I understand that Ant does a lot of the hard work for me, but a web.xml file this large bothers me, even if I don’t have to look at it during every day development. What’s more, we’re actually trying to *move away* from having a web.xml file (of any real substance) and using new Servlet 3.0 features. I could swear I saw an example a while ago (while searching Google, of course) of a web.xml file with a single servlet that responded to requests for ALL JSPs that had be precompiled, but I can’t find it anywhere anymore. I’m sure I *could* write my own servlet to accomplish this, but I’d sure like to use something existing that already has common usage. Does anyone have any ideas?
RE: Hanging on startup?
> From: Dan Armbrust [mailto:daniel.armbrust.l...@gmail.com] > Subject: Re: Hanging on startup? > I see Sun/Oracle was as helpful as ever on this one: > http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6521844 > http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6202721 Can't comment in public... > Anything that Tomcat could do to prevent itself from getting > stuck like this? Not sure if it's possible, but I suppose the bootstrap mechanism could check for /dev/urandom in the system property and substitute /dev/./urandom. Might even be able to introduce a "double secret probation" config tag to make /dev/./urandom the default unless otherwise specified. Not sure if that would help a lot of people, since they'd likely still have to go through the debugging phase to figure out what was taking so long. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Hanging on startup?
Yep. JAVA_OPTS=-Djava.security.egd=file:/dev/./urandom prevents the hang. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Hanging on startup?
On Mon, Mar 12, 2012 at 2:34 PM, Caldarale, Charles R wrote: >> From: Dan Armbrust [mailto:daniel.armbrust.l...@gmail.com] >> Subject: Hanging on startup? > >> Startup, and it hangs on app deploy: > > Waiting for entropy to build up? Take a few thread dumps with jstack to see > who's waiting on what. If it is entropy, see this discussion: > > http://marc.info/?l=tomcat-user&m=132769606728228&w=2 > > > - Chuck > > I think your right. Here is the stack I just dug out: "pool-2-thread-1" prio=10 tid=0x40c4a800 nid=0x250e runnable [0x7f3895203000] java.lang.Thread.State: RUNNABLE at java.io.FileInputStream.readBytes(Native Method) at java.io.FileInputStream.read(FileInputStream.java:220) at sun.security.provider.SeedGenerator$URLSeedGenerator.getSeedBytes(SeedGenerator.java:493) at sun.security.provider.SeedGenerator.generateSeed(SeedGenerator.java:117) at sun.security.provider.SecureRandom.engineGenerateSeed(SecureRandom.java:114) at sun.security.provider.SecureRandom.engineNextBytes(SecureRandom.java:171) - locked <0x0007d8b0ee08> (a sun.security.provider.SecureRandom) at java.security.SecureRandom.nextBytes(SecureRandom.java:433) - locked <0x0007d8b0ee60> (a java.security.SecureRandom) at java.security.SecureRandom.next(SecureRandom.java:455) at java.util.Random.nextInt(Random.java:189) at org.apache.catalina.util.SessionIdGenerator.createSecureRandom(SessionIdGenerator.java:246) at org.apache.catalina.util.SessionIdGenerator.getRandomBytes(SessionIdGenerator.java:183) at org.apache.catalina.util.SessionIdGenerator.generateSessionId(SessionIdGenerator.java:153) at org.apache.catalina.session.ManagerBase.startInternal(ManagerBase.java:574) at org.apache.catalina.session.StandardManager.startInternal(StandardManager.java:466) - locked <0x0007d8a327c8> (a org.apache.catalina.session.StandardManager) at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150) - locked <0x0007d8a327c8> (a org.apache.catalina.session.StandardManager) at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5282) - locked <0x0007d89ca578> (a org.apache.catalina.core.StandardContext) at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150) - locked <0x0007d89ca578> (a org.apache.catalina.core.StandardContext) at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:895) at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:871) at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:615) at org.apache.catalina.startup.HostConfig.deployDirectory(HostConfig.java:1095) at org.apache.catalina.startup.HostConfig$DeployDirectory.run(HostConfig.java:1617) at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:441) at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:303) at java.util.concurrent.FutureTask.run(FutureTask.java:138) at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:886) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:908) at java.lang.Thread.run(Thread.java:662) Locked ownable synchronizers: - <0x0007d89c1290> (a java.util.concurrent.locks.ReentrantLock$NonfairSync) Sigh. I see Sun/Oracle was as helpful as ever on this one: http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6521844 http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6202721 I'll try the workarounds in the thread you pointed out, thanks. Anything that Tomcat could do to prevent itself from getting stuck like this? Thanks, Dan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Hanging on startup?
> From: Dan Armbrust [mailto:daniel.armbrust.l...@gmail.com] > Subject: Hanging on startup? > Startup, and it hangs on app deploy: Waiting for entropy to build up? Take a few thread dumps with jstack to see who's waiting on what. If it is entropy, see this discussion: http://marc.info/?l=tomcat-user&m=132769606728228&w=2 - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Hanging on startup?
Ok, I must be doing something silly... I've deployed tomcat hundreds of times, and never had something like this happen. Just needed to test something simple on a new system. Grabbed tomcat 7.0.26, unzipped it. Configured it to run with my local java: java version "1.6.0_30" Java(TM) SE Runtime Environment (build 1.6.0_30-b12) Java HotSpot(TM) 64-Bit Server VM (build 20.5-b03, mixed mode) Changed the ports in server.xml from default, so it wouldn't collide with anything. Startup, and it hangs on app deploy: Using CATALINA_BASE: /stuff/utils/apache-tomcat-7.0.26 Using CATALINA_HOME: /stuff/utils/apache-tomcat-7.0.26 Using CATALINA_TMPDIR: /stuff/utils/apache-tomcat-7.0.26/temp Using JRE_HOME: /stuff/utils/apache-tomcat-7.0.26/bin/../../java/jdk_x64_1.6.0_30/jre Using CLASSPATH: stuff/utils/apache-tomcat-7.0.26/bin/bootstrap.jar:/stuff/utils/apache-tomcat-7.0.26/bin/tomcat-juli.jar Mar 12, 2012 7:07:39 PM org.apache.catalina.core.AprLifecycleListener init INFO: The APR based Apache Tomcat Native library which allows optimal performance in production environments was not found on the java.library.path: Mar 12, 2012 7:07:39 PM org.apache.coyote.AbstractProtocol init INFO: Initializing ProtocolHandler ["http-bio-9090"] Mar 12, 2012 7:07:39 PM org.apache.coyote.AbstractProtocol init INFO: Initializing ProtocolHandler ["ajp-bio-9099"] Mar 12, 2012 7:07:39 PM org.apache.catalina.startup.Catalina load INFO: Initialization processed in 944 ms Mar 12, 2012 7:07:39 PM org.apache.catalina.core.StandardService startInternal INFO: Starting service Catalina Mar 12, 2012 7:07:39 PM org.apache.catalina.core.StandardEngine startInternal INFO: Starting Servlet Engine: Apache Tomcat/7.0.26 Mar 12, 2012 7:07:39 PM org.apache.catalina.startup.HostConfig deployDirectory INFO: Deploying web application directory /stuff/utils/apache-tomcat-7.0.26/webapps/ROOT Nothing of interest in the log files, at all. If I take out my specified JVM, and just let it find whatever happens to be default on the system: java -version java version "1.6.0" Java(TM) SE Runtime Environment (build pxa6460sr8-20100409_01(SR8)) IBM J9 VM (build 2.4, JRE 1.6.0 IBM J9 2.4 Linux amd64-64 jvmxa6460sr8-20100401_55940 (JIT enabled, AOT enabled) J9VM - 20100401_055940 JIT - r9_20100401_15339 GC - 20100308_AA) JCL - 20100408_01 Then it starts up and runs fine. What could be causing this? Is there a compatibility issue with this JVM? Thanks, Dan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Tomcat 5.5 IIS 7.5 2008 64bit
On 03/12/2012 05:37 PM, Bradford Matthews wrote: Here is my steps that I used to install tomcat isapi connector. 5. Edit\conf\server.xml to allow localhost on port 8009 by adding address="127.0.0.1": https://localhost/tomcat-docs The Apache Tomcat Documentation page is displayed. Requested URL https://localhost:443/docs/ Any suggestions? Seems you are requesting this over ssl so you will probably need to add scheme="https" to the AJP/1.3
RE: Web service not starting up as expected
-Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Monday, March 12, 2012 9:07 AM To: Tomcat Users List Subject: Re: Web service not starting up as expected -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Debbie, On 3/9/12 3:57 PM, Debbie Shapiro wrote: > I'm pretty sure that's accurate in this case, however. I had > 7.0.23 installed as of last week and then this week did the upgrade > to 7.0.26. I'm wondering about your question regarding timing > though. It's possible that Tomcat is doing more cleanup than it has > in the past and it's taking longer to shut down? Maybe I do just > need some kind of pause in between stopping and restarting. Perhaps. > I either directly run the .bat command or launch the scheduled > task that normally runs the same .bat command. > > The contents of the .bat file is as follows: > > sc \\bidev2 stop Tomcat7 > > taskkill /F /FI "IMAGENAME eq java.exe" /FI "USERNAME eq NT > AUTHORITY\SYSTEM" So there's no delay between requesting a service-stop and calling taskkill (I assume that's like *NIX 'kill' that basically murders the process)? I would consider giving Tomcat some time to shut down. You never know what kinds of things need time to shut down. > REM delay batch job to wait for services to stop I don't see an actual delay, do you? No, I had left that there as a placeholder from my previous code. When I set up this server as 64-bit, I was trying to hold off from installing the Microsoft resource toolkit that contains the sleep command. I have that installed now and added a sleep command here. > sc \\bidev2 start Tomcat7 Yeah, I'll bet you need some delay in this script in order for it to work properly. > I have actually mentioned the memory leaks to them before. They > said not to be concerned, but maybe others will report this as > well. They aren't concerned because they aren't running their own software in production :( They need to fix this because it is definitely a memory leak. I agree, this doesn't look right. I'll ping them about it again. >> If this is really the end of the log file, then it looks like >> Tomcat didn't even attempt to start itself again. When you >> perform a restart, do you move the log file out of the way or >> anything like that? If so, is there a "new" log file that might >> have some indication on an error? > > This was the end of the file, yes. I thought it looked odd too. I > don't move any of the Tomcat logs. I only compress and rename the > old InetSoft logs. Okay, then Tomcat isn't even trying to start again (or at least isn't logging anything). It's possible that if the old process is still shutting down, the new process can't get a lock on the log file for writing, so no logs are written. > I have a scheduled task that kicks off the .bat file I copied > above. Okay, add some delay. I dunno how to do that on win32. Install the Microsoft Resource Toolkit. It contains a sleep command. > This second scheduled task started up fine. So maybe it is just a > timing issue. 7.0.26 takes longer to shut down than 7.0.23 maybe? It probably takes about the same amount of time, you're just noticing it now for some reason. Something must be different because 7.0.23 didn't require me to add the delay to my script and I hadn't received this error until I installed 7.0.26. The sleep command seems to be working. I have to add at least 30 seconds or it doesn't startup. > I'm going to test out a delay in the restart after I shut down, > but just wanted to throw out there that after my stop service > command, which happens at exactly 11:30, the restart failure in the > event viewer has a timestamp of 11:30:06. That's not much of a > delay between the stop and restart, so maybe it's still > technically shutting down at this point. 6 seconds to shut down wouldn't be out of the ordinary. If a webapp is doing things properly, it will have some of its own shutdown code running to clean up resources, etc. that will take non-zero time. Most of the shutdown time will be the webapp and not Tomcat itself, which really just has to un-deploy the webapp and then stop the connectors. > Yes, it is pretty common in the windows world to restart servers > and services due to various memory issues. I'm doing this because > the application is a reporting tool and if the users run any > enormous reports that cause it to run out of java heap or > something, this provides for an automated way of maintaining the > application so that it doesn't require manual intervention to fix > it and I know that even if no one calls me, it will be reset at > some point. I also use it as an opportunity to save off a daily > copy of the InetSoft logs if I need to go back and review errors > later. Personally, I'm a Mac fan at heart. :-) I'm curious how long you could run without a restart. Usually for reporting types of webapps, it's either a single request that brings-down the server (e.g. it needs a huge amount
RE: Web service not starting up as expected
I'm still seeing a java.exe process being launched in the Tomcat7.exe process tree. Please create a HelpStar ticket for any requests for assistance. This will help us better track your request. http://helpstar Debbie Shapiro Data Warehouse Manager Cardiac Science Office: 425.402.2233 Visit us at www.cardiacscience.com Suppliers of Cardiac Science, Criticare, Unetixs, Powerheart, Burdick, and Quinton products Part of the Opto Circuits Family -Original Message- From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] Sent: Monday, March 12, 2012 10:28 AM To: Tomcat Users List Subject: RE: Web service not starting up as expected > From: Christopher Schultz [mailto:ch...@christopherschultz.net] > Subject: Re: Web service not starting up as expected > > sc \\bidev2 stop Tomcat7 > > > > taskkill /F /FI "IMAGENAME eq java.exe" /FI "USERNAME eq NT > > AUTHORITY\SYSTEM" > So there's no delay between requesting a service-stop and calling > taskkill (I assume that's like *NIX 'kill' that basically murders > the process)? The taskkill is a red herring in this particular situation, since the executable name is not java.exe when Tomcat is running as a service. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Web service not starting up as expected
-Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Monday, March 12, 2012 9:09 AM To: Tomcat Users List Subject: Re: Web service not starting up as expected -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Debbie, On 3/9/12 5:56 PM, Debbie Shapiro wrote: > -Original Message- From: André Warnier > [mailto:a...@ice-sa.com] >> Now wait.. I am not so familiar with these Windows commands, but >> do I see above a) a command to stop the Tomcat service b) a >> command killing java.exe ? > > Yes. This code is sort of a holdover from another application that > I could only kill the service by also killing the java.exe > processes that it was tied to, otherwise it couldn't obtain the > port because it was already in use. Probably not necessary for this > application, but I figured it couldn't hurt. It *can* hurt: what about any other Java processes that are running? This is a dedicated server that is only running this process. There should be only the one java process running. >> REM delay batch job to wait for services to stop >> >> for /F "tokens=1-4 delims=/- " %%A in ('date/T') do set >> DATE=%%B%%C%%D for /F "tokens=1-4 delims=:., " %%a in ('time/T') >> do set TIME=%%a%%b%%c >> >> cd c:\"Program Files"\"Apache Software Foundation"\"Tomcat >> 7.0"\webapps\sree\WEB-INF\classes rename sree.log >> %DATE%_%TIME%_sree.log rename schedule.log >> %DATE%_%TIME%_schedule.log >> >> cd c:\"Program Files"\"Apache Software Foundation"\"Tomcat >> 7.0"\webapps\sree\WEB-INF\classes compact %DATE%_%TIME%_sree.log >> /c compact %DATE%_%TIME%_schedule.log /c >> > > and c) a series of command tending to indicate that this > application puts its logfiles inside the "classes" directory ? > (not fatal, but at least bizarre) > > Yes, it does. This is the way the vendor coded it. I have brought > it to their attention but they don't seem to see a problem with > it. Idiots. Yes, well, unfortunately, I can't force them to change how this is coded. - -chris -BEGIN PGP SIGNATURE- Version: GnuPG/MacGPG2 v2.0.17 (Darwin) Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk9eH4AACgkQ9CaO5/Lv0PCXTQCfSWLx0kzneT+PTnL2ZQs/ygs2 WlIAnRHlaN7hcWnIcXif9xIGQRlY72FG =G+vp -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Tomcat 7 Cluster Issue
I will try to reproduce using your config, shortly. p On 12 Mar 2012, at 16:02, Bruce Pease wrote: > You are correct. I rolled back the jdk7 change, and the session replication > fired up without error. I will hold off on the jdk 7 upgrade until I see the > okay on a subsequent release. Thanks. > > -Original Message- > From: Pid [mailto:p...@pidster.com] > Sent: Saturday, March 10, 2012 5:26 AM > To: Tomcat Users List > Subject: Re: Tomcat 7 Cluster Issue > > On 09/03/2012 18:33, Bruce Pease wrote: >> I can try the rollback the jdk, and try that. However, the issue >> doesn't appear to be jdk related. > > Plenty of changes to NIO in Java 7 AFAIK. > Let us know if Java 6 + Tomcat 7 presents the same problem. > > > p > >> The migration was performed by completely removing the old containers, >> installing tomcat 7 instances, updating all configuration using the >> ones released in tomcat 7 version, recompiling all applications with >> jdk 1.7 and tomcat 7 dependencies, and redeploying the applications. >> >> -Original Message- >> From: Daniel Mikusa [mailto:dmik...@vmware.com] >> Sent: Friday, March 09, 2012 1:02 PM >> To: Tomcat Users List >> Subject: Re: Tomcat 7 Cluster Issue >> >> On Fri, 2012-03-09 at 08:38 -0800, Bruce Pease wrote: >>> Good Morning: >>> >>> >>> >>> I recently upgraded my tomcat containers from tomcat 6 to tomcat >>> 7.0.26, and the jdk from 1.6 to 1.7. >> >> This is a major jump for both Tomcat & the JVM. Have you considered >> rolling back one of them to the previous version? >> >> For example, roll back the JDK to 1.6 and try just the upgrade to >> Tomcat 7.0.26. >> >> Also, from a Tomcat standpoint, how did you perform the migration? In >> particular with your configuration files? >> >> Dan >> >> >>> I am now seeing a clustering issue when I start a second instance on >>> the same server. I have tried a few variations of the config >>> (address="auto", address="the ip", no address entry, different ports, >>> etc.) with no success. I have included the configurations and error >>> messages below. Thank you in advance for your assistance. >>> >>> >>> >>> Error: >>> >>> Mar 09, 2012 11:16:16 AM >>> org.apache.catalina.tribes.transport.nio.NioReceiver >>> listen >>> >>> SEVERE: Unable to process request in NioReceiver >>> >>> java.net.SocketException: Invalid argument: no further information >>> >>>at sun.nio.ch.Net.setIntOption0(Native Method) >>> >>>at sun.nio.ch.Net.setSocketOption(Net.java:279) >>> >>>at >>> sun.nio.ch.SocketChannelImpl.setOption(SocketChannelImpl.java:175) >>> >>>at >>> sun.nio.ch.SocketAdaptor.setIntOption(SocketAdaptor.java:296) >>> >>>at >>> sun.nio.ch.SocketAdaptor.setTrafficClass(SocketAdaptor.java:396) >>> >>>at >>> >> > org.apache.catalina.tribes.transport.nio.NioReceiver.listen(NioReceiver.java: >>> 308) >>> >>>at >>> org.apache.catalina.tribes.transport.nio.NioReceiver.run(NioReceiver. >>> j >>> ava:418 >>> ) >>> >>>at java.lang.Thread.run(Thread.java:722) >>> >>> >>> >>> SEVERE: Unable to send message through cluster sender. >>> >>> org.apache.catalina.tribes.ChannelException: Send failed, attempt:2 >>> max:1; Faulty members:tcp://{10, 103, 4, 70}:4021; >>> >>>at >>> org.apache.catalina.tribes.transport.nio.ParallelNioSender.doLoop(Par >>> a >>> llelNio >>> Sender.java:187) >>> >>>at >>> org.apache.catalina.tribes.transport.nio.ParallelNioSender.sendMessag >>> e >>> (Parall >>> elNioSender.java:89) >>> >>>at >>> org.apache.catalina.tribes.transport.nio.PooledParallelSender.sendMes >>> s >>> age(Poo >>> ledParallelSender.java:54) >>> >>>at >>> org.apache.catalina.tribes.transport.ReplicationTransmitter.sendMessa >>> g >>> e(Repli >>> cationTransmitter.java:79) >>> >>>at >>> org.apache.catalina.tribes.group.ChannelCoordinator.sendMessage(Chann >>> e >>> lCoordi >>> nator.java:78) >>> >>>at >>> org.apache.catalina.tribes.group.ChannelInterceptorBase.sendMessage(C >>> h >>> annelIn >>> terceptorBase.java:79) >>> >>>at >>> org.apache.catalina.tribes.group.interceptors.MessageDispatchIntercep >>> t >>> or.send >>> Message(MessageDispatchInterceptor.java:77) >>> >>>at >>> org.apache.catalina.tribes.group.ChannelInterceptorBase.sendMessage(C >>> h >>> annelIn >>> terceptorBase.java:79) >>> >>>at >>> org.apache.catalina.tribes.group.interceptors.TcpFailureDetector.send >>> M >>> essage( >>> TcpFailureDetector.java:89) >>> >>>at >>> org.apache.catalina.tribes.group.ChannelInterceptorBase.sendMessage(C >>> h >>> annelIn >>> terceptorBase.java:79) >>> >>>at >>> org.apache.catalina.tribes.group.GroupChannel.send(GroupChannel.java: >>> 2 >>> 24) >>> >>>at >>> org.apache.catalina.tribes.group.GroupChannel.send(GroupChannel.jav
RE: Web service not starting up as expected
> From: Christopher Schultz [mailto:ch...@christopherschultz.net] > Subject: Re: Web service not starting up as expected > > sc \\bidev2 stop Tomcat7 > > > > taskkill /F /FI "IMAGENAME eq java.exe" /FI "USERNAME eq NT > > AUTHORITY\SYSTEM" > So there's no delay between requesting a service-stop and calling > taskkill (I assume that's like *NIX 'kill' that basically murders > the process)? The taskkill is a red herring in this particular situation, since the executable name is not java.exe when Tomcat is running as a service. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers.
Tomcat 5.5 IIS 7.5 2008 64bit
Here is my steps that I used to install tomcat isapi connector. To install Jakarta ISAPI redirector on IIS 7, follow these steps: 1. Under the Tomcat installation folder, for example, create a folder ISAPI 2. Copy isapi_redirect-1.2.28.dll file (or the latest one) to the ISAPI folder from your Tomcat installation folder and rename it to isapi_redirect.dll. 3. Create isapi_redirect.properties file in the same location and type the given lines: #configuration file for the jakarta ISAPI redirector #The path to the ISAPI redirector Extension, relative to the website # This must be in a virtual directory with execute privileges extension_uri=/jakarta/isapi_redirect.dll #Full path to the log file for the ISAPI redirector log_file=C:\Program Files\Apache Software Foundation\Tomcat 5.5\logs\isapi_redirect.log log_level=info worker_file=C:\Program Files\Apache Software Foundation\Tomcat 5.5\conf\workers.properties worker_mount_file=C:\Program Files\Apache Software Foundation\Tomcat 5.5\conf\uriworkermap.properties 4. Under the Tomcat installation folder in conf directory, create workers.properties file and uriworkermap.properties file. For uriworkermap.properties: # uriworkermap.properties - IIS /*=ajp13w For workers.properties: # workers.properties # # This file provides minimal jk configuration properties needed to # connect to Tomcat. # # The workers that jk should create and work with # worker.list=ajp13w,jkstatus # # Defining a worker named ajp13w and of type ajp13 # Note that the name and the type do not have to match. # worker.ajp13w.type=ajp13 worker.ajp13w.host=localhost worker.ajp13w.port=8009 # # Define status worker # worker.jkstatus.type=status 5. Edit \conf\server.xml to allow localhost on port 8009 by adding address="127.0.0.1": Sites > Default Web Site> select Add Virtual Directory node. b. Type jakarta in the Alias text box.and specify the location of the isapi_redirect.dll file in the Physical path. c. Under Default Web Site, double-click on ISAPI Filters. d. In ISAPI Filters window, right-click and select Add button, give Jakarta as the filter name. e. Click Browse, select the isapi_redirect.dll and click OK. f. Click OK 7. Under Default Host name, Double-click ISAPI > CGI Restrictions: a. In the ISAPI and CGI Restrictions window, right-click and select Add. b. Click Browse and select isapi_redirect.dll. c. Provide Jakarta in the Description text box. d. Select Allow extension path to execute option and click OK. 8. Under Default Web Site, select the virtual directory Jakarta: a. In the right pane, double-click Handler Mappings. b. In the Handler Mappings window, right-click and select Edit Features Permissions. c. Select the Execute checkbox and click OK. 9. Stop Tomcat 10. Restart IIS 11. Start Tomcat To test the connector: >From a supported browser, enter the following URL: https://localhost/tomcat-docs The Apache Tomcat Documentation page is displayed. Now following this steps I get: Error Summary HTTP Error 500.0 - Internal Server Error The page cannot be displayed because an internal server error has occurred. Detailed Error Information Module IsapiFilterModule NotificationAuthenticateRequest Handler StaticFile Error Code 0x80070001 Requested URL https://localhost:443/docs/ Physical Path C:\inetpub\wwwroot\docs\ Logon MethodAnonymous Logon User Anonymous Any suggestions? - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Dynamic Security Constraints?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Leo, On 3/9/12 4:44 PM, Leo Donahue - PLANDEVX wrote: > I'm not sure this is the right subject line, but if I wanted to > use Tomcat to publish large files (several GB) for different > customers to download, and each customer wanted their own secure > URL (form based login over HTTPS) from which to download their > data, how would I add a new security constraint url-pattern for > authentication for new customers without restarting the server? Is > that even the correct approach? Sounds like a custom filter would be best. You could map the filter to some root, say "/dynamic-security/*" and then always publish to URLs that would be served by resources in that URL space. You can do whatever you want in your filter. For example, you could have a map of URLs to clients and make sure that the current-user "is" the proper client. You can even write a simple management servlet that allows you to modify that map. (Don't forget to protect that admin servlet :) - -chris -BEGIN PGP SIGNATURE- Version: GnuPG/MacGPG2 v2.0.17 (Darwin) Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk9eI4QACgkQ9CaO5/Lv0PDKqQCfSy1N9i9j21k9AZRqvWmrc0l/ SaMAn2BD8euUBYQj9cbXqCB5iMKmmze+ =nVbi -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Web service not starting up as expected
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Debbie, On 3/9/12 5:56 PM, Debbie Shapiro wrote: > -Original Message- From: André Warnier > [mailto:a...@ice-sa.com] >> Now wait.. I am not so familiar with these Windows commands, but >> do I see above a) a command to stop the Tomcat service b) a >> command killing java.exe ? > > Yes. This code is sort of a holdover from another application that > I could only kill the service by also killing the java.exe > processes that it was tied to, otherwise it couldn't obtain the > port because it was already in use. Probably not necessary for this > application, but I figured it couldn't hurt. It *can* hurt: what about any other Java processes that are running? >> REM delay batch job to wait for services to stop >> >> for /F "tokens=1-4 delims=/- " %%A in ('date/T') do set >> DATE=%%B%%C%%D for /F "tokens=1-4 delims=:., " %%a in ('time/T') >> do set TIME=%%a%%b%%c >> >> cd c:\"Program Files"\"Apache Software Foundation"\"Tomcat >> 7.0"\webapps\sree\WEB-INF\classes rename sree.log >> %DATE%_%TIME%_sree.log rename schedule.log >> %DATE%_%TIME%_schedule.log >> >> cd c:\"Program Files"\"Apache Software Foundation"\"Tomcat >> 7.0"\webapps\sree\WEB-INF\classes compact %DATE%_%TIME%_sree.log >> /c compact %DATE%_%TIME%_schedule.log /c >> > > and c) a series of command tending to indicate that this > application puts its logfiles inside the "classes" directory ? > (not fatal, but at least bizarre) > > Yes, it does. This is the way the vendor coded it. I have brought > it to their attention but they don't seem to see a problem with > it. Idiots. - -chris -BEGIN PGP SIGNATURE- Version: GnuPG/MacGPG2 v2.0.17 (Darwin) Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk9eH4AACgkQ9CaO5/Lv0PCXTQCfSWLx0kzneT+PTnL2ZQs/ygs2 WlIAnRHlaN7hcWnIcXif9xIGQRlY72FG =G+vp -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Web service not starting up as expected
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Debbie, On 3/9/12 3:57 PM, Debbie Shapiro wrote: > I'm pretty sure that's accurate in this case, however. I had > 7.0.23 installed as of last week and then this week did the upgrade > to 7.0.26. I'm wondering about your question regarding timing > though. It's possible that Tomcat is doing more cleanup than it has > in the past and it's taking longer to shut down? Maybe I do just > need some kind of pause in between stopping and restarting. Perhaps. > I either directly run the .bat command or launch the scheduled > task that normally runs the same .bat command. > > The contents of the .bat file is as follows: > > sc \\bidev2 stop Tomcat7 > > taskkill /F /FI "IMAGENAME eq java.exe" /FI "USERNAME eq NT > AUTHORITY\SYSTEM" So there's no delay between requesting a service-stop and calling taskkill (I assume that's like *NIX 'kill' that basically murders the process)? I would consider giving Tomcat some time to shut down. You never know what kinds of things need time to shut down. > REM delay batch job to wait for services to stop I don't see an actual delay, do you? > sc \\bidev2 start Tomcat7 Yeah, I'll bet you need some delay in this script in order for it to work properly. > I have actually mentioned the memory leaks to them before. They > said not to be concerned, but maybe others will report this as > well. They aren't concerned because they aren't running their own software in production :( They need to fix this because it is definitely a memory leak. >> If this is really the end of the log file, then it looks like >> Tomcat didn't even attempt to start itself again. When you >> perform a restart, do you move the log file out of the way or >> anything like that? If so, is there a "new" log file that might >> have some indication on an error? > > This was the end of the file, yes. I thought it looked odd too. I > don't move any of the Tomcat logs. I only compress and rename the > old InetSoft logs. Okay, then Tomcat isn't even trying to start again (or at least isn't logging anything). It's possible that if the old process is still shutting down, the new process can't get a lock on the log file for writing, so no logs are written. > I have a scheduled task that kicks off the .bat file I copied > above. Okay, add some delay. I dunno how to do that on win32. > This second scheduled task started up fine. So maybe it is just a > timing issue. 7.0.26 takes longer to shut down than 7.0.23 maybe? It probably takes about the same amount of time, you're just noticing it now for some reason. > I'm going to test out a delay in the restart after I shut down, > but just wanted to throw out there that after my stop service > command, which happens at exactly 11:30, the restart failure in the > event viewer has a timestamp of 11:30:06. That's not much of a > delay between the stop and restart, so maybe it's still > technically shutting down at this point. 6 seconds to shut down wouldn't be out of the ordinary. If a webapp is doing things properly, it will have some of its own shutdown code running to clean up resources, etc. that will take non-zero time. Most of the shutdown time will be the webapp and not Tomcat itself, which really just has to un-deploy the webapp and then stop the connectors. > Yes, it is pretty common in the windows world to restart servers > and services due to various memory issues. I'm doing this because > the application is a reporting tool and if the users run any > enormous reports that cause it to run out of java heap or > something, this provides for an automated way of maintaining the > application so that it doesn't require manual intervention to fix > it and I know that even if no one calls me, it will be reset at > some point. I also use it as an opportunity to save off a daily > copy of the InetSoft logs if I need to go back and review errors > later. Personally, I'm a Mac fan at heart. :-) I'm curious how long you could run without a restart. Usually for reporting types of webapps, it's either a single request that brings-down the server (e.g. it needs a huge amount of memory to run a single report) or you have lots of smaller requests that need a ton of memory in aggregate. It's not really possible to fix the former, other than getting more memory or changing the way reports are done to use less of it. Threads can't get their "own" memory usage so you can't really limit one particular request. It's easy to fix the latter: just find our whatever you maximum load is in terms of simultaneous reports, and simply never let that many run at once. You can do that with a report-counter in the webapp itself, or you can do it by limiting the maximum number of connections that the server will accept. For my money, I'd off-load the actual report-generation to an out-of-process (duh) process and pick-up the result when it's done. That way, your webapp doesn't become unstable even if one report runs out of memory. - -chris
RE: Tomcat 7 Cluster Issue
You are correct. I rolled back the jdk7 change, and the session replication fired up without error. I will hold off on the jdk 7 upgrade until I see the okay on a subsequent release. Thanks. -Original Message- From: Pid [mailto:p...@pidster.com] Sent: Saturday, March 10, 2012 5:26 AM To: Tomcat Users List Subject: Re: Tomcat 7 Cluster Issue On 09/03/2012 18:33, Bruce Pease wrote: > I can try the rollback the jdk, and try that. However, the issue > doesn't appear to be jdk related. Plenty of changes to NIO in Java 7 AFAIK. Let us know if Java 6 + Tomcat 7 presents the same problem. p > The migration was performed by completely removing the old containers, > installing tomcat 7 instances, updating all configuration using the > ones released in tomcat 7 version, recompiling all applications with > jdk 1.7 and tomcat 7 dependencies, and redeploying the applications. > > -Original Message- > From: Daniel Mikusa [mailto:dmik...@vmware.com] > Sent: Friday, March 09, 2012 1:02 PM > To: Tomcat Users List > Subject: Re: Tomcat 7 Cluster Issue > > On Fri, 2012-03-09 at 08:38 -0800, Bruce Pease wrote: >> Good Morning: >> >> >> >> I recently upgraded my tomcat containers from tomcat 6 to tomcat >> 7.0.26, and the jdk from 1.6 to 1.7. > > This is a major jump for both Tomcat & the JVM. Have you considered > rolling back one of them to the previous version? > > For example, roll back the JDK to 1.6 and try just the upgrade to > Tomcat 7.0.26. > > Also, from a Tomcat standpoint, how did you perform the migration? In > particular with your configuration files? > > Dan > > >> I am now seeing a clustering issue when I start a second instance on >> the same server. I have tried a few variations of the config >> (address="auto", address="the ip", no address entry, different ports, >> etc.) with no success. I have included the configurations and error >> messages below. Thank you in advance for your assistance. >> >> >> >> Error: >> >> Mar 09, 2012 11:16:16 AM >> org.apache.catalina.tribes.transport.nio.NioReceiver >> listen >> >> SEVERE: Unable to process request in NioReceiver >> >> java.net.SocketException: Invalid argument: no further information >> >> at sun.nio.ch.Net.setIntOption0(Native Method) >> >> at sun.nio.ch.Net.setSocketOption(Net.java:279) >> >> at >> sun.nio.ch.SocketChannelImpl.setOption(SocketChannelImpl.java:175) >> >> at >> sun.nio.ch.SocketAdaptor.setIntOption(SocketAdaptor.java:296) >> >> at >> sun.nio.ch.SocketAdaptor.setTrafficClass(SocketAdaptor.java:396) >> >> at >> > org.apache.catalina.tribes.transport.nio.NioReceiver.listen(NioReceiver.java: >> 308) >> >> at >> org.apache.catalina.tribes.transport.nio.NioReceiver.run(NioReceiver. >> j >> ava:418 >> ) >> >> at java.lang.Thread.run(Thread.java:722) >> >> >> >> SEVERE: Unable to send message through cluster sender. >> >> org.apache.catalina.tribes.ChannelException: Send failed, attempt:2 >> max:1; Faulty members:tcp://{10, 103, 4, 70}:4021; >> >> at >> org.apache.catalina.tribes.transport.nio.ParallelNioSender.doLoop(Par >> a >> llelNio >> Sender.java:187) >> >> at >> org.apache.catalina.tribes.transport.nio.ParallelNioSender.sendMessag >> e >> (Parall >> elNioSender.java:89) >> >> at >> org.apache.catalina.tribes.transport.nio.PooledParallelSender.sendMes >> s >> age(Poo >> ledParallelSender.java:54) >> >> at >> org.apache.catalina.tribes.transport.ReplicationTransmitter.sendMessa >> g >> e(Repli >> cationTransmitter.java:79) >> >> at >> org.apache.catalina.tribes.group.ChannelCoordinator.sendMessage(Chann >> e >> lCoordi >> nator.java:78) >> >> at >> org.apache.catalina.tribes.group.ChannelInterceptorBase.sendMessage(C >> h >> annelIn >> terceptorBase.java:79) >> >> at >> org.apache.catalina.tribes.group.interceptors.MessageDispatchIntercep >> t >> or.send >> Message(MessageDispatchInterceptor.java:77) >> >> at >> org.apache.catalina.tribes.group.ChannelInterceptorBase.sendMessage(C >> h >> annelIn >> terceptorBase.java:79) >> >> at >> org.apache.catalina.tribes.group.interceptors.TcpFailureDetector.send >> M >> essage( >> TcpFailureDetector.java:89) >> >> at >> org.apache.catalina.tribes.group.ChannelInterceptorBase.sendMessage(C >> h >> annelIn >> terceptorBase.java:79) >> >> at >> org.apache.catalina.tribes.group.GroupChannel.send(GroupChannel.java: >> 2 >> 24) >> >> at >> org.apache.catalina.tribes.group.GroupChannel.send(GroupChannel.java: >> 1 >> 82) >> >> at >> org.apache.catalina.ha.tcp.SimpleTcpCluster.send(SimpleTcpCluster.jav >> a >> :804) >> >> at >> org.apache.catalina.ha.session.DeltaManager.getAllClusterSessions(Del >> t >> aManage >> r.j
Re: Dynamic Security Constraints?
Leo Donahue - PLANDEVX wrote: -Original Message- From: André Warnier [mailto:a...@ice-sa.com] Subject: Re: Dynamic Security Constraints? Addenda : 1) ... You'd have to think carefully of where you place these files to download, so that Tomcat does not unwittingly provide the possibility for a user to download such a file directly (bypassing the login) by providing a URL that points to the file directly. Not to change the subject, but I hear a lot of people talking about the point you're making about where to place the file and unwittingly providing a URL to access it outside of a security constraint. Perhaps there is some design history to this that people used to do that I am just missing, so could someone please enlighten me? If I place a file in a webapp context of customerx, and restrict access to everything in the customerx url pattern to a specific login, how can that URL be accessed outside of a security check? Are people doing something else when they deploy their apps that would allow the situation you are describing? Are they creating a separate docBase? Let me give one example : Imagine that you have a front-end webserver like Apache httpd or IIS, and one back-end tomcat on the same host. Then imagine that you would be of the opinion that it must be more efficient to have the front-end server serve any static content (pure html, images, stylesheets) directly, rather than proxying this to Tomcat and having Tomcat deliver that content through the connector etc.. But for maintenance reasons, it is still easier to have all this content in one single application directory, together with your JSP pages and webapps, under Tomcat /webapps/myapp. So you would think : hey, why do I not define a (or a "virtual directory" or whatever IIS calls it) in my front-end server, allowing it to serve the static content of my Tomcat /webapps/myapp directly ? The problem with this, is that the front-end server, by default, has no idea that the /WEB-INF/ and /META-INF/ directories are special to Tomcat, and may contain things that you do not want to serve to the outside world. So if a request URL, at the front-end level, looks like it addresses a static file like /webapps/myapp/WEB-INF/passwords.xml, it will happily serve it directly, never even asking Tomcat's opinion. You'd be amazed at how many people have come here with configurations which do exactly that. And how many additional ones have never come here but have the same layout. There are subtler cases, involving uppercase/lowercase sensitivity; or involving doing the login under HTTPS, but the rest of the session not, etc.. You are right that in your case, if you define one separate webapp per customer, and each webapp requires a login, and the files to download by one customer are within that webapp's directory, you will not have a security problem. On the other hand, if you want a single webapp, but each customer should be able only to download his own files, then your setup must be a bit more careful, and the links that you provide to one customer to access his file(s), should not be so that he can just change one or two characters in it and download someone else's files. And if all the files are in the same directory, you should not allow them to obtain a "directory index" page. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: How to setup logging in Tomcat for WebappClassLoader?
On 12/03/2012 13:02, Volodymyr Bezuglyy wrote: > Hello. Hello. Please start a new thread, rather replying to an existing one, even if it's your own. p -- [key:62590808] signature.asc Description: OpenPGP digital signature
RE: Dynamic Security Constraints?
>-Original Message- >From: André Warnier [mailto:a...@ice-sa.com] >Subject: Re: Dynamic Security Constraints? > >Addenda : >1) ... You'd have to think carefully of where you place these >files to download, so that Tomcat does not unwittingly provide the >possibility for a user to download such a file directly (bypassing the >login) by providing a URL that points to the file directly. Not to change the subject, but I hear a lot of people talking about the point you're making about where to place the file and unwittingly providing a URL to access it outside of a security constraint. Perhaps there is some design history to this that people used to do that I am just missing, so could someone please enlighten me? If I place a file in a webapp context of customerx, and restrict access to everything in the customerx url pattern to a specific login, how can that URL be accessed outside of a security check? Are people doing something else when they deploy their apps that would allow the situation you are describing? Are they creating a separate docBase? - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
How to setup logging in Tomcat for WebappClassLoader?
Hello. I am trying to setup logging in Tomcat according to http://tomcat.apache.org/tomcat-5.5-doc/logging.html. I created file Tomcat5\common\classes\log4j.properties: log4j.rootLogger=WARN, R log4j.appender.R=org.apache.log4j.RollingFileAppender log4j.appender.R.File=${catalina.home}/logs/tomcat.log log4j.appender.R.MaxFileSize=500MB log4j.appender.R.MaxBackupIndex=10 log4j.appender.R.layout=org.apache.log4j.PatternLayout log4j.appender.R.layout.ConversionPattern=%p %t %c - %m%n log4j.logger.org.apache.catalina.loader=DEBUG, C log4j.appender.C=org.apache.log4j.RollingFileAppender log4j.appender.C.File=${catalina.home}/logs/cl.log log4j.appender.C.MaxFileSize=500MB log4j.appender.C.MaxBackupIndex=10 log4j.appender.C.layout=org.apache.log4j.PatternLayout log4j.appender.C.layout.ConversionPattern=%p %t %c - %m%n I would like to see traces from method loadClass of org.apache.catalina.loader.WebappClassLoader class. But there are only traces from org.apache.catalina.loader.WebappLoader in ${catalina.home}/logs/cl.log file. Can someone explain why there are no any traces from WebappClassLoader and how turn them on? Thank you, Vladimir Bezugliy. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Issues with the tomcat connector (On W2k8 + IIS7.5)
Thanks I will [snip] > > > > From Failed Request tracking on IIS > > > > ErrorDescription > > Calling LoadLibraryEx on ISAPI filter > "C:\YB\Shared\dev.yieldbroker.com\ajpconfig\isapi_redirect.dll" failed > > > > Try the RC binaries from > http://people.apache.org/~mturk/tomcat-connectors/jk-1.2.33/ > > Does this one crashes as well? > > > Regards > -- > ^TM > > - > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Issues with the tomcat connector (On W2k8 + IIS7.5)
On 03/12/2012 12:37 AM, Alex Samad - Yieldbroker wrote: Hi Thanks any idea's why the latest head version doesn't work. I got it to compile, but it crashes when IIS tries to load it From Failed Request tracking on IIS ErrorDescription Calling LoadLibraryEx on ISAPI filter "C:\YB\Shared\dev.yieldbroker.com\ajpconfig\isapi_redirect.dll" failed Try the RC binaries from http://people.apache.org/~mturk/tomcat-connectors/jk-1.2.33/ Does this one crashes as well? Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org