Re: [HELP!] Which key alias names to use for SSL?

2003-10-12 Thread Bill Barker
Sonny Sukumar [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] From: Bill Barker [EMAIL PROTECTED] --I reconfigured the SSL port from 8443 to 443 on our server (as well as the redirect port), and all of a sudden I can connect using SSL. I don't understand why 8443 didn't

Re: Tomcat JDBCRealm And security-constraint in the web.xml

2003-10-12 Thread Bill Barker
Caroline Jen [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Tim: Before I posted my questions regarding the problem that I encountered, I have gone through http://jakarta.apache.org/tomcat/tomcat-4.1-doc/realm-howto.html#Configuring%20a%20Realm As long as I have the

Re: Apache Tomcat mod_jk 1.2.5 WSC configuration for Tomcat 5

2003-10-12 Thread Bill Barker
Thorsten Westmeier [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi, if I interpret the Version-Number correctly, then it is a follower of the old JK Connector and not of the new JK2. Yes. Can I use my old uriworkermap.properties and workers.properties? Yes. No changes have

Re: [HELP!] Which key alias names to use for SSL?

2003-10-11 Thread Bill Barker
Sonny Sukumar [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] 2nd Update: --I reconfigured the SSL port from 8443 to 443 on our server (as well as the redirect port), and all of a sudden I can connect using SSL. I don't understand why 8443 didn't work. Any ideas?? There is a

[OT] Re: Question about the Petstore's SignOnFilter class

2003-10-11 Thread Bill Barker
It is also off-topic, since Petstore is maintained by Sun, not Jakarta. Steve Raeburn [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] IMHO sign in and sign on are equivalent. To register is, well, register :-) The only suggestion I would make is that you use Sign in/Sign out or Sign

Re: ssl client authentication again

2003-10-10 Thread Bill Barker
The Tomcat 5 docs have an example for this: http://jakarta.apache.org/tomcat/tomcat-5.0-doc/ssl-howto.html Since it's just about setting up the KeyStore, this section applies to Tomcat 4 (or even Tomcat 3 :) as well. Twan Munster [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hello,

Re: redirect port 8080 to 443

2003-10-10 Thread Bill Barker
It's in the FAQ: http://jakarta.apache.org/tomcat/faq/security.html#https Twan Munster [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hello, I'm using apache+mod_ssl+mod_jk to make a secure connection. But every time I call a page in cocoon it is called through port 8080. Is it

Re: mod_jk lbfactor strangeness

2003-10-10 Thread Bill Barker
on the base of packets. 2. mod_jk works with sticky sessions so only new sessions are balanced. I belief but am not shure that it's just round robin. 3. Bill Barker claims that the load balancing is broken as the instances of mod_jk don't know the load of each other. So

Re: CLIENT-CERT and custom username?

2003-10-09 Thread Bill Barker
Bud P. Bruegger [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] hello everyone, looked for this all over but couldn't find an answer... So I would like to ask a question about the auth-method CLIENT-CERT. It seems that the username resulting from an authentication is the CN

Re: Tomcat 4 + ssl + client authentication

2003-10-09 Thread Bill Barker
Kenneth Westelinck [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi all, I've been searching the internet for 2 days now and still haven't found a solution for my problem. I am trying to set up a Tomcat 4 server running in HTTPS mode, contacted by a client written in Java. The

Re: Problem with getContentLenght() of AccesLogInterceptor

2003-10-06 Thread Bill Barker
Ricard de la Vega [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi, I have a problem with the format parameter of AccesLogInterceptor. I need the response.getContentLenght in my Log. I have the param value to combined such as Apache but, in the log I see a ? or others characters

Re: How To: JkSet, JkSet2 JkUriSet

2003-10-03 Thread Bill Barker
Doing the easy part only (mind you, I haven't tested this) JkSet server.root /usr/local/apache Jack Lauman [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Are there ary docs for JkSet, JkSet2 JkUriSet? Also is ther a way to override {$server.root} so the mod_jk2 can find it's

Re: Newbie Question: Tomcat 3.2.3 + JDK1.3.1_09 + Win2K

2003-10-03 Thread Bill Barker
I haven't used 3.2.x in a very very long time. My first guess would be to check the batch files. From the error you are getting, it may just not be quoting the initial Java command. Of course, it is useless to submit a bug-report, since the 3.2.x line is no longer maintained. Graham Reeds

Re: I need help explaining why lock box doesn't show up - PLEASE

2003-10-03 Thread Bill Barker
I'm going to assume that like any good webmaster these days, you have access to MSIE. Go to tools-Internet Options-Security-Custom Level. Under 'Miscellaneous' select the 'Disable' option for 'Display mixed content'. Click on enough Ok buttons to get to the main IE screen. Attempt to access

Re: SSL Client authentication: what goes in tomcat-users.xml?

2003-10-03 Thread Bill Barker
Christopher Williams [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Following the advice from this link http://books.mcgraw-hill.com/betabooks/aug02/taylor/0072225653_ch10.html I tried to get SSL client authentication to work by setting the following entry in tomcat-users.xml:

Re: Newbie Question: Tomcat 3.2.3 + JDK1.3.1_09 + Win2K

2003-10-03 Thread Bill Barker
Graham Reeds [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Bill Barker [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] I haven't used 3.2.x in a very very long time. My first guess would be to check the batch files. From the error you are getting, it may just

Re: Tomcat 3.3, SSL and short handshake

2003-10-01 Thread Bill Barker
Yuriy Stul [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hello, I have Tomcat 3.3 with activated SSL. Everything works fine (HTTP, HTTPS). A problem is: when user connects with server via Microsoft Internet Explorer then Tomcat throws exception (SSL socket, socket was closed)

Re: SSL Client authentication woes

2003-10-01 Thread Bill Barker
Christopher Williams [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] My setup: Windows XP Pro JDK 1.4.1 JWSDP 1.0 I'm hoping to get SSL client authentication working for web services. I set up Tomcat for SSL ages ago and it works fine. However, I run into multiple problems

Re: Can't import apache ssl key to tomcat keystore

2003-09-30 Thread Bill Barker
The Bicore utility has always worked for me. Getting on-topic, I'm assuming that since you have an Apache cert, that you have openssl installed. The alternative method is to use openssl to generate a pkcs12 file, and use that as your keystore. Something like: openssl pkcs12 -export -chain

Re: Filter for Form Authentication Problem

2003-09-30 Thread Bill Barker
Joerg Heinicke [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Tim Funk wrote: You can't intercept j_security_check with a filter, it violates the spec. -Tim This is at least one answer to my thread started last week: http://www.mail-archive.com/[EMAIL

Re: jk_ajp12_worker.lo: unknown file type

2003-09-30 Thread Bill Barker
At a quick guess, you've got Sun's 'ld' ahead of the GNU 'ld' in your path. [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi Folks, I have the following configuration: Solaris 8 Apache 2.0.45 Tomcat 4.1.27 Jakarta-tomcat-connectors-jk 1.2.4 I am following similar procedure as

Re: Tomcat Request Handling Question

2003-09-30 Thread Bill Barker
The Servlet spec (2.2-2.4) requires that each Request is handled by a single Thread. Especially with the Jk2-Coyote connector (that links Tomcat to Apache/IIS/SunOne), the thread may be re-used for requests from different clients. However, it will always serve one Request from start-to-finish

Re: NullPointerException during HttpServletRequest.getSession

2003-09-30 Thread Bill Barker
The short answer is that you can't do this. It's true that Tomcat 3.2.x allowed you to get away with nasty hacks like this, but in subsequent Tomcat versions the Request object is only valid for the lifetime of the request. Dave Barkan [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED]

Re: Migration from 4.1.x to Tomcat 5

2003-09-29 Thread Bill Barker
Marco Tedone [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi, which are the key anspects I shall keep in mind when migrating from Tomcat 4.1.xx to version 5, keeping in mind that I'm developing Struts application? Which are the key technology anspects I shall review in my

Re: URL: Hiding index.jsp

2003-09-28 Thread Bill Barker
Tim Funk [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Tomcat4 cannot do this by itself. With the help of apache and directory indexing - this can be done with a little tweaking. Tomcat5 can hide the name of the welcome-file. As can Tomcat 3.3.2-dev. -Tim [EMAIL PROTECTED]

Re: Question Regarding AJP Connectors

2003-09-26 Thread Bill Barker
Rhugga [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] If I am only using Tomcat as a JSP/Servlet engine using mod_jk2, and I am using a Unix socket for communication, I do not need these connectors correct? !-- Define a SSL Coyote HTTP/1.1 Connector on port 8443 -- !--

Re: Pleas help (Custom Authenticator Reaml Problem)

2003-09-26 Thread Bill Barker
I agree with Tim that custom Authenticators can be 'icky'. Fortunately, in Tomcat 5 there is almost no need for one. However, in Tomcat 4, there is still a valid use case for them. You can avoid messing with Authenticators.properties by explicitly configuring your Authenticator like: Context

Re: mapping a servlet to multiple urls

2003-09-25 Thread Bill Barker
There was a bug in the Mapper in early versions of Tomcat 5.x. Try upgrading to 5.0.12 and see if the bug goes away. Marion McKelvie [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] I think I may be misunderstanding how to map multiple urls to a servlet. I have a very simple servlet

Re: Tomcat5, SSL, IBM JDK 1.4 and Linux

2003-09-25 Thread Bill Barker
It seems that IBM's JSSE implementation has some limitations using the TLS protocol. However, Tomcat seems to work fine if you change the sslProtocol=SSL. Halstead, Chris [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] OK, I'm tearing my hair out here ;-) What's the secret to making

Re: curiosity kills tomcat

2003-09-25 Thread Bill Barker
Actually, there is no need to contact the expert-group, since the order doesn't matter in Servlet-2.4: spec-quote version=Servlet-2.4 section=13.2 The sub elements under web-app can be in an arbitrary order in this version of the specification. /spec-quote Shapira, Yoav [EMAIL PROTECTED] wrote in

Re: Choosing an appropriate JK2 Handler

2003-09-25 Thread Bill Barker
JNI is reported to be very good (I haven't tried it myself). However, I'd avoid it if you are using the pre-fork MPM (which includes all Apache 1.3.x versions on *nix system). If you are using a *nix box, then the unix-socket may help a bit, but I'd guess that the improvement over the

Re: SSL Connector attributes

2003-09-24 Thread Bill Barker
That's largely because they depend on your JSSE provider. I believe that most providers will also support 'SSL3' and 'SSL2' as protocol attributes (but I don't recommend either of them, so I won't actually try it :). I know that if you are using IBM's 1.4.x JVM, that you need to set the protocol

Re: Tomcat + Apache + SSL

2003-09-23 Thread Bill Barker
Where is Tim when you need him ;-). http://jakarta.apache.org/tomcat/faq/security.html#https Robert D. Abernethy IV [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] I have apache set up to redirect requests for a specific context to Tomcat. I am curious if there is a way to force all

Re: SSL client authentication

2003-09-22 Thread Bill Barker
Personally, I think that the easiest way to move an Apache cert to a Tomcat cert is to export it to a pkcs12 file and use that as the keystore (of course, setting keystoreType=pkcs12 on the Factory element). Using OpenSSL, something like: $ openssl pkcs12 -export -chain -inkey server.key -in

Re: tomcat - thread per connection model

2003-09-22 Thread Bill Barker
Rau NF [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi - Not sure about one thing - what if someone opens up a 100 odd connections and sends data over the pipe slowly ? This will definitely keep that particular server (Tomcat 4.1.24) busy for a long time and no new user can get

Re: Permission denied to webapps folder

2003-09-20 Thread Bill Barker
On *nix systems, you need to have 'r-x' permission to cd to a directory. Denise Mangano [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] This is probably something simple, but I can't seem to understand this. As suggested by a Tomcat book that I have, I gave the webapps folder rwx to the

Re: Logging Error in org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler processConnection

2003-09-19 Thread Bill Barker
See http://nagoya.apache.org/bugzilla/show_bug.cgi?id=22701. It should be fixed in the CVS code now, but I haven't finished running tests to close the bug. Martin Grüneberg [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hallo together, i have mystery errormessage. The scenario is: I

Re: Tomcat version 3 certificates?

2003-09-19 Thread Bill Barker
I've never Adrian Beech [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] G'day all, Earlier today we were advised by a bod from another section in our organisation that there is a known compatibility issue with Tomcat and version 3 certificates. Apparently he had been advised of

Re: Tomcat version 3 certificates?

2003-09-19 Thread Bill Barker
Sorry about the last post, hit the wrong key. I've never had problems using V3 certs with Tomcat (at least using a 1.4 JVM). (Ok, I'm lying: there was a bug using PureTLS with certain V3 certs at one point). In any case, Tomcat delegates cert handling to JSSE, so any problems would be with all

Re: tomcat - thread per connection model

2003-09-19 Thread Bill Barker
Rau NF [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi - Since tomcat implements a thread per connection model (as per the spec), would it be open to a DoS attack if it does not have an Apache server in front of it ? ie keep all threads busy servicing slow requests and valid

Re: Please help - Unable to create mod_jk.so connector4.1.27 , Apache 2.0.47

2003-09-19 Thread Bill Barker
There is an extra ';' on one line, that some compilers don't like. It's at or near the line number given, so just edit the file and delete it. Satya Narayan Dash [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi All, I am unable to create mod_jk.so with

Re: peer not authenticated

2003-09-19 Thread Bill Barker
that there was nothing wrong, however the warning message always appears. Won't this leave the webpage slower with lots of person accessing it? Is there any way to avoid this message appearing? I can´t leave this messages appears. []'s Kleber - Original Message - From: Bill Barker

Re: peer not authenticated

2003-09-18 Thread Bill Barker
Message - From: Bill Barker [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, September 18, 2003 12:03 AM Subject: Re: peer not authenticated That message is supposed to be only logged at 'debug' level. Could you post more of the stack trace, so I can see how to plug

Re: Coyote Performance

2003-09-18 Thread Bill Barker
I realize that this is the default, but you probably want to decrease the value of connectionTimeout (to somewhere between 5000 and 15000). As it is, Tomcat will spend a lot of time in Socket.read for the simple reason that it will wait for up to a minute to see if the client is going to send

Re: Port 443 request not forwarded to Tomcat from Apache

2003-09-18 Thread Bill Barker
The most common reason is that you have your JkMount statements nested in the VirtualHost for port 80. If so, then you need to copy them to the VirtualHost for port 443 as well. Of course, without knowing your configuration, all I can do is guess ;-). Ramanan Ramadoss [EMAIL PROTECTED] wrote in

Re: URGENT!!!mod_jk2 and apache 1.3.27

2003-09-17 Thread Bill Barker
Don't use it myself, but it is supposed to work fine. Of course, you probably don't want to enable the JNI Channel with this config. [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi All I would like to know if the mod_jk2 works for apache1.3.27 and tomcat 4.1.27. I know it sure

Re: peer not authenticated

2003-09-17 Thread Bill Barker
That message is supposed to be only logged at 'debug' level. Could you post more of the stack trace, so I can see how to plug this message under normal use? The error itself is harmless (it's just telling you that the user didn't send a client cert, which is normal). Kleber [EMAIL PROTECTED]

Re: SSL Cipher Suite Config in Tomcat JSSE

2003-09-16 Thread Bill Barker
Tomcat 5 supports configuring the cipher suite (by specifying ciphers= on the Connector). I don't believe that this has been ported to Tomcat 4. McClure, Timothy J(IndSys, GE Interlogix) [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] I am trying to configure Tomcat to only support

Re: Apache + Tomcat, a default servlet, and static content

2003-09-16 Thread Bill Barker
: Apologies if this is a dupe. I just realized I sent the first one from an account that is not subscribed ** Once more with feeling? Bill Barker, John Turner and others might recognize this question. Yes, it's me AGAIN

Re: multiple http10connector in server.xml - Side effects

2003-09-15 Thread Bill Barker
Anecss [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi there, In tomcat's (Using tomcat 3.3.1) server.xml, I added another module Http10Connector like this below Http10Connector port=8080 secure=false maxThreads=100 maxSpareThreads=50

Re: Status of SSL Bug 22701 Big problem

2003-09-15 Thread Bill Barker
I believe that it is fixed in the CVS code, but I haven't had enough time to run enough test to actually close the bug. If you can build from CVS (for Tomcat 4.1.x, use the coyote_10 branch), and want to play tester, I'd be much obliged :-). McClure, Timothy J(IndSys, GE Interlogix) [EMAIL

Re: problem in session closing for explorer

2003-09-12 Thread Bill Barker
My first guess is that you are using MSIE, and have enabled Active Desktop. In this case, there is always a MSIE running, so MS (helpfully ;-) always preserves your cookies as long as you are logged on to your workstation. Fabio Bazzani [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED]

Re: Obtaining client connection

2003-09-12 Thread Bill Barker
It sounds like all you want is request.getRemoteAddr()/request.getRemoteHost(). These give you the IP/DNS-name of the client's box. All of this is taken from the Socket (since there really isn't any other way to get at it). If you need to get the IP on your machine that they connected to, then

Re: 4.1.27-hotfix-22096.tar.gz source code ?

2003-09-12 Thread Bill Barker
The patch appears to be: http://cvs.apache.org/viewcvs/jakarta-tomcat-4.0/catalina/src/share/org/apache/catalina/core/StandardContext.java.diff?r1=1.119r2=1.120 webmaster [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi all, Where can I find the source code for the

Re: JK2 Question...

2003-09-11 Thread Bill Barker
I vaguely remember that there was/is a bug in Jk2 with using ports 32K (a signed vs. unsigned thing). Can you try with a port 32K? Richard Norman [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] I have read the information and configured my server as specified at the following

Re: jsp - string ?

2003-09-11 Thread Bill Barker
Can be done. This example should get you started. public class MyEmailResponse extends HttpServletResponseWrapper { Writer out; public MyEmailResponse(HttpServletResponse res) { super(res); out = new StringWriter(); } public Writer getWriter() {

Re: Authentication in tomcat 4.1.27

2003-09-11 Thread Bill Barker
Have you ever got a fun project for you ;-). The first thing you must do is to make certain that your Realm implements org.apache.catalina.Realm (when I did this, it was a big enough change that I put the 4.x classes in a new package so that I could still see the 3.x versions). Personally, I

Re: ClassPath with Tomcat 4.1

2003-09-11 Thread Bill Barker
4.1.x uses the (deprecated) JavaService to install a Windows service. You can continue to use (the even more deprecated, but at least it works :) jk_nt_service from 3.x, or consider using the 5.x commons-daemon 'procrun' (my personal recommendation). David LAFAY [EMAIL PROTECTED] wrote in

Re: jsp - string ?

2003-09-11 Thread Bill Barker
Pike [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi Can be done. This example should get you started. that is a really nice solution ! one question public class MyEmailResponse extends HttpServletResponseWrapper { Writer out; public

Re: Tomcat SSL issues and looking for an expert

2003-09-11 Thread Bill Barker
Without more details, I'm guess the problem with the SSL standalone configuration is the same as http://nagoya.apache.org/bugzilla/show_bug.cgi?id=21763. Fronting Tomcat with Apache avoids the bug above, but as anyone who has been on this list at least a day knows, it comes with its own worm-can

Re: Tomcat classloader behaviour and Xerces

2003-09-11 Thread Bill Barker
AFAIK, there shouldn't be a Xerces in common/lib. That having been said, Xerces is handled specially in Tomcat 4.x. If there is a copy in common/lib or shared/lib, then it will use that one in preference to WEB-INF/lib. Of course, it always checks the System ClassLoader first, so it will

Re: Simplified Install of Apache w/ Tomcat

2003-09-11 Thread Bill Barker
Nikolaos Giannopoulos [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] We have a product that utilizes servlets that we will be making available for download. The problem is that we can't expect that our target customers will have Apache + Tomcat or Tomcat (standalone) installed.

Re: jsp 1.2 and escaping quote marks

2003-09-10 Thread Bill Barker
Does this work: img src=foo.jpg alt=My quot;quotedquot; text. / Rich Unger [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] ?xml version=1.0 encoding=utf-8? jsp:root xmlns:jsp=http://java.sun.com/JSP/Page; version=1.2 html img src=foo.jpg alt='My quoted text.'/ img

Re: SSL Apache/Tomcat encrypting a subdirectory

2003-09-10 Thread Bill Barker
Easiest is probably to use a: security-constraint web-resource-collection web-resource-nameSSL area/web-resource-name url-pattern/online/*/url-pattern /web-resource-collection user-data-constraint transport-guaranteeINTEGRAL/transport-guarantee

Re: NullPointer on getParameter

2003-09-10 Thread Bill Barker
I just got a ton of these while doing a stress-test to try and get another bug to crawl out from under it's rock ;-). I believe that there is a bug here somewhere, but I'm currently chasing bug #1. If your server logs are more interesting than mine (which don't say much more than NPE at ...),

Re: HeadlessException: The chickens come home to roost!

2003-09-08 Thread Bill Barker
Running headless means using awt-light. In particular, one of the things you are forbidden from doing is creating heavy-weight components like Frames. If you want to run headless, you will need to re-structure your servlet to only use light-wieght components (that, in particular, don't care that

Re: Where does tomcat-jk2.jar come from?

2003-09-08 Thread Bill Barker
This is from jakarta-tomcat-connectors. The tarball is sitting next to the main 4.1.27 tarball at the download page. From there, you look under the 'jk' directory. Jon Skeet [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] I'm still on the trail of bug 17193, and I'd quite like to see

Re: Servlet front page without redirect - Tomcat 4.1 with mod_rewrite and mod_jk2

2003-09-08 Thread Bill Barker
Mike Curwen [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Just to expound on this point: -Original Message- From: news [mailto:[EMAIL PROTECTED] On Behalf Of Bill Barker Sent: Saturday, September 06, 2003 10:43 PM To: [EMAIL PROTECTED] Subject: Re: Servlet front

Re: SSL/Verisign Confusion

2003-09-08 Thread Bill Barker
] Behalf Of Bill Barker Sent: Thursday, September 04, 2003 11:06 PM To: [EMAIL PROTECTED] Subject: Re: SSL/Verisign Confusion Firstly, it looks like you should wipe you keystore and start again. To use a VS cert with Tomcat, the two options I know are: 1) Follow the instructions

Re: Tomcat IBM JVM 1.4 and SSL truststores

2003-09-08 Thread Bill Barker
It's possible to configure PureTLS (which Tomcat supports) to support un-trusted certs. Jerry Birchler [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] I tried both the IBM and Sun packages. Unfortunately, neither handled expired or untrusted certificates. In my case, I did not care

Re: Tomcat IBM JVM 1.4 and SSL truststores

2003-09-08 Thread Bill Barker
I've just checked in a patch to have the TrustStore algorithm to be the same as the 'algorithm' (Tomcat 5 has a more general fix). It should appear in 4.1.28. If you need it sooner, you can download from the CVS. McClure, Timothy J(IndSys, GE Interlogix) [EMAIL PROTECTED] wrote in message

Re: where is JkWorkerFile

2003-09-08 Thread Bill Barker
Firstly, mod_jk2 doesn't have a JkWorkerFile directive. Secondly, for mod_jk this directive needs to be at top-level (i.e. it can't appear in a VHost). Eugene Lee [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Trying to get mod_jk2 working, and Apache 2 complains in its error logs:

Re: Connetion between Tomcat MySQL

2003-09-08 Thread Bill Barker
Assuming that you aren't using JDBCRealm, then it should be enough to put the jar file in $TOMCAT_HOME/lib/apps. If you are using JDBCRealm, then place it in $TOMCAT_HOME/lib/common. Setting the CLASSPATH is evil ;-). Amy Cheung [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi, I

Re: Bit confused: Admin Tool vs Manager Application

2003-09-07 Thread Bill Barker
Tomcat 4.0.4 only has the 'manager' (which is similar to the 4.1.x 'manager' (but with fewer features), and the 3.3.x 'admin'). [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] THX, but where does 404 fit in. It's neither 3.3+ or 4.1+ TIA Bill Barker wrote: The 'admin' Context

Re: Servlet/JSP Lifecycle and Performance

2003-09-07 Thread Bill Barker
Lukas Bradley [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] AFAIK, no such benchmarks have been made. Once tomcat loads a servlet, it is loaded. Tomcat currently does not unload servlets due to lack of use. Is this the case with Tomcat 5? Currently, yes. Lukas

Re: Running JSP....new to Tomcat 5.0

2003-09-07 Thread Bill Barker
Urm, there is almost nothing in common between setting up Tomcat 3.x and setting up Tomcat 5.x (except that the name of the 'server.xml' file has stayed the same ;-). Almost all of the directories have changed (with the exceptions of 'conf' and 'webapps'), the syntax of 'server.xml' is completely

Re: JSP Document

2003-09-06 Thread Bill Barker
My reading of the JSP spec says that Tomcat is correct here. If you need to preserve the escape, then follow Sjoerd's suggestion. Sam Hough [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Tomcat 4.1.27 on Win32 given ?xml version=1.0? jsp:root xmlns=http://java.sun.com/JSP/Page

Re: class files being cached?

2003-09-06 Thread Bill Barker
Finally a CL question I know ;-). Replies below. Mike Millson [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] I have a tomcat 3.3.1 application that I suspect might be caching old class files. The application consists of about 50 servlet classes (I'm using straight servlets, not

Re: shutdown error

2003-09-06 Thread Bill Barker
You are attempting the shutdown too soon (before Tomcat has finished coming up). Wait 30sec or so and try again. [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi, I have a problem when I try to shutdown tomcat. I have tried with version 4.1.24 and 4.1.27, but the problem happens

Re: Servlet front page without redirect - Tomcat 4.1 with mod_rewrite and mod_jk2

2003-09-06 Thread Bill Barker
This can be done for: 1) TC 3.3.2-dev with a non-default setting. 2) TC 5.0.9+ with default settings. You can't currently do this on any 4.x version. A. Zazula [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Okay, I'm trying to solve my problem by using mod_rewrite with mod_jk2 now.

Re: Debugging mode?

2003-09-06 Thread Bill Barker
Tim's comments are very good, and should be followed. However, this error is usually because you've b*rked up your web.xml file, and the context isn't loading at all. Your log files should be a help in determining which element is out-of-order. Thomas Hehl [EMAIL PROTECTED] wrote in message

Re: Bit confused: Admin Tool vs Manager Application

2003-09-06 Thread Bill Barker
The 'admin' Context in 3.3.x is similar tothe 'manager' Context in 4.1.x. There are big difference when you get down to the specifics (e.g. 3.3 doesn't include Ant tasks), but in Big Picture terms, they do much the same thing from the HTML interface. [EMAIL PROTECTED] wrote in message news:[EMAIL

Re: SSL/Verisign Confusion

2003-09-05 Thread Bill Barker
to generate the PK, then you'll have to extract it first. (I'll take a look at the link you sent...at first glance, it looks a little hard to follow, but hopefully not). Thanks again. Dave -Original Message- From: news [mailto:[EMAIL PROTECTED] Behalf Of Bill Barker Sent: Thursday

Re: Using jdk1.4 logger problem

2003-09-04 Thread Bill Barker
Chan, Kam Yuen [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hello, I am trying to load our App in Tomcat. One of the initialization is being done by a Servlet, which is set to autoload. During this initialization, we also initializes the logger, which are subclasses of the JDK1.4

Re: Tomcat as an in-process Servlet container?

2003-09-04 Thread Bill Barker
I don't really understand the question. If you are using channelJni, then there is no address or port: The data is passed in-memory. Carlos Cajina - Hotmail [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi everyone. I've followed the steps in

Re: SSL/Verisign Confusion

2003-09-04 Thread Bill Barker
Firstly, it looks like you should wipe you keystore and start again. To use a VS cert with Tomcat, the two options I know are: 1) Follow the instructions at http://www.comu.de/docs/tomcat_ssl.htm. 2) Using openssl or otherwise, convert your cert+key to a pkcs12 file, and use that as your keystore

Re: Sharing of JSP pages across multiple web apps

2003-09-04 Thread Bill Barker
It depends what you want to accomplish basically. Personally, I prefer symlinking the pages (of course, after enabling the symlink option :). This results in seperate class files for each context that uses the page, but is easy to maintain. Alternatively, you can pre-compile the JSP to

Re: Running Tomcat 4.1.27 without Jasper (or a JDK)?

2003-09-03 Thread Bill Barker
Yeah, well, it won't work with 3.3.0 (it will exhibit the intestinal behavior that you describe :). After the 3.3.0 release the Velocity people lobbied for a non-JSP Servlet-container, so with 3.3.1, we (with non-default options) gave it to them. Jon Skeet [EMAIL PROTECTED] wrote in message

Re: Can not get SSL Client Certificate

2003-09-03 Thread Bill Barker
Try: X509Certificate [] certs = (X509Certificate [])request.getAttribute(javax.servlet.request.X509Certificate); Elif Akten [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi, I have been trying to get SSL client certificate during a client authenticated SSL session. I

Re: Shutting down the server

2003-09-03 Thread Bill Barker
For integration, you should call o.a.c.startup.BootstrapService instead of Bootstrap. Bootstrap blocks its calling thread, so the only way to unblock it is to generate the IP traffic. For BootstrapService, the order of the calls is: 1) init(org.apache.commons.daemon.DaemonContext) 2) start() 3)

Re: Servlet mappings?

2003-09-03 Thread Bill Barker
[EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Seems strange that there wouldn't be the option to do this. Is there any way to write your own default servlet? To do your own default servlet, you need a mapping like the one for default in conf/web.xml: servlet-mapping

Re: j_security_check gets a 404 error

2003-09-03 Thread Bill Barker
You need to add j_security_check to the URIs that get passed to Tomcat. I don't use Jk2 myself, but if your version is recent enough, I believe that you can even use: /*/j_security_check ajp13 If I'm wrong (and that doesn't work), simply put the full path to j_security_check. Louise Pryor

Re: tomcat apache SSL

2003-09-02 Thread Bill Barker
My first guess is that you are running a version 4.1.27. If so, you should see all sorts of errors in your Tomcat logs telling you what didn't work. If you want to know why earlier version don't work, search the archives or bugzilla. Elif Akten [EMAIL PROTECTED] wrote in message news:[EMAIL

Re: Running Tomcat 4.1.27 without Jasper (or a JDK)?

2003-09-02 Thread Bill Barker
Actually, removing Jasper from 3.3.1(a) is about the same as for 4.1.x: You just comment out the JspInterceptor element in server.xml, and voila: you've got a JSP-less Servlet-Container. Ok, to be helpful, for 4.1.x, you need to comment out all references to JspServlet in

Re: Ant task for reloading webapps

2003-09-01 Thread Bill Barker
To get Tomcat to redeploy your war file, you need to set the redeploy=true attribute on the AutoDeploy element in server.xml. In theory, you could get an Ant task to re-load the context (assuming that you've left the 'admin' webapp installed). It would need to send a request to

Re: Tomcat 3 and use of sessions

2003-08-30 Thread Bill Barker
It's much the same as in Tomcat 5: HttpSession session = request.getSession(true); session.setAttribute(foo, bar); Chitale, Sandip V [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Folks, Is there a way in Tomcat 3 , when embedded in an application, to create a HttpSession

Re: [File Upload]Multiple Destination ??

2003-08-30 Thread Bill Barker
Another alternative (depending on your network config, and network policies) is to upload the file once and rsync the uploaded file to the various locations. Tim Funk [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] The client (SWING app) will need to perform multiple HTTP requests to

Re: Catching JSP Custom tag errors

2003-08-30 Thread Bill Barker
Yet another one for the FAQ ;-). An error-page element for a status code of 500 won't be invoked if the Servlet/JSP throws an exception out of the service method. For that, you need to have an error-page element with an exception-type, e.g.: error-page

Re: /usr/ucb/cc: language optional software package not installed

2003-08-30 Thread Bill Barker
Like the message says, you need a working compiler (which on Solaris /usr/ucb/cc definitely isn't ;-). I've never tried it, but I believe that the Forte (or, rather, whatever it is being called these days) complier can be used to build gcc. Otherwise, you are stuck with downloading the binary

Re: mod_jk and Tomcat 3.2.4

2003-08-30 Thread Bill Barker
AFAIK, the latest-and-greatest should still work with 3.2.x. Armenio Pinto [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi there, can anyone tell me, please, where can I find the most suitable version of mod_jk to use with Tomcat 3.2.4? Thanks in advance, Arménio Pinto

<    1   2   3   4   5   6   7   8   9   10   >