Re: [ANN] New committer: Dimitris Soumis

2024-07-05 Thread Jonathan S. Fisher
Many new committers lately, congrats to everyone! On Fri, Jul 5, 2024 at 2:25 PM Mark Thomas wrote: > > On behalf of the Tomcat committers I am delighted to announce that > Dimitris Soumis (dsoumis) has been voted in as a new Tomcat committer. > > Please join me in congratulating Dimitris. > > Ki

Re: [EXT]Re: Tomcat 10 session replication fails

2024-04-13 Thread Jonathan S. Fisher
Sort of off topic, but sort of related. If you're having tremendous trouble using the built in replication methods, we built a redis based session manager: https://github.com/exabrial/redex-sm Currently redex-sm only works with Tomcat 8.5, but it wouldn't be a big leap to make it work with Tomcat

Re: [External] Re: Supporting Proxy Protocol in Tomcat

2023-11-27 Thread Jonathan S. Fisher
his thread. Is someone actively working on this? > > I am more than happy to contribute/help in any way to move this forward > quickly. > > > Thanks, > Adwait. > > On Tue, Sep 5, 2023 at 1:11 PM Mark Thomas wrote: > > > On 04/09/2023 15:41, Jonathan S. Fisher

Re: [External] Re: Supporting Proxy Protocol in Tomcat

2023-09-04 Thread Jonathan S. Fisher
ng proxy protocol > >>> support in Tomcat? > >> > >> I think that is a little too strong. At this point there is a proposed > >> approach and no one is objecting but until there is an actual patch to > >> discuss... > >> > >> K

Re: [External] Re: Supporting Proxy Protocol in Tomcat

2023-07-27 Thread Jonathan S. Fisher
mplement this > via a new plug-in framework but I am not sure it is worth the effort at > this point. Something to keep in mind if we have more things wanting to > integrate at this point in the processing chain. > > Mark > > > > > -chris > > > > [1] https:/

Re: [External] Re: Supporting Proxy Protocol in Tomcat

2023-07-26 Thread Jonathan S. Fisher
ssage- > > From: Amit Pande > > Sent: Wednesday, July 26, 2023 11:43 AM > > To: Tomcat Users List > > Subject: RE: [External] Re: Supporting Proxy Protocol in Tomcat > > > > Chris, Mark, > > > > Any thoughts on this? > > > > Mark,

Re: Problem with session timeout

2023-07-25 Thread Jonathan S. Fisher
Find all implementations of Session, then set breakpoiunt on session.invalidate() would be a good place to start. Another good place would be your SessionManager as it has several interesting methods. The JVM's JDI does not allow you to set breakpoint on an interface, but some IDE's have a magic t

Re: [External] Re: Supporting Proxy Protocol in Tomcat

2023-07-24 Thread Jonathan S. Fisher
Just a side note, because we're also very interested in this patch! Awhile back, I was successfully able to apply this patch and terminate TCP/TLS using HaProxy. We then had Tomcat listen on a unix domain socket and the Proxy protocol provided *most *of the relevant/required information to tomcat.

New Redis based SessionManager implementation: redex-sm

2023-07-12 Thread Jonathan S. Fisher
Hello Tomcat friends, We recently published to Maven Central (com.github.exabrial:redex-sm:1.0.2) a new Tomcat SessionManager that stores your serialized Sessions in Redis instance. Details and usage are available here: https://github.com/exabrial/redex-sm The advantage of using a SessionManager

Re: Enhancement: New option 'persistAuthentication' for session manager

2020-02-18 Thread Jonathan S. Fisher
https://github.com/cklein05/tomcat/pull/1/files Remy: Thank you for the feedback, but please see the other threads about this. The feature is not there right now because not everyone can/wants to use the Delta Session Manager. For instance, we do _not_ want a p2p architecture as they create scala

Re: Enhancement: New option 'persistAuthentication' for session manager

2020-02-18 Thread Jonathan S. Fisher
Open the pull request in your own fork... this link should work: https://github.com/cklein05/tomcat/compare/cklein05:master...cklein05:session-manager-persist-authentication?expand=1 On Tue, Feb 18, 2020 at 6:42 AM Carsten Klein wrote: > Mark, > > > Please don't be put off by the number of comme

Re: Enhancement: New option 'persistAuthentication' for session manager

2020-02-17 Thread Jonathan S. Fisher
Can you open a PR so we can diff your changes? Very excited to see this! We used a workaround in a Valve to add the authentication information into the session. On Mon, Feb 17, 2020 at 11:31 AM Carsten Klein wrote: > Hi there, > > finally, I got my first Tomcat enhancement ready. You can view it

Re: cloud cluster

2020-02-16 Thread Jonathan S. Fisher
We're doing the second: sessions stored in a Redis cluster with sticky sessions. This topology is simple and it scales pretty easily until it doesn't anymore [couple thousand simultaneous users]. You'll need to judiciously use your debugger and unix tools to find bottlenecks, as they're often hidde

Re: Tomcat doesn't propogate Security Credentials during session failover

2020-02-12 Thread Jonathan S. Fisher
ption is true). He encouraged > > me to write an enhancement/patch and provide it as a Pull Request. > > > > The only problem for me is lack of time. Although the code itself > > is quite simple, the things making me holding back are the Git > > stuff, making Tomcat

Re: Tomcat doesn't propogate Security Credentials during session failover

2020-02-11 Thread Jonathan S. Fisher
Apologies, I'm not seeing how this helps, I don't see where authentication information is transmitted On Tue, Feb 11, 2020 at 5:39 PM Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Jon, > > On 2

Re: Tomcat doesn't propogate Security Credentials during session failover

2020-02-11 Thread Jonathan S. Fisher
> What do you mean by logged out > If it's one from Redisson, then you should look at their code and not Tomcat's code. So you have two tomcat nodes: A & B, clustered in any fashion (forget I mentioned redisson) of your choosing; let's say they're clustered using the built in tcp point-to-point r