Re: SSL BIO/NIO setup with openssl CA puzzle

2012-10-31 Thread Brian Burch
On 26/10/12 13:24, Daniel Mikusa wrote: On Oct 26, 2012, at 5:11 AM, Brian Burch wrote: My production tomcat 7.0.26 (and its predecessors back as far as tc 5) have been running with its original SSL server certificate in a JKS keystore for many years. I decided to retire my ancient

Re: Handling requests when under load - ACCEPT and RST vs non-ACCEPT

2012-10-31 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Asankha, On 10/29/12 11:56 PM, Asankha C. Perera wrote: Hi Chris Sorry, also what is your OS (be as specific as possible) and what JVM are you running on? Locally for the Wireshark capture I ran this on: asankha@asankha-dm4:~$ uname -a Linux

Windows Service Security

2012-10-31 Thread Burn William
We are running Tomcat 7.0.29 on Windows 2008 R2 Service Pack 1. My question is this, the documentation specifically states, For optimal security, the service should be run as a separate user, with reduced permissions (see the Windows Services administration tool and its documentation). I am

RE: Windows Service Security

2012-10-31 Thread Leo Donahue - RDSA IT
-Original Message- From: Burn William [mailto:william.b...@willis.com] Sent: Wednesday, October 31, 2012 9:01 AM To: users@tomcat.apache.org Subject: Windows Service Security Can the Tomcat service run as a standard user, Yes does the user need elevated permissions, I don't believe

Re: How do I get Tomcat 7 to start up faster in Linux CentOS kernel version 2.6.18?

2012-10-31 Thread Ognjen Blagojevic
Dilshad, On 30.10.2012 22:55, Dilshad Shahid wrote: I am experiencing a problem with slow start up times for Tomcat 7. I have done some testing by tweaking configuration parameters both on Linux CentOS kernel version 2.6.18 and on Windows 7 using this link as my primary guide:

Re: PDF Download problem tomcat = 7.0.27

2012-10-31 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Johnny, On 10/30/12 3:44 PM, Johnny Six wrote: It looks like Tomcat7 is munging the content-type header. The correct response header should be: Content-Type: multipart/byteranges; boundary=CATALINA_MIME_BOUNDARY good Content-Type:

Re: How do I get Tomcat 7 to start up faster in Linux CentOS kernel version 2.6.18?

2012-10-31 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dilshad, On 10/30/12 5:55 PM, Dilshad Shahid wrote: I am experiencing a problem with slow start up times for Tomcat 7. How slow is slow? If it takes long enough to take a thread dump, please take one or more thread dumps to see what the JVM is

Re: SSL BIO/NIO setup with openssl CA puzzle

2012-10-31 Thread Daniel Mikusa
On Oct 31, 2012, at 10:23 AM, Brian Burch wrote: On 26/10/12 13:24, Daniel Mikusa wrote: On Oct 26, 2012, at 5:11 AM, Brian Burch wrote: My production tomcat 7.0.26 (and its predecessors back as far as tc 5) have been running with its original SSL server certificate in a JKS keystore for

RE: Windows Service Security

2012-10-31 Thread Martin Gainty
Good Afternoon Bill did you have a chance to take a look at the how to for configuring Windows domain controller (to enable Tomcat to support Windows authentication) http://tomcat.apache.org/tomcat-7.0-doc/windows-auth-howto.html#Built-in_Tomcat_support Does this help? Martin

Re: How do I get Tomcat 7 to start up faster in Linux CentOS kernel version 2.6.18?

2012-10-31 Thread Mark Thomas
On 30/10/2012 21:55, Dilshad Shahid wrote: I am experiencing a problem with slow start up times for Tomcat 7. I have done some testing by tweaking configuration parameters both on Linux CentOS kernel version 2.6.18 and on Windows 7 using this link as my primary guide:

Re: Comma related bug in org.apache.catalina.valves.RemoteIpValve

2012-10-31 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Simon, On 10/30/12 1:39 PM, Simon Dean wrote: I'm using Tomcat 6.0.35 on Windows 7 and RHEL 6.x. I think I've stumbled upon a bug in org.apache.catalina.valves.RemoteIpValve. I think you have, too. Please log this in Tomcat's bugzilla:

Re: Injecting JNDI datasource context outside tomcat container

2012-10-31 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Pramod, On 10/30/12 11:32 AM, p.krishnamoor...@accenture.com wrote: Hi, I was working to inject the JNDI datasource context outside the tomcat container. I referred this link -

RFE: jarsToSkip option within each jar file

2012-10-31 Thread Jesse Farinacci
Greetings, I really like that Apache Tomcat provides a way to skip JAR files for scanning. I would like to see this become an optional property within the JAR file itself. Obviously, this means that the JAR would still have to be loaded up in order to discover the entry, but this would ease up

Re: unknown state in VisualVM

2012-10-31 Thread Charles Richard
In case this would help further, I also see this in my debug mod_jk log: [Wed Oct 31 11:33:16 2012] [4110:47377141191536] [info] ajp_connect_to_endpoint::jk_ajp_common.c (995): Failed opening socket to ( 127.0.0.1:8011) (errno=111) [Wed Oct 31 11:33:16 2012] [4110:47377141191536] [error]

Re: unknown state in VisualVM

2012-10-31 Thread Charles Richard
Actually, never mind, wrong timestamp, apache and mod_jk are seemingly down during load with no errors in Apache or mod_jk log. Thanks, Charles On Wed, Oct 31, 2012 at 3:38 PM, Charles Richard charle...@thelearningbar.com wrote: In case this would help further, I also see this in my debug

RE: Comma related bug in org.apache.catalina.valves.RemoteIpValve

2012-10-31 Thread Simon Dean
-Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: 31 October 2012 17:18 To: Tomcat Users List Subject: Re: Comma related bug in org.apache.catalina.valves.RemoteIpValve -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Simon, On 10/30/12

Apache httpd reverse proxy setup

2012-10-31 Thread Marko Asplund
Hi, There are at least 3 different approaches for configuring Apache httpd 2.2 to act as a reverse proxy for Tomcat 7.0: a) mod_proxy_http b) mod_proxy_ajp c) mod_jk There's been quite a lot of discussion about the differences of each one but a lot of that discussion appears to be either not

Re: Apache httpd reverse proxy setup

2012-10-31 Thread Mark Thomas
On 31/10/2012 19:55, Marko Asplund wrote: Hi, There are at least 3 different approaches for configuring Apache httpd 2.2 to act as a reverse proxy for Tomcat 7.0: a) mod_proxy_http b) mod_proxy_ajp c) mod_jk There's been quite a lot of discussion about the differences of each one but

Re: Windows Service Security

2012-10-31 Thread André Warnier
Martin Gainty wrote: Good Afternoon Bill did you have a chance to take a look at the how to for configuring Windows domain controller (to enable Tomcat to support Windows authentication) http://tomcat.apache.org/tomcat-7.0-doc/windows-auth-howto.html#Built-in_Tomcat_support Does this help?

Re: Comma related bug in org.apache.catalina.valves.RemoteIpValve

2012-10-31 Thread André Warnier
Simon Dean wrote: -Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: 31 October 2012 17:18 To: Tomcat Users List Subject: Re: Comma related bug in org.apache.catalina.valves.RemoteIpValve -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Simon, On

Re: Apache httpd reverse proxy setup

2012-10-31 Thread André Warnier
Marko Asplund wrote: Hi, There are at least 3 different approaches for configuring Apache httpd 2.2 to act as a reverse proxy for Tomcat 7.0: a) mod_proxy_http b) mod_proxy_ajp c) mod_jk There's been quite a lot of discussion about the differences of each one but a lot of that discussion

RE: Comma related bug in org.apache.catalina.valves.RemoteIpValve

2012-10-31 Thread Caldarale, Charles R
From: André Warnier [mailto:a...@ice-sa.com] Subject: Re: Comma related bug in org.apache.catalina.valves.RemoteIpValve We'll probably end up with something like tagregex1,regex2,.../tag. Or a single regex, with | between the alternatives (which could be a workaround for you now, I guess).

Re: Windows Service Security

2012-10-31 Thread Cédric Couralet
Bill, - create a local user, e.g. tomcat - stop Tomcat - use whatever path the Microsoft geniuses have invented this week to reach the Services applet - search for the Apache Tomcat Service - right click on it and select Settings or Properties (ditto) - in the tab Login as (or ditto),

Rediect to another Tomcat instance...

2012-10-31 Thread Tony Anecito
Hi All,   I need to do a redirect from one Tomcat instance to another on the same physical server. That should be possible correct?   Regards, -Tony

Re: Rediect to another Tomcat instance...

2012-10-31 Thread André Warnier
Tony Anecito wrote: Hi All, I need to do a redirect from one Tomcat instance to another on the same physical server. That should be possible correct? From the way you phrase this, I guess you mean proxy rather than re-direct. If so, as far as I know you are out of luck, because I think

Re: Windows Service Security

2012-10-31 Thread André Warnier
Cédric Couralet wrote: Bill, - create a local user, e.g. tomcat - stop Tomcat - use whatever path the Microsoft geniuses have invented this week to reach the Services applet - search for the Apache Tomcat Service - right click on it and select Settings or Properties (ditto) - in the tab Login

Re: Rediect to another Tomcat instance...

2012-10-31 Thread Tony Anecito
Hi Andre,   I have a blog app that I want to isolate to another Tomcat instance and leave my web services on my exsting one. Can I not run the second Tomcat service on port 82 for example and redirect requests for my blog to the second Tomcat running of port 82?   Does that help? -Tony --- On

Re: Windows Service Security

2012-10-31 Thread Cédric Couralet
Maybe as a suggestion for the people who make the installers for Tomcat/Windows ? I'm not sure I understand (you'll have to excuse my poor understanding of english nuance :) ) My reply was not a suggestion, but it would be great if the installer could provide the option. I never looked how

RE: Rediect to another Tomcat instance...

2012-10-31 Thread Caldarale, Charles R
From: Tony Anecito [mailto:adanec...@yahoo.com] Subject: Re: Rediect to another Tomcat instance... I have a blog app that I want to isolate to another Tomcat instance and leave my web services on my exsting one. Can I not run the second Tomcat service on port 82 for example and redirect

RE: Rediect to another Tomcat instance...

2012-10-31 Thread Tony Anecito
Many thanks Chuck! --- On Wed, 10/31/12, Caldarale, Charles R chuck.caldar...@unisys.com wrote: From: Caldarale, Charles R chuck.caldar...@unisys.com Subject: RE: Rediect to another Tomcat instance... To: Tomcat Users List users@tomcat.apache.org Date: Wednesday, October 31, 2012, 4:04 PM