Tomcat: The Definitive Guide. The Definitive Guide (e-book) Jastrzębie-Zdrój

Jakarta Tomcat is not only the most commonly used open source servlet engine today, its become the de facto standard by which other servlet engines are measured. Powerful and flexible, it can be used as a stand-alone web server or in conjunction with another server, like Apache or IIS, to run servlets or JSPs. But mastery of Tomcat is not easy: because its as complex as it is complete. Tomcat: The Definitive Guide answers vexing questions that users, administrators, and developers alike have been asking. This concise guide provides much needed information to help harness Tomcats power and wealth of features.Tomcat: The Definitive Guide offers something for everyone who uses Tomcat. System and network administrators will find detailed instructions on installation, configuration, and maintenance. For users, it supplies insightful information on how to deploy Tomcat. And seasoned enterprise Java developers will have a complete reference to setting up, running, and using this powerful softwareThe book begins with an introduction to the Tomcat server and includes an overview of the three types of server configurations: stand-alone, in-process, and out-of-process. The authors show how directories are laid out, cover the initial setup, and describe how to set the environment variables and modify the configuration files, concluding with common errors, problems, and solutions. In subsequent chapters, they cover: The server.xml configuration file Java Security manager Authentication schemes and Tomcat users The Secure Socket Layer (SSL) Tomcat JDBC Realms Installing servlets and Java Server Pages Integrating Tomcat with Apache Advanced Tomcat configuration and much more.Tomcat: The Definitive Guide covers all major platforms, including Windows, Solaris, Linux, and Mac OS X, contains details on Tomcat configuration files, and has a quick-start guide to get developers up and running with Java servlets and JavaServer Pages. If youve struggled with this powerful yet demanding technology in the past, this book will provide the answers you need. Spis treści: Tomcat: The Definitive Guide SPECIAL OFFER: Upgrade this ebook with OReilly A Note Regarding Supplemental Files Preface Whats This Book About? Why an Entire Book on Tomcat? Who This Book Is For Conventions Used in This Book How to Contact Us Acknowledgments Ian Darwins Acknowledgments Jason Brittains Acknowledgments 1. Getting Started with Tomcat 1.1. Installing Tomcat 1.1.1. Installing Tomcat on Linux 1.1.1.1. Installing Tomcat from a Jakarta multiplatform binary release 1.1.1.2. Installing Tomcat from a Jakarta Linux RPM 1.1.2. Installing Tomcat on Solaris 1.1.3. Installing Tomcat on Windows 2000 1.1.4. Installing Tomcat on Mac OS X 1.1.5. Installing Tomcat on OpenBSD 1.2. Starting, Stopping, and Restarting Tomcat 1.2.1. Starting Up and Shutting Down 1.2.1.1. Environment variables 1.2.1.2. Starting and stopping on Linux and Solaris 1.2.1.3. Starting and stopping on Windows 2000 1.2.1.4. Starting and stopping on Mac OS X 1.2.1.5. Starting and stopping on OpenBSD 1.2.2. Common Errors 1.2.3. Restarting Tomcat 1.2.3.1. Restarting Tomcat on Unix-based systems 1.2.3.2. Restarting the Tomcat Windows Service 1.3. Automatic Startup 1.3.1. Automatic Startup on Linux 1.3.2. Automatic Startup on Solaris 1.3.3. Automatic Startup on Windows 1.3.4. Automatic Startup on Mac OS X 1.3.5. Automatic Startup on OpenBSD 1.4. Testing Your Tomcat Installation 2. Configuring Tomcat 2.1. Using the Apache Web Server 2.2. Managing Realms, Roles, and Users 2.2.1. Realms 2.2.1.1. UserDatabaseRealm 2.2.1.2. JDBCRealm 2.2.1.3. JNDIRealm 2.2.1.4. JAASRealm 2.2.2. Container-Managed Security 2.2.2.1. Basic authentication 2.2.2.2. Digest authentication 2.2.2.3. Form authentication 2.2.2.4. Client-cert authentication 2.2.3. Single Sign-On 2.3. Controlling Sessions 2.3.1. Session Persistence 2.3.1.1. StandardManager 2.3.1.2. PersistentManager 2.3.1.3. Using FileStore for storing sessions 2.3.1.4. Using JDBCStore for storing sessions 2.4. Accessing JNDI and JDBC Resources 2.4.1. JDBC DataSources 2.4.2. Other JNDI Resources 2.5. Servlet Auto-Reloading 2.6. Relocating the Web Applications Directory 2.7. Customized User Directories 2.8. Tomcat Example Applications 2.9. Server-Side Includes 2.10. Common Gateway Interface (CGI) 2.11. The Tomcat Admin Application 3. Deploying Servlet and JSP Web Applications in Tomcat 3.1. Layout of a Web Application 3.2. Manual Application Deployment 3.2.1. Deploying Servlets and JavaServer Pages 3.2.2. Working with WAR Files 3.3. Automatic Deployment 3.3.1. Plan A: Copying a WAR File 3.3.2. Plan B: Context Fragments 3.4. The Manager Application 3.4.1. See Also 3.5. Automation with Jakarta Ant 3.5.1. Building a JAR/WAR 3.5.2. Deployment 3.5.3. Common Errors 3.5.3.1. XML in property files 3.5.3.2. FileNotFoundExceptions 4. Tomcat Performance Tuning 4.1. Measuring Web Server Performance 4.1.1. Load Testing Tools 4.2. External Tuning 4.2.1. JVM Performance 4.2.2. Operating System Performance 4.3. Internal Tuning 4.3.1. Disabling DNS Lookups 4.3.2. Adjusting the Number of Threads 4.3.3. Speeding Up JSP Compilation 4.3.3.1. Changing the JSP compiler under Tomcat 4.0 4.3.3.2. Changing the JSP compiler under Tomcat 4.1 4.3.3.3. Precompiling JSPs 4.4. Capacity Planning 4.4.1. Anecdotal Capacity Planning 4.4.2. Enterprise Capacity Planning 4.4.3. Capacity Planning on Tomcat 4.5. Additional Resources 5. Integration with Apache Web Server 5.1. Introduction 5.2. The Pros and Cons of Integration 5.2.1. Running Tomcat Standalone 5.2.2. Running Tomcat with Apache httpd 5.3. Installing Apache httpd 5.4. Apache Integration with Tomcat 5.4.1. Sharing the Load Using Separate Port Numbers 5.4.2. Proxying from Apache to Tomcat 5.4.2.1. Setting up Apache httpd 5.4.2.2. Setting up Tomcat 5.4.2.3. Verify that proxying works 5.4.2.4. Disadvantages 5.4.3. Using the mod_jk2 Connector 5.4.3.1. Using binary releases 5.4.3.2. Compiling mod_jk2 5.4.3.3. Master configuration file 5.4.3.4. The workers2.properties file 5.4.3.5. Starting up the integrated servers 5.4.3.6. Configuring mod_jk2 to use a TCP socket 5.4.3.7. Configuring mod_jk2 to use a Unix domain socket 5.4.3.8. Common errors 5.4.4. Two Programs in One Process: Tighter Integration 5.4.5. Generating mod_jk2 Webapp URI Mappings 5.5. Of Connectors and Configuration Files 5.5.1. Configuration Files 5.5.1.1. workers.properties 5.5.1.2. urimap.properties 5.5.1.3. workers2.properties 5.6. Summary 6. Tomcat Security 6.1. Introduction 6.2. Securing the System 6.2.1. Operating System Security Forums 6.2.2. Configuring Your Network 6.3. Multiple Server Security Models 6.4. Using the -security Option 6.4.1. Granting File Permissions 6.5. Setting Up a Tomcat chroot Jail 6.5.1. Setting Up a chroot Jail 6.5.2. Using a Non-root User in the chroot Jail 6.6. Filtering Bad User Input 6.6.1. Vulnerabilities 6.6.1.1. Cross-site scripting 6.6.1.2. HTML injection 6.6.1.3. SQL injection 6.6.1.4. Command injection 6.6.2. HTTP Request Filtering 6.6.3. See Also 6.7. Securing Tomcat with SSL 6.7.1. Setting Up an SSL Connector for Tomcat 6.7.2. Multiple Server Certificates 6.7.3. Client Certificates 7. Configuration Files and Their Elements 7.1. server.xml 7.1.1. Server 7.1.2. Service 7.1.3. Connector 7.1.3.1. Changing the port number from 8080 7.1.3.1.1. Running Tomcat via the Jakarta Commons Daemon component 7.1.3.1.2. Common Errors 7.1.4. Engine 7.1.5. Host 7.1.5.1. Virtual hosting 7.1.6. Context 7.1.7. DefaultContext 7.1.8. Realm 7.1.9. GlobalNamingResources 7.1.9.1. Environment 7.1.9.2. Resource 7.1.9.3. ResourceParams 7.1.9.4. See also 7.1.10. Listener 7.1.11. Loader 7.1.12. Logger 7.1.13. Manager 7.1.13.1. Stores 7.1.13.2. Resources 7.1.13.3. Valve 7.1.13.4. Controlling access log files with AccessLogValve 7.1.13.5. RemoteHostValve and RemoteAddrValve 7.2. web.xml 7.2.1. web-app 7.2.2. icon, display-name, and description 7.2.3. distributable 7.2.4. context-param 7.2.5. filter and filter-mapping 7.2.6. listener 7.2.7. servlet 7.2.8. servlet-mapping 7.2.9. session-config 7.2.10. mime-mapping 7.2.11. welcome-file-list 7.2.12. error-page 7.2.13. taglib 7.2.14. resource-env-ref 7.2.15. resource-ref 7.2.16. security-constraint 7.2.16.1. See also 7.2.17. login-config 7.2.18. security-role 7.2.19. env-entry 7.2.20. ejb-ref and ejb-local-ref 7.3. tomcat-users.xml 7.4. catalina.policy 8. Debugging and Troubleshooting 8.1. Reading Log Files 8.1.1. Hunting for Errors 8.1.2. Making Sense of Multiple Files 8.2. URLs and the HTTP Conversation 8.2.1. HTTP Requests 8.2.2. Response Codes and Headers 8.2.3. Interacting with HTTP 8.3. Debugging with RequestDumperValve 8.4. When Tomcat Wont Shut Down 9. Building Tomcat from Source 9.1. Installing Jakarta Ant 9.2. Obtaining the Source 9.2.1. Downloading Source Code 9.2.2. Obtaining Source Code with CVS 9.3. Downloading Support Libraries 9.4. Building Tomcat 10. Tomcat Clustering 10.1. Clustering Terms 10.2. The Communication Sequence of an HTTP Request 10.2.1. DNS Request Distribution 10.2.2. TCP NAT Request Distribution 10.2.3. mod_jk2 Load Balancing and Failover 10.2.4. Distributed Java Servlet Containers 10.2.4.1. Servlet sessions 10.2.4.2. Session affinity 10.2.4.3. Replicated sessions 10.2.4.3.1. Configuring and testing IP multicast 10.2.4.3.2. Installing, configuring, and testing session replication 10.2.5. JDBC Request Distribution and Failover 10.3. Additional Resources 11. Final Words 11.1. Supplemental Resources 11.1.1. Online Documentation That Ships with Tomcat 11.1.2. The Jakarta Tomcat Web Documentation 11.1.3. The Jakarta Tomcat Mailing List Archives 11.1.4. Web Sites Related to This Book 11.1.5. Third-Party Web Sites About Tomcat 11.1.5.1. The #tomcat Internet Relay Chat (IRC) channel 11.1.5.2. The Jakarta Tomcat mailing lists 11.2. Community A. Installing Java A.1. Choosing a Java SDK A.1.1. Working Around the Kaffe JDK A.1.2. Sun Microsystems J2SE SDK A.1.3. IBM JDK A.1.4. BEA JRockit A.1.5. Apple J2SE 1.4.1 B. JSPs and Servlets B.1. Why Both JSPs and Servlets? B.2. Simplifying JSPs with JavaBeans:Reusable Components B.3. Simplifying Your JSPs with Custom Tags B.4. Extending Tomcat B.4.1. Cocoon: XML Publishing B.4.2. Element Construction Set B.4.3. Formatted Objects Printing (FOP) B.4.4. JavaMail API B.4.5. JetSpeed: Scalable Information Portal B.4.6. Lucene Text Searching B.4.7. PDF Generators B.4.8. POI B.4.9. SOAP B.4.10. Struts B.4.11. Velocity B.4.12. WebDAV B.4.13. See Also C. jbchroot.c D. BadInputFilterValve.java About the Authors Colophon SPECIAL OFFER: Upgrade this ebook with OReilly