Tomcat connector for iis

[Davide Montesin]

We have successufully installed the connector between tomcat and
IIS. 

In the configuration process there is a step that let me surprise.

I should create a virtual directory jakarta that points to a 
dir with isapi_redirect.dll. Why? Why chould not the fisical path of
the dll be in the registry like workers, ecc. ? 

Remembert that this virtual directory is reachable even from
outside !?! Can't this generate some security problems ?


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: FW: Delays in mod_jk

[jean-frederic clere]

Larry Reisler wrote:
> Rainer --
> 
> I recently changed replaced the version of JBOSS Web we were using to 
> JBOSSWEB_2_0_0_GA_CP04.  It included several patches to the AJP code.  That 
> appears to have solved the problem.  The FIN packets from the back end come 
> back immediately now.  I'm guessing that the fix to JBPAPP-366 
> (http://jira.jboss.org/jira/browse/JBPAPP-366) fixed this too.
> 
> I still see the mod_jk architecture as problematic


JBPAPP-366 is http://svn.apache.org/viewvc?rev=589062&view=rev that was
a bug in the JAVA part not in mod_jk.

Cheers

Jean-Frederic

> -- it would be better if cleaning up the sockets would occur on a different 
> thread and without the critical section locked.
> 
> Larry
> 
> -Original Message-
> From: Larry Reisler [mailto:[EMAIL PROTECTED] 
> Sent: Monday, November 26, 2007 10:08 AM
> To: Rainer Jung; Tomcat Developers List
> Subject: RE: Delays in mod_jk
> 
> Rainer --
> 
> I am using out of the box JBOSS 4.21 -- no special connector, and no firewall 
> between the httpd tier and the other tier.
> 
> Indeed, I agree that the FIN packet from the back end is missing.  It seems 
> to come much later in the dump (exactly 4 minutes later).  I can't help but 
> think this is an issue on the JBOSS side, but I'm not sure where to go to try 
> to debug that.
> 
> I will send you the full capture file separately by private Mail.
> 
> Larry
> 
> 
> -Original Message-
> From: Rainer Jung [mailto:[EMAIL PROTECTED] 
> Sent: Sunday, November 25, 2007 4:35 PM
> To: Tomcat Developers List
> Subject: Re: Delays in mod_jk
> 
> Hi Larry,
> 
> I'm again investigating your problem report concerning 2 second pauses 
> during socket shutdown in JK maintenance. Sorry for the long pause, but 
> I want to see, if there is something we need to fix before 1.2.26 
> related to this case.
> 
> I couldn't reproduce the behaviour on Linux. Do you use a special 
> connector for AJP in JBoss, like Tomcats APR connector, or is it just 
> the plain Coyote connector? Is there a firewall in between httpd and 
> JBoss? If so, would it be possible to sniff again on both sides?
> 
> Larry Reisler wrote:
>> I got a trace using some of the settings you have below.  I'm not
>> quite sure how to get the whole thing to you, as it is fairly large,
>> and I don't wish to post it to the mailing list.
> 
> If you like, you can send it by private Mail.
> 
>> In any event the relevant lines from one example of an interaction I
>> am attaching below.  10.45.3.22 is the apache 2.2 server and
>> 10.45.3.21 and 10.45.3.24 are the tomcat servers.  The trace was
>> taken from the apache server.  There are numerous other examples of
>> this type of interaction.
>>
>> 02:49:04.329952 IP 10.45.3.22.34977 > 10.45.3.21.8009: F
>> 2991069804:2991069804(0) ack 1909717451 win 8244 > 865633671 2700468480> 02:49:04.370343 IP 10.45.3.21.8009 >
>> 10.45.3.22.34977: . ack 1 win 1448 > 865633671> 02:49:06.329558 IP 10.45.3.22.34972 > 10.45.3.24.8009: F
>> 2991428814:2991428814(0) ack 330342931 win 4624 > 865635671 4202573488> 02:49:06.369533 IP 10.45.3.24.8009 >
>> 10.45.3.22.34972: . ack 1 win 2269 > 865635671> 02:49:08.329843 IP 10.45.3.22.35008 > 10.45.3.24.8009: S
>> 3372523679:3372523679(0) win 5840 > 865637671 0,nop,wscale 2> 02:49:08.329961 IP 10.45.3.24.8009 >
>> 10.45.3.22.35008: S 707449532:707449532(0) ack 3372523680 win 5792
>>  
>> 02:49:08.329972 IP 10.45.3.22.35008 > 10.45.3.24.8009: . ack 1 win
>> 1460  02:49:08.330001 IP
>> 10.45.3.22.35008 > 10.45.3.24.8009: P 1:821(820) ack 1 win 1460
>>  02:49:08.330023 IP
>> 10.45.3.22.35008 > 10.45.3.24.8009: P 821:921(100) ack 1 win 1460
>> 
>>
>> My analysis of this is as follows: 1) A request comes in to the
>> apache server, which has two timed out socket connections to the
>> tomcat servers on ports 34977 and 34972.  At 02:49:04.329952 it sends
>> a FIN packet to the tomcat server and receives a response at
>> 02:49:04.370343.  It then waits two seconds from the time it sent the
>> FIN packet. 2) At 02:49:06.329558 it sends a FIN packet to the other
>> tomcat server and receives a response at 02:49:06.369533.  It then
>> waits two seconds from the time it sent the FIN packet, and then
>> creates a new socket (35008) on which it successfully sends the
>> transaction.
> 
> The tcpdump excerpt seems to be incomplete. After the FIN and the 
> accompanying ACK, the final FIN/ACK from the backend is missing. Does it 
> occur later in the dump? If not, there should be a RST or the connection 
> should still be in CLOSE_WAIT on the JBoss machine.
> 
> Regards,
> 
> Rainer
> 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Bootstrap redirecting stdout/err via system.set

[jean-frederic clere]

William L. Thomson Jr. wrote:
> Recently on Gentoo I was looking to improve how we start Tomcat.
> Specifically how we capture stdout/stderr output from Tomcat on start
> and redirect it to catalina.out.

Have to tried to use jsvc from http://commons.apache.org/daemon/ for that?

Cheers

Jean-Frederic

 Presently due to our use of
> start-stop-daemon and some issues it comes with. We are using the normal
> redirection to capture the output. >> catalina.out 2>&1
> 
> In getting feedback to alternatives to our present approach, like that
> suggested in comment #5 on the following bug[1]. Another inquired as to
> why Tomcat wasn't capturing and redirecting it's own stdout/stderr via
> system properties?
> 
> Like how .home and .base are set now.
> 
> public void setCatalinaHome(String s) {
>   System.setProperty( "catalina.home", s );
> }
> public void setCatalinaBase(String s) {
>   System.setProperty( "catalina.base", s );
> }
> 
> Which would alleviate the need to capture and redirect that stuff
> externally of Tomcat. Is there a reason this is not currently done? Has
> this approach been considered before? Something like 
> 
> System.setOut(aPrintStream);
> System.setErr(aPrintStream);
> 
> Where the location would be configurable via a var or etc with a default
> specified.
> 
> Basically others are suggesting I write a wrapper class or etc to
> Bootstrap to set those properties there. I guess we could do that on
> Gentoo. But would like to get upstreams input there. Much less I would
> likely patch Bootstrap before wrapping it.
> 
> 
> http://bugs.gentoo.org/show_bug.cgi?id=162379
> 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: FW: Delays in mod_jk

[Mladen Turk]

jean-frederic clere wrote:


JBPAPP-366 is http://svn.apache.org/viewvc?rev=589062&view=rev that was
a bug in the JAVA part not in mod_jk.



Right, however the idea to call the Socket.shutdown in a separate
thread is very good since it's blocking call.
The only problem is how to close bunch of them with single Thread.
Something like lingerd for Apache.

Regards,
Mladen

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: FW: Delays in mod_jk

[Larry Reisler]

Agreed, the root cause is a bug in the Java part of Tomcat.

However, but it points to a weakness of mod_jk, that if mod_jk hits the 
connection timeout on a socket and the server does not shut down the socket in 
a timely manner, all AJP requests in the httpd process grind to a halt for at 
least two seconds. 

Larry

-Original Message-
From: jean-frederic clere [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, November 28, 2007 10:21 AM
To: Tomcat Developers List
Cc: Rainer Jung; Larry Reisler
Subject: Re: FW: Delays in mod_jk

Larry Reisler wrote:
> Rainer --
> 
> I recently changed replaced the version of JBOSS Web we were using to 
> JBOSSWEB_2_0_0_GA_CP04.  It included several patches to the AJP code.  That 
> appears to have solved the problem.  The FIN packets from the back end come 
> back immediately now.  I'm guessing that the fix to JBPAPP-366 
> (http://jira.jboss.org/jira/browse/JBPAPP-366) fixed this too.
> 
> I still see the mod_jk architecture as problematic


JBPAPP-366 is http://svn.apache.org/viewvc?rev=589062&view=rev that was
a bug in the JAVA part not in mod_jk.

Cheers

Jean-Frederic

> -- it would be better if cleaning up the sockets would occur on a different 
> thread and without the critical section locked.
> 
> Larry
> 
> -Original Message-
> From: Larry Reisler [mailto:[EMAIL PROTECTED] 
> Sent: Monday, November 26, 2007 10:08 AM
> To: Rainer Jung; Tomcat Developers List
> Subject: RE: Delays in mod_jk
> 
> Rainer --
> 
> I am using out of the box JBOSS 4.21 -- no special connector, and no firewall 
> between the httpd tier and the other tier.
> 
> Indeed, I agree that the FIN packet from the back end is missing.  It seems 
> to come much later in the dump (exactly 4 minutes later).  I can't help but 
> think this is an issue on the JBOSS side, but I'm not sure where to go to try 
> to debug that.
> 
> I will send you the full capture file separately by private Mail.
> 
> Larry
> 
> 
> -Original Message-
> From: Rainer Jung [mailto:[EMAIL PROTECTED] 
> Sent: Sunday, November 25, 2007 4:35 PM
> To: Tomcat Developers List
> Subject: Re: Delays in mod_jk
> 
> Hi Larry,
> 
> I'm again investigating your problem report concerning 2 second pauses 
> during socket shutdown in JK maintenance. Sorry for the long pause, but 
> I want to see, if there is something we need to fix before 1.2.26 
> related to this case.
> 
> I couldn't reproduce the behaviour on Linux. Do you use a special 
> connector for AJP in JBoss, like Tomcats APR connector, or is it just 
> the plain Coyote connector? Is there a firewall in between httpd and 
> JBoss? If so, would it be possible to sniff again on both sides?
> 
> Larry Reisler wrote:
>> I got a trace using some of the settings you have below.  I'm not
>> quite sure how to get the whole thing to you, as it is fairly large,
>> and I don't wish to post it to the mailing list.
> 
> If you like, you can send it by private Mail.
> 
>> In any event the relevant lines from one example of an interaction I
>> am attaching below.  10.45.3.22 is the apache 2.2 server and
>> 10.45.3.21 and 10.45.3.24 are the tomcat servers.  The trace was
>> taken from the apache server.  There are numerous other examples of
>> this type of interaction.
>>
>> 02:49:04.329952 IP 10.45.3.22.34977 > 10.45.3.21.8009: F
>> 2991069804:2991069804(0) ack 1909717451 win 8244 > 865633671 2700468480> 02:49:04.370343 IP 10.45.3.21.8009 >
>> 10.45.3.22.34977: . ack 1 win 1448 > 865633671> 02:49:06.329558 IP 10.45.3.22.34972 > 10.45.3.24.8009: F
>> 2991428814:2991428814(0) ack 330342931 win 4624 > 865635671 4202573488> 02:49:06.369533 IP 10.45.3.24.8009 >
>> 10.45.3.22.34972: . ack 1 win 2269 > 865635671> 02:49:08.329843 IP 10.45.3.22.35008 > 10.45.3.24.8009: S
>> 3372523679:3372523679(0) win 5840 > 865637671 0,nop,wscale 2> 02:49:08.329961 IP 10.45.3.24.8009 >
>> 10.45.3.22.35008: S 707449532:707449532(0) ack 3372523680 win 5792
>>  
>> 02:49:08.329972 IP 10.45.3.22.35008 > 10.45.3.24.8009: . ack 1 win
>> 1460  02:49:08.330001 IP
>> 10.45.3.22.35008 > 10.45.3.24.8009: P 1:821(820) ack 1 win 1460
>>  02:49:08.330023 IP
>> 10.45.3.22.35008 > 10.45.3.24.8009: P 821:921(100) ack 1 win 1460
>> 
>>
>> My analysis of this is as follows: 1) A request comes in to the
>> apache server, which has two timed out socket connections to the
>> tomcat servers on ports 34977 and 34972.  At 02:49:04.329952 it sends
>> a FIN packet to the tomcat server and receives a response at
>> 02:49:04.370343.  It then waits two seconds from the time it sent the
>> FIN packet. 2) At 02:49:06.329558 it sends a FIN packet to the other
>> tomcat server and receives a response at 02:49:06.369533.  It then
>> waits two seconds from the time it sent the FIN packet, and then
>> creates a new socket (35008) on which it successfully sends the
>> transaction.
> 
> The tcpdump excerpt seems to be incomplete. After the FIN and the 
> accompanying ACK, the final FIN/ACK from the backend is missing. Does it 
> occur lat

svn commit: r598930 - /tomcat/tc6.0.x/trunk/STATUS.txt

[jfclere]

Author: jfclere
Date: Wed Nov 28 01:43:38 2007
New Revision: 598930

URL: http://svn.apache.org/viewvc?rev=598930&view=rev
Log:
Cast my vote.

Modified:
tomcat/tc6.0.x/trunk/STATUS.txt

Modified: tomcat/tc6.0.x/trunk/STATUS.txt
URL: 
http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATUS.txt?rev=598930&r1=598929&r2=598930&view=diff
==
--- tomcat/tc6.0.x/trunk/STATUS.txt (original)
+++ tomcat/tc6.0.x/trunk/STATUS.txt Wed Nov 28 01:43:38 2007
@@ -33,7 +33,7 @@
 
 * Remove conditional headers on Form Auth replay, since the UA (esp. FireFox) 
isn't expecting it.
   http://issues.apache.org/bugzilla/show_bug.cgi?id=43687
-  +1: billbarker, remm
+  +1: billbarker, remm, jfclere
   -1:
 
 * Fix another license issue
@@ -49,11 +49,11 @@
 * Fix http://issues.apache.org/bugzilla/show_bug.cgi?id=43706
   Copy/move should return 201
   http://svn.apache.org/viewvc?rev=598783&view=rev
-  +1: markt
+  +1: markt, jfclere
   -1:
 
 * Fix http://issues.apache.org/bugzilla/show_bug.cgi?id=43957
   Service.bat doesn't configure logging correctly
   http://svn.apache.org/viewvc?rev=598800&view=rev
-  +1: markt
+  +1: markt, jfclere
   -1: 



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

svn commit: r598949 - /tomcat/tc6.0.x/trunk/STATUS.txt

[pero]

Author: pero
Date: Wed Nov 28 02:42:02 2007
New Revision: 598949

URL: http://svn.apache.org/viewvc?rev=598949&view=rev
Log:
Cast my vote

Modified:
tomcat/tc6.0.x/trunk/STATUS.txt

Modified: tomcat/tc6.0.x/trunk/STATUS.txt
URL: 
http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATUS.txt?rev=598949&r1=598948&r2=598949&view=diff
==
--- tomcat/tc6.0.x/trunk/STATUS.txt (original)
+++ tomcat/tc6.0.x/trunk/STATUS.txt Wed Nov 28 02:42:02 2007
@@ -33,7 +33,7 @@
 
 * Remove conditional headers on Form Auth replay, since the UA (esp. FireFox) 
isn't expecting it.
   http://issues.apache.org/bugzilla/show_bug.cgi?id=43687
-  +1: billbarker, remm, jfclere
+  +1: billbarker, remm, jfclere, pero
   -1:
 
 * Fix another license issue
@@ -49,11 +49,11 @@
 * Fix http://issues.apache.org/bugzilla/show_bug.cgi?id=43706
   Copy/move should return 201
   http://svn.apache.org/viewvc?rev=598783&view=rev
-  +1: markt, jfclere
+  +1: markt, jfclere, pero
   -1:
 
 * Fix http://issues.apache.org/bugzilla/show_bug.cgi?id=43957
   Service.bat doesn't configure logging correctly
   http://svn.apache.org/viewvc?rev=598800&view=rev
-  +1: markt, jfclere
+  +1: markt, jfclere, pero
   -1: 



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: FW: Delays in mod_jk

[Rainer Jung]

Larry Reisler wrote:

Agreed, the root cause is a bug in the Java part of Tomcat.

However, but it points to a weakness of mod_jk, that if mod_jk hits
the connection timeout on a socket and the server does not shut down
the socket in a timely manner, all AJP requests in the httpd process
grind to a halt for at least two seconds.


I hope I said that before: this is one of the things we plan for JK3, 
i.e. having separate threads for maointenance tasks and maybe 
communication tasks related to state information, which should not be 
piggy-packed on usual request handling.


JK is multi-platform and we want to avoid multi-platform thread 
programming without a wrapper lib. So with JK3 we want to introduce a 
dependency on the APR libs, which will help us implementing those features.


Regards,

Rainer


Larry

-Original Message- From: jean-frederic clere
[mailto:[EMAIL PROTECTED] Sent: Wednesday, November 28, 2007 10:21
AM To: Tomcat Developers List Cc: Rainer Jung; Larry Reisler Subject:
Re: FW: Delays in mod_jk

Larry Reisler wrote:

Rainer --

I recently changed replaced the version of JBOSS Web we were using
to JBOSSWEB_2_0_0_GA_CP04.  It included several patches to the AJP
code.  That appears to have solved the problem.  The FIN packets
from the back end come back immediately now.  I'm guessing that the
fix to JBPAPP-366 (http://jira.jboss.org/jira/browse/JBPAPP-366)
fixed this too.

I still see the mod_jk architecture as problematic



JBPAPP-366 is http://svn.apache.org/viewvc?rev=589062&view=rev that
was a bug in the JAVA part not in mod_jk.

Cheers

Jean-Frederic


-- it would be better if cleaning up the sockets would occur on a
different thread and without the critical section locked.

Larry


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: FW: Delays in mod_jk

[Larry Reisler]

Yes, you said it before Rainer...thanks for your help as always.

Larry

-Original Message-
From: Rainer Jung [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, November 28, 2007 12:51 PM
To: Tomcat Developers List
Subject: Re: FW: Delays in mod_jk

Larry Reisler wrote:
> Agreed, the root cause is a bug in the Java part of Tomcat.
> 
> However, but it points to a weakness of mod_jk, that if mod_jk hits
> the connection timeout on a socket and the server does not shut down
> the socket in a timely manner, all AJP requests in the httpd process
> grind to a halt for at least two seconds.

I hope I said that before: this is one of the things we plan for JK3, 
i.e. having separate threads for maointenance tasks and maybe 
communication tasks related to state information, which should not be 
piggy-packed on usual request handling.

JK is multi-platform and we want to avoid multi-platform thread 
programming without a wrapper lib. So with JK3 we want to introduce a 
dependency on the APR libs, which will help us implementing those features.

Regards,

Rainer

> Larry
> 
> -Original Message- From: jean-frederic clere
> [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 28, 2007 10:21
> AM To: Tomcat Developers List Cc: Rainer Jung; Larry Reisler Subject:
> Re: FW: Delays in mod_jk
> 
> Larry Reisler wrote:
>> Rainer --
>> 
>> I recently changed replaced the version of JBOSS Web we were using
>> to JBOSSWEB_2_0_0_GA_CP04.  It included several patches to the AJP
>> code.  That appears to have solved the problem.  The FIN packets
>> from the back end come back immediately now.  I'm guessing that the
>> fix to JBPAPP-366 (http://jira.jboss.org/jira/browse/JBPAPP-366)
>> fixed this too.
>> 
>> I still see the mod_jk architecture as problematic
> 
> 
> JBPAPP-366 is http://svn.apache.org/viewvc?rev=589062&view=rev that
> was a bug in the JAVA part not in mod_jk.
> 
> Cheers
> 
> Jean-Frederic
> 
>> -- it would be better if cleaning up the sockets would occur on a
>> different thread and without the critical section locked.
>> 
>> Larry

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

DO NOT REPLY [Bug 43929] - JSP POST SSI, JSP sub request does not complete

[bugzilla]

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=43929


[EMAIL PROTECTED] changed:

   What|Removed |Added

 Status|RESOLVED|REOPENED
 Resolution|WORKSFORME  |




--- Additional Comments From [EMAIL PROTECTED]  2007-11-28 04:49 ---
hi thomas,

could you please check my attachments, i can not find the problem
(there must be a problem somewhere because it also fails on our production 
system [linux red hat, tomcat 5.0.28, apache 2.0.58] after upgrading from 
1.2.15 to > 1.2.21)

as you can see from my attachments my test case fails with 1.2.21 (and 1.2.25) 
but working with previous mod_jk versions
i have also switched to trace-log-level for more info

thanks



-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug, or are watching the assignee.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

DO NOT REPLY [Bug 43929] - JSP POST SSI, JSP sub request does not complete

[bugzilla]

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=43929





--- Additional Comments From [EMAIL PROTECTED]  2007-11-28 04:51 ---
Created an attachment (id=21200)
 --> (http://issues.apache.org/bugzilla/attachment.cgi?id=21200&action=view)
mod jk logs


-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug, or are watching the assignee.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Bootstrap redirecting stdout/err via system.set

[William L. Thomson Jr.]

On Wed, 2007-11-28 at 09:29 +0100, jean-frederic clere wrote:
> William L. Thomson Jr. wrote:
> > Recently on Gentoo I was looking to improve how we start Tomcat.
> > Specifically how we capture stdout/stderr output from Tomcat on start
> > and redirect it to catalina.out.
> 
> Have to tried to use jsvc from http://commons.apache.org/daemon/ for that?

We presently use start-stop-daemon. Which has some --stdout --stderr
options coming. It nastily send that stuff to /dev/null, if the
--background flag is passed along.

We had a long time bug/feature request for jsvc. I considered it, but
elected to not go that route. If people want Tomcat on port 80 they can
do port forwarding or etc. Which allows Tomcat to remaining running as a
non-root user or etc. Nor the need for jsvc to accomplish that. So it's
kinda moot.

But I believe the argument is that applications should do their own
stderr/out redirection and not to it external of the app. As in not via
bash/shell redirection and sending that to a log file. The app should be
doing that internally.

So if I am using start-stop-daemon, or jsvc. It doesn't really change
that aspect.

-- 
William L. Thomson Jr.
Gentoo/Java


signature.asc
Description: This is a digitally signed message part

Re: Bootstrap redirecting stdout/err via system.set

[William L. Thomson Jr.]

On Wed, 2007-11-28 at 09:47 -0500, William L. Thomson Jr. wrote:
> On Wed, 2007-11-28 at 09:29 +0100, jean-frederic clere wrote:
> > William L. Thomson Jr. wrote:
> > > Recently on Gentoo I was looking to improve how we start Tomcat.
> > > Specifically how we capture stdout/stderr output from Tomcat on start
> > > and redirect it to catalina.out.
> > 
> > Have to tried to use jsvc from http://commons.apache.org/daemon/ for that?
> 
> We presently use start-stop-daemon. Which has some --stdout --stderr
> options coming. It nastily send that stuff to /dev/null, if the
> --background flag is passed along.
> 
> We had a long time bug/feature request for jsvc. I considered it, but
> elected to not go that route.

Forgot link to bug :)

http://bugs.gentoo.org/show_bug.cgi?id=75224


-- 
William L. Thomson Jr.
Gentoo/Java


signature.asc
Description: This is a digitally signed message part

[Tomcat Wiki] Update of "FAQ/Bugs" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/Bugs

The comment on the change is:
FAQ Migration -  Issue 20 - GHOP Contest

New page:
== Bugs ==

=== Preface ===

If you think you found a bug, [http://tomcat.apache.org/bugreport.html read 
this page].

=== Questions ===

* '''I have a bug, what do I do?'''
Unless you have the source code reference in Tomcat which is wrong, it may not 
be a bug. E-mail the [http://tomcat.apache.org/faq/tomcatuser.html user list] 
and confirm its a bug. Also [http://tomcat.apache.org/bugreport.html read this] 
first from the tomcat site about reporting a bug.

* '''Why does feature ABC work in Servlet Container XYZ but not in 
Tomcat?'''
There could be a good chance that the other servlet container could be 
implementing the spec wrong.

* '''I submitted a bug, why is it ignored?'''

 Any of the following may affect someone acting on a bug:
* Is it a bug?
* Is your description good?
* Is your description complete?
* Can a developer '''easily''' reproduce the bug in their own environment?
* Have you provided a patch? Is it against cvs? Using the correct file? 
Using cvs diff -u
* Is your patch coded well?
* Is your solution "good"?

Some developers are uncomfortable submitting patches to code they are 
unfamiliar with. The committers are not experts in all areas of Tomcat. It may 
be that the developer who has the ability to adequately review the patch may be 
too busy or unable to review the bug. That is the bad news, the good news is 
Tomcat is Open Source and you can build and use your own release until the fix 
gets back into the official release. 

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ/Bugs" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/Bugs

--
- == Bugs ==
- 
- === Preface ===
+ == Preface ==
  
  If you think you found a bug, [http://tomcat.apache.org/bugreport.html read 
this page].
  
- === Questions ===
+ == Questions ==
  
  * '''I have a bug, what do I do?'''
  Unless you have the source code reference in Tomcat which is wrong, it may 
not be a bug. E-mail the [http://tomcat.apache.org/faq/tomcatuser.html user 
list] and confirm its a bug. Also [http://tomcat.apache.org/bugreport.html read 
this] first from the tomcat site about reporting a bug.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ/Class Not Found" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/Class_Not_Found

The comment on the change is:
FAQ Migration - Issue 20 - GHOP Contest

New page:
== Class Not Found Issues ==

=== Preface ===

This page discusses the various ways you see Class Not Found errors or very 
similar errors. It is strongly advised you read the following topics:

* Classloader HOWTO pages:  
[http://tomcat.apache.org/tomcat-4.1-doc/class-loader-howto.html Tomcat 4.1],  
[http://tomcat.apache.org/tomcat-5.0-doc/class-loader-howto.html Tomcat 5.0],  
[http://tomcat.apache.org/tomcat-5.5-doc/class-loader-howto.html Tomcat 5.5].
* [http://marc.theaimsgroup.com/?t=10431752924&r=1&w=2 Don't] 
[http://marc.theaimsgroup.com/?t=10438044013&r=1&w=2 use] 
[http://marc.theaimsgroup.com/?t=9694765692&r=1&w=2 packageless] 
[http://marc.theaimsgroup.com/?t=10449102012&r=1&w=2 classes] 
[http://marc.theaimsgroup.com/?t=10426557623&r=1&w=2 and] 
[http://marc.theaimsgroup.com/?t=10424974831&r=1&w=2 declare] 
[http://marc.theaimsgroup.com/?t=10299695013&r=1&w=2 all] 
[http://marc.theaimsgroup.com/?t=10292218941&r=1&w=2 imported classes]!
* [http://marc.theaimsgroup.com/?l=tomcat-user&m=103843452413727&w=2 
Another answer to a classloader issue]

If you get a NoClassDefFoundError exception, the root cause might be the same 
as for a ClassNotFound exception.

=== Questions ===

* '''Why is jsp:useBean is not working?'''

Make sure:

* Your bean is packaged in a class.
* You have fully qualified your class name (eg:com.bar.package.MyClass) OR
* You have imported your class into your jsp (eg: <%@ 
pageimport="com.bar.package.MyClass"%>)

* '''Why do I get java.lang.NoClassDefFoundError: javax/servlet/Filter?'''

You probably have servlet.jar floating around somewhere it shouldn't be. This 
really messes up the classloaders since Tomcat's classloaders don't act quite 
as normal as one expects (see links above). servlet.jar should only be found 
only once in $CATALINA_HOME/common/lib.

* '''Why do I get java.lang.NoClassDefFoundError: org/xml/sax/InputSource?'''

You have conflicting XML api jar files in your classpath. Read the README or 
RELEASE-NOTES for more information. 

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ/Class Not Found" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/Class_Not_Found

--
- == Class Not Found Issues ==
+ = Class Not Found Issues =
  
- === Preface ===
+ == Preface ==
  
  This page discusses the various ways you see Class Not Found errors or very 
similar errors. It is strongly advised you read the following topics:
  
- * Classloader HOWTO pages:  
[http://tomcat.apache.org/tomcat-4.1-doc/class-loader-howto.html Tomcat 4.1],  
[http://tomcat.apache.org/tomcat-5.0-doc/class-loader-howto.html Tomcat 5.0],  
[http://tomcat.apache.org/tomcat-5.5-doc/class-loader-howto.html Tomcat 5.5].
+   * Classloader HOWTO pages:  
[http://tomcat.apache.org/tomcat-4.1-doc/class-loader-howto.html Tomcat 4.1],  
[http://tomcat.apache.org/tomcat-5.0-doc/class-loader-howto.html Tomcat 5.0],  
[http://tomcat.apache.org/tomcat-5.5-doc/class-loader-howto.html Tomcat 5.5].
- * [http://marc.theaimsgroup.com/?t=10431752924&r=1&w=2 Don't] 
[http://marc.theaimsgroup.com/?t=10438044013&r=1&w=2 use] 
[http://marc.theaimsgroup.com/?t=9694765692&r=1&w=2 packageless] 
[http://marc.theaimsgroup.com/?t=10449102012&r=1&w=2 classes] 
[http://marc.theaimsgroup.com/?t=10426557623&r=1&w=2 and] 
[http://marc.theaimsgroup.com/?t=10424974831&r=1&w=2 declare] 
[http://marc.theaimsgroup.com/?t=10299695013&r=1&w=2 all] 
[http://marc.theaimsgroup.com/?t=10292218941&r=1&w=2 imported classes]!
+   * [http://marc.theaimsgroup.com/?t=10431752924&r=1&w=2 Don't] 
[http://marc.theaimsgroup.com/?t=10438044013&r=1&w=2 use] 
[http://marc.theaimsgroup.com/?t=9694765692&r=1&w=2 packageless] 
[http://marc.theaimsgroup.com/?t=10449102012&r=1&w=2 classes] 
[http://marc.theaimsgroup.com/?t=10426557623&r=1&w=2 and] 
[http://marc.theaimsgroup.com/?t=10424974831&r=1&w=2 declare] 
[http://marc.theaimsgroup.com/?t=10299695013&r=1&w=2 all] 
[http://marc.theaimsgroup.com/?t=10292218941&r=1&w=2 imported classes]!
- * [http://marc.theaimsgroup.com/?l=tomcat-user&m=103843452413727&w=2 
Another answer to a classloader issue]
+   * [http://marc.theaimsgroup.com/?l=tomcat-user&m=103843452413727&w=2 
Another answer to a classloader issue]
  
- If you get a NoClassDefFoundError exception, the root cause might be the same 
as for a ClassNotFound exception.
+ If you get a '''NoClassDefFoundError''' exception, the root cause might be 
the same as for a '''ClassNotFound''' exception.
  
- === Questions ===
+ == Questions ==
  
- * '''Why is jsp:useBean is not working?'''
+ '''Why is jsp:useBean is not working?'''
- 
  Make sure:
  
- * Your bean is packaged in a class.
+   * Your bean is packaged in a class.
- * You have fully qualified your class name (eg:com.bar.package.MyClass) OR
+   * You have fully qualified your class name (eg:com.bar.package.MyClass) 
OR
- * You have imported your class into your jsp (eg: <%@ 
pageimport="com.bar.package.MyClass"%>)
+   * You have imported your class into your jsp (eg: <%@ 
pageimport="com.bar.package.MyClass"%>)
  
- * '''Why do I get java.lang.NoClassDefFoundError: javax/servlet/Filter?'''
+ ''' Why do I get java.lang.NoClassDefFoundError: javax/servlet/Filter? '''
  
  You probably have servlet.jar floating around somewhere it shouldn't be. This 
really messes up the classloaders since Tomcat's classloaders don't act quite 
as normal as one expects (see links above). servlet.jar should only be found 
only once in $CATALINA_HOME/common/lib.
  
- * '''Why do I get java.lang.NoClassDefFoundError: org/xml/sax/InputSource?'''
+ ''' Why do I get java.lang.NoClassDefFoundError: org/xml/sax/InputSource? '''
  
- You have conflicting XML api jar files in your classpath. Read the README or 
RELEASE-NOTES for more information. 
+  You have conflicting XML api jar files in your classpath. Read the README or 
RELEASE-NOTES for more information.
  

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ/Class Not Found" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/Class_Not_Found

--
  == Questions ==
  
  '''Why is jsp:useBean is not working?'''
+ 
  Make sure:
  
* Your bean is packaged in a class.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

DO NOT REPLY [Bug 43983] New: - codeBase of a webapp changes if antiResourceLocking is active - Security policy fails

[bugzilla]

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=43983

   Summary: codeBase of a webapp changes if antiResourceLocking is
active - Security policy fails
   Product: Tomcat 6
   Version: 6.0.14
  Platform: Sun
OS/Version: Windows Vista
Status: NEW
  Severity: normal
  Priority: P2
 Component: Catalina
AssignedTo: [EMAIL PROTECTED]
ReportedBy: [EMAIL PROTECTED]


I'm using Tomcat 6.0.14 with the "security" option in order to assign different
permissions to several webapps running within the Tomcat security sandbox.
However, I've encountered the following effect when I activate the
antiResourceLocking flag in the context.xml file of my webapp:

As this flag causes the server to copy all the files of my webapp to the temp
directory at runtime, the codeBase for the webapp also changes - but the
SecurityManager doesn't recognise that it has changed. Consequently, the
permissions for the specific webapp that I defined in catalina.policy actually
don't apply and I get an "access denied" exception. I have searched the web, the
security FAQ and newsgroups for a hint or a workaround, but with no success.
Neither the Tomcat Users Mailing List could help. With the help of the
java.security.debug=all option I came to the workaround to simply set the
codeBase in the catalina.policy file to the new location within the temp 
directory:

grant codeBase "file:${catalina.home}/temp/1-foo/-" {
/* list of assigned permissions */
};

With this workaround everything works fine. However, the numeric prefix (e.g.
"1-") of the webapp copied to the temp folder eventually changes, for instance
when I redeploy the webapp or when I clear the temp directory. As a result, I
always have to keep the catalina.policy file up-to-date with the current prefix
of the webapp, otherwise the permissions fail.

I ask myself if there is a more elegant way to fix this problem, maybe by an
internal mapping of the original codeBase of the webapp in
${catalina.home}/webapps/ to the ${catalina.home}/temp/ directory which then
would be transparent for the SecurityManager? 

If there's no easy way to fix it, at least a hint should be placed in the Tomcat
Security FAQ that if antiResourceLocking is active, the codeBase of the webapp
has to be adapted within the catalina.policy file.

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug, or are watching the assignee.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

A high school student is taking on the task of moving our FAQ to the wiki

[Yoav Shapira]

Hi,

One of the tasks we put out for the Google Highly Open Participation
contest (http://code.google.com/opensource/ghop/2007-8/) is Tim's
idea, to move our FAQ from static files to the wiki.

A student, Gianluca Varisco, is taking on that task.  He has just started work.

This is just an FYI for you all.  But in addition, I want to make no
further commits on the FAQ in Subversion.  Can we lock down that SVN
directory and make it read-only?

-- 
Thanks,

Yoav

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: A high school student is taking on the task of moving our FAQ to the wiki

[Tim Funk]

It'd be better to police ourselves to not update it during the 
transition. Then when the FAQ is moved - we can have the FAQ archived 
(or chucked ... preferably archived)


Since the FAQ is rarely changed - its highly unlikely any changes were 
going to be made in the near future.


-Tim

Yoav Shapira wrote:

Hi,

One of the tasks we put out for the Google Highly Open Participation
contest (http://code.google.com/opensource/ghop/2007-8/) is Tim's
idea, to move our FAQ from static files to the wiki.

A student, Gianluca Varisco, is taking on that task.  He has just started work.

This is just an FYI for you all.  But in addition, I want to make no
further commits on the FAQ in Subversion.  Can we lock down that SVN
directory and make it read-only?




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Bootstrap redirecting stdout/err via system.set

[jean-frederic clere]

William L. Thomson Jr. wrote:
> On Wed, 2007-11-28 at 09:29 +0100, jean-frederic clere wrote:
>> William L. Thomson Jr. wrote:
>>> Recently on Gentoo I was looking to improve how we start Tomcat.
>>> Specifically how we capture stdout/stderr output from Tomcat on start
>>> and redirect it to catalina.out.
>> Have to tried to use jsvc from http://commons.apache.org/daemon/ for that?
> 
> We presently use start-stop-daemon. Which has some --stdout --stderr
> options coming. It nastily send that stuff to /dev/null, if the
> --background flag is passed along.
> 
> We had a long time bug/feature request for jsvc. I considered it, but
> elected to not go that route. If people want Tomcat on port 80 they can
> do port forwarding or etc. Which allows Tomcat to remaining running as a
> non-root user or etc. Nor the need for jsvc to accomplish that. So it's
> kinda moot.
> 
> But I believe the argument is that applications should do their own
> stderr/out redirection and not to it external of the app. As in not via
> bash/shell redirection and sending that to a log file. The app should be
> doing that internally.

That is what daemon is doing.

Cheers

Jean-Frederic

> 
> So if I am using start-stop-daemon, or jsvc. It doesn't really change
> that aspect.
> 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: A high school student is taking on the task of moving our FAQ to the wiki

[Mladen Turk]

Yoav Shapira wrote:

Hi,

One of the tasks we put out for the Google Highly Open Participation
contest (http://code.google.com/opensource/ghop/2007-8/) is Tim's
idea, to move our FAQ from static files to the wiki.

A student, Gianluca Varisco, is taking on that task.  He has just started work.

This is just an FYI for you all.  But in addition, I want to make no
further commits on the FAQ in Subversion.  Can we lock down that SVN
directory and make it read-only?



Why?
Think we can all discipline ourself.
Even if someone commits he must be aware that his commit
won't be on the wiki.

Regards,
Mladen


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ

The comment on the change is:
FAQ Migration - Issue 20 - GHOP Contest

New page:
== Preface ==

Welcome to the Tomcat FAQ. In conjunction with this FAQ we strongly emphasis 
doing the following:

* Read the docs. Most answers are already documented.
* Know the [http://java.sun.com/products/servlet/ Servlet] and 
[http://java.sun.com/products/jsp/ JSP] specification. Many answers are not 
documented by the Tomcat team since they are generic and already defined by the 
specs. Know the specs, they let you ensure your webapps are portable across 
different servlet containers.
* Please do some research. Use a search engine. It is frustrating to see 
questions which can be answered with a simple Google search (or your favorite 
search engine).
* Browse or search our [http://tomcat.apache.org/lists.html mailing lists].

== Table of Contents ==

For your convenience, we have tried to break the FAQ out into multiple sections 
consisting of the following topics: 

* Bugs - You think you have a bug or there is a difference in behavior with 
another servlet container.
* Class Not Found - What to do with Class Not Found errors.
* Connectors - You want to connect tomcat to Apache, IIS, or have questions 
about tomcat-standalone.
* Database - Getting tomcat to talk to a database.
* Deployment - Questions related to web application deployment.
* How To - Miscellaneous common how to's.
* FDA Validation - Questions related to running Tomcat in an FDA validated 
environment.
* Linux / Unix - Common questions for Linux / Unix related platforms.
* Other Operating Systems - Information about scripts and support for other 
operating systems.
* Logging - Common questions related to logging in Tomcat.
* Memory - Common memory related questions.
* Meta - About Tomcat and this FAQ.
* Miscellaneous - Miscellaneous questions that weren't categorized.
* Monitoring & Performance - Monitoring and Performance questions.
* Other Resources - A lot of links to tomcat related documentation and 
experiences.
* Security - Common security issues.
* Version - About the different tomcat versions.
* Tomcat User - More information about the tomcat-user list.
* Windows - Common Windows questions.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ

--
  
  For your convenience, we have tried to break the FAQ out into multiple 
sections consisting of the following topics: 
  
- * Bugs - You think you have a bug or there is a difference in behavior 
with another servlet container.
+ * [http://wiki.apache.org/tomcat/FAQ/Bugs Bugs] - You think you have a 
bug or there is a difference in behavior with another servlet container.
- * Class Not Found - What to do with Class Not Found errors.
+ * [http://wiki.apache.org/tomcat/FAQ/Class_Not_Found Class Not Found] - 
What to do with Class Not Found errors.
  * Connectors - You want to connect tomcat to Apache, IIS, or have 
questions about tomcat-standalone.
  * Database - Getting tomcat to talk to a database.
  * Deployment - Questions related to web application deployment.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ

--
  * Connectors - You want to connect tomcat to Apache, IIS, or have 
questions about tomcat-standalone.
  * Database - Getting tomcat to talk to a database.
  * Deployment - Questions related to web application deployment.
- * How To - Miscellaneous common how to's.
+ * [http://wiki.apache.org/tomcat/HowTo How To] - Miscellaneous common how 
to's.
  * FDA Validation - Questions related to running Tomcat in an FDA 
validated environment.
  * Linux / Unix - Common questions for Linux / Unix related platforms.
  * Other Operating Systems - Information about scripts and support for 
other operating systems.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ/Bugs" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/Bugs

--
  
  == Questions ==
  
- * '''I have a bug, what do I do?'''
+ ''I have a bug, what do I do?'''
  Unless you have the source code reference in Tomcat which is wrong, it may 
not be a bug. E-mail the [http://tomcat.apache.org/faq/tomcatuser.html user 
list] and confirm its a bug. Also [http://tomcat.apache.org/bugreport.html read 
this] first from the tomcat site about reporting a bug.
  
- * '''Why does feature ABC work in Servlet Container XYZ but not in 
Tomcat?'''
+ '''Why does feature ABC work in Servlet Container XYZ but not in 
Tomcat?'''
  There could be a good chance that the other servlet container could be 
implementing the spec wrong.
  
- * '''I submitted a bug, why is it ignored?'''
+ '''I submitted a bug, why is it ignored?'''
  
   Any of the following may affect someone acting on a bug:
  * Is it a bug?

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ/Bugs" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/Bugs

--
  
  == Questions ==
  
- ''I have a bug, what do I do?'''
+ '''I have a bug, what do I do?'''
  Unless you have the source code reference in Tomcat which is wrong, it may 
not be a bug. E-mail the [http://tomcat.apache.org/faq/tomcatuser.html user 
list] and confirm its a bug. Also [http://tomcat.apache.org/bugreport.html read 
this] first from the tomcat site about reporting a bug.
  
- '''Why does feature ABC work in Servlet Container XYZ but not in 
Tomcat?'''
+ '''Why does feature ABC work in Servlet Container XYZ but not in Tomcat?'''
  There could be a good chance that the other servlet container could be 
implementing the spec wrong.
  
- '''I submitted a bug, why is it ignored?'''
+ '''I submitted a bug, why is it ignored?'''
  
   Any of the following may affect someone acting on a bug:
  * Is it a bug?

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ/Deployment" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/Deployment

New page:
== Preface ==
This section of the FAQ discusses common questions related to web application 
deployment.

== Questions ==

'''Why does tomcat 5 create context configuration files?'''

Unlike tomcat 4.x, tomcat 5.x creates context configuration files for you in 
its conf/[Engine name]/[Host name] directory. This is part of the change in 
tomcat's configuration mechanism from version 4.x to make overall configuration 
more robust, flexible, and enterprise-friendly. Note, however, that this has 
changed the recommended deployment practices for web applications. These 
context configuration files are created by tomcat, but not removed by tomcat, 
because the user may have changed them or other files in the conf directory. 
The suggested practice for tomcat 5 is to place context configuration files in 
the META-INF/context.xml directory of your webapp, and use Tomcat's Manager 
webapp to deploy/undeploy your applications. More details can be found here: 
MARC Archive

''' Why does the memory usage increase when I redeploy a web application?'''

Because the Classloader (and the Class objects it loaded) cannot be recycled. 
They are stored in the permanent heap generation by the JVM, and when you 
redepoy a new class loader is created, which loads another copy of all these 
classes. This can cause OufOfMemoryErrors eventually. 

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ/Bugs" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/Bugs

--
  == Questions ==
  
  '''I have a bug, what do I do?'''
+ 
  Unless you have the source code reference in Tomcat which is wrong, it may 
not be a bug. E-mail the [http://tomcat.apache.org/faq/tomcatuser.html user 
list] and confirm its a bug. Also [http://tomcat.apache.org/bugreport.html read 
this] first from the tomcat site about reporting a bug.
  
  '''Why does feature ABC work in Servlet Container XYZ but not in Tomcat?'''
+ 
  There could be a good chance that the other servlet container could be 
implementing the spec wrong.
  
  '''I submitted a bug, why is it ignored?'''

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ/Deployment" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/Deployment

--
  == Preface ==
  This section of the FAQ discusses common questions related to web application 
deployment.
- 
  == Questions ==
  
  '''Why does tomcat 5 create context configuration files?'''
  
- Unlike tomcat 4.x, tomcat 5.x creates context configuration files for you in 
its conf/[Engine name]/[Host name] directory. This is part of the change in 
tomcat's configuration mechanism from version 4.x to make overall configuration 
more robust, flexible, and enterprise-friendly. Note, however, that this has 
changed the recommended deployment practices for web applications. These 
context configuration files are created by tomcat, but not removed by tomcat, 
because the user may have changed them or other files in the conf directory. 
The suggested practice for tomcat 5 is to place context configuration files in 
the META-INF/context.xml directory of your webapp, and use Tomcat's Manager 
webapp to deploy/undeploy your applications. More details can be found here: 
MARC Archive
+ Unlike tomcat 4.x, tomcat 5.x creates context configuration files for you in 
its conf/[Engine name]/[Host name] directory. This is part of the change in 
tomcat's configuration mechanism from version 4.x to make overall configuration 
more robust, flexible, and enterprise-friendly. Note, however, that this has 
changed the recommended deployment practices for web applications. These 
context configuration files are created by tomcat, but not removed by tomcat, 
because the user may have changed them or other files in the conf directory. 
The suggested practice for tomcat 5 is to place context configuration files in 
the META-INF/context.xml directory of your webapp, and use Tomcat's Manager 
webapp to deploy/undeploy your applications. More details can be found here: 
[http://marc.theaimsgroup.com/?l=tomcat-user&m=107590945807699&w=2 MARC Archive]
  
  ''' Why does the memory usage increase when I redeploy a web application?'''
  

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ

--
  * [http://wiki.apache.org/tomcat/FAQ/Class_Not_Found Class Not Found] - 
What to do with Class Not Found errors.
  * Connectors - You want to connect tomcat to Apache, IIS, or have 
questions about tomcat-standalone.
  * Database - Getting tomcat to talk to a database.
- * Deployment - Questions related to web application deployment.
+ * [http://wiki.apache.org/tomcat/FAQ/Deployment Deployment] - Questions 
related to web application deployment.
  * [http://wiki.apache.org/tomcat/HowTo How To] - Miscellaneous common how 
to's.
  * FDA Validation - Questions related to running Tomcat in an FDA 
validated environment.
  * Linux / Unix - Common questions for Linux / Unix related platforms.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Bootstrap redirecting stdout/err via system.set

[William L. Thomson Jr.]

On Wed, 2007-11-28 at 18:28 +0100, jean-frederic clere wrote:
> William L. Thomson Jr. wrote:
> >
> > But I believe the argument is that applications should do their own
> > stderr/out redirection and not to it external of the app. As in not via
> > bash/shell redirection and sending that to a log file. The app should be
> > doing that internally.
> 
> That is what daemon is doing.

Yes but that's still Tomcat relying on jsvc or in my case
start-stop-daemon. Something EXTERNAL to Tomcat. That doesn't effect say
Tomcat out of the box when started via catalina.sh.

Again, other properties are being set in Bootstrap jar. I am
specifically asking if there is reason to not redirect stdout/stderr
there via system properties. Which would eliminate needing to do it
external of Tomcat be it shell redirection, jsvc, start-stop-daemon or
etc.

I am NOT looking for suggestions are alternatives like jsvc. I am
SPECIFICALLY asking if Tomcat Developers have considered doing the
redirection internally in Bootstrap or not. If it's been discussed, the
pros and cons. If it hasn't been discussed if it could be, and/or taken
under consideration for addition in future versions.

After thinking about it myself. I think I will likely take this approach
with most of my apps. I can surely made the mods to Bootstrap.java and
provide that via a patch on Gentoo. But I don't want to deviate from
upstream without at least discussing it first.

I am not looking to engage in a discussion of how to do this external to
tomcat via jsvc, bash/shell rediction, start-stop-daemon, or other
external means.

-- 
William L. Thomson Jr.
Gentoo/Java


signature.asc
Description: This is a digitally signed message part

[Tomcat Wiki] Update of "FAQ" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ

--
  * Monitoring & Performance - Monitoring and Performance questions.
  * Other Resources - A lot of links to tomcat related documentation and 
experiences.
  * Security - Common security issues.
- * Version - About the different tomcat versions.
+ * [http://wiki.apache.org/tomcat/TomcatVersions Version] - About the 
different tomcat versions.
  * Tomcat User - More information about the tomcat-user list.
  * Windows - Common Windows questions.
  

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ/Other Operating Systems" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/Other_Operating_Systems

New page:
== Preface ==
This section of the FAQ deals with running Tomcat on platforms not supported by 
the built-in startup/shutdown scripts. These include OS/2, z/OS, OpenVMS-Alpha, 
and others.

== Questions ==

  Where are the scripts for my operating system?

* OS/2:
  * [http://hobbes.nmsu.edu/cgi-bin/h-search?key=tomcat_5-0-27_os2.zip 
NMSU.edu]
  * [http://www.netbeans.org/issues/show_bug.cgi?id=42678 NetBeans.org]
  * [http://issues.apache.org/bugzilla/show_bug.cgi?id=30394 
EComStation]
* z/OS:
  * [http://jzos.com/ JZOS]
* GNU/Linux:
  * [http://issues.apache.org/bugzilla/show_bug.cgi?id=31447 From 
[EMAIL PROTECTED]
* OpenVMS-Alpha:
  * [http://issues.apache.org/bugzilla/show_bug.cgi?id=31499 Hewlett 
Packard ([EMAIL PROTECTED])]

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ

--
  * [http://wiki.apache.org/tomcat/HowTo How To] - Miscellaneous common how 
to's.
  * FDA Validation - Questions related to running Tomcat in an FDA 
validated environment.
  * Linux / Unix - Common questions for Linux / Unix related platforms.
- * Other Operating Systems - Information about scripts and support for 
other operating systems.
+ * [http://wiki.apache.org/tomcat/FAQ/Other_Operating_Systems Other 
Operating Systems] - Information about scripts and support for other operating 
systems.
  * Logging - Common questions related to logging in Tomcat.
  * Memory - Common memory related questions.
  * Meta - About Tomcat and this FAQ.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ/Other Operating Systems" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/Other_Operating_Systems

--
  
Where are the scripts for my operating system?
  
- * OS/2:
+   * OS/2:
-   * 
[http://hobbes.nmsu.edu/cgi-bin/h-search?key=tomcat_5-0-27_os2.zip NMSU.edu]
+* [http://hobbes.nmsu.edu/cgi-bin/h-search?key=tomcat_5-0-27_os2.zip 
NMSU.edu]
-   * [http://www.netbeans.org/issues/show_bug.cgi?id=42678 
NetBeans.org]
+* [http://www.netbeans.org/issues/show_bug.cgi?id=42678 NetBeans.org]
-   * [http://issues.apache.org/bugzilla/show_bug.cgi?id=30394 
EComStation]
+* [http://issues.apache.org/bugzilla/show_bug.cgi?id=30394 EComStation]
- * z/OS:
+   * z/OS:
-   * [http://jzos.com/ JZOS]
+* [http://jzos.com/ JZOS]
- * GNU/Linux:
+   * GNU/Linux:
-   * [http://issues.apache.org/bugzilla/show_bug.cgi?id=31447 From 
[EMAIL PROTECTED]
+* [http://issues.apache.org/bugzilla/show_bug.cgi?id=31447 From [EMAIL 
PROTECTED]
- * OpenVMS-Alpha:
+   * OpenVMS-Alpha:
-   * [http://issues.apache.org/bugzilla/show_bug.cgi?id=31499 Hewlett 
Packard ([EMAIL PROTECTED])]
+* [http://issues.apache.org/bugzilla/show_bug.cgi?id=31499 Hewlett Packard 
([EMAIL PROTECTED])]
  

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ/Security" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/Security

New page:
== Preface ==
This FAQ section provides help with some security-related issues. If you hear 
of a vulnerability or its exploitation, please let us know on the 
[mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] mailing list.
=== The Record ===

Tomcat's security record is impeccable. There have been no public cases of 
damage done to a company, organization, or individual due to a Tomcat security 
issue. There have been no documented cases of data loss or application crashes 
caused by an intruder. While there have been numerous analyses conducted on 
Tomcat, partially because this is easy to do with Tomcat's source code openly 
available, there have been only a few '''theoretical''' vulnerabilities found. 
All of those were addressed rapidly even though there were no documented cases 
of actual exploitation of these vulnerabilities.
=== Role of Customization ===

We believe, and the evidence suggests, that Tomcat is more than secure enough 
for most use-cases. However, like all other components of Tomcat, you can 
customize any and all of the relevant parts of the server to achieve even 
higher security. For example, the session manager implementation is pluggable, 
and even the default implementation has support for pluggable random number 
generators. If you have a special need that you feel is not met by Tomcat out 
of the box, consider these customization options. At the same time, please 
bring up your requirements on the user mailing list, where we'll be glad to 
discuss it and assist in your approach/design/implementation as needed.

== Questions ==

'''How do I use OpenSSL to set up my own Certificate Authority (CA)?'''

[http://marc.theaimsgroup.com/?l=tomcat-user&m=106293430225790&w=2 Using 
OpenSSL to set up your own CA].

'''OH NO! PORT 8005 is available for anyone on localhost to shutdown my 
tomcat!'''

See these 2 discussions.

* [http://marc.theaimsgroup.com/?t=10439665323&r=1&w=2 Possible to 
switch off tcp/ip server shutdown?]
* [http://marc.theaimsgroup.com/?t=10312664325&r=1&w=2 Tomcat shutdown 
& security]

'''What about Tomcat running as root?'''

See these threads:

* [http://marc.theaimsgroup.com/?t=10451603873&r=1&w=2 Tomcat as root 
and security issues]

''' How to I force all my pages to run under HTTPS?'''

[http://marc.theaimsgroup.com/?l=tomcat-user&m=104951559722619&w=2 Use 
security-constraint in web.xml].

''' What is the default login for the manager and admin app?'''

The admin and manager application do not provide a default login. Doing so is a 
security flaw. You need to edit $CATALINA_HOME/conf/tomcat-users.xml if you are 
using the default install. 
[http://tomcat.apache.org/tomcat-4.1-doc/manager-howto.html#Configuring%20Manager%20Application%20Access
 Configuring Manager Application Access]

''' How do I restrict access by ip address or remote host?'''

By using the RemoteHostValve or RemoteAddrValve. Warning, these valves rely on 
accurate incoming ip addresses or hostnames. So they can fall victim to 
spoofing! [http://tomcat.apache.org/tomcat-4.1-doc/config/valve.html Valve 
Reference Link]

'''How do I use jsvc/procrun to run Tomcat on port 80 securely?'''

Fairly easily ;) See the Setup page in the docs for your tomcat release, and 
read [http://marc.theaimsgroup.com/?l=tomcat-user&m=108566020231438&w=2 this 
mailing list post] for a complete setup example with permissions etc.

''' Has Tomcat's security been independently analyzed or audited?'''

Yes, by numerous organizations and individuals, many times. Try 
[http://www.google.com/search?sourceid=navclient&ie=UTF-8&q=is+tomcat+secure 
this Google search] and you'll see many references, guides, and analyses. 

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ/Deployment" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/Deployment

--
  == Preface ==
  This section of the FAQ discusses common questions related to web application 
deployment.
  == Questions ==
- 
  '''Why does tomcat 5 create context configuration files?'''
  
  Unlike tomcat 4.x, tomcat 5.x creates context configuration files for you in 
its conf/[Engine name]/[Host name] directory. This is part of the change in 
tomcat's configuration mechanism from version 4.x to make overall configuration 
more robust, flexible, and enterprise-friendly. Note, however, that this has 
changed the recommended deployment practices for web applications. These 
context configuration files are created by tomcat, but not removed by tomcat, 
because the user may have changed them or other files in the conf directory. 
The suggested practice for tomcat 5 is to place context configuration files in 
the META-INF/context.xml directory of your webapp, and use Tomcat's Manager 
webapp to deploy/undeploy your applications. More details can be found here: 
[http://marc.theaimsgroup.com/?l=tomcat-user&m=107590945807699&w=2 MARC Archive]

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ

--
  * Miscellaneous - Miscellaneous questions that weren't categorized.
  * Monitoring & Performance - Monitoring and Performance questions.
  * Other Resources - A lot of links to tomcat related documentation and 
experiences.
- * Security - Common security issues.
+ * [http://wiki.apache.org/tomcat/Security Security] - Common security 
issues.
  * [http://wiki.apache.org/tomcat/TomcatVersions Version] - About the 
different tomcat versions.
  * Tomcat User - More information about the tomcat-user list.
  * Windows - Common Windows questions.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: A high school student is taking on the task of moving our FAQ to the wiki

[Yoav Shapira]

On Nov 28, 2007 12:34 PM, Mladen Turk <[EMAIL PROTECTED]> wrote:
> Why?
> Think we can all discipline ourself.
> Even if someone commits he must be aware that his commit
> won't be on the wiki.

OK, fair enough ;)

Yoav

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ

--
  * Other Resources - A lot of links to tomcat related documentation and 
experiences.
  * [http://wiki.apache.org/tomcat/Security Security] - Common security 
issues.
  * [http://wiki.apache.org/tomcat/TomcatVersions Version] - About the 
different tomcat versions.
- * Tomcat User - More information about the tomcat-user list.
+ * [http://wiki.apache.org/tomcat/Tomcat_User Tomcat User] - More 
information about the tomcat-user list.
  * Windows - Common Windows questions.
  

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ/Tomcat User" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/Tomcat_User

New page:
== Preface ==

The Tomcat user mailing list is for all your questions about how to use Tomcat. 
It is a high volume list! For those who can't handle that kind of traffic, you 
can also get it in digest form.

If you post to tomcat-user, use good etiquette, ask good questions, and use 
Best Practices, and also please read the docs, faqs, readme, and search the 
archives before asking a question.

Here are some links about how to use mailing lists and standard etiquette in 
using mailing lists. These links are not Tomcat specific! Please do not contact 
the author of these documents with questions.

 * [http://www.rfc-editor.org/rfc/rfc1855.txt Netiquette Guidelines (RFC 1855)]
 * [http://www.catb.org/~esr/faqs/smart-questions.html How To Ask Questions The 
Smart Way]

== Questions ==
'''How do I subscribe?'''

See the [http://tomcat.apache.org/lists.html mailing list page]. If you are 
unable to subscribe, it could be due to your e-mail system mangling your e-mail 
addres.

If you send an e-mail to the list owner to subscribe you to the list, be 
prepared to wait until the owner has an opportunity to add you to the list.

''' Why won't people answer my question?'''

It could be one of any of the following answers:

  * No one knows the answer.
  * Everyone is ignoring you.
  * The person who knows the answer hasn't gotten around to it yet.
  * The person who knows the answer hasn't gotten around to it yet. (So please 
don't post the same question multiple times)

In other words - you get what you pay for. If you phrase you question 
intelligently and not make your question annoying, your quality of support will 
probably better than any commercial help support.

In particular, some readers on the tomcat-user list have been known to 
automatically ignore a message which meets any of the following criteria: (You 
have been warned)

  * "help" in the subject line (we know you need help by writing in the first 
place)
  * plz or please in the subject line. We already know you need help.
  * ALL CAPS IN THE SUBJECT LINE. (Sorry for anyone emailing from a mainframe)
  * Do not place !! (more than 2!) in the subject line. The number of 
exclamation points has no relation to anyone's interest in answering the 
question. In fact - it has a higher chance at being ignored.
  * Your e-mail has a return receipt. You don't need to know I got the message.
  * Select posters who have consistently displayed no desire to research before 
posting a question.

'''How do I unsubscribe?'''

See the [http://tomcat.apache.org/lists.html mailing list page]. If you are 
unable to unsubscribe, it could be due to your e-mail system mangling your 
e-mail address or you have subscribed under an alias. In that case, maybe 
[http://marc.theaimsgroup.com/?l=tomcat-user&m=104190907020995&w=2 this thread] 
will help.

If you send an e-mail to the list owner to remove you from the list, be 
prepared to continue receiving more e-mails from the lists until the owner has 
an opportunity to remove you from the list.

'''Should I post to users or dev?'''

tomcat-user is for user based questions for tomcat. That means anyone who is 
developing any type of software to be used with tomcat.

tomcat-dev is the forum to discuss changes to the Tomcat's source code. If your 
question is not related to changing the source code as maintained by the tomcat 
committers, then it does not belong here, it belongs on the users list.

If you wish to extend tomcat using your own Valve, Realm, or anything else ... 
those discussions belong in tomcat-user. You might be using Tomcat's internal 
API but unless your changes are going back into the official source tree, the 
question belongs on the user list. 

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ/Connectors" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/Connectors

New page:
== Preface ==
Please see the [http://wiki.apache.org/tomcat/UsefulLinks Other Resources Link] 
for other pages describing how they were able to link Tomcat with a connector. 
With luck, someone documented their experience in an environment which is 
similar to yours.

Here is a link to the [http://tomcat.apache.org/connectors-doc/ JK Connectors]. 
It contains more configuration and installation information.

'''Please note, jk2 is no longer supported. Please use mod_jk instead.'''
== Questions ==
'''What is JK (or AJP)?'''

AJP is a wire protocol. It an optimized version of the HTTP protocol to allow a 
standalone web server such as Apache talk to Tomcat. Historically, Apache has 
always been much faster than Tomcat at serving static content. The idea is to 
let Apache serve the static content when possible, then proxy the request back 
to Tomcat for Tomcat related content. 

'''Which connector: mod_jserv, JK, JK2, mod_webapp or mod_proxy?'''

 * Stay away from mod_webapp, aka warp. It is deprecated and unsupported due to 
lack of developer interest and there are better options such as jk and jk2. It 
WILL NOT run on windows.
 * mod_jserv is unsupported and will not be supported in Tomcat 5. mod_jserv 
was the original connector which supported the ajp protocol.
 * jk2 is a refactoring of mod_jk and uses the Apache Portable Runtime (apr). 
But due to lack of developer interest, it is unsupported. The alternative is 
mod_jk or mod_proxy_ajp.
 * '''mod_jk is great and should be used for production'''. It is still under 
active development and also works for the apache 2.X series for cases where you 
do not want to use mod_proxy_ajp.
 * mod_proxy. A cheap way to proxy without the hassles of configuring JK. This 
solution lacks sticky session load balancing. If you don't need some of the 
features of jk - this is a very simple alternative.
 * mod_proxy_ajp. With apache 2.2, mod_proxy was rewritten to support load 
balancing as well as a new transport called mod_proxy_ajp. This module is 
distributed with the Apache http server, not the Tomcat server.

'''Why should I integrate Apache with Tomcat? (or not)'''

There are many reasons to integrate Tomcat with Apache. And there are reasons 
why it should not be done too. Needless to say, everyone will disagree with the 
opinions here. With the performance of Tomcat 5 and 6, performance reasons 
become harder to justify. So here are the issues to discuss in integrating vs 
not.

 * Clustering. By using Apache as a front end you can let Apache act as a front 
door to your content to multiple Tomcat instances. If one of your Tomcats 
fails, Apache ignores it and your Sysadmin can sleep through the night. This 
point could be ignored if you use a hardware loadbalancer and Tomcat's 
clustering capabilities.
 * Clustering/Security. You can also use Apache as a front door to different 
Tomcats for different URL namespaces (/app1/, /app2/, /app3/, or virtual 
hosts). The Tomcats can then be each in a protected area and from a security 
point of view, you only need to worry about the Apache server. Essentially, 
Apache becomes a smart proxy server.
 * Security. This topic can sway one either way. Java has the security manager 
while Apache has a larger mindshare and more tricks with respect to security. I 
won't go into this in more detail, but let Google be your friend. Depending on 
your scenario, one might be better than the other. But also keep in mind, if 
you run Apache with Tomcat - you have two systems to defend, not one.
 * Add-ons. Adding on CGI, perl, PHP is very natural to Apache. Its slower and 
more of a kludge for Tomcat. Apache also has hundreds of modules that can be 
plugged in at will. Tomcat can have this ability, but the code hasn't been 
written yet.
 * Decorators! With Apache in front of Tomcat, you can perform any number of 
decorators that Tomcat doesn't support or doesn't have the immediate code 
support. For example, mod_headers, mod_rewrite, and mod_alias could be written 
for Tomcat, but why reinvent the wheel when Apache has done it so well?
 * Speed. Apache is faster at serving static content than Tomcat. But unless 
you have a high traffic site, this point is useless. But in some scenarios, 
tomcat can be faster than apache. So benchmark YOUR site.
 * Socket handling/system stability. Apache has better socket handling with 
respect to error conditions than Tomcat. The main reason is Tomcat must perform 
all its socket handling via the JVM which needs to be cross platform. The 
problem is socket optimization is a platform specific ordeal. Most of the time 
the java code is fine, but when you are also bombarded with dropped 
connections, invalid packets, invalid requests from invalid IP's, Apache does a 
better job at drop

[Tomcat Wiki] Update of "FAQ/Unix Linux" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/Unix_Linux

New page:
== Preface ==

== Questions ==

'''When I run ps (on Linux), why do I see my java process a bazillion times!'''

Linux implemented threads as processes. Due to other gory details that is 
beyond the scope of this FAQ - the ps command doesn't work correctly with 
respect to threads. You can get more gory details 
[http://www.onlamp.com/pub/a/onlamp/2002/11/07/linux_threads.html here] and 
[http://pauillac.inria.fr/~xleroy/linuxthreads/faq.html#D here] .

'''How do I run without an X server and still get graphics?'''

You either need to run headless or run an alternate X-server. Some more 
information can be found 
[http://marc.theaimsgroup.com/?t=10480304763&r=1&w=2 here], 
[http://marc.theaimsgroup.com/?l=tomcat-user&m=102335321103262&w=2 here], or 
[http://marc.theaimsgroup.com/?l=tomcat-user&m=101614645312259&w=2 here].
Or if your are using a JVM 1.4 or better, you can use the system property 
{{{java.awt.headless=true}}}

'''Tomcat dies after I log out!'''

This is common complaint in Solaris. Make sure you use nohup and see 
[http://marc.theaimsgroup.com/?l=tomcat-user&m=104809785114238&w=2 this thread]

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ/Unix Linux" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/Unix_Linux

--
  
  '''Tomcat dies after I log out!'''
  
- This is common complaint in Solaris. Make sure you use nohup and see 
[http://marc.theaimsgroup.com/?l=tomcat-user&m=104809785114238&w=2 this thread]
+ This is common complaint in Solaris. Make sure you use {{{nohup}}} and see 
[http://marc.theaimsgroup.com/?l=tomcat-user&m=104809785114238&w=2 this thread]
  

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ

--
  * [http://wiki.apache.org/tomcat/FAQ/Bugs Bugs] - You think you have a 
bug or there is a difference in behavior with another servlet container.
  * [http://wiki.apache.org/tomcat/FAQ/Class_Not_Found Class Not Found] - 
What to do with Class Not Found errors.
  * [http://wiki.apache.org/tomcat/FAQ/Connectors Connectors] - You want to 
connect tomcat to Apache, IIS, or have questions about tomcat-standalone.
- * Database - Getting tomcat to talk to a database.
+ * [http://wiki.apache.org/tomcat/FAQ/Database Database] - Getting tomcat 
to talk to a database.
  * [http://wiki.apache.org/tomcat/FAQ/Deployment Deployment] - Questions 
related to web application deployment.
  * [http://wiki.apache.org/tomcat/HowTo How To] - Miscellaneous common how 
to's.
  * FDA Validation - Questions related to running Tomcat in an FDA 
validated environment.
- * Linux / Unix - Common questions for Linux / Unix related platforms.
+ * [http://wiki.apache.org/tomcat/FAQ/Linux_Unix Linux / Unix] - Common 
questions for Linux / Unix related platforms.
  * [http://wiki.apache.org/tomcat/FAQ/Other_Operating_Systems Other 
Operating Systems] - Information about scripts and support for other operating 
systems.
  * Logging - Common questions related to logging in Tomcat.
  * Memory - Common memory related questions.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ/Database" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/Database

New page:
== Preface ==

This page is to discuss database error and DBCP. Until more content can appear 
here, here are some links to the mail archives to perform some searches:

  * [http://marc.theaimsgroup.com/?l=tomcat-user&w=2&r=1&s=database&q=b 
database]
  * [http://marc.theaimsgroup.com/?l=tomcat-user&w=2&r=1&s=datasource&q=b 
datasource]
  * [http://marc.theaimsgroup.com/?l=tomcat-user&w=2&r=1&s=oracle&q=b oracle]
  * [http://marc.theaimsgroup.com/?l=tomcat-user&w=2&r=1&s=mysql&q=b mysql]
  * [http://marc.theaimsgroup.com/?l=tomcat-user&w=2&r=1&s=dbpool&q=b dbpool]

Other Links of interest:

  * 
[http://tomcat.apache.org/tomcat-4.1-doc/jndi-datasource-examples-howto.html 
JNDI Datasource HOW-TO]

Other notes:

  * '''Do not use JDBC-ODBC bridge''' bundled with Sun's JDK with Tomcat. It 
was never meant for a production server environment. If you ask a question 
about it, everyone will tell you to not use it. If you do need to use ODBC, 
there are 3rd party drivers which do a pretty good job at being thread safe.
  * If you use the oracle thin driver, be sure to rename it to a jar file from 
a zip file. Tomcat only auto-magically loads files ending in .jar placed in a 
lib directory. It ignores all other file extensions.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ/Class Not Found" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/Class_Not_Found

--
* [http://marc.theaimsgroup.com/?t=10431752924&r=1&w=2 Don't] 
[http://marc.theaimsgroup.com/?t=10438044013&r=1&w=2 use] 
[http://marc.theaimsgroup.com/?t=9694765692&r=1&w=2 packageless] 
[http://marc.theaimsgroup.com/?t=10449102012&r=1&w=2 classes] 
[http://marc.theaimsgroup.com/?t=10426557623&r=1&w=2 and] 
[http://marc.theaimsgroup.com/?t=10424974831&r=1&w=2 declare] 
[http://marc.theaimsgroup.com/?t=10299695013&r=1&w=2 all] 
[http://marc.theaimsgroup.com/?t=10292218941&r=1&w=2 imported classes]!
* [http://marc.theaimsgroup.com/?l=tomcat-user&m=103843452413727&w=2 
Another answer to a classloader issue]
  
- If you get a '''NoClassDefFoundError''' exception, the root cause might be 
the same as for a '''ClassNotFound''' exception.
+ If you get a {{{NoClassDefFoundError}}} exception, the root cause might be 
the same as for a {{{ClassNotFound}}} exception.
  
  == Questions ==
  

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ/Class Not Found" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/Class_Not_Found

--
  
  == Questions ==
  
- '''Why is jsp:useBean is not working?'''
+ '''Why is {{{ jsp:useBean }}} is not working?'''
  
  Make sure:
  
* Your bean is packaged in a class.
-   * You have fully qualified your class name (eg:com.bar.package.MyClass) 
OR
+   * You have fully qualified your class name (eg:{{{ 
com.bar.package.MyClass }}}) OR
-   * You have imported your class into your jsp (eg: <%@ 
pageimport="com.bar.package.MyClass"%>)
+   * You have imported your class into your jsp (eg: {{{ <%@ 
pageimport="com.bar.package.MyClass"%> }}})
  
- ''' Why do I get java.lang.NoClassDefFoundError: javax/servlet/Filter? '''
+ ''' Why do I get {{{ java.lang.NoClassDefFoundError: javax/servlet/Filter? 
}}}'''
  
  You probably have servlet.jar floating around somewhere it shouldn't be. This 
really messes up the classloaders since Tomcat's classloaders don't act quite 
as normal as one expects (see links above). servlet.jar should only be found 
only once in $CATALINA_HOME/common/lib.
  
- ''' Why do I get java.lang.NoClassDefFoundError: org/xml/sax/InputSource? '''
+ ''' Why do I get {{{ java.lang.NoClassDefFoundError: org/xml/sax/InputSource 
}}}? '''
  
   You have conflicting XML api jar files in your classpath. Read the README or 
RELEASE-NOTES for more information.
  

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ/Class Not Found" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/Class_Not_Found

--
* You have fully qualified your class name (eg:{{{ 
com.bar.package.MyClass }}}) OR
* You have imported your class into your jsp (eg: {{{ <%@ 
pageimport="com.bar.package.MyClass"%> }}})
  
- ''' Why do I get {{{ java.lang.NoClassDefFoundError: javax/servlet/Filter? 
}}}'''
+ ''' Why do I get {{{ java.lang.NoClassDefFoundError: 
javax/servlet/Filter}}}?'''
  
  You probably have servlet.jar floating around somewhere it shouldn't be. This 
really messes up the classloaders since Tomcat's classloaders don't act quite 
as normal as one expects (see links above). servlet.jar should only be found 
only once in $CATALINA_HOME/common/lib.
  

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ

--
  
  * [http://wiki.apache.org/tomcat/FAQ/Bugs Bugs] - You think you have a 
bug or there is a difference in behavior with another servlet container.
  * [http://wiki.apache.org/tomcat/FAQ/Class_Not_Found Class Not Found] - 
What to do with Class Not Found errors.
- * Connectors - You want to connect tomcat to Apache, IIS, or have 
questions about tomcat-standalone.
+ * [http://wiki.apache.org/tomcat/FAQ/Connectors Connectors] - You want to 
connect tomcat to Apache, IIS, or have questions about tomcat-standalone.
  * Database - Getting tomcat to talk to a database.
  * [http://wiki.apache.org/tomcat/FAQ/Deployment Deployment] - Questions 
related to web application deployment.
  * [http://wiki.apache.org/tomcat/HowTo How To] - Miscellaneous common how 
to's.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ

--
  * [http://wiki.apache.org/tomcat/FAQ/Linux_Unix Linux / Unix] - Common 
questions for Linux / Unix related platforms.
  * [http://wiki.apache.org/tomcat/FAQ/Other_Operating_Systems Other 
Operating Systems] - Information about scripts and support for other operating 
systems.
  * Logging - Common questions related to logging in Tomcat.
- * Memory - Common memory related questions.
+ * [[http://wiki.apache.org/tomcat/FAQ/Memory Memory] - Common memory 
related questions.
  * Meta - About Tomcat and this FAQ.
  * Miscellaneous - Miscellaneous questions that weren't categorized.
  * Monitoring & Performance - Monitoring and Performance questions.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ/Bugs/Memory" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/Bugs/Memory

--
  
  First look at {{{java -X}}} to determine what parameters to set. Then you can 
set them via the environment variable {{{JAVA_OPTS}}}. Read the files 
catalina.bat or catalina.sh for more information on JAVA_OPTS.
  
- '''Why do I get OutOfMemoryError errors?'''
+ '''Why do I get {{{OutOfMemoryError}}} errors?'''
  
  Many reasons.
  
   * You're out of memory. Simple as that - add more to your heap.
   * You're out of memory. You have code which is hanging onto object 
references and the garbage collector can't do its job. Get a profiler to debug 
this one.
-  * You ran out of file descriptors. If you are on a *nix system, it has been 
observed that an OutOfMemoryError can be thrown if you run out of file 
descriptors. This can occur if your threshold is too low. The {{{ulimit}}} 
program can help you out here. You also may need to account for socket 
connections too when thinking about these thresholds. Google is your friend for 
getting more information about this topic.
+  * You ran out of file descriptors. If you are on a *nix system, it has been 
observed that an {{{OutOfMemoryError}}} can be thrown if you run out of file 
descriptors. This can occur if your threshold is too low. The {{{ulimit}}} 
program can help you out here. You also may need to account for socket 
connections too when thinking about these thresholds. Google is your friend for 
getting more information about this topic.
   * You have too many threads running. Some OS's have a limit to the number of 
threads which may be executed by a single process. (Which is what the JVM is.) 
Refer to your OS docs for more information on how to raise this threshold.
   * If you have a lot of servlets or JSP's, you may need to increase your 
permanent generation. By default, it is 64MB. Doubling it to be 
{{{-XX:MaxPermSize=256m}}} might be a good start.
   * Your OS limits the amount of memory your process may take. OK, this one is 
grasping at straws.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ/Windows" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/Windows

New page:
== Preface ==
The will address various windows issues. Please see the 
[http://wiki.apache.org/tomcat/UsefulLinks Other Resources Link] for more links 
related to Windows.

== Questions ==

'''Why do I get Out of Environment Space?'''

Check the Tomcat README, and 
[http://marc.theaimsgroup.com/?l=tomcat-user&m=103918210305702&w=2 this link]

''' When I start up tomcat (or when it is running), I get the error 
{{{java.lang.IllegalMonitorStateException: current thread not owner}}}'''

That is weird - but solved.(?) See the 
[http://issues.apache.org/bugzilla/show_bug.cgi?id=13723 Tomcat Bug Report] and 
[http://developer.java.sun.com/developer/bugParade/bugs/4776385.html Sun Bug 
Parade report] for the answer.

'''Can I turn off case sensitivity?'''

[http://tomcat.apache.org/tomcat-4.1-doc/config/resources.html Yes]

'''Can I use NTLM authentication?'''

With help from the Samba folks, 
[http://jcifs.samba.org/src/docs/ntlmhttpauth.html it is possible].

'''I want to redeploy web applications, how do I prevent resources from getting 
locked?'''

Most locking issues will occur with JARs from /WEB-INF/lib, and are useally 
caused by access through URLs. Tomcat has mechanisms to allow avoiding locking. 
In Tomcat 5.0, a mechanism exists to prevent locking when accessing resources 
using the getResource method of the URL classloader (many applications, such as 
Xerces, do not set the use of caching to false before opening the URL 
connection, causing locking). If such a call occurs, resources inside the JARs 
will be extracted to the work directory of the web application. In Tomcat 5.5, 
this mechanism is disabled by default (as it has a non negligible influence on 
startup times, and is often useless), and can be enabled using the 
antiJARLocking attribute of the Context element. There is another lock 
prevention mechanism in Tomcat 5.5 (antiResourceLocking attribute), which will 
cause the web application files to be copied to the temp folder and run from 
this location. This has a larger impact on web application startup times, b
 ut obviously prevents locking on all resources of the web application. This 
also allows more flexible management operations as none of the web application 
resources will be locked, even while the web application is running (as a 
special note, when making changes JSPs without reloading the application, the 
changes has to be duplicated to the path where the web application resources 
have been copied in the temp folder). 

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ/Bugs/Memory" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/Bugs/Memory

--
  
   * You're out of memory. Simple as that - add more to your heap.
   * You're out of memory. You have code which is hanging onto object 
references and the garbage collector can't do its job. Get a profiler to debug 
this one.
-  * You ran out of file descriptors. If you are on a *nix system, it has been 
observed that an OutOfMemoryError can be thrown if you run out of file 
descriptors. This can occur if your threshold is too low. The ulimit program 
can help you out here. You also may need to account for socket connections too 
when thinking about these thresholds. Google is your friend for getting more 
information about this topic.
+  * You ran out of file descriptors. If you are on a *nix system, it has been 
observed that an OutOfMemoryError can be thrown if you run out of file 
descriptors. This can occur if your threshold is too low. The {{{ulimit}}} 
program can help you out here. You also may need to account for socket 
connections too when thinking about these thresholds. Google is your friend for 
getting more information about this topic.
   * You have too many threads running. Some OS's have a limit to the number of 
threads which may be executed by a single process. (Which is what the JVM is.) 
Refer to your OS docs for more information on how to raise this threshold.
   * If you have a lot of servlets or JSP's, you may need to increase your 
permanent generation. By default, it is 64MB. Doubling it to be 
{{{-XX:MaxPermSize=256m}}} might be a good start.
   * Your OS limits the amount of memory your process may take. OK, this one is 
grasping at straws.
   * The JVM has a bug. This has been known to happen with JVM1.2.? and using 
EJB's with another servlet engine.
   * Not actually a reason - but on your particular platform, look at the 
{{{java -X}}} options. They may be VERY helpful.
-  * Your classloaders are not being garbage collected.
+  * 
[http://opensource2.atlassian.com/confluence/spring/pages/viewpage.action?pageId=2669
 Your classloaders are not being garbage collected].
  
  '''How much memory is Tomcat/webapp/??? using?'''
  
-  * To find out how much memory Tomcat is using, you might be able to use the 
Runtime class provided by the JDK.
+  * To find out how much memory Tomcat is using, you might be able to use the 
{{{Runtime}}} class provided by the JDK.
   * You can't find out how much memory a webapp is using. The JVM doesn't give 
us these detail.
   * You can't find out how much memory a ??? is using. The JVM doesn't give us 
these detail.
   * That being said, a memory profiling tool might prove the above statements 
wrong - but you probably don't want to use them in a production environment.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ/Bugs/Memory" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/Bugs/Memory

New page:
== Preface ==

This page discusses various memory issues. In a nutshell - if your computer has 
less than 128MB of ram - you will probably have trouble. Anyhow, also read the 
following threads for other memory related issues:

 * [http://marc.theaimsgroup.com/?t=10438897306&r=1&w=2 
java.lang.OutOfMemoryError during deploy]
 * [http://marc.theaimsgroup.com/?t=10437834777&r=1&w=2 Memory requirements]
 * [http://marc.theaimsgroup.com/?t=10433306644&r=1&w=2 Memory Mgmt Tomcat]
 * [http://marc.theaimsgroup.com/?t=10301137976&r=1&w=2 Tomcat Out of 
memory]
 * [http://marc.theaimsgroup.com/?t=10451996172&r=1&w=2 Tracking memory 
usage over time]

Also look at [http://java.quest.com/jprobe/jprobe.shtml JProbe], or 
[http://www.borland.com/optimizeit/ OptimizeIt], or other profiling tools. Lots 
of people recommend these tools. This is not an endorsement for them, I just 
notice other people like them.

=== JSP Recompilation ===
If your application uses JSPs which are frequently recompiled at runtime, e.g. 
headers that change value hourly, please make sure to read the JSP HOW-TO page 
and RELEASE NOTES documents. You may wish to tune the JSP compiler 
configuration to prevent memory leaks. Of course, these are documents you 
should have read by now anyways..

== Questions ==

'''How do I adjust memory settings?'''

First look at {{{java -X}}} to determine what parameters to set. Then you can 
set them via the environment variable {{{JAVA_OPTS}}}. Read the files 
catalina.bat or catalina.sh for more information on JAVA_OPTS.

'''Why do I get OutOfMemoryError errors?'''

Many reasons.

 * You're out of memory. Simple as that - add more to your heap.
 * You're out of memory. You have code which is hanging onto object references 
and the garbage collector can't do its job. Get a profiler to debug this one.
 * You ran out of file descriptors. If you are on a *nix system, it has been 
observed that an OutOfMemoryError can be thrown if you run out of file 
descriptors. This can occur if your threshold is too low. The ulimit program 
can help you out here. You also may need to account for socket connections too 
when thinking about these thresholds. Google is your friend for getting more 
information about this topic.
 * You have too many threads running. Some OS's have a limit to the number of 
threads which may be executed by a single process. (Which is what the JVM is.) 
Refer to your OS docs for more information on how to raise this threshold.
 * If you have a lot of servlets or JSP's, you may need to increase your 
permanent generation. By default, it is 64MB. Doubling it to be 
{{{-XX:MaxPermSize=256m}}} might be a good start.
 * Your OS limits the amount of memory your process may take. OK, this one is 
grasping at straws.
 * The JVM has a bug. This has been known to happen with JVM1.2.? and using 
EJB's with another servlet engine.
 * Not actually a reason - but on your particular platform, look at the {{{java 
-X}}} options. They may be VERY helpful.
 * Your classloaders are not being garbage collected.

'''How much memory is Tomcat/webapp/??? using?'''

 * To find out how much memory Tomcat is using, you might be able to use the 
Runtime class provided by the JDK.
 * You can't find out how much memory a webapp is using. The JVM doesn't give 
us these detail.
 * You can't find out how much memory a ??? is using. The JVM doesn't give us 
these detail.
 * That being said, a memory profiling tool might prove the above statements 
wrong - but you probably don't want to use them in a production environment.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ

--
- == Preface ==
- 
  Welcome to the Tomcat FAQ. In conjunction with this FAQ we strongly emphasis 
doing the following:
  
  * Read the docs. Most answers are already documented.
@@ -31, +29 @@

  * [http://wiki.apache.org/tomcat/Security Security] - Common security 
issues.
  * [http://wiki.apache.org/tomcat/TomcatVersions Version] - About the 
different tomcat versions.
  * [http://wiki.apache.org/tomcat/Tomcat_User Tomcat User] - More 
information about the tomcat-user list.
- * Windows - Common Windows questions.
+ * [http://wiki.apache.org/tomcat/FAQ/Windows Windows] - Common Windows 
questions.
  

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ/FDA Validation" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/FDA_Validation

New page:
== FDA (21 CFR Part 11) Validation ==

=== Preface ===
This page discusses using Tomcat in an [http://www.fda.gov/ FDA] 
[http://www.fda.gov/cdrh/comp/guidance/938.html validated] environment, i.e. 
one where [http://www.21cfrpart11.com/ 21 CFR Part 11] regulations apply.

Please note that although this page mentions specific companies, we do not 
explicitly endorse or sell anyone's services. Tomcat and Apache are 
not-for-profit organizations. This page is also far from a complete listing of 
vendors and support options. It is meant as a demonstration showing that these 
options do exist and that running Tomcat in a validated environment is both 
feasible and reasonable.

=== Questions ===
'''Can Tomcat be used in a validated environment?'''

Yes. There's nothing in Tomcat's design or implementation that prevent it from 
being used in a validated environment. The same validation procedures and 
guidelines that apply to most software packages apply to Tomcat as well. Being 
an open-source application does not preclude Tomcat validation. In fact, it 
helps in at least one key aspect: the source code itself can be audited, as can 
the commit and change logs for the software.

'''Has anyone actually done it?'''

Yes. As shown in 
[http://marc.theaimsgroup.com/?l=tomcat-user&m=109836874319797&w=2 this user 
mailing list archive], Merck and other large companies are using Tomcat in a 
validated environment. In addition, there is at least one application provider 
([http://www.interchangedigital.com/ Interchange Digital]) whose application 
runs on Tomcat that has deployed said package in numerous pharma data centers.

'''Is Tomcat itself validated?'''

Yes. Tomcat itself is validated to the extent it can be. Tomcat implements two 
Java Specifications: the [http://java.sun.com/products/servlet Servlet 
Specification] and the [http://java.sun.com/products/jsp Java Server Pages 
(JSP) Specification]. Each of these specifications has a Technology 
Compatbility Kit (TCK), which is a collection of tests to certify a given 
product meets the Specification fully and accurately.

The [http://www.apache.org/ Apache Software Foundation] is licensed to run 
these TCKs. They are run against every single Tomcat release. '''No Tomcat 
release is pronounced stable unless it has passed both of these TCKs with 100% 
compliance'''. Therefore, every stable Tomcat release is validated to the 
extent of Tomcat's core functionality.

Furthermore, any company of individual may [http://java.sun.com/scholarship/ 
apply] to obtains and use these TCKs themselves. That way, you can re-validated 
Tomcat including any custom patches you have implemented.

However, we cannot validate your application's use of Tomcat. You're on your 
own there.

'''What kind of support is there around validating Tomcat?'''

Several kinds. They include:

 * There are numerous smaller [http://jakarta.apache.org/site/vendors.html 
vendors] and several large ones, including IBM, HP, Sun, and Novell, who offer 
Tomcat consulting and support services, including application auditing, 
environment assessments, and risk analysis.
 * There are numerous vendors in addition to the above consultants, like 
[http://www.covalent.net/ Covalent] and 
[http://www.jboss.org/services/prodsupport JBoss], who offer 24/7/365 
enterprise-level support for Tomcat.
 * The Tomcat [http://tomcat.apache.org/lists.html mailing lists] are extremely 
active and contain members of many of the above organizations, including 
contractors available for hire.

'''How do I know I have a validated release? How do I know no one has tampered 
with the release package?'''

All Tomcat releases are signed using the Release Manager's 
[http://www.pgpi.org/doc/pgpintro PGP] key. The key is also available in the 
KEYS file that ships with every Tomcat release. The same KEYS file is also 
available in the Tomcat CVS repository 
([http://www.apache.org/dist/tomcat/tomcat-5/KEYS here]). The PGP signatures 
are available on all the Tomcat download pages, and can (and should!) be used 
to verify the release really is the signed distribution.

As for tampering: every Tomcat release is also digested using the MD5 algorithm 
as specified in [http://www.faqs.org/rfcs/rfc1321.html RFC1321]. The MD5 digest 
is included in all the download pages. Users run MD5 on their local machine to 
verify that the digest of what they downlaoded is the same as that published in 
the Apache download pages. That way, users are assured the distribution has not 
been modified since the Release Manager signed it.

'''What about security? I'm concerned about attacks.'''

There's no need to be. See the [http://wiki.apache.org/tomcat/FAQ/Security 
security page] of this FAQ for more information.

-

[Tomcat Wiki] Update of "FAQ" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ

--
  * [http://wiki.apache.org/tomcat/FAQ/Database Database] - Getting tomcat 
to talk to a database.
  * [http://wiki.apache.org/tomcat/FAQ/Deployment Deployment] - Questions 
related to web application deployment.
  * [http://wiki.apache.org/tomcat/HowTo How To] - Miscellaneous common how 
to's.
- * FDA Validation - Questions related to running Tomcat in an FDA 
validated environment.
+ * [http://wiki.apache.org/tomcat/FAQ/FDA_Validation FDA Validation] - 
Questions related to running Tomcat in an FDA validated environment.
  * [http://wiki.apache.org/tomcat/FAQ/Linux_Unix Linux / Unix] - Common 
questions for Linux / Unix related platforms.
  * [http://wiki.apache.org/tomcat/FAQ/Other_Operating_Systems Other 
Operating Systems] - Information about scripts and support for other operating 
systems.
  * Logging - Common questions related to logging in Tomcat.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

DO NOT REPLY [Bug 43929] - JSP POST SSI, JSP sub request does not complete

[bugzilla]

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=43929


[EMAIL PROTECTED] changed:

   What|Removed |Added

 Status|REOPENED|RESOLVED
 Resolution||WORKSFORME




--- Additional Comments From [EMAIL PROTECTED]  2007-11-28 11:07 ---
Your production issue will almost certainly be because you are using an old
5.0.x version that doesn't include the necessary fix on the Java side of the
connector.

As for you win32 system, I can't produce this on a clean install. Again, the
user list is the place to be looking for help debugging your win32 
configuration.

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug, or are watching the assignee.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ

--
  * [http://wiki.apache.org/tomcat/FAQ/FDA_Validation FDA Validation] - 
Questions related to running Tomcat in an FDA validated environment.
  * [http://wiki.apache.org/tomcat/FAQ/Linux_Unix Linux / Unix] - Common 
questions for Linux / Unix related platforms.
  * [http://wiki.apache.org/tomcat/FAQ/Other_Operating_Systems Other 
Operating Systems] - Information about scripts and support for other operating 
systems.
- * [http://wiki.apache.org/tomcat/FAQ/Performance_and_Monitoring Logging] 
- Common questions related to logging in Tomcat.
+ * [http://wiki.apache.org/tomcat/FAQ/Logging Logging] - Common questions 
related to logging in Tomcat.
  * [http://wiki.apache.org/tomcat/FAQ/Memory Memory] - Common memory 
related questions.
  * Meta - About Tomcat and this FAQ.
  * Miscellaneous - Miscellaneous questions that weren't categorized.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ

--
  * [http://wiki.apache.org/tomcat/FAQ/Linux_Unix Linux / Unix] - Common 
questions for Linux / Unix related platforms.
  * [http://wiki.apache.org/tomcat/FAQ/Other_Operating_Systems Other 
Operating Systems] - Information about scripts and support for other operating 
systems.
  * Logging - Common questions related to logging in Tomcat.
- * [[http://wiki.apache.org/tomcat/FAQ/Memory Memory] - Common memory 
related questions.
+ * [http://wiki.apache.org/tomcat/FAQ/Memory Memory] - Common memory 
related questions.
  * Meta - About Tomcat and this FAQ.
  * Miscellaneous - Miscellaneous questions that weren't categorized.
- * Monitoring & Performance - Monitoring and Performance questions.
+ * [http://wiki.apache.org/tomcat/FAQ/Performance_and_Monitoring 
Performance & Monitoring] - Performance & Monitoring questions.
  * Other Resources - A lot of links to tomcat related documentation and 
experiences.
  * [http://wiki.apache.org/tomcat/Security Security] - Common security 
issues.
  * [http://wiki.apache.org/tomcat/TomcatVersions Version] - About the 
different tomcat versions.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ/Performance and Monitoring" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/Performance_and_Monitoring

New page:
== Preface ==
This is about Tomcat performance.

 * [thread] [http://marc.theaimsgroup.com/?t=10445538312&r=1&w=2 Tomcat 
Performance Concerns]
 * [thread] [http://marc.theaimsgroup.com/?t=10359888531&r=1&w=2 How do I 
increase performance on Tomcat?]

Other (non-exhaustive) notes:

 * Stress test your webapp. You can do this via 
[http://jakarta.apache.org/jmeter/ JMeter], [http://www.joedog.org/siege/ 
siege], [http://httpd.apache.org/test/flood/ flood], and other tools. Google is 
your friend.
 * Tweak your UNIX box! Look at ulimit and kernel parameters.
 * Bad design will hurt performance.
 * Look at [http://java.quest.com/jprobe/jprobe.shtml JProbe], or 
[http://www.borland.com/optimizeit/ OptimizeIt], or other profiling tools. Lots 
of people recommend these tools. This is not an endorsement for them, I just 
notice other people like them.

== Questions ==

'''Is Tomcat faster than serving static HTML pages than apache?'''

Yes depending on how you tune it. And NO depending on how you tune it. Anything 
less starts a religious war. We recommend performing your own benchmarks and 
[http://marc.theaimsgroup.com/?l=tomcat-user&m=106036177509367&w=2 see for 
yourself].

'''Is there an application-specific comparison between Tomcat and Resin or 
other containers?'''

[http://raibledesigns.com/page/rd?anchor=resin_slower_than_tomcat_fails Here's] 
one comparing recent versions of Resin and Tomcat running 
[http://raibledesigns.com/wiki/Wiki.jsp?page=AppFuse AppFuse].

'''Is there a comprehensive, up-to-date, detailed benchmark comparing various 
servlet containers, including Tomcat?'''

Yes. Here's the most comprehensive and objective one we've found to date: 
[http://www.webperformanceinc.com/library/ServletReport/ Web Performance, 
Inc.'s comparison].

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ/Logging" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/Logging

New page:
== Preface ==
This FAQ section provides help with logging-related issues.

As you read these questions, please keep in mind that Tomcat's internal logging 
is separate from your own webapp's logging. You would typically be concerned 
only with your own webapp's logging. You would modify Tomcat's internal logging 
settings if you are debugging a possible issue or running into other problems. 
It is anticipated that Tomcat's out-of-the-box logging configuration will be 
fine for the vast majority of users and environments.

== Questions ==

'''Does Tomcat have built-in logging capabilities, and if so how do I use 
them?'''

The Servlet Specification requires Servlet Containers like Tomcat to provide at 
least a rudimentary implementation of the ServletContext#log method. Tomcat 
provides a much richer implementation than required by the Spec, as follows:

 * Prior to Tomcat 5.5, Tomcat provided a Logger element that you could 
configure and extend according to your needs. If you are using a Tomcat version 
previous to Tomcat 5.5, make sure to read the 
[http://tomcat.apache.org/tomcat-5.0-doc/config/logger.html Logger 
configuration reference].
 * Starting with Tomcat 5.5, Logger was removed and 
[http://jakarta.apache.org/commons/logging Jakarta Commons-Logging] {{{Log}}} 
is used everywhere in Tomcat. Read the Commons-Logging documentation if you'd 
like to know how to better use and configure Tomcat's internal logging.

In addition, Tomcat does not swallow the System.out and System.err JVM output 
streams. You may use these streams for elementary logging if you wish, but a 
more robust approach such as commons-logging or 
[http://logging.apache.org/log4j Log4J] is recommended for production 
applications.

'''How do I configure commons-logging for use with Tomcat?'''

You need to specify a commons-logging configuration file and, if you wish, a 
logging implementation that supports commons-logging. JDK 1.4 (and later) 
java.util.Logging and Log4j are the two most commonly used logging toolkits for 
Tomcat. If you supply an external logging toolkit such as Log4J, it needs to be 
located in the $CATALINA_HOME/common/lib directory (for Tomcat 5.0 and earlier) 
or added to the bootstrap classpath by using the scripts in $CATALINA_HOME/bin 
(this is required for Tomcat 5.5 and later, which uses commons-logging while 
bootstrapping, and optional for Tomcat 5.0 and earlier).

For more detailed instructions, see these mailing list discussions:

 * [http://marc.theaimsgroup.com/?l=tomcat-user&m=106623436423859&w=2 A log4j 
example]
 * [http://marc.theaimsgroup.com/?l=tomcat-user&m=108330970225012&w=2 Logging 
Configuration]
 * [http://marc.theaimsgroup.com/?l=tomcat-user&m=108578233003073&w=2 Example 
with JSVC and running on port 80.]
 * [http://mail-archives.apache.org/eyebrowse/[EMAIL 
PROTECTED]&by=thread&from=877025 Need for it to be in bootstrap classpath.]

'''How should I log in my own webapps?'''

While you can use System.out and System.err to log, we strongly recommend using 
a toolkit like Log4J or JDK 1.4's java.util.logging package. With these 
toolkits, you have significantly more functionality (for example, sending 
emails, logging to a database, controlling at runtime the logging level of 
different classes, inspecting the logs with a graphical viewer, etc.) than with 
Tomcat's built-in default logging configuration.

We also recommend that you separate your logging from Tomcat's internal 
logging. That means you should bundle your logging toolkit with your webapp. If 
you're using Log4J, for example, place the Log4J jar in the WEB-INF/lib 
directory of your webapp and the Log4J configuration file in the 
WEB-INF/classes directory of your webapp. This way different web applications 
can have different logging configurations and you don't need to worry about 
them interfering with each other.

'''Where does System.out go? How do I rotate catalina.out?'''

System.out and System.err both print to catalina.out. But you can suppress this 
via the swallowOutput property and sent to different log files.
catalina.out does not rotate. But it should not be an issue because nothing 
should be printing to standard output since you are using a logging package, 
right? [http://marc.theaimsgroup.com/?t=10554447261&r=1&w=2a thread about 
rotation of catalina.out]

'''Where are the logs when running Tomcat as a Windows service?'''

See these mailing list archive threads:

 * [http://mail-archives.apache.org/eyebrowse/[EMAIL 
PROTECTED]&by=thread&from=863525Where are the Tomcat logs when running as a 
Windows service?]

'''Are there external documents, tutorials, or references about logging in 
Tomcat?'''

Yes, there are. You can Google for more, but some such references are:

 * [http://minaret

[Tomcat Wiki] Update of "FAQ" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ

--
  * [http://wiki.apache.org/tomcat/FAQ/FDA_Validation FDA Validation] - 
Questions related to running Tomcat in an FDA validated environment.
  * [http://wiki.apache.org/tomcat/FAQ/Linux_Unix Linux / Unix] - Common 
questions for Linux / Unix related platforms.
  * [http://wiki.apache.org/tomcat/FAQ/Other_Operating_Systems Other 
Operating Systems] - Information about scripts and support for other operating 
systems.
- * Logging - Common questions related to logging in Tomcat.
+ * [http://wiki.apache.org/tomcat/FAQ/Performance_and_Monitoring Logging] 
- Common questions related to logging in Tomcat.
  * [http://wiki.apache.org/tomcat/FAQ/Memory Memory] - Common memory 
related questions.
  * Meta - About Tomcat and this FAQ.
  * Miscellaneous - Miscellaneous questions that weren't categorized.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ

--
  * Meta - About Tomcat and this FAQ.
  * Miscellaneous - Miscellaneous questions that weren't categorized.
  * [http://wiki.apache.org/tomcat/FAQ/Performance_and_Monitoring 
Performance & Monitoring] - Performance & Monitoring questions.
- * Other Resources - A lot of links to tomcat related documentation and 
experiences.
+ * [http://wiki.apache.org/tomcat/UsefulLinks Other Resources] - A lot of 
links to tomcat related documentation and experiences.
  * [http://wiki.apache.org/tomcat/Security Security] - Common security 
issues.
  * [http://wiki.apache.org/tomcat/TomcatVersions Version] - About the 
different tomcat versions.
  * [http://wiki.apache.org/tomcat/Tomcat_User Tomcat User] - More 
information about the tomcat-user list.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ/About" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/About

New page:
== Prefce ==
This FAQ is maintained by the Tomcat Committers. The content for this FAQ is 
usually discovered by lurking in the tomcat-user list.
If you wish to make a comment about the FAQ, make the comment on the 
tomcat-user list. Do not e-mail any of the committers directly and do not 
e-mail the tomcat-dev list. (Unless other people liked your suggestion and it 
was accidently missed by the committers who read the tomcat-user list) Emailing 
the tomcat-user list will allow a larger audience to immediately learn and 
critique your findings.

== Questions ==

'''How did Tomcat get its name?'''

He (James Duncan Davidson) came up with "Tomcat" since the animal represented 
something that could take care of itself and fend for itself. That's how he 
came up with the name. [ Source ]

'''How do I contribute a question?'''

 * Make sure the question has been asked more than once
 * Send an e-mail to the tomcat-user list
 * Make sure the subject has [FAQ] in it
 * Place the e-mail in a question and answer format like this.
 * Minimize the use of html. Content is more important, the person updating the 
FAQ will make the wonderful stylistic choices.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ

--
  * Miscellaneous - Miscellaneous questions that weren't categorized.
  * [http://wiki.apache.org/tomcat/FAQ/Performance_and_Monitoring 
Performance & Monitoring] - Performance & Monitoring questions.
  * [http://wiki.apache.org/tomcat/UsefulLinks Other Resources] - A lot of 
links to tomcat related documentation and experiences.
- * [http://wiki.apache.org/tomcat/Security Security] - Common security 
issues.
+ * [http://wiki.apache.org/tomcat/FAQ/Security Security] - Common security 
issues.
  * [http://wiki.apache.org/tomcat/TomcatVersions Version] - About the 
different tomcat versions.
- * [http://wiki.apache.org/tomcat/Tomcat_User Tomcat User] - More 
information about the tomcat-user list.
+ * [http://wiki.apache.org/tomcat/FAQ/Tomcat_User Tomcat User] - More 
information about the tomcat-user list.
  * [http://wiki.apache.org/tomcat/FAQ/Windows Windows] - Common Windows 
questions.
  

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ/Linux Unix" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/Linux_Unix

--
+ ## page was renamed from FAQ/Unix Linux
  == Preface ==
  
  == Questions ==

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ/Miscellaneous" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/Miscellaneous

--
  
  Using /servlet/ to map servlets is evil, absolutely evil. Even more evil than 
[http://www.eviloverlord.com/lists/overlord.html this] . That being said, here 
are some threads that may answer this:
  
-  * [http://marc.theaimsgroup.com/?l=tomcat-user&m=103417249925541&w=2 
[SECURITY] Apache Tomcat 4.x JSP source disclosure] vulnerability
+  * [http://marc.theaimsgroup.com/?l=tomcat-user&m=103417249925541&w=2 
(SECURITY) Apache Tomcat 4.x JSP source disclosure] vulnerability
   * [http://marc.theaimsgroup.com/?t=10394533713&r=1&w=2 Cannot Run 
Servlets, only JSP's, Part II]
   * [http://marc.theaimsgroup.com/?t=10432685411&r=1&w=2 Tomcat 
configuration problem: JSPs work, servlets don]
  

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ

--
  * [http://wiki.apache.org/tomcat/FAQ/Logging Logging] - Common questions 
related to logging in Tomcat.
  * [http://wiki.apache.org/tomcat/FAQ/Memory Memory] - Common memory 
related questions.
  * [http://wiki.apache.org/tomcat/FAQ/About Meta] - About Tomcat and this 
FAQ.
- * Miscellaneous - Miscellaneous questions that weren't categorized.
+ * [http://wiki.apache.org/tomcat/FAQ/Miscellaneous Miscellaneous] - 
Miscellaneous questions that weren't categorized.
  * [http://wiki.apache.org/tomcat/FAQ/Performance_and_Monitoring 
Performance & Monitoring] - Performance & Monitoring questions.
  * [http://wiki.apache.org/tomcat/UsefulLinks Other Resources] - A lot of 
links to tomcat related documentation and experiences.
  * [http://wiki.apache.org/tomcat/FAQ/Security Security] - Common security 
issues.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ/Miscellaneous" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/Miscellaneous

New page:
== Preface ==
This section contains various miscellaneous questions that are asked frequently 
enough to be listed here.

== Questions ==

'''I'm having a problem with character encoding in tomcat 5'''

In Tomcat 5 - there have been issues with respect to character encoding. ( 
Usually of the the form "request.setCharacterEncoding(String) doesn't work" ) 
Odds are, its not a bug. Before filing a bug report, see these bug reports as 
well as any bug reports linked to these bug reports: 
[http://issues.apache.org/bugzilla/show_bug.cgi?id=23929 23929], 
[http://issues.apache.org/bugzilla/show_bug.cgi?id=25360 25360], 
[http://issues.apache.org/bugzilla/show_bug.cgi?id=25231 25231], 
[http://issues.apache.org/bugzilla/show_bug.cgi?id=25235 25235], 
[http://issues.apache.org/bugzilla/show_bug.cgi?id=22666 22666], 
[http://issues.apache.org/bugzilla/show_bug.cgi?id=24557 24557], 
[http://issues.apache.org/bugzilla/show_bug.cgi?id=24345 24345], 
[http://issues.apache.org/bugzilla/show_bug.cgi?id=25848 25848]

'''I have a problem with webapp reloading in tomcat 4.1.27.'''

Update to a later tomcat version, preferably the latest stable one. If you must 
stay with 4.1.27, get this hotfix: 
[http://issues.apache.org/bugzilla/show_bug.cgi?id=22096 Bugzilla 22096].

'''I am unable to compile my JSP!'''

Are you seeing this?

{{{  org.apache.jasper.JasperException: Unable to compile
  class for JSP

  An error occurred at line: -1 in the jsp file: null

  Generated servlet error:
  [javac] Since fork is true, ignoring compiler
  setting.
  [javac] Compiling 1 source file
 [javac] Since fork is true, ignoring compiler
  setting. }}}

If so, here is some solutions:

 * [http://marc.theaimsgroup.com/?l=tomcat-user&m=104949554010352&w=2 
Environment variable issue]
 * [http://issues.apache.org/bugzilla/show_bug.cgi?id=16688 Environment issue] 
or [http://issues.apache.org/bugzilla/show_bug.cgi?id=20527 Ant issue]
 * Others have had success by added JAVA_HOME/bin to their PATH. 
[http://marc.theaimsgroup.com/?l=tomcat-user&m=105525594928279&w=2 1] ... 
[http://marc.theaimsgroup.com/?l=tomcat-user&m=105526353505541&w=2 2] and make 
sure you are using the full JDK and not the JRE.

In the case of the Environment issues, it is typical that on Windows, the 
startup scripts work fine and the service does not. The service uses registry 
values to look for java and other "stuff". To save yourself some trouble, see 
if the [http://web.bvu.edu/staff/david/tcservcfg/ NT Service Config Utility] is 
helpful.

'''I can't get servlets to work under /servlet/*!'''

Using /servlet/ to map servlets is evil, absolutely evil. Even more evil than 
[http://www.eviloverlord.com/lists/overlord.html this] . That being said, here 
are some threads that may answer this:

 * [http://marc.theaimsgroup.com/?l=tomcat-user&m=103417249925541&w=2 
[SECURITY] Apache Tomcat 4.x JSP source disclosure] vulnerability
 * [http://marc.theaimsgroup.com/?t=10394533713&r=1&w=2 Cannot Run 
Servlets, only JSP's, Part II]
 * [http://marc.theaimsgroup.com/?t=10432685411&r=1&w=2 Tomcat 
configuration problem: JSPs work, servlets don]

'''Why is the invoker evil?'''

This is opinions of the writer (YMMV)
Quickie about the invoker: The invoker is a dynamic servlet which allows 
run-time loading of other servlets based on class name. This servlet is the one 
that allows http://localhost/servlet/com.foo.MyClass?more=cowbell, where 
com.foo.MyClass is some class which can be loaded as a servlet but was never 
explicitly declared in a config file.

Evil because:

 * Security risk ... see links above
 * Configuration hiding - There is NO way to determine which servlets are used 
vs which are not used. In web.xml, every servlet is declared and mapped. In 
that one file you instantly have a road map to how the webapp works.
 * Back doors. Servlets which '''are''' mapped can be alternately called via 
the invoker by class name. Since the URL is different, all security constraints 
might be ignored since the URL pattern is VERY different.
 * Back doors. Bad programmers make it easier to do bad things.
 * Back doors. It may be common to use common 3rd party jars in a shared area. 
If that shared jar has servlets in them and that servlet has a hole in it, bad 
things happen.
 * Configuration hiding - it's important enough to say twice. Explicit 
declaration while a PITA, will be more helpful in the maintenance scheme of 
your webapp.

For another explanation of the invoker servlet, why it's evil, and what to do 
about it, see [http://test.javaranch.com/wiki/view?InvokerServlet JavaRanch 
FAQ].

'''How to I get Tomcat's version number?'''

javax.servlet.ServletContext.getServerInfo();

Starting with tom

[Tomcat Wiki] Update of "FAQ/About" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/About

--
- == Prefce ==
+ == Preface ==
  This FAQ is maintained by the Tomcat Committers. The content for this FAQ is 
usually discovered by lurking in the tomcat-user list.
  If you wish to make a comment about the FAQ, make the comment on the 
tomcat-user list. Do not e-mail any of the committers directly and do not 
e-mail the tomcat-dev list. (Unless other people liked your suggestion and it 
was accidently missed by the committers who read the tomcat-user list) Emailing 
the tomcat-user list will allow a larger audience to immediately learn and 
critique your findings.
  

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ

--
  * [http://wiki.apache.org/tomcat/FAQ/Other_Operating_Systems Other 
Operating Systems] - Information about scripts and support for other operating 
systems.
  * [http://wiki.apache.org/tomcat/FAQ/Logging Logging] - Common questions 
related to logging in Tomcat.
  * [http://wiki.apache.org/tomcat/FAQ/Memory Memory] - Common memory 
related questions.
- * Meta - About Tomcat and this FAQ.
+ * [http://wiki.apache.org/tomcat/FAQ/About Meta] - About Tomcat and this 
FAQ.
  * Miscellaneous - Miscellaneous questions that weren't categorized.
  * [http://wiki.apache.org/tomcat/FAQ/Performance_and_Monitoring 
Performance & Monitoring] - Performance & Monitoring questions.
  * [http://wiki.apache.org/tomcat/UsefulLinks Other Resources] - A lot of 
links to tomcat related documentation and experiences.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Google Highly Open Participation Contest - Issue 20 (Move the Tomcat FAQ to the Tomcat Wiki)

[Gianluca Varisco]

Hi guys,

Just to inform all of you that the first step of the migration has
been completed: http://wiki.apache.org/tomcat/FAQ

For more information about the Status of this Issue, see:
http://code.google.com/p/google-highly-open-participation-asf/issues/detail?id=20

Best Regards

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ/Logging" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/Logging

--
  
  '''Does Tomcat have built-in logging capabilities, and if so how do I use 
them?'''
  
- The Servlet Specification requires Servlet Containers like Tomcat to provide 
at least a rudimentary implementation of the ServletContext#log method. Tomcat 
provides a much richer implementation than required by the Spec, as follows:
+ The Servlet Specification requires Servlet Containers like Tomcat to provide 
at least a rudimentary implementation of the {{{ServletContext#log}}} method. 
Tomcat provides a much richer implementation than required by the Spec, as 
follows:
  
   * Prior to Tomcat 5.5, Tomcat provided a Logger element that you could 
configure and extend according to your needs. If you are using a Tomcat version 
previous to Tomcat 5.5, make sure to read the 
[http://tomcat.apache.org/tomcat-5.0-doc/config/logger.html Logger 
configuration reference].
   * Starting with Tomcat 5.5, Logger was removed and 
[http://jakarta.apache.org/commons/logging Jakarta Commons-Logging] {{{Log}}} 
is used everywhere in Tomcat. Read the Commons-Logging documentation if you'd 
like to know how to better use and configure Tomcat's internal logging.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ/Memory" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/Memory

New page:
== Preface ==

This page discusses various memory issues. In a nutshell - if your computer has 
less than 128MB of ram - you will probably have trouble. Anyhow, also read the 
following threads for other memory related issues:

 * [http://marc.theaimsgroup.com/?t=10438897306&r=1&w=2 
java.lang.OutOfMemoryError during deploy]
 * [http://marc.theaimsgroup.com/?t=10437834777&r=1&w=2 Memory requirements]
 * [http://marc.theaimsgroup.com/?t=10433306644&r=1&w=2 Memory Mgmt Tomcat]
 * [http://marc.theaimsgroup.com/?t=10301137976&r=1&w=2 Tomcat Out of 
memory]
 * [http://marc.theaimsgroup.com/?t=10451996172&r=1&w=2 Tracking memory 
usage over time]

Also look at [http://java.quest.com/jprobe/jprobe.shtml JProbe], or 
[http://www.borland.com/optimizeit/ OptimizeIt], or other profiling tools. Lots 
of people recommend these tools. This is not an endorsement for them, I just 
notice other people like them.

=== JSP Recompilation ===
If your application uses JSPs which are frequently recompiled at runtime, e.g. 
headers that change value hourly, please make sure to read the JSP HOW-TO page 
and RELEASE NOTES documents. You may wish to tune the JSP compiler 
configuration to prevent memory leaks. Of course, these are documents you 
should have read by now anyways..

== Questions ==

'''How do I adjust memory settings?'''

First look at {{{java -X}}} to determine what parameters to set. Then you can 
set them via the environment variable {{{JAVA_OPTS}}}. Read the files 
catalina.bat or catalina.sh for more information on JAVA_OPTS.

'''Why do I get {{{OutOfMemoryError}}} errors?'''

Many reasons.

 * You're out of memory. Simple as that - add more to your heap.
 * You're out of memory. You have code which is hanging onto object references 
and the garbage collector can't do its job. Get a profiler to debug this one.
 * You ran out of file descriptors. If you are on a *nix system, it has been 
observed that an {{{OutOfMemoryError}}} can be thrown if you run out of file 
descriptors. This can occur if your threshold is too low. The {{{ulimit}}} 
program can help you out here. You also may need to account for socket 
connections too when thinking about these thresholds. Google is your friend for 
getting more information about this topic.
 * You have too many threads running. Some OS's have a limit to the number of 
threads which may be executed by a single process. (Which is what the JVM is.) 
Refer to your OS docs for more information on how to raise this threshold.
 * If you have a lot of servlets or JSP's, you may need to increase your 
permanent generation. By default, it is 64MB. Doubling it to be 
{{{-XX:MaxPermSize=256m}}} might be a good start.
 * Your OS limits the amount of memory your process may take. OK, this one is 
grasping at straws.
 * The JVM has a bug. This has been known to happen with JVM1.2.? and using 
EJB's with another servlet engine.
 * Not actually a reason - but on your particular platform, look at the {{{java 
-X}}} options. They may be VERY helpful.
 * 
[http://opensource2.atlassian.com/confluence/spring/pages/viewpage.action?pageId=2669
 Your classloaders are not being garbage collected].

'''How much memory is Tomcat/webapp/??? using?'''

 * To find out how much memory Tomcat is using, you might be able to use the 
{{{Runtime}}} class provided by the JDK.
 * You can't find out how much memory a webapp is using. The JVM doesn't give 
us these detail.
 * You can't find out how much memory a ??? is using. The JVM doesn't give us 
these detail.
 * That being said, a memory profiling tool might prove the above statements 
wrong - but you probably don't want to use them in a production environment.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ/Deployment" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/Deployment

--
  
  ''' Why does the memory usage increase when I redeploy a web application?'''
  
- Because the Classloader (and the Class objects it loaded) cannot be recycled. 
They are stored in the permanent heap generation by the JVM, and when you 
redepoy a new class loader is created, which loads another copy of all these 
classes. This can cause OufOfMemoryErrors eventually. 
+ Because the Classloader (and the Class objects it loaded) cannot be recycled. 
They are stored in the permanent heap generation by the JVM, and when you 
redepoy a new class loader is created, which loads another copy of all these 
classes. This can cause {{{OufOfMemoryErrors}}} eventually. 
  

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ/Bugs/Memory" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/Bugs/Memory

The comment on the change is:
duplicated

--
- == Preface ==
+ deleted
  
- This page discusses various memory issues. In a nutshell - if your computer 
has less than 128MB of ram - you will probably have trouble. Anyhow, also read 
the following threads for other memory related issues:
- 
-  * [http://marc.theaimsgroup.com/?t=10438897306&r=1&w=2 
java.lang.OutOfMemoryError during deploy]
-  * [http://marc.theaimsgroup.com/?t=10437834777&r=1&w=2 Memory 
requirements]
-  * [http://marc.theaimsgroup.com/?t=10433306644&r=1&w=2 Memory Mgmt 
Tomcat]
-  * [http://marc.theaimsgroup.com/?t=10301137976&r=1&w=2 Tomcat Out of 
memory]
-  * [http://marc.theaimsgroup.com/?t=10451996172&r=1&w=2 Tracking memory 
usage over time]
- 
- Also look at [http://java.quest.com/jprobe/jprobe.shtml JProbe], or 
[http://www.borland.com/optimizeit/ OptimizeIt], or other profiling tools. Lots 
of people recommend these tools. This is not an endorsement for them, I just 
notice other people like them.
- 
- === JSP Recompilation ===
- If your application uses JSPs which are frequently recompiled at runtime, 
e.g. headers that change value hourly, please make sure to read the JSP HOW-TO 
page and RELEASE NOTES documents. You may wish to tune the JSP compiler 
configuration to prevent memory leaks. Of course, these are documents you 
should have read by now anyways..
- 
- == Questions ==
- 
- '''How do I adjust memory settings?'''
- 
- First look at {{{java -X}}} to determine what parameters to set. Then you can 
set them via the environment variable {{{JAVA_OPTS}}}. Read the files 
catalina.bat or catalina.sh for more information on JAVA_OPTS.
- 
- '''Why do I get {{{OutOfMemoryError}}} errors?'''
- 
- Many reasons.
- 
-  * You're out of memory. Simple as that - add more to your heap.
-  * You're out of memory. You have code which is hanging onto object 
references and the garbage collector can't do its job. Get a profiler to debug 
this one.
-  * You ran out of file descriptors. If you are on a *nix system, it has been 
observed that an {{{OutOfMemoryError}}} can be thrown if you run out of file 
descriptors. This can occur if your threshold is too low. The {{{ulimit}}} 
program can help you out here. You also may need to account for socket 
connections too when thinking about these thresholds. Google is your friend for 
getting more information about this topic.
-  * You have too many threads running. Some OS's have a limit to the number of 
threads which may be executed by a single process. (Which is what the JVM is.) 
Refer to your OS docs for more information on how to raise this threshold.
-  * If you have a lot of servlets or JSP's, you may need to increase your 
permanent generation. By default, it is 64MB. Doubling it to be 
{{{-XX:MaxPermSize=256m}}} might be a good start.
-  * Your OS limits the amount of memory your process may take. OK, this one is 
grasping at straws.
-  * The JVM has a bug. This has been known to happen with JVM1.2.? and using 
EJB's with another servlet engine.
-  * Not actually a reason - but on your particular platform, look at the 
{{{java -X}}} options. They may be VERY helpful.
-  * 
[http://opensource2.atlassian.com/confluence/spring/pages/viewpage.action?pageId=2669
 Your classloaders are not being garbage collected].
- 
- '''How much memory is Tomcat/webapp/??? using?'''
- 
-  * To find out how much memory Tomcat is using, you might be able to use the 
{{{Runtime}}} class provided by the JDK.
-  * You can't find out how much memory a webapp is using. The JVM doesn't give 
us these detail.
-  * You can't find out how much memory a ??? is using. The JVM doesn't give us 
these detail.
-  * That being said, a memory profiling tool might prove the above statements 
wrong - but you probably don't want to use them in a production environment.
- 

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ/Miscellaneous" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/Miscellaneous

The comment on the change is:
added code tags where needed

--
  
  '''How to I get Tomcat's version number?'''
  
- javax.servlet.ServletContext.getServerInfo();
+ {{{javax.servlet.ServletContext.getServerInfo();}}}
  
  Starting with tomcat 5.0.28 - there is now a version.sh (or version.bat) 
program in the bin directory. It will print the version number of tomcat to 
Standard output.
  
@@ -76, +76 @@

  How do I set system properties at startup?
  Set JAVA_OPTS to be something BEFORE calling startup.bat or before calling 
catalina.bat. (or you can edit those files, but it isn't advised)
  
- Example (windows): SET JAVA_OPTS='-DpropName=propValue'
+ Example (windows): {{{SET JAVA_OPTS='-DpropName=propValue' }}}
  
- Example (UNIX): export JAVA_OPTS='-DpropName=propValue'
+ Example (UNIX): {{{export JAVA_OPTS='-DpropName=propValue' }}}
  
  Windows service users - use [http://web.bvu.edu/staff/david/tcservcfg/ this]
  
@@ -139, +139 @@

  
  It is not broken, your tag probably is. Many bug reports have been filed 
about this. Here is the bug report with all the gory details.
  
- '''Why do I get java.lang.IllegalStateException?'''
+ '''Why do I get {{{java.lang.IllegalStateException}}} ?'''
  
- These are the most common reasons how you can get an 
java.lang.IllegalStateException:
+ These are the most common reasons how you can get an 
{{{java.lang.IllegalStateException}}}:
  
-  * Calling setBufferSize and content has been written.
+  * Calling {{{setBufferSize}}} and content has been written.
   * The response has been committed and you do any of the following:
-* Calling ServletResponse.reset() or ServletResponse.resetBuffer()
+* Calling {{{ServletResponse.reset()}}} or 
{{{ServletResponse.resetBuffer()}}}
-* Calling either HttpServletResponse.sendError() or 
HttpServletResponse.sendRedirect().
+* Calling either {{{HttpServletResponse.sendError()}}} or 
{{{HttpServletResponse.sendRedirect()}}}.
-* Calling RequestDispatcher.forward() which includes performing a 
jsp:forward
+* Calling {{{RequestDispatcher.forward()}}} which includes performing a 
jsp:forward
-* Calling RequestDispatcher.forward() which includes performing a 
jsp:forward
+* Calling {{{RequestDispatcher.forward()}}} which includes performing a 
jsp:forward
  
- Remember that if you call forward() or sendRedirect(), any following lines of 
code will still execute. For example:
+ Remember that if you call {{{forward()}}} or {{{sendRedirect()}}}, any 
following lines of code will still execute. For example:
  {{{   
  {
...
@@ -181, +181 @@

  
  ''' How do open a file for reading in my webapp?'''
  
- Use ServletContext.getResourceAsStream().
+ Use {{{ServletContext.getResourceAsStream()}}}
  
  '''Can I run tomcat with the JRE, or do I need the full JDK?'''
  
@@ -203, +203 @@

  
  See the [http://wiki.apache.org/tomcat/FAQ/Logging Logging] section of the 
FAQ.
  
- '''I'm getting java.lang.ThreadDeath exceptions when reloading my webapp.'''
+ '''I'm getting {{{java.lang.ThreadDeath}}} exceptions when reloading my 
webapp.'''
  
  See [http://issues.apache.org/bugzilla/show_bug.cgi?id=26372 Bugzilla 
discussion] of this.
  
@@ -217, +217 @@

  
   1. Download Tomcat's base and admin webapp distributions (binaries), unzip 
to a directory of your choice. We'll use c:\temp in this example.
   2. Edit c:\temp\server\webapps\admin\WEB-INF\web.xml to remove the 
JSPC-generated servlet mappings. These are marked in the web.xml file with 
comments indicating the beginning and end of the JSPC section. You can simply 
comment out all these servlet-mappping elements. Be careful not to comment out 
other servlet mappings such as the Struts dispatcher servlet.
-  3. Open c:\temp\server\webapps\admin\WEB-INF\lib\catalina-admin.jar with a 
zip file program like WinZip. Remove the files named *_jsp.class, as these are 
the compiled JSPs. Do not remove the other class files, the ones under the 
org/apache/ paths.
+  3. Open c:\temp\server\webapps\admin\WEB-INF\lib\catalina-admin.jar with a 
zip file program like {{{WinZip}}}. Remove the files named *_jsp.class, as 
these are the compiled JSPs. Do not remove the other class files, the ones 
under the org/apache/ paths.
   4. Download a Tomcat source distribution and unzip it to a directory of your 
choice, but not the same directory that you used above. We'll use c:\src in 
this example.
   5. Copy everything '''except''' the WEB-INF/lib directory from 
c:\src\container\webapps\admin to c:\temp\server\webapps\admin. Now you will 
have the uncompiled admin webapp JSPs.
   6. If you haven't already, define an admin user in 
%CATALINA_HOME%\conf\tomcat-users.xml.

Re: Google Highly Open Participation Contest - Issue 20 (Move the Tomcat FAQ to the Tomcat Wiki)

[Yoav Shapira]

On Nov 28, 2007 3:16 PM, Gianluca Varisco <[EMAIL PROTECTED]> wrote:
> Just to inform all of you that the first step of the migration has
> been completed: http://wiki.apache.org/tomcat/FAQ

Thank you very much Gianluca!  Great work so far.  And I know it will
look even  better when we start taking advantage of advanced wiki
syntax formatting like {code}...{code}.

Yoav

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ/Miscellaneous" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/Miscellaneous

--
  
  You'll need to tweak with server.xml and 
[http://marc.theaimsgroup.com/?l=tomcat-user&m=105159411609623&w=2 do this]. 
(Don't worry - its really easy!)
  
- '''How do I get UTF-8?
+ '''How do I get UTF-8?'''
  
  [http://marc.theaimsgroup.com/?t=1055242&r=1&w=2 This thread] should 
answer that.
  

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

DO NOT REPLY [Bug 43578] - Tomcat fails to start on linux if CATALINA_HOME contains a space

[bugzilla]

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=43578


[EMAIL PROTECTED] changed:

   What|Removed |Added

 CC||[EMAIL PROTECTED]




-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug, or are watching the assignee.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[Tomcat Wiki] Update of "FAQ/Security" by GianlucaVarisco

[Apache Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The following page has been changed by GianlucaVarisco:
http://wiki.apache.org/tomcat/FAQ/Security

The comment on the change is:
added code tags where needed

--
  
  ''' How do I restrict access by ip address or remote host?'''
  
- By using the RemoteHostValve or RemoteAddrValve. Warning, these valves rely 
on accurate incoming ip addresses or hostnames. So they can fall victim to 
spoofing! [http://tomcat.apache.org/tomcat-4.1-doc/config/valve.html Valve 
Reference Link]
+ By using the {{{RemoteHostValve}}} or {{{RemoteAddrValve}}}. Warning, these 
valves rely on accurate incoming ip addresses or hostnames. So they can fall 
victim to spoofing! [http://tomcat.apache.org/tomcat-4.1-doc/config/valve.html 
Valve Reference Link]
  
  '''How do I use jsvc/procrun to run Tomcat on port 80 securely?'''
  

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

DO NOT REPLY [Bug 43578] - Tomcat fails to start on linux if CATALINA_HOME contains a space

[bugzilla]

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=43578


[EMAIL PROTECTED] changed:

   What|Removed |Added

   Severity|normal  |regression




--- Additional Comments From [EMAIL PROTECTED]  2007-11-28 13:13 ---
Same here on OSX, with 5.5.25 and 5.5.20. This was definitely working with 
5.0.28.

This can not have been unnoticed for so long, right? What's going on? I'm sure 
it's been reported many 
times, but bugzilla being so user-friendly, I could hardly find anything...
Anyone knows if this was introduced in 5.5.2x or if it's there since 5.5.0 ?

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug, or are watching the assignee.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

DO NOT REPLY [Bug 43578] - Tomcat fails to start on linux if CATALINA_HOME contains a space

[bugzilla]

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=43578





--- Additional Comments From [EMAIL PROTECTED]  2007-11-28 13:16 ---
Note that the exception is slightly different is your path only has one space 
(I get exactly the same 
behaviour, i.e NCDFE on the second "word" if several spaces)

$ ./startup.sh && tail -f ../logs/catalina.outUsing CATALINA_BASE:   
/Applications/dev/test 
test2/apache-tomcat-5.5.25
Using CATALINA_HOME:   /Applications/dev/test test2/apache-tomcat-5.5.25
Using CATALINA_TMPDIR: /Applications/dev/test test2/apache-tomcat-5.5.25/temp
Using JRE_HOME:   
/System/Library/Frameworks/JavaVM.framework/Versions/1.5/Home
Exception in thread "main" java.lang.NoClassDefFoundError: test2/apache-tomcat-
5/5/25/conf/logging/properties
^C



-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug, or are watching the assignee.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Google Highly Open Participation Contest - Issue 20 (Move the Tomcat FAQ to the Tomcat Wiki)

[Gianluca Varisco]

2007/11/28, Yoav Shapira <[EMAIL PROTECTED]>:
> > Just to inform all of you that the first step of the migration has
> > been completed: http://wiki.apache.org/tomcat/FAQ
>
> Thank you very much Gianluca!  Great work so far.  And I know it will
> look even  better when we start taking advantage of advanced wiki
> syntax formatting like {code}...{code}.
>

Hi Yoav, it's a pleasure for me ;-)

I also added, where needed (methods, instructions, code examples)
{{{code}}} tag.

Best Regards,

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

DO NOT REPLY [Bug 42866] - Using a function via EL produces ClassNotFoundException

[bugzilla]

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=42866





--- Additional Comments From [EMAIL PROTECTED]  2007-11-28 13:20 ---
I am experiencing the same problem.  The original description is accurate in 
that it appears to be a 
classloader problem.  This problem only appears in the restore view phase when 
deserialization occurs, 
since this is the only time when the Function.m member can be null.  The web 
application class loader is 
the current thread context class loader, so the suggested change works well.

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug, or are watching the assignee.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

DO NOT REPLY [Bug 42866] - Using a function via EL produces ClassNotFoundException

[bugzilla]

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=42866





--- Additional Comments From [EMAIL PROTECTED]  2007-11-28 13:22 ---
BTW, this bug makes user-defined EL functions unusable unless the web app can 
bundle its own el 
implementation.  I haven't been able to get that to work on Tomcat 6.0.14.  I 
suggest that the priority of 
this fix gets raised.

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug, or are watching the assignee.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

DO NOT REPLY [Bug 42866] - Using a function via EL produces ClassNotFoundException

[bugzilla]

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=42866


[EMAIL PROTECTED] changed:

   What|Removed |Added

 CC||[EMAIL PROTECTED]
   ||.com




-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug, or are watching the assignee.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

DO NOT REPLY [Bug 42866] - Using a function via EL produces ClassNotFoundException

[bugzilla]

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=42866





--- Additional Comments From [EMAIL PROTECTED]  2007-11-28 13:31 ---
I've managed to workaround this issue by including the jasper-el.jar from the 
Tomcat distribution in the 
war file.

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug, or are watching the assignee.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

svn commit: r599259 - in /tomcat/tc6.0.x/trunk: STATUS.txt java/org/apache/catalina/authenticator/FormAuthenticator.java webapps/docs/changelog.xml

[billbarker]

Author: billbarker
Date: Wed Nov 28 20:19:46 2007
New Revision: 599259

URL: http://svn.apache.org/viewvc?rev=599259&view=rev
Log:
Remove conditional headers on Form Auth replay, since the UA (esp. FireFox) 
isn't expecting it.

Fix for bug #43687

Reported by:   Przemyslaw Madzik  


Modified:
tomcat/tc6.0.x/trunk/STATUS.txt

tomcat/tc6.0.x/trunk/java/org/apache/catalina/authenticator/FormAuthenticator.java
tomcat/tc6.0.x/trunk/webapps/docs/changelog.xml

Modified: tomcat/tc6.0.x/trunk/STATUS.txt
URL: 
http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATUS.txt?rev=599259&r1=599258&r2=599259&view=diff
==
--- tomcat/tc6.0.x/trunk/STATUS.txt (original)
+++ tomcat/tc6.0.x/trunk/STATUS.txt Wed Nov 28 20:19:46 2007
@@ -31,11 +31,6 @@
   +1: jfclere
   -1: fhanik - Can we add the 'package' directive to make the package match 
the dir structure
 
-* Remove conditional headers on Form Auth replay, since the UA (esp. FireFox) 
isn't expecting it.
-  http://issues.apache.org/bugzilla/show_bug.cgi?id=43687
-  +1: billbarker, remm, jfclere, pero
-  -1:
-
 * Fix another license issue
   http://svn.apache.org/viewvc?rev=598412&view=rev
   +1: markt, fhanik, pero, remm, billbarker 

Modified: 
tomcat/tc6.0.x/trunk/java/org/apache/catalina/authenticator/FormAuthenticator.java
URL: 
http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/java/org/apache/catalina/authenticator/FormAuthenticator.java?rev=599259&r1=599258&r2=599259&view=diff
==
--- 
tomcat/tc6.0.x/trunk/java/org/apache/catalina/authenticator/FormAuthenticator.java
 (original)
+++ 
tomcat/tc6.0.x/trunk/java/org/apache/catalina/authenticator/FormAuthenticator.java
 Wed Nov 28 20:19:46 2007
@@ -402,12 +402,20 @@
 
 MimeHeaders rmh = request.getCoyoteRequest().getMimeHeaders();
 rmh.recycle();
+boolean cachable = "GET".equalsIgnoreCase(saved.getMethod()) ||
+   "HEAD".equalsIgnoreCase(saved.getMethod());
 Iterator names = saved.getHeaderNames();
 while (names.hasNext()) {
 String name = (String) names.next();
-Iterator values = saved.getHeaderValues(name);
-while (values.hasNext()) {
-rmh.addValue(name).setString( (String)values.next() );
+// The browser isn't expecting this conditional response now.
+// Assuming that it can quietly recover from an unexpected 412.
+// BZ 43687
+if(!("If-Modified-Since".equalsIgnoreCase(name) ||
+ (cachable && "If-None-Match".equalsIgnoreCase(name {
+Iterator values = saved.getHeaderValues(name);
+while (values.hasNext()) {
+rmh.addValue(name).setString( (String)values.next() );
+}
 }
 }
 

Modified: tomcat/tc6.0.x/trunk/webapps/docs/changelog.xml
URL: 
http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/webapps/docs/changelog.xml?rev=599259&r1=599258&r2=599259&view=diff
==
--- tomcat/tc6.0.x/trunk/webapps/docs/changelog.xml (original)
+++ tomcat/tc6.0.x/trunk/webapps/docs/changelog.xml Wed Nov 28 20:19:46 2007
@@ -72,6 +72,9 @@
 Improve the webDAV Servlet Javadocs to make clear that the WebDAV
 Servlet can not be used as the default servlet. (markt)
   
+  43687 Remove conditional headers on Form Auth replay, 
+   since the UA (esp. FireFox) isn't expecting it.
+  
 
   
   



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

DO NOT REPLY [Bug 43687] - after repeated authentication tomcat again sends page with login form instead of protected static resource

[bugzilla]

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=43687


[EMAIL PROTECTED] changed:

   What|Removed |Added

 Status|NEW |RESOLVED
 Resolution||FIXED




--- Additional Comments From [EMAIL PROTECTED]  2007-11-28 20:30 ---
The patch has now been committed to SVN, and will appear in the next version 
of TC 6.x.

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug, or are watching the assignee.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: Tomcat connector for iis

[Tim Whittington]

This would probably be best sent to the users list.

It's all in the way the ISAPI redirector works.
It's a combination of an ISAPI filter - this intercepts requests and
magically redirects the ones that should go to Tomcat to a different URL,
which is the same DLL mounted in a virtual directory as an ISAPI
extension.
The DLL has to be in a virtual directory with execute permissions for this
to work (since that's the way ISAPI extensions work, and there's no other
decent way of getting IIS to serve dynamic content).

You would think there could be security implications of having an ISAPI
extension that allows you to access any URL in Tomcat sitting in a public
virtual directory - if someone crafted a request with the magic headers
used to communicate between the filter and extension they could
potentially access Tomcat - but the ISAPI filter part of the redirector
nukes the magic headers in any incoming request so they'd never get
through to the extension.

Short story: as long as you've got the redirector installed properly (both
the filter and extension parts) you should have no issues.

Oh, and I tend to use the properties file configuration mechanism. It's a
whole lot easier and more portable than mucking with the registry.

cheers
tim

-Original Message-
From: Davide Montesin [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, 28 November 2007 9:12 p.m.
To: dev@tomcat.apache.org
Cc: Davide Montesin
Subject: Tomcat connector for iis 



We have successufully installed the connector between tomcat and IIS. 

In the configuration process there is a step that let me surprise.

I should create a virtual directory jakarta that points to a dir with
isapi_redirect.dll. Why? Why chould not the fisical path of the dll be in
the registry like workers, ecc. ? 

Remembert that this virtual directory is reachable even from outside !?!
Can't this generate some security problems ?


-
To unsubscribe, e-mail: [EMAIL PROTECTED] For additional
commands, e-mail: [EMAIL PROTECTED]



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]