Re: Container Managed Security?

2005-04-09 Thread Gurumoorthy
Use LDAP Based authentication ... I have this working very nicely only our servers Read JNDI Realm topic of tomcat Gurus - Original Message - From: Bjørn T Johansen [EMAIL PROTECTED] To: 'Tomcat Users List' tomcat-user@jakarta.apache.org Sent: Thursday, April 07, 2005 7:05 AM Subject:

Re: RES: JVM' sperm size always increase after hot deploy to tomcat 5.0.28

2005-04-09 Thread Michael Echerer
Paulo Alvim wrote: Thank you all It's good to know that we're not alone...but since we used to have workable 'hot deploy' others pre-J2EE App Servers our customers will insist with that - maybe we'll have to reconsider other App Server as our main Open-Source production environment

Realm instance within webapp

2005-04-09 Thread Graeme Pyle
Hello, Can I put my Realm subclass within my webapp instead of inside Tomcat's lib directories somehow? My custom Realm subclass uses other classes within my webapp, so I'm finding I have to include more and more of my webapp within the Tomcat lib directories - not very nice at all :-( Or am

Re: Realm instance within webapp

2005-04-09 Thread Mark Thomas
Graeme Pyle wrote: Hello, Can I put my Realm subclass within my webapp instead of inside Tomcat's lib directories somehow? No. Realms require access to Tomcat internals in order to work. My custom Realm subclass uses other classes within my webapp, so I'm finding I have to include more and more

Re: Max URL length for 5.0.28

2005-04-09 Thread Behrang Saeedzadeh
I guess it's the standard (of HTTP?) that imposes the 255 max length limit on the size of URLs and not Tomcat. -Behi On Apr 9, 2005 1:08 AM, Jimmy Ray [EMAIL PROTECTED] wrote: Tomcat 5.0.28, HPUX Trying to use a URL that is 266 chars long and it seems to be truncated. Is there a max

Re: Max URL length for 5.0.28

2005-04-09 Thread Behrang Saeedzadeh
Sorry, I was wrong :p http://lists.evolt.org/archive/Week-of-Mon-20010528/033585.html http://www.w3.org/Protocols/rfc2616/rfc2616-sec3.html#sec3.2 Regards, Behi. On Apr 9, 2005 4:12 PM, Behrang Saeedzadeh [EMAIL PROTECTED] wrote: I guess it's the standard (of HTTP?) that imposes the 255 max

Re: Max URL length for 5.0.28

2005-04-09 Thread Behrang Saeedzadeh
According to the spec, maybe your client or proxy is problematic. I was googling around and i guess I found a result that was saying that IE supports URL lengths of about 2000 chars long. So if your client is IE, maybe the problem roots in somewhere else (possibly Tomcat.) -Behi On Apr 9,

Major Install Problems

2005-04-09 Thread asdasd sdfsdfsd
Been trying to install on Ubuntu for ages, this is the latest error: dpkg -i tomcat4_4.1.31-2_all.deb (Reading database ... 82691 files and directories currently installed.) Preparing to replace tomcat4 4.1.31-2 (using tomcat4_4.1.31-2_all.deb) ... Stopping Tomcat 4.1 servlet engine: (not

Re: Container Managed Security?

2005-04-09 Thread Bjørn T Johansen
That doesn't help with my problem, does it? I need to create a session object when a user logs in, is this possible? BTJ Gurumoorthy wrote: Use LDAP Based authentication ... I have this working very nicely only our servers Read JNDI Realm topic of tomcat Gurus - Original Message -

Re: Container Managed Security?

2005-04-09 Thread Mark Thomas
javax.servlet.http.SessionListener For a summary, read the javadocs. For full details read the spec. Mark Bjørn T Johansen wrote: I have a small question... I am used to providing my own authentication system when developing web systems, but I am now looking into providing container based

Re: Container Managed Security?

2005-04-09 Thread Mark Thomas
Opps. Typo. That should be: javax.servlet.http.HttpSessionListener Mark Thomas wrote: javax.servlet.http.SessionListener For a summary, read the javadocs. For full details read the spec. Mark Bjørn T Johansen wrote: I have a small question... I am used to providing my own authentication system

Application-level control of web-resources

2005-04-09 Thread Morten Sabroe Mortensen
What are the possibilites for application-level control of resources like JSP-resources? This would open up for e.g. creating a wiki-like application, where each wiki-page is a valid JSP-page, which is created dynamically and stored elsewhere than within the deployed WAR-file. If anyone fancy

images/static content in jar

2005-04-09 Thread Don Hill
I have a war that has folder like /images and /content, is there a way to config tomcat so that I can package these in jar, I know I can write a custom servlet todo this but I would like this to be handled by the servers servlet container. The reason this is my concern is that I think that

Re: images/static content in jar

2005-04-09 Thread Nikola Milutinovic
Don Hill wrote: I have a war that has folder like /images and /content, is there a way to config tomcat so that I can package these in jar, I know I can write a custom servlet todo this but I would like this to be handled by the servers servlet container. The reason this is my concern is that

RES: RES: JVM' sperm size always increase after hot deploy to tomcat 5.0.28

2005-04-09 Thread Paulo Alvim
Thanks Michael... But we had already tried to put both the PropertyUtils.clearDescriptors(); and the Introspector.flushCaches(); in the ServletContextListener - contextDestroyed and it didn't help so much (...) I'll try also with the logging LogManager.shutdown();. But try Tomcat 5.5x - do you

Changing from BASIC authentication to FORM-based

2005-04-09 Thread gmr3
I have Tomcat 5.5.4 running on WindowsXP with BASIC authentication working via the Memory Realm and it works fine. I want to change to FORM-based authentication. I've 'BASIC' to 'FORM' in web.xml and have a logon.html page with a form action=j_security_check (but it gives a HTTP 408 timeout

Re: Container Managed Security?

2005-04-09 Thread Bjørn T Johansen
That seems to be what I am looking for I will look into this... Thx... :) BTJ Mark Thomas wrote: Opps. Typo. That should be: javax.servlet.http.HttpSessionListener Mark Thomas wrote: javax.servlet.http.SessionListener For a summary, read the javadocs. For full details read the

Re: Tomcat user 'roles' question

2005-04-09 Thread Wendy Smoak
From: Bill Barker [EMAIL PROTECTED] Custom Realms really aren't all that hard. You typically create a class that extends RealmBase (http://jakarta.apache.org/tomcat/tomcat-5.5-doc/catalina/docs/api/org/apache/catalina/realm/RealmBase.html, changing the '5.5' to the TC version you care about,

Re: Tomcat user 'roles' question

2005-04-09 Thread Bill Barker
Wendy Smoak [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] From: Bill Barker [EMAIL PROTECTED] Custom Realms really aren't all that hard. You typically create a class that extends RealmBase

Re: still not clear with connection pooling in tomcat

2005-04-09 Thread Krishnakant Mane
thanks a lot doug, if I have any problem I will trouble again. just a couple of questions. there were two parameters in the email you sent the other day. I did not get the meaning of those parameters stating that active connections should be 100 and the other with 30 as the value. what is the

RE: Major Install Problems

2005-04-09 Thread Caldarale, Charles R
From: asdasd sdfsdfsd [mailto:[EMAIL PROTECTED] Subject: Major Install Problems Been trying to install on Ubuntu for ages, this is the latest error: What happens if you try the tar or zip file from the real Tomcat download area

Re: Application-level control of web-resources

2005-04-09 Thread QM
On Sat, Apr 09, 2005 at 06:35:51PM +0200, Morten Sabroe Mortensen wrote: : This would open up for e.g. creating a wiki-like application, where each : wiki-page is a valid JSP-page, which is created dynamically and stored : elsewhere than within the deployed WAR-file. Why use real pages? Those

Re: Application-level control of web-resources

2005-04-09 Thread Robert Koberg
QM wrote: On Sat, Apr 09, 2005 at 06:35:51PM +0200, Morten Sabroe Mortensen wrote: : This would open up for e.g. creating a wiki-like application, where each : wiki-page is a valid JSP-page, which is created dynamically and stored : elsewhere than within the deployed WAR-file. Why use real pages?

RE: Application-level control of web-resources

2005-04-09 Thread Morten Sabroe Mortensen
Hi QM, -Because real pages has more power over them than, say, a more simple wiki-page parsed to an XML-format and XSLT'et to HTML/XHTML/WML/XHTML-MP -whatever. I want to be free to stash the content in a database, the file-system or some other WAR-external resource. I want to be free to have

Re: Changing from BASIC authentication to FORM-based

2005-04-09 Thread Brent Sims
Did you restart Tomcat after making the web.xml change? It's been my experience that authentication method changes like this actually get handled from deeper within Tomcat's internal code, not just the application, and the only way to register the change is by a full restart. Brent Sims Systems

RE: Application-level control of web-resources

2005-04-09 Thread Morten Sabroe Mortensen
...To be more specific, I consider creating my own custom-modification of Tomcat including functionality for application-level control of resources - see the below sketch. I kind of think upon a modified 'JspServlet' hidden behind a nice interface so as to avoid fiddling directly with