RE: Rediect to another Tomcat instance...

2012-10-31 Thread Tony Anecito
Many thanks Chuck! --- On Wed, 10/31/12, Caldarale, Charles R wrote: From: Caldarale, Charles R Subject: RE: Rediect to another Tomcat instance... To: "Tomcat Users List" Date: Wednesday, October 31, 2012, 4:04 PM > From: Tony Anecito [mailto:adanec...@yahoo.com] > Subject: Re: Rediect to

RE: Rediect to another Tomcat instance...

2012-10-31 Thread Caldarale, Charles R
> From: Tony Anecito [mailto:adanec...@yahoo.com] > Subject: Re: Rediect to another Tomcat instance... > I have a blog app that I want to isolate to another Tomcat instance and > leave my web services on my exsting one. Can I not run the second Tomcat > service on port 82 for example and redire

Re: Windows Service Security

2012-10-31 Thread Cédric Couralet
> Maybe as a suggestion for the people who make the installers for > Tomcat/Windows ? > > I'm not sure I understand (you'll have to excuse my poor understanding of english nuance :) ) My reply was not a suggestion, but it would be great if the installer could provide the option. I never looked how

Re: Rediect to another Tomcat instance...

2012-10-31 Thread Tony Anecito
Hi Andre,   I have a blog app that I want to isolate to another Tomcat instance and leave my web services on my exsting one. Can I not run the second Tomcat service on port 82 for example and redirect requests for my blog to the second Tomcat running of port 82?   Does that help? -Tony --- On W

Re: Windows Service Security

2012-10-31 Thread André Warnier
Cédric Couralet wrote: Bill, - create a local user, e.g. "tomcat" - stop Tomcat - use whatever path the Microsoft geniuses have invented this week to reach the Services applet - search for the "Apache Tomcat" Service - right click on it and select Settings or Properties (ditto) - in the tab "Log

Re: Rediect to another Tomcat instance...

2012-10-31 Thread André Warnier
Tony Anecito wrote: Hi All, I need to do a redirect from one Tomcat instance to another on the same physical server. That should be possible correct? From the way you phrase this, I guess you mean "proxy" rather than "re-direct". If so, as far as I know you are out of luck, because I thin

Rediect to another Tomcat instance...

2012-10-31 Thread Tony Anecito
Hi All,   I need to do a redirect from one Tomcat instance to another on the same physical server. That should be possible correct?   Regards, -Tony

Re: Windows Service Security

2012-10-31 Thread Cédric Couralet
> Bill, > > - create a local user, e.g. "tomcat" > - stop Tomcat > - use whatever path the Microsoft geniuses have invented this week to > reach the Services applet > - search for the "Apache Tomcat" Service > - right click on it and select Settings or Properties (ditto) > - in the tab "Login as" (

RE: Comma related bug in org.apache.catalina.valves.RemoteIpValve

2012-10-31 Thread Caldarale, Charles R
> From: André Warnier [mailto:a...@ice-sa.com] > Subject: Re: Comma related bug in org.apache.catalina.valves.RemoteIpValve > We'll probably end up with something like "regex1","regex2", > Or a single regex, with "|" between the alternatives (which could be a > workaround for you now, I gues

Re: Apache httpd reverse proxy setup

2012-10-31 Thread André Warnier
Marko Asplund wrote: Hi, There are at least 3 different approaches for configuring Apache httpd 2.2 to act as a reverse proxy for Tomcat 7.0: a) mod_proxy_http b) mod_proxy_ajp c) mod_jk There's been quite a lot of discussion about the differences of each one but a lot of that discussion appea

Re: Comma related bug in org.apache.catalina.valves.RemoteIpValve

2012-10-31 Thread André Warnier
Simon Dean wrote: -Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: 31 October 2012 17:18 To: Tomcat Users List Subject: Re: Comma related bug in org.apache.catalina.valves.RemoteIpValve -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Simon, On 10/3

Re: Windows Service Security

2012-10-31 Thread André Warnier
Martin Gainty wrote: Good Afternoon Bill did you have a chance to take a look at the how to for configuring Windows domain controller (to enable Tomcat to support Windows authentication) http://tomcat.apache.org/tomcat-7.0-doc/windows-auth-howto.html#Built-in_Tomcat_support Does this help?

Re: Apache httpd reverse proxy setup

2012-10-31 Thread Mark Thomas
On 31/10/2012 19:55, Marko Asplund wrote: > Hi, > > There are at least 3 different approaches for configuring Apache httpd 2.2 > to act as a reverse proxy for Tomcat 7.0: > > a) mod_proxy_http > b) mod_proxy_ajp > c) mod_jk > > There's been quite a lot of discussion about the differences of each

Apache httpd reverse proxy setup

2012-10-31 Thread Marko Asplund
Hi, There are at least 3 different approaches for configuring Apache httpd 2.2 to act as a reverse proxy for Tomcat 7.0: a) mod_proxy_http b) mod_proxy_ajp c) mod_jk There's been quite a lot of discussion about the differences of each one but a lot of that discussion appears to be either not ver

RE: Comma related bug in org.apache.catalina.valves.RemoteIpValve

2012-10-31 Thread Simon Dean
> -Original Message- > From: Christopher Schultz [mailto:ch...@christopherschultz.net] > Sent: 31 October 2012 17:18 > To: Tomcat Users List > Subject: Re: Comma related bug in > org.apache.catalina.valves.RemoteIpValve > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Simon, > > O

Re: unknown state in VisualVM

2012-10-31 Thread Charles Richard
Actually, never mind, wrong timestamp, apache and mod_jk are seemingly down during load with no errors in Apache or mod_jk log. Thanks, Charles On Wed, Oct 31, 2012 at 3:38 PM, Charles Richard < charle...@thelearningbar.com> wrote: > In case this would help further, I also see this in my debug m

Re: unknown state in VisualVM

2012-10-31 Thread Charles Richard
In case this would help further, I also see this in my debug mod_jk log: [Wed Oct 31 11:33:16 2012] [4110:47377141191536] [info] ajp_connect_to_endpoint::jk_ajp_common.c (995): Failed opening socket to ( 127.0.0.1:8011) (errno=111) [Wed Oct 31 11:33:16 2012] [4110:47377141191536] [error] ajp_send_

RFE: jarsToSkip option within each jar file

2012-10-31 Thread Jesse Farinacci
Greetings, I really like that Apache Tomcat provides a way to skip JAR files for scanning. I would like to see this become an optional property within the JAR file itself. Obviously, this means that the JAR would still have to be loaded up in order to discover the entry, but this would ease up fea

Re: Injecting JNDI datasource context outside tomcat container

2012-10-31 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Pramod, On 10/30/12 11:32 AM, p.krishnamoor...@accenture.com wrote: > Hi, > > I was working to inject the JNDI datasource context outside the > tomcat container. I referred this link - > https://blogs.oracle.com/randystuph/entry/injecting_jndi_data

Re: Comma related bug in org.apache.catalina.valves.RemoteIpValve

2012-10-31 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Simon, On 10/30/12 1:39 PM, Simon Dean wrote: > I'm using Tomcat 6.0.35 on Windows 7 and RHEL 6.x. I think I've > stumbled upon a bug in org.apache.catalina.valves.RemoteIpValve. I think you have, too. Please log this in Tomcat's bugzilla: https:

Re: How do I get Tomcat 7 to start up faster in Linux CentOS kernel version 2.6.18?

2012-10-31 Thread Mark Thomas
On 30/10/2012 21:55, Dilshad Shahid wrote: > I am experiencing a problem with slow start up times for Tomcat 7. I > have done some testing by tweaking configuration parameters both on > Linux CentOS kernel version 2.6.18 and on Windows 7 using this link as > my primary guide: http://wiki.apache.org

RE: Windows Service Security

2012-10-31 Thread Martin Gainty
Good Afternoon Bill did you have a chance to take a look at the how to for configuring Windows domain controller (to enable Tomcat to support Windows authentication) http://tomcat.apache.org/tomcat-7.0-doc/windows-auth-howto.html#Built-in_Tomcat_support Does this help? Martin __

Re: SSL BIO/NIO setup with openssl CA puzzle

2012-10-31 Thread Daniel Mikusa
On Oct 31, 2012, at 10:23 AM, Brian Burch wrote: > On 26/10/12 13:24, Daniel Mikusa wrote: >> On Oct 26, 2012, at 5:11 AM, Brian Burch wrote: >> >>> My production tomcat 7.0.26 (and its predecessors back as far as tc 5) have >>> been running with its original SSL server certificate in a JKS keys

Re: How do I get Tomcat 7 to start up faster in Linux CentOS kernel version 2.6.18?

2012-10-31 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dilshad, On 10/30/12 5:55 PM, Dilshad Shahid wrote: > I am experiencing a problem with slow start up times for Tomcat 7. How slow is "slow"? If it takes long enough to take a thread dump, please take one or more thread dumps to see what the JVM is d

Re: PDF Download problem tomcat >= 7.0.27

2012-10-31 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Johnny, On 10/30/12 3:44 PM, Johnny Six wrote: > It looks like Tomcat7 is munging the content-type header. The > correct response header should be: > > Content-Type: multipart/byteranges; boundary=CATALINA_MIME_BOUNDARY > << good Content-Type: > mult

Re: How do I get Tomcat 7 to start up faster in Linux CentOS kernel version 2.6.18?

2012-10-31 Thread Ognjen Blagojevic
Dilshad, On 30.10.2012 22:55, Dilshad Shahid wrote: I am experiencing a problem with slow start up times for Tomcat 7. I have done some testing by tweaking configuration parameters both on Linux CentOS kernel version 2.6.18 and on Windows 7 using this link as my primary guide: http://wiki.apache

RE: Windows Service Security

2012-10-31 Thread Leo Donahue - RDSA IT
>>-Original Message- >>From: Burn William [mailto:william.b...@willis.com] >>Sent: Wednesday, October 31, 2012 9:01 AM >>To: users@tomcat.apache.org >>Subject: Windows Service Security >>Can the Tomcat service run as a standard user, Yes >>does the user need elevated permissions, I don

Windows Service Security

2012-10-31 Thread Burn William
We are running Tomcat 7.0.29 on Windows 2008 R2 Service Pack 1. My question is this, the documentation specifically states, "For optimal security, the service should be run as a separate user, with reduced permissions (see the Windows Services administration tool and its documentation)." I am

Re: Handling requests when under load - ACCEPT and RST vs non-ACCEPT

2012-10-31 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Asankha, On 10/29/12 11:56 PM, Asankha C. Perera wrote: > Hi Chris > >> Sorry, also what is your OS (be as specific as possible) and what >> JVM are you running on? > Locally for the Wireshark capture I ran this on: > asankha@asankha-dm4:~$ uname -a

Re: SSL BIO/NIO setup with openssl CA puzzle

2012-10-31 Thread Brian Burch
On 26/10/12 13:24, Daniel Mikusa wrote: On Oct 26, 2012, at 5:11 AM, Brian Burch wrote: My production tomcat 7.0.26 (and its predecessors back as far as tc 5) have been running with its original SSL server certificate in a JKS keystore for many years. I decided to retire my ancient java-base