Re: How to set tomcat 8.0.20 container character encoding of request and response to UTF-8 intead of ISO-8859-1

2016-02-16 Thread Akshat Tandon
Thanks Chris for the response, Basically we don't want to do coding around the filter as it will also bring us an additional overhead of maintaining the code and follow the quality process , Ideally we want say some setting to say in server.xml to set request and response character encoding *T

Re: Does Tomcat need a non-ssl connector?

2016-02-16 Thread msh
On Tue, Feb 16, 2016 at 08:52:50AM -0500, Christopher Schultz wrote: > > > If jsvc is working for you, what's the port number you chose for SSL? > 8080? (That's odd, most people use 8443). Why not just use the standard > port for HTTPS? I want to use 443. I don't want proxies or to see the port

Re: Cannot upgrade past Tomcat 6 due to massive memory increase

2016-02-16 Thread Ty
> Exactly which versions were you using when you ran your tests? According to my notes: 7.0.59, which should've been the most recent version available at the time (about this time last year). To clarify: that was the version we did a heap dump analysis of, and noted the memory increase related

Re: Is there a way for code running on Tomcat 7+ to determine the URL of the Web App it's running under?

2016-02-16 Thread Tim Watts
On Tue, 2016-02-16 at 14:31 -0500, Christopher Schultz wrote: > On 2/16/16 11:50 AM, Dougherty, Gregory T., M.S. wrote: > > I completely and totally trust my servlet with my data. I do not > > in the least bit trust any other servlet running on that Tomcat > > instance. > > Then those servlets

Re: Cannot upgrade past Tomcat 6 due to massive memory increase

2016-02-16 Thread Mark Thomas
On 16/02/2016 20:14, Ty wrote: >> JAR scanning should be transient. What was it that was causing the 10-20 >> fold increase? > > From memory (this was a while ago), it was related to > java.util.jar.Manifest objects, or what they contained/referenced. I'd be > glad to do another heap analysis and

Re: Cannot upgrade past Tomcat 6 due to massive memory increase

2016-02-16 Thread Ty
> if Tomcat had the option to ignore META-INF/resources in JAR files Perhaps interesting: of the 27 JAR files in my dummy application, not a single one has a META-INF/resources. On Tue, Feb 16, 2016 at 3:40 PM Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED M

Re: tomcat 7/modcluster ssl issue

2016-02-16 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Qadeer, On 2/14/16 1:50 PM, Qadeer Khan wrote: > > Hello, > > I am trying to hookup ssl connection between mod_Cluster load > balancer and tomcat 7 and seems to be following everything but when > I start tomcat server, I am getting the following err

Re: Cannot upgrade past Tomcat 6 due to massive memory increase

2016-02-16 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ty, On 2/16/16 3:11 PM, Ty wrote: > George, thanks for sharing your experience, good to know I'm not > the first down this path. I'd be interested to know if you've > tested at all with Tomcat 8 and what your findings were, if so. > Based on my exper

Re: Cannot upgrade past Tomcat 6 due to massive memory increase

2016-02-16 Thread George Sexton
On 2/16/2016 1:11 PM, Ty wrote: George, thanks for sharing your experience, good to know I'm not the first down this path. I'd be interested to know if you've tested at all with Tomcat 8 and what your findings were, if so. Based on my experience I'd expect you to be in a similar boat to us.

Re: Cannot upgrade past Tomcat 6 due to massive memory increase

2016-02-16 Thread Ty
George, thanks for sharing your experience, good to know I'm not the first down this path. I'd be interested to know if you've tested at all with Tomcat 8 and what your findings were, if so. Based on my experience I'd expect you to be in a similar boat to us. Mark, thanks for the reply. I've up

Re: Cannot upgrade past Tomcat 6 due to massive memory increase

2016-02-16 Thread Ty
> JAR scanning should be transient. What was it that was causing the 10-20 > fold increase? >From memory (this was a while ago), it was related to java.util.jar.Manifest objects, or what they contained/referenced. I'd be glad to do another heap analysis and summarize it if it would help, but even

Re: Is there a way for code running on Tomcat 7+ to determine the URL of the Web App it's running under?

2016-02-16 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gregory, On 2/16/16 11:50 AM, Dougherty, Gregory T., M.S. wrote: > On 2/16/16, 9:13 AM, "Christopher Schultz" > wrote: > > >> Gregory, >> >> On 2/15/16 11:18 AM, Dougherty, Gregory T., M.S. wrote: >>> How to trade information with a specified URL

Re: ***UNCHECKED*** Re: Is there a way for code running on Tomcat 7+ to determine the URL of the Web App it's running under?

2016-02-16 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 All, Sorry about this. It seems Enigmail is ruining messages. - -chris On 2/16/16 2:09 PM, Christopher Schultz wrote: > > The information contained in this email and its attachments may be > confidential. If you have received this email in error, p

***UNCHECKED*** Re: Is there a way for code running on Tomcat 7+ to determine the URL of the Web App it's running under?

2016-02-16 Thread Christopher Schultz
The information contained in this email and its attachments may be confidential. If you have received this email in error, please notify the sender by return email, delete this email and destroy any copy. Any advice contained in this email has been prepared without taking into account your objec

***UNCHECKED*** Re: Is there a way for code running on Tomcat 7+ to determine the URL of the Web App it's running under?

2016-02-16 Thread Christopher Schultz
The information contained in this email and its attachments may be confidential. If you have received this email in error, please notify the sender by return email, delete this email and destroy any copy. Any advice contained in this email has been prepared without taking into account your objec

***UNCHECKED*** Re: Is there a way for code running on Tomcat 7+ to determine the URL of the Web App it's running under?

2016-02-16 Thread Christopher Schultz
binrvxcJ0gxtC.bin Description: PGP/MIME version identification

Re: Cannot upgrade past Tomcat 6 due to massive memory increase

2016-02-16 Thread Mark Thomas
On 16/02/2016 16:13, Ty wrote: > Summary: > > Because of our use case (hundreds of webapps per instance), we cannot > feasibly upgrade our Tomcat 6 containers to Tomcat 7 or Tomcat 8, due to > the massive increase in memory the upgrade causes. > > Background: > > We’ve been running Tomcat 6 for

Re: Is there a way for code running on Tomcat 7+ to determine the URL of the Web App it's running under?

2016-02-16 Thread Leo Donahue
On Feb 16, 2016 10:50 AM, "Dougherty, Gregory T., M.S." < dougherty.greg...@mayo.edu> wrote: > > On 2/16/16, 9:13 AM, "Christopher Schultz" > wrote: > > > >Gregory, > > > >On 2/15/16 11:18 AM, Dougherty, Gregory T., M.S. wrote: > >> How to trade information with a specified URL calling java code i

Re: Cannot upgrade past Tomcat 6 due to massive memory increase

2016-02-16 Thread George Sexton
On 2/16/2016 9:13 AM, Ty wrote: · When Tomcat 7 was released, our testing showed a 10-to-20-fold increase in memory consumption and a 3-to-5-fold increase in startup time for our test case (100 deployed webapps). After some digging we determined that these increases were related to JAR

Re: Is there a way for code running on Tomcat 7+ to determine the URL of the Web App it's running under?

2016-02-16 Thread Dougherty, Gregory T., M.S.
On 2/16/16, 9:13 AM, "Christopher Schultz" wrote: >Gregory, > >On 2/15/16 11:18 AM, Dougherty, Gregory T., M.S. wrote: >> How to trade information with a specified URL calling java code in >> tomcat/lib: >> >> 1: Servlet calls Decryptor.start (String whoIAm, int validator, int xOr) > >What prev

Cannot upgrade past Tomcat 6 due to massive memory increase

2016-02-16 Thread Ty
Summary: Because of our use case (hundreds of webapps per instance), we cannot feasibly upgrade our Tomcat 6 containers to Tomcat 7 or Tomcat 8, due to the massive increase in memory the upgrade causes. Background: We’ve been running Tomcat 6 for several years, on perhaps an unusual scale: sever

Re: Is there a way for code running on Tomcat 7+ to determine the URL of the Web App it's running under?

2016-02-16 Thread Leo Donahue
On Feb 12, 2016 2:35 PM, "Dougherty, Gregory T., M.S." < dougherty.greg...@mayo.edu> wrote: > > You are correct, I¹m trying to authorize the web app, not the user. I am going to start all the way back here and suggest that you abandon this approach of authenticating a web "app". This is unconvent

Re: Is there a way for code running on Tomcat 7+ to determine the URL of the Web App it's running under?

2016-02-16 Thread Christopher Schultz
Gregory, On 2/15/16 11:18 AM, Dougherty, Gregory T., M.S. wrote: > How to trade information with a specified URL calling java code in > tomcat/lib: > > 1: Servlet calls Decryptor.start (String whoIAm, int validator, int xOr) What prevents the servlet from specifying whoIAm="someoneElse"? > 2: C

Re: Does Tomcat need a non-ssl connector?

2016-02-16 Thread Christopher Schultz
Msh, On 2/14/16 3:25 PM, m...@kimwana.com wrote: > On Thu, Feb 11, 2016 at 02:17:38PM -0500, m...@kimwana.com wrote: > > redirectPort="443" /> > > clientAuth="false" > disableUploadTimeout="true" enableLookups="false" maxThreads="25" > keystoreFile="/opt/tomc

Re: How to set tomcat 8.0.20 container character encoding of request and response to UTF-8 intead of ISO-8859-1

2016-02-16 Thread Christopher Schultz
Akshat, On 2/16/16 7:08 AM, Akshat Tandon wrote: > We need to set tomcat 8.0.20 container character encoding of request and > response to UTF-8 intead of ISO-8859-1 , > > What is the setting for the same ? > > We tried setting as mentioned below , > https://wiki.apache.org/tomcat/FAQ/Character

Re: Block urls using X-forwaed-for

2016-02-16 Thread Christopher Schultz
Dave, On 2/15/16 12:31 PM, Dave Fisher wrote: > You can take the source code for RemoteIPFilter and have it look at the > X-Forwarded-For header. > > Even better offer a patch to RemoteIPFilter to allow the header field name to > be configured. > > You are not the only one with this use case.

Re: Does Tomcat need a non-ssl connector?

2016-02-16 Thread Christopher Schultz
Msh, On 2/13/16 12:28 PM, m...@kimwana.com wrote: > On Fri, Feb 12, 2016 at 05:36:56PM -0500, Christopher Schultz wrote: > Chuck, > > On 2/12/16 3:06 PM, Caldarale, Charles R wrote: > From: James H. H. Lampert [mailto:jam...@touchtonecorp.com] > Subject: Re: Does Tomcat need a non-ssl co

How to set tomcat 8.0.20 container character encoding of request and response to UTF-8 intead of ISO-8859-1

2016-02-16 Thread Akshat Tandon
We need to set tomcat 8.0.20 container character encoding of request and response to UTF-8 intead of ISO-8859-1 , What is the setting for the same ? We tried setting as mentioned below , https://wiki.apache.org/tomcat/FAQ/CharacterEncoding#Q1 But that requires creating filter etc . Is there a