| 00:15.11 | DarkStar1 | Hi people. I'm having a problem with (I'm not sure whether it's a tomcat issue or a system issue) setting up tomcat to use SSL. I followed the guide on the tomcat homepage and have uncommented the SSL connector but Tomcat wont open up the SSL port |
| 00:16.06 | jMCg | KamaKaze: why not use the binary? |
| 00:17.56 | DarkStar1 | Well when I target the port I see it has redirected the port to the SSL port but the app isn't available on the port |
| 00:19.09 | jMCg | DarkStar1: lose the redirect stuff, and do SSL (only). |
| 00:19.29 | KamaKaze | jMCg: thanks for responding... I did... something still isn't working |
| 00:20.00 | DarkStar1 | Ok.. I just did a port scan and saw that the SSL port isn't open |
| 00:20.01 | KamaKaze | I am trying this command right now... ./configure --with-java=/Developer/SDKs/MacOSX10.6.sdk/System/Library/Frameworks/JavaVM.framework |
| 00:20.22 | KamaKaze | but i know that it is not quite right either |
| 00:22.14 | jMCg | heh.. I didn't recognize mturk with glasses in that post. |
| 00:22.26 | jMCg | s/glasses/sun &/ |
| 00:23.02 | jMCg | ibot: you don't support & as shortcut for the entire match? pfffft... |
| 00:24.06 | jMCg | KamaKaze: I don't get why you're trying to build it. It's java, it should just run anywhere, you know.. |
| 00:24.17 | jMCg | bin/catalina.sh start |
| 00:24.21 | KamaKaze | I guess my newbieness is showing |
| 00:24.28 | DarkStar1 | jMCg: btw should I just comment out the standard connector and run the SSL on the same port as the standard? |
| 00:24.36 | jMCg | KamaKaze: yeah, you should fix that. |
| 00:24.43 | KamaKaze | working on it |
| 00:24.43 | jMCg | KamaKaze: or learn how to compile stuff. |
| 00:24.44 | DarkStar1 | jMCg: Or is there more to it than that? |
| 00:25.08 | jMCg | DarkStar1: well.. a more or less valid certificate? |
| 00:25.46 | KamaKaze | jMCg: would you mind giving me the full command? "bin/catalina.sh start" |
| 00:25.53 | DarkStar1 | jMCg: Well I don't know how to test it's valid as it's a self signed cert |
| 00:26.11 | DarkStar1 | but I created one using a keytool I found in /usr/bin |
| 00:26.57 | DarkStar1 | jMCg: but do you think the cert could stop it from opening up the SSL port? |
| 00:27.48 | DarkStar1 | jMCg: because it is re-directing to the SSL but nthe port isn't open |
| 00:28.49 | jMCg | DarkStar1: what does the log say? |
| 00:28.56 | jMCg | Also: |
| 00:28.58 | jMCg | -> bed |
| 00:29.00 | DarkStar1 | jMCg: Hang on |
| 00:29.20 | DarkStar1 | jMCg: I feel ya.. Me too. It's 0030 here |
| 00:29.33 | KamaKaze | please |
| 00:29.41 | jMCg | 01:30 for me. |
| 00:30.14 | jMCg | users@ has more people who don't ever sleep. |
| 01:16.07 | *** part/#tomcat KamaKaze (~Kamikaze@ool-43521abd.dyn.optonline.net) |
| 01:16.19 | DarkStar1 | Hi. Does anyone have any experience creating SSL certificates? |
| 01:32.43 | *** part/#tomcat DarkStar1 (~DarkStar1@cpc5-oxfd18-2-0-cust654.4-3.cable.virginmedia.com) |
| 02:06.01 | *** join/#tomcat wad (~wad@zerbat.com) |
| 03:23.41 | *** join/#tomcat mansour (~mansour@78.155.82.0) |
| 03:40.44 | *** join/#tomcat mansour (~mansour@78.155.82.0) |
| 05:46.37 | *** join/#tomcat skataria (~Katarias@115.248.140.18) |
| 05:51.21 | *** join/#tomcat ankit84 (73f88c12@gateway/web/freenode/ip.115.248.140.18) |
| 05:51.28 | ankit84 | hi all, |
| 05:51.45 | ankit84 | I am unable to connect to tomcat server |
| 05:51.54 | ankit84 | [error] channelUn.connect() connect failed 111 Connection refused |
| 05:53.19 | ankit84 | tomcat-6.0.30 |
| 05:53.35 | ankit84 | httpd-2.0.63 |
| 05:54.07 | ankit84 | jdk1.5.0_01 |
| 05:54.42 | ankit84 | Linux 2.6.18 |
| 06:15.53 | *** join/#tomcat dvayanu_ (~another@p578E8EEF.dip.t-dialin.net) |
| 06:27.06 | ankit84 | any one around |
| 06:43.34 | *** join/#tomcat km (~km@little-black-box.vmware.com) |
| 06:44.51 | ankit84 | lb.service() worker failed 120000 for ajp13:/opt/tomcat/work/jk2. |
| 07:59.41 | *** join/#tomcat vak (~chatzilla@g226104218.adsl.alicedsl.de) |
| 07:59.44 | vak | hi all |
| 08:10.46 | *** join/#tomcat cnoll (~chatzilla@pc007476.tgo.uni-oldenburg.de) |
| 08:21.56 | *** part/#tomcat vak (~chatzilla@g226104218.adsl.alicedsl.de) |
| 08:36.25 | *** join/#tomcat IceFacesIsAFix (~IceFacesI@xdsl-89-0-152-125.netcologne.de) |
| 09:27.06 | *** join/#tomcat ExtraSpice (~XtraSpice@88.118.33.48) |
| 09:34.06 | *** join/#tomcat rohdef (~rohdef@2505ds7-ar.0.fullrate.dk) |
| 09:34.45 | rohdef | can a database conneection pool or some log4j loggers result in tomcat reporting memory leeks when I run find leaks? |
| 09:35.39 | rohdef | (I have the connection pool especially under suspicion) |
| 09:35.53 | *** join/#tomcat dvayanu (~another@ds87-230-56-22.dedicated.hosteurope.de) |
| 10:57.10 | *** join/#tomcat TommyBotten (~tommy@2001:470:ddaf::2) |
| 11:00.00 | TommyBotten | How long would you suggest letting tomcat 7 mature for large scale deployments? |
| 11:12.27 | *** join/#tomcat SolarBoom (~Nurlan@93.184.238.217) |
| 11:20.46 | skataria | hello, i have the problem with tomcat and apache integration with mod_jk2 |
| 11:21.11 | skataria | is there any one knows about integration apache and tomcat |
| 11:22.41 | *** join/#tomcat DarkStar1 (~DarkStar1@cpc5-oxfd18-2-0-cust654.4-3.cable.virginmedia.com) |
| 11:30.15 | DarkStar1 | Question. Is it advisable to run Tomcat(5.5) as root? I know the answer is "That's not wise" but I need someone to explain why? As I may be asked to bind it to the lower ports. |
| 11:42.21 | TommyBotten | DarkStar1: For security. One thing is that some malicious "hacker" can make the application running in the container do evil stuff. But (in my experience) the most important; from the developers themselves. |
| 11:42.51 | TommyBotten | If you need tomcat to run on port 80, you can always place an apache httpd in front. Or even do some rerouting with iptables. |
| 11:45.25 | DarkStar1 | TommyBotten: Thanks.. I have gone the iptables way. But some ansy admin somewhere is blocking access to the app from an area office. His excuse is that they block access to that port (at least that's what my employers have relayed to me) The app is accessible from elsewhere though |
| 11:45.56 | TommyBotten | firewall admins tend to be a bit ... short sighted. |
| 11:46.48 | DarkStar1 | TommyBotten: but why would you disallow connection to an app on anything higher than the low ports? |
| 11:48.04 | TommyBotten | Not sure I understand your question... |
| 11:50.24 | DarkStar1 | Well the app is hosted externally. so from anywhere else you can connect to the app except from this one area office. The reason I'm being told is that unless the app runs on the low ports (80 and 443) then it will be blocked |
| 11:51.21 | TommyBotten | ah |
| 11:51.45 | TommyBotten | that is a very common and perhaps a bit old understanding of security. |
| 11:52.14 | TommyBotten | now viruses, malware etc can easily connect and exchange info via regular web servers. |
| 11:52.30 | TommyBotten | but .. using standard ports is always a good idea. |
| 11:52.48 | DarkStar1 | But in order to do this I need tomcat binded to root |
| 11:53.17 | TommyBotten | nope ... you can put an apache http server in front |
| 11:53.31 | DarkStar1 | which is a very very VERY bad idea in this case. because the programmer that wrote this app, is storing some crucial files in the webapps folder |
| 11:53.46 | TommyBotten | which is pretty common. or you can even do a iptables reroute. so that tomcat binds to port 8090, but iptables forwards traffic from port 80 to port 8090 |
| 11:54.14 | TommyBotten | what is a bad idea? .. the apache http server in front? |
| 11:54.20 | DarkStar1 | TommyBotten: I have put iptables infrot such that all port 80 traffics are routed to 8080 |
| 11:54.49 | DarkStar1 | TommyBotten: allowing tomcat as root so I can bind to the low ports is a bd idea |
| 11:54.50 | TommyBotten | ah |
| 11:55.01 | TommyBotten | yes, exactly |
| 11:56.11 | *** join/#tomcat hex` (~hex@unaffiliated/hex/x-261681) |
| 11:56.23 | DarkStar1 | but when you target the app via port 80, you see the redirected port listed in the address in the browser |
| 11:56.35 | *** join/#tomcat km (~km@little-black-box.vmware.com) |
| 11:59.43 | TommyBotten | what? |
| 12:00.02 | TommyBotten | so URLs in the app gets represented as 8080 ? |
| 12:00.30 | DarkStar1 | TommyBotten: yeah |
| 12:00.46 | TommyBotten | that sounds like a buggy application |
| 12:00.59 | DarkStar1 | TommyBotten: Well 8443 as tomcat redirects to 8443 |
| 12:01.08 | TommyBotten | imho it should reference the HTTP REQUEST, not internal tomcat ports |
| 12:01.53 | DarkStar1 | Well it's an old app. Using struts |
| 12:02.22 | TommyBotten | well I've been forced to handle something similar before... |
| 12:02.36 | TommyBotten | what we ended up doing was changing HTML on the fly using apache httpd... which was horrible |
| 12:03.31 | TommyBotten | don't remember the name of the module... but I would advice against it in any case |
| 12:03.43 | DarkStar1 | TommyBotten: I can't go down that route... I don't have the time to be doing all that as I have to spend sometime redesigning the app and re-developing |
| 12:04.22 | TommyBotten | I see |
| 12:04.29 | TommyBotten | And probably the wisest |
| 12:06.01 | DarkStar1 | For now I just need a good argument to win over the arsy admin and allow him to let the office connect to the app. I mean it's an outgoing communication anyways so why not allow it. |
| 12:09.25 | TommyBotten | "security" |
| 12:12.14 | DarkStar1 | Ye I tried that already |
| 12:16.06 | *** join/#tomcat km (~km@little-black-box.vmware.com) |
| 12:19.17 | *** join/#tomcat dmb (~dmb@unaffiliated/dmb) |
| 12:36.23 | *** join/#tomcat km (~km@little-black-box.vmware.com) |
| 13:35.34 | *** join/#tomcat kmaslowski (~kamil@91.198.15.59) |
| 13:54.40 | *** join/#tomcat monk12 (~monk15@65.199.31.2) |
| 14:06.04 | *** join/#tomcat jubajuba (~tore@fender.itea.ntnu.no) |
| 14:10.53 | jubajuba | Hi, I'm running a Tomcat 6.0.24 with Sun Java 1.6.0_22 on a RedHat Enterprise Linux 6.0, I can't get apr to load. I've now tried both the packages provided by RedHat and compiling apr 1.4.2. |
| 14:11.26 | jubajuba | from catalina.out i get this message: INFO: The APR based Apache Tomcat Native library which allows optimal performance in production environments was not found on the java.library.path: /usr/lib/jvm/java-1.6.0-sun-1.6.0.22.x86_64/jre/lib/amd64/server:/usr/lib/jvm/java-1.6.0-sun-1.6.0.22.x86_64/jre/lib/amd64:/usr/lib/jvm/java-1.6.0-sun-1.6.0.22.x86_64/jre/../lib/amd64::/usr/local/apr/lib:/usr/java/packages/lib/amd64:/usr/lib64:/lib64:/lib:/usr/lib |
| 14:12.47 | jubajuba | libapr-1.so is present, both in /usr/lib64 and /usr/local/apr/lib |
| 14:13.05 | jubajuba | any ideas? |
| 14:15.53 | *** part/#tomcat jubajuba (~tore@fender.itea.ntnu.no) |
| 14:16.37 | *** join/#tomcat jubajuba (~tore@fender.itea.ntnu.no) |
| 14:51.13 | *** join/#tomcat DarkStar1 (~DarkStar1@cpc5-oxfd18-2-0-cust654.4-3.cable.virginmedia.com) |
| 15:08.48 | *** join/#tomcat DarkStar11 (~DarkStar1@cpc5-oxfd18-2-0-cust654.4-3.cable.virginmedia.com) |
| 15:25.52 | *** part/#tomcat DarkStar11 (~DarkStar1@cpc5-oxfd18-2-0-cust654.4-3.cable.virginmedia.com) |
| 15:48.15 | *** join/#tomcat Phazorx (~pkolla@195.144.240.155) |
| 15:48.23 | Phazorx | evening |
| 15:48.32 | rm-rf | morning |
| 15:52.33 | Phazorx | that's kinda circumstantial :) |
| 15:53.31 | Phazorx | anyone can enlighten me on typical authentication patterns, specifically on how to define custom 3-latered system w/o going into writing the auth part on java? |
| 15:54.05 | Phazorx | by three-layerd i mean user->role->action |
| 15:54.33 | rm-rf | i'm struggling with authentication myself |
| 15:54.45 | Phazorx | are you doing something standarD? |
| 15:54.54 | rm-rf | trying to require authentication for an application using ldap |
| 15:55.06 | *** join/#tomcat km (~km@little-black-box.vmware.com) |
| 15:55.31 | rm-rf | http://blog.mc-thias.org/?title=tomcat_ldap_authentication&more=1&c=1&tb=1&pb=1 |
| 15:55.34 | rm-rf | i followed that guide |
| 15:56.26 | Phazorx | i wonder if i can implement my idea via ldap then iguess |
| 15:56.33 | rm-rf | i can authenticate, but then i get a 403 error |
| 15:56.53 | rm-rf | doesn't let me get into the application |
| 15:57.45 | rm-rf | http://java-monitor.com/forum/archive/index.php/t-569.html |
| 15:57.46 | Phazorx | 403 means auth is passed (proper cridentials) but permission is denied (no right to access the resource) |
| 15:57.49 | Phazorx | sounds like config issue |
| 15:58.16 | rm-rf | the guy on there seems to think that you can't actually get it working |
| 15:58.31 | Phazorx | how nice and reassuring |
| 15:58.33 | rm-rf | this is frustrating, to say the least |
| 15:59.25 | rm-rf | he's saying that you can't forward the credentials to the app, even though i have it configured to require credentials for /* |
| 16:01.20 | Phazorx | well there is a pretty and easy way to do things and there is java |
| 16:02.04 | rm-rf | what do you mean? |
| 16:02.15 | rm-rf | oh, right |
| 16:02.19 | rm-rf | and this is java... |
| 16:02.28 | Phazorx | i mean there is a standard way of complicating things with advanced and overlapping layers of configurations |
| 16:02.46 | Phazorx | not sure about ldap though |
| 16:02.58 | Phazorx | i am trying to come up with a way as simple as possible |
| 16:03.09 | Phazorx | prefereably not involving anything aside of DB and tomcat |
| 16:03.50 | Phazorx | perhaps i can convince tomcat that a request is a 'role' actually |
| 16:14.56 | *** join/#tomcat km (~km@little-black-box.vmware.com) |
| 16:17.59 | *** join/#tomcat DarkStar1 (~DarkStar1@cpc5-oxfd18-2-0-cust654.4-3.cable.virginmedia.com) |
| 16:44.02 | DarkStar1 | is it necessary to set the JRE_HOME variable in tomcat5.conf? |
| 16:49.18 | *** join/#tomcat AllyUnion (~chatzilla@pool-71-105-69-238.lsanca.dsl-w.verizon.net) |
| 16:57.53 | AllyUnion | Tomcat 6.0.29, java 1.6.0_22, openSUSE 11.2 Linux; Does anyone know how tomcat works with jsvc in respect to SSL? |
| 17:00.09 | DarkStar1 | AllyUnion: Looks like we're both having the same problems with, albeit, slightly different setups |
| 17:01.28 | AllyUnion | DarkStar1: Well, when it comes to Tomcat, I'm a noob. |
| 17:02.06 | AllyUnion | DarkStar1: I got to bind to port 80 just fine, but my boss several weeks later is now saying, put it on SSL |
| 17:02.13 | AllyUnion | If if were only that easy. |
| 17:02.38 | DarkStar1 | AllyUnion: Well I'm a noob too but I have made some headway with SSL |
| 17:03.21 | DarkStar1 | You need to modify your web.xml file and uncomment the SSL connector in your server.xml |
| 17:03.44 | DarkStar1 | and possibly modify it a bit. Then create or export a certificate |
| 17:04.05 | DarkStar1 | I'm at the point where I'm trying to get it to accept a self signed cert |
| 17:04.18 | DarkStar1 | so far... zip |
| 17:05.27 | AllyUnion | Which browser are you using? |
| 17:07.08 | DarkStar1 | doesn't matter which browser you're using. But I currently have opera and FF open |
| 17:19.54 | *** join/#tomcat calavera (~calavera_@97.Red-83-43-35.dynamicIP.rima-tde.net) |
| 17:24.25 | AllyUnion | FYI, DarkStar1: I just spoke with another sysadmin friend of mine |
| 17:24.55 | DarkStar1 | AllyUnion: Wish I had a sysadmin friend :( |
| 17:24.55 | AllyUnion | He suggested that using Apache to front load for SSL and for regular connections would be a lot easier |
| 17:25.30 | AllyUnion | DarkStat1: Ya. I pay him with food. He's content to be my friend. |
| 17:26.09 | AllyUnion | DarkStar1: Ya. I pay him with food. He's content to be my friend. |
| 17:26.19 | AllyUnion | DarkStar1: Feed them and they will come. ^_^ |
| 17:27.12 | DarkStar1 | AllyUnion: I was told something similar, but I need to setup the new server similar to the old one. Not only that. Setting up tomcat to use SSL is quite easy. The problem with getting it to work exists in the JVM |
| 17:27.27 | DarkStar1 | AllyUnion: which is what I'm troubleshooting right now |
| 17:27.52 | DarkStar1 | AllyUnion: lol... I need to advertise for sysadmin friends like that. :D |
| 17:28.38 | AllyUnion | DarkStar1: Wanted: Knowledgeable sysadmin friends. Will pay in b33r and f00d. |
| 17:29.15 | DarkStar1 | AllyUnion: Stressed out psuedo-sysadmin seeks expert sysadmin friend with GSOH. Willing to paywith food :D |
| 17:29.48 | DarkStar1 | AllyUnion: http://stackoverflow.com/questions/4709307/why-is-tomcat-having-trouble-loading-a-self-signed-ssl-certificate/4709514#4709514 |
| 17:29.58 | DarkStar1 | AllyUnion: That's my problem at the moment |
| 17:30.42 | DarkStar1 | AllyUnion: Also for setting up Tom with SSL the following two pages will be helpful: http://tomcat.apache.org/tomcat-5.5-doc/ssl-howto.html#Quick_Start |
| 17:31.04 | AllyUnion | DarkStar1: From what I understood, the easier route is having Apache wrap the tomcat connection |
| 17:31.15 | AllyUnion | I think something like this: http://www.jajakarta.org/tomcat/tomcat3.2-4.0/tomcat-3.2.3/doc/tomcat-ssl-howto.html#s4 |
| 17:31.23 | DarkStar1 | It's for 5.5 but I read the 6 docs first before realising. They're the same |
| 17:31.46 | rm-rf | anyone ever put tomcat behind apache? |
| 17:31.51 | rm-rf | using apache as a proxy? |
| 17:32.06 | DarkStar1 | AllyUnion: Aye that would be nice. but that also means installing Apache and configuration headaches |
| 17:32.25 | AllyUnion | DarkStar1: Ooo... read that link, it has more details about having tomcat serving SSL directly. |
| 17:32.38 | DarkStar1 | as a dev I would advise against layering esp if the layer underneath can do the same job |
| 17:32.57 | AllyUnion | rm-rf: Are you trying to bind to port 80? |
| 17:35.16 | DarkStar1 | AllyUnion: That link is useful, however it also seems to be quite old |
| 17:35.34 | AllyUnion | DarkStar1: Might be so, still useful reference |
| 17:35.42 | DarkStar1 | I would also advise against binding to port 80 and you will need tomcat to run as root |
| 17:35.56 | rm-rf | AllyUnion: no, i'm trying to use the apache ldap authentication module |
| 17:36.07 | DarkStar1 | Ally Yeah. Same info is present in the link I sent ya :) |
| 17:36.12 | rm-rf | well, maybe bind to :80 in the process? |
| 17:36.20 | rm-rf | i'm changing the location directive |
| 17:36.34 | DarkStar1 | rm-rf: you might succeed in the #httpd room |
| 17:36.35 | rm-rf | so 'ProxyPass /opengrok/ http://localhost:7701/source/ |
| 17:36.47 | DarkStar1 | rm-rf: more active than here last I checked |
| 17:36.47 | AllyUnion | DarkStar1: I hear what you are saying, but... if it took you 80 hours to figure out how to get it working properly versus one hour to configure a reliable way, which would you choose? |
| 17:37.10 | AllyUnion | And FYI, binding to port 80 requires using the jsvc |
| 17:37.11 | DarkStar1 | AllyUnion: I know nothin' about apache. |
| 17:37.43 | AllyUnion | jsvc's purpose is to run as root and spawn java processes as different users |
| 17:37.58 | DarkStar1 | AllyUnion: All I know is that it took me minutes to set the SSL thing up in Tomcat, It's taking me hours to figure out the JVM issue and I'm still at it. |
| 17:38.45 | DarkStar1 | but I wouldhazard a guess that it would probably take you minutes to setup since your software environ is more up to date |
| 17:39.13 | DarkStar1 | I have to use tom 5.5 with CentOS 5.5 |
| 17:40.19 | AllyUnion | DarkStar1: My problem is setting up SSL, because apparently whatever I'm doing via jsvc, it's not setting up the port |
| 17:42.21 | DarkStar1 | AllyUnion: you looked at your catalina.out file? |
| 17:45.39 | AllyUnion | DarkStar1: Full of hibernate crap |
| 17:45.49 | AllyUnion | DarkStar1: Can't read it for jack shit. |
| 17:46.50 | DarkStar1 | AllyUnion: Save it/back it up then delete it and restart tomcat |
| 17:47.09 | AllyUnion | DarkStar1: Apparently, I can't do that right now either |
| 17:47.26 | AllyUnion | DarkStar1: I have users telling me they have work to do so... I'm stalled |
| 17:47.29 | DarkStar1 | oh.. live server? |
| 17:48.05 | DarkStar1 | aahhh well you'll have to do that when they're offline + restarting takes a few secs |
| 17:48.46 | DarkStar1 | I do it all the time. By the time they've refreshed they just assume it's a temporary web connection problem :) |
| 17:49.01 | DarkStar1 | Shh... don't tell anyone :) |
| 17:51.53 | DarkStar1 | AllyUnion: Yup that's an old link.. I would suggest you look for a more update doc on setting up SSL with Tomcat/Apache |
| 17:52.29 | AllyUnion | DarkStar1: FYI, project manager said, No. So, I listen |
| 17:52.51 | AllyUnion | DarkStar1: If for any reason she is telling me I can't do my work today, then all the better... I get my day off. |
| 17:53.15 | DarkStar1 | AllyUnion: Ok. :) Besides it's bad practice to reset a live server. I know! |
| 17:53.29 | AllyUnion | DarkStar1: It's dev anyway |
| 17:53.47 | AllyUnion | DarkStar1: But still, someone is doing testing on it now |
| 17:53.54 | AllyUnion | DarkStar1: So... ya |
| 17:54.13 | DarkStar1 | AllyUnion: aahh.. All the more time you can research both ways |
| 17:54.49 | *** join/#tomcat jasonb_ (~jasonb@12.201.129.162) |
| 17:55.24 | AllyUnion | DarkStar1: I want alcohol and a girl on this MLK day which I'm not in the office for but mysteriously still required to work. |
| 17:57.53 | DarkStar1 | AllyUnion: There I am happy that my gf's gone away and not even considering opening up on of my wine bottles |
| 17:58.43 | DarkStar1 | AllyUnion: Just wanting to solve this, so that I can get on with redesigning the new app. |
| 18:00.13 | AllyUnion | DarkStar1: Know the feeling. Except I want to get laid and go to bed |
| 18:01.02 | DarkStar1 | AllyUnion: I don't have that feeling when I have problems to solve. Can't sleep easy |
| 18:02.10 | AllyUnion | DarkStar1: I meant the feeling that you want to solve this |
| 18:02.46 | AllyUnion | DarkStar1: In the sense, ya, I want to solve my problem so I can get my boss off my back |
| 18:02.49 | DarkStar1 | AllyUnion: I maybe closer to solving my issue now.... I'll get back to you in a few mins |
| 18:03.38 | AllyUnion | HA! Developer says, "We are still coding, please schedule for another day" |
| 18:03.38 | DarkStar1 | AllyUnion: This is why I freelance. I'm working from home all the time so I can just say "feck it I'm going to play EvE/Warcraft" :) |
| 18:04.28 | DarkStar1 | AllyUnion: Advise. Another day never comes when you;re developing. Best to do it at night or in the evening when they've all just gone home |
| 18:06.04 | AllyUnion | DarkStar1: That's what I'm hopin' |
| 18:06.33 | AllyUnion | DarkStar1: Oh, I'm not coming in tomorrow since I had to spend all night working on this when the developers weren't working so... ya. |
| 18:06.39 | AllyUnion | *grin* |
| 18:07.02 | DarkStar1 | AllyUnion: Foud something that looks promising... Seems to answer my problem.. Admitedly your OS is different but it should also apply to you too :P |
| 18:07.06 | DarkStar1 | AllyUnion: http://www.satollo.net/how-to-install-tomcat-and-java-6-on-centos-5-2 |
| 18:07.23 | AllyUnion | That's fine for you but I got a jsvc wrapper |
| 18:08.31 | AllyUnion | Wow... and it has tomcat running as root |
| 18:08.34 | AllyUnion | Bad bad bad |
| 18:09.10 | AllyUnion | DarkStar1: I think I rather get Apache proxy to port forward through SSL |
| 18:09.18 | AllyUnion | Er, via SSL |
| 18:09.49 | AllyUnion | In any case, I'll let my boss and the dev fight out when I'm suppose to have this done |
| 18:10.05 | AllyUnion | Either way, he's not available for the next two hours so I go do something else |
| 18:10.06 | DarkStar1 | AllyUnion: Ok. I forgot about the Jsvc wrapper. |
| 18:13.32 | AllyUnion | DarkStar1: Though... |
| 18:14.01 | AllyUnion | DarkStar1: Technically, if I can get it working without the jsvc wrapper and bind to 8443 without doing anything |
| 18:14.10 | AllyUnion | DarkStar1: Then I don't have to do anything |
| 18:14.19 | DarkStar1 | You should be able to |
| 18:14.20 | AllyUnion | Ah well, won't know |
| 18:14.39 | DarkStar1 | why is it going through a wrapper in the first place? |
| 18:15.56 | *** join/#tomcat jasonb_ (~jasonb@12.201.129.162) |
| 18:17.20 | DarkStar1 | AllyUnion: I think it's time I consider using the sun jdk as opposed to the openJDK |
| 18:17.37 | AllyUnion | DarkStar1: Actually, using the Sun JDK is better |
| 18:17.46 | AllyUnion | DarkStar1: Less problems, I assure you |
| 18:18.22 | AllyUnion | DarkStar1: jsvc - non privileged port binding with allowing tomcat to run as a different user |
| 18:18.47 | AllyUnion | DarkStar1: As root, you spawn jsvc. jsvc spawns tomcat as user X |
| 18:19.28 | AllyUnion | jsvc has access, as root, to bind to privileged ports, ergo, tomcat has access through jsvc to bind to privileged ports |
| 18:19.43 | DarkStar1 | AllyUnion: such a complicated setup.. Will play havoc with debugging |
| 18:19.58 | AllyUnion | DarkStar1: jsvc doesn't really show in the logs |
| 18:21.29 | jasonb_ | http://www.brittainweb.org/jason/tomcat-on-port-80-apachecon-na-2010.ppt |
| 18:23.06 | AllyUnion | http://pastebin.com/JMFDytsP |
| 18:23.45 | AllyUnion | DarkStar1: That will expire in 10 minutes |
| 18:23.51 | AllyUnion | DarkStar1: http://pastebin.com/JMFDytsP |
| 18:24.19 | AllyUnion | DarkStar1: So you understand what jsvc is doing... which is not very different from starting tomcat normally |
| 18:25.05 | DarkStar1 | I haven't read it yet.. |
| 18:27.45 | DarkStar1 | AllyUnion: I used the iptables solution for the old one |
| 18:29.25 | DarkStar1 | AllyUnion: It would appear I've gone down the best route in that presentation you sent me |
| 18:30.24 | AllyUnion | That wasn't me |
| 18:30.29 | AllyUnion | That was jasonb_ |
| 18:31.55 | DarkStar1 | MAn I'm going to take a break!! I've been at this for hours |
| 18:32.40 | DarkStar1 | AllyUnion: do you know how to check the type of key that was created using the keytool? |
| 18:33.02 | AllyUnion | No, but you might as well try the openSSL import route |
| 18:33.07 | AllyUnion | Might work better |
| 18:33.20 | AllyUnion | Though it might be an RSA key |
| 18:33.42 | AllyUnion | DarkStar: And with that, I'm going to get food and go offline |
| 18:33.44 | AllyUnion | Bye! |
| 18:36.26 | *** join/#tomcat acidjnk (havenone@248-232-103-86.dynamic.dsl.tng.de) |
| 18:59.44 | *** join/#tomcat ashutto (~Ashetic@93-34-33-228.ip47.fastwebnet.it) |
| 19:11.01 | *** join/#tomcat wad (~wad@zerbat.com) |
| 19:27.55 | *** join/#tomcat Bunbury (d0a33e0a@gateway/web/freenode/ip.208.163.62.10) |
| 19:28.46 | Bunbury | hi all |
| 19:31.31 | Bunbury | I have a problem with Tomcat 7.0.6 , sun jdk 1.6.0_23, windows 7 ultimate 32 bit |
| 19:32.10 | Bunbury | jasper.jar no longer has or.apache.AnnotationProcessor |
| 19:32.55 | Bunbury | I am putting libraries in the tomcat lib directory |
| 20:12.52 | *** join/#tomcat yassine (~yassine@unaffiliated/yassine) |
| 21:39.13 | *** join/#tomcat dvayanu (~another@p578E8EEF.dip.t-dialin.net) |
| 21:44.12 | *** join/#tomcat Bunbury (d0a33e0a@gateway/web/freenode/ip.208.163.62.10) |
| 21:45.45 | Bunbury | hi all |
| 21:45.58 | Bunbury | does tomcat 7.0.6 have CDI? |
| 21:47.41 | *** join/#tomcat yassine (~yassine@cust.dyn.95-152-93-135.swisscomdata.ch) |
| 21:47.41 | *** join/#tomcat yassine (~yassine@unaffiliated/yassine) |
| 21:49.10 | *** part/#tomcat DarkStar1 (~DarkStar1@cpc5-oxfd18-2-0-cust654.4-3.cable.virginmedia.com) |
| 21:51.26 | Bunbury | anyone? |
| 21:56.44 | LzrdKing | don't know what CDI is |
| 21:57.04 | LzrdKing | i ben more people are going to go to 7 now that its at .6 |
| 21:57.07 | LzrdKing | bet* |
| 22:02.37 | Bunbury | now that its stable |
| 22:02.49 | Bunbury | cdi is jsr 299 |
| 22:03.58 | LzrdKing | don't know what jsr 299 is either :) |
| 22:06.45 | Bunbury | dude lol |
| 22:06.53 | Bunbury | u cant be serious |
| 22:06.57 | LzrdKing | i am |
| 22:07.03 | LzrdKing | i'm just an admin, not a programmer |
| 22:09.16 | TommyBotten | LzrdKing: Don't say is as "just" an admin. "They" are "just" programmers as well ;) |
| 22:09.37 | LzrdKing | ok, i'm an admin, not a dev |
| 22:09.45 | *** join/#tomcat dvayanu_ (~another@p578E9A8B.dip.t-dialin.net) |
| 22:10.21 | LzrdKing | better? |
| 22:11.01 | TommyBotten | :D |
| 22:19.08 | *** join/#tomcat jasonb (~jasonb@12.201.129.162) |
| 23:08.36 | *** join/#tomcat MHSL (MHSL@cm94.sigma137.maxonline.com.sg) |
| 23:53.41 | *** join/#tomcat chipotle (~chipotle@209-6-67-222.c3-0.abr-ubr1.sbo-abr.ma.cable.rcn.com) |