Re: Wish to use an independent class module in Tomcat

2012-06-27 Thread Terence M. Bandoian
On 1:59 PM, Cotton, Joseph B wrote: My question may be covered by the Tomcat documentation and I am just confused by all the new terminology. I have spent hours in reading and still I am looking to an answer. We wish to have a class running on Tomcat that contains system wide info and multiple

Re: Wish to use an independent class module in Tomcat

2012-06-27 Thread Terence M. Bandoian
On 1:59 PM, Cotton, Joseph B wrote: My question may be covered by the Tomcat documentation and I am just confused by all the new terminology. I have spent hours in reading and still I am looking to an answer. We wish to have a class running on Tomcat that contains system wide info and multiple

RE: How to initiate session id change from application code?

2012-06-27 Thread Martin Gainty
Good Evening Pavel Implementing a SSL Connector on Tomcat will prevent Session Fixation attack http://tomcat.apache.org/tomcat-7.0-doc/ssl-howto.htmlEz az üzenet bizalmas. Ha nem ön az akinek szánva volt, akkor kérjük, hogy jelentse azt nekünk vissza. Semmiféle továbbítása vagy másolatának k

How to initiate session id change from application code?

2012-06-27 Thread Pavel Arnošt
Hi, can I force Tomcat to change session id from my application code? I know that in Tomcat7 there is a "changeSessionIdOnAuthentication" attribute that can be used with container managed security, but how can I protect my application from session fixation attacks if I don't use container managed

Re: High CPU usage in Tomcat 7

2012-06-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 James, On 6/20/12 12:27 PM, James Lampert wrote: > We just had a report of extremely high CPU usage from the Tomcat > job on one of our customer installations. A WRKACTJOB screen shot > from before we forcibly shut Tomcat down and restarted it shows:

Re: Failed allocating AJP message buffer

2012-06-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Pierre, On 6/27/12 11:36 AM, Pierre Ayotte wrote: > Just to let you know that installing the latest release of mod_jk > resolved our issue with http crashing with errors "Failed > allocating AJP message buffer" in mod_jk.log. So we pass from > 1.2.35

Re: Failed allocating AJP message buffer

2012-06-27 Thread Pierre Ayotte
Hi everyone, Just to let you know that installing the latest release of mod_jk resolved our issue with http crashing with errors "Failed allocating AJP message buffer" in mod_jk.log. So we pass from 1.2.35 to 1.2.37. Regards, 2012/6/22 Pierre Ayotte > Hello Christopher, > > Yes we saw on wedn

Re: using clearReferencesStopTimerThreads value for context

2012-06-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mark, On 6/27/12 4:12 AM, Mark Thomas wrote: > Getting rid of that message is simple. Fix the bug in the web > application. +1 FWIW, Oracle/MySQL says that this bug has been fixed in Connector/J 5.1.11 (http://bugs.mysql.com/bug.php?id=36565). If yo

Re: how to configure Tomcat for leveraging browser caching?

2012-06-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Subhrajyoti, On 6/27/12 3:16 AM, choudh...@labware.com wrote: > Hi , I ran Google's Page Speed( > https://developers.google.com/speed/pagespeed/ ) on our web app to > analyze and optimize our web site . > > One of the many items under Web Performanc

Re: Tomcat DBCP Connection pool issue

2012-06-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kiran, On 6/26/12 7:24 PM, Kiran Badi wrote: > type="javax.sql.DataSource" maxActive="100" maxIdle="30" > maxWait="1" 100 active db connections sounds like a lot. Do you really need to support 100 simultaneous connections to your database? Can y

R: multiple tomcat on same server ajp stops working

2012-06-27 Thread Pierluigi Santin Fintel
THAT'S THE ANSWER!the shutdown port of the 4th tomcat was colliding with the ajp port of the 1st tomcat and so on. Changed the ajp port to avoid this solved the problem. There was nothing in the logs . Thanks again Kostantin -Messaggio originale- Da: Konstantin Kolinko [mailto:knst.

Re: restrict per user public_html to serve static files only...

2012-06-27 Thread Kim
Hi, Warnier 2012/6/27 André Warnier : > Kim, when we ask to not "top-post", here is what we mean. > This is a "correctly" formatted version of your last message : > > -- start > > > Hi, Charles > Really sorry as I'm new here. > >> >> 2012/6/27 Caldarale, Charles R : From: Kim [mailto:k..

Re: multiple tomcat on same server ajp stops working

2012-06-27 Thread Konstantin Kolinko
2012/6/27 Pierluigi Santin Fintel : > I have a situation where i have several tomcats installed on the same server > (windows) Each tomcat has its own ports the first listens to 8080 ajp 8009 > the second listens to 8081 ajp 8010 > > I have this problem running 7 tomcats from port 8080 to 8086 wo

Re: restrict per user public_html to serve static files only...

2012-06-27 Thread Kim
Hi, Kolinko Really thanks. Yes, I have hunt down to UserConfig in the source tree on Tomcat and can modify UserConfig.java to skip those user context if there exists a /WEB-INF/web.xml in their public_html directory. And I can also insert a Valve filter to skip those URL with jsp extension ... But

Re: restrict per user public_html to serve static files only...

2012-06-27 Thread André Warnier
Kim, when we ask to not "top-post", here is what we mean. This is a "correctly" formatted version of your last message : -- start Hi, Charles Really sorry as I'm new here. 2012/6/27 Caldarale, Charles R : From: Kim [mailto:k...@aerodrive.com] Subject: Re: restrict per user public_html to ser

Re: restrict per user public_html to serve static files only...

2012-06-27 Thread Kim
Hi, Charles Really sorry as I'm new here. ok. here is the ans to your question - You first say users cannot have dynamic content, then state that users can have their own servlets. Both can't be true at the same time. ans : I would like to restrict the per user web application to only serve static

RE: restrict per user public_html to serve static files only...

2012-06-27 Thread Caldarale, Charles R
> From: Kim [mailto:k...@aerodrive.com] > Subject: Re: restrict per user public_html to serve static files only... Please do not top-post; it's rude and annoying. > each user can have his/her own web.xml and can do whatever URL > mapping in web.xml to serve his/her servlet ??? You first say us

multiple tomcat on same server ajp stops working

2012-06-27 Thread Pierluigi Santin Fintel
I have a situation where i have several tomcats installed on the same server (windows) Each tomcat has its own ports the first listens to 8080 ajp 8009 the second listens to 8081 ajp 8010 I have this problem running 7 tomcats from port 8080 to 8086 work fine but ajp of the first 3 (8009,8010,80

Re: restrict per user public_html to serve static files only...

2012-06-27 Thread Konstantin Kolinko
2012/6/27 Kim : > Hi, Dear all > I'm using tomcat 6.0.35 on linux CentOS 5.7 using sun jdk jdk1.5.0_11. > I need to enable public_html for my user but for security reason, I > would like restrict the functions to serve static files only. > Can anyone tell me how to do that ? > Actually I can build

Re: using clearReferencesStopTimerThreads value for context

2012-06-27 Thread Supun Malinga
Hi, On Wed, Jun 27, 2012 at 1:42 PM, Mark Thomas wrote: > On 27/06/2012 03:04, Supun Malinga wrote: > > Hi all, > > > > Say I have a webapp that don't stop all the timer threads it started upon > > the webapp undeploy/stop. So tomcat prints an error, > > "The web application [/NewStratosDBAccess

Re: restrict per user public_html to serve static files only...

2012-06-27 Thread André Warnier
Kim wrote: Hi, Andre How so ? can you explain ? After all, Tomcat itself has to know if the resource being served is a servlet or jsp page or something else, in order to serve it properly. So how come you cannot do the same ? ans : each user can have his/her own web.xml and can do whatever URL m

Re: using clearReferencesStopTimerThreads value for context

2012-06-27 Thread Mark Thomas
On 27/06/2012 03:04, Supun Malinga wrote: > Hi all, > > Say I have a webapp that don't stop all the timer threads it started upon > the webapp undeploy/stop. So tomcat prints an error, > "The web application [/NewStratosDBAccessServlet] appears to have started a > thread named [MySQL Statement Can

Re: restrict per user public_html to serve static files only...

2012-06-27 Thread Kim
Hi, Andre How so ? can you explain ? After all, Tomcat itself has to know if the resource being served is a servlet or jsp page or something else, in order to serve it properly. So how come you cannot do the same ? ans : each user can have his/her own web.xml and can do whatever URL mapping in web

Re: restrict per user public_html to serve static files only...

2012-06-27 Thread André Warnier
Regarding the style of communications : on this list, it is preferred if posters answer *below* the respective text to which they refer, not on top of the message. It makes it so much easier to follow the flow of the conversation (rather than having to scroll up and down to find the appropriate p

Re: restrict per user public_html to serve static files only...

2012-06-27 Thread Kim
Hi,Mikolaj Actually I would like to get rid of apache httpd Regards, Kim 2012/6/27 Mikolaj Rydzewski : > On 27.06.2012 06:58, Kim wrote: > >> I'm using tomcat 6.0.35 on linux CentOS 5.7 using sun jdk jdk1.5.0_11. >> I need to enable public_html for my user but for security reason, I >> would like

Re: restrict per user public_html to serve static files only...

2012-06-27 Thread Mikolaj Rydzewski
On 27.06.2012 06:58, Kim wrote: I'm using tomcat 6.0.35 on linux CentOS 5.7 using sun jdk jdk1.5.0_11. I need to enable public_html for my user but for security reason, I would like restrict the functions to serve static files only. Can anyone tell me how to do that ? IMO apache httpd suits b

how to configure Tomcat for leveraging browser caching?

2012-06-27 Thread Choudhury
Hi , I ran Google's Page Speed( https://developers.google.com/speed/pagespeed/ ) on our web app to analyze and optimize our web site . One of the many items under Web Performance Best Practices ( https://developers.google.com/speed/docs/best-practices/caching#LeverageBrowserCaching ) as l