Re: Enhancement: Additional user attributes queried by (some) realms

2021-05-27 Thread Carsten Klein
Chris, Mark, On 27/05/2021 22:11, Christopher Schultz wrote: What's the primary use-case for these kinds of attributes? This has been described in detail here: http://mail-archives.apache.org/mod_mbox/tomcat-users/202104.mbox/ajax/%3Cb9a2a913-f00f-f5bf-ca05-8ea4f8663ca9%40datagis.com%3E

RE: [OT] web app big memory usage?

2021-05-27 Thread Mysore, Raghunath
You could try using the Oracle utility - "jstat" - for analyzing the GC in an active Java process (PID) The "gcold" option helps us to peep into the Old Generation area jstat -gcold PID jstat -gcoldcapacity PID https://docs.oracle.com/javase/8/docs/technotes/tools/unix/jstat.html

Re: [OT] web app big memory usage?

2021-05-27 Thread Christopher Schultz
Cris, On 5/27/21 15:24, Berneburg, Cris J. - US wrote: Hi Folks :-) One of our web apps is using a "lot" of memory, specifically a big user query. We'd like to find out why. The Tomcat Web Application Manager Find leaks button said that "No web applications appear to have triggered a memory

Re: Enhancement: Additional user attributes queried by (some) realms

2021-05-27 Thread Christopher Schultz
Mark, On 5/27/21 12:22, Mark Thomas wrote: On 27/05/2021 15:04, Christopher Schultz wrote: Mark, On 5/27/21 04:59, Mark Thomas wrote: On 27/05/2021 07:32, Carsten Klein wrote: On 26/05/2021 19:56, Mark Thomas wrote: Given that the attributes may well be security related, you would need to

RE: [OT] web app big memory usage?

2021-05-27 Thread John.E.Gregg
Cris, > -Original Message- > From: Berneburg, Cris J. - US > Sent: Thursday, May 27, 2021 2:24 PM > To: users@tomcat.apache.org > Subject: [OT] web app big memory usage? > > Hi Folks :-) > > One of our web apps is using a "lot" of memory, specifically a big user query. > We'd like to

RE: [OT] web app big memory usage?

2021-05-27 Thread Amit Pande
Have you enabled the " Enable 'keep unreachable objects'" setting of MAT? https://blog.gceasy.io/2015/12/11/eclipse-mat-titbits/ Thanks, Amit -Original Message- From: Berneburg, Cris J. - US Sent: Thursday, May 27, 2021 2:24 PM To: users@tomcat.apache.org Subject: [EXTERNAL] [OT]

[OT] web app big memory usage?

2021-05-27 Thread Berneburg, Cris J. - US
Hi Folks :-) One of our web apps is using a "lot" of memory, specifically a big user query. We'd like to find out why. The Tomcat Web Application Manager Find leaks button said that "No web applications appear to have triggered a memory leak on stop, reload or undeploy." Tomcat Manager

Re: Enhancement: Additional user attributes queried by (some) realms

2021-05-27 Thread Michael Osipov
You read my mind. I always wanted to report this, but never find time. Implemented this for our realm and principal years ago: http://tomcatspnegoad.sourceforge.net/apidocs/net/sf/michaelo/tomcat/realm/ActiveDirectoryPrincipal.html#getAdditionalAttributes-- The entire principal should be

Re: Enhancement: Additional user attributes queried by (some) realms

2021-05-27 Thread Carsten Klein
Mark, On 27/05/2021 18:19, Mark Thomas wrote: I will note that it isn't uncommon to have to log out and back in again to pick up newly allocated groups/roles in other environments. Yes, you are right. Didn't see it that way so far. We're talking about live updates for a session during its

RE: Tomcat SSL stops working after an undetermined amount of time

2021-05-27 Thread Mysore, Raghunath
Hi Ezsra, I concur with suggestions from Chris Schultz. Would you clarify the following items ? The current focus is to understand the prevailing environment configuration, in context of the stack trace you shared earlier. (1) To go back, did you check for ".jar" files

Re: Enhancement: Additional user attributes queried by (some) realms

2021-05-27 Thread Mark Thomas
On 27/05/2021 15:04, Christopher Schultz wrote: Mark, On 5/27/21 04:59, Mark Thomas wrote: On 27/05/2021 07:32, Carsten Klein wrote: On 26/05/2021 19:56, Mark Thomas wrote: Given that the attributes may well be security related, you would need to make sure neither the Map nor any of the

Re: Enhancement: Additional user attributes queried by (some) realms

2021-05-27 Thread Mark Thomas
On 27/05/2021 12:49, Carsten Klein wrote: On 27/05/2021 10:59, Mark Thomas wrote: As far as I can tell, removing UserDatabasePrincipal, relying on GenericPrincipal and User remaining an internal object not exposed via the Servlet API would achieve the same result with less code. At this

Re: Tomcat SSL stops working after an undetermined amount of time

2021-05-27 Thread Ezsra McDonald
Thanks for the responses, So, I need to understand a little more about Bouncycastle. I inherited the tomcat environment so I do not know how or why BC came to be installed in the containers. I will do some research on BC so I understand it better. My assumption from the responses is that BC is

Re: Enhancement: Additional user attributes queried by (some) realms

2021-05-27 Thread Christopher Schultz
Mark, On 5/27/21 04:59, Mark Thomas wrote: On 27/05/2021 07:32, Carsten Klein wrote: On 26/05/2021 19:56, Mark Thomas wrote: Given that the attributes may well be security related, you would need to make sure neither the Map nor any of the keys/values could be modified. Protecting the Map

Re: Tomcat SSL stops working after an undetermined amount of time

2021-05-27 Thread Christopher Schultz
Raghunath, On 5/26/21 19:08, Mysore, Raghunath wrote: To track if BC is configured in your environment, you may want to assess if BC is listed as a "security.provider" in the following "java.security" file File : /jre/lib/security/java.security Check for record (example below) :

Re: Enhancement: Additional user attributes queried by (some) realms

2021-05-27 Thread Carsten Klein
On 27/05/2021 10:59, Mark Thomas wrote: As far as I can tell, removing UserDatabasePrincipal, relying on GenericPrincipal and User remaining an internal object not exposed via the Servlet API would achieve the same result with less code. At this point I am looking for a reason not to

RE: JNDI ldaps Problem with SSO

2021-05-27 Thread Susan.Wood
Hi Christopher Enclosed is the stacktrace of the tomcat (localhost) 03-Mar-2021 15:57:15.221 SEVERE [http-nio-8080-exec-10] org.apache.catalina.realm.JNDIRealm.authenticate Exception performing authentication javax.naming.NamingException: [LDAP: error code 1 - 04DC: LdapErr:

Re: Enhancement: Additional user attributes queried by (some) realms

2021-05-27 Thread Mark Thomas
On 27/05/2021 07:32, Carsten Klein wrote: On 26/05/2021 19:56, Mark Thomas wrote: Given that the attributes may well be security related, you would need to make sure neither the Map nor any of the keys/values could be modified. Protecting the Map is easy. Protecting the keys/values is a

Re: Enhancement: Additional user attributes queried by (some) realms

2021-05-27 Thread Carsten Klein
Hi Mark, thanks for sharing your ideas :) On 26/05/2021 19:56, Mark Thomas wrote: Given that the attributes may well be security related, you would need to make sure neither the Map nor any of the keys/values could be modified. Protecting the Map is easy. Protecting the keys/values is a