Re: Concept doubt about threads & servlets

2012-09-28 Thread Mark Thomas
"André Warnier" wrote: >Jose María Zaragoza wrote: >> Hello: >> >> I've got a concept doubt about if it's possible perform many calls to >> the same servlet ( on the same session ) if the previous one didn't >> finish. > >Can you explain how precisely you would do that ? See below. I'd expect

Re: Concept doubt about threads & servlets

2012-09-28 Thread André Warnier
Jose María Zaragoza wrote: Hello: I've got a concept doubt about if it's possible perform many calls to the same servlet ( on the same session ) if the previous one didn't finish. Can you explain how precisely you would do that ? I know that a connection is assigned to a thread. If the clie

RE: Suggestions for obtaining mod_jk for Amazon EC2

2012-09-28 Thread Williams, Nick
> -Original Message- > From: Williams, Nick [mailto:nicholas.willi...@ul.com] > Sent: Friday, September 28, 2012 3:13 PM > To: Tomcat Users List > Subject: RE: Suggestions for obtaining mod_jk for Amazon EC2 > >>> From: Christopher Schultz [mailto:ch...@christopherschultz.net] >>> Subject:

RE: Suggestions for obtaining mod_jk for Amazon EC2

2012-09-28 Thread Williams, Nick
>> From: Christopher Schultz [mailto:ch...@christopherschultz.net] >> Subject: Suggestions for obtaining mod_jk for Amazon EC2 > >> I'm trying to set up an Amazon EC2 instance as a proxying web server >> for Tomcat using mod_jk. I'm using Amazon's basic "Linux" >> 32-bit AMI which doesn't include m

Concept doubt about threads & servlets

2012-09-28 Thread Jose María Zaragoza
Hello: I've got a concept doubt about if it's possible perform many calls to the same servlet ( on the same session ) if the previous one didn't finish. I know that a connection is assigned to a thread. If the client doesn't open more connection ( Keep-Alive: true ), all requests are processed by

Re: Suggestions for obtaining mod_jk for Amazon EC2

2012-09-28 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chuck, On 9/28/12 1:56 PM, Caldarale, Charles R wrote: >> From: Christopher Schultz [mailto:ch...@christopherschultz.net] >> Subject: Suggestions for obtaining mod_jk for Amazon EC2 > >> I'm trying to set up an Amazon EC2 instance as a proxying web

RE: Tomcat 6 serious issues on AIX 5.3

2012-09-28 Thread vincent . soosai
No, It could be Tomcat 6 / AIX OS 5.3 / Java 1.5 We reverted to Tomcat 4 - identical code base identical DB config and the app works like a charm (has been working for 2 years) The reason to upgrade is 2 fold - to stay current and to use Tomcat's Realm LDAP authentication mechanism. chuck.

RE: Suggestions for obtaining mod_jk for Amazon EC2

2012-09-28 Thread Caldarale, Charles R
> From: Christopher Schultz [mailto:ch...@christopherschultz.net] > Subject: Suggestions for obtaining mod_jk for Amazon EC2 > I'm trying to set up an Amazon EC2 instance as a proxying web server > for Tomcat using mod_jk. I'm using Amazon's basic "Linux" 32-bit AMI > which doesn't include much -

RE: Tomcat 6 serious issues on AIX 5.3

2012-09-28 Thread Caldarale, Charles R
> From: vincent.soo...@daimler.com [mailto:vincent.soo...@daimler.com] > Subject: Re: Tomcat 6 serious issues on AIX 5.3 > On machines with higher memory Tomcat does not crash but as I indicated we > get SocketException: > [2012-09-25 12:13:35,700] ERROR com.*Action - System Error > java.sql.SQL

Re: Security issue regarding JSESSIONID cookie

2012-09-28 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Joan, On 9/28/12 1:27 PM, Joan Morales wrote: > I already try with AJP, but I cant get rid of the JSESSIONID cookie > either Can you please describe your configuration for that scenario again? Your original description was a bit hard to follow. - -c

Suggestions for obtaining mod_jk for Amazon EC2

2012-09-28 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 All, I'm trying to set up an Amazon EC2 instance as a proxying web server for Tomcat using mod_jk. I'm using Amazon's basic "Linux" 32-bit AMI which doesn't include much -- specifically, a compiler. mod_jk does not appear to be in the list of package

Re: Tomcat 6 serious issues on AIX 5.3

2012-09-28 Thread vincent . soosai
Chris, I do understand the lack of information like stack trace etc and that is precisely my problem. In my past experience a version incompatibility could cause severe headaches and the symtoms don't point to much. Some more details about our env: For the upgrade, the server.xml was re-creat

Re: Security issue regarding JSESSIONID cookie

2012-09-28 Thread Joan Morales
Hi Cris, I already try with AJP, but I cant get rid of the JSESSIONID cookie either Regards, -- Joan Morales El 28/09/2012, a las 19:11, Christopher Schultz escribió: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Konstantin, > > On 9/28/12 10:27 AM, Konstantin Kolinko wrote: >> 2012

Re: Having web app deployment

2012-09-28 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Asiya, On 9/28/12 1:03 PM, ASIYA LABARAN wrote: > I am trying to use tomcat server to deploy a webapp called mifos > mfi. > > I created a folder in the C: (root folder) where i unzipped the > tomcat server 6.0.35 What was the name of the folder? Wh

Re: Tomcat 6 serious issues on AIX 5.3

2012-09-28 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Vincent, On 9/28/12 12:47 PM, vincent.soo...@daimler.com wrote: > We ran our web app on Tomcat 4 on an AIX 5.3 box Java 5_64 with no > issues for 2 years. Great. > We recently upgraded to Tomcat 6 and we are seeing some unusual > problems. How did

Re: Security issue regarding JSESSIONID cookie

2012-09-28 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Konstantin, On 9/28/12 10:27 AM, Konstantin Kolinko wrote: > 2012/9/28 Joan Morales : >> Hi, >> >> I have a security issue (hijack session) with JSESSIONID cookie, >> >> here is the problem: >> >> I am using an architecture with an Apache2 server i

Re: Having web app deployment

2012-09-28 Thread André Warnier
ASIYA LABARAN wrote: hello, I am trying to use tomcat server to deploy a webapp called mifos mfi. I created a folder in the C: (root folder) where i unzipped the tomcat server 6.0.35, created environment variables as required, placed the mfi folder there, installed a jdk and set up its environ

Tomcat 6 serious issues on AIX 5.3

2012-09-28 Thread vincent . soosai
We ran our web app on Tomcat 4 on an AIX 5.3 box Java 5_64 with no issues for 2 years. We recently upgraded to Tomcat 6 and we are seeing some unusual problems. 1) After working for 2-3 days with heavy load One of our functions errors with java.sql.SQLException: java.io.IOException:

Re: Security issue regarding JSESSIONID cookie

2012-09-28 Thread Shanti Suresh
Hi Joan, "cookie", from my understanding, uses the SSL session-ID as the cookie-value in the Tomcat container. This value will be different from what Apache assigns on the front-end SSL connection to the browser (as Konstantin pointed out). With tracking-mode COOKIE, I believe, a JSESSIONID cook

Re: Security issue regarding JSESSIONID cookie

2012-09-28 Thread Joan Morales
I put the SSL because I thought It was necessary to handle the SSL on TC, anyways I'll change It to COOKIE and see what happens. Another couple of ideas were to use a Valve for SSL on TC or enable the mod_header on Apache, but any idea on how this would help? Thanks, Joan -- Joan Morales

Re: Security issue regarding JSESSIONID cookie

2012-09-28 Thread Shanti Suresh
Hi Joan, What happens when you change the web.xml settings to: --web.xml: 30 COOKIE -- Thanks. -Shanti On Fri, Sep 28, 2012 at 10:58 AM, Konstantin Kolinko wrote: > 2012/9/28 Martin Gainty : > > > > that is NOT what

Re: Sticky sessions not working

2012-09-28 Thread Lou Henry
Thank you all for your responses. We found that sticky was set up properly. The problem was with the application and how it handles clustering. Thanks again... On Fri, Sep 21, 2012 at 11:51 PM, Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Ha

Re: Security issue regarding JSESSIONID cookie

2012-09-28 Thread Konstantin Kolinko
2012/9/28 Martin Gainty : > > that is NOT what the op asked for > > if the OP is implementing ssl via her FE Apache then she needs to implement > and config mod-ssl on that FE apache server > > You need to Understand what the op environment is before criticising the > solution > Martin The OP as

RE: Security issue regarding JSESSIONID cookie

2012-09-28 Thread Martin Gainty
that is NOT what the op asked for if the OP is implementing ssl via her FE Apache then she needs to implement and config mod-ssl on that FE apache server You need to Understand what the op environment is before criticising the solution Martin __ Ve

Re: Static Membership Session Replication

2012-09-28 Thread Konstantin Kolinko
2012/9/28 John Rellis : >> (...) >> > Keiichi, > > Thanks. OK so, when my tomcat starts it says : > > INFO: Receiver Server Socket bound to:localhost/127.0.0.1:4110 > > You reckon this should say the hostname of the machine tomcat is running > on, with the hostname (tomcatone) in /etc/hosts with m

Re: Security issue regarding JSESSIONID cookie

2012-09-28 Thread Konstantin Kolinko
2012/9/28 Joan Morales : > Hi, > > I have a security issue (hijack session) with JSESSIONID cookie, > > here is the problem: > > I am using an architecture with an Apache2 server in front of Tomcat, I > have configured the SSL in both sides Apache(ssl_module) and > Tomcat(Conectors JSSE), > > 1)

Re: Security issue regarding JSESSIONID cookie

2012-09-28 Thread malibo8...@gmail.com
Yes, just use all the static configuration on Apache servers, including requests via 80,443. and afterward, redirect them to the backend(your tomcat server). i think it should be okay what your mentioned of SSL configuration. 在 2012-9-28 下午3:18,"Joan Morales" 写道: > I understand what you say, but

Re: Static Membership Session Replication

2012-09-28 Thread John Rellis
On Mon, Sep 24, 2012 at 9:58 AM, Keiichi Fujino wrote: > Hi > > According to this log, > it does not seem to able to register for membership. > In your configuration, TcpFailureDetector behaves as an administrator > of a membership. > Therefore, TcpFailureDetector#performBasicCheck logs following

Re: Security issue regarding JSESSIONID cookie

2012-09-28 Thread Joan Morales
I understand what you say, but I need to go through apache to get into my tomcat, and if I just implement a "redirect" to the port :8443, the apache tells me that I need to use a SSLCertificateKeyFile, how can I configure the apache as a proxy to tomcat without specifying a SSLCertificateKeyFile?

RE: Security issue regarding JSESSIONID cookie

2012-09-28 Thread malibo8...@gmail.com
actually, there is no news to configure SSL both in Apache and tomcat. just one side is okay. Apache or tomcat. 在 2012-9-28 下午2:01,"Martin Gainty" 写道: > > you'll need to configure Apache mod_ssl to implement either Basic or > SSLRequire authentication > http://httpd.apache.org/docs/2.2/ssl/ssl_ho

RE: Security issue regarding JSESSIONID cookie

2012-09-28 Thread Martin Gainty
you'll need to configure Apache mod_ssl to implement either Basic or SSLRequire authentication http://httpd.apache.org/docs/2.2/ssl/ssl_howto.html#arbitraryclients with regards to external hosts i would suggest you deny all and allow secure access to only TC host to the secure folder of apache