Please Validate this Question

2010-01-22 Thread Karthik Nanjangude
Hi Please Validate this Question SPEC : JDK1.5 TOMCAT 6.0.20 O/s 1, 2 Windows 2000 Server Apache Http - 2.x 1) A Custom built web application uses Quartz process ( Kron job) every 20 minutes to DB (JNDI based Connection pool ) to process some data on when deployed on sin

Re: Including a file into server.xml

2010-01-22 Thread Jorge Medina
I don't know of any inclusion tag. I had a similar problem with context.xml, I used an XSLT transformation to add new s entries during installation time depending on the number of databases a user wanted to configure. I used a dummy entry and used XSLT to make a copy of it replacing a set of att

Including a file into server.xml

2010-01-22 Thread Aryeh M. Friedman
I have an Java based XML DB that keeps track of different configurations for various sites we host and it is trivial to have it spit out a entery compatible with server.xml for each site... the only problem we have is how to insert the output into server.xml without garbaging and/or having to

question for deploystartup forROOT.war on tomcat cluster

2010-01-22 Thread Okubo, Yasushi (TSD)
Hi I have my application packaged as ROOT.war file. I can auto-deploy this war file on single tomcat instance whenever I restart tomcat or put a new war file into webapps. However, if I put the same war file into tomcat cluster and restart tomcat, tomcat does not redeploy this war file. In tomc

Re: newbie: multiple ports for same tomcat server 5.0

2010-01-22 Thread Chart
I have everything working from the first post. Per the last update the problem looks like I confused chuck on my original post when I thought I stated the that IIS was running on a different box. There are two distinct boxes (one of the outside running IIS and one on the inside running Tomcat).

Re: Windows Installer with support for 32 bit JVM on 64 bit OS

2010-01-22 Thread Patrick Flaherty
Perfect, that works ! Thanks Charles. -P -- From: "Caldarale, Charles R" Sent: Friday, January 22, 2010 7:19 PM To: "Tomcat Users List" Subject: RE: Windows Installer with support for 32 bit JVM on 64 bit OS From: Patrick Flaherty [mailto:pfla

RE: Windows Installer with support for 32 bit JVM on 64 bit OS

2010-01-22 Thread Caldarale, Charles R
> From: Patrick Flaherty [mailto:pflah...@rampageinc.com] > Subject: Windows Installer with support for 32 bit JVM on 64 bit OS > > Will there be an WIndows installer that will install and use a 32 bit > JVM on a 64 bit OS (Like 6.0.20 did)? Don't know, but you can use the *-x86.zip download and

Windows Installer with support for 32 bit JVM on 64 bit OS

2010-01-22 Thread Patrick Flaherty
Will there be an WIndows installer that will install and use a 32 bit JVM on a 64 bit OS (Like 6.0.20 did)? I have some 32 bit native extensions (dlls) and have some time before I see a 64 bit version of the dll. Thanks -p ---

RE: mod_jk errors with tomcat 6.0.20 and Apache 2.0.52

2010-01-22 Thread Matt Turner
Thanks for the responses. In between times I tried the ProxyPass which seems to work fine, but I'd much rather use plain AJP so I'll try that next. I've had problems previously getting CAS working where the SSL is handled by the webserver - however from what everyone has said and having read ar

Re: [OT] Basic Authentication Failed with multibyte username

2010-01-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, (Marking OT because, well... just because). On 1/22/2010 2:59 PM, Warnier wrote: > Christopher Schultz wrote: >> That "authorization.getBytes()" is just asking for trouble, because it >> uses the platform default encoding to convert characters

AW: Comet Connection Writeable?

2010-01-22 Thread Steffen Heil
Hi I'd like to try it. However I am not accustomed to building tomcat. Do you have this compiled somewhere? Best regards, Steffen -Ursprüngliche Nachricht- Von: Filip Hanik - Dev Lists [mailto:devli...@hanik.com] Gesendet: Dienstag, 19. Januar 2010 15:50 An: Tomcat Users List Betref

Re: newbie: multiple ports for same tomcat server 5.0

2010-01-22 Thread André Warnier
Now here we have a case where I, the dummy on this forum, spend hours creating a work of ascii art explaining clearly and precisely to the OP what he needs to change, and where subsequently the two gurus manage, in just a couple of posts, to totally confuse the OP. t. (And, by the way, it

Re: error-page problem - nested exceptions

2010-01-22 Thread Len Popp
Yes, in the error page you can get the exception as a request attribute, either "javax.servlet.jsp.jspException" or "javax.servlet.error.exception" (sometimes it's one, sometimes the other). In my app, I found that this exception has already been "unwrapped" - it's the original exception, not a Ser

Re: Basic Authentication Failed with multibyte username

2010-01-22 Thread André Warnier
Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, On 1/21/2010 6:35 PM, André Warnier wrote: Basically, I would tend to say that if the server knows who the clients are and vice-versa, you should be free to use any encoding you want, with the limitation that what

Re: mod_jk errors with tomcat 6.0.20 and Apache 2.0.52

2010-01-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Matt, On 1/22/2010 9:25 AM, Matt Turner wrote: > In my case sometimes I do need to pass through the SSL to Tomcat, as > I'm running CAS which requires geniune SSL requests. mod_jk ought to be able to forward all SSL information to Tomcat. Specificall

Re: mod_jk errors with tomcat 6.0.20 and Apache 2.0.52

2010-01-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Peter, On 1/22/2010 7:49 AM, Peter Crowther wrote: > - You're telling AJP to use a secure connection between httpd and Tomcat; AJP doesn't recognize any "secure" connection capability for its own communication. As you've said, AJP /does/ forward SSL

Re: Problem starting connection pooling

2010-01-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mark, On 1/22/2010 8:44 AM, Mark Witczak wrote: > I used: mysql -u foo -p -h test.hostname.com > > Is there a way to force the command to use TCP/IP? is there a parameter > for networking that I should include in context.xml? What you did ought to b

Re: newbie: multiple ports for same tomcat server 5.0

2010-01-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chart, On 1/21/2010 1:53 PM, Chart wrote: > There is a SSI server on the outside that sends request to > 8009 for this tomcat server (from what I have been told). The tomcat > server is running on port 8082. You mean that Tomcat is accepting requests

Re: TLS+SSLv3 but no SSLv2

2010-01-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jens, On 1/22/2010 12:51 PM, Jens Neu wrote: > Christopher, > > maybe that was a bit premature, running with > SSLCipher="-ALL:+HIGH:+MEDIUM:!SSLv2": > > openssl s_client -ssl2 -connect server:8443 > CONNECTED(0003) > --- > SSL handshake has re

RE: newbie: multiple ports for same tomcat server 5.0

2010-01-22 Thread Caldarale, Charles R
> From: Chart [mailto:ccha...@hotmail.com] > Subject: RE: newbie: multiple ports for same tomcat server 5.0 > > Just for learning purposes. Could you take the line out of my > original file and add information like you had stated in your > original update? Sorry, I don't understand what you're a

RE: newbie: multiple ports for same tomcat server 5.0

2010-01-22 Thread Chart
Chuck, Yes we have a firewall that does not allow traffic from the IIS server to the tomcat server on port 80. Just for learning purposes. Could you take the line out of my original file and add information like you had stated in your original update? thanks, n828cl wrote: > >> From: Chart

RE: Solved Tomcat 5.5.28 EL not evaluated

2010-01-22 Thread sharmila punde
Thanks Nishant, Thank you very much. It was very helpful. Regards --- On Fri, 22/1/10, Hadole, Nishant IN BOM SISL wrote: > From: Hadole, Nishant IN BOM SISL > Subject: RE: Tomcat 5.5.28 EL not evaluated > To: "'Tomcat Users List'" > Date: Friday, 22 January, 2010, 17:24 > Check this FAQ -

Re: Tomcat 5.5.28 EL not evaluated

2010-01-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sharmila, On 1/22/2010 5:43 AM, sharmila punde wrote: > My OS is fedora, and i have installed tomcat 5.5.28. I have web app. > My jsp page has EL as follow- ${perosn.name}. Did you mean ${person.name}? Could that be the problem? > I put jsp-api.jar,

RE: newbie: multiple ports for same tomcat server 5.0

2010-01-22 Thread Caldarale, Charles R
> From: Chart [mailto:ccha...@hotmail.com] > Subject: RE: newbie: multiple ports for same tomcat server 5.0 > > I stated I am using port 8082 from the outside and > need to use port 80 on the inside. If your front-end is on the same machine, you will have a port conflict, since it's already got

RE: newbie: multiple ports for same tomcat server 5.0

2010-01-22 Thread Chart
Chuck, I am now confused. I stated I am using port 8082 from the outside and need to use port 80 on the inside. So I am using different ports. So the port conflick that you talked about orignal would never happen (is this correct?). If I am going to have a port conflick, how would Impliment

Re: TLS+SSLv3 but no SSLv2

2010-01-22 Thread Jens Neu
Christopher, maybe that was a bit premature, running with SSLCipher="-ALL:+HIGH:+MEDIUM:!SSLv2": openssl s_client -ssl2 -connect server:8443 CONNECTED(0003) ... --- Ciphers common between both SSL endpoints: RC4-MD5 EXP-RC4-MD5 RC2-CBC-MD5 EXP-RC2-CBC-MD5 DES-CBC-MD5 DES-C

Re: TLS+SSLv3 but no SSLv2

2010-01-22 Thread Jens Neu
Christopher, yes, thats it! Merci bien :-) I was reading http://www.openssl.org/docs/apps/ciphers.html "for reference", thats where I got scared that I had to check all of them for 128bit. Didn't know that SSLCipher= is actually understood by openssl. Its Friday finally :) Jens Health Services

Re: TLS+SSLv3 but no SSLv2

2010-01-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jens, On 1/22/2010 12:30 PM, Jens Neu wrote: > Christopher, > > my "Problem" is that I have a requirement that SSLv2 shall be forbidden, > but not SSLv3 and TLS. On top, also forbidden are ciphers <=128bit. I was > hoping to tackle this with > >

Re: TLS+SSLv3 but no SSLv2

2010-01-22 Thread Jens Neu
Christopher, my "Problem" is that I have a requirement that SSLv2 shall be forbidden, but not SSLv3 and TLS. On top, also forbidden are ciphers <=128bit. I was hoping to tackle this with SSLProtocol="TLSv1+SSLv3" SSLCipher="-ALL:+HIGH:+MEDIUM" without manually s

Re: Adding/removing hosts dynamically?

2010-01-22 Thread Jordan Michaels
Thanks Chuck, I was able to find it and play with it a little bit. Pretty self-explanatory once I figured out how to modify the tomcat-users.xml file to get access to it. It's a real bummer that it's not persistent, but it's still a great app. Thanks for your help! -Jordan Caldarale, Cha

Re: error-page problem - nested exceptions

2010-01-22 Thread rotis23
Hi Len, Thanks for your message. I don't have my 'own' error handler - I just use the error-page elements in web.xml. If I add an error-page for NestedServletException will the exception be available to the corresponding jsp [in the request]? Has anyone extended tomcats error-page implementat

Re: RMI reaper thread prevents JVM from exiting

2010-01-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Thomas, On 1/22/2010 11:25 AM, Thomas Chabaud wrote: > There is a non-daemon thread : "RMI Reaper". > > I've tried to add a servlet context listener to force RMI Object > unexport on shutdown, but it has no effect : > > http://pastebin.com/f324201e2

Re: TLS+SSLv3 but no SSLv2

2010-01-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jens, On 1/22/2010 11:10 AM, Jens Neu wrote: > on http://tomcat.apache.org/tomcat-6.0-doc/apr.html I read for the > SSLProtocol: > > "Protocol which may be used for communicating with clients. The default is > "all", with other acceptable values be

Re: RMI reaper thread prevents JVM from exiting

2010-01-22 Thread Peter Crowther
2010/1/22 Thomas Chabaud : > I have a problem with a webapp using RMI. When I try to shutdown Tomcat > instance, the JVM doesn't exit. > I have called jstack to see the thread dump : > > http://pastebin.com/fa55647 > > There is a non-daemon thread : "RMI Reaper". > > I've tried to add a servlet con

RE: TLS+SSLv3 but no SSLv2

2010-01-22 Thread Jens Neu
unfortunately the behaviour for SSLProtocol="TLSv1" is: j...@eluveitie:~> openssl s_client -ssl3 -connect server:8443 CONNECTED(0003) 9167:error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure:s3_pkt.c:1053:SSL alert number 40 9167:error:1409E0E5:SSL routines:SSL3_WRITE_BY

Re: error-page problem - nested exceptions

2010-01-22 Thread Len Popp
You could have your error handler check if the exception is a NestedServletException and its getRootCause() is a UnAuthorisedAccessException, and display the nested exception's error message in that case. You might want to use a separate for NestedServletException. -- Len On Fri, Jan 22, 2010

RE: TLS+SSLv3 but no SSLv2

2010-01-22 Thread Caldarale, Charles R
> From: Jens Neu [mailto:jens@biotronik.com] > Subject: TLS+SSLv3 but no SSLv2 > > Does this really mean that I can not allow a "TLSv1+SSLv3" setting > while forbidding SSLv2? I was under the impression that specifying TLSv1 would include SSLv3, since there are provisions within TLS to handl

RMI reaper thread prevents JVM from exiting

2010-01-22 Thread Thomas Chabaud
Hi, I have a problem with a webapp using RMI. When I try to shutdown Tomcat instance, the JVM doesn't exit. I have called jstack to see the thread dump : http://pastebin.com/fa55647 There is a non-daemon thread : "RMI Reaper". I've tried to add a servlet context listener to force RMI Object u

TLS+SSLv3 but no SSLv2

2010-01-22 Thread Jens Neu
Dear all, on http://tomcat.apache.org/tomcat-6.0-doc/apr.html I read for the SSLProtocol: "Protocol which may be used for communicating with clients. The default is "all", with other acceptable values being "SSLv2", "SSLv3", "TLSv1", and "SSLv2+SSLv3"." Does this really mean that I can not al

Re: Basic Authentication Failed with multibyte username

2010-01-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, On 1/21/2010 6:35 PM, André Warnier wrote: > Basically, I would tend to say that if the server knows who the clients > are and vice-versa, you should be free to use any encoding you want, > with the limitation that what is exchanged on the wire

Re: Polling and session timeout

2010-01-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Bob, On 1/21/2010 8:36 PM, Bob Hall wrote: > --- On Thu, 1/21/10 at 7:26 AM, Christopher Schultz > wrote: > >> >> If you access the session at all, it counts as a "touch", >> thereby >> extending the life of the session. It's not possible to >> "pe

Re: Polling and session timeout

2010-01-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Pid, On 1/21/2010 5:07 PM, Pid wrote: > On 21/01/2010 15:26, Christopher Schultz wrote: > Pid, > > On 1/21/2010 3:32 AM, Pid wrote: On 21/01/2010 04:45, grailcattt wrote: > > That is exactly what I ended up doing and it is working well.

Re: mod_jk errors with tomcat 6.0.20 and Apache 2.0.52

2010-01-22 Thread Tobias Crefeld
Am Fri, 22 Jan 2010 14:25:11 + schrieb Matt Turner : > The SSL pass-through requirement explains why I was attempting to > pass through to :8443 directly - but it sounds like that's the wrong > approach. If it isn't possible to move the SSL-certificate and -keys to the Apache2 (and change the

Re: [OT] Re: Securing Tomcat Applications from Reverse Engineering

2010-01-22 Thread Mark H. Wood
On Thu, Jan 21, 2010 at 03:02:41PM +, Peter Crowther wrote: > 2010/1/21 Mark H. Wood > > > Reverse engineering is not a technical problem; it is a legal > > problem. You need a lawyer, not a program. > > > > Mmm, yes and no. Burglary is also a legal problem, but I have locks (on / > around

RE: mod_jk errors with tomcat 6.0.20 and Apache 2.0.52

2010-01-22 Thread Matt Turner
In my case sometimes I do need to pass through the SSL to Tomcat, as I'm running CAS which requires geniune SSL requests. (I do also have some SSL requests that tomcat doesn't need to see - which I will send via 8009 as has been suggested). The SSL pass-through requirement explains why I wa

Re: Problem starting connection pooling

2010-01-22 Thread Mark Witczak
On 1/22/2010 8:05 AM, David Smith wrote: Mark Witczak wrote: I'm very new to Tomcat, connection pooling, JSP, etc. and I've been banging my head against a wall for two weeks trying to get a simple program to connect to a MySQL database. *Vital Stats:* Ubuntu 9.10, Java 1.6.0_0, Java Serv

Re: mod_jk errors with tomcat 6.0.20 and Apache 2.0.52

2010-01-22 Thread Tobias Crefeld
I guess that you should exchange the "JkMount /* tomcatssl" by "JkMount /* tomcat1" provided you use a "standard" Tomcat-setup. For a parallel SSL- + Non-SSL-Setup using Apache2 you basically need 2 virtual-hosts in Apache2. One for Port 443 with the standard-SSL-parameters Apache2 expects to inte

Re: problem with tomcat 5.5 and apache AJP

2010-01-22 Thread André Warnier
David Delbecq wrote: and apache is configured as follow: worker.list=lbJboss,lbOld,lbTomcat,status # Define jbossBoromir # modify the host as your host IP or DNS name. worker.jbossBoromir.port=8009 worker.jbossBoromir.host=localhost worker.jbossBoromir.type=ajp13 worker.jbossBoromir.l

Re: Problem starting connection pooling

2010-01-22 Thread David Smith
Mark Witczak wrote: > I'm very new to Tomcat, connection pooling, JSP, etc. and I've been > banging my head against a wall for two weeks trying to get a simple > program to connect to a MySQL database. > > *Vital Stats:* > Ubuntu 9.10, Java 1.6.0_0, Java Servelet 2.5, Java Server Pages 2.1, > JSTL

RE: mod_jk errors with tomcat 6.0.20 and Apache 2.0.52

2010-01-22 Thread Matt Turner
OK - sounds likely, many thanks. I'll give that a whirl. > Date: Fri, 22 Jan 2010 12:49:49 + > Subject: Re: mod_jk errors with tomcat 6.0.20 and Apache 2.0.52 > From: peter.crowt...@melandra.com > To: users@tomcat.apache.org > > I'm not an AJP expert, but I suspect: > > - You're telling AJP

Re: mod_jk errors with tomcat 6.0.20 and Apache 2.0.52

2010-01-22 Thread Peter Crowther
I'm not an AJP expert, but I suspect: - You're telling AJP to use a secure connection between httpd and Tomcat; - The Tomcat connector on port 8443 is a SSL connector, not an AJP connector; - AJP is getting confused. I believe you should only need to configure one worker (the one on 8009); AJP is

mod_jk errors with tomcat 6.0.20 and Apache 2.0.52

2010-01-22 Thread Matt Turner
Hi All, I have an existing Apache 2.0.52 installation, and a new tomcat 6.0.20 installation. They are both sitting on the same Linux box - uname -a returns the following: Linux [machine name] 2.6.9-55.ELsmp #1 SMP Fri Apr 20 16:36:54 EDT 2007 x86_64 x86_64 x86_64 GNU/Linux I'd like if

error-page problem - nested exceptions

2010-01-22 Thread rotis23
Hi All, I use web.xml error-page handlers, some with error-code and other with exception-type. At the end I have a catchall error-page that handles java.lang.Throwable - users never see a stack trace and the world is a good place. However, I've recently added a Hibernate security layer that thr

RE: Tomcat 5.5.28 EL not evaluated

2010-01-22 Thread Hadole, Nishant IN BOM SISL
Check this FAQ - http://faq.javaranch.com/java/ElOrJstlNotWorkingAsExpected With best regards, Nishant Hadole Siemens IT Solutions and Services SIS PRO SI-I Tel.: +91 22 2495 7816 Fax: +91 22 6660 8521 Mailto: nishant.had...@siemens.com www.siemens.co.in -Original Message- From: sharmila

Re: 6.0.24

2010-01-22 Thread Konstantin Kolinko
2010/1/22 Pid : > Just a quick FYI > > Looks like there's some errors on the mirrors at the moment. > I got a couple of 404s and a 500 from different servers. > It might happen, though according to the mirror status monitor page, most mirrors are up-to-date and running. http://www.apache.org/mirr

Tomcat 5.5.28 EL not evaluated

2010-01-22 Thread sharmila punde
Dear All, My OS is fedora, and i have installed tomcat 5.5.28. I have web app. My jsp page has EL as follow- ${perosn.name}. I put jsp-api.jar, servlet-api.jar into /usr/java/jdk1.5.0_16/jre/lib/ext. Servlet works fine, but above EL is considered as plain text. My web.xml of web app has fol

6.0.24

2010-01-22 Thread Pid
Just a quick FYI Looks like there's some errors on the mirrors at the moment. I got a couple of 404s and a 500 from different servers. p - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-

problem with tomcat 5.5 and apache AJP

2010-01-22 Thread David Delbecq
Hello, we are trying to get a working configuration of tomcat behind apache httpd using AJP. This has worked well, for a while. But after some time, the apache httpd server replies with one of those two message, it changes randomly but we are unable to get the tomcat pages to show: Service Te

Re: (tomcat 6) percent encoding problem

2010-01-22 Thread Konstantin Kolinko
2010/1/22 François Duvalier : > Hi, > > When I execute this command: > > curl -XGET -i http://localhost:8080/app/rs/system/EN/foo%2Fbar > > I receive a 400 BAD REQUEST. > > However if I deploy the app to Jetty, the command will work fine. > > Question: Is there a way to configure tomcat to behave l

(tomcat 6) percent encoding problem

2010-01-22 Thread François Duvalier
Hi, When I execute this command: curl -XGET -i http://localhost:8080/app/rs/system/EN/foo%2Fbar I receive a 400 BAD REQUEST. However if I deploy the app to Jetty, the command will work fine. Question: Is there a way to configure tomcat to behave like jetty with regards to percent-encodings in

Re: Securing Tomcat Applications from Reverse Engineering

2010-01-22 Thread Kranti™ K K Parisa
Hi, Thanks for the info I shall take a look at the new licensing link you have sent. Best Regards, Kranti K K Parisa On Fri, Jan 22, 2010 at 11:17 AM, Dmitry Leskov wrote: > To list owner: I am not sure if vendors are prohibited from posting > comments to this list, if they are, let me know a