Kevin,

On 3/20/23 20:12, Kevin Huntly wrote:
I actually fixed (well, figured out) the MySQL problem - it looks like it's
hard coded to a 2048b DH key, but I configured my servers for CIS level 2
which wants a minimum 3072. I can update the openssl config to utilize a
lower security level and it works just fine.

When you say "hard coded" what exactly do you mean? You can change the key+cert at any time.

I don't want to do that, but I don't want to have a nonsecure instance
either. so im probably going to go with an ssh tunnel since this is just
dev and it won't be going to production (our prod is db2)

Sounds like:
1. This is dev, so you should fix your key+cert instead of hacking stunnel
2. You are using different databases in different environments. WTH?

-chris

On Mon, Mar 20, 2023, 20:09 Christopher Schultz <
ch...@christopherschultz.net> wrote:

Kevin,

On 3/18/23 19:04, Kevin Huntly wrote:
I can't use tomcat 10 because of the switch to jakarta for the servlet
container - I'd have to rewrite a lot of code. That being said, I got it
fixed:

All JDBC and JNDI lookups were prefixed with "java:comp/env/" and things
worked. Clearly, IBM's WebSphere does this for you, since that's
primarily
what I develop against...

I had to read the whole thread to find this ^^^. You are correct, Tomcat
gives you an initial context that is rooted at, well, the root of the
JNDI tree. IMHO any product that locks you into java:comp/env is doing
you a disservice.

It wasn't clear to me whether you were using Tomcat's "global naming
resources" or per-context resources. Your posted snippets have all
expired so I couldn't look at them.

But it looks like you have everything working, so ... great!

You mentioned having a MySQL/MariaDB admin question. Please post that
separately (different thread, different subject) and annotate it with a
"[OT]" prefix to indicate that it's off-topic. We may have answers for
you (I know a lot about MySQL/MariaDB) but this isn't the "correct"
forum for such questions, hence the "off-topic" moniker.

-chris

________________________________________________

Kevin Huntly
Email: kmhun...@gmail.com
Cell: 716/424-3311
________________________________________________

-----BEGIN GEEK CODE BLOCK-----
Version: 1.0
GCS/IT d+ s a C++ UL+++$ P+(++) L+++ E---
W+++ N+ o K(+) w--- O- M-- V-- PS+ PE Y(+)
PGP++(+++) t+ 5-- X-- R+ tv+ b++  DI++ D++
G++ e(+) h--- r+++ y+++*
------END GEEK CODE BLOCK------


On Sat, Mar 18, 2023 at 6:31 PM John Dale (DB2DOM) <jcdw...@gmail.com>
wrote:

Here's what I use for development:

apache-tomcat-10.0.6

java --version
openjdk 11.0.9.1 2020-11-04
OpenJDK Runtime Environment (build 11.0.9.1+1-post-Raspbian-1deb10u2)
OpenJDK Server VM (build 11.0.9.1+1-post-Raspbian-1deb10u2, mixed mode)

I have tremendous success running this combination.

For production ..

Raspbian flows through to ubuntu/debian with practically no issues
except Pi has a problem with ipchainining and NAT.

Start firing away to jcdw...@gmail.com with questions regarding MySQL.

I'll do what I can.

John


On 3/18/23, Kevin Huntly <kmhun...@gmail.com> wrote:
Hey Everyone,

Is this possibly happening because I'm using JDK19 and not 8 or 9?
________________________________________________

Kevin Huntly
Email: kmhun...@gmail.com
Cell: 716/424-3311
________________________________________________

-----BEGIN GEEK CODE BLOCK-----
Version: 1.0
GCS/IT d+ s a C++ UL+++$ P+(++) L+++ E---
W+++ N+ o K(+) w--- O- M-- V-- PS+ PE Y(+)
PGP++(+++) t+ 5-- X-- R+ tv+ b++  DI++ D++
G++ e(+) h--- r+++ y+++*
------END GEEK CODE BLOCK------


On Sat, Mar 18, 2023 at 5:10 PM Kevin Huntly <kmhun...@gmail.com>
wrote:

Hey John - if you're out there can you email me direct? I have a MySQL
admin question if you have the time and the inclination
________________________________________________

Kevin Huntly
Email: kmhun...@gmail.com
Cell: 716/424-3311
________________________________________________

-----BEGIN GEEK CODE BLOCK-----
Version: 1.0
GCS/IT d+ s a C++ UL+++$ P+(++) L+++ E---
W+++ N+ o K(+) w--- O- M-- V-- PS+ PE Y(+)
PGP++(+++) t+ 5-- X-- R+ tv+ b++  DI++ D++
G++ e(+) h--- r+++ y+++*
------END GEEK CODE BLOCK------


On Sat, Mar 18, 2023 at 1:40 PM Kevin Huntly <kmhun...@gmail.com>
wrote:

any other ideas guys? I want to migrate a bunch of really awful apps
off
our primary application server so they don't cause us headaches
anymore.
if
I can't get one app working I have no hope of getting others to work
lol

On Sat, Mar 18, 2023, 09:16 John Dale (DB2DOM) <jcdw...@gmail.com>
wrote:

Thanks Mark - are statics reloaded now, too?

I touch web.xml and it's reloaded successfully hundreds of times.

But I don't use war files so I can use git to version and transfer
my
builds ... maybe that's the reason?

John


On 3/18/23, Mark Thomas <ma...@apache.org> wrote:
On 17/03/2023 23:18, John Dale (DB2DOM) wrote:
ok - "mnet" should be "ment"

   From the logs excerpt I saw earlier in the thread, that needs
fixing
(although it was only a test element). I don't think it will break
anything else but better to remove the noise from the logs.

I figured I'd spell that out and behave like a compiler.  :)

I would also move that configuration into server.xml (it's a major
difference between your configuration and mine).

That configuration style is NOT recommended. It means you have no
choice
but to restart Tomcat if you change the Context configuration. If
it
is
in a separate Context file, Tomcat will reload the web application
automatically if you change the Context file.

Stick with:



/opt/Apache/Tomcat/apache-tomcat-9.0.73/conf/Catalina/localhost/esolutions.xml

Do NOT specify a path attribute for the Context. It will be
ignored.

Where is the JDBC driver located? It needs to be in
${CATALINA_BASE}/lib
and not part of the WAR.

Can we see the full logs from a clean start-up please?

Mark



Lastly, maybe to help debug a future issue, did you compile your
project files against the tomcat libs included with your
distribution,
or did you drop them into this version of tomcat from another
version?
    Probably won't matter since you should be coded to the
interfaces,
but one never knows.

John

On 3/17/23, Kevin Huntly <kmhun...@gmail.com> wrote:
no I think it has something to do with it but I'm not sure. I'll
try
taking
out the environment values and see what happens

On Fri, Mar 17, 2023, 19:11 John Dale (DB2DOM) <
jcdw...@gmail.com

wrote:

In the log you sent below, I see a typo:
Context/Environmnet

Does that have something to do with it, or is this a typo in
tomcat
logging?




On 3/17/23, Kevin Huntly <kmhun...@gmail.com> wrote:
yes, under Catalina/localhost

On Fri, Mar 17, 2023, 19:07 John Dale (DB2DOM)
<jcdw...@gmail.com>
wrote:

Are you modifying a context.xml file in the conf folder?

On 3/17/23, Kevin Huntly <kmhun...@gmail.com> wrote:
Also of note:

17-Mar-2023 17:25:42.113 INFO [main]
org.apache.catalina.startup.HostConfig.deployDescriptor
Deploying
deployment descriptor





[/opt/Apache/Tomcat/apache-tomcat-9.0.73/conf/Catalina/localhost/esolutions.xml]
17-Mar-2023 17:25:42.174 WARNING [main]
org.apache.tomcat.util.digester.Digester.endElement No rules
found
matching
[Context/Environmnet]
________________________________________________

Kevin Huntly
Email: kmhun...@gmail.com
Cell: 716/424-3311
________________________________________________

-----BEGIN GEEK CODE BLOCK-----
Version: 1.0
GCS/IT d+ s a C++ UL+++$ P+(++) L+++ E---
W+++ N+ o K(+) w--- O- M-- V-- PS+ PE Y(+)
PGP++(+++) t+ 5-- X-- R+ tv+ b++  DI++ D++
G++ e(+) h--- r+++ y+++*
------END GEEK CODE BLOCK------


On Fri, Mar 17, 2023 at 5:24 PM Kevin Huntly
<kmhun...@gmail.com

wrote:

Here's my santized server.xml and context.xml

server.xml -> https://pastebin.com/Bj6Wh0qU
context.xml -> https://pastebin.com/Z3dBf3eK





---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org






---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org





---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org




---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org




---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org




---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org




---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to