Permalink to this page: https://cwiki.apache.org/confluence/x/VColBg
This section contains various miscellaneous questions that are asked frequently enough to be listed here.
- I am unable to compile my JSP!
- I can't get servlets to work under /servlet/*!
- Why is the invoker evil?
- How to I get Tomcat's version number?
- Tomcat eats 100% of the CPU!
- How do I get a customized error page?
- Should I use the LE version (of Tomcat 4)?
- How do I configure Tomcat to NOT to store the sessions during shutdown?
- Is there a DTD for server.xml?
- How do I change the welcome file? ( I want to show index.jsp instead of index.html)
- How do I enable/disable directory listings?
- How do I use symbolic links with jars?
- How do I change the name of the file in the download Save-As dialog from a servlet? (or jsp)
- Is tag pooling broken? It doesn't call release!
- How do I disable tag pooling?
- Why do I get java.lang.IllegalStateException ?
- How do I make a scheduled event on Tomcat?
- What is Element "web-app" does not allow "servlet" here?
- How do I open a file for reading in my webapp?
- Can I run Tomcat with the JRE, or do I need the full JDK?
- Is Tomcat an EJB server? Can I use EJBs with Tomcat?
- Can I access Tomcat's JNDI provider from outside Tomcat?
- Who uses Tomcat in production?
- I'm getting java.lang.ThreadDeath exceptions when reloading my webapp.
- Help! Even though I run shutdown.sh (or shutdown.bat), Tomcat does not stop!
- How do I debug JSP errors in the Admin web application?
- What order do webapps start (or How can I change startup order)?
- What's the difference between a Valve and Filter?
- How do I set system properties at startup?
I am unable to compile my JSP!
Are you seeing this?
If so, here are some solutions:
- Environment variable issue
- Environment issue or Ant issue
- Others have had success by added JAVA_HOME/bin to their PATH.   and make sure you are using the full JDK and not the JRE.
In the case of the Environment issues, it is typical that on Windows, the startup scripts work fine and the service does not. The service uses registry values to look for java and other "stuff".
I can't get servlets to work under /servlet/*!
Using /servlet/ to map servlets is evil, absolutely evil. Even more evil than this . That being said, here are some threads that may answer this:
- (SECURITY) Apache Tomcat 4.x JSP source disclosure vulnerability
- Cannot Run Servlets, only JSP's, Part II
- Tomcat configuration problem: JSPs work, servlets don't
Why is the invoker evil?
This is opinions of the writer (YMMV) Quickie about the invoker: The invoker is a dynamic servlet which allows run-time loading of other servlets based on class name. This servlet is the one that allows
com.foo.MyClass is some class which can be loaded as a servlet but was never explicitly declared in a config file.
- Security risk ... see links above
- Configuration hiding - There is NO way to determine which servlets are used vs which are not used. In web.xml, every servlet is declared and mapped. In that one file you instantly have a road map to how the webapp works.
- Back doors. Servlets which are mapped can be alternately called via the invoker by class name. Since the URL is different, all security constraints might be ignored since the URL pattern is VERY different.
- Back doors. Bad programmers make it easier to do bad things.
- Back doors. It may be common to use common 3rd party jars in a shared area. If that shared jar has servlets in them and that servlet has a hole in it, bad things happen.
- Configuration hiding - it's important enough to say twice. Explicit declaration while a PITA, will be more helpful in the maintenance scheme of your webapp.
For another explanation of the invoker servlet, why it's evil, and what to do about it, see JavaRanch FAQ.
How to I get Tomcat's version number?
Starting with Tomcat 5.0.28 - there is now a version.sh (or version.bat) program in the bin directory. It will print the version number of Tomcat to Standard output.
Tomcat eats 100% of the CPU!
Odds are, it might be the garbage collector going wacky.
In 1.4.1 JVMs there is a memory leak which could hampering the garbage collector. More information Otherwise - get a memory profiler and/or tweak your memory settings.
How do I get a customized error page?
You may also catch error 500's as well as other specific exceptions or exceptions which extend Throwable. For more information, see the Servlet Specification for all the gory details of how you can play with this.
Should I use the LE version (of Tomcat 4)?
No. It was an experiment, it failed. (YMMV) The original purpose of LE "light" edition of Tomcat 4.0, 4.1 was because jdk1.4 provides a LOT of standard functionality that Tomcat uses that was not in jdk1.3. So to save some space two distributions were made to save some bandwidth. Since then, it has been an exercise in confusion. (Flame me if you disagree) More info
How do I configure Tomcat to NOT to store the sessions during shutdown?
Look at the Session manager component and tweak accordingly. One way is to tell Tomcat to persist sessions to a path which does not exist. (So Tomcat will not store, or be able to load the sessions).
Is there a DTD for server.xml?
No! Nor can one accurately exist. Here's why
How do I change the welcome file? ( I want to show index.jsp instead of index.html)
This is done in web.xml by changing welcome-files-list. More detail.
How do I enable/disable directory listings?
To make a global change, this is done in CATALINA_BASE/conf/web.xml by changing the listings property for the default servlet.
If you want to enable it for an individual webapp, then you need to add something similar to the following to your
WEB-INF/web.xml file (for your individual app):
How do I use symbolic links with jars?
You'll need to tweak with server.xml and do this. (Don't worry - its really easy!) Update: you should be worried – this feature has its drawbacks.
How do I change the name of the file in the download Save-As dialog from a servlet? (or jsp)
Use the Content-Disposition header (as defined by RFC6266).
Is tag pooling broken? It doesn't call release!
Note, that this issue does not affect the
SimpleTag tags and tag files of JSP 2.0 and later specifications, because those do not use tag pooling.
How do I disable tag pooling?
To disable tag pooling: See $CATALINA_BASE/conf/web.xml file and set enablePooling=false for the
Note: This option, as well as most other configuration options of JspServlet, affects code generation and compilation of JSP pages. It will not alter the behavior of JSPs that have already been compiled.
Why do I get
These are the most common reasons how you can get an
setBufferSizeand content has been written.
- The response has been committed and you do any of the following:
- Calling either
RequestDispatcher.forward()which includes performing a jsp:forward
RequestDispatcher.forward()which includes performing a jsp:forward
Remember that if you call
sendRedirect(), any following lines of code will still execute. For example:
How do I make a scheduled event on Tomcat?
Tomcat does not support this directly. Its not part of the Servlet or JSP Specification. If you do need this functionality see Apache TomEE which includes support for the @Schedule annotation and ScheduleExpression API, or see this thread or this link.
What is Element "web-app" does not allow "servlet" here?
Your web.xml is not well formed or it is not conforming to the DTD as defined by the servlet spec. Use an XML validator to ensure your web.xml file is ok.
How do open a file for reading in my webapp?
Can I run Tomcat with the JRE, or do I need the full JDK?
Tomcat 4 requires the full JDK. Tomcat 5.5 onwards will work with a JRE or a JDK.
Is Tomcat an EJB server? Can I use EJBs with Tomcat?
Tomcat is not an EJB server. Tomcat is not a full JavaEE server. Tomcat is a Servlet container. Tomcat does support those parts of the JavaEE specification that are required for Servlets, such as a subset of JNDI functionality. Furthermore, you can connect to remote JavaEE servers, or run Tomcat embedded inside a full JavaEE server.
Apache TomEE is a Java EE certified distribution built from Tomcat and contains support for EJB, CDI, JSF, JPA, BeanValidation and Transactions. The goal of TomEE is to maintain all Tomcat functionality and identity, only adding what is necessary to pass that Java EE 6 Web Profile TCK. A second distribution, called TomEE Plus, adds JAX-RS, JAX-WS, JMS and support for the JavaEE Connector Architecture.
Can I access Tomcat's JNDI provider from outside Tomcat?
Not at this time.
Who uses Tomcat in production?
Numerous organizations across various industries all over the world. There is a PoweredBy page in this wiki.
java.lang.ThreadDeath exceptions when reloading my webapp.
See Bugzilla discussion of this.
Help! Even though I run shutdown.sh (or shutdown.bat), Tomcat does not stop!
Most likely, a non-daemon thread is running. JVM's do not shutdown until there are 0 non-daemon threads. You will need to perform a thread dump to determine the code which started the thread.
How do I debug JSP errors in the Admin web application?
The admin web application that was shiped with Tomcat's binary distribution of Tomcat 5.5 and earlier, contained pre-compiled JSPs and mappings for them. In order to debug these JSPs, you need to get the source versions, place them in the admin webapp directory, and disable the JSPC-generated web.xml servlet mappings. Here's how to do it from scratch for a clean Tomcat installation:
- Download Tomcat's base and admin webapp distributions (binaries), unzip to a directory of your choice. We'll use c:\temp in this example.
- Edit c:\temp\server\webapps\admin\WEB-INF\web.xml to remove the JSPC-generated servlet mappings. These are marked in the web.xml file with comments indicating the beginning and end of the JSPC section. You can simply comment out all these servlet-mappping elements. Be careful not to comment out other servlet mappings such as the Struts dispatcher servlet.
- Open c:\temp\server\webapps\admin\WEB-INF\lib\catalina-admin.jar with a zip file program like
WinZip. Remove the files named *_jsp.class, as these are the compiled JSPs. Do not remove the other class files, the ones under the org/apache/ paths.
- Download a Tomcat source distribution and unzip it to a directory of your choice, but not the same directory that you used above. We'll use c:\src in this example.
- Copy everything except the WEB-INF/lib directory from c:\src\container\webapps\admin to c:\temp\server\webapps\admin. Now you will have the uncompiled admin webapp JSPs.
- If you haven't already, define an admin user in %CATALINA_HOME%\conf\tomcat-users.xml.
Start Tomcat, navigate to(or your actual server:port if you have modified the default values), and access the admin web application. It will run slower because Tomcat is now compiling the JSPs on-demand the first time you access them, but should otherwise appear normal.
What order do webapps start (or how can I change startup order)?
There is no expected startup order. Neither the Servlet spec nor Tomcat define one. You can't rely on the apps starting in any particular order.
While the above statement is certainly true, there is a potential "workaround":
If you actually have two (or more) apps depending on each other, you may decide to start multiple services in you server.xml:
I.e. you split the regular "/webapps" directory into "/webapps1" and "/webapps2", whereas everything in the former is deployed and started before the later. The drawback is that you need separate ports for the services.
What's the difference between a Valve and Filter?
A Filter lives in the webapp space and its behavior is defined by the Servlet spec. It will work across all Servlet containers.
A Valve can do everything a Filter can do but is Tomcat specific, and potentially not portable across Tomcat versions. A Valve can be executed earlier in the lifecycle of a request, access Tomcat internals, and do other "interesting" decorations to your webapp in the chance you cannot change your deployed webapp.
If you can achieve the desired functionality with a Filter, it is the preferred way to go.
How do I set system properties at startup?
setenv.sh file. It is documented in RUNNING.txt.
Windows service users — use service configuration application (e.g.