Socket level communications from within Tomcat?

Is it possible to start a socket server from code called by Tomcat? Specifically, is it possible to run the server side of RMI communication from code called by ServletContainerListener.contextInitialized()? I seem to recall that an old version of Tomcat did not allow this. Is this still

Where is Digester?

Could some tell me which jar file contains org/apache/commons/digester/Digester and where the path to it gets specified in server.xml (Tomcat 5)? I've added a second service to my server.xml file (to support a second IP address). When Tomcat starts, the second service is throwing a

How do I associate a web app with a specific IP (connector)?

I'm going to be running Tomcat with two IP addresses (each has its own domain name). How do I associate some web apps with one and some with the other? From my reading of the /Server Configuration Reference/ (but no experience yet), I gather that I should create a connector for each IP

Re: How do I associate a web app with a specific IP (connector)?

xmlNamespaceAware=true Alias127.0.0.2/Alias Aliasyourdomain2.com/Alias /Host grts, Patrick -Original Message- From: Barnet Wagman [mailto:[EMAIL PROTECTED] Sent: Monday, June 07, 2004 5:27 PM To: Tomcat Users List Subject: How do I associate a web app with a specific IP (connector

Re: Disable session serialization?

maxIdleBackup=-1 Store className=org.apache.catalina.session.FileStore/ /Manager Change saveOnRestart=true to saveOnRestart=false -Tim Barnet Wagman wrote: Is there an example of Manager element anywhere on the web? (Neither the Tomcat documentation nor the sample server.xml

Very sporatic problem of OLD value request.getQueryString()

I've run into a /very/ sporatic problem and was wondering if anyone has had a similar problem (Tomcat 5.0.19). I have a servlet that reads the query string from HttpServletRequest (ie. HttpServletRequest.getQueryString()). Occasionally it seems to get an old version. This only occurs at the

Re: Disable session serialization?

Is there an example of Manager element anywhere on the web? (Neither the Tomcat documentation nor the sample server.xml that comes with Tomcat has an example as far as I can tell) Thanks Tim Funk wrote: http://jakarta.apache.org/tomcat/faq/misc.html#persist -Tim Barnet Wagman wrote

Disable session serialization?

Is it possible to disable session serialization? If so how is it done, and is it bad idea? Is this documented anywhere? Thanks, bw PS the archives has several posting asking this question but no answer. - To unsubscribe,

Re: Tomcat as 'root' insecure? (again)

David Smith wrote: Let's see if I can offer a direct answer. I don't believe tomcat is insecure, but there are always those holes that haven't been found yet and a chance that the bad guys will find them first. The best practice approach to system security is to run all processes (tomcat

Re: Tomcat as 'root' insecure? (again)

Roger wrote: Okay, I suppose you all are right saying that it's better not to run as root. But does the same apply to Windows? We're using Tomcat 4.1.24 on Windows 2000 Server, and up till now we've always run Tomcat as root. I don't see a jvsc-script or directory. Do I need to upgrade to TC5

Can webapps 'share' a security-constraint?

I'd like users to be able to login once and get access to several web apps. Is it possible for web apps to 'share' a security-contraint? I've tried putting the constraint into conf/web.xml That applies the constraints to all the specified web apps managed by the server, but users still need

Tomcat as 'root' insecure? (again)

This issue has been (tangentially) addressed in a number of threads on several lists, but the answers I've found are not exactly consistent. I'd appreciate this list's opinion. So, is it insecure to run standalone Tomcat as a root process on a Linux system? By 'running Tomcat as a root

Bug in Tomcat 5 realm example (j_security_check, again)

This really concerns using j_security_check. (I know there have been many posts on this subject but I haven't seen the answer I need and I haven't found much in the way of documentation on j_security_check). Tomcat 5 comes with a simple example of how to use j_security_check for form based login

Default persistence/serialization?

Does Tomcat, by default, serialize a session (or anything else)? I'm getting a NotSerializableException when attempting to perform a HttpServletRequest.forward() from inside a servlet. The NotSerializableException refers to a java bean that is called from the JSP page that is the object of

Changing the 'ROOT' webapp (newbie question)

By default, when Tomcat gets a request for something like http://www.some_domain_name.com/ or http://www.some_domain_name.com it serves the file webapps/ROOT/index.jsp What is the preferred way of getting it return the index file of a different wep app? I haven't found anything in the conf xml

(newbie q) Connector vs running standalone Tomcat as root

I'd like to hear people's opinions on the best way to have Tomcat accessible via standard ports (80 and 443). As I understand it, under Linux (and other unixes), ports 1000 must be run as root. I've also read that there are some difficulties running Tomcat as root. I gather that the

ssl-only access to a page?

Is it possible to make a page accessible only via an ssl port? Of course I can (and will) check for the protocol in a servlet (and re-direct if necessary), but it would be nice to prevent non-ssl access to certain pages altogether. Thanks, bw

How to set autodeploy?

In Tomcat 4.1.27, where and how do you set autodeploy to true? I thought that autodeploy=true was the default, but it does not appear to be working in my newly installed copy. (This must be in the documentation a somewhere but I haven't been able to find it and there's nothing for autodeploy