Stopping users from getting a directory listing

2005-10-01 Thread Graham Reeds
What is the setting in the web.xml for stopping users from getting a 
directory listing?  I'm pretty sure I've seen it somewhere before but I 
can't for the life of me find where.


Thanks, Graham Reeds.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: combining form based authentication with https

2005-10-01 Thread Mark Thomas

Peddireddy Srikanth wrote:

Hi all,

I have a basic doubt  If there are any resoursec which will me on this
please point me towards them. I will carry on from there.

My question is how to combine the form based authentication, where we use
jsecuritycheck , jusername etc with https.
As far as I know if we use form based authentication username and
password will be authenticated by the container managed resource
called 'jsecuritycheck. But the data transfer from client browser to
tomcat will be still a plain text. i want to encrypt this and
obviously i need to use https.
So how to combine both  and how tomcat wil help me doping this??


Providing you have an https connector configured, you can use 
something like this in your security-constraint


user-data-constraint
  transport-guaranteeCONFIDENTIAL/transport-guarantee
/user-data-constraint

See the spec for more details.

Mark



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: wrapper.properties is existing?

2005-10-01 Thread Mark Thomas

Matson, Sunny (GE Healthcare) wrote:

Hi All,

   Is there any wrapper.properties file we can write in Tomcat 5.5
which is equivalent to jserv.properties in Jserv. If it is, how should I
write this file and where I need to place it. 


Don't know. What does it do?

Mark



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Charset configurations for JSP pages

2005-10-01 Thread Mark Thomas

Mieke Banderas wrote:

Mark Thomas said:

Read the spec.

Where in the spec?


JSP.4 Internationalization Issues would seem to be a blinding 
obvious place to start.


Mark



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Reg form based authentication

2005-10-01 Thread Mark Thomas

sree kanth wrote:

Hi all,
i have been developing on JSP's for the last one year,but still i have never
implemented form based authentication.
Can any one help me in implenting form based authentication?
Thank you all
Sreekanth


Very basic example:
Put login.jsp and error.jsp in the root of your application and add 
the web.xml snippet to your application's web.xml file.


Mark

login.jsp
html
  head
titleLogin/title
  /head
  body
form method=POST action='%= 
response.encodeURL(j_security_check) %' name=loginForm

  input type=text name=j_username size=16 id=username/
  input type=password name=j_password size=16 id=password/
  input type=submit value=Submit /
  input type=reset value=Reset /
/form
  /body
/html

error.jsp
html
  head
titleLogin Error/title
  /head
  body
pLogin failed./p
  /body
/html

web.xml snippet
  login-config
auth-methodFORM/auth-method
realm-nameTest/realm-name
form-login-config
  form-login-page/login.jsp/form-login-page
  form-error-page/error.jsp/form-error-page
/form-login-config
  /login-config



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: Stopping users from getting a directory listing

2005-10-01 Thread Caldarale, Charles R
 From: news [mailto:[EMAIL PROTECTED] On Behalf Of Graham Reeds
 Subject: Stopping users from getting a directory listing
 
 What is the setting in the web.xml for stopping users from getting a 
 directory listing?  I'm pretty sure I've seen it somewhere 
 before but I can't for the life of me find where.

A brief look at the comments near the beginning of conf/web.xml would
answer that question.

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you
received this in error, please contact the sender and delete the e-mail
and its attachments from all computers.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Newb question - How to install TomCat on MacOS Tiger 10.4

2005-10-01 Thread Werner Punz
Thomas K. Cheriyan Jr. wrote:
 Hey guys,
 
 Im trying to get the latest version of TomCat on my laptop which has has
 MacOS Tiger 10.4. I have also installed the latest version of Java. I read
 the installation guide on the Jakarta site as well as many others online and
 they haven't worked at all. If somebody is an expert at this and has some
 time to help me out, I would really appreciate it.
 
 --
 Thomas K. Cheriyan Jr.
 Email: [EMAIL PROTECTED]
 Cell: 516-526-1443
 

http://wiki.apache.org/myfaces/Tomcat_5%2e5%2e9_configuration?highlight=%28tomcat%29

last section, that is what I found out on how to get it up and running (hence I 
wrote this),
the latest upgrade hosed it again, I have not had time to look into the issue 
yet, I assume
something dumped another binary into jaspers path of nor return ;-),
but Tomcat itself works, it is just problematic that jasper has this weird 
behavior
I do not know if the newer jikes jasper has the same problems since I usually 
switch
to the javac jasper due to 5.5.9s problems with JDK5.0 constructs.




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



log4j log viewer for tomcat

2005-10-01 Thread matador
win200x
tomcat 5.5.9
jdk 1.5.x
log4j 1.2.9 (i think)

standard log4j setup with logs going into logs dir under tomcat install.

does anyone have any recommendations for a webapp or workaround that allows 
me to view these files.  the obvious ways (e.g. ftp, ssh, etc) are not an 
option.

thx


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]