Re: Content-Encoding - URGENT Please

2002-04-09 Thread Taavi Tiirik
Strange... if you have example webapp then you should have this class as well. Look at http://cvs.apache.org/viewcvs/jakarta-tomcat-4.0/ and browse to webapps/examples/WEB-INF/classes/filters The class is there. with best wishes, Taavi I could not find the specified class anywhere in the

Re: Content-Encoding - URGENT Please

2002-04-09 Thread Taavi Tiirik
Gulshan, Please take a look at /tomcat/webapps/examples/WEB-INF/classes/filters/SetCharacterEncodingFilter. java This filter should solve your problem. Documentation should be self-explanatory. If you get stuck anywhere do not hesitate to ask. with best wishes, Taavi Hi Randy, Thanks for

Re: Content-Encoding - URGENT Please

2002-04-09 Thread Taavi Tiirik
Could you please verify the path again as i cannot see the filters folder in classes? Also if you could please tell me what veresion of tomcat you are using? I am using 4.0.3. This filter may not be available for tomcat 3.2.x though. Full path to SetCharacterEncodingFilter is as follows:

Re: Who use Tomcat as a stand-alone server in production environment ?

2002-03-28 Thread Taavi Tiirik
Anthony, Where can I read more about this issue? I have used self-issued certificate so far and have not encountered any problems. Now that you say there are issues... it may be more reasonable to let apache do the https part. Anybody else experiencing problems with Tomcat and Thawte

Re: Who use Tomcat as a stand-alone server in production environment ?

2002-03-27 Thread Taavi Tiirik
If I do not need SSL then I use Tomcat standalone. If I need SSL I use Apache + OpenSSL Tomcat with mod_webapp. Both configurations work fine. Anthony, Why is it so? Tomcat with SSL works just fine. Taavi -- To unsubscribe: mailto:[EMAIL PROTECTED] For additional commands:

hack: custom error page for stopped web application

2002-03-23 Thread Taavi Tiirik
Hello Tomcat users, I wanted desperately to get better error page for a web application that is stopped using manager application. It turned out to be far more easier than I was afraid of. All that is needed is valve that does following in it's invoke method: Context context =

tomcat https security: is it possible to steal sessions?

2002-03-15 Thread Taavi Tiirik
Hello, What kind of security risks are there if I use tomcat over https (http connector is disabled). Would it be ok to assume that nobody can listen traffic between tomcat and browser? I do not pass any confidential information as url parameters (ie. all forms are using post method). Is it

Re: jndi versus database connection pooling

2002-03-14 Thread Taavi Tiirik
I use the JNDI based connection pool with Postgres quite successfully. You will need to have postgresql.jar in $CATALINA_HOME/common/lib, and a server.xml configuration something like this: ... One Postgres-specific note is that you have to start the postmaster application listening for

global filters

2002-03-07 Thread Taavi Tiirik
hello, I want to stop (not undeploy) my web application using manager app and need to give reasonable error page explaining the situation whenever this web application is used. Now I am wondering if is it possible to write a global filter that listens to all requests not only request for a

basic auth does not work? ( 4.0.1 final and 4.0 latest nightly )

2001-11-12 Thread Taavi Tiirik
I cannot get basic authentication to work with 4.0.1 release and latest nightly build. All I did in examples/WEB-INF/web.xml was: 1. added login-config auth-methodBASIC/auth-method realm-namePrivate/realm-name /login-config 2. commented out form based login configuration. Tomcat gives 'HTTP

Re: basic auth does not work? ( 4.0.1 final and 4.0 latest nightly )

2001-11-12 Thread Taavi Tiirik
Yes, this is the current behaviour. Refer to earlier posts (by search). Current remedy is to use form instead (if appropriate) else revet back to 3.x. thanks, is there any time estimate of when it will start working again? with best wishes, Taavi -- To unsubscribe: mailto:[EMAIL

Re: basic auth does not work? ( 4.0.1 final and 4.0 latest nightly )

2001-11-12 Thread Taavi Tiirik
(simply change the word FORM to BASIC in the existing auth-method is easiest. This did not help :-( But the first thing to do is to post the stack trace that came with the Internal Server Error page (or from one of the log files in the logs directory -- without that, there is no way to

RE: switch between http and https. how?

2001-10-26 Thread Taavi Tiirik
I have Tomcat 4 running fine with both http and https protocols. I would like to use http for serving most of the documents and only j_security_check (form based login) should be done over https. How can I configure this? There is no way to configure this. Thanks, Craig! Now I am a

switch between http and https. how?

2001-10-25 Thread Taavi Tiirik
I have Tomcat 4 running fine with both http and https protocols. I would like to use http for serving most of the documents and only j_security_check (form based login) should be done over https. How can I configure this? with best wishes, Taavi

RE: blocking access using filter

2001-10-18 Thread Taavi Tiirik
Thanks, Craig! 1. If user is not logged in or if the session has timed out then it should open login page and after successful login it should try to access the very same request (ie. the same document). I don't quite see why you need to modify the standard form-based login

RE: nonroot standalone tomcat 4? how?

2001-09-19 Thread Taavi Tiirik
Connectors - Refactored the startup code so that Catalina can run on port 80 (without being root) when started by JavaService or equivalent service managers. I'm wondering if there is further documentation on this somewhere? It's in CVS, repository jakarta-tomcat-4.0 under

RE: tomcat4, how to setup error pages for stopped application

2001-09-18 Thread Taavi Tiirik
Add this in mywebapp/WEB_INF/web.xml, error-page error-code404/error-code location/error-page.jsp/location /error-page Thanks, but if I add this to mywebapp then it keeps telling that: HTTP Status 404 - /mywebapp/index.jsp The requested resource (/mywebapp/index.jsp) is not

RE: tomcat4, how to setup error pages for stopped application

2001-09-18 Thread Taavi Tiirik
Easiest way to handle this is create a page index.jsp and put it in your web application context, there you can keep your messages. Do you mean you have stopped the server or just took of a context? Now that I think of it I have no context defined for my web application. Ie. there is no

nonroot standalone tomcat 4? how?

2001-09-18 Thread Taavi Tiirik
How to run standalone tomcat 4 under solaris as a non root user? I have tried following: 1. configured tomcat to listen port 8080 (as it is by default :-) 2. redirected port 80 to 8080 using port redirector (rinetd) Now, it almoust works but whenever I access url like http://myhost/ then

tomcat4: sealing violation when reloading servlets

2001-09-07 Thread Taavi Tiirik
I am encountering sealing violation problems with tomcat 4.0 (nightly build 20010825). Whenever I recompile a servlet or change any .properties files that I use for i18n text messages press reload, it gives ServletException like this: Exception Report: javax.servlet.ServletException:

RE: Loggin out using JDBC realms

2001-09-01 Thread Taavi Tiirik
On Fri, 31 Aug 2001, PHAM,TAM (HP-Vancouver,ex1) wrote: Regarding logging out of JDBC realms. This does not seem ideal if I have to explicitly call session.invalidate() when the user logs out. Tam, You can use javascript to fire session.invalidate() in case the user closes browser window

Re: Loggin out using JDBC realms

2001-08-31 Thread Taavi Tiirik
when using security realms, more specifically JDBC realms, how do you log-out? Call session.invalidate() and it does the trick. with best wishes, Taavi

RE: charset problem

2001-08-29 Thread Taavi Tiirik
-Original Message- From: Giannis [mailto:[EMAIL PROTECTED]] Sent: 27-08-2001 1:46 PM To: [EMAIL PROTECTED] Subject: charset problem I make some JSP pages on Jacarta tomcat. I have problem with the character set. I use content type ISO-8859-7 but the server doesnt appear the

how to check if user is authenticated

2001-08-26 Thread Taavi Tiirik
I am doing form based login using JDBCRealm and for logging out I call request.getSession().invalidate(). The problem is that after invalidation (duering the very same request) I can still use request.getRemoteUser() and it returns user name just like before calling session.invalidate(). What

default encoding of jsp pages

2001-08-25 Thread Taavi Tiirik
How can I set encoding of .jsp page to something other than 8859-1. thanks in advance, Taavi

JDBCRealm: change password without logging out

2001-08-19 Thread Taavi Tiirik
Dear tomcat users, Can you please guide me how to let tomcat know that I have changed user password in database (JDBCRealm, Tomcat 3.2.3, form based login). I am currently altering session variable j_password but I realize this is very tomcat 3.2.3 specific and can possibly not work with future

error-page not working with tomcat 3.2.3

2001-08-15 Thread Taavi Tiirik
I have ... /welcome-file-list error-page error-code404/error-code location/error404.jsp/location /error-page taglib ... in my web.xml file and for some reason it is not enough to get error404.jsp to show up when I

form auth: how to get user name if login was incorrect

2001-08-14 Thread Taavi Tiirik
Hullo, How to get a user name (and password) with form authentication, if authentication was not successful and user was sent to error page. Is this information lost at this moment or can I get it somehow? I am using tomcat 3.2.3 at the moment... thanks, Taavi

RE: form auth: how to get user name if login was incorrect

2001-08-14 Thread Taavi Tiirik
How to get a user name (and password) with form authentication, if authentication was not successful and user was sent to error page. Is this information lost at this moment or can I get it somehow? From: Randy Layman I believe that its in the seesion.getAttribute(j_username). I might

Re: jdbcRealm problem

2001-08-09 Thread Taavi Tiirik
From: Francois Bronsard ... The trace of the session state that authetication was successful, yet, the system keeps asking for username and password and finally fails. Any idea what could be wrong? Make sure you comment out SimpleRealm interceptor if you use JDBCRealm. I accidentally left