RE: Reg: tomcat CPU spikes

2024-07-19 Thread Jalaj Asher
cache entries - consider increasing the maximum size of the cache. Regards Jalaj P Asher -Original Message- From: Jalaj Asher Sent: Tuesday, July 16, 2024 1:30 PM To: Tomcat Users List Subject: RE: Reg: tomcat CPU spikes > space". Which was very quickly filling up our disk space

Re: Issue with JDK 11 and tomcat-embed-core 9.0.91

2024-07-18 Thread Christopher Schultz
Greg, On 7/15/24 5:01 PM, Greg Eschbacher wrote: Hi all, I'm hoping you all can help me: Our JDK 11 application uses tomcat-embed-core, and we're upgrading from 9.0.88 to 9.0.91 and we can no longer compile. After some investigation, I believe the issue is that the tomcat-embed-core jar

Re: Ubuntu Tomcat package maintenance

2024-07-18 Thread Joel Griffith
wrote: > Joel, > > On 7/11/24 16:13, Joel Griffith wrote: > > A year and a half ago I had to stop updating Tomcat because a Ubuntu > > packaging bug force-changes file ownership of the Tomcat installation. > I'm > > trying to get in touch with the package maintain

RE: Reg: tomcat CPU spikes

2024-07-16 Thread Jalaj Asher
at. Also I was reviewing some older heap dumps and I could see that the jars are getting cached in tomcat even with cachingAllowed=false. Also this is not a consistent issue once it happens it takes sometime for the stack to go away as well as post tomcat reboots the problem goes away with the sa

Re: Reg: tomcat CPU spikes

2024-07-16 Thread Christopher Schultz
ng latency concerns. Also interesting. Can you post one of those messages here? Was there a stack trace shown or just the warning? -chris -Original Message- From: Christopher Schultz Sent: Monday, July 15, 2024 4:19 PM To: users@tomcat.apache.org Subject: Re: Reg: tomcat CPU spikes

RE: Reg: tomcat CPU spikes

2024-07-15 Thread Jalaj Asher
ource as there wasn’t enough space". Which was very quickly filling up our disk space as well as increasing disk IO causing latency concerns. Regards Jalaj -Original Message- From: Christopher Schultz Sent: Monday, July 15, 2024 4:19 PM To: users@tomcat.apache.org Subject: Re: Reg:

Issue with JDK 11 and tomcat-embed-core 9.0.91

2024-07-15 Thread Greg Eschbacher
Hi all, I'm hoping you all can help me: Our JDK 11 application uses tomcat-embed-core, and we're upgrading from 9.0.88 to 9.0.91 and we can no longer compile. After some investigation, I believe the issue is that the tomcat-embed-core jar file no longer contains a module-info.class file

Re: Reg: tomcat CPU spikes

2024-07-15 Thread Christopher Schultz
Jalaj, On 7/15/24 15:03, Jalaj Asher wrote: Yeah I was wondering the same as this has been in place since a few years now atleast 4 years since cachingAllowed had some changes in tomcat 8 which was resulting in it caching all static content as well as jsps and jars and our though process

RE: Reg: tomcat CPU spikes

2024-07-15 Thread Jalaj Asher
Thank you Christoper for the insight. Yeah I was wondering the same as this has been in place since a few years now atleast 4 years since cachingAllowed had some changes in tomcat 8 which was resulting in it caching all static content as well as jsps and jars and our though process was if we

Re: Tomcat http header size too large!

2024-07-15 Thread Konstantin Kolinko
пн, 15 июл. 2024 г. в 11:24, Mark Thomas : > > On 14/07/2024 00:28, Pradeep wrote: > > Hi, > > > > I need some tips to solve below issue. > > I am getting 431 http error in API (code running in tomcat) when header > > size crosses 8KB. Tomcat server do

Re: Tomcat http header size too large!

2024-07-15 Thread Mark Thomas
On 14/07/2024 00:28, Pradeep wrote: Hi, I need some tips to solve below issue. I am getting 431 http error in API (code running in tomcat) when header size crosses 8KB. Tomcat server doesn't process request if header size is more than 8KB. I tried adding below properties to increase the header

Tomcat http header size too large!

2024-07-13 Thread Pradeep
Hi, I need some tips to solve below issue. I am getting 431 http error in API (code running in tomcat) when header size crosses 8KB. Tomcat server doesn't process request if header size is more than 8KB. I tried adding below properties to increase the header size in Springboot application.yaml

Re: Ubuntu Tomcat package maintenance

2024-07-12 Thread Christopher Schultz
Joel, On 7/11/24 16:13, Joel Griffith wrote: A year and a half ago I had to stop updating Tomcat because a Ubuntu packaging bug force-changes file ownership of the Tomcat installation. I'm trying to get in touch with the package maintainers to have that fixed. `apt-cache show tomcat` gives

Re: Reg: tomcat CPU spikes

2024-07-12 Thread Christopher Schultz
=false. We keep it as false across the board. Well... that'll do it. In order to locate resources, Tomcat needs to sift through all of those JAR files every time. Scanning ZIP files is expensive. You might want to reconsider this particular setting in your environment. Also the reason I shared

Re: [EXTERNAL EMAIL] Ubuntu Tomcat package maintenance

2024-07-12 Thread Niranjan Rao
On 7/11/24 13:13, Joel Griffith wrote: A year and a half ago I had to stop updating Tomcat because a Ubuntu packaging bug force-changes file ownership of the Tomcat installation. I'm trying to get in touch with the package maintainers to have that fixed. `apt-cache show tomcat

RE: Reg: tomcat CPU spikes

2024-07-12 Thread Jalaj Asher
Sent: Wednesday, July 10, 2024 6:19 PM To: Tomcat Users List Subject: Re: Reg: tomcat CPU spikes Attention! - This email has originated from an External Source outside of eClinicalWorks. Always use caution when opening attachments, clicking links, or when responding to this email. If you feel

Re: Tomcat 10.x over 9.x

2024-07-12 Thread Rémy Maucherat
On Fri, Jul 12, 2024 at 1:04 PM Dimitris Soumis wrote: > > Hello, > > Regarding the end-of-life date for Tomcat 9.0.x, you can find the relevant > information in this link, which contains an email from the mailing list: End > of Lifecycle for Tomcat 9.0.x > <https:/

Re: Tomcat 10.x over 9.x

2024-07-12 Thread Dimitris Soumis
Hello, Regarding the end-of-life date for Tomcat 9.0.x, you can find the relevant information in this link, which contains an email from the mailing list: End of Lifecycle for Tomcat 9.0.x <https://lists.apache.org/thread/qlzpscgoqct9wspkj5qjkm34s66jswj0>. As for the necessity of upg

Re: Tomcat 10.x over 9.x

2024-07-12 Thread i...@flyingfischer.ch
Hi https://googlethatforyou.com?q=tomcat%20lifecycle Result: https://endoflife.date/tomcat Regarding "necessity of upgrading tomcat to 10.1.x from 9.x": https://tomcat.apache.org/whichversion.html Specifically: * Apache Tomcat 9.x builds on Tomcat 8.0.x and 8.5.x and

Tomcat 10.x over 9.x

2024-07-12 Thread Sai Charan Teja Pratti
Hi, Can you please share the end of lifecycle date for tomcat 9.x. Also, please share the necessity of upgrading tomcat to 10.1.x from 9.x Thanks, Sai -- This electronic communication and the information and any files transmitted with it, or attached to it, are confidential and are intended

Ubuntu Tomcat package maintenance

2024-07-11 Thread Joel Griffith
A year and a half ago I had to stop updating Tomcat because a Ubuntu packaging bug force-changes file ownership of the Tomcat installation. I'm trying to get in touch with the package maintainers to have that fixed. `apt-cache show tomcat` gives ubuntu-devel-disc...@lists.ubuntu.com

Re: Reg: tomcat CPU spikes

2024-07-10 Thread Chuck Caldarale
> On Jul 10, 2024, at 17:02, Jalaj Asher > wrote: > > Sharing another stack to see if this can give any more insights.this thread > is the tomcat main thread was loading about 65MB of data. > > "main" #1 prio=5 os_prio=0 >

RE: Reg: tomcat CPU spikes

2024-07-10 Thread Gregg, John E.
From: Jalaj Asher Sent: Wednesday, July 10, 2024 5:02 PM To: users@tomcat.apache.org Subject: RE: Reg: tomcat CPU spikes Sharing another stack to see if this can give any more insights. this thread is the tomcat main thread was loading about 65MB of data. "main" #1 prio=5 os_prio=0

Re: Reg: tomcat CPU spikes

2024-07-10 Thread Chuck Caldarale
> On Jul 10, 2024, at 15:19, Jalaj Asher > wrote: > > We are using tomcat version 9.0.80. > > We are seeing intermittent CPU spikes with the requests having the following > stack and it is also causing disk spikes on our end because

RE: Reg: tomcat CPU spikes

2024-07-10 Thread Jalaj Asher
Sharing another stack to see if this can give any more insights.this thread is the tomcat main thread was loading about 65MB of data. "main" #1 prio=5 os_prio=0 java.lang.Thread.State: RUNNABLE at java.util.zip.ZipFile.getEntry(Nat

Reg: tomcat CPU spikes

2024-07-10 Thread Jalaj Asher
Hello, We are using tomcat version 9.0.80. We are seeing intermittent CPU spikes with the requests having the following stack and it is also causing disk spikes on our end because of this call stack . at java.util.zip.ZipFile.getEntry(Native Method) at java.util.zip.ZipFile.getEntry

Re: Apache Tomcat Default Files - TEN-12085

2024-07-10 Thread Michael Osipov
He's a contractor, what do you expect? At best someone logs in via SSH and solves the problem for him. On 2024/07/08 19:58:42 Chuck Caldarale wrote: > > > On Jul 8, 2024, at 14:54, Pramod Kumar Adhi > > wrote: > > > > We are using tomcat version 9.8

Re: [EXTERNAL EMAIL] Apache Tomcat Default Files - TEN-12085

2024-07-08 Thread Niranjan Rao
on the remote Apache Tomcat server. These files should be removed as they may help an attacker uncover information about the remote Tomcat install or host itself. Vulnerability Threat The remote web server contains default files. Vulnerability Remediation notes Delete the default index page

Re: Apache Tomcat Default Files - TEN-12085

2024-07-08 Thread Chuck Caldarale
> On Jul 8, 2024, at 14:54, Pramod Kumar Adhi > wrote: > > We are using tomcat version 9.87 can you guide on the same. Seriously? You can’t find the 9.0.x documentation on the Tomcat web site yourself? Ok… https://tomcat.apache.org/tomcat-9.0-doc/security-howto.html - Chu

RE: Apache Tomcat Default Files - TEN-12085

2024-07-08 Thread Pramod Kumar Adhi
Hi Chuck, We are using tomcat version 9.87 can you guide on the same. Thanks & Regards, Pramod Kumar Adhi From: Chuck Caldarale Sent: Tuesday, July 9, 2024 12:31 AM To: Tomcat Users List Subject: Re: Apache Tomcat Default Files - TEN-12085 [External Email] > On Jul 8, 2024, at 13:56,

Re: Apache Tomcat Default Files - TEN-12085

2024-07-08 Thread Chuck Caldarale
le JSPs and/or example > servlets are installed on the remote Apache Tomcat server. These files should > be removed as they may help an attacker uncover information about the remote > Tomcat install or host itself. > > Vulnerability Threat > The remote web server contains default files.

Apache Tomcat Default Files - TEN-12085

2024-07-08 Thread Pramod Kumar Adhi
result in a potential disclosure of sensitive information about the server to attackers. Vulnerability Summary The default error page, default index page, example JSPs and/or example servlets are installed on the remote Apache Tomcat server. These files should be removed as they may help

Re: Inquiry about CVE-2024-5535 Vulnerability in Tomcat 10.1.20 Version

2024-07-08 Thread Christopher Schultz
on, we anticipate the upcoming release of Tomcat Native, which will incorporate the latest OpenSSL version and be included in the new Tomcat release. Thank you. I look forward to your full participation in the voting process when tcnative.next is proposed for voting. -chris From: Mark Thomas Date:

Re: Errors after upgrading to Tomcat 9.0.90

2024-07-08 Thread Francesco Chicchiriccò
;> Am 20.06.24 um 17:52 schrieb Christopher Schultz: > >>>> Francesco, > >>>> > >>>> On 6/20/24 09:03, Francesco Chicchiriccò wrote: > >>>>> On 2024/06/20 12:18:15 Konstantin Kolinko wrote: > >>>>>> чт, 20 июн. 2024 г. в 13

[ANN] Apache Tomcat 9.0.91 available

2024-07-08 Thread Rémy Maucherat
The Apache Tomcat team announces the immediate availability of Apache Tomcat 9.0.91. Apache Tomcat 9 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 9.0.91 is a bugfix

Re: Inquiry about CVE-2024-5535 Vulnerability in Tomcat 10.1.20 Version

2024-07-08 Thread Michael Osipov
calculator?name=CVE-2024-5535=AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H=3.1=CISA-ADP> > from Source: CISA-ADP. With that, we could not underestimate such issue. > Hope you can understand my concerns. > > In conclusion, we anticipate the upcoming release of Tomcat Native, which >

Re: Inquiry about CVE-2024-5535 Vulnerability in Tomcat 10.1.20 Version

2024-07-07 Thread Zhong, Peyton
timate such issue. Hope you can understand my concerns. In conclusion, we anticipate the upcoming release of Tomcat Native, which will incorporate the latest OpenSSL version and be included in the new Tomcat release. Thank you. Best regards, Peyton Zhong From: Mark Thomas Date: Sunday, 7 Jul

Re: Inquiry about CVE-2024-5535 Vulnerability in Tomcat 10.1.20 Version

2024-07-07 Thread Zhong, Peyton
Chris, thanks for your comprehensive explanation about these various mitigation measures. Best regards, Peyton Zhong From: Christopher Schultz Date: Sunday, 7 July 2024 at 1:23 AM To: users@tomcat.apache.org Subject: Re: Inquiry about CVE-2024-5535 Vulnerability in Tomcat 10.1.20 Version

Re: Inquiry about CVE-2024-5535 Vulnerability in Tomcat 10.1.20 Version

2024-07-06 Thread Mark Thomas
On 06/07/2024 05:08, Zhong, Peyton wrote: Dear Tomcat Community, I am writing to inquire about the potential impact of the recently detected critical vulnerability: CVE-2024-5535<https://nvd.nist.gov/vuln/detail/CVE-2024-5535> (9.1 CRITICAL / CVSS v3), in OpenSSL 3.0.13 on the Tomcat 1

Re: Inquiry about CVE-2024-5535 Vulnerability in Tomcat 10.1.20 Version

2024-07-06 Thread Christopher Schultz
Peyton, On 7/6/24 00:08, Zhong, Peyton wrote: I am writing to inquire about the potential impact of the recently detected critical vulnerability: CVE-2024-5535<https://nvd.nist.gov/vuln/detail/CVE-2024-5535> (9.1 CRITICAL / CVSS v3), in OpenSSL 3.0.13 on the Tomcat 10.1.20 version. Acc

Re: Tomcat silently shuts down after 10 minutes - SOLVED

2024-07-06 Thread Christopher Schultz
Bryan, On 7/5/24 17:08, Bryan Buchanan wrote: Thanks all for the replies. Turns out I needed to execute my "C" program with a "nohup" i.e. $ nohup /usr/local/bin/ManageTomcat START Tomcat was only stopping after about 10 mins because that's when I logged out. Doh ! In t

Inquiry about CVE-2024-5535 Vulnerability in Tomcat 10.1.20 Version

2024-07-05 Thread Zhong, Peyton
Dear Tomcat Community, I am writing to inquire about the potential impact of the recently detected critical vulnerability: CVE-2024-5535<https://nvd.nist.gov/vuln/detail/CVE-2024-5535> (9.1 CRITICAL / CVSS v3), in OpenSSL 3.0.13 on the Tomcat 10.1.20 version. According to Black Duck

Re: Tomcat silently shuts down after 10 minutes - SOLVED

2024-07-05 Thread Bryan Buchanan
Thanks all for the replies. Turns out I needed to execute my "C" program with a "nohup" i.e. $ nohup /usr/local/bin/ManageTomcat START Tomcat was only stopping after about 10 mins because that's when I logged out. Doh ! In the business app code I now execute the above a

[ANN] Apache Tomcat 11.0.0-M22 (beta) available

2024-07-05 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat 11.0.0-M22 (beta). Apache Tomcat 11 is an open source software implementation of the Jakarta Servlet, Jakarta Server Pages, Jakarta Expression Language, Jakarta WebSocket, Jakarta Authentication and Jakarta Annotations

Re: Tomcat silently shuts down after 10 minutes

2024-07-05 Thread Michael Kosma
Bryan, I would set Tomcat up as a service and let systemd handle startup and shutdown. Create a unit file for tomcat: /etc/systemd/system/tomcat.service - Begin Unit File Contents [Unit] Description=Tomcat 9.0 After=network.target [Service] Type=forking User=joe Group=joe

Re: Tomcat silently shuts down after 10 minutes

2024-07-04 Thread Thomas Meyer
Hi, This looks like an orderly shutdown of tomcat, can you attach strace and see if tomcat process does receive a signal from somewhere? Mfg Thomas Am 4. Juli 2024 14:46:17 MESZ schrieb Bryan Buchanan : >I'm running Tomcat 9.0.14 on Centos 8 with JDK 15. > >Tomcat is loaded in /o

Re: Tomcat silently shuts down after 10 minutes

2024-07-04 Thread Bryan Buchanan
> I think you should check the return value of setuid. > > I don't think you can change the uid of a process that easily. > > Otherwise you could also write setuid(0), become root and that would look to > me as a huge security hole. > You need to be root to "chmod u+s [your_program]" so

Re: Tomcat silently shuts down after 10 minutes

2024-07-04 Thread Olaf Kock
On 04.07.24 15:27, Zerro wrote: On 7/4/24 2:46 PM, Bryan Buchanan wrote: I'm running Tomcat 9.0.14 on Centos 8 with JDK 15. Tomcat is loaded in /opt/tomcat, the directory owned by "joe". If I login as "joe" and start Tomcat, everything is fine. We have people login

Re: Tomcat silently shuts down after 10 minutes

2024-07-04 Thread Zerro
On 7/4/24 2:46 PM, Bryan Buchanan wrote: I'm running Tomcat 9.0.14 on Centos 8 with JDK 15. Tomcat is loaded in /opt/tomcat, the directory owned by "joe". If I login as "joe" and start Tomcat, everything is fine. We have people login to the Centos system to run the

Tomcat silently shuts down after 10 minutes

2024-07-04 Thread Bryan Buchanan
I'm running Tomcat 9.0.14 on Centos 8 with JDK 15. Tomcat is loaded in /opt/tomcat, the directory owned by "joe". If I login as "joe" and start Tomcat, everything is fine. We have people login to the Centos system to run the business application as "mary",

Re: Errors after upgrading to Tomcat 9.0.90

2024-07-03 Thread Christopher Schultz
Konstantin Kolinko wrote: чт, 20 июн. 2024 г. в 13:25, Francesco Chicchiriccò : Hi there, at Syncope we usually use the latest Tomcat versions to run a large chunk of our integration tests. In our master branch we relay on Tomcat 10.1.x, and upgrading to 10.1.25 from 10.1.24 went smooth as usual

[SECURITY] CVE-2024-34750 Apache Tomcat - Denial of Service

2024-07-03 Thread Mark Thomas
CVE-2024-34750 Apache Tomcat - Denial of Service Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 11.0.0-M1 to 11.0.0-M20 Apache Tomcat 10.1.0-M1 to 10.1.24 Apache Tomcat 9.0.0-M1 to 9.0.89 Description: When processing an HTTP/2 stream, Tomcat did

Re: Errors after upgrading to Tomcat 9.0.90

2024-07-02 Thread Francesco Chicchiriccò
06/20 12:18:15 Konstantin Kolinko wrote: > >>>> чт, 20 июн. 2024 г. в 13:25, Francesco Chicchiriccò > >>>> : > >>>>> > >>>>> Hi there, > >>>>> at Syncope we usually use the latest Tomcat versions to run a large

Re: Tomcat 10.1.25 - How to enable access to the "/examples/jsp/security/protected/index.jsp"?

2024-07-01 Thread o haya
Hi, I think that I found the problem. The web.xml file has and auth-constraint: ``` tomcat role1 ``` If I log in as a user that has one of those roles, then the access is successful ! Jim On Mon, Jul 1, 2024 at 5:59 PM o haya wrote: > Hi, > > I just deployed Tomcat 10.1

Tomcat 10.1.25 - How to enable access to the "/examples/jsp/security/protected/index.jsp"?

2024-07-01 Thread o haya
Hi, I just deployed Tomcat 10.1.25 to my Windows machine, and I want to test the FORMS example (/examples/jsp/security/protected/index.jsp) , but I am getting a 403 error: "You are not authorized to view this page. By default the examples web application is only accessible from a br

Re: Compatibility Check Tomcat 10.1.x with IBM MQ 9.3.0.20

2024-06-28 Thread Christopher Schultz
Mohit, On 6/27/24 14:31, Chaudhary, Mohit wrote: We have installed Tomcat 10.1.1 in RHEL 8 server so we needed to check if tomcat 10.1.1 is compatible with IBM MQ 9.3.0.20. Tomcat doesn't have any message-queue-related components out of the box, so I would say "maybe?" Is Goo

Re: Compatibility Check Tomcat 10.1.x with IBM MQ 9.3.0.20

2024-06-28 Thread Rob Sargent
On 6/28/24 06:59, Chaudhary, Mohit wrote: Hello Team, Please let us know on below query. Thanks & Regards, Mohit Chaudhary -Original Message- From: Chaudhary, Mohit Sent: Friday, June 28, 2024 12:01 AM To: users@tomcat.apache.org Subject: Compatibility Check Tomcat 10

RE: Compatibility Check Tomcat 10.1.x with IBM MQ 9.3.0.20

2024-06-28 Thread Chaudhary, Mohit
Hello Team, Please let us know on below query. Thanks & Regards, Mohit Chaudhary -Original Message- From: Chaudhary, Mohit Sent: Friday, June 28, 2024 12:01 AM To: users@tomcat.apache.org Subject: Compatibility Check Tomcat 10.1.x with IBM MQ 9.3.0.20 Hi Team, We have insta

Compatibility Check Tomcat 10.1.x with IBM MQ 9.3.0.20

2024-06-27 Thread Chaudhary, Mohit
Hi Team, We have installed Tomcat 10.1.1 in RHEL 8 server so we needed to check if tomcat 10.1.1 is compatible with IBM MQ 9.3.0.20. Thanks & Regards, Mohit Chaudhary

Re: How to configure Tomcat with a Managed Service Account when using LocalMachine certificates for TLS

2024-06-27 Thread Christopher Schultz
and is common for all programs requesting private key not special for Tomcat. A dialog of Windows Security is shown asking to allow access, similar to UAC but for certificates. Your image was stripped from your mailing-list post. Can you please *describe* this manual-step? Without the image, I fear

Re: Errors after upgrading to Tomcat 9.0.90

2024-06-27 Thread Christopher Schultz
use the latest Tomcat versions to run a large chunk of our integration tests. In our master branch we relay on Tomcat 10.1.x, and upgrading to 10.1.25 from 10.1.24 went smooth as usual. In our 3_0_X branch we relay on Tomcat 9.0.x; with 9.0.89 everything goes as expected, but with 9.0.90 we

Re: Errors after upgrading to Tomcat 9.0.90

2024-06-26 Thread Christopher Schultz
there, at Syncope we usually use the latest Tomcat versions to run a large chunk of our integration tests. In our master branch we relay on Tomcat 10.1.x, and upgrading to 10.1.25 from 10.1.24 went smooth as usual. In our 3_0_X branch we relay on Tomcat 9.0.x; with 9.0.89 everything goes as expected

Re: How to configure Tomcat with a Managed Service Account when using LocalMachine certificates for TLS

2024-06-25 Thread Mark Thomas
On 25/06/2024 14:27, Gavioto  wrote: - how are are starting Tomcat?   Tomcat is starting as a service with "Domain\account1$" (Managed Service Account) - is Tomcat installed as a Windows service?   Yes - which account is Tomcat running under?   "Domain\account1$&qu

RE: How to configure Tomcat with a Managed Service Account when using LocalMachine certificates for TLS

2024-06-25 Thread Gavioto 
Finally I got Tomcat working with Machine Certificate Storage. Finally, I got a configuration that works with Certificate Storage. It is very specific, and I couldn't find any other until date. It works, but in our environment there is a required manual step yet. I think it should be configured

Re: How to configure Tomcat with a Managed Service Account when using LocalMachine certificates for TLS

2024-06-25 Thread Bill Stewart
The standard on this mailing list is not to top-post. 2) Local administrator rights for the Tomcat service account is an unacceptable security risk IMO. Tomcat should not run with a privileged account on any OS. I would definitely recommend an alternative approach. Bill

Re: How to configure Tomcat with a Managed Service Account when using LocalMachine certificates for TLS

2024-06-25 Thread david w
25, 2024 3:27:12 PM To: users@tomcat.apache.org Subject: RE: How to configure Tomcat with a Managed Service Account when using LocalMachine certificates for TLS - how are are starting Tomcat?   Tomcat is starting as a service with "Domain\account1$" (Managed Service Account) -

RE: How to configure Tomcat with a Managed Service Account when using LocalMachine certificates for TLS

2024-06-25 Thread Gavioto 
- how are are starting Tomcat?   Tomcat is starting as a service with "Domain\account1$" (Managed Service Account) - is Tomcat installed as a Windows service?   Yes - which account is Tomcat running under?   "Domain\account1$" (Managed Service Account) It is

Re: How to configure Tomcat with a Managed Service Account when using LocalMachine certificates for TLS

2024-06-25 Thread Mark Thomas
A few questions: - how are are starting Tomcat? - is Tomcat installed as a Windows service? - which account is Tomcat running under? There are a few references to "user" in your question. It is not clear if this is: - the user administering a Tomcat service - a user that is start

How to configure Tomcat with a Managed Service Account when using LocalMachine certificates for TLS

2024-06-25 Thread Alberto Corral
Hello! After some research, docs, and test, I didn't found an answer to my issue. I'm writing to the list because I have to configure a probably not very common Tomcat configuration and didn't found correct configuration of if it is posible to do it. Also I didn't find previous information

Re: Errors after upgrading to Tomcat 9.0.90

2024-06-21 Thread Rainer Jung
Am 20.06.24 um 17:52 schrieb Christopher Schultz: Francesco, On 6/20/24 09:03, Francesco Chicchiriccò wrote: On 2024/06/20 12:18:15 Konstantin Kolinko wrote: чт, 20 июн. 2024 г. в 13:25, Francesco Chicchiriccò : Hi there, at Syncope we usually use the latest Tomcat versions to run a large

Re: Errors after upgrading to Tomcat 9.0.90

2024-06-21 Thread Francesco Chicchiriccò
here, > >>> at Syncope we usually use the latest Tomcat versions to run a large chunk > >>> of our integration tests. > >>> > >>> In our master branch we relay on Tomcat 10.1.x, and upgrading to 10.1.25 > >>> from 10.1.24 went smooth as usu

Re: Errors after upgrading to Tomcat 9.0.90

2024-06-20 Thread Christopher Schultz
Francesco, On 6/20/24 09:03, Francesco Chicchiriccò wrote: On 2024/06/20 12:18:15 Konstantin Kolinko wrote: чт, 20 июн. 2024 г. в 13:25, Francesco Chicchiriccò : Hi there, at Syncope we usually use the latest Tomcat versions to run a large chunk of our integration tests. In our master

Re: Errors after upgrading to Tomcat 9.0.90

2024-06-20 Thread Francesco Chicchiriccò
On 2024/06/20 12:18:15 Konstantin Kolinko wrote: > чт, 20 июн. 2024 г. в 13:25, Francesco Chicchiriccò : > > > > Hi there, > > at Syncope we usually use the latest Tomcat versions to run a large chunk > > of our integration tests. > > > > In our

Re: Errors after upgrading to Tomcat 9.0.90

2024-06-20 Thread Konstantin Kolinko
чт, 20 июн. 2024 г. в 13:25, Francesco Chicchiriccò : > > Hi there, > at Syncope we usually use the latest Tomcat versions to run a large chunk of > our integration tests. > > In our master branch we relay on Tomcat 10.1.x, and upgrading to 10.1.25 from > 10.1.24 went smooth

Re: Errors after upgrading to Tomcat 9.0.90

2024-06-20 Thread Francesco Chicchiriccò
ausing facade > objects to be discarded by default. (remm) > > You could try explicitly setting discardFacades to false. > > Mark > > > On 20/06/2024 11:25, Francesco Chicchiriccò wrote: > > Hi there, > > at Syncope we usually use the latest Tomcat versions to run a large

Re: Errors after upgrading to Tomcat 9.0.90

2024-06-20 Thread Mark Thomas
the default value for the discardFacades connector attribute, thus causing facade objects to be discarded by default. (remm) You could try explicitly setting discardFacades to false. Mark On 20/06/2024 11:25, Francesco Chicchiriccò wrote: Hi there, at Syncope we usually use the latest Tomcat

Errors after upgrading to Tomcat 9.0.90

2024-06-20 Thread Francesco Chicchiriccò
Hi there, at Syncope we usually use the latest Tomcat versions to run a large chunk of our integration tests. In our master branch we relay on Tomcat 10.1.x, and upgrading to 10.1.25 from 10.1.24 went smooth as usual. In our 3_0_X branch we relay on Tomcat 9.0.x; with 9.0.89 everything goes

RE: Tomcat MySQL Connection Pooling JNDI lookup

2024-06-19 Thread Daniel Schwartz
Chris, Sorry, I mistyped. I did put context.xml in META-INF (not WEB-INF) . It didn't help. I'm guessing that there is just some little thing that's being overlooked, but I can't find it. I decided to reinstall Tomcat 10.1.24, remembered to copy the j-connector .jar file into the lib

Re: Tomcat MySQL Connection Pooling JNDI lookup

2024-06-19 Thread Christopher Schultz
Daniel, On 6/19/24 16:37, Daniel Schwartz wrote: I followed you instruction to move the context.xml file into the application WEB-INF directory and restored the original context.xml file in the tomcat conf directory, but the problem persists. Very puzzling. To be clear, I was recommending

Re: Tomcat 9 symlinks ?

2024-06-19 Thread Christopher Schultz
Chuck, On 6/19/24 15:49, Chuck Caldarale wrote: On Jun 19, 2024, at 14:42, Stephen Tenberg wrote: You asked why path="" instead of path="foo" in context at server.xml? That was our attempt to mount this application at "/" instead of at "/foo" which is a requirement here. Just deploy

RE: Tomcat MySQL Connection Pooling JNDI lookup

2024-06-19 Thread Daniel Schwartz
Chris, I followed you instruction to move the context.xml file into the application WEB-INF directory and restored the original context.xml file in the tomcat conf directory, but the problem persists. Very puzzling. Your remark regarding the MySQL login ID and password is well-taken, and I

Re: Tomcat 9 symlinks ?

2024-06-19 Thread Chuck Caldarale
Also take a look at this: https://tomcat.apache.org/tomcat-9.0-doc/security-howto.html#Default_web_applications - Chuck > On Jun 19, 2024, at 15:23, Robert Turner wrote: > > This page might be a useful resource to read if you haven't already: > https://tomcat.apache.org/to

Re: Tomcat 9 symlinks ?

2024-06-19 Thread Robert Turner
This page might be a useful resource to read if you haven't already: https://tomcat.apache.org/tomcat-9.0-doc/config/context.html The short version is -- to publish an application in the "root" web url path (of http(s)://your.server-name.com/), you can name your WAR file "ROO

Re: Tomcat 9 symlinks ?

2024-06-19 Thread Chuck Caldarale
> On Jun 19, 2024, at 15:16, Stephen Tenberg wrote: > > Thank you. Do we just rename the existing ROOT to something else so the > admin stuff is available? The default ROOT application does not have any admin purpose itself, but it does have links to admin functions that are separate from

Re: Tomcat 9 symlinks ?

2024-06-19 Thread Stephen Tenberg
Thank you. Do we just rename the existing ROOT to something else so the admin stuff is available? The path="" was appealing as we want this existing large application to be available as "/". Is renaming ROOT a better way of achieving this? On Wed, Jun 19, 2024 at 3:50 PM Chuck Caldarale wrote:

Re: Tomcat 9 symlinks ?

2024-06-19 Thread Chuck Caldarale
> On Jun 19, 2024, at 14:42, Stephen Tenberg wrote: > > You asked why path="" instead of path="foo" in context at server.xml? > > That was our attempt to mount this application at "/" instead of at "/foo" > which is a requirement here. Just deploy the application as ROOT (case matters)

Re: Tomcat 9 symlinks ?

2024-06-19 Thread Stephen Tenberg
Thanks very much for the comprehensive reply. I tried as you suggested and it worked fine, resolving symbolic links both inside and outside the tomcat webapps directory. You asked why path="" instead of path="foo" in context at server.xml? That was our attempt to mo

Re: Tomcat 9 symlinks ?

2024-06-19 Thread Christopher Schultz
Stephen, On 6/19/24 13:55, Stephen Tenberg wrote: Hello I have scoured the web trying to get symlinks working for jsp pages or folders in Tomcat 9 using Ubuntu 20.04. Here is how to repeat the issue, and what I have tried. 1. Create a new folder in webapps, say "foo" 2. Put Hell

Re: Tomcat MySQL Connection Pooling JNDI lookup

2024-06-19 Thread Terence M. Bandoian
On 6/19/2024 1:02 PM, Chuck Caldarale wrote: On Jun 19, 2024, at 10:09, Daniel Schwartz wrote: Dear Thomas, Your email came with no content. Please try again. Thomas’ message looked fine here as well. Check your e-mail client. - Chuck I saw the quoted message Mark was responding to

Re: Tomcat MySQL Connection Pooling JNDI lookup

2024-06-19 Thread Chuck Caldarale
> On Jun 19, 2024, at 10:09, Daniel Schwartz wrote: > > Dear Thomas, > > Your email came with no content. Please try again. Thomas’ message looked fine here as well. Check your e-mail client. - Chuck - To unsubscribe,

Tomcat 9 symlinks ?

2024-06-19 Thread Stephen Tenberg
Hello I have scoured the web trying to get symlinks working for jsp pages or folders in Tomcat 9 using Ubuntu 20.04. Here is how to repeat the issue, and what I have tried. 1. Create a new folder in webapps, say "foo" 2. Put HelloWorld.jsp there 3. (I restarted Tomcat just in ca

Re: Tomcat MySQL Connection Pooling JNDI lookup

2024-06-19 Thread Christopher Schultz
Daniel, On 6/19/24 11:40, Daniel Schwartz wrote: Dear Felix, Thank you for your reply. The connector jar file is at C:\Program Files\apache-tomcat-10.1.24\lib\mysql-connector-j-8.4.0.jar The latest entry in catalina.2024-06-17.log is copied below. The latest entry in localhost.2024-06

Re: Tomcat MySQL Connection Pooling JNDI lookup

2024-06-19 Thread Christopher Schultz
Daniel, On 6/19/24 11:09, Daniel Schwartz wrote: Dear Thomas, Your email came with no content. Please try again. His reply email looks fine to me. -chris - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org

Re: Configuration of Certificate Verification on Tomcat 10

2024-06-19 Thread Christopher Schultz
Mark, On 6/19/24 10:14, Mark Thomas wrote: On 18/06/2024 23:30, Christopher Schultz wrote: Izek, On 6/18/24 13:49, Izek Hornbeck wrote: I am creating a Java web app (Java v17, 2021-09-14) that runs on a Tomcat 10.1.23 server. I need to authenticate users by verifying their certificate from

RE: Tomcat MySQL Connection Pooling JNDI lookup

2024-06-19 Thread Daniel Schwartz
Dear Felix, Thank you for your reply. The connector jar file is at C:\Program Files\apache-tomcat-10.1.24\lib\mysql-connector-j-8.4.0.jar The latest entry in catalina.2024-06-17.log is copied below. The latest entry in localhost.2024-06-17.log is copied after that. The two entries

RE: Tomcat MySQL Connection Pooling JNDI lookup

2024-06-19 Thread Daniel Schwartz
Dear Thomas, Your email came with no content. Please try again. Dan Schwartz From: Thomas Hoffmann (Speed4Trade GmbH) Sent: Wednesday, June 19, 2024 2:05 AM To: Tomcat Users List Subject: AW: Tomcat MySQL Connection Pooling JNDI lookup

Re: Configuration of Certificate Verification on Tomcat 10

2024-06-19 Thread Mark Thomas
On 18/06/2024 23:30, Christopher Schultz wrote: Izek, On 6/18/24 13:49, Izek Hornbeck wrote: I am creating a Java web app (Java v17, 2021-09-14) that runs on a Tomcat 10.1.23 server. I need to authenticate users by verifying their certificate from a smart card. (This Stack Overflow question

[ANN] Apache Tomcat 9.0.90 available

2024-06-19 Thread Rémy Maucherat
The Apache Tomcat team announces the immediate availability of Apache Tomcat 9.0.90. Apache Tomcat 9 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 9.0.90 is a bugfix

AW: Tomcat MySQL Connection Pooling JNDI lookup

2024-06-19 Thread Thomas Hoffmann (Speed4Trade GmbH)
Hello Daniel, > Am 17. Juni 2024 22:18:53 MESZ schrieb Daniel Schwartz > : > >Hello, > > > > > > > >I'm trying to set up MySQL 8.0.11 database connection pooling in Tomcat > >10.1.24 on Windows 10. The MySQL database is "holidays" with us

Re: Tomcat MySQL Connection Pooling JNDI lookup

2024-06-18 Thread Felix Schumacher
Am 17. Juni 2024 22:18:53 MESZ schrieb Daniel Schwartz : >Hello, > > > >I'm trying to set up MySQL 8.0.11 database connection pooling in Tomcat >10.1.24 on Windows 10. The MySQL database is "holidays" with user name >"root" and password "rootpwd

  1   2   3   4   5   6   7   8   9   10   >