This post describes how to setup Tomcat 6 on Debian Squeeze. The configured Tomcat serves requests on port 80 without the need of an additional web server. This is especially good for virtual servers (VPS) providing limit memory. It also has multiple virtual hosts configured, each with it’s own webapp with context root \/ and optional support for PHP via the Quercus PHP implementation.<\/p>\n

Installing Sun Java 6<\/h3>\n

Ensure the non-free section is enabled for the APT repository configuration in \/etc\/apt\/sources.list, e.g. “deb http:\/\/ftp.de.debian.org\/debian testing main contrib non-free”<\/p>\n

\r\napt-get update\r\napt-get install sun-java6-jdk\r\necho 'JAVA_HOME=\"\/usr\/lib\/jvm\/java-6-sun\"' >> \/etc\/environment\r\necho 'JRE_HOME=\"\/usr\/lib\/jvm\/java-6-sun\/jre\"' >> \/etc\/environment\r\n<\/pre>\n
Installing Tomcat 6<\/h3>\n
\r\napt-get install tomcat6 tomcat6-admin\r\n\/etc\/init.d\/tomcat6 stop\r\n<\/pre>\n
Creating standard Tomcat directory layout (optional)<\/h3>\n
\r\nmkdir \/opt\/tomcat\r\ncd \/opt\/tomcat\r\nln -s \/etc\/tomcat6\/ conf\r\nln -s \/usr\/share\/tomcat6\/bin\/ bin\r\nln -s \/usr\/share\/tomcat6\/lib\/ lib\r\nln -s \/var\/lib\/tomcat6\/webapps webapps\r\nln -s \/var\/log\/tomcat6\/ logs\r\n<\/pre>\n
Creating a Tomcat admin user<\/h3>\n
In \/opt\/tomcat\/conf\/tomcat-users.xml add an entry like:<\/p>\n
\r\n<user name=\"ADMIN_USERNAME\" password=\"ADMIN_PASSWORD\" roles=\"admin,manager\" \/>\r\n<\/pre>\n
Setting up virtual hosts<\/h3>\n
For each virtual host execute the following command. Replace “mydomain.com” with the desired virtual host name, but omit the “www.” part.<\/p>\n
\r\nmkdir -p \/opt\/tomcat\/webapps.mydomain.com\/ROOT\r\n<\/pre>\n
In the <Engine> tag of “\/opt\/tomcat\/conf\/server.xml” add one host entry for each virtual host.<\/p>\n
\r\n<Host name=\"mydomain.com\" appBase=\"\/opt\/tomcat\/webapps.mydomain.com\">\r\n    <Alias>www.mydomain.com<\/Alias>\r\n    <Valve className=\"org.apache.catalina.valves.AccessLogValve\" prefix=\"mydomain_access_log.\" suffix=\".txt\" pattern=\"common\"\/>\r\n<\/Host>\r\n<\/pre>\n
The <Alias> tag tells Tomcat to redirect from www.mydomain.com to mydomain.com.
\nThe <Valve> tag enables access logging in the standard logging format.<\/p>\n
Using xinetd to configure port 80 for Tomcat<\/h3>\n
Binding a service on port 80 requires root permissions. Thus we use port forwarding to “bind” Tomcat to port 80. My VPS does not support the use of “iptables -j REDIRECT” therefore I am using xinetd as a web proxy.
\nEnsure that no other service is listening on port 80\/443:<\/p>\n
\r\nnetstat -pan | grep \":80\\|:443\"\r\n<\/pre>\n
Register the required xinetd services:<\/p>\n
\r\necho echo \"\r\nservice www\r\n{\r\n        socket_type     = stream\r\n        protocol        = tcp\r\n        user            = root\r\n        wait            = no\r\n        bind            = 88.80.198.181\r\n        port            = 80\r\n        redirect        = localhost 8080\r\n        disable         = no\r\n        flags           = REUSE\r\n        log_type        = FILE \/var\/log\/wwwaccess.log\r\n        log_on_success  -= PID HOST DURATION EXIT\r\n\r\n        per_source      = UNLIMITED\r\n        instances       = UNLIMITED\r\n}\r\n\r\nservice https\r\n{\r\n        socket_type     = stream\r\n        protocol        = tcp\r\n        user            = root\r\n        wait            = no\r\n        bind            = 88.80.198.181\r\n        port            = 443\r\n        redirect        = localhost 8443\r\n        disable         = no\r\n        flags           = REUSE\r\n        log_type        = FILE \/var\/log\/httpsaccess.log\r\n        log_on_success  -= PID HOST DURATION EXIT\r\n\r\n        per_source      = UNLIMITED\r\n        instances       = UNLIMITED\r\n}\r\n\" > \/etc\/xinetd.d\/tomcat\r\n\/etc\/init.d\/xinetd restart\r\n<\/pre>\n
If you want to use a different service name, e.g. “tomcat” instead of “www” you must add this service to \/var\/services, e.g. “tomcat 80\/tcp”
\nIn \/opt\/tomcat\/conf\/server.xml modify the <Connector> as follows:<\/p>\n
\r\n<Connector port=\"8080\" protocol=\"HTTP\/1.1\"\r\n               connectionTimeout=\"20000\"\r\n               redirectPort=\"8443\" proxyPort=\"80\" address=\"127.0.0.1\" \/>\r\n<\/pre>\n
This binds Tomcat to localhost. It also tells Tomcat that port 80 is the proxy port which is necessary for correct URL generation.
\nFrom now on the Tomcat admin applications are only accessible via localhost. You can use SSH port forwarding to still access the applications from your workstation’s web browser. E.g. if you are using PuTTY<\/a> you can use this command line option “-L 8080:localhost:8080” to forward the server’s local 8080 port to your workstation’s local 8080 port. On your workstation’s browser you then simply enter http:\/\/localhost:8080\/manager\/html<\/a> and are connected to the server’s Tomcat admin application.<\/p>\n
Enabling PHP support (optional)<\/h3>\n
Download Quercus<\/a>.<\/p>\n
\r\nmkdir -p \/opt\/downloads\r\nwget -o \/opt\/downloads\/quercus-4.0.3.war http:\/\/caucho.com\/download\/quercus-4.0.3.war\r\n<\/pre>\n
Install Quercus as a shared library.<\/p>\n
\r\nunzip -j \/opt\/downloads\/quercus-4.0.3.war \\*.jar -d \/opt\/tomcat\/lib\r\n<\/pre>\n
Enable PHP support for the virtual hosts by installing the quercus web.xml. For each virtual host execute:<\/p>\n
\r\nunzip \/opt\/downloads\/quercus-4.0.3.war *web.xml -d \/opt\/tomcat\/webapps.mydomain.com\/ROOT\r\n<\/pre>\n
Starting Tomcat<\/h3>\n
\r\n\/etc\/init.d\/tomcat start\r\n<\/pre>\n
References<\/h3>\n
\n
Securing Linux for Java services: The port dilemma<\/a>\n
Redirect HTTP and HTTPS traffic to Tomcat’s ports<\/a>\n
Tomcat 6: Virtual Hosting How To<\/a>\n
Tomcat 6: Classloader How To<\/a>\n
Virtual Hosting with Tomcat<\/a>\n
Quercus: Tomcat<\/a>\n
How to install Tomcat 6 on Ubuntu 9.04 (Jaunty)<\/a>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"
This post describes how to setup Tomcat 6 on Debian Squeeze. The configured Tomcat serves requests on port 80 without the need of an additional web server. This is especially good for virtual servers (VPS) providing limit memory. It also has multiple virtual hosts configured, each with it’s own webapp with context root \/ and…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[43,72],"tags":[30,16,84,83,80,79,81,85,86,82],"class_list":["post-142","post","type-post","status-publish","format-standard","hentry","category-java-coding","category-linux","tag-java","tag-php","tag-port-80","tag-port-forwarding","tag-quercus","tag-tomcat","tag-vhost","tag-virtual-servers","tag-vps","tag-xinetd"],"_links":{"self":[{"href":"https:\/\/sebthom.de\/de\/wp-json\/wp\/v2\/posts\/142","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sebthom.de\/de\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sebthom.de\/de\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sebthom.de\/de\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sebthom.de\/de\/wp-json\/wp\/v2\/comments?post=142"}],"version-history":[{"count":0,"href":"https:\/\/sebthom.de\/de\/wp-json\/wp\/v2\/posts\/142\/revisions"}],"wp:attachment":[{"href":"https:\/\/sebthom.de\/de\/wp-json\/wp\/v2\/media?parent=142"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sebthom.de\/de\/wp-json\/wp\/v2\/categories?post=142"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sebthom.de\/de\/wp-json\/wp\/v2\/tags?post=142"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}