Re: Recognizing certificate removal (SmartCard)

2012-12-05 Thread André Warnier
Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Will, On 12/4/12 2:47 PM, Will Nordmeyer wrote: Thanks for the quick response and the thoughts. a 5 minute timeout wouldn't be acceptable in our environment - theory being, if user A pulls his smart card out (but didn't

Re: Suggestion for improving Tomcat startup performance...

2012-12-05 Thread Pid
On 05/12/2012 01:05, Tony Anecito wrote: Also, if there is some other email group I should be using for technical questions about use of Tomcat please let me know. No, this is it. p -- [key:62590808] signature.asc Description: OpenPGP digital signature

Re: Running Tomcat under jsvc - logging problems

2012-12-05 Thread Lyallex
On 4 December 2012 21:18, Konstantin Kolinko knst.koli...@gmail.com wrote: 2012/12/5 Lyallex lyal...@gmail.com: On 4 December 2012 19:41, Konstantin Kolinko knst.koli...@gmail.com wrote: 2012/12/4 Lyallex lyal...@gmail.com: On 4 December 2012 18:50, Konstantin Kolinko

RE: Tomcat 7 SSL Session ID

2012-12-05 Thread Esmond Pitt
Yes but he *already has* an SSL session which he states is being invalidated. To the limited extent to which I could make sense of your incomprehensible post, it appears to be 100% irrelevant. -Original Message- From: Martin Gainty [mailto:mgai...@hotmail.com] Sent: Wednesday, 5 December

Re: Data sources definitions are lost in memory

2012-12-05 Thread Robert Anderson
Hi Konstantin, 1. This NullPointerException happens when an application starts up? (Do the apps perform the lookup once and cache the result, or they perform multiple lookups?) No, it happens after application starts up. The applications perform multiple lookups. 2. What is seen in JNDI

Re: Recognizing certificate removal (SmartCard)

2012-12-05 Thread Will Nordmeyer
On Tue, Dec 4, 2012 at 3:07 PM, Christopher Schultz ch...@christopherschultz.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Will, On 12/4/12 2:47 PM, Will Nordmeyer wrote: Thanks for the quick response and the thoughts. a 5 minute timeout wouldn't be acceptable in our

Apache issue

2012-12-05 Thread vicky007aggarwal
Hello Guys, My apache instance after sometime become unresponsive to restore it i need to restart it. Weird thing is that no exception/error is coming in logs. Can you please suggest what all things i can check for my apache. Is there any jvm related things which i need to check. Please

Re: Apache issue

2012-12-05 Thread Mohammad Tariq
Hello Vicky, What are your configs and h/w specs ?Make sure you have enough memory? Regards, Mohammad Tariq On Wed, Dec 5, 2012 at 7:25 PM, vicky007aggar...@yahoo.co.in wrote: Hello Guys, My apache instance after sometime become unresponsive to restore it i need to restart it.

Re: Apache issue

2012-12-05 Thread Darryl Lewis
Is there anything in the error log? Access log? What applications are you running on it? What version is it? What OS are you on? On 6/12/12 12:25 AM, vicky007aggar...@yahoo.co.in vicky007aggar...@yahoo.co.in wrote: Hello Guys, My apache instance after sometime become unresponsive to restore it

Re: Apache issue

2012-12-05 Thread vicky
Is there anything in the error log? Access log? === No errors/exception in logs What applications are you running on it?  basic customer data entry application deployed on tomcart What version is it? == Apache 2.2 What OS are you on? == Linux Redhat 5

Re: [OT] Tomcat 7 SSL Session ID

2012-12-05 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, On 12/5/12 2:49 AM, André Warnier wrote: Esmond Pitt wrote: Broken pipes don't invalidate the SSL session. They just break the TCP connection. The SSL session persists, across multiple TCP connections, until it is specifically invalidated

Re: Recognizing certificate removal (SmartCard)

2012-12-05 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, On 12/5/12 3:12 AM, André Warnier wrote: Other than that, and without any pretense at offering a solution to the present issue, maybe this is the point where one needs to step back and ask oneself if this is really a problem of the

Re: Recognizing certificate removal (SmartCard)

2012-12-05 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Will, On 12/5/12 7:33 AM, Will Nordmeyer wrote: On Tue, Dec 4, 2012 at 3:07 PM, Christopher Schultz ch...@christopherschultz.net wrote: Will, On 12/4/12 2:47 PM, Will Nordmeyer wrote: Thanks for the quick response and the thoughts. a 5 minute

Re: Apache issue

2012-12-05 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Vicky, On 12/5/12 10:35 AM, vicky wrote: Is there anything in the error log? Access log? === No errors/exception in logs What applications are you running on it? basic customer data entry application deployed on tomcart What version is it?

Re: [OT] Tomcat7.0-Setting property 'threadPriority' did not find a matching property

2012-12-05 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Konstantin, On 12/5/12 12:17 AM, Konstantin Kolinko wrote: 2012/12/3 Caldarale, Charles R chuck.caldar...@unisys.com: From: Weixiang [mailto:kurt.weixi...@huawei.com] Subject: Tomcat7.0-Setting property 'threadPriority' did not find a matching

Re: Apache issue

2012-12-05 Thread Darryl Lewis
What is the memory use when it dies? How much cpu is being used by tomcat? You probably have a fault in the application. On 6/12/12 2:05 AM, vicky vicky007aggar...@yahoo.co.in wrote: Is there anything in the error log? Access log? === No errors/exception in logs What applications are you

Re: [OT] Recognizing certificate removal (SmartCard)

2012-12-05 Thread André Warnier
Will Nordmeyer wrote: ... Oddly enough, yes, it is a valid use case. we have specific scenarios where there are common use PCs that have a generic ID logged in, As far as I remember the classics, that in itself is already a flaw with regard to security, no ? but they use their CAC

Re: [OT] Recognizing certificate removal (SmartCard)

2012-12-05 Thread David kerber
On 12/5/2012 1:35 PM, André Warnier wrote: ... (*) Come to think of it, it would be rather universal as a solution. and not so complex to set up. I may have to patent this idea... Too late (at least in the US); you just made it public...

Re: [OT] Recognizing certificate removal (SmartCard)

2012-12-05 Thread André Warnier
David kerber wrote: On 12/5/2012 1:35 PM, André Warnier wrote: ... (*) Come to think of it, it would be rather universal as a solution. and not so complex to set up. I may have to patent this idea... Too late (at least in the US); you just made it public... Shuks. Ok then, I'll have to be

Re: [OT] Recognizing certificate removal (SmartCard)

2012-12-05 Thread David kerber
On 12/5/2012 4:18 PM, André Warnier wrote: David kerber wrote: On 12/5/2012 1:35 PM, André Warnier wrote: ... (*) Come to think of it, it would be rather universal as a solution. and not so complex to set up. I may have to patent this idea... Too late (at least in the US); you just made it

Re: [OT] Recognizing certificate removal (SmartCard)

2012-12-05 Thread André Warnier
David kerber wrote: On 12/5/2012 4:18 PM, André Warnier wrote: David kerber wrote: On 12/5/2012 1:35 PM, André Warnier wrote: ... (*) Come to think of it, it would be rather universal as a solution. and not so complex to set up. I may have to patent this idea... Too late (at least in the

RE: [OT] Recognizing certificate removal (SmartCard)

2012-12-05 Thread Caldarale, Charles R
From: André Warnier [mailto:a...@ice-sa.com] Subject: Re: [OT] Recognizing certificate removal (SmartCard) Too late (at least in the US); you just made it public... Shuks. Ok then, I'll have to be satisfied with the glory. The US patent law has changed (but may not go into effect until

Re: [OT] Recognizing certificate removal (SmartCard)

2012-12-05 Thread André Warnier
Caldarale, Charles R wrote: From: André Warnier [mailto:a...@ice-sa.com] Subject: Re: [OT] Recognizing certificate removal (SmartCard) Too late (at least in the US); you just made it public... Shuks. Ok then, I'll have to be satisfied with the glory. The US patent law has changed (but

RE: Tomcat 7 SSL Session ID

2012-12-05 Thread Esmond Pitt
Vincent RST always terminates a TCP connection. The question is really why was it *sent.* The usual reason is writing to a connection that has already been closed by the peer. Is there an incoming close_notify higher up in the SSL log? I suppose not otherwise an SSLException would have been