No, just that I don't know how to set this particular connector up another way. I based this on the instructions on the isapi_connector site http://tomcat.apache.org/connectors-doc/webserver_howto/iis.html and on the 2 older servers we have which are working.
I'm sort of thinking of suggesting that we get rid of IIS entirely and switch to Tomcat. Then we can run the necessary Java application and also serve all the HTML items we need to using the same web server. On Tue, Feb 25, 2020 at 1:01 PM Christopher Schultz < ch...@christopherschultz.net> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 > > Ellen, > > On 2/25/20 12:55, Ellen Meiselman wrote: > > Sorry - no, the quotes were not there except for a 5 minute test of > > a hopeless theory that they might be needed. Right now there is no > > secret at all in the workers.properties, and > in the > > ajp connector, i have secretRequired ="false". Workers.properties: > > worker.worker1.type=ajp13 worker.worker1.host=127.0.0.1 > > worker.worker1.port=8009 > > > > Server.xml: <Connector protocol="AJP/1.3" address="127.0.0.1" > > port="8009" secretRequired="false" redirectPort="8443" /> > > Hmm. I think we've all been operating under the assumption that the > "secret" (by whatever name) was the source of the problem. It appears > that was incorrect. > > Have a look at Jon's question about file permissions. > > Was this a configuration that had been working until recently, or is > this a new configuration that you haven't (yet) been able to get working > ? > > Any reason not to use HTTP(S) for your protocol instead of AJP? > > - -chris > > > On Tue, Feb 25, 2020 at 12:35 PM Christopher Schultz < > > ch...@christopherschultz.net> wrote: > > > > Ellen, > > > > On 2/25/20 12:06, Ellen Meiselman wrote: > >>>> Yes, everything is on the same server. > >>>> > >>>> workers.properties: # Set properties for worker1 (ajp13) > >>>> worker.worker1.type=ajp13 worker.worker1.host=127.0.0.1 > >>>> worker.worker1.port=8009 worker.worker1.secret="mySecret". > > > > Just so there is no confusion: your "mySecret" should have neither > > quotes nor the trailing period. > > > > Are those literally in your ISS config file? > > > > -chris > > > >>>> On Tue, Feb 25, 2020 at 11:27 AM > >>>> <jonmcalexan...@wellsfargo.com.invalid> wrote: > >>>> > >>>>> -----Original Message----- From: Ellen Meiselman > >>>>> <elle...@gmail.com> Sent: Tuesday, February 25, 2020 10:01 > >>>>> AM To: Tomcat Users List <users@tomcat.apache.org> Subject: > >>>>> Re: At wits end: Difficulties with IIS ISAPI connector and > >>>>> Tomcat > >>>>> > >>>>>> Hi, > >>>>> > >>>>>> I've been testing, and so far, there is no change in the > >>>>>> behavior. I am > >>>>> still getting the same tomcat->based 403 error. > >>>>> > >>>>>> Based on what you said above... > >>>>>> > >>>>>> secretRequired="true" (which is the default, so it can > >>>>>> be removed) secret="xxxxxxx" > >>>>> > >>>>> > >>>>>> ...I removed secretRequired="true" and left secret. So > >>>>>> the connector > >>>>> definition now looks like this: > >>>>>> <Connector protocol="AJP/1.3" address="127.0.0.1" > >>>>>> port="8009" secret="mySecret" redirectPort="8443" /> > >>>>> > >>>>> <SNIP> > >>>>> > >>>>> I'm assuming that your web-front-end is on the same server > >>>>> as your Tomcat instance, based on you having the address > >>>>> set to 127.0.0.1, correct? What do you have in your > >>>>> workers.properties file? > >>>>> > >>>> > >> > >> --------------------------------------------------------------------- > >> > >> > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > >> For additional commands, e-mail: users-h...@tomcat.apache.org > >> > >> > > > -----BEGIN PGP SIGNATURE----- > Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/ > > iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAl5VYQQACgkQHPApP6U8 > pFgLuw/8Dheh8K4XrQpcktN1BK0A9pKCeWg44uWfU9RgCgWZg4b4VSjIaftE4Bv0 > WF8Vt6WhnzjIDp6XKgaH69KXIwIZrXVbmWbkjkYlTtMAgrqKrvX/fd5XdTP4lJYX > /gG6Zl2dqJeBGwg9maZgBLdQVXDRF3WnHVEvVfbnMl1UKxqNmVPdjODAhDCjzTqv > h6kMPSDTqAdEW1Na7UF+4JgpI5owAoP4oXoy3YCpCi18jYwu3axHwse62hBi/UwR > vWiQ8nQuV+6NcZ00A/K8d9OMpg+nheFbWJBTerxzDfHHelCbm17id7Em+XlOZ3aW > QPYmWx1ERcNbyf8cpSEXeRFNJ4IhYE/QZJVw541WNzveKRJzEVuActTC735fmgd/ > QOt9ECsu+0wXRgR09FNhUChcoCbxQbOqqvkvdwa87DA1pevEBP6j7emG0YDx2YTC > UKRjnk1OkajimSWRtsbnRoB2vdSF7tRurcNaveybIpkHn1xtcH76v7MvCTp1da4G > zPkVNn9e65cscN4K0HbtHd8Won+AlHBVZWe2iZ19XrCHsebFVwdz3CwaLBHIF3XN > O67SBp9Kdxof3Mt3SaDNrHYyOrmsWjSL3IKx5SSN48kNlEnk1acIFrHzmbIUD3n5 > IIVZk3HwvNqwkTH4f5UasVOUsO0i3+1JAe7f7Cft6RsuBOchRxM= > =qIFw > -----END PGP SIGNATURE----- > > --------------------------------------------------------------------- > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > >
