Tomcat Cluster 6.0.20 & White sites

2010-01-19 Thread Alexander Diedler
Hi everybody, We have some issues with a Tomcat Cluster. Sometimes (after a few hours without restart of services) , the webserver doesn´t deliver the complete content to the browser. It means, in the browser ther appear the header and some parts of the website, but then only blank and white web

RE: multiple URI

2010-01-19 Thread Travis Beech
Modify your servlet mapping in your web.xml so that you have more than one mapping to that servlet. Take the following xml snippet as an example, each of the three servlet mappings will map to a single servlet. This would allow someone to use three different URL's to access the same servlet. R

Tomcat Clsuter 6.0.18 & White sites

2010-01-19 Thread Alexander Diedler
Hi everybody, We have some issues with a Tomcat Cluster. Sometimes (after a few hours without restart of services) , the webserver doesn´t deliver the complete content to the browser. It means, in the browser ther appear the header and some parts of the website, but then only blank and white web

Tomcat Realm

2010-01-19 Thread Aihong Yin
Hi, I'm using tomcat5.5. my question is: is it possible to implement a realm to identify valid users of a web application: the username and password get from LDAP directory server central, and the role of the user get from local file such as tomcat-user.xml instead. Thanks, Aihong Yin.

RE: Different apps clustering on the same Tomcat?

2010-01-19 Thread Caldarale, Charles R
> From: John Tangney [mailto:jo...@jdtangney.com] > Subject: Different apps clustering on the same Tomcat? > > Is it possible to get two apps in the same Tomcat instance to exchange > session info, in a cluster? If so, how? Not sure what you're asking. If there's only one Tomcat instance, there'

Different apps clustering on the same Tomcat?

2010-01-19 Thread John Tangney
Is it possible to get two apps in the same Tomcat instance to exchange session info, in a cluster? If so, how? Thanks! --johnt - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users

Modifying value or format of HTTPServletRequest.getRemoteUser()

2010-01-19 Thread Christopher Nebergall
I have a Jaas plugin where I'm using basic auth. It authenticates the user successfully, and in the jaas plugin I make it so request.getUserPrincipal().getName() it returns the format of the username I want shown to the app. But HttpServletRequest.getRemoteUser always returns the value of the us

RE: multiple URI

2010-01-19 Thread Caldarale, Charles R
> From: Vadym Chepkov [mailto:chep...@yahoo.com] > Subject: multiple URI > > I want a servlet to serve two different urls: http://server/A and > http://server/B, but I don't want to install this servlet as a ROOT > servlet. Is this possible in tomcat 6? Do you mean you want the same webapp to be

multiple URI

2010-01-19 Thread Vadym Chepkov
Greetings, I want a servlet to serve two different urls: http://server/A and http://server/B, but I don't want to install this servlet as a ROOT servlet. Is this possible in tomcat 6? Thank you. Sincerely yours, Vadym Chepkov --

Re: TCNative installation failed

2010-01-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Nikolay, On 1/19/2010 9:59 AM, Nikolay Diulgerov wrote: > I followed this instruction (http://tomcat.apache.org/native-doc/), > installed all the required packages for the compilation of TCNative > (1.1.19), > > The configuration, compilation and ins

RE: SSLv3/TLS man-in-middle vulnerability

2010-01-19 Thread Caldarale, Charles R
> From: Jeffrey Janner [mailto:jeffrey.jan...@polydyne.com] > Subject: RE: SSLv3/TLS man-in-middle vulnerability > > If you have to stay with 5.5.23, you'll need to go with the ARP SSL > connector. > > (slap me if I'm still wrong Charles, but I checked the doc and there > doesn't appear to be sup

RE: SSLv3/TLS man-in-middle vulnerability

2010-01-19 Thread Jeffrey Janner
As Charles said, move up to 6.0.20 and switch to the NIO connector. If you have to stay with 5.5.23, you'll need to go with the ARP SSL connector. (slap me if I'm still wrong Charles, but I checked the doc and there doesn't appear to be support for NIO in 5.5.x) Jeff -Original Message

RE: I have a lot of process in my server

2010-01-19 Thread Caldarale, Charles R
> From: Guifre Bosch Fabregas [mailto:guifre.bo...@gmail.com] > Subject: I have a lot of process in my server > > Normally I see 20 process of *httpd *in my server but some time I see > 200 (ps -ef | grep httpd | wc -l) and my Apache crash. You are aware this is the Tomcat mailing list, not the o

I have a lot of process in my server

2010-01-19 Thread Guifre Bosch Fabregas
Hi guys! I have a linux environment whith an Apache Tomcat 5.5. Normally I see 20 process of *httpd *in my server but some time I see 200 (ps -ef | grep httpd | wc -l) and my Apache crash. What's happens??? In which site I can see the origin of the problem? I use the command "lsof -p PID" but I

RE: SSLv3/TLS man-in-middle vulnerability

2010-01-19 Thread Jeffrey Janner
Ah, didn't exactly ignore it, just forgot about it. I'd already removed it from the thread. Good point. -Original Message- From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] Sent: Tuesday, January 19, 2010 9:56 AM To: Tomcat Users List Subject: RE: SSLv3/TLS man-in-middle vul

RE: SSLv3/TLS man-in-middle vulnerability

2010-01-19 Thread Caldarale, Charles R
> From: Steve G. Johnson [mailto:johnson_stev...@solarturbines.com] > Subject: RE: SSLv3/TLS man-in-middle vulnerability > > FYI: This is in my listener list: > If the tcnative library isn't found, the above listener will simply display a message stating so in the logs, so it doesn't hurt to ha

RE: SSLv3/TLS man-in-middle vulnerability

2010-01-19 Thread Steve G. Johnson
Hi Charles, FYI: This is in my listener list: Added the "protocol" entry and now trying to start Tomcat manager results in "page cannot be displayed". Removing entry it starts. Added as follows: Steve Steve Johnson (619) 237-8315 P Please consider the environment before printing thi

RE: SSLv3/TLS man-in-middle vulnerability

2010-01-19 Thread Caldarale, Charles R
> From: Jeffrey Janner [mailto:jeffrey.jan...@polydyne.com] > Subject: RE: SSLv3/TLS man-in-middle vulnerability > > In particular, he stated that switching to the NIO connector at this > point wouldn't address it (from my reading of his post), as the fix > will require a JDK/JRE fix from the vend

RE: SSLv3/TLS man-in-middle vulnerability

2010-01-19 Thread Jeffrey Janner
You're right. I'd completely forgotten the SSL. Odd, since I do nothing but SSL here. As I recall, it's re-issue your certificate in OpenSSL format (or convert it) and change the SSL specific parameters as follows: Drop the "sslProtocol" and keystore* attributes and replace with SSLEng

RE: SSLv3/TLS man-in-middle vulnerability

2010-01-19 Thread Caldarale, Charles R
> From: Steve G. Johnson [mailto:johnson_stev...@solarturbines.com] > Subject: Re: SSLv3/TLS man-in-middle vulnerability > >   maxThreads="150" > minSpareThreads="25" maxSpareThreads="75" enableLookups="false" > disableUploadTimeout="true" acceptCount="100" scheme="https"

RE: SSLv3/TLS man-in-middle vulnerability

2010-01-19 Thread Caldarale, Charles R
> From: Jeffrey Janner [mailto:jeffrey.jan...@polydyne.com] > Subject: RE: SSLv3/TLS man-in-middle vulnerability > > For Steve to switch to the APR/native connectors, all he needs to do in > this config is download the native libraries and restart, correct? No, the SSL config is completely differ

RE: SSLv3/TLS man-in-middle vulnerability

2010-01-19 Thread Jeffrey Janner
Mark - For Steve to switch to the APR/native connectors, all he needs to do in this config is download the native libraries and restart, correct? Oh and make sure the following line is in the server.xml file to start the APR lifecycle listener. Steve, you can download the latest APR lib fro

Re: SSLv3/TLS man-in-middle vulnerability

2010-01-19 Thread Steve G. Johnson
Mark, Our JRE is 1.6.0_17. Below are server.xml entries for connectors minus security tag values. Please suggest changes. Is that all I have to do before Security runs another HP scan? Thanks   -   - - - Steve Johnson (619) 237-8315 P Please conside

TCNative installation failed

2010-01-19 Thread Nikolay Diulgerov
Hello there, I'm trying to do this setup: 1. OS debian 5.03 (AMD_64) 2. Tomcat 5.5.28 (downloaded from the official site) 3. Sun Java jdk-6u16-linux-x64 I followed this instruction (http://tomcat.apache.org/native-doc/), installed all the required packages for the compilat

Re: The code of method _jspService(...) is exceeding the 65535 byteslimit

2010-01-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Konstantin, On 1/18/2010 7:08 PM, Konstantin Kolinko wrote: > 2010/1/18 iainmac : >> >> Hi, >> >> I am moving from Tomcat 5 to 6, and jsp's that worked fine in 5 now give me >> this length error. >> >> I also have moved from java j2sdk1.4.1_02 to jdk1

Re: Comet Connection Writeable?

2010-01-19 Thread Filip Hanik - Dev Lists
Hi Steffen, At http://svn.apache.org/viewvc/tomcat/sandbox/gdev6x/ I implemented the feature you are looking for. Where you would do CometEvent.interestOps(CometEvent.CometOperation.OP_WRITE); and you will receive a CometEvent.EventType.WRITE When I tried to write sample applications against

Re: Logout mechanism on Digest Authentication

2010-01-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, On 1/19/2010 6:32 AM, André Warnier wrote: > vpapado wrote: >> Hello, >> >> I have a problem in logout mechanism for my web app. For logging in I use >> Digest Authentication. Here is how things go: >> > ... >> >> Is there a problem in logout m

Re: SSLv3/TLS man-in-middle vulnerability

2010-01-19 Thread Mark Thomas
On 19/01/2010 02:31, Steve G. Johnson wrote: > Mark, > Since we do not know how to "switch connectors", or install OpenSSL, and do > not have JDK on the server (only JRE 1.6.0_17), then I suppose the best bet > is to wait until Tomcat is fixed ("coming soon"). You can replace JDK with JRE in what

Re: Logout mechanism on Digest Authentication

2010-01-19 Thread vpapado
Thank you. awarnier wrote: > > vpapado wrote: >> Hello, >> >> I have a problem in logout mechanism for my web app. For logging in I use >> Digest Authentication. Here is how things go: >> > ... >> >> Is there a problem in logout mechanism for Digest Authentication? Is >> logout >> not suppor

Re: Logout mechanism on Digest Authentication

2010-01-19 Thread André Warnier
vpapado wrote: Hello, I have a problem in logout mechanism for my web app. For logging in I use Digest Authentication. Here is how things go: ... Is there a problem in logout mechanism for Digest Authentication? Is logout not supported for diggest authentication? How could I manage to logout

Logout mechanism on Digest Authentication

2010-01-19 Thread vpapado
Hello, I have a problem in logout mechanism for my web app. For logging in I use Digest Authentication. Here is how things go: 1. On the same web app I first used Form Authentication and on each jsp page I created I used, on logout, bellow code: session.invalidate(); response.sendRedirect("samep

Re: Tomcat Silent Installation Options

2010-01-19 Thread Konstantin Kolinko
2010/1/19 Kranti™ K K Parisa : > Hi All, > > I am trying to install Tomcat thru command line ( need this to include the > tomcat installation file thru our product installer). > > I am able to use upto this > > command prompt > tomcat5525.exe /S /D=d:\MyTomcat Why 5.5.25 ?? That is an old release.

Re: Tomcat Silent Installation Options

2010-01-19 Thread LiuYan 刘研
The document is here: http://tomcat.apache.org/tomcat-6.0-doc/windows-service-howto.html Kranti™ K K Parisa wrote: > > Hi All, > > I am trying to install Tomcat thru command line ( need this to include the > tomcat installation file thru our product installer). > > I am able to use upto this

Re: Increase in rss and thread usage.

2010-01-19 Thread Peter Crowther
2010/1/19 > Are using Tomcat 6.0.20. We have mointored it and can see that the rss and > thread usage increases all the time. > Is this someone else also have experienced? > > Almost always, if your resource usage increases over time, your application has a resource leak. In this case, I suspect

Increase in rss and thread usage.

2010-01-19 Thread Kent.Andersson
Hi, Are using Tomcat 6.0.20. We have mointored it and can see that the rss and thread usage increases all the time. Is this someone else also have experienced?

Tomcat Silent Installation Options

2010-01-19 Thread Kranti™ K K Parisa
Hi All, I am trying to install Tomcat thru command line ( need this to include the tomcat installation file thru our product installer). I am able to use upto this command prompt > tomcat5525.exe /S /D=d:\MyTomcat but i want to know more options available for this like specifying the JAVA HOME,