Re: How to get Tomcat HTTP port during startup of the server

2011-10-06 Thread Pid *
On 6 Oct 2011, at 19:22, Lahiru Gunathilake wrote: > Hi Charles, > > This is my usecase, I want to register my application URL to a repository > and there is another remote application who reads that URL somewhere and > invoke my application. So during the startup I need to register them before >

Re: JSP page that will not update

2011-10-06 Thread Konstantin Kolinko
2011/10/7 Stephen Caine : > > I have set meta tags for no cache, no pragma, etc., all to no avail. What do you mean? tags inside HTML document are useless for this. You have to set HTTP headers. > > What is most interesting is that all of this worked in Tomcat 5.5.7, but now > using Tomcat 5.5.

Re: JSP page that will not update

2011-10-06 Thread Stephen Caine
Konstantin, Thank you for your reply. I will try to be more specific. The function I have on the page is a simple call to the OS (Mac) for the current date and time. The first time the page is called, the current date and time is shown. However, if the window is closed and the page is called

Re: Should Form Authentication Valve restore request body on a PUT?

2011-10-06 Thread Nicholas Sushkin
I now reconfigured DefaultServlet in conf/web.xml with readonly=false. Now, an unauthenticated PUT (with or without a body) returns 204 No Content instead of the login form. Seems like a bug. Should I add this behavior to Bug #51940 or a new bug? On Thursday, October 06, 2011 16:35:16 Nicholas

Re: Log4j per context admin managable configs?

2011-10-06 Thread Rainer Jung
On 07.10.2011 03:12, Ilya Kazakevich wrote: > Hello, > > My app uses log4j. I have several apps running in my tomcat 6 in different > contexts. I want to log them to different files but filenames (as well as > levels and even appenders) should be configurable by admin. > > Something like this: >

Log4j per context admin managable configs?

2011-10-06 Thread Ilya Kazakevich
Hello, My app uses log4j. I have several apps running in my tomcat 6 in different contexts. I want to log them to different files but filenames (as well as levels and even appenders) should be configurable by admin. Something like this: ./config/ENGINE_NAME/HOST_NAME/ContextName/log4j.properties

Re: JSP page that will not update

2011-10-06 Thread Konstantin Kolinko
2011/10/7 Stephen Caine : > List users, > > I recently updated to Tomcat 5.5.34 from 5.5.7.  Keeping all the > configuration files the same, I now notice that a jsp page that opens cached > data whereas before the page always loaded updated data.  The call to the > page is via a javascript using

two questions about the session timeout in tomcat

2011-10-06 Thread Bill Wang
Hi Tomcat Guru, Recently one of Tomcat application has performance issue, which get slow respond with high sessions. One team member recommend me to adjust the session timeout from 60 minutes to 30 minutes. I will do that, but before change it, I'd like to understand how the performance related

Re: Should Form Authentication Valve restore request body on a PUT?

2011-10-06 Thread Nicholas Sushkin
I found out that in Tomcat 6.0 trunk, if user is not authentication and app is configured for FORM authentication, POST and GET requests return 200 and the login form, but PUT returns 403 and error page. What might explain the difference in handling PUT? I tried to run in debugger, but it wasn

JSP page that will not update

2011-10-06 Thread Stephen Caine
List users, I recently updated to Tomcat 5.5.34 from 5.5.7. Keeping all the configuration files the same, I now notice that a jsp page that opens cached data whereas before the page always loaded updated data. The call to the page is via a javascript using window.open. Some questions… 1. H

Re: How to get Tomcat HTTP port during startup of the server

2011-10-06 Thread Lahiru Gunathilake
HI Christopher, That is what I have already done ! I thought its not nice users to put the same configuration in to another properties file ! Somehow currently I have a solution but I am trying to find a better solution. I appreciate your responses ! Tomcat user list seems awesome ! Lahiru On

Re: AW: Preferred configuration with Hardware Loadbalancer

2011-10-06 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alexander, On 10/6/2011 6:43 AM, Alexander Diedler wrote: > I mean a frontend Apache httpd and backend Tomcat server. > Loadbalancing would be done by a hardware load balancer fronted to > the Apache Webserver, so we should not balance the request tw

Re: How to get Tomcat HTTP port during startup of the server

2011-10-06 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Lahiru, On 10/6/2011 2:21 PM, Lahiru Gunathilake wrote: > This is my usecase, I want to register my application URL to a > repository and there is another remote application who reads that > URL somewhere and invoke my application. So during the start

Re: Securing Tomcat cluster communication

2011-10-06 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Azeez, On 10/6/2011 10:17 AM, Afkham Azeez wrote: > Is there a way to do authentication in Tribes when new members try > to join a cluster so that unauthorized nodes cannot join in? Also, > when clustering messages are sent back & forth, how do we ens

Re: Detecting a login or logoff event

2011-10-06 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chema, On 10/6/2011 10:23 AM, Chema wrote: > 2011/10/6 Martin O'Shea > >> >> Detecting a logoff is easier using the sessionDestroyed method. >> > > How do you detect that an user is closing his browser ? You cannot. The best you can hope for is

Re: Detecting a login or logoff event

2011-10-06 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Martin, On 10/6/2011 9:29 AM, Martin O'Shea wrote: > I need to be able to intercept a successful authentication of a > login / logout request which can then be used to make a series of > system updates to record the fact. > > So, if John Doe has just

Re: How to get Tomcat HTTP port during startup of the server

2011-10-06 Thread Lahiru Gunathilake
Hi Charles, This is my usecase, I want to register my application URL to a repository and there is another remote application who reads that URL somewhere and invoke my application. So during the startup I need to register them before I get any request. Lahiru On Thu, Oct 6, 2011 at 1:38 PM, Cal

RE: How to get Tomcat HTTP port during startup of the server

2011-10-06 Thread Caldarale, Charles R
> From: Lahiru Gunathilake [mailto:glah...@gmail.com] > Subject: How to get Tomcat HTTP port during startup of the server > I have a requirement of getting the Tomcat HTTP port during > startup of my application. The obvious first question is: why? Also, you must know that Tomcat may be liste

How to get Tomcat HTTP port during startup of the server

2011-10-06 Thread Lahiru Gunathilake
Hi all, I have a requirement of getting the Tomcat HTTP port during startup of my application. I have the ServletContext object in me during startup, before getting any HttpRequest I need to talk tomcat HTTP port. I write a reflection code to access that even it doesn't work always I don't know wh

Re: AW: Securing Tomcat cluster communication

2011-10-06 Thread Afkham Azeez
Correct. What we have between nodes in a cluster is a channel. My questions are related to securing this channel. On Thu, Oct 6, 2011 at 8:17 PM, Ronald Klop (Mailing List) < ronald-mailingl...@base.nl> wrote: > A 'connector' is used between for example Apache httpd and Tomcat. It is > not used

Re: AW: Securing Tomcat cluster communication

2011-10-06 Thread Ronald Klop (Mailing List)
A 'connector' is used between for example Apache httpd and Tomcat. It is not used between Tomcat nodes in a cluster. Ronald. Op donderdag, 6 oktober 2011 16:22 schreef Alexander Diedler : Hello, Please search for "secret" in http://tomcat.apache.org/connectors-doc/reference/workers

Re: Securing Tomcat cluster communication

2011-10-06 Thread Afkham Azeez
Thanks Alexander. That would work for authentication. But how could we achieve confidentiality when it comes to the clustering messages (state replication etc)? On Thu, Oct 6, 2011 at 7:52 PM, Alexander Diedler wrote: > Hello, > Please search for "secret" in > http://tomcat.apache.org/connectors-

Re: Securing Tomcat cluster communication

2011-10-06 Thread Afkham Azeez
I had a look at the Tribes code. Can somebody please explain how Channel.SEND_OPTIONS_SECURE works? >From the JavaDoc: SEND_OPTIONS_SECURE - Message is sent over an encrypted channel How is this encrypted channel setup? How do we define the keys/keystores etc? On Thu, Oct 6, 2011 at 7:47 PM, Af

Re: Detecting a login or logoff event

2011-10-06 Thread Chema
2011/10/6 Martin O'Shea > > Detecting a logoff is easier using the sessionDestroyed method. > How do you detect that an user is closing his browser ?

AW: Securing Tomcat cluster communication

2011-10-06 Thread Alexander Diedler
Hello, Please search for "secret" in http://tomcat.apache.org/connectors-doc/reference/workers.html Only requests from members with the same secret word will be acceped. Greetings Alexander -Ursprüngliche Nachricht- Von: Afkham Azeez [mailto:afk...@gmail.com] Gesendet: Donnerstag, 6.

RE: Detecting a login or logoff event

2011-10-06 Thread Martin O'Shea
I had thought to use scriptlets. But I've rigged a filter on the server which tests for the mappings of the few protected pages which require logins. It seems to work and update session variables which is what I'm after. My issue is that a session may well have been created prior to login so us

Securing Tomcat cluster communication

2011-10-06 Thread Afkham Azeez
Hi folks, Is there a way to do authentication in Tribes when new members try to join a cluster so that unauthorized nodes cannot join in? Also, when clustering messages are sent back & forth, how do we ensure security? Thanks Azeez

RE: Detecting a login or logoff event

2011-10-06 Thread Caldarale, Charles R
> From: Martin O'Shea [mailto:app...@dsl.pipex.com] > Subject: Detecting a login or logoff event > I need to be able to intercept a successful authentication of a > login / logout request which can then be used to make a series > of system updates to record the fact. > I am thinking about scrip

RE: Detecting a login or logoff event

2011-10-06 Thread Martin O'Shea
Unfortunately I'm not using spring in my application but thanks anyway. -Original Message- From: Chema [mailto:demablo...@gmail.com] Sent: 06 Oct 2011 15 02 To: Tomcat Users List Subject: Re: Detecting a login or logoff event For logout, you can implement a HttpSessionListener . It has g

Re: Detecting a login or logoff event

2011-10-06 Thread Chema
For logout, you can implement a HttpSessionListener . It has got a method: public void sessionDestroyed(HttpSessionEvent se) It's invoked when http session is invalidated. ( session.invalidated() ) So, you have to invalidate http session when user makes logout ( i.e, user clicks a logout button

Re: AW: Preferred configuration with Hardware Loadbalancer

2011-10-06 Thread Ronald Klop (Mailing List)
I don't have a crystal ball to look into your setup, but I would remove httpd and set up the LB and Tomcat. Less moving parts, so it is easier to think about. And read this: http://tomcat.apache.org/tomcat-7.0-doc/cluster-howto.html Ronald. Op donderdag, 6 oktober 2011 12:43 schreef Alexander

Detecting a login or logoff event

2011-10-06 Thread Martin O'Shea
I need to be able to intercept a successful authentication of a login / logout request which can then be used to make a series of system updates to record the fact. So, if John Doe has just logged in successfully, an update is made to his session like: session.setAttribute("loggedIntoSession",

Re: ISAPI Redicect - Request Entitiy too large

2011-10-06 Thread André Warnier
Rainer Jung wrote: On 06.10.2011 10:17, Alexander Diedler wrote: Yes, that´s it. We changed the size to 12k and everything works fine. It is a lot tricky, that the default value is not fitting in a default environment. Increasing the max_packet_size beyond what is normally needed in most cases

Re: Using multiple login pages

2011-10-06 Thread Pid
On 05/10/2011 18:51, Martin O'Shea wrote: > > /jsp/index/newjsp.jsp > This is incorrect, it should contain a list of welcome-file elements which indicated which files can be used as index files, when found in a directory. It shouldn't give a full path to a specific file: ind

AW: Preferred configuration with Hardware Loadbalancer

2011-10-06 Thread Alexander Diedler
Hello, I mean a frontend Apache httpd and backend Tomcat server. Loadbalancing would be done by a hardware load balancer fronted to the Apache Webserver, so we should not balance the request two times. It should be only a Failovercluster. Best regards Alexander -Ursprüngliche Nachricht---

Re: ISAPI Redicect - Request Entitiy too large

2011-10-06 Thread Rainer Jung
On 06.10.2011 10:17, Alexander Diedler wrote: > Yes, that´s it. We changed the size to 12k and everything works fine. > It is a lot tricky, that the default value is not fitting in a default > environment. > Thanks to all for your help. I improved logging in this situation a bit for the next relea

Re: Preferred configuration with Hardware Loadbalancer

2011-10-06 Thread Ronald Klop (Mailing List)
What do you mean by Apache Webserver? Do you mean Apache Tomcat or Apache httpd? And do you want Failover (active-passive) or Loadbalancing (active-active)? Ronald. Op donderdag, 6 oktober 2011 10:36 schreef Alexander Diedler : Hello, I am just planning a Application cluster fo

Preferred configuration with Hardware Loadbalancer

2011-10-06 Thread Alexander Diedler
Hello, I am just planning a Application cluster for Tomcat. We have a big hardware loadbalancer (Cisco) and three virtual servers. We talked about several configurations, but it is not clear for us, how to build a Tomcat cluster, with Failover and Session-Replication, but without Loadbalancing? E

RE: Using multiple login pages

2011-10-06 Thread Martin O'Shea
Ok. I think, I think I have it now to my satisfaction although much work remains. Thanks Chris and Charles. -Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: 06 Oct 2011 01 45 To: Tomcat Users List Subject: Re: Using multiple login pages -BEGI

AW: AW: ISAPI Redicect - Request Entitiy too large

2011-10-06 Thread Alexander Diedler
Yes, that´s it. We changed the size to 12k and everything works fine. It is a lot tricky, that the default value is not fitting in a default environment. Thanks to all for your help. BR Alex -Ursprüngliche Nachricht- Von: cjder...@gmail.com [mailto:cjder...@gmail.com] Im Auftrag von chr

Web hosting suggestions for Tomcat

2011-10-06 Thread Murat Birben
Hi everyone, I want to hear your suggestions about web hosts that provide Tomcat and MySQL. Which one do you prefer to use? Your experiences are more valuable than the sites offers to me. Thank you in advance for your answers. Best, -- Murat BIRBEN

Re: Problem with Tomcat 6.0.33 Session replication

2011-10-06 Thread Rainer Jung
On 05.10.2011 16:41, Tobias Quosigk wrote: > I'm running 2 servers with Tomcat 6.0.33 and session replication. > Tomcat session replication only works with Tomcat starting the first time > the server (Windows Server 2008 R2 64-bit) boots. > > When I stop and then start the Tomcat service via Win

Re: ISAPI Redicect - Request Entitiy too large

2011-10-06 Thread Rainer Jung
On 05.10.2011 12:53, chris derham wrote: > Alexander, > > If you are using authorisation header, then you are using SPNGEO. This > header encodes the users group membership in the authorisation header. By > default tomcat has an 8k maximum header, whilst users belonging to many > groups can have a