At SLAC tomcat is installed in:

/afs/slac.stanford.edu/package/jakarta

To be able to write to this area you need to be in group:

maint-pkg-jakarta

Currently the members of this group are:

tonyj
turri
chee

To install a new version (this may vary by major version):

(The mirror sites may vary, start from http://tomcat.apache.org)

To checksum the downloaded file look for the 'MD5' link on the Tomcat page then run md5sum on the file you downloaded. The number generated from the md5sum command should match the checksum provided by Tomcat. For example:

tar.gz (pgp, md5, sha1)  <--   click on 'md5' to get the key that should match when you execute md5sum <filename>. If you use 'sha1' then execute sha1sum <filename> to verify.

 

Notices From announce@tomcat.apache.org

04Oct2018 Security notice received from announce@tomcat.apache.org. Subject: CVE-2018-11784 Apache Tomcat - Open Redirect

6Jun2017  Security notice received from announce@tomcat.apache.org. Subject: CVE-2017-5664 Apache Tomcat Security Constraint Bypass.

Tomcat Native 1.2.21

Tomcat 9.0

Tomcat 8.0

 

 24Feb2015 apache-tomcat-8.0.20 (from  http://tomcat.apache.org/download-80.cgi#8.0.20)

tar -xvfz apache-tomcat-8.0.20.tar.gz

  apache-tomcat-8.0.15

Tomcat 7.0

Tomcat 6.0

(The mirror sites may vary, start from http://tomcat.apache.org)

http://www.devlib.org/apache/tomcat/tomcat-6/v6.0.30/bin/apache-tomcat-6.0.30.tar.gz
tar -xvzf apache-tomcat-6.0.30.tar.gz
rm apache-tomcat-6.0.30.tar.gz

wget http://www.devlib.org/apache/tomcat/tomcat-6/v6.0.30/bin/apache-tomcat-6.0.30-deployer.tar.gz
tar -xvzf apache-tomcat-6.0.30-deployer.tar.gz
rm apache-tomcat-6.0.30-deployer.tar.gz

(I am not sure we actually need the deployer).

Tomcat 5.5

wget http://www.trieuvan.com/apache/tomcat/tomcat-5/v5.5.31/bin/apache-tomcat-5.5.31.tar.gz http://www.trieuvan.com/apache/tomcat/tomcat-5/v5.5.31/bin/apache-tomcat-5.5.31.tar.gz
tar -xvzf apache-tomcat-5.5.31.tar.gz
rm  apache-tomcat-5.5.31.tar.gz

(I am not sure where we are picking up the admin or deployer from? Maybe we have copies of them in the ~glast/tomcat? If so they should probably also be updated?)

All

To actually use the new version the setting for JAKARTA must be changed in e.g. ~srs/scripts/java-env.sh

Notes

There is now a tomcat 7.0, but perhaps we don't want to try it yet.
The Fermi servers are all running tomcat 5.5, maybe we could simplify things by changing to tomcat 6?

14Nov2014 - Installed tomcat 7.0.57 and tomcat 8.0.15 in /afs/slac/package/jakarta (Chee)

09Feb2015 - Installed tomcat 7.0.59 in /afs/slac/package/jakarta (Chee)

Installation History

Downloads are put into /afs/slac.stanford.edu/package/jakarta

Tomcat Version

Timestamp

From Location

Installer

Comments
apache-tomcat-7.0.82Dec 19, 2017https://tomcat.apache.org/download-70.cgiCheeInstalled version for Brian
apache-tomcat-9.0.0.M8June 14, 2016http://tomcat.apache.org/download-90.cgi#9.0.0.M8CheeInstalled in directory /afs/slac/package/jakarta. Downloaded the *.gz files.
apache-tomcat-8.0.32March 03, 2016http://tomcat.apache.org/download-80.cgi#8.0.32CheeInstalled in directory /afs/slac/package/jakarta. Downloaded the zip file, not the gz file. Is that a problem?
apache-tomcat-7.0.57February 9, 2015http://tomcat.apache.org/download-70.cgi#7.0.59Chee

Installed in directory

/afs/slac.stanford.edu/package/jakarta

apache-tomcat-5.5.33

April 22, 16:46

http://www.trieuvan.com/apache/tomcat/tomcat-5/v5.5.33/bin/apache-tomcat-5.5.33.tar.gz

Chee

 

apache-tomcat-6.0.32

April 22, 16:50

http://www.trieuvan.com/apache/tomcat/tomcat-6/v6.0.32/bin/apache-tomcat-6.0.32.tar.gz

Chee

 

apache-tomcat-6.0.32-deployer

April 25, 10:40

http://www.trieuvan.com/apache/tomcat/tomcat-6/v6.0.32/bin/apache-tomcat-6.0.32-deployer.tar.gz

Chee

 
apache-tomcat-7.0.57November 14 2014http://tomcat.apache.org/download-70.cgiCheescalnx-v04 only
apache-tomcat-7.0.57-deployerNovember 14 2014http://tomcat.apache.org/download-70.cgiCheescalnx-v04 only
apache-tomcat-8.0.15November 14 2014http://tomcat.apache.org/download-80.cgiCheescalnx-v04 only
apache-tomcat-8.0.15-deployerNovember 14 2014http://tomcat.apache.org/download-80.cgiCheescalnx-v04 only

Changing version of Tomcat Servers

To change the version of a Tomcat server it is necessary to edit the script tomcat/scripts/java-env .sh to change the environment variable JAKARTA.

  • No labels