Re: ldap administration tool and error LDAP: error code 49 - Invalid Credentials

2024-06-24 Thread Simon Matter
Hi, > Hello Experts, > Is there any DLap admin tool available ? I want to manage IBM and openldap > with it . trying to reset users password in IBM ldap but it fails with You could try https://directory.apache.org/studio/ Regards, Simon > > > "[root@camttvpws002 app]# ldapsearch -x -h //102.85.

ldap administration tool and error LDAP: error code 49 - Invalid Credentials

2024-06-24 Thread Shekhar Dhotre
Hello Experts, Is there any DLap admin tool available ? I want to manage IBM and openldap with it . trying to reset users password in IBM ldap but it fails with "[root@camttvpws002 app]# ldapsearch -x -h //102.85.9.23 -D "ldap@seth.local" -b "dc=seth,dc=local" -w *

Re: Possible penetration attempt or DOS attack: any suggestions on what can be done?

2024-06-24 Thread Greg Huber
A while back we looked into using failtoban for http/https.  Never implemented it, but it does work well on our mail servers. On 24/06/2024 22:57, James H. H. Lampert wrote: On 6/24/24 12:03 PM, Tim Funk wrote: Conversely, this is a good time for the developers to review their server logging a

Re: Possible penetration attempt or DOS attack: any suggestions on what can be done?

2024-06-24 Thread James H. H. Lampert
On 6/24/24 12:03 PM, Tim Funk wrote: Conversely, this is a good time for the developers to review their server logging and tune it to be less verbose for these normal exceptions. As well as implementing logging frameworks and logging at the appropriate level (fatal through debug) Thanks for you

Re: Isolating the Root Cause of "Connection Refused"

2024-06-24 Thread Chuck Caldarale
> On Jun 24, 2024, at 16:40, Eric Robinson wrote: > > I wrote a script that checks the FD counts for every java pid on the server. > Just looking at these results, I don't think we're hitting an FD limit at the > moment, but I'll try it again tomorrow while the problem is presenting. Quite

RE: Isolating the Root Cause of "Connection Refused"

2024-06-24 Thread Eric Robinson
I wrote a script that checks the FD counts for every java pid on the server. Just looking at these results, I don't think we're hitting an FD limit at the moment, but I'll try it again tomorrow while the problem is presenting. [root@app51b scripts]# for s in $(ps ax|grep java|awk '{print $1}');d

Re: Isolating the Root Cause of "Connection Refused"

2024-06-24 Thread Chuck Caldarale
> On Jun 24, 2024, at 15:47, Eric Robinson wrote: > >> -Original Message- >> From: Chuck Caldarale >> Sent: Monday, June 24, 2024 1:40 PM >> To: Tomcat Users List >> Subject: Re: Isolating the Root Cause of "Connection Refused" >> >> >>> On Jun 24, 2024, at 15:36, Eric Robinson wrot

RE: Isolating the Root Cause of "Connection Refused"

2024-06-24 Thread Thomas Meyer
Hi, No I don't think so. Best is to check ulimit for your tomcat processes. Also fd count is available as jmx property I think, but not sure if it does contain all kinds of FDs. You may want to monitor FD count Vs max FD. Mfg Thomas Am 24. Juni 2024 22:47:52 MESZ schrieb Eric Robinson : >> ---

RE: Isolating the Root Cause of "Connection Refused"

2024-06-24 Thread Eric Robinson
> -Original Message- > From: Chuck Caldarale > Sent: Monday, June 24, 2024 1:40 PM > To: Tomcat Users List > Subject: Re: Isolating the Root Cause of "Connection Refused" > > > > On Jun 24, 2024, at 15:36, Eric Robinson wrote: > > > >> -Original Message- > >> From: Chuck Caldaral

Re: Isolating the Root Cause of "Connection Refused"

2024-06-24 Thread Chuck Caldarale
> On Jun 24, 2024, at 15:36, Eric Robinson wrote: > >> -Original Message- >> From: Chuck Caldarale >> Sent: Monday, June 24, 2024 1:29 PM >> To: Tomcat Users List >> Subject: Re: Isolating the Root Cause of "Connection Refused" >> >> >>> On Jun 24, 2024, at 15:19, Eric Robinson wro

RE: Isolating the Root Cause of "Connection Refused"

2024-06-24 Thread Eric Robinson
> -Original Message- > From: Chuck Caldarale > Sent: Monday, June 24, 2024 1:29 PM > To: Tomcat Users List > Subject: Re: Isolating the Root Cause of "Connection Refused" > > > > On Jun 24, 2024, at 15:19, Eric Robinson wrote: > > > > We have a tomcat server that is not that busy. It has

Re: Isolating the Root Cause of "Connection Refused"

2024-06-24 Thread Chuck Caldarale
> On Jun 24, 2024, at 15:19, Eric Robinson wrote: > > We have a tomcat server that is not that busy. It has 100 tomcat instances > running, but it handles a few hundred connections per second total, across > all of them. It intermittently rejects connection attempts to listening > tomcats. T

Isolating the Root Cause of "Connection Refused"

2024-06-24 Thread Eric Robinson
We have a tomcat server that is not that busy. It has 100 tomcat instances running, but it handles a few hundred connections per second total, across all of them. It intermittently rejects connection attempts to listening tomcats. The server is running Rocky 8, has 48 cores (about 15-40% utilize

Re: Possible penetration attempt or DOS attack: any suggestions on what can be done?

2024-06-24 Thread Tim Funk
As long as the webapp is reporting 404's - you're in good shape and probably not exposing hints of new vectors for attack. (Sometimes 500's errors can provide hints for tweaking parameters) But this is really a case study for why people may want to run a web application firewall. (I do not have a

Re: [EXTERNAL EMAIL] RE: The Import cannot be resolved

2024-06-24 Thread Shekhar Dhotre
Sorry I didn’t realize that I’m asking question in another thread. Will open new one . Cheers SD From: Niranjan Rao Sent: Monday, June 24, 2024 9:54:07 PM To: users@tomcat.apache.org Subject: Re: [EXTERNAL EMAIL] RE: The Import cannot be resolved You will have

Possible penetration attempt or DOS attack: any suggestions on what can be done?

2024-06-24 Thread James H. H. Lampert
Over the weekend, one of our customers got hit with what appears to have been either a penetration attempt or a DOS attack (or both). Their catalina.out file contains tens of thousands (probably over 100k) of lines reporting that our webapp received a request for a nonexistent server object, a

Re: [EXTERNAL EMAIL] RE: The Import cannot be resolved

2024-06-24 Thread Niranjan Rao
You will have better luck if you open your own thread Regards, Niranjan On 6/23/24 21:25, Shekhar Dhotre wrote: Hello Team, Is there any document or link that can point me to Tomcat and ldap integration ? I googled and nothing came out except few vidoes which doesn’t show steps. We have IBM