| 00:07.21 | *** join/#tomcat relachs (~relachs@f055108042.adsl.alicedsl.de) |
| 00:43.15 | *** join/#tomcat dvayanu (~another@p5793D218.dip.t-dialin.net) |
| 01:27.56 | *** join/#tomcat Oxford (~mounika@ool-4573f43b.dyn.optonline.net) |
| 01:53.29 | *** join/#tomcat jasonb (~jasonb@dsl092-009-225.sfo1.dsl.speakeasy.net) |
| 02:47.12 | *** join/#tomcat karstensrage (~karstensr@c-71-202-243-186.hsd1.ca.comcast.net) |
| 03:30.12 | *** join/#tomcat Hellaenergy (~Hellaener@c-75-72-181-160.hsd1.mn.comcast.net) |
| 04:21.24 | *** join/#tomcat kasun (~kasun@123.231.64.242) |
| 04:30.22 | *** join/#tomcat Luminari (~Nate@pool-71-247-88-191.nycmny.east.verizon.net) |
| 04:31.06 | Luminari | When a new session gets created, no matter what I set for maxInactiveInterval, the session cookie expires when the browser closes, killing access to the session. How do I fix this> |
| 04:31.09 | Luminari | ? |
| 04:38.33 | *** join/#tomcat bhagat (~bhagat@218.248.24.19) |
| 04:47.31 | karstensrage | session timeout? |
| 04:49.22 | Luminari | the session timeout doesn't seem to be related to the cookie timeout |
| 04:59.35 | *** join/#tomcat bhagat (~bhagat@218.248.24.19) |
| 05:10.21 | Luminari | The problem is the session cookie is set to expire when the browser closes regardless of what the session timeout is |
| 05:10.35 | *** join/#tomcat mahiti_skt (~mahiti@122.166.127.74) |
| 05:13.48 | karstensrage | thats more likely a browser setting |
| 05:14.03 | karstensrage | in firefox for example you can set cookies to expire when you close the browser |
| 05:14.33 | Luminari | if a cookie actually specifies an expiration, they won't expire, the problem is tomcat isn't setting one |
| 05:15.51 | karstensrage | tomcat does set one to 20 minutes IIRC |
| 05:15.56 | karstensrage | you can modify that in web.xml |
| 05:16.06 | Luminari | how? |
| 05:16.18 | karstensrage | this is for the JSESSIONID cookie not any cookie |
| 05:16.23 | Luminari | yes |
| 05:16.39 | karstensrage | its part of the spec |
| 05:16.40 | karstensrage | http://www.adp-gmbh.ch/java/web_application/web_xml.html |
| 05:17.10 | *** join/#tomcat youngdev (~quassel@c-76-123-109-141.hsd1.fl.comcast.net) |
| 05:17.36 | Luminari | if your referring to the session timeout, that just sets the expiration of the session timeout, the cookie that references it still get set to expire when the browser closes |
| 05:17.50 | karstensrage | thats a browser setting |
| 05:18.10 | Luminari | no, it's not, its tomcat not setting a cookie timeout |
| 05:29.30 | karstensrage | ok well the spec makes no mention of the cookie timeout |
| 05:29.34 | karstensrage | only the session time out |
| 05:30.01 | Luminari | bleh, the session timeout is pointless if the session is lost every time the browser window closes |
| 05:30.27 | karstensrage | lol |
| 05:30.45 | karstensrage | the session timeout is pointless if you CLOSE THE SESSION |
| 05:31.02 | Luminari | closing the browser window != close the session |
| 05:31.23 | karstensrage | really |
| 05:32.12 | Luminari | for example if I want to be able to remember users when they log in so the next time the don't have to log in again |
| 05:32.17 | karstensrage | well have to wait for someone more knowledgable, i do not expect to be able to pick up the SESSION where i left off after closing the browser |
| 05:32.22 | Luminari | setting that information in a cookie would be bad |
| 05:33.37 | karstensrage | thats how sites do it |
| 05:33.53 | karstensrage | a server shouldnt be expected to maintain a session for days and days in case you connect again |
| 05:33.56 | karstensrage | thats ridiculous |
| 05:34.20 | Luminari | why? |
| 05:34.22 | karstensrage | you think facebook has 500M sessions going? |
| 05:34.49 | Luminari | they have some sort of equivalent |
| 05:35.02 | karstensrage | right |
| 05:35.04 | Luminari | a sessions is just a datastore like any other |
| 05:35.05 | karstensrage | they set a cookie |
| 05:35.57 | Luminari | they don't just set a cookie like facebookcookie=joeuser, they have an id which translates to a datastore |
| 05:36.38 | karstensrage | right and they may populate a NEW session with stuff from the datastore |
| 05:36.45 | karstensrage | but they dont maintain the session |
| 05:37.11 | karstensrage | remember-me authentication is always done with a cookie |
| 05:37.58 | Luminari | I guess I'll have to implement my own cookie, I also realized it would be really bad if someone brute force tried to guess the session id and took over someone elses login |
| 05:38.28 | karstensrage | yes thats called session hijacking and they dont brute force the sessionid |
| 05:38.41 | karstensrage | you can mitigate that by ALWAYS creating a new session |
| 05:39.32 | Luminari | I can also store multiple pieces of data in the cookie so guessing who was logged in and the session id it goes to would be next to impossible |
| 05:40.15 | karstensrage | i heard of some spec for a central cookie server |
| 05:40.33 | karstensrage | where the site you go to would post a cookie about you to a central server so other sites could get to it |
| 05:40.50 | karstensrage | "what could possibly go wrong" |
| 05:41.34 | Luminari | well I only need the cookie for one site :) |
| 05:46.56 | *** join/#tomcat Luftzig (~yoav@bzq-84-108-6-51.cablep.bezeqint.net) |
| 05:49.04 | Luminari | sigh, nothing is ever simple |
| 06:12.06 | *** join/#tomcat mattock (~samuli@dyn55-11.yok.fi) |
| 06:19.06 | *** join/#tomcat tess (~tess@c-24-130-52-152.hsd1.ca.comcast.net) |
| 06:19.08 | *** join/#tomcat mahiti_skt (~mahiti@122.166.127.74) |
| 06:25.22 | *** join/#tomcat tess_ (~tess@c-24-130-52-152.hsd1.ca.comcast.net) |
| 06:34.03 | *** join/#tomcat tess_ (~tess@c-24-130-52-152.hsd1.ca.comcast.net) |
| 06:36.33 | *** join/#tomcat tess (~tess@c-24-130-52-152.hsd1.ca.comcast.net) |
| 06:40.30 | *** join/#tomcat ExtraSpice (~ExtraSpic@88.118.32.225) |
| 06:55.10 | *** join/#tomcat tess (~tess@c-24-130-52-152.hsd1.ca.comcast.net) |
| 06:59.25 | *** join/#tomcat adurotec (~davidc@99-128-202-215.lightspeed.okpkil.sbcglobal.net) |
| 07:51.13 | *** join/#tomcat jasonb (~jasonb@adsl-66-124-73-250.dsl.sntc01.pacbell.net) |
| 08:19.46 | *** join/#tomcat IceFacesIsAFix_ (~IceFacesI@xdsl-78-35-54-1.netcologne.de) |
| 08:35.30 | *** join/#tomcat factor (~factor@ip68-14-160-47.ok.ok.cox.net) |
| 09:00.58 | *** join/#tomcat IceFacesIsAFix (~IceFacesI@xdsl-78-35-54-1.netcologne.de) |
| 09:17.18 | *** join/#tomcat skamster (~skamster@77-56-73-44.dclient.hispeed.ch) |
| 09:20.22 | skamster | hello all.. i want to setup a http-base-auth for testing |
| 09:20.23 | skamster | http://pastebin.com/9tnLEuCY |
| 09:20.47 | skamster | these are my files (server.xml, tomcat-users.xml, server.xml) |
| 09:21.15 | skamster | it doesn't work yet... i'm able to access every site without login |
| 09:22.10 | skamster | ah, and i use tomcat 6 |
| 09:22.17 | skamster | could someone help me? :) |
| 09:34.40 | skamster | i really tried it with tutorials and so on.. |
| 09:43.16 | skamster | ah, i wasnt see the topic.. i've got java 6 and ubuntu 10.04.. it doesn't seem to log, it's a compilation called "springsource" (ide + tomcat-server) |
| 09:59.11 | *** join/#tomcat internat (~nf@123-243-184-161.static.tpgi.com.au) |
| 10:39.47 | *** join/#tomcat marthinal (~chatzilla@248.Red-83-63-185.staticIP.rima-tde.net) |
| 11:03.18 | *** join/#tomcat sunit (7ab01fb7@gateway/web/freenode/ip.122.176.31.183) |
| 11:03.48 | sunit | Hello I need help |
| 11:04.04 | sunit | I am using Ubuntu 9.10 |
| 11:04.12 | sunit | Java 1.6 |
| 11:05.20 | sunit | and tomcat 6 |
| 11:05.45 | sunit | when I am giving http://localhost:8080/ |
| 11:06.01 | sunit | I am not getting anything |
| 11:06.51 | sunit | it shows that waiting for localhost |
| 11:07.35 | sunit | for a very long time to load the page |
| 11:08.08 | Emperorlou | did you check the logs for any exceptions on startup or connect? |
| 11:09.42 | sunit | after a very long time I got error as connection not available |
| 11:09.52 | sunit | see the link http://pastebin.com/nXGEyMTT |
| 11:11.48 | Emperorlou | http://www.judahfrangipane.com/blog/?p=95 |
| 11:11.51 | Emperorlou | does that help? |
| 11:17.15 | sunit | what shall I do with that link ? I can't understand really !! |
| 11:22.50 | sunit | you can see the link http://dpaste.com/218781/ |
| 11:45.26 | sunit | hello Emperorlou have you seen the link ? |
| 11:53.33 | skamster | hello all.. i want to setup a http-base-auth for testing |
| 11:53.38 | skamster | http://pastebin.com/9tnLEuCY |
| 11:53.42 | skamster | these are my files (server.xml, tomcat-users.xml, server.xml) |
| 11:53.47 | skamster | it doesn't work yet... i'm able to access every site without login |
| 11:54.00 | skamster | ah, and i use tomcat 6 |
| 11:54.17 | skamster | i've got java 6 and ubuntu 10.04.. it doesn't seem to log, it's a compilation called "springsource" (ide + tomcat-server) |
| 11:54.22 | skamster | could someone help me? :) |
| 12:13.29 | sunit | please see the url http://pastebin.com/8XMzephj where my catalina log is pasted |
| 12:18.53 | *** join/#tomcat silviu_h (~Silviu@86.123.160.26) |
| 12:34.46 | *** join/#tomcat relachs (~relachs@f055108042.adsl.alicedsl.de) |
| 13:30.54 | *** join/#tomcat randrewj (~u1@dyn-128-59-53-67.dyn.columbia.edu) |
| 13:50.35 | *** join/#tomcat tess (~tess@c-24-130-52-152.hsd1.ca.comcast.net) |
| 14:02.27 | *** join/#tomcat calavera (~calavera_@83.50.71.14) |
| 14:23.59 | *** join/#tomcat eldragon_ (~eldragon@84.79.67.254) |
| 14:32.16 | *** join/#tomcat eldragon (~eldragon@84.79.67.254) |
| 14:36.26 | *** join/#tomcat dvayanu (~another@p5793D218.dip.t-dialin.net) |
| 14:41.44 | *** join/#tomcat Emperorlou (~nikolasar@bas4-hull20-2925524627.dsl.bell.ca) |
| 15:00.50 | *** join/#tomcat eldragon (~eldragon@84.79.67.254) |
| 15:09.44 | *** join/#tomcat necrite (~martin@r200-125-16-86.ae-static.anteldata.net.uy) |
| 15:10.15 | necrite | hello, anyone here use the check_jmx nagios plugin for tomcat monitoring ? |
| 15:19.55 | *** join/#tomcat dvayanu (~another@p5793D218.dip.t-dialin.net) |
| 15:38.35 | *** join/#tomcat MikeO1972 (0c028e0c@gateway/web/freenode/ip.12.2.142.12) |
| 15:41.42 | *** join/#tomcat km (~km@adsl-99-63-78-40.dsl.pltn13.sbcglobal.net) |
| 15:42.02 | *** join/#tomcat jasonb (~jasonb@m430536d0.tmodns.net) |
| 15:43.07 | MikeO1972 | We're running Tomcat 4.2.2, Java 1.5.0_15 on RHEL4 (update 8). Trying to get JBOSS Clustering working in Unicast, but for some reason when we configure it as TCP, it will still establish a UDP socket. Is there a way we should start JBOSS or Tomcat to establish as Unicast? |
| 15:46.09 | MikeO1972 | Sorry, I meant to say we are running Tomcat 6.0.13 with JBoss 4.2.2. |
| 15:51.57 | jasonb | MikeO1972: Even though you're using Tomcat in there, this is really a jBoss question. |
| 15:54.01 | MikeO1972 | ok, thank you! |
| 16:24.20 | *** join/#tomcat tess (~tess@c-24-130-52-152.hsd1.ca.comcast.net) |
| 16:33.29 | *** join/#tomcat jMCg (~hiro@unaffiliated/jmcg) |
| 16:34.22 | *** join/#tomcat km (~km@adsl-99-63-78-40.dsl.pltn13.sbcglobal.net) |
| 16:43.19 | *** join/#tomcat pives (~pives@75-147-111-177-Philadelphia.hfc.comcastbusiness.net) |
| 16:45.21 | *** join/#tomcat cmayo (~cmayo@pool-96-228-127-27.albyny.east.verizon.net) |
| 16:51.03 | *** join/#tomcat jasonb (~jasonb@dsl092-009-225.sfo1.dsl.speakeasy.net) |
| 16:57.21 | *** join/#tomcat relachs (~relachs@f055108042.adsl.alicedsl.de) |
| 17:14.42 | *** join/#tomcat fubada (~fubada@ool-4b7faf03.static.optonline.net) |
| 17:14.59 | fubada | hi, can someone please point me to a guide on session sharing in tomcat 6, without clustering or load balancing |
| 17:15.02 | fubada | JUST session sharin |
| 17:15.23 | fubada | linux, tomcat 6, java 6 |
| 17:16.15 | fubada | tc 6.0.28 :) |
| 17:37.46 | *** join/#tomcat relachs2 (~relachs@g225220169.adsl.alicedsl.de) |
| 17:45.27 | *** join/#tomcat Alagar (~Administr@122.164.36.164) |
| 17:56.57 | frey | Ok. I'm having a hard time getting my SSL private key into Tomcat 6.0. |
| 17:57.24 | frey | Do you know of some tutorial or website that could help me do this right? |
| 17:58.12 | frey | Is it possible to import a already owned private key into a Java keystore with keytool? |
| 17:59.12 | frey | I have my private key in both .pem and .pfx. |
| 18:10.47 | *** join/#tomcat pives (~pives@c-76-124-191-235.hsd1.pa.comcast.net) |
| 18:12.51 | *** join/#tomcat calavera (~calavera_@83.50.71.14) |
| 18:26.44 | frey | Ok, found a solution. I'm using APR. |
| 18:27.35 | frey | How can I force SSL? |
| 18:29.22 | frey | I want to force SSL by transfering the client to the SSL port. |
| 18:29.47 | *** join/#tomcat d1b (~db@d1b.org) |
| 18:29.54 | *** part/#tomcat d1b (~db@d1b.org) |
| 18:30.46 | *** join/#tomcat knut (~knut@197.89-10-28.nextgentel.com) |
| 18:31.12 | cmayo | does anyone here put tomcat on the same server as their www server, or do they separate them? |
| 18:31.18 | cmayo | frey: what do you do? |
| 18:31.58 | frey | cmayo: It depends. But I'm not an expert in Tomcat. |
| 18:32.14 | frey | cmayo: Is it a busy server? |
| 18:32.15 | cmayo | frey: well, how can i make a better informed decision? |
| 18:32.37 | frey | cmayo: Try both and use JMeter and see how well it handles the load. |
| 18:32.38 | cmayo | not right now, but it's growing at about 100 uv's more each day, and we are about to start an internet marketing campaign we paid 20k USD for |
| 18:58.11 | frey | cmayo: If you use JMeter on it, you will be able to see how much load your system will handle. |
| 19:16.43 | *** part/#tomcat randrewj (~u1@dyn-128-59-53-67.dyn.columbia.edu) |
| 19:17.39 | *** join/#tomcat acidjnk (acid@160-225-103-86.dynamic.dsl.tng.de) |
| 19:23.16 | *** join/#tomcat tess (~tess@38.99.52.137) |
| 19:30.55 | frey | Ok, I have a new problem. :-) |
| 19:35.45 | frey | I'm using Jasig CAS, but each time I log into CAS with a GET parameter to the site I want to use, it rewrites the URL to so that it becomes invalid. Example: I log into https://login.example.com/ but I end up at https://login/ which is invalid. |
| 19:36.14 | frey | Is it possible that Tomcat sees my site as https://login/ but not https://login.example.com? |
| 20:23.22 | *** join/#tomcat RDove (~rdove@unaffiliated/rdove) |
| 20:38.36 | *** join/#tomcat IceFacesIsAFix (~IceFacesI@xdsl-78-35-52-82.netcologne.de) |
| 20:40.16 | *** join/#tomcat IceFacesIsAFix_ (~IceFacesI@xdsl-78-35-52-82.netcologne.de) |
| 21:03.07 | frey | Found the solution. |
| 21:03.59 | frey | Still trying to find a good solution to transferring to from non SSL port to SSL port. |
| 21:18.36 | *** join/#tomcat IceFacesIsAFix_ (~IceFacesI@xdsl-78-35-52-82.netcologne.de) |
| 21:29.16 | *** join/#tomcat dvayanu (~another@p5793D218.dip.t-dialin.net) |
| 23:51.23 | *** join/#tomcat dvayanu_ (~another@p578E8BC2.dip.t-dialin.net) |
| 23:59.51 | *** join/#tomcat IceFacesIsAFix (~IceFacesI@xdsl-78-35-52-82.netcologne.de) |
| 23:59.51 | *** join/#tomcat RDove (~rdove@unaffiliated/rdove) |
| 23:59.51 | *** join/#tomcat tess (~tess@38.99.52.137) |
| 23:59.51 | *** join/#tomcat eldragon (~eldragon@84.79.67.254) |
| 23:59.51 | *** join/#tomcat bugz^ (~bugz@99-59-232-176.lightspeed.irvnca.sbcglobal.net) |