tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Svante Kumlien <>
Subject Re: Multipart over ajp btwn apache-tomcat fails sometimes...
Date Mon, 16 Apr 2012 08:15:04 GMT
Hi, and thanks for the reponse Chris!

Regarding httpd or not, we're in the process of moving stuff from a
WebSphere 6.1 to Tomcat 7.x but since we don't have the money to move all
apps at once we run both servers behind a httpd, moving one app at a time.

The pcap-files contains the traffic between httpd and tomcat.

The http-headers are not particularly large (and I guess they would be
rejected all of the times if they were?).
Hmm, on second thought, the headers contain a rather 'large' LtpaToken2
header, don't know if it's considered too large or not though.
http headers:

No ssl, the httpd is ssl-enabled for other url:s but this particular url is
using plain http.

The ajp connector on the tomcat side is basic:
<!-- Define an AJP 1.3 Connector on port 8009 -->
<Connector port="8009" protocol="AJP/1.3" redirectPort="8443" />

The context config looks like:
<Context docBase="xxx" path="/xxx" reloadable="true"
<Valve className="org.apache.catalina.valves.AccessLogValve"
               prefix="xxx_access_log." suffix=".txt"
               pattern="%h %l %u %t &quot;%r&quot; %s %b" />
The "allowCasualMultipartParsing" was something I added for testing but I
couldn't see any change in behaviour.

I will try to convince the guys running the servers to deploy a new version
of the app (with extended logging), guess I have to buy them a couple of
beers first though...

br /Svante

Den 13 april 2012 22:40 skrev Christopher Schultz <>:

> Hash: SHA1
> Svante,
> On 4/13/12 5:16 AM, Svante Kumlien wrote:
> > I have an Apache acting as reverse proxy for a Tomcat over ajp.
> Standard stupid question: are you sure you need Apache httpd in the mix?

> > (Gaahhh, the stack trace is swallowed, I only have the message
> > string! The exception is thrown from  FileUploadBase.parseRequest
> > :-( )
> Is there any way to get the full stack trace? Can you re-deploy with
> some modified code to get it?
> > I attach two pcap-files with a ok-case and a fail-case.
> The mailing list has stripped your attachments. Try to copy/paste text
> into a re-post or post a link to your file(s) instead.
> > The difference I can see is that in the fail-case tomcat starts to
> > send the response before the first Body chunk is sent by Apache.
> Can you sniff the traffic between httpd and Tomcat?
> Do you have large headers or anything like that? The AJP message could
> be rejected because the headers don't fit into a single AJP packet --
> but that shouldn't trigger a failure in FileUploadBase.
> Is there HTTPS in the mix anywhere? Client certs can make the headers
> large.
> > If we switch the proxyPass to use http everything works 100% of the
> > time (which makes me think I have a misconfig AJP connector
> > somewhere...).
> Can you post the rest of your AJP configuration? For instance, what
> does your <Connector> look like on the Tomcat side?
> - -chris
> Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
> Comment: GPGTools -
> Comment: Using GnuPG with Mozilla -
> eusAoLlVdrUsETpscxjlCaG04dO4/12e
> =UpxR
> ---------------------------------------------------------------------
> To unsubscribe, e-mail:
> For additional commands, e-mail:

  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message