|
|
|
|
@@ -1,6 +1,4 @@
|
|
|
|
|
<!-- Example Server Configuration File -->
|
|
|
|
|
<!-- Note that component elements are nested corresponding to their
|
|
|
|
|
parent-child relationships with each other -->
|
|
|
|
|
<!-- CASA ATS Server Configuration File -->
|
|
|
|
|
|
|
|
|
|
<!-- A "Server" is a singleton element that represents the entire JVM,
|
|
|
|
|
which may contain one or more "Service" instances. The Server
|
|
|
|
|
@@ -10,14 +8,8 @@
|
|
|
|
|
define subcomponents such as "Valves" or "Loggers" at this level.
|
|
|
|
|
-->
|
|
|
|
|
|
|
|
|
|
<Server port="8585" shutdown="SHUTDOWN">
|
|
|
|
|
<Server port="8585" shutdown="SHUTDOWN" debug="0">
|
|
|
|
|
|
|
|
|
|
<!-- Comment these entries out to disable JMX MBeans support used for the
|
|
|
|
|
administration web application -->
|
|
|
|
|
<Listener className="org.apache.catalina.core.AprLifecycleListener" />
|
|
|
|
|
<Listener className="org.apache.catalina.mbeans.ServerLifecycleListener" />
|
|
|
|
|
<Listener className="org.apache.catalina.mbeans.GlobalResourcesLifecycleListener" />
|
|
|
|
|
<Listener className="org.apache.catalina.storeconfig.StoreConfigLifecycleListener"/>
|
|
|
|
|
|
|
|
|
|
<!-- Global JNDI resources -->
|
|
|
|
|
<GlobalNamingResources>
|
|
|
|
|
@@ -29,9 +21,18 @@
|
|
|
|
|
UserDatabaseRealm to authenticate users -->
|
|
|
|
|
<Resource name="UserDatabase" auth="Container"
|
|
|
|
|
type="org.apache.catalina.UserDatabase"
|
|
|
|
|
description="User database that can be updated and saved"
|
|
|
|
|
factory="org.apache.catalina.users.MemoryUserDatabaseFactory"
|
|
|
|
|
pathname="conf/tomcat-users.xml" />
|
|
|
|
|
description="User database that can be updated and saved">
|
|
|
|
|
</Resource>
|
|
|
|
|
<ResourceParams name="UserDatabase">
|
|
|
|
|
<parameter>
|
|
|
|
|
<name>factory</name>
|
|
|
|
|
<value>org.apache.catalina.users.MemoryUserDatabaseFactory</value>
|
|
|
|
|
</parameter>
|
|
|
|
|
<parameter>
|
|
|
|
|
<name>pathname</name>
|
|
|
|
|
<value>conf/tomcat-users.xml</value>
|
|
|
|
|
</parameter>
|
|
|
|
|
</ResourceParams>
|
|
|
|
|
|
|
|
|
|
</GlobalNamingResources>
|
|
|
|
|
|
|
|
|
|
@@ -73,37 +74,43 @@
|
|
|
|
|
IP address of the remote client.
|
|
|
|
|
-->
|
|
|
|
|
|
|
|
|
|
<!-- Note : To disable connection timeouts, set connectionTimeout value
|
|
|
|
|
to 0 -->
|
|
|
|
|
|
|
|
|
|
<!-- Note : To use gzip compression you could set the following properties :
|
|
|
|
|
|
|
|
|
|
compression="on"
|
|
|
|
|
compressionMinSize="2048"
|
|
|
|
|
noCompressionUserAgents="gozilla, traviata"
|
|
|
|
|
compressableMimeType="text/html,text/xml"
|
|
|
|
|
-->
|
|
|
|
|
|
|
|
|
|
<!-- Important Note : The ATS uses configuration tools to enable and disable connectors.
|
|
|
|
|
These tools expect that the connectors be surrounded by comments containing
|
|
|
|
|
XX_CONNECTOR_YYY or XXX_CONNECTOR_COMMENT_YYY where XXX refers
|
|
|
|
|
to the type of connector (SSL or AJP) and YYY refers to either BEGIN or END. Please
|
|
|
|
|
do not modify these comments to avoid conflicting with the configuration tools. -->
|
|
|
|
|
|
|
|
|
|
<!-- Define a SSL Coyote HTTP/1.1 Connector on port 2645 -->
|
|
|
|
|
<!-- SSL_CONNECTOR_BEGIN -->
|
|
|
|
|
<Connector port="2645"
|
|
|
|
|
maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
|
|
|
|
|
enableLookups="false" disableUploadTimeout="true"
|
|
|
|
|
maxPostSize="16384" connectionTimeout="10000"
|
|
|
|
|
acceptCount="100" debug="0" scheme="https" secure="true"
|
|
|
|
|
clientAuth="false" sslProtocol="TLS"
|
|
|
|
|
keystoreFile="/etc/CASA/authtoken/keys/server/jks-store"
|
|
|
|
|
keystorePass="secret" algorithm="SunX509" />
|
|
|
|
|
<!-- SSL_CONNECTOR_END -->
|
|
|
|
|
|
|
|
|
|
<!-- Define an AJP Connector -->
|
|
|
|
|
<!-- AJP_CONNECTOR_BEGIN -->
|
|
|
|
|
<Connector enableLookups="false" port="9595" protocol="AJP/1.3"/>
|
|
|
|
|
<!-- AJP_CONNECTOR_END -->
|
|
|
|
|
|
|
|
|
|
<!-- An Engine represents the entry point (within Catalina) that processes
|
|
|
|
|
every request. The Engine implementation for Tomcat stand alone
|
|
|
|
|
analyzes the HTTP headers included with the request, and passes them
|
|
|
|
|
on to the appropriate Host (virtual host). -->
|
|
|
|
|
|
|
|
|
|
<!-- You should set jvmRoute to support load-balancing via AJP ie :
|
|
|
|
|
<Engine name="Standalone" defaultHost="localhost" jvmRoute="jvm1">
|
|
|
|
|
<!-- You should set jvmRoute to support load-balancing via JK/JK2 ie :
|
|
|
|
|
<Engine name="Standalone" defaultHost="localhost" debug="0" jvmRoute="jvm1">
|
|
|
|
|
-->
|
|
|
|
|
|
|
|
|
|
<!-- Define the top level container in our container hierarchy -->
|
|
|
|
|
<Engine name="Catalina" defaultHost="localhost">
|
|
|
|
|
<Engine name="Catalina" defaultHost="localhost" debug="0">
|
|
|
|
|
|
|
|
|
|
<!-- The request dumper valve dumps useful debugging information about
|
|
|
|
|
the request headers and cookies that were received, and the response
|
|
|
|
|
@@ -123,6 +130,11 @@
|
|
|
|
|
<Valve className="org.apache.catalina.valves.RequestDumperValve"/>
|
|
|
|
|
-->
|
|
|
|
|
|
|
|
|
|
<!-- Global logger unless overridden at lower levels -->
|
|
|
|
|
<Logger className="org.apache.catalina.logger.FileLogger"
|
|
|
|
|
prefix="catalina_log" suffix=".txt"
|
|
|
|
|
timestamp="false"/>
|
|
|
|
|
|
|
|
|
|
<!-- Because this Realm is here, an instance will be shared globally -->
|
|
|
|
|
|
|
|
|
|
<!-- This Realm uses the UserDatabase configured in the global JNDI
|
|
|
|
|
@@ -130,189 +142,15 @@
|
|
|
|
|
that are performed against this UserDatabase are immediately
|
|
|
|
|
available for use by the Realm. -->
|
|
|
|
|
<Realm className="org.apache.catalina.realm.UserDatabaseRealm"
|
|
|
|
|
resourceName="UserDatabase"/>
|
|
|
|
|
|
|
|
|
|
<!-- Comment out the old realm but leave here for now in case we
|
|
|
|
|
need to go back quickly -->
|
|
|
|
|
<!--
|
|
|
|
|
<Realm className="org.apache.catalina.realm.MemoryRealm" />
|
|
|
|
|
-->
|
|
|
|
|
|
|
|
|
|
<!-- Replace the above Realm with one of the following to get a Realm
|
|
|
|
|
stored in a database and accessed via JDBC -->
|
|
|
|
|
|
|
|
|
|
<!--
|
|
|
|
|
<Realm className="org.apache.catalina.realm.JDBCRealm"
|
|
|
|
|
driverName="org.gjt.mm.mysql.Driver"
|
|
|
|
|
connectionURL="jdbc:mysql://localhost/authority"
|
|
|
|
|
connectionName="test" connectionPassword="test"
|
|
|
|
|
userTable="users" userNameCol="user_name" userCredCol="user_pass"
|
|
|
|
|
userRoleTable="user_roles" roleNameCol="role_name" />
|
|
|
|
|
-->
|
|
|
|
|
|
|
|
|
|
<!--
|
|
|
|
|
<Realm className="org.apache.catalina.realm.JDBCRealm"
|
|
|
|
|
driverName="oracle.jdbc.driver.OracleDriver"
|
|
|
|
|
connectionURL="jdbc:oracle:thin:@ntserver:1521:ORCL"
|
|
|
|
|
connectionName="scott" connectionPassword="tiger"
|
|
|
|
|
userTable="users" userNameCol="user_name" userCredCol="user_pass"
|
|
|
|
|
userRoleTable="user_roles" roleNameCol="role_name" />
|
|
|
|
|
-->
|
|
|
|
|
|
|
|
|
|
<!--
|
|
|
|
|
<Realm className="org.apache.catalina.realm.JDBCRealm"
|
|
|
|
|
driverName="sun.jdbc.odbc.JdbcOdbcDriver"
|
|
|
|
|
connectionURL="jdbc:odbc:CATALINA"
|
|
|
|
|
userTable="users" userNameCol="user_name" userCredCol="user_pass"
|
|
|
|
|
userRoleTable="user_roles" roleNameCol="role_name" />
|
|
|
|
|
-->
|
|
|
|
|
debug="0" resourceName="UserDatabase"/>
|
|
|
|
|
|
|
|
|
|
<!-- Define the default virtual host
|
|
|
|
|
Note: XML Schema validation will not work with Xerces 2.2.
|
|
|
|
|
-->
|
|
|
|
|
<Host name="localhost" appBase="webapps"
|
|
|
|
|
<Host name="localhost" debug="0" appBase="webapps"
|
|
|
|
|
unpackWARs="true" autoDeploy="true"
|
|
|
|
|
xmlValidation="false" xmlNamespaceAware="false">
|
|
|
|
|
|
|
|
|
|
<!-- Defines a cluster for this node,
|
|
|
|
|
By defining this element, means that every manager will be changed.
|
|
|
|
|
So when running a cluster, only make sure that you have webapps in there
|
|
|
|
|
that need to be clustered and remove the other ones.
|
|
|
|
|
A cluster has the following parameters:
|
|
|
|
|
|
|
|
|
|
className = the fully qualified name of the cluster class
|
|
|
|
|
|
|
|
|
|
clusterName = a descriptive name for your cluster, can be anything
|
|
|
|
|
|
|
|
|
|
mcastAddr = the multicast address, has to be the same for all the nodes
|
|
|
|
|
|
|
|
|
|
mcastPort = the multicast port, has to be the same for all the nodes
|
|
|
|
|
|
|
|
|
|
mcastBindAddress = bind the multicast socket to a specific address
|
|
|
|
|
|
|
|
|
|
mcastTTL = the multicast TTL if you want to limit your broadcast
|
|
|
|
|
|
|
|
|
|
mcastSoTimeout = the multicast readtimeout
|
|
|
|
|
|
|
|
|
|
mcastFrequency = the number of milliseconds in between sending a "I'm alive" heartbeat
|
|
|
|
|
|
|
|
|
|
mcastDropTime = the number a milliseconds before a node is considered "dead" if no heartbeat is received
|
|
|
|
|
|
|
|
|
|
tcpThreadCount = the number of threads to handle incoming replication requests, optimal would be the same amount of threads as nodes
|
|
|
|
|
|
|
|
|
|
tcpListenAddress = the listen address (bind address) for TCP cluster request on this host,
|
|
|
|
|
in case of multiple ethernet cards.
|
|
|
|
|
auto means that address becomes
|
|
|
|
|
InetAddress.getLocalHost().getHostAddress()
|
|
|
|
|
|
|
|
|
|
tcpListenPort = the tcp listen port
|
|
|
|
|
|
|
|
|
|
tcpSelectorTimeout = the timeout (ms) for the Selector.select() method in case the OS
|
|
|
|
|
has a wakup bug in java.nio. Set to 0 for no timeout
|
|
|
|
|
|
|
|
|
|
printToScreen = true means that managers will also print to std.out
|
|
|
|
|
|
|
|
|
|
expireSessionsOnShutdown = true means that
|
|
|
|
|
|
|
|
|
|
useDirtyFlag = true means that we only replicate a session after setAttribute,removeAttribute has been called.
|
|
|
|
|
false means to replicate the session after each request.
|
|
|
|
|
false means that replication would work for the following piece of code: (only for SimpleTcpReplicationManager)
|
|
|
|
|
<%
|
|
|
|
|
HashMap map = (HashMap)session.getAttribute("map");
|
|
|
|
|
map.put("key","value");
|
|
|
|
|
%>
|
|
|
|
|
replicationMode = can be either 'pooled', 'synchronous' or 'asynchronous'.
|
|
|
|
|
* Pooled means that the replication happens using several sockets in a synchronous way. Ie, the data gets replicated, then the request return. This is the same as the 'synchronous' setting except it uses a pool of sockets, hence it is multithreaded. This is the fastest and safest configuration. To use this, also increase the nr of tcp threads that you have dealing with replication.
|
|
|
|
|
* Synchronous means that the thread that executes the request, is also the
|
|
|
|
|
thread the replicates the data to the other nodes, and will not return until all
|
|
|
|
|
nodes have received the information.
|
|
|
|
|
* Asynchronous means that there is a specific 'sender' thread for each cluster node,
|
|
|
|
|
so the request thread will queue the replication request into a "smart" queue,
|
|
|
|
|
and then return to the client.
|
|
|
|
|
The "smart" queue is a queue where when a session is added to the queue, and the same session
|
|
|
|
|
already exists in the queue from a previous request, that session will be replaced
|
|
|
|
|
in the queue instead of replicating two requests. This almost never happens, unless there is a
|
|
|
|
|
large network delay.
|
|
|
|
|
-->
|
|
|
|
|
<!--
|
|
|
|
|
When configuring for clustering, you also add in a valve to catch all the requests
|
|
|
|
|
coming in, at the end of the request, the session may or may not be replicated.
|
|
|
|
|
A session is replicated if and only if all the conditions are met:
|
|
|
|
|
1. useDirtyFlag is true or setAttribute or removeAttribute has been called AND
|
|
|
|
|
2. a session exists (has been created)
|
|
|
|
|
3. the request is not trapped by the "filter" attribute
|
|
|
|
|
|
|
|
|
|
The filter attribute is to filter out requests that could not modify the session,
|
|
|
|
|
hence we don't replicate the session after the end of this request.
|
|
|
|
|
The filter is negative, ie, anything you put in the filter, you mean to filter out,
|
|
|
|
|
ie, no replication will be done on requests that match one of the filters.
|
|
|
|
|
The filter attribute is delimited by ;, so you can't escape out ; even if you wanted to.
|
|
|
|
|
|
|
|
|
|
filter=".*\.gif;.*\.js;" means that we will not replicate the session after requests with the URI
|
|
|
|
|
ending with .gif and .js are intercepted.
|
|
|
|
|
|
|
|
|
|
The deployer element can be used to deploy apps cluster wide.
|
|
|
|
|
Currently the deployment only deploys/undeploys to working members in the cluster
|
|
|
|
|
so no WARs are copied upons startup of a broken node.
|
|
|
|
|
The deployer watches a directory (watchDir) for WAR files when watchEnabled="true"
|
|
|
|
|
When a new war file is added the war gets deployed to the local instance,
|
|
|
|
|
and then deployed to the other instances in the cluster.
|
|
|
|
|
When a war file is deleted from the watchDir the war is undeployed locally
|
|
|
|
|
and cluster wide
|
|
|
|
|
-->
|
|
|
|
|
|
|
|
|
|
<!--
|
|
|
|
|
<Cluster className="org.apache.catalina.cluster.tcp.SimpleTcpCluster"
|
|
|
|
|
managerClassName="org.apache.catalina.cluster.session.DeltaManager"
|
|
|
|
|
expireSessionsOnShutdown="false"
|
|
|
|
|
useDirtyFlag="true"
|
|
|
|
|
notifyListenersOnReplication="true">
|
|
|
|
|
|
|
|
|
|
<Membership
|
|
|
|
|
className="org.apache.catalina.cluster.mcast.McastService"
|
|
|
|
|
mcastAddr="228.0.0.4"
|
|
|
|
|
mcastPort="45564"
|
|
|
|
|
mcastFrequency="500"
|
|
|
|
|
mcastDropTime="3000"/>
|
|
|
|
|
|
|
|
|
|
<Receiver
|
|
|
|
|
className="org.apache.catalina.cluster.tcp.ReplicationListener"
|
|
|
|
|
tcpListenAddress="auto"
|
|
|
|
|
tcpListenPort="4001"
|
|
|
|
|
tcpSelectorTimeout="100"
|
|
|
|
|
tcpThreadCount="6"/>
|
|
|
|
|
|
|
|
|
|
<Sender
|
|
|
|
|
className="org.apache.catalina.cluster.tcp.ReplicationTransmitter"
|
|
|
|
|
replicationMode="pooled"
|
|
|
|
|
ackTimeout="15000"
|
|
|
|
|
waitForAck="true"/>
|
|
|
|
|
|
|
|
|
|
<Valve className="org.apache.catalina.cluster.tcp.ReplicationValve"
|
|
|
|
|
filter=".*\.gif;.*\.js;.*\.jpg;.*\.png;.*\.htm;.*\.html;.*\.css;.*\.txt;"/>
|
|
|
|
|
|
|
|
|
|
<Deployer className="org.apache.catalina.cluster.deploy.FarmWarDeployer"
|
|
|
|
|
tempDir="/tmp/war-temp/"
|
|
|
|
|
deployDir="/tmp/war-deploy/"
|
|
|
|
|
watchDir="/tmp/war-listen/"
|
|
|
|
|
watchEnabled="false"/>
|
|
|
|
|
|
|
|
|
|
<ClusterListener className="org.apache.catalina.cluster.session.ClusterSessionListener"/>
|
|
|
|
|
</Cluster>
|
|
|
|
|
-->
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
<!-- Normally, users must authenticate themselves to each web app
|
|
|
|
|
individually. Uncomment the following entry if you would like
|
|
|
|
|
a user to be authenticated the first time they encounter a
|
|
|
|
|
resource protected by a security constraint, and then have that
|
|
|
|
|
user identity maintained across *all* web applications contained
|
|
|
|
|
in this virtual host. -->
|
|
|
|
|
<!--
|
|
|
|
|
<Valve className="org.apache.catalina.authenticator.SingleSignOn" />
|
|
|
|
|
-->
|
|
|
|
|
|
|
|
|
|
<!-- Access log processes all requests for this virtual host. By
|
|
|
|
|
default, log files are created in the "logs" directory relative to
|
|
|
|
|
$CATALINA_HOME. If you wish, you can specify a different
|
|
|
|
|
@@ -325,19 +163,15 @@
|
|
|
|
|
pattern="common" resolveHosts="false"/>
|
|
|
|
|
-->
|
|
|
|
|
|
|
|
|
|
<!-- Access log processes all requests for this virtual host. By
|
|
|
|
|
default, log files are created in the "logs" directory relative to
|
|
|
|
|
$CATALINA_HOME. If you wish, you can specify a different
|
|
|
|
|
directory with the "directory" attribute. Specify either a relative
|
|
|
|
|
(to $CATALINA_HOME) or absolute path to the desired directory.
|
|
|
|
|
This access log implementation is optimized for maximum performance,
|
|
|
|
|
but is hardcoded to support only the "common" and "combined" patterns.
|
|
|
|
|
-->
|
|
|
|
|
<!--
|
|
|
|
|
<Valve className="org.apache.catalina.valves.FastCommonAccessLogValve"
|
|
|
|
|
directory="logs" prefix="localhost_access_log." suffix=".txt"
|
|
|
|
|
pattern="common" resolveHosts="false"/>
|
|
|
|
|
-->
|
|
|
|
|
<!-- Logger shared by all Contexts related to this virtual host. By
|
|
|
|
|
default (when using FileLogger), log files are created in the "logs"
|
|
|
|
|
directory relative to $CATALINA_HOME. If you wish, you can specify
|
|
|
|
|
a different directory with the "directory" attribute. Specify either a
|
|
|
|
|
relative (to $CATALINA_HOME) or absolute path to the desired
|
|
|
|
|
directory.-->
|
|
|
|
|
<Logger className="org.apache.catalina.logger.FileLogger"
|
|
|
|
|
directory="logs" prefix="localhost_log" suffix=".txt"
|
|
|
|
|
timestamp="false"/>
|
|
|
|
|
|
|
|
|
|
</Host>
|
|
|
|
|
|
|
|
|
|
|
Juan Carlos Luciani