Re: IllegalStateException sending WebSocket message that worked a few months ago

2013-11-25 Thread Konstantin Kolinko
2013/11/26 Nick Williams : > > On Nov 25, 2013, at 9:11 PM, Konstantin Kolinko wrote: > >> 2013/11/25 Nick Williams : >>> I've written a simple Servlet/WebSocket client that sends a message over >>> the Session each time a GET request comes in. This worked a few months ago: >>> >>>@Override >>

Re: IllegalStateException sending WebSocket message that worked a few months ago

2013-11-25 Thread Nick Williams
On Nov 25, 2013, at 9:11 PM, Konstantin Kolinko wrote: > 2013/11/25 Nick Williams : >> I've written a simple Servlet/WebSocket client that sends a message over the >> Session each time a GET request comes in. This worked a few months ago: >> >>@Override >>protected void doGet(HttpServle

Re: IllegalStateException sending WebSocket message that worked a few months ago

2013-11-25 Thread Konstantin Kolinko
2013/11/25 Nick Williams : > I've written a simple Servlet/WebSocket client that sends a message over the > Session each time a GET request comes in. This worked a few months ago: > > @Override > protected void doGet(HttpServletRequest request, HttpServletResponse > response) >

Re: HTTP cache control?

2013-11-25 Thread Konstantin Kolinko
2013/11/25 Christopher Schultz : > On 11/25/13, 10:27 AM, David Balažic wrote: >> Hi! >> >> Considering that JSP pages are by definition dynamic (different on >> each GET), why doesn't Tomcat set the HTTP headers in the line of >> "do not cache this, it's dynamic!" by default for all generated >> H

Re: [OT] Symantic has a first tomcat worm ;-)

2013-11-25 Thread Ognjen Blagojevic
Chris, On 25.11.2013 20:56, Christopher Schultz wrote: What most users do is to copy the XML example, and paste it into tomcat-users.xml. If that were the case, I would have expected to see "tomcat:s2cret" listed in the worm's "obvious creds" list. Since it's not there, I suppose that

Re: maxThread not set in Tomcat 7

2013-11-25 Thread Saurabh Makol
Understood, thanks. On Mon, Nov 25, 2013 at 3:24 PM, Caldarale, Charles R < chuck.caldar...@unisys.com> wrote: > > From: Saurabh Makol [mailto:saurabh.ma...@gmail.com] > > Subject: Re: maxThread not set in Tomcat 7 > > > Even setting it as lower case doesn't make any difference: > > You already

RE: maxThread not set in Tomcat 7

2013-11-25 Thread Caldarale, Charles R
> From: Saurabh Makol [mailto:saurabh.ma...@gmail.com] > Subject: Re: maxThread not set in Tomcat 7 > Even setting it as lower case doesn't make any difference: You already had it in lower case. Read the doc (and the responses) more carefully; the attribute name is _not_ maxthreads. http://to

Re: maxThread not set in Tomcat 7

2013-11-25 Thread Saurabh Makol
Thanks all for your reply, Even setting it as lower case doesn't make any difference: It still shows me as default value which is 200. However as per your suggestion I did notice this in the server logs Nov 25, 2013 2:10:48 PM org.apache.catalina.startup.SetAllPropertiesRule begin WARNING: [S

Re: [OT] Symantic has a first tomcat worm ;-)

2013-11-25 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Ognjen, On 11/25/13, 7:27 AM, Ognjen Blagojevic wrote: > Current 401 page for Manager application says something like: > > You are not authorized to view this page. If you have not > changed any configuration files, please examine the file > c

Re: maxThread not set in Tomcat 7

2013-11-25 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Chuck, On 11/25/13, 2:39 PM, Caldarale, Charles R wrote: >> From: Christopher Schultz [mailto:ch...@christopherschultz.net] >> Subject: Re: maxThread not set in Tomcat 7 > >> I haven't tried it, but perhaps Tomcat is case-sensitive when it >> come

Re: [OT] Symantic has a first tomcat worm ;-)

2013-11-25 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 11/25/13, 5:08 AM, Mark Thomas wrote: > Folks that disabled the LockOutRealm in server.xml that protects > against brute-force password attacks (against any app - not just > the Manager) should probably be worried. I had configured my Mana

RE: maxThread not set in Tomcat 7

2013-11-25 Thread Caldarale, Charles R
> From: Christopher Schultz [mailto:ch...@christopherschultz.net] > Subject: Re: maxThread not set in Tomcat 7 > I haven't tried it, but perhaps Tomcat is case-sensitive when it comes > to XML attribute names. No perhaps about it - it's always case sensitive. - Chuck THIS COMMUNICATION MAY C

Re: HTTP cache control?

2013-11-25 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 David, On 11/25/13, 10:27 AM, David Balažic wrote: > Hi! > > Considering that JSP pages are by definition dynamic (different on > each GET), why doesn't Tomcat set the HTTP headers in the line of > "do not cache this, it's dynamic!" by default for

Re: maxThread not set in Tomcat 7

2013-11-25 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Saurabh, On 11/25/13, 2:23 PM, Saurabh Makol wrote: > connectionTimeout="6" redirectPort="443" maxthreads="250" > > > The server gets started without any issue however when I go to the > manager site > > http://127.0.0.1/manager/status > > I

Re: maxThread not set in Tomcat 7

2013-11-25 Thread Mark Thomas
On 25/11/2013 19:23, Saurabh Makol wrote: > Am I missing something or not setting the property properly? Yes and yes. Attribute names are case sensitive. Mark - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For a

Re: [OT] Java +GC question

2013-11-25 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Howard, On 11/24/13, 10:52 PM, Howard W. Smith, Jr. wrote: > On Sun, Nov 24, 2013 at 7:15 PM, André Warnier > wrote: > >> Caldarale, Charles R wrote: >> >>> From: André Warnier [mailto:a...@ice-sa.com] Subject: Java +GC >>> question >>> >>

maxThread not set in Tomcat 7

2013-11-25 Thread Saurabh Makol
Hello Tomcat experts, I am running Tomcat 7 on Window Server 2008 and below in my connector setting present in server.xml The server gets started without any issue however when I go to the manager site http://127.0.0.1/manager/status It still show the max thread as 200 "http-bio-127.0.0.1-8

Re: Java +GC question

2013-11-25 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 André, On 11/24/13, 7:29 AM, André Warnier wrote: > Hi. This is not a pure Tomcat question, just related. I hope that > the Java expertise present on this list might allow a quick rough > answer. > > OS : Debian 3.2.46-1~bpo60+1 i686 GNU/Linux > >

Re: Another Non-blocking IO Question

2013-11-25 Thread Daniel Mikusa
On Nov 25, 2013, at 12:19 PM, "Caldarale, Charles R" wrote: >> From: Daniel Mikusa [mailto:dmik...@gopivotal.com] >> Subject: Another Non-blocking IO Question > >> Most of the time it works, but in one case I'm seeing requests hang. > > You know the ritual: > > 1) Tomcat version? > 2) JDK ve

RE: Another Non-blocking IO Question

2013-11-25 Thread Caldarale, Charles R
> From: Daniel Mikusa [mailto:dmik...@gopivotal.com] > Subject: Another Non-blocking IO Question > Most of the time it works, but in one case I'm seeing requests hang. You know the ritual: 1) Tomcat version? 2) JDK version? 3) Thread dump? > in this case "onWritePossible" (i.e. my WriteListene

Another Non-blocking IO Question

2013-11-25 Thread Daniel Mikusa
I've created a class that implements ReadListener and WriteListener, called EchoListener. It's supposed to echo input to the output stream using the non-blocking IO api. Most of the time it works, but in one case I'm seeing requests hang. I've debugged this a bit and here's what seems to be t

HTTP cache control?

2013-11-25 Thread David Balažic
Hi! Considering that JSP pages are by definition dynamic (different on each GET), why doesn't Tomcat set the HTTP headers in the line of "do not cache this, it's dynamic!" by default for all generated HTML (*.jsp files and servlet responses)? Regards, David --

Re: [OT] Issue with cgi/perl webpage

2013-11-25 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Felipe, On 11/22/13, 10:29 AM, Felipe wrote: > Interesting, so do container-based systems such as Tomcat rely > heavely on httpd? No, but it's quite common to see httpd used to "front" a Tomcat-based application. This is a good strategy when you ne

Re: with useHttpOnly="true" my browser could access cookies through javascript.

2013-11-25 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Sush, On 11/24/13, 5:05 AM, sush3152 . wrote: > Thanks Chris.This is really useful. As you suggested,this time i > let tomcat to manage the sessionID by removing > response.setHeader("SET-COOKIE", "JSESSIONID=" + sessionid. > from the code.I co

Re: [OT] Symantic has a first tomcat worm ;-)

2013-11-25 Thread Ognjen Blagojevic
Mikolaj, On 25.11.2013 12:46, Mikolaj Rydzewski wrote: On 25.11.2013 12:42, Ognjen Blagojevic wrote: I also think it would be very usefull if 401 error page for manager application does not example password "s3cret", but randomly generated long password unique for every request. I guess there

Re: [OT] Symantic has a first tomcat worm ;-)

2013-11-25 Thread Mikolaj Rydzewski
On 25.11.2013 12:42, Ognjen Blagojevic wrote: I also think it would be very usefull if 401 error page for manager application does not example password "s3cret", but randomly generated long password unique for every request. I guess there is a number of Tomcat instances out there with username "

Re: [OT] Symantic has a first tomcat worm ;-)

2013-11-25 Thread Ognjen Blagojevic
Mark, On 25.11.2013 11:08, Mark Thomas wrote: Unrelated to this issue, I have recently expanded the section of the docs that covers securing the default applications. The updates will be in the next release. Until then you can read it via the copy of the docs built by the CI system: http://ci.ap

Tomcat Websocket failover

2013-11-25 Thread Nir A
Hello, In our current generation web application we used session replication with tomcat clustering. (and a load balancer) That way, we recieved an auto failover when a client sends an ajax request to a tomcat node that failed. In our next generation web application, We would like to have a simil

Re: [OT] Symantic has a first tomcat worm ;-)

2013-11-25 Thread Johan Compagner
> > The one question this raises for me is should the Manager application be > limited to localhost be default? I'd be interested in the community's > views on that. > my view: yes If it is easy configurable (like removing localhost to have all access, but also adding a host) Because then people k

Re: [OT] Symantic has a first tomcat worm ;-)

2013-11-25 Thread Mark Thomas
On 25/11/2013 08:22, Leon Rosenberg wrote: > Morning everyone, > > what can be greater start in the morning as reading about first tomcat worm > found by symantec ;-) > > http://www.symantec.com/connect/blogs/all-your-tomcat-are-belong-bad-guys How good your morning will be after reading that ar

[OT] Symantic has a first tomcat worm ;-)

2013-11-25 Thread Leon Rosenberg
Morning everyone, what can be greater start in the morning as reading about first tomcat worm found by symantec ;-) http://www.symantec.com/connect/blogs/all-your-tomcat-are-belong-bad-guys Enjoy your caffe. Leon