Mark Thomas wrote:
On 24/03/2015 20:47, David Marsh wrote:
Hi Felix,
Thanks fort your help!
I have enabled krb5 and gss debug.I altered CATALINA_OPTS in startup.bat and
also added the same definitions to the Java parameters in Configure Tomcat
tool.I definitely got more information when using
On 24/03/2015 20:47, David Marsh wrote:
> Hi Felix,
> Thanks fort your help!
> I have enabled krb5 and gss debug.I altered CATALINA_OPTS in startup.bat and
> also added the same definitions to the Java parameters in Configure Tomcat
> tool.I definitely got more information when using startup.bat,
Rainer Jung wrote:
Some numbers from a test here on RHEL 6, using Java 1.7.0_76 and TC
6.0.43, 7.0.59 and 8.0.20.
Measurement is taken directly after start (a) plus once after one
request to a non-existing page and two full GCs (b). Only manager was
deployed, not example webapps or docs. GC w
Some numbers from a test here on RHEL 6, using Java 1.7.0_76 and TC
6.0.43, 7.0.59 and 8.0.20.
Measurement is taken directly after start (a) plus once after one
request to a non-existing page and two full GCs (b). Only manager was
deployed, not example webapps or docs. GC was run using "jcmd P
Hi.
Just nitpicking, but with Kerberos everything has to be "just right" :
Is the keytab file used by Tomcat owned by the user under which Tomcat runs ?
(This may or may not matter under Windows, but it is absolutely mandatory under Linux, so
you may want to check).
Also verify that your SPNs a
Using startup.bat to launch tomcat :-
runas /env /user:tc01@kerbtest.local "startup.bat"
Here are the logs with the kerberos debug :-
Server startup in 509 ms
>>> KeyTabInputStream, readName(): KERBTEST.LOCAL
>>> KeyTabInputStream, readName(): HTTP
>>> KeyTabInputStream, readName(): win-tc01.kerb
Hi Felix,
Thanks fort your help!
I have enabled krb5 and gss debug.I altered CATALINA_OPTS in startup.bat and
also added the same definitions to the Java parameters in Configure Tomcat
tool.I definitely got more information when using startup.bat, not sure the
settings get picked up by the windo
Am 24.03.2015 um 21:25 schrieb David Marsh:
Everything is as described and still not working, except the jaas.conf is :-
com.sun.security.jgss.krb5.initiate {
com.sun.security.auth.module.Krb5LoginModule required
doNotPrompt=true
principal="HTTP/win-tc01.kerbtest.local@KERBTEST.LO
I copied old config file to mail yes.
> Date: Tue, 24 Mar 2015 21:17:59 +0100
> From: felix.schumac...@internetallee.de
> To: users@tomcat.apache.org
> Subject: Re: SPNEGO test configuration with Manager webapp
>
> Am 24.03.2015 um 21:05 schrieb David Marsh
Everything is as described and still not working, except the jaas.conf is :-
com.sun.security.jgss.krb5.initiate {
com.sun.security.auth.module.Krb5LoginModule required
doNotPrompt=true
principal="HTTP/win-tc01.kerbtest.local@KERBTEST.LOCAL"
useKeyTab=true
keyTab="C:/Program Fi
Am 24.03.2015 um 21:05 schrieb David Marsh:
Sorry thats :-
principal="HTTP/win-tc01.kerbtest.local@KERBTEST.LOCAL"
under jaas.conf, it is set to the tomcat server DNS.
Is it working with this configuration, or just to point out, that you
copied the wrong jaas.conf for the mail?
Felix
Am 24.03.2015 um 21:02 schrieb David Marsh:
I'm trying to get SPNEGO authentication working with Tomcat 8.
I've created three Windows VMs :-
Tomcat Server - Windows 8.1 32 bit VM
Test Client - Windows 8.1 32 bit VM
Domain Controller - Windows Server 2012 R2 64 bit VM
The Tomcat Server and the
Sorry thats :-
> principal="HTTP/win-tc01.kerbtest.local@KERBTEST.LOCAL"
under jaas.conf, it is set to the tomcat server DNS.
> From: dmars...@outlook.com
> To: users@tomcat.apache.org
> Subject: SPNEGO test configuration with Manager webapp
> Date: Tue,
I'm trying to get SPNEGO authentication working with Tomcat 8.
I've created three Windows VMs :-
Tomcat Server - Windows 8.1 32 bit VM
Test Client - Windows 8.1 32 bit VM
Domain Controller - Windows Server 2012 R2 64 bit VM
The Tomcat Server and the Test Client are joined to the same domain
k
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Rahul,
On 3/24/15 11:56 AM, Rahul Kumar Singh wrote:
> Some of the observations during the GC call monitoring / heap dump
> from JMAP:
>
>
> Tomcat Version
>
> Stages
>
> Java Heap Usage
>
> Java Heap Capacity
>
> Virtual memory (by top)
>
>
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
André,
On 3/24/15 10:24 AM, André Warnier wrote:
> Christopher Schultz wrote:
>> -BEGIN PGP SIGNED MESSAGE- Hash: SHA256
>>
>> André,
>>
>> On 3/23/15 11:26 AM, André Warnier wrote:
>>> Christopher Schultz wrote:
-BEGIN PGP SIGNED
Some of the observations during the GC call monitoring / heap dump from JMAP:
Tomcat Version
Stages
Java Heap Usage
Java Heap Capacity
Virtual memory
(by top)
Resident Memory
(by top)
Tomcat 6
After tomcat startup
17.18 MB
367.8 MB
6712 MB
175 MB
After functional operation
18.77 MB
On 24/03/2015 15:17, David Marsh wrote:
SPNEGO is fickle. Sometimes the smallest change can cause problems.
Set up a test environment as close to the How-To as possible. You should
definitely be using three separate machines (or VMs).
Get this working. If your test environment doesn't work, fi
Johan Compagner wrote:
I understand all that. But the basic view, from a sysadmin's point of
view is this :
Tomcat 6(6.0.28)
Virtual Memory: 6772 MB
Resident Memory: 81 MB
Tomcat 7(7.0.54)
Virtual Memory: 6778 MB
Resident Memory: 148 MB
what does that Resident exactly mean here?
i guess th
On 24/03/2015 15:04, Johan Compagner wrote:
>>
>>
>> I understand all that. But the basic view, from a sysadmin's point of
>> view is this :
>>
>> Tomcat 6(6.0.28)
>> Virtual Memory: 6772 MB
>> Resident Memory: 81 MB
>>
>> Tomcat 7(7.0.54)
>> Virtual Memory: 6778 MB
>> Resident Memory: 148 MB
>>
>
I was using Internet explorer and had added the ip address of to domain
controller/ tomcat server to the trusted sites list in the Intranet zone.I was
not using https.I was using a Windows 8 client VM to talk to a Windows Server
2012 VM.
I have now tried Firefox with SPNEGO and can confirm with
>
>
> I understand all that. But the basic view, from a sysadmin's point of
> view is this :
>
> Tomcat 6(6.0.28)
> Virtual Memory: 6772 MB
> Resident Memory: 81 MB
>
> Tomcat 7(7.0.54)
> Virtual Memory: 6778 MB
> Resident Memory: 148 MB
>
>
what does that Resident exactly mean here?
i guess the t
On 3/24/2015 10:24 AM, André Warnier wrote:
Christopher Schultz wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
André,
On 3/23/15 11:26 AM, André Warnier wrote:
Christopher Schultz wrote:
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256
Chuck,
On 3/23/15 10:33 AM, Caldarale, Charles
Hello,
I'm using JMX to stop and start the 8443 connector, but it seems that
if an error is encountered during the start operation the socket is
not being released and subsequent stop operations have no effect, i.e.
tomcat continues to hold the socket. This prevents the connector from
being restart
Christopher Schultz wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
André,
On 3/23/15 11:26 AM, André Warnier wrote:
Christopher Schultz wrote:
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256
Chuck,
On 3/23/15 10:33 AM, Caldarale, Charles R wrote:
From: Christopher Schultz
[mailto:c
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
André,
On 3/23/15 11:26 AM, André Warnier wrote:
> Christopher Schultz wrote:
>> -BEGIN PGP SIGNED MESSAGE- Hash: SHA256
>>
>> Chuck,
>>
>> On 3/23/15 10:33 AM, Caldarale, Charles R wrote:
From: Christopher Schultz
[mailto:ch...@
David Marsh wrote:
Hello,
I'm trying to get SPNEGO authentication working with Tomcat 8.
I've followed the guidelines on the website.
jaas.conf
com.sun.security.jgss.krb5.initiate {...};
com.sun.security.jgss.krb5.accept {com.sun.security.auth.module.Krb5LoginModule required
doNotPrompt=t
Hello,
I'm trying to get SPNEGO authentication working with Tomcat 8.
I've followed the guidelines on the website.
jaas.conf
com.sun.security.jgss.krb5.initiate {...};
com.sun.security.jgss.krb5.accept {
com.sun.security.auth.module.Krb5LoginModule requireddoNotPrompt=true
principal="HT
On 3/23/2015 11:28 PM, Rahul Kumar Singh wrote:
>Also interesting is "cat /proc/PID/maps" but here one would need to calculate
sizes per line from the two hex addresses given at the start of each line. Something like:
>cat /proc/PID/maps | perl -n -e '($a,$b)=split(/[- ]/);print hex($b)-hex($a),
29 matches
Mail list logo
