mod_jk problem - 1457: All tomcat instances failed, no more workers left (attempt=1, retry=1)

https://issues.apache.org/bugzilla/show_bug.cgi?id=48191

Rainer Jung <raine### @kippdata.de> changed:

           What    |Removed                     |Added

In RUNNING.txt it says you can have a single copy of Tomcat binary shared
among multiple users on the same server by setting the "environment
variable" $CATALINA_BASE to the directory that contains the files for each
personal Tomcat instance.

As simple as that reads, I don't understand it.  I don't understand how
this is different than a virtual host with different appBase's.  Is it
saying that whoever has a user login on the server can have their own
Tomcat playground even though there is just one Tomcat installed?

So, if on Windows, you set a User environment variable of CATALINA_BASE to
something like C:\TomcatDevUser1  ... that's it?
Tomcat figures out the CATALINA_BASE variable depending on who is logged
in?
Does C:\TomcatDevUser1 need a ROOT directory for their default webapp?

Leo

 whoever has a user login on the server can have their own Tomcat 
 playground even though there is just one Tomcat installed? 

Pretty much, yes.

--Eric


Disclaimer - June 24, 2010 
This email and any files transmitted with it are confidential and intended
solely for Tomcat Users List. If you are not the named addressee you should
not disseminate, distribute, copy or alter this email. Any views or
opinions presented in this email are solely those of the author and might
not represent those of . Warning: Although  has taken reasonable
precautions to ensure no viruses are present in this email, the company
cannot accept responsibility for any loss or damage arising from the use of
this email or attachments. 
This disclaimer was added by Policy Patrol: http://www.policypatrol.com/

Dear pals,

 

I am trying to configure web server + mod_jk + mod_ssl + tomcat. This
configuration would allow accessing deployed apps at tomcat from web
server
with https port. I did searched on archive list and as well as Google it,
perhaps couldn't able to find the solution.

 

My configuration works fine if I use http port. But my requirement is to
use
on https.

 

I have tomcat running on 8080, apache on 80, mod_ssl and mod_jk installed
and configured.

 

Kindly help on how to configure to use with https. 

 

Thanks in advance.

 

irfee

 

 

 

 

 

Dear pals,

 

I am trying to integrate apache and tomcat by   configuring web server +
mod_jk + mod_ssl + tomcat. This configuration would allow accessing
deployed
apps at tomcat from web server with https port. I did searched on archive
list and as well as Google it, perhaps couldn't able to find the solution.

 

My configuration works fine if I use http port. But my requirement is to
use
on https.

 

I have tomcat running on 8080, apache on 80, mod_ssl and mod_jk installed
and configured.

 

Kindly help on how to configure to use with https. 

 

Thanks in advance.

 

irfee

 

 

 

 

 

 

Hi Moritz,

Try adding:

<Alias>jira.example.com</Alias>
<Alias>www.jira.example.com</Alias>

To the server.xml inside the <Host name="jirapp">

Best Regards,

Brett


-----Original Message-----
        From: Moritz Winter [mailto:moritz.a### @googlemail.com] 
        Sent: Tuesday, July 27, 2010 7:11 PM
        To: us### @tomcat.apache.org
        Subject: mod_jk and tomcat virtual hosts not connecting
        
          Hi, First of all I would like to mention that this is my first
        post on 
        this list, I hope that this question is sent in the right place.
        I have tried finding a solution for my problem, but it either
        doesn't 
        exist, or my limited brain can't manage to figure out how to do
        it (I 
        strongly hope it is the latter).
        
        My issue is with the mod_jk plugin. I want to redirect my
        subdomain 
        requests jira.example.com to a tomcat 6 virtual host called
        jiraapp. If 
        I call the subdomain jira.example.com Im always getting the
        default 
        tomcat 6 host called localhost.
        
        I tested every part:
        1.) mod_jk: if i change the workers name in either
        workers.properties or 
        und er my enabled-site <VirtualHost> or if i change the
mapping
        to my 
        virtual host (/etc/hosts: 127.0.0.1 localhost jiraapp) apache
        doesnt 
        start. So I think this should work and is configured right.
        2.) if I do a lynx jiraapp:8080 on the machine it works and
        shows the 
        right webapp.
        
        But if I access jira.example.com I always getting the default 
        root-webapp of tomcat 6. So theres no difference in calling 
        jira.example.com or example.com:8080. In general my setup looks
        like this:
        1.) browse to jira.example.com
        2.) apache <VirtualHost> hands over to mod_jk
        3.) mod_jk redirects to
        worker.jiraworker.host:worker.jiraworker.port 
        (jiraa pp:8009) via ajp
        4.) jiraapp resolves to 127.0.0.1 trough /etc/hosts
        5.) tomcat relays to the jiraapp name based virtual host
        
        Do I miss something here? My guess would be that iam doing
        something 
        wrong in step 4 because i can call lynx jiraapp on the local
        bash (5) 
        and i can access the default virtual host from remote (1-3).
        
        Help would be appreciated.
        
        Versions:
        Apache Tomcat/6.0.29
        Sun-Java 1.6.0_20-b02
        Apache/2.2.9 (Debian) mod_jk/1.2.26 proxy_html/3.0.0 Server
        libapache2-mod-jk 1:1.2.26-2+lenny1
        
        == jk.load ==
        
        LoadModule jk_module /usr/lib/apache2/modules/mod_jk.so
        JkWorkersFile /etc/apache2/workers.properties
        JkLogFile /var/log/apache2/mod_jk.log
        JkLogLevel info
        # JkOptions +ForwardKeySize +ForwardURICompat
        -ForwardDirectories 
        -ForwardLocalAddress
        JkRequestLogFormat "%w %V %T"
        
        
        == workers.properties ==
        
        workers.tomcat_home=/opt/tomcat
        workers.java_home=/usr/lib/jvm/java-6-sun
        worker.list=jiraworker
        worker.jiraworker.port=8009
        worker.jiraworker.host=jiraapp
        worker.jiraworker.type=ajp13
        
        
        == /etc/hosts ==
        
        ::1 localhost ip6-localhost ip6-loopback
        fe00::0 ip6-localnet
        ff00::0 ip6-mcastprefix
        ff02::1 ip6-allnodes
        ff02::2 ip6-allrouters
        ff02::3 ip6-allhosts
        127.0.0.1 localhost.localdomain localhost jiraapp
        
        
        == server.xml ===
        
        <Engine name="Catalina" defaultHost="localhost">
        [...]
        <Host name="localhost" appBase="webapps"
        unpackWARs="true" autoDeploy="true"
        xmlValidation="false" xmlNamespaceAware="false">
        [...]
        </Host>
        <Host name="jiraapp" appBase="jiraapp"
        docBase="/opt/tomcat/jiraapp"
        unpackWARs="true" autoDeploy="true"
        xmlValidation="false" xmlNamespaceAware="false" >
        
        == apache example.com virtual hosts configuration file ==
        <VirtualHost *:80>
        ServerName www.jira.example.com
        ServerAlias jira.example.com
        JkMount /* jiraworker
        </VirtualHost>
        



Brett Delle Grazie

  Hi, First of all I would like to mention that this is my first post on 
this list, I hope that this question is sent in the right place.
I have tried finding a solution for my problem, but it either doesn't 
exist, or my limited brain can't manage to figure out how to do it (I 
strongly hope it is the latter).

My issue is with the mod_jk plugin. I want to redirect my subdomain 
requests jira.example.com to a tomcat 6 virtual host called jiraapp. If 
I call the subdomain jira.example.com Im always getting the default 
tomcat 6 host called localhost.

I tested every part:
1.) mod_jk: if i change the workers name in either workers.properties or 
und er my enabled-site <VirtualHost> or if i change the mapping to
my 
virtual host (/etc/hosts: 127.0.0.1 localhost jiraapp) apache doesnt 
start. So I think this should work and is configured right.
2.) if I do a lynx jiraapp:8080 on the machine it works and shows the 
right webapp.

But if I access jira.example.com I always getting the default 
root-webapp of tomcat 6. So theres no difference in calling 
jira.example.com or example.com:8080. In general my setup looks like this:
1.) browse to jira.example.com
2.) apache <VirtualHost> hands over to mod_jk
3.) mod_jk redirects to worker.jiraworker.host:worker.jiraworker.port 
(jiraa pp:8009) via ajp
4.) jiraapp resolves to 127.0.0.1 trough /etc/hosts
5.) tomcat relays to the jiraapp name based virtual host

Do I miss something here? My guess would be that iam doing something 
wrong in step 4 because i can call lynx jiraapp on the local bash (5) 
and i can access the default virtual host from remote (1-3).

Help would be appreciated.

Versions:
Apache Tomcat/6.0.29
Sun-Java 1.6.0_20-b02
Apache/2.2.9 (Debian) mod_jk/1.2.26 proxy_html/3.0.0 Server
libapache2-mod-jk 1:1.2.26-2+lenny1

== jk.load ==

LoadModule jk_module /usr/lib/apache2/modules/mod_jk.so
JkWorkersFile /etc/apache2/workers.properties
JkLogFile /var/log/apache2/mod_jk.log
JkLogLevel info
# JkOptions +ForwardKeySize +ForwardURICompat -ForwardDirectories 
-ForwardLocalAddress
JkRequestLogFormat "%w %V %T"


== workers.properties ==

workers.tomcat_home=/opt/tomcat
workers.java_home=/usr/lib/jvm/java-6-sun
worker.list=jiraworker
worker.jiraworker.port=8009
worker.jiraworker.host=jiraapp
worker.jiraworker.type=ajp13


== /etc/hosts ==

::1 localhost ip6-localhost ip6-loopback
fe00::0 ip6-localnet
ff00::0 ip6-mcastprefix
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
ff02::3 ip6-allhosts
127.0.0.1 localhost.localdomain localhost jiraapp


== server.xml ===

<Engine name="Catalina" defaultHost="localhost">
[...]
<Host name="localhost" appBase="webapps"
unpackWARs="true" autoDeploy="true"
xmlValidation="false" xmlNamespaceAware="false">
[...]
</Host>
<Host name="jiraapp" appBase="jiraapp" docBase="/opt/tomcat/jiraapp"
unpackWARs="true" autoDeploy="true"
xmlValidation="false" xmlNamespaceAware="false" >

== apache example.com virtual hosts configuration file ==
<VirtualHost *:80>
ServerName www.jira.example.com
ServerAlias jira.example.com
JkMount /* jiraworker
</VirtualHost>

https://issues.apache.org/bugzilla/show_bug.cgi?id=47692

--- Comment #6 from Rainer Jung <rainer### @kippdata.de> 2010-07-05
06:19:34 EDT ---
(In reply to comment #5)
 Hi , I am a newbee on AIX...I found this article after hard googling.
 I think my trouble is somewhat related so I want to hear your
advices..
 I want apache-tomcat server on AIX 6.1

not sure, whether you want to build

- Apache Tomcat
- Apache Web Server (aka httpd)
- Apache Tomcat Connectors (aka mod_jk)

 I tried make after configuring 
 
 some minutes later there is error like this.
 
 libtool: compile: unable to infer tagged configuration
 libtool: compile: specify a tag with `--tag'
 make[3]: *** [maketables.lo] Error 1
 make[3]: Leaving directory
`/app/ci/ppsl/download/httpd-2.2.13/srclib/pcre'
 make[2]: *** [all-recursive] Error 1
 make[2]: Leaving directory
`/app/ci/ppsl/download/httpd-2.2.13/srclib/pcre'
 make[1]: *** [all-recursive] Error 1
 
 I can't find any answer on the whole internet sites..
 
 help me please...thanks

You are trying to use another compiler than the one that was used when
libtool
was produced.

This looks like your are trying to build the Apache Web Server. Please
open a
discussion at the httpd users mailing list. Bugzilla is not a support
from.

Regards,

Rainer

https://issues.apache.org/bugzilla/show_bug.cgi?id=47692

--- Comment #5 from ganggaroo <gang### @naver.com> 2010-07-05
04:03:29 EDT ---
Hi , I am a newbee on AIX...I found this article after hard googling.
I think my trouble is somewhat related so I want to hear your advices..
I want apache-tomcat server on AIX 6.1

I tried make after configuring 

some minutes later there is error like this.

libtool: compile: unable to infer tagged configuration
libtool: compile: specify a tag with `--tag'
make[3]: *** [maketables.lo] Error 1
make[3]: Leaving directory
`/app/ci/ppsl/download/httpd-2.2.13/srclib/pcre'
make[2]: *** [all-recursive] Error 1
make[2]: Leaving directory
`/app/ci/ppsl/download/httpd-2.2.13/srclib/pcre'
make[1]: *** [all-recursive] Error 1

I can't find any answer on the whole internet sites..

help me please...thanks

https://issues.apache.org/bugzilla/show_bug.cgi?id=49413

           Summary: Apache Mod_jk 1.2.30 is shutting down communication
                    with tomcat and getting socket error read.
           Product: Tomcat Connectors
           Version: 1.2.30
          Platform: PC
        OS/Version: Windows Server 2008 (Longhorn)
            Status: NEW
          Severity: regression
          Priority: P2
         Component: mod_jk
        AssignedTo: de### @tomcat.apache.org
        ReportedBy: osa### @hotmail.com


Created an attachment (id=25565)
 --> (https://issues.apache.org/bugzilla/attachment.cgi?id=25565)
mod_jk.log in the debug mod

Hi All
My application has been working just fine with of Jboss 4.3.0 and tomcat
engine.
We decided to upgrade the connector from version 1.2.28 and 1.2.30 we are
using
apache 2.2.15
We are experiencing errors in the mod_jk log and as the result some of the
pages in my app are not displaying right, the same pages display fine with
the
an1.2.28.
I start to think that it could be the size of the chunked data between the
connector and the tomcat because I see this error.
Unexpected AJP13_SEND_BODY_CHUNK
(myapp) sending request to tomcat failed (recoverable), because of server
error
(attempt=1)
[Wed Jun 09 06:47:14.545 2010] [5900:2248] [debug] jk_connect.c (722):
About to
shutdown socket 784

Problem is reproducible with the new connector 1.2.30 but not the previous
version.



I have attached the log in the debug mod, have you seen these types of
errors?

    [
https://issues.apache.org/jira/browse...1#action_12888741
] 

John Sichi commented on HIVE-1457:

I tried posting this message earlier and still in "Pending" list. Trying
again by reposting it..

Hi All, 
I am using camel 2.2 with servicemix 4.2 

I have a exception block that catches HttpOperationFailedException.class ,
parse the soap fault message. 
Depending on the soap fault code I set the recipient for the exception
route. I would also like to set the maximumdelivery count dynamically
based
on the soap fault code. I have exception block as below 
onException(HttpOperationFailedException.class).onWhen( 
                                new ExceptionFilterPredicate(this.inputQ,
this.errorQ, 
                                               
this.retryQ)).useExponentialBackOff().maximumRedeliveries(1)
                               
.handled(true).recipientList(header(Constants.DYNAMIC_EXCEPTION_URI)); 

In my ExceptionFilterPredicate class I set a header as below 
exchange.getIn().setHeader("EXCEPTION_RETRY_TIMES", retryTimes); 
How would I access this header to set maximumRedeliveries?

I tried something as below 

onException(HttpOperationFailedException.class).onWhen( 
                                new ExceptionFilterPredicate(this.inputQ,
this.errorQ, 
                                               
this.retryQ)).useExponentialBackOff().maximumRedeliveries(this.header(Constants.EXCEPTION_RETRY_TIMES).evaluate(exchange,
Integer.class))
                               
.handled(true).recipientList(header(Constants.DYNAMIC_EXCEPTION_URI)); 

But exchange is not accessible. It has compilation error. Please suggest. 
Thanks & Regards 
Gnanda 

WS-RM returns an exception to the client even when its retry mechanim
successfully delivers the message after some transmission error

Hi All,

I've got myself in a situation where I need a stopgap quick fix - until we
can respond correctly.

I have the following workers file:

# define the worker list
worker.list=LoadBalancer

# Define the LB worker
worker.LoadBalancer.type=lb
worker.LoadBalancer.balance_workers=webprod1,webprod2
worker.LoadBalancer.sticky_session=1

# configure each worker
worker.webprod1.type=ajp13
worker.webprod1.host=webprod1
worker.webprod1.port=8009
worker.webprod1.lbfactor=100

worker.webprod2.type=ajp13
worker.webprod2.host=webprod2
worker.webprod2.port=8009
worker.webprod2.lbfactor=100

If I change the last line to "worker.webprod2.lbfactor=0" will webprod2
only be used if webprod1 is disconnected or otherwise in an error state?

My other choice is to turn off one of the server's Tomcat instance.

The real solution might take a day or two and that is to put back
JSESSIONID - meanwhile I'm looking at how to fix occasional strangeness for
users. If someone has a way to force JSESSIONID with a valve or filter that
would be great.

Yes my jvmroutes are set.

Regards,
Dave

Trying again to see if I can respond to Andre's question regarding what my
directory structure is in order to help me determine where I've gone wrong
in my setup and why I'm not getting the auth and user values in the request
that is being forwarded to my Tomcat server.  I can connect via the Tomcat
connector to my site successfully however, I cannot authenticate my userid
and therefore I cannot get to my application which is dependent on that
value so that the authenticated user can access the web app.  

Here is my setup:

1.  Andre, before you ask, I am still waiting on a test Windows 2003
server to be setup where I can test this on a server rather than my XP box
as you suggested to me previously, but I'm stuck testing on my Windows XP
box until then.
2.  Currently I am testing to see if using the Tomcat connector will work
on my local Windows XP box.
3.  I am testing my web app within Eclipse using Tomcat 6.0 (meaning my
web app is a dynamic web project within Eclipse and has been added to the
Tomcat server in Eclipse).
4.  My URL is:  http://localhost/SCMIS/index.jsp
5.  The directory structure on my local box where my web app is located
is:  C:\Snaps\savoym_remote_scmis_phase5_dev\scmis_phase5_vob and the
directories directly under this directory is:
Build
Common
Libraries
Lookup
Lost+found
Maintenance
PurchaseOrder
Requisition
SCMIS (this is the where the JSP's are located and this is the directory
that is defined in my SCMIS IIS virtual web site)
Security
6.  In IIS 5.1, on my Windows XP box, the setup is as follows:
a. Default website has a directory security setting of (Anonymous access -
checked)
b. jakara virtual website has a directory security setting of (Anonymous
access - checked)
c. SCMIS virtual website, within the jakarta virtual website, has a
directory security setting of (Windows Authentication - checked)

Thanks for anyone taking the time to read this post and for any
help/direction anyone can provide.  

Ranier,

Again, thanks for the reply below.  Apparently I do not have something
setup correctly because I cannot get a LOG file created when I execute a
single request that is a valid login ID.  I'm sure I've setup something
incorrectly and any help/direction would be greatly appreciated.

Here are my settings in the following files (server.xml,
isapi_redirect.properties file, uriworkermap.properties file and
workers.properties file):

Server.xml:

<Service name="Catalina">
  
    <!--The connectors can use a shared executor, you can define one or
more named thread pools-->
    <!--
    <Executor name="tomcatThreadPool" namePrefix="catalina-exec-" 
        maxThreads="150" minSpareThreads="4"/>
    -->
    
    
    <!-- A "Connector" represents an endpoint by which requests are
received
         and responses are returned. Documentation at :
         Java HTTP Connector: /docs/config/http.html (blocking &
non-blocking)
         Java AJP  Connector: /docs/config/ajp.html
         APR (HTTP/AJP) Connector: /docs/apr.html
         Define a non-SSL HTTP/1.1 Connector on port 8080
    -->
    <Connector port="9080" protocol="HTTP/1.1" 
               connectionTimeout="20000" 
               redirectPort="8443" />
    <!-- A "Connector" using the shared thread pool-->
    <!--
    <Connector executor="tomcatThreadPool"
               port="8080" protocol="HTTP/1.1" 
               connectionTimeout="20000" 
               redirectPort="8443" />
    -->           
    <!-- Define a SSL HTTP/1.1 Connector on port 8443
         This connector uses the JSSE configuration, when using APR, the 
         connector should be using the OpenSSL style configuration
         described in the APR documentation -->
    <!--
    <Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"
               maxThreads="150" scheme="https" secure="true"
               clientAuth="false" sslProtocol="TLS" />
    -->

    <!-- Define an AJP 1.3 Connector on port 8009 -->
    <Connector port="8009" protocol="AJP/1.3" redirectPort="8443"
tomcatAuthentication="false" />

    <!-- An Engine represents the entry point (within Catalina) that
processes
         every request.  The Engine implementation for Tomcat stand alone
         analyzes the HTTP headers included with the request, and passes
them
         on to the appropriate Host (virtual host).
         Documentation at /docs/config/engine.html -->

    <!-- You should set jvmRoute to support load-balancing via AJP ie :
    <Engine name="Standalone" defaultHost="localhost"
jvmRoute="jvm1">         
    --> 
    <Engine name="Catalina" defaultHost="localhost">

      <!--For clustering, please take a look at documentation at:
          /docs/cluster-howto.html  (simple how to)
          /docs/config/cluster.html (reference documentation) -->
      <!--
      <Cluster
className="org.apache.catalina.ha.tcp.SimpleTcpCluster"/>
      -->        

      <!-- The request dumper valve dumps useful debugging information
about
           the request and response data received and sent by Tomcat.
           Documentation at: /docs/config/valve.html -->
      <!--
      <Valve
className="org.apache.catalina.valves.RequestDumperValve"/>
      -->

      <!-- This Realm uses the UserDatabase configured in the global
JNDI
           resources under the key "UserDatabase".  Any edits
           that are performed against this UserDatabase are immediately
           available for use by the Realm.  -->
      <Realm className="org.apache.catalina.realm.UserDatabaseRealm"
             resourceName="UserDatabase"/>

      <!-- Define the default virtual host
           Note: XML Schema validation will not work with Xerces 2.2.
       -->
      <Host name="localhost"  appBase="webapps"
            unpackWARs="true" autoDeploy="true"
            xmlValidation="false" xmlNamespaceAware="false">

        <!-- SingleSignOn valve, share authentication between web
applications
             Documentation at: /docs/config/valve.html -->
        <!--
        <Valve
className="org.apache.catalina.authenticator.SingleSignOn" />
        -->

        <!-- Access log processes all example.
             Documentation at: /docs/config/valve.html -->
        <!--
        <Valve className="org.apache.catalina.valves.AccessLogValve"
directory="logs"  
               prefix="localhost_access_log." suffix=".txt"
pattern="common" resolveHosts="false"/>
        -->

      </Host>
    </Engine>
  </Service>

In my isapi_redirect.properties file:

# Configuration file for the Jakarta ISAPI Redirector

# The path to the ISAPI Redirector Extension, relative to the website
# This must be in a virtual directory with executive privileges
extension_uri=/jakarta/isapi_redirect.dll

# Full path to the log file for the ISAPI Redirector
log_file=c:\server\Tomcat 6.0\logs\iisapi.log

# Log level (debug, info, warn, error or trace)
log_level=trace

# Full path to the workers.properties file
worker_file=c:\server\Tomcat 6.0\conf\workers.properties

# Full path to the uriworkermap.properties file
worker_mount_file=c:\server\Tomcat 6.0\conf\uriworkermap.properties

In my uriworkermap.properties file:

# uriworkermap.properties - IIS settings from
http://onjava.com/pub/a/onjava/2002/12/18/tomcat.html?page=2" rel="nofollow" target="_blank">http://onjava.com/pub/a/onjava/2002/12/18/tomcat.html?page=2 
#
# This file provides sample mappings for example wlb
# worker definted in workermap.properties.minimal
# The general syntax for this file is:
# [URL]=[Worker name]

/examples/*=scmisWorker
/examples/*.jsp=scmisWorker
/examples/servlet/*=scmisWorker

#/admin/*=wlb
#/manager/*=wlb
#/examples/*=wlb
#/servlets-examples/*=wlb
# Optionally filter out all .jpeg files inside that context
# For no mapping the url has to start with exclamation(!)

#!/servlets-examples/*.jpeg=wlb

#
# Mount jkstatus to /jkmanager
# For production servers you will need to 
# secure the access to the /jkmanager url
#
#/jkmanager=jkstatus

In my workers.properties file:

# workers.properties from =
http://onjava.com/pub/a/onjava/2002/12/18/tomcat.html
#
# This file provides minimal jk configuration properties needed to
# connect to Tomcat.
#
# The workers that jk should create and work with

#worker.list=wlb,jkstatus
worker.list=scmisWorker

#
# Defining a worker named ajp13w and of type ajp13
# Note that the name and the type do not have to match.
#
#worker.ajp13w.type=ajp13
#worker.ajp13w.host=localhost
#worker.ajp13w.port=8009
worker.scmisWorker.port=8009
worker.scmisWorker.host=localhost
worker.scmisWorker.type=ajp13

#
# Defining a load balancer
#

#worker.wlb.type=lb
#worker.wlb.balance_workers=ajp13w


#
# Define status worker
#
#worker.jkstatus.type=status



-----Original Message-----
From: Rainer Jung [mailto:rainer### @kippdata.de] 
Sent: Thursday, May 20, 2010 3:55 PM
To: Tomcat Users List
Subject: Re: Question on workers.properties file

Hi André, Melinda and everyone else,

On 20.05.2010 14:31, André Warnier wrote:
 savoym wrote:
 I Rainer Jung is around, he may tell us if my assumptions are
correct,
 that IIS+redirector also sends the IIS user-id to Tomcat, if there is
any.

 If not, then tonight I might be able to send you a servlet filter to
 dump the HTTP headers of the requests sent by IIS to Tomcat, to see
if
 there is a user-id in there somewhere. Unless you have already
checked
 that ?

I checked before my original reply and it seems the IIS variable 
"AUTH_USER" is automatically forwarded by the isapi plugin. When setting 
tomcatAuthentication="false" on the AJP connector (!), the value can be 
retrieved by the getRemoteUser() method.

I would set the log level of the redirector to "trace" on an idle test 
environment and then do a single request there that is expected to be 
authenticated. The log lines in the redirector log should tell us, what 
is actually being forwarded (lots of log lines, but lots of info too).

Regards,

Rainer

On 26.05.2010 18:30, Savoy, Melinda wrote:
 Trying again to see if I can respond to Andre's question regarding
what my directory structure is in order to help me determine where I've
gone wrong in my setup and why I'm not getting the auth and user values in
the request that is being forwarded to my Tomcat server.  I can connect via
the Tomcat connector to my site successfully however, I cannot authenticate
my userid and therefore I cannot get to my application which is dependent
on that value so that the authenticated user can access the web app.

 Here is my setup:

 1.  Andre, before you ask, I am still waiting on a test Windows 2003
server to be setup where I can test this on a server rather than my XP box
as you suggested to me previously, but I'm stuck testing on my Windows XP
box until then.
 2.  Currently I am testing to see if using the Tomcat connector will
work on my local Windows XP box.
 3.  I am testing my web app within Eclipse using Tomcat 6.0 (meaning
my web app is a dynamic web project within Eclipse and has been added to
the Tomcat server in Eclipse).
 4.  My URL is:  http://localhost/SCMIS/index.jsp
 5.  The directory structure on my local box where my web app is
located is:  C:\Snaps\savoym_remote_scmis_phase5_dev\scmis_phase5_vob and
the directories directly under this directory is:
 Build
 Common
 Libraries
 Lookup
 Lost+found
 Maintenance
 PurchaseOrder
 Requisition
 SCMIS (this is the where the JSP's are located and this is the
directory that is defined in my SCMIS IIS virtual web site)
 Security
 6.  In IIS 5.1, on my Windows XP box, the setup is as follows:
 a. Default website has a directory security setting of (Anonymous
access - checked)
 b. jakara virtual website has a directory security setting of
(Anonymous access - checked)
 c. SCMIS virtual website, within the jakarta virtual website, has a
directory security setting of (Windows Authentication - checked)

Does it work, if you switch all of those three to "Anonymous access" 
unchecked and "Windows Authentication" checked?

What is the SCMIS virtual website in IIS for? Are you trying to serve 
static content directly form IIS? If "no", I don't see a reason why you 
would want to have that virtual website. Are you forwarding /SCMIS/* to 
Tomcat, or only JSPs?

As I wrote in a previous post, it didn't work for me when i only 
switched the jakarta virtual website to Windows auth. It only started to 
work, when I changed the default website too.

Regards,

Rainer

Hi, I've been having problems with apache becoming unresponsive, and
was wondering if anyone had any suggestions on what the problem might
be. Basically, periodically, apache will get into a state where all
the workers are stuck reading:

Server Version: Apache
Server Built: Oct 21 2009 10:54:43
Current Time: Tuesday, 15-Jun-2010 07:57:30 PDT
Restart Time: Tuesday, 15-Jun-2010 06:37:33 PDT
Parent Server Generation: 0
Server uptime:  1 hour 19 minutes 57 seconds
Total accesses: 985801 - Total Traffic: 8.1 GB
CPU Usage: u644.89 s203.76 cu3994.75 cs0 - 101% CPU load
206 requests/sec - 1.7 MB/second - 8.6 kB/request
1593 requests currently being processed, 15 idle workers
RRRRRRRRRRRRRCRRRRKRRRRRRRRRRRRRRRRRRRKRRRRRRRRRRRRRRRRRRRRRRRRR
RRRRRRRRRRRRRRRRRRRRRRRRCRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR
RRRRRRRRRRRRRRRRRRRRRRRRRRCRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRKRRRR
RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR
RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR
RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRKRRR
RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRCRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR
RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR
RKRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR
RRCRRRRRRRRRRRRRRRRRRRRRRKRRRRRRRRRRRKRKRRRRRRRRRRRRRRRRRRRRRRRR
RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRKRRRRRRRRRRRRRRRRRRRR
RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRKRRRRRRRRRRRRRR
RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR
RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRKRRRRRRRRRRRRRRRRRRRRRRRRRRRRRKRR
RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR
RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR
RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR
RRRRRRRRRRRRRWRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR
RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR
RRRRRRRRRRRRRRRWRRRRKKCRRKRKRRRRKRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRC
RRKKRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR
RRRRRRRRRRRRRRKRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR
RRRRRRRRCKRRRRCCRRKRRRRRRRRRRRRRRRKRRRCRRRRRRRRRRRRRCCRRRCRRCRRR
RRRRRRRKKRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRWRRRRRKRRRKRRRRRRRRRRRRRW
KKRRRRRRRKRRRRWRKRRRRRRRRRRRRRRRWRRRRRRRRRRRR___RRR__RR___R_____
WRR__RRRSS......................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

This is prior to complete failure - sometimes whatever's blocking gets
unblocked before it hits max clients, sometimes it doesn't. I'm
running apache 2.0.59 built with openssl 0.9.8n on AIX 6.1 with
prefork, and this is virtually all SSL traffic (pretty much everything
other than the scoreboard). A restart basically "fixes" the problem,
from the perspective that all the workers get killed and after the
initial thrashing of starting up new workers.

From my understanding of the READ state above, everything above is
stuck in one of two broad categories:

 - A client made the TCP connection to the server, and is somewhere
between the tcp handshake and the end of the HTTP Request info. This
suggests it could be a network issue (something's hanging the
connections), or an openssl issue (the TLS/SSL negotiation is
slow/hanging), or...?
 - The request has been completed, but we're proxying to somewhere
else and waiting for a response from the proxy. This potentially
applies in this case, because we do have apache setup to proxy some
URLs to another server.

There's nothing in the access or error logs jumping out to correlate
with this problem either - There are MaxClient issues once it hits
that, of course, but nothing related to the BUSY_READ state.

 When having the problem, I've correlated the scoreboard with the
ps/lsof/netstat output, and the second case seems unlikely because I'm
not seeing any open connections to the server that apache is proxy'ing
to. It feels like there's some shared resource that all the apache
workers are trying to access, but I can't figure out what it might be.
Any suggestions on a solution, or how I might get more info out of
apache as to what it's doing while everyone's in the read state? Are
there other broad categories I'm missing as to why the workers might
be in the read state? Any further info I could provide to help anyone?
My next steps are to dive into the apache source further and see what
possible resources it could be blocking on, but I'm hoping someone
smarter than me already knows. :)

A new 3.0-M1 release candidate is ready for review.  The LICENSE problem 
has been corrected and the missed testsuite updates that Jarek noticed 
have been included.

See the JIRA issues here:

https://issues.apache.org/jira/secure...p;projectId=10220



Staged to

https://repository.apache.org/content...achegeronimo-046/

The main artifacts up for vote are the source release archives

https://repository.apache.org/content...ource-release.zip


https://repository.apache.org/content...ce-release.tar.gz



If you vote you should at least examine these and make sure something 
plausible builds from them.

The voting will be open a minimum of 72 hours.

[  ] +1 about time to push this out the door
[  ]  0 no opinion
[  ] -1 not this one  (please explain why)

Rick