[ANN] Apache Tomcat Native 1.1.30 released
The Apache Tomcat team announces the immediate availability of Apache Tomcat Native 1.1.30 stable. Please refer to the change log for the list of changes: http://tomcat.apache.org/native-doc/miscellaneous/changelog.html Downloads: http://tomcat.apache.org/download-native.cgi The Apache Tomcat Native Library provides portable API for features not found in contemporary JDK's. It uses Apache Portable Runtime as operating system abstraction layer and OpenSSL for SSL networking and allows optimal performance in production environments. Thank you, -- The Apache Tomcat Team - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
[ANN] Apache Tomcat Connectors 1.2.40 released
The Apache Tomcat Project is proud to announce the release of version 1.2.40 of Apache Tomcat Connectors. This version fixes few bugs found in previous releases. Full details of these changes and new features, are available in the Apache Tomcat Connectors changelog: http://tomcat.apache.org/connectors-doc/miscellaneous/changelog.html Downloads: http://tomcat.apache.org/download-connectors.cgi Thank you, -- The Apache Tomcat Team - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: AW: AW: tomcat-connectors-1.2.39-windows-x86_64-iis does not work
On 04/15/2014 02:58 PM, Alten, Jessica-Aileen wrote: Hi all, the new tomcat-connectors-1.2.40-windows-x86_64-iis works with the localhost setting in workers.properties! Great! Many thanks to the developers! :-) You're welcome. Thanks for filing the bug and confirming the fix. It was that kind of bug that does not show on all boxes and all the time. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Windows tcnative openssl ciphers question
On 04/09/2014 04:36 PM, Jeffrey Janner wrote: Per someone (Mladen?) the capability wasn't enabled at build. Last notice I received is he's addressing that in the next release. Yes, feel free to test candidate at http://people.apache.org/~mturk/native/1.1.30 which I hope will be voted as official release. It should have all the EC bits enabled, but this still needs some real-world testing. You're welcome :) Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
[ANN] Apache Tomcat Connectors 1.2.39 released
The Apache Tomcat Project is proud to announce the release of version 1.2.39 of Apache Tomcat Connectors. This version fixes few bugs found in previous releases and adds some new features like IPV6 support. Full details of these changes and new features, are available in the Apache Tomcat Connectors changelog: http://tomcat.apache.org/connectors-doc/miscellaneous/changelog.html Downloads: http://tomcat.apache.org/download-connectors.cgi Thank you, -- The Apache Tomcat Team - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
[ANN] Apache Tomcat Native 1.1.29 released
The Apache Tomcat team announces the immediate availability of Apache Tomcat Native 1.1.29 stable. Please refer to the change log for the list of changes: http://tomcat.apache.org/native-doc/miscellaneous/changelog.html Downloads: http://tomcat.apache.org/download-native.cgi The Apache Tomcat Native Library provides portable API for features not found in contemporary JDK's. It uses Apache Portable Runtime as operating system abstraction layer and OpenSSL for SSL networking and allows optimal performance in production environments. Thank you, -- The Apache Tomcat Team - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: parse mod_jk log
On 10/07/2013 01:50 PM, mohan.radhakrish...@polarisft.com wrote: Ok. I am already doing that. I thought mod_jk logs can be parsed using something like awstats. Take a look at http://tomcat.apache.org/connectors-doc/reference/apache.html JkRequestLogFormat will format the line as you like You can also use mod_log_config directly. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: mod_jk not changes IP of hostname when occurs changing of IP on DNS
On 09/19/2013 06:41 PM, Tiago Braga wrote: In apache, the module mod_jk not changes IP of hostname when occurs changing of IP on DNS. Do a graceful restart of httpd when address changes. Unfortunately like some said, we can either do a DNS lookup every time which would be a performance disaster or cache it and reuse (like we do). So graceful restart will cache a new DNS address. Anyhow, I'd suggest you use fixed IP addresses for your backend servers anyhow. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: mod_jk not changes IP of hostname when occurs changing of IP on DNS
On 09/20/2013 07:29 PM, Tiago Braga wrote: Hi, I would like be automatic. The only thing we can do is to make directive for expiring the resolved address cache entry after some timeout. This however would not solve the random DNS change I think that this random is not actually random but rather happens on some interval. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
[ANN] Apache Tomcat Native 1.1.28 released
The Apache Tomcat team announces the immediate availability of Apache Tomcat Native 1.1.28 stable. Please refer to the change log for the list of changes: http://tomcat.apache.org/native-doc/miscellaneous/changelog.html Downloads: http://tomcat.apache.org/download-native.cgi The Apache Tomcat Native Library provides portable API for features not found in contemporary JDK's. It uses Apache Portable Runtime as operating system abstraction layer and OpenSSL for SSL networking and allows optimal performance in production environments. Thank you, -- The Apache Tomcat Team - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: mod_jk worker activation not working anymore in 1.2.37?
On 06/11/2013 06:42 AM, Rainer Jung wrote: On 11.06.2013 00:58, Martin Knoblauch wrote: Any plans when 1.2.38 will be released? Not really, but it is overdue. So IMO we should release it during the next few weeks. Yeah. There are few more reported bugs for updating status which I'd like to check before new release. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Starting tomcat7w from batch file
On 03/18/2013 03:59 PM, David kerber wrote: start C:\Program Files (x86)\Apache Software Foundation\Tomcat 7.0\bin\tomcat7w.exe //MS//Small-55009 You can also copy/rename tomcat7w.exe to small-55009w.exe and you won't need any params. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Standard or OCSP Native Lib?
On 03/15/2013 02:39 AM, Nick Williams wrote: Can anyone shed some light on when you would pick standard and when you would pick OCSP? I think that's usage is self explanatory. Use OCSP if you need OCSP :) Otherwise it'll just slow you down. Since the current implementation does not have enable/disable configuration the only way was to make it compile time enabled/disabled. In future I see those two will become one version with runtime selection. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Problem with nsapi_redirect.so (1.2.37) on iPlanet 7.0.15 and Solaris 11
On 02/18/2013 10:47 PM, Andy Wang wrote: If I execute startserv as the non-privileged user rather than root or do this on Solaris 10, no problems. Any ideas why systhread_start (this is an iPlanet NSAPI function) would fail here as root? Did you tried to check the ulimit. Seems like webservd once when switched to non privileged user cannot create threads either because of some security settings or lack of resources. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
[ANN] Apache Tomcat Native 1.1.27 released
The Apache Tomcat team announces the immediate availability of Apache Tomcat Native 1.1.27 stable. Please refer to the change log for the list of changes: http://tomcat.apache.org/native-doc/miscellaneous/changelog.html Downloads: http://tomcat.apache.org/download-native.cgi Thank you, -- The Apache Tomcat Team - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Mod_jk - loadbalancer
On 12/3/2012 11:18, Orhan Karasakal wrote: But firstly I want to send requests to loadbalancer and then according to url, sending the other nodes. Session affinity should handle that. But if you wish something else use some other loadbalancer, eg. mod_rewrite round-robin and multiple mod_jk workers. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
[ANN] Apache Tomcat Native 1.1.24 released
The Apache Tomcat team announces the immediate availability of Apache Tomcat Native 1.1.24 stable. Please refer to the change log for the list of changes: http://tomcat.apache.org/native-doc/miscellaneous/changelog.html Downloads: http://tomcat.apache.org/download-native.cgi Thank you, -- The Apache Tomcat Team - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
[ANN] Apache Tomcat Connectors 1.2.37 released
The Apache Tomcat Project is proud to announce the release of version 1.2.37 of Apache Tomcat Connectors. This version fixes few bugs found in 1.2.36 release. Full details of these changes and new features, are available in the Apache Tomcat Connectors changelog: http://tomcat.apache.org/connectors-doc/miscellaneous/changelog.html Downloads: http://tomcat.apache.org/download-connectors.cgi Thank you, -- The Apache Tomcat Team - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: jk 1.2.36 throwing 503/sendfull/cping errors
On 05/29/2012 07:28 PM, Anthony J. Biacco wrote: Trunk works. Cool. That confirms my findings. We have release candidate at http://people.apache.org/~mturk/tomcat-connectors/jk-1.2.37/ Hope its gonna be voted by the end of this week. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: is there anyway to check whether mod_jk is properly built or not?
On 05/28/2012 10:30 AM, Aman Arora wrote: Respected All, i hope this question is relevant . Not really :) Have you tried to build it and is mod_jk.so produced? Hope you are not trying that on windows, cause it can be tricky for someone that tries to build it for the first time. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: jk 1.2.36 throwing 503/sendfull/cping errors
On 05/27/2012 05:27 PM, Anthony J. Biacco wrote: Yeah, I can do that, thanks much. Cool. In between can you check the code from the trunk? Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: jk 1.2.36 throwing 503/sendfull/cping errors
On 05/25/2012 08:11 PM, Anthony J. Biacco wrote: GOOD loadbalancer (loadbalancer,app-03) BAD loadbalancer (app-03,loadbalancer) Could you open BZ entry for that? Although it works in most cases, it's an error and should be fixed. The point is that we can have both lb and standard workers with the same name because we allocate shared memory both by name and type. So, need a BZ entry so we can reference it as a regression from 1.2.35 Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: jk 1.2.36 throwing 503/sendfull/cping errors
On 05/25/2012 11:28 AM, Martin Knoblauch wrote: On Fri, May 25, 2012 at 6:45 AM, Mladen Turkmt...@apache.org wrote: On 05/24/2012 09:40 PM, Anthony J. Biacco wrote: I'm still puzzled as to why this behavior just changed between .35 and .36 OK, but if you follow the recommended configuration by making sure that workers which are members of lb are not listed inside worker.list, does it works? The question is, is this a recommendation or a restriction that should be enforced? Maybe a warning about this, apparently common, [mis-]configuration should be issued at module configuration time? Hmm, I still didn't get the response if it works in case member workers are not in the worker.list. But you are right. Before 1.2.36 we just created another worker slot in shared memory. Now it's allocated 'by name' so it can create problems if the same name is declared both as standalone ajp13 worker and load balancer member. I'm sure that once we had 'must not be in worker.list', but someone changed that to 'should' inside http://tomcat.apache.org/connectors-doc/reference/workers.html (see balance_workers directive) Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: jk 1.2.36 throwing 503/sendfull/cping errors
On 05/24/2012 09:40 PM, Anthony J. Biacco wrote: I'm still puzzled as to why this behavior just changed between .35 and .36 OK, but if you follow the recommended configuration by making sure that workers which are members of lb are not listed inside worker.list, does it works? Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: jk 1.2.36 throwing 503/sendfull/cping errors
On 05/24/2012 12:12 AM, Anthony J. Biacco wrote: Centos 5.8, x86_64, apache 2.2.22, java 1.6.0_32, tomcat 7.0.27, apr 1.4.6 (also happens on another machine with apache 2.2.21 and java 1.6.0_29, rest of the versions are the same) Connecting apache to tomcat ajp, same machine. Once I upgraded to 1.2.36 I started receiving 503 errors when trying to access my webapps. 1.2.32 and 1.2.35 work fine. [Wed May 23 15:56:32 2012] [32504:1138178368] [debug] jk_open_socket::jk_connect.c (609): trying to connect socket 22 to 0.0.0.0:0 Connecting to 0.0.0.0:0 ? [Wed May 23 15:56:32 2012] [32504:1138178368] [debug] jk_open_socket::jk_connect.c (635): socket 22 [errno=107] connected getsockname fails with errno=107 (ENOTCONN) Fix your config. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
[ANN] Apache Tomcat Connectors 1.2.36 released
The Apache Tomcat Project is proud to announce the release of version 1.2.36 of Apache Tomcat Connectors. This version fixes few bugs found in 1.2.35 release. Full details of these changes and new features, are available in the Apache Tomcat Connectors changelog: http://tomcat.apache.org/connectors-doc/miscellaneous/changelog.html Downloads: http://tomcat.apache.org/download-connectors.cgi Thank you, -- The Apache Tomcat Team - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
[ANN] Apache Tomcat Connectors 1.2.35 released
The Apache Tomcat Project is proud to announce the release of version 1.2.36 of Apache Tomcat Connectors. This version fixes few bugs found in 1.2.35 release. Full details of these changes and new features, are available in the Apache Tomcat Connectors changelog: http://tomcat.apache.org/connectors-doc/miscellaneous/changelog.html Downloads: http://tomcat.apache.org/download-connectors.cgi Thank you, -- The Apache Tomcat Team - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: [ANN] Apache Tomcat Connectors 1.2.35 released
On 05/17/2012 07:19 AM, Harsimranjit singh Kler wrote: Hi Its release of version 1.2.36 but mail subject mention as 1.2.35. So there was little confusion when first time checked mail. Yeah, sorry for the typo. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: HTTP 500.0 on IIS7.5 + JK1.2.36 + TC7.0.26
On 05/15/2012 07:58 AM, Tommy Pham wrote: Hi, I'm trying to get the connector (JK 1.2.36) to work for IIS7.5 (Windows 7 Enterprise) but keep on running into HTTP 500.0 Error following the documentation [1]: Error Summary HTTP Error 500.0 - Internal Server Error Calling GetFilterVersion on ISAPI filter D:\apache-tomcat-7.0.26\bin\connector\isapi_redirect.dll failed log_file=D:\\apache-tomcat-7.0.26\\logs\\isapi.log log_level=info Is there anything written to that log file? If not, I'd suggest fixing security for D:\apache-tomcat-7.0.26 logs and bin folders. IIS runs under special account and it might not have read/write permissions to that folder. Also, why Win7? That's workstation, so unless you are experimenting make no sense to use that for anything except serving few clients. There is a hard limit on number of connections you can use on any workstation-kind of windows. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Slow downloads through mod_jk on Windows XP
On 05/11/2012 12:36 AM, Andy Wang wrote: So I cannot reproduce the slow down to 4-5MB/s on the same VM I was able to reproduce it on once I copied the VM to an adequate vmware server. But I do see some neat numbers in case people care. I was following this tread and was hoping that someone will say: Do not use workstation grade software for server applications but no. XP (Win7 falls in the same category) has good network stack but focused on client applications. There is a good reason why MS charges extra $$ for server versions since they make sure your server application don't perform well on workstation software. I'm not sure what to make of the customer reports of the slow downs but at this point, I'm going to have to ask them to use something like ab.exe to do the downloads instead of Internet Explorer (most of them use IE to do it). Maybe there's some stupidity with IE. IE tries to open several concurrent connection at once (RFC says that number is max 3) I'm sure you can simulate that with 'ab -c 10 -k -n 1 ...' Anyways, I'm closing the book on this (with a bookmark just in case) but wanted to provide the numbers in case people were curious what I got. There is nothing wrong with tomcat, mod_jk or httpd. It's just your use case. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: 64bit windows mod_jk connector download for apache httpd 2.4
On 04/24/2012 09:30 PM, chris derham wrote: And we have a winner - 64 bit mod_jk now present on http://www.apachelounge.com/download/win64/ Thanks for all your help, and apache lounge for doing the work Wow, that was fast. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: 64bit windows mod_jk connector download for apache httpd 2.4
On 04/23/2012 04:11 PM, Christopher Schultz wrote: The problem is that there are no more 'official' httpd binaries. Aah, I didn't realize that ASF doesn't have official httpd x86-64 binaries. Right, never did have 64-bit, and now no more 32-bit as well. Probably because the current maintainer just get bored, so the suggested use is to use apachelaunge's binaries. At the end we could try to convince those guys to produce mod_jk binaries as well. Yeah, it would seem reasonable to suggest that to them. Maybe OP can make such a request, since he's the one who wants the package? Exactly. Might be better to come from userland Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: 64bit windows mod_jk connector download for apache httpd 2.4
On 04/19/2012 06:33 PM, Christopher Schultz wrote: I think it's reasonable for us to add x86-64 builds for mod_jk+httpd. The problem is that there are no more 'official' httpd binaries. Probably because the current maintainer just get bored, so the suggested use is to use apachelaunge's binaries. At the end we could try to convince those guys to produce mod_jk binaries as well. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: 64bit windows mod_jk connector download for apache httpd 2.4
On 04/18/2012 02:00 PM, chris derham wrote: All, Our setup has apache tomcat running behind apache httpd using mod_jk. I would like to upgrade to apache 2.4, but for this I need to find a 64bit mod_jk release for httpd 2.4. The binaries contained at http://tomcat.apache.org/download-connectors.cgi 32 bit httpd connectors, or a 64bit iis one. Why would you need a 64-bit httpd at the first place especially on windows. Anyhow, building should be easy if you have 64-bit windows dev httpd. Open Vstudio command prompt for 64-bit development (You should have a shortcut for that) cd where-ever-you-unzip\tomcat-connectors-1.2.35-src\native\apache-2.0 nmake -f Makefile.vc ARCH=AMD64 APACHE24_HOME=C:\httpd-2.4.2 Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Windows Connector Binaries have wrong Module Magic Number for httpd-2.4
On 03/26/2012 12:32 AM, Tom Donovan wrote: The Windows connector 1.2.35 binaries for httpd-2.4 at: http://www.apache.org/dist/tomcat/tomcat-connectors/jk/binaries/windows/ appear to have been built with the wrong httpd Module Magic Number: 20120109. The startup error message is: Module mod_jk.c is not compatible with this version of Apache (found 20120109, need 20120211) Note that httpd-2.4.0 never shipped, so 2.4.1 is the first 2.4.x release. httpd-2.4.1 has MMN: 20120211:0 Updated httpd-2.4.x binaries to match 2.4.1 MMN. Give couple of hours till the mirrors sync. ... and BTW, there were no official 1.2.35 ANN, so they actually do not exist :) ... but I'm going to write [ANN] in couple of hours. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Windows Connector Binaries have wrong Module Magic Number for httpd-2.4
On 03/26/2012 12:32 AM, Tom Donovan wrote: The Windows connector 1.2.35 binaries for httpd-2.4 at: http://www.apache.org/dist/tomcat/tomcat-connectors/jk/binaries/windows/ appear to have been built with the wrong httpd Module Magic Number: 20120109. The startup error message is: Module mod_jk.c is not compatible with this version of Apache (found 20120109, need 20120211) Note that httpd-2.4.0 never shipped, so 2.4.1 is the first 2.4.x release. httpd-2.4.1 has MMN: 20120211:0 I didn't log a bug since these Windows binaries are just a courtesy, not an official release. Hmm, we'll probably have to replace those binaries. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Setup of workers.properties with multiple host and TC instances
You should learn how to quote messages ;) On 03/21/2012 08:22 PM, Martin Registe, Jr. wrote: Please note that I have two different IP addresses running under the same worker. You will need one worker per host:port thus in your case 4 of them not 2. Okay so I broke them up and created another lb group (not sure if I had to do that) it looks like this worker.list=part, myxx ... You have typo here. Should be worker.list=part,myxx (no spaces around coma) I looked online and through my Apache Tomcat book ... 1. You will need to set jvmRoute to match the lb worker name inside Engine (either 'part' or 'myxx') 2. You can have only one Engine 3. Use two separate physical tomcat instances one listening on port 8019 and other on 8029 and one having jvmRoute=part and other jvmRoute=myxx Simple :) Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Setup of workers.properties with multiple host and TC instances
On 03/21/2012 07:47 PM, Martin Registe, Jr. wrote: Hi All, Please note that I have two different IP addresses running under the same worker. You will need one worker per host:port thus in your case 4 of them not 2. My boss thinks that this is causing sessions to jump between the two ip addresses on the same jvm. You only have contract for two instances. The latest one will overwrite the first setting. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: IIS 7.0 Worker process crashes on App Pool recycling since ISAPI redirector 1.2.33
On 03/20/2012 06:55 AM, Alex Samad - Yieldbroker wrote: You should 1. Create a separate 'Unmanaged' application pool for isapi_redirect 2. Disable recycling for that pool 3. Have multiple vhost mapping inside uriworkermap.properties instead having multiple configuration files and instances for each vhost. 4. Use a single process for that pool. Okay I can see that Our original thinking was if we separate prd and uat, they could not affect each other. Sure that's probably the only reason to have multiple instances and pools. However this still does not require multiple worker processes or recycling. :) true, but I don't believe the above is true on IIS/Windows. The think I am unsure on is how the connector uses the shared memory If its index (?) by the name of the worker thread or loadbalancer name then there will be a problem. I have the same config in UAT and PRD.. and thus the same worker names and load balancer names You will need to have /jakarta inside different 'Site' and each site bound to its own AppPool. Shared memory is constructed from site name, so for example for 'Default Web Site' it becomes something like JK_LOCALHOST_1_... Suppose you have that separated already between production and staging. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: IIS 7.0 Worker process crashes on App Pool recycling since ISAPI redirector 1.2.33
On 03/19/2012 12:00 AM, Alex Samad - Yieldbroker wrote: Hi Sorry it failed for me, started up, but I got some error messages [Mon Mar 19 09:43:13.970 2012] [2096:2984] [error] service::jk_lb_worker.c (1172): Failed allocating AJP message buffer This is caused by unable to allocate the buffer. Now, it seems either memory is exhausted or shared memory still wrong (I recon its later) [Mon Mar 19 09:49:52.489 2012] [5804:5836] [trace] jk_shm_open::jk_shm.c (158): enter [Mon Mar 19 09:49:52.489 2012] [5804:5836] [debug] jk_shm_open::jk_shm.c (305): Initialized shared memory Global\JK_DEV_YIELDBROKER_COM_2_JAKARTA_ISAPI_REDIRECT size=1856 free=1728 addr=0x1f [Mon Mar 19 09:49:52.489 2012] [5804:5836] [trace] jk_shm_open::jk_shm.c (311): exit [Mon Mar 19 09:49:52.504 2012] [5804:5836] [trace] jk_shm_open::jk_shm.c (158): enter [Mon Mar 19 09:49:52.504 2012] [5804:5836] [debug] jk_shm_open::jk_shm.c (166): Shared memory is already opened [Mon Mar 19 09:49:52.504 2012] [5804:5836] [trace] jk_shm_open::jk_shm.c (167): exit That's weird. jk_shm_open gets called twice from the same process/thread. Could you send me some more log data surrounding those two calls so I can figure out from where init_jk was called. Please use the newest build (#6) from http://people.apache.org/~mturk/tomcat-connectors/jk-1.2.34/ Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: IIS 7.0 Worker process crashes on App Pool recycling since ISAPI redirector 1.2.33
On 03/19/2012 12:00 AM, Alex Samad - Yieldbroker wrote: Hi [Mon Mar 19 09:43:53.266 2012] [2516:1892] [error] service::jk_lb_worker.c (1172): Failed allocating AJP message buffer Please use the newest build (#8) from http://people.apache.org/~mturk/tomcat-connectors/jk-1.2.34/ There was a bug in shared memory sync caused by attaching new process while there was request pending In general caused by 'generation in future'. Now the shared memory is synced only if we are below the shared sequence. I have verified locally that it works now and no more those alloc failed errors (as well as none of the earlier one :) Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
[ANN] Apache Tomcat Connectors 1.2.33 stability issue
The Apache Tomcat team wishes to draw your attention to stability issues that have been identified with the recent mod_jk 1.2.33 release. If you have not yet upgraded to mod_jk 1.2.33 we recommend that you wait for the mod_jk 1.2.34 release which is currently in progress. If you have upgraded and are experienced issues we recommend that you downgrade to mod_jk 1.2.32 until mod_jk 1.2.34 is available. We apologise for any inconvenience. -- The Apache Tomcat Team - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: IIS 7.0 Worker process crashes on App Pool recycling since ISAPI redirector 1.2.33
On 03/20/2012 02:01 AM, Alex Samad - Yieldbroker wrote: This has me thinking and think I have found another bug. :) Our setup is IIS 7.5 setup as a Reverse proxy. We run PRD, UAT through here. Trying to treat this an infrastructure box. We have 2 in a NLB setup For each environment I have a separate web server and directory setup so C:\ABC\ Prod\ Ajpconfig\ UAT\ Ajpconfig\ In each environment I have a ajpconfig directory where I put my dll and I keep all my config files for just that environment. The idea was that I could have different version of the tomcat connector thus test stuff out in UAT and then move on to PRD. BUT there is no way to set the name space used in the tomcat connector in relation to the Shared Memory or to semaphore. So Global\\JK_ISAPI_REDIRECT_MUTEX is used by all tomcat connectors (the ones in prod and the ones in UAT) Yes, but thats used only inside jk_init and locks for 1ms during new worker process creation while the isapi_redirect gets loaded to memory. Like explained in BZ52659 you have things conceptually wrong. isapi_redirect is proxy, it does its own connection pool management, recycling, virtual host mapping handling etc. You should 1. Create a separate 'Unmanaged' application pool for isapi_redirect 2. Disable recycling for that pool 3. Have multiple vhost mapping inside uriworkermap.properties instead having multiple configuration files and instances for each vhost. 4. Use a single process for that pool. You can eventually have two separate pools (one for testing and other for production) And I would presume the Shared Memory would also be shared between the 2 ? Quote from the doco ! The ISAPI redirector can read it's configuration from a properties file instead of the registry. This has the advantage that you can use multiple ISAPI redirectors with independent configurations on the same server. The redirector will check for the properties file during initialisation, and use it in preference to the registry if present. If something is possible it doesn't mean you should use it in production and in all cases. You can't do this with the IIS connector and with multiple processes (web gardens)! Again, you should think 'differently' Entire IIS worker process recycling is meant for handling crappy .NET applications with memory and resource leaks. isapi_redirect is proxy, nothing else, nothing more. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: IIS 7.0 Worker process crashes on App Pool recycling since ISAPI redirector 1.2.33
On 03/16/2012 04:27 PM, Konstantin Preißer wrote: Hi all, I have a system with Windows Server 2008 32 bit, IIS 7.0, Java 1.7.0_03, Tomcat 7.0.26 and the ISAPI redirector. Guys, Please try the binaries from: http://people.apache.org/~mturk/tomcat-connectors/jk-1.2.34/ They contain two fixes: 1. Make sure we fallback to heap memory in case shared cannot be created 2. Fix shared memory create/open arguments The point is that is that we should have correct [error] log entries in case shared memory open fails. If it fails you should have [warn] line, load balancer will not function properly across multiple processes (will inside each of the process) but it shouldn't crash. I'd appreciate if you can check that ASAP cause we have regression in httpd implementation so new version will be out in couple of days. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: IIS 7.0 Worker process crashes on App Pool recycling since ISAPI redirector 1.2.33
On 03/18/2012 12:16 PM, Konstantin Preißer wrote: Hello Mladen, Thank you very much. I tried the new version, and now when the Application Pool is recycled, the logs show these: [Sun Mar 18 12:10:36.324 2012] [4144:6216] [error] jk_shm_open::jk_shm.c (220): Failed to map shared memory JK_TTWEBINFO_DYNDNS_ORG_8_JAKARTA2_ISAPI_REDIRECT with errno=87 [Sun Mar 18 12:10:36.337 2012] [4144:6216] [error] init_jk::jk_isapi_plugin.c (2801): Initializing shm:(null) errno=87. Load balancer will not work properly! But w3wp.exe doesn't crash anymore, so I think it is fixed. (I'm wondering now why mapping the shared memory fails..) Thanks for looking at this promptly! Could you try with the new builds http://people.apache.org/~mturk/tomcat-connectors/jk-1.2.34/ (isapi_redirect_1.2.34_2-dev_winXX.zip) I added Global\\ prefix to shared memory name so that it can be shared from multiple processes. Also check if the errno changed from 87 (ERROR_INVALID_PARAMETER) Thanks -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: IIS 7.0 Worker process crashes on App Pool recycling since ISAPI redirector 1.2.33
On 03/18/2012 02:34 PM, Mladen Turk wrote: On 03/18/2012 12:16 PM, Konstantin Preißer wrote: Hello Mladen, Thank you very much. I tried the new version, and now when the Application Pool is recycled, the logs show these: [Sun Mar 18 12:10:36.324 2012] [4144:6216] [error] jk_shm_open::jk_shm.c (220): Failed to map shared memory JK_TTWEBINFO_DYNDNS_ORG_8_JAKARTA2_ISAPI_REDIRECT with errno=87 [Sun Mar 18 12:10:36.337 2012] [4144:6216] [error] init_jk::jk_isapi_plugin.c (2801): Initializing shm:(null) errno=87. Load balancer will not work properly! But w3wp.exe doesn't crash anymore, so I think it is fixed. (I'm wondering now why mapping the shared memory fails..) Thanks for looking at this promptly! Could you try with the new builds http://people.apache.org/~mturk/tomcat-connectors/jk-1.2.34/ (isapi_redirect_1.2.34_2-dev_winXX.zip) Forget about that one. I'll create a new one in 20 minutes Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: IIS 7.0 Worker process crashes on App Pool recycling since ISAPI redirector 1.2.33
On 03/18/2012 02:40 PM, Mladen Turk wrote: On 03/18/2012 02:34 PM, Mladen Turk wrote: On 03/18/2012 12:16 PM, Konstantin Preißer wrote: Hello Mladen, Thank you very much. I tried the new version, and now when the Application Pool is recycled, the logs show these: [Sun Mar 18 12:10:36.324 2012] [4144:6216] [error] jk_shm_open::jk_shm.c (220): Failed to map shared memory JK_TTWEBINFO_DYNDNS_ORG_8_JAKARTA2_ISAPI_REDIRECT with errno=87 [Sun Mar 18 12:10:36.337 2012] [4144:6216] [error] init_jk::jk_isapi_plugin.c (2801): Initializing shm:(null) errno=87. Load balancer will not work properly! But w3wp.exe doesn't crash anymore, so I think it is fixed. (I'm wondering now why mapping the shared memory fails..) Thanks for looking at this promptly! Could you try with the new builds http://people.apache.org/~mturk/tomcat-connectors/jk-1.2.34/ (isapi_redirect_1.2.34_2-dev_winXX.zip) Please use isapi_redirect_1.2.34_3-dev_winXX.zip instead. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: IIS 7.0 Worker process crashes on App Pool recycling since ISAPI redirector 1.2.33
On 03/18/2012 03:11 PM, Konstantin Preißer wrote: Hi Mladen, -Original Message- From: Mladen Turk [mailto:mt...@apache.org] Sent: Sunday, March 18, 2012 2:54 PM To: Tomcat Users List Subject: Re: IIS 7.0 Worker process crashes on App Pool recycling since ISAPI redirector 1.2.33 Please use isapi_redirect_1.2.34_3-dev_winXX.zip instead. Thank you. I tried with isapi_redirect_1.2.34_3-dev_win32.zip, but unfortunately it seems that it causes w3wp.exe to crash again :( Could you please try the isapi_redirect_1.2.34_5-dev_win32.zip If this one crashes we'll have to add some override to shared memory so we can fallback to heap one and bypass memory corruption which seems to occur at IIS worker recycle. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: IIS 7.0 Worker process crashes on App Pool recycling since ISAPI redirector 1.2.33
On 03/18/2012 08:30 PM, Alex Samad - Yieldbroker wrote: Hi Guys (Konstantin, Mladen), goo d work, sorry caught me on a Sunday, else I would have chipped in. Just wondering (thinking a bit left field), but question was asked of me. Any reason to have a shm across processes. So that worker state is replicated across processes. Eg, if connection to one backend is broken each process will have to discover that by itself. Shared memory allows that if one worker process discovers that a backend is down other won't have to go trough the lengthy process of discovering that. Also loadbalancer load factors are calculated across all processes not just for the current one. So, the benefits are real. However unlike with httpd, IIS does not offer parent/child concept so we don't have the shared memory 'controller'. The ultimate solution would be to start a separate controller process, but that's probably something for the future. Even if the current set of patches work, I'm more convinced we should have a directive to disable shared memory usage, and think I'm going to add that option for 1.2.34 anyhow. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: IIS 7.0 Worker process crashes on App Pool recycling since ISAPI redirector 1.2.33
On 03/18/2012 09:34 PM, verlag.preis...@t-online.de wrote: -Original-Nachricht- Von: Mladen Turkmt...@apache.org An: users@tomcat.apache.org Betreff: Re: IIS 7.0 Worker process crashes on App Pool recycling since ISAPI redirector 1.2.33 Datum: Sun, 18 Mar 2012 18:39:15 +0100 Could you please try the isapi_redirect_1.2.34_5-dev_win32.zip If this one crashes we'll have to add some override to shared memory so we can fallback to heap one and bypass memory corruption which seems to occur at IIS worker recycle. Hi Mladen, thank you, I tried isapi_redirect_1.2.34_5-dev_win32.zip and so far no crashes, and also no warnings/errors in the ISAPI log. It seems the issue is fixed now. Cool. Thanks again for testing those. We'll release 1.2.34 by the end of this week probably. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Tomcat 5.5 IIS 7.5 2008 64bit
On 03/16/2012 06:15 PM, Bradford Matthews wrote: It is getting 404.0 error. I verified all steps. even added IIS_IUSR to the ISAPI folder. well are you or are you not using http:// or https://? Requested URL https://localhost:443/docs/ Any suggestions? Seems you are requesting this over ssl so you will probably need to add scheme=https to the AJP/1.3connector Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
[ANN] Apache Tomcat Connectors 1.2.33 released
The Apache Tomcat Project is proud to announce the release of version 1.2.33 of Apache Tomcat Connectors. This release includes both bug fixes and new features compared to version 1.2.32. Full details of these changes and new features, are available in the Apache Tomcat Connectors changelog: http://tomcat.apache.org/connectors-doc/miscellaneous/changelog.html Downloads: http://tomcat.apache.org/download-connectors.cgi Thank you, -- The Apache Tomcat Team - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Issues with the tomcat connector (On W2k8 + IIS7.5)
On 03/13/2012 12:09 AM, Alex Samad - Yieldbroker wrote: [snip] Try the RC binaries from http://people.apache.org/~mturk/tomcat-connectors/jk-1.2.33/ Does this one crashes as well? Okay, got your build from there. 1) it loads up with single application thread (so not a web garden) but then failed OK, cool. 2) I tried it as a web garden, so 4 processes failed bad !!! Suppose the previous versions do the same. This is what I see in the event log ERROR- Faulting application name: w3wp.exe, version: 7.5.7601.17514, time stamp: 0x4ce7afa2 Faulting module name: isapi_redirect.dll, version: 1.2.33.0, time stamp: 0x4f59bc9e Exception code: 0xc005 Fault offset: 0x00039e82 This looks like referencing null memory. Is there anything in the jk.log before that if you turn log level to trace? Faulting process id: 0x154c Faulting application start time: 0x01cd00a34e76bf11 Faulting application path: c:\windows\system32\inetsrv\w3wp.exe Faulting module path: C:\YB\Shared\dev.yieldbroker.com\ajpconfig\isapi_redirect.dll Report Id: 8ded0aa6-6c96-11e1-a357-005056b7000a Bit more curious as to why my build didn't work I have VS 2010 install, I built first with 32bit to get the programme built Then I opened a Win64 command window and build the dll there. Mine is about 100K small, so I am guessing I am missing something ... I build that using WinDDK so it links to msvcrt.dll instead msvcrtXXX.dll. Anyhow suppose you missed something with win32/win64 environment settings. Try to build directly from 1.2.33-src.zip I fixed the need to run win32 build before win64 so you can build 64-bit directly. Tested that with vs2010 and it builds flawlessly. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Issues with the tomcat connector (On W2k8 + IIS7.5)
On 03/12/2012 12:37 AM, Alex Samad - Yieldbroker wrote: Hi Thanks any idea's why the latest head version doesn't work. I got it to compile, but it crashes when IIS tries to load it From Failed Request tracking on IIS ErrorDescription Calling LoadLibraryEx on ISAPI filter C:\YB\Shared\dev.yieldbroker.com\ajpconfig\isapi_redirect.dll failed Try the RC binaries from http://people.apache.org/~mturk/tomcat-connectors/jk-1.2.33/ Does this one crashes as well? Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Tomcat 5.5 IIS 7.5 2008 64bit
On 03/12/2012 05:37 PM, Bradford Matthews wrote: Here is my steps that I used to install tomcat isapi connector. 5. EditTomcat-install-folder\conf\server.xml to allow localhost on port 8009 by adding address=127.0.0.1: !-- Define an AJP 1.3 Connector on port 8009 -- Connector port=8009 address=127.0.0.1 enableLookups=false redirectPort=8443 protocol=AJP/1.3 To test the connector: From a supported browser, enter the following URL: https://localhost/tomcat-docs The Apache Tomcat Documentation page is displayed. Requested URL https://localhost:443/docs/ Any suggestions? Seems you are requesting this over ssl so you will probably need to add scheme=https to the AJP/1.3 connector Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Issues with the tomcat connector (On W2k8 + IIS7.5)
On 03/06/2012 11:50 PM, Alex Samad - Yieldbroker wrote: Hi I patched Mmakefile.amd64 it was different to the x86 one then ran nmake -f Makefile.amd64 again, built no errors or warnings Thanks Alex Patch... Index: Makefile.amd64 === --- Makefile.amd64 (revision 1297756) +++ Makefile.amd64 (working copy) @@ -293,10 +293,10 @@ pcre_amd64 : cd .\pcre - $(MAKE) /$(MAKEFLAGS) /F .\pcre.amd64 + $(MAKE) /$(MAKEFLAGS) /F .\pcre.amd64 CFG=pcre.amd64 cd .. CFG in not used in 64-bit makefile, so no point to add it. What's needed is that you run 32-bit build before 64-bit so that dftables.exe gets created (it's created only for 32-bit target), and that would eventually need to get fixed. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Issues with the tomcat connector (On W2k8 + IIS7.5)
On 03/06/2012 06:35 AM, Alex Samad - Yieldbroker wrote: Hi ... a very long post :) In general I agree that newest IIS's needs some tune up. You are very welcome to provide patches. Does somebody have a tar ball of a tree what I can just point to and compile :) (or maybe some instruction on how to get it to build from the svn tree in VS2010) That's easy. Open VSxxx command prompt for target CPU and cd to native/iis then just nmake -f Makefile.x86 or nmake -f Makefile.amd64 for 64-bit I don't believe in GUI :) Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Issues with the tomcat connector (On W2k8 + IIS7.5)
On 03/06/2012 06:35 AM, Alex Samad - Yieldbroker wrote: Hi Under load, IIS will first start 1 process and then if enough request another and another depending on load. So what I see is 4 process starting at about the same time and the shared memory is getting corrupted and from there it turns to poo. Try with the latest trunk. I added process mutex instead critical section for guarding init_jk. This should solve concurrent launches of multiple processes for the same host by serializing access to initialization. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
[ANN] Apache Tomcat Native 1.1.23 released
The Apache Tomcat team announces the immediate availability of Apache Tomcat Native 1.1.23 stable. Please refer to the change log for the list of changes: http://tomcat.apache.org/native-doc/miscellaneous/changelog.html Downloads: http://tomcat.apache.org/download-native.cgi Please allow up to 24 hours for your local mirror to sync with the Apache distribution site. Note that with this release we changed the Windows binaries packaging. Instead standalone .dll files we now have a single tomcat-native-1.1.23-win32-bin.zip file containing libraries for both 32 and 64 bit JVM's. It can be found inside download binaries directory. Thank you, -- The Apache Tomcat Team - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: tomcat-native 1.1.22 doesn't find JDK on OS X 10.6.8 Snow Leopard
On 02/27/2012 04:51 AM, Charlie O'Keefe wrote: Christopher, Thanks, wasn't aware of /usr/libexec/java_home $ /usr/libexec/java_home /System/Library/Java/JavaVirtualMachines/1.6.0.jdk/Contents/Home $ ls -Al `/usr/libexec/java_home` total 16 drwxr-xr-x 41 root wheel 1394 Nov 21 08:43 bin lrwxr-xr-x 1 root wheel 3 Nov 21 08:42 bundle - ../ lrwxr-xr-x 1 root wheel51 Nov 21 08:42 include - /System/Library/Frameworks/JavaVM.framework/Headers drwxr-xr-x 42 root wheel 1428 Nov 21 08:43 lib drwxr-xr-x 41 root wheel 1394 Nov 1 12:03 man GLOBE-Mandalay:~ cokeefe$ That path specifically says jdk (not jre). Does this mean I have a JDK rather than just a JRE? Also, would it be a good idea for the configure script to attempt to run /usr/libexec/java_home in this section where it is looking for a JDK? Nope. At the end you can always set JAVA_HOME before running configure. But like Chris said, think you have something missing on your box since on my 10.6.8 Headers contains what it should. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Cannot build mod_jk.1.2.32
On 08/29/2011 10:55 AM, Casper Wandahl Schmidt wrote: So I fanilly had time to check up on this topic :) Lets start with the apache2ctl -V command: Server version: Apache/2.2.8 (Ubuntu) I suppose the Server MPM: Prefork (you have Worker) might be the reason why I couldn't get the mod_jk working earlier because apache is not set up for using a worker as I was trying to? Nope. Next the other apache info: ii apache2 2.2.8-1ubuntu0.19 ii apache2-mpm-prefork 2.2.8-1ubuntu0.19 ii apache2-src 2.2.8-1ubuntu0.19 ii apache2-threaded-dev 2.2.8-1ubuntu0.19 ii apache2-utils 2.2.8-1ubuntu0.19 ii apache2.2-common 2.2.8-1ubuntu0.19 ii libapache2-mod-php5 5.2.4-2ubuntu5.17 Finally the beginning of the error-log I made when running make: You don't need source packages. All you need are -dev packages. Then configure --with-apxs=/path/to/the/apxs(2) In file included from mod_jk.c:29: /usr/src/apache2/include/ap_config.h:25:17: error: apr.h: No such file or directory In file included from /usr/src/apache2/include/ap_config.h:26, This happens since you forced the 'src' directory. Sources like name suggests contain sources, apr.h and apu.h are generated when you build the apr/apr-util (can be part of httpd build process) but you don't need to build the httpd. Your dist already have it. $ svn checkout https://svn.apache.org/repos/asf/tomcat/jk/tags/JK_1_2_32 $ cd JK_1_2_32/native $ ./buildconf.sh (you don't need to do this if you didn't use svn) $ which apxs2 /usr/bin/apxs2 $ ./configure --with-apxs=/usr/bin/apxs2 Note: Some distros don't have 2 sufix. It's just /xxx/yyy/apxs However seems Ubuntu has /usr/bin/apxs2 Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Cannot build mod_jk.1.2.32
On 08/29/2011 11:46 AM, Casper Wandahl Schmidt wrote: Anyway I was able to run make successfully and now I have the mod_jk.so :) Cool. Thank you all for your time and help. I might be back with questions on how to make the connector work at a later time :) Cannot wait for that one ;) Cheers -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: CVE-2011-2729
On 08/16/2011 05:59 PM, Mark Thomas wrote: On 16/08/2011 16:56, Randal Bankman wrote: Greetings, A recent update to Tomcat (7.0.20) notes the vulnerability affects Linux. I wanted to ask if that is Linux and only Linux or does it include other Unix-like system(or even Unix proper)? It applies to any OS that uses jsvc, which is pretty much anything unix-like. Nope. Its only Linux and only if compiled on a Linux box having libcap installed. Other unixes are unaffected. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Log ownership when running Tomcat using jsvc
On 08/05/2011 04:46 AM, Jorge Medina wrote: Right, I can't understand why the JULI files are owned by root. any ideas? Hmm, seems like JULI creates log files before we call the org.apache.catalina.startup.Bootstrap On Solaris user is switched just before we call Bootstrap so any files created before that will still be owned by root. If JULI uses some static init it might be the reason. If you have access to Linux box, try there and this shouldn't happen cause we switch user on Linux before loading JVM and drop capabilities at the time we drop user on Solaris (non Linux) Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Log ownership when running Tomcat using jsvc
On 08/03/2011 10:11 PM, Jorge Medina wrote: I run Tomcat in a Solaris 10 SPARC machine using jsvc through a init script. jsvc is started by root, but I specify the -user option to change to the application user. I use the option -outfile and -errfile to specify where to direct stdout and stderr, catalina.out and catalina.err in my environment. jsvc redirects stdout/stderr before setuid (changing to -user) thus the files are created by superuser. Actually that's the desired behavior; You have files writtable by -user during the application life-time but created and readable by root. If you need lower security, don't use the commons daemon. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Different behavior between Tomcat service installation Tomcat console mode
On 08/03/2011 07:03 AM, Alexandre Terrasson wrote: Hi, thanks guys, 2/ The Jar of my driver is located in the Tomcat lib folders. The driver is not only a jar, I had to installed it as an odbc source, with some dll and some entries in windows registry. So you must ensure that LOCAL_SERVICE account has access both to the registry and to the files in the folder where odbc .dlls are installed Might even require modifying System Environment PATH You can try running the service with Administrator account or the one you are using wen running in console mode (given that it has permission to 'Run As a Service') and then search for the permission problems or missing variables for the local service account. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Stuck at making jsvc while installing tomcat
On 08/03/2011 06:03 AM, Shen LI wrote: *I am new to use tomcat. I got a problem of installing jsvc.* * /usr/include/gconv.h:72: error: expected declaration specifiers or ‘...’ before ‘size_t’ ... probably followed by something like: /usr/include/stdio.h:34:21: error: stddef.h: No such file or directory Similar errors continues to the end. I thought it might be some problem with my gcc compiler. Fix your compiler, and yes, please don't ask how, cause you won't get the answer here. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Mod_jk fails to connect via ajp13
On 07/31/2011 03:53 PM, Franz wrote: For all I can tell, apache is unaware of any mapping. It looks for the apps under the default doc root. The JkShmFile message I think is no problem, a shared memory file gets created under the apache log directory. You should read the docs before trolling. As explained in the JkMount section [1] quote By default JkMount entries are not inherited from the global server to other VirtualHosts or between VirtualHosts. For the complete inheritance rules, see: JkMountCopy. /quote I have no problems understanding that, but I'm not the native English speaker. However since it was written by the German guy, I suppose neither you should have ;) Next for mod_jk 'JkMount /foo' != 'JkMount /foo/' If you wish to map both /foo and foo/* you will need two directives or one compound (JkMount /foo|/*) Details are explained in [2] under Uri patterns section. [1] http://tomcat.apache.org/connectors-doc/reference/apache.html [2] http://tomcat.apache.org/connectors-doc/reference/uriworkermap.html Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Tomcat 7, isapi_redirect, IIS 7 - blank page
On 07/22/2011 12:42 PM, Douglas McGregor wrote: Sorry for the late reply. I took a break from this for a day or so. I can confirm that Tomcat handles .jsp pages correctly - http://www.douglasmcgregor.co.uk:8080/examples works fine. However, when I try http://www.douglasmcgregor.co.uk:8080/HelloWorld.jsp I get HTTP Status 404 from Tomcat. This is because the page I am trying to execute is not in Tomcat itself but in E:\douglasmcgregor.co.uk, which is served from IIS. 1. Nothing is served form the IIS! IIS just redirects the requests to Tomcat 2. If it cannot be served by Tomcat it cannot be served by IIS. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Tomcat 7, isapi_redirect, IIS 7 - blank page
On 07/22/2011 08:18 PM, Douglas McGregor wrote: Just wanted to share the good news. I've finally got it working!! It's such a relief! I bet it is, after so many months ;) Cheers -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Tomcat 7, isapi_redirect, IIS 7 - blank page
On 07/20/2011 02:30 PM, Douglas McGregor wrote: Hi there, I'm getting really desperate with this - I've been at it for about a couple of months now and still no further forward. You could have finish the MCSE exams by that time. Sorry, couldn't resist :) The strange thing is that this works absolutely fine in IIS 7.5 with Tomcat 7 on my laptop which runs Windows 7, but is persistantly throwing a blank page on IIS 7 with Windows Server 2008 - it gives a blank page when I add the Handler Mapping in IIS, but just shows source code when I delete the Handler Mapping. Don't think that's that strange. I presume you are talking about 2K8R2 ( ~= Win7) Pure 2008 should be something like Windows Vista, which you should have put into the Recycle bin a long time ago. Nevertheless, the 99.9% percent of the problems are related to that weird windows permission settings and ACL's. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: mod_jk under RedHat ?
On 07/15/2011 07:58 PM, Mark Eggers wrote: The pages could then reference distribution channels (Debian/Ubuntu/OpenSuse), commercial channels (RedHat), requirements for compiling from source (RedHat, CentOS, Fedora). Beside that list, there is a difference between httpd versions although we try to make mod_jk buildable from 2.0 trough 2.3. This is just one point why we won't ship mod_jk binaries for posix platforms any more. First we don't have an infrastructure with all that platforms/version/cpu flavors. If you see earlier release you will find two things. 1. Inconsistency 2. Incompleteness So it might be you've just been lucky and one of the core developers build the version that (might) work on your infrastructure. At the end, building is simple as: ./configure --with-apxs=/path/to/the/apxs(2) make sudo make install Can it be simpler? Just some random thoughts . . . . I'd rather see the real FAQ instead thoughts ;) Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
[ANN] Apache Tomcat Connectors 1.2.32 released
The Apache Tomcat Project is proud to announce the release of version 1.2.32 of Apache Tomcat Connectors. This release includes both bug fixes and new features compared to version 1.2.31. Full details of these changes and new features, are available in the Apache Tomcat Connectors changelog: http://tomcat.apache.org/connectors-doc/miscellaneous/changelog.html Downloads: http://tomcat.apache.org/download-connectors.cgi Note that it might take up to 48 hours until this release get available from the mirrors. Thank you, -- The Apache Tomcat Team - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Feature request: fullstart command
On 06/17/2011 12:14 AM, Christopher Schultz wrote: On 6/16/2011 5:03 PM, Francis GALIEGUE wrote: I was actually wondering about these. I think I have my answer now :/ Solutions in C or other languages are many to achieve that, Java has none. Correct: native code has to be written. tc-native notwithstanding, the Tomcat team doesn't like to work with native code too much, and I can understand why: it's a total minefield. Different OS versions, different architectures, different c-library discrepancies, etc. There ARE tomcat developers that are quite fun of C code and regularly participate in various native projects, so this has nothing to do with that. Even if someone wrote something like this in native code, the result would be essentially a fork() call which would clone your JVM, which isn't going to be a fast process at that late stage of the game (in JVM time, that is). Exactly, and the fork() doesn't work with JVM. fork() only forks the single thread, so all your monitor, GC, memory threads are not there. For JVM, fork() is only valid if followed by execv which is basically what Runtime.exec does. Also there is a question of portability. Windows doesn't have fork(). However I don't see a reason why a separate Listener can't be made that would monitor the app deployment, and act accordingly to some rule(s). Tomcat currently tries its best to start, meaning that it will start regardless of anything. Even if its config is totally bogus it will throw pile of exceptions but start no mater what. Does that make sense? For embedded usage yes, for standalone I doubt. Eg. If port 80 is in use, httpd will log and refuse to start. Tomcat will throw exceptions and just continue, meaning you have to inspect your log files every time you start the Tomcat. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: One process per webapp
On 06/15/2011 02:27 PM, Tim Funk wrote: ** Observations ... Hack, yes ... also very simple to do. This might allow webapps to be reloaded without a problem [depending on the nature of the change.] 2) apache httpd can easily handle the proxy scenario. There are hacks and use that other web server approaches, but at the end I'm seeing more and more people are requesting those features. Simply, there is a (set of) very good reason(s) why Apache Httpd runs inside multiple child processes. Since from ground up it offered a descent app isolation this was (IMHO) it's major reason for a success. Now that Android finally broke that JNI paranoia, people are start looking at something outside that given JVM box. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Travel Assistance applications now open for ApacheCon NA 2011
The Apache Software Foundation (ASF)'s Travel Assistance Committee (TAC) is now accepting applications for ApacheCon North America 2011, 7-11 November in Vancouver BC, Canada. The TAC is seeking individuals from the Apache community at-large --users, developers, educators, students, Committers, and Members-- who would like to attend ApacheCon, but need some financial support in order to be able to get there. There are limited places available, and all applicants will be scored on their individual merit. Financial assistance is available to cover flights/trains, accommodation and entrance fees either in part or in full, depending on circumstances. However, the support available for those attending only the BarCamp (7-8 November) is less than that for those attending the entire event (Conference + BarCamp 7-11 November). The Travel Assistance Committee aims to support all official ASF events, including cross-project activities; as such, it may be prudent for those in Asia and Europe to wait for an event geographically closer to them. More information can be found at http://www.apache.org/travel/index.html including a link to the online application and detailed instructions for submitting. Applications will close on 8 July 2011 at 22:00 BST (UTC/GMT +1). We wish good luck to all those who will apply, and thank you in advance for tweeting, blogging, and otherwise spreading the word. Regards, The Apache Tomcat Project Management Committee on behalf of The Travel Assistance Committee - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Two Tomcat 7.0 in the same Windows server 2008 instance, both appearing as port 80 for the clients?
On 05/11/2011 08:35 PM, Brian Braun wrote: IPTables NAT Check the http://www.quantumg.net/portforward.php It's a single .cpp file if you don't need gui. There is also more advanced (ipfilter like util) http://www.hsc.fr/ressources/outils/pktfilter/ Think that you can even use PuTTY for that. Cheers -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Problem with Apache Portable Runtime (APR) based Native library for Tomcat
On 04/14/2011 12:10 PM, André Warnier wrote: Jaroslav Fikker wrote: I apologize for my stupid question but I am not Linux specialist. Is there some recommendation for using 32bit java (and APR) on 64bit RedHat? It is not a stupid question. Proof : I have the same question. :-) If you allow me to hijack your post, my question is : If my server has a 64-bit capable CPU, a 64-bit Linux O.S., and 8 GB of RAM, and I have a tomcat which runs only one or two small webapps, and is unlikely to ever need more than e.g. 1 GB of RAM, is there any advantage (or inconvenient) in running this Tomcat in a 64-bit (or 32-bit) JVM ? I totally agree with you. If you don't need huge memory use 32-bit JVM It is as well more then 30% memory efficient for the same application. I have a simple MemoryTest.java that can prove that easily. However not all 64-bit linux boxes have 32-bit JVM support, so not a general solution. Also neither -d32/-d64 works (Although I'm working on a OpenJDK patches for that, but the OpenJDK community, is well ... fill in the gaps :) Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Problem with Apache Portable Runtime (APR) based Native library for Tomcat
On 04/13/2011 07:14 AM, Jaroslav Fikker wrote: Hi, I also create /opt/tomcat_6_0/bin/setenv.sh file with this content: LD_LIBRARY_PATH=$LD_LIBRARY_PATH:$CATALINA_HOME/lib export LD_LIBRARY_PATH But when I start server with startup.sh script I can find next warning incatalina.out file (but Tomcat application server runs and works): Apr 11, 2011 8:44:15 AM org.apache.catalina.core.AprLifecycleListener init INFO: The APR based Apache Tomcat Native library which allows optimalperformance in production environments was not found on the java.library.path:/usr/lib/jvm/java-1.6.0-ibm-1.6.0.9.1/jre/lib/i38 6::/opt/tomcat_6_0/lib:/usr/lib Where could be a problem? Thank you very much for your help. What is the output of ls /opt/tomcat_6_0/lib ? $ LD_LIBRARY_PATH=$CATALINA_HOME/lib:$LD_LIBRARY_PATH $ export LD_LIBRARY_PATH $ ldd /opt/tomcat_6_0/lib/libtcnative-1.so Make sure there are no unresolved references. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Problem with Apache Portable Runtime (APR) based Native library for Tomcat
On 04/13/2011 02:29 PM, Jaroslav Fikker wrote: So that is the probelm in compilation of APR? LOL. Nope. It's in your java cause you have 64-bit OS, right? Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: How to hide tomcat console when installed as service
On 04/12/2011 11:43 AM, Amit k wrote: Hi, Tomcat documentation says that if tomcat is installed as service, it doesn't show up the console. But in my case this doesn't hold true. Again if the console is required for std out/err, then redirecting them to file etc wont help to display the console? Really is there not any way out? Nope. As soon you say: Allow service to interact with desktop the window will be shown. Hey you said you won't that. Services are console applications, and usually need a Console. Our reason is because JVM uses stderr/stdout which only work when the process has active console. Earlier versions of Commons Daemon didn't allocate that so lot of startup/shudown info was lost (no Console :) But I already said all of that. You have few choices: 1) Create a proper GUI-Service interaction by using IPC 2) Use javaw.exe to run your Tomcat in user session and forget about services. 3) Modify Daemon code and comment out the AllocConsole API call, loosing Tomcat console messages. 4) Convince Microsoft to ditch the UAC IMHO anything but 1) is a complete waste of time. Since Microsoft says you should use IPC to interact with services from desktop well: When in Rome, do as Romans do. Or just use Linux and forget everything about GUI, desktops, services, Session0, etc ... Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: How to hide tomcat console when installed as service
On 04/11/2011 07:01 AM, Amit k wrote: Hi, I actually tried that option. I know it works but under one situation it fails. When your application require tomcat to interact with desktop it fails and in my case, application in tomcat interacts with Desktop through JNI call. So I cant use this option. And moreover it is required to be done with script and not manually. Hope someone has solution for this problem or specifically for scenario. Usually services and desktop interaction are mutually exclusive. What happens when you boot the box and no user is present. It might work with XP, but making it work with Vista+ is almost impossible cause services run in a different session. Console window will be shown (not with older versions of Commons Daemon, so that's why an older 5.5 didn't pop-up) because it is needed for stdout/stderr redirection since we explicitly call 'AllocConsole' which isn't displayed with services cause services don't have GUI. Interact with desktop usage is strongly discouraged since you need some pretty complex stuff to make it work. See: http://msdn.microsoft.com/en-us/library/ms683502%28v=vs.85%29.aspx We have a sort of service interaction (for making thread dumps) but this is done via an mutex registered to a Global session. (Basically a sort of IPC) So I'd suggest you modify your application to use some sort of IPC to communicate between the service and desktop processes like suggested by MSDN. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: tomcat iis connector feedback is needed
On 04/06/2011 03:56 PM, Bilal S wrote: Folks: Feedback is needed on a project I worked on to connect IIS to Tomcat. Connectors can be downloaded from: http://tomcatiis.riaforge.org/ This not open source AFAICT, but that's fine. Nevertheless you should follow the ASF Trademark guidelines: http://www.apache.org/foundation/marks/ when ever using one of our trademark names. In essence our project is not Tomcat, but rather 'Apache Tomcat', so you should credit it as such. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: --Jvm option trouble with Windows service
On 03/16/2011 06:17 AM, Olivier Lefevre wrote: I get this: [2011-03-16 06:12:39] [debug] ( javajni.c:195 ) Invalid RuntimeLib 'C:\Java\j2sdk1.6.0\bin\server\jvm.dll' [2011-03-16 06:12:39] [debug] ( javajni.c:197 ) Using Jre JavaHome 'C:\Programme\Java\jre6' [2011-03-16 06:12:39] [debug] ( javajni.c:251 ) Setting DLL search path to 'C:\Programme\Java\jre6\bin' [2011-03-16 06:12:39] [debug] ( javajni.c:206 ) loading jvm 'C:\Programme\Java\jre6\bin\server\jvm.dll' [2011-03-16 06:12:39] [error] ( prunsrv.c:1037) Failed creating java C:\Java\j2sdk1.6.0\bin\server\jvm.dll So it just plain doesn't work with the server VM. It works with the client VM, though. What's the debug output with client VM? Can you also post your regedit navigate to HKLM-SOFTWARE-JavaSoft right click on the 'Java Development Kit' and select export do the same for 'Java Runtime Environment' Never tried on a German localized windows, so might be registry keys are different or localized which we don't handle. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: --Jvm option trouble with Windows service
On 03/16/2011 11:29 AM, Olivier Lefevre wrote: On 3/16/2011 7:14 AM, Mladen Turk wrote: What's the debug output with client VM? [2011-03-16 11:21:52] [info] ( :0 ) Starting service... [2011-03-16 11:21:52] [debug] ( javajni.c:206 ) loading jvm 'C:\Programme\Java\jre6\bin\client\jvm.dll' OK, that seems fine. However I wonder from where the first one comes? [2011-03-16 06:12:39] [info] ( :0 ) Starting service... [2011-03-16 06:12:39] [debug] ( javajni.c:195 ) Invalid RuntimeLib 'C:\Java\j2sdk1.6.0\bin\server\jvm.dll' It seems that you have entered the wrong .dll I have attached them. That looks fine again. You could edit registry and for JRE HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.6 and HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_24 replace RunTimeLib to use C:\Programme\Java\jre6\bin\server\jvm.dll Then first check if java.exe works. Then try to start the service. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Connector lifecycle
On 03/09/2011 03:26 PM, Jess Holle wrote: P.S. I certainly want to finish processing requests that are already being processed -- I want a graceful shutdown. It's a two way process. First in mod_jk mark the node as stopped (best by using status worker). Then after all sessions times out in Tomcat you can do what ever pleases you. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: console with when running as service
On 03/09/2011 03:59 PM, Zbynek Vavros wrote: Im sorry to keep asking the same question becase we have services that have console windows! For example Domino server does that by default : What happens on 2008R2 and UAC enabled? Services run in Session 0, With Vista and up there is a clear separation between services and GUI. You can not even share file handles or named objects between them unless you do some tricks. No service(daemon) should ever interact with desktop. Period. Not on windows, not on unix. Domino is just an archaic peace of ... :) Like someone said, you can use some auto tail to display the real-time logs. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Running Tomcat as service - is it possible to make tomcat7.exe run a batch file each time it starts?
On 03/06/2011 06:32 PM, Evgeny Goldin wrote: Evgeny Goldin wrote: I have Tomcat 7.0.8 successfully starting as a service on Windows machine. Back when it was running through startup.bat we put some code in catalina.bat which is now ignored by tomcat7.exe. Are there any options to make Tomcat run our batch file somehow before it is started by the service? I can try --Install http://tomcat.apache.org/tomcat-7.0-doc/windows-service-howto.html service option and make service run myBatch.bat which in turn will invoke tomcat7.exe. That won't work. Target executable should be %COMSPEC% with .bat file as a parameter (%COMSPEC% /C call nyBatch.bat) However running that requires a special mechanism for shutting down the service. I did that for JBossAS service wrapper, which basically is just that (wrapping the run.bat) and my plan is to bring that code to commons-daemon. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: IIS7/isapi/tomcat performance
On 02/28/2011 07:15 PM, Caldarale, Charles R wrote: From: Bruce Pease [mailto:bpe...@wth.com] Subject: IIS7/isapi/tomcat performance In performance tests I have found the configuration runs dramatically slower than it's corresponding server in 32 bit Windows on 2000 Server and Tomcat 6. Until you quantify dramatically, better describe your testing scenario (including configurations of all components), eliminate as many moving pieces as you can (e.g., try Tomcat standalone), and do some basic bottleneck analysis, there's not much anyone can help you with. He still didn't follow your suggestion and that is to determine which part slows down the pipeline. Is it IIS/isapi_redirect or Tomcat/JVM Lots of time a dramatic slowdown is caused by a simple name resolving problems from box to box. It might be a dramatic from 32-bit-boxA to 32-bit-boxB Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Secure AJP over ssl
On 02/22/2011 11:23 PM, Jason Pyeron wrote: -Original Message- That is a naive view. [Please forgive the wording.] None taken. Given: 1) The Apache box is secure and login is restricted to the minimum set of persons with a kneed to know. 2) The Tomcat box is secure and login is restricted to the minimum set of persons with a kneed to know. There is no reason to allow the set of persons capable (and sometimes authorized) to inspect the data on a network (network operations) to be able to inspect the unsecured contents of the data stream. That would be a briech of security and law. I just waited you mention that :) What do you think happens when encrypted data from client comes in and is encrypted again and send to the client? It's unencrypted in the memory and anyone with access to the box can just inspect the content of the httpd process in the same way it can read the data on the socket. So since persons which are authorized to login to the Apache and Tomcat box have the option to view the data, your entire security is still human based. That's why I see no point of encrypting the data transfer between those boxes cause you can just as well make sure the proper persons have the network access. However I can live with the 'law' reason, but that doesn't mean it's a secure just because the 'law' says it is. Cheers -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Secure AJP over ssl
On 02/23/2011 07:28 PM, Jason Pyeron wrote: encrypting the data transfer between those boxes cause you can just as well make sure the proper persons have the network access. That list includes 78 people. You mean 78 people monitor your network for trouble or you have your production servers in the same network segment as your local intranet? Cannot tell which one is worse :) Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Secure AJP over ssl
On 02/21/2011 10:31 PM, Jason Pyeron wrote: Does (or could) tomcat 5.5 support encrypted AJP? The frontend apache will be on a different host than the tomcat server. It is required that the communications are encrypted. I would suggest you reconsider your security requirements. Unless your frontend and backend are on different continents the best way to fight wire tapping (only reason why would you secure the communication at the first place) is much better done with securing your infrastructure. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: huge info messages about mod_jk
On 02/17/2011 04:26 AM, Yu Kikuchi wrote:
[httpd.conf](preforkMPM)
worker.worker01.connection_pool_timeout=20
No need for that if running prefork mpm.
Connector protocol=AJP/1.3 port=8009 address=${jboss.bind.address}
maxThreads=81 connectionTimeout=2 redirectPort=8443 allowTrace=false
/
1. connectionTimeout will cause the socket to be closed after 20s
if no AJP requests come in within that time.
So you will have those [info] messages.
Since you have MaxClients and maxThreads in sync you can
set connectionTimeout=-1.
The only problem might arise if you do a graceful restart on
httpd with active connections in which case httpd will spawn
couple of extra connections for new requests.
So set connectionTimeout=60 (10 minutes) and just
live with those [info] messages, or
MaxClients 81, maxThreads=100 and connectionTimeout=-1
Regards
--
^TM
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
Re: huge info messages about mod_jk
On 02/15/2011 01:08 PM, Yu Kikuchi wrote: Mr.Warnier Thank you for your advice. But I want to know not the way to inhibit these logs but the reason why these logs output. Because Tomcat closes its part of the connection. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: CVE-2010-4476 - is it fixed or not?
On 02/11/2011 10:42 AM, Mark Thomas wrote: b) not an issue unless the app uses Double.parseDouble False. As per the announcement sent to all the usual places: quote Tomcat is affected when accessing a form based security constrained page or any page that calls javax.servlet.ServletRequest.getLocale() or javax.servlet.ServletRequest.getLocales(). /quote I'd add that the app needs a workaround as well if directly parsing the problematic user/wire data (without patched JVM) Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: IIS6 not forwarding requests to Tomcat 5.5
On 02/11/2011 10:09 AM, Sebastian Szuber wrote: Andre, HTTP Connector is listening to HTTP protocol on 8080 port - I've used it to access Tomcat directly from the browser (without IIS) just to check if Tomcat works. So results shown in points 2 and 3 do not go through IIS. When I request page through IIS - don't see anything on this fact in Tomcat logs. Seems like you IIS is not well configured. Filter seems to work, but not extension. Check the IIS log. It should have error there. Where is /jakarta virtual dir defined and do you have all permissions set up. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: What is difference betn tomcat5.exe tomcat5w.exe?
On 02/10/2011 03:17 PM, André Warnier wrote: raghvendra wrote: What is difference betn tomcat5.exe tomcat5w.exe? http://www.lmgtfy.com/?q=difference+tomcat5.exe+%26+tomcat5w.exe%3F ROTFL Cheers -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Mod_JK inserted header case sensitivity issue
On 01/29/2011 12:45 PM, Jon Forster wrote: Mladen Finding any Sun documentation can be a painful experience since Oracle took over but I have found this from the NSAPI Dev guide: http://wikis.sun.com/pages/viewpage.action?pageId=58042468#P%26R-%7B%7Bpblocknvinsert%28%29%7D%7DFunction In particular: Note - Parameter names are case sensitive. By convention, lowercase names are used for parameters that correspond to HTTP header fields. as mentioned before, modifying the source of 1.2.28 to make the header names lower-case fixed the problem for us, we've be running that for a while and haven't noticed any adverse effects. Can you create Bugzilla entry for Tomcat Connectors in https://issues.apache.org/bugzilla/enter_bug.cgi Specifying the nsapi component and attach that link and eventual patches you have. Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Mod_JK inserted header case sensitivity issue
On 01/28/2011 10:08 AM, Jon Forster wrote: I would have to say that it's not NSAPI spec-compliant, and it's an NSAPI version of the plugin after all, so I would export it to conform to the NSAPI spec. Is that somewhere officially documented. We do a whole sort of header manipulation for IIS, so we can do the same for NASPI if that happens to be a well-known feature :) Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: can't find jni.h compiling jsvc on Mac Os X
On 12/15/2010 09:47 PM, Edoardo Panfili wrote: I am trying to install tomcat 7.0.5 on Mac os X 10.6.5 There is a binary available at: http://commons.apache.org/daemon/download_daemon.cgi Click on the Browse download area... And navigate to binaries/1.0.4/darwin Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
