tag:old.nabble.com,2006:forum-303Nabble - Tomcat2009-11-25T03:06:48ZTomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. Tomcat home is <a href="http://jakarta.apache.org/tomcat/" target="_top" rel="nofollow">here</a>.tag:old.nabble.com,2006:post-26510908Re: Tomcat Https loadbalancing??2009-11-25T03:06:48Z2009-11-25T03:06:48ZDavid Cassidy<br><br>On 25/11/09 10:36, Peter Crowther wrote:
<div class='shrinkable-quote'><br>> 2009/11/25 jkv<<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510908&i=0" target="_top" rel="nofollow">j.kumaravel@...</a>>:
<br>>
<br>>> I got one small doubt in the last point that you said.
<br>>>
<br>>> In this environment, you only want your "public" certificate on httpd.
<br>>> Tomcat will not be doing anything that uses it, so don't put a copy
<br>>> on those machines.
<br>>>
<br>>> this means that I will not enable SSL in my tomcat.. I will comment
<br>>> <!--<Connector port="443" protocol="HTTP/1.1" SSLEnabled="true"
<br>>> ....> -->
<br>>>
<br>>> tag totally from server.xml file in tomcat and have just one connetor
<br>>> element i.e.,
<br>>>
<br>>> <Connector port="8009" protocol="AJP/1.3" redirectPort="443" />
<br>>>
<br>> Certainly you only need the AJP connector, as Tomcat will never be
<br>> handling http or https requests.
<br>>
<br>>
</div>If you want your tomcat to ever know that its getting a secure request
<br>you'll need 2 ajp connectors - one as the default is "not secure"
<br>the other needs to say "i'm secure" otherwise when you do a
<br>transport-guarantee in your web.xml
<br>your client will be in an infinite loop
<br>as tomcat never sees a "secure" request....
<br><br><div class='shrinkable-quote'><br>>> Thanks for the reply, that really helped a lot and we can also conclude we
<br>>> cannot have a secure horizontal loadbalancing with Apache and Tomcat!
<br>>>
<br>> Depends what you mean by "secure", as the level of security is
<br>> relative, not absolute. There are more moving parts to secure, but
<br>> it's possible to secure all of them to a reasonable standard.
<br>>
<br>> No system is *ever* 100% secure from attack, even if it's 100 metres
<br>> underground, powered by its own generator, no network,
<br>> Faraday-shielded, has a division of armed guards protecting its bunker
<br>> and has self-destruct systems built in. It just depends how much the
<br>> attacker wants your data, and therefore what resource (s)he is willing
<br>> to commit to acquiring them.
<br>>
<br>> - Peter
<br>>
<br>> ---------------------------------------------------------------------
<br>> To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510908&i=1" target="_top" rel="nofollow">users-unsubscribe@...</a>
<br>> For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510908&i=2" target="_top" rel="nofollow">users-help@...</a>
<br>>
<br>>
</div><br>---------------------------------------------------------------------
<br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510908&i=3" target="_top" rel="nofollow">users-unsubscribe@...</a>
<br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510908&i=4" target="_top" rel="nofollow">users-help@...</a>
<br><br><p>From forum: <a href="http://old.nabble.com/Tomcat---User-f342.html" embed="fixTarget[342]" target="_top" >Tomcat - User</a></p>tag:old.nabble.com,2006:post-26510871Re: Tomcat Https loadbalancing??2009-11-25T03:03:04Z2009-11-25T03:03:04ZDavid CassidyPid,
<br><br>there is no need to have a commercial grade cert between your httpd and
<br>tomcat
<br>as thats in essence a private comms channel between your 2 servers the
<br>client won't know / see / care
<br><br>Use a self sign - as long as httpd has your cert all should be well
<br><br>D
<br><br>On 25/11/09 10:32, Pid wrote:
<div class='shrinkable-quote'><br>> On 25/11/2009 10:28, jkv wrote:
<br>>>
<br>>> Thanks David,
<br>>>
<br>>> I would imagine that with mod_proxy you could load balance https
<br>>> requests
<br>>> so that the https request goes to httpd then its load balanced between
<br>>> https requests to
<br>>> multiple tomcats. What you'll loose over the ajp protocol i'm sure
<br>>> someone will let us know
<br>>>
<br>>> That sounds good but when https request hits Apache the certificate
<br>>> will be
<br>>> issued by the server to the client, now when this is again sent as https
<br>>> request to tomcat, which will again try issuing a certificate (I
<br>>> guess as
<br>>> this is a protocol standard), I dont know whether will this affect the
<br>>> client -> getting two certificates for a single https request??
<br>>>
<br>>> Has any body done this before???
<br>>>
<br>>>
<br>>>
<br>>> David Cassidy wrote:
<br>>>>
<br>>>> Hey
<br>>>>
<br>>>> Yes if you want httpd to load balance https requests you do need it to
<br>>>> handle the https connection - and hence it needs the keys, certs etc
<br>>>>
<br>>>> Sadly the ajp protocol is in fact insecure
<br>>>> if you have the httpd and tomcat on separate boxes you do have a
<br>>>> security issue
<br>>>> as the connection is transporting data in the clear.
<br>>>>
<br>>>> I would imagine that with mod_proxy you could load balance https
<br>>>> requests
<br>>>> so that the https request goes to httpd then its load balanced between
<br>>>> https requests to
<br>>>> multiple tomcats. What you'll loose over the ajp protocol i'm sure
<br>>>> someone will let us know
<br>>
<br>> Note: you'll probably need more cert licenses, if they're commercial
<br>> ones, if you're deploying the cert on multiple Tomcats rather than on
<br>> one HTTPD.
<br>>
<br>>
<br>> p
<br>>
<br>>
<br>>>> On 25/11/09 09:18, jkv wrote:
<br>>>>> Hello,
<br>>>>>
<br>>>>> We are using Tomcat 6.0 and running HTTPS (enabled SSL). The number of
<br>>>>> requests has grown up and we have decided to do go for clustering and
<br>>>>> loadbalancing. We have decided to go for Apache and mod_proxy/mod_jk
<br>>>>> loadbalacing. My certificate resides in Tomcat.
<br>>>>>
<br>>>>> In order to loadbalance HTTPS request using Apache and
<br>>>>> mod_proxy/mod_jk,
<br>>>>> should I configure Apache to handle HTTPS and tell it about my
<br>>>>> certificate
<br>>>>> details?
<br>>>>>
<br>>>>> While loadbalancing I understand that http/https request to Apache is
<br>>>>> converted to ajp and tunneled to Tomcat, so is ajp protocol secure?
<br>>>>> should I
<br>>>>> enable SSL in tomcat to handle this request?
<br>>>>>
<br>>>>> Should I have two copies of my certificate files if Apache and Tomcat
<br>>>>> reside
<br>>>>> on two different physical machines(Horizontal Clustering)?
<br>>>>>
<br>>>>> I searched the forums and they are too advanced for my question. I am
<br>>>>> really
<br>>>>> new to clustering and load balancing and any help is deeply
<br>>>>> appreciated.
<br>>>>> Thanks in advance.
<br>>>>>
<br>>>>> Regards
<br>>>>> jkv
<br>>>>>
<br>>>>
<br>>>>
<br>>>
<br>>
<br>>
<br>> ---------------------------------------------------------------------
<br>> To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510871&i=0" target="_top" rel="nofollow">users-unsubscribe@...</a>
<br>> For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510871&i=1" target="_top" rel="nofollow">users-help@...</a>
<br>>
<br></div><p>From forum: <a href="http://old.nabble.com/Tomcat---User-f342.html" embed="fixTarget[342]" target="_top" >Tomcat - User</a></p>tag:old.nabble.com,2006:post-26510815Re: Tomcat Https loadbalancing??2009-11-25T02:57:44Z2009-11-25T02:57:44ZCyrille Le Clerc-3 Hello,
<br><br> As Ronald said, we made some drawings on a detailed document
<br>"Tomcat, SSL, secure communications and X-Forwarded-Proto" (1) that
<br>explains solutions to handle HTTPS at the Tomcat, Apache Httpd and
<br>Load Balancer layers. The document is written in french but the google
<br>translation is quite good (2).
<br><br> My preference is to use a level 7 load balancer in front of Apache
<br>httpd servers with mod_proxy_http+mod_proxy_balancer and then Tomcat
<br>servers. Of course, this topology is not always the best one but is
<br>very often relevant.
<br><br> Hope this helps,
<br><br> Cyrille
<br><br>--
<br>Cyrille Le Clerc
<br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510815&i=0" target="_top" rel="nofollow">cleclerc@...</a>
<br><a href="http://blog.xebia.fr" target="_top" rel="nofollow">http://blog.xebia.fr</a><br><br>(1) <a href="http://blog.xebia.fr/2009/11/13/tomcat-ssl-communications-securisees-et-x-forwarded-proto/" target="_top" rel="nofollow">http://blog.xebia.fr/2009/11/13/tomcat-ssl-communications-securisees-et-x-forwarded-proto/</a><br>(2) <a href="http://translate.google.com/translate?js=y&prev=_t&hl=en&ie=UTF-8&u=http%3A%2F%2Fblog.xebia.fr%2F2009%2F11%2F13%2Ftomcat-ssl-communications-securisees-et-x-forwarded-proto%2F&sl=fr&tl=en" target="_top" rel="nofollow">http://translate.google.com/translate?js=y&prev=_t&hl=en&ie=UTF-8&u=http%3A%2F%2Fblog.xebia.fr%2F2009%2F11%2F13%2Ftomcat-ssl-communications-securisees-et-x-forwarded-proto%2F&sl=fr&tl=en</a><br><br>On Wed, Nov 25, 2009 at 11:45 AM, Ronald Klop
<br><<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510815&i=1" target="_top" rel="nofollow">ronald-mailinglist@...</a>> wrote:
<div class='shrinkable-quote'><br>> Always make a drawing.
<br>>
<br>> client -> https -> tcp-loadbalancer -> still same https connection->
<br>> multiple tomcats
<br>>
<br>> client -> https -> http-loadbalancer (Apache, proxy) -> new ajp/http(s)
<br>> connection-> multiple tomcats
<br>>
<br>> Normally the loadbalancer and tomcats are in the same private network. It is
<br>> your choice if that is secure enough. In the end the data is unencrypted in
<br>> the database I guess, so normally you trust your own network.
<br>>
<br>> Ronald.
<br>>
<br>>
<br>> Op woensdag, 25 november 2009 10:18 schreef jkv <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510815&i=2" target="_top" rel="nofollow">j.kumaravel@...</a>>:
<br>>>
<br>>>
<br>>> Hello,
<br>>>
<br>>> We are using Tomcat 6.0 and running HTTPS (enabled SSL). The number of
<br>>> requests has grown up and we have decided to do go for clustering and
<br>>> loadbalancing. We have decided to go for Apache and mod_proxy/mod_jk
<br>>> loadbalacing. My certificate resides in Tomcat.
<br>>> In order to loadbalance HTTPS request using Apache and mod_proxy/mod_jk,
<br>>> should I configure Apache to handle HTTPS and tell it about my certificate
<br>>> details?
<br>>> While loadbalancing I understand that http/https request to Apache is
<br>>> converted to ajp and tunneled to Tomcat, so is ajp protocol secure? should
<br>>> I
<br>>> enable SSL in tomcat to handle this request?
<br>>> Should I have two copies of my certificate files if Apache and Tomcat
<br>>> reside
<br>>> on two different physical machines(Horizontal Clustering)?
<br>>>
<br>>> I searched the forums and they are too advanced for my question. I am
<br>>> really
<br>>> new to clustering and load balancing and any help is deeply appreciated.
<br>>> Thanks in advance.
<br>>>
<br>>> Regards
<br>>> jkv
<br>>> --
<br>>> View this message in context:
<br>>> <a href="http://old.nabble.com/Tomcat-Https-loadbalancing---tp26509573p26509573.html" target="_top" rel="nofollow">http://old.nabble.com/Tomcat-Https-loadbalancing---tp26509573p26509573.html</a><br>>> Sent from the Tomcat - User mailing list archive at Nabble.com.
<br>>>
<br>>>
<br>>> ---------------------------------------------------------------------
<br>>> To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510815&i=3" target="_top" rel="nofollow">users-unsubscribe@...</a>
<br>>> For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510815&i=4" target="_top" rel="nofollow">users-help@...</a>
<br>>>
<br>>>
<br>>>
<br>>>
<br>>
<br>>
</div><br>---------------------------------------------------------------------
<br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510815&i=5" target="_top" rel="nofollow">users-unsubscribe@...</a>
<br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510815&i=6" target="_top" rel="nofollow">users-help@...</a>
<br><br><p>From forum: <a href="http://old.nabble.com/Tomcat---User-f342.html" embed="fixTarget[342]" target="_top" >Tomcat - User</a></p>tag:old.nabble.com,2006:post-26510669Re: Tomcat Https loadbalancing??2009-11-25T02:45:30Z2009-11-25T02:45:30ZRonald KlopAlways make a drawing.
<br><br>client -> https -> tcp-loadbalancer -> still same https connection-> multiple tomcats
<br><br>client -> https -> http-loadbalancer (Apache, proxy) -> new ajp/http(s) connection-> multiple tomcats
<br><br>Normally the loadbalancer and tomcats are in the same private network. It is your choice if that is secure enough. In the end the data is unencrypted in the database I guess, so normally you trust your own network.
<br><br>Ronald.
<br><br><br>Op woensdag, 25 november 2009 10:18 schreef jkv <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510669&i=0" target="_top" rel="nofollow">j.kumaravel@...</a>>:
<div class='shrinkable-quote'><br>>
<br>>
<br>>
<br>> Hello,
<br>>
<br>> We are using Tomcat 6.0 and running HTTPS (enabled SSL). The number of
<br>> requests has grown up and we have decided to do go for clustering and
<br>> loadbalancing. We have decided to go for Apache and mod_proxy/mod_jk
<br>> loadbalacing. My certificate resides in Tomcat.
<br>>
<br>> In order to loadbalance HTTPS request using Apache and mod_proxy/mod_jk,
<br>> should I configure Apache to handle HTTPS and tell it about my certificate
<br>> details?
<br>>
<br>> While loadbalancing I understand that http/https request to Apache is
<br>> converted to ajp and tunneled to Tomcat, so is ajp protocol secure? should I
<br>> enable SSL in tomcat to handle this request?
<br>>
<br>> Should I have two copies of my certificate files if Apache and Tomcat reside
<br>> on two different physical machines(Horizontal Clustering)?
<br>>
<br>> I searched the forums and they are too advanced for my question. I am really
<br>> new to clustering and load balancing and any help is deeply appreciated.
<br>> Thanks in advance.
<br>>
<br>> Regards
<br>> jkv
<br>> --
<br>> View this message in context: <a href="http://old.nabble.com/Tomcat-Https-loadbalancing---tp26509573p26509573.html" target="_top" rel="nofollow">http://old.nabble.com/Tomcat-Https-loadbalancing---tp26509573p26509573.html</a><br>> Sent from the Tomcat - User mailing list archive at Nabble.com.
<br>>
<br>>
<br>> ---------------------------------------------------------------------
<br>> To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510669&i=1" target="_top" rel="nofollow">users-unsubscribe@...</a>
<br>> For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510669&i=2" target="_top" rel="nofollow">users-help@...</a>
<br>>
<br>>
<br>>
<br>>
</div><br><p>From forum: <a href="http://old.nabble.com/Tomcat---User-f342.html" embed="fixTarget[342]" target="_top" >Tomcat - User</a></p>tag:old.nabble.com,2006:post-26510576Re: Tomcat Https loadbalancing??2009-11-25T02:36:41Z2009-11-25T02:36:41ZPeter Crowther2009/11/25 jkv <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510576&i=0" target="_top" rel="nofollow">j.kumaravel@...</a>>:
<div class='shrinkable-quote'><br>> I got one small doubt in the last point that you said.
<br>>
<br>> In this environment, you only want your "public" certificate on httpd.
<br>> Tomcat will not be doing anything that uses it, so don't put a copy
<br>> on those machines.
<br>>
<br>> this means that I will not enable SSL in my tomcat.. I will comment
<br>> <!-- <Connector port="443" protocol="HTTP/1.1" SSLEnabled="true"
<br>> ....> -->
<br>>
<br>> tag totally from server.xml file in tomcat and have just one connetor
<br>> element i.e.,
<br>>
<br>> <Connector port="8009" protocol="AJP/1.3" redirectPort="443" />
</div><br>Certainly you only need the AJP connector, as Tomcat will never be
<br>handling http or https requests.
<br><br>> Thanks for the reply, that really helped a lot and we can also conclude we
<br>> cannot have a secure horizontal loadbalancing with Apache and Tomcat!
<br><br>Depends what you mean by "secure", as the level of security is
<br>relative, not absolute. There are more moving parts to secure, but
<br>it's possible to secure all of them to a reasonable standard.
<br><br>No system is *ever* 100% secure from attack, even if it's 100 metres
<br>underground, powered by its own generator, no network,
<br>Faraday-shielded, has a division of armed guards protecting its bunker
<br>and has self-destruct systems built in. It just depends how much the
<br>attacker wants your data, and therefore what resource (s)he is willing
<br>to commit to acquiring them.
<br><br>- Peter
<br><br>---------------------------------------------------------------------
<br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510576&i=1" target="_top" rel="nofollow">users-unsubscribe@...</a>
<br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510576&i=2" target="_top" rel="nofollow">users-help@...</a>
<br><br><p>From forum: <a href="http://old.nabble.com/Tomcat---User-f342.html" embed="fixTarget[342]" target="_top" >Tomcat - User</a></p>tag:old.nabble.com,2006:post-26510534Re: Tomcat Https loadbalancing??2009-11-25T02:32:47Z2009-11-25T02:32:47ZPid SterOn 25/11/2009 10:28, jkv wrote:
<div class='shrinkable-quote'><br>>
<br>> Thanks David,
<br>>
<br>> I would imagine that with mod_proxy you could load balance https requests
<br>> so that the https request goes to httpd then its load balanced between
<br>> https requests to
<br>> multiple tomcats. What you'll loose over the ajp protocol i'm sure
<br>> someone will let us know
<br>>
<br>> That sounds good but when https request hits Apache the certificate will be
<br>> issued by the server to the client, now when this is again sent as https
<br>> request to tomcat, which will again try issuing a certificate (I guess as
<br>> this is a protocol standard), I dont know whether will this affect the
<br>> client -> getting two certificates for a single https request??
<br>>
<br>> Has any body done this before???
<br>>
<br>>
<br>>
<br>> David Cassidy wrote:
<br>>>
<br>>> Hey
<br>>>
<br>>> Yes if you want httpd to load balance https requests you do need it to
<br>>> handle the https connection - and hence it needs the keys, certs etc
<br>>>
<br>>> Sadly the ajp protocol is in fact insecure
<br>>> if you have the httpd and tomcat on separate boxes you do have a
<br>>> security issue
<br>>> as the connection is transporting data in the clear.
<br>>>
<br>>> I would imagine that with mod_proxy you could load balance https requests
<br>>> so that the https request goes to httpd then its load balanced between
<br>>> https requests to
<br>>> multiple tomcats. What you'll loose over the ajp protocol i'm sure
<br>>> someone will let us know
</div><br>Note: you'll probably need more cert licenses, if they're commercial
<br>ones, if you're deploying the cert on multiple Tomcats rather than on
<br>one HTTPD.
<br><br><br>p
<br><br><div class='shrinkable-quote'><br>>> On 25/11/09 09:18, jkv wrote:
<br>>>> Hello,
<br>>>>
<br>>>> We are using Tomcat 6.0 and running HTTPS (enabled SSL). The number of
<br>>>> requests has grown up and we have decided to do go for clustering and
<br>>>> loadbalancing. We have decided to go for Apache and mod_proxy/mod_jk
<br>>>> loadbalacing. My certificate resides in Tomcat.
<br>>>>
<br>>>> In order to loadbalance HTTPS request using Apache and mod_proxy/mod_jk,
<br>>>> should I configure Apache to handle HTTPS and tell it about my
<br>>>> certificate
<br>>>> details?
<br>>>>
<br>>>> While loadbalancing I understand that http/https request to Apache is
<br>>>> converted to ajp and tunneled to Tomcat, so is ajp protocol secure?
<br>>>> should I
<br>>>> enable SSL in tomcat to handle this request?
<br>>>>
<br>>>> Should I have two copies of my certificate files if Apache and Tomcat
<br>>>> reside
<br>>>> on two different physical machines(Horizontal Clustering)?
<br>>>>
<br>>>> I searched the forums and they are too advanced for my question. I am
<br>>>> really
<br>>>> new to clustering and load balancing and any help is deeply appreciated.
<br>>>> Thanks in advance.
<br>>>>
<br>>>> Regards
<br>>>> jkv
<br>>>>
<br>>>
<br>>>
<br>>
</div><br><br>---------------------------------------------------------------------
<br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510534&i=0" target="_top" rel="nofollow">users-unsubscribe@...</a>
<br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510534&i=1" target="_top" rel="nofollow">users-help@...</a>
<br><br><p>From forum: <a href="http://old.nabble.com/Tomcat---User-f342.html" embed="fixTarget[342]" target="_top" >Tomcat - User</a></p>tag:old.nabble.com,2006:post-26510512Re: Advise on configuring SSL2009-11-25T02:31:05Z2009-11-25T02:31:05ZPid SterOn 25/11/2009 08:43, CBy wrote:
<br>> Hi,
<br>>
<br>> In my current working environment, Tomcat 6.0.18 is behind Apache. I
<br>> don't know why they chose this setup, because Apache only acts as a
<br>> proxy, it doesn't host anything. I do have experience in setting up SSL
<br>> for stand-alone Tomcat, but have no experience with Apache whatsoever.
<br>> Since I do have administrative rights for Tomcat, but not for Apache, I
<br>> was thinking of letting Tomcat handle SSL. Is that sensible or is it
<br>> better to configure this with Apache in this case?
<br><br>Neither setup is very complicated, and both are well documented on their
<br>respective websites.
<br><br>N.B. If you are using APR in Tomcat, SSL setup is slightly different.
<br><br><br>Side note: If HTTPD isn't doing anything extra at all, there's not much
<br>point in having it. It's just slowing your response times down -
<br>there's plenty of regular discussion about this on the list, available
<br>in the archives.
<br><br><br>p
<br><br><br>> CBy
<br>>
<br>> ---------------------------------------------------------------------
<br>> To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510512&i=0" target="_top" rel="nofollow">users-unsubscribe@...</a>
<br>> For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510512&i=1" target="_top" rel="nofollow">users-help@...</a>
<br>>
<br><br><br>---------------------------------------------------------------------
<br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510512&i=2" target="_top" rel="nofollow">users-unsubscribe@...</a>
<br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510512&i=3" target="_top" rel="nofollow">users-help@...</a>
<br><br><p>From forum: <a href="http://old.nabble.com/Tomcat---User-f342.html" embed="fixTarget[342]" target="_top" >Tomcat - User</a></p>tag:old.nabble.com,2006:post-26510458Re: Tomcat Https loadbalancing??2009-11-25T02:28:09Z2009-11-25T02:28:09ZjkvThanks David,
<br><br>I would imagine that with mod_proxy you could load balance https requests
<br>so that the https request goes to httpd then its load balanced between
<br>https requests to
<br>multiple tomcats. What you'll loose over the ajp protocol i'm sure
<br>someone will let us know
<br><br>That sounds good but when https request hits Apache the certificate will be issued by the server to the client, now when this is again sent as https request to tomcat, which will again try issuing a certificate (I guess as this is a protocol standard), I dont know whether will this affect the client -> getting two certificates for a single https request??
<br><br>Has any body done this before???
<br><br><br><blockquote class="quote light-black dark-border-color"><div class="quote light-border-color">
<div class="quote-author" style="font-weight: bold;">David Cassidy wrote:</div>
<div class="quote-message shrinkable-quote">Hey
<br><br>Yes if you want httpd to load balance https requests you do need it to
<br>handle the https connection - and hence it needs the keys, certs etc
<br><br>Sadly the ajp protocol is in fact insecure
<br>if you have the httpd and tomcat on separate boxes you do have a
<br>security issue
<br>as the connection is transporting data in the clear.
<br><br>I would imagine that with mod_proxy you could load balance https requests
<br>so that the https request goes to httpd then its load balanced between
<br>https requests to
<br>multiple tomcats. What you'll loose over the ajp protocol i'm sure
<br>someone will let us know
<br><br>Hope this helps
<br><br>D
<br><br><br>On 25/11/09 09:18, jkv wrote:
<br>> Hello,
<br>>
<br>> We are using Tomcat 6.0 and running HTTPS (enabled SSL). The number of
<br>> requests has grown up and we have decided to do go for clustering and
<br>> loadbalancing. We have decided to go for Apache and mod_proxy/mod_jk
<br>> loadbalacing. My certificate resides in Tomcat.
<br>>
<br>> In order to loadbalance HTTPS request using Apache and mod_proxy/mod_jk,
<br>> should I configure Apache to handle HTTPS and tell it about my certificate
<br>> details?
<br>>
<br>> While loadbalancing I understand that http/https request to Apache is
<br>> converted to ajp and tunneled to Tomcat, so is ajp protocol secure? should I
<br>> enable SSL in tomcat to handle this request?
<br>>
<br>> Should I have two copies of my certificate files if Apache and Tomcat reside
<br>> on two different physical machines(Horizontal Clustering)?
<br>>
<br>> I searched the forums and they are too advanced for my question. I am really
<br>> new to clustering and load balancing and any help is deeply appreciated.
<br>> Thanks in advance.
<br>>
<br>> Regards
<br>> jkv
<br>>
</div>
</div></blockquote>
<p>From forum: <a href="http://old.nabble.com/Tomcat---User-f342.html" embed="fixTarget[342]" target="_top" >Tomcat - User</a></p>tag:old.nabble.com,2006:post-26510463Re: Tomcat Https loadbalancing??2009-11-25T02:27:49Z2009-11-25T02:27:49ZPid SterOn 25/11/2009 10:18, jkv wrote:
<div class='shrinkable-quote'><br>>
<br>> Thanks Peter,
<br>>
<br>> That really helps me a lot.
<br>>
<br>> I got one small doubt in the last point that you said.
<br>>
<br>> In this environment, you only want your "public" certificate on httpd.
<br>> Tomcat will not be doing anything that uses it, so don't put a copy
<br>> on those machines.
<br>>
<br>> this means that I will not enable SSL in my tomcat.. I will comment
<br>> <!--<Connector port="443" protocol="HTTP/1.1" SSLEnabled="true"
<br>> ....> -->
<br>>
<br>> tag totally from server.xml file in tomcat and have just one connetor
<br>> element i.e.,
<br>>
<br>> <Connector port="8009" protocol="AJP/1.3" redirectPort="443" />
<br>>
<br>> I think I will have to remove the redirectPort="443" attribute also?? as its
<br>> been handled for me by Apache.
</div><br>The redirectPort setting should stay, but HTTPD will still handle the
<br>connection. (If you remove the setting it'll probably just default to
<br>a 443 anyway.)
<br><br>It is used by Tomcat when a web.xml contains a <transport-guarantee> is
<br>set to CONFIDENTIAL, to redirect & upgrade the connection.
<br><br><br>p
<br><br><div class='shrinkable-quote'><br>> Thanks for the reply, that really helped a lot and we can also conclude we
<br>> cannot have a secure horizontal loadbalancing with Apache and Tomcat!
<br>>
<br>> Regards
<br>> JKV
<br>>
<br>>
<br>> Peter Crowther wrote:
<br>>>
<br>>> 2009/11/25 jkv<<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510463&i=0" target="_top" rel="nofollow">j.kumaravel@...</a>>:
<br>>>> We are using Tomcat 6.0 and running HTTPS (enabled SSL). The number of
<br>>>> requests has grown up and we have decided to do go for clustering and
<br>>>> loadbalancing. We have decided to go for Apache and mod_proxy/mod_jk
<br>>>> loadbalacing. My certificate resides in Tomcat.
<br>>>>
<br>>>> In order to loadbalance HTTPS request using Apache and mod_proxy/mod_jk,
<br>>>> should I configure Apache to handle HTTPS and tell it about my
<br>>>> certificate
<br>>>> details?
<br>>>
<br>>> Yes. Apache has to terminate the SSL connection when you're load
<br>>> balancing.
<br>>>
<br>>>> While loadbalancing I understand that http/https request to Apache is
<br>>>> converted to ajp and tunneled to Tomcat, so is ajp protocol secure?
<br>>>> should I
<br>>>> enable SSL in tomcat to handle this request?
<br>>>
<br>>> The AJP protocol is not secure. It is only used between httpd and
<br>>> Tomcat. You should perform some suitable threat modelling of your
<br>>> system. If you think the threat from an attacker being able to sniff
<br>>> packets on the path between httpd and Tomcat is sufficiently low,
<br>>> leave it unencrypted. If you think the threat is too high, encrypt it
<br>>> using some kind of secure tunnel between httpd and Tomcat, such as a
<br>>> VPN connection.
<br>>>
<br>>> My guess is that if someone's able to sniff packets on the link
<br>>> between httpd and Tomcat, you already have a big security issue.
<br>>>
<br>>>> Should I have two copies of my certificate files if Apache and Tomcat
<br>>>> reside
<br>>>> on two different physical machines(Horizontal Clustering)?
<br>>>
<br>>> In this environment, you only want your "public" certificate on httpd.
<br>>> Tomcat will not be doing anything that uses it, so don't put a copy
<br>>> on those machines.
<br>>>
<br>>> Hope this helps,
<br>>>
<br>>> - Peter
<br>>>
<br>>> ---------------------------------------------------------------------
<br>>> To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510463&i=1" target="_top" rel="nofollow">users-unsubscribe@...</a>
<br>>> For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510463&i=2" target="_top" rel="nofollow">users-help@...</a>
<br>>>
<br>>>
<br>>>
<br>>
</div><br><br>---------------------------------------------------------------------
<br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510463&i=3" target="_top" rel="nofollow">users-unsubscribe@...</a>
<br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510463&i=4" target="_top" rel="nofollow">users-help@...</a>
<br><br><p>From forum: <a href="http://old.nabble.com/Tomcat---User-f342.html" embed="fixTarget[342]" target="_top" >Tomcat - User</a></p>tag:old.nabble.com,2006:post-26510331Re: Tomcat Https loadbalancing??2009-11-25T02:18:11Z2009-11-25T02:18:11ZjkvThanks Peter,
<br><br>That really helps me a lot.
<br><br>I got one small doubt in the last point that you said.
<br><br>In this environment, you only want your "public" certificate on httpd.
<br>Tomcat will not be doing anything that uses it, so don't put a copy
<br>on those machines.
<br><br>this means that I will not enable SSL in my tomcat.. I will comment
<br><!-- <Connector port="443" protocol="HTTP/1.1" SSLEnabled="true"
<br> ....> -->
<br><br>tag totally from server.xml file in tomcat and have just one connetor element i.e.,
<br><br><Connector port="8009" protocol="AJP/1.3" redirectPort="443" />
<br><br>I think I will have to remove the redirectPort="443" attribute also?? as its been handled for me by Apache.
<br><br>Thanks for the reply, that really helped a lot and we can also conclude we cannot have a secure horizontal loadbalancing with Apache and Tomcat!
<br><br>Regards
<br>JKV
<br><br><blockquote class="quote light-black dark-border-color"><div class="quote light-border-color">
<div class="quote-author" style="font-weight: bold;">Peter Crowther wrote:</div>
<div class="quote-message shrinkable-quote">2009/11/25 jkv <j.kumaravel@gmail.com>:
<br>> We are using Tomcat 6.0 and running HTTPS (enabled SSL). The number of
<br>> requests has grown up and we have decided to do go for clustering and
<br>> loadbalancing. We have decided to go for Apache and mod_proxy/mod_jk
<br>> loadbalacing. My certificate resides in Tomcat.
<br>>
<br>> In order to loadbalance HTTPS request using Apache and mod_proxy/mod_jk,
<br>> should I configure Apache to handle HTTPS and tell it about my certificate
<br>> details?
<br><br>Yes. Apache has to terminate the SSL connection when you're load balancing.
<br><br>> While loadbalancing I understand that http/https request to Apache is
<br>> converted to ajp and tunneled to Tomcat, so is ajp protocol secure? should I
<br>> enable SSL in tomcat to handle this request?
<br><br>The AJP protocol is not secure. It is only used between httpd and
<br>Tomcat. You should perform some suitable threat modelling of your
<br>system. If you think the threat from an attacker being able to sniff
<br>packets on the path between httpd and Tomcat is sufficiently low,
<br>leave it unencrypted. If you think the threat is too high, encrypt it
<br>using some kind of secure tunnel between httpd and Tomcat, such as a
<br>VPN connection.
<br><br>My guess is that if someone's able to sniff packets on the link
<br>between httpd and Tomcat, you already have a big security issue.
<br><br>> Should I have two copies of my certificate files if Apache and Tomcat reside
<br>> on two different physical machines(Horizontal Clustering)?
<br><br>In this environment, you only want your "public" certificate on httpd.
<br> Tomcat will not be doing anything that uses it, so don't put a copy
<br>on those machines.
<br><br>Hope this helps,
<br><br>- Peter
<br><br>---------------------------------------------------------------------
<br>To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
<br>For additional commands, e-mail: users-help@tomcat.apache.org
<br></div>
</div></blockquote>
<p>From forum: <a href="http://old.nabble.com/Tomcat---User-f342.html" embed="fixTarget[342]" target="_top" >Tomcat - User</a></p>tag:old.nabble.com,2006:post-26510246Re: ArrayIndexOutOfBoundsException2009-11-25T02:10:18Z2009-11-25T02:10:18ZPid SterOn 25/11/2009 08:17, <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510246&i=0" target="_top" rel="nofollow">geoffrey@...</a> wrote:
<br>> I changed the size to 4K, 50K and 1 byte without any luck.
<br><br>What about adding a byte counter to catch when the exception occurs?
<br><br><br>p
<br><br><div class='shrinkable-quote'><br>> Best Regards
<br>>
<br>> Geoffrey
<br>>
<br>> Phone Norway: +47 45 86 53 83
<br>> Fileflow Technologies AS
<br>> Ole Deviks vei 35, 0668 Oslo, Norway
<br>>
<br>> -------------------------------------
<br>>
<br>>
<br>>
<br>> On 25 Nov 2009, at 00:28, Pid wrote:
<br>>
<br>>> On 24/11/2009 20:03, Konstantin Kolinko wrote:
<br>>>> 2009/11/24<<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510246&i=1" target="_top" rel="nofollow">geoffrey@...</a>>:
<br>>>>> There is a different amount of data sent each time before it crashes. I also tried byte by byte and gets the same error but it seems that it is less often.
<br>>>>>
<br>>>>
<br>>>> So it is random... I wonder what can trigger it.
<br>>>>
<br>>>> What connectors are you using? Is it HTTP, or AJP? What is your
<br>>>> configuration as a whole?
<br>>>>
<br>>>> There was the following bugreport recently:
<br>>>> <a href="https://issues.apache.org/bugzilla/show_bug.cgi?id=48105" target="_top" rel="nofollow">https://issues.apache.org/bugzilla/show_bug.cgi?id=48105</a><br>>>>
<br>>>> The reporter of issue 48105 wrote that he saw exceptions in 6.0.18,
<br>>>> .20 as well, but no stack traces were provided, so it is unconfirmed.
<br>>>
<br>>> I don't think we got to the bottom of why that was happening. I was hoping the problem would be in the same method, but it's not in exactly the same location for both.
<br>>>
<br>>> The append(byte[], int, int) method is implicated in both, and in both cases an 8k byte buffer was in use in the app code.
<br>>>
<br>>> @Geoffrey - can you try using a smaller (say 4k) byte buffer instead, and adding some code to count how many bytes have been sent when the error occurs?
<br>>>
<br>>>
<br>>> p
<br>>>
<br>>>
<br>>>> ---------------------------------------------------------------------
<br>>>> To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510246&i=2" target="_top" rel="nofollow">users-unsubscribe@...</a>
<br>>>> For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510246&i=3" target="_top" rel="nofollow">users-help@...</a>
<br>>>>
<br>>>
<br>>>
<br>>> ---------------------------------------------------------------------
<br>>> To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510246&i=4" target="_top" rel="nofollow">users-unsubscribe@...</a>
<br>>> For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510246&i=5" target="_top" rel="nofollow">users-help@...</a>
<br>>>
<br>>>
<br>>
</div><br><br>---------------------------------------------------------------------
<br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510246&i=6" target="_top" rel="nofollow">users-unsubscribe@...</a>
<br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510246&i=7" target="_top" rel="nofollow">users-help@...</a>
<br><br><p>From forum: <a href="http://old.nabble.com/Tomcat---User-f342.html" embed="fixTarget[342]" target="_top" >Tomcat - User</a></p>tag:old.nabble.com,2006:post-26510079Re: Tomcat Https loadbalancing??2009-11-25T01:57:08Z2009-11-25T01:57:08ZPeter Crowther2009/11/25 jkv <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510079&i=0" target="_top" rel="nofollow">j.kumaravel@...</a>>:
<br>> We are using Tomcat 6.0 and running HTTPS (enabled SSL). The number of
<br>> requests has grown up and we have decided to do go for clustering and
<br>> loadbalancing. We have decided to go for Apache and mod_proxy/mod_jk
<br>> loadbalacing. My certificate resides in Tomcat.
<br>>
<br>> In order to loadbalance HTTPS request using Apache and mod_proxy/mod_jk,
<br>> should I configure Apache to handle HTTPS and tell it about my certificate
<br>> details?
<br><br>Yes. Apache has to terminate the SSL connection when you're load balancing.
<br><br>> While loadbalancing I understand that http/https request to Apache is
<br>> converted to ajp and tunneled to Tomcat, so is ajp protocol secure? should I
<br>> enable SSL in tomcat to handle this request?
<br><br>The AJP protocol is not secure. It is only used between httpd and
<br>Tomcat. You should perform some suitable threat modelling of your
<br>system. If you think the threat from an attacker being able to sniff
<br>packets on the path between httpd and Tomcat is sufficiently low,
<br>leave it unencrypted. If you think the threat is too high, encrypt it
<br>using some kind of secure tunnel between httpd and Tomcat, such as a
<br>VPN connection.
<br><br>My guess is that if someone's able to sniff packets on the link
<br>between httpd and Tomcat, you already have a big security issue.
<br><br>> Should I have two copies of my certificate files if Apache and Tomcat reside
<br>> on two different physical machines(Horizontal Clustering)?
<br><br>In this environment, you only want your "public" certificate on httpd.
<br> Tomcat will not be doing anything that uses it, so don't put a copy
<br>on those machines.
<br><br>Hope this helps,
<br><br>- Peter
<br><br>---------------------------------------------------------------------
<br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510079&i=1" target="_top" rel="nofollow">users-unsubscribe@...</a>
<br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26510079&i=2" target="_top" rel="nofollow">users-help@...</a>
<br><br><p>From forum: <a href="http://old.nabble.com/Tomcat---User-f342.html" embed="fixTarget[342]" target="_top" >Tomcat - User</a></p>tag:old.nabble.com,2006:post-26510054Re: Tomcat Https loadbalancing??2009-11-25T01:54:47Z2009-11-25T01:54:47ZDavid CassidyHey
<br><br>Yes if you want httpd to load balance https requests you do need it to
<br>handle the https connection - and hence it needs the keys, certs etc
<br><br>Sadly the ajp protocol is in fact insecure
<br>if you have the httpd and tomcat on separate boxes you do have a
<br>security issue
<br>as the connection is transporting data in the clear.
<br><br>I would imagine that with mod_proxy you could load balance https requests
<br>so that the https request goes to httpd then its load balanced between
<br>https requests to
<br>multiple tomcats. What you'll loose over the ajp protocol i'm sure
<br>someone will let us know
<br><br>Hope this helps
<br><br>D
<br><br><br>On 25/11/09 09:18, jkv wrote:
<div class='shrinkable-quote'><br>> Hello,
<br>>
<br>> We are using Tomcat 6.0 and running HTTPS (enabled SSL). The number of
<br>> requests has grown up and we have decided to do go for clustering and
<br>> loadbalancing. We have decided to go for Apache and mod_proxy/mod_jk
<br>> loadbalacing. My certificate resides in Tomcat.
<br>>
<br>> In order to loadbalance HTTPS request using Apache and mod_proxy/mod_jk,
<br>> should I configure Apache to handle HTTPS and tell it about my certificate
<br>> details?
<br>>
<br>> While loadbalancing I understand that http/https request to Apache is
<br>> converted to ajp and tunneled to Tomcat, so is ajp protocol secure? should I
<br>> enable SSL in tomcat to handle this request?
<br>>
<br>> Should I have two copies of my certificate files if Apache and Tomcat reside
<br>> on two different physical machines(Horizontal Clustering)?
<br>>
<br>> I searched the forums and they are too advanced for my question. I am really
<br>> new to clustering and load balancing and any help is deeply appreciated.
<br>> Thanks in advance.
<br>>
<br>> Regards
<br>> jkv
<br>>
<br></div><p>From forum: <a href="http://old.nabble.com/Tomcat---User-f342.html" embed="fixTarget[342]" target="_top" >Tomcat - User</a></p>tag:old.nabble.com,2006:post-26509860Re: Advise on configuring SSL2009-11-25T01:40:52Z2009-11-25T01:40:52ZCyrille Le Clerc-3 Hello CBy,
<br><br> My preference to handle SSL at the Apache Httpd level is to insert
<br>a header "x-forwarded-proto=http|https" in Apache with mod_header, to
<br>transmit the request in clear http to tomcat and then to intercept
<br>this "x-forwarded-proto" header in Tomcat with the RemoteIpValve.
<br> This valve will be integrated in Tomcat's distribution in version
<br>6.0.21 and is currently available on a Google Code Project (1).
<br><br> Another solution is to introduce a second HTTP connector in Tomcat
<br>with the attributes secure=true and scheme=https. Even if this
<br>connector uses HTTP instead of HTTPS, the connector attributes will
<br>set request.isSecure() to true and request.getScheme() to https.
<br><br> I have written a very detailed document "Tomcat, SSL, secure
<br>communications and X-Forwarded-Proto" (2) that explains solutions to
<br>handle HTTPS at the Tomcat, Apache Httpd and Load Balancer layers. The
<br>document is written in french but the google translation is quite good
<br>(3).
<br><br> Hope this helps,
<br><br> Cyrille
<br><br>--
<br>Cyrille Le Clerc
<br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26509860&i=0" target="_top" rel="nofollow">cleclerc@...</a>
<br><a href="http://blog.xebia.fr" target="_top" rel="nofollow">http://blog.xebia.fr</a><br><br>(1) <a href="http://code.google.com/p/xebia-france/wiki/RemoteIpValve" target="_top" rel="nofollow">http://code.google.com/p/xebia-france/wiki/RemoteIpValve</a><br>(2) <a href="http://blog.xebia.fr/2009/11/13/tomcat-ssl-communications-securisees-et-x-forwarded-proto/" target="_top" rel="nofollow">http://blog.xebia.fr/2009/11/13/tomcat-ssl-communications-securisees-et-x-forwarded-proto/</a><br>(3) <a href="http://translate.google.com/translate?js=y&prev=_t&hl=en&ie=UTF-8&u=http%3A%2F%2Fblog.xebia.fr%2F2009%2F11%2F13%2Ftomcat-ssl-communications-securisees-et-x-forwarded-proto%2F&sl=fr&tl=en" target="_top" rel="nofollow">http://translate.google.com/translate?js=y&prev=_t&hl=en&ie=UTF-8&u=http%3A%2F%2Fblog.xebia.fr%2F2009%2F11%2F13%2Ftomcat-ssl-communications-securisees-et-x-forwarded-proto%2F&sl=fr&tl=en</a><br><br>On Wed, Nov 25, 2009 at 9:43 AM, CBy <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26509860&i=1" target="_top" rel="nofollow">tomcat@...</a>> wrote:
<div class='shrinkable-quote'><br>> Hi,
<br>>
<br>> In my current working environment, Tomcat 6.0.18 is behind Apache. I don't
<br>> know why they chose this setup, because Apache only acts as a proxy, it
<br>> doesn't host anything. I do have experience in setting up SSL for
<br>> stand-alone Tomcat, but have no experience with Apache whatsoever. Since I
<br>> do have administrative rights for Tomcat, but not for Apache, I was thinking
<br>> of letting Tomcat handle SSL. Is that sensible or is it better to configure
<br>> this with Apache in this case?
<br>>
<br>> CBy
<br>>
<br>> ---------------------------------------------------------------------
<br>> To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26509860&i=2" target="_top" rel="nofollow">users-unsubscribe@...</a>
<br>> For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26509860&i=3" target="_top" rel="nofollow">users-help@...</a>
<br>>
<br>>
</div><br>---------------------------------------------------------------------
<br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26509860&i=4" target="_top" rel="nofollow">users-unsubscribe@...</a>
<br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26509860&i=5" target="_top" rel="nofollow">users-help@...</a>
<br><br><p>From forum: <a href="http://old.nabble.com/Tomcat---User-f342.html" embed="fixTarget[342]" target="_top" >Tomcat - User</a></p>tag:old.nabble.com,2006:post-26509767Re: Redirecting a port to a webapp2009-11-25T01:32:49Z2009-11-25T01:32:49ZPid SterOn 25/11/2009 07:24, Looijmans, Mike wrote:
<div class='shrinkable-quote'><br>>> I think so too. My personal doubt is still about how Tomcat
<br>>> would try map a request that comes in as "/xxxx", "xxxx"
<br>>> being variable and being NOT "myapp". Since it does not find
<br>>> a match with "/myapp", and since obviously there cannot be an
<br>>> infinity of "/webapps/xxxx" apps pre-configured, would it
<br>>> then pass it to the "default app" (/ROOT) ?
<br>>
<br>> I tried this route, and the results are quite remarkable.
<br>>
<br>> When I deploy the webapp as ROOT.war, it gets to serve all requests that
<br>> don't match anything else. So if the webapps dir looks like this:
<br>>
<br>> /ROOT.war
<br>> /SomeApp/*
<br>> /OtherApp.war
<br>>
<br>> When I send a request for /SomeApp/something, it goes to the webapp in
<br>> that folder, likewise a request for /OtherApp/something ends up in the
<br>> OtherApp servlet.
<br>> A request for /foo or /bar, which does not match anything in the folder,
<br>> gets sent to the ROOT.
<br>>
<br>> With this mechanism, I could program the ROOT as (in pseudocode):
<br>>
<br>> if port == 666:
<br>> handle(pathinfo)
<br>> else if pathinfo.startwith('/MyApp'):
<br>> handle(pathinfo.split('/',2)[1])
</div><br>Don't forget, if /MyApp actually exists the ROOT app won't see such a
<br>request.
<br><br><br>p
<br><br><br><br>> else:
<br>> error(404)
<br> >
<div class='shrinkable-quote'><br>> This message and attachment(s) are intended solely for use by the addressee and may contain information that is privileged, confidential or otherwise exempt from disclosure under applicable law.
<br>>
<br>> If you are not the intended recipient or agent thereof responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited.
<br>>
<br>> If you have received this communication in error, please notify the sender immediately by telephone and with a 'reply' message.
<br>>
<br>> Thank you for your co-operation.
<br>>
<br>>
<br>>
<br>> ---------------------------------------------------------------------
<br>> To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26509767&i=0" target="_top" rel="nofollow">users-unsubscribe@...</a>
<br>> For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26509767&i=1" target="_top" rel="nofollow">users-help@...</a>
<br>>
</div><br><br>---------------------------------------------------------------------
<br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26509767&i=2" target="_top" rel="nofollow">users-unsubscribe@...</a>
<br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26509767&i=3" target="_top" rel="nofollow">users-help@...</a>
<br><br><p>From forum: <a href="http://old.nabble.com/Tomcat---User-f342.html" embed="fixTarget[342]" target="_top" >Tomcat - User</a></p>tag:old.nabble.com,2006:post-26509660RE: AD Authentication2009-11-25T01:24:14Z2009-11-25T01:24:14ZSamuel PennOn Tue, 24 Nov 2009 13:04:34 -0600, "Caldarale, Charles R"
<br><<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26509660&i=0" target="_top" rel="nofollow">Chuck.Caldarale@...</a>> wrote:
<div class='shrinkable-quote'><br>>> From: Samuel Penn [mailto:<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26509660&i=1" target="_top" rel="nofollow">sam@...</a>]
<br>>> Subject: AD Authentication
<br>>
<br>>> <Realm className="org.apache.catalina.realm.JNDIRealm" debug="99"
<br>>> connectionURL="ldap://172.17.10.100:389"
<br>>> connectionName="cn=SvcUser,cn=users,dc=myorg,dc=local"
<br>>> connectionPassword="********"
<br>>> userBase="ou=staff,dc=myorg,dc=local"
<br>>> userPattern="sAMAccountName={0}"
<br>>> roleBase="cn=users,dc=myorg,dc=local"
<br>>> roleName="cn"
<br>>> roleSearch="(member={0})"
<br>>> roleSubtree="false"
<br>>> userSubtree="true"
<br>>> authentication="simple"
<br>>> referrals="follow"
<br>>> />
<br>>
<br>> The doc says that userPattern can be used *instead of* userSearch,
<br>> userSubtree, and userBase; no mention is made of what happens when you
<br>> specify all of them, but it wouldn't surprise me that things get
</div>confused.
<br><br>I think I've amalgamated several examples from the docs as time has gone
<br>on. With just userPattern, I get no errors, a failed login and no useful
<br>messages at all to say why it's failing.
<br><br>Which may be better, but I can't tell at this stage.
<br><br>> Also, it seems odd that the roleName attribute is part of the roleBase -
<br>> that doesn't seem to make any sense.
<br><br>The roles are of the format:
<br><br>cn=ECM Team, cn=Users,DC=MyOrg,DC=local
<br><br>So my understanding is that it's looking for a cn within another cn. I
<br>can't
<br>comment on whether this is valid, but it's what is setup in our directory.
<br><br>>
<br>>> I note that I get a warning message about the debug="99" property,
<br>>
<br>> The debug attribute hasn't been used in quite some time, but the doc lags
<br>> behind.
<br><br>I take it I need to configure debug through log4j now then?
<br><br>---------------------------------------------------------------------
<br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26509660&i=2" target="_top" rel="nofollow">users-unsubscribe@...</a>
<br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26509660&i=3" target="_top" rel="nofollow">users-help@...</a>
<br><br><p>From forum: <a href="http://old.nabble.com/Tomcat---User-f342.html" embed="fixTarget[342]" target="_top" >Tomcat - User</a></p>tag:old.nabble.com,2006:post-26509573Tomcat Https loadbalancing??2009-11-25T01:18:07Z2009-11-25T01:18:07ZjkvHello,
<br><br>We are using Tomcat 6.0 and running HTTPS (enabled SSL). The number of requests has grown up and we have decided to do go for clustering and loadbalancing. We have decided to go for Apache and mod_proxy/mod_jk loadbalacing. My certificate resides in Tomcat.
<br><br>In order to loadbalance HTTPS request using Apache and mod_proxy/mod_jk, should I configure Apache to handle HTTPS and tell it about my certificate details?
<br><br>While loadbalancing I understand that http/https request to Apache is converted to ajp and tunneled to Tomcat, so is ajp protocol secure? should I enable SSL in tomcat to handle this request?
<br><br>Should I have two copies of my certificate files if Apache and Tomcat reside on two different physical machines(Horizontal Clustering)?
<br><br>I searched the forums and they are too advanced for my question. I am really new to clustering and load balancing and any help is deeply appreciated. Thanks in advance.
<br><br>Regards
<br>jkv<p>From forum: <a href="http://old.nabble.com/Tomcat---User-f342.html" embed="fixTarget[342]" target="_top" >Tomcat - User</a></p>tag:old.nabble.com,2006:post-26509465Re: AD Authentication2009-11-25T01:09:16Z2009-11-25T01:09:16ZSamuel PennOn Tue, 24 Nov 2009 19:50:59 +0100, "André Warnier" <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26509465&i=0" target="_top" rel="nofollow">aw@...</a>> wrote:
<br>> Samuel Penn wrote:
<br>>> Hi all,
<br>>>
<br>>> I'm trying to get Tomcat to authenticate against Active Directory, but
<br>>> failing
<br>> ...
<br>> Not directly related to what your current issue is, but just as
<br>> information : <a href="http://www.ioplex.com/jespa.html" target="_top" rel="nofollow">http://www.ioplex.com/jespa.html</a><br><br>I've seen that, though it has a license cost associated with it which
<br>rules it out as an immediate option.
<br><br>> I have found that in the practice, there is a certain amount of
<br>> confusion at the interface between the Java/Open Source world, and the
<br>> corporate Windows-centric world.
<br>> When a Unix/Linux/Open Source developer type asks the corporate
<br>> MS-Windows sysadmin type what the "network user authentication method"
<br>> is, very often the answer will be "Active Directory".
<br>>
<br>> In fact, it isn't.
<br><br>Yeah, I'm vaguely aware of that if pushed, though now to a slightly
<br>higher level of detail thanks to your explanation.
<br><br>> There used to be an open source similar solution available, made by the
<br>> same people who make jCIFS (at samba.org). It was called the "jCIFS
<br>> HTTP NTLM authentication filter" or similar. But that software is no
<br>> longer developed or maintained, and does not work with recent revisions
<br>> of the Windows NTLM protocol (v2, as standard since Vista and beyond).
<br>> Jespa works with all NTLM versions.
<br><br>I've looked at that (that's where I saw the link to Jespa), and I've
<br>actually implemented it and got it working. The issue was it doesn't seem
<br>to allow checking of groups. I may go down the jCIFS route, and limit
<br>access rights on a per-user (rather than the preferred per-group) basis.
<br>My explorations of LDAP was to see if this gave me group level checking
<br>without having to worry about licensing.
<br><br><br>Thanks,
<br><br>Sam.
<br><br><br><br><br>---------------------------------------------------------------------
<br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26509465&i=1" target="_top" rel="nofollow">users-unsubscribe@...</a>
<br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26509465&i=2" target="_top" rel="nofollow">users-help@...</a>
<br><br><p>From forum: <a href="http://old.nabble.com/Tomcat---User-f342.html" embed="fixTarget[342]" target="_top" >Tomcat - User</a></p>tag:old.nabble.com,2006:post-26509284Re: ArrayIndexOutOfBoundsException2009-11-25T00:53:42Z2009-11-25T00:53:42ZRonald KlopYou can compile Tomcat yourself and insert some debug statements at the location of the exception.
<br><br>Ronald.
<br><br><br>Op dinsdag, 24 november 2009 18:17 schreef <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26509284&i=0" target="_top" rel="nofollow">geoffrey@...</a>:
<div class='shrinkable-quote'><br>>
<br>>
<br>>
<br>> The bytesRead returns the size of the buffer (8KB) every time. I also debug and I can't find anything wrong. Input and OutputStream are not null, bytesRead is the correct size and the buffer is also filled.
<br>>
<br>> Any other ideas?
<br>>
<br>>
<br>> Best Regards
<br>>
<br>> Geoffrey
<br>>
<br>>
<br>>
<br>> On 24 Nov 2009, at 18:13, Ronald Klop wrote:
<br>>
<br>> > Try insert some debug statements just before the out.write.
<br>> > System.out.println("bytesRead: " + bytesRead) would be interesting.
<br>> >
<br>> > In fact this is kind of my-first-debugging and you don't even mention you did try it.
<br>> >
<br>> > Ronald.
<br>> >
<br>> >
<br>> > Op dinsdag, 24 november 2009 17:57 schreef <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26509284&i=1" target="_top" rel="nofollow">geoffrey@...</a>:
<br>> >> Hi everyone.
<br>> >> I'm stuck with a problem I don't understand. We have a tomcat server and after redeploying our war file, we get this error:
<br>> >> java.lang.ArrayIndexOutOfBoundsException
<br>> >> at org.apache.tomcat.util.buf.ByteChunk.append(ByteChunk.java:346)
<br>> >> at org.apache.coyote.http11.InternalOutputBuffer$OutputStreamOutputBuffer.doWrite(InternalOutputBuffer.java:764)
<br>> >> at org.apache.coyote.http11.filters.IdentityOutputFilter.doWrite(IdentityOutputFilter.java:118)
<br>> >> at org.apache.coyote.http11.InternalOutputBuffer.doWrite(InternalOutputBuffer.java:573)
<br>> >> at org.apache.coyote.Response.doWrite(Response.java:560)
<br>> >> at org.apache.catalina.connector.OutputBuffer.realWriteBytes(OutputBuffer.java:353)
<br>> >> at org.apache.tomcat.util.buf.ByteChunk.append(ByteChunk.java:325)
<br>> >> at org.apache.catalina.connector.OutputBuffer.writeBytes(OutputBuffer.java:381)
<br>> >> at org.apache.catalina.connector.OutputBuffer.write(OutputBuffer.java:370)
<br>> >> at org.apache.catalina.connector.CoyoteOutputStream.write(CoyoteOutputStream.java:89)
<br>> >> at com.fileflow.downloader.Downloader.doGet(Downloader.java:123)
<br>> >> at javax.servlet.http.HttpServlet.service(HttpServlet.java:617)
<br>> >> at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
<br>> >> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
<br>> >> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
<br>> >> at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
<br>> >> at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
<br>> >> at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
<br>> >> at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
<br>> >> at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
<br>> >> at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:293)
<br>> >> at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:849)
<br>> >> at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
<br>> >> at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:454)
<br>> >> at java.lang.Thread.run(Thread.java:619)
<br>> >> Notice that there are no number on the first line and it is usually the case.
<br>> >> The code that is "responsible is:
<br>> >> private ServletOutputStream out;
<br>> >> private InputStream in;
<br>> >> ...
<br>> >> in = new FileInputStream(tmp);
<br>> >> ...
<br>> >> out = response.getOutputStream();
<br>> >> byte[] buf = new byte[8 * 1024]; // 8K buffer
<br>> >> int bytesRead;
<br>> >> while((bytesRead = in.read(buf)) > 0) {
<br>> >> out.write(buf, 0, bytesRead);
<br>> >> }
<br>> >> The updated code didn't change anything in that Servlet so I really have no clue what happened. It happens on tomcat 6.0.18 and 6.0.20. Java is 1.6.0_11.
<br>> >> Thanks for any help.
<br>> >> Best Regards
<br>> >> Geoffrey
<br>> >
<br>>
<br>>
<br>>
<br>>
<br>>
<br>>
<br>>
</div><br><p>From forum: <a href="http://old.nabble.com/Tomcat---User-f342.html" embed="fixTarget[342]" target="_top" >Tomcat - User</a></p>tag:old.nabble.com,2006:post-26509182Advise on configuring SSL2009-11-25T00:43:27Z2009-11-25T00:43:27ZCBy-2Hi,
<br><br>In my current working environment, Tomcat 6.0.18 is behind Apache. I
<br>don't know why they chose this setup, because Apache only acts as a
<br>proxy, it doesn't host anything. I do have experience in setting up SSL
<br>for stand-alone Tomcat, but have no experience with Apache whatsoever.
<br>Since I do have administrative rights for Tomcat, but not for Apache, I
<br>was thinking of letting Tomcat handle SSL. Is that sensible or is it
<br>better to configure this with Apache in this case?
<br><br>CBy
<br><br>---------------------------------------------------------------------
<br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26509182&i=0" target="_top" rel="nofollow">users-unsubscribe@...</a>
<br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26509182&i=1" target="_top" rel="nofollow">users-help@...</a>
<br><br><p>From forum: <a href="http://old.nabble.com/Tomcat---User-f342.html" embed="fixTarget[342]" target="_top" >Tomcat - User</a></p>tag:old.nabble.com,2006:post-26509058DO NOT REPLY [Bug 45255] support disable jsessionid from url against session fixation attacks2009-11-25T00:31:48Z2009-11-25T00:31:48ZBugzilla from bugzilla@apache.org<a href="https://issues.apache.org/bugzilla/show_bug.cgi?id=45255" target="_top" rel="nofollow">https://issues.apache.org/bugzilla/show_bug.cgi?id=45255</a><br><br>Maxim Valyanskiy <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26509058&i=0" target="_top" rel="nofollow">max.valjanski@...</a>> changed:
<br><br> What |Removed |Added
<br>----------------------------------------------------------------------------
<br> CC| |<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26509058&i=1" target="_top" rel="nofollow">max.valjanski@...</a>
<br><br>--
<br>Configure bugmail: <a href="https://issues.apache.org/bugzilla/userprefs.cgi?tab=email" target="_top" rel="nofollow">https://issues.apache.org/bugzilla/userprefs.cgi?tab=email</a><br>------- You are receiving this mail because: -------
<br>You are the assignee for the bug.
<br><br>---------------------------------------------------------------------
<br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26509058&i=2" target="_top" rel="nofollow">dev-unsubscribe@...</a>
<br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26509058&i=3" target="_top" rel="nofollow">dev-help@...</a>
<br><br><p>From forum: <a href="http://old.nabble.com/Tomcat---Dev-f341.html" embed="fixTarget[341]" target="_top" >Tomcat - Dev</a></p>tag:old.nabble.com,2006:post-26509016Re: ArrayIndexOutOfBoundsException2009-11-25T00:26:50Z2009-11-25T00:26:50ZGeoffrey Rekier-2<br>On 25 Nov 2009, at 04:14, Konstantin Kolinko wrote:
<br><div class='shrinkable-quote'><div class='shrinkable-quote'><br>> 2009/11/24 <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26509016&i=0" target="_top" rel="nofollow">geoffrey@...</a>>:
<br>>> HTTP connector. I'll attach the conf folder from tomcat.
<br>>>
<br>>>
<br>>>
<br>>>
<br>>>
<br>>> Best Regards
<br>>>
<br>>> Geoffrey
<br>>>
<br>>> Phone Norway: +47 45 86 53 83
<br>>> Fileflow Technologies AS
<br>>> Ole Deviks vei 35, 0668 Oslo, Norway
<br>>>
<br>>> -------------------------------------
<br>>>
<br>>>
<br>>>
<br>>> On 24 Nov 2009, at 21:03, Konstantin Kolinko wrote:
<br>>>
<br>>>> 2009/11/24 <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26509016&i=1" target="_top" rel="nofollow">geoffrey@...</a>>:
<br>>>>> There is a different amount of data sent each time before it crashes. I also tried byte by byte and gets the same error but it seems that it is less often.
<br>>>>>
<br>>>>
<br>>>> So it is random... I wonder what can trigger it.
<br>>>>
<br>>>> What connectors are you using? Is it HTTP, or AJP? What is your
<br>>>> configuration as a whole?
<br>>>>
<br>>>> There was the following bugreport recently:
<br>>>> <a href="https://issues.apache.org/bugzilla/show_bug.cgi?id=48105" target="_top" rel="nofollow">https://issues.apache.org/bugzilla/show_bug.cgi?id=48105</a><br>>>>
<br>>>> The reporter of issue 48105 wrote that he saw exceptions in 6.0.18,
<br>>>> .20 as well, but no stack traces were provided, so it is unconfirmed.
<br>>>>
<br>>>
<br>>
<br>> Thank you.
<br>>
<br>> Could it be that there are several threads that have access to the
<br>> same Response object? (That is illegal).
<br>> You can try setting the ...RECYCLE_FACADES property to "true", see the
<br>> full name of it and description in
<br>> <a href="http://tomcat.apache.org/tomcat-6.0-doc/config/systemprops.html" target="_top" rel="nofollow">http://tomcat.apache.org/tomcat-6.0-doc/config/systemprops.html</a><br>> You can add it to the end of the catalina.properties file.
<br>>
<br>> I do not see what else can cause randomness in writing out a response.
<br>> Different length of headers? I see that you have
<br>> maxHttpHeaderSize="50000"
</div></div> The maxHttpHeaderSize="50000" was added to try to solve the problem (I saw it somewhere when googling) but did nothing to help
<br><br>> Are you using Tomcat-Native (tcnative-1.dll, libtcnative-1.so)?
<br><br>I do not use native library (not that I'm aware of) and I can't find .so file when searching.
<br><br>> I see that you have an AprLifecycleListener in your server.xml. Does
<br>> it print a warning that tomcat-native is not present when Tomcat is
<br>> started?
<br><br>There are no errors on startup.
<br><div class='shrinkable-quote'><div class='shrinkable-quote'><br>> You can comment it out to disable Tomcat-Native and to
<br>> disable that warning message if you are not going to use it.
<br>> See
<br>> <a href="http://tomcat.apache.org/tomcat-6.0-doc/config/listeners.html" target="_top" rel="nofollow">http://tomcat.apache.org/tomcat-6.0-doc/config/listeners.html</a><br>>
<br>>
<br>> Best regards,
<br>> Konstantin Kolinko
<br>>
<br>> ---------------------------------------------------------------------
<br>> To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26509016&i=2" target="_top" rel="nofollow">users-unsubscribe@...</a>
<br>> For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26509016&i=3" target="_top" rel="nofollow">users-help@...</a>
<br>>
<br>>
</div></div><br /> <div class="small"><br/><img src="http://old.nabble.com/images/icon_attachment.gif" > <strong>smime.p7s</strong> (5K) <a href="http://old.nabble.com/attachment/26509016/0/smime.p7s" target="_top">Download Attachment</a></div><p>From forum: <a href="http://old.nabble.com/Tomcat---User-f342.html" embed="fixTarget[342]" target="_top" >Tomcat - User</a></p>tag:old.nabble.com,2006:post-26508930Re: ArrayIndexOutOfBoundsException2009-11-25T00:17:00Z2009-11-25T00:17:00ZGeoffrey Rekier-2I changed the size to 4K, 50K and 1 byte without any luck.
<br><br><br><br>Best Regards
<br><br>Geoffrey
<br><br>Phone Norway: +47 45 86 53 83
<br>Fileflow Technologies AS
<br>Ole Deviks vei 35, 0668 Oslo, Norway
<br><br>-------------------------------------
<br><br><br><br>On 25 Nov 2009, at 00:28, Pid wrote:
<br><div class='shrinkable-quote'><div class='shrinkable-quote'><br>> On 24/11/2009 20:03, Konstantin Kolinko wrote:
<br>>> 2009/11/24<<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26508930&i=0" target="_top" rel="nofollow">geoffrey@...</a>>:
<br>>>> There is a different amount of data sent each time before it crashes. I also tried byte by byte and gets the same error but it seems that it is less often.
<br>>>>
<br>>>
<br>>> So it is random... I wonder what can trigger it.
<br>>>
<br>>> What connectors are you using? Is it HTTP, or AJP? What is your
<br>>> configuration as a whole?
<br>>>
<br>>> There was the following bugreport recently:
<br>>> <a href="https://issues.apache.org/bugzilla/show_bug.cgi?id=48105" target="_top" rel="nofollow">https://issues.apache.org/bugzilla/show_bug.cgi?id=48105</a><br>>>
<br>>> The reporter of issue 48105 wrote that he saw exceptions in 6.0.18,
<br>>> .20 as well, but no stack traces were provided, so it is unconfirmed.
<br>>
<br>> I don't think we got to the bottom of why that was happening. I was hoping the problem would be in the same method, but it's not in exactly the same location for both.
<br>>
<br>> The append(byte[], int, int) method is implicated in both, and in both cases an 8k byte buffer was in use in the app code.
<br>>
<br>> @Geoffrey - can you try using a smaller (say 4k) byte buffer instead, and adding some code to count how many bytes have been sent when the error occurs?
<br>>
<br>>
<br>> p
<br>>
<br>>
<br>>> ---------------------------------------------------------------------
<br>>> To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26508930&i=1" target="_top" rel="nofollow">users-unsubscribe@...</a>
<br>>> For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26508930&i=2" target="_top" rel="nofollow">users-help@...</a>
<br>>>
<br>>
<br>>
<br>> ---------------------------------------------------------------------
<br>> To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26508930&i=3" target="_top" rel="nofollow">users-unsubscribe@...</a>
<br>> For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26508930&i=4" target="_top" rel="nofollow">users-help@...</a>
<br>>
<br>>
</div></div><br /> <div class="small"><br/><img src="http://old.nabble.com/images/icon_attachment.gif" > <strong>smime.p7s</strong> (5K) <a href="http://old.nabble.com/attachment/26508930/0/smime.p7s" target="_top">Download Attachment</a></div><p>From forum: <a href="http://old.nabble.com/Tomcat---User-f342.html" embed="fixTarget[342]" target="_top" >Tomcat - User</a></p>tag:old.nabble.com,2006:post-26508516RE: Redirecting a port to a webapp2009-11-24T23:24:11Z2009-11-24T23:24:11ZLooijmans, Mike-2> I think so too. My personal doubt is still about how Tomcat
<br>> would try map a request that comes in as "/xxxx", "xxxx"
<br>> being variable and being NOT "myapp". Since it does not find
<br>> a match with "/myapp", and since obviously there cannot be an
<br>> infinity of "/webapps/xxxx" apps pre-configured, would it
<br>> then pass it to the "default app" (/ROOT) ?
<br><br>I tried this route, and the results are quite remarkable.
<br><br>When I deploy the webapp as ROOT.war, it gets to serve all requests that
<br>don't match anything else. So if the webapps dir looks like this:
<br><br>/ROOT.war
<br>/SomeApp/*
<br>/OtherApp.war
<br><br>When I send a request for /SomeApp/something, it goes to the webapp in
<br>that folder, likewise a request for /OtherApp/something ends up in the
<br>OtherApp servlet.
<br>A request for /foo or /bar, which does not match anything in the folder,
<br>gets sent to the ROOT.
<br><br>With this mechanism, I could program the ROOT as (in pseudocode):
<br><br>if port == 666:
<br> handle(pathinfo)
<br>else if pathinfo.startwith('/MyApp'):
<br> handle(pathinfo.split('/',2)[1])
<br>else:
<br> error(404)
<br><br><br>This message and attachment(s) are intended solely for use by the addressee and may contain information that is privileged, confidential or otherwise exempt from disclosure under applicable law.
<br><br>If you are not the intended recipient or agent thereof responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited.
<br><br>If you have received this communication in error, please notify the sender immediately by telephone and with a 'reply' message.
<br><br>Thank you for your co-operation.
<br><br><br><br>---------------------------------------------------------------------
<br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26508516&i=0" target="_top" rel="nofollow">users-unsubscribe@...</a>
<br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26508516&i=1" target="_top" rel="nofollow">users-help@...</a>
<br><br><p>From forum: <a href="http://old.nabble.com/Tomcat---User-f342.html" embed="fixTarget[342]" target="_top" >Tomcat - User</a></p>tag:old.nabble.com,2006:post-26507191Re: Tomcat in Embedded mode2009-11-24T19:53:48Z2009-11-24T19:53:48ZBill Barker<br><<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26507191&i=0" target="_top" rel="nofollow">ivelin.velkov@...</a>> wrote in message
<br>news:<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26507191&i=1" target="_top" rel="nofollow">887c111b0911241208v65192e8fp20e0730fb09ffd74@...</a>...
<div class='shrinkable-quote'><br>> Hi guys,
<br>>
<br>> I spent my day into struggling with Tomcat 6 and I just wanted to ask you
<br>> for some ideas and whether what I'm doing seems right to you.
<br>>
<br>> So, I'm trying to port a legacy application which is using Tomcat 5.0.28
<br>> to
<br>> Tomcat 6.0.20.
<br>> While most of the Tomcat 5.0.28 properties are read from the server.xml,
<br>> some of the Connector properties(keyStore, keyPass, protocols, connector
<br>> address, port ...) are retrieved from other configuration files which are
<br>> in
<br>> fact related to the application.
<br>> Using Tomcat 5.0.28 this is implemented by providing a custom
<br>> implementation
<br>> for the CoyoteConnector and CoyoteServerSocketFactory.
<br>>
<br>> Obviously, I can't do this with Tomcat6.
<br>> What I intend to do is write a class that extends the Catalina class (so
<br>> that the Digester can read my server.xml file) and then just overwrite the
<br>> addConnector method in order to overwrite the Connector properties "on the
<br>> fly" and the load method ( so that I can push my implementation in the
<br>> digester).
<br>>
</div><br>If all you want is to customize the Connector, then it is much easier to
<br>simply put into server.xml:
<br> <Connector protocol="com.myfirm.mypackage.MyHttp11ProtocolHandler" ... />
<br>Then, if I understand what you want, something like:
<br> public void init() throws Exception {
<br> fixupSettings(); // your method to make configuration changes
<br> super.init(); // let Tomcat handle the rest
<br> }
<br>should work for you.
<br><div class='shrinkable-quote'><br>> Then in order to use the Bootstrap (to load classes), I'll have to extend
<br>> it
<br>> so that I can change the Catalina implementation with my own.
<br>> Then for starting tomcat I'll use my bootstrap.
<br>>
<br>> Please, have in mind that I really don't like this hacky approach.
<br>> However,
<br>> I can't do much to change it since I'm not the one who tells the
<br>> requirements.
<br>>
<br>> So, what do you think? Some easier way to achieve this?
<br>>
<br>> Thanks,
<br>> Ivelin
<br>>
</div><br><br><br><br>---------------------------------------------------------------------
<br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26507191&i=2" target="_top" rel="nofollow">users-unsubscribe@...</a>
<br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26507191&i=3" target="_top" rel="nofollow">users-help@...</a>
<br><br><p>From forum: <a href="http://old.nabble.com/Tomcat---User-f342.html" embed="fixTarget[342]" target="_top" >Tomcat - User</a></p>tag:old.nabble.com,2006:post-26506963Re: ArrayIndexOutOfBoundsException2009-11-24T19:14:19Z2009-11-24T19:14:19ZKonstantin Kolinko2009/11/24 <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26506963&i=0" target="_top" rel="nofollow">geoffrey@...</a>>:
<div class='shrinkable-quote'><br>> HTTP connector. I'll attach the conf folder from tomcat.
<br>>
<br>>
<br>>
<br>>
<br>>
<br>> Best Regards
<br>>
<br>> Geoffrey
<br>>
<br>> Phone Norway: +47 45 86 53 83
<br>> Fileflow Technologies AS
<br>> Ole Deviks vei 35, 0668 Oslo, Norway
<br>>
<br>> -------------------------------------
<br>>
<br>>
<br>>
<br>> On 24 Nov 2009, at 21:03, Konstantin Kolinko wrote:
<br>>
<br>>> 2009/11/24 <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26506963&i=1" target="_top" rel="nofollow">geoffrey@...</a>>:
<br>>>> There is a different amount of data sent each time before it crashes. I also tried byte by byte and gets the same error but it seems that it is less often.
<br>>>>
<br>>>
<br>>> So it is random... I wonder what can trigger it.
<br>>>
<br>>> What connectors are you using? Is it HTTP, or AJP? What is your
<br>>> configuration as a whole?
<br>>>
<br>>> There was the following bugreport recently:
<br>>> <a href="https://issues.apache.org/bugzilla/show_bug.cgi?id=48105" target="_top" rel="nofollow">https://issues.apache.org/bugzilla/show_bug.cgi?id=48105</a><br>>>
<br>>> The reporter of issue 48105 wrote that he saw exceptions in 6.0.18,
<br>>> .20 as well, but no stack traces were provided, so it is unconfirmed.
<br>>>
<br>>
</div><br>Thank you.
<br><br>Could it be that there are several threads that have access to the
<br>same Response object? (That is illegal).
<br>You can try setting the ...RECYCLE_FACADES property to "true", see the
<br>full name of it and description in
<br><a href="http://tomcat.apache.org/tomcat-6.0-doc/config/systemprops.html" target="_top" rel="nofollow">http://tomcat.apache.org/tomcat-6.0-doc/config/systemprops.html</a><br>You can add it to the end of the catalina.properties file.
<br><br>I do not see what else can cause randomness in writing out a response.
<br>Different length of headers? I see that you have
<br>maxHttpHeaderSize="50000"
<br><br><br><br><br>Are you using Tomcat-Native (tcnative-1.dll, libtcnative-1.so)?
<br>I see that you have an AprLifecycleListener in your server.xml. Does
<br>it print a warning that tomcat-native is not present when Tomcat is
<br>started? You can comment it out to disable Tomcat-Native and to
<br>disable that warning message if you are not going to use it.
<br>See
<br><a href="http://tomcat.apache.org/tomcat-6.0-doc/config/listeners.html" target="_top" rel="nofollow">http://tomcat.apache.org/tomcat-6.0-doc/config/listeners.html</a><br><br><br>Best regards,
<br>Konstantin Kolinko
<br><br>---------------------------------------------------------------------
<br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26506963&i=2" target="_top" rel="nofollow">users-unsubscribe@...</a>
<br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26506963&i=3" target="_top" rel="nofollow">users-help@...</a>
<br><br><p>From forum: <a href="http://old.nabble.com/Tomcat---User-f342.html" embed="fixTarget[342]" target="_top" >Tomcat - User</a></p>tag:old.nabble.com,2006:post-26506197[Tomcat Wiki] Update of "Tomcat/Books" by alexkachanov2009-11-24T17:26:09Z2009-11-24T17:26:09ZApache WikiDear Wiki user,
<br><br>You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change notification.
<br><br>The "Tomcat/Books" page has been changed by alexkachanov.
<br><a href="http://wiki.apache.org/tomcat/Tomcat/Books?action=diff&rev1=6&rev2=7" target="_top" rel="nofollow">http://wiki.apache.org/tomcat/Tomcat/Books?action=diff&rev1=6&rev2=7</a><br><br>--------------------------------------------------
<br><br> = Tomcat Books =
<br>+ * '''[[<a href="http://www.amazon.com/exec/obidos/ASIN/1893115364" target="_top" rel="nofollow">http://www.amazon.com/exec/obidos/ASIN/1893115364</a>|Apache Jakarta-Tomcat]]''', by ''James Goodwill'', Apress, ISBN: 1893115364 (2001)
<br>+ * '''[[<a href="http://www.amazon.com/exec/obidos/ASIN/0672324393" target="_top" rel="nofollow">http://www.amazon.com/exec/obidos/ASIN/0672324393</a>|Tomcat Kick Start]]''', by ''M. Bond & D. Law'', SAMS, ISBN: 0672324393 (2002)
<br>+ * '''[[<a href="http://www.amazon.com/Tomcat-Definitive-Guide-Jason-Brittain/dp/0596101066" target="_top" rel="nofollow">http://www.amazon.com/Tomcat-Definitive-Guide-Jason-Brittain/dp/0596101066</a>|Tomcat: The Definitive Guide, Second Edition]]''', by ''Jason Brittain & Ian F. Darwin'', O'Reilly Press, ISBN: 0596101066 (2007)
<br>+ * '''[[<a href="http://www.amazon.com/exec/obidos/ASIN/0764559028" target="_top" rel="nofollow">http://www.amazon.com/exec/obidos/ASIN/0764559028</a>|Professional Apache Tomcat 5]]''', by ''Vivek Chopra, Amit Bakore, Jon Eaves, Ben Galbraith, Sing Li, and Chanoch Wiggers'', Wrox Press, ISBN: 0764559028 (2004)
<br>+ * '''[[<a href="http://www.amazon.com/exec/obidos/ASIN/0672326361" target="_top" rel="nofollow">http://www.amazon.com/exec/obidos/ASIN/0672326361</a>|Tomcat 5 Unleashed]]''', by ''Lajos Moczar'', Sams, ISBN: 0672326361 (2004)
<br>+ * '''[[<a href="http://www.amazon.com/exec/obidos/ASIN/1590593316" target="_top" rel="nofollow">http://www.amazon.com/exec/obidos/ASIN/1590593316</a>|Pro Jakarta Tomcat 5]]''', by ''Matthew Moodie'', Apress, ISBN: 1590593316 (2004)
<br>+ * '''[[<a href="http://www.amazon.com/exec/obidos/ASIN/097521280X" target="_top" rel="nofollow">http://www.amazon.com/exec/obidos/ASIN/097521280X</a>|How Tomcat Works]]''', by ''Budi Kurniawan, Paul Deck'', Brainysoftware.Com, ISBN: 097521280X (2004); there is also a [[<a href="http://www.brainysoftware.com/index.php?show=tomcat" target="_top" rel="nofollow">http://www.brainysoftware.com/index.php?show=tomcat</a>|Home Page]] for this book
<br>+ * '''[[<a href="http://www.amazon.com/exec/obidos/ASIN/0471237647/" target="_top" rel="nofollow">http://www.amazon.com/exec/obidos/ASIN/0471237647/</a>|Mastering Tomcat Development]]''', by ''Peter Harrison, Ian McFarland'', Wiley, ISBN: 0471237647 (2002)
<br>+ * '''[[<a href="http://www.amazon.com/exec/obidos/ASIN/0764526065" target="_top" rel="nofollow">http://www.amazon.com/exec/obidos/ASIN/0764526065</a>|Apache Tomcat Bible]]''', by ''Jon Eaves, Warner Godfrey, and Rupert Jones'', Wiley, ISBN: 0764526065 (2003)
<br>
<br>-
<br>- * '''[[<a href="http://www.amazon.com/exec/obidos/ASIN/1893115364" target="_top" rel="nofollow">http://www.amazon.com/exec/obidos/ASIN/1893115364</a>|Apache Jakarta-Tomcat]]''', by ''James Goodwill'', Apress, ISBN: 1893115364
<br>- * '''[[<a href="http://www.amazon.com/exec/obidos/ASIN/0672324393" target="_top" rel="nofollow">http://www.amazon.com/exec/obidos/ASIN/0672324393</a>|Tomcat Kick Start]]''', by ''M. Bond & D. Law'', SAMS, ISBN: 0672324393
<br>- * '''[[<a href="http://www.amazon.com/Tomcat-Definitive-Guide-Jason-Brittain/dp/0596101066" target="_top" rel="nofollow">http://www.amazon.com/Tomcat-Definitive-Guide-Jason-Brittain/dp/0596101066</a>|Tomcat: The Definitive Guide, Second Edition]]''', by ''Jason Brittain & Ian F. Darwin'', O'Reilly Press, ISBN: 0596101066
<br>- * '''[[<a href="http://www.amazon.com/exec/obidos/ASIN/0764559028" target="_top" rel="nofollow">http://www.amazon.com/exec/obidos/ASIN/0764559028</a>|Professional Apache Tomcat 5]]''', by ''Vivek Chopra, Amit Bakore, Jon Eaves, Ben Galbraith, Sing Li, and Chanoch Wiggers'', Wrox Press, ISBN: 0764559028
<br>- * '''[[<a href="http://www.amazon.com/exec/obidos/ASIN/0672326361" target="_top" rel="nofollow">http://www.amazon.com/exec/obidos/ASIN/0672326361</a>|Tomcat 5 Unleashed]]''', by ''Lajos Moczar'', Sams, ISBN: 0672326361
<br>- * '''[[<a href="http://www.amazon.com/exec/obidos/ASIN/1590593316" target="_top" rel="nofollow">http://www.amazon.com/exec/obidos/ASIN/1590593316</a>|Pro Jakarta Tomcat 5]]''', by ''Matthew Moodie'', Apress, ISBN: 1590593316
<br>- * '''[[<a href="http://www.amazon.com/exec/obidos/ASIN/097521280X" target="_top" rel="nofollow">http://www.amazon.com/exec/obidos/ASIN/097521280X</a>|How Tomcat Works]]''', by ''Budi Kurniawan, Paul Deck'', Brainysoftware.``Com, ISBN: 097521280X; there is also a [[<a href="http://www.brainysoftware.com/index.php?show=tomcat" target="_top" rel="nofollow">http://www.brainysoftware.com/index.php?show=tomcat</a>|Home Page]] for this book
<br>- * '''[[<a href="http://www.amazon.com/exec/obidos/ASIN/0471237647/" target="_top" rel="nofollow">http://www.amazon.com/exec/obidos/ASIN/0471237647/</a>|Mastering Tomcat Development]]''', by ''Peter Harrison, Ian Mc``Farland'', Wiley, ISBN: 0471237647
<br>- * '''[[<a href="http://www.amazon.com/exec/obidos/ASIN/0764526065" target="_top" rel="nofollow">http://www.amazon.com/exec/obidos/ASIN/0764526065</a>|Apache Tomcat Bible]]''', by ''Jon Eaves, Warner Godfrey, and Rupert Jones'', Wiley, ISBN: 0764526065
<br>-
<br><br>---------------------------------------------------------------------
<br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26506197&i=0" target="_top" rel="nofollow">dev-unsubscribe@...</a>
<br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26506197&i=1" target="_top" rel="nofollow">dev-help@...</a>
<br><br><p>From forum: <a href="http://old.nabble.com/Tomcat---Dev-f341.html" embed="fixTarget[341]" target="_top" >Tomcat - Dev</a></p>tag:old.nabble.com,2006:post-26506111DO NOT REPLY [Bug 48258] Creating a session cookie with a specific default domain.2009-11-24T17:18:36Z2009-11-24T17:18:36ZBugzilla from bugzilla@apache.org<a href="https://issues.apache.org/bugzilla/show_bug.cgi?id=48258" target="_top" rel="nofollow">https://issues.apache.org/bugzilla/show_bug.cgi?id=48258</a><br><br>--- Comment #3 from <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26506111&i=0" target="_top" rel="nofollow">donn.aiken@...</a> 2009-11-24 17:18:34 UTC ---
<br>Created an attachment (id=24607)
<br> --> (<a href="https://issues.apache.org/bugzilla/attachment.cgi?id=24607" target="_top" rel="nofollow">https://issues.apache.org/bugzilla/attachment.cgi?id=24607</a>)
<br>diffs using a context attribute to set the cookie domain
<br><br>Mark -
<br><br>I re-read your note and I think got the message this time. If you feel this
<br>should be done at a different level than Context, please let me know.
<br><br>Thanks,
<br><br>Donn
<br><br>--
<br>Configure bugmail: <a href="https://issues.apache.org/bugzilla/userprefs.cgi?tab=email" target="_top" rel="nofollow">https://issues.apache.org/bugzilla/userprefs.cgi?tab=email</a><br>------- You are receiving this mail because: -------
<br>You are the assignee for the bug.
<br><br>---------------------------------------------------------------------
<br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26506111&i=1" target="_top" rel="nofollow">dev-unsubscribe@...</a>
<br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26506111&i=2" target="_top" rel="nofollow">dev-help@...</a>
<br><br><p>From forum: <a href="http://old.nabble.com/Tomcat---Dev-f341.html" embed="fixTarget[341]" target="_top" >Tomcat - Dev</a></p>tag:old.nabble.com,2006:post-26506043DO NOT REPLY [Bug 48267] Patch to fix generics in javax packages2009-11-24T17:11:18Z2009-11-24T17:11:18ZBugzilla from bugzilla@apache.org<a href="https://issues.apache.org/bugzilla/show_bug.cgi?id=48267" target="_top" rel="nofollow">https://issues.apache.org/bugzilla/show_bug.cgi?id=48267</a><br><br>Sebb <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26506043&i=0" target="_top" rel="nofollow">sebb@...</a>> changed:
<br><br> What |Removed |Added
<br>----------------------------------------------------------------------------
<br> Status|RESOLVED |REOPENED
<br> Resolution|INVALID |
<br><br>--- Comment #2 from Sebb <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26506043&i=1" target="_top" rel="nofollow">sebb@...</a>> 2009-11-24 17:11:18 UTC ---
<br>How about applying generics fixes just to internal code and private variables,
<br>and using @SuppressWarnings on the rest?
<br><br>[Or just use @SuppressWarnings throughout]
<br><br>If so, I can create a new patch.
<br><br>--
<br>Configure bugmail: <a href="https://issues.apache.org/bugzilla/userprefs.cgi?tab=email" target="_top" rel="nofollow">https://issues.apache.org/bugzilla/userprefs.cgi?tab=email</a><br>------- You are receiving this mail because: -------
<br>You are the assignee for the bug.
<br><br>---------------------------------------------------------------------
<br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26506043&i=2" target="_top" rel="nofollow">dev-unsubscribe@...</a>
<br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26506043&i=3" target="_top" rel="nofollow">dev-help@...</a>
<br><br><p>From forum: <a href="http://old.nabble.com/Tomcat---Dev-f341.html" embed="fixTarget[341]" target="_top" >Tomcat - Dev</a></p>tag:old.nabble.com,2006:post-26505940DO NOT REPLY [Bug 48266] Patch to fix generics in catalina2009-11-24T17:00:09Z2009-11-24T17:00:09ZBugzilla from bugzilla@apache.org<a href="https://issues.apache.org/bugzilla/show_bug.cgi?id=48266" target="_top" rel="nofollow">https://issues.apache.org/bugzilla/show_bug.cgi?id=48266</a><br><br>Mark Thomas <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26505940&i=0" target="_top" rel="nofollow">markt@...</a>> changed:
<br><br> What |Removed |Added
<br>----------------------------------------------------------------------------
<br> Status|NEW |RESOLVED
<br> Resolution| |FIXED
<br><br>--- Comment #1 from Mark Thomas <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26505940&i=1" target="_top" rel="nofollow">markt@...</a>> 2009-11-24 17:00:09 GMT ---
<br>Patch applied. Many thanks.
<br><br>--
<br>Configure bugmail: <a href="https://issues.apache.org/bugzilla/userprefs.cgi?tab=email" target="_top" rel="nofollow">https://issues.apache.org/bugzilla/userprefs.cgi?tab=email</a><br>------- You are receiving this mail because: -------
<br>You are the assignee for the bug.
<br><br>---------------------------------------------------------------------
<br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26505940&i=2" target="_top" rel="nofollow">dev-unsubscribe@...</a>
<br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26505940&i=3" target="_top" rel="nofollow">dev-help@...</a>
<br><br><p>From forum: <a href="http://old.nabble.com/Tomcat---Dev-f341.html" embed="fixTarget[341]" target="_top" >Tomcat - Dev</a></p>tag:old.nabble.com,2006:post-26505941svn commit: r883943 - in /tomcat/trunk/java/org/apache/catalina: ant/jmx/ connector/ core/ ha/backend/ ha/session/ ha/tcp/ tribes/tipis/ tribes/transport/bio/2009-11-24T17:00:08Z2009-11-24T17:00:08Zmarkt-2Author: markt
<br>Date: Wed Nov 25 01:00:07 2009
<br>New Revision: 883943
<br><br>URL: <a href="http://svn.apache.org/viewvc?rev=883943&view=rev" target="_top" rel="nofollow">http://svn.apache.org/viewvc?rev=883943&view=rev</a><br>Log:
<br>Fix <a href="https://issues.apache.org/bugzilla/show_bug.cgi?id=48266" target="_top" rel="nofollow">https://issues.apache.org/bugzilla/show_bug.cgi?id=48266</a><br>Generics and unused imports.
<br>Patch by sebb
<br><br>Modified:
<br> tomcat/trunk/java/org/apache/catalina/ant/jmx/JMXAccessorTask.java
<br> tomcat/trunk/java/org/apache/catalina/connector/Request.java
<br> tomcat/trunk/java/org/apache/catalina/core/StandardPart.java
<br> tomcat/trunk/java/org/apache/catalina/ha/backend/CollectedInfo.java
<br> tomcat/trunk/java/org/apache/catalina/ha/session/BackupManager.java
<br> tomcat/trunk/java/org/apache/catalina/ha/tcp/ReplicationValve.java
<br> tomcat/trunk/java/org/apache/catalina/tribes/tipis/AbstractReplicatedMap.java
<br> tomcat/trunk/java/org/apache/catalina/tribes/transport/bio/MultipointBioSender.java
<br><br>Modified: tomcat/trunk/java/org/apache/catalina/ant/jmx/JMXAccessorTask.java
<br>URL: <a href="http://svn.apache.org/viewvc/tomcat/trunk/java/org/apache/catalina/ant/jmx/JMXAccessorTask.java?rev=883943&r1=883942&r2=883943&view=diff" target="_top" rel="nofollow">http://svn.apache.org/viewvc/tomcat/trunk/java/org/apache/catalina/ant/jmx/JMXAccessorTask.java?rev=883943&r1=883942&r2=883943&view=diff</a><br>==============================================================================
<br>--- tomcat/trunk/java/org/apache/catalina/ant/jmx/JMXAccessorTask.java (original)
<br>+++ tomcat/trunk/java/org/apache/catalina/ant/jmx/JMXAccessorTask.java Wed Nov 25 01:00:07 2009
<br>@@ -621,7 +621,7 @@
<br> String key = iter.next();
<br> Object value = data.get(key);
<br> OpenType<?> type = compositeType.getType(key);
<br>- if (type instanceof SimpleType) {
<br>+ if (type instanceof SimpleType<?>) {
<br> setProperty(propertyPrefix + "." + key, value);
<br> } else {
<br> createProperty(propertyPrefix + "." + key, value);
<br>@@ -637,7 +637,7 @@
<br> Object value = valuedata.get("value");
<br> OpenType<?> type = valuedata.getCompositeType().getType(
<br> "value");
<br>- if (type instanceof SimpleType) {
<br>+ if (type instanceof SimpleType<?>) {
<br> setProperty(propertyPrefix + "." + key1, value);
<br> } else {
<br> createProperty(propertyPrefix + "." + key1, value);
<br><br>Modified: tomcat/trunk/java/org/apache/catalina/connector/Request.java
<br>URL: <a href="http://svn.apache.org/viewvc/tomcat/trunk/java/org/apache/catalina/connector/Request.java?rev=883943&r1=883942&r2=883943&view=diff" target="_top" rel="nofollow">http://svn.apache.org/viewvc/tomcat/trunk/java/org/apache/catalina/connector/Request.java?rev=883943&r1=883942&r2=883943&view=diff</a><br>==============================================================================
<br>--- tomcat/trunk/java/org/apache/catalina/connector/Request.java (original)
<br>+++ tomcat/trunk/java/org/apache/catalina/connector/Request.java Wed Nov 25 01:00:07 2009
<br>@@ -74,7 +74,6 @@
<br> import org.apache.catalina.util.ParameterMap;
<br> import org.apache.catalina.util.StringParser;
<br> import org.apache.coyote.ActionCode;
<br>-import org.apache.jasper.compiler.ServletWriter;
<br> import org.apache.tomcat.util.buf.B2CConverter;
<br> import org.apache.tomcat.util.buf.ByteChunk;
<br> import org.apache.tomcat.util.buf.MessageBytes;
<br>@@ -91,7 +90,6 @@
<br> import org.apache.tomcat.util.http.fileupload.FileUploadBase.InvalidContentTypeException;
<br> import org.apache.tomcat.util.http.mapper.MappingData;
<br> import org.apache.tomcat.util.res.StringManager;
<br>-import org.apache.tools.ant.util.CollectionUtils;
<br>
<br>
<br> /**
<br><br>Modified: tomcat/trunk/java/org/apache/catalina/core/StandardPart.java
<br>URL: <a href="http://svn.apache.org/viewvc/tomcat/trunk/java/org/apache/catalina/core/StandardPart.java?rev=883943&r1=883942&r2=883943&view=diff" target="_top" rel="nofollow">http://svn.apache.org/viewvc/tomcat/trunk/java/org/apache/catalina/core/StandardPart.java?rev=883943&r1=883942&r2=883943&view=diff</a><br>==============================================================================
<br>--- tomcat/trunk/java/org/apache/catalina/core/StandardPart.java (original)
<br>+++ tomcat/trunk/java/org/apache/catalina/core/StandardPart.java Wed Nov 25 01:00:07 2009
<br>@@ -26,7 +26,6 @@
<br> import java.util.Iterator;
<br>
<br> import javax.servlet.MultipartConfigElement;
<br>-import javax.servlet.ServletContext;
<br> import javax.servlet.http.Part;
<br>
<br> import org.apache.tomcat.util.http.fileupload.DiskFileItem;
<br><br>Modified: tomcat/trunk/java/org/apache/catalina/ha/backend/CollectedInfo.java
<br>URL: <a href="http://svn.apache.org/viewvc/tomcat/trunk/java/org/apache/catalina/ha/backend/CollectedInfo.java?rev=883943&r1=883942&r2=883943&view=diff" target="_top" rel="nofollow">http://svn.apache.org/viewvc/tomcat/trunk/java/org/apache/catalina/ha/backend/CollectedInfo.java?rev=883943&r1=883942&r2=883943&view=diff</a><br>==============================================================================
<br>--- tomcat/trunk/java/org/apache/catalina/ha/backend/CollectedInfo.java (original)
<br>+++ tomcat/trunk/java/org/apache/catalina/ha/backend/CollectedInfo.java Wed Nov 25 01:00:07 2009
<br>@@ -56,7 +56,7 @@
<br> mBeanServer = Registry.getRegistry(null, null).getMBeanServer();
<br> String onStr = "*:type=ThreadPool,*";
<br> ObjectName objectName = new ObjectName(onStr);
<br>- Set set = mBeanServer.queryMBeans(objectName, null);
<br>+ Set<ObjectInstance> set = mBeanServer.queryMBeans(objectName, null);
<br> Iterator<ObjectInstance> iterator = set.iterator();
<br> while (iterator.hasNext()) {
<br> ObjectInstance oi = iterator.next();
<br><br>Modified: tomcat/trunk/java/org/apache/catalina/ha/session/BackupManager.java
<br>URL: <a href="http://svn.apache.org/viewvc/tomcat/trunk/java/org/apache/catalina/ha/session/BackupManager.java?rev=883943&r1=883942&r2=883943&view=diff" target="_top" rel="nofollow">http://svn.apache.org/viewvc/tomcat/trunk/java/org/apache/catalina/ha/session/BackupManager.java?rev=883943&r1=883942&r2=883943&view=diff</a><br>==============================================================================
<br>--- tomcat/trunk/java/org/apache/catalina/ha/session/BackupManager.java (original)
<br>+++ tomcat/trunk/java/org/apache/catalina/ha/session/BackupManager.java Wed Nov 25 01:00:07 2009
<br>@@ -308,6 +308,7 @@
<br> public String listSessionIdsFull() {
<br> StringBuilder sb=new StringBuilder();
<br> LazyReplicatedMap map = (LazyReplicatedMap)sessions;
<br>+ @SuppressWarnings("unchecked") // sessions is of type Map<String, Session>
<br> Iterator<String> keys = map.keySetFull().iterator();
<br> while (keys.hasNext()) {
<br> sb.append(keys.next()).append(" ");
<br><br>Modified: tomcat/trunk/java/org/apache/catalina/ha/tcp/ReplicationValve.java
<br>URL: <a href="http://svn.apache.org/viewvc/tomcat/trunk/java/org/apache/catalina/ha/tcp/ReplicationValve.java?rev=883943&r1=883942&r2=883943&view=diff" target="_top" rel="nofollow">http://svn.apache.org/viewvc/tomcat/trunk/java/org/apache/catalina/ha/tcp/ReplicationValve.java?rev=883943&r1=883942&r2=883943&view=diff</a><br>==============================================================================
<br>--- tomcat/trunk/java/org/apache/catalina/ha/tcp/ReplicationValve.java (original)
<br>+++ tomcat/trunk/java/org/apache/catalina/ha/tcp/ReplicationValve.java Wed Nov 25 01:00:07 2009
<br>@@ -451,10 +451,9 @@
<br> * @param containerCluster
<br> */
<br> protected void sendCrossContextSession(CatalinaCluster containerCluster) {
<br>- Object sessions = crossContextSessions.get();
<br>- if(sessions != null && sessions instanceof List
<br>- && ((List<Session>)sessions).size() >0) {
<br>- for(Iterator<Session> iter = ((List<Session>)sessions).iterator(); iter.hasNext() ;) {
<br>+ List<DeltaSession> sessions = crossContextSessions.get();
<br>+ if(sessions != null && sessions.size() >0) {
<br>+ for(Iterator<DeltaSession> iter = sessions.iterator(); iter.hasNext() ;) {
<br> Session session = iter.next();
<br> if(log.isDebugEnabled())
<br> log.debug(sm.getString("ReplicationValve.crossContext.sendDelta",
<br>@@ -479,10 +478,9 @@
<br> ((DeltaSession)contextSession).setPrimarySession(true);
<br> }
<br> if(isCrossContext) {
<br>- Object sessions = crossContextSessions.get();
<br>- if(sessions != null && sessions instanceof List
<br>- && ((List<Session>)sessions).size() >0) {
<br>- Iterator<Session> iter = ((List<Session>)sessions).iterator();
<br>+ List<DeltaSession> sessions = crossContextSessions.get();
<br>+ if(sessions != null && sessions.size() >0) {
<br>+ Iterator<DeltaSession> iter = sessions.iterator();
<br> for(; iter.hasNext() ;) {
<br> Session session = iter.next();
<br> resetDeltaRequest(session);
<br><br>Modified: tomcat/trunk/java/org/apache/catalina/tribes/tipis/AbstractReplicatedMap.java
<br>URL: <a href="http://svn.apache.org/viewvc/tomcat/trunk/java/org/apache/catalina/tribes/tipis/AbstractReplicatedMap.java?rev=883943&r1=883942&r2=883943&view=diff" target="_top" rel="nofollow">http://svn.apache.org/viewvc/tomcat/trunk/java/org/apache/catalina/tribes/tipis/AbstractReplicatedMap.java?rev=883943&r1=883942&r2=883943&view=diff</a><br>==============================================================================
<br>--- tomcat/trunk/java/org/apache/catalina/tribes/tipis/AbstractReplicatedMap.java (original)
<br>+++ tomcat/trunk/java/org/apache/catalina/tribes/tipis/AbstractReplicatedMap.java Wed Nov 25 01:00:07 2009
<br>@@ -360,6 +360,7 @@
<br>
<br> public Member[] getMapMembersExcl(Member[] exclude) {
<br> synchronized (mapMembers) {
<br>+ @SuppressWarnings("unchecked") // mapMembers has the correct type
<br> HashMap<Member, Long> list = (HashMap<Member, Long>)mapMembers.clone();
<br> for (int i=0; i<exclude.length;i++) list.remove(exclude[i]);
<br> return getMapMembers(list);
<br>@@ -438,9 +439,9 @@
<br> * @param complete boolean
<br> */
<br> public void replicate(boolean complete) {
<br>- Iterator i = super.entrySet().iterator();
<br>+ Iterator<Map.Entry<?,?>> i = super.entrySet().iterator();
<br> while (i.hasNext()) {
<br>- Map.Entry e = (Map.Entry) i.next();
<br>+ Map.Entry<?,?> e = i.next();
<br> replicate(e.getKey(), complete);
<br> } //while
<br>
<br>@@ -458,7 +459,7 @@
<br> synchronized (stateMutex) {
<br> msg = (MapMessage) resp[0].getMessage();
<br> msg.deserialize(getExternalLoaders());
<br>- ArrayList list = (ArrayList) msg.getValue();
<br>+ ArrayList<?> list = (ArrayList<?>) msg.getValue();
<br> for (int i = 0; i < list.size(); i++) {
<br> messageReceived( (Serializable) list.get(i), resp[0].getSource());
<br> } //for
<br>@@ -511,9 +512,9 @@
<br> if (mapmsg.getMsgType() == MapMessage.MSG_STATE || mapmsg.getMsgType() == MapMessage.MSG_STATE_COPY) {
<br> synchronized (stateMutex) { //make sure we dont do two things at the same time
<br> ArrayList<MapMessage> list = new ArrayList<MapMessage>();
<br>- Iterator i = super.entrySet().iterator();
<br>+ Iterator<Map.Entry<?,?>> i = super.entrySet().iterator();
<br> while (i.hasNext()) {
<br>- Map.Entry e = (Map.Entry) i.next();
<br>+ Map.Entry<?,?> e = i.next();
<br> MapEntry entry = (MapEntry) super.get(e.getKey());
<br> if ( entry != null && entry.isSerializable() ) {
<br> boolean copy = (mapmsg.getMsgType() == MapMessage.MSG_STATE_COPY);
<br>@@ -671,9 +672,9 @@
<br> }
<br> if ( memberAdded ) {
<br> synchronized (stateMutex) {
<br>- Iterator i = super.entrySet().iterator();
<br>+ Iterator<Map.Entry<?,?>> i = super.entrySet().iterator();
<br> while (i.hasNext()) {
<br>- Map.Entry e = (Map.Entry) i.next();
<br>+ Map.Entry<?,?> e = i.next();
<br> MapEntry entry = (MapEntry) super.get(e.getKey());
<br> if ( entry == null ) continue;
<br> if (entry.isPrimary() && (entry.getBackupNodes() == null || entry.getBackupNodes().length == 0)) {
<br>@@ -723,9 +724,9 @@
<br> }
<br> }
<br>
<br>- Iterator i = super.entrySet().iterator();
<br>+ Iterator<Map.Entry<?,?>> i = super.entrySet().iterator();
<br> while (i.hasNext()) {
<br>- Map.Entry e = (Map.Entry) i.next();
<br>+ Map.Entry<?,?> e = i.next();
<br> MapEntry entry = (MapEntry) super.get(e.getKey());
<br> if (entry==null) continue;
<br> if (entry.isPrimary() && inSet(member,entry.getBackupNodes())) {
<br>@@ -902,11 +903,11 @@
<br> for ( int i=0; i<mbrs.length;i++ ) {
<br> System.out.println("Mbr["+(i+1)+"="+mbrs[i].getName());
<br> }
<br>- Iterator i = super.entrySet().iterator();
<br>+ Iterator<Map.Entry<?,?>> i = super.entrySet().iterator();
<br> int cnt = 0;
<br>
<br> while (i.hasNext()) {
<br>- Map.Entry e = (Map.Entry) i.next();
<br>+ Map.Entry<?,?> e = i.next();
<br> System.out.println( (++cnt) + ". " + super.get(e.getKey()));
<br> }
<br> System.out.println("EndMap]\n\n");
<br>@@ -961,9 +962,9 @@
<br> */
<br> @Override
<br> public void putAll(Map m) {
<br>- Iterator i = m.entrySet().iterator();
<br>+ Iterator<Map.Entry<?,?>> i = m.entrySet().iterator();
<br> while ( i.hasNext() ) {
<br>- Map.Entry entry = (Map.Entry)i.next();
<br>+ Map.Entry<?,?> entry = i.next();
<br> put(entry.getKey(),entry.getValue());
<br> }
<br> }
<br>@@ -989,9 +990,9 @@
<br> if ( value == null ) {
<br> return super.containsValue(value);
<br> } else {
<br>- Iterator i = super.entrySet().iterator();
<br>+ Iterator<Map.Entry<?,?>> i = super.entrySet().iterator();
<br> while (i.hasNext()) {
<br>- Map.Entry e = (Map.Entry) i.next();
<br>+ Map.Entry<?,?> e = i.next();
<br> MapEntry entry = (MapEntry) super.get(e.getKey());
<br> if (entry!=null && entry.isPrimary() && value.equals(entry.getValue())) return true;
<br> }//while
<br>@@ -1025,9 +1026,9 @@
<br> @Override
<br> public Set<MapEntry> entrySet() {
<br> LinkedHashSet<MapEntry> set = new LinkedHashSet<MapEntry>(super.size());
<br>- Iterator i = super.entrySet().iterator();
<br>+ Iterator<Map.Entry<?,?>> i = super.entrySet().iterator();
<br> while ( i.hasNext() ) {
<br>- Map.Entry e = (Map.Entry)i.next();
<br>+ Map.Entry<?,?> e = i.next();
<br> Object key = e.getKey();
<br> MapEntry entry = (MapEntry)super.get(key);
<br> if ( entry != null && entry.isPrimary() ) {
<br>@@ -1042,9 +1043,9 @@
<br> //todo implement
<br> //should only return keys where this is active.
<br> LinkedHashSet<Object> set = new LinkedHashSet<Object>(super.size());
<br>- Iterator i = super.entrySet().iterator();
<br>+ Iterator<Map.Entry<?,?>> i = super.entrySet().iterator();
<br> while ( i.hasNext() ) {
<br>- Map.Entry e = (Map.Entry)i.next();
<br>+ Map.Entry<?,?> e = i.next();
<br> Object key = e.getKey();
<br> MapEntry entry = (MapEntry)super.get(key);
<br> if ( entry!=null && entry.isPrimary() ) set.add(key);
<br>@@ -1059,9 +1060,9 @@
<br> //todo, implement a counter variable instead
<br> //only count active members in this node
<br> int counter = 0;
<br>- Iterator it = super.entrySet().iterator();
<br>+ Iterator<Map.Entry<?,?>> it = super.entrySet().iterator();
<br> while (it!=null && it.hasNext() ) {
<br>- Map.Entry e = (Map.Entry) it.next();
<br>+ Map.Entry<?,?> e = it.next();
<br> if ( e != null ) {
<br> MapEntry entry = (MapEntry) super.get(e.getKey());
<br> if (entry!=null && entry.isPrimary() && entry.getValue() != null) counter++;
<br>@@ -1078,9 +1079,9 @@
<br> @Override
<br> public Collection<Object> values() {
<br> ArrayList<Object> values = new ArrayList<Object>();
<br>- Iterator i = super.entrySet().iterator();
<br>+ Iterator<Map.Entry<?,?>> i = super.entrySet().iterator();
<br> while ( i.hasNext() ) {
<br>- Map.Entry e = (Map.Entry)i.next();
<br>+ Map.Entry<?,?> e = i.next();
<br> MapEntry entry = (MapEntry)super.get(e.getKey());
<br> if (entry!=null && entry.isPrimary() && entry.getValue()!=null) values.add(entry.getValue());
<br> }
<br><br>Modified: tomcat/trunk/java/org/apache/catalina/tribes/transport/bio/MultipointBioSender.java
<br>URL: <a href="http://svn.apache.org/viewvc/tomcat/trunk/java/org/apache/catalina/tribes/transport/bio/MultipointBioSender.java?rev=883943&r1=883942&r2=883943&view=diff" target="_top" rel="nofollow">http://svn.apache.org/viewvc/tomcat/trunk/java/org/apache/catalina/tribes/transport/bio/MultipointBioSender.java?rev=883943&r1=883942&r2=883943&view=diff</a><br>==============================================================================
<br>--- tomcat/trunk/java/org/apache/catalina/tribes/transport/bio/MultipointBioSender.java (original)
<br>+++ tomcat/trunk/java/org/apache/catalina/tribes/transport/bio/MultipointBioSender.java Wed Nov 25 01:00:07 2009
<br>@@ -136,6 +136,7 @@
<br> public boolean keepalive() {
<br> //throw new UnsupportedOperationException("Method ParallelBioSender.checkKeepAlive() not implemented");
<br> boolean result = false;
<br>+ @SuppressWarnings("unchecked") // bioSenders is of type HashMap<Member, BioSender>
<br> Map.Entry<Member,BioSender>[] entries = bioSenders.entrySet().toArray(new Map.Entry[bioSenders.size()]);
<br> for ( int i=0; i<entries.length; i++ ) {
<br> BioSender sender = entries[i].getValue();
<br><br><br><br>---------------------------------------------------------------------
<br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26505941&i=0" target="_top" rel="nofollow">dev-unsubscribe@...</a>
<br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26505941&i=1" target="_top" rel="nofollow">dev-help@...</a>
<br><br><p>From forum: <a href="http://old.nabble.com/Tomcat---Dev-f341.html" embed="fixTarget[341]" target="_top" >Tomcat - Dev</a></p>tag:old.nabble.com,2006:post-26505924RE: I Have Multiple Tomcat Instances, Now I Want Each to Run In a Different Time Zone2009-11-24T16:58:28Z2009-11-24T16:58:28ZRobinson, Eric-2Never mind, got it. I was using JAVA_OPTS instead of CATALINA_OPTS.
<br><br>--Eric
<br><br><br><br>Disclaimer - November 24, 2009
<br>This email and any files transmitted with it are confidential and intended solely for Tomcat Users List. If you are not the named addressee you should not disseminate, distribute, copy or alter this email. Any views or opinions presented in this email are solely those of the author and might not represent those of . Warning: Although has taken reasonable precautions to ensure no viruses are present in this email, the company cannot accept responsibility for any loss or damage arising from the use of this email or attachments.
<br>This disclaimer was added by Policy Patrol: <a href="http://www.policypatrol.com/" target="_top" rel="nofollow">http://www.policypatrol.com/</a><br><br>---------------------------------------------------------------------
<br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26505924&i=0" target="_top" rel="nofollow">users-unsubscribe@...</a>
<br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26505924&i=1" target="_top" rel="nofollow">users-help@...</a>
<br><br><p>From forum: <a href="http://old.nabble.com/Tomcat---User-f342.html" embed="fixTarget[342]" target="_top" >Tomcat - User</a></p>tag:old.nabble.com,2006:post-26505918DO NOT REPLY [Bug 48267] Patch to fix generics in javax packages2009-11-24T16:57:04Z2009-11-24T16:57:04ZBugzilla from bugzilla@apache.org<a href="https://issues.apache.org/bugzilla/show_bug.cgi?id=48267" target="_top" rel="nofollow">https://issues.apache.org/bugzilla/show_bug.cgi?id=48267</a><br><br>Mark Thomas <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26505918&i=0" target="_top" rel="nofollow">markt@...</a>> changed:
<br><br> What |Removed |Added
<br>----------------------------------------------------------------------------
<br> Status|NEW |RESOLVED
<br> Resolution| |INVALID
<br><br>--- Comment #1 from Mark Thomas <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26505918&i=1" target="_top" rel="nofollow">markt@...</a>> 2009-11-24 16:57:04 GMT ---
<br>The javax.* packages have to match the specification APIs. We can't add
<br>generics if the API doesn't use them (as much as I'd like to).
<br><br>--
<br>Configure bugmail: <a href="https://issues.apache.org/bugzilla/userprefs.cgi?tab=email" target="_top" rel="nofollow">https://issues.apache.org/bugzilla/userprefs.cgi?tab=email</a><br>------- You are receiving this mail because: -------
<br>You are the assignee for the bug.
<br><br>---------------------------------------------------------------------
<br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26505918&i=2" target="_top" rel="nofollow">dev-unsubscribe@...</a>
<br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26505918&i=3" target="_top" rel="nofollow">dev-help@...</a>
<br><br><p>From forum: <a href="http://old.nabble.com/Tomcat---Dev-f341.html" embed="fixTarget[341]" target="_top" >Tomcat - Dev</a></p>tag:old.nabble.com,2006:post-26505862Re: I Have Multiple Tomcat Instances, Now I Want Each to Run In a Different Time Zone2009-11-24T16:49:55Z2009-11-24T16:49:55ZawarnierRobinson, Eric wrote:
<br>>
<br>> I want to run multiple instances of tomcat on the same server, one
<br>> instance for each time zone. I have all the separate tomcats running
<br>> fine, but they are all using the server's time zone. I've been Googling
<br>> and have not found an effective way to do it. Can someone please tell me
<br>> how?
<br>>
<br>Not really an expert, but 2 methods come to mind :
<br><br>1) maybe the most serious :
<br>Each Tomcat runs in its own JVM. There should be some JVM
<br>system.properties which determine that kind of thing, which should be
<br>settable with -D options on the java line that starts Tomcat.
<br><br>Really, I don't really know this. But a previous issue of mine with a
<br>webapp that was resetting the language for the whole JVM leads me to
<br>believe this might work.
<br><br>2) less serious :
<br>Install VMWare server. Configure as many virtual machines as you need
<br>Tomcats. Give each its timezone and run a Tomcat in each.
<br><br><br>---------------------------------------------------------------------
<br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26505862&i=0" target="_top" rel="nofollow">users-unsubscribe@...</a>
<br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26505862&i=1" target="_top" rel="nofollow">users-help@...</a>
<br><br><p>From forum: <a href="http://old.nabble.com/Tomcat---User-f342.html" embed="fixTarget[342]" target="_top" >Tomcat - User</a></p>tag:old.nabble.com,2006:post-26505728I Have Multiple Tomcat Instances, Now I Want Each to Run In a Different Time Zone2009-11-24T16:34:58Z2009-11-24T16:34:58ZRobinson, Eric-2
<br>I want to run multiple instances of tomcat on the same server, one
<br>instance for each time zone. I have all the separate tomcats running
<br>fine, but they are all using the server's time zone. I've been Googling
<br>and have not found an effective way to do it. Can someone please tell me
<br>how?
<br><br>--Eric
<br><br><br><br>Disclaimer - November 24, 2009
<br>This email and any files transmitted with it are confidential and intended solely for Tomcat Users List. If you are not the named addressee you should not disseminate, distribute, copy or alter this email. Any views or opinions presented in this email are solely those of the author and might not represent those of . Warning: Although has taken reasonable precautions to ensure no viruses are present in this email, the company cannot accept responsibility for any loss or damage arising from the use of this email or attachments.
<br>This disclaimer was added by Policy Patrol: <a href="http://www.policypatrol.com/" target="_top" rel="nofollow">http://www.policypatrol.com/</a><br><br>---------------------------------------------------------------------
<br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26505728&i=0" target="_top" rel="nofollow">users-unsubscribe@...</a>
<br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26505728&i=1" target="_top" rel="nofollow">users-help@...</a>
<br><br><p>From forum: <a href="http://old.nabble.com/Tomcat---User-f342.html" embed="fixTarget[342]" target="_top" >Tomcat - User</a></p>