Aw: mod_jk/1.2.37 Apache/2.4.7 (Ubuntu): AJP established connections pile up, connection_pool_timeout has no effect?

2016-08-31 Thread Hildegard Meier
P.S. in workers.properties we use the template then with worker.myhost.reference=worker.template_01 worker.myhost.host=10.20.30.40 worker.myhost.port=8809 > Gesendet: Mittwoch, 31. August 2016 um 14:10 Uhr > Von: "Hildegard Meier" > An: users@tomcat.apache.org > Betreff

mod_jk/1.2.37 Apache/2.4.7 (Ubuntu): AJP established connections pile up, connection_pool_timeout has no effect?

2016-08-31 Thread Hildegard Meier
Running: Ubuntu Trusty 14.0.4 LTS 64 Bit mod_jk/1.2.37 Apache/2.4.7 (Ubuntu) Hello, I have much investigated into this, but have no idea, why the AJP connections from the Apache (MPM worker) to the AJP backends pile up. They do not get closed, they stay in state ESTABLISHED. Over night, the

Re: No binary distribution for mod_jk?

2016-07-25 Thread Paul Roubekas
uot; 1) Did I put the ssl.conf in the correct >>>>> directory? 2) What else can I check? >>>> If you want Apache HTTPD to serve HTTPS content (in addition to >>>> HTTP content), you'll need to install the mod_ssl RPM. >>>> >>>> 2.

Re: No binary distribution for mod_jk?

2016-07-25 Thread Mark Eggers
>>> HTTP content), you'll need to install the mod_ssl RPM. >>> >>> 2.4.23-3.fc23.x86_64.rpm >>> >>> is the latest release I believe. I'm not sure - my laptop died and >>> with it my Fedora install (time to get a new laptop). >>&g

Re: No binary distribution for mod_jk?

2016-07-25 Thread Mark Eggers
rectory? 2) What else can I check? >> If you want Apache HTTPD to serve HTTPS content (in addition to >> HTTP content), you'll need to install the mod_ssl RPM. >> >> 2.4.23-3.fc23.x86_64.rpm >> >> is the latest release I believe. I'm not sure

Re: No binary distribution for mod_jk?

2016-07-25 Thread Paul Roubekas
he TomEE" proxyName="www.myDomain.com" proxyPort="80"/> >>>>>> >>>>>>>>>>> proxyName="www.myDomain.com" proxyPort="80"/> >>>>> Changing the redirectPort= on both XML elements to 443 &

Re: No binary distribution for mod_jk?

2016-07-24 Thread Mark Eggers
;>>>> server="Apache TomEE" proxyName="www.myDomain.com" proxyPort="80"/> >>>>> >>>>>>>>> proxyName="www.myDomain.com" proxyPort="80"/> >>>> Changing the redirectPort= on both XML el

Re: No binary distribution for mod_jk?

2016-07-24 Thread Paul Roubekas
on both XML elements to 443 >>> causes the https page to have a "Unable to connect" error. >> What should I try next? >>>>> BTW if you aren't using TomEE for HTTPS directly, you can remove that >>>>> entirely. If you are using AJP to

Re: No binary distribution for mod_jk?

2016-07-24 Thread Mark Eggers
hanging the redirectPort= on both XML elements to 443 >> causes the https page to have a "Unable to connect" error. > What should I try next? >>>> BTW if you aren't using TomEE for HTTPS directly, you can remove that >>>> entirely. If you are using AJP to

Re: No binary distribution for mod_jk?

2016-07-24 Thread Paul Roubekas
AJP to proxy from httpd -> >>> TomEE, then you need no other connectors besides the AJP one. It will >>> make your TomEE configuration simpler, use fewer resources, and cause >>> less confusion (like what was happening above, because TomEE was >>> handling th

Re: No binary distribution for mod_jk?

2016-07-23 Thread Paul Roubekas
mEE, then you need no other connectors besides the AJP one. It will >> make your TomEE configuration simpler, use fewer resources, and cause >> less confusion (like what was happening above, because TomEE was >> handling the requests, not httpd). >> >>> Later, a

Re: No binary distribution for mod_jk?

2016-07-23 Thread Paul Roubekas
t support ajp, and/or I don't need the ajp protocol. Is that > > correct? AJP is just for Tomcat? > > AJP actually stands for Apache JServ Protocol, which was invented > solely for the purposes of proxying to Java-based application servers. > It's mostly outlived its us

Re: No binary distribution for mod_jk?

2016-07-23 Thread Christopher Schultz
ajp protocol. Is that > correct? AJP is just for Tomcat? AJP actually stands for Apache JServ Protocol, which was invented solely for the purposes of proxying to Java-based application servers. It's mostly outlived its usefulness, but there are some of us die-hard fans out there that simp

Re: No binary distribution for mod_jk?

2016-07-23 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Paul, On 7/22/16 4:24 PM, Paul Roubekas wrote: > On 7/22/2016 4:14 PM, Christopher Schultz wrote: >> You can even use either HTTP or AJP as the protocol to connect >> httpd -> Tomcat. I would recommend mod_proxy_http just because >> it's basically the

Re: No binary distribution for mod_jk?

2016-07-23 Thread Paul Roubekas
On 7/23/2016 4:12 AM, André Warnier (tomcat) wrote: > On 23.07.2016 02:37, Paul Roubekas wrote: >>> I tried going with ajp with the following configuration after reading >>> >the ajp documentation. >>> >Adding a Load module for ajp was not needed as per this message. >>> >==

Re: No binary distribution for mod_jk?

2016-07-23 Thread tomcat
On 23.07.2016 02:37, Paul Roubekas wrote: I tried going with ajp with the following configuration after reading >the ajp documentation. >Adding a Load module for ajp was not needed as per this message. >==

Re: No binary distribution for mod_jk?

2016-07-22 Thread Paul Roubekas
httpd, then it should be accessible via http://host/bugzilla >>> >> (or whatever the path is). Tomcat would be accessible via >>> >> http://host:8080/. If you wanted tomcat to be accessible via >>> >> http://host/tomcat, then you'd have to proxy to i

Re: No binary distribution for mod_jk?

2016-07-22 Thread Paul Roubekas
is). Tomcat would be accessible via >> >> http://host:8080/. If you wanted tomcat to be accessible via >> >> http://host/tomcat, then you'd have to proxy to it. >> > understood. >> >> >> >>> It is also my understanding that I needed

Re: No binary distribution for mod_jk?

2016-07-22 Thread Paul Roubekas
ssible via > >> http://host/tomcat, then you'd have to proxy to it. > > understood. > >> > >>> It is also my understanding that I needed mod_jk to have the > >>> httpd route to TomEE (Tomcat 7). I have TomEE running on the > >>> serve

Re: No binary distribution for mod_jk?

2016-07-22 Thread Christopher Schultz
e. If you install Bugzilla and phpBB >> in httpd, then it should be accessible via http://host/bugzilla >> (or whatever the path is). Tomcat would be accessible via >> http://host:8080/. If you wanted tomcat to be accessible via >> http://host/tomcat, then you'd have to

Re: No binary distribution for mod_jk?

2016-07-22 Thread Paul Roubekas
t Users List >>> Subject: Re: No binary distribution for mod_jk? >>> >>> -BEGIN PGP SIGNED MESSAGE- >>> Hash: SHA256 >>> >>> Paul, >>> >>> On 7/20/16 12:12 PM, Paul Roubekas wrote: >>>> I am trying to install the mod_

Re: No binary distribution for mod_jk?

2016-07-22 Thread tomcat
On 22.07.2016 09:18, Jäkel, Guido wrote: -Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Thursday, July 21, 2016 5:51 PM To: Tomcat Users List Subject: Re: No binary distribution for mod_jk? -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Paul

RE: No binary distribution for mod_jk?

2016-07-22 Thread Jäkel , Guido
>-Original Message- >From: Christopher Schultz [mailto:ch...@christopherschultz.net] >Sent: Thursday, July 21, 2016 5:51 PM >To: Tomcat Users List >Subject: Re: No binary distribution for mod_jk? > >-BEGIN PGP SIGNED MESSAGE- >Hash: SHA256 > >Paul

Re: No binary distribution for mod_jk?

2016-07-21 Thread Paul Roubekas
at would be accessible via http://host:8080/. If you wanted > tomcat to be accessible via http://host/tomcat, then you'd have to > proxy to it. understood. > >> It is also my understanding that I needed mod_jk to have the httpd route to >> TomEE (Tomcat 7). I have TomEE

Re: No binary distribution for mod_jk?

2016-07-21 Thread Coty Sutherland
ble via http://host/tomcat, then you'd have to proxy to it. > It is also my understanding that I needed mod_jk to have the httpd route to > TomEE (Tomcat 7). I have TomEE running on the server now. Unless you only have an AJP connector on TomEE (which isn't likely) it's

Re: No binary distribution for mod_jk?

2016-07-21 Thread Paul Roubekas
Actually my requirement is not that complex. All I need to do is host TomEE (a Tomcat 7 superset), Bugzilla and phpBB (forum software) on the same server. It is my understanding the I need httpd to do this. It is also my understanding that I needed mod_jk to have the httpd route to TomEE

Re: No binary distribution for mod_jk?

2016-07-21 Thread Coty Sutherland
Is there some reason that you can't use mod_proxy_balancer instead of mod_cluster (if you don't want to be vulnerable to the known CVEs)? I assume that you're looking for some specific logic offered by mod_cluster, but since you're considering mod_jk I'm not so sure. If

Re: No binary distribution for mod_jk?

2016-07-21 Thread Paul Roubekas
ply I will have build mod_jk myself. Since I have never done any such thing I am not looking forward it. On 7/21/2016 11:51 AM, Christopher Schultz wrote: > Paul, > > On 7/20/16 12:12 PM, Paul Roubekas wrote: > > I am trying to install the mod_jk on httpd for my tomcat 7.0.68 > &g

Re: No binary distribution for mod_jk?

2016-07-21 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Paul, On 7/20/16 12:12 PM, Paul Roubekas wrote: > I am trying to install the mod_jk on httpd for my tomcat 7.0.68 > (TomEE) server. > > I am reading this > https://tomcat.apache.org/connectors-doc/webserver_howto/apache.html >

No binary distribution for mod_jk?

2016-07-20 Thread Paul Roubekas
I am trying to install the mod_jk on httpd for my tomcat 7.0.68 (TomEE) server. I am reading this https://tomcat.apache.org/connectors-doc/webserver_howto/apache.html documentation which points to this http://tomcat.apache.org/download-connectors.cgi download page. But there is no binary

Re: mod_jk errors

2016-07-18 Thread Wayne Li
e 2.4.7 (Ubuntu) >> as the front and forward eveything to tomcat. I installed mod_jk using >> Ubuntu's software >> center.. Things are working. But I have errors in >> /var/log/apache2/mod_jk.log: >> >> [Mon Jul 11 20:19:32.261 2016] [1175:140389159810944] [info

Re: mod_jk errors

2016-07-15 Thread Rainer Jung
Am 12.07.2016 um 19:44 schrieb Wayne Li: Hi, I have a servlet/jsp application running on tomcat 7.0.47. There are no static html files. Now I am try to use apache 2.4.7 (Ubuntu) as the front and forward eveything to tomcat. I installed mod_jk using Ubuntu's software center.. Things are wo

Re: mod_jk errors

2016-07-13 Thread tomcat
On 12.07.2016 19:44, Wayne Li wrote: Hi, I have a servlet/jsp application running on tomcat 7.0.47. There are no static html files. Now I am try to use apache 2.4.7 (Ubuntu) as the front and forward eveything to tomcat. I installed mod_jk using Ubuntu's software center.. Things are working

mod_jk errors

2016-07-12 Thread Wayne Li
Hi, I have a servlet/jsp application running on tomcat 7.0.47. There are no static html files. Now I am try to use apache 2.4.7 (Ubuntu) as the front and forward eveything to tomcat. I installed mod_jk using Ubuntu's software center.. Things are working. But I have errors in /var/log/ap

Re: mod_jk resubmitting request to Tomcat

2016-06-06 Thread Christopher Schultz
ns "OK" or "RC=". > However, mod_jk gets impatient, and after about 5 minutes, it > decides to send the request to Tomcat again, which kicks off > another instance of the back-end process (obviously not what I > want). Following is from the mod_jk log: > >>>

Re: mod_jk resubmitting request to Tomcat

2016-06-04 Thread Anthony Biacco
On Sat, Jun 4, 2016 at 12:00 PM, Jerry Malcolm wrote: > I am calling a JSP to start a fairly long-running process in Tomcat. I'm > not using the page response data. The JSP is simply a way to initiate the > process. The JSP simply returns "OK" or "RC=". How

mod_jk resubmitting request to Tomcat

2016-06-04 Thread Jerry Malcolm
I am calling a JSP to start a fairly long-running process in Tomcat. I'm not using the page response data. The JSP is simply a way to initiate the process. The JSP simply returns "OK" or "RC=". However, mod_jk gets impatient, and after about 5 minutes, it decide

Resetting mod_jk balancer worker errors stat only

2016-05-24 Thread Christopher Schultz
All, I haven't yet tried the obvious -- to just slam this value into the balancer working using a FORM POST -- but I was wondering if it was possible to "reset" the "errors" stat for a balancer worker without resetting all of the stats. For example, I have these two workers here: [S|E|R]

mod_jk load balancing to Tomcats or SonicWall NetScaler?

2016-05-09 Thread Jason Britton
Hello Good People - I'm trying to determine the best route in which to load balance multiple tomcats, what should I be taking into consideration when choosing between SonicWall's NetScaler or in continuing to use mod_jk? This question isn't meant to fuel a purchase decision as

Re: Tomcat mod_jk confirmation

2016-03-10 Thread Christopher Schultz
are being proxied to Tomcat, so presence in that log file doesn't mean that something is wrong. If you turn-up the log level for mod_jk, then you should be able to see what mod_jk is doing. Most common mistake with mod_jk configuration: placing JkMount directives at the top-level of httpd.con

Tomcat mod_jk confirmation

2016-03-10 Thread Michael Fox
I am running Red Hat Linux version 7.2 Apache version 2.4.6 Tomcat version 9.0.0.M1 Tomcat connector version 1.2.41 I have configured Tomcat and Apache for Tomcat calls to be handled by Apache. I am not getting any errors when starting up Tomcat or Apache, but how can I tell if the Tomcat calls

Re: mod_jk Connector for Apache 2.2 and Windows 64-bit

2016-01-28 Thread tomcat
On 28.01.2016 15:55, Konstantin Kolinko wrote: 2016-01-28 16:44 GMT+03:00 Konstantin Kolinko : 2016-01-28 15:00 GMT+03:00 André Warnier (tomcat) : Hi. On the page http://apache.lauf-forum.at/tomcat/tomcat-connectors/jk/binaries/windows/, the following mod_jk binaries are available

Re: mod_jk Connector for Apache 2.2 and Windows 64-bit

2016-01-28 Thread Konstantin Kolinko
2016-01-28 16:44 GMT+03:00 Konstantin Kolinko : > 2016-01-28 15:00 GMT+03:00 André Warnier (tomcat) : >> Hi. >> >> On the page >> http://apache.lauf-forum.at/tomcat/tomcat-connectors/jk/binaries/windows/, >> the following mod_jk binaries are available : >>

Re: mod_jk Connector for Apache 2.2 and Windows 64-bit

2016-01-28 Thread tomcat
On 28.01.2016 14:44, Konstantin Kolinko wrote: 2016-01-28 15:00 GMT+03:00 André Warnier (tomcat) : Hi. On the page http://apache.lauf-forum.at/tomcat/tomcat-connectors/jk/binaries/windows/, the following mod_jk binaries are available : tomcat-connectors-1.2.40-windows-i386-httpd-2.0.x.zip

Re: mod_jk Connector for Apache 2.2 and Windows 64-bit

2016-01-28 Thread tomcat
2016-01-28 15:00 GMT+03:00 André Warnier (tomcat) : Hi. On the page http://apache.lauf-forum.at/tomcat/tomcat-connectors/jk/binaries/windows/, the following mod_jk binaries are available : tomcat-connectors-1.2.40-windows-i386-httpd-2.0.x.zip 2014-04-14 21:40 130K ZIP compressed archive

Re: mod_jk Connector for Apache 2.2 and Windows 64-bit

2016-01-28 Thread Konstantin Kolinko
2016-01-28 15:00 GMT+03:00 André Warnier (tomcat) : > Hi. > > On the page > http://apache.lauf-forum.at/tomcat/tomcat-connectors/jk/binaries/windows/, > the following mod_jk binaries are available : > > tomcat-connectors-1.2.40-windows-i386-httpd-2.0.x.zip 2014-04-14 21:40 &

mod_jk Connector for Apache 2.2 and Windows 64-bit

2016-01-28 Thread tomcat
Hi. On the page http://apache.lauf-forum.at/tomcat/tomcat-connectors/jk/binaries/windows/, the following mod_jk binaries are available : tomcat-connectors-1.2.40-windows-i386-httpd-2.0.x.zip 2014-04-14 21:40 130K ZIP compressed archive tomcat-connectors-1.2.40-windows-i386-httpd-2.2

Re: REMOTE_USER mod_jk

2015-11-20 Thread Rainer Jung
ogLevel to debug. On that log level, you should be able to see the REMOTE_USER forwarding in the mod_jk logs. First check how the line looks when using HTTPD 2.2. Then check, whether that info is present when using 2.4. If "yes", then your problem is on the Tomcat (configuration, webapp

Re: REMOTE_USER mod_jk

2015-11-19 Thread Teresa Fasano
With Apache/2.2.15 the REMOTE_USER is passed to the application (Jboss), while with Apache/2.4.6 is lost. In the log of the application we see this error: "REMOTE_USER variable not assigned." Il 19/11/2015 14:02, Teresa Fasano ha scritto: Hi, I'm using Apache 2.4.6 with mod_

Re: REMOTE_USER mod_jk

2015-11-19 Thread Konstantin Kolinko
2015-11-19 16:02 GMT+03:00 Teresa Fasano : > Hi, > > I'm using Apache 2.4.6 with mod_jk and mod_shib 2.5.5, so Shibboleth as SSO > authentication. > > Routing Apache request to tomcat (JBoss) we are not able to retreive > REMOTE_USER. > > It seems that the

REMOTE_USER mod_jk

2015-11-19 Thread Teresa Fasano
Hi, I'm using Apache 2.4.6 with mod_jk and mod_shib 2.5.5, so Shibboleth as SSO authentication. Routing Apache request to tomcat (JBoss) we are not able to retreive REMOTE_USER. It seems that the REMOTE_USER is lost. In the configuration file shibboleth2.xml we have REMOTE_USER

Re: mod_jk make error with OSX 10.11.1

2015-11-01 Thread Youngho Cho
Rainer, > > On 10/29/15 5:31 AM, Rainer Jung wrote: >> Am 29.10.2015 um 03:59 schrieb Christopher Schultz: >>> Youngho, >>> >>> On 10/28/15 10:35 PM, Youngho Cho wrote: >>>> Just before I upgrade to OSX 10.11.1 >>>> >>>>

Re: mod_jk make error with OSX 10.11.1

2015-10-29 Thread Christopher Schultz
Rainer, On 10/29/15 5:31 AM, Rainer Jung wrote: > Am 29.10.2015 um 03:59 schrieb Christopher Schultz: >> Youngho, >> >> On 10/28/15 10:35 PM, Youngho Cho wrote: >>> Just before I upgrade to OSX 10.11.1 >>> >>> And try to compile Ap

Re: mod_jk make error with OSX 10.11.1

2015-10-29 Thread Rainer Jung
Am 29.10.2015 um 03:59 schrieb Christopher Schultz: Youngho, On 10/28/15 10:35 PM, Youngho Cho wrote: Just before I upgrade to OSX 10.11.1 And try to compile Apache mod_jk 1.2.41. But the make is fail. YounghoiMac:native youngho$ sudo make Making all in common usr/share/apr-1/build-1

Re: mod_jk make error with OSX 10.11.1

2015-10-28 Thread Christopher Schultz
Youngho, On 10/28/15 10:35 PM, Youngho Cho wrote: > Just before I upgrade to OSX 10.11.1 > > And try to compile Apache mod_jk 1.2.41. > > But the make is fail. > > YounghoiMac:native youngho$ sudo make > > Making all in common > usr/share/apr-1/build-1/l

mod_jk make error with OSX 10.11.1

2015-10-28 Thread Youngho Cho
Hello, Just before I upgrade to OSX 10.11.1 And try to compile Apache mod_jk 1.2.41. But the make is fail. YounghoiMac:native youngho$ sudo make Making all in common usr/share/apr-1/build-1/libtool --silent --mode=compile /Applications/Xcode.app/Contents/Developer/Toolchains/OSX10.11

Re: Chunked transfer delay with httpd 2.4 + mod_jk 1.2.41 on Windows.

2015-10-19 Thread Andy Wang
On 10/19/2015 06:04 PM, Konstantin Kolinko wrote:request. Is the below a capture between your client and HTTPD? (as opposed to one between HTTPD and Tomcat) The capture is between client and httpd Note that Basic auth sends password in plain text (encoded in base64). So you password is

Re: Chunked transfer delay with httpd 2.4 + mod_jk 1.2.41 on Windows.

2015-10-19 Thread Konstantin Kolinko
The issue is currently reproduced using Apache httpd 2.4.16, mod_jk 1.2.41 > and tomcat 8.0.28. > > I've created a very very simple JSP page that does nothing but print a small > string, but I've tried changing the jsp page to print a very very large > string (1+ characte

Re: Chunked transfer delay with httpd 2.4 + mod_jk 1.2.41 on Windows.

2015-10-19 Thread Andy Wang
mcat users list (separate messages) but hoping for any ideas at all. The issue is currently reproduced using Apache httpd 2.4.16, mod_jk 1.2.41 and tomcat 8.0.28. I've created a very very simple JSP page that does nothing but print a small string, but I've tried changing the jsp page to pr

Chunked transfer delay with httpd 2.4 + mod_jk 1.2.41 on Windows.

2015-10-19 Thread Andy Wang
Hi all, I'm seeing a weird problem that I'm running out of ideas on. I'm going to send this email to both the apache httpd users list and the tomcat users list (separate messages) but hoping for any ideas at all. The issue is currently reproduced using Apache httpd 2.4.16, mod

Re: AW: Question concerning mod_jk Security Fix CVE-2014-8111

2015-08-11 Thread Mark Thomas
r the vote to finish... I believe we have 3 votes >> to release. > >> http://tomcat.markmail.org/thread/evury5r6rwcls5df > >> -chris > >>> -Original Message- From: Mark Thomas >>> [mailto:ma...@apache.org] Sent: Sunday, July 26, 2015 10:16 PM >&

Re: AW: Question concerning mod_jk Security Fix CVE-2014-8111

2015-08-11 Thread Christopher Schultz
gt; available. > > Or you can wait for the vote to finish... I believe we have 3 votes > to release. > > http://tomcat.markmail.org/thread/evury5r6rwcls5df > > -chris > >> -Original Message- From: Mark Thomas >> [mailto:ma...@apache.org] Sent: Sunday, Ju

Re: AW: Question concerning mod_jk Security Fix CVE-2014-8111

2015-08-08 Thread Felix Schumacher
inal Message- From: Mark Thomas >> [mailto:ma...@apache.org] Sent: Sunday, July 26, 2015 10:16 PM To: >> Tomcat Users List Subject: Re: AW: >> Question concerning mod_jk Security Fix CVE-2014-8111 >> >> On 20/07/2015 10:58, Kreuser, Peter wrote: >> >>

Re: AW: Question concerning mod_jk Security Fix CVE-2014-8111

2015-08-08 Thread Chinoy Gupta
a...@apache.org] Sent: Sunday, July 26, 2015 10:16 PM To: > Tomcat Users List Subject: Re: AW: > Question concerning mod_jk Security Fix CVE-2014-8111 > > On 20/07/2015 10:58, Kreuser, Peter wrote: > > > >> Hi Mark, >> >> I appreciate your open comment and th

Re: AW: Question concerning mod_jk Security Fix CVE-2014-8111

2015-08-08 Thread Christopher Schultz
e 3 votes to release. http://tomcat.markmail.org/thread/evury5r6rwcls5df - -chris > -Original Message- From: Mark Thomas > [mailto:ma...@apache.org] Sent: Sunday, July 26, 2015 10:16 PM To: > Tomcat Users List Subject: Re: AW: > Question concerning mod_jk Security Fix CVE-2014-

RE: AW: Question concerning mod_jk Security Fix CVE-2014-8111

2015-08-05 Thread Chinoy Gupta
Hi, When can we expect the release of JK 1.2.41 source code? Regards, Chinoy -Original Message- From: Mark Thomas [mailto:ma...@apache.org] Sent: Sunday, July 26, 2015 10:16 PM To: Tomcat Users List Subject: Re: AW: Question concerning mod_jk Security Fix CVE-2014-8111 On 20/07/2015

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-28 Thread Alex Soto
I send you here the link so you can read it http://httpd.markmail.org/search/?q=Alex%20Soto#query:Alex%20Soto+page:1+mid:74py424qest6gnj3+state:results El dt., 28 jul. 2015 a les 17:33, Christopher Schultz (< ch...@christopherschultz.net>) va escriure: > -BEGIN PGP SIGNED MESSAGE- > Hash:

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-28 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Alex, On 7/28/15 2:25 AM, Alex Soto wrote: > Well the answer comes from httpd team do I expect they aware of > this. Moreover they explained me this about ticketing and why it is > normal this behaviour If this is expected behavior, it's certainly

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-27 Thread Alex Soto
Well the answer comes from httpd team do I expect they aware of this. Moreover they explained me this about ticketing and why it is normal this behaviour Alex El dl., 27 de jul., 2015 a les 23.32 Christopher Schultz < ch...@christopherschultz.net> va escriure: > -BEGIN PGP SIGNED MESSAGE-

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Alex, On 7/27/15 7:36 AM, Alex Soto wrote: > finally I found what was happening. It was a problem with the > ticketing system of SSL. To avoid it and makes everything works you > only need to set SSLSessionTickets to off. And that's all, now > every

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-27 Thread Alex Soto
Hi guys, finally I found what was happening. It was a problem with the ticketing system of SSL. To avoid it and makes everything works you only need to set SSLSessionTickets to off. And that's all, now everything works as expected. Thank you very much for all your help. Alex. El dl., 13 jul. 201

Re: AW: Question concerning mod_jk Security Fix CVE-2014-8111

2015-07-26 Thread Mark Thomas
On 20/07/2015 10:58, Kreuser, Peter wrote: > Hi Mark, > > I appreciate your open comment and that clarifies the lengthy wait. I > trust that now the solution gets going and will be solved soonish. > > I'm in no position to criticize any wrongdoing on this CVE. I only > hope to find a clearer c

AW: Question concerning mod_jk Security Fix CVE-2014-8111

2015-07-20 Thread Kreuser, Peter
> -Ursprüngliche Nachricht- > Von: Mark Thomas [mailto:ma...@apache.org] > Gesendet: Freitag, 17. Juli 2015 12:33 > An: Tomcat Users List > Betreff: Re: Question concerning mod_jk Security Fix CVE-2014-8111 > > On 16/07/2015 13:16, Kreuser, Peter wrote: > &

Re: Question concerning mod_jk Security Fix CVE-2014-8111

2015-07-17 Thread Mark Thomas
k was entirely the fault of the RedHat security team. The mod_jk releases involve producing a large number of Windows binaries and experience with tc-native suggests that figuring out the build process - even with the available documentation - will be non-trivial. To give you an idea of what is likely

Question concerning mod_jk Security Fix CVE-2014-8111

2015-07-16 Thread Kreuser, Peter
l us, when the fixed mod_jk-Version 1.2.41 will be publicly available? The webpage does not mention any vulnerability at all, plus no newer release than the vulnerable 1.2.40. For now RedHat mentions only the fix to the source code from December 2014. http://svn.apache.org/viewvc?view=revisio

RE: Form authentication with Tomcat 7.0.63 behind Apache HTTPD and mod_jk

2015-07-14 Thread Cris Berneburg - US
Mark Look for ***>>> for my response. -Original Message- From: Mark Eggers [mailto:its_toas...@yahoo.com.INVALID] Sent: Monday, July 13, 2015 2:13 PM To: Tomcat Users List Subject: Re: Form authentication with Tomcat 7.0.63 behind Apache HTTPD and mod_jk -BEGIN PGP SIGNE

Re: Form authentication with Tomcat 7.0.63 behind Apache HTTPD and mod_jk

2015-07-13 Thread Mark Eggers
Tomcat 7.0.62 -- examples > Browser -- Tomcat 7.0.62 -- examples > Browser -- Tomcat 7.0.63 -- examples > > Architecture where this fails (brings up invalid login page) > > Browser -- Apache HTTPD -- mod-jk -- Tomcat 7.0.6

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Konstantin, On 7/9/15 6:30 AM, Konstantin Kolinko wrote: > Please do not top-post, Rules: > http://tomcat.apache.org/lists.html#tomcat-users -> "6." > > 2015-07-09 13:07 GMT+03:00 Alex Soto : >> yes (LogFormat "%H %{SSL_SESSION_ID}e %h %l %u %t \"

Re: Form authentication with Tomcat 7.0.63 behind Apache HTTPD and mod_jk

2015-07-10 Thread Mark Eggers
er -- Apache HTTPD -- mod-jk -- Tomcat 7.0.62 -- examples Browser -- Tomcat 7.0.62 -- examples Browser -- Tomcat 7.0.63 -- examples Architecture where this fails (brings up invalid login page) - -----

Re: Form authentication with Tomcat 7.0.63 behind Apache HTTPD and mod_jk

2015-07-10 Thread Mark Eggers
5. Get the error login page > > Quick test with direct access to Tomcat and examples webapp = > success. > (http://localhost:8080/examples/jsp/security/protected/index.jsp) > > Possible areas to test: 1. httpd / mod_jk : Do you have failure > with direct access to Tomcat ? >

Re: Form authentication with Tomcat 7.0.63 behind Apache HTTPD and mod_jk

2015-07-09 Thread Konstantin Kolinko
me links around. > > Here is a rundown of my environment: > [] How it fails? (Steps, maybe also Access Log output) Quick test with direct access to Tomcat and examples webapp = success. (http://localhost:8080/examples/jsp/security/protected/index.jsp) Possible areas to test: 1.

Form authentication with Tomcat 7.0.63 behind Apache HTTPD and mod_jk

2015-07-09 Thread Mark Eggers
nment: Structure - - CentOS 6.6 - latest updates Apache HTTPD 2.2.15-39.el6.centos.x86_64 mod_jk 1.2.40 Tomcat 7.0.62 (7.0.63) JRE 1.8.0_45 uriworkermap.properties - --- /jenkins|/*=loki /RPets|/*=loki worker.properties - - worker.list=jk-status,jk-ma

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-09 Thread Alex Soto
Hello yes I have raised the question to httpd mailing list. Just to keep you informed. Look what I have discovere. If I run in Chrome or Firefox I get next log messages: HTTP/1.1 - on TLSv1.2 Initial 172.17.42.1 - - [09/Jul/2015:13:57:18 +] "GET /hello/hello HTTP/1.1" 200 89 HTTP/1.1 - on TLSv1

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-09 Thread Konstantin Kolinko
Please do not top-post, Rules: http://tomcat.apache.org/lists.html#tomcat-users -> "6." 2015-07-09 13:07 GMT+03:00 Alex Soto : > yes (LogFormat "%H %{SSL_SESSION_ID}e %h %l %u %t \"%r\" %>s %b") > note that in both cases %H is the same value. I think it is correct. Agreed. HTTP/1.1 is correct her

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-09 Thread Alex Soto
gt; appears after some time again. So I think I am not changing the > protocol > >>> from https to http. In fact the browser complains about that the > >>> certificate is homemade. So yes I think so. > >>> > >>> In first mail I sent the Docker projec

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-09 Thread André Warnier
lordofthejars/apache-tomee-ssl just in case you didn't know it. Also one thing I done was to inspect the debugging file of mod_jk and I can see the session id is not sent by mod_jk. But if it is because mod_jk misses or not, I just don't know. Alex, what I think that your tests show,

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-09 Thread Alex Soto
t changing the protocol > > from https to http. In fact the browser complains about that the > > certificate is homemade. So yes I think so. > > > > In first mail I sent the Docker project > > https://github.com/lordofthejars/apache-tomee-ssl just in case you > didn&#

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-08 Thread André Warnier
https to http. In fact the browser complains about that the certificate is homemade. So yes I think so. In first mail I sent the Docker project https://github.com/lordofthejars/apache-tomee-ssl just in case you didn't know it. Also one thing I done was to inspect the debugging file of mod_jk

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-08 Thread Alex Soto
fact the browser complains about that the certificate is homemade. So yes I think so. In first mail I sent the Docker project https://github.com/lordofthejars/apache-tomee-ssl just in case you didn't know it. Also one thing I done was to inspect the debugging file of mod_jk and I can see the se

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Alex, On 7/8/15 10:18 AM, Alex Soto wrote: > I have tried what you mention. When SSL_Id is there both > request.getAttribute("javax.servlet, ."); and > request.getAttribute("SSL_SESSION_ID"); returns valid sslId and in > the same way if one is

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-08 Thread Alex Soto
he way in which this should work. But > Tomcat > >> is open-source > >> and free software, and its development and debugging benefit from the > help > >> of any > >> benevolent user, particularly if that user is interested in solving a > >>

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-08 Thread André Warnier
r is interested in solving a particular problem that he is having. El dt., 7 jul. 2015 a les 19:17, André Warnier () va escriure: Alex Soto wrote: Thank you so much but it is already set. https://github.com/lordofthejars/apache-tomee-ssl/blob/master/httpd.conf#L171 This is so strange. But there i

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-08 Thread Alex Soto
; > escriure: > > > >> Alex Soto wrote: > >>> Thank you so much but it is already set. > >>> > >> > https://github.com/lordofthejars/apache-tomee-ssl/blob/master/httpd.conf#L171 > >>> This is so strange. > >> But there is al

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-07 Thread André Warnier
7 jul. 2015 a les 19:17, André Warnier () va escriure: Alex Soto wrote: Thank you so much but it is already set. https://github.com/lordofthejars/apache-tomee-ssl/blob/master/httpd.conf#L171 This is so strange. But there is also this phrase : "In order to make SSL data availabl

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-07 Thread Alex Soto
gt; Thank you so much but it is already set. > > > https://github.com/lordofthejars/apache-tomee-ssl/blob/master/httpd.conf#L171 > > This is so strange. > > But there is also this phrase : "In order to make SSL data available for > mod_jk in Apache, > you need to set

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-07 Thread André Warnier
Alex Soto wrote: Thank you so much but it is already set. https://github.com/lordofthejars/apache-tomee-ssl/blob/master/httpd.conf#L171 This is so strange. But there is also this phrase : "In order to make SSL data available for mod_jk in Apache, you need to set SSLOptions +StdEn

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-07 Thread Alex Soto
SSL Session ID is not passed to Tomcat. You can see the logs > here > >> https://gist.github.com/lordofthejars/226d8ed605f2a58b52f3 (I have > created > >> a gist to not add here a lot of lines). > >> > >> Now the question is is it happens because of

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-07 Thread André Warnier
mod_jk or because of Apache? Alex. OK. You've reached the limits of my conform zone. You need someone more familiar with the httpd side of things at this point. Rainer? Mark Not Rainer, but maybe this helps : http://tomcat.apache.org/connectors-doc/reference/apache.html Look for "Jk

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-07 Thread Mark Thomas
On 07/07/2015 09:28, Alex Soto wrote: > Hi Mark, SSL Session ID is not passed to Tomcat. You can see the logs here > https://gist.github.com/lordofthejars/226d8ed605f2a58b52f3 (I have created > a gist to not add here a lot of lines). > > Now the question is is it happens becau

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-07 Thread Alex Soto
Hi Mark, SSL Session ID is not passed to Tomcat. You can see the logs here https://gist.github.com/lordofthejars/226d8ed605f2a58b52f3 (I have created a gist to not add here a lot of lines). Now the question is is it happens because of mod_jk or because of Apache? Alex. El dl., 6 jul. 2015 a les

<    1   2   3   4   5   6   7   8   9   10   >