Hey Chris!
I actually fixed (well, figured out) the MySQL problem - it looks like it's
hard coded to a 2048b DH key, but I configured my servers for CIS level 2
which wants a minimum 3072. I can update the openssl config to utilize a
lower security level and it works just fine.
I don't want to do that, but I don't want to have a nonsecure instance
either. so im probably going to go with an ssh tunnel since this is just
dev and it won't be going to production (our prod is db2)
On Mon, Mar 20, 2023, 20:09 Christopher Schultz <
ch...@christopherschultz.net> wrote:
> Kevin,
>
> On 3/18/23 19:04, Kevin Huntly wrote:
> > I can't use tomcat 10 because of the switch to jakarta for the servlet
> > container - I'd have to rewrite a lot of code. That being said, I got it
> > fixed:
> >
> > All JDBC and JNDI lookups were prefixed with "java:comp/env/" and things
> > worked. Clearly, IBM's WebSphere does this for you, since that's
> primarily
> > what I develop against...
>
> I had to read the whole thread to find this ^^^. You are correct, Tomcat
> gives you an initial context that is rooted at, well, the root of the
> JNDI tree. IMHO any product that locks you into java:comp/env is doing
> you a disservice.
>
> It wasn't clear to me whether you were using Tomcat's "global naming
> resources" or per-context resources. Your posted snippets have all
> expired so I couldn't look at them.
>
> But it looks like you have everything working, so ... great!
>
> You mentioned having a MySQL/MariaDB admin question. Please post that
> separately (different thread, different subject) and annotate it with a
> "[OT]" prefix to indicate that it's off-topic. We may have answers for
> you (I know a lot about MySQL/MariaDB) but this isn't the "correct"
> forum for such questions, hence the "off-topic" moniker.
>
> -chris
>
> > ________________________________________________
> >
> > Kevin Huntly
> > Email: kmhun...@gmail.com
> > Cell: 716/424-3311
> > ________________________________________________
> >
> > -----BEGIN GEEK CODE BLOCK-----
> > Version: 1.0
> > GCS/IT d+ s a C++ UL+++$ P+(++) L+++ E---
> > W+++ N+ o K(+) w--- O- M-- V-- PS+ PE Y(+)
> > PGP++(+++) t+ 5-- X-- R+ tv+ b++ DI++ D++
> > G++ e(+) h--- r+++ y+++*
> > ------END GEEK CODE BLOCK------
> >
> >
> > On Sat, Mar 18, 2023 at 6:31 PM John Dale (DB2DOM) <jcdw...@gmail.com>
> > wrote:
> >
> >> Here's what I use for development:
> >>
> >> apache-tomcat-10.0.6
> >>
> >> java --version
> >> openjdk 11.0.9.1 2020-11-04
> >> OpenJDK Runtime Environment (build 11.0.9.1+1-post-Raspbian-1deb10u2)
> >> OpenJDK Server VM (build 11.0.9.1+1-post-Raspbian-1deb10u2, mixed mode)
> >>
> >> I have tremendous success running this combination.
> >>
> >> For production ..
> >>
> >> Raspbian flows through to ubuntu/debian with practically no issues
> >> except Pi has a problem with ipchainining and NAT.
> >>
> >> Start firing away to jcdw...@gmail.com with questions regarding MySQL.
> >>
> >> I'll do what I can.
> >>
> >> John
> >>
> >>
> >> On 3/18/23, Kevin Huntly <kmhun...@gmail.com> wrote:
> >>> Hey Everyone,
> >>>
> >>> Is this possibly happening because I'm using JDK19 and not 8 or 9?
> >>> ________________________________________________
> >>>
> >>> Kevin Huntly
> >>> Email: kmhun...@gmail.com
> >>> Cell: 716/424-3311
> >>> ________________________________________________
> >>>
> >>> -----BEGIN GEEK CODE BLOCK-----
> >>> Version: 1.0
> >>> GCS/IT d+ s a C++ UL+++$ P+(++) L+++ E---
> >>> W+++ N+ o K(+) w--- O- M-- V-- PS+ PE Y(+)
> >>> PGP++(+++) t+ 5-- X-- R+ tv+ b++ DI++ D++
> >>> G++ e(+) h--- r+++ y+++*
> >>> ------END GEEK CODE BLOCK------
> >>>
> >>>
> >>> On Sat, Mar 18, 2023 at 5:10 PM Kevin Huntly <kmhun...@gmail.com>
> wrote:
> >>>
> >>>> Hey John - if you're out there can you email me direct? I have a MySQL
> >>>> admin question if you have the time and the inclination
> >>>> ________________________________________________
> >>>>
> >>>> Kevin Huntly
> >>>> Email: kmhun...@gmail.com
> >>>> Cell: 716/424-3311
> >>>> ________________________________________________
> >>>>
> >>>> -----BEGIN GEEK CODE BLOCK-----
> >>>> Version: 1.0
> >>>> GCS/IT d+ s a C++ UL+++$ P+(++) L+++ E---
> >>>> W+++ N+ o K(+) w--- O- M-- V-- PS+ PE Y(+)
> >>>> PGP++(+++) t+ 5-- X-- R+ tv+ b++ DI++ D++
> >>>> G++ e(+) h--- r+++ y+++*
> >>>> ------END GEEK CODE BLOCK------
> >>>>
> >>>>
> >>>> On Sat, Mar 18, 2023 at 1:40 PM Kevin Huntly <kmhun...@gmail.com>
> >> wrote:
> >>>>
> >>>>> any other ideas guys? I want to migrate a bunch of really awful apps
> >> off
> >>>>> our primary application server so they don't cause us headaches
> >> anymore.
> >>>>> if
> >>>>> I can't get one app working I have no hope of getting others to work
> >> lol
> >>>>>
> >>>>> On Sat, Mar 18, 2023, 09:16 John Dale (DB2DOM) <jcdw...@gmail.com>
> >>>>> wrote:
> >>>>>
> >>>>>> Thanks Mark - are statics reloaded now, too?
> >>>>>>
> >>>>>> I touch web.xml and it's reloaded successfully hundreds of times.
> >>>>>>
> >>>>>> But I don't use war files so I can use git to version and transfer
> my
> >>>>>> builds ... maybe that's the reason?
> >>>>>>
> >>>>>> John
> >>>>>>
> >>>>>>
> >>>>>> On 3/18/23, Mark Thomas <ma...@apache.org> wrote:
> >>>>>>> On 17/03/2023 23:18, John Dale (DB2DOM) wrote:
> >>>>>>>> ok - "mnet" should be "ment"
> >>>>>>>
> >>>>>>> From the logs excerpt I saw earlier in the thread, that needs
> >> fixing
> >>>>>>> (although it was only a test element). I don't think it will break
> >>>>>>> anything else but better to remove the noise from the logs.
> >>>>>>>
> >>>>>>>> I figured I'd spell that out and behave like a compiler. :)
> >>>>>>>>
> >>>>>>>> I would also move that configuration into server.xml (it's a major
> >>>>>>>> difference between your configuration and mine).
> >>>>>>>
> >>>>>>> That configuration style is NOT recommended. It means you have no
> >>>>>> choice
> >>>>>>> but to restart Tomcat if you change the Context configuration. If
> it
> >>>>>>> is
> >>>>>>> in a separate Context file, Tomcat will reload the web application
> >>>>>>> automatically if you change the Context file.
> >>>>>>>
> >>>>>>> Stick with:
> >>>>>>>
> >>>>>>
> >>
> /opt/Apache/Tomcat/apache-tomcat-9.0.73/conf/Catalina/localhost/esolutions.xml
> >>>>>>>
> >>>>>>> Do NOT specify a path attribute for the Context. It will be
> ignored.
> >>>>>>>
> >>>>>>> Where is the JDBC driver located? It needs to be in
> >>>>>> ${CATALINA_BASE}/lib
> >>>>>>> and not part of the WAR.
> >>>>>>>
> >>>>>>> Can we see the full logs from a clean start-up please?
> >>>>>>>
> >>>>>>> Mark
> >>>>>>>
> >>>>>>>
> >>>>>>>>
> >>>>>>>> Lastly, maybe to help debug a future issue, did you compile your
> >>>>>>>> project files against the tomcat libs included with your
> >>>>>>>> distribution,
> >>>>>>>> or did you drop them into this version of tomcat from another
> >>>>>>>> version?
> >>>>>>>> Probably won't matter since you should be coded to the
> >> interfaces,
> >>>>>>>> but one never knows.
> >>>>>>>>
> >>>>>>>> John
> >>>>>>>>
> >>>>>>>> On 3/17/23, Kevin Huntly <kmhun...@gmail.com> wrote:
> >>>>>>>>> no I think it has something to do with it but I'm not sure. I'll
> >>>>>>>>> try
> >>>>>>>>> taking
> >>>>>>>>> out the environment values and see what happens
> >>>>>>>>>
> >>>>>>>>> On Fri, Mar 17, 2023, 19:11 John Dale (DB2DOM) <
> jcdw...@gmail.com
> >>>
> >>>>>>>>> wrote:
> >>>>>>>>>
> >>>>>>>>>> In the log you sent below, I see a typo:
> >>>>>>>>>> Context/Environmnet
> >>>>>>>>>>
> >>>>>>>>>> Does that have something to do with it, or is this a typo in
> >>>>>>>>>> tomcat
> >>>>>>>>>> logging?
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>> On 3/17/23, Kevin Huntly <kmhun...@gmail.com> wrote:
> >>>>>>>>>>> yes, under Catalina/localhost
> >>>>>>>>>>>
> >>>>>>>>>>> On Fri, Mar 17, 2023, 19:07 John Dale (DB2DOM)
> >>>>>>>>>>> <jcdw...@gmail.com>
> >>>>>>>>>> wrote:
> >>>>>>>>>>>
> >>>>>>>>>>>> Are you modifying a context.xml file in the conf folder?
> >>>>>>>>>>>>
> >>>>>>>>>>>> On 3/17/23, Kevin Huntly <kmhun...@gmail.com> wrote:
> >>>>>>>>>>>>> Also of note:
> >>>>>>>>>>>>>
> >>>>>>>>>>>>> 17-Mar-2023 17:25:42.113 INFO [main]
> >>>>>>>>>>>>> org.apache.catalina.startup.HostConfig.deployDescriptor
> >>>>>>>>>>>>> Deploying
> >>>>>>>>>>>>> deployment descriptor
> >>>>>>>>>>>>>
> >>>>>>>>>>>>
> >>>>>>>>>>
> >>>>>>
> >>
> [/opt/Apache/Tomcat/apache-tomcat-9.0.73/conf/Catalina/localhost/esolutions.xml]
> >>>>>>>>>>>>> 17-Mar-2023 17:25:42.174 WARNING [main]
> >>>>>>>>>>>>> org.apache.tomcat.util.digester.Digester.endElement No rules
> >>>>>> found
> >>>>>>>>>>>> matching
> >>>>>>>>>>>>> [Context/Environmnet]
> >>>>>>>>>>>>> ________________________________________________
> >>>>>>>>>>>>>
> >>>>>>>>>>>>> Kevin Huntly
> >>>>>>>>>>>>> Email: kmhun...@gmail.com
> >>>>>>>>>>>>> Cell: 716/424-3311
> >>>>>>>>>>>>> ________________________________________________
> >>>>>>>>>>>>>
> >>>>>>>>>>>>> -----BEGIN GEEK CODE BLOCK-----
> >>>>>>>>>>>>> Version: 1.0
> >>>>>>>>>>>>> GCS/IT d+ s a C++ UL+++$ P+(++) L+++ E---
> >>>>>>>>>>>>> W+++ N+ o K(+) w--- O- M-- V-- PS+ PE Y(+)
> >>>>>>>>>>>>> PGP++(+++) t+ 5-- X-- R+ tv+ b++ DI++ D++
> >>>>>>>>>>>>> G++ e(+) h--- r+++ y+++*
> >>>>>>>>>>>>> ------END GEEK CODE BLOCK------
> >>>>>>>>>>>>>
> >>>>>>>>>>>>>
> >>>>>>>>>>>>> On Fri, Mar 17, 2023 at 5:24 PM Kevin Huntly
> >>>>>>>>>>>>> <kmhun...@gmail.com
> >>>>>>>
> >>>>>>>>>>>>> wrote:
> >>>>>>>>>>>>>
> >>>>>>>>>>>>>> Here's my santized server.xml and context.xml
> >>>>>>>>>>>>>>
> >>>>>>>>>>>>>> server.xml -> https://pastebin.com/Bj6Wh0qU
> >>>>>>>>>>>>>> context.xml -> https://pastebin.com/Z3dBf3eK
> >>>>>>>>>>>>>>
> >>>>>>>>>>>>>
> >>>>>>>>>>>>
> >>>>>>>>>>>>
> >>>>>>
> ---------------------------------------------------------------------
> >>>>>>>>>>>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> >>>>>>>>>>>> For additional commands, e-mail: users-h...@tomcat.apache.org
> >>>>>>>>>>>>
> >>>>>>>>>>>>
> >>>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>
> ---------------------------------------------------------------------
> >>>>>>>>>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> >>>>>>>>>> For additional commands, e-mail: users-h...@tomcat.apache.org
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >> ---------------------------------------------------------------------
> >>>>>>>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> >>>>>>>> For additional commands, e-mail: users-h...@tomcat.apache.org
> >>>>>>>>
> >>>>>>>
> >>>>>>>
> >> ---------------------------------------------------------------------
> >>>>>>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> >>>>>>> For additional commands, e-mail: users-h...@tomcat.apache.org
> >>>>>>>
> >>>>>>>
> >>>>>>
> >>>>>>
> ---------------------------------------------------------------------
> >>>>>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> >>>>>> For additional commands, e-mail: users-h...@tomcat.apache.org
> >>>>>>
> >>>>>>
> >>>
> >>
> >> ---------------------------------------------------------------------
> >> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> >> For additional commands, e-mail: users-h...@tomcat.apache.org
> >>
> >>
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>
