|
|
tomcat session security hole
By Dave at Dec 19, 2007, 04:44 am UTC
Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Hi, I am using URL rewriting for session tracking, ie, session id is on the URL. After I login into a web application, if someone else knows my current session id, he/she can access my account using the session id. It is... More...
--0-1304367098-1198030186=:85255
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Hi, I am using URL rewriting for session tracking, ie, session id is on the URL. After I login into a web application, if someone else knows my current session id, he/she can access my account using the session id. It is ok because it is difficult for others to guess my session id. But right now I encounter an issue that will breach the security.
Our web application is using a 3rd party payment system, when a user clicks pay button, we need to tell the payment system a return URL, a page URL to go after a user finishes with the payment system. The return url needs to have the user's session id so that he/she will not need to login again after returning from the payment system. In this case, the 3rd payment system will know the user's session id, a security hole.
Is there a solution for this scenario? the same security hole for cookie based session tracking? In our case, we have to use URL rewriting because sometimes a new session is needed when users click some links on pages.
In my opinion, session id is not sufficient to identify a session, it should have client's ip address for more security.
Thanks for any ideas.
Dave
---------------------------------
Looking for last minute shopping deals? Find them fast with Yahoo! Search.
--0-1304367098-1198030186=:85255--
3 Replies
|
|
|
Servlet File Structure
By Spencer Tickner at Dec 19, 2007, 01:14 am UTC
Hi List, thanks in advance for the help. I'm fairly new to tomcat so I appologize for anything I say that may be painfully obvious. I've set up a security servlet that will check permissions on various html, pdf, xml, etc, files. I've managed the security and caching and filtering so this is not my... More...
Hi List, thanks in advance for the help.
I'm fairly new to tomcat so I appologize for anything I say that may
be painfully obvious.
I've set up a security servlet that will check permissions on various
html, pdf, xml, etc, files. I've managed the security and caching and
filtering so this is not my problem.. My problem is something that
should seem to be much more simple ergo,, incredibly more agravating
for me ;) I don't know where to put all these files.
1) I started with the content files out of the Web directory all
together and kept the mapping in an xml file and then served them
using FileInputStream and writing them to the ServletOutputStream.
This doesn't work because any internal refrences (<img>, <style>,
etc.) are lost.
2) My next attempt was to put them into the Servlet folder which
worked until I had to reload the .war file.. Which promptly got rid of
all the content. I considered adding the content to the war file,, but
this isn't so good because it would be nice for the application
developers to work seperately from the editors which already have
there own proccesses for managing content.
3) My last attempt is to put the content outside the Servlet folder,,
but then I can't figure out how to map the servlet filter to fire when
someone requests a file.
I have spent a considerable time looking through Google, but still
have not found an answer.. Any help would be very appreciated.
Thanks,
Spencer
---------------------------------------------------------------------
To start a new topic, e-mail: [email protected: u...@tomcat.apache.org]
To unsubscribe, e-mail: [email protected: users-unsubs...@tomcat.apache.org]
For additional commands, e-mail: [email protected: users...@tomcat.apache.org]
11 Replies
|
|
|
how to distinguish between managers when running multiple instances
By morlino at Dec 19, 2007, 12:18 am UTC
I'm sorry if this has been covered before, I tried searching but didn't find anything relevant. I'm running 4 instances of tomcat, each sharing a common CATALINA_HOME but with a separate CATALINA_BASE. I created a CATALINA_BASE/conf/Catalina/localhost/manager.xml file for each instance that refers... More...
I'm sorry if this has been covered before, I tried searching but didn't find
anything relevant. I'm running 4 instances of tomcat, each sharing a common
CATALINA_HOME but with a separate CATALINA_BASE. I created a
CATALINA_BASE/conf/Catalina/localhost/manager.xml file for each instance
that refers to a single copy of the manager application (
docBase="${catalina.home}/server/webapps/manager" ).
Now I am able to access the 4 managers via 4 different http connectors.
However, without looking at the port number in the browser location, or
knowing which applications are deployed under which instance it is very
difficult to distinguish which manager is which.
Is there any way to configure the manager to display a different string
based on the CATALINA_BASE or the URL that is is access by something so that
I can tell the managers apart? I was unable to find anything when I went
searching.
-Mark
2 Replies
|
|
|
Tomcat is slow with router configured
By Nabble-Member1 at Dec 18, 2007, 11:56 pm UTC
------_=_NextPart_001_01C84112.EA35E815 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Tomcat experts, I have a war file deployed in a Tomcat server (Jakarta-tomcat 5.5.9) running on a windows server 2003. Web server accesses MySQL server running on a... More...
------_=_NextPart_001_01C84112.EA35E815
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Hi Tomcat experts,
I have a war file deployed in a Tomcat server (Jakarta-tomcat 5.5.9)
running on a windows server 2003. Web server accesses MySQL server
running on a different box, also Windows server 2003.
The web app is fast if I configured network bridge mode (both Web server
and DB server have same subnet 192.168.1.x). But it is very slow if the
network is configured as router mode (Web server and DB server is in
different subnets - 192.168.1.1 for web, 196.168.2.1 for DB, the 2 boxes
communicate via a router device).
Is there settings in Tomcat to deal with this?
I tested MySQL client running on Web server side. MySQL client is very
fast for both bridge mode and router mode.
I also tested the file transfer. The MS ftp is very fast for both
bridge mode and router mode on the 2 boxes.
I appreciate very much for your help
Thanh Tran
**************************************************************************************
This e-mail is confidential, the property of NDS Ltd and intended for the addressee only. Any dissemination, copying or distribution of this message or any attachments by anyone other than the intended recipient is strictly prohibited. If you have received this message in error, please immediately notify the [email protected: postm...@nds.com] and destroy the original message. Messages sent to and from NDS may be monitored. NDS cannot guarantee any message delivery method is secure or error-free. Information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. We do not accept responsibility for any errors or omissions in this message and/or attachment that arise as a result of transmission. You should carry out your own virus checks before opening any attachment. Any views or opinions presented are solely those of the author and do not necessarily represent those of NDS.
To protect the environment please do not print this e-mail unless necessary.
NDS Limited Registered office: One Heathrow Boulevard, 286 Bath Road, West Drayton, Middlesex, UB7 0DQ, United Kingdom. A company registered in England and Wales Registered no. 3080780 VAT no. GB 603 8808 40-00
**************************************************************************************
------_=_NextPart_001_01C84112.EA35E815--
1 Reply
|
|
|
Tomcat response time extremely high (minutes)
By Rapthor at Dec 18, 2007, 11:41 pm UTC
Hello, my Tomcat 6.0.13/14 server is responding in a very long time. It does not matter if I try to start the main page of the server or one of my webapps. About 2 minutes for each website. This is not the case, if I test on my local machine with "http://localhost:8080/myapp" (IE or Firefox on a... More...
Hello,
my Tomcat 6.0.13/14 server is responding in a very long time. It does not
matter if I try to start the main page of the server or one of my webapps.
About 2 minutes for each website. This is not the case, if I test on my
local machine with "http://localhost:8080/myapp" (IE or Firefox on a Windows
XP machine).
First I supposed it was something wrong with the installation of Tomcat
6.0.13 so I downloaded the new 14er version. Suddenly everything was
responding like a charm. Even working on a machine in the network was OK
now. But after 1 day the same issue reappeared (response times of about 2
minutes).
I did not change anything in the Tomcat configuration except for server.xml
which is edited by ECLIPSE I suppose:
<Host appBase="webapps" autoDeploy="true" name="localhost"
unpackWARs="true" xmlNamespaceAware="false" xmlValidation="false">
<Context docBase="C:\Programme\tomcat\eclipsewebapps\Asset Register"
path="/ar" reloadable="true" source="org.eclipse.jst.jee.server:Asset
Register"/></Host>
What is wrong? What could be wrong? The machines in the network are in
another subnetwork. My machine is for example IP 10.45.2.35 and the network
machine is on IP 10.45.14.26. Subnet mask 255.255.224.0.
Any ideas?
2 Replies
|
|
|
Duplicate messages?
By Jim Brikman (ybrikman) at Dec 18, 2007, 10:24 pm UTC
------_=_NextPart_001_01C841C4.CE283A56 Content-Type: multipart/alternative; boundary="----_=_NextPart_002_01C841C4.CE283A56" ------_=_NextPart_002_01C841C4.CE283A56 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Overview of the problem: called S https... More...
------_=_NextPart_001_01C841C4.CE283A56
Content-Type: multipart/alternative;
boundary="----_=_NextPart_002_01C841C4.CE283A56"
------_=_NextPart_002_01C841C4.CE283A56
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Overview of the problem:
* We have a client computer named C and a server running Tomcat 5.5.23
called S
* Every now and then, C makes a SINGLE https request to S
* For some reason, the Tomcat access logs on S will sometimes show the
https request TWICE
So, we're trying to figure out why we're seeing duplicate messages. We
ran a packet sniffer (Wireshark) on both C and S and found the
following:
* C definitely only sends the https request ONCE
* S definitely only receives ONE https request
Let me restate that: both packet sniffers show only ONE https message
going across the line, yet Tomcat's access logs show the message twice.
One final thing we noticed while watching the packets going through the
sniffers:
* C sends one https request
* S receives one https request
* The https request appears the first time in the Tomcat access logs
* The connection between C and S is closed using the typical messages
(FIN, ACK, ACK)
* Immediately after the connection closes, we are then seeing some odd,
very small SSL packets going from S to C. We cannot decipher what these
are but they are TINY (def. not https requests).
* C responds with a RESET message to these
* At the exact time these "odd" packets are sent, the second copy of the
https request appears in the Tomcat access logs
Does anyone have a clue what's going on? Is there something in between
the Tomcat access log layer and the packet sniffer layer that could be
duplicating these messages? Could these odd little SSL messages somehow
make Tomcat think it got a second copy of the message?
Thanks,
Jim
Yevgeniy (Jim) Brikman
Software Engineer
Voice Technology Group
[email protected: ybr...@cisco.com]
Phone :978-936-0510
Mobile :617-538-2632
500 Beaver Brook Road
Boxborough, MA 01719
United States
www.cisco.com <http://www.cisco.com/>
------_=_NextPart_002_01C841C4.CE283A56
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.6000.16544" name=GENERATOR></HEAD>
<BODY>
<DIV><SPAN class=009450222-18122007><FONT face=Arial size=2>Overview of the
problem:</FONT></SPAN></DIV>
<DIV><SPAN class=009450222-18122007><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=009450222-18122007><FONT face=Arial size=2>* We have a client
computer named C and a server running Tomcat 5.5.23 called S</FONT></SPAN></DIV>
<DIV><SPAN class=009450222-18122007><FONT face=Arial size=2>* Every now and
then, C makes a SINGLE https request to S</FONT></SPAN></DIV>
<DIV><SPAN class=009450222-18122007><FONT face=Arial size=2>* For some reason,
the Tomcat access logs on S will sometimes show the https request
TWICE</FONT></SPAN></DIV>
<DIV><SPAN class=009450222-18122007><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=009450222-18122007><FONT face=Arial size=2>So, we're trying to
figure out why we're seeing duplicate messages. We ran a packet sniffer
(Wireshark) on both C and S and found the following:</FONT></SPAN></DIV>
<DIV><SPAN class=009450222-18122007><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=009450222-18122007><FONT face=Arial size=2>* C definitely only
sends the https request ONCE</FONT></SPAN></DIV>
<DIV><SPAN class=009450222-18122007><FONT face=Arial size=2>* S definitely only
receives ONE https request</FONT></SPAN></DIV>
<DIV><SPAN class=009450222-18122007><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=009450222-18122007><FONT face=Arial size=2>Let me restate that:
both packet sniffers show only ONE https message going across the line, yet
Tomcat's access logs show the message twice. One final thing we noticed while
watching the packets going through the sniffers:</FONT></SPAN></DIV>
<DIV><SPAN class=009450222-18122007><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=009450222-18122007><FONT face=Arial size=2>* C sends one
https request</FONT></SPAN></DIV>
<DIV><SPAN class=009450222-18122007><FONT face=Arial size=2>* S
receives one https request</FONT></SPAN></DIV>
<DIV><SPAN class=009450222-18122007><FONT face=Arial size=2>* The https request
appears the first time in the Tomcat access logs</FONT></SPAN></DIV>
<DIV><SPAN class=009450222-18122007><FONT face=Arial size=2>* The
connection</FONT></SPAN><SPAN class=009450222-18122007><FONT face=Arial
size=2> between C and S is closed using the typical messages (FIN, ACK,
ACK)</FONT></SPAN></DIV>
<DIV><SPAN class=009450222-18122007><FONT face=Arial size=2>* Immediately after
the connection closes, we are then seeing some odd, very small SSL packets going
from S to C. We cannot decipher what these are but they are TINY (def. not https
requests).</FONT></SPAN></DIV>
<DIV><SPAN class=009450222-18122007><FONT face=Arial size=2>* C responds with a
RESET message to these</FONT></SPAN></DIV>
<DIV><SPAN class=009450222-18122007><FONT face=Arial size=2>* At the exact time
these "odd" packets are sent, the second copy of the https request appears in
the Tomcat access logs</FONT></SPAN></DIV>
<DIV><SPAN class=009450222-18122007><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=009450222-18122007><FONT face=Arial size=2>Does anyone have a
clue what's going on? Is there something in between the Tomcat access log layer
and the packet sniffer layer that could be duplicating these messages? Could
these odd little SSL messages somehow make Tomcat think it got a second copy of
the message?</FONT></SPAN></DIV>
<DIV><SPAN class=009450222-18122007><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=009450222-18122007><FONT face=Arial
size=2>Thanks,</FONT></SPAN></DIV>
<DIV><SPAN class=009450222-18122007><FONT face=Arial
size=2>Jim</FONT></SPAN></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV align=left>
<TABLE cellSpacing=0 cellPadding=0 width=543 align=left border=0>
<TBODY>
<TR>
<TD>
<TABLE
style="BACKGROUND: url(http://www.cisco.com/global/EMEA/brand/signature/corporate/bg4.jpg) no-repeat 50% top"
cellSpacing=0 cellPadding=0 width=543 border=0>
<TBODY>
<TR>
<TD colSpan=3><IMG height=68
src="http://www.cisco.com/global/EMEA/brand/signature/default/spacer.gif"
width=200></TD></TR>
<TR>
<TD style="PADDING-LEFT: 24px; PADDING-BOTTOM: 15px" vAlign=top noWrap
align=left>
<P
style="FONT-WEIGHT: normal; FONT-SIZE: 11px; COLOR: #666666; FONT-FAMILY: Arial, Helvetica, sans-serif"><STRONG>Yevgeniy
(Jim) Brikman</STRONG><BR><STRONG>Software
Engineer</STRONG><BR><STRONG><STRONG>Voice Technology
Group</STRONG><BR></STRONG><BR><A style="COLOR: #666666"
href="mailto:ybrikman@cisco.com">ybrikman@cisco.com</A><BR>Phone
:<STRONG>978-936-0510</STRONG><BR>Mobile
:<STRONG>617-538-2632</STRONG><BR></P></TD>
<TD style="PADDING-LEFT: 20px; PADDING-BOTTOM: 10px" vAlign=top
noWrap>
<P
style="FONT-WEIGHT: normal; FONT-SIZE: 11px; COLOR: #666666; FONT-FAMILY: Arial, Helvetica, sans-serif"><STRONG></STRONG><BR>500
Beaver Brook Road<BR>Boxborough, MA 01719<BR>United States<BR><A
style="COLOR: #666666"
href="http://www.cisco.com/">www.cisco.com</A></P></TD>
<TD width=200> </TD></TR></TBODY></TABLE>
<TABLE cellSpacing=0 cellPadding=0 width="100%" border=0>
<TBODY>
<TR>
<TD><IMG height=1
src="http://www.cisco.com/global/EMEA/brand/signature/default/footerHead.gif"
width=543></TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE></DIV><BR
clear=all>
<DIV> </DIV></BODY></HTML>
------_=_NextPart_002_01C841C4.CE283A56--
------_=_NextPart_001_01C841C4.CE283A56--
0 Replies
|
|
|
Tomcat request response time and OSI model...
By Tony Anecito at Dec 18, 2007, 8:49 pm UTC
Hi Tomcat Team, I am wondering what the request response time represents in the tomcat logs. Is it the time between the first and last network packets including the packets? So in the OSI model is it the time measured at layer 1? If layer 1 then the time could be the latency time + Tomcat container... More...
Hi Tomcat Team,
I am wondering what the request response time
represents in the tomcat logs. Is it the time between
the first and last network packets including the
packets? So in the OSI model is it the time measured
at layer 1?
If layer 1 then the time could be the latency time +
Tomcat container and app code execute time?
Thanks,
-Tony
____________________________________________________________________________________
Be a better friend, newshound, and
know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
---------------------------------------------------------------------
To start a new topic, e-mail: [email protected: u...@tomcat.apache.org]
To unsubscribe, e-mail: [email protected: users-unsubs...@tomcat.apache.org]
For additional commands, e-mail: [email protected: users...@tomcat.apache.org]
0 Replies
|
|
|
Trying to Map a web application to "/" in tomcat 5.5
By Aakriti at Dec 18, 2007, 7:14 pm UTC
Hi, We are trying to Map the URl of our tomcat instance such that the webapp "appadmin" maps to "/" The tomcat version being used is tomcat 5.5.17 We are trying to do this by specifying the following in server.xml <Service name="Catalina"> <Connector port="6293" /> <!-- This is here for... More...
Hi,
We are trying to Map the URl of our tomcat instance such that the webapp
"appadmin" maps to "/"
The tomcat version being used is tomcat 5.5.17
We are trying to do this by specifying the following in server.xml
<Service name="Catalina">
<Connector port="6293" />
<!-- This is here for compatibility only, not required -->
<Connector port="8017" protocol="AJP/1.3" />
<Engine name="Catalina" defaultHost="localhost">
<!-- <Realm className="org.apache.catalina.realm.UserDatabaseRealm"
resourceName="UserDatabase" /> crossContext="false" -->
<Host name="localhost" appBase="webapps" unpackWars="true"
autoDeploy="true">
<Valve className="com.cisco.manager.impl.ManagerValve" />
<Context docBase="/appadmin" path="/appadmin" reloadable="true"
wrapperClass="org.apache.catalina.core.StandardWrapper">
<Valve className="com.cisco.uccx.UccxAuthenticator"
characterEncoding="UTF-8"/>
<Realm className="com.cisco.uccx.UccxRealm"/>
</Context>
</Host>
</Engine>
</Service>
But when we try to navigate to a servlet mapped to the URL pattern
/appadmin/Main (specified in web.xml), we are not able to reach it using
http://hostname:6293/appadmin/Main. We still have to use
http://hostname:6293/appadmin/appadmin/Main
The same use to work in Tomcat 3.2. We are in the process of migrating to
tomcat 5.5.
Also we are using form based authentication where the url pattern is
specified as /appadmin/* as most of our URL patterns start with /appadmin/..
in web.xml
Any idea on what we are doing wrong?
Regards
Aakriti
9 Replies
|
|
|
Simple Howto: Follow up
By AbelMacAdam at Dec 18, 2007, 6:28 pm UTC
------=_Part_8770_1432541.1197880539176 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline Hi, I saw a mail requesting "simple instructions on gettting Tomcat and Apache working together." The answer is printed out and ready to be processed. But... More...
------=_Part_8770_1432541.1197880539176
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Hi,
I saw a mail requesting "simple instructions on gettting Tomcat and Apache
working together." The answer is printed out and ready to be processed. But
I have some follow ups on that mail:
- Why should one connect Tomcat to Apache?
- Should you connect Tomcat 6.0.14 to Apache 2.2.6? (Or is that done
automagically, as I seem not to find the appropriate mod_jk for these
versions)
TIA,
Abel
------=_Part_8770_1432541.1197880539176--
2 Replies
|
|
|
apache and tomcat
By Richard Dunne at Dec 18, 2007, 5:18 pm UTC
Content-Type: text/plain; charset=us-ascii Can someone please explain the fundamental difference between Httpd and Tomcat? I installed Tomcat 6, but it doesn't seem to be liking PHP a whole lot. Do I need to un-install Tomcat 6 and install Apache 2 on its own? Just a bit confused as I am trying to... More...
--0-84644408-1197980884=:72740
Content-Type: text/plain; charset=us-ascii
Can someone please explain the fundamental difference between Httpd and Tomcat? I installed Tomcat 6, but it doesn't seem to be liking PHP a whole lot. Do I need to un-install Tomcat 6 and install Apache 2 on its own? Just a bit confused as I am trying to get Apache and PHP5 working together.
Any words of wisdom?
Thanks,
Richard
____________________________________________________________________________________
Be a better friend, newshound, and
know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
--0-84644408-1197980884=:72740--
21 Replies
|
|
|
JSP to HTML
By Luo Yong at Dec 18, 2007, 4:43 pm UTC
Hi all. Is there any way to produce HTML from a JSP file? I'm wrting a servlet which can get the HTML result of a JSP file in the same container. Is there any class or method can do this? Thanks. Sorry for that my English is poor. To start a new topic, e-mail: users@tomcat.apache.org To... More...
Hi all.
Is there any way to produce HTML from a JSP file?
I'm wrting a servlet which can get the HTML result of a JSP file in
the same container.
Is there any class or method can do this?
Thanks.
Sorry for that my English is poor.
---------------------------------------------------------------------
To start a new topic, e-mail: [email protected: u...@tomcat.apache.org]
To unsubscribe, e-mail: [email protected: users-unsubs...@tomcat.apache.org]
For additional commands, e-mail: [email protected: users...@tomcat.apache.org]
5 Replies
|
|
|
[OT] Where to store classpath resources outside of WAR
By lightbulb432 at Dec 18, 2007, 3:57 pm UTC
When deploying a WAR file whose code uses information stored in classpath configuration resources, where should you store these configuration files if outside of the WAR file? If you want to keep these configuration files outside of the WAR file to make for easier deployment in multiple... More...
When deploying a WAR file whose code uses information stored in classpath
configuration resources, where should you store these configuration files if
outside of the WAR file?
If you want to keep these configuration files outside of the WAR file to
make for easier deployment in multiple environments, isn't the only other
classpath available to Tomcat within its own lib folder? And in that case,
the configuration file would be available in all contexts. So where should
such a file be stored (i.e. available to the webapp as a resource but not
available to all contexts)?
Thanks.
0 Replies
|
|
|
Project Deployment Questions
By Richard Reyes at Dec 18, 2007, 2:54 pm UTC
Hi All, We have created this web application where users can upload images and display it selectively on the other parts of the system. For performance reasons we have saved the said images into the filesystem ( e. g. $CATALINA_HOME/webapps/ROOT/images/uploadedimages/bird01.jpg). At this point the... More...
Hi All,
We have created this web application where users can upload images and
display it selectively on the other parts of the system. For performance
reasons we have saved the said images into the filesystem ( e. g.
$CATALINA_HOME/webapps/ROOT/images/uploadedimages/bird01.jpg). At this
point the said image can easily be displayed anywhere in the site as
long as you have the filename which we have persisted into a DB.
Now we have come to the point that we need to deploy the web application
and the idea is to create multiple servers ( multiple tomcats ) pointing
to the same db server and implementing dns round-robin for load
balancing. My problem would be if the user used server a to upload an
image the same image cannot be accessible from the other 2 tomcat servers.
Hoping that someone here have undergone same scenario or maybe someone
might able to point me to a right direction to fix this.
Thanks in advance.
Richard
---------------------------------------------------------------------
To start a new topic, e-mail: [email protected: u...@tomcat.apache.org]
To unsubscribe, e-mail: [email protected: users-unsubs...@tomcat.apache.org]
For additional commands, e-mail: [email protected: users...@tomcat.apache.org]
4 Replies
|
|
|
Configuring mod_jk?
By AbelMacAdam at Dec 18, 2007, 2:49 pm UTC
Hi, Yesterday I tried to integrate Tomcat (6.0.14) in my Apache (2.2.6). I saw a document about how to do it, but had not have the time to test it (really). But the appache_error.log states: default C:/wamp/bin/apache/apache2.2.6/logs/mod_jk.log My httpd.conf contains the following entries:... More...
Hi,
Yesterday I tried to integrate Tomcat (6.0.14) in my Apache (2.2.6). I saw a
document about how to do it, but had not have the time to test it (really).
But the appache_error.log states:
[Tue Dec 18 08:54:35 2007] [warn] No JkLogFile defined in httpd.conf. Using
default C:/wamp/bin/apache/apache2.2.6/logs/mod_jk.log
My httpd.conf contains the following entries:
LoadModule jk_module modules/mod_jk.so
AddModule mod_jk.c
JkWorkersFile C:/Program Files/Apache Software Foundation/Tomcat
6.0/conf/workers.properties
JkLogFile C:/wamp/logs/mod_jk.log
JkLogLevel info
JkLogStampFormat "[%a %b %d %H:%M:%S %Y] "
It is very basic. But it contains an entry for JkLogFile, which is not used
by Apache. How come?
Abel
--
View this message in context: http://www.nabble.com/Configuring-mod_jk--tp14384532p14384532.html
Sent from the Tomcat - User mailing list archive at Nabble.com.
---------------------------------------------------------------------
To start a new topic, e-mail: [email protected: u...@tomcat.apache.org]
To unsubscribe, e-mail: [email protected: users-unsubs...@tomcat.apache.org]
For additional commands, e-mail: users-help@tomcat.apache.org
5 Replies
|
|
|
Quality check mod_jk 1.2.26-dev
By Rainer Jung at Dec 18, 2007, 2:46 pm UTC
Hi all, The next version of mod_jk is approaching its release. A code snapshot http://people.apache.org/~rjung/mod_jk-dev/ It is in the same format as a release download, so easy to build. Under the same URL you can find the updated documentation. It would be nice, if we could get some testing... More...
Hi all,
The next version of mod_jk is approaching its release. A code snapshot
(revision 605168) is available at:
http://people.apache.org/~rjung/mod_jk-dev/
It is in the same format as a release download, so easy to build.
Under the same URL you can find the updated documentation.
It would be nice, if we could get some testing feedback from the
community. Feel free to post any observations.
Depending on your feedback we plan to tag the release at the end of the
week.
The most important changes are:
Features/Improvements
---------------------
- allow '*' for the worker name in exclusion rules
(resp. JkUnMount) which will override all workers
- add new value "All" for JkMountCopy httpd directive
- enhance URI to worker map listing in status worker for Apache httpd.
We now list maps for all virtual servers and not only the one,
in which JKStatus itself was called.
- enhance URI to worker map listing.
Update stale uriworkermap.properties immediately.
- remove trace logging from compiled code via new --disable-trace
configure switch
- maintain idle connections in decreasing (LRU) slot order
- create JK_WORKER_ROUTE and JK_REQUEST_DURATION notes for httpd
access log even if no JkRequestLogFormat is set
- cleanup init and destroy of server configuration for httpd
- remove global configuration items from per server configuration
- remove unused attributes secret_key and automount/JkAutoMount
- cleanup of jk_uri_worker_map
- some refactorings of jk_connect.c, jk_ajp_common.c, jk_lb_worker.c
Fixes
-----
- BZ 43229: Load balancer does not do fail over after reply timeouts.
- BZ 42038: Correct overlay of mounts and unmounts for IIS
- BZ 42003: Need to increase the maximum buffer size for HTTP
header from 16k to 64k.
- BZ 43516: Memory leak for Apache httpd module of size 8KB
for every virtual host without JK directive after each restart
- BZ 43873: Fix small memory leak occuring during httpd restart
- BZ 43647: Content-Type changes unexpectedly from text/html to
text/pla (ingnore flush packets before we received the
response headers)
- fixed crash during startup when using worker configuration
inheritance (attribute "reference") and log level debug
- match header names exactly against pre defined constants
- repair detailed Apache httpd version display in jk status worker
- repair broken apxs auto-detection in configure
- correct parameter validation of JkStatusUpdateTask (jkstatus ant task)
Docs
----
- Small additions to JkShmFile documentation
- BZ 43684: Replace JkMountFile by JkMountFileReload in
uriworkermap.properties docs
The full change log is available under:
http://people.apache.org/~rjung/mod_jk-dev/docs/miscellaneous/changelog.html
Thanks for your valuable time!
Regards,
Rainer
---------------------------------------------------------------------
To start a new topic, e-mail: [email protected: u...@tomcat.apache.org]
To unsubscribe, e-mail: [email protected: users-unsubs...@tomcat.apache.org]
For additional commands, e-mail: [email protected: users...@tomcat.apache.org]
0 Replies
|
|
|
Tomcat Process Memory Leak?
By Bill Clarke-Fields at Dec 18, 2007, 11:01 am UTC
Hi All, I am looking for some help. We are running into what appears to be a memory leak situation. The Java heap usage looks fine, but the overall Tomcat process memory usage continuously goes up and up, until it reaches the Windows 2GB per process limit, at which point it crashes. Using the... More...
Hi All,
I am looking for some help. We are running into what appears to be a memory
leak situation. The Java heap usage looks fine, but the overall Tomcat
process memory usage continuously goes up and up, until it reaches the
Windows 2GB per process limit, at which point it crashes.
Using the Windows Performance Monitor, I am tracking the "Virtual Bytes"
value of the Tomcat process. Upon Tomcat startup, it is at around 1.1GB.
It then increases over time, sometimes fluctuating up and down a small
degree, but the general trend is always upwards. Sometimes it jumps 40MB or
more at a time. Eventually it hits the 2GB limit, and then the application
stops responding and we get out of memory errors: "unable to create new
native thread". Sometimes this takes 20 hours, sometimes it only takes 8
hours.
We are running a third-party app on Tomcat 5.0.28 with Java 1.4.2_11. The
machine is running Windows Server 2003 and has 2.5GB physical memory. We
have the heap size set to 928MB.
We have plans to upgrade to Tomcat 5.5.16 and Java 1.5_06 (which is also
supported by the application vendor), but this will take some time, since we
are in a validated environment.
Any ideas about what could be causing this? I realize it could be an
application-related leak, but in that case wouldn't we see it running out of
heap?
Thanks!
-Bill
--
View this message in context: http://www.nabble.com/Tomcat-Process-Memory-Leak--tp14337929p14337929.html
Sent from the Tomcat - User mailing list archive at Nabble.com.
---------------------------------------------------------------------
To start a new topic, e-mail: [email protected: u...@tomcat.apache.org]
To unsubscribe, e-mail: [email protected: users-unsubs...@tomcat.apache.org]
For additional commands, e-mail: users-help@tomcat.apache.org
5 Replies
|
|
|
Problem with locating Datasource using servlet as ROOT in tomcat 6
By Alan Chaney at Dec 18, 2007, 01:32 am UTC
Hi I am using Eclipse 3.3, tomcat 6.0.14, linux and Java 1.5 I have a web app which uses a JNDI data source. I wrote a very simple test servlet to access the data source and display some values from the database. First time around I used a local application context in /META-INF/context.xml. This... More...
Hi
I am using Eclipse 3.3, tomcat 6.0.14, linux and Java 1.5
I have a web app which uses a JNDI data source. I wrote a very simple
test servlet to access the data source and display some values from the
database. First time around I used a local application context in
/META-INF/context.xml. This worked fine. I then moved the Resource
definition to a GlobalNamingResource in server.xml and that worked fine
with a ResourceRef in context.xml.
All well and good. I then renamed the app to ROOT with a path '/'.
The servlet still responds and renders text correctly at
http://localhost:8080/ but I get a javax.naming.NameNotFoundException
regardless of whether the resource definition in context.xml or
GlobalNamingResource in server.xml and referenced in context.xml.
Needless to say the database content is no longer displayed.
As a further test I exported the the war files as ROOT.war and deployed
the war to a tomcat instance. It deployed OK but I still got the naming
exception. I then deployed the original (non-ROOT) test app to the same
server and that worked.
It seems that for some reason a ROOT app cannot access a JNDI
DataSource. Has anyone seen anything like this or has any explanation
The exception report starts;
> Failed to create datasource
> javax.naming.NameNotFoundException: Name wrshowdbLink is not bound in this Context
> at org.apache.naming.NamingContext.lookup(NamingContext.java:770)
> at org.apache.naming.NamingContext.lookup(NamingContext.java:140)
> at org.apache.naming.NamingContext.lookup(NamingContext.java:781)
The context.xml is displayed below:
> <?xml version="1.0" encoding="UTF-8"?>
> <Context >
> <ResourceLink name="wrshowdbLink"
> global="jdbc/wrshowdb"
> type="javax.sql.DataSource"
>
> />
> </Context>
The web.xml for the ROOT app is:
> <?xml version="1.0" encoding="UTF-8"?>
> <web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://java.sun.com/xml/ns/javaee" xmlns:web="http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" id="WebApp_ID" version="2.5">
> <display-name>ROOT</display-name>
> <welcome-file-list>
> <welcome-file>index.html</welcome-file>
> <welcome-file>index.htm</welcome-file>
> <welcome-file>index.jsp</welcome-file>
> <welcome-file>default.html</welcome-file>
> <welcome-file>default.htm</welcome-file>
> <welcome-file>default.jsp</welcome-file>
> </welcome-file-list>
> <servlet>
> <description>Test of using root jndi</description>
> <display-name>RootJndi</display-name>
> <servlet-name>RootJndi</servlet-name>
> <servlet-class>com.writingshow.test.RootJndi</servlet-class>
> </servlet>
> <servlet-mapping>
> <servlet-name>RootJndi</servlet-name>
> <url-pattern>/</url-pattern>
> </servlet-mapping>
> </web-app>
and the GlobalResourceDef is:
> <Resource auth="Container"
> driverClassName="org.postgresql.Driver"
> maxActive="20"
> maxIdle="10"
> maxWait="3000"
> name="jdbc/wrshowdb"
> password="xxxxxxx"
> removeAbandoned="true"
> type="javax.sql.DataSource"
> url="jdbc:postgresql://127.0.0.1:5432/wrshowdb"
> username="wrshow"/>
Regards
Alan Chaney
---------------------------------------------------------------------
To start a new topic, e-mail: [email protected: u...@tomcat.apache.org]
To unsubscribe, e-mail: [email protected: users-unsubs...@tomcat.apache.org]
For additional commands, e-mail: [email protected: users...@tomcat.apache.org]
2 Replies
|
|
|
Tomcat and IIS losing their link
By Travis Haagen at Dec 18, 2007, 01:31 am UTC
------=_NextPart_000_0080_01C83DC3.CDC1B400 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hello, I've got IIS 6.0 linked with Tomcat 5.5.25 (with JDK 1.5.0_14-b03 and = AJP dll) via the ISAPI connector (JK 1.2.25) on Windows 2003 Server, and = during... More...
------=_NextPart_000_0080_01C83DC3.CDC1B400
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Hello,
I've got IIS 6.0 linked with Tomcat 5.5.25 (with JDK 1.5.0_14-b03 and AJP dll) via the ISAPI connector (JK 1.2.25) on Windows 2003 Server, and during high traffic periods, the connection between IIS and Tomcat is being severed. This has been occurring in the mid-afternoon every day since this server went live and to get it running again, I've had to restart Tomcat. The peak connections to IIS during one of the days was just under 100, so this isn't really all that high of traffic.
The isapi_redirect.log isn't much help. It has only been logging errors after the connection to Tomcat has been broken. Tomcat itself hasn't logged anything of relevance and I don't actually think that Tomcat is affected when the link is broken, but as I mentioned earlier, I have to restart Tomcat to get it to reconnect with IIS.
Most of my configuration settings came from this website:
http://wiki.jboss.org/wiki/Wiki.jsp?page=OptimalMod_jk1.2Configuration
Here are the relevant workers.properties settings:
worker.ajp13w.type=ajp13
worker.ajp13w.host=localhost
worker.ajp13w.port=8009
worker.ajp13w.lbfactor=1
worker.ajp13w.connect_timeout=10000
worker.ajp13w.prepost_timeout=10000
worker.ajp13w.socket_timeout=10
worker.ajp13w.connection_pool_timeout=600
worker.ajp13w.connection_pool_size=350
Here are the relevant server.xml settings:
<Connector port="8443" maxHttpHeaderSize="8192"
maxThreads="400" minSpareThreads="50" maxSpareThreads="150"
enableLookups="false" disableUploadTimeout="true"
acceptCount="100" scheme="https" secure="true"
SSLEngine="on" SSLPassword="removed"
SSLCertificateFile="removed"
SSLCertificateKeyFile="removed" />
<Connector port="8009" redirectPort="8444" protocol="AJP/1.3"
connectionTimeout="600000" enableLookups="false"
maxThreads="400" minSpareThreads="50" maxSpareThreads="150" />
I just configured IIS 6.0 to run in IIS 5.0 isolation mode and that's the end of my ideas for fixing this issue. The only other ISAPI filters that I'm running are ASP.NET_1.1.4322.2307 and ISAPI_Rewrite3 (for URL rewriting). IIS web site connections is set to 'unlimited', connection timeout is 120 seconds, HTTP Keep-Alives is enabled. Until the crazy thing stops working, everything is fine.
Any help will be greatly appreciated.
Thanks,
Travis
------=_NextPart_000_0080_01C83DC3.CDC1B400--
5 Replies
|
|
|
Tomcat in conflict with Virtual Host directive in Apache?
By Ljuba Veselinova at Dec 18, 2007, 01:21 am UTC
Hi, I have finally gotten Tomcat 5.5.17 to work as a windows service on a windows xp machine; it communicates with Apache 2.0.58 but only if if the ServerName in mod_jk.conf, httpd.conf and in workers.properties is the same as the computer name listed in system properties. Morever, Tomcat appears... More...
Hi,
I have finally gotten Tomcat 5.5.17 to work as a windows service on a
windows xp machine; it communicates with Apache 2.0.58 but only if if
the ServerName in mod_jk.conf, httpd.conf and in workers.properties is
the same as the computer name listed in system properties. Morever,
Tomcat appears not to like the directive VirtuaHost to be on in
httpd.conf.
This is however, problematic because I am sharing the server with
another person and his stuff is programmed to work with with an
different (alias) computer name and also with another root path. We
tried to put both the different name and the diffferent root path in
the VirtualHost directive in httpd.conf but then all communication
between Tomcat and Apache appears to be gone, that is the
servlet-examples/servlet/HelloWorldExample is not found if called by
any machine name (both the alias and the system name); it still works
if called by localhost:8080. If we turn off the VirtualHost directive,
then Tomcat and Apache communicate with each other; but when
VirtualHost is turned off, Rickard's stuff does not work.
Any suggestions to documentation or ways to solve this will be greatly
appreciated.
Thanks,
Ljuba
--
===========================================================================
Ljuba Veselinova
Dept of Linguistics Email: [email protected: l...@ling.su.se]
Stockholm University Phone: +46-8-16 2332
106 91 Stockholm Fax : +46-8-15 5389
Sweden URL : http://www.ling.su.se/staff/ljuba/
"We learn by going where we want to go."
Julia Cameron
============================================================================
---------------------------------------------------------------------
To start a new topic, e-mail: [email protected: u...@tomcat.apache.org]
To unsubscribe, e-mail: [email protected: users-unsubs...@tomcat.apache.org]
For additional commands, e-mail: users-help@tomcat.apache.org1 Reply
|
|
|
How to use MembershipListener
By Asha Prabhakaran at Dec 18, 2007, 01:18 am UTC
Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Hello, I have implemented the MembershipListener in my web application in order to receive notification on when a node is added/removed from the cluster. I created a GroupChannel and started it with the ChannelDEFAULT... More...
--0-306940674-1197940681=:4468
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Hello,
I have implemented the MembershipListener in my web application in order to receive notification on when a node is added/removed from the cluster.
I created a GroupChannel and started it with the ChannelDEFAULT option.
The problem I have is that when a node is added/removed, the memberAdded()/memberDisappeared() method is called twice.
Please let me know how I can solve this problem.
Thanks
---------------------------------
Looking for last minute shopping deals? Find them fast with Yahoo! Search.
--0-306940674-1197940681=:4468--
0 Replies
|
|
 | |
