Tomcat http header size too large!

[Pradeep]

Hi,

I need some tips to solve below issue.
I am getting 431 http error in API (code running in tomcat) when header
size crosses 8KB. Tomcat server doesn't process request if header size is
more than 8KB.
I tried adding below properties to increase the header size in Springboot
application.yaml:

server:
  tomcat:
  max-http-header-size: 16KB

Above solution didn't work, please advice if any other way can achieve
increasing header size.

Thanks,
Pradeep

Tomcat Virtual Host to prevent Improper-Input-Handling attack

[Pradeep]

Hi Team,

I need your help to fix HTTP Host header attacks.
I'm currently in the process of trying to fix a site vulnerability,
basically it is one type of the "Improper Input Handling" attack.

Let's say my website is www.mywebsite.com and there is hacker's website
www.hacker.com
Whenever there is a request send to www.mywebsite.com with modified "Host"
header point to www.hacker.com, my site will create a redirect to
www.mywebsite.com along with whatever the url it was. e.g.


*Normal:*
Host: www.mywebsite.com
GET  www.mywebsite.com/get/some/resources/
Reponse 200 ok


*Hack:*Host: www.hacker.com (#been manually modified)
GET  www.mywebsite.com/get/some/resources/
Response 302
Send another Redirect to www.hacker.com/get/some/resources

I have found this configuration below for tomcat (my application using
Tomcat7) is this works for case? Also I have some existing Host name in
server.xml not sure how to incorporate both Host configuration, please help
me on this.

*Solution I found :*


  

*My tomcat existing Host configuration:*

--
Regards
Pradeep

Re: Tomcat Virtual Host to prevent Improper-Input-Handling attack

[Pradeep]

Hi Chris,

My application is HTTPS not HTTP and now one of the application security
platforms  WhitHatSec raised this vulnerability issue. I tried the above
configuration mentioned but no luck but this configuration advised in
Apache website
http://tomcat.apache.org/tomcat-9.0-doc/config/host.html#Request_Filters
to filter Host Header. I understand this is trivial but I have to fix and I
think I should handle it in the application server Tomcat7.

I tried the below configuration but still validation is not working, it's
still redirecting other Host Headers. Please let me know what else
configuration I can try,

 



Regards,
Pradeep






On Fri, Sep 10, 2021 at 7:36 PM Christopher Schultz <
ch...@christopherschultz.net> wrote:

> Pradeep,
>
> On 9/10/21 06:19, Pradeep wrote:
> > Hi Team,
> >
> > I need your help to fix HTTP Host header attacks.
> > I'm currently in the process of trying to fix a site vulnerability,
> > basically it is one type of the "Improper Input Handling" attack.
> >
> > Let's say my website is www.mywebsite.com and there is hacker's website
> > www.hacker.com
> > Whenever there is a request send to www.mywebsite.com with modified
> "Host"
> > header point to www.hacker.com, my site will create a redirect to
> > www.mywebsite.com along with whatever the url it was. e.g.
> >
> >
> > *Normal:*
> > Host: www.mywebsite.com
> > GET  www.mywebsite.com/get/some/resources/
> > Reponse 200 ok
> >
> >
> > *Hack:*Host: www.hacker.com (#been manually modified)
> > GET  www.mywebsite.com/get/some/resources/
> > Response 302
> > Send another Redirect to www.hacker.com/get/some/resources
> >
> > I have found this configuration below for tomcat (my application using
> > Tomcat7) is this works for case? Also I have some existing Host name in
> > server.xml not sure how to incorporate both Host configuration, please
> help
> > me on this.
> >
> > *Solution I found :*
> >
> > 
> >
> >
> > *My tomcat existing Host configuration:*
> >  >  unpackWARs="true" autoDeploy="true">
>
> I'm not sure why the above configuration would change anything. Can you
> explain?
>
> Please note that the "attacker" in this situation can only attack
> himself. Injecting/modifying a header into an HTTP request can only be
> done if the attacker is in a MitM position, which should not be possible
> when using HTTPS. If using HTTP, then you are on your own and this
> attack is trivial.
>
> Assuming there is no MitM, it is challenging to cause another client to
> use a header of the attacker's choosing.
>
> Unless this is simply an academic question.
>
> I always use Tomcat configured with a "default" , but I suspect
> there may be a way to force Tomcat to treat a request as invalid if the
> Host header doesn't match the name (or alias) of any  configured.
>
> -chris
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>

-- 
Regards
Pradeep

Re: Tomcat Virtual Host to prevent Improper-Input-Handling attack

[Pradeep]

Hi Chris,

I am using Tomcat 7.0.57, I can't change the Tomcat version now. I tried
adding Virtual Host with RemotrHostValve to allow list of hosts but still
no luck.




Regards,
Pradeep

On Mon, 13 Sep 2021, 2:28 pm Christopher Schultz, <
ch...@christopherschultz.net> wrote:

> Pradeep,
>
> On 9/10/21 17:38, Pradeep wrote:
> > My application is HTTPS not HTTP and now one of the application security
> > platforms  WhitHatSec raised this vulnerability issue.
>
> I tried to reproduce your "attack" on Tomcat 8.5.59, like this:
>
> $ cat forge
> GET www.microsoft.com/ HTTP/1.1
> Host: www.microsoft.com
>
>
> $ od -t x1 -a forge
> 00047  45  54  20  77  77  77  2e  6d  69  63  72  6f  73  6f  66
> G   E   T  sp   w   w   w   .   m   i   c   r   o   s   o   f
> 02074  2e  63  6f  6d  2f  20  48  54  54  50  2f  31  2e  31  0d
> t   .   c   o   m   /  sp   H   T   T   P   /   1   .   1  cr
> 0400a  48  6f  73  74  3a  20  77  77  77  2e  6d  69  63  72  6f
>nl   H   o   s   t   :  sp   w   w   w   .   m   i   c   r   o
> 06073  6f  66  74  2e  63  6f  6d  0d  0a  0d  0a
> s   o   f   t   .   c   o   m  cr  nl  cr  nl
>
> $ nc tomcat 8080 < forge
> HTTP/1.1 400
> Content-Type: text/html;charset=utf-8
> Content-Language: en
> Content-Length: 795
> Date: Mon, 13 Sep 2021 13:22:51 GMT
> Connection: close
>
> HTTP Status 400 – Bad
> Requestbody
> {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b
> {color:white;background-color:#525D76;} h1 {font-size:22px;} h2
> {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a
> {color:black;} .line
> {height:1px;background-color:#525D76;border:none;}HTTP
>
> Status 400 – Bad RequestType Status
> ReportMessage Invalid URIDescription The
> server cannot or will not process the request due to something that is
> perceived to be a client error (e.g., malformed request syntax, invalid
> request message framing, or deceptive request routing). class="line" />
>
> Changing the "www.microsoft.com" to "http://www.microsoft.com"; returns
> this:
>
> HTTP/1.1 404
> Content-Type: text/html;charset=utf-8
> Content-Language: en
> Content-Length: 751
> Date: Mon, 13 Sep 2021 13:25:22 GMT
>
> HTTP Status 404 – Not
> Foundbody
> {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b
> {color:white;background-color:#525D76;} h1 {font-size:22px;} h2
> {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a
> {color:black;} .line
> {height:1px;background-color:#525D76;border:none;}HTTP
>
> Status 404 – Not FoundType Status
> ReportMessage The requested resource [/] is not
> availableDescription The origin server did not find a
> current representation for the target resource or is not willing to
> disclose that one exists.Apache
> Tomcat/8.5.59
>
> Removing the "www.microsoft.com" from the request-line returns this:
>
> HTTP/1.1 404
> Content-Type: text/html;charset=utf-8
> Content-Language: en
> Content-Length: 751
> Date: Mon, 13 Sep 2021 13:24:34 GMT
>
> HTTP Status 404 – Not
> Foundbody
> {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b
> {color:white;background-color:#525D76;} h1 {font-size:22px;} h2
> {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a
> {color:black;} .line
> {height:1px;background-color:#525D76;border:none;}HTTP
>
> Status 404 – Not FoundType Status
> ReportMessage The requested resource [/] is not
> availableDescription The origin server did not find a
> current representation for the target resource or is not willing to
> disclose that one exists.Apache
> Tomcat/8.5.59
>
> Please show me what (exact) steps are required to reproduce this issue.
> Also please try your "attack" against Tomcat 8.5.x and/or 9.0.x as well
> as your Tomcat 7.0.x version.
>
> > I tried the above configuration mentioned but no luck but this
> > configuration advised in Apache website
> > http://tomcat.apache.org/tomcat-9.0-doc/config/host.html#Request_Filters
>  > to filter Host Header. I understand this is trivial but I have to fix
> > and I think I should handle it in the application server Tomcat7.
> You can't filter-out the Host header. Well, not effectively.
>
> > I tried the below configuration but still validation is not working,
> > it's still redirecting other Host Headers. Please let me know what
> > else configuration I can try >
>  >   
>  >> className="org.apache.catalina.valves.RemoteAddrValve"
>  > allow=".*\.myapplication1\.com|.*\myapplication2\.com"/>
>  > 
>
> 

Re: Tomcat Virtual Host to prevent Improper-Input-Handling attack

[Pradeep]

Hi Chris,

Take any web application try below curl command , this curl command sends
invalid Host Header application should validate  by comparing with valid
bost headers and block this request by returning 404 /403.

curl -isk -H "host:host.whitehatsec.com" "
https://staging.avoxdata.com/portal/ticket/list?offset=10&host_header=host

Currently it returns 302 basically redirecting invalid host which is not
right.

I found this link , solution recommended by Tomcat team "Andre".


https://stackoverflow.com/questions/44054591/tomcat-virtual-host-to-prevent-improper-input-handling-attack/69130997#69130997


Let me know what you think.

Regards,
Pradeep

On Mon, 13 Sep 2021, 2:44 pm Christopher Schultz, <
ch...@christopherschultz.net> wrote:

> Pradeep,
>
> On 9/13/21 09:35, Pradeep wrote:
> > Hi Chris,
> >
> > I am using Tomcat 7.0.57, I can't change the Tomcat version now. I tried
> > adding Virtual Host with RemotrHostValve to allow list of hosts but still
> > no luck.
> >
> > 
> >  > allow="*.\myapplication\.com">
>
> This is because you are trying to block the client by their identity
> (like "localhost" if you are working locally). It has nothing whatsoever
> to do with the Host header, the hostname of the server, or anything
> else. RemoteAddrValve and RemoteHostValve are completely irrelevant for
> what you are trying to do.
>
> Can you give me specific instructions for how to reproduce this "attack">?
>
> -chris
>
> > On Mon, 13 Sep 2021, 2:28 pm Christopher Schultz, <
> > ch...@christopherschultz.net> wrote:
> >
> >> Pradeep,
> >>
> >> On 9/10/21 17:38, Pradeep wrote:
> >>> My application is HTTPS not HTTP and now one of the application
> security
> >>> platforms  WhitHatSec raised this vulnerability issue.
> >>
> >> I tried to reproduce your "attack" on Tomcat 8.5.59, like this:
> >>
> >> $ cat forge
> >> GET www.microsoft.com/ HTTP/1.1
> >> Host: www.microsoft.com
> >>
> >>
> >> $ od -t x1 -a forge
> >> 00047  45  54  20  77  77  77  2e  6d  69  63  72  6f  73  6f
> 66
> >>  G   E   T  sp   w   w   w   .   m   i   c   r   o   s   o
>  f
> >> 02074  2e  63  6f  6d  2f  20  48  54  54  50  2f  31  2e  31
> 0d
> >>  t   .   c   o   m   /  sp   H   T   T   P   /   1   .   1
> cr
> >> 0400a  48  6f  73  74  3a  20  77  77  77  2e  6d  69  63  72
> 6f
> >> nl   H   o   s   t   :  sp   w   w   w   .   m   i   c   r
>  o
> >> 06073  6f  66  74  2e  63  6f  6d  0d  0a  0d  0a
> >>  s   o   f   t   .   c   o   m  cr  nl  cr  nl
> >>
> >> $ nc tomcat 8080 < forge
> >> HTTP/1.1 400
> >> Content-Type: text/html;charset=utf-8
> >> Content-Language: en
> >> Content-Length: 795
> >> Date: Mon, 13 Sep 2021 13:22:51 GMT
> >> Connection: close
> >>
> >> HTTP Status 400 – Bad
> >> Requestbody
> >> {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b
> >> {color:white;background-color:#525D76;} h1 {font-size:22px;} h2
> >> {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a
> >> {color:black;} .line
> >>
> {height:1px;background-color:#525D76;border:none;}HTTP
> >>
> >> Status 400 – Bad RequestType Status
> >> ReportMessage Invalid URIDescription The
> >> server cannot or will not process the request due to something that is
> >> perceived to be a client error (e.g., malformed request syntax, invalid
> >> request message framing, or deceptive request routing). >> class="line" />
> >>
> >> Changing the "www.microsoft.com" to "http://www.microsoft.com"; returns
> >> this:
> >>
> >> HTTP/1.1 404
> >> Content-Type: text/html;charset=utf-8
> >> Content-Language: en
> >> Content-Length: 751
> >> Date: Mon, 13 Sep 2021 13:25:22 GMT
> >>
> >> HTTP Status 404 – Not
> >> Foundbody
> >> {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b
> >> {color:white;background-color:#525D76;} h1 {font-size:22px;} h2
> >> {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a
> >> {color:black;} .line
> >>
> {height:1px;background-color:#525D76;border:none;}HTTP
> >>
> >> Status 404 – Not FoundType Status
> >> ReportMessage The requested resource [/] is not
> >> availableDescription The origin server

Re: Problem with hosting mulitple websites on single tomcat 7

[Pradeep]

Hi  Konstantin ,
Here are the details ,

 1. Tomcat Version   - Server version: Apache Tomcat/7.0.21
 2.  It is Standalone
 3. I am just using default setting ,  it is running on 8080 ,
 Only thing ,i have added following entries to forward all 80
requests to 8080
Entries are,
iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT
--to-ports 8080

iptables -t nat -A OUTPUT -p tcp --dport 80 -j REDIRECT --to-ports 8080


 4. Yes I restarted tomcat for every change i was testing
 5. How did i tested,
I just visited *a.com* and *b.com* and checked whether they go
to their respective website, instead they directed to  o.com ( default app
which in webapps)

  Here is the directory structure for above three domains

 o.com   webapps
 a.com  webapps_a
 b.com webapps_b

They all are at same level

Sorry, for top posting ,i new to mailing list, i will try to avoid  in
future :) , appreciate your help.

Regards,
Pradeep

On Mon, Sep 24, 2012 at 7:37 PM, Konstantin Kolinko
wrote:

> 2012/9/24 Pradeep :
> > I have one domain hosted on cloud server. Let's say o.com
> >
> > Now i want to add a.com and b.com to same cloud server, for that , i
> added
> > host entries inside server.xml as below,
> >
> >  >
> >
> >
> > unpackWARs="true" autoDeploy="true">
> >
> >
> >
> > 
>
> There is no need to cite comments, such as one above.
>
> >
> >  > directory="logs"
> >prefix="localhost_access_log." suffix=".txt"
> >pattern="%h %l %u %t "%r" %s %b" />
> >   
> >
> >   
> >  
> >
> >  (Note, Localhost was the orignal entry)
> >
> > But , problem is , they both are pointing to o.com and not to their
> > respective domains/webapp directories
> >
>
> 1. What x.y.z version of Tomcat it is?
> 2. Is your Apache Tomcat running standalone, or behind Apache HTTPD or
> similar?
> 3. How are your s configured?
> 4. Did you restart Tomcat after making your changes?
> 5. You say it does not work. - How did you test it?
>
> Best regards,
> Konstantin Kolinko
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>


-- 
Thanks & Regards,
Pradeep Chaudhari

Question about using jk_mod with Linux

[Pradeep Shekade]

Hello,
   
  I have configured Apache 2.2 + Tomcat 5 for load balancing on Windows 
platform. 
   
  I had downloaded jk_mod binary for Win32 (mod_jk-apache-2.2.3.so) from the 
site - http://www.apache.org/dist/tomcat/tomcat-connectors/jk/binaries/ 
   
  I was looking for a similar binary for Linux. There are no files there in the 
Linux folder to download.
   
  Am I missing something?
   
  Thanks,
   
  Pradeep Shekade

 
-
Don't pick lemons.
See all the new 2007 cars at Yahoo! Autos.

Configuring embedded tomcat using server.xml

[Pradeep Fernando]

Hi,

I have embedded the tomcat server within my application. Right now i'm
using the org.apache.catalina.startup.Tomcat.java class to start my server.
However I would like to get more control over Engine creation, connector
initialization, etc. My idea is to configure the tomcat instance by looking
at the server.xml (will be a strip down version of server.xml).

I beleive this mechanism is already happening within the standalone tomcat
distribution. There should be a server manager who parses the server.xml
and configures the tomcat engine. May be i can learn a bit from that code.
Can some body give me a code pointer to such code withing tomcat.



thanks in advance,
--Pradeep

Re: Configuring embedded tomcat using server.xml

[Pradeep Fernando]

On Fri, Jan 27, 2012 at 2:29 PM, Pid *  wrote:

> On 27 Jan 2012, at 08:06, Pradeep Fernando  wrote:
>
> > Hi,
> >
> > I have embedded the tomcat server within my application. Right now i'm
> > using the org.apache.catalina.startup.Tomcat.java class to start my
> server.
> > However I would like to get more control over Engine creation, connector
> > initialization, etc. My idea is to configure the tomcat instance by
> looking
> > at the server.xml (will be a strip down version of server.xml).
> >
> > I beleive this mechanism is already happening within the standalone
> tomcat
> > distribution. There should be a server manager who parses the server.xml
> > and configures the tomcat engine. May be i can learn a bit from that
> code.
> > Can some body give me a code pointer to such code withing tomcat.
>
> Tomcat repackages the Commons Digester in org.apache.tomcat.util.digester.
>

thanks. This is what i was looking for.


>
>
> p
>
>
>
> >
> >
> >
> > thanks in advance,
> > --Pradeep
>
> -----
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>


-- 
Pradeep Fernando.
http://pradeepfernando.blogspot.com/

configuring org.apache.catalina.startup.Tomcat using server.xml

[Pradeep Fernando]

Hi all,

I wanted to do the $subject. For that I extended the existing Tomcat
class and added a configure step. Within the configure method i
created a digester to configure my embedded tomcat instance.

looks like things are getting configured. But when i call start method
on Tomcat, it gives some errors related to connectors. These are the
connectors http & https that i configured using the server.xml.

what is happening here. Looks like an illegal state. What should i do
to rectify this. Suggestions, code-pointers welcome.


30 Jan, 2012 11:33:59 PM org.apache.catalina.core.StandardService startInternal
SEVERE: Failed to start connector [Connector[HTTP_11_NIO-9467]]
org.apache.catalina.LifecycleException: An invalid Lifecycle
transition was attempted ([before_start]) for component
[Connector[HTTP_11_NIO-9467]] in state [INITIALIZING]
at 
org.apache.catalina.util.LifecycleBase.invalidTransition(LifecycleBase.java:386)
at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:139)
at 
org.apache.catalina.core.StandardService.startInternal(StandardService.java:459)
at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:145)
at 
org.apache.catalina.core.StandardServer.startInternal(StandardServer.java:727)
at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:145)
at 
org.wso2.carbon.tomcat.internal.CarbonTomcat.start(CarbonTomcat.java:38)
at 
org.wso2.carbon.tomcat.server.ServerManager$1.run(ServerManager.java:81)
at java.lang.Thread.run(Thread.java:619)
30 Jan, 2012 11:33:59 PM org.apache.catalina.core.StandardService startInternal
SEVERE: Failed to start connector [Connector[HTTPS_11_NIO-9443]]
org.apache.catalina.LifecycleException: An invalid Lifecycle
transition was attempted ([before_start]) for component
[Connector[HTTPS_11_NIO-9443]] in state [INITIALIZING]
at 
org.apache.catalina.util.LifecycleBase.invalidTransition(LifecycleBase.java:386)
at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:139)
at 
org.apache.catalina.core.StandardService.startInternal(StandardService.java:459)
at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:145)
at 
org.apache.catalina.core.StandardServer.startInternal(StandardServer.java:727)
at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:145)
at 
org.wso2.carbon.tomcat.internal.CarbonTomcat.start(CarbonTomcat.java:38)
at 
org.wso2.carbon.tomcat.server.ServerManager$1.run(ServerManager.java:81)
at java.lang.Thread.run(Thread.java:619)


thanks,
--Pradeep

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

starting connectors after the tomcat startup

[Pradeep Fernando]

Hi all,

I'm using embedded tomcat within my application. I configured the
org.apache.catalina.startup.Tomcat class using the server.xml found in
tomcat distribution.
But i want to start my connectors after some requirement are met (The
necessary resources being initialized).

My approach was to set the connector param,

bindOnInit = "false"

and then start the connectors at a later stage using connector.start();


but it looks like my connectors are in the "STARTED" life-cycle stage
once i do the Tomcat.start() call. - means they are already started
Am i missing something. How can i achieve my requirement.?

thanks
--Pradeep

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: starting connectors after the tomcat startup

[Pradeep Fernando]

Hi,

Let me explain my scenario. I'm running tomcat inside an OSGi
environment. There I create http.service out of tomcat. I do that in a
servlet init method and set the loadOnStartup to '1' for that
servlet.

Now during the server startup my http.service get exposed and other
bundles make use of that service. Since the starting order of my
bundles depends on the OSGi service dependencies, my application is
ready to process request only when all the bundles are ready. At that
point i want start the connectors.

The problems is, When I call Tomcat.start() it starts connectors as
well. If I call Tomcat.init(), it does not initiate my servlet which,
in-turn registers the http.service.


thanks,
--Pradeep

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: starting connectors after the tomcat startup

[Pradeep Fernando]

Hi all,

I could achieve the required behaviour by extending the
standardService provided by tomcat. In my overrided startInternal()
method i just dont start connectors.


thanks,
--Pradeep

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Tomcat DS question

[pradeep reddy]

Hello Community,
 I have a weird issue, which I am not able to figure it out and needed
some help. I am a Web Administrator and in my organization we use Tomcat +
CXF to run our commerce services.

We are running on Tomcat-6.0.32 and jdk1.6.0_24, anyways we have recently
started to see issues with our connection pool and from our monitoring
tools its evident that we are running out of connections.  Now I have read
some manuals on Apache Tomcat Page to use below three settings to fail
gracefully and to Log those sessions which are either causing connection
leak or abandoned

removeAbandoned - set to true if we want to detect leaked connections
removeAbandonedTimeout
logAbandoned="true"


But unfortunately even after having configured those above three settings,
I still see some sessions just hanging in and not releasing the connection
and I need help in understanding what I am doing wrong.

My DS cnfiguration


Thanks
Pradeep

Re: Tomcat DS question

[pradeep reddy]

nectionHandler.process(Http11Protocol.java:588)
at 
org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489)
at java.lang.Thread.run(Thread.java:662)



oracle.jdbc.driver.BlockSource.ThreadedCachingBlockSource.BlockReleaser"
daemon prio=10 tid=0x7fbd3cb13000 nid=0x762b in Object.wait()
[0x7fbcdf5fd000]
   java.lang.Thread.State: TIMED_WAITING (on object monitor)
at java.lang.Object.wait(Native Method)
at 
oracle.jdbc.driver.BlockSource$ThreadedCachingBlockSource$BlockReleaser.run(BlockSource.java:327)
- locked <0x0007000535d0> (a
oracle.jdbc.driver.BlockSource$ThreadedCachingBlockSource$BlockReleaser)



On Mon, May 16, 2016 at 2:42 PM, Christopher Schultz <
ch...@christopherschultz.net> wrote:

> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
>
> Pradeep,
>
> On 5/16/16 12:34 PM, pradeep reddy wrote:
> > Hello Community, I have a weird issue, which I am not able to
> > figure it out and needed some help. I am a Web Administrator and in
> > my organization we use Tomcat + CXF to run our commerce services.
> >
> > We are running on Tomcat-6.0.32 and jdk1.6.0_24, anyways we have
> > recently started to see issues with our connection pool and from
> > our monitoring tools its evident that we are running out of
> > connections.  Now I have read some manuals on Apache Tomcat Page to
> > use below three settings to fail gracefully and to Log those
> > sessions which are either causing connection leak or abandoned
> >
> > removeAbandoned - set to true if we want to detect leaked
> > connections removeAbandonedTimeout logAbandoned="true"
> >
> >
> > But unfortunately even after having configured those above three
> > settings, I still see some sessions just hanging in and not
> > releasing the connection and I need help in understanding what I am
> > doing wrong.
> >
> > My DS cnfiguration  > auth="Container" type="javax.sql.DataSource"
> > driverClassName="oracle.jdbc.OracleDriver" url="XXX"
> > username="XX" password="XX" initialSize="1" maxActive="10"
> > minIdle="1" maxIdle="1" connectionCachingEnabled="true"
> > fastConnectionFailoverEnabled="true"
> > connectionCacheProperties="{MinLimit=1, MaxLimit=20,
> > InitialLimit=1, oracle.net.ns.SQLnetDef.TCP_CONNTIMEOUT_STR=3000}"
> > ONSConfiguration="nodes=X" validationQuery="SELECT 1 from
> > DUAL" removeAbandoned="true" removeAbandonedTimeout="30"
> > logAbandoned="true" maxWait="-1"/>
>
> What do the stack traces look like or the hung threads?
>
> - -chris
> -BEGIN PGP SIGNATURE-
> Comment: GPGTools - http://gpgtools.org
> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
>
> iQIcBAEBCAAGBQJXOjC7AAoJEBzwKT+lPKRYl5oQAL+tSB6ZkBpMOqihbN79UHdG
> LAKsRdenKPhphA2yjahoXIx9nWvSd03jsFy8uzJYe3ztyRkJGW4h7VAm37gAHkKl
> sg/jtQzvtl4HYO6YI1v5OgljxR5GnK8CvGad5PhOg/s6/mLRZ9kfUdGgv6tCYHXe
> lpoEOA8Em6tMaTwg1u07gXAqMEJyqg5QA3tYR3MU+0RALhNeVWgXNoEULol0FEil
> PJVcAVN1WC6AX0qVa3JlXIK+PHHLDDZWLH7qrpo2nGVvcf/5oFf27N5AnnnarH87
> RtOWHjWgK4APRVkEEOSX8Pef7YAb2dj6E+6fgf+3v117eEwYJlkLWU5pS/6Q3zWm
> 23obZllDks1clyYzs7C96zJukFb60wSRRGPdbHoSiKspH1J3/GavebaG7Sbg2ADB
> DNLcWG0fd4FUmy+kbG+pPi3hdEdwOQ0c6kgaqH7ARDjdYtfVKV8kgCe6wpJlKx+k
> WXfDK3cE2jWhUT/zx9VMutM+38gYk9G6ArUIZvOg5qdhcv6LvX299so3x8dEaL7w
> D/NNz4+yTJGVfQMnJ4LTnZR+R6wCUdhpS0quSYo9ZJNpXGERo3NY0aV80g4S8MQJ
> HObHoGDSUHDw4lScKCpIJYT7ZZ+Ok25fqyrlx+JN1fhsq7PcPtDQz/7FrRuhKEGa
> z8kfsKuyduF8cW1gDj5h
> =s/bM
> -END PGP SIGNATURE-
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>

Re: Tomcat DS question

[pradeep reddy]

unfortunately it is not writing anything catalina.out :-(

Thanks
Pradeep

On Mon, May 16, 2016 at 3:47 PM, Christopher Schultz <
ch...@christopherschultz.net> wrote:

> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
>
> Pradeep,
>
> On 5/16/16 5:13 PM, pradeep reddy wrote:
> > Hello Christopher,
> >
> > Let me post my thread dump here.
> >
> > All  HTTP threads are in WAITING state.
> >
> > "http-12453-346" daemon prio=10 tid=0x7fbd3061f800 nid=0x59d0
> > in Object.wait() [0x7fbbe124f000] java.lang.Thread.State:
> > WAITING (on object monitor) at java.lang.Object.wait(Native
> > Method) at java.lang.Object.wait(Object.java:485) at
> > org.apache.tomcat.dbcp.pool.impl.GenericObjectPool.borrowObject(Generi
> cObjectPool.java:1104)
> >
> >
> - - locked <0x00072b18f320> (a
> > org.apache.tomcat.dbcp.pool.impl.GenericObjectPool$Latch) at
> > org.apache.tomcat.dbcp.dbcp.PoolingDataSource.getConnection(PoolingDat
> aSource.java:106)
> >
> >
> at
> org.apache.tomcat.dbcp.dbcp.BasicDataSource.getConnection(BasicDataSourc
> e.java:1044)
> > at
> > org.springframework.orm.hibernate3.LocalDataSourceConnectionProvider.g
> etConnection(LocalDataSourceConnectionProvider.java:82)
>
> Yep,
> >
> that certainly looks like you are waiting for connections from
> Tomcat's DBCP-based pool.
>
> >  > type="javax.sql.DataSource"
> > driverClassName="oracle.jdbc.OracleDriver" url="XXX"
> > username="XX" password="XX" initialSize="1" maxActive="10"
> > minIdle="1" maxIdle="1" connectionCachingEnabled="true"
> > fastConnectionFailoverEnabled="true"
> > connectionCacheProperties="{MinLimit=1, MaxLimit=20,
> > InitialLimit=1, oracle.net.ns.SQLnetDef.TCP_CONNTIMEOUT_STR=3000}"
> > ONSConfiguration="nodes=X" validationQuery="SELECT 1 from
> > DUAL" removeAbandoned="true" removeAbandonedTimeout="30"
> > logAbandoned="true" maxWait="-1"/>
>
> That configuration looks okay to me.
>
> The "abandoned" logs are logged to stdout, so they should show up in
> your catalina.out file (or stdout.log if you are using a Windows Service
> ).
>
> Are you getting no messages about the abandoned connections?
>
> - -chris
> -BEGIN PGP SIGNATURE-
> Comment: GPGTools - http://gpgtools.org
> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
>
> iQIcBAEBCAAGBQJXOj/gAAoJEBzwKT+lPKRYFVQP/RJKOl0QoU8/qcgMBtdrqwbr
> gddAEbqeDVT4nb8Bp/MWpWEoICBr75IGMgSir+qKASwTKXNsORceyxcSn+YxRJnK
> POZgIZfwti4vLYMBr9jU1kdUsxCGriettcBZ8pkwJAAtyVX9O0lZiwEZuCp7WwA5
> sbatkYHNtJQsjxQli1XA6NPNjQBS6y+WuQZQ0e/mf3CJUq9Rqa0uvsgAOK9XQTDB
> HBNfhF1sjIFy2ro5Vb6OagRHB+9CBxc01gM8V2d37hrbqmUVpiE4pKqO2sWZ6cz5
> yCwSBEcxyNKvDoeP2kz/1HGIhSwB7ifV1zkbhgZaB5eQZVZZubXVcdwgmRMswUgl
> RtzqCPF6rOHkgccoe5IqZLb89pQITibz6G3xTAoHhcvh2m7bADAkoN9Jq88DxUqT
> CqXEc/01A0AdC5zzqdGPToReLPEcaifLuAK0seGQsHIHAtOytYEY2E9rmoPtCrGp
> J4AshEzNtmVT+WUc40FS1+KeabolYBk0biXZiZG/mkVEmKf1DpzPtsBGFfYvo3/i
> 0IAOS4zBvluQT1xaqNO6bFJ4fyfIwyWE26FBEPWRpsju2CEg/9+uXw6YM3xYxdkc
> TmTTXqp4wvfE82fb2NMGQT3Av/q2fD4Yvzt7DiyHmWL0i0BlsnWBRdJD0dogKFRK
> oVun2+a1tFD7lvJnVoiu
> =AHDK
> -END PGP SIGNATURE-
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>

Re: Tomcat DS question

[pradeep reddy]

Hello Woonsan,
   Via Jconsole I had validated all my changes that were made in
context.xml. But for some reason the logs doesn't show anything about
abandoned connections in catalina.out. I am not sure at this time if its a
bug in tomcat 6 or tomcat-dbcp.jar, but threaddumps clearly show that
threads are waiting on connections from connection pool.

Thanks
Pradeep

On Mon, May 16, 2016 at 4:38 PM, Woonsan Ko  wrote:

> Hi Pradeep,
>
> Just in case, you might want to make sure your changes were really
> applied. For example, an effective context.xml could be in
> conf/Catalina/localhost/...
> If it was applied properly, the stack trace should have shown
> o.a.c.dbcp.AbandonedObjectPool#borrowObject() as well.
>
> Regards,
>
> Woonsan
>
>
> On Mon, May 16, 2016 at 5:54 PM, pradeep reddy 
> wrote:
> > unfortunately it is not writing anything catalina.out :-(
> >
> > Thanks
> > Pradeep
> >
> > On Mon, May 16, 2016 at 3:47 PM, Christopher Schultz <
> > ch...@christopherschultz.net> wrote:
> >
> >> -BEGIN PGP SIGNED MESSAGE-
> >> Hash: SHA256
> >>
> >> Pradeep,
> >>
> >> On 5/16/16 5:13 PM, pradeep reddy wrote:
> >> > Hello Christopher,
> >> >
> >> > Let me post my thread dump here.
> >> >
> >> > All  HTTP threads are in WAITING state.
> >> >
> >> > "http-12453-346" daemon prio=10 tid=0x7fbd3061f800 nid=0x59d0
> >> > in Object.wait() [0x7fbbe124f000] java.lang.Thread.State:
> >> > WAITING (on object monitor) at java.lang.Object.wait(Native
> >> > Method) at java.lang.Object.wait(Object.java:485) at
> >> > org.apache.tomcat.dbcp.pool.impl.GenericObjectPool.borrowObject(Generi
> >> cObjectPool.java:1104)
> >> >
> >> >
> >> - - locked <0x00072b18f320> (a
> >> > org.apache.tomcat.dbcp.pool.impl.GenericObjectPool$Latch) at
> >> > org.apache.tomcat.dbcp.dbcp.PoolingDataSource.getConnection(PoolingDat
> >> aSource.java:106)
> >> >
> >> >
> >> at
> >> org.apache.tomcat.dbcp.dbcp.BasicDataSource.getConnection(BasicDataSourc
> >> e.java:1044)
> >> > at
> >> > org.springframework.orm.hibernate3.LocalDataSourceConnectionProvider.g
> >> etConnection(LocalDataSourceConnectionProvider.java:82)
> >>
> >> Yep,
> >> >
> >> that certainly looks like you are waiting for connections from
> >> Tomcat's DBCP-based pool.
> >>
> >> >  >> > type="javax.sql.DataSource"
> >> > driverClassName="oracle.jdbc.OracleDriver" url="XXX"
> >> > username="XX" password="XX" initialSize="1" maxActive="10"
> >> > minIdle="1" maxIdle="1" connectionCachingEnabled="true"
> >> > fastConnectionFailoverEnabled="true"
> >> > connectionCacheProperties="{MinLimit=1, MaxLimit=20,
> >> > InitialLimit=1, oracle.net.ns.SQLnetDef.TCP_CONNTIMEOUT_STR=3000}"
> >> > ONSConfiguration="nodes=X" validationQuery="SELECT 1 from
> >> > DUAL" removeAbandoned="true" removeAbandonedTimeout="30"
> >> > logAbandoned="true" maxWait="-1"/>
> >>
> >> That configuration looks okay to me.
> >>
> >> The "abandoned" logs are logged to stdout, so they should show up in
> >> your catalina.out file (or stdout.log if you are using a Windows Service
> >> ).
> >>
> >> Are you getting no messages about the abandoned connections?
> >>
> >> - -chris
> >> -BEGIN PGP SIGNATURE-
> >> Comment: GPGTools - http://gpgtools.org
> >> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
> >>
> >> iQIcBAEBCAAGBQJXOj/gAAoJEBzwKT+lPKRYFVQP/RJKOl0QoU8/qcgMBtdrqwbr
> >> gddAEbqeDVT4nb8Bp/MWpWEoICBr75IGMgSir+qKASwTKXNsORceyxcSn+YxRJnK
> >> POZgIZfwti4vLYMBr9jU1kdUsxCGriettcBZ8pkwJAAtyVX9O0lZiwEZuCp7WwA5
> >> sbatkYHNtJQsjxQli1XA6NPNjQBS6y+WuQZQ0e/mf3CJUq9Rqa0uvsgAOK9XQTDB
> >> HBNfhF1sjIFy2ro5Vb6OagRHB+9CBxc01gM8V2d37hrbqmUVpiE4pKqO2sWZ6cz5
> >> yCwSBEcxyNKvDoeP2kz/1HGIhSwB7ifV1zkbhgZaB5eQZVZZubXVcdwgmRMswUgl
> >> RtzqCPF6rOHkgccoe5IqZLb89pQITibz6G3xTAoHhcvh2m7bADAkoN9Jq88DxUqT
> >> CqXEc/01A0AdC5zzqdGPToReLPEcaifLuAK0seGQsHIHAtOytYEY2E9rmoPtCrGp
> >> J4AshEzNtmVT+WUc40FS1+KeabolYBk0biXZiZG/mkVEmKf1DpzPtsBGFfYvo3/i
> >> 0IAOS4zBvluQT1xaqNO6bFJ4fyfIwyWE26FBEPWRpsju2CEg/9+uXw6YM3xYxdkc
> >> TmTTXqp4wvfE82fb2NMGQT3Av/q2fD4Yvzt7DiyHmWL0i0BlsnWBRdJD0dogKFRK
> >> oVun2+a1tFD7lvJnVoiu
> >> =AHDK
> >> -END PGP SIGNATURE-
> >>
> >> -
> >> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> >> For additional commands, e-mail: users-h...@tomcat.apache.org
> >>
> >>
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>

Re: Tomcat DS question

[pradeep reddy]

Thanks for response, would you know if there is any recommended dbcp jar
that we need to use for Oracle 12 and Tomcat 6 ?

Thanks
Pradeep

On Tue, May 17, 2016 at 11:07 AM, Woonsan Ko  wrote:

> Hi Pradeep,
>
> I saw you had Oracle specific settings such as
> connectionCachingEnabled. So, maybe you're using Oracle specific
> DataSourceFactory instead of the default dbcp one.
> As far as I know, the default factory
> (org.apache...BasicDataSourceFactory) can be overridden by either
> factory attribute in the  element or
> javax.sql.DataSource.Factory system property.
> In that case, it might be an issue around the custom factory
> implementation, not tomcat.
>
> Regards,
>
> Woonsan
>
>
> On Mon, May 16, 2016 at 6:54 PM, pradeep reddy 
> wrote:
> > Hello Woonsan,
> >Via Jconsole I had validated all my changes that were made in
> > context.xml. But for some reason the logs doesn't show anything about
> > abandoned connections in catalina.out. I am not sure at this time if its
> a
> > bug in tomcat 6 or tomcat-dbcp.jar, but threaddumps clearly show that
> > threads are waiting on connections from connection pool.
> >
> > Thanks
> > Pradeep
> >
> > On Mon, May 16, 2016 at 4:38 PM, Woonsan Ko  wrote:
> >
> >> Hi Pradeep,
> >>
> >> Just in case, you might want to make sure your changes were really
> >> applied. For example, an effective context.xml could be in
> >> conf/Catalina/localhost/...
> >> If it was applied properly, the stack trace should have shown
> >> o.a.c.dbcp.AbandonedObjectPool#borrowObject() as well.
> >>
> >> Regards,
> >>
> >> Woonsan
> >>
> >>
> >> On Mon, May 16, 2016 at 5:54 PM, pradeep reddy 
> >> wrote:
> >> > unfortunately it is not writing anything catalina.out :-(
> >> >
> >> > Thanks
> >> > Pradeep
> >> >
> >> > On Mon, May 16, 2016 at 3:47 PM, Christopher Schultz <
> >> > ch...@christopherschultz.net> wrote:
> >> >
> >> >> -BEGIN PGP SIGNED MESSAGE-
> >> >> Hash: SHA256
> >> >>
> >> >> Pradeep,
> >> >>
> >> >> On 5/16/16 5:13 PM, pradeep reddy wrote:
> >> >> > Hello Christopher,
> >> >> >
> >> >> > Let me post my thread dump here.
> >> >> >
> >> >> > All  HTTP threads are in WAITING state.
> >> >> >
> >> >> > "http-12453-346" daemon prio=10 tid=0x7fbd3061f800 nid=0x59d0
> >> >> > in Object.wait() [0x7fbbe124f000] java.lang.Thread.State:
> >> >> > WAITING (on object monitor) at java.lang.Object.wait(Native
> >> >> > Method) at java.lang.Object.wait(Object.java:485) at
> >> >> >
> org.apache.tomcat.dbcp.pool.impl.GenericObjectPool.borrowObject(Generi
> >> >> cObjectPool.java:1104)
> >> >> >
> >> >> >
> >> >> - - locked <0x00072b18f320> (a
> >> >> > org.apache.tomcat.dbcp.pool.impl.GenericObjectPool$Latch) at
> >> >> >
> org.apache.tomcat.dbcp.dbcp.PoolingDataSource.getConnection(PoolingDat
> >> >> aSource.java:106)
> >> >> >
> >> >> >
> >> >> at
> >> >>
> org.apache.tomcat.dbcp.dbcp.BasicDataSource.getConnection(BasicDataSourc
> >> >> e.java:1044)
> >> >> > at
> >> >> >
> org.springframework.orm.hibernate3.LocalDataSourceConnectionProvider.g
> >> >> etConnection(LocalDataSourceConnectionProvider.java:82)
> >> >>
> >> >> Yep,
> >> >> >
> >> >> that certainly looks like you are waiting for connections from
> >> >> Tomcat's DBCP-based pool.
> >> >>
> >> >> >  >> >> > type="javax.sql.DataSource"
> >> >> > driverClassName="oracle.jdbc.OracleDriver" url="XXX"
> >> >> > username="XX" password="XX" initialSize="1" maxActive="10"
> >> >> > minIdle="1" maxIdle="1" connectionCachingEnabled="true"
> >> >> > fastConnectionFailoverEnabled="true"
> >> >> > connectionCacheProperties="{MinLimit=1, MaxLimit=20,
> >> >> > InitialLimit=1, oracle.net.ns.SQLnetDef.TCP_CONNTIMEOUT_STR=3000}&q

Re: Tomcat DS question

[pradeep reddy]

Hi Chris,
It is not writing anything related to DBCP in catalina.out.

Thanks
Pradeep

On Tue, May 17, 2016 at 1:49 PM, Christopher Schultz <
ch...@christopherschultz.net> wrote:

> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
>
> Pradeep,
>
> On 5/17/16 2:51 PM, pradeep reddy wrote:
> > Thanks for response, would you know if there is any recommended
> > dbcp jar that we need to use for Oracle 12 and Tomcat 6 ?
>
> You don't need anything special. Woonson did not read your original
> configuration evidently, or the stack trace. Both of those show that
> DBCP is in fact in use and no special factory is being used.
>
> When you say that "it is not writing anything catalina.out", do you
> mean that catalina.out does not exist, is empty, or has log messages
> in it but nothing about DBCP itself?
>
> - -chris
> -BEGIN PGP SIGNATURE-
> Comment: GPGTools - http://gpgtools.org
> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
>
> iQIcBAEBCAAGBQJXO3XlAAoJEBzwKT+lPKRYoiIP/R5hPraVx3xDft+E4zLSPdon
> SM+9nQcqdTRGfLvjbOHdsH1Yt+4cRIhTegxHdfSalsHvBV8iuh5xPdcn4epwKZl4
> Twu+s8LTaNK5PD3bhV3qJtlNpg+IyBAQoqk9weZcHsgaa/0tfZEeH3tIrJbBoZ+L
> v///WExXCnviksBGxwk2w5iimYMcsyTVdADh/Pi8SgdinKtakxly+d0rfu0aUR2S
> KFfBMaKr4bqf22PxVM5IhNxURzrGep73b18mT0kZ96yTjWpan7lOBzyx6w+2u5GK
> +GIuwHGqqtoWDPxLEo9hG0JgNOCiLszNcdMGeyd3l3CXlPxp4vvMcj4LvUx7lqrs
> oJ/UoPNFgPW2SfJNSagluvlIcqMzkFADLu7pfF15QoHJQsR2gNcoFn6xLq4E08WM
> 0Igcyxn9+42Gkl5troeGnt0DOgMF4SzFATXg70263GwXELqLBHB6DYPBrugLmdCx
> XBhPGh9PAy/mT3wJ1qEVlAQCAl7vY5jI0E6ZBl1ljLcQM9x1YQZ3sJhPlOgcqMCB
> bERByGDx3DMls5/eWFwohPbVV2kG6xpDfvhW2ZLF1IP/+DHNyD/phyZZr9sPS164
> d7/eYEWL63qWCt1MR3AlXO37UDIRQ15kdcPuK9QCvR+nC/ULPqAGB50KeDe7YyLH
> fBuVMTq84RA9M1pCYCRy
> =W5lv
> -END PGP SIGNATURE-
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>

Re: Tomcat DS question

[pradeep reddy]

Also, how to determine if the application is using ojdbc6.jar or
tomcat-dbcp.jar for connection pool. Apologies I am not a developer and
want to understand the concept of connection pool.

Thanks
Pradeep

On Tue, May 17, 2016 at 2:32 PM, Woonsan Ko  wrote:

> I don't know much about that for Oracle. What I was trying to mention
> was simply that you can check if you have a system property
> (-Djavax.sql.DataSource.Factory=...) to use a custom one. (Even though
> it's not that common, but it's still possible to override it by system
> property.) Your configuration doesn't have the factory attribute, so
> if you don't have the specific system property, then you can rule out
> my suspicion and focus on some other possibilities.
>
> Regards,
>
> Woonsan
>
>
> On Tue, May 17, 2016 at 2:51 PM, pradeep reddy 
> wrote:
> > Thanks for response, would you know if there is any recommended dbcp jar
> > that we need to use for Oracle 12 and Tomcat 6 ?
> >
> > Thanks
> > Pradeep
> >
> > On Tue, May 17, 2016 at 11:07 AM, Woonsan Ko  wrote:
> >
> >> Hi Pradeep,
> >>
> >> I saw you had Oracle specific settings such as
> >> connectionCachingEnabled. So, maybe you're using Oracle specific
> >> DataSourceFactory instead of the default dbcp one.
> >> As far as I know, the default factory
> >> (org.apache...BasicDataSourceFactory) can be overridden by either
> >> factory attribute in the  element or
> >> javax.sql.DataSource.Factory system property.
> >> In that case, it might be an issue around the custom factory
> >> implementation, not tomcat.
> >>
> >> Regards,
> >>
> >> Woonsan
> >>
> >>
> >> On Mon, May 16, 2016 at 6:54 PM, pradeep reddy 
> >> wrote:
> >> > Hello Woonsan,
> >> >Via Jconsole I had validated all my changes that were made in
> >> > context.xml. But for some reason the logs doesn't show anything about
> >> > abandoned connections in catalina.out. I am not sure at this time if
> its
> >> a
> >> > bug in tomcat 6 or tomcat-dbcp.jar, but threaddumps clearly show that
> >> > threads are waiting on connections from connection pool.
> >> >
> >> > Thanks
> >> > Pradeep
> >> >
> >> > On Mon, May 16, 2016 at 4:38 PM, Woonsan Ko 
> wrote:
> >> >
> >> >> Hi Pradeep,
> >> >>
> >> >> Just in case, you might want to make sure your changes were really
> >> >> applied. For example, an effective context.xml could be in
> >> >> conf/Catalina/localhost/...
> >> >> If it was applied properly, the stack trace should have shown
> >> >> o.a.c.dbcp.AbandonedObjectPool#borrowObject() as well.
> >> >>
> >> >> Regards,
> >> >>
> >> >> Woonsan
> >> >>
> >> >>
> >> >> On Mon, May 16, 2016 at 5:54 PM, pradeep reddy <
> pradeep@gmail.com>
> >> >> wrote:
> >> >> > unfortunately it is not writing anything catalina.out :-(
> >> >> >
> >> >> > Thanks
> >> >> > Pradeep
> >> >> >
> >> >> > On Mon, May 16, 2016 at 3:47 PM, Christopher Schultz <
> >> >> > ch...@christopherschultz.net> wrote:
> >> >> >
> >> >> >> -BEGIN PGP SIGNED MESSAGE-
> >> >> >> Hash: SHA256
> >> >> >>
> >> >> >> Pradeep,
> >> >> >>
> >> >> >> On 5/16/16 5:13 PM, pradeep reddy wrote:
> >> >> >> > Hello Christopher,
> >> >> >> >
> >> >> >> > Let me post my thread dump here.
> >> >> >> >
> >> >> >> > All  HTTP threads are in WAITING state.
> >> >> >> >
> >> >> >> > "http-12453-346" daemon prio=10 tid=0x7fbd3061f800
> nid=0x59d0
> >> >> >> > in Object.wait() [0x7fbbe124f000] java.lang.Thread.State:
> >> >> >> > WAITING (on object monitor) at java.lang.Object.wait(Native
> >> >> >> > Method) at java.lang.Object.wait(Object.java:485) at
> >> >> >> >
> >> org.apache.tomcat.dbcp.pool.impl.GenericObjectPool.borrowObject(Generi
> >> >> >> cObjectPool.java:1104)
> >> >> >> >
> &g

Security Alerts Email Subscription

[Goutam, Pradeep]

Hello Team

Is there a mailing list for subscription to just the security alerts for Apache 
HTTP and Tomcat Server, If there is one can you please send it to me.

Thanks
Pradeep

This e-mail transmission may contain information that is proprietary, 
privileged and/or confidential and is intended exclusively for the person(s) to 
whom it is addressed. Any use, copying, retention or disclosure by any person 
other than the intended recipient or the intended recipient's designees is 
strictly prohibited. If you are not the intended recipient or their designee, 
please notify the sender immediately by return e-mail and delete all copies

RE: AJP protocol with Apache Tomcat Version 7.0.52

[Pradeep Kumar G M]

We are using mod_jk

 CAUTION - Disclaimer *
This e-mail contains PRIVILEGED AND CONFIDENTIAL INFORMATION intended solely
for the use of the addressee(s). If you are not the intended recipient, please
notify the sender by e-mail and delete the original message. Further, you are 
not
to copy, disclose, or distribute this e-mail or its contents to any other 
person and
any such actions are unlawful. This e-mail may contain viruses. Infosys has 
taken
every reasonable precaution to minimize this risk, but is not liable for any 
damage
you may sustain as a result of any virus in this e-mail. You should carry out 
your
own virus checks before opening the e-mail or attachment. Infosys reserves the
right to monitor and review the content of all messages sent to or from this 
e-mail
address. Messages sent to or from this e-mail address may be stored on the
Infosys e-mail system.
***INFOSYS End of Disclaimer INFOSYS***

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Windows registry entry missing on Tomcat Silent install - 9.0.20

[Pradeep Kumar M N]

Hi All,

I am using Tomcat 9.0.20. I am installing the Tomcat silently from a PowerShell 
script. But after silent installation, below mentioned registry entry seems not 
added.  I am passing a Config ini file to tomcat installer with /C option. This 
issue is only present when I pass the /C parameter. When I don't pass the 
parameter, registry entry seems to be added correctly in registry.

HKEY_LOCAL_MACHINE\SOFTWARE\Apache Software Foundation\Tomcat\9.0

apache-tomcat-9.0.20.exe /C=< tomcatConfig.ini file path> /S /D=

Below is the entry present in tomcatConfig.ini
JavaHome=$javaHomeEnv


Has one any encountered this issue ?

Thanks
Pradeep

DISCLAIMER: This e-mail contains PRIVILEGED AND CONFIDENTIAL INFORMATION 
intended solely for the use of the addressee(s). If you are not the intended 
recipient, please notify the sender by e-mail and delete the original message. 
Opinions, conclusions and other information in this transmission that do not 
relate to the official business of QuEST Global and/or its subsidiaries, shall 
be understood as neither given nor endorsed by it. Any statements made herein 
that are tantamount to contractual obligations, promises, claims or commitments 
shall not be binding on the Company unless followed by written confirmation by 
an authorized signatory of the Company.

RE: Windows registry entry missing on Tomcat Silent install - 9.0.20

[Pradeep Kumar M N]

Can anyone help on the below issue ?

From: Pradeep Kumar M N
Sent: Friday, September 06, 2019 11:55 AM
To: 'users@tomcat.apache.org' 
Subject: Windows registry entry missing on Tomcat Silent install - 9.0.20

Hi All,

I am using Tomcat 9.0.20. I am installing the Tomcat silently from a PowerShell 
script. But after silent installation, below mentioned registry entry seems not 
added.  I am passing a Config ini file to tomcat installer with /C option. This 
issue is only present when I pass the /C parameter. When I don't pass the 
parameter, registry entry seems to be added correctly in registry.

HKEY_LOCAL_MACHINE\SOFTWARE\Apache Software Foundation\Tomcat\9.0

apache-tomcat-9.0.20.exe /C=< tomcatConfig.ini file path> /S /D=

Below is the entry present in tomcatConfig.ini
JavaHome=$javaHomeEnv


Has one any encountered this issue ?

Thanks
Pradeep

DISCLAIMER: This e-mail contains PRIVILEGED AND CONFIDENTIAL INFORMATION 
intended solely for the use of the addressee(s). If you are not the intended 
recipient, please notify the sender by e-mail and delete the original message. 
Opinions, conclusions and other information in this transmission that do not 
relate to the official business of QuEST Global and/or its subsidiaries, shall 
be understood as neither given nor endorsed by it. Any statements made herein 
that are tantamount to contractual obligations, promises, claims or commitments 
shall not be binding on the Company unless followed by written confirmation by 
an authorized signatory of the Company.