Re: Problem with Apache Portable Runtime (APR) based Native library for Tomcat

2011-04-13 Thread Mladen Turk
On 04/13/2011 07:14 AM, Jaroslav Fikker wrote: Hi, I also create /opt/tomcat_6_0/bin/setenv.sh file with this content: LD_LIBRARY_PATH=$LD_LIBRARY_PATH:$CATALINA_HOME/lib export LD_LIBRARY_PATH But when I start server with startup.sh script I can find next warning incatalina.out file (but

Re: [OT] servlet-specific error pages

2011-04-13 Thread Francis GALIEGUE
On Wed, Apr 13, 2011 at 00:17, Christopher Schultz ch...@christopherschultz.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 János, On 4/12/2011 4:56 PM, János Löbb wrote: Look the 10.9 Error Handling in the 3.0 specifications.  It is maya to me but you might find what you are

Re: How to hide tomcat console when installed as service

2011-04-13 Thread Amit k
Had a look at this information before too. I think, writing a service, using this information, to check for tomcat service and to check for console and ultimately hiding it seems the way now. Anyways, thanks for reminding me. Only thing wanted to know if is there any way, like making any change

Problem with merged responses - possibly a reused Response or OutputBuffer

2011-04-13 Thread Chris Dumoulin
I'm seeing an intermittent problem with my webapp where a request is sent and the response contains 8184 bytes from some other response followed by the correct response. The setup being used is Nginx 0.8.54 reverse proxying to Tomcat 7.0.11. AJP is the protocol between Nginx and Tomcat. The

Re: Problem with merged responses - possibly a reused Response or OutputBuffer

2011-04-13 Thread André Warnier
Hi. An earlier message to this list [[SECURITY] CVE-2011-1475 Apache Tomcat information disclosure] /may/ have something to do with this. (It talks only about the HTTP connector, but also about content mixup with async requests, so maybe there is a link) Chris Dumoulin wrote: I'm seeing an

Re: Problem with merged responses - possibly a reused Response or OutputBuffer

2011-04-13 Thread Chris Dumoulin
Actually, I saw that notice and tried Tomcat 7.0.12, but saw the same behaviour. I should have mentioned that before. So, I think this is a different issue. - Chris On April 13, 2011 07:27:51 am André Warnier wrote: Hi. An earlier message to this list [[SECURITY] CVE-2011-1475 Apache Tomcat

Re: Problem with Apache Portable Runtime (APR) based Native library for Tomcat

2011-04-13 Thread Jaroslav Fikker
Hi, There is output of ldd command: ldd /opt/tomcat_6_0/lib/libtcnative-1.so linux-vdso.so.1 = (0x7fff4a5d9000) libssl.so.6 = /lib64/libssl.so.6 (0x2ad6f40ad000) libcrypto.so.6 = /lib64/libcrypto.so.6 (0x2ad6f42fa000) libapr-1.so.0 =

Re: Problem with Apache Portable Runtime (APR) based Native library for Tomcat

2011-04-13 Thread Konstantin Kolinko
/lib64/* -- is your Java 64-bit as well? I guess yours is 32-bit, because version.sh printed Architecture: x86 2011/4/13 Jaroslav Fikker fik...@atlas.cz: Hi, There is output of ldd command: ldd /opt/tomcat_6_0/lib/libtcnative-1.so        linux-vdso.so.1 =  (0x7fff4a5d9000)        

Re: Problem with Apache Portable Runtime (APR) based Native library for Tomcat

2011-04-13 Thread Jaroslav Fikker
Hi Konstantin, You are right - my java is 32bit. So that is the probelm in compilation of APR? JF __ Od: Konstantin Kolinko knst.koli...@gmail.com Komu: Tomcat Users List users@tomcat.apache.org Datum: 13.04.2011 14:15 Předmět: Re:

Re: Problem with Apache Portable Runtime (APR) based Native library for Tomcat

2011-04-13 Thread Mladen Turk
On 04/13/2011 02:29 PM, Jaroslav Fikker wrote: So that is the probelm in compilation of APR? LOL. Nope. It's in your java cause you have 64-bit OS, right? Regards -- ^TM - To unsubscribe, e-mail:

Tomcat Windows Integrated Authentication fails with More than 1 Web Application

2011-04-13 Thread Avni, Itamar
Hi all, I'm using Tomcat 5.5.23 on a Windows server 2003 (64 bit). Tomcat runs as a window service, using an Active Directory account. DB is configured to Windows Authentication mode alone. Tomcat contains 2 web applications. The DLL's (sqljdbc_auth.dll) location is the value of Tomcat's

Re: Tomcat Windows Integrated Authentication fails with More than 1 Web Application

2011-04-13 Thread André Warnier
Avni, Itamar wrote: Hi all, I'm using Tomcat 5.5.23 on a Windows server 2003 (64 bit). Tomcat runs as a window service, using an Active Directory account. DB is configured to Windows Authentication mode alone. Tomcat contains 2 web applications. The DLL's (sqljdbc_auth.dll) location is the

RE: [OT] servlet-specific error pages

2011-04-13 Thread Justin Randall
Hi Chris, I'm assuming the servlet is in control of generating all of the errors you are implying? For example, if the servlet doesn't load properly and a 404 would be generated, the servlet would obviously not be in control of handling this exception and this would would have to make use of

Re: Tomcat-oracle secure connection

2011-04-13 Thread Alex Kiernan
Why would you bother? If I'm on the machine and have enough privilege to snoop the traffic, I've enough privilege to disable/remove any encryption (or attach a debugger to the process, or just about anything else). On Mon, Apr 11, 2011 at 7:52 AM, ramram8 ramram...@gmail.com wrote: What if the

Child-first classloading with Embedded Tomcat 7.0.11

2011-04-13 Thread Afkham Azeez
Hi, We are using Embedded Tomcat 7.0.11. It seems that with Embedded Tomcat, the default is parent-first class loading, even though the default in the Tomcat binary distribution is child-first. Is there a way to setup child-first class loading in Embedded Tomcat? Thanks Azeez

Re: Child-first classloading with Embedded Tomcat 7.0.11

2011-04-13 Thread Afkham Azeez
According to http://yzb.hit.edu.cn/docs/class-loader-howto.html, everything in the system classpath will be visible to webapps, and hence will override the classes in the webapps, I think. So, the solution would be to implement a bootstrap mechanism, just like

Re: Problem with merged responses - possibly a reused Response or OutputBuffer

2011-04-13 Thread Chris Dumoulin
In a discussion on Bug 50957 (https://issues.apache.org/bugzilla/show_bug.cgi?id=50957) Mark Thomas said the following: Experience has shown that most instances of this type of error are triggered by application bugs rather than Tomcat bugs - usually in the form of retaining and re-using a

Re: [OT] servlet-specific error pages

2011-04-13 Thread János Löbb
Chris, I was thinking about this section in the FM 10.9.2: nyissz Error-page declarations using the exception-type element in the deployment descriptor must be unique up to the class name of the exception-type. Similarly, error-page declarations using the status-code element must be unique in

Re: 'Parametrizing' context.xml?

2011-04-13 Thread Laicreparc
How can the variable (i.e. here BPVAL be set)? E.g. in server.xml? Is context-param really in context.xml? Looks more like web.xml to me. Bill Barker wrote: Mario Splivalo mario.spliv...@megafon.hr wrote in message news:4b27994e.5080...@megafon.hr... Bill Barker wrote: Mario Splivalo

Tomcat Client Deployer: Cannot resolve the name 'javaee:descriptionGroup' to a(n) 'group' component.

2011-04-13 Thread Ben Fox Moore
I'm trying to use the Tomcat Client Deployer to dynamically update my web app when the java source files are modified, but so far I can't even get the TCD to compile it. I've created the required 'deployer.properties' file with the following contents: webapp=/home/user/Desktop/TestProject/

RE: Tomcat Windows Integrated Authentication fails with More than 1 Web Application

2011-04-13 Thread Avni, Itamar
OK. You can follow at http://social.msdn.microsoft.com/Forums/en-US/sqldataaccess/thread/c66d9782-f3e7-4317-b6e4-22e0446a63e0/. Itamar -Original Message- From: André Warnier [mailto:a...@ice-sa.com] Sent: Wednesday, April 13, 2011 4:13 PM To: Tomcat Users List Subject: Re: Tomcat

[OT cluster]Request to comment

2011-04-13 Thread János Löbb
Hi, I have this write up regarding a tomcat cluster I have to set up: nyissz Clustering Information: Two or more servers with each having a tomcat instance installed. The cluster or proxy server will need to have load balancing. Session Replication between all the tomcat instances on all the

Re: [OT cluster]Request to comment

2011-04-13 Thread Francis GALIEGUE
On Wed, Apr 13, 2011 at 19:01, János Löbb janos.l...@yale.edu wrote: [...] The first 3 paragraphs are done.  I have two machines  with OSX 10.6.5, httpd 2.2.17, mod_jk 1.2.31, tomcat 7.0.10. [...] Just one thing: since you use Apache 2.2.x, why don't you use mod_proxy_ajp? -- Francis

Trying to find session.org.apache.catalina.filters.CSRF_NONCE

2011-04-13 Thread Mathew Samuel
Hi, There's an JSP example line given, with respect to using CSRF (Cross-site Request Forgery), that showed how one could access the CSRF nonce and include it with a URL: c:url var=url value=/show c:param name=id value=0 / c:param name=org.apache.catalina.filters.CSRF_NONCE

Re: [OT] servlet-specific error pages

2011-04-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 János, On 4/13/2011 11:37 AM, János Löbb wrote: I was thinking about this section in the FM 10.9.2: nyissz Error-page declarations using the exception-type element in the deployment descriptor must be unique up to the class name of the

Re: [OT] servlet-specific error pages

2011-04-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Justin, On 4/13/2011 9:17 AM, Justin Randall wrote: Hi Chris, I'm assuming the servlet is in control of generating all of the errors you are implying? Yes and no: For example, if the servlet doesn't load properly and a 404 would be

Re: Help with CsrfPreventionFilter

2011-04-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mathew, On 4/12/2011 3:51 PM, Mathew Samuel wrote: We don't make use of JSTL so I can't access it that way. We do use XSL that is run through a transform. And of course relevant values are retrieved from the back end too. Depending on how to

Re: Trying to find session.org.apache.catalina.filters.CSRF_NONCE

2011-04-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mathew, On 4/13/2011 3:21 PM, Mathew Samuel wrote: There's an JSP example line given, with respect to using CSRF (Cross-site Request Forgery), that showed how one could access the CSRF nonce and include it with a URL: c:url var=url value=/show

Re: [OT cluster]Request to comment

2011-04-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 János, On 4/13/2011 1:01 PM, János Löbb wrote: My problems are starting with the requirement of removing a server from the cluster and adding it back to the cluster without affecting the users. I know just three ways to take a server out from

Re: 'Parametrizing' context.xml?

2011-04-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Laicreparc, On 4/13/2011 11:38 AM, Laicreparc wrote: How can the variable (i.e. here BPVAL be set)? E.g. in server.xml? Did you read the post? It says how to set those values. Is context-param really in context.xml? Looks more like web.xml to

Re: Two Tomcat 7.0.11 installations in the same Linux instance, running both on port 80, without conflicts?

2011-04-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Brian, On 4/12/2011 5:18 PM, Brian Braun wrote: I'm improving my apps frecuently, so everytime I do it I need to upload a new WAR file. When that happens, I face the leaking problem that so far I haven't solved. What leaking problem? - -chris

Re: Child-first classloading with Embedded Tomcat 7.0.11

2011-04-13 Thread Afkham Azeez
Was able to solve this using a bootstrap mechanism. http://frank.zinepal.com/embedded-tomcat-class-loading-trickery was helpful. Azeez On Wed, Apr 13, 2011 at 8:33 PM, Afkham Azeez afk...@gmail.com wrote: According to http://yzb.hit.edu.cn/docs/class-loader-howto.html, everything in the

Re: Child-first classloading with Embedded Tomcat 7.0.11

2011-04-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Afkham, On 4/13/2011 10:05 AM, Afkham Azeez wrote: We are using Embedded Tomcat 7.0.11. It seems that with Embedded Tomcat, the default is parent-first class loading, even though the default in the Tomcat binary distribution is child-first. Yes.

RE: [OT] servlet-specific error pages

2011-04-13 Thread Justin Randall
Hi Chris, Of course. I was wondering about other exceptions or errors that maybe I cannot control from that code. Are you referring to internal exceptions within Tomcat's own code or simply unexpected exceptions within the servlet's implemented code? If it's the later you could always just

RE: [OT] servlet-specific error pages

2011-04-13 Thread Martin Gainty
in web.xml for your webapp map a custom jsp for each returned HTTP status code e.g: error-page error-code401/error-code location/401.jsp/location /error-page error-page error-code403/error-code location/403.jsp/location /error-page error-page

Re: [OT] servlet-specific error pages

2011-04-13 Thread Justin Randall
Hi Martin, What Chris is actually looking for is custom servlet specific error handling in addition to web application error handling (the later is what you have described below). In other words, 401 for Servlet X is directed to a different JSP than 401 for the entire web application.