Re: Tomcat losing request parameters

2015-06-09 Thread Konstantin Kolinko
2015-06-04 18:40 GMT+03:00 Ravi Kiran : > Hi, > > I am writing to get some pointers on a strange issue which are facing in > tomcat in one of our client environments. > > Setup: 4 Webservers connecting to 2 tomcat using mod_jk (load balanced) > > Issue: Request parameters GET/POST are coming as nul

Re: useServerCipherSuitesOrder in 7.0.62

2015-06-13 Thread Konstantin Kolinko
elevant classes are in package org.apache.tomcat.util.net.jsse.openssl: OpenSSLCipherConfigurationParser etc. > > [1] https://bz.apache.org/bugzilla/show_bug.cgi?id=55988 > [2] https://tomcat.apache.org/tomcat-7.0-doc/config/http.html > [3] https:/

Re: Filter behaviour

2015-06-26 Thread Konstantin Kolinko
. There is no need to call the chain. An example in Tomcat: org.apache.catalina.filters.RemoteAddrFilter org.apache.catalina.filters.RequestFilter#process(...) 2. There are several types of dispatch defined in Servlet specification. See e.g. javax.servlet.Dispa

Re: Filter behaviour

2015-06-27 Thread Konstantin Kolinko
; "WWW-Authenticate" header is usually used with 401 response. It is unusual to use it with 403 one, though the spec does not forbid it. (I am not sure how browsers react here, though) http://tools.ietf.org/html/rfc7235#section-4.1 > httpResponse.getOutputStream().print("blah, blah, blah"); > > // return from the doFilter method > return; > } > > chain.doFilter(request, response); > > } > Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: why is Tomcat 7 invoking WebSocket protocol?

2015-07-01 Thread Konstantin Kolinko
eeded is here: https://bz.apache.org/bugzilla/show_bug.cgi?id=55855 Maybe it is worth mentioning the filter in http://tomcat.apache.org/tomcat-8.0-doc/config/filter.html I do not think that it is worth renaming it. I added mention of configuration option to https://wiki.apache.org/tomcat/Ho

Re: Problem setting logging level

2015-07-07 Thread Konstantin Kolinko
that are created by a different class loader. If you want to suppress non-severe messages from a webapp, it would be better to use ".level=SEVERE". This skips generating the messages, as opposed to filtering unwanted messages before writing them out. Best regards, Konstantin Kolinko

Re: Apache HTTPD (with SSL) + mod_jk + TomEE (Tomcat) nullify the ssl session id

2015-07-09 Thread Konstantin Kolinko
appen. I think that you'll get more answers on mod_ssl behaviour if you ask on an Apache HTTPD mailing list. Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: HTML 508 error with container authentication and virtual host

2015-07-09 Thread Konstantin Kolinko
uest) is kept in the session. As a workaround against session expirations it is possible to configure a default landing address http://tomcat.apache.org/tomcat-7.0-doc/config/valve.html#Form_Authenticator_Valve Best regards, Konstantin Kolinko

Re: Tomcat 8 AprEndpoint Poller thread consuming high CPU

2015-07-09 Thread Konstantin Kolinko
e Tomcat/8.0.23 > Server built: May 19 2015 14:58:38 UTC > Server number: 8.0.23.0 > OS Name:Linux > OS Version: 2.6.18-371.el5 > Architecture: amd64 > JVM Version:1.8.0_40-b25 > JVM Vendor: Oracle Corporation > 3. Tomcat 8.0.24 has been releas

Re: Form authentication with Tomcat 7.0.63 behind Apache HTTPD and mod_jk

2015-07-09 Thread Konstantin Kolinko
httpd / mod_jk : Do you have failure with direct access to Tomcat ? 2. cookie / set-cookie headers e.g. see AccessLogValve configuration here: https://bz.apache.org/bugzilla/show_bug.cgi?id=57872#c0 3. Realm Best regards, Konstantin Kolinko --

Re: Setting SSL in Tomcat 7.0

2015-07-12 Thread Konstantin Kolinko
e system cannot find > the file specified) I guess that you (the user running keytool) and the user running Tomcat are two different users, so their "%USERPROFILE%" is different -- see the above path. It looks that you are running Tomcat with a system service account. Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: issue with application finding tomcat jars

2015-07-12 Thread Konstantin Kolinko
2015-07-10 21:39 GMT+03:00 Jason Ricles : > I have an application that uses the websocket jars from tomcat and > sometimes get this error, > > java.util.ServiceConfigurationError: > javax.websocket.ContainerProvider: Provider > org.apache.tomcat.websocket.WsContainerProvider not found > > Then it g

Re: Tomcat 8 - Manager Deploy

2015-07-12 Thread Konstantin Kolinko
2015-07-10 14:21 GMT+03:00 : > Hello - currently I'm running a multi instance Tomcat 8 server and wish to > use Manager to deploy war files via its HTTP API command line interface. > > When attempting to deploy there is a continuous issue with the context > path not being recognised. > > Here is a

Re: CATALINA_BASE/lib on tomcat6 (RHEL6)

2015-07-15 Thread Konstantin Kolinko
") %> catalina.home: <%= System.getProperty("catalina.home") %> catalina.base: <%= System.getProperty("catalina.base") %> ]]] Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Unable to start service on Windows (Tomcat version 8.00.023)

2015-07-15 Thread Konstantin Kolinko
] > Jul 14, 2015 12:08:33 PM org.apache.coyote.AbstractProtocol stop > INFO: Stopping ProtocolHandler ["ajp-apr-8010"] > The above are informational ("INFO") messages. There are no errors in the above fragment of a log file. Official migration guide: http

Re: how to unsubscriobe from this group?

2015-07-17 Thread Konstantin Kolinko
2015-07-17 21:28 GMT+03:00 Mayank Mukherjee : > Can any one tell me , How to unsubscriobe from this group? > It is said in the footer: As you are subscribed as digest, the command is: > To unsubscribe, e-mail: users-digest-unsubscr...@tomcat.apache.org For all other users the command is: > To

Re: Keeping http-8443 threads in check (Apache Tomcat/6.0.29)

2015-07-18 Thread Konstantin Kolinko
hat is 6.0.44 2) Tomcat 6 forthcoming EOL date has been announced, http://tomcat.apache.org/tomcat-60-eol.html Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional

Re: Parse and SSL issue

2015-07-18 Thread Konstantin Kolinko
.2015-07-17 21:19 GMT+03:00 uzair rashid : > Hello: > > I am having an issue with tomcat version: Apache Tomcat 7.0.57 . Windows > Server 2008 R2 Enterprise. > > I am using mssql and bobj as well. > > I am having a few issues one seems to be related to ssl/apr... maybe my > sslcipher should just be

Re: How to authenticate our webapp against our own relm only

2015-07-18 Thread Konstantin Kolinko
t;conf/context.xml" file. That file provides defaults for all web applications deployed on Tomcat. You need to edit the file for your own web application. http://tomcat.apache.org/tomcat-7.0-doc/config/context.html#Defining_a_context Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Tomcat 7.0.27 and Tomcat 7.0.50 - Valve - Dead thread and Crawlers

2015-07-18 Thread Konstantin Kolinko
2015-07-17 18:35 GMT+03:00 Kiran Badi : > Hi > > I wanted to check if this setting in Server.xml is still valid, > > crawlerUserAgents="*[bB]ot.*|.*Yahoo! Slurp.*|.*Feedfetcher-Google.*." > sessionInactiveInterval="180"/> > > threshold="300"/> You have a space character between package and class

Re: Tomcat 7.0.34 - Lifecycle listener is not catching the events before the before_start vent

2015-07-19 Thread Konstantin Kolinko
erride public void lifecycleEvent(LifecycleEvent event) { log.info("Event: [" + event.getType() + "]"); } } ]]] configuration, catalina.base/webapps/examples/META-INF/context.xml [[[ ]]] Best regards, Konstantin Kolinko --

Re: Can "" is use as context root in Tomcat 7.0.59

2015-07-20 Thread Konstantin Kolinko
. The "context path" when used as explicit value in configuration attribute or in various APIs is an empty string. Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Parse and SSL issue

2015-07-20 Thread Konstantin Kolinko
2015-07-20 0:52 GMT+03:00 uzair rashid : > Konstantin: > > Thank you for your information. Could you please comment on the parse error > are well? > > You helped a lot in understanding all other errors. I really appreciate. > > To remind of the error: > at org.apache.catalina.startup.Bootstrap.mai

Re: Tomcat 7 (7.0.54) java.lang.ClassFormatError: Truncated class file

2015-07-21 Thread Konstantin Kolinko
2015-07-21 11:41 GMT+03:00 Rahul Kumar Singh : > Hello Tomcat team, > > Thanks for your always support !! > > Please do the needful on below problem. > > Web Application credential: > - > Servlet used :servelet3.0 > MVC framework: Struts2.0 > Java: Open JDK 1.7 >

Re: Tomcat initialize SelectorContext twice when lookup for JNDI defined in web application (META-INF/context.xml)

2015-07-21 Thread Konstantin Kolinko
2015-07-21 8:35 GMT+03:00 Niranjan Karunanandham : > [sending to users list] > > On Thu, Jul 16, 2015 at 10:23 AM, Niranjan Karunanandham < > niranjan.k...@gmail.com> wrote: > >> Hi, >> >> On debugging Tomcat (7.0.59), I noticed that the SelectorContext is >> initialized twice when a lookup is perf

Re: problem with x:set variables

2015-07-21 Thread Konstantin Kolinko
s in WEB-INF/lib directory (e.g. a different copy of Tomcat jars pulled in by Maven)? Any unnecessary libs in Tomcat's lib directory? Can you simplify your example, while keeping it reproducible? Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Tomcat 7 (7.0.54) Login URL is Passing with JSESSION ID. | why there is different behaviour in Tomcat 6 and Tomcat 7

2015-07-21 Thread Konstantin Kolinko
2015-07-21 14:38 GMT+03:00 Rahul Kumar Singh : > Hello Tomcat Team, > > “;jsessionid=C1A67FB90E1300DF14EE027A3634A34B” passed in URL > "localhost:8080/login. jsp;jsessionid=C1A67FB90E1300DF14EE027A3634A34B" > is not received in tomcat 6(V6.0.28) . It is received in tomcat 7(V7.0.54) . > What i

Re: Parallel Deployment: Can I request a specific webapp version?

2015-07-21 Thread Konstantin Kolinko
er schemes to embed version token in path to those files and use RewriteValve or similar solution to strip away the version token. http://tomcat.apache.org/tomcat-8.0-doc/rewrite.html Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Check if a URL exists programatically

2015-07-21 Thread Konstantin Kolinko
HEAD request is better, as it produces no output, but e.g. for JSPs a HEAD request is implemented as GET + suppressing output, so it actually performs the same processing. Best regards, Konstantin Kolinko - To unsubscribe, e-ma

Re: Tomcat 7 (7.0.54) java.lang.ClassFormatError: Truncated class file

2015-07-23 Thread Konstantin Kolinko
2015-07-23 8:49 GMT+03:00 Rahul Kumar Singh : > Dear Christopher, > > The solution is fine, but first thing we need to identify the root cause. > If it is the problem of "loading a JSP-based class file." Why it is happened > in production environment? > Any solid reason ? Who knows? It is your

Re: Tomcat 7 (7.0.54) Login URL is Passing with JSESSION ID. | why there is different behaviour in Tomcat 6 and Tomcat 7

2015-07-23 Thread Konstantin Kolinko
%> > > > > 4. Start tomcat > 5. Run client wget to execute the login.jsp > 6. View access log file entry Thank you for version numbers. This is expected behaviour. I added comments on the history of this change h

Re: "Too Many Connections" exceptions after moving to Tomcat 8

2015-07-29 Thread Konstantin Kolinko
d name that accompany the log message) Stack trace? > Is there something else I need to change in the configuration to move to > Tomcat 8 that I've overlooked? Read official documentation for Apache Commons DBCP pool http://commons.apache.org/proper/commons-dbcp/configu

Re: Errors at INFO level despite "Note: further occurrences of ... errors will be logged at DEBUG level."

2015-08-20 Thread Konstantin Kolinko
What is your connector configuration: protocol (HTTP / AJP), implementation (BIO / NIO / NIO2 / APR) ? BTW, Tomcat 8.0.26 is currently being tested and voted. You would like to test it, you can find details on dev@ mailing list. Best regards, Konstantin Kolinko -

Re: what's the Bootstrap? why when I stop it, and tomcat stop running too?

2015-09-24 Thread Konstantin Kolinko
0" is odd. Not sure where it comes from. This list generally strips attachments. See the rules http://tomcat.apache.org/lists.html#tomcat-users -> 7. Unrelated: Beware that there is a known issue with handling of input/output streams in ImageIO. Do not pass ServletInputStream/ServletOutputSt

Re: Tomcat deployment from public_html user folder of a war application is not working

2015-09-24 Thread Konstantin Kolinko
2015-09-24 15:07 GMT+03:00 Manuel Parra : > Hello I'm trying to deploy .war application from the public_html folder at > user homes. > > I've added directive to server.xml : > > directoryName="public_html" > userClass="org.apache.catalina.startup.PasswdUserDatabase"/> > > And I try : > > http://lo

Re: DBCP params different for the Tomcat DBCP implementation in Tomcat 8?

2015-10-07 Thread Konstantin Kolinko
2015-10-07 21:36 GMT+03:00 Bradley Wagner : > Hi, > > We recently upgraded to Tomcat 8. As per the Migration Guide: > https://tomcat.apache.org/migration-8.html#Database_Connection_Pooling and > DBCP documentation > https://tomcat.apache.org/tomcat-8.0-doc/jndi-datasource-examples-howto.html#Databa

Re: Tomcat answers on port 80, not on 443

2015-10-16 Thread Konstantin Kolinko
Look into an access log. Take a series of thread dumps (for your client as well). 4) Is Java trusing your self-signed server certificate (so that it is able to connect to it)? Old versions of Java (Java 6) use SSLv2Hello when initialing a HTTPS connection. That protocol is disabled by default in current versions of Tomcat. https://wiki.apache.org/tomcat/Security/POODLE Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Chunked transfer delay with httpd 2.4 + mod_jk 1.2.41 on Windows.

2015-10-19 Thread Konstantin Kolinko
sed in less than a second. > > The timing really seems to imply that this is all somwhere in mod_deflate. > But I've tried something similar by creating an html file and request it via > a POST instead of a GET and the problem doesn't occur either. BTW, a delay of several secon

Re: Tomcat returning context path with extra leading slash (was: Re: Tomcat not properly fully-qualifying redirect URLs)

2015-10-23 Thread Konstantin Kolinko
ausing Tomcat to return "/" + context path when > ServletContext.getContextPath() is called? It seems that you are confusing two different methods, (1) HttpServletRequest.getContextPath() (2) ServletContext.getContextPath(), @since Servlet 2.5 (1) returns the actual value from client&

Re: Log4j problems after replacing tomcat7 to tomcat8

2015-10-25 Thread Konstantin Kolinko
guration), but that is not the default configuration. https://wiki.apache.org/tomcat/FAQ/Linux_Unix#Q5 http://tomcat.apache.org/tomcat-8.0-doc/logging.html Best regards, Konstantin Kolinko - To unsubscribe, e-mail

Re: X-FRame-Option

2015-10-29 Thread Konstantin Kolinko
s to reproduce your result, you have to provide exact steps (like in a good bug report) and "what you have seen" and "what you have expected". Beware of typos in your configuration. Best regards, Konstantin Kolinko

Re: X-FRame-Option

2015-10-29 Thread Konstantin Kolinko
httpHeaderSecurity > > org.apache.catalina.filters.HttpHeaderSecurityFilter > true > true > SAMEORIGIN > true > 3. See Servlet Specification on how filters are configur

Re: port 80

2015-11-04 Thread Konstantin Kolinko
2015-11-04 20:20 GMT+03:00 Linux Support : > Hi again, > > configured the TC service to run as a non privileged user. In my > understanding we cannot use a privileged port to bind TC to. Is there a way > i can use port 80 for TC in the case of using a non root user ? http://tomcat.apache.org/ ->

Re: Can we have number of RequestDispatcher (busy) logged in log files !

2015-11-06 Thread Konstantin Kolinko
2015-11-07 0:52 GMT+03:00 Christopher Schultz : > Utkarsh, > > On 11/6/15 12:47 PM, Utkarsh Dave wrote: >> Hello, >> In tomcat 7 >> I wanted to know if there is a way we can log the number of request >> dispatcher threads used/busy/blocked, in log files. Or is there a mechanism >> that logs the num

Re: Access application without giving port number and context root

2015-11-12 Thread Konstantin Kolinko
eps and > best approach to achieve this. If there are some tutorials/Links, please > share the same. Both questions are already answered in the FAQ. See HowTo page there and search for "ROOT" (uppercase) Best regards, Konstantin Kolinko -

Re: Tomcat caching

2015-11-16 Thread Konstantin Kolinko
2015-11-16 12:22 GMT+03:00 Daniel Küppers : > Hi, > i have a recurring issue, that tomcat caches my jsf webapp pages in a > strange manner. > Sometimes for multiple days/hours, one or two explict pages or the whole > webapp is loading very slowly. > My setup is a locally used tomcat 8.0.28 for debu

Re: REMOTE_USER mod_jk

2015-11-19 Thread Konstantin Kolinko
2015-11-19 16:02 GMT+03:00 Teresa Fasano : > Hi, > > I'm using Apache 2.4.6 with mod_jk and mod_shib 2.5.5, so Shibboleth as SSO > authentication. > > Routing Apache request to tomcat (JBoss) we are not able to retreive > REMOTE_USER. > > It seems that the REMOTE_USER is lost. > > In the configurat

Re: Can tomcat serve MPI (parallel) applications?

2015-11-27 Thread Konstantin Kolinko
off autoDeploy feature on Host. Do not use Tomcat Manager web application. - Do not compile JSP pages. Turn them into servlets by precompiling them with Jasper JspC. - Do not write serialized session data (configure with pathname=""). - Turn off logging (or turn a deaf ear to it trying

Re: Can tomcat serve MPI (parallel) applications?

2015-12-01 Thread Konstantin Kolinko
ervlet container, which is > compatible with MPI but not as powerful as tomcat. > You may want to look at how an embedded Tomcat is started. The test/ directory in the source tree has many examples. Look for "Tomcat.addServlet()" calls. Best regards, Konstantin Kolinko

Re: Understanding how to controlling what data is written to log4j appenders

2015-12-03 Thread Konstantin Kolinko
rg/log4j/1.2/apidocs/org/apache/log4j/PropertyConfigurator.html#doConfigure%28java.lang.String,%20org.apache.log4j.spi.LoggerRepository%29 Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: WebApp to WebApp JEE security

2015-12-05 Thread Konstantin Kolinko
sResourcePermission(), ... [2] http://tomcat.apache.org/tomcat-8.0-doc/config/valve.html#Authentication Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: WebApp to WebApp JEE security

2015-12-05 Thread Konstantin Kolinko
2015-12-05 18:12 GMT+03:00 Marco Pizzoli : > Hello Konstantin, > > On Sat, Dec 5, 2015 at 2:31 PM, Konstantin Kolinko > wrote: > >> 2015-12-05 12:18 GMT+03:00 Marco Pizzoli : >> > Hi list, >> > I am fighting against a 3rd party application composed by 2 weba

Re: curl and geoserver not working

2015-12-06 Thread Konstantin Kolinko
2015-12-06 22:25 GMT+03:00 pablo zader : > > Hello list. > > Something strange is happening when I load a file to Geoserver by curl. I > observed in the tomcat manager that the process never leaves the state (s) of > service: > > Sent Time Stage B B Recv Client (Forwarded) Client (Current) VHost

Re: Tomcat Thread Dump

2015-12-09 Thread Konstantin Kolinko
2015-12-09 10:09 GMT+03:00 Yogesh Patel : > *Tomcat version* : 7.0.53 > *OS *: Windows 7 > > We are using tomcat as standalone application not as service, In task > manager it does not showing PID for Tomcat. How to get PID of that tomcat > in order to take tomcat thread dump. Task Manager in Wind

Re: Custom Connector class

2015-12-09 Thread Konstantin Kolinko
class. Instances of Connector are created via that rule, instead of a standard class creation rule, and so (unlike other elements processed by digester) className attribute does not work here. Best regards, Konstantin Kolinko - To

Re: Sanity Check

2016-11-17 Thread Konstantin Kolinko
byte[] and the method name is "write". 5. Wikipedia: https://en.wikipedia.org/wiki/Percent-encoding#The_application.2Fx-www-form-urlencoded_type Wikipedia mentions XForms spec, -> https://www.w3.org/TR/2007/REC-xforms-20071029/#serialize-urlencode 6. You can test with real browsers. Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Sanity Check

2016-11-18 Thread Konstantin Kolinko
HOULD contain a charset attribute. If >> omitted, by default this is "charset=UTF-8". >> >> and be done with it once and for all. > > Right: once and for all, for new clients who implement the spec. All > old clients, servers, proxies, ,

Re: ExtendedAccessLogValve.class overloaded timezone and set it to GMT

2016-12-14 Thread Konstantin Kolinko
cessLogValve (currently it uses TimeZone.getDefault()), but I think that ExtendedAccessLogValve shall remain with GMT. Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: JSP compilation fails with Java 9

2017-01-09 Thread Konstantin Kolinko
org/eclipse/downloads/drops4/R-4.6.2-201611241400/ (Tomcat 8.5 ships with 4.5.1, Tomcat 9 uses 4.6.1, latest release is 4.6.2, but there is also a milestone build of 4.7 available) Best regards, Konstantin Kolinko - To unsub

Re: https redirect failed for POST request when behind a load balancer

2017-01-18 Thread Konstantin Kolinko
ions Is redirect performed by a single response, or there are several redirect responses in a chain, A -> B -> C/ ? 3. Actual configuration? (For someone else to reproduce the issue or to match your tale to their configs). Best regards, Konstantin Kolinko ---

Re: Endorsed mechanism in Tomcat 8

2017-01-24 Thread Konstantin Kolinko
1653475 http://tomcat.markmail.org/message/ujdov6zpdhyxeorf 3. You can set command-line arguments for java by adding them to JAVA_OPTS or CATALINA_OPTS environment variable in a setenv.sh file. Using a setenv.sh script is documented in RUNNING.txt file of Tomcat. Best regards, Konstantin Koli

Re: Stopping any Tomcat thread running more than an amount of time

2017-01-29 Thread Konstantin Kolinko
2017-01-23 16:06 GMT+03:00 André Warnier (tomcat) : > On 23.01.2017 13:41, Abdessamed Mansouri wrote: >> >> Hello, Thank you for your answers, we are integratting JSF (Mojarra) and >> using it, so in many cases, in the same page there's some functionnalities >> which work and other not, there's als

Re: Tomcat 8.5 HTTP/2 connector not supporting GZIP compression

2017-02-04 Thread Konstantin Kolinko
cert.pem" SSLPassword="changeit"> > > When you ask about compression of dynamic content, I think that you should read about the following well-known issues first, especially the latter one: https://en.wikipedia.org/wiki/CRIME_(security_exploit) https://en.wikipedia.org/wiki

Re: POST + 500 + Response returns no content

2017-03-13 Thread Konstantin Kolinko
Do both systems use the same connector type (bio/nio/apr, ajp/http/https)? Try running WireShark, to inspect network traffic? https://www.wireshark.org/ Try running with a debugger? https://wiki.apache.org/tomcat/FAQ/Developing#Debugging Best regards, Konstantin Kolinko --

Re: Trivial DataSource ResourceLink error

2017-03-13 Thread Konstantin Kolinko
; > I want to use GlobalNamingResources without hardcoding username/password in > context.xml, that is committed to my shared source repository. > > Any ideas ? > Is there any trivial error ? Any other errors at startup time? In catalina log, in localhost log? You may test whether the

Re: Tomcat with ssl not starting

2017-03-15 Thread Konstantin Kolinko
or attached and advise what could be wrong > The rules: http://tomcat.apache.org/lists.html#tomcat-users -> Important. See "1.", "6." and "7." Best regards, Konstantin Kolinko - To unsubscr

Re: how do I know the exact commit for a particular version of tomcat?

2017-03-16 Thread Konstantin Kolinko
zip (tag.gz) file for a specific version from archives. http://tomcat.apache.org/download-80.cgi -> "Archives" link Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apach

Re: classloader for components in META-INF/context.xml?

2017-03-22 Thread Konstantin Kolinko
ath. It is better to do that before starting a web application class loader. http://tomcat.apache.org/tomcat-8.5-doc/config/resources.html 5) Configuration of a web application can be performed externally, via JMX API. What objects will be exposed via JMX and starting with wh

Re: Question on FORM POST processing via AJP1.3 in tomcat 1.0.69, changed from 1.014.

2017-03-27 Thread Konstantin Kolinko
ral steps. It is worth to test with the current 7.0.76 as well. [1] http://archive.apache.org/dist/tomcat/tomcat-7/ Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Question on FORM POST processing via AJP1.3 in tomcat 1.0.69, changed from 1.014.

2017-03-27 Thread Konstantin Kolinko
gh, the 3.2 versions are not even available in the archives - > they start at 3.3 > > Oh, those memories... You can find those versions here: http://archive.apache.org/dist/tomcat/tomcat-3/archive/ Documentation isn't online though. The

Re: how to access HTTPServletRequest in RealmBase

2017-03-30 Thread Konstantin Kolinko
2017-03-30 11:02 GMT+03:00 Jan Vávra : > Hello, > I have written a custom Realm and I need to access to the request headers. > The authentication should be computed from client certificate + id from > custom http header X-IdUser. Can I somehow access to the HTTPServletRequest > instance ? Not po

Re: Websocket & Logging

2017-03-30 Thread Konstantin Kolinko
g is bad. 2. What is the name of your web application? Is it "ROOT"? FAQ: https://wiki.apache.org/tomcat/HowTo#How_do_I_make_my_web_application_be_the_Tomcat_default_application.3F Best regards, Konstantin Kolinko -

Re: Websocket & Logging

2017-03-30 Thread Konstantin Kolinko
2017-03-30 18:56 GMT+03:00 Addy D : > On Thu, Mar 30, 2017 at 8:49 PM, Konstantin Kolinko > wrote: > >> 2017-03-30 12:15 GMT+03:00 Addy D : >> > I can see following in log, while starting tomcat: >>

Re: how to access HTTPServletRequest in RealmBase

2017-04-01 Thread Konstantin Kolinko
e.catalina.realm.JAASRealm JASPIC has access to request & response.. Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: InvocationTargetException on startup after upgrade to 8.5.13

2017-04-03 Thread Konstantin Kolinko
phers(AbstractHttp11Protocol.java:566) 3. This getter has a side-effect. It callsAbstractHttp11Protocol.registerDefaultSSLHostConfig() Note that this happens when Tomcat is already running. The call is from a web application. This results in NPE trying to read a key file. I guess that this conn

Re: Tomcat 8.5.11 -Djava.net.debug=ssl not logging

2017-04-08 Thread Konstantin Kolinko
inSize="2048" > compressableMimeType="text/html,text/xml,text/csv,text/css,text/javascript" >useServerCipherSuitesOrder="true" (etc) 5. Personally, I do not recommend enabling compression for dynamic data on HTTPS connectors https://en.wikipedia.org/wiki

Re: needed your help very urgent

2017-04-24 Thread Konstantin Kolinko
for you application. Either a) disable it and configure all servlets, listeners etc. discovered with scanning in you WEB-INF/web.xml file, or b) configure the scanner to exclude unrelated jars from scanning. https://wiki.apache.org/tom

Re: Regarding ECJ jar with tomcat 8.5.13

2017-04-25 Thread Konstantin Kolinko
used by Tomcat is the same. (If it is different, you'll see right away). You may try the current 4.6 which I think is 4.6.3. If it fixes your issue, feel free to file a Bugzilla entry. See old Bugzilla issues for Tomcat for downloa

Re: trimSpaces removing whitespace from html

2017-05-29 Thread Konstantin Kolinko
e spaces in template text between actions or directives be trimmed ?, default false." http://tomcat.apache.org/tomcat-8.5-doc/jasper-howto.html = JSP.8.5.1 The tag Directive trimDirective- Whitespaces (optional) Carries the same syntax and semantics of the trim- DirectiveWhitespaces attribute of the page directive. However, there is no corresponding global configuration element in web.xml. Thus the global configuration should not apply to tag files at all? Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Tomcat 8 non-Latin filename war file deploy issue

2017-06-05 Thread Konstantin Kolinko
2017-06-04 18:38 GMT+03:00 Desteny Child : > Hi, > > On Linux(openSUSE) machine I'm trying to deploy on Tomcat 8 application(war > file) that contains a files with names with Unicode characters. > > Inside of the war file the name looks like: > > бжк-природний-1496336830201.xml > > but after deploy

Re: Change of status code for ClientAbortExceptions - bug?

2017-06-06 Thread Konstantin Kolinko
y. I think that it makes sense to log the status code that was actually sent on the first line of the response. If "200" was sent to browser, it is better to log "200", not "500". As an idea: In Apache HTTPD there is an option in their access log format to lo

Re: NullPointerException in Response.generateCookieString()

2017-07-17 Thread Konstantin Kolinko
at connector code that results in concurrent processing of the same Request/Response object is possible, but unlikely. If it is there, it will be a security issue, see CVE-2017-5651 (fixed in 8.5.13) as an example). http://tomcat.apache.org/security.html Best regards, Konstantin Kolinko

Re: Tomcat 8.5.16 - APR version mismatch error upon startup

2017-07-18 Thread Konstantin Kolinko
e usual location is the same directory where service wrapper is (Tomcat85.exe). Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Non-US-ASCII letters in url-mapping

2017-07-26 Thread Konstantin Kolinko
rrently being tested - see "[VOTE]" thread on dev@ list for links http://markmail.org/thread/lkyl5nbn4akwv7gb 8.5.19 fixes some regressions caused by that change (e.g. 61264), but I do not remember such issue as yours to be reported or fixed. Best regards, Konstantin Kolinko ---

Re: Tomcat 9 won't start according to Eclipse

2017-07-28 Thread Konstantin Kolinko
t; org.apache.catalina.util.LifecycleBase.fireLifecycleEvent(LifecycleBase.java:123) > at > org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:4993) > at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183) > ... 27 more Eclipse

Re: Tomcat 9 won't start according to Eclipse

2017-08-02 Thread Konstantin Kolinko
2017-07-28 20:51 GMT+03:00 Roparzh Hemon : > On Fri, Jul 28, 2017 at 6:18 PM, Konstantin Kolinko > wrote: >> >> Eclipse by default places element for web application into >> Tomcat's server.xml file. >> This is a discouraged practice. A result of suc

Re: Where Tomcat webapp contexts live on Debian (NOT off-topic; A LEGITIMATE TECHNICAL QUESTION)

2017-08-16 Thread Konstantin Kolinko
.html#Automatic_Application_Deployment [4] http://tomcat.apache.org/tomcat-7.0-doc/config/listeners.html#UserConfig_-_org.apache.catalina.startup.UserConfig Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Help needed - JPA probem - No connection specified with project

2017-09-22 Thread Konstantin Kolinko
same value of "name" attribute. If you have a ResourceLink in context.xml, it means that your Resource element must go into GlobalNamingResources element of conf/server.xml file. http://tomcat.apache.org/tomcat-8.5-doc/config/globalresources.html BTW, you should not modify conf/c

Re: unable to configure logging

2017-09-25 Thread Konstantin Kolinko
n default configuration 1catalina.org.apache.juli.AsyncFileHandler.level = FINE so you should have seen your messages 3. Beware of typos. Your configuration looks sane. I do not see any obvious errors in it. 4. If nothing else helps, run Tomcat with a debugger https://wiki.apache.org/t

Re: Help needed - JPA probem - No connection specified with project

2017-09-25 Thread Konstantin Kolinko
t;30" maxWait="-1" username="root" singleton="true" override="true" factory="org.apache.tomcat.jdbc.pool.DataSourceFactory" password="password" alternateUsernameAllowed="true" driverClassName="com.mysql.jdbc.Driver" url="jdbc:mysql://localhost:3306/hi5" /> // You either use /> or , not both. ]]] Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: tomcat ssl setup

2017-09-26 Thread Konstantin Kolinko
eneration" Also available here: http://tomcat.apache.org/presentations.html > > https://youtu.be/I6TbMqH9WFg > > Mark > Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.a

Re: Java 9 support + HSTS for tomcat.apache.org

2017-09-28 Thread Konstantin Kolinko
, not the checksums. It is not so easy to compromise a PGP signature. You cannot generate a new signature without having a key. I think that HSTS is an overkill. Maybe update links to *.cgi pages (in menu and on the site) to use https: Best reg

Re: Help needed - JPA probem - No connection specified with project

2017-09-29 Thread Konstantin Kolinko
> > And my web.xml ; > > > http://www.w3.org/2001/XMLSchema-instance"; > xmlns="http://xmlns.jcp.org/xml/ns/javaee"; > xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee > http://xmlns.jcp.org/xml/ns/javaee/web-app_3_1.xsd"; version="3

Re: Java 9 support + HSTS for tomcat.apache.org

2017-10-04 Thread Konstantin Kolinko
2017-09-28 19:56 GMT+03:00 Konstantin Kolinko : > 2017-09-26 11:57 GMT+03:00 Oliver Heister : >> 2. Currently MITM attacks by evil ISPs or WiFi networks are possible >> against people downloading tomcat from >> http://tomcat.apache.org/download-80.cgi . (The page has links to

Re: migration from tomcat 7.0 to 8.5

2017-10-04 Thread Konstantin Kolinko
") as a resource and reports "true, it is a package" if the class resource is not found. > I think I'm up to 12 hours messing with this and reading everything I can get > my hands on. > Something that was so simple in tomcat 7 has turned out to be a nightmare in &g

Re: Tomcat unstable after updating apache http client

2017-10-05 Thread Konstantin Kolinko
ld be visible there, https://wiki.apache.org/tomcat/FAQ/Troubleshooting_and_Diagnostics#Common_Troubleshooting_Scenario 2. Tomcat 7.0.82 was released a few days ago. Best regards, Konstantin Kolinko - To unsubscribe, e-mail:

Re: Enforcing server preference for cipher suites

2017-10-10 Thread Konstantin Kolinko
, no > matter what value I set to this useServerCipherSuitesOrder attribute, always > the order selected is ABC... It should work when running on Java 8. Maybe try debugging e.g. with breakpoint in org.apache.tomcat.util.compat.Jre8Compat setUseServerCipherSuitesOrder() https://wiki.apache.org/tomcat/FAQ/D

Re: classloader issue with bouncycastle

2017-10-18 Thread Konstantin Kolinko
presentation (2010) by markt here: http://tomcat.apache.org/presentations.html and http://tomcat.apache.org/tomcat-8.5-doc/class-loader-howto.html (Maybe moving the BC.jar and its dependencies to ${catalina.home}/lib is sufficient to fix your issue. A more robust solution is t

Re: Checksum fail for apache-tomcat-8.5.23-windows-x86.zip

2017-10-23 Thread Konstantin Kolinko
ys I use the unix tools bundles with Git for Windows. Best regards, Konstantin Kolinko - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: TLD startup issues

2017-10-23 Thread Konstantin Kolinko
can be run with CATALINE_BASE != CATALINA_HOME, and some OS vendors place Tomcat configuration files into a different place. Print the values of system properties catalina.home catalina.base tomcat.util.scan.StandardJarScanFilter.jarsToSkip tomcat.util.scan.StandardJarScanFilter.jarsToScan (e.g. by writin

<    18   19   20   21   22   23   24   >