Nabble - Tomcat - User

Re: How to Hide Tomcat startup console

2009-11-14T05:20:03Z

2009/11/14 SRama <sujay@...>:
>
> I want to hide tomcat status console (once stated server dos window it will
> show about tomcat stat up stuts) so please let me know how to hide? I have
> to do anything related in the confi files?

Use "javaw.exe" instead of "java". Though running as service should
be the preferred way.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...

Re: How to Hide Tomcat startup console

2009-11-14T05:02:56Z

SRama wrote:
> I want to hide tomcat status console (once stated server dos window it will
> show about tomcat stat up stuts) so please let me know how to hide? I have
> to do anything related in the confi files?

If you don't want the console, the simplest solution is to run Tomcat as a service.

Mark

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...

RE: how to find tomcat binary distribution service name

2009-11-14T04:21:10Z

Tomcat have service name and also its configured with server.xml but when I run tomcat binary version why it was not listing showing service name? I have checked through command prombt “tasklist “
how OS will identified the server instance?
How OS will create pid ?
Please let me can I possible to take tomcat pid on windows on command prombt?

How to Hide Tomcat startup console

2009-11-14T04:06:39Z

I want to hide tomcat status console (once stated server dos window it will show about tomcat stat up stuts) so please let me know how to hide? I have to do anything related in the confi files?

RE: Tomcat really need Shutdown port

2009-11-14T03:59:37Z

Dear Guys,
As of my knowledge and other tomcat related document and experts response it’s states we need tomcat port need to shuts down for windows.

I have one more clarification regarding tomcat port

Over view of my product: our product based developed by struts web application its running on tomcat it’s in the form of CDROM , tomcat contain more than one we application and also I am giving link to the each application on destop and start of menu once user click the link it point static page and it will call startup.bat file so each application same line I am giving link and it will point same startup.bat file.

We are hiding tomcat status console. So it will not show any excepton if user clink more than one time it will call stat.bat file but application running fine. But log its shows some tomcat start error is coming. Next import point we are not shutdown server because user don’t want to see the tomcat console so we are just leaving server when user will restart machine then will system will remove instance from memory. I know this is not way to program.

Let me know we are not shut down server when user wants to remove application from machine I am giving option to remove entire setup once user click the remove link it will remove all the files from system at the time I am trying to stop the server and removing here only I need tomcat shut down port but I have removed tomcat shut down port after running web application when I try to remove its getting removed without any issues.

My question is there any way to set up time to stop the server like after two or 3 hours?

How tomcat instance are getting removed from memory without shutdown port?
Based on this scenario can I go without tomcat shutdown port on windows?
Are you thing it will any problem to future because of tomcat port?
If user wants uninstall my application then only I am calling shutdown and removing files from the machine so I don’t need further so please let me know based on this scenario tomcat need down port?
if i remove shutdonw port tomcat will take any default port ?

RE: SSL Configuration Question

2009-11-14T01:32:01Z

Hi Charles,

The reason i'm looking in the forum is beacause the toturial wasn't clear to me.

The section about importing a certificate issued by a CA begins with:

Download a Chain Certificate from the Certificate Authority you obtained the Certificate from.
For Verisign.com commercial certificates go to: http://www.verisign.com/support/install/intermediate.html
For Verisign.com trial certificates go to: http://www.verisign.com/support/verisign-intermediate-ca/Trial_Secure_Server_Root/index.html
For Trustcenter.de go to: http://www.trustcenter.de/certservices/cacerts/en/en.htm#server
For Thawte.com go to: http://www.thawte.com/certs/trustmap.html
Import the Chain Certificate into your keystore

Waht is a Chain Certificate? What do i do with it? What product does it produce (which file type)?

Also, I might need to skip this stage since i already have a certificate at hand (.cer) as Christofer implied in the previouse thread.

AnyWay - i'm stuck with 4 different files which appearantly look like a finalized & ready to launch certificate but i don't know how to configure the connector attributes in order to support it.

Thanks.

Caldarale, Charles R wrote:

> From: Liav Ezer [mailto:liav.ezer@gmail.com]
> Subject: Re: SSL Configuration Question
>
> So my only wish is to know what to write in those two attributes:
> keystoreFile - Which of the 4 files i have do i need to point to (my
> guess is the xxx.domainname.com.key )?
> keystorePass - What do i write in this attribute? When i issue my own
> certificate (using keytool) it was the password i used creating the
> certificate itself.

Have you read the Tomcat doc, in particular the "Configuration" and "Installing a Certificate from a Certificate Authority" sections?

http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html

- Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

Re: Memory, handles and threads increasing in Tomcat 5.5

2009-11-13T21:07:20Z

Hi,

Without knowing what your application is doing, here is something you should
look at:

External dependencies.

If your application is stable performance wise at steady state for a few
thousands of GC cycles, and then jumps in resources out of nowhere, it is
very possible that this is due to an external interruption.

Possible interruptions:

1. Another process that runs on the machine of the tomcat server. Cron
job, log file compression, you name it. Go over the process list and cron to
start with. We run performance tests only on very clean machines, bare bones
linux with java and tomcat and nothing else.
2. If your app is using an external application, like a relational
database, web service, other HTTP server, email system, that system may be
the periodic bottleneck. If it has a periodic interruption (like a job that
runs on that machine, or just its own behavior under constant load), it may
block your threads for a short amount of time, causing the thread count to
increase.
3. Something that runs periodically inside your application. Same as
above, but not external. This may also be a third party library that you use
in your app without directly doing it yourself.
4. Get rid of all webapps that are not the web app that you test. There
are a few that come with tomcat by default. Make sure your tomcat runs only
the app you are testing. Conf/Catalina and all its subdirectories should
contain one xml file at most if you need context files. All your web app
directories together should contain one war file/directory combined.
5. If your system actually consists of a few war files, load test each
one of them separately to find the trouble maker. When you test one, the
others should not be installed on tomcat (IE, delete the war file and its
sibling directory). Not installed and not running, NOT INSTALLED. Big
difference.

Try to do a thread dump while the jump is happening, if you can catch that.
If you can get a thread dump while the number of the threads increasing
(sounds like difficult timing from what you describe) you will see what the
threads are doing at that point, and at least one of thread will be able to
give you an insight why they cannot handle the current momentary load.

That is quite a coincidence that as we speak I am dong exactly that, load
testing tomcat on different EC2 combinations :)

E

RE: Tomcat really need Shutdown port

2009-11-13T18:53:33Z

> From: news [mailto:news@...] On Behalf Of Bill Barker
> Subject: Re: Tomcat really need Shutdown port
>
> On Windows, you need the shutdown port (so that anybody with physical
> access to the machine can shutdown the service by using the scripts).

The above seems to conflict with the results of my experiments running 6.0.20 as a service on Vista 64.

> This is because tomcatN.exe doesn't keep a thread alive on it's own
> after starting Tomcat, so there are no non-daemon threads left and
> Tomcat shuts down.

That's not the behavior I observed, nor is it reflected in the code. There's a check for port == -1 in StandardServer.await() that repeatedly sleeps for 10 seconds waiting for a stop flag to be set. Setting the port to -2 causes an immediate return from the await() method, while any other value attempts to acquire a socket for the specified port.

The original thread from tomcat6.exe does appear to have exited, although its Thread object is still around.

- Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...

Re: SSL Configuration Question

2009-11-13T18:44:01Z

"Christopher Schultz" <chris@...> wrote in message
news:4AFDB50C.70602@......

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Liav,
>
> On 11/13/2009 10:48 AM, Liav Ezer wrote:
>> I need help configuring my http connector to be a secure one via SSL.
>
> Are you expecting to use tcnative in order to use an "APR" connector, or
> do you want to use the plain-old Java HTTP connector? If you don't know
> what I'm talking about, you want the Java one. It's important to
> differentiate because the configurations are done differently.
>
>> I have the purchased certificate's (from a CA which i don't know who is)
>> products in 4 different files:
>>
>> xxx.domainname.com.cer -> I don't know what is this file..
>
> Neither do I. Look at the date stamps to see if it's relevant.
>
>> xxx.domainname.com.key -> I believe this is the encrypted key for the
>> certificate
>
> Hopefully, you created this file yourself and haven't given it to
> anyone. It should be a /private/ RSA key.
>
>> xxx.domainname.com.csr -> I believe this is the request
>
> .csr files are typically "certificate request" files, so yet, that seems
> reasonable.
>
>> xxx.domainname.com.crt -> I believe this is the actual certificate
>> issed
>> by the CA
>
> Generally, .crt files are the actual certificates. They are usually
> encrypted with a passphrase and can be unlocked using the .key file above.
>

Urm, usually the .crt files are not encrypted (since they are sent to
anybody that asks for them by the web server). They are usually base64
encoded (since the actual data is binary).

>> 1. What should i write at the keystoreFile? - Which of the 4 files i have
>> do
>> i need to point to?
>> 2. What do i write in the keystorePass attribute?
>
> That depends on whether you are using APR or not. See above.
>
>> 3. What should i do with the rest of those 4 files?
>
> xxx.domainname.com.key - keep this in a safe place, preferably /not/ on
> your production server.
>
> xxx.domainname.com.csr - You can probably discard this file, but it
> might be worth keeping around alongside your .key file.
>
> xxx.domainname.com.cer - It depends on what this file is. It might even
> be a certificate file that has no password (which would be useful if you
> were using Apache httpd, but you didn't mention that so I suspect it's
> not useful to have such a certificate laying around).
>
> - -chris
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.10 (MingW32)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAkr9tQwACgkQ9CaO5/Lv0PBsYwCguvk35Bo0kLXB1UYrYr2iIAX7
> JKYAnjViDJDfcUrz4BeYnr351+v4i8us
> =BPyj
> -----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...

Re: Tomcat really need Shutdown port

2009-11-13T18:26:58Z

"Mark Thomas" <markt@...> wrote in message
news:4AFDF745.6000803@......

> Caldarale, Charles R wrote:
>>> From: Mark Thomas [mailto:markt@...]
>>> Subject: Re: Tomcat really need Shutdown port
>>>
>>> If you set the shutdown port to -1 then the standard process
>>> kill (ie kill -15 <pid> on linux) will perform a standard,
>>> perfectly safe shutdown identical to what you would get if
>>> the shutdown script worked (which it won't without a shutdown
>>> port)
>>
>> Good to know. Anything equivalent for Windows?
>
> CTRL-C if running in a console. If running as a service, I don't *think*
> the
> shutdown port is used but you'd have to check. I'd test it / check the
> source
> myself, but I'm in the middle of something else I need to finish at the
> moment.
>

On *nix, jsvc doesn't use the shutdown port (it has it's own signal handling
to do a clean shutdown).

On Windows, you need the shutdown port (so that anybody with physical access
to the machine can shutdown the service by using the scripts). This is
because tomcatN.exe doesn't keep a thread alive on it's own after starting
Tomcat, so there are no non-daemon threads left and Tomcat shuts down.

> Mark

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...

Re: AccessLogValve calling order

2009-11-13T18:11:58Z

Hi Chris.

Thanks for diagnosing this problem! It appears you're right that it logs
only after the session is invalidated (after the request is complete) on a
logout request. That bug has existed in the code for a very long time,
unnoticed. The AccessLogValve was initially implemented to log only after
the request processing is complete so that the client never needs to wait
for the logging to complete. With the new addition of asynchronous logging,
however, it's quite a bit less important to log only when the request is
complete. It seems like it would help if the access logger could be
configurable to log either before or after handling the request (I'm not
sure logging both before and after makes sense). Your ideas for %Sr and
%{methodName}rm both seem useful as well, though I think the %{methodName}rm
one has potential security & side effect issues. So, I would suggest
implementing your first two ideas. I'm also happy to help you with that, if
you'd like.

Cheers.
--
Jason Brittain
MuleSoft <http://www.mulesoft.com>

On Fri, Nov 13, 2009 at 2:22 PM, Christopher Schultz <
chris@...> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> All,
>
> Amazingly enough, I had my first need to use AccessLogValve today, and
> one of the things I wanted to print was the user's session id. No,
> problem: just add "%S" to the log pattern.
>
> Well, there is one problem: you can't spit-out the session id for logout
> requests because the logic for the AccessLogValve is:
>
> if(enabled)
> invoke next valve
> print log message
> else
> invoke next valve
>
> Note that the request has essentially completed when the log message is
> generated. This makes complete sense as you typically want to log
> /after/ the request so you can do things like find out how many bytes
> were sent, how long the request took, etc.
>
> In my case, I want to have access to the session id before the session
> is invalidated (which happens in the logout servlet).
>
> Another option would be to get the requested session id from the request
> (which can only be done with the current AccessLogValve if the client is
> using cookies), though that can be misleading because anyone can request
> anything... it's not guaranteed to use a useful value.
>
> Anyhow, I was wondering if anyone had any suggestions short of heavily
> modifying the AccessLogValve or developing something from scratch.
>
> I'd also be happy to provide a patch for the AccessLogValve that add any
> or all of the following capabilities:
>
> 1. Allow log before or after request (or both?)
> 2. Add requested session id to standard pattern options (%Sr?)
> or
> 3. Add %{xxx}rm to call ServletRequest.xxx and print the result
> (allows ${getRequestedSessionId}rm
>
> Any comments?
>
> Thanks,
> - -chris
>

Re: Apache Tomcat Connector (AJP13) is corrupting html content

2009-11-13T17:00:34Z

On 13.11.2009 21:41, ndunn1979 wrote:
>
> I left them off because they were the same. The only difference is they are a
> second apart.
>
> [Fri Nov 13 08:32:07.359 2009] [1916:2244] [debug] jk_ajp_common.c (1259):
> 0000 03 1F F8 61 63 74 69 6F 6E 3D 31 26 6E 61 6D 65 - ...action=1&name
>
> [Fri Nov 13 08:32:08.218 2009] [1916:2244] [debug] jk_ajp_common.c (1259):
> 0000 03 1F F8 61 63 74 69 6F 6E 3D 31 26 6E 61 6D 65 - ...action=1&name

I see.

> Rainer Jung-3 wrote:
>>
>> Hmmm, that one I'm not sure, because after the "inde" there are only
>> null bytes. Since the beginning of the packet is not shown, I'm not
>> sure, but likely the "inde" was just the end of the body data of the AJP
>> packet.
>>
>
> I agree. I was just pointing out the fact that if you ignore the null bytes,
> the body content continues in the next packet after the header information
> for the two "working" packets.
>
>
> Rainer Jung-3 wrote:
>>
>> The bytes after "inde" are all "00", could simply be the end of gthe
>> packet body.
>>
>
> That makes sense.
>
>
> Rainer Jung-3 wrote:
>>
>> Right, that looks wierd. I assume you didn't leave any line in theis
>> block out from the mail.
>>
>
> That's correct, it's in the log the same way.
>
> So is there any way to trace Tomcat to see how it's handling the requests
> from mod_jk?

You can increase the log level of the connector code. Depending on your
exact connectors, set Log Level for org.apache.jk, org.apache.ajp,
org.apache.coyote to debug.

BTW: Do you use the tomcat native connector? If so, try whether the
problem comes from tcnative.

Regards,

rainer

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...

RE: Tomcat really need Shutdown port

2009-11-13T16:52:03Z

> From: Mark Thomas [mailto:markt@...]
> Subject: Re: Tomcat really need Shutdown port
>
> CTRL-C if running in a console.

I verified that CTRL-C does a clean shutdown. Terminating via Task Manager or the close button on the command window causes abrupt termination, not a good thing.

> If running as a service, I don't *think* the
> shutdown port is used but you'd have to check.

The shutdown port does not appear to be necessary, although the following message does appear in the logs:

SEVERE: No shutdown port configured in server.xml. Please shut down server through OS signal. Server not shut down by external JVM.

The above is immediately followed by a clean shutdown. This appears to be true using either tomcat6w.exe or the Services snap-in.

(All the above was done with the shutdown port set to -1.)

- Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...

Re: Tomcat really need Shutdown port

2009-11-13T16:18:13Z

Caldarale, Charles R wrote:

>> From: Mark Thomas [mailto:markt@...]
>> Subject: Re: Tomcat really need Shutdown port
>>
>> If you set the shutdown port to -1 then the standard process
>> kill (ie kill -15 <pid> on linux) will perform a standard,
>> perfectly safe shutdown identical to what you would get if
>> the shutdown script worked (which it won't without a shutdown
>> port)
>
> Good to know. Anything equivalent for Windows?

CTRL-C if running in a console. If running as a service, I don't *think* the
shutdown port is used but you'd have to check. I'd test it / check the source
myself, but I'm in the middle of something else I need to finish at the moment.

Mark

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...

Re: Tomcat really need Shutdown port

2009-11-13T15:25:54Z

On 13/11/2009 22:27, Caldarale, Charles R wrote:

>> From: Mark Thomas [mailto:markt@...]
>> Subject: Re: Tomcat really need Shutdown port
>>
>> If you set the shutdown port to -1 then the standard process
>> kill (ie kill -15<pid> on linux) will perform a standard,
>> perfectly safe shutdown identical to what you would get if
>> the shutdown script worked (which it won't without a shutdown
>> port)
>
> Good to know. Anything equivalent for Windows?

Yep. There's normally a button on the front of the machine. ;)

p

> - Chuck
>
>
> THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers.
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@...
> For additional commands, e-mail: users-help@...
>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...

Re: tomcat need for AJP and SSL port to run local application

2009-11-13T15:24:20Z

On 13/11/2009 21:28, Caldarale, Charles R wrote:

>> From: SRamasamy [mailto:sujay@...]
>> Subject: tomcat need for AJP and SSL port to run local application
>>
>> I go through tomcat server.xml file its shows the following ports
>> 1.
>>
>> 2.
>>
>> 3.
>
> Is this a fill-in-the blank question?

I missed an opportunity there...

p

>> Please let me know if I remove connector port AJP and SSL port it will
>> come any other problem handing request.
>
> If I understand your question, you do not need the AJP and SSL ports in Tomcat if the only access is via HTTP.
>
> - Chuck
>
>
> THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers.
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@...
> For additional commands, e-mail: users-help@...
>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...

RE: how to find tomcat binary distribution service name

2009-11-13T15:06:05Z

> From: SRama [mailto:sujay@...]
> Subject: RE: how to find tomcat binary distribution service name
>
> if i use tomcat binary version start startup.bat how to find tomcat
> wheter tomcat is stated or not ?

Send Tomcat an HTTP request with a wget program. Versions exist in both C and Java.

- Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...

RE: how to find tomcat binary distribution service name

2009-11-13T15:03:23Z

Thanks for yor reply,
we have problem is admin rights, our product will install and run with out admin rights,because of the reason only we are going for binary verion of tomcat, but our business requirments need to verify server stated or not?
if i use tomcat binary version start startup.bat how to find tomcat wheter tomcat is stated or not ?

Caldarale, Charles R wrote:

> From: SRama [mailto:sujay@techie.com]
> Subject: RE: how to find tomcat binary distribution service name
>
>
> if want to do through command prompt using "net start"
> user need admin rights to start install ?

I believe that is true for all methods of starting a service.

- Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

Re: Tomcat Clustering

2009-11-13T15:00:37Z

you running into this?
https://issues.apache.org/bugzilla/show_bug.cgi?id=47308

On 11/13/2009 03:42 PM, Mate1 Subscription wrote:

> Hi,
>
> I have been trying to configure clustering between 2 instances of Tomcat on
> the same physical server. Unfortunately it is not working. Would someone
> be able to help me to figure out what is the problem (assuming it is
> possible to cluster 2 instances of tomcat on the same server)?
>
> Here is my setup:
>
> SETUP 1: (This Setup is working)
> ----------------
> Server 1 --> Has one instance of Tomcat
> Server 2 --> Has one instance of Tomcat
>
> All those servers have exactly the same configuration files ... The only
> thing that is different between them is each server.xml file has its own IP
> address of each server (xxx.yyy.zzz.[11-12]) and its own jvmroute
> (server[1-2])
>
> Here is a sample config in server.xml
>
> <Engine name="Catalina" defaultHost="localhost" jvmRoute="server1">
>
> <Cluster className="org.apache.catalina.ha.tcp.SimpleTcpCluster"
> channelSendOptions="8">
>
> <Manager className="org.apache.catalina.ha.session.DeltaManager"
> expireSessionsOnShutdown="false"
> notifyListenersOnReplication="true"/>
>
> <Channel className="org.apache.catalina.tribes.group.GroupChannel">
> <Membership
> className="org.apache.catalina.tribes.membership.McastService"
> address="228.0.0.4"
> port="45664"
> frequency="500"
> dropTime="3000"/>
> <Receiver
> className="org.apache.catalina.tribes.transport.nio.NioReceiver"
> address="xxx.yyy.zzz.11"
> port="4001"
> autoBind="100"
> selectorTimeout="5000"
> maxThreads="6"/>
>
>
> Clustering is working perfectly in that setup. So this is not my problem.
>
>
> SETUP 2: (This Setup is not working)
> --------------
> Server 11 --> Has 2 instances of Tomcat
>
> Here is a sample configuration in server.xml
>
> FIRST INSTANCE
>
> <Engine name="Catalina" defaultHost="localhost" jvmRoute="server11a">
>
> <Cluster className="org.apache.catalina.ha.tcp.SimpleTcpCluster"
> channelSendOptions="8">
>
> <Manager className="org.apache.catalina.ha.session.DeltaManager"
> expireSessionsOnShutdown="false"
> notifyListenersOnReplication="true"/>
>
> <Channel className="org.apache.catalina.tribes.group.GroupChannel">
> <Membership
> className="org.apache.catalina.tribes.membership.McastService"
> address="228.0.0.4"
> port="45674"
> frequency="500"
> dropTime="3000"/>
> <Receiver
> className="org.apache.catalina.tribes.transport.nio.NioReceiver"
> address="xxx.yyy.zzz.21"
> port="4001"
> autoBind="100"
> selectorTimeout="5000"
> maxThreads="6"/>
>
> SECOND INSTANCE
>
> <Engine name="Catalina" defaultHost="localhost" jvmRoute="server11b">
>
> <Cluster className="org.apache.catalina.ha.tcp.SimpleTcpCluster"
> channelSendOptions="8">
>
> <Manager className="org.apache.catalina.ha.session.DeltaManager"
> expireSessionsOnShutdown="false"
> notifyListenersOnReplication="true"/>
>
> <Channel className="org.apache.catalina.tribes.group.GroupChannel">
> <Membership
> className="org.apache.catalina.tribes.membership.McastService"
> address="228.0.0.4"
> port="45674"
> frequency="500"
> dropTime="3000"/>
> <Receiver
> className="org.apache.catalina.tribes.transport.nio.NioReceiver"
> address="xxx.yyy.zzz.21"
> port="4002"
> autoBind="100"
> selectorTimeout="5000"
> maxThreads="6"/>
>
> When I try to start those 2 instances, they start with no problem except
> that clustering is not working at all.
> If I change the port from 45674 to 45664, Both tomcat instances start and
> they are able to cluster with the remaining 2 servers (listed in SETUP 1).
> Server11a clusters with Server1& Server 2
> Server11b clusters with Server1& Server 2
> Server11a cannot have a direct cluster link with Server11b (and vice
> versa). But as seen from the last 2 lines, they are in the cluster via
> either Server1 or Server2
>
> Why those 2 instances are able to cluster properly when they are using the
> same port as Server1& Server2 ... But when we try to cluster them between
> each others, they do not cluster at all?
>
> Thanks for your help.
>
> Richard
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...

RE: how to find tomcat binary distribution service name

2009-11-13T14:54:14Z

> From: SRama [mailto:sujay@...]
> Subject: RE: how to find tomcat binary distribution service name
>
>
> if want to do through command prompt using "net start"
> user need admin rights to start install ?

I believe that is true for all methods of starting a service.

- Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...

RE: how to find tomcat binary distribution service name

2009-11-13T14:43:14Z

Thanks for your reply, if want to do through command prompt using "net start" user need admin rights.
to start install ?

o

Caldarale, Charles R wrote:

> From: SRama [mailto:sujay@techie.com]
> Subject: RE: how to find tomcat binary distribution service name
>
> please let me know how to start through service.bat

As previously stated, the service.bat script only installs (or removes) the Tomcat service. To start the service, use the tomcat6w.exe program, the standard Windows service console (Control Panel -> Administrative Tools -> Services), or the "net start" command from a command prompt.

If you're getting errors when you're trying to do any of this, post the *exact* error messages. If the service refuses to start, look in the Tomcat logs.

- Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

Tomcat Clustering

2009-11-13T14:42:44Z

Hi,

I have been trying to configure clustering between 2 instances of Tomcat on
the same physical server. Unfortunately it is not working. Would someone
be able to help me to figure out what is the problem (assuming it is
possible to cluster 2 instances of tomcat on the same server)?

Here is my setup:

SETUP 1: (This Setup is working)
----------------
Server 1 --> Has one instance of Tomcat
Server 2 --> Has one instance of Tomcat

All those servers have exactly the same configuration files ... The only
thing that is different between them is each server.xml file has its own IP
address of each server (xxx.yyy.zzz.[11-12]) and its own jvmroute
(server[1-2])

Here is a sample config in server.xml

<Engine name="Catalina" defaultHost="localhost" jvmRoute="server1">

<Cluster className="org.apache.catalina.ha.tcp.SimpleTcpCluster"
channelSendOptions="8">

<Manager className="org.apache.catalina.ha.session.DeltaManager"
expireSessionsOnShutdown="false"
notifyListenersOnReplication="true"/>

<Channel className="org.apache.catalina.tribes.group.GroupChannel">
<Membership
className="org.apache.catalina.tribes.membership.McastService"
address="228.0.0.4"
port="45664"
frequency="500"
dropTime="3000"/>
<Receiver
className="org.apache.catalina.tribes.transport.nio.NioReceiver"
address="xxx.yyy.zzz.11"
port="4001"
autoBind="100"
selectorTimeout="5000"
maxThreads="6"/>

Clustering is working perfectly in that setup. So this is not my problem.

SETUP 2: (This Setup is not working)
--------------
Server 11 --> Has 2 instances of Tomcat

Here is a sample configuration in server.xml

FIRST INSTANCE

<Engine name="Catalina" defaultHost="localhost" jvmRoute="server11a">

<Cluster className="org.apache.catalina.ha.tcp.SimpleTcpCluster"
channelSendOptions="8">

<Manager className="org.apache.catalina.ha.session.DeltaManager"
expireSessionsOnShutdown="false"
notifyListenersOnReplication="true"/>

<Channel className="org.apache.catalina.tribes.group.GroupChannel">
<Membership
className="org.apache.catalina.tribes.membership.McastService"
address="228.0.0.4"
port="45674"
frequency="500"
dropTime="3000"/>
<Receiver
className="org.apache.catalina.tribes.transport.nio.NioReceiver"
address="xxx.yyy.zzz.21"
port="4001"
autoBind="100"
selectorTimeout="5000"
maxThreads="6"/>

SECOND INSTANCE

<Engine name="Catalina" defaultHost="localhost" jvmRoute="server11b">

<Cluster className="org.apache.catalina.ha.tcp.SimpleTcpCluster"
channelSendOptions="8">

<Manager className="org.apache.catalina.ha.session.DeltaManager"
expireSessionsOnShutdown="false"
notifyListenersOnReplication="true"/>

<Channel className="org.apache.catalina.tribes.group.GroupChannel">
<Membership
className="org.apache.catalina.tribes.membership.McastService"
address="228.0.0.4"
port="45674"
frequency="500"
dropTime="3000"/>
<Receiver
className="org.apache.catalina.tribes.transport.nio.NioReceiver"
address="xxx.yyy.zzz.21"
port="4002"
autoBind="100"
selectorTimeout="5000"
maxThreads="6"/>

When I try to start those 2 instances, they start with no problem except
that clustering is not working at all.
If I change the port from 45674 to 45664, Both tomcat instances start and
they are able to cluster with the remaining 2 servers (listed in SETUP 1).
Server11a clusters with Server1 & Server 2
Server11b clusters with Server1 & Server 2
Server11a cannot have a direct cluster link with Server11b (and vice
versa). But as seen from the last 2 lines, they are in the cluster via
either Server1 or Server2

Why those 2 instances are able to cluster properly when they are using the
same port as Server1 & Server2 ... But when we try to cluster them between
each others, they do not cluster at all?

Thanks for your help.

Richard

RE: how to find tomcat binary distribution service name

2009-11-13T14:32:54Z

> From: SRama [mailto:sujay@...]
> Subject: RE: how to find tomcat binary distribution service name
>
> please let me know how to start through service.bat

As previously stated, the service.bat script only installs (or removes) the Tomcat service. To start the service, use the tomcat6w.exe program, the standard Windows service console (Control Panel -> Administrative Tools -> Services), or the "net start" command from a command prompt.

If you're getting errors when you're trying to do any of this, post the *exact* error messages. If the service refuses to start, look in the Tomcat logs.

- Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...

RE: Tomcat really need Shutdown port

2009-11-13T14:27:40Z

> From: Mark Thomas [mailto:markt@...]
> Subject: Re: Tomcat really need Shutdown port
>
> If you set the shutdown port to -1 then the standard process
> kill (ie kill -15 <pid> on linux) will perform a standard,
> perfectly safe shutdown identical to what you would get if
> the shutdown script worked (which it won't without a shutdown
> port)

Good to know. Anything equivalent for Windows?

- Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...

RE: how to find tomcat binary distribution service name

2009-11-13T14:27:19Z

I was tryint to start through service.bat but it shows i have checked path it looks good
Usage: service.bat install/remove [service_name]
please let me know how to start through service.bat

Caldarale, Charles R wrote:

> From: SRama [mailto:sujay@techie.com]
> Subject: Re: how to find tomcat binary distribution service name
>
> I am using binary distribution tomcat and zip format, and also I am
> starting through startup.bat file

Then you're not running it as a service, so there is no service name. If you want to install Tomcat as a service, use the service.bat script, then tomcat6w.exe or the Windows service console to start it.

- Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

Re: Tomcat really need Shutdown port

2009-11-13T14:24:44Z

Caldarale, Charles R wrote:
>> From: SRamasamy [mailto:sujay@...]
>> Subject: Tomcat really need Shutdown port
>>
>> I have removed port but its working. let me know how its working after
>> removing shutdonw port ?
>
> Without the shutdown port, you will not be able to stop Tomcat via the normal scripts. You can terminate the Tomcat process by whatever means your OS provides, but I wouldn't recommend that.

If you set the shutdown port to -1 then the standard process kill (ie kill -15
<pid> on linux) will perform a standard, perfectly safe shutdown identical to
what you would get if the shutdown script worked (which it won't without a
shutdown port)

Mark

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...

AccessLogValve calling order

2009-11-13T14:22:54Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

All,

Amazingly enough, I had my first need to use AccessLogValve today, and
one of the things I wanted to print was the user's session id. No,
problem: just add "%S" to the log pattern.

Well, there is one problem: you can't spit-out the session id for logout
requests because the logic for the AccessLogValve is:

if(enabled)
invoke next valve
print log message
else
invoke next valve

Note that the request has essentially completed when the log message is
generated. This makes complete sense as you typically want to log
/after/ the request so you can do things like find out how many bytes
were sent, how long the request took, etc.

In my case, I want to have access to the session id before the session
is invalidated (which happens in the logout servlet).

Another option would be to get the requested session id from the request
(which can only be done with the current AccessLogValve if the client is
using cookies), though that can be misleading because anyone can request
anything... it's not guaranteed to use a useful value.

Anyhow, I was wondering if anyone had any suggestions short of heavily
modifying the AccessLogValve or developing something from scratch.

I'd also be happy to provide a patch for the AccessLogValve that add any
or all of the following capabilities:

1. Allow log before or after request (or both?)
2. Add requested session id to standard pattern options (%Sr?)
or
3. Add %{xxx}rm to call ServletRequest.xxx and print the result
(allows ${getRequestedSessionId}rm

Any comments?

Thanks,
- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkr93D0ACgkQ9CaO5/Lv0PCLuwCeLq+sIqkfrAgDNmW5i1JECVzz
oTwAnRDS6E7oZIRDQEwtzptBKHDju4Op
=rrdK
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...

RE: Tomcat really need Shutdown port

2009-11-13T13:46:16Z

> From: SRamasamy [mailto:sujay@...]
> Subject: Tomcat really need Shutdown port
>
> I have removed port but its working. let me know how its working after
> removing shutdonw port ?

Without the shutdown port, you will not be able to stop Tomcat via the normal scripts. You can terminate the Tomcat process by whatever means your OS provides, but I wouldn't recommend that.

- Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...

RE: tomcat need for AJP and SSL port to run local application

2009-11-13T13:44:24Z

> From: SRamasamy [mailto:sujay@...]
> Subject: RE: tomcat need for AJP and SSL port to run local application
>
>
> 1. Server port="8005" shutdown="SHUTDOWN"

The shutdown port must not be removed.

> 2. Connector port="8080" protocol="HTTP/1.1"
> connectionTimeout="20000"
> redirectPort="8443"

Some HTTP port is necessary; you may change the port number to whatever you prefer, within the limits of your OS and environment. The redirectPort attribute may be removed if there is no HTTPS traffic, although it will default to the value 443 if it is removed. As long as there is no <Connector> for the redirectPort, it doesn't matter what the value is.

> 3. Connector port="8009" protocol="AJP/1.3" redirectPort="8443"

The AJP port may be removed if there is no front-end to Tomcat using the AJP protocol.

- Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...

Tomcat really need Shutdown port

2009-11-13T13:42:08Z

Please let me know tomcat really need shutdown port to shutdown server. I go though some google its show tomcat default it listen port 8005 to shutdown. I have removed port but its working. let me know how its working after removing shutdonw port ? 1. Server shutdown="SHUTDOWN"

RE: tomcat need for AJP and SSL port to run local application

2009-11-13T13:34:29Z

Charles, I have few questions regarding tomcat our web application running on tomcat version 6, I go through tomcat server.xml file its shows the following ports 1. Server port="8005" shutdown="SHUTDOWN" 2. Connector port="8080" protocol="HTTP/1.1" connectionTimeout="20000" redirectPort="8443" 3. Connector port="8009" protocol="AJP/1.3" redirectPort="8443" My application not communicates with other service like web service and other application. Our application running on local machine only I have removed AJP and SSL port even if remove redirect port also application working and looks good. Please let me know if I remove connector port AJP and SSL port it will come any other problem handing request.

Caldarale, Charles R wrote:

> From: SRamasamy [mailto:sujay@techie.com] > Subject: tomcat need for AJP and SSL port to run local application > > I go through tomcat server.xml file its shows the following ports > 1. > > 2. > > 3. Is this a fill-in-the blank question? > Please let me know if I remove connector port AJP and SSL port it will > come any other problem handing request. If I understand your question, you do not need the AJP and SSL ports in Tomcat if the only access is via HTTP. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org For additional commands, e-mail: users-help@tomcat.apache.org

RE: tomcat need for AJP and SSL port to run local application

2009-11-13T13:28:51Z

> From: SRamasamy [mailto:sujay@...]
> Subject: tomcat need for AJP and SSL port to run local application
>
> I go through tomcat server.xml file its shows the following ports
> 1.
>
> 2.
>
> 3.

Is this a fill-in-the blank question?

> Please let me know if I remove connector port AJP and SSL port it will
> come any other problem handing request.

If I understand your question, you do not need the AJP and SSL ports in Tomcat if the only access is via HTTP.

- Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...

RE: SSL Configuration Question

2009-11-13T13:26:12Z

> From: Liav Ezer [mailto:liav.ezer@...]
> Subject: Re: SSL Configuration Question
>
> So my only wish is to know what to write in those two attributes:
> keystoreFile - Which of the 4 files i have do i need to point to (my
> guess is the xxx.domainname.com.key )?
> keystorePass - What do i write in this attribute? When i issue my own
> certificate (using keytool) it was the password i used creating the
> certificate itself.

Have you read the Tomcat doc, in particular the "Configuration" and "Installing a Certificate from a Certificate Authority" sections?

http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html

- Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...

tomcat need for AJP and SSL port to run local application

2009-11-13T13:22:05Z

Hi, I have few questions regarding tomcat our web application running on tomcat version 6, I go through tomcat server.xml file its shows the following ports 1. Server port="8005" shutdown="SHUTDOWN" 2. Connector port="8080" protocol="HTTP/1.1" connectionTimeout="20000" redirectPort="8443" / 3. Connector port="8009" protocol="AJP/1.3" redirectPort="8443" My application not communicates with other service like web service and other application. Our application running on local machine only I have removed AJP and SSL port even if remove redirect port also application working and looks good. Please let me know if I remove connector port AJP and SSL port it will come any other problem handing request.

Re: SSL Configuration Question

2009-11-13T13:17:15Z

Hi Christopher,

Thanks for your elaborated reply.

Regarding your first question:

No, i don't use the APR connector (port #443 i assume) & the tomcat-native jar. I do use the plain old HTTP connector in server.xml.

So my only wish is to know what to write in those two attributes:
keystoreFile - Which of the 4 files i have do i need to point to (my guess is the xxx.domainname.com.key )?
keystorePass - What do i write in this attribute? When i issue my own certificate (using keytool) it was the password i used creating the certificate itself.

I googled this & came across many sites. All explained the steps to initiate a request & import the certificate, BUT i think that i'm over those steps due to the fact that i have the .cer file at hand & all that is rest to do is to configure the connector.

Thanks.

Christopher Schultz-2 wrote:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Liav,

On 11/13/2009 10:48 AM, Liav Ezer wrote:
> I need help configuring my http connector to be a secure one via SSL.

Are you expecting to use tcnative in order to use an "APR" connector, or
do you want to use the plain-old Java HTTP connector? If you don't know
what I'm talking about, you want the Java one. It's important to
differentiate because the configurations are done differently.

> I have the purchased certificate's (from a CA which i don't know who is)
> products in 4 different files:
>
> xxx.domainname.com.cer -> I don't know what is this file..

Neither do I. Look at the date stamps to see if it's relevant.

> xxx.domainname.com.key -> I believe this is the encrypted key for the
> certificate

Hopefully, you created this file yourself and haven't given it to
anyone. It should be a /private/ RSA key.

> xxx.domainname.com.csr -> I believe this is the request

.csr files are typically "certificate request" files, so yet, that seems
reasonable.

> xxx.domainname.com.crt -> I believe this is the actual certificate issed
> by the CA

Generally, .crt files are the actual certificates. They are usually
encrypted with a passphrase and can be unlocked using the .key file above.

> 1. What should i write at the keystoreFile? - Which of the 4 files i have do
> i need to point to?
> 2. What do i write in the keystorePass attribute?

That depends on whether you are using APR or not. See above.

> 3. What should i do with the rest of those 4 files?

xxx.domainname.com.key - keep this in a safe place, preferably /not/ on
your production server.

xxx.domainname.com.csr - You can probably discard this file, but it
might be worth keeping around alongside your .key file.

xxx.domainname.com.cer - It depends on what this file is. It might even
be a certificate file that has no password (which would be useful if you
were using Apache httpd, but you didn't mention that so I suspect it's
not useful to have such a certificate laying around).

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkr9tQwACgkQ9CaO5/Lv0PBsYwCguvk35Bo0kLXB1UYrYr2iIAX7
JKYAnjViDJDfcUrz4BeYnr351+v4i8us
=BPyj
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org