tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Jeffrey Janner <Jeffrey.Jan...@PolyDyne.com>
Subject RE: Windows Path Not Found for urandom
Date Thu, 30 Aug 2012 14:19:09 GMT
> -----Original Message-----
> From: Christopher Schultz [mailto:chris@christopherschultz.net]
> Sent: Wednesday, August 29, 2012 3:58 PM
> To: Tomcat Users List
> Subject: Re: Windows Path Not Found for urandom
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Jeff,
> 
> On 8/29/12 4:04 PM, Jeffrey Janner wrote:
> > This was on a test of what would happen if the C:\dev\urandom did
> > exist on a Windows system, for some strange reason. It didn't seem to
> > do anything operationally by being there and empty.
> 
> Right: if the file doesn't work out, Tomcat falls-back to
> java.security.SecureRandom (or whatever you have configured for
> randomClass in your <Manager>).
> 
> > But it did find the source of the initial 6 PNFs being reported by
> the
> > Process Monitor tool.
> 
> Did you mean FileNotFoundExceptions? I'm not sure what a PNF is.
>
[Jeff Janner] PNF == Path Not Found. Using Sysinternals Process Monitor, it logs these to
the screen, but Tomcat never logs it, since it recovers and uses SecureRandom instead.
BTW: if you deploy on Windows, I highly recommend running this against your app, it can be
an eye-opener.  You have to add 2 filter settings, one to show Tomcat only messages, and another
to ignore SUCCESS messages.
 
> > Why 6?  Beats me, I haven't studied the code.
> 
> How many webapps do you have deployed? You'll get a separate Manager
> instance for each deployed webapp (and therefore an error for each
> one).
> 
> > My big question now is what's in my company's code that generates the
> > PNF during login verification/error reporting. Leaning toward
> > something to do with generating a new sessionid, but I've not had the
> > chance to look (or get a programmer to check it).
> 
> If your random source "runs out" of data -- which is what happens when
> the file is there but has zero bytes, you'll get a single error per
> deployed webapp and then the manager(s) will switch-over to
> java.secure.SecureRandom.
> 
> - -chris
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
> Comment: GPGTools - http://gpgtools.org
> Comment: Using GnuPG with Mozilla - http://www.enigmail.net/
> 
> iEYEARECAAYFAlA+gnAACgkQ9CaO5/Lv0PBylACfUljXDzs2WgsEZ/Vj229+431P
> DCoAn3ACEa+UfHXtxKdcDgta6jMp4qe/
> =KlqJ
> -----END PGP SIGNATURE-----
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
> 

Mime
View raw message