Re: Apache Tomcat Security

2002-10-10 Thread jcosta


Ditto to the contributing author comment. Looking at your email address,
you're a Wrox guy. Who's the audience for the book? Are you targeting the
developer or the sysadmin?


   

  Nilesh Parmar

  [EMAIL PROTECTED]To:   'Tomcat Users List ' 
[EMAIL PROTECTED]   
  cc: 

   Subject:  Apache Tomcat Security

  10/10/2002 01:55 

  AM   

  Please respond to

  Tomcat Users

  List

   

   





Hi,
   I've been subscribing to the this mailing list from quite a while. I'm
interested in developing a book on Apache Tomcat security. For a start,
here
is what i've included as a specification for the book. Can anyone please
give me your valuable suggestions/ideas to make it a better book? I'd like
to know that exactly the programmer wants so as to make it a great book
helpfull to all. Here's what i'd like to cover in the book:

Internet Security (SSH, SSL))
How secure is Tomcat
Security Manager
Realms (This chapter should discuss Memory Realms, and JDBC Realms)
Secure connections with Databases (like MySQL) using SSL
Secure connections with LDAP using SSL (??)

Thanks in advance.
Nilesh




--
To unsubscribe, e-mail:   
mailto:[EMAIL PROTECTED]
For additional commands, e-mail: 
mailto:[EMAIL PROTECTED]








--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]


Re: Cannot get mod_jk to work

2002-10-09 Thread jcosta


I think he just grabbed the binary version build for a non-SSL Apache
server. Is that correct? I experienced the same problem trying to integrate
the binary.


|-+
| |   sonam singh  |
| |   sonam_singh_s@ya|
| |   hoo.com |
| ||
| |   10/09/2002 03:24 |
| |   AM   |
| |   Please respond to|
| |   Tomcat Users|
| |   List|
| ||
|-+
  
--|
  |
  |
  |   To:   Tomcat Users List [EMAIL PROTECTED] 
  |
  |   cc:  
  |
  |   Subject:  Re: Cannot get mod_jk to work  
  |
  
--|




how u compile the mod_jk ,have u get the latest source
of mod_jk from cvs . look  at the compilation option
of libtool when mod_jk is compiling .also check the
home of apache/build/config_var_mk  file the option
EXTRA_CPPFLAGS = -D_REENTRANT -D_THREAD_SAFE it shoul
be EXTRA_CPPFLAGS = -D_REENTRANT
because mod_jk uses the apxs for  compilation

regards
Sonam Singh


--- Henri Gomez [EMAIL PROTECTED] wrote:
  I am unable to get mod_jk to work.

  The following line in httpd.conf:
  LoadModule jk_module libexec/mod_jk-1.3-noeapi.so
  results in this error message:
  Cannot laod
 /usr/local/apache/libexec/mod_jk2-1.3.noeapi.so into
 server:
  /usr/local/apache/libexec/mod_jk2-1.3.noeapi.so:
 undefined symbol:
  ap_ctx_get

  What is going wrong?

 Thanks to give more information on your os, gcc and
 apache settings please.

 The shared lib was built under Redhat 7.2, kernel
 2.4.9-34, with
 gcc 2.96 against glibc 2.2.4-30 and Redhat Apache
 1.3.22-6 and
 mod_ssl-2.8.5-6.

 Regards


 --
 To unsubscribe, e-mail:
 mailto:[EMAIL PROTECTED]
 For additional commands, e-mail:
 mailto:[EMAIL PROTECTED]



__
Do you Yahoo!?
Faith Hill - Exclusive Performances, Videos  More
http://faith.yahoo.com

--
To unsubscribe, e-mail:   
mailto:[EMAIL PROTECTED]
For additional commands, e-mail: 
mailto:[EMAIL PROTECTED]








--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]


RE: Cannot get mod_jk to work

2002-10-09 Thread jcosta


Methinks it would be a good idea to maintain the binaries compiled to the
latest, greatest version of Apache (namely 1.3.27).


|-+
| |   Milt Epstein |
| |   [EMAIL PROTECTED]|
| |   u   |
| ||
| |   10/09/2002 01:16 |
| |   PM   |
| |   Please respond to|
| |   Tomcat Users|
| |   List|
| ||
|-+
  
--|
  |
  |
  |   To:   Tomcat Users List [EMAIL PROTECTED] 
  |
  |   cc:  
  |
  |   Subject:  RE: Cannot get mod_jk to work  
  |
  
--|




On Wed, 9 Oct 2002, Turner, John wrote:

 Are you sure there is something wrong with the binary?  If so, the
 binary maintainers (like Henri Gomez) would probably appreciate and
 email message from you with details.  There's no point in having
 binaries if they aren't usable.  As far as I know, this exact
 problem (same exact error message) was covered by Henri last week.

I don't think that there's something wrong with the binary in the
sense that it's broken, but rather that the particular binary they're
trying to use was built for/to/with a different version of Apache, and
hence won't work with it.  The error message seems to indicate it's
trying to call an Apache function, ap_ctx_get, that doesn't exist in
the Apache libraries they have.  So they either need a different
mod_jk binary, or a different Apache.


  -Original Message-
  From: Raj Saini [mailto:[EMAIL PROTECTED]]
  Sent: Wednesday, October 09, 2002 8:59 AM
  To: Tomcat Users List
  Subject: Re: Cannot get mod_jk to work
 
 
  Pls build the mod_jk from source. These some thing wrong with the
  binary. I faced the same problem one week ago.
 
  Raj
  Richard Pfeil wrote:
   I am unable to get mod_jk to work.
  
   The following line in httpd.conf:
   LoadModule jk_module libexec/mod_jk-1.3-noeapi.so
   results in this error message:
   Cannot laod /usr/local/apache/libexec/mod_jk2-1.3.noeapi.so
  into server:
   /usr/local/apache/libexec/mod_jk2-1.3.noeapi.so: undefined symbol:
   ap_ctx_get
  
   What is going wrong?
  
  
   --
   To unsubscribe, e-mail:
  mailto:[EMAIL PROTECTED]
   For additional commands, e-mail:
  mailto:[EMAIL PROTECTED]
  
 
 
 
  --
  To unsubscribe, e-mail:
  mailto:[EMAIL PROTECTED]
  For additional commands, e-mail:
  mailto:[EMAIL PROTECTED]
 

 --
 To unsubscribe, e-mail:   
mailto:[EMAIL PROTECTED]
 For additional commands, e-mail: 
mailto:[EMAIL PROTECTED]


Milt Epstein
Research Programmer
Integration and Software Engineering (ISE)
Campus Information Technologies and Educational Services (CITES)
University of Illinois at Urbana-Champaign (UIUC)
[EMAIL PROTECTED]


--
To unsubscribe, e-mail:   
mailto:[EMAIL PROTECTED]
For additional commands, e-mail: 
mailto:[EMAIL PROTECTED]








--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]


RE: Cannot get mod_jk to work

2002-10-09 Thread jcosta


I agree--you could get into a quagmire this way. At this point, I would
just settle for a version compiled against a plain-vanilla Apache 1.3.27
build.


|-+
| |   Milt Epstein |
| |   [EMAIL PROTECTED]|
| |   u   |
| ||
| |   10/09/2002 02:17 |
| |   PM   |
| |   Please respond to|
| |   Tomcat Users|
| |   List|
| ||
|-+
  
--|
  |
  |
  |   To:   Tomcat Users List [EMAIL PROTECTED] 
  |
  |   cc:  
  |
  |   Subject:  RE: Cannot get mod_jk to work  
  |
  
--|




On Wed, 9 Oct 2002 [EMAIL PROTECTED] wrote:

 Methinks it would be a good idea to maintain the binaries compiled
 to the latest, greatest version of Apache (namely 1.3.27).

Yes, that makes sense, but it's only part of the equation.  For
example, we don't know what version the person who was having the
problem was using.  And the Apache version is only one of the
variables, what about whether it's EAPI or not, or whether it's built
with mod_ssl, etc.  And I'm guessing it's not feasible for the
Apache/Tomcat/Connectors people to have built versions for all
possible permutations.

Anyway, I was just pointing out where the problem may potentially lie.
(And apparently the possibility that there was indeed something wrong
with the binary hasn't been ruled out either.)


 On Wed, 9 Oct 2002, Turner, John wrote:

  Are you sure there is something wrong with the binary?  If so, the
  binary maintainers (like Henri Gomez) would probably appreciate and
  email message from you with details.  There's no point in having
  binaries if they aren't usable.  As far as I know, this exact
  problem (same exact error message) was covered by Henri last week.

 I don't think that there's something wrong with the binary in the
 sense that it's broken, but rather that the particular binary they're
 trying to use was built for/to/with a different version of Apache, and
 hence won't work with it.  The error message seems to indicate it's
 trying to call an Apache function, ap_ctx_get, that doesn't exist in
 the Apache libraries they have.  So they either need a different
 mod_jk binary, or a different Apache.


   -Original Message-
   From: Raj Saini [mailto:[EMAIL PROTECTED]]
   Sent: Wednesday, October 09, 2002 8:59 AM
   To: Tomcat Users List
   Subject: Re: Cannot get mod_jk to work
  
  
   Pls build the mod_jk from source. These some thing wrong with the
   binary. I faced the same problem one week ago.
  
   Raj
   Richard Pfeil wrote:
I am unable to get mod_jk to work.
   
The following line in httpd.conf:
LoadModule jk_module libexec/mod_jk-1.3-noeapi.so
results in this error message:
Cannot laod /usr/local/apache/libexec/mod_jk2-1.3.noeapi.so
   into server:
/usr/local/apache/libexec/mod_jk2-1.3.noeapi.so: undefined symbol:
ap_ctx_get
   
What is going wrong?

Milt Epstein
Research Programmer
Integration and Software Engineering (ISE)
Campus Information Technologies and Educational Services (CITES)
University of Illinois at Urbana-Champaign (UIUC)
[EMAIL PROTECTED]


--
To unsubscribe, e-mail:   
mailto:[EMAIL PROTECTED]
For additional commands, e-mail: 
mailto:[EMAIL PROTECTED]








--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]