Re: need help: how to Tomcat self signed cert?
Which HTTP connector are you using? Mark J.V. jvsr...@gmail.com wrote: I am generating a self signed cert using open SSL with the following commands openssl req -x509 -notes -days 365 -newkey rsa:2048 -keyout privateKey.key -out ca.crt I accept all the defaults when prompted except for 'Common Name' and enter my IP address there. This generates : ca.crt It then export this to a ca.p12 with: $openssl pkcs12 -export -in ca.crt -inkey privateKey.key -out ca.p12 I then copy this file to $TOMCAT_HOME/conf/a.keystore Then I run this command $open ssl pkcs12 -in ca.p12 -out ca.pem -clcerts -nokeys -nodes and copy this to $TOMCAT_HOME/conf/ca.pem Before doing this, I remove some junk at the top of the file before ---BEGIN CERTIFICATE --- I then modify my server.xml and open port 8443 and point to the a.keystore file. This seems to work OK. However when I generate a.keystore and ca.pem using BouncyCastle, the certs do not seem to work but I have all the same settings. When generating in pure Java, I am required to install the JCE to generate the keys. I am not sure why openssl does not require some download or license to generate the RSA keys and why it lets me generate with a key size of 2048 without some sort of extension (openssl must have some export controls correct)? My first question is: 1) Why does the first method (using openssl) work? Would I not need to apply JCE to my local jdk/jre when running Tomcat for the certs to work? 2) What is wrong with generating the keys in Java? I am essentially following this: http://blog.thilinamb.com/2010/01/how-to-generate-self-signed.html Except there is no keystore to initially load so I skipped that part. any help on generating a self signed cert in Java that would mirror the openssl generation would be greatly appreciated. J.V. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: need help debugging why a simple app install fails
On 9 Aug 2012, at 13:56, my koseli mykos...@gmail.com wrote: Hi, I am using tomcat6 in ubuntu Ubuntu 10.04.4 LTS and running into problem when installing a very simple app. When I do ant build, deploy it seems to work but when I do ant install -v I get failed to build with output below. I cant find the reason this is failing. Is it possible to get some help on debugging this? Detected Java version: 1.6 in: /usr/lib/jvm/java-6-openjdk/jre Detected OS: Linux parsing buildfile /home/user/springapp2/build.xml with URI = file:/home/user/springapp2/build.xml Project base dir set to: /home/user/springapp2 parsing buildfile jar:file:/usr/share/ant/lib/ant.jar!/org/apache/tools/ant/antlib.xml with URI = jar:file:/usr/share/ant/lib/ant.jar!/org/apache/tools/ant/antlib.xml from a zip file [property] Loading /home/user/springapp2/build.properties Build sequence for target(s) `install' is [install] Complete build sequence is [install, reload, start, build, deploy, list, usage, stop, deploywar, ] install: [install] FAIL - Failed to deploy application at context path /springapp2 BUILD FAILED /home/user/springapp2/build.xml:106: FAIL - Failed to deploy application at context path /springapp2 at org.apache.catalina.ant.AbstractCatalinaTask.execute(AbstractCatalinaTask.java:258) at org.apache.catalina.ant.AbstractCatalinaTask.execute(AbstractCatalinaTask.java:146) at org.apache.catalina.ant.InstallTask.execute(InstallTask.java:114) at org.apache.tools.ant.UnknownElement.execute(UnknownElement.java:291) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:616) at org.apache.tools.ant.dispatch.DispatchUtils.execute(DispatchUtils.java:106) at org.apache.tools.ant.Task.perform(Task.java:348) at org.apache.tools.ant.Target.execute(Target.java:390) at org.apache.tools.ant.Target.performTasks(Target.java:411) at org.apache.tools.ant.Project.executeSortedTargets(Project.java:1360) at org.apache.tools.ant.Project.executeTarget(Project.java:1329) at org.apache.tools.ant.helper.DefaultExecutor.executeTargets(DefaultExecutor.java:41) at org.apache.tools.ant.Project.executeTargets(Project.java:1212) at org.apache.tools.ant.Main.runBuild(Main.java:801) at org.apache.tools.ant.Main.startAnt(Main.java:218) at org.apache.tools.ant.launch.Launcher.run(Launcher.java:280) at org.apache.tools.ant.launch.Launcher.main(Launcher.java:109) Total time: 0 seconds What do the Tomcat logs say about the error? p - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: need help debugging why a simple app install fails
my,
On 12.8.2012 18:52, my koseli wrote:
I just tested some more with 6.0.26, and indeed InstallTask seems to be
problematic, so just use DeployTask as recommended by Tomcat docs:
Again, what exact Tomcat version do you use?
I changed the build.xml to below but I still get the error. Any idea?
target name=manager-deploy description=Install application in Tomcat
manager-deploy url=${tomcat.manager.url}
username=${tomcat.manager.username}
password=${tomcat.manager.password}
path=/${name}
war=${name}.war/
/target
Did you also add the definition of manager-deploy task?
-Ognjen
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
Re: need help debugging why a simple app install fails
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
My,
On 8/12/12 12:52 PM, my koseli wrote:
I changed the build.xml to below but I still get the error. Any
idea?
target name=manager-deploy description=Install application in
Tomcat manager-deploy url=${tomcat.manager.url}
username=${tomcat.manager.username}
password=${tomcat.manager.password} path=/${name}
war=${name}.war/ /target
Not sure what is causing this. Any idea?
BUILD FAILED /home/user/springapp2/build.xml:74:
java.io.FileNotFoundException: springapp2.war (No such file or
directory) at java.io.FileInputStream.open(Native Method) at
java.io.FileInputStream.init(FileInputStream.java:137) at
java.io.FileInputStream.init(FileInputStream.java:96) at
org.apache.catalina.ant.DeployTask.execute(DeployTask.java:169) at
org.apache.tools.ant.UnknownElement.execute(UnknownElement.java:291)
The
above seems entirely obvious to me: the WAR file can't be found.
Try using a fully-qualified path for your war attribute for
manager-deploy.
- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEARECAAYFAlApOuIACgkQ9CaO5/Lv0PAHYgCfUpSXQdtXWRwbK5VZ9voupNDR
zeYAnREU6VwUtxkgXchXT35yF/5buX9a
=O28Y
-END PGP SIGNATURE-
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
Re: need help debugging why a simple app install fails
On Fri, Aug 10, 2012 at 8:08 AM, Ognjen Blagojevic
ognjen.d.blagoje...@gmail.com wrote:
Hi my,
On 10.8.2012 6:13, my koseli wrote:
I tried adding /text to the end of manager url but that didnt work.
There is nothing interesting in the /var/log/tomcat6/ also.
When I do *build* I do get warning as below but I am not sure how serious
this warning is.
I just tested some more with 6.0.26, and indeed InstallTask seems to be
problematic, so just use DeployTask as recommended by Tomcat docs:
taskdef name=manager-deploy classname=org.apache.**
catalina.ant.DeployTask
classpath refid=catalina-ant-classpath**/
/taskdef
taskdef name=manager-undeploy classname=org.apache.**
catalina.ant.UndeployTask
classpath refid=catalina-ant-classpath**/
/taskdef
target name=manager-deploy description=Install application in
Tomcat
manager-deploy url=${tomcat.manager.url}
username=${tomcat.manager.**username}
password=${tomcat.manager.**password}
path=/${name}
war=${name}.war/
/target
target name=manager-undeploy description=Install application in
Tomcat
manager-undeploy url=${tomcat.manager.url}
username=${tomcat.manager.**username}
password=${tomcat.manager.**password}
path=/${name}/
/target
-Ognjen
--**--**-
To unsubscribe, e-mail:
users-unsubscribe@tomcat.**apache.orgusers-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
I changed the build.xml to below but I still get the error. Any idea?
target name=manager-deploy description=Install application in Tomcat
manager-deploy url=${tomcat.manager.url}
username=${tomcat.manager.username}
password=${tomcat.manager.password}
path=/${name}
war=${name}.war/
/target
Not sure what is causing this. Any idea?
Trying the default build file: build.xml
Buildfile: /home/user/springapp2/build.xml
Detected Java version: 1.6 in: /usr/lib/jvm/java-6-openjdk/jre
Detected OS: Linux
parsing buildfile /home/user/springapp2/build.xml with URI =
file:/home/user/springapp2/build.xml
Project base dir set to: /home/user/springapp2
parsing buildfile
jar:file:/usr/share/ant/lib/ant.jar!/org/apache/tools/ant/antlib.xml with
URI = jar:file:/usr/share/ant/lib/ant.jar!/org/apache/tools/ant/antlib.xml
from a zip file
[property] Loading /home/user/springapp2/build.properties
Override ignored for property tomcat.manager.url
Override ignored for property tomcat.manager.username
Override ignored for property tomcat.manager.password
Build sequence for target(s) `manager-deploy' is [manager-deploy]
Complete build sequence is [manager-deploy, reload, start, install, build,
deploy, manager-undeploy, list, usage, stop, deploywar, ]
manager-deploy:
BUILD FAILED
/home/user/springapp2/build.xml:74: java.io.FileNotFoundException:
springapp2.war (No such file or directory)
at java.io.FileInputStream.open(Native Method)
at java.io.FileInputStream.init(FileInputStream.java:137)
at java.io.FileInputStream.init(FileInputStream.java:96)
at org.apache.catalina.ant.DeployTask.execute(DeployTask.java:169)
at org.apache.tools.ant.UnknownElement.execute(UnknownElement.java:291)
at sun.reflect.GeneratedMethodAccessor4.invoke(Unknown Source)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:616)
at
org.apache.tools.ant.dispatch.DispatchUtils.execute(DispatchUtils.java:106)
at org.apache.tools.ant.Task.perform(Task.java:348)
at org.apache.tools.ant.Target.execute(Target.java:390)
at org.apache.tools.ant.Target.performTasks(Target.java:411)
at org.apache.tools.ant.Project.executeSortedTargets(Project.java:1360)
at org.apache.tools.ant.Project.executeTarget(Project.java:1329)
at
org.apache.tools.ant.helper.DefaultExecutor.executeTargets(DefaultExecutor.java:41)
at org.apache.tools.ant.Project.executeTargets(Project.java:1212)
at org.apache.tools.ant.Main.runBuild(Main.java:801)
at org.apache.tools.ant.Main.startAnt(Main.java:218)
at org.apache.tools.ant.launch.Launcher.run(Launcher.java:280)
at org.apache.tools.ant.launch.Launcher.main(Launcher.java:109)
Re: need help debugging why a simple app install fails
On Sun, Aug 12, 2012 at 10:52 AM, my koseli mykos...@gmail.com wrote:
On Fri, Aug 10, 2012 at 8:08 AM, Ognjen Blagojevic
ognjen.d.blagoje...@gmail.com wrote:
Hi my,
On 10.8.2012 6:13, my koseli wrote:
I tried adding /text to the end of manager url but that didnt work.
There is nothing interesting in the /var/log/tomcat6/ also.
When I do *build* I do get warning as below but I am not sure how serious
this warning is.
I just tested some more with 6.0.26, and indeed InstallTask seems to be
problematic, so just use DeployTask as recommended by Tomcat docs:
taskdef name=manager-deploy classname=org.apache.**
catalina.ant.DeployTask
classpath refid=catalina-ant-classpath**/
/taskdef
taskdef name=manager-undeploy classname=org.apache.**
catalina.ant.UndeployTask
classpath refid=catalina-ant-classpath**/
/taskdef
target name=manager-deploy description=Install application in
Tomcat
manager-deploy url=${tomcat.manager.url}
username=${tomcat.manager.**username}
password=${tomcat.manager.**password}
path=/${name}
war=${name}.war/
/target
target name=manager-undeploy description=Install application in
Tomcat
manager-undeploy url=${tomcat.manager.url}
username=${tomcat.manager.**username}
password=${tomcat.manager.**password}
path=/${name}/
/target
-Ognjen
--**--**-
To unsubscribe, e-mail:
users-unsubscribe@tomcat.**apache.orgusers-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
I changed the build.xml to below but I still get the error. Any idea?
target name=manager-deploy description=Install application in Tomcat
manager-deploy url=${tomcat.manager.url}
username=${tomcat.manager.username}
password=${tomcat.manager.password}
path=/${name}
war=${name}.war/
/target
Not sure what is causing this. Any idea?
Trying the default build file: build.xml
Buildfile: /home/user/springapp2/build.xml
Detected Java version: 1.6 in: /usr/lib/jvm/java-6-openjdk/jre
Detected OS: Linux
parsing buildfile /home/user/springapp2/build.xml with URI =
file:/home/user/springapp2/build.xml
Project base dir set to: /home/user/springapp2
parsing buildfile
jar:file:/usr/share/ant/lib/ant.jar!/org/apache/tools/ant/antlib.xml with
URI = jar:file:/usr/share/ant/lib/ant.jar!/org/apache/tools/ant/antlib.xml
from a zip file
[property] Loading /home/user/springapp2/build.properties
Override ignored for property tomcat.manager.url
Override ignored for property tomcat.manager.username
Override ignored for property tomcat.manager.password
Build sequence for target(s) `manager-deploy' is [manager-deploy]
Complete build sequence is [manager-deploy, reload, start, install,
build, deploy, manager-undeploy, list, usage, stop, deploywar, ]
manager-deploy:
BUILD FAILED
/home/user/springapp2/build.xml:74: java.io.FileNotFoundException:
springapp2.war (No such file or directory)
at java.io.FileInputStream.open(Native Method)
at java.io.FileInputStream.init(FileInputStream.java:137)
at java.io.FileInputStream.init(FileInputStream.java:96)
at org.apache.catalina.ant.DeployTask.execute(DeployTask.java:169)
at org.apache.tools.ant.UnknownElement.execute(UnknownElement.java:291)
at sun.reflect.GeneratedMethodAccessor4.invoke(Unknown Source)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:616)
at
org.apache.tools.ant.dispatch.DispatchUtils.execute(DispatchUtils.java:106)
at org.apache.tools.ant.Task.perform(Task.java:348)
at org.apache.tools.ant.Target.execute(Target.java:390)
at org.apache.tools.ant.Target.performTasks(Target.java:411)
at org.apache.tools.ant.Project.executeSortedTargets(Project.java:1360)
at org.apache.tools.ant.Project.executeTarget(Project.java:1329)
at
org.apache.tools.ant.helper.DefaultExecutor.executeTargets(DefaultExecutor.java:41)
at org.apache.tools.ant.Project.executeTargets(Project.java:1212)
at org.apache.tools.ant.Main.runBuild(Main.java:801)
at org.apache.tools.ant.Main.startAnt(Main.java:218)
at org.apache.tools.ant.launch.Launcher.run(Launcher.java:280)
at org.apache.tools.ant.launch.Launcher.main(Launcher.java:109)
This is the tutorial I am trying to follow:
http://static.springsource.org/docs/Spring-MVC-step-by-step/part1.html
Re: need help debugging why a simple app install fails
Hi my, On 10.8.2012 6:13, my koseli wrote: I tried adding /text to the end of manager url but that didnt work. There is nothing interesting in the /var/log/tomcat6/ also. When I do *build* I do get warning as below but I am not sure how serious this warning is. On this list, bottom-posting [1] is preffered, please use it. Please answer my previous questions. -Ognjen [1] http://en.wikipedia.org/wiki/Posting_style#Bottom-posting - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: need help debugging why a simple app install fails
Hi my,
On 10.8.2012 6:13, my koseli wrote:
I tried adding /text to the end of manager url but that didnt work.
There is nothing interesting in the /var/log/tomcat6/ also.
When I do *build* I do get warning as below but I am not sure how serious
this warning is.
I just tested some more with 6.0.26, and indeed InstallTask seems to be
problematic, so just use DeployTask as recommended by Tomcat docs:
taskdef name=manager-deploy
classname=org.apache.catalina.ant.DeployTask
classpath refid=catalina-ant-classpath/
/taskdef
taskdef name=manager-undeploy
classname=org.apache.catalina.ant.UndeployTask
classpath refid=catalina-ant-classpath/
/taskdef
target name=manager-deploy description=Install application in
Tomcat
manager-deploy url=${tomcat.manager.url}
username=${tomcat.manager.username}
password=${tomcat.manager.password}
path=/${name}
war=${name}.war/
/target
target name=manager-undeploy description=Install application in
Tomcat
manager-undeploy url=${tomcat.manager.url}
username=${tomcat.manager.username}
password=${tomcat.manager.password}
path=/${name}/
/target
-Ognjen
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
need help debugging why a simple app install fails
Hi, I am using tomcat6 in ubuntu Ubuntu 10.04.4 LTS and running into problem when installing a very simple app. When I do ant build, deploy it seems to work but when I do ant install -v I get failed to build with output below. I cant find the reason this is failing. Is it possible to get some help on debugging this? Detected Java version: 1.6 in: /usr/lib/jvm/java-6-openjdk/jre Detected OS: Linux parsing buildfile /home/user/springapp2/build.xml with URI = file:/home/user/springapp2/build.xml Project base dir set to: /home/user/springapp2 parsing buildfile jar:file:/usr/share/ant/lib/ant.jar!/org/apache/tools/ant/antlib.xml with URI = jar:file:/usr/share/ant/lib/ant.jar!/org/apache/tools/ant/antlib.xml from a zip file [property] Loading /home/user/springapp2/build.properties Build sequence for target(s) `install' is [install] Complete build sequence is [install, reload, start, build, deploy, list, usage, stop, deploywar, ] install: [install] FAIL - Failed to deploy application at context path /springapp2 BUILD FAILED /home/user/springapp2/build.xml:106: FAIL - Failed to deploy application at context path /springapp2 at org.apache.catalina.ant.AbstractCatalinaTask.execute(AbstractCatalinaTask.java:258) at org.apache.catalina.ant.AbstractCatalinaTask.execute(AbstractCatalinaTask.java:146) at org.apache.catalina.ant.InstallTask.execute(InstallTask.java:114) at org.apache.tools.ant.UnknownElement.execute(UnknownElement.java:291) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:616) at org.apache.tools.ant.dispatch.DispatchUtils.execute(DispatchUtils.java:106) at org.apache.tools.ant.Task.perform(Task.java:348) at org.apache.tools.ant.Target.execute(Target.java:390) at org.apache.tools.ant.Target.performTasks(Target.java:411) at org.apache.tools.ant.Project.executeSortedTargets(Project.java:1360) at org.apache.tools.ant.Project.executeTarget(Project.java:1329) at org.apache.tools.ant.helper.DefaultExecutor.executeTargets(DefaultExecutor.java:41) at org.apache.tools.ant.Project.executeTargets(Project.java:1212) at org.apache.tools.ant.Main.runBuild(Main.java:801) at org.apache.tools.ant.Main.startAnt(Main.java:218) at org.apache.tools.ant.launch.Launcher.run(Launcher.java:280) at org.apache.tools.ant.launch.Launcher.main(Launcher.java:109) Total time: 0 seconds
Re: need help debugging why a simple app install fails
Hi my, On 9.8.2012 14:55, my koseli wrote: When I do ant build, deploy it seems to work but when I do ant install -v I get failed to build with output below. I cant find the reason this is failing. Is it possible to get some help on debugging this? You get the message from Manager webapp (Failed to deploy...). There should be some more information about the reason of the failure in Tomcat logs, check them out. -Ognjen - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: need help debugging why a simple app install fails
Here's the relevant lines from build.xml
101 target name=install description=Install application in Tomcat
102 install url=${tomcat.manager.url}
103 username=${tomcat.manager.username}
104 password=${tomcat.manager.password}
105 path=/${name}
106 war=${name}.war/
107 /target
I have attached the full build.xml along with this email.
I am using openjdk version of java with tomcat6.
My build.properties file looks like this:
# Ant properties for building the springapp
appserver.home=/usr/share/tomcat6
# for Tomcat 5 use $appserver.home}/server/lib
# for Tomcat 6 use $appserver.home}/lib
appserver.lib=${appserver.home}/lib
deploy.path=${appserver.home}/webapps
tomcat.manager.url=http://192.168.1.12:8010/manager
tomcat.manager.username=admin
tomcat.manager.password=pass
On Thu, Aug 9, 2012 at 7:28 AM, Ognjen Blagojevic
ognjen.d.blagoje...@gmail.com wrote:
Hi my,
On 9.8.2012 14:55, my koseli wrote:
When I do ant build, deploy it seems to work but when I do ant install
-v
I get failed to build with output below. I cant find the reason this is
failing. Is it possible to get some help on debugging this?
You get the message from Manager webapp (Failed to deploy...). There
should be some more information about the reason of the failure in Tomcat
logs, check them out.
-Ognjen
--**--**-
To unsubscribe, e-mail:
users-unsubscribe@tomcat.**apache.orgusers-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
?xml version=1.0?
project name=springapp2 basedir=. default=usage
property file=build.properties/
property name=src.dir value=src/
property name=web.dir value=war/
property name=build.dir value=${web.dir}/WEB-INF/classes/
property name=name value=springapp2/
path id=master-classpath
fileset dir=${web.dir}/WEB-INF/lib
include name=*.jar/
/fileset
!-- We need the servlet API classes: --
!-- * for Tomcat 5/6 use servlet-api.jar --
!-- * for other app servers - check the docs --
fileset dir=${appserver.lib}
include name=servlet*.jar/
/fileset
pathelement path=${build.dir}/
/path
target name=usage
echo message=/
echo message=${name} build file/
echo message=---/
echo message=/
echo message=Available targets are:/
echo message=/
echo message=build -- Build the application/
echo message=deploy-- Deploy application as directory/
echo message=deploywar -- Deploy application as a WAR file/
echo message=install -- Install application in Tomcat/
echo message=reload-- Reload application in Tomcat/
echo message=start -- Start Tomcat application/
echo message=stop -- Stop Tomcat application/
echo message=list -- List Tomcat applications/
echo message=/
/target
target name=build description=Compile main source tree java files
mkdir dir=${build.dir}/
javac destdir=${build.dir} source=1.6 target=1.6 debug=true
deprecation=false optimize=false failonerror=true
src path=${src.dir}/
classpath refid=master-classpath/
/javac
/target
target name=deploy depends=build description=Deploy application
copy todir=${deploy.path}/${name} preservelastmodified=true
fileset dir=${web.dir}
include name=**/*.*/
/fileset
/copy
/target
target name=deploywar depends=build description=Deploy application as a WAR file
war destfile=${name}.war
webxml=${web.dir}/WEB-INF/web.xml
fileset dir=${web.dir}
include name=**/*.*/
/fileset
/war
copy todir=${deploy.path} preservelastmodified=true
fileset dir=.
include name=*.war/
/fileset
/copy
/target
!-- == --
!-- Tomcat tasks - remove these if you don't have Tomcat installed --
!-- == --
path id=catalina-ant-classpath
!-- We need the Catalina jars for Tomcat --
!-- * for other app servers - check the docs --
fileset dir=${appserver.lib}
include name=catalina-ant.jar/
/fileset
/path
taskdef name=install classname=org.apache.catalina.ant.InstallTask
classpath refid=catalina-ant-classpath/
/taskdef
taskdef name=reload classname=org.apache.catalina.ant.ReloadTask
classpath refid=catalina-ant-classpath/
/taskdef
taskdef name=list classname=org.apache.catalina.ant.ListTask
classpath
Re: need help debugging why a simple app install fails
Hi my,
On 9.8.2012 16:57, my koseli wrote:
Here's the relevant lines from build.xml
101 target name=install description=Install application in
Tomcat
Tomcat docs says that install task is deprecated. Although it is maybe
equivalent to deploy, I recommend to switch to deploy task.
102 install url=${tomcat.manager.url}
103 username=${tomcat.manager.username}
104 password=${tomcat.manager.password}
105 path=/${name}
106 war=${name}.war/
Other than that, nothing suspicious here. What about the content of the
file conf/tomcat-users.xml? Is admin/pass defined correctly there, in
the correct role?
What is the exact Tomcat version you are using?
Did you check the log files? Is there any usefull info in there?
-Ognjen
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
Re: need help debugging why a simple app install fails
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 My, On 8/9/12 10:57 AM, my koseli wrote: tomcat.manager.url=http://192.168.1.12:8010/manager Try adding /text to the end of that URL so it looks like this: tomcat.manager.url=http://192.168.1.12:8010/manager/text - -chris -BEGIN PGP SIGNATURE- Version: GnuPG/MacGPG2 v2.0.17 (Darwin) Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAlAkHf0ACgkQ9CaO5/Lv0PA8+QCgrwFuTueW+G3hiwffqvCKbLdK V0MAn17tEZN3yQoPewDqsZG/3kMZ0QWA =Fp/e -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: need help debugging why a simple app install fails
I tried adding /text to the end of manager url but that didnt work.
There is nothing interesting in the /var/log/tomcat6/ also.
When I do *build* I do get warning as below but I am not sure how serious
this warning is.
Buildfile: /home/user/springapp2/build.xml
build:
[javac] /home/user/springapp2/build.xml:48: warning:
'includeantruntime' was not set, defaulting to build.sysclasspath=last; set
to false for repeatable builds
BUILD SUCCESSFUL
I also added the install script to my deploy so that it looks like this
below:
target name=deploy depends=build description=Deploy application
copy todir=${deploy.path}/${name} preservelastmodified=true
fileset dir=${web.dir}
include name=**/*.*/
/fileset
/copy
install url=${tomcat.manager.url}
username=${tomcat.manager.username}
password=${tomcat.manager.password}
path=/${name}
war=${name}.war/
/target
On Thu, Aug 9, 2012 at 2:30 PM, Christopher Schultz
ch...@christopherschultz.net wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
My,
On 8/9/12 10:57 AM, my koseli wrote:
tomcat.manager.url=http://192.168.1.12:8010/manager
Try adding /text to the end of that URL so it looks like this:
tomcat.manager.url=http://192.168.1.12:8010/manager/text
- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEARECAAYFAlAkHf0ACgkQ9CaO5/Lv0PA8+QCgrwFuTueW+G3hiwffqvCKbLdK
V0MAn17tEZN3yQoPewDqsZG/3kMZ0QWA
=Fp/e
-END PGP SIGNATURE-
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
Need help on SSL problem on new server after move from existing server
Hi, After moving to a new server, I am getting the error: SSL received a record that exceeded the maximum permissible length. I installed Tomcat 6.0.29 on a new machine and copied over the webapps folder and the keystore from the old 5.5.23 machine. Then I modified server.xml to include the various contexts from the old server as well as the port 80 and port 443 connectors and also changed the keystore path for the port 443 SSL connector so it was pointing to the keystore. As far as I know, all the SSL configuration on the server is contained within the connector definition, included below: Connector port=443 address=10.171.10.119 debug=4 maxHttpHeaderSize=8192 enableLookups=false tcpNoDelay=true maxThreads=150 minSpareThreads=25 maxSpareThreads=75 acceptCount=100 connectionTimeout=2 disableUploadTimeout=true keystoreFile=/usr/local/java/keystore2010 keystorePass=xx scheme=https secure=true clientAuth=false sslProtocol=TLS / This connector works perfectly with Tomcat 5.5.23. Are there changes need for 6.0.29? Any ideas about what's going on? Thanks, Rob Tanner Linfield College
Re: Need help on SSL problem on new server after move from existing server
On 11/10/2011 18:23, Rob Tanner wrote: Hi, After moving to a new server, I am getting the error: SSL received a record that exceeded the maximum permissible length. I installed Tomcat 6.0.29 on a new machine and copied over the webapps folder and the keystore from the old 5.5.23 machine. Then I modified server.xml to include the various contexts from the old server as well as the port 80 and port 443 connectors and also changed the keystore path for the port 443 SSL connector so it was pointing to the keystore. As far as I know, all the SSL configuration on the server is contained within the connector definition, included below: Connector port=443 address=10.171.10.119 debug=4 maxHttpHeaderSize=8192 enableLookups=false tcpNoDelay=true maxThreads=150 minSpareThreads=25 maxSpareThreads=75 acceptCount=100 connectionTimeout=2 disableUploadTimeout=true keystoreFile=/usr/local/java/keystore2010 keystorePass=xx scheme=https secure=true clientAuth=false sslProtocol=TLS / This connector works perfectly with Tomcat 5.5.23. Are there changes need for 6.0.29? Yes. Any ideas about what's going on? http://tomcat.apache.org/migration.html#Migrating_from_5.5.x_to_6.0.x Mark - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Need help on SSL problem on new server after move from existing server
That was a simple enough fix. Thank you. ~ Rob On 10/11/11 10:31 AM, Mark Thomas ma...@apache.org wrote: On 11/10/2011 18:23, Rob Tanner wrote: Hi, After moving to a new server, I am getting the error: SSL received a record that exceeded the maximum permissible length. I installed Tomcat 6.0.29 on a new machine and copied over the webapps folder and the keystore from the old 5.5.23 machine. Then I modified server.xml to include the various contexts from the old server as well as the port 80 and port 443 connectors and also changed the keystore path for the port 443 SSL connector so it was pointing to the keystore. As far as I know, all the SSL configuration on the server is contained within the connector definition, included below: Connector port=443 address=10.171.10.119 debug=4 maxHttpHeaderSize=8192 enableLookups=false tcpNoDelay=true maxThreads=150 minSpareThreads=25 maxSpareThreads=75 acceptCount=100 connectionTimeout=2 disableUploadTimeout=true keystoreFile=/usr/local/java/keystore2010 keystorePass=xx scheme=https secure=true clientAuth=false sslProtocol=TLS / This connector works perfectly with Tomcat 5.5.23. Are there changes need for 6.0.29? Yes. Any ideas about what's going on? http://tomcat.apache.org/migration.html#Migrating_from_5.5.x_to_6.0.x Mark - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Need help on SSL problem on new server after move from existing server
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Rob, Goad to see you got your new server working. I do have some further comments if you're still around: On 10/11/2011 1:23 PM, Rob Tanner wrote: I installed Tomcat 6.0.29 If you were upgrading from 5.5 to something else, why not go up to 6.0.33, which is the latest? Or, even better, why not upgrade all the way to 7.0.22? Then I modified server.xml to include the various contexts from the old server If possible, you should take your Context elements from server.xml and put them into the individual webapps' META-INF/context.xml files. This will make deploying and undeploying webapps much easier. If you want to override the META-INF/context.xml file packaged with a webapp (say, because you have to add local configuration that your developers don't know about), you can do so by putting the correct file into $CATALINA_BASE/conf/[engine]/[host]/[webapp].xml and it will override the descriptor from the webapp. As far as I know, all the SSL configuration on the server is contained within the connector definition, included below: Connector port=443 address=10.171.10.119 debug=4 There is no debug attribute on the Connector element any longer. You should remove it. maxHttpHeaderSize=8192 enableLookups=false tcpNoDelay=true maxThreads=150 minSpareThreads=25 maxSpareThreads=75 You might want to consider using an Executor: they are more flexible, and the thread pools can be shared across Connectors if you want to do that (and you probably do if you have multiple connectors). - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk6UthcACgkQ9CaO5/Lv0PCerwCeMzVLB2CRlkfRHnO1Z42Pt1gQ QaAAoLUEFMVqYBy2Vd65YERFxav5xSnU =Lpx8 -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: Need help on SSL problem on new server after move from existing server
From: Christopher Schultz [mailto:ch...@christopherschultz.net] Subject: Re: Need help on SSL problem on new server after move from existing server Connector port=443 address=10.171.10.119 debug=4 There is no debug attribute on the Connector element any longer. Nor was it there in Tomcat 5.5, so that makes me suspicious of the whole server.xml... Yet another case of blind upgrading without reading the doc for the target level. maxHttpHeaderSize=8192 That's the default setting, so it could be removed. tcpNoDelay=true That's also the default. minSpareThreads=25 maxSpareThreads=75 You might want to consider using an Executor Not might, must: those attributes do not exist in the 6.0 or later Connector, but are available with an Executor. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers.
Re: Need help on SSL problem on new server after move from existing server
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chuck, On 10/11/2011 5:51 PM, Caldarale, Charles R wrote: From: Christopher Schultz [mailto:ch...@christopherschultz.net] Subject: Re: Need help on SSL problem on new server after move from existing server minSpareThreads=25 maxSpareThreads=75 You might want to consider using an Executor Not might, must: those attributes do not exist in the 6.0 or later Connector, but are available with an Executor. I should have been more clear: use of an Executor is not a requirement in 6.0+, but if you want your thread pool to actually re-size, you will have to use Executor: those attributes specifically are no longer recognized. They should be generating warnings in your startup logs. - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk6Uu3cACgkQ9CaO5/Lv0PDJnwCfSguZoVGfbAQIsWA7KbQMFRuM Qu4Anit2WM4A3x4BexheYe0DqgVXPZvN =FqME -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Urgent -- Need help configuring JNDI realm
Hi,
I need help in configuring the JNDI Realm to connect to LDAP Server and
authenticate users. Here are the details:
CN=AUTH,OU=XYZ,OU=Application
Managed,OU=Groups,DC=rma,DC=corp,DC=ABC,DC=com - *AUTH is the group in which
i have to search if the user is a member of or not. All the members in this
group are defined in OU=Workers,DC=rma,DC=corp,DC=ABC,DC=com*
**
This group has members who are defined in
CN=User,OU=Workers,DC=rma,DC=corp,DC=ABC,DC=com
*I have set my JNDIRealm tag in server.xml as follows:*
Realm className=org.apache.catalina.realm.JNDIRealm
connectionName=CN=123,OU=Serv-Accts,OU=PAS,OU=Resrc,DC=rma,DC=corp,DC=ABC,DC=com
connectionPassword=pwd
connectionURL=ldap://hostname:port debug=99
*roleBase*=OU=XYZ,OU=Application
Managed,OU=Groups,DC=rma,DC=corp,DC=ABC,DC=com
*roleSubtree*=true
*roleName*=cn
*roleSearch*=CN=AUTH,OU=XYZ,OU=Application
Managed,OU=Groups,DC=rma,DC=corp,DC=ABC,DC=com
*userBase*=OU=Workers,DC=rma,DC=corp,DC=ABC,DC=com
*userSubtree*=true
*userPattern*=CN={0},OU=Workers,DC=rma,DC=corp,DC=ABC,DC=com/
*The web.xml is as follows:*
**
security-constraint
display-nameSecurity Constraint/display-name
web-resource-collection
web-resource-nameProtected Area/web-resource-name
!-- Define the context-relative URL(s) to be protected --
url-pattern/*/url-pattern
!-- If you list http methods, only those methods are protected --
/web-resource-collection
auth-constraint
!-- Anyone with one of the listed roles may access this area --
role-name*AUTH*/role-name
/auth-constraint
/security-constraint
!-- Default login configuration uses form-based authentication --
login-config
auth-methodFORM/auth-method
realm-nameForm-Based Authentication Area/realm-name
form-login-config
form-login-page/Login.jsp/form-login-page
form-error-page/error.jsp/form-error-page
/form-login-config
/login-config
!-- Security roles referenced by this web application --
security-role
role-name*AUTH*/role-name
/security-role
Any help is appreciated.
Thanks,
Savitha
Re: Urgent -- Need help configuring JNDI realm
On 13/09/2011 19:20, Savitha Akella wrote: Hi, Any help is appreciated. http://catb.org/~esr/faqs/smart-questions.html p signature.asc Description: OpenPGP digital signature
Re: Urgent -- Need help configuring JNDI realm
Savitha you forgot to mention what was the problem that you were having.
Anyway, in your realm specification, for the connectionName you need
to specify the actual name of the user (i.e. admin) that is able to
log into the LDAP to do the lookup that you are interested in.
connectionPassword is the password for that user/admin.
Rudy
On Tue, Sep 13, 2011 at 11:20 AM, Savitha Akella
savitha.saraswa...@gmail.com wrote:
Hi,
I need help in configuring the JNDI Realm to connect to LDAP Server and
authenticate users. Here are the details:
CN=AUTH,OU=XYZ,OU=Application
Managed,OU=Groups,DC=rma,DC=corp,DC=ABC,DC=com - *AUTH is the group in which
i have to search if the user is a member of or not. All the members in this
group are defined in OU=Workers,DC=rma,DC=corp,DC=ABC,DC=com*
**
This group has members who are defined in
CN=User,OU=Workers,DC=rma,DC=corp,DC=ABC,DC=com
*I have set my JNDIRealm tag in server.xml as follows:*
Realm className=org.apache.catalina.realm.JNDIRealm
connectionName=CN=123,OU=Serv-Accts,OU=PAS,OU=Resrc,DC=rma,DC=corp,DC=ABC,DC=com
connectionPassword=pwd
connectionURL=ldap://hostname:port debug=99
*roleBase*=OU=XYZ,OU=Application
Managed,OU=Groups,DC=rma,DC=corp,DC=ABC,DC=com
*roleSubtree*=true
*roleName*=cn
*roleSearch*=CN=AUTH,OU=XYZ,OU=Application
Managed,OU=Groups,DC=rma,DC=corp,DC=ABC,DC=com
*userBase*=OU=Workers,DC=rma,DC=corp,DC=ABC,DC=com
*userSubtree*=true
*userPattern*=CN={0},OU=Workers,DC=rma,DC=corp,DC=ABC,DC=com/
*The web.xml is as follows:*
**
security-constraint
display-nameSecurity Constraint/display-name
web-resource-collection
web-resource-nameProtected Area/web-resource-name
!-- Define the context-relative URL(s) to be protected --
url-pattern/*/url-pattern
!-- If you list http methods, only those methods are protected --
/web-resource-collection
auth-constraint
!-- Anyone with one of the listed roles may access this area --
role-name*AUTH*/role-name
/auth-constraint
/security-constraint
!-- Default login configuration uses form-based authentication --
login-config
auth-methodFORM/auth-method
realm-nameForm-Based Authentication Area/realm-name
form-login-config
form-login-page/Login.jsp/form-login-page
form-error-page/error.jsp/form-error-page
/form-login-config
/login-config
!-- Security roles referenced by this web application --
security-role
role-name*AUTH*/role-name
/security-role
Any help is appreciated.
Thanks,
Savitha
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Urgent -- Need help configuring JNDI realm
Hi Rudy,
Sorry that I missed out the problem. I can connect to the server but the
authentication of a member in the group AUTH is failing inspite of giving
proper credentials.
May be I have not configured properly.
Regards,
Savitha
On Tue, Sep 13, 2011 at 3:02 PM, Rudy Gireyev rgire...@gmail.com wrote:
Savitha you forgot to mention what was the problem that you were having.
Anyway, in your realm specification, for the connectionName you need
to specify the actual name of the user (i.e. admin) that is able to
log into the LDAP to do the lookup that you are interested in.
connectionPassword is the password for that user/admin.
Rudy
On Tue, Sep 13, 2011 at 11:20 AM, Savitha Akella
savitha.saraswa...@gmail.com wrote:
Hi,
I need help in configuring the JNDI Realm to connect to LDAP Server and
authenticate users. Here are the details:
CN=AUTH,OU=XYZ,OU=Application
Managed,OU=Groups,DC=rma,DC=corp,DC=ABC,DC=com - *AUTH is the group in
which
i have to search if the user is a member of or not. All the members in
this
group are defined in OU=Workers,DC=rma,DC=corp,DC=ABC,DC=com*
**
This group has members who are defined in
CN=User,OU=Workers,DC=rma,DC=corp,DC=ABC,DC=com
*I have set my JNDIRealm tag in server.xml as follows:*
Realm className=org.apache.catalina.realm.JNDIRealm
connectionName=CN=123,OU=Serv-Accts,OU=PAS,OU=Resrc,DC=rma,DC=corp,DC=ABC,DC=com
connectionPassword=pwd
connectionURL=ldap://hostname:port debug=99
*roleBase*=OU=XYZ,OU=Application
Managed,OU=Groups,DC=rma,DC=corp,DC=ABC,DC=com
*roleSubtree*=true
*roleName*=cn
*roleSearch*=CN=AUTH,OU=XYZ,OU=Application
Managed,OU=Groups,DC=rma,DC=corp,DC=ABC,DC=com
*userBase*=OU=Workers,DC=rma,DC=corp,DC=ABC,DC=com
*userSubtree*=true
*userPattern*=CN={0},OU=Workers,DC=rma,DC=corp,DC=ABC,DC=com/
*The web.xml is as follows:*
**
security-constraint
display-nameSecurity Constraint/display-name
web-resource-collection
web-resource-nameProtected Area/web-resource-name
!-- Define the context-relative URL(s) to be protected --
url-pattern/*/url-pattern
!-- If you list http methods, only those methods are protected --
/web-resource-collection
auth-constraint
!-- Anyone with one of the listed roles may access this area --
role-name*AUTH*/role-name
/auth-constraint
/security-constraint
!-- Default login configuration uses form-based authentication --
login-config
auth-methodFORM/auth-method
realm-nameForm-Based Authentication Area/realm-name
form-login-config
form-login-page/Login.jsp/form-login-page
form-error-page/error.jsp/form-error-page
/form-login-config
/login-config
!-- Security roles referenced by this web application --
security-role
role-name*AUTH*/role-name
/security-role
Any help is appreciated.
Thanks,
Savitha
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Urgent -- Need help configuring JNDI realm
Thanks for the link. On Tue, Sep 13, 2011 at 2:46 PM, Pid p...@pidster.com wrote: On 13/09/2011 19:20, Savitha Akella wrote: Hi, Any help is appreciated. http://catb.org/~esr/faqs/smart-questions.html p
Need help regarding removing port number from URL
Hi, I need a help regarding removing port number from URL. For example: Supposing my URL is, http://abcd.com:4040/context-path/gui/. I wish Apache Tomcat to handle the request on same tomcat process, when using the url: http://abcd.com/context-path/gui/. Please help me how i can achieve this and by making what configurations on what configuration files. Tomcat Version:Apache-tomcat-6.0.18, OS:Red Hat 3.4.6-8, JDK: jdk1.6.0_07 Thank you in advance, Chandrashekhar
Re: Need help regarding removing port number from URL
On 26/08/2011 17:02, Shanmukha Venkata Sri ChandraSekhar Nallapati wrote: Hi, I need a help regarding removing port number from URL. For example: Supposing my URL is, http://abcd.com:4040/context-path/gui/. I wish Apache Tomcat to handle the request on same tomcat process, when using the url: http://abcd.com/context-path/gui/. Please help me how i can achieve this and by making what configurations on what configuration files. Change the Connector configuration from 4040 to 80. Tomcat Version:Apache-tomcat-6.0.18, OS:Red Hat 3.4.6-8, JDK: jdk1.6.0_07 Upgrade your Tomcat upgrade your Java. You have bugs security vulnerabilities. p Thank you in advance, Chandrashekhar signature.asc Description: OpenPGP digital signature
Need Help - Vulnerability Details
Hi, We are using *Tomcat 6.0.26* with* Windows Server 2008 R2 Enterprise *as Operating system. We performed security scan on environment and observed Apache Tomcat NIO Connector Denial of Service. Here we go with the detail description and observation:* * * * *Description:* A denial of se*r*vice vulnerability is present in some versions of Apache Tomcat. * * *Observation:* A denial of service vulnerability is present in some versions of Apache Tomcat. The vulnerability is caused by an error in the NIO connector when processing a request line. By sending a specially-crafted request. Remote attackers could exploit the vulnerability to cause an OutOfMemory error and crash the server. Will you be able to provide a patch or it’s already there then can you please point down there? Thanks and Regards, Chirag
Re: Need Help - Vulnerability Details
i think it's already release 6.0.33 now. your version 6.0.26 is quite outdated. please upgrade to the latest one. http://tomcat.apache.org/download-60.cgi --- daniel baktiar On Wed, Aug 24, 2011 at 12:39 AM, Chirag Suthar cbsut...@gmail.com wrote: Hi, We are using *Tomcat 6.0.26* with* Windows Server 2008 R2 Enterprise *as Operating system. We performed security scan on environment and observed Apache Tomcat NIO Connector Denial of Service. Here we go with the detail description and observation:* * * * *Description:* A denial of se*r*vice vulnerability is present in some versions of Apache Tomcat. * * *Observation:* A denial of service vulnerability is present in some versions of Apache Tomcat. The vulnerability is caused by an error in the NIO connector when processing a request line. By sending a specially-crafted request. Remote attackers could exploit the vulnerability to cause an OutOfMemory error and crash the server. Will you be able to provide a patch or it’s already there then can you please point down there? Thanks and Regards, Chirag
Re: Need Help - Vulnerability Details
- Original Message - From: Chirag Suthar cbsut...@gmail.com To: users@tomcat.apache.org Cc: Sent: Tuesday, August 23, 2011 9:39 AM Subject: Need Help - Vulnerability Details Hi, We are using *Tomcat 6.0.26* with* Windows Server 2008 R2 Enterprise *as Operating system. We performed security scan on environment and observed Apache Tomcat NIO Connector Denial of Service. Here we go with the detail description and observation:* * * * *Description:* A denial of se*r*vice vulnerability is present in some versions of Apache Tomcat. * * *Observation:* A denial of service vulnerability is present in some versions of Apache Tomcat. The vulnerability is caused by an error in the NIO connector when processing a request line. By sending a specially-crafted request. Remote attackers could exploit the vulnerability to cause an OutOfMemory error and crash the server. Will you be able to provide a patch or it’s already there then can you please point down there? Thanks and Regards, Chirag Read the following: http://tomcat.apache.org/security-6.html In particular: Important: Remote Denial Of Service CVE-2011-0534 This was fixed in 6.0.32. The current version 6.0.33. . . . . just my two cents. /mde/ - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Need help debugging JSP compilation failure
I install a fresh copy of the latest Tomcat (7.0.16), and deploy my WAR by
copying it into Tomcat's webapps/. Then I startup Tomcat and direct my
browser to my web app's welcome page --- which is a JSP. The compilation
of the JSP fails but with very little information. All I get is the line
number of the JSP where something went wrong; I get that in Tomcat's
logs/localhost.{date}.log. How can I get more information about what is
going wrong?
I am running Tomcat on MacOS 10.6.8 on my MacBook Pro (Intel), with
$ java -version
java version 1.6.0_26
Java(TM) SE Runtime Environment (build 1.6.0_26-b03-384-10M3425)
Java HotSpot(TM) 64-Bit Server VM (build 20.1-b02-384, mixed mode)
Thanks,
Mike Spreitzer
Re: Need help debugging JSP compilation failure
On 06/07/2011 21:54, Mike Spreitzer wrote:
I install a fresh copy of the latest Tomcat (7.0.16), and deploy my WAR by
copying it into Tomcat's webapps/. Then I startup Tomcat and direct my
browser to my web app's welcome page --- which is a JSP. The compilation
of the JSP fails but with very little information. All I get is the line
number of the JSP where something went wrong; I get that in Tomcat's
logs/localhost.{date}.log. How can I get more information about what is
going wrong?
What else do you get a line number and what?
Did you precompile the JSPs in the app?
If not, the work directory contains the .java file from the parsed JSP.
p
I am running Tomcat on MacOS 10.6.8 on my MacBook Pro (Intel), with
$ java -version
java version 1.6.0_26
Java(TM) SE Runtime Environment (build 1.6.0_26-b03-384-10M3425)
Java HotSpot(TM) 64-Bit Server VM (build 20.1-b02-384, mixed mode)
Thanks,
Mike Spreitzer
signature.asc
Description: OpenPGP digital signature
Re: Need help debugging JSP compilation failure
I just got a pointer into my original JSP (not the Java version); see copy
below. I also looked in my $CATALINA_HOME/work, and found only
directories, no files (at any depth) --- see listing below. I did not
precompile my JSP.
Here is the complaint from logs/localhost.{date}.log:
Jul 6, 2011 3:49:36 PM org.apache.catalina.core.StandardWrapperValve
invoke
SEVERE: Servlet.service() for servlet [jsp] in context with path
[/rippledriver] threw exception [Unable to compile class for JSP:
An error occurred at line: 10 in the jsp file: /index.jsp
Unhandled exception type Exception
7: title.../title
8: /head
9: body
10: %!static Driver driver = new RealDriverImpl();%
11: %
12: String p;
13: if (null != (p = request.getParameter(runpause)))
Stacktrace:] with root cause
org.apache.jasper.JasperException: Unable to compile class for JSP:
An error occurred at line: 10 in the jsp file: /index.jsp
Unhandled exception type Exception
7: title.../title
8: /head
9: body
10: %!static Driver driver = new RealDriverImpl();%
11: %
12: String p;
13: if (null != (p = request.getParameter(runpause)))
Stacktrace:
at
org.apache.jasper.compiler.DefaultErrorHandler.javacError(DefaultErrorHandler.java:97)
at
org.apache.jasper.compiler.ErrorDispatcher.javacError(ErrorDispatcher.java:330)
at
org.apache.jasper.compiler.JDTCompiler.generateClass(JDTCompiler.java:457)
at org.apache.jasper.compiler.Compiler.compile(Compiler.java:374)
at org.apache.jasper.compiler.Compiler.compile(Compiler.java:352)
at org.apache.jasper.compiler.Compiler.compile(Compiler.java:339)
at
org.apache.jasper.JspCompilationContext.compile(JspCompilationContext.java:601)
at
org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:344)
at
org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:389)
at
org.apache.jasper.servlet.JspServlet.service(JspServlet.java:333)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:722)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:304)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:240)
at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:164)
at
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:462)
at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:164)
at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:100)
at
org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:563)
at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118)
at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:403)
at
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:301)
at
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:162)
at
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:140)
at
org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:309)
at
java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:886)
at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:908)
at java.lang.Thread.run(Thread.java:680)
Here is my futile search for something in work/ (dates don't all match
because I shutdown before sending my original complaint, then started up
again and reproduced the problem to see if that would give me something to
look at; Tomcat is running right now):
$ find work -exec ls -ld \{\} \;
drwxr-xr-x 3 mspreitz staff 102 Jul 6 15:31 work
drwxr-xr-x 3 mspreitz staff 102 Jul 6 15:31 work/Catalina
drwxr-xr-x 8 mspreitz staff 272 Jul 6 17:53 work/Catalina/localhost
drwxr-xr-x 2 mspreitz staff 68 Jul 6 17:53 work/Catalina/localhost/_
drwxr-xr-x 2 mspreitz staff 68 Jul 6 17:53
work/Catalina/localhost/docs
drwxr-xr-x 2 mspreitz staff 68 Jul 6 17:53
work/Catalina/localhost/examples
drwxr-xr-x 2 mspreitz staff 68 Jul 6 17:53
work/Catalina/localhost/host-manager
drwxr-xr-x 2 mspreitz staff 68 Jul 6 17:53
work/Catalina/localhost/manager
drwxr-xr-x 2 mspreitz staff 68 Jul 6 17:53
work/Catalina/localhost/rippledriver
Thanks,
Mike Spreitzer
From: Pid p...@pidster.com
To: Tomcat Users List users@tomcat.apache.org
Date: 07/06/2011 05:14 PM
Subject:Re: Need help debugging JSP compilation failure
On 06/07/2011 21:54, Mike Spreitzer wrote:
I install a fresh copy of the latest Tomcat (7.0.16), and deploy my WAR
by
copying it into Tomcat's webapps/. Then I startup Tomcat and direct my
browser
Re: Need help debugging JSP compilation failure
On 06/07/2011 22:59, Mike Spreitzer wrote:
I just got a pointer into my original JSP (not the Java version); see copy
below. I also looked in my $CATALINA_HOME/work, and found only
directories, no files (at any depth) --- see listing below. I did not
precompile my JSP.
Here is the complaint from logs/localhost.{date}.log:
Jul 6, 2011 3:49:36 PM org.apache.catalina.core.StandardWrapperValve
invoke
SEVERE: Servlet.service() for servlet [jsp] in context with path
[/rippledriver] threw exception [Unable to compile class for JSP:
An error occurred at line: 10 in the jsp file: /index.jsp
Unhandled exception type Exception
What more information could you possibly want to debug this? The error
is Unhandled exception type Exception at line 10 in your JSP.
10: %!static Driver driver = new RealDriverImpl();%
And the method signature for the default constructor for RealDriverImpl
is what? My money is on:
public RealDriverImpl() throws Exception
and that is an unhandled exception which is not valid Java.
Mark
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Need help debugging JSP compilation failure
Oh, I see, it was a level confusion. I thought I was being told about an Exception in the compilation process rather than in my source. Thanks, Mike Spreitzer
Need help deploying web-service to EC2 with Tomcat7
Hi Everyone, I have a web-service that I've developed using Tomcat7/MySQL5 using NetBeans 7. In the IDE it all works fine. For testing however, I need to get it onto an EC2 instance so users other than me can access it. I have created an EC2 micro-instance, installed Tomcat 7 and MySQL 5 (the same versions as on my dev env) and deployed my .war file. The deployment succeeds at least partially because I can get to the simple static Hello World index jsp page and because it tries to access my database user (which I then created). I don't see any errors in the log and I've gone back-and-forth trying all sorts of desperate things to try and get this working. I'm sure there must be a simple solution but I just don't know what it is. Any ideas? Thanks in advance, Terry
Re: Need help deploying web-service to EC2 with Tomcat7
On 14/06/2011 08:03, Lisa and Terence Davis wrote: Hi Everyone, I have a web-service that I've developed using Tomcat7/MySQL5 using NetBeans 7. In the IDE it all works fine. For testing however, I need to get it onto an EC2 instance so users other than me can access it. I have created an EC2 micro-instance, installed Tomcat 7 and MySQL 5 (the same versions as on my dev env) and deployed my .war file. The deployment succeeds at least partially because I can get to the simple static Hello World index jsp page and because it tries to access my database user (which I then created). I don't see any errors in the log and I've gone back-and-forth trying all sorts of desperate things to try and get this working. I'm sure there must be a simple solution but I just don't know what it is. What do the logs say? p signature.asc Description: OpenPGP digital signature
Re: Need help deploying web-service to EC2 with Tomcat7
On Tue, Jun 14, 2011 at 12:03 AM, Lisa and Terence Davis lisn...@verizon.net wrote: OT: Dear Lisa and Terence -- It's 2011, and while togetherness is wonderful, it's hard to take someone seriously who can't figure out how to get at least their own free gmail account :-) I have a web-service that I've developed using Tomcat7/MySQL5 using NetBeans 7. In the IDE it all works fine. Great. How's it work when you run it locally *without* the IDE? -- Hassan Schroeder hassan.schroe...@gmail.com http://about.me/hassanschroeder twitter: @hassan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Need Help to configure Apache Tomcat with mod_jk.so
Hi I have configured Apache and Tomcat with SSL. I want to Integrate both using mod_jk.so, for that i have followed all the instruction but when i start Apache i got the message - The requested operation has failed. My httpd.conf file is IfModule !mod_jk.c LoadModulejk_module modules/mod_jk.so /IfModule JkWorkersFile C:/Program Files/Apache Software Foundation/Apache2.2/conf/jk/workers.properties JkLogFile C:/Program Files/Apache Software Foundation/Apache2.2/logs/jk.log JkLogLevel info JkLogStampFormat “[%a %b %d %H:%M:%S %Y]“ JkOptions +ForwardKeySize +ForwardURICompatUnparsed -ForwardDirectories JkRequestLogFormat “%w %V %T” JkMount /examples* worker1 # Should mod_jk send SSL information to Tomcat (default is On) JkExtractSSL On # What is the indicator for SSL (default is HTTPS) JkHTTPSIndicator HTTPS # What is the indicator for SSL session (default is SSL_SESSION_ID) JkSESSIONIndicator SSL_SESSION_ID # What is the indicator for client SSL cipher suit (default is SSL_CIPHER) JkCIPHERIndicator SSL_CIPHER # What is the indicator for the client SSL certificated (default is SSL_CLIENT_CERT) JkCERTSIndicator SSL_CLIENT_CERT My workers.properties file is workers.tomcat_home=C:/Program Files/Apache Software Foundation/Tomcat 6.0 workers.java_home=C:/Program Files/Java/jdk1.6.0_13 ps=/ # Define worker 'worker1' worker.list=worker1 # Set properties for worker 'example' (ajp13) worker.default.type=ajp13 worker.default.host=localhost worker.default.port=8009 worker.default.cachesize=10 worker.default.cache_timeout=600 worker.default.socket_keepalive=1 worker.default.recycle_timeout=300 worker.default.lbfactor=1 I have also changed Tomcat server.xml file Connector port=8009 protocol=AJP/1.3 redirectPort=8443 enableLookups=false request.tomcatAuthentication=false address=127.0.0.2 scheme=https secure=true/ Listener className=org.apache.jk.config.ApacheConfig workersConfig=C:/Program Files/Apache Software Foundation/Apache2.2/conf/jk/workers.properties mod_Jk =C:/Program Files/Apache Software Foundation/Apache2.2/modules/mod_jk.so jkLog=C:/Program Files/Apache Software Foundation/Apache2.2/logs/jk.log jkDebug=info noRoot=false/ both in Server tag and in Engine tag. and my httpd-ssl.conf file is SSLOptions +StdEnvVars +ExportCertData JkMount /examples* worker1 So please help me what is wrong with this. Thanks Jatinder
Re: Need Help to configure Apache Tomcat with mod_jk.so
On May 10, 2011, at 9:28 AM, jatinder singh wrote: Hi I have configured Apache and Tomcat with SSL. I want to Integrate both using mod_jk.so, for that i have followed all the instruction but when i start Apache i got the message - The requested operation has failed. My httpd.conf file is IfModule !mod_jk.c LoadModulejk_module modules/mod_jk.so /IfModule JkWorkersFile C:/Program Files/Apache Software Foundation/Apache2.2/conf/jk/workers.properties You need quotes above and below. JkLogFile C:/Program Files/Apache Software Foundation/Apache2.2/logs/jk.log JkLogLevel info JkLogStampFormat “[%a %b %d %H:%M:%S %Y]“ JkOptions +ForwardKeySize +ForwardURICompatUnparsed -ForwardDirectories JkRequestLogFormat “%w %V %T” JkMount /examples* worker1 # Should mod_jk send SSL information to Tomcat (default is On) JkExtractSSL On # What is the indicator for SSL (default is HTTPS) JkHTTPSIndicator HTTPS # What is the indicator for SSL session (default is SSL_SESSION_ID) JkSESSIONIndicator SSL_SESSION_ID # What is the indicator for client SSL cipher suit (default is SSL_CIPHER) JkCIPHERIndicator SSL_CIPHER # What is the indicator for the client SSL certificated (default is SSL_CLIENT_CERT) JkCERTSIndicator SSL_CLIENT_CERT My workers.properties file is workers.tomcat_home=C:/Program Files/Apache Software Foundation/Tomcat 6.0 workers.java_home=C:/Program Files/Java/jdk1.6.0_13 ps=/ # Define worker 'worker1' worker.list=worker1 # Set properties for worker 'example' (ajp13) worker.default.type=ajp13 worker.default.host=localhost worker.default.port=8009 worker.default.cachesize=10 worker.default.cache_timeout=600 worker.default.socket_keepalive=1 worker.default.recycle_timeout=300 worker.default.lbfactor=1 I have also changed Tomcat server.xml file Connector port=8009 protocol=AJP/1.3 redirectPort=8443 enableLookups=false request.tomcatAuthentication=false address=127.0.0.2 scheme=https secure=true/ Listener className=org.apache.jk.config.ApacheConfig workersConfig=C:/Program Files/Apache Software Foundation/Apache2.2/conf/jk/workers.properties mod_Jk =C:/Program Files/Apache Software Foundation/Apache2.2/modules/mod_jk.so jkLog=C:/Program Files/Apache Software Foundation/Apache2.2/logs/jk.log jkDebug=info noRoot=false/ both in Server tag and in Engine tag. and my httpd-ssl.conf file is SSLOptions +StdEnvVars +ExportCertData JkMount /examples* worker1 So please help me what is wrong with this. Thanks Jatinder - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Need Help to configure Apache Tomcat with mod_jk.so
No sir its still not working. Apache gives me same error. Anything you want me to change in any file. Thanks Jatinder On Tue, May 10, 2011 at 9:02 PM, János Löbb janos.l...@yale.edu wrote: On May 10, 2011, at 9:28 AM, jatinder singh wrote: Hi I have configured Apache and Tomcat with SSL. I want to Integrate both using mod_jk.so, for that i have followed all the instruction but when i start Apache i got the message - The requested operation has failed. My httpd.conf file is IfModule !mod_jk.c LoadModulejk_module modules/mod_jk.so /IfModule JkWorkersFile C:/Program Files/Apache Software Foundation/Apache2.2/conf/jk/workers.properties You need quotes above and below. JkLogFile C:/Program Files/Apache Software Foundation/Apache2.2/logs/jk.log JkLogLevel info JkLogStampFormat “[%a %b %d %H:%M:%S %Y]“ JkOptions +ForwardKeySize +ForwardURICompatUnparsed -ForwardDirectories JkRequestLogFormat “%w %V %T” JkMount /examples* worker1 # Should mod_jk send SSL information to Tomcat (default is On) JkExtractSSL On # What is the indicator for SSL (default is HTTPS) JkHTTPSIndicator HTTPS # What is the indicator for SSL session (default is SSL_SESSION_ID) JkSESSIONIndicator SSL_SESSION_ID # What is the indicator for client SSL cipher suit (default is SSL_CIPHER) JkCIPHERIndicator SSL_CIPHER # What is the indicator for the client SSL certificated (default is SSL_CLIENT_CERT) JkCERTSIndicator SSL_CLIENT_CERT My workers.properties file is workers.tomcat_home=C:/Program Files/Apache Software Foundation/Tomcat 6.0 workers.java_home=C:/Program Files/Java/jdk1.6.0_13 ps=/ # Define worker 'worker1' worker.list=worker1 # Set properties for worker 'example' (ajp13) worker.default.type=ajp13 worker.default.host=localhost worker.default.port=8009 worker.default.cachesize=10 worker.default.cache_timeout=600 worker.default.socket_keepalive=1 worker.default.recycle_timeout=300 worker.default.lbfactor=1 I have also changed Tomcat server.xml file Connector port=8009 protocol=AJP/1.3 redirectPort=8443 enableLookups=false request.tomcatAuthentication=false address=127.0.0.2 scheme=https secure=true/ Listener className=org.apache.jk.config.ApacheConfig workersConfig=C:/Program Files/Apache Software Foundation/Apache2.2/conf/jk/workers.properties mod_Jk =C:/Program Files/Apache Software Foundation/Apache2.2/modules/mod_jk.so jkLog=C:/Program Files/Apache Software Foundation/Apache2.2/logs/jk.log jkDebug=info noRoot=false/ both in Server tag and in Engine tag. and my httpd-ssl.conf file is SSLOptions +StdEnvVars +ExportCertData JkMount /examples* worker1 So please help me what is wrong with this. Thanks Jatinder - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Need Help to configure Apache Tomcat with mod_jk.so
On 10/05/2011 16:52, jatinder singh wrote: No sir its still not working. Apache gives me same error. Anything you want me to change in any file. Have you looked in the error log? Mark - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Need Help to configure Apache Tomcat with mod_jk.so
error.log shows [Tue May 10 21:11:00 2011] [warn] RSA server certificate CommonName (CN) ` www.abc.com' does NOT match server name!? [Tue May 10 21:11:00 2011] [warn] pid file C:/Program Files/Apache Software Foundation/Apache2.2/logs/httpd.pid overwritten -- Unclean shutdown of previous Apache run? [Tue May 10 21:11:00 2011] [warn] RSA server certificate CommonName (CN) ` www.abc.com' does NOT match server name!? [Tue May 10 21:11:00 2011] [notice] Apache/2.2.17 (Win32) mod_ssl/2.2.17 OpenSSL/0.9.8o configured -- resuming normal operations [Tue May 10 21:11:00 2011] [notice] Server built: Oct 18 2010 01:58:12 [Tue May 10 21:11:00 2011] [notice] Parent: Created child process 2420 [Tue May 10 21:11:00 2011] [warn] RSA server certificate CommonName (CN) ` www.abc.com' does NOT match server name!? [Tue May 10 21:11:00 2011] [warn] RSA server certificate CommonName (CN) ` www.abc.com' does NOT match server name!? [Tue May 10 21:11:00 2011] [notice] Child 2420: Child process is running [Tue May 10 21:11:00 2011] [notice] Child 2420: Acquired the start mutex. [Tue May 10 21:11:00 2011] [notice] Child 2420: Starting 64 worker threads. [Tue May 10 21:11:00 2011] [notice] Child 2420: Starting thread to listen on port 1443. [Tue May 10 21:11:02 2011] [notice] Parent: Received shutdown signal -- Shutting down the server. [Tue May 10 21:11:02 2011] [notice] Child 2420: Exit event signaled. Child process is ending. [Tue May 10 21:11:03 2011] [notice] Child 2420: Released the start mutex [Tue May 10 21:11:04 2011] [notice] Child 2420: All worker threads have exited. [Tue May 10 21:11:04 2011] [notice] Child 2420: Child process is exiting [Tue May 10 21:11:04 2011] [notice] Parent: Child process exited successfully. On Tue, May 10, 2011 at 9:32 PM, Mark Thomas ma...@apache.org wrote: On 10/05/2011 16:52, jatinder singh wrote: No sir its still not working. Apache gives me same error. Anything you want me to change in any file. Have you looked in the error log? Mark - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Need Help to configure Apache Tomcat with mod_jk.so
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 jatinder, On 5/10/2011 9:28 AM, jatinder singh wrote: # Should mod_jk send SSL information to Tomcat (default is On) JkExtractSSL On # What is the indicator for SSL (default is HTTPS) JkHTTPSIndicator HTTPS # What is the indicator for SSL session (default is SSL_SESSION_ID) JkSESSIONIndicator SSL_SESSION_ID # What is the indicator for client SSL cipher suit (default is SSL_CIPHER) JkCIPHERIndicator SSL_CIPHER # What is the indicator for the client SSL certificated (default is SSL_CLIENT_CERT) JkCERTSIndicator SSL_CLIENT_CERT Why have you repeated all default values, here? Just wondering... My workers.properties file is workers.tomcat_home=C:/Program Files/Apache Software Foundation/Tomcat 6.0 workers.java_home=C:/Program Files/Java/jdk1.6.0_13 ps=/ The above settings are useless, assuming you're using a version of mod_jk after about 2002. # Define worker 'worker1' worker.list=worker1 # Set properties for worker 'example' (ajp13) worker.default.type=ajp13 worker.default.host=localhost worker.default.port=8009 worker.default.cachesize=10 worker.default.cache_timeout=600 worker.default.socket_keepalive=1 worker.default.recycle_timeout=300 worker.default.lbfactor=1 All that looks okay, though you don't need an 'lbfactor' for a non-clustered worker. I have also changed Tomcat server.xml file Connector port=8009 protocol=AJP/1.3 redirectPort=8443 enableLookups=false request.tomcatAuthentication=false Why do you have request.tomcatAuthentication here? What version of Tomcat are you running? Listener className=org.apache.jk.config.ApacheConfig workersConfig=C:/Program Files/Apache Software Foundation/Apache2.2/conf/jk/workers.properties mod_Jk =C:/Program Files/Apache Software Foundation/Apache2.2/modules/mod_jk.so jkLog=C:/Program Files/Apache Software Foundation/Apache2.2/logs/jk.log jkDebug=info noRoot=false/ Don't use the ApacheConfig listener, really for any reason. Once you have your workers.properties file, it's entirely unnecessary and is more likely to destroy your configuration than anything else. both in Server tag and in Engine tag. Both of what? Connector and Listener? Connector should only be at the Service level and should never be repeated. My guess is that you have a Tomcat startup error, but you only posted the httpd log file. - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk3JnPgACgkQ9CaO5/Lv0PB0HQCfbQuJFrOzjce5v+LIJ1xuBJXE DfQAoJXkHjevrx1pBcoW2HZySnmQ9HBf =jwZG -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Need help with SSL Certificate install on Tomcat 6.0.29 APR.
Don't know what is happening but I keep getting NDR's for my reply's to this
group.
So in case it didn't get through:
Crypto.Sal thank you so much. It
works!! Openssl was so much simpler than the
jdk keytool.
I just wanted to share some quirks I ran into when installing the SSL on APR
tomcat.
Here are the commands I ran on openssl
Step 1 create a 2048 key without a password.
openssl genrsa -out domainname.key 2048
Step 2 create a CSR to send to the ssl vendor.
openssl req -new -key domainname.key -out domainname.csr
When answering questions Common Name must be the hostname for the ssl
certificate.
The rest of the questions are straightforward.
Send the CSR to the ssl vendor and they will send back the ssl certificate.
Copy the .key and .crt file to the root of tomcat folder.
Change the server.xml to point to the two files.
SSLCertificateFile=${catalina.home}/SSLCERT.crt
SSLCertificateKeyFile=${catalina.home}/SSLKEY.key
And it worked right off the bat.
I found out that even though it is Working it is not correctly installed
until I download an Intermediate CA certificate file and add this line to
server.xml.
SSLCACertificateFile=${catalina.home}/sslchain.crt /
One quirk I ran into was that Firefox 4 aggressively caches even SSL
certificates. So even though the site was encrypted using the new ssl
certificate Firefox 4 showed the OLD ssl certificate's information
including the expiration date. I had to fire up IE 8 to view the new ssl
certificate.
Need help with SSL Certificate install on Tomcat 6.0.29 APR.
Hi. We are a school running Tomcat 6.0.29 for Windows server 2003 with APR. I
currently have an SSL certificate installed. I'm trying to update it with the
renewed SSL certificate but I'm having no luck.
Here are the commands I used to create the CSR.
in the jdk1.6.0_17\bin folder i used this command:
keytool -certreq -keyalg RSA -alias alias2011 -file cert.csr -keystore
key2011.key -keysize 2048
It then asks for a password which i enter.
I generated the CSR and sent it to my SSL vendor. They e-mailed my ssl
certificate back to me.
But they told me that I had to install 2 intermediate Certificate files.
I dowloaded a primary.crt and secondary.crt files from them.
I then ran this command to import the primary.crt
keytool -import -trustcacerts -alias primary -keystore key2011.key -file
primary.crt
Then the secondary.crt
keytool -import -trustcacerts -alias secondary -keystore key2011.key -file
secondary.crt
finally the SSL certificate they e-mailed back.
keytool -import -trustcacerts -alias alias2011 -keystore key2011.key -file
2011.crt
After this I copy the key2011.key and 2011.crt to the root of tomcat.
I edited server.xml to this:
Connector port=8443 maxHttpHeaderSize=8192
maxThreads=150 minSpareThreads=25 maxSpareThreads=75
enableLookups=false disableUploadTimeout=true
acceptCount=100 scheme=https secure=true
SSLEnabled=true
SSLCertificateFile=${catalina.home}/2011.crt
SSLCertificateKeyFile=${catalina.home}/key2011.key
keystorePass=somethingkey
keyalias=alias2011
SSLPassword=somethingkey/
I didn't know the difference between SSLPassword and keystorePass so I put both
in there.
I never put a password for my previous ssl certificate and it worked so I'm
confused why I have to put one in now.
BTW here is the current server.xml that works with the about to expire SSL
certificate.
Connector port=8443 maxHttpHeaderSize=8192
maxThreads=150 minSpareThreads=25 maxSpareThreads=75
enableLookups=false disableUploadTimeout=true
acceptCount=100 scheme=https secure=true
SSLEnabled=true
SSLCertificateFile=${catalina.home}/hostname.crt
SSLCertificateKeyFile=${catalina.home}/hostname.key /
Please help. Thanks in advance.
Re: Need help with SSL Certificate install on Tomcat 6.0.29 APR.
So why did you enter password when you created the csr if you dont want it?
On Apr 20, 2011 7:54 AM, Jin H h_j...@hotmail.com wrote:
Hi. We are a school running Tomcat 6.0.29 for Windows server 2003 with APR.
I currently have an SSL certificate installed. I'm trying to update it
with the renewed SSL certificate but I'm having no luck.
Here are the commands I used to create the CSR.
in the jdk1.6.0_17\bin folder i used this command:
keytool -certreq -keyalg RSA -alias alias2011 -file cert.csr -keystore
key2011.key -keysize 2048
It then asks for a password which i enter.
I generated the CSR and sent it to my SSL vendor. They e-mailed my ssl
certificate back to me.
But they told me that I had to install 2 intermediate Certificate files.
I dowloaded a primary.crt and secondary.crt files from them.
I then ran this command to import the primary.crt
keytool -import -trustcacerts -alias primary -keystore key2011.key -file
primary.crt
Then the secondary.crt
keytool -import -trustcacerts -alias secondary -keystore key2011.key -file
secondary.crt
finally the SSL certificate they e-mailed back.
keytool -import -trustcacerts -alias alias2011 -keystore key2011.key -file
2011.crt
After this I copy the key2011.key and 2011.crt to the root of tomcat.
I edited server.xml to this:
Connector port=8443 maxHttpHeaderSize=8192
maxThreads=150 minSpareThreads=25 maxSpareThreads=75
enableLookups=false disableUploadTimeout=true
acceptCount=100 scheme=https secure=true
SSLEnabled=true
SSLCertificateFile=${catalina.home}/2011.crt
SSLCertificateKeyFile=${catalina.home}/key2011.key
keystorePass=somethingkey
keyalias=alias2011
SSLPassword=somethingkey/
I didn't know the difference between SSLPassword and keystorePass so I put
both in there.
I never put a password for my previous ssl certificate and it worked so I'm
confused why I have to put one in now.
BTW here is the current server.xml that works with the about to expire SSL
certificate.
Connector port=8443 maxHttpHeaderSize=8192
maxThreads=150 minSpareThreads=25 maxSpareThreads=75
enableLookups=false disableUploadTimeout=true
acceptCount=100 scheme=https secure=true
SSLEnabled=true
SSLCertificateFile=${catalina.home}/hostname.crt
SSLCertificateKeyFile=${catalina.home}/hostname.key /
Please help. Thanks in advance.
Re: Need help with SSL Certificate install on Tomcat 6.0.29 APR.
Hi Jin,
In my experiences with the APR and Tomcat, you need to use 'OpenSSL' to
generate the keypair (CSR/key) I am fairly certain the APR can't read
Java Keystore files. You would only use a keystore (JKS) using 'keytool'
with JSSE.
I think you have at least 2 options at this point:
1. Generate new key pair with OpenSSL using the 'req' utility.
2. Export new keystore that was created with 'keytool' to a PKCS12 file
and then use openSSL to create PEM key, certificate and Certificate
authority files.
I would suggest you do #1 vs. that of #2, unless #2 cause you extra
money or you don't mind doing a little 'work'. :-P
--Crypto.Sal
On 04/19/2011 05:54 PM, Jin H wrote:
Hi. We are a school running Tomcat 6.0.29 for Windows server 2003 with APR. I
currently have an SSL certificate installed. I'm trying to update it with the
renewed SSL certificate but I'm having no luck.
Here are the commands I used to create the CSR.
in the jdk1.6.0_17\bin folder i used this command:
keytool -certreq -keyalg RSA -alias alias2011 -file cert.csr -keystore
key2011.key -keysize 2048
It then asks for a password which i enter.
I generated the CSR and sent it to my SSL vendor. They e-mailed my ssl
certificate back to me.
But they told me that I had to install 2 intermediate Certificate files.
I dowloaded a primary.crt and secondary.crt files from them.
I then ran this command to import the primary.crt
keytool -import -trustcacerts -alias primary -keystore key2011.key -file
primary.crt
Then the secondary.crt
keytool -import -trustcacerts -alias secondary -keystore key2011.key -file
secondary.crt
finally the SSL certificate they e-mailed back.
keytool -import -trustcacerts -alias alias2011 -keystore key2011.key -file
2011.crt
After this I copy the key2011.key and 2011.crt to the root of tomcat.
I edited server.xml to this:
Connector port=8443 maxHttpHeaderSize=8192
maxThreads=150 minSpareThreads=25 maxSpareThreads=75
enableLookups=false disableUploadTimeout=true
acceptCount=100 scheme=https secure=true
SSLEnabled=true
SSLCertificateFile=${catalina.home}/2011.crt
SSLCertificateKeyFile=${catalina.home}/key2011.key
keystorePass=somethingkey
keyalias=alias2011
SSLPassword=somethingkey/
I didn't know the difference between SSLPassword and keystorePass so I put both
in there.
I never put a password for my previous ssl certificate and it worked so I'm
confused why I have to put one in now.
BTW here is the current server.xml that works with the about to expire SSL
certificate.
Connector port=8443 maxHttpHeaderSize=8192
maxThreads=150 minSpareThreads=25 maxSpareThreads=75
enableLookups=false disableUploadTimeout=true
acceptCount=100 scheme=https secure=true
SSLEnabled=true
SSLCertificateFile=${catalina.home}/hostname.crt
SSLCertificateKeyFile=${catalina.home}/hostname.key /
Please help. Thanks in advance.
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
need help with isapi and ntdll problem for windows 2008 R2/tomcat 6
Hello, We are running Tomcat 6.0.26 on Windows Server 2008 R2 Enterprise 64 Bit using IIS and isapi redirector version 1.2.30 (just upgraded to 1.2.31). The 6 months or so we have been using Tomcat have been plagued with intermittent periods crashes and instability. Specifically, tomcat requests are resulting in crashes and the application log shows numerous (over 1200) instances of error 1000: Faulting application name: w3wp.exe, version: 7.5.7600.16385, time stamp: 0x4a5bd0eb Faulting module name: ntdll.dll, version: 6.1.7600.16385, time stamp: 0x4a5be02b Exception code: 0xc005 Fault offset: 0x0004d174 Faulting process id: 0x1254 Faulting application start time: 0x01cbc19aceedc9cd Faulting application path: c:\windows\system32\inetsrv\w3wp.exe Faulting module path: C:\Windows\SYSTEM32\ntdll.dll Report Id: 0d413cc2-2d8e-11e0-92d0-005056340288 We installed debug diag on the machine and opened a case with Microsoft since it seemed like it was a MS problem. After opening a case and sending MS several dump files for analysis we were told: We are failing during a call into isapi_redirect64. It appears to be passing a bad value for a critical section to NTDLL (0x`0003) which in turn is causing the Access Violation to occur. Here is the complete email response from MS with some of the data from the dumps: All of the dumps show the same issue: Child-SP RetAddr Call Site `019bd040 `7734d0a2 ntdll!RtlpWaitOnCriticalSection+0xb4 `019bd0f0 `6a6d1c41 ntdll!RtlEnterCriticalSection+0xab `019bd120 `6a6bd40c isapi_redirect64!jk_md5+0x1c1 `019bd150 `6a6ebbb7 isapi_redirect64!ajp_service+0xb4c `019bd1e0 `6a6c679a isapi_redirect64!uri_worker_map_open+0x2c7 `019bd240 07fe`f31bc540 isapi_redirect64!read_registry_init_data+0x89a `019be520 07fe`f31c4007 isapi!ProcessIsapiRequest+0x13c `019be580 07fe`f31bb421 isapi!W3_ISAPI_HANDLER::DoWork+0x4fb `019be690 07fe`f31bb964 isapi!RequestDoWork+0x40d `019be720 07fe`f3db2fa7 isapi!CIISHttpModule::OnExecuteRequestHandler+0x1c `019be760 07fe`f3db464e iiscore!NOTIFICATION_CONTEXT::RequestDoWork+0x233 `019be7a0 07fe`f3db4465 iiscore!NOTIFICATION_CONTEXT::CallModulesInternal+0x17f `019be890 07fe`f3db5e56 iiscore!NOTIFICATION_CONTEXT::CallModules+0x25 `019be8e0 07fe`f3de51bd iiscore!W3_CONTEXT::DoWork+0x3a6 `019bec00 07fe`f3de55df iiscore!W3_MAIN_CONTEXT::StartNotificationLoop+0x5d `019bec30 07fe`f319551e iiscore!W3_CONTEXT::ExecuteRequest+0x2bf `019becb0 07fe`f3191060 filter!RequestDoWork+0x40be `019bf360 07fe`f3db6ac1 filter!CIISHttpModule::OnPostAuthenticateRequest+0x20 `019bf3a0 07fe`f3db464e iiscore!NOTIFICATION_CONTEXT::RequestDoWork+0x20a `019bf3e0 07fe`f3db4465 iiscore!NOTIFICATION_CONTEXT::CallModulesInternal+0x17f `019bf4d0 07fe`f3db593d iiscore!NOTIFICATION_CONTEXT::CallModules+0x25 `019bf520 07fe`f3db8ede iiscore!W3_CONTEXT::DoWork+0x326 `019bf840 07fe`f3da10d2 iiscore!W3_MAIN_CONTEXT::OnNewRequest+0x1ea `019bf870 07fe`f3da109c w3dt!UL_NATIVE_REQUEST::DoWork+0x126 `019bf8d0 07fe`f4581fba w3dt!OverlappedCompletionRoutine+0x1c `019bf900 07fe`f4582024 w3tp!THREAD_POOL_DATA::ThreadPoolThread+0x7a `019bf950 07fe`f45820a1 w3tp!THREAD_POOL_DATA::ThreadPoolThread+0x34 `019bf980 `770ff56d w3tp!THREAD_MANAGER::ThreadManagerThread+0x61 `019bf9b0 `77333281 kernel32!BaseThreadInitThunk+0xd `019bf9e0 ` ntdll!RtlUserThreadStart+0x1d We are failing during a call into isapi_redirect64. It appears to be passing a bad value for a critical section to NTDLL (0x`0003) which in turn is causing the Access Violation to occur. This is a TomCat redirector from the Apache Foundation: 0:004 lmvm isapi_redirect64 start end module name `6a6b `6a714000 isapi_redirect64 (export symbols) isapi_redirect64.dll Loaded symbol image file: isapi_redirect64.dll Image path: D:\isapiRedirect\isapi_redirect64.dll Image name: isapi_redirect64.dll Timestamp:Thu Sep 09 18:04:53 2010 (4C895A05) CheckSum: 00062701 ImageSize:00064000 File version: 1.2.30.0 Product version: 1.2.30.0 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type:1.0 App File date:. Translations: 0409.04b0 CompanyName: Apache Software Foundation ProductName: Apache Tomcat Connectors project InternalName: isapi_redirect-1.2.30 OriginalFilename: isapi_redirect-1.2.30.dll ProductVersion:
Need help in understanding tomcat thread dump
Hello Team, I have taken thread dump for tomcat. I have analyzed it using Thread dump analyzer. After reading thread dump i am unable to point which thread is exactly causing the issue. kindly guide me to read thread dumps. Following is the one of the thread from the thread dump output. TP-Processor50 daemon prio=5 tid=0x00449ea8 nid=0x56 waiting on condition [9427e000..9427fc30] at java.lang.Thread.sleep(Native Method) at com.ericsson.eai.b2b.MUXServlet.doPost(MUXServlet.java:506) at javax.servlet.http.HttpServlet.service(HttpServlet.java:709) at javax.servlet.http.HttpServlet.service(HttpServlet.java:802) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:252) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148) at org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:307) at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:385) at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:748) at org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:678) at org.apache.jk.common.SocketConnection.runIt(ChannelSocket.java:871) at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684) at java.lang.Thread.run(Thread.java:534)
Re: Need help in understanding tomcat thread dump
Op dinsdag, 11 januari 2011 12:11 schreef Amol Puglia amolcpug...@yahoo.com: Hello Team, I have taken thread dump for tomcat. I have analyzed it using Thread dump analyzer. After reading thread dump i am unable to point which thread is exactly causing the issue. kindly guide me to read thread dumps. Following is the one of the thread from the thread dump output. TP-Processor50 daemon prio=5 tid=0x00449ea8 nid=0x56 waiting on condition [9427e000..9427fc30] at java.lang.Thread.sleep(Native Method) at com.ericsson.eai.b2b.MUXServlet.doPost(MUXServlet.java:506) at javax.servlet.http.HttpServlet.service(HttpServlet.java:709) at javax.servlet.http.HttpServlet.service(HttpServlet.java:802) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:252) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148) at org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:307) at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:385) at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:748) at org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:678) at org.apache.jk.common.SocketConnection.runIt(ChannelSocket.java:871) at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684) at java.lang.Thread.run(Thread.java:534) What is the issue? (Was there another mail that I missed?) Ronald.
Re: Need help in understanding tomcat thread dump
Ronald Klop wrote: ... What is the issue? (Was there another mail that I missed?) Maybe. There is another thread from the same OP, entitled Apache Process going high even after restart of backend server tomcat, but I am still trying to figure out what the relationship is, and what is the problem. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Need help in understanding tomcat thread dump
Hello Ronald, The major issue is apache process is goinfg very high and not coming down. I would like to know what is causing for apache process to go high. Is it porblem in a backend tomcat server or it has to do something with apache itself.? I am using apache version :- 2.0.59 tomcat version :- 5.5.9 and connecting module as mod_jk. --- On Tue, 1/11/11, André Warnier a...@ice-sa.com wrote: From: André Warnier a...@ice-sa.com Subject: Re: Need help in understanding tomcat thread dump To: Tomcat Users List users@tomcat.apache.org Date: Tuesday, January 11, 2011, 5:31 PM Ronald Klop wrote: ... What is the issue? (Was there another mail that I missed?) Maybe. There is another thread from the same OP, entitled Apache Process going high even after restart of backend server tomcat, but I am still trying to figure out what the relationship is, and what is the problem. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Need help in understanding tomcat thread dump
Hello, On Tue, Jan 11, 2011 at 1:11 PM, Amol Puglia amolcpug...@yahoo.com wrote: Hello Ronald, The major issue is apache process is goinfg very high and not coming down. what exactly is going very high? Do you mean that the number of apache processes increases? If so could it be, that your (or whosever) MUXServlet is sleeping (SLEEPING?!) in its post method. As a result the apache worker process is bound to the sleeping tomcat processor (aka thread), andI assume that each following request to the same servlet will produce one more sleeping processor and one more sleeping worker, until there are no more workers or processors left, whatever comes first. But to answer it definitely, one would need to see the code of the MuxServlet (or the complete thread dump). regards Leon P.S. Side note, I can barely imagine any reasonable grounds for a servlet to call Thread.sleep in a doPost/doGet method. I would like to know what is causing for apache process to go high. Is it porblem in a backend tomcat server or it has to do something with apache itself.? I am using apache version :- 2.0.59 tomcat version :- 5.5.9 and connecting module as mod_jk. --- On Tue, 1/11/11, André Warnier a...@ice-sa.com wrote: From: André Warnier a...@ice-sa.com Subject: Re: Need help in understanding tomcat thread dump To: Tomcat Users List users@tomcat.apache.org Date: Tuesday, January 11, 2011, 5:31 PM Ronald Klop wrote: ... What is the issue? (Was there another mail that I missed?) Maybe. There is another thread from the same OP, entitled Apache Process going high even after restart of backend server tomcat, but I am still trying to figure out what the relationship is, and what is the problem. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Need help in understanding tomcat thread dump
All, may I suggest that we drop this thread, and concentrate on the other one Apache Process going high even after restart of backend server tomcat. They are apparently related to the same issue, and it is confusing to follow 2 separate threads. Leon Rosenberg wrote: Hello, On Tue, Jan 11, 2011 at 1:11 PM, Amol Puglia amolcpug...@yahoo.com wrote: Hello Ronald, The major issue is apache process is goinfg very high and not coming down. what exactly is going very high? Do you mean that the number of apache processes increases? If so could it be, that your (or whosever) MUXServlet is sleeping (SLEEPING?!) in its post method. As a result the apache worker process is bound to the sleeping tomcat processor (aka thread), andI assume that each following request to the same servlet will produce one more sleeping processor and one more sleeping worker, until there are no more workers or processors left, whatever comes first. But to answer it definitely, one would need to see the code of the MuxServlet (or the complete thread dump). regards Leon P.S. Side note, I can barely imagine any reasonable grounds for a servlet to call Thread.sleep in a doPost/doGet method. I would like to know what is causing for apache process to go high. Is it porblem in a backend tomcat server or it has to do something with apache itself.? I am using apache version :- 2.0.59 tomcat version :- 5.5.9 and connecting module as mod_jk. --- On Tue, 1/11/11, André Warnier a...@ice-sa.com wrote: From: André Warnier a...@ice-sa.com Subject: Re: Need help in understanding tomcat thread dump To: Tomcat Users List users@tomcat.apache.org Date: Tuesday, January 11, 2011, 5:31 PM Ronald Klop wrote: ... What is the issue? (Was there another mail that I missed?) Maybe. There is another thread from the same OP, entitled Apache Process going high even after restart of backend server tomcat, but I am still trying to figure out what the relationship is, and what is the problem. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Need help in understanding tomcat thread dump
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Amol,
On 1/11/2011 7:11 AM, Amol Puglia wrote:
The major issue is [Apache httpd] process is going very high and not
coming down.
If you mean that the CPU is experiencing high load, then the thread
below is unlikely to be the cause:
TP-Processor50 daemon prio=5 tid=0x00449ea8 nid=0x56 waiting on condition
[9427e000..9427fc30]
at java.lang.Thread.sleep(Native Method)
at com.ericsson.eai.b2b.MUXServlet.doPost(MUXServlet.java:506)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:709)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
Why? Because Thread.sleep doesn't use CPU time: it blocks waiting for a
signal from the CPU saying that it's time to wake up. It's still
possible this is the problem, if the Thread.sleep() call is in a loop
without much of a sleep, like this:
while(true) {
Thread.sleep(1);
}
That would peg your CPU.
Why not look at the code in com.ericsson.eai.b2b.MUXServlet.java at line
506 and see what's going on?
Is it porblem in a backend tomcat server or it has to do something
with apache itself.?
That depends on what the problem is :)
tomcat version :- 5.5.9
You need to upgrade, but that's not causing your CPU load.
You need to use a tool such as top to find out which process is using
all your CPU: once you determine if it's Tomcat (process will be java)
or Apache httpd (process will be apache2 or httpd depending on your
system).
- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEARECAAYFAk0si+kACgkQ9CaO5/Lv0PDCCACfV8kKhliVXvFqVqlf9pim5eyt
AT8An3TLL42Bi+Skh9jU62Vf377w2Iwf
=g8xx
-END PGP SIGNATURE-
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
Need Help configuring IIS 6.0/SSL/Tomcat 6.0.18
Hi, I am a Tomcat newbie and am seeking some help with configuring tomcat (6.0.18) to use SSL. We are running Windows 2003 (64 Bit) and IIS 6.0. Our webserver is secure (SSL) and requires Single Sign On when accessing from outside network using a PKI. I am trying to deploy a web application that must be accessed over 443 ONLY. I've read about creating a .keystore etc., but am not sure if I need to do this since we already have our Webserver configured. Any help would be greatly appreciated. Thanks, Jason. smime.p7s Description: S/MIME cryptographic signature
RE: Need Help configuring IIS 6.0/SSL/Tomcat 6.0.18
If the only reason you're using IIS is authentication, take a look at Waffle: http://waffle.codeplex.com. dB. @ dblock.orghttp://www.dblock.org/ Moscow|Geneva|Seattle|New York From: Hansel, Jason T CTR SPAWARSYSCEN-ATLANTIC, 55E00 [mailto:jason.t.hansel@navy.mil] Sent: Monday, August 02, 2010 3:08 PM To: users@tomcat.apache.org Subject: Need Help configuring IIS 6.0/SSL/Tomcat 6.0.18 Hi, I am a Tomcat newbie and am seeking some help with configuring tomcat (6.0.18) to use SSL. We are running Windows 2003 (64 Bit) and IIS 6.0. Our webserver is secure (SSL) and requires Single Sign On when accessing from outside network using a PKI. I am trying to deploy a web application that must be accessed over 443 ONLY. I've read about creating a .keystore etc., but am not sure if I need to do this since we already have our Webserver configured. Any help would be greatly appreciated. Thanks, Jason.
RE: need help setting up tomcat with ssl client authentication
I changed server.xml to: Connector port=443 protocol=HTTP/1.1 SSLEnabled=true maxThreads=150 scheme=https secure=true clientAuth=true keystoreFile=/server.ks keystorePass=MC126801$ keystoreType=JKS keyAlias=tomcat truststoreFile=/server.ks truststorePass=MC126801$ truststoreType=JKS sslProtocol=TLS / and now it works with all clients, firefox, openssl s_client, and php client thanks for you all your help, its much appreciated :) From: users-return-214184-racarlson=mediacomcc@tomcat.apache.org [users-return-214184-racarlson=mediacomcc@tomcat.apache.org] On Behalf Of Christopher Schultz [ch...@christopherschultz.net] Sent: Wednesday, June 30, 2010 9:40 PM To: Tomcat Users List Subject: Re: need help setting up tomcat with ssl client authentication -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ralph, On 6/30/2010 5:07 PM, Ralph Carlson wrote: (d) have client Authorization on - with it off tomcat ssl works just fine, when its turned on I get this error so far I have been following the steps listed in this tomcat user group message http://marc.info/?l=tomcat-userm=106293430225790w=2 Try something a bit more recent than 2003. I was able to get client certs working with my own CA, and I was manually checking the client cert instead of having Tomcat do it. However, if your code can do it, so can Tomcat. Try reading-through this thread: http://markmail.org/message/kzxsamuiu6bldjmv Connector port=443 protocol=HTTP/1.1 SSLEnabled=true maxThreads=150 scheme=https secure=true clientAuth=true keystoreFile=/server.ks keystorePass=[...] sslProtocol=TLS / I think you also need a truststoreFile and friends. Try re-reading the Connector documentation at http://tomcat.apache.org/tomcat-6.0-doc/config/http.html specifically looking for client cert. - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkwr8f0ACgkQ9CaO5/Lv0PDFxQCcDrMdAJbl0adm44Dgnyd6fWqV aPEAnjPNCOXwmU847G/7IvZuBU9hnK2A =mNS+ -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: need help setting up tomcat with ssl client authentication
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ralph, On 7/1/2010 9:28 AM, Ralph Carlson wrote: I changed server.xml to: Connector port=443 protocol=HTTP/1.1 SSLEnabled=true maxThreads=150 scheme=https secure=true clientAuth=true keystoreFile=/server.ks keystorePass=MC126801$ keystoreType=JKS keyAlias=tomcat truststoreFile=/server.ks truststorePass=MC126801$ truststoreType=JKS sslProtocol=TLS / and now it works with all clients, firefox, openssl s_client, and php client thanks for you all your help, its much appreciated :) Glad you got it working. I might separate the keystore from the truststore, just to give you greater flexibility. - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkwsnSwACgkQ9CaO5/Lv0PA7TgCeMiz/a7dBr/GJudFzWam2K+MG wj0An0l+M/7SNSYi2TOsDpcv+ljp251Z =XwZa -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
need help setting up tomcat with ssl client authentication
tomcat version 6.0.20 os: windows xp sp3 professional edition sun java jdk 1.5.11 I am trying to do the following (a) create a certificate authority and self sign server and client certificates using openssl and keytool (b) import the keytool keystore into tomcat (c) verify the certificate chaing using openssl verify (which does work and returns ok for all 3 certificates) (d) have client Authorization on - with it off tomcat ssl works just fine, when its turned on I get this error so far I have been following the steps listed in this tomcat user group message http://marc.info/?l=tomcat-userm=106293430225790w=2 but get this message from openssl s_client -cert c:\ssl\client\client.pem -CAfile c:\ssl\ca\ca.pem -connect localhost:443 3772:error:14094416:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate unknown:.\ssl\s3_pkt.c:1061:SSL alert number 46 3772:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:.\ssl\s23_lib.c:188: and these messages from firefox (after importing the certificate) initially 'sslv3 alert certificate unknown' , then just 'SSL peer was not expecting a handshake message it received' after a few tries does anyone know how to do this or has anyone done this before, thanks for you help in advance - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: need help setting up tomcat with ssl client authentication
On 30/06/2010 22:07, Ralph Carlson wrote: tomcat version 6.0.20 os: windows xp sp3 professional edition sun java jdk 1.5.11 I am trying to do the following (a) create a certificate authority and self sign server and client certificates using openssl and keytool (b) import the keytool keystore into tomcat (c) verify the certificate chaing using openssl verify (which does work and returns ok for all 3 certificates) (d) have client Authorization on - with it off tomcat ssl works just fine, when its turned on I get this error Which error? What is in the Tomcat logs when the problem occurs? so far I have been following the steps listed in this tomcat user group message http://marc.info/?l=tomcat-userm=106293430225790w=2 How did you configure Tomcat to use the certificates in (b)? What is your Tomcat Connector config in server.xml? p but get this message from openssl s_client -cert c:\ssl\client\client.pem -CAfile c:\ssl\ca\ca.pem -connect localhost:443 3772:error:14094416:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate unknown:.\ssl\s3_pkt.c:1061:SSL alert number 46 3772:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:.\ssl\s23_lib.c:188: and these messages from firefox (after importing the certificate) initially 'sslv3 alert certificate unknown' , then just 'SSL peer was not expecting a handshake message it received' after a few tries does anyone know how to do this or has anyone done this before, thanks for you help in advance - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org signature.asc Description: OpenPGP digital signature
RE: need help setting up tomcat with ssl client authentication
the tomcats logs have no errors in them, they end after start up (I haven't installed any apps yet, just trying to get to the tomcat manager with ssl) Connector port=443 protocol=HTTP/1.1 SSLEnabled=true maxThreads=150 scheme=https secure=true clientAuth=true keystoreFile=/server.ks keystorePass=MC126801$ sslProtocol=TLS / I configured the tomcat keystore as follows (openssl commands included): [1] create folders c:\ssl\ca, c:\ssl\server and c:\ssl\client and ca.srl with 02 [2] openssl req -new -newkey rsa:1024 -nodes -out c:\ssl\ca\ca.csr -keyout c:\ssl\ca\ca.key -config C:\ssl\openssl.cnf country=US state=newyork city=fishkill organization_name=myca organization_unit=myca common_name=myca email=racarl...@medaicomcc.com [3] openssl x509 -trustout -signkey c:\ssl\ca\ca.key -days 365 -req -in c:\ssl\ca\ca.csr -out c:\ssl\ca\ca.pem [4] keytool -import -keystore %JAVA_HOME%/jre/lib/security/cacerts -file C:\ssl\ca\ca.pem -alias my_ca **[5] keytool -genkey -alias tomcat -keyalg RSA -keysize 1024 -keystore C:\ssl\server\server.ks -storetype JKS What is your first and last name? myserver.localhost.com What is the name of your organizational unit? mycompany What is the name of your organization? mycompany What is the name of your City or Locality? fishkill What is the name of your State or Province? newyork What is the two-letter country code for this unit? US **[6] keytool -certreq -keyalg RSA -alias tomcat -file C:\ssl\server\server.csr -keystore C:\ssl\server\server.ks [7] amend the text which reads NEW CERTIFICATE REQUEST to CERTIFICATE REQUEST [8] openssl x509 -CA C:\ssl\ca\ca.pem -CAkey C:\ssl\ca\ca.key -CAserial C:\ssl\ca\ca.srl -req -in C:\ssl\server\server.csr -out C:\ssl\server\server.crt -days 365 **[9] keytool -import -alias tomcat -keystore C:\ssl\server\server.ks -trustcacerts -file C:\ssl\server\server.crt **[10] keytool -import -alias my_ca -keystore C:\ssl\server\server.ks -trustcacerts -file C:\ssl\ca\ca.pem [11] openssl req -new -newkey rsa:512 -nodes -out C:\ssl\client\client1.req -keyout C:\ssl\client\client1.key Country Name ? US State or Province Name ? newyork Locality Name (eg, city) ? fishkill Organization Name ? mycompany Organizational Unit Name ? mycompany Common Name (eg, YOUR name) ? localhost -- this value is in tomcat-users.xml Email Address ? racarl...@mediacomcc.com [12] openssl x509 -CA C:\ssl\ca\ca.pem -CAkey C:\ssl\ca\ca.key -CAserial C:\ssl\ca\ca.srl -req -in C:\ssl\client\client1.req -out C:\ssl\client\client1.pem -days 365 [13] openssl pkcs12 -export -clcerts -in C:\ssl\client\client1.pem -inkey C:\ssl\client\client1.key -out C:\ssl\client\client1.p12 -name my_client_certificate I also tried importing the client.pem and apache.pem from below into the keystore (not change in error) openssl pkcs12 -in c:\ssl\client\client1.p12 -out c:\ssl\client\apache.pem -nodes -passin pass:MC126801$ From: users-return-214164-racarlson=mediacomcc@tomcat.apache.org [users-return-214164-racarlson=mediacomcc@tomcat.apache.org] On Behalf Of Pid [...@pidster.com] Sent: Wednesday, June 30, 2010 5:25 PM To: Tomcat Users List Subject: Re: need help setting up tomcat with ssl client authentication On 30/06/2010 22:07, Ralph Carlson wrote: tomcat version 6.0.20 os: windows xp sp3 professional edition sun java jdk 1.5.11 I am trying to do the following (a) create a certificate authority and self sign server and client certificates using openssl and keytool (b) import the keytool keystore into tomcat (c) verify the certificate chaing using openssl verify (which does work and returns ok for all 3 certificates) (d) have client Authorization on - with it off tomcat ssl works just fine, when its turned on I get this error Which error? What is in the Tomcat logs when the problem occurs? so far I have been following the steps listed in this tomcat user group message http://marc.info/?l=tomcat-userm=106293430225790w=2 How did you configure Tomcat to use the certificates in (b)? What is your Tomcat Connector config in server.xml? p but get this message from openssl s_client -cert c:\ssl\client\client.pem -CAfile c:\ssl\ca\ca.pem -connect localhost:443 3772:error:14094416:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate unknown:.\ssl\s3_pkt.c:1061:SSL alert number 46 3772:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:.\ssl\s23_lib.c:188: and these messages from firefox (after importing the certificate) initially 'sslv3 alert certificate unknown' , then just 'SSL peer was not expecting a handshake message it received' after a few tries does anyone know how to do this or has anyone done this before, thanks for you help in advance
Re: need help setting up tomcat with ssl client authentication
On 30/06/2010 23:45, Ralph Carlson wrote: the tomcats logs have no errors in them, they end after start up (I haven't installed any apps yet, just trying to get to the tomcat manager with ssl) Are you using APR? This path: keystoreFile=/server.ks doesn't appear to match this path: C:\ssl\server\server.ks Are there any errors in the logs, or displayed on the console, when Tomcat starts up? (How are you starting the server, as a service, or using startup.bat?) p signature.asc Description: OpenPGP digital signature
RE: need help setting up tomcat with ssl client authentication
I am starting and stopping tomcat using startup.bat and shutdown.bat from the command line I am not using the apr I copied /server.ks into c:\tomcat folder in an attempt to get it working if I change it to a fake name it throws an error so I think its reading it the console looks like: Jun 30, 2010 7:46:25 PM org.apache.catalina.core.AprLifecycleListener init INFO: The APR based Apache Tomcat Native library which allows optimal performanc e in production environments was not found on the java.library.path: C:\Program Files\Java\jdk1.5.0_17\bin;.;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\system32; C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\ATI Technologies\ATI.ACE\Co re-Static;C:\Program Files\Common Files\GTK\2.0\bin;C:\Program Files\Java\jdk1.5 .0_17\bin;C:\openssl\bin; Jun 30, 2010 7:46:25 PM org.apache.coyote.http11.Http11Protocol init INFO: Initializing Coyote HTTP/1.1 on http-8080 Jun 30, 2010 7:46:27 PM org.apache.coyote.http11.Http11Protocol init INFO: Initializing Coyote HTTP/1.1 on http-443 Jun 30, 2010 7:46:27 PM org.apache.catalina.startup.Catalina load INFO: Initialization processed in 2248 ms Jun 30, 2010 7:46:27 PM org.apache.catalina.core.StandardService start INFO: Starting service Catalina Jun 30, 2010 7:46:27 PM org.apache.catalina.core.StandardEngine start INFO: Starting Servlet Engine: Apache Tomcat/6.0.20 Jun 30, 2010 7:46:28 PM org.apache.coyote.http11.Http11Protocol start INFO: Starting Coyote HTTP/1.1 on http-8080 Jun 30, 2010 7:46:28 PM org.apache.coyote.http11.Http11Protocol start INFO: Starting Coyote HTTP/1.1 on http-443 Jun 30, 2010 7:46:28 PM org.apache.jk.common.ChannelSocket init INFO: JK: ajp13 listening on /0.0.0.0:8009 Jun 30, 2010 7:46:28 PM org.apache.jk.server.JkMain start INFO: Jk running ID=0 time=0/15 config=null Jun 30, 2010 7:46:28 PM org.apache.catalina.startup.Catalina start INFO: Server startup in 1274 ms From: users-return-214173-racarlson=mediacomcc@tomcat.apache.org [users-return-214173-racarlson=mediacomcc@tomcat.apache.org] On Behalf Of Pid [...@pidster.com] Sent: Wednesday, June 30, 2010 7:19 PM To: Tomcat Users List Subject: Re: need help setting up tomcat with ssl client authentication On 30/06/2010 23:45, Ralph Carlson wrote: the tomcats logs have no errors in them, they end after start up (I haven't installed any apps yet, just trying to get to the tomcat manager with ssl) Are you using APR? This path: keystoreFile=/server.ks doesn't appear to match this path: C:\ssl\server\server.ks Are there any errors in the logs, or displayed on the console, when Tomcat starts up? (How are you starting the server, as a service, or using startup.bat?) p - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: need help setting up tomcat with ssl client authentication
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ralph, On 6/30/2010 5:07 PM, Ralph Carlson wrote: (d) have client Authorization on - with it off tomcat ssl works just fine, when its turned on I get this error so far I have been following the steps listed in this tomcat user group message http://marc.info/?l=tomcat-userm=106293430225790w=2 Try something a bit more recent than 2003. I was able to get client certs working with my own CA, and I was manually checking the client cert instead of having Tomcat do it. However, if your code can do it, so can Tomcat. Try reading-through this thread: http://markmail.org/message/kzxsamuiu6bldjmv Connector port=443 protocol=HTTP/1.1 SSLEnabled=true maxThreads=150 scheme=https secure=true clientAuth=true keystoreFile=/server.ks keystorePass=[...] sslProtocol=TLS / I think you also need a truststoreFile and friends. Try re-reading the Connector documentation at http://tomcat.apache.org/tomcat-6.0-doc/config/http.html specifically looking for client cert. - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkwr8f0ACgkQ9CaO5/Lv0PDFxQCcDrMdAJbl0adm44Dgnyd6fWqV aPEAnjPNCOXwmU847G/7IvZuBU9hnK2A =mNS+ -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: connector configuration values - need help to review
In addition to the comments in your other discussion thread. On 28.06.2010 23:23, Rumpa Giri wrote: Worker.properties ps=\ # ps=/ Remove, doesn't mean anything. worker.list=loadbalancer worker.template.type=ajp13 worker.template.lbfactor=1 worker.template.socket_keepalive=True worker.template.socket_timeout=300 I don't like socket_timeout. Have a look at http://tomcat.apache.org/connectors-doc/generic_howto/timeouts.html worker.template.connection_pool_timeout=600 worker.template.connection_pool_size=200 worker.template.connect_timeout=6 worker.server1.port=8009 worker.server1.host=192.168.100.119 worker.server1.reference=worker.template worker.server2.port=8009 worker.server2.host=192.168.100.120 worker.server2.reference=worker.template worker.loadbalancer.type=lb worker.loadbalancer.balance_workers=server1,server2 worker.loadbalancer.method=B I'd start with R. --- uriworkermap.properties --- /myjsps/*=loadbalancer - Server.xml AJP connector tag - !-- Define an AJP 1.3 Connector on port 8009 -- Connector port=8009 enableLookups=false redirectPort=8443 protocol=AJP/1.3 maxThreads=450 connectionTimeout=60 / Did you set jvmRoute? Regards, Rainer - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
connector configuration values - need help to review
We are currently using - Tomcat - 5.5.25 on Windows XP 64bit and 32bit machines JDK 1.5 IIS 6 Trying to upgrade to latest connector, after changing according to the documentation I am able to browse our application behind IIS. Locally the application is behaving fine with the following configuration. So far I have modified the files as follows - for production environment do the values look appropriate? Is there any attribute/properties missing which is crucial for production ready environment? Thank you for reviewing. Worker.properties ps=\ # ps=/ worker.list=loadbalancer worker.template.type=ajp13 worker.template.lbfactor=1 worker.template.socket_keepalive=True worker.template.socket_timeout=300 worker.template.connection_pool_timeout=600 worker.template.connection_pool_size=200 worker.template.connect_timeout=6 worker.server1.port=8009 worker.server1.host=192.168.100.119 worker.server1.reference=worker.template worker.server2.port=8009 worker.server2.host=192.168.100.120 worker.server2.reference=worker.template worker.loadbalancer.type=lb worker.loadbalancer.balance_workers=server1,server2 worker.loadbalancer.method=B --- uriworkermap.properties --- /myjsps/*=loadbalancer - Server.xml AJP connector tag - !-- Define an AJP 1.3 Connector on port 8009 -- Connector port=8009 enableLookups=false redirectPort=8443 protocol=AJP/1.3 maxThreads=450 connectionTimeout=60 / To the default I have just added two more attributes - [maxThreads =450 connectionTimeout=60] - what other attributes are essential for production environment? Regards, Rumpa Giri
Re: connector configuration values - need help to review
Rumpa Giri wrote: We are currently using - Tomcat - 5.5.25 on Windows XP 64bit and 32bit machines JDK 1.5 IIS 6 Trying to upgrade to latest connector, after changing according to the documentation I am able to browse our application behind IIS. Locally the application is behaving fine with the following configuration. So far I have modified the files as follows - for production environment do the values look appropriate? It will all depend on : - how many requests do you expect to have to process in parallel ? - how long does a request, on average, need in order to be processed by its respective Tomcat webapps ? An example : If your machines are short of memory, if you are never expecting to receive more than 10 requests over a period of 10 seconds, from 10 different clients, and each request takes 5 seconds to handle, then there is not much point in configuring a connection_pool_size much higher than 10, and a maxThreads much higher than that either (because any additional one will never be used) (unless you have a very long keepAlive setting). If you expect 1 requests per second, and each request still takes 5 seconds, and you have plenty of RAM, and IIS and Tomcat run on separate machines, then the optimal configuration would be much different. The advantage is that there are a lot of parameters that can be adjusted in function of a particular situation; the inconvenient is that there are a lot of parameters that can be adjusted. Try the default values, they are the default because they are reasonable for an average load. Then come back with specific questions if you see a problem. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: connector configuration values - need help to review
Just curious, what are you using this setup for besides authentication? Thx dB. dB. @ dblock.org Moscow|Geneva|Seattle|New York -Original Message- From: Rumpa Giri [mailto:rg...@healthfusion.com] Sent: Monday, June 28, 2010 5:24 PM To: users@tomcat.apache.org Subject: connector configuration values - need help to review We are currently using - Tomcat - 5.5.25 on Windows XP 64bit and 32bit machines JDK 1.5 IIS 6 Trying to upgrade to latest connector, after changing according to the documentation I am able to browse our application behind IIS. Locally the application is behaving fine with the following configuration. So far I have modified the files as follows - for production environment do the values look appropriate? Is there any attribute/properties missing which is crucial for production ready environment? Thank you for reviewing. Worker.properties ps=\ # ps=/ worker.list=loadbalancer worker.template.type=ajp13 worker.template.lbfactor=1 worker.template.socket_keepalive=True worker.template.socket_timeout=300 worker.template.connection_pool_timeout=600 worker.template.connection_pool_size=200 worker.template.connect_timeout=6 worker.server1.port=8009 worker.server1.host=192.168.100.119 worker.server1.reference=worker.template worker.server2.port=8009 worker.server2.host=192.168.100.120 worker.server2.reference=worker.template worker.loadbalancer.type=lb worker.loadbalancer.balance_workers=server1,server2 worker.loadbalancer.method=B --- uriworkermap.properties --- /myjsps/*=loadbalancer - Server.xml AJP connector tag - !-- Define an AJP 1.3 Connector on port 8009 -- Connector port=8009 enableLookups=false redirectPort=8443 protocol=AJP/1.3 maxThreads=450 connectionTimeout=60 / To the default I have just added two more attributes - [maxThreads =450 connectionTimeout=60] - what other attributes are essential for production environment? Regards, Rumpa Giri - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Need help tracking down a strange Threading issue in Tomcat 6, but not 5.5
On 22 Jun 2010, at 22:38, Mick Knutson mknut...@baselogic.com wrote: have an application I am trying to move to Tomcat 6.0 from Tomcat 5.5. Which versions exactly, (- it does matter)? Also OS, JVM and any other relevant app versions. This is a VXML Voice Browser application. In this app, the general flow is: 1. Voice Browser makes http request to jsp 2. jsp might call Service Object 3. Service Object creates new Thread to call external Webservice 4. If the service fails, then the Jsp calls another webapp to send the same request pseudo asynchronously. 5. 2nd webapp call external webservice. 6. JSP returns. Performing the logic in a Servlet would be more elegant. ($0.02) This works fine (not great, but does function) in PROD now on TC 5.5 But when I move this to TC 6, I have a strange issue where there are User created threads making external webservice calls to another server, and they stop spawning new threads, and the existing threads seem to complete, but do not allow anymore to be created. Take a thread dump, see what they're all doing during the slow down. Tomcat is set to handle 350 threads. How have you done this and are you expecting it to limit the number of the application (as opposed to Connector) threads? When this happens - There are about 100-200 total threads. - Memory @ 40% used - CPU @ ~6% Which memory? Server or heap? What are your heap settings? p It almost appears as though TC just is not accepting anymore new requests, for ~5 minutes. Then it comes back to life. But we can not leave this running as the caller experience is not good. On lower volumes, say 100 requests, we do not see any issue at all. But TC 5.5 is taking ~100-140 requests currently and does not have thee failures. I can attach images, JVMVis snapshots, and a word doc showing several WILY report graphs to see if I can get some help on this please. I have been working on this for a solid 3 weeks and no luck. --- Thank You… Mick Knutson, President BASE Logic, Inc. Enterprise Architecture, Design, Mentoring Agile Consulting p. (866) BLiNC-411: (254-6241-1) f. (415) 685-4233 Website: http://www.baselogic.com Blog: http://www.baselogic.com/blog/ Linked IN: http://linkedin.com/in/mickknutson Twitter: http://twitter.com/mickknutson Vacation Rental: http://tahoe.baselogic.com --- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Need help tracking down a strange Threading issue in Tomcat 6, but not 5.5
have an application I am trying to move to Tomcat 6.0 from Tomcat 5.5. This is a VXML Voice Browser application. In this app, the general flow is: 1. Voice Browser makes http request to jsp 2. jsp might call Service Object 3. Service Object creates new Thread to call external Webservice 4. If the service fails, then the Jsp calls another webapp to send the same request pseudo asynchronously. 5. 2nd webapp call external webservice. 6. JSP returns. This works fine (not great, but does function) in PROD now on TC 5.5 But when I move this to TC 6, I have a strange issue where there are User created threads making external webservice calls to another server, and they stop spawning new threads, and the existing threads seem to complete, but do not allow anymore to be created. Tomcat is set to handle 350 threads. When this happens - There are about 100-200 total threads. - Memory @ 40% used - CPU @ ~6% It almost appears as though TC just is not accepting anymore new requests, for ~5 minutes. Then it comes back to life. But we can not leave this running as the caller experience is not good. On lower volumes, say 100 requests, we do not see any issue at all. But TC 5.5 is taking ~100-140 requests currently and does not have thee failures. I can attach images, JVMVis snapshots, and a word doc showing several WILY report graphs to see if I can get some help on this please. I have been working on this for a solid 3 weeks and no luck. --- Thank You… Mick Knutson, President BASE Logic, Inc. Enterprise Architecture, Design, Mentoring Agile Consulting p. (866) BLiNC-411: (254-6241-1) f. (415) 685-4233 Website: http://www.baselogic.com Blog: http://www.baselogic.com/blog/ Linked IN: http://linkedin.com/in/mickknutson Twitter: http://twitter.com/mickknutson Vacation Rental: http://tahoe.baselogic.com ---
NewBie! Need Help to configure FTP/Domain...
Hi All, I'm new to TomCat however I have managed to get JDK setup and Tomcat 6 running on Linux 64bit server. I've deployed an app via WAR file and all looks good. So all that remains for me to do is confirgure a domain name to use the server and be able to FTP to the installed app folder. I've been searching and digging but am a bit lost at this stage. If anyone can point me in the right direction it would be great. Thanks Alan
Re: NewBie! Need Help to configure FTP/Domain...
Alan Coyne wrote: Hi All, I'm new to TomCat however I have managed to get JDK setup and Tomcat 6 running on Linux 64bit server. I've deployed an app via WAR file and all looks good. So all that remains for me to do is confirgure a domain name to use the server and be able to FTP to the installed app folder. I've been searching and digging but am a bit lost at this stage. If anyone can point me in the right direction it would be great. Hi. Configuring an FTP server under some Linux OS in order to allow the uploading of files to a directory, and doing this securely, is not exactly the purpose of this list. You would better served asking on the help list of your Linux distribution. However, if your purpose is to be able to deploy new/updated Tomcat applications from a remote location, and you can load your applications as war-files, then you do not necessarily need FTP, and could do this via the Tomcat Manager application. Under some Linux(es), this may be a separate package to install, e.g. with Debian there are these packages for Tomcat 5.5 : tomcat5.5 - Servlet and JSP engine tomcat5.5-admin - Java Servlet engine -- admin manager web interfaces tomcat5.5-webapps - Java Servlet engine -- documentation and example web applications where the 2d one would be the one you need. There must be the same available for Tomcat 6.0.x, but not on my system right now. Here is the documentation : http://tomcat.apache.org/tomcat-6.0-doc/manager-howto.html - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: stuck confused an need help please
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Yucca Nel, On 5/24/2010 2:37 PM, Yucca Nel wrote: java.sql.SQLException: Access denied for user ' yucca123_tom'@'localhost' (using password: YES) It looks like you have a leading space before your username. How are you configuring your JDBC connection? Go check to make sure you don't have an embedded space before the name, unless that's what you intended to do. - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkv9kZ0ACgkQ9CaO5/Lv0PA5YwCgrVHS60uDTp+Tg4KHDgcPMOVB AYoAnitqzyIv4rnPYvXYWysOTERSKgQv =ekxc -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: stuck confused an need help please
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Yucca Nel, On 5/24/2010 3:28 PM, Yucca Nel wrote: aplogies there are 2 users and both credentials are configured correct one for hibernate and one for tomcat Doesn't Tomcat use Hibernate? Or the other way around? Why not configure Hibernate to use Tomcat's connection pool? what I maen is that my dailyraor username is eg. and everything in mysql gets prepended with xxx like xxx_mydatabase xxx_myusername That's perfectly reasonable, especially if you're on a shared system. xxx_mytable Now that /is/ stupid: your table names shouldn't have to have your username prepended to them. This would seem to be the kind of thing you should have control over. - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkv9kqYACgkQ9CaO5/Lv0PCFxACaAvaeYXnQY+vrcfatH5rDnE/6 OkoAn1s79kcpT+hAmUcx0abcuPuffsKx =0sY0 -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: stuck confused an need help please
From: Christopher Schultz [mailto:ch...@christopherschultz.net] Subject: Re: stuck confused an need help please On 5/24/2010 2:37 PM, Yucca Nel wrote: java.sql.SQLException: Access denied for user ' yucca123_tom'@'localhost' (using password: YES) It looks like you have a leading space before your username. As the OP has been told numerous times. Testing indicated leading spaces were trimmed in some circumstances, but likely not all. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers.
Re: stuck confused an need help please
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chuck, On 5/26/2010 5:36 PM, Caldarale, Charles R wrote: From: Christopher Schultz [mailto:ch...@christopherschultz.net] Subject: Re: stuck confused an need help please On 5/24/2010 2:37 PM, Yucca Nel wrote: java.sql.SQLException: Access denied for user ' yucca123_tom'@'localhost' (using password: YES) It looks like you have a leading space before your username. As the OP has been told numerous times. FWIW, he doesn't seem to be listening. Testing indicated leading spaces were trimmed in some circumstances, but likely not all. - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkv9lfwACgkQ9CaO5/Lv0PCZIQCfVnk42vKvdIYHOuQDxzaA7rIx 5PIAmwabFkQEqlVgSmr31N6dpq8sYluX =p04z -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: stuck confused an need help please
From: Christopher Schultz [mailto:ch...@christopherschultz.net] Subject: Re: stuck confused an need help please FWIW, he doesn't seem to be listening. You noticed... - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers.
Re: stuck confused an need help please
:646) at org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:438) at org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:374) at org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:302) at org.apache.catalina.core.StandardHostValve.custom(StandardHostValve.java:416) at org.apache.catalina.core.StandardHostValve.throwable(StandardHostValve.java:271) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:142) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:293) at org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:190) at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:291) at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:769) at org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:698) at org.apache.jk.common.ChannelSocket$SocketConnection.runIt(ChannelSocket.java:891) at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:690) at java.lang.Thread.run(Thread.java:619) Caused by: java.lang.RuntimeException: Cannot find FacesContext at javax.faces.webapp.UIComponentClassicTagBase.getFacesContext(UIComponentClassicTagBase.java:1855) at javax.faces.webapp.UIComponentClassicTagBase.setJspId(UIComponentClassicTagBase.java:1672) at org.apache.jsp.oops_jsp._jspx_meth_f_005fview_005f0(oops_jsp.java:93) at org.apache.jsp.oops_jsp._jspService(oops_jsp.java:67) at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70) at javax.servlet.http.HttpServlet.service(HttpServlet.java:717) at org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:374) ... 22 more The way I read it is that my user has some privileges denied and I keep tring to create a new user each time and get same exceptions! Each time the new user is given all privileges. -- From: Yucca Nel yucca...@live.co.za Sent: Monday, May 24, 2010 9:19 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please here is copy of email sent from hosting provider ... Dear Customer, We see no permisson problems with your database: # mysql --database=yucca123_thejarbar --user=yucca123_hiber --password=myPass Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Welcome to the MySQL monitor. Commands end with ; or \g. Your MySQL connection id is 10872472 Server version: 5.0.90-community MySQL Community Edition (GPL) Type 'help;' or '\h' for help. Type '\c' to clear the current input statement. mysql select * from usercomments; Empty set (0.00 sec) Please doublecheck your application configuration and make sure that you're using correct database login info. Also please note that Tomcat restart is required after each configuration update. Let us know if there any questions we can help you with, or confirm that we may close this ticket. Best regards, DailyRazor TechSupport Team. Ticket Details === Ticket ID: IWI-526778 Department: Technical Support Dept. Priority: High Status: Waiting for confirmation -- From: Yucca Nel yucca...@live.co.za Sent: Monday, May 24, 2010 9:14 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please there is no cli for myswl using cpanel. Only php mysql admin and I know I am using the credentials provided when I created the user in php admin -- From: Hassan Schroeder hassan.schroe...@gmail.com Sent: Monday, May 24, 2010 9:10 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please On Mon, May 24, 2010 at 12:00 PM, Yucca Nel yucca...@live.co.za wrote: The credentials I am providing sre 100% correct Not according to the log file you sent. Are you saying that you have successfully logged in to MySQL from the command line on the server using those credentials? -- Hassan Schroeder hassan.schroe...@gmail.com twitter: @hassan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr
Re: stuck confused an need help please
--- On Mon, 5/24/10 at 11:52 PM, Yucca Nel yucca...@live.co.za wrote: Could someone please help me understand what thia stack trace is saying? catalina.log File Type: ASCII English text, with very long lines INFO main org.apache.catalina.startup.Catalina - Initialization processed in 875 ms INFO main org.apache.catalina.core.StandardService - Starting service Catalina INFO main org.apache.catalina.core.StandardEngine - Starting Servlet Engine: Apache Tomcat/6.0.20 ERROR main org.apache.catalina.core.ContainerBase.[Catalina] - Exception opening database connection java.sql.SQLException: Access denied for user ' yucca123_tom'@'localhost' (using password: YES) There is leading white space in the user name: ' yucca123_tom'. There are also errors in your DDL SQL that will need to be fixed after your app is able to connect to the DB. ERROR TP-Processor2 org.hibernate.tool.hbm2ddl.SchemaUpdate - ALTER command denied to user 'yucca123_hiber'@'localhost' for table 'usercomments' ERROR TP-Processor2 org.hibernate.util.JDBCExceptionReporter - SELECT command denied to user 'yucca123_hiber'@'localhost' for table 'usercomments' Don't know why there are two DB users in play: yucca123_tom and yucca123_hiber Apparently, the latter was able to connect to MySQL but could not access a table. Are you sure the table exists? Did you grant select on the table to yucca123_hiber? - Bob - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: stuck confused an need help please
Hello and thank you, one user (yucca123_tom) for container managed security for tomcat and another for my application using hibernate (yucca123_hiber) I keep making sure that I provide ALL privileges and correct credentials in metedata but see same results? I know what the exception is saying but I can only swear that I am providing correct credentials. -- From: Bob Hall rfha...@yahoo.com Sent: Tuesday, May 25, 2010 9:15 AM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please --- On Mon, 5/24/10 at 11:52 PM, Yucca Nel yucca...@live.co.za wrote: Could someone please help me understand what thia stack trace is saying? catalina.log File Type: ASCII English text, with very long lines INFO main org.apache.catalina.startup.Catalina - Initialization processed in 875 ms INFO main org.apache.catalina.core.StandardService - Starting service Catalina INFO main org.apache.catalina.core.StandardEngine - Starting Servlet Engine: Apache Tomcat/6.0.20 ERROR main org.apache.catalina.core.ContainerBase.[Catalina] - Exception opening database connection java.sql.SQLException: Access denied for user ' yucca123_tom'@'localhost' (using password: YES) There is leading white space in the user name: ' yucca123_tom'. There are also errors in your DDL SQL that will need to be fixed after your app is able to connect to the DB. ERROR TP-Processor2 org.hibernate.tool.hbm2ddl.SchemaUpdate - ALTER command denied to user 'yucca123_hiber'@'localhost' for table 'usercomments' ERROR TP-Processor2 org.hibernate.util.JDBCExceptionReporter - SELECT command denied to user 'yucca123_hiber'@'localhost' for table 'usercomments' Don't know why there are two DB users in play: yucca123_tom and yucca123_hiber Apparently, the latter was able to connect to MySQL but could not access a table. Are you sure the table exists? Did you grant select on the table to yucca123_hiber? - Bob - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: stuck confused an need help please
--- On Tue, 5/25/10 at 12:20 AM, Yucca Nel yucca...@live.co.za wrote: I know what the exception is saying but I can only swear that I am providing correct credentials. Did you notice: There is leading white space in the user name: ' yucca123_tom'. - Bob - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: stuck confused an need help please
OK - I have a huge message that I'm going to cut and paste into this one, rather than finding the original and editing it online. I'm going to edit in place and try to point out some issues. I'll ask some questions along the way. I am trying to tweak my web application at thejarbar.org to be bug free. Currrntly here is an issue whn clicking the tutorials button as you can view in your browser. I am getting some kind of exceptions as ell listed in the following stack trace and don't know how to osolve after days of trying. I have been getting mysql SELECT privilege denied exception even though user has all access to database. code deleted . . . although I recommend reworking in with try, catch, and finally blocks. Otherwise you WILL have connection leaks. As a first timer I would likw to know how a typical hibernate webapp is moved from development to production please have a look at the page if you have the time Use the same database names in both cases. Unfortunately, the URL will be different. One way is to parametrize your build to use different hibernate.cfg.xml files. You could also use Ant and appropriate build.properties files. Finally, you could spend some time with Maven. here is a log of all errors related to clicking that link ERROR main org.apache.catalina.core.ContainerBase.[Catalina] - Exception opening database connection java.sql.SQLException: Access denied for user ' yucca123_tom'@'localhost' (using password: YES) This looks like you cannot even connect. As others have pointed out, there is a space in front of the user name. I'm also a bit confused here. You say (further down or in another message), that you have the JDBC driver in your WEB-INF/lib folder, but this looks like you are using Tomcat's database pooling? If you're using Tomcat's database pooling, do not put the driver jars in WEB-INF/lib. If you're using Hibernate to control the connections, then don't put the driver jars in Tomcat's lib. See this link for a complete explanation of how to set everything up. http://wiki.apache.org/tomcat/TomcatHibernate The only way I was able to sort of reproduce your error was by changing the attribute resource=username in my context.xml file to resource= username. Adding a space to the username property in hibernate.cfg.xml caused no error. Fix your configuration files here. INFO main org.apache.catalina.core.StandardContext - The listener com.sun.faces.config.ConfigureListener is already configured for this context. The duplicate definition has been ignored. INFO main org.apache.catalina.core.StandardContext - The listener com.sun.faces.config.ConfigureListener is already configured for this context. The duplicate definition has been ignored. Are you using the database login ID to create tables? This is a very dangerous practice. One slip concerning SQL injection and you'll have a completely destroyed database. ERROR TP-Processor2 org.hibernate.tool.hbm2ddl.SchemaUpdate - Unsuccessful: create table jarbartest.user_roles (user_name varchar not null, role_name varchar not null, primary key (user_name, role_name)) Fix your HQL ERROR TP-Processor2 org.hibernate.tool.hbm2ddl.SchemaUpdate - You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'not null, role_name varchar not null, primary key (user_name, role_name))' at line 1 ERROR TP-Processor2 org.hibernate.tool.hbm2ddl.SchemaUpdate - Unsuccessful: create table jarbartest.usercomments (commentID int unsigned not null, commentMade varchar not null, dateMade datetime not null, flagged bit not null, page_id varchar not null, made_by varchar(20) not null, primary key (commentID)) Fix your HQL ERROR TP-Processor2 org.hibernate.tool.hbm2ddl.SchemaUpdate - You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'not null, dateMade datetime not null, flagged bit not null, page_id varchar not ' at line 1 ERROR TP-Processor2 org.hibernate.tool.hbm2ddl.SchemaUpdate - Unsuccessful: create table jarbartest.users (user_name varchar not null, first_name varchar not null, last_name varchar not null, user_email varchar not null, ip_address varchar not null, user_pass varchar not null, primary key (user_name)) Fix your HQL ERROR TP-Processor2 org.hibernate.tool.hbm2ddl.SchemaUpdate - You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'not null, first_name varchar not null, last_name varchar not null, user_email va' at line 1 ERROR TP-Processor2 org.hibernate.tool.hbm2ddl.SchemaUpdate - Unsuccessful: alter table jarbartest.usercomments add index FKAA77CEBF792FED2F (made_by), add constraint FKAA77CEBF792FED2F foreign key (made_by) references jarbartest.users (user_name) This is assigned to a different database user. Are you using multiple
Re: stuck confused an need help please
hello and than you. I will spend next few hours fixing this. I need to fix hibernate catalog too as it is still trying to create tables in my test datatabase probably because catalogs are defined for test database in entity hbm.xml mappings? Do these mappings ususally go in the WEB-INF classes directory or can I put them with other metadata directly in WEB-INF? I am not too sure on the username being incorrect for my credentials defined in xml as I made sure to check for trailing and leading whitespace but will look again.I will also fix the error handle and path to error page Better get to work and many thanks ... :) From: Mark Eggers its_toas...@yahoo.com Sent: Tuesday, May 25, 2010 12:26 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please OK - I have a huge message that I'm going to cut and paste into this one, rather than finding the original and editing it online. I'm going to edit in place and try to point out some issues. I'll ask some questions along the way. I am trying to tweak my web application at thejarbar.org to be bug free. Currrntly here is an issue whn clicking the tutorials button as you can view in your browser. I am getting some kind of exceptions as ell listed in the following stack trace and don't know how to osolve after days of trying. I have been getting mysql SELECT privilege denied exception even though user has all access to database. code deleted . . . although I recommend reworking in with try, catch, and finally blocks. Otherwise you WILL have connection leaks. As a first timer I would likw to know how a typical hibernate webapp is moved from development to production please have a look at the page if you have the time Use the same database names in both cases. Unfortunately, the URL will be different. One way is to parametrize your build to use different hibernate.cfg.xml files. You could also use Ant and appropriate build.properties files. Finally, you could spend some time with Maven. here is a log of all errors related to clicking that link ERROR main org.apache.catalina.core.ContainerBase.[Catalina] - Exception opening database connection java.sql.SQLException: Access denied for user ' yucca123_tom'@'localhost' (using password: YES) This looks like you cannot even connect. As others have pointed out, there is a space in front of the user name. I'm also a bit confused here. You say (further down or in another message), that you have the JDBC driver in your WEB-INF/lib folder, but this looks like you are using Tomcat's database pooling? If you're using Tomcat's database pooling, do not put the driver jars in WEB-INF/lib. If you're using Hibernate to control the connections, then don't put the driver jars in Tomcat's lib. See this link for a complete explanation of how to set everything up. http://wiki.apache.org/tomcat/TomcatHibernate The only way I was able to sort of reproduce your error was by changing the attribute resource=username in my context.xml file to resource= username. Adding a space to the username property in hibernate.cfg.xml caused no error. Fix your configuration files here. INFO main org.apache.catalina.core.StandardContext - The listener com.sun.faces.config.ConfigureListener is already configured for this context. The duplicate definition has been ignored. INFO main org.apache.catalina.core.StandardContext - The listener com.sun.faces.config.ConfigureListener is already configured for this context. The duplicate definition has been ignored. Are you using the database login ID to create tables? This is a very dangerous practice. One slip concerning SQL injection and you'll have a completely destroyed database. ERROR TP-Processor2 org.hibernate.tool.hbm2ddl.SchemaUpdate - Unsuccessful: create table jarbartest.user_roles (user_name varchar not null, role_name varchar not null, primary key (user_name, role_name)) Fix your HQL ERROR TP-Processor2 org.hibernate.tool.hbm2ddl.SchemaUpdate - You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'not null, role_name varchar not null, primary key (user_name, role_name))' at line 1 ERROR TP-Processor2 org.hibernate.tool.hbm2ddl.SchemaUpdate - Unsuccessful: create table jarbartest.usercomments (commentID int unsigned not null, commentMade varchar not null, dateMade datetime not null, flagged bit not null, page_id varchar not null, made_by varchar(20) not null, primary key (commentID)) Fix your HQL ERROR TP-Processor2 org.hibernate.tool.hbm2ddl.SchemaUpdate - You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'not null, dateMade datetime not null, flagged bit not null, page_id varchar not ' at line 1 ERROR TP-Processor2 org.hibernate.tool.hbm2ddl.SchemaUpdate - Unsuccessful: create table jarbartest.users (user_name varchar not null, first_name
Re: stuck confused an need help please
They have to be on the classpath. The base configuration file ends up in WEB-INF/classes. I've always put my hbm.xml files alongside the classes they map. Make sure that there is only one copy of your JDBC driver in your classpath as well, and that it's in the right location. /mde/ --- On Tue, 5/25/10, Yucca Nel yucca...@live.co.za wrote: From: Yucca Nel yucca...@live.co.za hello and than you. I will spend next few hours fixing this. I need to fix hibernate catalog too as it is still trying to create tables in my test datatabase probably because catalogs are defined for test database in entity hbm.xml mappings? Do these mappings ususally go in the WEB-INF classes directory or can I put them with other metadata directly in WEB-INF? I am not too sure on the username being incorrect for my credentials defined in xml as I made sure to check for trailing and leading whitespace but will look again.I will also fix the error handle and path to error page - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: stuck confused an need help please
On Mon, May 24, 2010 at 11:37 AM, Yucca Nel yucca...@live.co.za wrote: I have been getting mysql SELECT privilege denied exception even though user has all access to database. There would seem to be a contradiction between the above statement and the first error in your log example :-) ERROR main org.apache.catalina.core.ContainerBase.[Catalina] - Exception opening database connection java.sql.SQLException: Access denied for user ' yucca123_tom'@'localhost' (using password: YES) at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:1055) I would try to fix that first, personally... -- Hassan Schroeder hassan.schroe...@gmail.com twitter: @hassan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: stuck confused an need help please
yes but I don't know why access I being denied? The credentials I am providing sre 100% correct sn the database user has ALL privileges so could anyone perhaps think o a possible reason why I am getting these errors? I have confirmed with hosting provider that user exists and credentials are correct and they also appear to be lost. I am using correct myswl driver located in WEB-INF/lib -- From: Hassan Schroeder hassan.schroe...@gmail.com Sent: Monday, May 24, 2010 8:53 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please On Mon, May 24, 2010 at 11:37 AM, Yucca Nel yucca...@live.co.za wrote: I have been getting mysql SELECT privilege denied exception even though user has all access to database. There would seem to be a contradiction between the above statement and the first error in your log example :-) ERROR main org.apache.catalina.core.ContainerBase.[Catalina] - Exception opening database connection java.sql.SQLException: Access denied for user ' yucca123_tom'@'localhost' (using password: YES) at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:1055) I would try to fix that first, personally... -- Hassan Schroeder hassan.schroe...@gmail.com twitter: @hassan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: stuck confused an need help please
I forgot to mention I am using myswl 5, and tomcat 6 -- From: Yucca Nel yucca...@live.co.za Sent: Monday, May 24, 2010 9:00 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please yes but I don't know why access I being denied? The credentials I am providing sre 100% correct sn the database user has ALL privileges so could anyone perhaps think o a possible reason why I am getting these errors? I have confirmed with hosting provider that user exists and credentials are correct and they also appear to be lost. I am using correct myswl driver located in WEB-INF/lib -- From: Hassan Schroeder hassan.schroe...@gmail.com Sent: Monday, May 24, 2010 8:53 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please On Mon, May 24, 2010 at 11:37 AM, Yucca Nel yucca...@live.co.za wrote: I have been getting mysql SELECT privilege denied exception even though user has all access to database. There would seem to be a contradiction between the above statement and the first error in your log example :-) ERROR main org.apache.catalina.core.ContainerBase.[Catalina] - Exception opening database connection java.sql.SQLException: Access denied for user ' yucca123_tom'@'localhost' (using password: YES) at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:1055) I would try to fix that first, personally... -- Hassan Schroeder hassan.schroe...@gmail.com twitter: @hassan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: stuck confused an need help please
On Mon, May 24, 2010 at 12:00 PM, Yucca Nel yucca...@live.co.za wrote: The credentials I am providing sre 100% correct Not according to the log file you sent. Are you saying that you have successfully logged in to MySQL from the command line on the server using those credentials? -- Hassan Schroeder hassan.schroe...@gmail.com twitter: @hassan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: stuck confused an need help please
Perhaps the real issue herw for mr personally (and I hope anyone using dailyrazor) could answer if it's normal to not be able to use mysql in a production environment where I DON't have to have my dailyrazor username prepended to everything related in mysql? Is this a norm in prodyction environments because I can not configure mysql to mimic my development environment because every name on the server has a stupid name prepended to it. -- From: Yucca Nel yucca...@live.co.za Sent: Monday, May 24, 2010 9:06 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please I forgot to mention I am using myswl 5, and tomcat 6 -- From: Yucca Nel yucca...@live.co.za Sent: Monday, May 24, 2010 9:00 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please yes but I don't know why access I being denied? The credentials I am providing sre 100% correct sn the database user has ALL privileges so could anyone perhaps think o a possible reason why I am getting these errors? I have confirmed with hosting provider that user exists and credentials are correct and they also appear to be lost. I am using correct myswl driver located in WEB-INF/lib -- From: Hassan Schroeder hassan.schroe...@gmail.com Sent: Monday, May 24, 2010 8:53 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please On Mon, May 24, 2010 at 11:37 AM, Yucca Nel yucca...@live.co.za wrote: I have been getting mysql SELECT privilege denied exception even though user has all access to database. There would seem to be a contradiction between the above statement and the first error in your log example :-) ERROR main org.apache.catalina.core.ContainerBase.[Catalina] - Exception opening database connection java.sql.SQLException: Access denied for user ' yucca123_tom'@'localhost' (using password: YES) at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:1055) I would try to fix that first, personally... -- Hassan Schroeder hassan.schroe...@gmail.com twitter: @hassan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: stuck confused an need help please
there is no cli for myswl using cpanel. Only php mysql admin and I know I am using the credentials provided when I created the user in php admin -- From: Hassan Schroeder hassan.schroe...@gmail.com Sent: Monday, May 24, 2010 9:10 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please On Mon, May 24, 2010 at 12:00 PM, Yucca Nel yucca...@live.co.za wrote: The credentials I am providing sre 100% correct Not according to the log file you sent. Are you saying that you have successfully logged in to MySQL from the command line on the server using those credentials? -- Hassan Schroeder hassan.schroe...@gmail.com twitter: @hassan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: stuck confused an need help please
Oh and my hosting provider sent me a snipped of the cli where they logged in with my credentials so that is not the issue -- From: Yucca Nel yucca...@live.co.za Sent: Monday, May 24, 2010 9:14 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please there is no cli for myswl using cpanel. Only php mysql admin and I know I am using the credentials provided when I created the user in php admin -- From: Hassan Schroeder hassan.schroe...@gmail.com Sent: Monday, May 24, 2010 9:10 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please On Mon, May 24, 2010 at 12:00 PM, Yucca Nel yucca...@live.co.za wrote: The credentials I am providing sre 100% correct Not according to the log file you sent. Are you saying that you have successfully logged in to MySQL from the command line on the server using those credentials? -- Hassan Schroeder hassan.schroe...@gmail.com twitter: @hassan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: stuck confused an need help please
here is copy of email sent from hosting provider ... Dear Customer, We see no permisson problems with your database: # mysql --database=yucca123_thejarbar --user=yucca123_hiber --password=myPass Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Welcome to the MySQL monitor. Commands end with ; or \g. Your MySQL connection id is 10872472 Server version: 5.0.90-community MySQL Community Edition (GPL) Type 'help;' or '\h' for help. Type '\c' to clear the current input statement. mysql select * from usercomments; Empty set (0.00 sec) Please doublecheck your application configuration and make sure that you're using correct database login info. Also please note that Tomcat restart is required after each configuration update. Let us know if there any questions we can help you with, or confirm that we may close this ticket. Best regards, DailyRazor TechSupport Team. Ticket Details === Ticket ID: IWI-526778 Department: Technical Support Dept. Priority: High Status: Waiting for confirmation -- From: Yucca Nel yucca...@live.co.za Sent: Monday, May 24, 2010 9:14 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please there is no cli for myswl using cpanel. Only php mysql admin and I know I am using the credentials provided when I created the user in php admin -- From: Hassan Schroeder hassan.schroe...@gmail.com Sent: Monday, May 24, 2010 9:10 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please On Mon, May 24, 2010 at 12:00 PM, Yucca Nel yucca...@live.co.za wrote: The credentials I am providing sre 100% correct Not according to the log file you sent. Are you saying that you have successfully logged in to MySQL from the command line on the server using those credentials? -- Hassan Schroeder hassan.schroe...@gmail.com twitter: @hassan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: stuck confused an need help please
On Mon, May 24, 2010 at 12:11 PM, Yucca Nel yucca...@live.co.za wrote: Perhaps the real issue herw for mr personally (and I hope anyone using dailyrazor) could answer if it's normal to not be able to use mysql in a production environment where I DON't have to have my dailyrazor username prepended to everything related in mysql? I have utterly no idea what you're talking about now. there is no cli for myswl using cpanel. You don't have SSH access to your server? Good luck debugging, then; I would never use a hosting provider like that. Oh and my hosting provider sent me a snipped of the cli where they logged in with my credentials so that is not the issue Again, not what the log file is saying. Which, BTW, assuming is a straight copy/paste, includes an interesting space at the front of this ' yucca123_tom'@'localhost' string, which *ALSO* doesn't match the user name in your final example: # mysql --database=yucca123_thejarbar --user=yucca123_hiber -- Hassan Schroeder hassan.schroe...@gmail.com twitter: @hassan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: stuck confused an need help please
Perhapa somwonw can recommend me another hosting provider (will gladly refer them) and one where they don't add silly prefix names o everything done in mysql? -- From: Yucca Nel yucca...@live.co.za Sent: Monday, May 24, 2010 9:19 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please here is copy of email sent from hosting provider ... Dear Customer, We see no permisson problems with your database: # mysql --database=yucca123_thejarbar --user=yucca123_hiber --password=myPass Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Welcome to the MySQL monitor. Commands end with ; or \g. Your MySQL connection id is 10872472 Server version: 5.0.90-community MySQL Community Edition (GPL) Type 'help;' or '\h' for help. Type '\c' to clear the current input statement. mysql select * from usercomments; Empty set (0.00 sec) Please doublecheck your application configuration and make sure that you're using correct database login info. Also please note that Tomcat restart is required after each configuration update. Let us know if there any questions we can help you with, or confirm that we may close this ticket. Best regards, DailyRazor TechSupport Team. Ticket Details === Ticket ID: IWI-526778 Department: Technical Support Dept. Priority: High Status: Waiting for confirmation -- From: Yucca Nel yucca...@live.co.za Sent: Monday, May 24, 2010 9:14 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please there is no cli for myswl using cpanel. Only php mysql admin and I know I am using the credentials provided when I created the user in php admin -- From: Hassan Schroeder hassan.schroe...@gmail.com Sent: Monday, May 24, 2010 9:10 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please On Mon, May 24, 2010 at 12:00 PM, Yucca Nel yucca...@live.co.za wrote: The credentials I am providing sre 100% correct Not according to the log file you sent. Are you saying that you have successfully logged in to MySQL from the command line on the server using those credentials? -- Hassan Schroeder hassan.schroe...@gmail.com twitter: @hassan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: stuck confused an need help please
aplogies there are 2 users and both credentials are configured correct one for hibernate and one for tomcat what I maen is that my dailyraor username is eg. and everything in mysql gets prepended with xxx like xxx_mydatabase xxx_myusername xxx_mytable From: Hassan Schroeder hassan.schroe...@gmail.com Sent: Monday, May 24, 2010 9:23 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please On Mon, May 24, 2010 at 12:11 PM, Yucca Nel yucca...@live.co.za wrote: Perhaps the real issue herw for mr personally (and I hope anyone using dailyrazor) could answer if it's normal to not be able to use mysql in a production environment where I DON't have to have my dailyrazor username prepended to everything related in mysql? I have utterly no idea what you're talking about now. there is no cli for myswl using cpanel. You don't have SSH access to your server? Good luck debugging, then; I would never use a hosting provider like that. Oh and my hosting provider sent me a snipped of the cli where they logged in with my credentials so that is not the issue Again, not what the log file is saying. Which, BTW, assuming is a straight copy/paste, includes an interesting space at the front of this ' yucca123_tom'@'localhost' string, which *ALSO* doesn't match the user name in your final example: # mysql --database=yucca123_thejarbar --user=yucca123_hiber -- Hassan Schroeder hassan.schroe...@gmail.com twitter: @hassan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: stuck confused an need help please
it *is* important that you follow the directions provided to you as hassan mentioned you need to go to mysql command prompt and try to open the connection with the username/password mysqlconnect usern...@host mysqlsupply password if you cannot access ALL of the requested tables with each of the required DML operations(insert/update/delete/select) you will then need to run mysqladmin and either 1)create the user 2)grant the user the necessary access(insert/update/delete/select) access to the user you need as these questions are specific to mysql please ask mysql users list if you have any problems with these operations my...@lists.mysql.com Martin Gainty __ Verzicht und Vertraulichkeitanmerkung/Note de déni et de confidentialité Diese Nachricht ist vertraulich. Sollten Sie nicht der vorgesehene Empfaenger sein, so bitten wir hoeflich um eine Mitteilung. Jede unbefugte Weiterleitung oder Fertigung einer Kopie ist unzulaessig. Diese Nachricht dient lediglich dem Austausch von Informationen und entfaltet keine rechtliche Bindungswirkung. Aufgrund der leichten Manipulierbarkeit von E-Mails koennen wir keine Haftung fuer den Inhalt uebernehmen. Ce message est confidentiel et peut être privilégié. Si vous n'êtes pas le destinataire prévu, nous te demandons avec bonté que pour satisfaire informez l'expéditeur. N'importe quelle diffusion non autorisée ou la copie de ceci est interdite. Ce message sert à l'information seulement et n'aura pas n'importe quel effet légalement obligatoire. Étant donné que les email peuvent facilement être sujets à la manipulation, nous ne pouvons accepter aucune responsabilité pour le contenu fourni. From: yucca...@live.co.za To: users@tomcat.apache.org Subject: Re: stuck confused an need help please Date: Mon, 24 May 2010 21:06:13 +0200 I forgot to mention I am using myswl 5, and tomcat 6 -- From: Yucca Nel yucca...@live.co.za Sent: Monday, May 24, 2010 9:00 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please yes but I don't know why access I being denied? The credentials I am providing sre 100% correct sn the database user has ALL privileges so could anyone perhaps think o a possible reason why I am getting these errors? I have confirmed with hosting provider that user exists and credentials are correct and they also appear to be lost. I am using correct myswl driver located in WEB-INF/lib -- From: Hassan Schroeder hassan.schroe...@gmail.com Sent: Monday, May 24, 2010 8:53 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please On Mon, May 24, 2010 at 11:37 AM, Yucca Nel yucca...@live.co.za wrote: I have been getting mysql SELECT privilege denied exception even though user has all access to database. There would seem to be a contradiction between the above statement and the first error in your log example :-) ERROR main org.apache.catalina.core.ContainerBase.[Catalina] - Exception opening database connection java.sql.SQLException: Access denied for user ' yucca123_tom'@'localhost' (using password: YES) at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:1055) I would try to fix that first, personally... -- Hassan Schroeder hassan.schroe...@gmail.com twitter: @hassan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org _ The New Busy is not the old busy. Search, chat and e-mail from your inbox. http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_3
Additional comments: stuck confused an need help please
-- wrt: eApps, the user names are just whatever you make them -- it's really a virtual unix. -- wrt: You get what you pay for --- one of the ONLY exceptions to this that I've encountered in life is the Tomcat list!! --Ken Begin forwarded message: From: Ken Bowen kbo...@als.com Date: May 24, 2010 3:57:28 PM EDT To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please eApps.com provides a virtual system env; you ssh in and it looks/ feels like your own unix system (CentOS 5); in addition, there is a web-based control panel. They've been pretty supportive for me over the years. glancing at dailyrazor, I think you'll find the prices somewhat higher, but in this -- as in many things -- you largely get what you pay for. On May 24, 2010, at 3:23 PM, Yucca Nel wrote: Perhapa somwonw can recommend me another hosting provider (will gladly refer them) and one where they don't add silly prefix names o everything done in mysql? -- From: Yucca Nel yucca...@live.co.za Sent: Monday, May 24, 2010 9:19 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please here is copy of email sent from hosting provider ... Dear Customer, We see no permisson problems with your database: # mysql --database=yucca123_thejarbar --user=yucca123_hiber -- password=myPass Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Welcome to the MySQL monitor. Commands end with ; or \g. Your MySQL connection id is 10872472 Server version: 5.0.90-community MySQL Community Edition (GPL) Type 'help;' or '\h' for help. Type '\c' to clear the current input statement. mysql select * from usercomments; Empty set (0.00 sec) Please doublecheck your application configuration and make sure that you're using correct database login info. Also please note that Tomcat restart is required after each configuration update. Let us know if there any questions we can help you with, or confirm that we may close this ticket. Best regards, DailyRazor TechSupport Team. Ticket Details === Ticket ID: IWI-526778 Department: Technical Support Dept. Priority: High Status: Waiting for confirmation -- From: Yucca Nel yucca...@live.co.za Sent: Monday, May 24, 2010 9:14 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please there is no cli for myswl using cpanel. Only php mysql admin and I know I am using the credentials provided when I created the user in php admin -- From: Hassan Schroeder hassan.schroe...@gmail.com Sent: Monday, May 24, 2010 9:10 PM To: Tomcat Users List users@tomcat.apache.org Subject: Re: stuck confused an need help please On Mon, May 24, 2010 at 12:00 PM, Yucca Nel yucca...@live.co.za wrote: The credentials I am providing sre 100% correct Not according to the log file you sent. Are you saying that you have successfully logged in to MySQL from the command line on the server using those credentials? -- Hassan Schroeder hassan.schroe...@gmail.com twitter: @hassan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
RE: need help in setting up virtual url for tomcat 5 URGENT
Hi, We ar eusing the BIGIP url for this , so certificates and all will not be kept at host level. This means now do we need to only change files to use new url and port. Thanks, Vivyek kanchan -Original Message- From: Pid [mailto:p...@pidster.com] Sent: Wednesday, April 14, 2010 6:12 PM To: Tomcat Users List Subject: Re: need help in setting up virtual url for tomcat 5 URGENT On 14/04/2010 12:10, Vivek Kanchan wrote: This is urgent please , i am new to tomcat. :( People volunteer their support here for free. If you need urgent support you may have to look for a professional. In the meantime, start reading here: http://tomcat.apache.org/tomcat-6.0-doc/index.html and then: http://tomcat.apache.org/tomcat-6.0-doc/config/index.html p Thanks, Vivyek kanchan -Original Message- From: Vivek Kanchan Sent: Wednesday, April 14, 2010 4:32 PM To: users@tomcat.apache.org Subject: need help in setting up virtual url for tomcat 5 HI, I have setup tomcat 5 for a customer, now i need to use virtual url and por= t t other than 8080 , please let me know how to do it , what files to change = for these. Thanks, Vivyek kanchan - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
