Log4j Issue

2016-08-09 Thread Syed Mudassir Ahmed
I am using Log4j in my web app to write the logs to a separate file. Surprisingly, that log file is not at all getting created. I run the logger logic as a standalone application and the log file indeed gets created. I am assuming tomcat is not allowing me to write my logs to a file. It is

User Error Occurred --- groovy.lang.MissingMethodException --- No signature of method: java.lang.String.name() is applicable for argument types: () values: []

2016-08-09 Thread D, Dwarakesh
Dear Team, I have upgraded the groovy jar from 1.5 to 2.3.3 in order to support Java 8. When running my application I am getting the below error and I have tried using the below possible solutions as well. But still getting the same error with different possible solutions. Can some one help

Re: Strange MySQL error when starting tomcat 8 on boot

2016-08-09 Thread Mark Eggers
Sean, On 8/9/2016 1:55 PM, Sean Son wrote: > On Mon, Aug 8, 2016 at 11:31 AM, Mark Eggers > wrote: > >> Sean, >> >> On 8/8/2016 7:10 AM, Sean Son wrote: >>> On Fri, Aug 5, 2016 at 5:34 PM, Mark Eggers >> >>> wrote: >>> On

Re: Strange MySQL error when starting tomcat 8 on boot

2016-08-09 Thread Sean Son
On Mon, Aug 8, 2016 at 11:31 AM, Mark Eggers wrote: > Sean, > > On 8/8/2016 7:10 AM, Sean Son wrote: > > On Fri, Aug 5, 2016 at 5:34 PM, Mark Eggers > > > wrote: > > > >> On 8/5/2016 2:19 PM, Sean Son wrote: > >>> Hello! > >>> > >>>

Re: Define datasource, reference JDBC driver, and see init in console

2016-08-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 David, On 8/2/16 4:04 PM, KARR, DAVID wrote: > I'm attempting to use Tomcat(tomee) to run a REST service that will > return some data from some SQL queries (Oracle). I've installed > Tomee 7.0.1, which uses Tomcat 8.5.3. > > The JDBC driver is

Re: Code signing WAR and verification

2016-08-09 Thread Stefan Mayr
Am 09.08.2016 um 19:48 schrieb Mark Thomas: On 09/08/2016 18:29, Stefan Mayr wrote: Hi, two colleagues came with an idea that our new java platform should only run signed code. In the java world I've only seen signed java applets. From a bit of internet research it looks like any JAR, WAR or

Re: Multiple SSL config with single IP on Tomcat 8.5.4

2016-08-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Joshua, On 8/3/16 6:51 PM, Joshua McDowell wrote: > [W]hy aren’t you fronting Tomcat with Apache? I am asking because > i am curious of others views. Because it's an unnecessary component, sensitive to other environmental factors. Why *are* you

Re: BasicDataSource creation throws SQLException

2016-08-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Roy, On 8/3/16 10:03 AM, Roy Leonardus wrote: > i'm using the EasyMock to test the creation of the BasicDataSource > : > > BasicDataSource ds = prepareDataSource(); //set the properties of > the basic data source Connection connection =

Re: headless mode in tomcat

2016-08-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 XMing, On 8/3/16 4:50 AM, XMing wrote: > I've add the following line to setenv.sh in tomcat bin directory. > > export CATALINA_OPTS="$CATALINA_OPTS -Djava.awt.headless=true" This shouldn't usually be necessary. What happens if you don't set

Re: Code signing WAR and verification

2016-08-09 Thread Mark Thomas
On 09/08/2016 18:29, Stefan Mayr wrote: > Hi, > > two colleagues came with an idea that our new java platform should only > run signed code. In the java world I've only seen signed java applets. > From a bit of internet research it looks like any JAR, WAR or EAR can be > signed with jarsigner

Code signing WAR and verification

2016-08-09 Thread Stefan Mayr
Hi, two colleagues came with an idea that our new java platform should only run signed code. In the java world I've only seen signed java applets. From a bit of internet research it looks like any JAR, WAR or EAR can be signed with jarsigner (maybe all zip files?). Some sources indicate

Re: More, Re: Question about vulnerability report

2016-08-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 James, On 8/9/16 12:36 PM, James H. H. Lampert wrote: > On 8/9/16, 9:25 AM, Christopher Schultz wrote: >> There /is/ a POODLE variation which is against TLS 1.0 - 1.2 [1]. >> If SSLv3 is completely disabled (TLS1.0 is okay), then you >> aren't

Re: Tomcat 7.0.54 gives zero-byte .java and .class files for jsp in work directory that cause truncated class error

2016-08-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 David, On 8/4/16 9:19 PM, David Kerber wrote: > On 8/4/2016 3:18 AM, Rahul Singh wrote: >> Dear Christopher, >> >> >> Thanks you very much for your response !! >> >> >>> Filesystem quota? >> >> Filesystem Quota is not enabled for this disk

Re: tomat8.5 write logs with incorret os permission

2016-08-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Daniel, On 8/5/16 10:47 AM, Daniel Savard wrote: > To me, it appears as false problem. I don't see why the change to > the permissions on the log file is so critical for the security. > You can simply set appropriately the permissions on the

Re: Release Dates

2016-08-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Konstantin, On 8/6/16 7:35 AM, Konstantin Kolinko wrote: > That is the build date. Release date is several days late > (2016-06-20) and can be seen > > - at the front page of http://tomcat.apache.org/ - in the change > log of 7.0.71 (in svn

Re: More, Re: Question about vulnerability report

2016-08-09 Thread James H. H. Lampert
On 8/9/16, 9:25 AM, Christopher Schultz wrote: There /is/ a POODLE variation which is against TLS 1.0 - 1.2 [1]. If SSLv3 is completely disabled (TLS1.0 is okay), then you aren't vulnerable to "classic" POODLE. If you aren't using CBC-based cipher suites with TLS1.0 - TLS1.2, then you should be

Re: Increased memory consumption due to url encoding

2016-08-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Lazar, On 8/9/16 8:40 AM, Lazar Kirchev wrote: > Hello! When handling requests which make use of request dispatcher, > Tomcat 7.0.70 allocates more memory in comparison to 7.0.69. This > seems to come from the encoding of the path introduced with

Re: More, Re: Question about vulnerability report

2016-08-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 James, On 8/8/16 2:31 PM, James H. H. Lampert wrote: > Hmm. This is interesting. > > pentest-tools.com says that neither our server nor the customer > server is vulnerable to POODLE. > > But Site24x7.com says ours IS vulnerable to POODLE. Then

Increased memory consumption due to url encoding

2016-08-09 Thread Lazar Kirchev
Hello! When handling requests which make use of request dispatcher, Tomcat 7.0.70 allocates more memory in comparison to 7.0.69. This seems to come from the encoding of the path introduced with this change http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/java/org/

Re: Aw: Re: why does Rfc6265CookieProcessor throw an IllegalArgumentException when setting a cookie with a domain attribute starting with a . ?

2016-08-09 Thread tomcat
On 09.08.2016 12:10, Clemens Fuchs wrote: Hi, Actually I was referring to https://tools.ietf.org/html/rfc6265#section-5.2.3, which explicitly states, that a leading . in the domain attribute value should be ignored by the user-agent. This implied for me, that a leading . is allowed. You're

Aw: Re: why does Rfc6265CookieProcessor throw an IllegalArgumentException when setting a cookie with a domain attribute starting with a . ?

2016-08-09 Thread Clemens Fuchs
Hi, Actually I was referring to https://tools.ietf.org/html/rfc6265#section-5.2.3, which explicitly states, that a leading . in the domain attribute value should be ignored by the user-agent. This implied for me, that a leading . is allowed. You're right with other specs, like

Re: jdbc check available database

2016-08-09 Thread Jose María Zaragoza
2016-08-09 10:52 GMT+02:00 Andrea Galli : > Thank you Christoph , but in this how-to there isn't any example for SQL > Server. This is my configuration (context.xml) for a SQL Server connection pool You need a SQL Server JDBC driver > > -Messaggio

Re: R: jdbc check available database

2016-08-09 Thread tomcat
On 09.08.2016 10:52, Andrea Galli wrote: Thank you Christoph , but in this how-to there isn't any example for SQL Server. Well, no. But did you expect someone else to do all the work for you ? These are your options : 1) considering that SQL Server is a proprietary product of Microsoft,

R: jdbc check available database

2016-08-09 Thread Andrea Galli
Thank you Christoph , but in this how-to there isn't any example for SQL Server. -Messaggio originale- Da: Christoph Nenning [mailto:christoph.nenn...@lex-com.net] Inviato: martedì 2 agosto 2016 09:44 A: Tomcat Users List Oggetto: Re: jdbc check available

Re: Connectivity Issue with Tomcat7 and WebServer (AJP Connector)

2016-08-09 Thread tomcat
On 09.08.2016 09:48, Jayaram Ponnusamy wrote: Thanks André, Kindly please find my answer below: On Tue, Aug 9, 2016 at 12:02 AM, André Warnier (tomcat) wrote: On 08.08.2016 11:18, Jayaram Ponnusamy wrote: Thanks André, 1. ANS-Question 1 = Both Tomcat & WebServer installed

Re: load server configuration file error

2016-08-09 Thread leonidprokopets
Thanks for your willingness to help. I'm using Tomcat 8.0 >Why and how are you trying to "compile" it? I choose Servers->Tomcat 8.0 server as localhost-config->Run Now I'm playing with the configuration and I've got a bunch of new error messages. The day ahead is going to be full of fun []

Re: Connectivity Issue with Tomcat7 and WebServer (AJP Connector)

2016-08-09 Thread Jayaram Ponnusamy
Thanks André, Kindly please find my answer below: On Tue, Aug 9, 2016 at 12:02 AM, André Warnier (tomcat) wrote: > On 08.08.2016 11:18, Jayaram Ponnusamy wrote: > >> Thanks André, >> >> 1. ANS-Question 1 = Both Tomcat & WebServer installed on different >> Machines, Attached