JBoss/Tomcat Access Logging

To enable a standard web access log for Tomcat, you must uncomment the 'AccessLogValve' directive in the Tomcat server.xml file.  Under JBoss, this file is typically found at:

server\default\deploy\jbossweb-tomcat50.sar\server.xml

Note that the valve does not report the authenticated user if you are using the JCIFS NTLM filter.

JCIFS Logging

You can make JCIFS log all authentication attempts by configuring the following filter initialization parameter:

<init-param>
  <param-name>jcifs.util.loglevel</param-name>
  <param-value>3</param-value>
</init-param>

The log level must be greater than two to show logins.

Running JBoss as an XP Service

I used JavaService and the following BAT file:

"%~dp0JavaService.exe" -install JBoss ^
  "%JAVA_HOME%\jre\bin\server\jvm.dll" ^
  "-Djava.class.path=%JAVA_HOME%\lib\tools.jar;%~dp0run.jar" ^
  -start org.jboss.Main ^
  -stop org.jboss.Main -method systemExit ^
  -out "%~dp0jbossservice-stdout.log" ^
  -err "%~dp0jbossservice-stderr.log" ^
  -current "%~dp0." ^
  -manual

The -out and -err switches are good for debugging, but in normal JBoss operation they simply echo the JBoss server log.  Also, they are not cleared whenever the service is started, so they grow indefinitely.

Jetty Dump Servlet

A convenient on-line debugging tool for HTTP requests is the Jetty Dump Servlet:

http://jetty.mortbay.org/jetty/dump

It echoes the request, much like SnoopServlet.