users@tomcat.apache.org Archives

Re: mod_proxy tomcat6 question

2009-12-08T23:58:51Z

Thanks Chris. I was beginning to realize that myself. It hit me
yesterday that session management (though I have not started to deal
with it yet) could cause me problems if the apache mount and the
webapp do not match. Also having application code that is apache
directory aware is not at all clean.

- Vas

>>
>> Obviously the URL needs to be changed �/A/jsp/hi.jsp to
>> /test/jsp/hi.jsp and I believe the mo_proxy can be configured to do
>> this.
>
> No, you don't want this. When doing a "forward", everything is internal
> to Tomcat, so the URL should be what Tomcat expects (that is,
> "/A/jsp/hi.jsp"). If you were redirecting, you'd need to use
> /test/jsp/hi.jsp.
>
>> But I am not able to find it. Can someone point me to the right
>> direction?
>
> As Andre (essentially) suggests, maybe you ought to mount /A on /A
> instead of /test.
>
> - -chris
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.10 (MingW32)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAksezY8ACgkQ9CaO5/Lv0PAu5wCfV1gn4U9Enj+9veQKM+Sqptd5
> qdUAnjM8Ax3Bqey0/j6GFe/hbUJaSsxB
> =L4zf
> -----END PGP SIGNATURE-----
>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

RE: tomcat, uPortal, error messages and confusion

2009-12-08T23:41:15Z

> From: Egeste [mailto:egeste@egeste.net]
> Subject: Re: tomcat, uPortal, error messages and confusion
> 
> I'm unsure whether it's an "ubuntu mangled" version - I installed
> tomcat5.5 via apt-get.

It's mangled, meaning that files may not be located where they are in the standard Tomcat
distribution, and some configuration settings may have been changed from the standard.

> Here is my server.xml:
> http://pastebin.ca/1707274

That looks o.k.

> webapps/uPortal/META-INF/context.xml:
> 
>      className="org.apache.catalina.session.StandardManager"/>
> 

The above is fine.  What else do you have under the webapps directory?  In particular, is
there a default (ROOT) webapp deployed?  I seem to recall seeing blank pages returned when
no default webapp is available.

> web.xml
> http://pastebin.ca/1707286

That's pretty much unreadable, at least by humans my age.

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus
for use only by the intended recipient. If you received this in error, please contact the
sender and delete the e-mail and its attachments from all computers.


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

RE: JSSE question

2009-12-08T23:31:53Z

Thanks. I will try it.
Vadim. 

-----Original Message-----
From: Christopher Schultz [mailto:chris@christopherschultz.net] 
Sent: Tuesday, December 08, 2009 1:57 PM
To: Tomcat Users List
Cc: Vadim Letitchevski
Subject: Re: JSSE question

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Vadim,

On 12/7/2009 1:25 PM, Vadim Letitchevski wrote:
> openssl pkcs12 -export -in /etc/pki/tls/certs/localhost.crt -inkey 
> /etc/pki/tls/private/localhost.key -out mycert.p12 -name tomcat 
> -CAfile /etc/pki/tls/cacert.pem -caname root -chain
> 
> I have used the password changeit.

Note that you have created certificate in PKCS12 format, not a keystore.
You now need to take the next step in the SSL HOWTO which is to use the Java 'keytool' utility
to create a keystore.

> Next I have edited server.xml to have these strings:
> 
>     
>                     keystoreFile="conf/mycert.p12" keystorePass="changeit"

If you are going to use the PKCS12 (.p12) format, you will probably have to set keystoreType="PKCS12".
Check the documentation for the SSL-specific  attributes again.

>                maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
>                enableLookups="false" disableUploadTimeout="true"
>                scheme="https" secure="true"
>                clientAuth="false" sslProtocol="TLS" />
> 
>     
>                     keystoreFile="conf/mycert.p12" keystorePass="changeit"
>                truststoreFile="conf/mycert.p12" truststorePass="changeit"

Although I don't think it will hurt to have both, your keystore and truststore aren't the
same thing. Check the documentation for these two attributes. Again, you may need to use truststoreType="PKCS12"
if you want to use your .p12 file.

Hope that helps,
- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAksey6YACgkQ9CaO5/Lv0PBwWQCgj6T+m87bL49GXvON7dzIaklo
S74AnRnYM6IIuo8pMQe/bDAaSbwocXzg
=k45M
-----END PGP SIGNATURE-----

Re: Control character in cookie value

2009-12-08T23:28:45Z

Itay,

you seem to ignore selective parts of the answers and tips which you are 
given, and then rediscover them selectively 3 posts later.

itay sahar wrote:
> Andre,
> 
> I'm not sure why you worry about the other cookie value.

Thank you for your concern, but I don't worry too much.  It is not my 
application, it is yours.

  let me show you an
> example
> maybe then you may see something that i'm missing.
> 
> getCookieMaxAge()  is  31536000
> cookiePath    is   /jboss-seam-jpa

That's nice ! That is the first time you show us what getCookieMaxAge() 
and cookiePath can actually contain.
So now I can go to sleep peacefully, knowing that these parts of the 
cookie do not in effect contain control characters.
You see, before now, you were the only person who could know that for sure.

> 
> What can be wrong here ? It works!

I am sure that your first version of the application worked fine too, as 
long as the email addresses were very short.

> Are you worry about special character on cookiePath. I can make sure
> in my application this won't happen right ?

Right ! The whole point of my note was to point out to you that you 
should make sure of it.
Because if you did not make sure of it, then you could have been 
unexpectedly hit by yet another control character sometime in the 
future.  But now that you have taken care of it, I am reassured and happy.


> If you think something is wrong in the methods below please suggest
> solution..
> 

The method below looks ok, by itself.  My worries were about things used 
in the method below, but coming from somewhere else previously unknown, 
like getCookieMaxAge() and cookiePath.



> Thanks!
> 
> 
> 
> On Mon, Dec 7, 2009 at 10:42 PM, itay sahar  wrote:
> 
>> sure!
>>  protected void setCookieValueIfEnabled(String value)
>>    {
>>       FacesContext ctx = FacesContext.getCurrentInstance();
>>
>>       if ( isCookieEnabled() && ctx != null)
>>       {
>>          HttpServletResponse response = (HttpServletResponse)
>> ctx.getExternalContext().getResponse();
>>          Cookie cookie = new Cookie( getCookieName(), value );
>>          cookie.setMaxAge( getCookieMaxAge() );
>>          cookie.setPath(cookiePath);
>>          response.addCookie(cookie);
>>       }
>>    }
>>
>> On Mon, Dec 7, 2009 at 10:26 PM, Andr� Warnier  wrote:
>>
>>> itay sahar wrote:
>>>
>>>> sure!
>>>> protected void clearCookieValue()
>>>>   {
>>>>      Cookie cookie = getCookie();
>>>>      if ( cookie!=null )
>>>>      {
>>>>         HttpServletResponse response = (HttpServletResponse)
>>>> FacesContext.getCurrentInstance().getExternalContext().getResponse();
>>>>
>>>>         cookie.setValue(null);
>>>>         cookie.setPath(cookiePath);
>>>>         cookie.setMaxAge(0);
>>>>         response.addCookie(cookie);
>>>>      }
>>>>   }
>>>>
>>> That's not the code setting the cookie, it is code clearing a cookie
>>> value. But nevertheless..
>>>
>>>
>>>  But look like problem is fixed. I extended the encodeToken method and
>>>> change
>>>> it to be
>>>> return Base64.encodeBytes(sb.toString().getBytes(),
>>>> Base64.DONT_BREAK_LINES);
>>>> And now it works (like a charm)!
>>>>
>>> And may I point you to a remark from quite a few posts ago, which went
>>> like :
>>> ...
>>> --quote--
>>>
>>> Except that some Base64 encoders, in some cases, will "wrap" the output
>>> string at 76 bytes, by inserting a CR/LF pair, which are both "control
>>> characters".  (Note that the output string of Base64 is longer than the
>>> input string, since it encodes 3 consecutive input bytes into 4 output
>>> bytes.)
>>> My guess is that this is what happens here, and that could trigger the
>>> exception above.
>>> Maybe this Base64.encodeBytes() method has an optional argument which
>>> would tell it to not wrap the output value ?
>>> --end of quote--
>>>
>>>
>>>> but i'm not sure it solve all the
>>>> scenarios/possibilities.
>>> No, as also already pointed out, considering the code you posted before, a
>>> control character could also creep into cookiePath or getCookieMaxAge().
>>>
>>> Also read what Mark posted previously, about possible "=" signs getting
>>> into the Base64 encoded value (at the end, for padding).
>>>
>>>
>>> ---------------------------------------------------------------------
>>>
>>> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>>> For additional commands, e-mail: users-help@tomcat.apache.org
>>>
>>>
> 


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

Re: Control character in cookie value

2009-12-08T22:14:33Z

Andre,

I'm not sure why you worry about the other cookie value. let me show you an
example
maybe then you may see something that i'm missing.

getCookieMaxAge()  is  31536000
cookiePath    is   /jboss-seam-jpa

What can be wrong here ? It works!
Are you worry about special character on cookiePath. I can make sure
in my application this won't happen right ?
If you think something is wrong in the methods below please suggest
solution..

Thanks!



On Mon, Dec 7, 2009 at 10:42 PM, itay sahar  wrote:

> sure!
>  protected void setCookieValueIfEnabled(String value)
>    {
>       FacesContext ctx = FacesContext.getCurrentInstance();
>
>       if ( isCookieEnabled() && ctx != null)
>       {
>          HttpServletResponse response = (HttpServletResponse)
> ctx.getExternalContext().getResponse();
>          Cookie cookie = new Cookie( getCookieName(), value );
>          cookie.setMaxAge( getCookieMaxAge() );
>          cookie.setPath(cookiePath);
>          response.addCookie(cookie);
>       }
>    }
>
> On Mon, Dec 7, 2009 at 10:26 PM, Andr� Warnier  wrote:
>
>> itay sahar wrote:
>>
>>> sure!
>>> protected void clearCookieValue()
>>>   {
>>>      Cookie cookie = getCookie();
>>>      if ( cookie!=null )
>>>      {
>>>         HttpServletResponse response = (HttpServletResponse)
>>> FacesContext.getCurrentInstance().getExternalContext().getResponse();
>>>
>>>         cookie.setValue(null);
>>>         cookie.setPath(cookiePath);
>>>         cookie.setMaxAge(0);
>>>         response.addCookie(cookie);
>>>      }
>>>   }
>>>
>>
>> That's not the code setting the cookie, it is code clearing a cookie
>> value. But nevertheless..
>>
>>
>>  But look like problem is fixed. I extended the encodeToken method and
>>> change
>>> it to be
>>> return Base64.encodeBytes(sb.toString().getBytes(),
>>> Base64.DONT_BREAK_LINES);
>>> And now it works (like a charm)!
>>>
>>
>> And may I point you to a remark from quite a few posts ago, which went
>> like :
>> ...
>> --quote--
>>
>> Except that some Base64 encoders, in some cases, will "wrap" the output
>> string at 76 bytes, by inserting a CR/LF pair, which are both "control
>> characters".  (Note that the output string of Base64 is longer than the
>> input string, since it encodes 3 consecutive input bytes into 4 output
>> bytes.)
>> My guess is that this is what happens here, and that could trigger the
>> exception above.
>> Maybe this Base64.encodeBytes() method has an optional argument which
>> would tell it to not wrap the output value ?
>> --end of quote--
>>
>>
>> > but i'm not sure it solve all the
>> > scenarios/possibilities.
>>
>> No, as also already pointed out, considering the code you posted before, a
>> control character could also creep into cookiePath or getCookieMaxAge().
>>
>> Also read what Mark posted previously, about possible "=" signs getting
>> into the Base64 encoded value (at the end, for padding).
>>
>>
>> ---------------------------------------------------------------------
>>
>> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>> For additional commands, e-mail: users-help@tomcat.apache.org
>>
>>
>

Re: mod_proxy tomcat6 question

2009-12-08T22:05:04Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Vas,

On 12/6/2009 5:17 PM, groupalias v wrote:
> ProxyPass               /test/ ajp://127.0.0.1:8009/A/

[snip]

> I am able to call www.example.com/test/jsp/hi.jsp. The problem happens
> when I call a servlet like --  www.example.com/test/hello
> The hello is a servlet that sends back hi.jsp by using the following code --
> 
> RequestDispatcher req = request.getRequestDispatcher("/jsp/hi.jsp");
> req.forward(request, response);
> 
> where request and response and the HttpServletRequest and Response respectively.
> 
> I get the following error -- The resource /A/jsp/hi.jsp is not available.
> 
> Obviously the URL needs to be changed  /A/jsp/hi.jsp to
> /test/jsp/hi.jsp and I believe the mo_proxy can be configured to do
> this.

No, you don't want this. When doing a "forward", everything is internal
to Tomcat, so the URL should be what Tomcat expects (that is,
"/A/jsp/hi.jsp"). If you were redirecting, you'd need to use
/test/jsp/hi.jsp.

> But I am not able to find it. Can someone point me to the right
> direction?

As Andre (essentially) suggests, maybe you ought to mount /A on /A
instead of /test.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAksezY8ACgkQ9CaO5/Lv0PAu5wCfV1gn4U9Enj+9veQKM+Sqptd5
qdUAnjM8Ax3Bqey0/j6GFe/hbUJaSsxB
=L4zf
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

Re: JSSE question

2009-12-08T21:56:54Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Vadim,

On 12/7/2009 1:25 PM, Vadim Letitchevski wrote:
> openssl pkcs12 -export -in /etc/pki/tls/certs/localhost.crt -inkey /etc/pki/tls/private/localhost.key
-out mycert.p12 -name tomcat -CAfile /etc/pki/tls/cacert.pem -caname root -chain
> 
> I have used the password changeit.

Note that you have created certificate in PKCS12 format, not a keystore.
You now need to take the next step in the SSL HOWTO which is to use the
Java 'keytool' utility to create a keystore.

> Next I have edited server.xml to have these strings:
> 
>     
>                     keystoreFile="conf/mycert.p12" keystorePass="changeit"

If you are going to use the PKCS12 (.p12) format, you will probably have
to set keystoreType="PKCS12". Check the documentation for the
SSL-specific  attributes again.

>                maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
>                enableLookups="false" disableUploadTimeout="true"
>                scheme="https" secure="true"
>                clientAuth="false" sslProtocol="TLS" />
> 
>     
>                     keystoreFile="conf/mycert.p12" keystorePass="changeit"
>                truststoreFile="conf/mycert.p12" truststorePass="changeit"

Although I don't think it will hurt to have both, your keystore and
truststore aren't the same thing. Check the documentation for these two
attributes. Again, you may need to use truststoreType="PKCS12" if you
want to use your .p12 file.

Hope that helps,
- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAksey6YACgkQ9CaO5/Lv0PBwWQCgj6T+m87bL49GXvON7dzIaklo
S74AnRnYM6IIuo8pMQe/bDAaSbwocXzg
=k45M
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

Re: Question on META-INF/context.xml

2009-12-08T21:50:15Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Run,

On 12/8/2009 4:39 PM, pprun wrote:
> I will remove docBase and path attributes. 

Did Eclipse put them in there?

> I do use some hard-coded "Repromed" in the css and javascript reference, for
> example: 
> inside /Repromed/login.jsp i used  rel="stylesheet" />
> 
> I tried to replace it with relative URI for example  href="./css/repromed.css" rel="stylesheet" />
> 
> But it becomes a problem when the login page is shown in case of session
> timeout.

[snip]

> Is there a way to get around it?

Try:



Now, do this with all your links. Better yet:

">

This will make your webapp work when you are using sessions but your
clients don't support cookies.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkseyhcACgkQ9CaO5/Lv0PCJewCfc6K0m/RXKdoOMwjos9F35l09
A9YAniNWBneqr4VeULkfXTIazw9PSRHE
=ELAt
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

Re: Feedback on Tomcat Client Deployer

2009-12-08T21:45:59Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Tero,

On 12/8/2009 3:38 PM, Tero Karttunen wrote:
> I have something that must be a pretty standard J2EE application
> server environment: I am running (at least) three Tomcat instances
> sharing a common Catalina home with mod_jk load balancer in front.

I hope you're using CATALINA_BASE along with that. :)

> I
> have not set up clustering, because my GWT-based applications maintain
> state information client-side and do not utilize server-side J2EE Web
> Application context sessions.

This is a nice strategy that should scale very well.

> In this configuration I regularly need to deploy or re-deploy new
> applications to all the Tomcat instances, and I was surprised to find
> out that the support for this out-of-box was quite poor. All I could
> find was Tomcat Client Deployer package, and all the documentation I
> could find was the chapter four in the Tomcat user guide.

What is the "Tomcat user guide" and what is covered in chapter 4?

> I apologize
> in advance if I have missed out something; prove me wrong!

Tomcat comes with a webapp called "manager" which can deploy, un-deploy,
and re-deploy web applications using either the (basic) web interface
provided) or a client such as wget using simple GET and POST requests.

There is a "task" available for Apache ant that can do deployments for
you, too. It is documented here (apologies for the URL wrapping, if any
occurs):

http://tomcat.apache.org/tomcat-6.0-doc/manager-howto.html#Executing%20Manager%20Commands%20With%20Ant

> Firstly, the build.xml file does not suffice for documentation for the
> ant-tasks! I had to RTFS to find out the needed parameters for the
> deploy task ("localWar" and "config")

You're right: the ant tasks are almost completely undocumented. Would
you consider submitting a patch for the documentation?

> Secondly, the example ant-script is only suitable for deploying to one
> Tomcat manager instance at a time, which is a major limitation. I have
> to write my own ant script for deployment to multiple manager
> instances.

Right. This is not an industrial-strength tool: it's just to get you by.
You are welcome to script whatever your environment requires. Again,
patches are welcome.

> But this is not all - I am also going to need to integrate mod_jk
> Status Worker ant tasks to my script, because I need to temporarily
> disable workers while I undeploy and re-deploy applications to them.
> (Otherwise the users may get unnecessary errors.) No problem here - I
> can use "updateworker" task, but here is a major issue:
> 
>         I am unable to find tomcat-jkstatus-ant.jar binaries anywhere!

All the ant tasks should be in the same JAR file.

> The mod_jk binaries directory
> /dist/tomcat/tomcat-connectors/jk/binaries/win32/jk-1.2.28 only has
> the Apache HTTPD module available for downloading. Moreover, the ant
> example uses pathelement location ../dist/tomcat-jkstatus-ant.jar
> which seems incomprehensible to me.

This is probably due to its location in the Tomcat source distribution.
Perhaps this components is not frequently used and so it's not very
mature. It would be great if you could post some of these issues to the
tomcat-dev mailing list, log bugs in the bug tracker, and (please!)
submit patches to fix the problems. Tomcat only gets better with
community participation.

> My humble suggestions are:
> 1) Please document the TCD ant task parameters so that the user does
> not have to resort to source code
> 2) Please make it easier to locate tomcat-jkstatus-ant.jar

Good suggestions.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkseyRcACgkQ9CaO5/Lv0PAInwCaAuEi/B8UL5ca9cIuiFpVvIUH
zywAnju17niHUzUtPt0Red9kkTgX6Mt2
=0+oZ
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

RE: Question on META-INF/context.xml

2009-12-08T21:39:43Z


Thank you very much for such quick response.

I will remove docBase and path attributes. 

I do use some hard-coded "Repromed" in the css and javascript reference, for
example: 
inside /Repromed/login.jsp i used 

I tried to replace it with relative URI for example 

But it becomes a problem when the login page is shown in case of session
timeout.

Let's say user visited secure page /Repromed/adv/upload.jsp, then session
timed out, login.jsp is shown, 
reference to style sheet becomes 

Is there a way to get around it? 

Thanks


Caldarale, Charles R wrote:
> 
>> From: pprun [mailto:runping_huang@hotmail.com]
>> Subject: Question on META-INF/context.xml
>> 
>> Inside I specified META-INF/context.xml as following:
>> 
>> 
>>  
> Remove the docBase and path attributes - they're not allowed when the
>  element is in META-INF/context.xml
> 
>> I don't know how to convert Repromed.war to ROOT.war.
> 
> Usually, all you have to do is change the name of the .war file.  This is
> assuming you have not hard-coded "Repromed" within the webapp; if you
> have, you'll need to fix that.
> 
>> How to change the META-INF/context.xml?
> 
> No changes are needed to either META-INF/context.xml or WEB-INF/web.xml.
> 
>  - Chuck
> 
> 
> THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
> MATERIAL and is thus for use only by the intended recipient. If you
> received this in error, please contact the sender and delete the e-mail
> and its attachments from all computers.
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
> 
> 
> 

-- 
View this message in context: http://old.nabble.com/Question-on-META-INF-context.xml-tp26700904p26701279.html
Sent from the Tomcat - User mailing list archive at Nabble.com.


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

RE: Question on META-INF/context.xml

2009-12-08T21:21:18Z

> From: pprun [mailto:runping_huang@hotmail.com]
> Subject: Question on META-INF/context.xml
> 
> Inside I specified META-INF/context.xml as following:
> 
> 
>  element
is in META-INF/context.xml

> I don't know how to convert Repromed.war to ROOT.war.

Usually, all you have to do is change the name of the .war file.  This is assuming you have
not hard-coded "Repromed" within the webapp; if you have, you'll need to fix that.

> How to change the META-INF/context.xml?

No changes are needed to either META-INF/context.xml or WEB-INF/web.xml.

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus
for use only by the intended recipient. If you received this in error, please contact the
sender and delete the e-mail and its attachments from all computers.


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

Question on META-INF/context.xml

2009-12-08T21:16:35Z


Hi, 

I am a novice to tomcat. I created WAR project in Eclipse called "Repromed".
Inside I specified META-INF/context.xml as following:



	
               		   
   	
	WEB-INF/web.xml
	META-INF/context.xml


During the implementation, I was requested to deploy this Repromed.war as
the ROOT application to the localhost. I don't know how to convert
Repromed.war to ROOT.war. How to change the META-INF/context.xml? In
addition, do I need to change anything in the web.xml. 


Thank you for the help in advance. 

run


-- 
View this message in context: http://old.nabble.com/Question-on-META-INF-context.xml-tp26700904p26700904.html
Sent from the Tomcat - User mailing list archive at Nabble.com.


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

Feedback on Tomcat Client Deployer

2009-12-08T20:38:19Z

I have something that must be a pretty standard J2EE application
server environment: I am running (at least) three Tomcat instances
sharing a common Catalina home with mod_jk load balancer in front. I
have not set up clustering, because my GWT-based applications maintain
state information client-side and do not utilize server-side J2EE Web
Application context sessions.

In this configuration I regularly need to deploy or re-deploy new
applications to all the Tomcat instances, and I was surprised to find
out that the support for this out-of-box was quite poor. All I could
find was Tomcat Client Deployer package, and all the documentation I
could find was the chapter four in the Tomcat user guide. I apologize
in advance if I have missed out something; prove me wrong!

Firstly, the build.xml file does not suffice for documentation for the
ant-tasks! I had to RTFS to find out the needed parameters for the
deploy task ("localWar" and "config"), and there seems to be an
ant-task "JkStatusUpdate" that is completely undocumented. It seems to
be related to Tomcat-5.5 (according to source code comments) so I have
left it alone for now.

Secondly, the example ant-script is only suitable for deploying to one
Tomcat manager instance at a time, which is a major limitation. I have
to write my own ant script for deployment to multiple manager
instances.

But this is not all - I am also going to need to integrate mod_jk
Status Worker ant tasks to my script, because I need to temporarily
disable workers while I undeploy and re-deploy applications to them.
(Otherwise the users may get unnecessary errors.) No problem here - I
can use "updateworker" task, but here is a major issue:

        I am unable to find tomcat-jkstatus-ant.jar binaries anywhere!

The mod_jk binaries directory
/dist/tomcat/tomcat-connectors/jk/binaries/win32/jk-1.2.28 only has
the Apache HTTPD module available for downloading. Moreover, the ant
example uses pathelement location ../dist/tomcat-jkstatus-ant.jar
which seems incomprehensible to me.

I downloaded the source package in order to compile the jar file
myself, but it was not trivial and would have required some effort. I
resigned to googling for the package elsewhere in some unofficial
location (http://www.java2s.com/Code/Jar/STUVWXYZ/tomcat-jkstatus-ant.jar.htm).

My humble suggestions are:
1) Please document the TCD ant task parameters so that the user does
not have to resort to source code
2) Please make it easier to locate tomcat-jkstatus-ant.jar

Let me apologize again if I am on the wrong track, because you are
producing excellent software that contantly exceeds my expectations!
It is only because of this very high standard that I am giving this
feedback, because so far the support for application deployment has
not been as extensive as the rest of your software.

Best Regards,
Tero Karttunen

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

Re: Understanding url-patterns

2009-12-08T19:39:24Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

André,

On 12/8/2009 1:54 PM, André Warnier wrote:
> Independently of the other answers, just 2 notes :
> 
> 1) probably the reason why nobody wants to give you another answer than
> to read the specs, is that when you will have read the specs about the
> URL wildcards, you will not only have your answer, but also be somewhat
> puzzled yourself as to why the specs writers had to go and re-invent yet
> another way of doing wildcards all for themselves.

Yeah, I'm surprised they didn't go with either standard globbing rules
(* = anything, ? = any one thing) or with regular expressions (which can
be somewhat inaccessible). The whole "it looks like a glob but it's only
a very special case of a glob" is pretty irritating.

I just checked, and this foolishness is still in effect for the proposed
3.0 specification.

> The additional benefit is that the next time someone on this list asks a
> question that is clearly non-sensical and/or in contravention of the
> specs, you will be able to tell them : "read the servlet specs".
> Makes you immediately sound like a pro.

Or an ass. Sometimes the two are interchangeable. :)

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkseq2wACgkQ9CaO5/Lv0PDlIACaAmVnLpWIohItFZ+P957/ZePB
yxAAn12zWcCYScA0FJEjbPpe15guEt8Q
=87sb
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

Re: tomcat, uPortal, error messages and confusion

2009-12-08T19:38:23Z

I'm unsure whether it's an "ubuntu mangled" version - I installed  
tomcat5.5 via apt-get.

uname -a:
Linux ******* 2.6.18-92.1.18.el5.028stab060.8PAE #1 SMP Mon Feb 9  
22:32:30 MSK 2009 i686 GNU/Linux

Here is my server.xml:
http://pastebin.ca/1707274

webapps/uPortal/META-INF/context.xml:

    


web.xml
http://pastebin.ca/1707286

-Steve

On Dec 7, 2009, at 3:18 PM, Caldarale, Charles R wrote:

>> From: Egeste [mailto:egeste@egeste.net]
>> Subject: tomcat, uPortal, error messages and confusion
>>
>> in communication with the uPortal mailing list, I was advised to seek
>> advice from this group regarding the following thread:
>
> Is this a real Tomcat, or a Ubuntu-mangled version?
>
> Please post your server.xml file, which should be in Tomcat's conf  
> directory (unless the Ubuntu distribution moved it somewhere else).
>
> Also post the META-INF/context.xml and WEB-INF/web.xml for your  
> uPortal webapp, if they exist.
>
> - Chuck
>
>
> THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE  
> PROPRIETARY MATERIAL and is thus for use only by the intended  
> recipient. If you received this in error, please contact the sender  
> and delete the e-mail and its attachments from all computers.
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

Re: Understanding url-patterns

2009-12-08T18:54:55Z

Jonathan Mast wrote:
> I actually spent an hour and half trying to find the Servlet 2.5 specs and
> researching this question in general.  The only thing on Sun's site for
> Servlet 2.5 was the Javadocs, not the actual specs.  In fact I even found
> other people who had the same issue of not being able to find the Specs as a
> PDF.
> 
> I have would be tickled to death to be able to read the specs straight from
> the source, but since I couldn't find the source, I figured I would ask
> another source of information, ie this list.

Independently of the other answers, just 2 notes :

1) probably the reason why nobody wants to give you another answer than 
to read the specs, is that when you will have read the specs about the 
URL wildcards, you will not only have your answer, but also be somewhat 
puzzled yourself as to why the specs writers had to go and re-invent yet 
another way of doing wildcards all for themselves.
You would thus probably not believe it if we just told you, so it is 
better if you read the original specs. They are, after all, the specs, 
and Tomcat has to abide by them.

2) Even apart from that, and even for non-specifically-Java types like 
me, the specs are more or less readable, and the parts that are readable 
are very enlightening for anyone having to deal with Tomcat (or servlet 
servers in general).  So the gurus here are actually trying to do you a 
favor by forcing you to go read them.
The additional benefit is that the next time someone on this list asks a 
question that is clearly non-sensical and/or in contravention of the 
specs, you will be able to tell them : "read the servlet specs".
Makes you immediately sound like a pro.
;-)

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

Re: Understanding url-patterns

2009-12-08T18:39:16Z

On Tue, Dec 8, 2009 at 1:32 PM, Jonathan Mast
 wrote:
> I actually spent an hour and half trying to find the Servlet 2.5 specs and
> researching this question in general. �The only thing on Sun's site for
> Servlet 2.5 was the Javadocs, not the actual specs. �In fact I even found
> other people who had the same issue of not being able to find the Specs as a
> PDF.
>
> I have would be tickled to death to be able to read the specs straight from
> the source, but since I couldn't find the source, I figured I would ask
> another source of information, ie this list.

http://java.sun.com/products/servlet/reference/api/index.html

-- 
Kris Schneider

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

Re: Understanding url-patterns

2009-12-08T18:38:10Z

On Tue, Dec 8, 2009 at 10:32 AM, Jonathan Mast
 wrote:
> I actually spent an hour and half trying to find the Servlet 2.5 specs and
> researching this question in general. �The only thing on Sun's site for
> Servlet 2.5 was the Javadocs, not the actual specs. �In fact I even found
> other people who had the same issue of not being able to find the Specs as a
> PDF.

??? Google: 'servlet spec download'

Hint: it's the first hit.

-- 
Hassan Schroeder ------------------------ hassan.schroeder@gmail.com
twitter: @hassan

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

Re: Understanding url-patterns

2009-12-08T18:32:34Z

I actually spent an hour and half trying to find the Servlet 2.5 specs and
researching this question in general.  The only thing on Sun's site for
Servlet 2.5 was the Javadocs, not the actual specs.  In fact I even found
other people who had the same issue of not being able to find the Specs as a
PDF.

I have would be tickled to death to be able to read the specs straight from
the source, but since I couldn't find the source, I figured I would ask
another source of information, ie this list.

On Tue, Dec 8, 2009 at 12:25 PM, Andr� Warnier  wrote:

> Christopher Schultz wrote:
>
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> Jonathan,
>>
>> On 12/8/2009 11:48 AM, Jonathan Mast wrote:
>>
>>> Are URL Patterns ending in a wild card allowed by the Servlet Spec?
>>>
>>
>> You could check. You've been on this list long enough to know that the
>> spec itself is available
>>
> +1
> and quite readable.
> + ... 0.5
>
>  Maybe it's time to read it.
> +1
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>

Re: tomcat server start up without looking dependency jars

2009-12-08T18:11:21Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Ahmed,

On 12/5/2009 7:17 AM, ahmed kasim wrote:
> I have few jars which need to get loaded only when the war file is 
> getting loaded or when the request comes, to be more clear I have 
> some jar which is having connection to DB, if I specify in my 
> context.xml file it is getting loaded when the server getting
> started up initially, so I want to avoid this and make it when my war
> file gets loaded the db connection should get loaded.
> 
>  type="javax.sql.DataSource" 
> driverClassName="com.ibm.db2.jcc.DB2Driver" 
> url="jdbc:db2://localhost:50000/SPARK" username="db2admin" 
> password="db2@dmin" maxActive="20" maxIdle="10" maxWait="-1"/>

So, this resource is being specified in context.xml? Which one? If it's
conf/context.xml then it's the default configuration for all contexts,
including ROOT, which is (nearly) always deployed, so you should expect
your database connection to be established whether you have deployed
"your" webapp or not.

If you've placed that  definition in your webapp's
META-INF/context.xml file, then the resource should not be created until
webapp deployment.

> I have three jar file specified for Resource

What does this mean?  elements do not reference JAR files
directly.

> if i place jar file

Where?

> it is getting loaded and server starts up looking for connection
> with db.

What is getting loaded? The "JAR file" or the context.xml file?

> How can I avoid server starting time look up and make it available 
> only when I deploy the war file.

Make sure your  definition is in your webapp's private
context.xml file. The location of the JAR file should be in
$CATALINA_HOME/lib for Tomcat 6.0, which I presume you are using.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkselskACgkQ9CaO5/Lv0PDB3gCgps+AvNnwyKzfxvewxFVnnp4H
vqYAnjII5yNrUyiToUUnDDPrbFsZOojp
=68c3
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

Re: Control character in cookie value

2009-12-08T18:03:14Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Itay,

On 12/4/2009 7:41 PM, itay sahar wrote:
> I'm using seam on tomcat 6.0.20 and encounter problem in my security module.
> 
> Basically, i try to add cookie with base64 encoding of the username which is
> email address.
> The encoding works and no exception is thrown. But when seam try adding the
> cookie an exception is thrown:

[snip]

> javax.servlet.ServletException: #{identity.login}:
> java.lang.IllegalArgumentException: Control character in cookie value,
> consider BASE64 encoding your value

It looks like you are using an EL expression that either cannot properly
be executed or is not allowed: "#{identity.login}" appears to be your
original code, and not the data you intended to encode.

Are you sure you are looking for the right problem? All the other
messages in this thread refer to "username" and "password" and yet the
error appears to be due to the above value, not the username and password.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkselOIACgkQ9CaO5/Lv0PBtogCeMhu89xqVh8s29FbH5Y0rJd6J
0EkAmwdeMPnlUHzHiPC+Dr2yxyHmHLOP
=9avA
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

Re: Understanding url-patterns

2009-12-08T17:25:42Z

Christopher Schultz wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Jonathan,
> 
> On 12/8/2009 11:48 AM, Jonathan Mast wrote:
>> Are URL Patterns ending in a wild card allowed by the Servlet Spec?
> 
> You could check. You've been on this list long enough to know that the
> spec itself is available 
+1
and quite readable.
+ ... 0.5
  Maybe it's time to read it.
+1

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

Re: Understanding url-patterns

2009-12-08T17:23:49Z

Jonathan Mast wrote:
> Are URL Patterns ending in a wild card allowed by the Servlet Spec?
> 
> I have this pattern setup with the intention of binding every url that
> begins with "foo" to a serlvet
> 
>     MultiFooService
>     /foo*
> 
> 
> But http://localhost/foo1, ...foo2, ...foo gives me a 404
> 
> Only http://localhost/foo* actually resolves to the servlet.
> 
> Do I have the syntax wrong?  I seen examples like
> /*.jsp, so is there some different notation
> required for wildcards at the end of the pattern?
> 
> Tomcat 6.0.20
> 
I think you really need to read the corresponding section of the servlet 
specs for that, because these URL patterns are not the same as filespec 
patterns, and not regexpes either.  Their interpretation is really 
java-servlet-specs-specific.
Don't ask why.




---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

Re: Understanding url-patterns

2009-12-08T17:20:34Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jonathan,

On 12/8/2009 11:48 AM, Jonathan Mast wrote:
> Are URL Patterns ending in a wild card allowed by the Servlet Spec?

You could check. You've been on this list long enough to know that the
spec itself is available and quite readable. Maybe it's time to read it.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkseiuIACgkQ9CaO5/Lv0PDi1ACgjDxY0U6PR6b/9zxisLvcIKi5
ADAAn164hq8uQC3UEL/oxh8/qSPFv/pe
=VQ9w
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

Understanding url-patterns

2009-12-08T16:48:43Z

Are URL Patterns ending in a wild card allowed by the Servlet Spec?

I have this pattern setup with the intention of binding every url that
begins with "foo" to a serlvet

    MultiFooService
    /foo*


But http://localhost/foo1, ...foo2, ...foo gives me a 404

Only http://localhost/foo* actually resolves to the servlet.

Do I have the syntax wrong?  I seen examples like
/*.jsp, so is there some different notation
required for wildcards at the end of the pattern?

Tomcat 6.0.20

Re: the Tomcat generates more than one session id with the same http request, please help me

2009-12-08T15:55:25Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Mike,

On 12/8/2009 2:02 AM, Looijmans, Mike wrote:
> Seems like a propietary way of storing the session ID

Actually, it's well-defined by the servlet specification.

>> -----Original Message----- From: Peter Chen
>> But I don't know the part 
>> "getParts.jsp;jsessionid=B01FF12CBC92F9BA1682E9A883A3A1AD", is it
>> also used to pass parameter?

Try:

String url = request.encodeURL("getParts.jsp[") + "?" + [your params]

Then, just:



- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAksedu0ACgkQ9CaO5/Lv0PBkNwCdFcoX0yL4Kel9LLU8JWBNOUMh
bJAAn3TDk1ttFS2WnRY7KfN6T+eWeeh9
=Ump8
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

Re: Apache Tomcat Windows Installer Insecure Password Vulnerability

2009-12-08T15:47:26Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Pid,

On 12/7/2009 5:23 AM, Pid wrote:
> On 07/12/2009 04:53, Saw Chee Hong wrote:
>> Currently mytomcat version was 5.0.27. I have check the 
>> ‘tomcat-users.xml’ file and it doesn’t consist the ‘admin’ user in
>> the file.
> 
> Then you are not at risk from *this particular* issue.

+1

>> Does this mean that my tomcat is safe?
> 
> No idea.  That's too open ended a question - we can't tell what else
> you've done to it.

+1

Please note that Tomcat 5.0 is no longer supported. There could be
unpatched security vulnerabilities in your version that will /never be
fixed/ due to its "unsupported" status.

You should upgrade to Tomcat 6.0 at your earliest convenience.

... and make sure you re-check the tomcat-users.xml file. Better yet,
delete it and don't use it ;)

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAksedQ4ACgkQ9CaO5/Lv0PAjnACffIS/MQbAbHuLrelAsQgPC7eI
ZIIAoIQhj1ymXRINljjQIUU9GsWW56Ja
=NKvu
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

Re: How To Get MBean Server of Apache Tomcat.

2009-12-08T15:44:12Z

   Hello Ben,

   You are right, Tomcat, with these standard JVM JMX parameters,
creates a new MBeanServer that is not the platform mbean server and
that does not contain the JVM Mbeans (1). I didn't take the time to
figure out wether it was the JVM or Tomcat behavior.

   On production, we use Hyperic declaring two servers : a "JVM
server" and a "Apache Tomcat 6.0 Server". I must admit it is not the
most elegant but it does the job :-)

   For my JMX troubleshooting on Tomcat, I use JVisualVM (with the
MBeans plugin) and a few JSP pages I drop in my web apps :
http://cyrille-leclerc.googlecode.com/svn/trunk/cyrille/src/main/webapp/tools/jmx/mbeans.jsp
http://cyrille-leclerc.googlecode.com/svn/trunk/cyrille/src/main/webapp/tools/jmx/mbean.jsp
http://cyrille-leclerc.googlecode.com/svn/trunk/cyrille/src/main/webapp/tools/jmx/platformMbeans.jsp
   I mostly use the two firsts jsps as I mostly monitor Tomcat and
application specific MBeans, not very much JVM MBeans (except via
Hyperic).

   Hope this helps,

   Cyrille
--
Cyrille Le Clerc
cleclerc@xebia.fr
http://blog.xebia.fr

(1) : java.lang:type=Runtime, java.lang:type=OperatingSystem,
java.lang:type=Threading, java.lang:type=Memory

On Tue, Dec 8, 2009 at 4:07 PM, Ben Katz  wrote:
> Hi Cyrille,
>
> Thanks for you reply.
> I have actually done what you suggested but that does not relate to the
> problem.
>
> To better Illustrate I will give this example:
>
> If I run the code below from a servlet in Tomcat I will get a list of
> domains:
> � � � �String[] domains =
> ManagementFactory.getPlatformMBeanServer().getDomains();
>
> � � � �for (int i =0; i < domains.length;i++)
> � � � �{
> � � � � � �System.out.println(domains[i]);
> � � � �}
>
> If I run the same code from a generic java application I will get a
> different list of domains.
>
> This means that the platform MBean server is different inside Tomcat.
> What I would like to do is to reach that server, probably by replacing
> "ManagementFactory.getPlatformMBeanServer().getDomains();" with something
> else.
>
> Thanks again,
> Ben.
>
>
> On Tue, Dec 8, 2009 at 15:00, Cyrille Le Clerc  wrote:
>
>> � Hello Ben,
>>
>> � Tomcat relies on the out-of-the-box feature of the JVM to make the
>> MBeanServer accessible to other processes (possibly located on other
>> servers).
>>
>> � You have to add the following parameters to the Tomcat startup
>> command line :
>> � �-Dcom.sun.management.jmxremote \
>> � �-Dcom.sun.management.jmxremote.port=6969 \
>> � �-Dcom.sun.management.jmxremote.ssl=false \
>> � �-Dcom.sun.management.jmxremote.authenticate=false
>>
>> JMX listen port 6969 is configurable.
>>
>> All details at http://tomcat.apache.org/tomcat-6.0-doc/monitoring.html
>>
>> Hope this helps,
>>
>> Cyrille
>>
>> --
>> Cyrille Le Clerc
>> cleclerc@xebia.fr
>> http://blog.xebia.fr
>>
>> On Tue, Dec 8, 2009 at 1:34 PM, Ben Katz  wrote:
>> >
>> > Hi,
>> > I use ManagementFactory.getPlatformMBeanServer() from within Apache
>> Tomcat
>> > and from a regular JAR file (outside the scope of apache).
>> > I think (And correct me if im wrong) I'm getting different MBean Servers.
>> > My question is - How Do I reach the Tomcat mbean server from outside or
>> > alternatively, how do I register the MBeans from inside apache with the
>> > "outside world" MBean server.
>> > The first option (Reach the Tomcat mbean server from the outside) is
>> > preferable.
>> > Thanks!!
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>> For additional commands, e-mail: users-help@tomcat.apache.org
>>
>>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

Re: Logging with Log4J

2009-12-08T15:42:11Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Bart,

On 12/5/2009 7:55 AM, Bart Vandewoestyne wrote:
>>> log4j.appender.myAppender.File=testbart.log
>>
>> I would have done:
>> log4j.appender.myAppender.File=/var/log/tomcat/mywebapp.log
>>
>> Make sure that the user running Tomcat has rights to write to that
>> file/directory.
> 
> OK.  I also figured out that it works if i specify the absolute
> path /var/log/tomcat/mywebapp.log
> 
> I thought that if i only specify the filename, by default it
> would arrive in /var/log/tomcat/ but apparently this is not the
> case.

Why would you think that the file would magically appear in
/var/log/tomcat? There is no default log file location for log4j, nor
for any logging mechanism that I know of. The best you could hope for is
the current working directory of the process, which could be anything.
It's always best to fully-specify path names.

> Anyway, my problem seems solved. All i have to do now is continue
> reading the Log4J docs to better understand and configure my
> logging :-)

Enjoy!

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAksec9MACgkQ9CaO5/Lv0PDXMgCeNOq1OiKDb+r+6EenGHwZ1M8m
WiIAoKDCdo3ZBhqIQIVGcsP2/nhVQzYs
=h4Tp
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

Re: mysterious SQLException: Access denied for user

2009-12-08T15:40:08Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Lloyd,

Moving this discussion on-list.

On 12/4/2009 7:35 PM, DIGLLOYD INC wrote:
> I have been running a server just fine for 16 month. It is
> running Tomcat 6.0.20, using the following JDBCRealm:

Before we continue, let's just say up front that using JDBCRealm is not
recommended. It had some synchronization problems in the past, and
fixing them basically means that its operation is serialized, since it
uses only one Connection to the database. Considering switching to
DataSourceRealm instead.

>         connectionName="tomcat_auth"
>       connectionPassword="xxxxxx"
>       connectionURL="jdbc:mysql://192.168.1.12/diglloyd"
>       driverName="com.mysql.jdbc.Driver"
>       userTable="UserAuth" userNameCol="username" userCredCol="password"
>       userRoleTable="UserRole" roleNameCol="role" digest="MD5" />

That looks okay to me. You should upgrade from MD5 if at all possible
(yes, I know that changing password digests sucks, I've done it twice...
it takes years to complete) because MD5 is not very secure these days.

> I've made a new server, duplicating the setup, but with one change: I'm
> running MySQL 5.1.41 instead of 5.0.51b (different IP address, I've
> adjusted the connectionURL accordingly).
> 
> I've set up the new database with user 'tomcat_auth', to be used for
> authenticating users. For now, I've done a 'grant all' to rule out silly
> errors. 

What do you get when you run:

mysql> SHOW GRANTS FOR tomcat_auth@localhost;

What is the host from which tomcat_auth is connecting? Tomcat maintains
different permissions for users connecting from different hosts. For
instance, tomcat_auth may be allowed from localhost, but not from
192.168.1.10.

> But with the new setup using MySQL 5.1.41, Tomcat always reports this
> exception shown below.   However, I can connect locally and remotely as
> user 'tomcat_auth' via the 'mysql' command line, do a 'select', etc.

Hmm... you can connect remotely? What is the command line that you use
for that? "mysql -h 192.168.1.12 -u tomcat_auth -p"? Does that work from
the machine on which Tomcat is installed but not properly connecting?

> So
> clearly something is wrong on the tomcat end, yet that configuration is
> identical to the other server.

So, the only difference is the IP address used in the connection URL?

> Any help would be MUCH appreciated.
> 
> Dec 4, 2009 3:15:40 PM org.apache.catalina.realm.JDBCRealm getPassword
> SEVERE: Exception performing authentication
> java.sql.SQLException: Access denied for user
> 'tomcat_auth'@'192.168.1.13' (using password: YES)

So, the password is being used (that's good: it's correct, right?). It
also says you're connecting as tomcat_auth@192.168.1.13. What does this
command return:

mysql> SHOW GRANTS FOR tomcat_auth@192.168.1.13;

or

mysql> SHOW GRANTS FOR tomcat_auth;

> at com.mysql.jdbc.ConnectionImpl.createNewIO(ConnectionImpl.java:2031)
> at com.mysql.jdbc.ConnectionImpl.(ConnectionImpl.java:718)
> at com.mysql.jdbc.JDBC4Connection.(JDBC4Connection.java:46)
> [...]
> at
com.mysql.jdbc.NonRegisteringDriver.connect(NonRegisteringDriver.java:282)

Looks like it's failing to connect (rather than failing to access a
specific table or column).

Let's see what the grants look like.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAksec1gACgkQ9CaO5/Lv0PDoSgCeJnVVu/A1hK+b+lpqX7luGCAz
IO4An2gnQOq2m1p7dXWRLRKRjNd/YR0T
=a3z4
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

Re: Tomcat Crashes out of continuous servicing of stuck request

2009-12-08T15:30:56Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Nishant,

Mailing the list is fine: there's no need to mail me separately.

On 12/6/2009 11:19 PM, Hadole, Nishant IN BOM SISL wrote:
> Tomcat crashes means, the free memory starts declining dramatically 
> to zero, and server stops responding to new requests.

Does the JVM and/or Tomcat actually crash? That's an important
difference: if Tomcat simply stops responding to requests, that's likely
to be a different problem than an actual crash.

> I am sure with little modifications, this can be handled in code
> itself, and this is not a concern at all.

Eh... okay, if you say so.

> I am more interested in knowing whether there exists any 
> configuration for such cases, which stops processing after some 
> predefined time-out.

No.

> I know that this can be done for KEEPALIVE requests. What @ requests
> in SERVICE stage.

I'm not sure what you mean, here.

> The screenshot for Tomcat Manager is attached for the same.

The screenshot indicates that you have 756MiB free of a 1016MiB heap.
That looks good to me. It also indicates that your "jvehelp" servlet
seems to be taking forever to do its work. Perhaps you should take a
thread dump and figure out what your servlet is doing when it stalls?

Only one thread is in the "keepalive wait" state, and it has been there
for 6.5 seconds. What is your keepalive timeout? Is it set to an
appropriate amount?

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAksecS8ACgkQ9CaO5/Lv0PCH+gCffSPXVFy7KAdXKCrS3hCOr+GW
IvkAn1gSQR6dt5JFIWi2JXMXX3fAPBH7
=2YaM
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

Re: How To Get MBean Server of Apache Tomcat.

2009-12-08T15:07:00Z

Hi Cyrille,

Thanks for you reply.
I have actually done what you suggested but that does not relate to the
problem.

To better Illustrate I will give this example:

If I run the code below from a servlet in Tomcat I will get a list of
domains:
        String[] domains =
ManagementFactory.getPlatformMBeanServer().getDomains();

        for (int i =0; i < domains.length;i++)
        {
            System.out.println(domains[i]);
        }

If I run the same code from a generic java application I will get a
different list of domains.

This means that the platform MBean server is different inside Tomcat.
What I would like to do is to reach that server, probably by replacing
"ManagementFactory.getPlatformMBeanServer().getDomains();" with something
else.

Thanks again,
Ben.


On Tue, Dec 8, 2009 at 15:00, Cyrille Le Clerc  wrote:

>   Hello Ben,
>
>   Tomcat relies on the out-of-the-box feature of the JVM to make the
> MBeanServer accessible to other processes (possibly located on other
> servers).
>
>   You have to add the following parameters to the Tomcat startup
> command line :
>    -Dcom.sun.management.jmxremote \
>    -Dcom.sun.management.jmxremote.port=6969 \
>    -Dcom.sun.management.jmxremote.ssl=false \
>    -Dcom.sun.management.jmxremote.authenticate=false
>
> JMX listen port 6969 is configurable.
>
> All details at http://tomcat.apache.org/tomcat-6.0-doc/monitoring.html
>
> Hope this helps,
>
> Cyrille
>
> --
> Cyrille Le Clerc
> cleclerc@xebia.fr
> http://blog.xebia.fr
>
> On Tue, Dec 8, 2009 at 1:34 PM, Ben Katz  wrote:
> >
> > Hi,
> > I use ManagementFactory.getPlatformMBeanServer() from within Apache
> Tomcat
> > and from a regular JAR file (outside the scope of apache).
> > I think (And correct me if im wrong) I'm getting different MBean Servers.
> > My question is - How Do I reach the Tomcat mbean server from outside or
> > alternatively, how do I register the MBeans from inside apache with the
> > "outside world" MBean server.
> > The first option (Reach the Tomcat mbean server from the outside) is
> > preferable.
> > Thanks!!
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>

Re: How To Get MBean Server of Apache Tomcat.

2009-12-08T13:00:07Z

   Hello Ben,

   Tomcat relies on the out-of-the-box feature of the JVM to make the
MBeanServer accessible to other processes (possibly located on other
servers).

   You have to add the following parameters to the Tomcat startup
command line :
    -Dcom.sun.management.jmxremote \
    -Dcom.sun.management.jmxremote.port=6969 \
    -Dcom.sun.management.jmxremote.ssl=false \
    -Dcom.sun.management.jmxremote.authenticate=false

JMX listen port 6969 is configurable.

All details at http://tomcat.apache.org/tomcat-6.0-doc/monitoring.html

Hope this helps,

Cyrille

--
Cyrille Le Clerc
cleclerc@xebia.fr
http://blog.xebia.fr

On Tue, Dec 8, 2009 at 1:34 PM, Ben Katz  wrote:
>
> Hi,
> I use ManagementFactory.getPlatformMBeanServer() from within Apache Tomcat
> and from a regular JAR file (outside the scope of apache).
> I think (And correct me if im wrong) I'm getting different MBean Servers.
> My question is - How Do I reach the Tomcat mbean server from outside or
> alternatively, how do I register the MBeans from inside apache with the
> "outside world" MBean server.
> The first option (Reach the Tomcat mbean server from the outside) is
> preferable.
> Thanks!!

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

Re: How To Get MBean Server of Apache Tomcat.

2009-12-08T12:34:10Z

Hi,
I use ManagementFactory.getPlatformMBeanServer() from within Apache Tomcat
and from a regular JAR file (outside the scope of apache).
I think (And correct me if im wrong) I'm getting different MBean Servers.
My question is - How Do I reach the Tomcat mbean server from outside or
alternatively, how do I register the MBeans from inside apache with the
"outside world" MBean server.
The first option (Reach the Tomcat mbean server from the outside) is
preferable.
Thanks!!

RE: the Tomcat generates more than one session id with the same http request, please help me

2009-12-08T10:03:51Z

The reason is that "other" browsers use a media player component that
reconnects to the server. The "session" is linked to the browser
instance. As a result, the session is lost when the mediaplayer connects
to get the audio data.

Whap happens in "other" browsers is the equivalent of storing a
bookmark, closing the browser, starting a new browser and retrieving the
bookmark. This will not work in your application because you depend on
the session to remain the same.

The solution is to either NOT depend on the session for the audio data
retrieval, OR to include the session ID in the url itself. Which
solution you choose and how you wish to implement that solution is
entirely up to you. We'll be glad to help you regardless oft he
implementation you pick. Just don't expect your application to function
without modification, it is not Tomcat's nor the browser's "fault" that
it does not work, it is something you need to address in your web
application.

But if I change to use IE6/IE7/IE8, this problem never happened.
Does someone know the reason? thanks.

This message and attachment(s) are intended solely for use by the addressee and may contain
information that is privileged, confidential or otherwise exempt from disclosure under applicable
law.

If you are not the intended recipient or agent thereof responsible for delivering this message
to the intended recipient, you are hereby notified that any dissemination, distribution or
copying of this communication is strictly prohibited.

If you have received this communication in error, please notify the sender immediately by
telephone and with a 'reply' message.

Thank you for your co-operation.

RE: the Tomcat generates more than one session id with the same http request, please help me

2009-12-08T10:02:33Z

Sorry, figures in the E-mail I just sent can��t be seen.

I modified figures as attachments, and resend the mail.

 

 

 

 

I show these three audio files on the JSP page, just as following show.(See attachment figure1.png)

 

 

The script I used to show these audio files is like this: )See attachment figure2.png)

 



 

 

I select the icon of Ashanti.WAV, and press the right key of mouse, and it show the menu like
this: (See attachment figure3.png)

 

After I pressed the menu item ��Properties��, a dialog box will show, and we see the Location
of the audio file.

 

We can see that, jsessionid= 87ACD9BD3590FBE1051F33B2AA7AE488, but after I pressed the ��play��
button of the audio file, it doesn��t work. That is, this file can��t be played.

 

I traced in the log file, and found the real session id is 1FADDAF2B01872E5E8ECEB72C72BF98C.

 

Each time I pressed the play button, there are two lines added in the log, like this: 

TRACE 091208 17:19:25,476 http-8080-8      sessionid:1FADDAF2B01872E5E8ECEB72C72BF98C 

WARN  091208 17:19:25,476 http-8080-8      message from session is null!

 

So I can make sure that, there is something wrong with the session information.

 

 

I have tested this for lots of times with the browser FireFox3.5, and it always works like
this.

 

 

But if I change to use IE6/IE7/IE8, this problem never happened. Does someone know the reason?
thanks.

 

 

 

________________________________

From: Peter Chen [mailto:peter.chen@aicent.com] 
Sent: 2009��12��8�� 17:54
To: Tomcat Users List
Subject: RE: the Tomcat generates more than one session id with the same http request, please
help me

 

I show these three audio files on the JSP page, just as following show.



 

The script I used to show these audio files is like this:

 



 

 

I select the icon of Ashanti.WAV, and press the right key of mouse, and it show the menu like
this:



 

 

 

After I pressed the menu item ��Properties��, a dialog box will show, and we see the Location
of the audio file.



 

 

We can see that, jsessionid= 87ACD9BD3590FBE1051F33B2AA7AE488, but after I pressed the ��play��
button of the audio file, it doesn��t work. That is, this file can��t be played.

 

I traced in the log file, and found the real session id is 1FADDAF2B01872E5E8ECEB72C72BF98C.

 

Each time I pressed the play button, there are two lines added in the log, like this: 

TRACE 091208 17:19:25,476 http-8080-8      sessionid:1FADDAF2B01872E5E8ECEB72C72BF98C 

WARN  091208 17:19:25,476 http-8080-8      message from session is null!

 

So I can make sure that, there is something wrong with the session information.

 

 

I have tested this for lots of times with the browser FireFox3.5, and it always works like
this.

 

 

But if I change to use IE6/IE7/IE8, this problem never happened. Does someone know the reason?
thanks.

 

 

 

 

-----Original Message-----
From: Looijmans, Mike [mailto:mike.looijmans@oce.com] 
Sent: 2009��12��8�� 15:03
To: Tomcat Users List
Subject: RE: the Tomcat generates more than one session id with the same http request, please
help me

 

Seems like a propietary way of storing the session ID, I'm not much into JSP stuff so I really
don't know. Someone else here may be able to explain.

 

You can store whatever you need in parameters, either by putting into URLs or by creating
(hidden) controls on web forms. This is the preferred method of parameter passing, as it allows
multiple instances (e.g. browser tabs) to coexist. You should only store things in a session
that are related to the connection and user (e.g. user credentials, preferences and such),
but absolutely not the page he's navigating now.

 

You can also add a "path" to the URL, e.g.

 

getparts.jsp/137063/4

 

Then "getPathInfo()" will return "137063/4" in getparts.jsp.

 

M

 

> -----Original Message-----

> From: Peter Chen [mailto:peter.chen@aicent.com] 

> Sent: dinsdag 08 december 2009 07:49

> To: Tomcat Users List

> Subject: RE: the Tomcat generates more than one session id 

> with the same http request, please help me

> 

> Thanks for Mike's reply.

> 

> I searched on the Internet, and I got a method, the detail is 

> as follows:

> 

> 

> The most important sentence is 

> "getParts.jsp;jsessionid=B01FF12CBC92F9BA1682E9A883A3A1AD?time

> stamp=1260252638867&contentid=137063&timemark=20091110&index=4"

> 

> I know the URL like 

> "getParts.jsp?timestamp=1260252638867&contentid=137063&timemar

> k=20091110&index=4", this URL is used to pass parameters from 

> one Jsp to another one. And we can get parameters with 

> sentences like "request.getParameter("timestamp"); 

> request.getParameter("contentid ")".

> 

> But I don't know the part 

> "getParts.jsp;jsessionid=B01FF12CBC92F9BA1682E9A883A3A1AD", 

> is it also used to pass parameter?

> 

> If so, how to get the parameter? Thanks.

> 

> 

> 

> -----Original Message-----

> From: Looijmans, Mike [mailto:mike.looijmans@oce.com]

> Sent: 2009��12��7�� 16:39

> To: Tomcat Users List

> Subject: RE: the Tomcat generates more than one session id 

> with the same http request, please help me

> 

> Put the session ID in the URL and it will work on all systems.

> 

> Alternatively, don't use sessions for the audio file.

>  

> 

> > -----Original Message-----

> > From: Peter Chen [mailto:peter.chen@aicent.com]

> > Sent: maandag 07 december 2009 09:22

> > To: users@tomcat.apache.org

> > Subject: the Tomcat generates more than one session id with 

> the same 

> > http request, please help me

> > 

> > Hi, all

> > 

> >  

> > 

> > I am testing a website with the server Tomcat.  I am using Tomcat 

> > 5.5.26, and I found one problem.

> > 

> >  

> > 

> > The website is used to display audio files. After I log in the 

> > website, I can see the icon of the audio file. But after I 

> press the 

> > button "play", it has different results with different browsers.

> > 

> > When I use firefox3.5.5 and Google Chrome 3.0, I found the 

> Tomcat will 

> > create more than one session id, and it can not be played.

> > 

> > But if I use IE6.0/IE7.0/IE8.0, I found there is only one 

> session id, 

> > and it plays well.

> > 

> >  

> > 

> > I don't know the reason, has someone met this problem 

> before,  please 

> > help me to solve this problem, thanks.

> > 

> > 

> 

> This message and attachment(s) are intended solely for use by 

> the addressee and may contain information that is privileged, 

> confidential or otherwise exempt from disclosure under applicable law.

> 

> If you are not the intended recipient or agent thereof 

> responsible for delivering this message to the intended 

> recipient, you are hereby notified that any dissemination, 

> distribution or copying of this communication is strictly prohibited.

> 

> If you have received this communication in error, please 

> notify the sender immediately by telephone and with a 'reply' message.

> 

> Thank you for your co-operation.

> 

> 

> 

> ---------------------------------------------------------------------

> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org

> For additional commands, e-mail: users-help@tomcat.apache.org

> 

> 

> ---------------------------------------------------------------------

> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org

> For additional commands, e-mail: users-help@tomcat.apache.org

> 

> 

> 

 

This message and attachment(s) are intended solely for use by the addressee and may contain
information that is privileged, confidential or otherwise exempt from disclosure under applicable
law.

 

If you are not the intended recipient or agent thereof responsible for delivering this message
to the intended recipient, you are hereby notified that any dissemination, distribution or
copying of this communication is strictly prohibited.

 

If you have received this communication in error, please notify the sender immediately by
telephone and with a 'reply' message.

 

Thank you for your co-operation.

RE: the Tomcat generates more than one session id with the same http request, please help me

2009-12-08T09:54:05Z

I show these three audio files on the JSP page, just as following show.

 

 

The script I used to show these audio files is like this:

 



 

 

I select the icon of Ashanti.WAV, and press the right key of mouse, and it show the menu like
this:

 

 

 

 

After I pressed the menu item ��Properties��, a dialog box will show, and we see the Location
of the audio file.

 

 

 

We can see that, jsessionid= 87ACD9BD3590FBE1051F33B2AA7AE488, but after I pressed the ��play��
button of the audio file, it doesn��t work. That is, this file can��t be played.

 

I traced in the log file, and found the real session id is 1FADDAF2B01872E5E8ECEB72C72BF98C.

 

Each time I pressed the play button, there are two lines added in the log, like this: 

TRACE 091208 17:19:25,476 http-8080-8      sessionid:1FADDAF2B01872E5E8ECEB72C72BF98C 

WARN  091208 17:19:25,476 http-8080-8      message from session is null!

 

So I can make sure that, there is something wrong with the session information.

 

 

I have tested this for lots of times with the browser FireFox3.5, and it always works like
this.

 

 

But if I change to use IE6/IE7/IE8, this problem never happened. Does someone know the reason?
thanks.

 

 

 

 

-----Original Message-----
From: Looijmans, Mike [mailto:mike.looijmans@oce.com] 
Sent: 2009��12��8�� 15:03
To: Tomcat Users List
Subject: RE: the Tomcat generates more than one session id with the same http request, please
help me

 

Seems like a propietary way of storing the session ID, I'm not much into JSP stuff so I really
don't know. Someone else here may be able to explain.

 

You can store whatever you need in parameters, either by putting into URLs or by creating
(hidden) controls on web forms. This is the preferred method of parameter passing, as it allows
multiple instances (e.g. browser tabs) to coexist. You should only store things in a session
that are related to the connection and user (e.g. user credentials, preferences and such),
but absolutely not the page he's navigating now.

 

You can also add a "path" to the URL, e.g.

 

getparts.jsp/137063/4

 

Then "getPathInfo()" will return "137063/4" in getparts.jsp.

 

M

 

> -----Original Message-----

> From: Peter Chen [mailto:peter.chen@aicent.com] 

> Sent: dinsdag 08 december 2009 07:49

> To: Tomcat Users List

> Subject: RE: the Tomcat generates more than one session id 

> with the same http request, please help me

> 

> Thanks for Mike's reply.

> 

> I searched on the Internet, and I got a method, the detail is 

> as follows:

> 

> 

> The most important sentence is 

> "getParts.jsp;jsessionid=B01FF12CBC92F9BA1682E9A883A3A1AD?time

> stamp=1260252638867&contentid=137063&timemark=20091110&index=4"

> 

> I know the URL like 

> "getParts.jsp?timestamp=1260252638867&contentid=137063&timemar

> k=20091110&index=4", this URL is used to pass parameters from 

> one Jsp to another one. And we can get parameters with 

> sentences like "request.getParameter("timestamp"); 

> request.getParameter("contentid ")".

> 

> But I don't know the part 

> "getParts.jsp;jsessionid=B01FF12CBC92F9BA1682E9A883A3A1AD", 

> is it also used to pass parameter?

> 

> If so, how to get the parameter? Thanks.

> 

> 

> 

> -----Original Message-----

> From: Looijmans, Mike [mailto:mike.looijmans@oce.com]

> Sent: 2009��12��7�� 16:39

> To: Tomcat Users List

> Subject: RE: the Tomcat generates more than one session id 

> with the same http request, please help me

> 

> Put the session ID in the URL and it will work on all systems.

> 

> Alternatively, don't use sessions for the audio file.

>  

> 

> > -----Original Message-----

> > From: Peter Chen [mailto:peter.chen@aicent.com]

> > Sent: maandag 07 december 2009 09:22

> > To: users@tomcat.apache.org

> > Subject: the Tomcat generates more than one session id with 

> the same 

> > http request, please help me

> > 

> > Hi, all

> > 

> >  

> > 

> > I am testing a website with the server Tomcat.  I am using Tomcat 

> > 5.5.26, and I found one problem.

> > 

> >  

> > 

> > The website is used to display audio files. After I log in the 

> > website, I can see the icon of the audio file. But after I 

> press the 

> > button "play", it has different results with different browsers.

> > 

> > When I use firefox3.5.5 and Google Chrome 3.0, I found the 

> Tomcat will 

> > create more than one session id, and it can not be played.

> > 

> > But if I use IE6.0/IE7.0/IE8.0, I found there is only one 

> session id, 

> > and it plays well.

> > 

> >  

> > 

> > I don't know the reason, has someone met this problem 

> before,  please 

> > help me to solve this problem, thanks.

> > 

> > 

> 

> This message and attachment(s) are intended solely for use by 

> the addressee and may contain information that is privileged, 

> confidential or otherwise exempt from disclosure under applicable law.

> 

> If you are not the intended recipient or agent thereof 

> responsible for delivering this message to the intended 

> recipient, you are hereby notified that any dissemination, 

> distribution or copying of this communication is strictly prohibited.

> 

> If you have received this communication in error, please 

> notify the sender immediately by telephone and with a 'reply' message.

> 

> Thank you for your co-operation.

> 

> 

> 

> ---------------------------------------------------------------------

> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org

> For additional commands, e-mail: users-help@tomcat.apache.org

> 

> 

> ---------------------------------------------------------------------

> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org

> For additional commands, e-mail: users-help@tomcat.apache.org

> 

> 

> 

 

This message and attachment(s) are intended solely for use by the addressee and may contain
information that is privileged, confidential or otherwise exempt from disclosure under applicable
law.

 

If you are not the intended recipient or agent thereof responsible for delivering this message
to the intended recipient, you are hereby notified that any dissemination, distribution or
copying of this communication is strictly prohibited.

 

If you have received this communication in error, please notify the sender immediately by
telephone and with a 'reply' message.

 

Thank you for your co-operation.

Re: directory path

2009-12-08T09:17:42Z

File Send wrote:
> Hi Team,
> 
>   I have started using Tomcat 5.5.27 recently and now I would like to
> integrate with Axis for web service development.However, I could see many
> web-inf and lib folders so I am confused where I should keep my library
> files. I thought of using this location C:\Documents and Settings\minglau\My
> Documents\Tomcat5.5\apache-tomcat-5.5.27\webapps. However, it does not seem
> to be appropriate. Another thing - I also wrote jsp and kept it at
> C:\Documents and Settings\minglau\My
> Documents\Tomcat5.5\apache-tomcat-5.5.27\webapps\ROOT location but its not
> getting detected from browser by typing the url
> http://localhost:8080/xyz.jsp. Can any one please suggest the answers for
> these two issues. 

One tip : de-install Tomcat, and re-install it to some sensible 
location, like c:\tomcat.
If nothing else, it will save you a lot of typing, and save time to 
other people on this list trying to follow your posts.

Other than that, what really happens when you enter 
"http://localhost:8080/xyz.jsp" in the browser's URL bar ?

"not getting detected" is not really helpful here.


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

RE: the Tomcat generates more than one session id with the same http request, please help me

2009-12-08T07:02:56Z

Seems like a propietary way of storing the session ID, I'm not much into JSP stuff so I really
don't know. Someone else here may be able to explain.

You can store whatever you need in parameters, either by putting into URLs or by creating
(hidden) controls on web forms. This is the preferred method of parameter passing, as it allows
multiple instances (e.g. browser tabs) to coexist. You should only store things in a session
that are related to the connection and user (e.g. user credentials, preferences and such),
but absolutely not the page he's navigating now.

You can also add a "path" to the URL, e.g.

getparts.jsp/137063/4

Then "getPathInfo()" will return "137063/4" in getparts.jsp.

M

> -----Original Message-----
> From: Peter Chen [mailto:peter.chen@aicent.com] 
> Sent: dinsdag 08 december 2009 07:49
> To: Tomcat Users List
> Subject: RE: the Tomcat generates more than one session id 
> with the same http request, please help me
> 
> Thanks for Mike's reply.
> 
> I searched on the Internet, and I got a method, the detail is 
> as follows:
> 
> 
> The most important sentence is 
> "getParts.jsp;jsessionid=B01FF12CBC92F9BA1682E9A883A3A1AD?time
> stamp=1260252638867&contentid=137063&timemark=20091110&index=4"
> 
> I know the URL like 
> "getParts.jsp?timestamp=1260252638867&contentid=137063&timemar
> k=20091110&index=4", this URL is used to pass parameters from 
> one Jsp to another one. And we can get parameters with 
> sentences like "request.getParameter("timestamp"); 
> request.getParameter("contentid ")".
> 
> But I don't know the part 
> "getParts.jsp;jsessionid=B01FF12CBC92F9BA1682E9A883A3A1AD", 
> is it also used to pass parameter?
> 
> If so, how to get the parameter? Thanks.
> 
> 
> 
> -----Original Message-----
> From: Looijmans, Mike [mailto:mike.looijmans@oce.com]
> Sent: 2009年12月7日 16:39
> To: Tomcat Users List
> Subject: RE: the Tomcat generates more than one session id 
> with the same http request, please help me
> 
> Put the session ID in the URL and it will work on all systems.
> 
> Alternatively, don't use sessions for the audio file.
>  
> 
> > -----Original Message-----
> > From: Peter Chen [mailto:peter.chen@aicent.com]
> > Sent: maandag 07 december 2009 09:22
> > To: users@tomcat.apache.org
> > Subject: the Tomcat generates more than one session id with 
> the same 
> > http request, please help me
> > 
> > Hi, all
> > 
> >  
> > 
> > I am testing a website with the server Tomcat.  I am using Tomcat 
> > 5.5.26, and I found one problem.
> > 
> >  
> > 
> > The website is used to display audio files. After I log in the 
> > website, I can see the icon of the audio file. But after I 
> press the 
> > button "play", it has different results with different browsers.
> > 
> > When I use firefox3.5.5 and Google Chrome 3.0, I found the 
> Tomcat will 
> > create more than one session id, and it can not be played.
> > 
> > But if I use IE6.0/IE7.0/IE8.0, I found there is only one 
> session id, 
> > and it plays well.
> > 
> >  
> > 
> > I don't know the reason, has someone met this problem 
> before,  please 
> > help me to solve this problem, thanks.
> > 
> > 
> 
> This message and attachment(s) are intended solely for use by 
> the addressee and may contain information that is privileged, 
> confidential or otherwise exempt from disclosure under applicable law.
> 
> If you are not the intended recipient or agent thereof 
> responsible for delivering this message to the intended 
> recipient, you are hereby notified that any dissemination, 
> distribution or copying of this communication is strictly prohibited.
> 
> If you have received this communication in error, please 
> notify the sender immediately by telephone and with a 'reply' message.
> 
> Thank you for your co-operation.
> 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
> 
> 
> 

This message and attachment(s) are intended solely for use by the addressee and may contain
information that is privileged, confidential or otherwise exempt from disclosure under applicable
law.

If you are not the intended recipient or agent thereof responsible for delivering this message
to the intended recipient, you are hereby notified that any dissemination, distribution or
copying of this communication is strictly prohibited.

If you have received this communication in error, please notify the sender immediately by
telephone and with a 'reply' message.

Thank you for your co-operation.

RE: the Tomcat generates more than one session id with the same http request, please help me

2009-12-08T07:00:24Z

Hi pid,

I used a JavaBean to pass the parameter, the sentence is like this:

And the scope is session, in the Jsp page, I use this JavaBean like this:
Message msg = bean.getMessage();

And in the object of Message, I stored a MMS(Multimedia Message Service, include video and
audio files), and I will get this MMS��file later on.

But after testing, I found that, sometimes I executed the sentence "Message msg = bean.getMessage();",
and the variable msg return null.
But most time, it works well, and return a correct object.

Could you tell me the reason? Or is something I have done wrong?

-----Original Message-----
From: Pid [mailto:pid@pidster.com] 
Sent: 2009��12��7�� 18:21
To: users@tomcat.apache.org
Subject: Re: the Tomcat generates more than one session id with the same http request, please
help me

On 07/12/2009 08:22, Peter Chen wrote:
> Hi, all
>
>
>
> I am testing a website with the server Tomcat.  I am using Tomcat
> 5.5.26, and I found one problem.
>
>
>
> The website is used to display audio files. After I log in the website,
> I can see the icon of the audio file. But after I press the button
> "play", it has different results with different browsers.
>
> When I use firefox3.5.5 and Google Chrome 3.0, I found the Tomcat will
> create more than one session id, and it can not be played.

What bearing does the session have on this?
Are you storing data in it?

> But if I use IE6.0/IE7.0/IE8.0, I found there is only one session id,
> and it plays well.
>
> I don't know the reason, has someone met this problem before,  please
> help me to solve this problem, thanks.

Are you properly encoding all link URLs on each page with 
HttpServletResponse.encodeURL()?

p

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org