Mr. Cristian Romanescu wrote:
Hi,
I'm not sure if this would help, but maybe you should try setting
CATALINA_HOME, since new releases of Tomcat.
also you might want to run catalina.sh run.
Bye!
He, JianBo wrote:
Hi,
I installed J2SDK V1.4 and tomcat on Compaq Tru64UNIX v5.1 successful,
Filip Sergeys tc wrote:
Hi,
Maybe somebody in the near or distant future will hit the same problem.
I hope this can help you avoiding it.
Error HTTP spoken on HTTPS port using apache 1.3.26 with mod_ssl,
mod_jk1.2 and tomcat 4.1.12.
If I understand correctly, a client has connected to the
Qmail List wrote:
I have been wondering about this as well. Apache screams and hollers
BIG_SECURITY_HOLE if you compile it with the flags allowing it to run as
root.
That said, I love the fact that Tomcat runs as root. It makes it easy for
your webapp to do things admin applications, servers,
Skorupski Pawe ,(PZUZ) wrote:
Hi,
my problem is that when I run Tomcat with some application, then after some
time(using applcations) I get nobody processes which doesn't want to
disappear (even after restarting Tomcat).
I can see them using command top. I can not kill them even with
Skorupski Pawe ,(PZUZ) wrote:
Thanks for advice,
I find out and processes with 'user nobody' are created by process with
command inetd.
Aha, we are getting somewhere.
I don't know if the processes with command httpd can be started by process
'inetd' if service http doesn't exist in
Skorupski Pawe ,(PZUZ) wrote:
I saw that only talk and ntalk are started as user nobody.tty, the rest of
services are started as root.
Kill those things. You usually do not need them on a server.
The parent process which started nobody processes are started by user root
from inetd command.
James hughes wrote:
I changed the values, but still the Datasource is null :(
I find it strange that the JNDI name exists with no object - that is, I dont
get a NameNotFoundException.
The object is there the moment you declare it. It is just that it is null.
I find it extremely hard to
Server.xml: This portion exists under the GlobalNamingResources element
under Server; the only pieces changed are the username and password.-)
Resource name=jdbc/election scope=Shareable
type=javax.sql.DataSource/
ResourceParams name=jdbc/election
parameter
String searchFields[] = request.getParameterValues(searchField);
String searchFieldValue = searchFields[1];
I should be able to just do:
String searchFieldValue = request.getParameter(searchField);
Why would I be getting an array with two values? I was able to get the
John Walstra wrote:
I used to use the WarpConnector. I just switched to mod_jk. When I used the
WarpConnector, I could not get the JNDI DataSource to work. I received the
same error you received. If I accessed my webapp using the
Tomcat-Standalone service it would work, but would not work
Externo wrote:
Sorry by my English.
How I can guess login and password strings of an user, from error page (JSP)
using Form Based Authentication of Tomcat?
I need know it to lock the count each 3 error tries (if login is ok but
password is bad, insteed).
Something like enhanced
[EMAIL PROTECTED] wrote:
I have been seen that nobody is able to answer to this question, I
presume it's interesting for anybody, for a few days.
I wish I knew if DBCP is able to find when db is restarted and
reconnect.
I'd like to use the jakarta instrument DBCP because all the
Craig R. McClanahan wrote:
In my experience, the (small) memory savings of putting classes into
/shared/lib (or /common/lib) is not worth the hassles it brings:
What about building a server-wide environment? Suppose you have a set of Tag
Libraries that you either trust or wish to enforce
Filip Rachunek wrote:
Hello,
is it possible to have a servlet in Tomcat container
which is invoked automatically each gived time period?
[e.g. each 10 minutes] And I would also need this
special servlet to access other resources of my web
application [connection pool, ...].
You're making
Miguel Angel Mulero Martinez wrote:
This depends on how you use the connection. If you use a db pool, then the
pool must reconnect. There're pools that do that and other that don't do.
Does DBCP that comes with Tomcat 4.0.4 and later reconnect?
Nix.
--
To unsubscribe, e-mail:
Nikola Stefanovski wrote:
hello.
i'm working with cyrillic characters and i can't get them to show ok.
i'm working on win2000 and i've tried tomcat versions 3.2.3, 3.3a and 4.0.1.
the page directive is specified as:
%@ page contentType=text/html; charset=windows-1251
Nick Wesselman wrote:
The shutdown script takes so long... is there any harm in kill -9-ing
tomcat? What about when a connector like mod_jk is in use?
What about DataBase connections and possible sessions that will be cut in half?
I suppose if there is anything transactional going on in my
Andrew Conrad wrote:
You might get more responses if you post it to
[EMAIL PROTECTED]
If anyone gets an answer to this question, could it be circulated here, as well?
Most of us would like to know. A DB server rebooting scenario is not all that
impossible. And if it happens on Saturday
No, I am saying I have three instances of the same servlet. Only one appears
to be receiving the requests, but if things are like you say then what's
going on with Tomcat? Are you saying I have three Tomcats running, even
thought I called startup only once?
Are you sure? Could it be
Craig R. McClanahan wrote:
This is true in a very particular situation. Basically, a servlet
container will instantiate ONE servlet class into an object. Each
request is handled via it's own separate thread. Unless Servlet
implements SingleThreadModel, all threads that are directed to that
How should I control how many instances I want of a given servlet?
In my case I would like just one.
I don't think you can control that, usually there is only one instance per Servlet
Engine. Are you trying to say that you don't want to have more than one REQUEST being
handled by the
Does anyone know if there is a FTP connector(?) for Tomcat?
If not, is it something that's doable with Tomcat?
FTP, as a protocol, is stateful. In other words, you login to the server and until you
log out, you have an FTP session. HTTP is stateless. There is no login/logout. There
are
1. Is it true that requests from the SAME client
always served by the SAME thread?
Not always. Even if a servlet implements SingleThreadModel, the
container may still keep a pool of instances of this servlet and issue
requests as they come in, as long as no two requests share an instance
Paul McGovern wrote:
Upon further investigation, I found that the config I use below does work if,
and only if, I access the servlet from localhost:8080. I'm using mod_webapp
with Apache 1.3.24 and have the following entry, which seems to work fine, in
httpd.conf:
Lookup archives. This
ope wrote:
I am looking for a way to use Tomcat as a proxy
similar to the way that Apache can be setup to proxy
to Tomcat. What I want to do is have Tomcat setup so
that any URLs that have the path
http://myserver/someapp are forwarded to
http://otherserver/someapp.
Apache can do this
Craig R. McClanahan wrote:
This is not the right test for a newly created session, because there
*was* no requested session. Try something like this instead:
HttpSession session = request.getSession(false);
if (session == null) {
... no session exists ...
} else if
Hi,
I'm wondering if there's a way to get some code called before
doGet/doPost? I want to build a superclass for my JSP pages that checks for
some login stuff and redirects if it's not found, without having to put the
detect code in every page.
That is a job for Servlet Container
I am using tomcat's session object, but i store a magic string in the
session that i need to decode to see if it's a valid magic string and
populate a LoginSession object if they're logged in... i was just hoping to
do it without having some code at the top of every page, but it's not
Does Tomcat support EJB?.
No, it is not the task of Tomcat.
if not, is there a project to migrate tomcat to support EJB?... it will be
a very nice feature...
Other servers, like JBoss, are EJB containers, Tomcat can connect/integrate with them.
There is a version of JBoss that
Don't suppose anybody can send me a pointer as to what EJB and Jboss
actually achieve? All i managed to glean from their website were some pretty
3d variations on the usual our product in the middle and some arrows
diagrams.
My knowledge of EJB is informational. EJB as are JEE
Thanks, Cédric and Peter Lin, for your responses. Both of you seem to be
saying that, instead of storing large objects in the session object, I should
be storing them in the application object (ServletContext).
ServletContext is not application context (yes, there is an application
That is perfect. I was hoping to avoid JavaScript, but I couldn't find any
other way.
We ran into this exact issue with the admin webapp in Tomcat 4.1.x (which
also uses frames), and solved it by adding the following to the top of the
login page:
script language=JavaScript
I would like to be able within a servlet
to launch a file download and just after reloading
a jsp page( =The servlet generates two response ).
Is it possible ?
No, but you can give a JSP/HTML page in response that will have JScript function that
opens another page that will be
Tomcat 4.1.7 fails to compile any jsp files giving
some stupid error about handleException. If I change
the JDK to 1.2 everything works fine. Is tomcat4.1.x
allergic to jdk1.4?
Perhaps it is, that's why there is a Tomcat LE version, tailored for JRE 1.4.
Nix.
Ralph Einfeldt wrote:
AFAIK DBCP not part of the distribution, but you
can download it seperately from:
I believe it is, from 4.0.4
Nix.
--
To unsubscribe, e-mail: mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]
Is there anyone that installed (Apache + Tomcat + JBoss) combination all
together?
What are the advantages of Using Apache with Tomcat-JBoss combination or
is Tomcat enough for complete web content serving?
Should I run Apache with Tomcat + JBoss in a separate JVM?
Tomcat + JBoss
Tomcat + JBoss will give you a complete JEE server, with web interface.
Apache can help you off-load serving static stuff from your Tomcat.
The dynamic part: JSP, Servlets (EJB and other JBoss mechanisms) will not
be served by Apache.
It's ok. But I am just wondering that; Is it
I have been using tomcat for a little while now, on Linux
and Win2K and love it to bits. I have a need to run it on
a SCO Openserver box, and I have been trying to locate
some binaries for it.
Tomcat is a pure Java application, so go to jakarta.apache.org and download the
(general
Neither adding description nor removing slashes helped.
I've checked the path in manual:
jdbc:postgresql:database
jdbc:postgresql://host/database
jdbc:postgresql://host:port/database
This last form is the most complete one. Anyway, that will not make a difference,
since it is up to
August Detlefsen wrote:
Thanks Nikola !
I was intrigued by this, so I took it a step further and made it
recursive -it now lists all bindings with one click. I hope this is
useful to someone:
Heh, nice. I didn't want to go for recursion, since I was not sure how many
levels of recursion
Is there a way to list all of the JNDI Resources that are loaded for a
particular context?
Sure.
Here is a snipp from my JNDI browser JSP:
% page
info=JNDI browser
import=javax.naming.*, javax.sql.*, java.sql.*
contentType=text/html; charset=windows-1250
%%!
static public
No, this is not funny at all. Anyone reacting to this will loose some
serious money. They claim they are going to need some money from you
in order to free their $ milions from their, so called, swiss bank accounts.
So be warned. This is a known trick from criminal organizations.
yeah right, very funny
-Original Message-
From: savimbi thomas [mailto:[EMAIL PROTECTED]]
Sent: 22 June 2002 11:59
To: [EMAIL PROTECTED]
Subject: SEEKING URGENT ASSISTANCE
URGENT BUSINESS PROPOSAL
Dear sir ,
My name is Thomas Savimbi, I
I think the httpd.apache pages show an update already available
(1.3.26/2.0.39). Am I mis-reading that?
I'm downloading it as we speak.
Nix.
For versions 1.3.x this bug allows the attacker to execute
arbitrary code on the attacked machine.
On 64 bit architectures only. Please read the apache.org advisory...
True, my mistake. However, on 32-bit platforms, 1.3.x will segfault, so you still have
a DoS attack. People should
this mail is sent by my boss regarding flaws found in apache. Could anyone
throw some light on this.
CERT reported yesterday that all current and recent versions of Apache, using HTTP/1.1
protocol have a buffer overflow bug. The bug is activated through maliciously crafted
HTTP/1.1
This is the original CERT advisory.
- Original Message -
From: CERT Advisory [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, June 18, 2002 4:06 AM
Subject: CERT Advisory CA-2002-17 Apache Web Server Chunk Handling Vulnerability
-BEGIN PGP SIGNED MESSAGE-
It sounds to me like the only people who need to worry are those who run the
affected versions on Windows * and on 64 bit systems. For most of us who run
on 32 bit systems on Linux/*BSD/Unix, we don't need to worry, right?
Not exactly. The bug has been reproduced on Windows and some
It sounds to me like the only people who need to worry are those who run the
affected versions on Windows * and on 64 bit systems. For most of us who run
on 32 bit systems on Linux/*BSD/Unix, we don't need to worry, right?
Not exactly. The bug has been reproduced on Windows and
Cindy Ballreich wrote:
At 06:53 AM 6/14/02 +0200, Nikola Milutinovic wrote:
Yes, and it should work - but it doesn't. For most of us, DataSource is null and
nothing apperas in the logs.
Question: where is your JDBC driver currently located? I got the same result until I
moved it from
I'm using the JNDI Datasource setup fine with Tomcat 4.0.3 and Sybase.
Several guys have reported that Sybase works OK, so does Oracle 9i. With PostgreSQL, I
am constantly out of luck. Right now, I'm preoccupied with some other work, but I'll
get to the bottom of the PSQL mistery.
Yes, I'm not using that class in my code, I'm just using DataSource. I
was referring to the setup in server.xml.
Ahh - then OK.
I must say that JNDI bit is the most occult part of Tomcat.
Nix.
I believe its mod_jk for Apache 2
I think it is a successor of mod_jk, for all platforms. I've built it for Apache2 -
true, but it should be for all versions.
Nix.
I've mod_jk working with Tomcat4.1.3 and Apache2. I was just curious about
mod_jk2. What kind of changes, positive and negative it has? Thanks.
It uses the new and improved AJPv14 protocol for communication between Apache and
Tomcat.
Nix.
Nope, I didn't. It returns 0 results.
Take a look at startup scripts, then. You'll find that you can set JPDA_TRANSPORT and
JPDA_ADDRESS (this is in Tomcat 4.1.2 beta) and run the catalina.sh with option
jpda, instead of start.
Nix.
Hi All,
Is it necessary to usr JServ to connect as https from Apache to Tomcat???
No. JServ is a deprecated Apache Java project implementing Java Servlets. It has been
pulled out of use/support (practically, although Oracle uses it). You should use one
of Tomcat's connectors:
-
Galbayar wrote:
Hello I'm changed etc/profile file.
after reboot Linux linux could not start
how to solve this?
That should have nothing to do with Linux startup. ?etc/profile is a global
login script for Bourne-class shells. Linux should boot, but you might be
banned from logging in.
The
On 6/7/02 1:54 AM, Barney Hamish [EMAIL PROTECTED] wrote:
- the amount of money the user is to pay encrypted with the private key of
site X as a digest.
On site Y you recieve both. You decrypt the encrypted amount with site X's
public key. If the clear text amount matches the
So, what is suggested is that the shopping cart server creates the final
payment report and signs it with it's private key/certificate. The financial
transaction server would verify that *that* is an authentic request from the
shopping cart server.
Ok, it was signing. This still
HTTPS Alone won't help much in the described szenario.
HTTPS can't enshure that the user is not manipulating
the request. To disable that you have to sign the data.
I think it's better to use a complete different architecture.
If this has to be done with EJB as you suggest, a WebService
Works for me... I have about 10 virtual hosts sharing the same
connection.
That's a good thing to know, I'll modify my HOW-TO. Thanks.
Nix.
Oh and you'll probably want to define:
JAVA_HOME
CATALINA_HOME
(or TOMCAT_HOME as appropriate)
directly inside of tomcat.sh or catalina.sh
Has anyone had problems with this? I'm experiencing startup problems. The script is
all setup *that* way and running it manually when the
ant is a java based build tool (a kind of make).
http://jakarta.apache.org/ant/index.html
All varietes of UNIX have a make command, which reads instructions/setup from
Makefile and builds the requested target of that project. ant does the same, only
it is Java based and uses build.xml
You only need one WebAppConnection statement - The same connection is
shared by multiple vhosts/webapps. Try it like this:
WebAppConnection conn warp localhost:8008
VirtualHost 193.10.10.25
DocumentRoot /path/to/website1
ServerName www.website1.org
WebAppDeploy
I'm posting a zip this time.
Nix.
vh_howto.zip
Description: Zip compressed data
--
To unsubscribe, e-mail: mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]
so should I using mod_jk2.
Bear in mind that mod_jk2 might still be experimental.
Nix.
Nikola,
Thanks for the virtualHost file it has helped a great deal.
Glad to have helped.
One more question.
I've had this working on 3.x using ContextManager but is it still possible
on tomcat 4.x
eg.
http://www.blablah.com:8080/index.jspwhich serves up a jsp page
[EMAIL PROTECTED] wrote:
Hi -
I have not used Apache/Tomcat for awhile.
I am trying to configure Apache 2x and Tomcat 4x - Unix.
The most recent I have found is
integrating Apache 1.3.24 with Tomcat
4.0.3.
whats the difference between
mod_jk and mod_jk2
I believe mod_jk2 uses improved AJPv1.4 protocol for communication and is generally
the future of mod_jk and AJPv1.3
Nix.
OK guys. Enough people asked for it, so here it is. Keep in mind that it is my
personal expirience and understanding of the works. If anyone has a correction to the
docs, please say so.
Nix.
pre {
font-size: 12px;
}
th {
font-weight: bold;
background: #CC;
}
a {
font-family:
Your mail just contains a style sheet and a signiture.
The main document is missing.
---
I have just checked. I have sent an e-mail with two files attached:
vh_howto.html
vh_howto.css
The client is Outlook Express 5.5. I can re-send with Netscape 6.2 if you wish.
Nix.
you might find starting points here:
http://jakarta.apache.org/site/getinvolved.html
Well, that's fine, but it looks like it is too much for me. I've fiddled with the
problem for some time, found a solution and written a document. I don't want to open a
maintainer/developer account or
Hi all.
I have assembled a Apache-Tomcat integration howto, with virtual hosts. That is the
config I actually use. I'm not saying that the document is good enough for immediate
publishing on the Jakarta site, but it should be good enough for reviewing. Hopefully,
it will appear on Tomcat
I'm attempting to set up mod_webapp with Tomcat 4.0.3, but it segfaults.
At least, I'm getting notifications of childern segfaulting in the error
log, the webapp keeps restarting based on the initialization output, and
submitting a request to Apache that is handled through the webapp
Vincent Massol wrote:
I'm reposting in the secret hope that I got no response to this email I
sent last week because no one saw it in the flood of Tomcat emails ! If
I get no answer this time, I will understand that no one finds this of
interest and will try again in 6 months - 1 year :-)
Ekkehard Gentz wrote:
hi,
who can tell me, how to configure the connection
between apache 2.0 an Apache 4.0.3 using the
warp connector
the tomcat doc tells me something about the
warp connector, but I think thats not all
we want to build an environment with
Tomcat 4.0.3 with one
since I couldn't find very much info about mod_jk, and was having
problems, I decided to use mod_webapp to connect apache 1.3.23 and tomcat
4.0.3 (on a fresh install of redhat 7.0).
it worked great when I first installed it, then I rebooted the box. tomcat
starts fine, when I try
Interestingly enough, I don't have the 'AddModule mod_webapp.c' statement in
my httpd.conf.
I am using Apache 2, however - I don't know if that makes a difference.
Apache 2 doesn't have two different module directives. Apache 1.x had directives to
load the module into runtime
Does mod_webapp work well with Worker MPM??
I find no problem when I am using prefork MPM but return code to be 500 when I am
using
worker MPM.
My config is Apache2.0.35, mod_webapp built from jakarta-tomcat-connector-src,
jdk1.3.1, Solaris8.
OS: Tru64 UNIX 4.0D (Digital UNIX or
Hi all.
I just thought to share my experience with the list (instead of just whining). Finally
got it to work. This is the lucky combo:
Tru64 UNIX 4.0D/F
GCC 3.0
Apache 2.0.36 (this was the real fix)
mod_webapp from Tomcat 4.0.2
The only thing not working is WebAppInfo, but that is
Hi all.
Apache 2.0.35
Tomcat 4.1.1
mod_webapp 4.1.2
I've built mod_webapp from sources, the build was more/less OK. The module
loads. I have copied tomcat-warp.jar to server/lib dir of Tomcat 4.1.1
When I start Apache2 and it attempts to connect and deploy webapp, I get errors
in error logs:
Phupha Punyapotasakul/MIS/RY-CPP/Petro wrote:
I decide to use JSP develop web-base app for customer but I
don't want Customer to see source code.
Use Jasper: $CATALINA_HOME/bin/jspc.sh to compile all JSP pages to Java sources
for their equivalent Servlets. Use JDK's javac to compile them to
Hi.
I seam to be hitting the same wall *again*. (Sigh) I thought Jakarta-DBCP would work
better (at all) in my case. Here is my situation.
- Tomcat 4.1.1 configured OK and working. DBCP actually works with Oracle's JDBC
driver.
- placed PostgreSQL's JDBC driver, JEE variant, containing:
Remy Maucherat wrote:
JNDI resources bound to context java:/comp/env/jdbc
1. TestDB:
org.apache.commons.dbcp.PoolingDataSource:org.apache.commons.dbcp.PoolingDat
aSource@7ccee4
2. AddressBookDB: org.apache.naming.ResourceRef:ResourceRef[
className=javax.sql.DataSource,
- Original Message -
From: Adam Pfeiffer [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, May 15, 2002 8:11 PM
Subject: How to end a JSP
If you have a try/catch block in a jsp and you catch an error that is know to cause
the page not
to function, how can you
Hello,
Because I am curious about how these technologies are used in the real
world. I would like to know how do you professionals use as your rule of
thumb wether or not you are going build web based application using
Enterprise Javabeans or a standalone jsp applications.
Why
Hello List...
Using a servlet, I retrieve an image from a database, but I want to send it in
a formatted html page to the client... any suggestions on how to approach
this (combining html and streaming images) appreciated.
If you wish to send BOTH html and the image in the same
Performance isn't so important as future-proofing - I don't want to have
to re-write the db interface when struts drops it's connection pool
provision, for example.
I believe that mm.mysql does support pooling, although I take your point
that others may not. I can't see us moving
Struts provides a basic Connection Pool, but user comments suggest that
this is not suitable for large-scale, high-traffic applications, and
also that it will soon be removed from Struts in favour of a
container-managed connection pool
So what will Tomcat Users do? Will Tomcat get
I am trying to compile mod_jk.so on tru64 compaq unix
but I am getting this error
gcc -DOSF1 -DUSE_HSREGEX -DUSE_EXPAT
-I../lib/expat-lite -fpic -DSHARED_MODULE
-I/home5/staff/genepick/usr/apache/include -I../common
-I/usr/opt/java131/includ
e -I/usr/opt/java131/include/alpha -c
--- Lee Newman [EMAIL PROTECTED] wrote:
I'm having some problems starting Tomcat 4.0.3 on
Compaq
Tru64 Unix. I've looked for a FAQ that might
address the problem,
because it seems like this is probably a common
beginner's issue,
but I haven't been able to find any
Charlie Toohey wrote:
When configuring Apache's httpd.conf (or Vhosts.conf) with multiple
name-based virtual hosts, I can not find any documentation regarding the
WebAppConnection statement. Should I have a separate WebAppConnection within
each virtual host section, or should I just have one
Valera Molyakov wrote:
Hi!
You can use IDE that allow local and remote debug( for example Intel JIDEA
or JBuilder).
Just how exactly?
You start Tomcat in JPDA mode, connect to the server and how do you set a break
point? I remember some article on debugging servlets that sait to import
Hi all.
I have a strange bean problem in my JSP page.
The bean in question has several properties, most of them are R/W. Anyway, those
that I'm trying to set from the request parameters are R/W.
My problem is that one of the properties *refuses* to be set. That is eMail.
Others, like name,
Sayre Robert wrote:
You should check the capitalization of your bean properties:
is it eMail or EMail?
the jsp tag: jsp:setProperty name=dataBean property=eMail/
calling the set method: dataBean.setEMail( request.getParameter( eMail )
);
I would try jsp:setProperty name=dataBean
I have used: request.setCharacterEncoding(ISO-8859-1); and when I want to display
the following line (in Danish):
Sjclland og Rerne
Is it supposed to be ISO-8859-1, in the first place? Danish should be in the Latin-1
subset, AFAIK.
Also, why are you setting request and complaining on
Hi all.
I would like to get some advice on debugging Tomcat itself. I have downloaded
Tomcat-4.0.3-src and managed to make a JBuilder 6 project out of it.
I can start Tomcat and I can enter a debugging session. My main goal is to see
what is going on with those JNDI JDBC resources (JNDI
I have two cosiderations about your Tomcat-nodody advices:
1) There is no tomcat4.conf in conf directory.
2) Your advice is to do
- chown nobody:nobody /usr/local/tomcat1
- su -l -c /usr/local/tomcat1/bin/startup.sh
There is a big problem with this procedure, in my
Hi all.
I've made some progress - I'm closer to the wall I've been hitting my head on :-)
Oracle works, but PostgreSQL doesn't.
The error that I made in my previous attempts was in server.xml. I user capital
letters for Paramaeter, instead of parameter. Now that is OK, but I'm still
The problem is, that if you keep the same session id after you switch to
https it is possible that somebody steals your secure session.
Yes, of course. (Sometimes I miss the obvious.)
IMHO, HTTP session cannot do authentication. That is the job of SSL/TLS and client
certificates. There is
301 - 400 of 558 matches
Mail list logo
