Tomcat security realms question

Hi all I have a problem that's been raised by my security team to do with using Tomcat JDBCRealms. We're using such realms to protect restricted resources. We also have a custom login form. The steps Tomcat seems to follow when using such a setup is: 1. Check to see if the user is

ssiservlet ioexception couldn't include file

Hello, I'm using Tomat in a jboss distribution and while all of my include files are working just fine, I'm getting the following error stack trace periodically (not tied to any page requests and at regular intervals - maybe once every couple of minutes). The include files referenced in the

Copying an HttpServletRequest

Hello all Is there any way to make a copy of an object implementing the HttpServletRequest interface ? I have thought that maybe using HttpServletRequestWrapper could solve my problem but I'm not sure since the API does not specify if a new copy of the object sent to the constructor is created

Re: out of memory error while load testing

start tomcat with -Xrunprof and look at the profile to figureout if there are any objects consuming more memory(leaks). Thread.activeCount() gives you total number of active threads in the current JVM. Refer to javax.management to know more about the Mbeans to monitor the tomcat. You need to

Re: out of memory error while load testing

You can change the JVM option, -Xmx to increase the heap size in catalina.sh and see if it can accomidate more requests Peddireddy Srikanth wrote: I forgot to give details about my Application and test. These details might give you people an idea about the problem area. In this app. users has

RE: Copying an HttpServletRequest

From: cristi [mailto:[EMAIL PROTECTED] Is there any way to make a copy of an object implementing the HttpServletRequest interface ? Alter the Tomcat codebase to implement that copy facility, remembering to check through the codebase for pieces that would break. You would then be maintaining

Re: Copying an HttpServletRequest

Can you tell us what you are trying to achieve? There is almost certainly an alternative way of getting to the same end without having to copy requests but, until you give us a bit more detail, we can't help you. We have a software project up an running but some modifications are required.

Re: Copying an HttpServletRequest

I got a doubt . is your problem is not solved by putting the data computed by first JSP in the session object ?? or putting all the required data in a bean (which is created by jsp:useBean in first jsp) with session scope and accessing that bean in second jsp ?? with out seeing the entirety of

Re: Copying an HttpServletRequest

I got a doubt . is your problem is not solved by putting the data computed by first JSP in the session object ?? or putting all the required data in a bean (which is created by jsp:useBean in first jsp) with session scope and accessing that bean in second jsp ?? with out seeing the entirety of

RE: Copying an HttpServletRequest

From: cristi [mailto:[EMAIL PROTECTED] The requirement of making a copy of the HttpServletRequest is generated by the fact that the former programmers have used (in a natural manner): 1) the HttpServletRequest.setAttributes() to send data to the jsp pages creating

Re: Copying an HttpServletRequest

Um. Yes, until someone makes another change in the original pages that breaks your code to pull out the data. The approach is fast to code, but fragile in the face of changes. Yes. You are right. Besides the problem I presented to Peddireddy (one of the guys who has answered my question)

Re: Assistance

Sure, me and Lalit(email ID in the CC) are very much interested in this. Please let us know the exact requirements. -Nidhi (416.848.3719) --- Medha Parathasarathy [EMAIL PROTECTED] wrote: Hi By any chance, any body in the group is interested in a party time assignment of maintaining the

Can't get ssl redirection to work properly

I am running Jboss 4.0.1 with the tomcat 5.0 and I have an application.ear called pds running on it. To access the application you simple write http://adress:8080/pds; Now I wanted to enable ssl on the webapp.war in the application so I changed the server.xml and web.xml and created a keystore

Apache-like Deny/Allow directives

Is there any way, with Tomcat, to block connections from domains and allow only certain ones, just like the Apache directive : Order Deny,Allow Deny from all Allow from .company.com I've setup my Apache server to do this, but since all the dynamic content is relayed to tomcat (jsp's), it is

a bug? - Tomcat 5.5 HTTP post buffer contains trailing zeros

I'm a first time user of this forum. If I'm posting a question incorrectly, please advise (and accept my apologies). - Switched to Tomcat 5 from version 4. I'm using HTTPS to post a URL-encoded buffer which often exceeds 4K in length. On the Tomcat side, the

Mysterious Error with Tomcat and Log4J

Hi! I encountered a very mysterious problem using log4j with tomcat 5.5.9. I have the file commons-logging.properties in my WEB-INF/classes directory with the following content: orr.apache.commons.logging.Log=org.apache.commons.logging.impl.Log4JCategory Log I did not notice my mistake in

Re: Apache-like Deny/Allow directives

[EMAIL PROTECTED] wrote: Is there any way, with Tomcat, to block connections from domains and allow only certain ones, just like the Apache directive : Order Deny,Allow Deny from all Allow from .company.com I've setup my Apache server to do this, but since all the dynamic content is

Tomcat 5.5/Apache2/mod_jk and Sticky_Session

Hi all. I am attempting to setup a loadbalanced set of Tomcat5.5 servers behind an Apache2 server using mod_jk. The application developers have told me that the app will require sticky sessions. I have it all configured and working with the exception of the sticky sessions. I think my

Tomcat 5.5 with Java 1.42

I want to use Tomcat5.5 with Java 1.42 Does anyone know how to do this? The release notes http://jakarta.apache.org/tomcat/tomcat-5.5-doc/RELEASE-NOTES.txt provided some clues (see Bundled APIs section when running on J2SE 1.4:). It talks about a compatibility package which I haven't been able to

RE: Tomcat 5.5 with Java 1.42

From: Dewey, John [mailto:[EMAIL PROTECTED] Subject: Tomcat 5.5 with Java 1.42 As I said before I haven't been able to find the referenced compatibility package so I'd appreciate a friendly link or instructions. It's the one cleverly disguised with the name Compat on the regular Tomcat

Any kind of Request Recorder/Player available?

With Apache JMeter, they have a proxy that you can use to record a session with the server, and you can then use that as a basis for load testing and what not. What I'm looking for is something similar, but something that I can ideally place in Tomcat (as a Valve perhaps, or a Servlet filter).

A mind-blogging question.

Hi Everyone, I just installed tomcat 5.5.9. However, I can't login in to the manager functionality even if I set the the tomcate-users.xml right. The error message is : HTTP Status 403 - Access to the requested resource has been denied type Status report message Access to the requested

Re: Any kind of Request Recorder/Player available?

That's a really interesting question... I don't know of anything that exists, although I'm quite certain something does. :) I can however think it through, and its probably not a huge chore to build... As you mentioned, a filter would probably do the trick nicely... if we assume your app only

wrapping contexts

Hi, this is pretty much a dummy question I think. I'm running Tomcat standalone for several websites. I have several webapps running which I want to share across various websites; an email app, file management app, message board, photo/blog, etc etc. What is the proper way to configure things

Re: Any kind of Request Recorder/Player available?

netbeans.org has a http monitor module that can record and playback of http requests, plugged into netbeans' web development framework. I think you could just download just that module and manually install it into your tomcat, and use the UI from netbeans to do the record/playback. It actually

Sharing sessions through different domains (in one tomcat)

Hello, I'm developing a webapp that is reachable via a couple of domains, but there is only one webapp in one tomcat. I need to share the session of a user over these different domains. What is the best way to guarantee that no session is lost, when the user switches between two domains ? Do

I can't access the tomcat managment console

Sorry to repeat this question. I hope that the title will describe the problem more accurately at this time. Thanks, --Paul --- zhou jian [EMAIL PROTECTED] wrote: Hi Everyone, I just installed tomcat 5.5.9. However, I can't login in to the manager functionality even if I set the the

Is anyone receiving this? Messages bouncing

Hi, Since last night, I have been getting delivery failed messages when sending to the mailing list. If anyone sees this message, would you mind responding to let me know? I've emailed the help email address last night, but haven't heard back yet. Thanks, Jim

[Slightly OT] JDK 1.5 + enum + serialization

Hi all. I have a question, which is slightly off topic, but can crop up in TC. SHORT VERSION: can a Java 1.5 enum be serilaized? LONG VERSION --- I have been working on project that uses it's own RPC via java.io.DataInput/DataOutput and I have run into a wall trying to send

Re: Is anyone receiving this? Messages bouncing

--- ohaya [EMAIL PROTECTED] wrote: Hi, Since last night, I have been getting delivery failed messages when sending to the mailing list. If anyone sees this message, would you mind responding to let me know? I've emailed the help email address last night, but haven't heard back

Re: Is anyone receiving this? Messages bouncing

hi, i received - Original Message - From: ohaya To: tomcat-user@jakarta.apache.org Sent: Friday, July 15, 2005 5:10 PM Subject: Is anyone receiving this? Messages bouncing Hi, Since last night, I have been getting delivery failed messages when sending to the mailing

osType is null

Hi, Can you tell me as why i m the osType is NULL in below log file: 4.1.30/webapps/nm00/jsp/LogonData.jsp 2005-07-14 15:55:55 RequestURI: /nm00/jsp/LogonData.jsp 2005-07-14 15:55:55QueryString: null 2005-07-14 15:55:55 Request Params: 2005-07-14 15:55:55

Re: Is anyone receiving this? Messages bouncing

Edrei and Zhou, Ok, thanks! I'll try again with the msgs that bounced. Sorry for the bother... Jim Edrei Marcelo wrote: hi, i received - Original Message - From: ohaya To: tomcat-user@jakarta.apache.org Sent: Friday, July 15, 2005 5:10 PM Subject: Is anyone

Re: How to Replace Tomcat authentication?

Bill Barker wrote: ohaya [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi, I've been looking into possibly replacing Tomcat's authentication with our own functionality. It looks like there use to be a class called SimpleRealm in the older Tomcat versions that would have

RE: Is anyone receiving this? Messages bouncing

From: ohaya [mailto:[EMAIL PROTECTED] Subject: Is anyone receiving this? Messages bouncing Since last night, I have been getting delivery failed messages when sending to the mailing list. If anyone sees this message, would you mind responding to let me know? Yes, the messages are getting

Where is default logon.jsp for Tomcat Admin webapp?

Hi, When connecting to the Tomcat Admin webapp, a forms-based login page appears. The web.xml for admin has a login-config section that indicates that the login page is /login.jsp. However, I've looked all over my hard drive, and especially in the admin directory, and I can't find any such

ssiservlet ioexception include directive error

Hello, I'm using Tomat in a jboss distribution and while all of my include files are working just fine, I'm getting the following error stack trace periodically (not tied to any page requests and at regular intervals - maybe once every couple of minutes). The include files referenced in the

Depreciated?

I understand HttpSession session=req.getSession(true); has been depreciated. What is correct to use in place of HttpSession ? Thanks, -Chris - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL

Re: Any kind of Request Recorder/Player available?

Got a bounce the first time... -- Forwarded message -- From: George Finklang [EMAIL PROTECTED] Date: Jul 15, 2005 10:59 AM Subject: Re: Any kind of Request Recorder/Player available? To: Tomcat Users List tomcat-user@jakarta.apache.org netbeans.org has a http monitor module that