Tomcat : mod_jk
Hello,
I encounter a strange error when installing apache-tomcat connector.
I have configured tomcat in order to generate automatically the file
mod_jk.conf.
The file is created whithout any problems in the 'auto' directory.
But here is was it contained :
########## Auto generated on Tue Nov 15 10:44:41 CET 2005##########
<IfModule !mod_jk.c>
LoadModule jk_module "/usr/local/apache-ssl/modules/mod_jk.so"
</IfModule>
JkWorkersFile "/usr/local/tomcat/conf/jk/workers.properties"
JkLogFile "/usr/local/tomcat/logs/mod_jk.log"
JkLogLevel emerg
and nothing else !
I must precise that I have already use this configuration without any
problems on
different servers.
Thanks for your help
Regards
Or, hey, maybe you could go to the Apache site and look at the documentation?
http://tomcat.apache.org/connectors-doc/
Oh look, here's a link that even says it's "for the impatient"
http://tomcat.apache.org/connectors-doc/generic_howto/quick.html
Similar Messages
-
Hi, Ive installed tomcat to develop with jsp pages, but I want to use my apache webserver with it. Basically i want to use my http://localhost/~myuser/some_site with jsp files. Ive seen references to mod_jk, but not found a good up to date step by step installation instruction. The most recent one apple has is from 2002, 6 years old now. Anyone know of any up to date mod_jk installation instructions?
thanksThe Tomcat 4 has different settings compared to the previous releases (Tomcat 3.3.x and Tomcat 3.2.x). If the previous releases use mod_jk.dll and/or mod_jk.so, the version 4 uses different modules. I have obtained the following from the server.xml file from Tomcat 4.0.3.
The MOD_WEBAPP connector is used to connect Apache 1.3 with Tomcat 4.0
as its servlet container. Please read the README.txt file coming with
the WebApp Module distribution on how to build it.
(Or check out the "jakarta-tomcat-connectors/webapp" CVS repository)
To configure the Apache side, you must ensure that you have the
"ServerName" and "Port" directives defined in "httpd.conf". Then,
lines like these to the bottom of your "httpd.conf" file:
LoadModule webapp_module libexec/mod_webapp.so
WebAppConnection warpConnection warp localhost:8008
WebAppDeploy examples warpConnection /examples/
The next time you restart Apache (after restarting Tomcat, if needed)
the connection will be established, and all applications you make
visible via "WebAppDeploy" directives can be accessed through Apache. -
Apache webserver can't find tomcat - mod_jk problem?
Hi
I have recently upgraded HP-UX apache software
FROM
Apache webserver: 2.0.55
Apache tomcat : 5.5.9
TO
Apache webserver: 2.0.55
Apache tomcat : 5.5.9
I have 2 tomcats running, one JVM for a daytime service and another for a nighttime service.
So while 1 tomcat is down, the other is up, apache always running.
However, since I have upgraded, I see the following error messages in jk.log:
[Mon Nov 20 07:00:41 2006] [error] ajp_connection_tcp_get_message::jk_ajp_common
.c (949): ERROR: can't receive the response message from tomcat, network problems or tomcat is down (127.0.0.1:8059), err=-232
The tomcat in question is up - and the messages returned are 500 responses - server configuration issue.
Get several a day.
Basically using mod_jk to bind the tomcat installations to apache webserver.
What is new though in mod_jk 1.2.10 is that a shared memory file is specified. I am wondering what happens to this memory that is used to load balance the workers when tomcats are bounced.
Issues go away after a bounce of apache - but after each tomcat has been stopped once - messages start to fail intermittently after that.
Done some googling but do not see any solutions - so here's hoping!
Thanks.Noticed my deliberate mistake!
From
Apache 2.0.32
Tomcat 3
Still no joy with with this in terms of finding a solution to why the newer version of apache cannot find tomcat after it has been bounced.
mod_jk.so version 1.2.9 introduced the shared memory for the workers, which as far as I can is the main config change in the 2 versions of apache that came from HP.
So rolled back to the old version of apache with the new version of tomcat - and everything works fine! -
how can i map webapp to Apache using mod_jk connector.
any tutorial, example,api
thanks & regardsOr, hey, maybe you could go to the Apache site and look at the documentation?
http://tomcat.apache.org/connectors-doc/
Oh look, here's a link that even says it's "for the impatient"
http://tomcat.apache.org/connectors-doc/generic_howto/quick.html -
How can i use my helloworld servlet in apache-tomcat-mod_jk?
hi
i copied
helloworld.java helloworld.class
to
jakarta-tomcat-3.3.1/webapps/examples/WEB-INF/classes
i can use example servlets in that directory by accessing localhost/examples/servlets
and click links..(but if i type them in browser address bar, they dont' work either)
what setting am i missing?
thank youi didn't touch web.xml server.xml at all..
i got this with logs files
/usr/local/apache/logs/error_log
[Thu Jul 25 14:14:00 2002] [notice] Apache/1.3.26 (Unix) PHP/4.1.2 mod_jk/1.1.0 configured -- resuming normal operations
[Thu Jul 25 14:14:00 2002] [notice] Accept mutex: sysvsem (Default: sysvsem)
[Thu Jul 25 14:19:19 2002] [notice] caught SIGTERM, shutting down
[root@beautifulmind logs]#
[root@beautifulmind logs]# cat mod_jk.log
how does the link to jsp/servelt works and, not direct typing at address bar?
mod_jk.conf
<IfModule !mod_jk.c>
LoadModule jk_module libexec/mod_jk.so
</IfModule>
JkWorkersFile "/usr/local/jakarta-tomcat-3.3.1/conf/jk/workers.properties"
JkLogFile "/usr/local/jakarta-tomcat-3.3.1/logs/mod_jk.log"
JkLogLevel emerg
<Directory "/usr/local/jakarta-tomcat-3.3.1/webapps/examples">
Options Indexes FollowSymLinks
</Directory>
JkMount /admin ajp13
JkMount /admin/* ajp13
JkMount /examples ajp13
JkMount /examples/* ajp13
#added by eugene
JkMount /examples/servlet/* ajp13
#added by eugene
httpd.conf
Include /usr/local/jakarta-tomcat-3.3.1/conf/auto/mod_jk.con -
I am experiencing the most bizarre thing that so far I am unable to reproduce with my own visits to the site.
After restarting Apache2 my cacti graphs show that the child processes increment consistently over the course of a day without dropping back down during off hours. This behavior eventually leaves the website inaccessible...
Looking at server-status it is filled with Ws (Sending Reply) and GET calls to my cfm applications :
Current Time: Tuesday, 22-Jul-2014 16:33:00 PDTRestart Time: Monday, 21-Jul-2014 22:51:12 PDTParent Server Generation: 0Server uptime: 17 hours 41 minutes 48 secondsTotal accesses: 194844 - Total Traffic: 3.8 GBCPU Usage: u201.55 s34.46 cu0 cs0 - .37% CPU load3.06 requests/sec - 63.2 kB/second - 20.6 kB/request73 requests currently being processed, 4 idle workers
WWWWWWWWWWWWWWWWWWWWWWWWWKWWWWWWWWWWWWWWWWWCWWWWW_WWWWWWCWWW_WWW _WKW...KWW.W_KWW....W........................................... ................................................................ ................................................................
Scoreboard Key:
"_" Waiting for Connection, "S" Starting up, "R" Reading Request,
"W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
"C" Closing connection, "L" Logging, "G" Gracefully finishing,
"I" Idle cleanup of worker, "." Open slot with no current process
Srv
PID
Acc
M
CPU
SS
Req
Conn
Child
Slot
Client
VHost
Request
0-0
15074
0/46/1370
W
7.39
46158
0
0.0
0.44
23.89
192.168.1.10
www.mysite.edu
GET /directory/?directory=department&deptexp=7000 HTTP/1.1
1-0
11563
0/47/468
W
2.75
58867
0
0.0
4.69
13.64
192.168.1.10
www.mysite.edu
GET /catalog/index.cfm?courselist=list&dept=&searchc=PEHW%20148
2-0
12906
0/65/884
W
7.30
54536
0
0.0
0.80
14.62
192.168.1.10
www.mysite.edu
GET /athletics/resources/nwaacc-athlete-of-the-week/ HTTP/1.1
3-0
13840
0/41/1085
W
4.01
51162
0
0.0
0.56
20.57
192.168.1.10
www.mysite.edu
GET /directory/?directory=department&deptexp=17001 HTTP/1.1
4-0
15928
0/20/1635
W
5.40
43715
0
0.0
0.06
41.37
192.168.1.10
www.mysite.edu
GET /directory/?directory=department&deptexp=37000 HTTP/1.1
5-0
18774
0/19/2387
W
0.33
34564
0
0.0
0.24
52.70
192.168.1.10
www.mysite.edu
GET /directory/?directory=department&deptexp=19009 HTTP/1.1
6-0
4321
0/36/6612
W
3.61
13200
0
0.0
0.28
129.74
192.168.1.10
www.mysite.edu
GET /directory/index.cfm?directory=department&deptexp=28011 HTT
7-0
13077
0/0/808
W
0.42
54383
0
0.0
0.00
24.81
192.168.1.10
www.mysite.edu
GET /directory/index.cfm?directory=department&deptexp=6005 HTTP
8-0
16488
0/118/1673
W
12.39
40692
0
0.0
1.30
35.44
192.168.1.10
www.mysite.edu
GET /directory/?directory=department&deptexp=31003 HTTP/1.1
9-0
10726
0/15/110
W
0.58
61963
0
0.0
0.05
1.83
192.168.1.10
www.mysite.edu
GET /directory/index.cfm?directory=All&index=Q HTTP/1.1
10-0
13154
0/1/688
W
0.00
54165
0
0.0
0.00
16.83
192.168.1.10
www.mysite.edu
GET /directory/?directory=All&firstname=Patrick&lastname=Murphy
11-0
12590
0/25/516
W
4.45
55851
0
0.0
0.76
11.19
192.168.1.10
www.mysite.edu
GET /directory/?directory=department&deptexp=4000 HTTP/1.1
12-0
12551
0/13/454
W
1.84
56055
0
0.0
0.38
10.00
192.168.1.10
www.mysite.edu
GET /directory/index.cfm?directory=department&deptexp=20001 HTT
13-0
13333
0/23/626
W
3.86
53189
0
0.0
0.57
11.66
192.168.1.10
www.mysite.edu
GET /directory/?directory=department&deptexp=31005 HTTP/1.1
14-0
12410
0/13/387
W
2.70
56484
0
0.0
0.42
10.55
192.168.1.10
www.mysite.edu
GET /directory/?directory=department&deptexp=6003 HTTP/1.1
15-0
13162
0/70/389
W
10.81
53114
0
0.0
0.86
5.60
192.168.1.10
www.mysite.edu
GET /directory/?directory=department&deptexp=6005 HTTP/1.1
16-0
12309
0/22/275
W
2.23
56878
0
0.0
0.43
3.91
192.168.1.10
www.mysite.edu
GET /directory/?directory=department&deptexp=20005 HTTP/1.1
17-0
13163
0/57/341
W
11.85
53120
0
0.0
1.38
6.49
192.168.1.10
www.mysite.edu
GET /catalog/index.cfm?courselist=list&dept=&searchc=ENGR%26%20
I have straced a hung process to only find the following :
strace -p 6472
Process 6472 attached - interrupt to quit
read(23,
Another interesting bit of info, none of these GET requests make it into my access.log file which I find very peculiar as well.
Here are my CF Specs
Server Details
Server Product ColdFusion
Version 10,0,13,287689
Tomcat Version 7.0.23.0
Edition Enterprise
Serial Number
Operating System UNIX
OS Version 3.2.0-65-generic
Update Level /opt/coldfusion10/cfusion/lib/updates/chf10000013.jar
Adobe Driver Version 4.1 (Build 0001)
JVM Details
Java Version 1.6.0_29
Java Vendor Sun Microsystems Inc.
Here are my Apache2 Specs
Server version: Apache/2.2.22 (Ubuntu)
Server built: Apr 17 2014 21:49:25
Server's Module Magic Number: 20051115:30
Server loaded: APR 1.4.6, APR-Util 1.3.12
Compiled using: APR 1.4.6, APR-Util 1.3.12
Architecture: 64-bit
Server MPM: Prefork
threaded: no
forked: yes (variable process count)
Server compiled with....
-D APACHE_MPM_DIR="server/mpm/prefork"
-D APR_HAS_SENDFILE
-D APR_HAS_MMAP
-D APR_HAVE_IPV6 (IPv4-mapped addresses enabled)
-D APR_USE_SYSVSEM_SERIALIZE
-D APR_USE_PTHREAD_SERIALIZE
-D SINGLE_LISTEN_UNSERIALIZED_ACCEPT
-D APR_HAS_OTHER_CHILD
-D AP_HAVE_RELIABLE_PIPED_LOGS
-D DYNAMIC_MODULE_LIMIT=128
-D HTTPD_ROOT="/etc/apache2"
-D SUEXEC_BIN="/usr/lib/apache2/suexec"
-D DEFAULT_PIDLOG="/var/run/apache2.pid"
-D DEFAULT_SCOREBOARD="logs/apache_runtime_status"
-D DEFAULT_LOCKFILE="/var/run/apache2/accept.lock"
-D DEFAULT_ERRORLOG="logs/error_log"
-D AP_TYPES_CONFIG_FILE="mime.types"
-D SERVER_CONFIG_FILE="apache2.conf"
I am hoping this is no normal behavior for Coldfusion 10.
Many thanks in advance.We're having the same problem, although with CF11.
-
Apache/Tomcat plugin mod_jk.so vs. mod_wls_20.so
Hi,
Someone says to me why apache/tomcat mod_jk.so is so advanced regarding to mod_wls_20.so for load balancing function?
With a Apache server with mod_jk.so I can to balance N server with Tomcat ( or JBoss ) : with mod_wls_20.so no.
The bea plungid is ok for instance in cluster but not for multiple ( and equals web application ) single server instance...
gianc64It sounds like you've put your actions on the authN. That only fires once - so your cookies get set - but the headers are only there for one request. Try putting the actions on the authZ where the headers will be set with every request.
Mark -
[SOLVED] Installing mod_jk through Aurbuild - Cannot find...
OLD TOPIC TITLE: Tomcat + mod_jk + Apache2 - need help!
Hi everyone,
I've been trying to install mod_jk but cannot get it compiled (compiling finishes fine but then there is no mod_jk.so file.. got me stumbled..). Annyway, I found a wiki for it on the ArchWiki (http://wiki.archlinux.org/index.php/Tomcat_and_Apache), but the download link is dead, and since the only thing I really need is the compiled "mod_jk.so", that's a pretty big problem. Could someone provide me with 'jk2-2.0.2.tar.bz2'? I can get the other file ('tomcat-4.1.27-1.tar.gz') from the net easily, but googling for the jk2 file doesn't show any results other than the ArchWiki page refering to it..
I really need this for my school project so any help would be greatly appreciated!
Thanks in advance,
TargetHi mpie,
I greatly appreciate it that you take the time and effort to help me out here! I looked at the commands you where doing in the pkgbuild and tried some allready, I downloaded the source, extracted it and ran the commands as specified in the pkgbuild, the output:
(only errors)
appending configuration tag "F77" to libtool
checking for test... /bin:/usr/bin:/sbin:/usr/sbin:/usr/X11R6/bin:/usr/local/bin:/opt/gnome/bin:/opt/java/jre/bin:/opt/java/bin:/opt/qt/bin
checking for rm... /bin/rm
checking for grep... /bin/grep
checking for echo... /bin/echo
checking for sed... /bin/sed
checking for cp... /bin/cp
checking for mkdir... /bin/mkdir
checking for uint32_t... yes
checking size of uint32_t... 4
checking for u_int32_t... yes
checking size of u_int32_t... 4
checking for unsigned long... yes
checking size of unsigned long... 4
checking for unsigned int... yes
checking size of unsigned int... 4
checking for unsigned long long... yes
checking size of unsigned long long... 8
checking for unsigned longlong... no
checking size of unsigned longlong... 0
checking for snprintf... yes
checking for vsnprintf... yes
checking for flock... yes
checking for setsockopt in -lsocket... no
checking whether to use SO_RCVTIMEO with setsockopt()... yes
checking whether to use SO_SNDTIMEO with setsockopt()... yes
./configure: line 22428: /bin:/usr/bin:/sbin:/usr/sbin:/usr/X11R6/bin:/usr/local/bin:/opt/gnome/bin:/opt/java/jre/bin:/opt/java/bin:/opt/qt/bin: No such file or directory
checking for target platform... unix
no apache given
./configure: line 22749: /bin:/usr/bin:/sbin:/usr/sbin:/usr/X11R6/bin:/usr/local/bin:/opt/gnome/bin:/opt/java/jre/bin:/opt/java/bin:/opt/qt/bin: No such file or directory
./configure: line 22752: /bin:/usr/bin:/sbin:/usr/sbin:/usr/X11R6/bin:/usr/local/bin:/opt/gnome/bin:/opt/java/jre/bin:/opt/java/bin:/opt/qt/bin: No such file or directory
./configure: line 22759: /bin:/usr/bin:/sbin:/usr/sbin:/usr/X11R6/bin:/usr/local/bin:/opt/gnome/bin:/opt/java/jre/bin:/opt/java/bin:/opt/qt/bin: No such file or directory
./configure: line 22954: /bin:/usr/bin:/sbin:/usr/sbin:/usr/X11R6/bin:/usr/local/bin:/opt/gnome/bin:/opt/java/jre/bin:/opt/java/bin:/opt/qt/bin: No such file or directory
./configure: line 22966: /bin:/usr/bin:/sbin:/usr/sbin:/usr/X11R6/bin:/usr/local/bin:/opt/gnome/bin:/opt/java/jre/bin:/opt/java/bin:/opt/qt/bin: No such file or directory
./configure: line 22975: /bin:/usr/bin:/sbin:/usr/sbin:/usr/X11R6/bin:/usr/local/bin:/opt/gnome/bin:/opt/java/jre/bin:/opt/java/bin:/opt/qt/bin: No such file or directory
configure: creating ./config.status
config.status: creating Makefile
config.status: creating apache-1.3/Makefile
config.status: creating apache-1.3/Makefile.apxs
config.status: creating apache-2.0/Makefile
config.status: creating apache-2.0/Makefile.apxs
config.status: creating common/Makefile
config.status: creating common/list.mk
config.status: creating jni/Makefile
config.status: creating common/portable.h
config.status: executing depfiles commands
I dont think the pkgbuild can fix those errors, what do you think? I looked through the configure script at the lines that the error messages state, but I don't see anything obviously wrong there. I've also met all the requirements for installing mod_jk as far as I know. echo $? after running ./configure shows a '0' too, so I'm not too sure if those errors are that serious.. After running a 'make' though (it does work for pretty long..) it doesn't show any errors, but there is no mod_jk.so in apache-2.0 directory. Also, after running make the exit code is still 0, so I don't think it has an error anywhere.
Any hints on what might cause these errors would be greatly appreciated!
I've attached the full output of the configure command and the make command:
http://tempz0ne.homelinux.com/configure-output.txt
http://tempz0ne.homelinux.com/make-output.txt -
Solaris x86, apache2-mod_jk and SSL
I have run into a strange problem.
I have installed apache 2.2.11 from source. Installed nTrust certs. Everything works fine.
I also installed Tomcat 5.5.27. Tested by itself port 8080 etc. all works fine.
Then, mod_jk compiled the latest 1.2.28 from source (no binaries available).
Set up workers.properties etc.
worker.list=worker1
worker.worker1.type=ajp13
worker.worker1.host=localhost
worker.worker1.port=8009
httpd.conf
JkWorkersFile /usr/local/apache2/conf/workers.properties
JkShmFile /usr/local/apache2/logs/mod_jk.shm
JkLogFile /usr/local/apache2/logs/mod_jk.log
JkLogLevel info
JkLogStampFormat "[%a %b %d %H:%M:%S %Y] "
jkMount /* worker1
So, I am forwarding everything to Tomcat
http://<server>/ comes back with the usual Tomcat starter page
But, go SSL
https://<server>/ comes back with Apache "It works!"
Looks like mod_jk is not getting it !
Perhaps, it's a config issue.
But, similar config worked fine with older versions of Apache/Tomcat/mod_jk on Sparc!!!
Any help would be appreciated.
ThanksWe're having the same problem, although with CF11.
-
Configuring apache & tomcat on seperate machines
I need help to setup tomcat 3.2.1. and apache 1.3.20 on separate machines (Windows 95 & Windows NT)!! I am able to run them fine on one machine but am baffled with putting them on two separate machines.
I would be most gratefull if anyone can provide me with the steps of configuration and show me examples with regards to the Apache httpd.conf & Tomcat mod_jk.conf files.
ThanksNot sure how to solve your two machine setup, but as for the mapped network drive, mapped drives are profile specific. When you log into the machine all settings, mappings, desktop, etc. are restores. When you log off, all those things are gone.
Apache on the other hand does not have it's own "profile", and is running as a service so it doesn't "know" of any mapped drives from it's point of view. Local drives are fine, the OS can see those at all levels.
Correct me if I'm wrong anyone, but you could have Apache and Tomcat running on seperate machines as their own web service. And when ever you need to make a JSP/servlet call, just reference the Tomcat machine.
Tomcat is currenly setup for port 8080, but I'm sure you can set it up to work off port 80 and have it "look" like a normal web server. The Apache server would just handle your static HTML pages. -
Hi,
I've an application already running perfectly on linux (Apache 1.3.33-Tomcat 5.5.7-mod_jk 1.2.8), however, I want to run the same application on � Windows (Apache 2.0.59-Tomcat 5.5.17-mod_jk 2.0.58).
Paths:
Java JDK path : c:\Program Files\Java\jdk1.5.0_08
Apache path : C:\Program Files\Apache Group\Apache2
Tomcat path : C:\Program Files\Apache Software Foundation\Tomcat 5
Application path: C:\Program Files\Apache Software Foundation\Tomcat 5\webapps\qelly
I've everything (apache, tomcat, mod_jk) running on the windows server, static jsp pages of the same application work fine too, but when I search through it, it gives the following error:
com.is.metasearch.exception.ApplicationException: Torque Exception
at com.is.metasearch.utils.MiscUtils.getLocationFromIP(MiscUtils.java:1448)
at com.is.metasearch.struts.SearchAction.doSearchWeb(SearchAction.java:202)
at com.is.metasearch.struts.SearchAction.doSearch(SearchAction.java:155)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at org.apache.struts.actions.DispatchAction.dispatchMethod(DispatchAction.java:280)
at org.apache.struts.actions.DispatchAction.execute(DispatchAction.java:216)
at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:484)
at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:274)
at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1482)
at org.apache.struts.action.ActionServlet.doGet(ActionServlet.java:507)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:689)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:252)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148)
at org.apache.coyote.ajp.AjpAprProcessor.process(AjpAprProcessor.java:425)
at org.apache.coyote.ajp.AjpAprProtocol$AjpConnectionHandler.process(AjpAprProtocol.java:452)
at org.apache.tomcat.util.net.AprEndpoint$Worker.run(AprEndpoint.java:1285)
at java.lang.Thread.run(Unknown Source)I'm completely clueless about this error. Is there some setting (paths etc..) I need to change in the application? If so, where and what?
Any help greatly appreciated.
� Thanks, Husainwhat kind of reasons we will get standard JSp Error.JSP error is a common error so you need to check the log files for details about the error. It could be related to JVM, resources, locks, database errors, ..etc.
login page issue
Thanks,
Hussein -
We've recently had some security consultants go through our environment and the report they've provided has advised that some high priority upgrades are required on our NetWare servers around the Apache versions.
We are running NW65sp7, and the report advises upgrading Modjk to 1.2.27 or higher (due to Apache Tomcat Mod_JK.SO Arbitrary Code Execution Vulnerability), and also upgrading Apache from 2.2.3, citing a list of vulnerabilities (for example Apache APR and APR-util Multiple Integer Overflow Vulnerabilities and Apache 'Options' and 'AllowOverride' Directives Security Bypass Vulnerability) .
So 2 queries, searching the Apache website around these vulnerabilities does not list NetWare as an affected NOS, so is is really something I need to worry about? (after helping them out on site I have my doubts as to how Novell savvy these people were)
And secondly, assuming that it is something I need to worry about, will going to SP8 sort them out or should I upgrade Apache separately? (We are going to SP8 in the next couple of weeks anyway). I would have thought that if these were serious vulnerabilities the fix would have been bundled into an SP release or at least a Novell patch.
Thanks
DeanOn 24/11/2009 03:26, ddnicholls wrote:
> We've recently had some security consultants go through our environment
> and the report they've provided has advised that some high priority
> upgrades are required on our NetWare servers around the Apache
> versions.
I'm always wary of security scans of NetWare servers since things are
often flagged based on version numbers rather than whether the
vulnerability actually exists for that device in question. The devil is
in the detail as they say.
> We are running NW65sp7, and the report advises upgrading Modjk to
> 1.2.27 or higher (due to 'Apache Tomcat Mod_JK.SO Arbitrary Code
> Execution Vulnerability' (http://www.securityfocus.com/bid/22791)), and
> also upgrading Apache from 2.2.3, citing a list of vulnerabilities (for
> example 'Apache APR and APR-util Multiple Integer Overflow
> Vulnerabilities' (http://www.securityfocus.com/bid/35949) and 'Apache
> 'Options' and 'AllowOverride' Directives Security Bypass Vulnerability'
> (http://www.securityfocus.com/bid/35115)) .
NetWare 6.5 SP7 includes Apache 2.0.59 and mod_jk 1.2.21.
> So 2 queries, searching the Apache website around these vulnerabilities
> does not list NetWare as an affected NOS, so is is really something I
> need to worry about? (after helping them out on site I have my doubts as
> to how Novell savvy these people were)
That's difficult to find out - NetWare is a different beast to Linux
(for example) and how Apache is implemented is different.
> And secondly, assuming that it is something I need to worry about, will
> going to SP8 sort them out or should I upgrade Apache separately? (We
> are going to SP8 in the next couple of weeks anyway). I would have
> thought that if these were serious vulnerabilities the fix would have
> been bundled into an SP release or at least a Novell patch.
NetWare 6.5 SP8 includes Apache 2.0.63 and mod_jk 1.2.23.
If you are only doing web serving from the server in question then you
could manually install the latest version of Apache 2.2.x (currently
2.2.14).
However if the server handles iPrint, NetStorage, etc. then the relevant
Apache modules are only for Apache 2.0.x and there are no plans to
provide Apache 2.2.x compatible modules.
It may well be that whilst Apache and mod_jk are not the latest versions
they may not be vulnerable as the necessary fixes may be included - you
see this SUSE Linux.
What you can do is stop your web server giving out detailed information
which is what these security scans use and help hackers identify
targets. Within the httpd.conf set 'ServerSignature Off' and
'ServerTokens ProductOnly'. See
http://httpd.apache.org/docs/2.0/mod/core.html
HTH.
Simon
Novell Knowledge Partner (NKP)
Do you work with Novell technologies at a university, college or school?
If so, your campus could benefit from joining the Novell Technology
Transfer Partners (TTP) group. See www.novell.com/ttp for more details. -
Workspace not starting. Service Temporarily Unavailable.
Hello there, Please help me ...
When I use http://hostname:19000/workspace/
it gives the above error. I am on 11.1.1.3
I have stopped and started the services several times to fix this problem
The agent seems to start but then stops. When I look at the logs in Tomcat, mod_jk.log file has the following error.
Connecting to tomcat failed. Tomcat is probably not started or is listening on the wrong port.
I tried stopping the corresponding service and starting. In the event viewer it gives
module expire_module already loaded...skipping.
I tried reconfiguring,
when I reconfigure it gives 2 errors in different contexts,
1.port 19000 is already in use.
2. Port range 6800-6805 is invalid or not enough ports in range.
I am using embedded Java container with Apache http server.
Please help me how to investigate the ports problems.
Thank you,
VinceHi,
Forget about all other errors and focus on the second one. Unfortunately you've come across to the one of the hopeless errors available in Hyperion to my experience.
Workspace agent service is like a black box about which almost no one has no clue apart from guesses. Some Brio blokes might have better understanding and they might provide more insightful suggestions towards the solution. In my experience, you are facing this issue most probably because of a change in the network settings of the server or the domain.
"Port range 6800-6805 is invalid or not enough ports in range" error suggests that one of the ports in this range is being used or blocked. Check the ports with netstat /a /b. You will probably find a service running in between these ports. Remove it if you can and try re-configuring as you did before.
Didn't work? Not surprising. Go to the database where you configured workspace in. Open and view data of the table called v8_hosts. Is the shown host name same host name as your server? If fully qualified domain name is there, is it the same? If IP is there, is it the same?
Didn't work? Well, I had to re-install workspace from scratch last time I faced this issue after trying above and cracking my head on the wall.
Cheers,
Alp -
Can't Build 64-bit Tomcat Connector Module (mod_jk)
I've been using the Tomcat Connector Module on my server so all requests can be logged by Apache, I only need to open port 80 on the firewall, and sites that use jsp with other technologies look more cohesive to the user.
In the past when a new version of the module was released I'd just download the source, unzip it, build it and instal it. Following the included instructions, "for the impatient Apache admins," I used:
./configure --with-apxs=/usr/sbin/apxs
to configure the build, then "make" and "sudo make install" to build and install the module.
This has always worked well (except it always installed the module in the wrong directory, which I never corrected because I liked to test the new module before I got rid of the old one), and when I moved to an Intel Mac, it continued to work. All the Apple-provided modules were universal binaries, but the i386 modules I built worked fine.
Now, with Leopard, we have a new, 64-bit Apache 2. I had been looking forward to working with Apache 2, and 64-bit is nice too, right? But now that it's here I'm not so sure.
My first disillusionment was that, when I downloaded the mod_jk source and built it using the same procedure I had been using, Apache refused to load the module, saying it had the wrong architecture. I checked the provided modules to see what architecture it wanted, and they were all universal binaries with four architectures, which didn't really narrow it down too much, but since I could rule out the ppc and ppc64 architectures, and the "wrong" one I built was i386, that left x86_64 as the only possibility.
Since I barely know what I'm doing, I'm not about to try anything crazy like building a universal binary (although I did try to follow this tutorial, but it didn't work for this project and his instructions didn't provide enough detail for me to even begin to figure out why), but I can't even figure out how to build a 64-bit binary.
I do have Xcode 3.0, so I should have the ability to build 64-bit binaries, and I have the new Java 1.6.0, which is also supposed to be 64-bit, so I should be race-ready, but when I run the configure script, specifying which Java version to use and which architecture to build:
./configure --with-apxs=/usr/sbin/apxs --with-arch-type=x86_64 --with-java-home=/System/Library/Frameworks/JavaVM.framework/Versions/1.6.0/Hom e
I still end up with an i386 binary when the smoke clears, and in the log is a warning:
configure: WARNING: you should use --build, --host, --target
I'd be happy to do that if I had a clue what values to specify for them. Does anybody want to guess? Here's what it keeps taking for default values:
checking build system type... i386-apple-darwin9.2.2
checking host system type... i386-apple-darwin9.2.2
checking target system type... i386-apple-darwin9.2.2
I have a feeling I can't just substitute x86_64 for i386 (i.e. x86_64-apple-darwin9.2.2). The "x86_64-apple-darwin" part might be right, but I don't know about the 9.2.2. I've poked around the filesystem and gotten thoroughly confused. There seem to be all kinds of headers and compilers for i386 and x86_64 and something called i686, which seems to be related to x86_64 somehow, but I have no idea how to point the makefile to the right ones. I don't even know how or why it seems to be perfectly capable of finding everything it needs to build for i386 without my help, and even when I try to mislead it by suggesting I might want it to build for x86_64, it still unerringly finds all the i386 stuff and builds the module with them.
Since no one seems to provide Mac OS binaries of anything, it would be really nice to understand how to do this. I might even want to go crazy and build a 64-bit PostgreSQL or something like that, but if I can't even build a simple Apache module anymore, my hopes are fading.
If anybody is somehow clued-in on how all this stuff works, I'd really appreciate a brain-dump.
Thanks.Thank you, that works for me too!
At first I was worried because, when I ran configure it said:
checking build system type... i386-apple-darwin9.3.0
checking host system type... i386-apple-darwin9.3.0
checking target system type... i386-apple-darwin9.3.0
But I went ahead and ran make anyway, and here's what I ended up with:
apache-2.0/mod_jk.so: Mach-O 64-bit bundle x86_64
which I could install and test. It even works!
Where did you find this information? I did a lot of digging too, but I must have been digging in the wrong places. I always like to go back to the source and see what else I can learn. Maybe then I can take another run at building a universal binary. -
Mod_jk for apache2, tomcat 5 and solaris 10
when i compile mod_jk in solaris 10 x86 box it shows following error:
/bin/bash /var/apache2/build/libtool --silent
--mode=compile gcc -I/usr/apache2/include -g -O2 -O
-xarch=386 -xchip=pentium -xspace -Xa -xildoff
-DSSL_EXPERIMENTAL -DSSL_ENGINE -DHAVE_APR
-I/usr/share/src/apache2/srclib/apr/include
-I/usr/share/src/apache2/srclib/apr-util/include -g
-O2 -DSOLARIS2=10 -D_POSIX_PTHREAD_SEMANTICS
-D_REENTRANT -I /usr/jdk/entsys-j2se/include -I
/usr/jdk/entsys-j2se/include/ -c jk_ajp12_worker.c -o
jk_ajp12_worker.lo
gcc: unrecognized option `-Xa'
gcc: unrecognized option `-KPIC'
gcc: language ildoff not recognized
gcc: jk_ajp12_worker.c: linker input file unused
because linking not done
mv: cannot access .libs/jk_ajp12_worker.lo
*** Error code 2
make: Fatal error: Command failed for target
`jk_ajp12_worker.lo'
Current working directory
/Desktop/jakarta-tomcat-connectors-1.2.14.1-src/jk/native/common
*** Error code 1
The following command caused the error:
set fnord $MAKEFLAGS; amf=$2; \
dot_seen=no; \
target=`echo all-recursive | sed s/-recursive//`; \
list='common apache-2.0'; for subdir in $list; do \
echo "Making $target in $subdir"; \
if test "$subdir" = "."; then \
dot_seen=yes; \
local_target="$target-am"; \
else \
local_target="$target"; \
fi; \
(cd $subdir && make $local_target) \
|| case "$amf" in *=*) exit 1;; k) fail=yes;; *)
exit 1;; esac; \
done; \
if test "$dot_seen" = "no"; then \
make "$target-am" || exit 1; \
fi; test -z "$fail"
make: Fatal error: Command failed for target `all-recursive'
i'm using apache 2 that is included in solaris 10 package, tomcat 5.5.17 and jakarta-tomcat-connectors-1.2.15.
please help.
mnioHi
i am also face problem in mod_jk for apache 2.2.0
I have done installation of apache 2.2.0 on Solaris 10_x86 .Problem in Solaris OS .But i face problem in tomcat connecter on Solaris 10_x86.
I make theses step in Solaris 10.
I download connector tomcat-connectors-1.2.25-src.tar.gz
# gunzip tomcat-connectors-1.2.25-src.tar.gz
# cd \tomcat-connectors-1.2.25-src\native
#./ buildconf.sh
# ./configure - - with - -apxs=/usr/local/apache2/bin/apxs after run this command make new file.File name is Makefile
Edit in Makefile and parameter -Wl,-brtl
Run make command for tomcat-connectors (mod_jk) compiling
bash-3.00# make
Making all in common
/usr/local/apr/build-1/libtool silent mode=compile gcc -I/usr/local/apache2/include -g -O2 -L/usr/local/lib -R/usr/local/lib -L/usr/local/ssl/lib -R/usr/local/ssl/lib -L/usr/openwin/lib -R/usr/openwin/lib -DHAVE_APR -I/usr/local/apr/include/apr-1 -I/usr/local/apr/include/apr-1 -g -O2 -DSOLARIS2=10 -D_POSIX_PTHREAD_SEMANTICS -D_REENTRANT -D_LARGEFILE64_SOURCE -I /include -I /include/ -c jk_ajp12_worker.c -o jk_ajp12_worker.lo
/usr/local/apr/build-1/libtool[384]: /usr/local/bin/sed: not found
/usr/local/apr/build-1/libtool[384]: /usr/local/bin/sed: not found
/usr/local/apr/build-1/libtool[709]: /usr/local/bin/sed: not found
*** Warning: inferring the mode of operation is deprecated.
*** Future versions of Libtool will require --mode=MODE be specified.
/usr/local/apr/build-1/libtool[1003]: /usr/local/bin/sed: not found
/usr/local/apr/build-1/libtool[1003]: /usr/local/bin/sed: not found
/usr/local/apr/build-1/libtool[1003]: /usr/local/bin/sed: not found
/usr/local/apr/build-1/libtool[1003]: /usr/local/bin/sed: not found
/usr/local/apr/build-1/libtool[1003]: /usr/local/bin/sed: not found
/usr/local/apr/build-1/libtool[1003]: /usr/local/bin/sed: not found
/usr/local/apr/build-1/libtool[1003]: /usr/local/bin/sed: not found
/usr/local/apr/build-1/libtool[1003]: /usr/local/bin/sed: not found
/usr/local/apr/build-1/libtool[1003]: /usr/local/bin/sed: not found
/usr/local/apr/build-1/libtool[1003]: /usr/local/bin/sed: not found
/usr/local/apr/build-1/libtool[1003]: /usr/local/bin/sed: not found
/usr/local/apr/build-1/libtool[1003]: /usr/local/bin/sed: not found
/usr/local/apr/build-1/libtool[1003]: /usr/local/bin/sed: not found
/usr/local/apr/build-1/libtool[1003]: /usr/local/bin/sed: not found
/usr/local/apr/build-1/libtool[1003]: /usr/local/bin/sed: not found
/usr/local/apr/build-1/libtool[1003]: /usr/local/bin/sed: not found
/usr/local/apr/build-1/libtool[1003]: /usr/local/bin/sed: not found
/usr/local/apr/build-1/libtool[1003]: /usr/local/bin/sed: not found
/usr/local/apr/build-1/libtool[1003]: /usr/local/bin/sed: not found
/usr/local/apr/build-1/libtool[1003]: /usr/local/bin/sed: not found
/usr/local/apr/build-1/libtool[1003]: /usr/local/bin/sed: not found
/usr/local/apr/build-1/libtool[1003]: /usr/local/bin/sed: not found
/usr/local/apr/build-1/libtool[1003]: /usr/local/bin/sed: not found
/usr/local/apr/build-1/libtool[1003]: /usr/local/bin/sed: not found
/usr/local/apr/build-1/libtool[1054]: /usr/local/bin/sed: not found
: compile: cannot determine name of library object from `'
*** Error code 1
make: Fatal error: Command failed for target `jk_ajp12_worker.lo'
Current working directory /export/home/apache/tomcat-connectors-1.2.25-src/native/common
*** Error code 1
The following command caused the error:
failcom='exit 1'; \
for f in x $MAKEFLAGS; do \
case $f in \
*=* | --[!k]*);; \
k) failcom='fail=yes';; \
esac; \
done; \
dot_seen=no; \
target=`echo all-recursive | sed s/-recursive//`; \
list='common apache-2.0'; for subdir in $list; do \
echo "Making $target in $subdir"; \
if test "$subdir" = "."; then \
dot_seen=yes; \
local_target="$target-am"; \
else \
local_target="$target"; \
fi; \
(cd $subdir && make $local_target) \
|| eval $failcom; \
done; \
if test "$dot_seen" = "no"; then \
make "$target-am" || exit 1; \
fi; test -z "$fail"
make: Fatal error: Command failed for target `all-recursive'
Please help me. My E-mail ID is [email protected]
Maybe you are looking for
-
How to unfreeze my MacBook Air?
My MacBook Air froze... What should I do? I tried pressing option- command-escape but got nowhere...
-
hello , i wanna use "case when" statement in the insert , i implement it like this : currentyear:=1; insert into test1 (ATTRIB1,ATTRIB2) values ((case when currentyear=1 then 'ok' else 'notOK' end),'val2' ); but it didn't work, i got this error : ORA
-
Hi, In mY report, I have BUDAT as select-options and WERKS as select-options. Based on MBLNR, MJAHR from MKPF into table it_mkpf where Budat in s_BUDAT. after that I am fetching MSEG data using for all entries in it_mkpf where werks in s_wer
-
KANBAN working with purchase requisitions
Hello Gurus, In KANBAN process , Generally incase of working with purchase orders of External Procurement Strategies the Purchase order will trigger after KANBAN bin set to empty. But my requirement is to generate purchase requsitions instead of pur
-
Hi Gurus, We need to have specific requirement while creating or changing a the sales order. In the sale order if the line items are BOM material, then the system should ensure that confirmation of the qty between the BOM materials (both header and s