Catalina Protocol handler start failed

WebTop
1

I one server I get the following error in webtop/logs/cataloga.log.
What can be the reason and how to fix it?

11-Sep-2022 11:35:11.909 INFO [main] org.apache.catalina.core.StandardService.startInternal Starting service [Catalina]
11-Sep-2022 11:35:11.910 INFO [main] org.apache.catalina.core.StandardEngine.startInternal Starting Servlet Engine: Apache Tomcat/8.5.56
11-Sep-2022 11:35:11.934 INFO [localhost-startStop-1] org.apache.catalina.startup.HostConfig.deployDirectory Deploying web application directory [/var/lib/tomcats/webtop/webapps/webtop]
11-Sep-2022 11:35:22.789 INFO [localhost-startStop-1] org.apache.jasper.servlet.TldScanner.scanJars At least one JAR was scanned for TLDs yet contained no TLDs. Enable debug logging for this logger for a complete list of JARs that were scanned but no TLDs were found in them. Skipping unneeded JARs during scanning can improve startup time and JSP compilation time.
11-Sep-2022 11:35:28.277 INFO [localhost-startStop-1] org.apache.catalina.startup.HostConfig.deployDirectory Deployment of web application directory [/var/lib/tomcats/webtop/webapps/webtop] has finished in [16,343] ms
11-Sep-2022 11:35:28.284 INFO [main] org.apache.coyote.AbstractProtocol.start Starting ProtocolHandler ["http-nio-127.0.0.1-58080"]
11-Sep-2022 11:35:28.310 SEVERE [main] org.apache.catalina.core.StandardService.startInternal Failed to start connector [Connector[AJP/1.3-58009]]
	org.apache.catalina.LifecycleException: Protocol handler start failed
		at org.apache.catalina.connector.Connector.startInternal(Connector.java:1102)
		at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
		at org.apache.catalina.core.StandardService.startInternal(StandardService.java:440)
		at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
		at org.apache.catalina.core.StandardServer.startInternal(StandardServer.java:766)
		at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
		at org.apache.catalina.startup.Catalina.start(Catalina.java:688)
		at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
		at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
		at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
		at java.lang.reflect.Method.invoke(Method.java:498)
		at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:343)
		at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:474)
	Caused by: java.lang.IllegalArgumentException: The AJP Connector is configured with secretRequired="true" but the secret attribute is either null or "". This combination is not valid.
		at org.apache.coyote.ajp.AbstractAjpProtocol.start(AbstractAjpProtocol.java:274)
		at org.apache.catalina.connector.Connector.startInternal(Connector.java:1100)
		... 12 more
2

The reasoning seems to be this:

Cause

This error happens because Apache Tomcat 8.5.51 and newer have the secretRequired parameter set to true by default. When secretRequired is true the AJP/1.3 Connector will not start unless the secret attribute is configured to a non-null, non-zero length String.

Resolution

It is needed to inform a secret on the AJP connector in server.xml and it should match the existing AJP configuration at the proxy level. For reference on this configuration please visit the official mod_proxy_ajp documentation. Keep in mind that this secret password needs to be defined on the reverse proxy (eg. proxypass) as well, and that this option is available in Apache HTTPD since version 2.5. Another potential solution is to disable this requirement by specifying secretRequired="false" on server.xml , however, this is not recommended due to security concerns.

3

How to fix it exactly? Where do I have to insert the newly secret?
Why doesn’t nethserver install correct files?

4

cc// @lucag @Amygos , did you face the same problem?