Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: neutral (athena.apache.org: local policy)
Message-ID: <499C5740.3090807@christopherschultz.net>
Date: Wed, 18 Feb 2009 13:45:20 -0500
From: Christopher Schultz <chris@christopherschultz.net>
User-Agent: Thunderbird 2.0.0.19 (Windows/20081209)
MIME-Version: 1.0
To: Tomcat Users List <users@tomcat.apache.org>
Subject: Re: Apache/mod_jk serves random files from tomcat
References: <18385568.post@talk.nabble.com> <21812944.post@talk.nabble.com>
 <21861245.post@talk.nabble.com> <21861548.post@talk.nabble.com>
 <46502154-2A14-42DD-9AA0-9092AFA96D76@r-u-on.com>
 <49923A2D.6080906@christopherschultz.net>
 <E1601CD1-5962-4137-86C2-A79A457B4B20@r-u-on.com>
 <4992D658.1010303@christopherschultz.net>
 <E0BEB65E-5640-4278-A492-AF85180C15CD@r-u-on.com>
 <4994A65B.5000808@christopherschultz.net>
 <ae1447a90902161538x199b3b17mca079bee25ab0a4b@mail.gmail.com>
 <1C765A12-92F8-422C-91FA-ECEF3153EF49@r-u-on.com>
In-Reply-To: <1C765A12-92F8-422C-91FA-ECEF3153EF49@r-u-on.com>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Yuval,

On 2/17/2009 1:48 PM, Yuval Perlov wrote:
> Is APR part of tomcat or apache [httpd]?

APR is the Apache Portable Runtime. Technically, it's its own beast and
is used by both httpd and Tomcat (optionally).

> If I am running on linux and have no
> .so files in my tomcat directory does that mean I have no APR installed?

The Tomcat directory isn't the only place .so files could be located.
Anywhere in the java.library.path is possible.

If you have an AprLifecycleListener configured in your server.xml, then
you are attempting to use APR. If you get a message in catalina.out on
startup that says something like "APR Configured" or "APR library not
found" then you have your answer.

> On a more positive note, we switched to proxy_http (after making the
> necessary code changes) and everything works now - no more mixed content.
> 
> Of course we lost a lot of necessary functionality:
> 1. request.isSecure() doesn't work

You can always use https :)

> 2. we don't know the server name we are hit with (since it is "hard
> coded" in httpd.conf)

This should be an option in mod_proxy. Is it not? ProxyPreserveHost?

> 3. we have no access to the source IP (for geo location)

Why not use mod_headers to convert the original IP address into an
X-Original-IP header. Better yet, use the X-Forwarded-For header that
should be set by default by mod_proxy.

> BTW - Am I the only one that is seriously worried that this kind of
> problem can even exist on a platform of this maturity?

Which problem? The "swapping-responses" problem or everything else
you've outlined about your inadequate configuration?

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkmcV0AACgkQ9CaO5/Lv0PBw4wCgtvTgf5Jy6z30u9Z3z/8M9ViN
stwAn1urDcjts1xtPvSMiSuL00jEMYPV
=/Ge+
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org