tomcat manager with weak password compromised. Any idea about the payload?

2012-04-11 Thread Tom H
Hi, An instance running tomcat 6.0.24 as root in our developer network was compromised today by a scanning bot which deployed a war file and then deleted the on disk file, before scanning for new hosts until the IDS detected it. Obviously this is not a flaw in tomcat, but I was hoping

multiple Context elements in conf/context.xml file

2010-09-03 Thread Tom H
my existing conf/context.xml file has already a Context element; Context WatchedResourceWEB-INF/web.xml/WatchedResource /Context I would like to add another to allow access to the /manager/status location to my monitoring, however adding a new Context element like so; conf/context.xml

apache intermittently returning 503 errors from tomcat

2007-11-08 Thread Tom H
Hi, On my RHEL4 ES box, with tomcat 5.5.9 from the redhat Application Server subscription package - I am seeing these messages in the catalina.out and these correspond to a 503 error displayed to the browser; 08-Nov-2007 20:34:45 org.apache.jk.common.ChannelSocket processConnection WARNING:

example to log org.apache.catalina.core entries to separate file

2007-09-11 Thread Tom H
Hi, I have default tomcat 5.5 installation, and I would like to send the tomcat start stop events to a separate log file for the class org.apache.catalina.core Can any one provide an example of a config for logging.properties that would do that, it currently looks like this; handlers =

syslog restarts and reloads of tomcat 5.5 and 6.0

2007-09-09 Thread Tom H
Hi, I have a bunch of tomcat servers in a clustered configuration, and currently we use a syslog-ng for aggregating the log files off these hosts. I was wondering whether it was possible to cause tomcat to syslog its start, stop, restart, reload actions to syslog, maybe using log4j? It

rpm for tomcat 5.5 compatitble with java 1.6

2007-05-31 Thread Tom H
Hi, I have been asked to install tomcat 5.5 with Java 1.6 on a box for a developer. I was hoping to stick with RH packages, but this combination does not seem to be available yet. Are there are repositories maintaining a Tomcat 5.5 that is compatible with the Sun java SE 1.6 rpm available