Re: Security issue regarding JSESSIONID cookie

2012-09-28 Thread Konstantin Kolinko
cked over the logs and there are no error neither > in apache nor tomcat > > So, Is this solution implementable under this architecture? > Am I missing some configurations? > So you are trying to do Browser -> (HTTPS) -> Apache HTTPD -> (HTTPS) -> Tomcat In this ca

Re: Static Membership Session Replication

2012-09-28 Thread Konstantin Kolinko
IP address that does not belong to your server). Try to explicitly specify an IP address instead of hostname. > In the mean time, can anyone explain the difference to me?? > Are you asking, what is 127.0.0.1 and why it is not visible from other servers? http://en.wikipedia.org/wiki/Loopback

Re: Security issue regarding JSESSIONID cookie

2012-09-28 Thread Konstantin Kolinko
2012/9/28 Martin Gainty : > > that is NOT what the op asked for > > if the OP is implementing ssl via her FE Apache then she needs to implement > and config mod-ssl on that FE apache server > > You need to Understand what the op environment is before criticising the > solution > Martin The OP as

Re: Problems with Realm

2012-09-29 Thread Konstantin Kolinko
2012/9/29 sohsoh : > Hello Tomcatters, > > I am beginner in development, I wanted to do the user authentication, I am I > followed a tutorial for it to the letter, but in the final step I fell into > a problem that I did not arrive for a week of web search to solve it > -- after login he goes searc

Re: How to limit the number of sessions per IP address (DOS attacks)

2012-09-30 Thread Konstantin Kolinko
> engine level, or at the Linux level (IPTables/firewall), or adding Apache > HTTPD server before Tomcat. > 1. You can write a Filter. 2. Your requests to your demo page are authenticated? If yes, maybe you can track abuse from there (and ban abusers). If not, do you need a session for th

Re: Security issue regarding JSESSIONID cookie

2012-09-30 Thread Konstantin Kolinko
2012/9/28 Christopher Schultz : > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Konstantin, > > On 9/28/12 10:27 AM, Konstantin Kolinko wrote: >> 2012/9/28 Joan Morales : >>> Hi, >>> >>> I have a security issue (hijack session) with JSESSI

Re: maxHTTPHeaderSize, and specific header lengths

2012-09-30 Thread Konstantin Kolinko
http.html > [1] https://httpd.apache.org/docs/2.2/mod/core.html#limitrequestfieldsize Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Security issue regarding JSESSIONID cookie

2012-09-30 Thread Konstantin Kolinko
2012/9/30 Konstantin Kolinko : > 2012/9/28 Christopher Schultz : >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA1 >> >> Konstantin, >> >> On 9/28/12 10:27 AM, Konstantin Kolinko wrote: >>> 2012/9/28 Joan Morales : >>>> Hi, >&g

Re: How to limit the number of sessions per IP address (DOS attacks)

2012-10-01 Thread Konstantin Kolinko
srupt service for the legitimate demo clients. . Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: maxHTTPHeaderSize, and specific header lengths

2012-10-01 Thread Konstantin Kolinko
2012/10/1 Andrew Todd : > On Sun, Sep 30, 2012 at 6:21 AM, Konstantin Kolinko > wrote: >> In Tomcat each request processor has a byte buffer and all the headers >> must fit into that buffer. > > Thanks so much for the detailed response. I have a couple more questions:

Re: server.xml hostname from ServletContext

2012-10-01 Thread Konstantin Kolinko
tAttribute(name, value) > See the following documentation for Tomcat 6 (which is where I've tried > this). > > http://tomcat.us.apache.org/tomcat-6.0-doc/jndi-resources-howto.html > http://tomcat.us.apache.org/tomcat-6.0-doc/config/context.html > The server name above s

Re: Problems Increassing -Xmx

2012-10-02 Thread Konstantin Kolinko
> you need to set. > +1 >> it seems that tomcat ignores me > > These are not Tomcat parameters, they are JVM system properties. > +1 s/properties/options/, and only for Sun/Oracle/OpenJDK JVM An OutOfMemory is a strange way to test this option. It is easy to exhaust a

Re: Tomcat as a service question

2012-10-02 Thread Konstantin Kolinko
;= displays all services running > What version of Windows and what version of commons-daemon are you using? Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Excessive logging with Tomcat 7.0.30 - how to adjust it?

2012-10-03 Thread Konstantin Kolinko
2012/10/3 Joseph Freemaker : > > Just upgraded to Tomcat 7.0.30 from Tomcat 5.5. > > With Tomcat 5.5 the catalina log contained what was directed to it. The > stderr and stdout logs only contained what was directed to them (very little > if anything). > > Tomcat 7.0.30 however is writing to the

Re: Building tcnative-trunk

2012-10-04 Thread Konstantin Kolinko
;configure.in" then the "--with-java-home" will start working. The native/BUILDING file could mention the "--with-java-home" switch. Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Reloading context.xml

2012-10-05 Thread Konstantin Kolinko
2012/10/5 Anjib Mulepati : > > Quick question. If I made change to (\META_INF\context.xml) file do i have > to restart tomcat server to load changes? > You need to undeploy & deploy your web application. Recent versions of Tomcat 7 should do that automatically if autoDeploy is enabled on the Host

Re: INFO: Marking servlet jsp as unavailable

2012-10-11 Thread Konstantin Kolinko
s not redistribute Tomcat libraries inside of its WEB-INF/lib directory. I see that you are using Maven to build the project. It is known that it can pull in a lot of odd stuff if not used correctly. There were other users experiencing similar issue before, so s

Re: INFO: Marking servlet jsp as unavailable

2012-10-11 Thread Konstantin Kolinko
27;t working. I have everything installed, > Path's and Codes are the same. Do you have any idea why it work on my > system but not in my virtual machine (Vagrant)? It is the same OS as > well. > > Greetings, Clodan > > Von: Konstantin Kolinko > An: Tom

Re: AW: AW: WebSockets and HTTPS problems

2012-10-11 Thread Konstantin Kolinko
t-7.0.33-r1397089.tar.gz > > This is not an official release. Use it at your own risk. I'll take it > down again in a few days. > Mark, I see you committed the fix to trunk in http://svn.apache.org/viewvc?view=revision&revision=1397086 but I do not see such commit for 7.0.x (onl

Re: Have a problem where in stdout.log have warning messages with Tomcat 7

2012-10-12 Thread Konstantin Kolinko
2012/10/12 Issac Koshy : > Hi > > I have a problem where in stdout.log have warning messages with tomcat 7. > > This warning messages are with respect to Parameters passing to resource > tag. i dont want to change the tags its current form in tomcat 7 Why? There is no such element as "ResourcePa

Re: Connection reset and Socket closed exceptions while connecting to SQL Server 2008 database

2012-10-15 Thread Konstantin Kolinko
figure a validationQuery and testOnBorrow="true" http://commons.apache.org/dbcp/configuration.html (It is a FAQ issue. Search previous discussions of validationQuery in the mailing list archives). Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Tomcat bug 53814 - PDF plugin in IE cannot download correctly

2012-10-15 Thread Konstantin Kolinko
would be the one browser > to have this problem handling standards-compliant syntax! > The essence of Comment 5 in bug 53814 is that one has to contact Adobe first for their comment. Thus far (a month passed) it seems that nobody who is affected by this issue have have tried that. Bes

Re: FAIL - Application at context path /test could not be started

2012-10-16 Thread Konstantin Kolinko
2012/10/16 majin_clo...@t-online.de : > Hello guys, > > well I could successfull deploy my web-application "test" on tomcat. > My problem is now: If I want to run my web-application I get the > following error: > > FAIL - Application at context path /test could not be started > >

Re: Failed JAR-scanning in Tomcat 7.0.32

2012-10-16 Thread Konstantin Kolinko
scan log4j.jar It should already be excluded (as "log4j*.jar" mask is mentioned in tomcat.util.scan.DefaultJarScanner.jarsToSkip property in catalina.properties). Best regards, Konstantin Kolinko - To unsubscribe,

Re: JNDI datasource error upgrading from Tomcat 7.0.23 to 7.0.27

2012-10-27 Thread Konstantin Kolinko
ither in the > app or in the global web.xml, psi-probe complains that the resource is not > configured correctly. > > Any suggestions about what I'm missing? Thanks. > Do you know that $CATALINA_HOME/conf/context.xml does not define a "global"

Re: Tomcat digest SHA

2012-11-06 Thread Konstantin Kolinko
you have one, it should be self-explanatory which version of SHA was used to produce it. Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-

Re: WebappClassLoader weak/soft reachable

2012-11-06 Thread Konstantin Kolinko
d of leak goes undetected. I mean the leak through a shared Exception instance and its native stacktrace. See https://issues.apache.org/bugzilla/show_bug.cgi?id=50460 https://issues.apache.org/bugzilla/show_bug.cgi?id=53936 (Linked from https://wiki.apache.org/tomcat/MemoryLeakProtection) Best

Re: Thread starvation with JDBCStore

2012-11-06 Thread Konstantin Kolinko
wonder whether it is possible to implement expiration in JDBCStore more effectively. Couldn't expired sessions be selected with one SQL statement, instead of iterating over the all of them and loading them one-by-one? That is what the default implementation in StoreBase#processExpires() does. The

Re: RemoteIpValve lacking default 172.16/12

2012-11-06 Thread Konstantin Kolinko
31.255.255 So maybe 172\.(1[6-9])|(2\d)|(3[01])\.\d\d?\d?\.\d\d?\d? That will be 16-19, 20-29, 30-31 for the second byte. (I'd be better to have some unit tests, to be sure). [1] http://en.wikipedia.org/wiki/Private_network#Private_IPv4_address_spaces Best regards, Konstantin Kolinko ---

Re: Mystery migrating from tomcat 6 to 7

2012-11-06 Thread Konstantin Kolinko
you are using allowLinking="true"...) 2. Have you seen the "Migration guide"? http://tomcat.apache.org/migration.html 3. Maybe you can try with some simple web application that also uses Struts? 4. Configure an AccessLogValve in your web application. Does those 404 response

Re: WebappClassLoader weak/soft reachable

2012-11-06 Thread Konstantin Kolinko
2012/11/6 Christopher Schultz : > On 11/6/12 10:37 AM, Konstantin Kolinko wrote: >> 2012/11/6 Christopher Schultz : > >> 2) I know of a bug in JVM when a certain kind of leak goes >> undetected. I mean the leak through a shared Exception instance >> and its nati

Re: WebappClassLoader weak/soft reachable

2012-11-06 Thread Konstantin Kolinko
in a stack trace (it is what it is used for). I usually run with logAbandoned being turned off. Do you have opened connections in your pool? Do you have closeMethod="close" on your pool definition? > > jdk1.7.0_09.jdk > Tomcat 7.0.32 > I wonder whether there are any differe

Re: WebappClassLoader weak/soft reachable

2012-11-06 Thread Konstantin Kolinko
/config/globalresources.html#Resource_Definitions ) > I'm happy to provide a memory snapshot or even a screenshot ... You are on your own with this. I would not have much time to dig into this further. Maybe others can help. I think those chains of weak references are not an i

Re: Thread starvation with JDBCStore

2012-11-06 Thread Konstantin Kolinko
ould be a future enhancement but does not completely > solve this issue. > https://issues.apache.org/bugzilla/show_bug.cgi?id=34319 > https://issues.apache.org/bugzilla/show_bug.cgi?id=47281 > BZ 47281 has the same idea that I mentioned, to use a SELECT WHERE. ;) Best regards, Konstant

Re: Understanding RequestDispatcher

2012-11-07 Thread Konstantin Kolinko
app, so I don't know where to start digging. > > Any ideas what configuration can enforce such a behavior? > > some data: > java 1.7.0-b147 > tomcat 6.0.35 > spring 3.1.0 (with a lot of interceptors) > connectors: > > maxThreads="900" > redirectPort="8443" > emptySessionPath="true" > /> > connectionTimeout="2" >emptySessionPath="true" >redirectPort="8443" >/> > Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Problem WAR-file-deployment tomcat 6.0.36

2012-11-08 Thread Konstantin Kolinko
dWar.expand(ExpandWar.java:168) It sounds as if your war file contains a directory "web.xml/" as well as a web.xml file. You cannot create a directory when a file with the same name already exists. You can use "jar -t" to list the files cont

Re: Form based login authentication

2012-11-08 Thread Konstantin Kolinko
to be trying to get rid of > the url rewrite), but since this is a new environment I may not have a grip of > the appropriate tags to be searching. > BTW, if you want to try running with a debugger, see https://wiki.apache.org/tomcat/FAQ/Developing#Debugging Best regards, Konsta

Re: rotation of catalina.out on restart but no truncation

2012-11-09 Thread Konstantin Kolinko
an empty catalina.out file. Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: rotation of catalina.out on restart but no truncation

2012-11-09 Thread Konstantin Kolinko
specific packages. You'll need to find the script and > adjust it to meet your needs. catalina.-mm-dd.log is a proper log file, as written by FileHandler. It is *not* a rotation of catalina.out. The logging configuration is doc

Re: Mystery migrating from tomcat 6 to 7

2012-11-12 Thread Konstantin Kolinko
ms that were solved by the above. > It was a change to fix an issue important for security. See https://issues.apache.org/bugzilla/show_bug.cgi?id=50026 If you just need to forward to the servlet, do you need to map it to different path? It is possible to select the servlet by its na

Re: Mystery migrating from tomcat 6 to 7

2012-11-12 Thread Konstantin Kolinko
2012/11/13 Fred Toth : > On 11/12/2012 4:24 PM, Konstantin Kolinko wrote: >> >> 2012/11/13 Fred Toth : >>> >>> Hello again, >>> >>> I've found my problem, sort of. >>> >>> In this particular application, ever since tomcat 5

Re: JMX Tomcat

2012-11-14 Thread Konstantin Kolinko
2. Sure, there is a method. The Manager webapp operates via JMX . See its source code. (org.apache.catalina.manager.* ) You will need to stop a Context, then start it. Best regards, Konstantin Kolinko - To unsubscr

Re: Jsp class loader issue in Tomcat 7

2012-11-14 Thread Konstantin Kolinko
un with SecurityManager, you have to pay the performance price for all those little checks that it does. Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Jsp class loader issue in Tomcat 7

2012-11-15 Thread Konstantin Kolinko
you really run with a SecurityManager. Note that in Tomcat 6 & 7 (and in Tomcat 5.5 in webapps that have ) the server classes are directly visible from the webapp. There is no need to bundle such jars in your application. > 2012/11/15 Konstantin Kolinko > >> 2012/11/14 Chr

Re: Ideal way to minimize resources used by Tomcat for sessions

2012-11-19 Thread Konstantin Kolinko
ink it will be parsed, but I am sure that its value is not used unless getSession(false) is called (which causes a lookup of an existing session using that ID). You should be able to ignore that overhead. Best regards, Konstantin Kolinko -

Re: Modify Cache-Control header

2012-11-19 Thread Konstantin Kolinko
onse.setHeader( "Cache-Control", "no-cache" ); > > See > http://docs.oracle.com/javaee/6/api/index.html?javax/servlet/http/HttpServletResponse.html > +1. UrlRewriteFilter can be used to set headers, if you do not want to write the code by yourself. http://wiki.apac

Re: Page not redirected after waitFor() call on Process object.

2012-11-22 Thread Konstantin Kolinko
2012/11/21 Andrei Petru Mura : > Hello, > > My issue can be related to Servlets, but it also can be related to Tomcat. > I'm using tomcat 7.0.27. > In my servlet's post method I have the following: > > protected void doPost(HttpServletRequest request, HttpServletResponse > response) throws ServletE

Re: "tagging" log messages

2012-11-22 Thread Konstantin Kolinko
(like [FOOLOG]) on the entrys that previously ended up in the > file defined in the FOOLOG appender. > This is Tomcat users list. The Log4J users mailing list is elsewhere - you should better ask there: http://logging.apache.org/log4j/1.2/mail

Re: tomcat 6.0.35 with java 7 ssl proxy request body failed

2012-11-26 Thread Konstantin Kolinko
it is using. 4. Do you observe any consequences besides those messages in the log? Are connections failing? Are all connections failing, or only a part of them? Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-u

Re: Logging cookies in Tomcat 7

2012-11-26 Thread Konstantin Kolinko
2012/11/26 Russ Kepler : > On Monday, November 26, 2012 01:44:25 PM Christopher Schultz wrote: > > so if there doesn't seem to be a general "print the cookies" pattern. I see > a %S and that seems to be printing You can print all cookies sent by the client with %{Cookie}i and new cookies sent b

Re: tomcat6 with crl doesn't load

2012-11-27 Thread Konstantin Kolinko
y bits of a key are there? 2. Top-posing is bad. http://en.wikipedia.org/wiki/Posting_style Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Shutdown.sh doesn't. At least not reliably. (7.0.25)

2012-11-27 Thread Konstantin Kolinko
mand is sent to port 8005. (8009 is a port used by AJP protocol connector). Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Tomcat with multiple domains

2012-11-27 Thread Konstantin Kolinko
2012/11/28 Paul van Hoven : > > I edited the /etc/hosts file and added the following entries: > 88.84.140.88www.2nddomain.com:8080 > 88.84.140.88www.1rstdomain.com:8080 Domain Name Service resolves host names. A port number is not part of a host name. The above two lines are invalid. ---

Re: Context Path for a subdirectory

2012-11-29 Thread Konstantin Kolinko
others suggested. 2. Unless you know what "privileged" is, do not use it. > allow="127\.\d+\.\d+\.\d+|::1|0:0:0:0:0:0:0:1" /> > Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Context Path for a subdirectory

2012-12-02 Thread Konstantin Kolinko
/admin/index.html page is called and says that "no such application is here". If the admin webapp is installed, then its welcome page (admin/index.jsp) is displayed. Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Tomcat7.0-Setting property 'threadPriority' did not find a matching property

2012-12-02 Thread Konstantin Kolinko
. Enabling debug logging for "org.apache.tomcat.util.IntrospectionUtils" will provide more information. In this case, yes, this property expects an integer value. http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/java/org/apache/coyote/AbstractProtocol.java?view=markup#l184 Best regar

Re: Tomcat 7 is not working on windows 7....

2012-12-03 Thread Konstantin Kolinko
2012/12/3 Mark Thomas : > On 03/12/2012 09:15, Jugal Thakkar wrote: >> Hello Sir, >> I am Java Developer. i develop web application using servlet >> and JSP. >> >> My problem is that i am not able to get server started in eclipse >> Juno.using Tomcat 7 with windows 7. >> >> Plea

Re: Running tomcat6 under jsvc

2012-12-04 Thread Konstantin Kolinko
ay get a faster answer here, especially for a Tomcat-specific one. Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: How to use the usehttponly feature in application level

2012-12-04 Thread Konstantin Kolinko
2012/12/4 Zhi Xie : > Sorry, I don't find any doc to introduce this. There are a lot of docs to > show how to implement the feature in conf/context.xml. > > > ... > > > Who can tell me how to implement the feature in application level? The application-level file is named META-INF/context.xml htt

Re: How to use the usehttponly feature in application level

2012-12-04 Thread Konstantin Kolinko
se this feature. Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Reuse JNDI Properties

2012-12-04 Thread Konstantin Kolinko
eature to have. The ${...} handling can be extended by defining a class that implements PropertySource interface, http://tomcat.apache.org/tomcat-7.0-doc/config/systemprops.html BTW, in your case where you are specifying a global setting, you can define nodeName property in conf/

Re: Running Tomcat under jsvc - logging problems

2012-12-04 Thread Konstantin Kolinko
console logging" implementations log to System.out. Do you need a ConsoleHandler at all? (You are effectively printing the same log messages into two places a) ConsoleHandler, b) FileHandler ). 2. To initialize logging properly y

Re: Running Tomcat under jsvc - logging problems

2012-12-04 Thread Konstantin Kolinko
2012/12/4 Lyallex : > On 4 December 2012 18:50, Konstantin Kolinko wrote: >> >> 1. "java.util.logging.ConsoleHandler" prints to System.err. >> >> Some other "console logging" implementations log to System.out. >> >> Do you need a Conso

Re: Data sources definitions are lost in memory

2012-12-04 Thread Konstantin Kolinko
p once and cache the result, or they perform multiple lookups?) 2. What is seen in JNDI context depends on the current classloader (Thread.getContextClassLoader()). Does the issue happen in a request processing thread, or somewhere else? 3. Does it affect specific web applications, or it is more ra

Re: Running Tomcat under jsvc - logging problems

2012-12-04 Thread Konstantin Kolinko
2012/12/5 Lyallex : > On 4 December 2012 19:41, Konstantin Kolinko wrote: > >> 2012/12/4 Lyallex : >> > On 4 December 2012 18:50, Konstantin Kolinko >> wrote: >> >> >> [snip] >> > > >> >> >> I do not know why it work

Re: Suggestion for improving Tomcat startup performance...

2012-12-04 Thread Konstantin Kolinko
2012/12/5 Tony Anecito : > Hi Tomcat Developers, > > I am using Tomcat 7.0.33 and notice on Tomcat startup my web services startup > in series rather than parallel. If you do not have it you might want to have > an option to startup apps in parallel or assign number of threads that can > startup

Re: Suggestion for improving Tomcat startup performance...

2012-12-04 Thread Konstantin Kolinko
2012/12/5 Tony Anecito : > Thanks. I can not find any examples or reference to what config file this > goes into. I looked at server.xml and web.xml and did not find it in there. I did find something called the Engine Container but again no examples or where it can be found if already existing. h

Re: Page not redirected after waitFor() call on Process object.

2012-12-04 Thread Konstantin Kolinko
keep-alive connections, when using APR Connector on Windows and starting Processes from Servlets" where some JRE bugs were mentioned. http://markmail.org/thread/hsime5ayjdrg4fwm I do not know much about your configuration to tell whether this is affecting you or not. Best regards, Konstantin

Re: Tomcat7.0-Setting property 'threadPriority' did not find a matching property

2012-12-04 Thread Konstantin Kolinko
ity values, but it > doesn't appear to be completely accurate: > http://docs.oracle.com/javase/7/docs/api/constant-values.html#java.lang.Thread.MAX_PRIORITY The MIN/NORM/MAX_PRIORITY constants in the Thread class are "final static"

Re: Is it possible to expire jvmRoute cookie

2012-12-06 Thread Konstantin Kolinko
one's browser, clean caches, or even reboot. ;) Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: I can only access Tomcat 7 when running via console (startup.bat)

2012-12-06 Thread Konstantin Kolinko
different user (console running as your user, the service running as > a service account). Perhaps someone more knowledgable about Windows can > provide more details. Correct. For completeness, there is "Windows" page in the FAQ. https://wiki.apache.org/tomcat/FAQ/Windows#Q7 B

Re: how to make http port to open after application startup

2012-12-06 Thread Konstantin Kolinko
g requests, so it can check responsiveness of the server before sending the actual request. Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Tomcat 7: JSP unloading - NullPointerException

2012-12-07 Thread Konstantin Kolinko
ing the "unload". > > Does anyone have an idea how to solve this problem or is there already a > fix? > Steps to reproduce = ? Can you prepare a sample simple web application that demonstrates the bug and file it into Bugzilla? (Maybe it can be observed with the examp

Re: Tomcat 6.0 CLASSPATH query

2012-12-07 Thread Konstantin Kolinko
2012/12/7 vicky : > Hi Guys, > > I have a requirement in which i need to add couple of properties files to > tomcat CLASSPATH as these are needed for my application deployed in Tomcat > 6.0. > > One strange thing is that, i need to add the all my properties files to > "/bin" directory else these

Re: Is it possible to expire jvmRoute cookie

2012-12-09 Thread Konstantin Kolinko
). 3. I would do nothing if jvmRoute in requested session id belongs to a different server. See also org.apache.catalina.ha.session.JvmRouteBinderValve, http://tomcat.apache.org/tomcat-7.0-doc/config/cluster-valve.html Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Tomcat 7 servlet library

2012-12-10 Thread Konstantin Kolinko
are just a convenience. Tomcat source code includes classes in several javax.* packages. The jar in question is built from those. Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.o

Re: Is it possible to expire jvmRoute cookie

2012-12-10 Thread Konstantin Kolinko
sionally). If balancer sends request to a different Tomcat, tomcat can deal with it thanks to JvmRouteBinderValve and like it deals with the usual fail-over scenario. Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-u

Re: Tomcat 7.33 update on Windows

2012-12-11 Thread Konstantin Kolinko
2012/12/11 Justin Larose : > I just updated Tomcat 7 from version 7.11 to 7.33 on my windows server but > when I goto the URL I am seeing 500 error, "Cannot load JDBC driver class > 'com.microsoft.sqlserver.jdbc.SQLServerDriver'" > Not sure why. I made a copy of all config directories prior to inst

Re: Tomcat 5.5.9 compatibility with Java 1.7

2012-12-28 Thread Konstantin Kolinko
pgrade Tomcat, I'd recommend Tomcat 7. It is tested better, I think there are more people running it with Java 7 than Tomcat 6, it has faster release cycle if anything needs fixing. Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: some clarification about context.

2012-12-29 Thread Konstantin Kolinko
connection of the first application, > my_app, does not work. > Why? > I'm correct on putting my_app.xml and my_app1.xml under Catalina/localhost? So, if it is one application then it works. If you deploy the second application then both the first and the second do not wor

Re: Restricting ciphers

2013-01-09 Thread Konstantin Kolinko
oreType" attribute, you are using Java implementation of the Connector, not openssl/APR one. You should look into Java documentation for their cipher names. See this thread from October 2009: http://markmail.org/message/zn4namfhypyxum23 Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Restricting ciphers

2013-01-09 Thread Konstantin Kolinko
2013/1/10 Baron Fujimoto : > On Wed, Jan 09, 2013 at 01:08:01PM +0400, Konstantin Kolinko wrote: >>2013/1/9 Baron Fujimoto : >>> I'm attempting to mitigate BEAST (CVE-2011-3389) attacks on Tomcat 6.0.35. >>> My understanding is that the attack applies only to CBC c

Re: Converting JSSE configuation to APR/native

2013-01-10 Thread Konstantin Kolinko
remember correctly, converting a certificate was discussed some time ago. 2. The configuration attributes used by APR connector are quire similar to the directives of mod_ssl of Apache HTTPD server, because they use the same underlying library (OpenSSL). You can look at their documentation, and m

Re: Tomcat AutoDeploy Interval (Delay / Frequency)

2013-01-10 Thread Konstantin Kolinko
2013/1/10 Radek Szamrej : > Hi, > > I believe it's a generic Tomcat question: > > How can I configure / modify AutoDeploy interval (delay / frequency). > > It is taking too much time form WAR being copied until Tomcat recognizes it > and the application is redeployed / reinitialized. > > I would pr

Re: Tomcat vs IIS download speed - configuration suggestions?

2013-01-10 Thread Konstantin Kolinko
2013/1/10 Linoma DevTeam : > Hi everyone, > > I'm running some comparison tests with tomcat 6.0.35 and IIS running in > parallel on Windows Server 2008 R2. Now I would expect Tomcat to be > somewhat slower, given the extra JVM layer, but in some situations, i'm > seeing differences that are tough

Re: Tomcat 7.0.34 and ecj 3.7.2/4.2.1

2013-01-11 Thread Konstantin Kolinko
ll be able to run with 3.7.2. http://svn.apache.org/viewvc?view=revision&revision=1411587 Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Loading a DeSerialized Class to WebabbClassLoader Question

2013-01-21 Thread Konstantin Kolinko
2013/1/21 Peter Lavin : > > Dear List, > > My web application needs to deserialize both classes and objects which are > sent to it. > > I'm using Base64 serialization, and when I transport full .class file > to a service, I can deserialize it with no problem using > ObjectInputStream.readObject().

Re: Problems trying to disable log rotation within Tomcat 6

2013-01-23 Thread Konstantin Kolinko
an use java.util.logging.FileHandler in Tomcat logging in exactly the same way as JULI FileHandler. Note that it has different configuration options, see JDK docs for details. 4. I do not know whether "/etc/tomcat6/logging.properties" is the correct file. It is up to you t

Re: Different webapp paths on different hosts

2013-01-25 Thread Konstantin Kolinko
2013/1/25 bxqdev : >> >> Anyway I would say a context.xml file in conf/catalina/path1 (the >> hostname)/path1.xml (the context name) should do the trick? >> Place the webapp outside the appbase of the hosts and then point the >> docbase to the webapp (or just drop the .war with two >> different nam

Re: Load properties file from Tomcat directory

2013-01-25 Thread Konstantin Kolinko
2013/1/25 Justin Rosenberg : > Is there a to load a properties file that is dropped in the > ${catalina.base}/lib directory? > > > > When I try the following it returns null: > > MyClass.class.getResourceAsStream(PROPERTY_FILE_NAME) You should beware of the difference between Class.getResource()

Re: Comet problem - HTTP method GET is not supported by this URL

2013-01-25 Thread Konstantin Kolinko
2013/1/22 Andrew Winter : > I am trying to implement a Comet process. > Tomcat 6.0.36 > Red Hat Enterprise Linux Server release 6.2 (Santiago) > Java 7u11 (32 bit) > > I have implemented CometProcessor. I am using the NIO connector. > When I try the servlet I get: HTTP method GET is not supported

Re: Tomcat6+webapps+log4j

2013-01-25 Thread Konstantin Kolinko
2013/1/24 Tiago Sousa : > Hello to all. > > I have tomcat 6 Which version? Did you install it from a zip file downloaded from tomcat.apache.org? > using JULI for logging (logging.properties in conf dir) plus > several webapps using its own log4j.properties. > > I need to centralized all the logs

Re: Not able to read file from jar in tomcat

2013-01-28 Thread Konstantin Kolinko
2013/1/28 Bibin Balakrishnan : > I have a web application running under tomcat 7, and in one of the class, > Im trying to read a file in one of the jar under WEB-INF/lib folder. > > URL resourceURL = > MyClass.class.getClassLoader().getResource("xml/xslt/master.xsl"); > File xslfile = new File(reso

Re: Tomcat6+webapps+log4j

2013-01-28 Thread Konstantin Kolinko
2013/1/28 Tiago Sousa : > Em 25/01/2013 19:39, Christopher Schultz escreveu: >> >> On 1/25/13 4:45 AM, Tiago Sousa wrote: >>> >>> Em 25/01/2013 08:59, Konstantin Kolinko escreveu: >>>> >>>> 2013/1/24 Tiago Sousa : >>>>>

Re: Embedded Tomcat how to use addContext for docBase

2013-01-29 Thread Konstantin Kolinko
2013/1/29 Jimmy Johnson : > System: Mac OS X 10.8 > Tomcat Version: 7.0.30 > Language: Java > > I'm trying to set up the context in an embedded Tomcat instance to serve > files from a local directory not within the deployed folder. > > In the standard server.xml when using the standard Tomcat confi

Re: Latest-version TomEE 1.5.2-SNAPSHOT (Tomcat 7.0.34?) just died on me, nothing in server logs

2013-01-29 Thread Konstantin Kolinko
never do... It tries to parse a version string to "workaround" a bug that was properly fixed more than a year ago, and fails horribly. It is a normal practice to modify the "server info" value, e.g. [1]. It is useless to rely on it. It is no wonder that the one used by

Re: ISA-server authentication on Tomcat: problem with escape character

2013-01-30 Thread Konstantin Kolinko
er settings to prevent this, as other > servers depend on this manner of identification. > > My question now is: > Does anybody know if we can "intercept" the token and escape the backslash or > even better substring the username from that token? 5. If you wouldn

Re: Embedded Tomcat how to use addContext for docBase

2013-01-30 Thread Konstantin Kolinko
lying on the autodeployment feature. There are many examples of "addWebapp" calls in the test cases. I would not omit those "File.getAbsolutePath()" calls. I would beware that "/tmp" is usually cleaned when a server is rebooted. Is it OK to use such non-unique name as

Re: Scenario with Tomcat cluster session management

2013-01-30 Thread Konstantin Kolinko
You can stop a web application. That should not delete sessions. If you are going to reconfigure a stopped application, beware of autodeployment. There is a JMX method that is used by the Manager webapp to mark an application as "serviced" so that autodeployment do not interfere. 3

Re: JVM Crashes

2013-01-31 Thread Konstantin Kolinko
The library where the crash occurs ("libnio.so") belongs to Java Runtime, not Tomcat. What is your exact version of Java and of Tomcat? What Connector implementation are you using in Tomcat? Best regards, Konstantin Kolinko --

<    8   9   10   11   12   13   14   15   16   17   >