Hi
Some guidelines are available at:
https://wiki.italiangrid.it/twiki/bin/view/CREAM/SystemAdministratorGuideForEMI1#3_1_Tomcat_configuration_guideli
Cheers, Massimo
On 02/23/2012 02:48 PM, Torsten Harenberg wrote:
> Dear all,
>
> only after 2 weeks of running, our CREAM CE died with
>
> [root@cream-ce tomcat5]# cat catalina.out
> Exception in thread "Timer-3" java.lang.OutOfMemoryError: Java heap space
> at org.bouncycastle.asn1.ASN1InputStream.buildObject(Unknown Source)
> at org.bouncycastle.asn1.ASN1InputStream.readObject(Unknown Source)
> at org.bouncycastle.asn1.ASN1InputStream.buildEncodableVector(Unknown Source)
> at org.bouncycastle.asn1.ASN1InputStream.buildDEREncodableVector(Unknown Source)
> at org.bouncycastle.asn1.ASN1InputStream.buildObject(Unknown Source)
> at org.bouncycastle.asn1.ASN1InputStream.readObject(Unknown Source)
> at org.bouncycastle.asn1.ASN1InputStream.buildEncodableVector(Unknown Source)
> at org.bouncycastle.asn1.ASN1InputStream.buildDEREncodableVector(Unknown Source)
> at org.bouncycastle.asn1.ASN1InputStream.buildObject(Unknown Source)
> at org.bouncycastle.asn1.ASN1InputStream.readObject(Unknown Source)
> at org.bouncycastle.asn1.ASN1InputStream.buildEncodableVector(Unknown Source)
> at org.bouncycastle.asn1.ASN1InputStream.buildDEREncodableVector(Unknown Source)
> at org.bouncycastle.asn1.ASN1InputStream.buildObject(Unknown Source)
> at org.bouncycastle.asn1.ASN1InputStream.readObject(Unknown Source)
> at org.bouncycastle.asn1.ASN1InputStream.buildEncodableVector(Unknown Source)
> at org.bouncycastle.asn1.ASN1InputStream.buildDEREncodableVector(Unknown Source)
> at org.bouncycastle.asn1.ASN1InputStream.buildObject(Unknown Source)
> at org.bouncycastle.asn1.ASN1InputStream.readObject(Unknown Source)
> at org.bouncycastle.jce.provider.PEMUtil.readPEMObject(Unknown Source)
> at org.bouncycastle.jce.provider.JDKX509CertificateFactory.readPEMCRL(Unknown Source)
> at org.bouncycastle.jce.provider.JDKX509CertificateFactory.engineGenerateCRL(Unknown Source)
> at java.security.cert.CertificateFactory.generateCRL(CertificateFactory.java:479)
> at org.glite.voms.PKIUtils.loadCRL(PKIUtils.java:907)
> at org.glite.voms.PKIUtils.readObject(PKIUtils.java:931)
> at org.glite.voms.PKIStore.getObject(PKIStore.java:713)
> at org.glite.voms.PKIStore.getForCA(PKIStore.java:594)
> at org.glite.voms.PKIStore.load(PKIStore.java:461)
> at org.glite.voms.PKIStore.<init>(PKIStore.java:291)
> at org.glite.voms.PKIStore.refresh(PKIStore.java:182)
> at org.glite.voms.PKIStore$Refreshener.run(PKIStore.java:158)
> at java.util.TimerThread.mainLoop(Timer.java:534)
> at java.util.TimerThread.run(Timer.java:484)
>
> Can anyone recommend "secure" settings in tomcat5.conf?
>
> Thanks
>
> Torsten
>
>
> --
> <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>
> <> <>
> <> Dr. Torsten Harenberg [log in to unmask]<>
> <> Bergische Universitaet<>
> <> FB C - Physik Tel.: +49 (0)202 439-3521<>
> <> Gaussstr. 20 Fax : +49 (0)202 439-2811<>
> <> 42097 Wuppertal<>
> <> <>
> <><><><><><><>< Of course it runs NetBSD http://www.netbsd.org><>
>
>
|