Tomcat Security

2008-11-27 Thread André Warnier
Rainer, Michael, (*) do you know this place ? (in German) http://www.bsi.bund.de/literat/index.htm Look for A (for Apache) and T (for Tomcat). The one for Tomcat relates to 5.5.9, but is still interesting reading. (*) and also Chuck, Chris, Mark etc.., but I wouldn't presume.

Re: Tomcat Security

2008-11-27 Thread Pieter Temmerman
It's a pitty das mein Deutsch nicht so gut ist! ;) On Thu, 2008-11-27 at 09:04 +0100, André Warnier wrote: Rainer, Michael, (*) do you know this place ? (in German) http://www.bsi.bund.de/literat/index.htm Look for A (for Apache) and T (for Tomcat). The one for Tomcat relates to 5.5.9,

Re: Manager app language

2008-11-27 Thread André Warnier
Caldarale, Charles R wrote: From: Michael Ludwig [mailto:[EMAIL PROTECTED] Subject: Re: Manager app language I'm not sure Tomcat would bother what character encoding you specify in LANG. It does, albeit indirectly. JVM initialization uses the LANG value to set user.language, user.country,

Tomcat Security

2008-11-27 Thread André Warnier
Rainer, Michael, (*) do you know this place ? (in German) http://www.bsi.bund.de/literat/index.htm Look for A (for Apache) and T (for Tomcat). The one for Tomcat relates to 5.5.9, but is still interesting reading. (*) and also Chuck, Chris, Mark etc.., but I wouldn't presume.

Re: Jconsole through firewall

2008-11-27 Thread André Warnier
Caldarale, Charles R wrote: From: Mark Thomas [mailto:[EMAIL PROTECTED] Subject: Re: Jconsole through firewall There is some code in trunk to do this. Life just became easier. Thanks very much. I'll say thanks first too, not that anyone would think I am ungrateful. But could someone

HowTo update tomcat-users.xml without restarting tomcat

2008-11-27 Thread Andreas.Huck
Hello everybody, I need to update the tomcat-users.xml quite often in a productive environment. Therefore it would be nice to have a possibility to update the file without the need for restarting tomcat. I tried to define the resource UserDatabase as reloadable but that didn't work out. Also

Exception in thread

2008-11-27 Thread Pieter Temmerman
Hi All, I experienced a problem with Tomcat where all applications where inaccessible. (Tomcat just hung, no 404 errors where given or something). The only thing that I think could be related to the problem is listed below. Exception in thread TP-Processor15 Exception in thread

Re: Tomcat 6 and javamail

2008-11-27 Thread Lyallex
OK, firstly thanks for the feedback so far Let me be quite clear about one thing. I am using the same mail server in both cases. Tomcat and Eclipse are running on the same physical device with the same IP address. If I configure a JavaMail session as described in the following resource

Re: Exception in thread

2008-11-27 Thread Pieter Temmerman
Hi Chris, That's what I was afraid of. The only thing listed in the logs was what I posted. No stacktrace, nor name of the exception. I'll try to bump up the logging level, and hope this error occurs again in a reasonable amount of time (it's been working for the whole day until now) On Thu,

Re: Odd encoding of servlet parameters

2008-11-27 Thread André Warnier
Chris Mannion wrote: Hi All I've recently started having a problem with one of the servlets I'm running on a Tomcat 5.5 system. The code of the servlet hasn't changed at all so I'm wondering if there are any Tomcat settings that could affect this kind of thing or if anyone has come across a

Re: Tomcat 6 and javamail

2008-11-27 Thread Rainer Frey
On Thursday 27 November 2008 12:52:56 Lyallex wrote: (It would be easier to answer if you'd stop top quoting - but I won't correct this whole mail) OK, firstly thanks for the feedback so far Let me be quite clear about one thing. I am using the same mail server in both cases. Tomcat and

Re: Exception in thread

2008-11-27 Thread Christian Poecher
Pieter Temmerman-2 wrote: The only thing that I think could be related to the problem is listed below. Exception in thread TP-Processor15 Exception in thread Cluster-MembershipSender Exception in thread Cluster-MembershipReceiver 26 nov 2008 17:12:29,010 : [DEBUG]

Odd encoding of servlet parameters

2008-11-27 Thread Chris Mannion
Hi All I've recently started having a problem with one of the servlets I'm running on a Tomcat 5.5 system. The code of the servlet hasn't changed at all so I'm wondering if there are any Tomcat settings that could affect this kind of thing or if anyone has come across a similar problem before.

GPGPU and Tomcat

2008-11-27 Thread James Law
Hi I've got little knowledge on the way Tomcat works behind the scene so please excuse my ignorance. Would Tomcat see any benefits from implementing gpgpu support in the way that the distributed project Folding has seen? I find GPGPU quite fascinating subject and for what I can understand

Re: HowTo update tomcat-users.xml without restarting tomcat

2008-11-27 Thread Pieter Temmerman
I think that is not possible. In production, the best option would be to use a database or LDAP directory to store your accounts. On Thu, 2008-11-27 at 10:39 +0100, [EMAIL PROTECTED] wrote: Hello everybody, I need to update the tomcat-users.xml quite often in a productive environment.

Re: Odd encoding of servlet parameters

2008-11-27 Thread Chris Mannion
André Thanks for the comments, I will definitely look into the approach of sending the data in the request body, probably something that should have been done originally. It's true that the program sending the data is ours as well but I don't suspect it to be the culprit because the problem

Re: Tomcat 6 and javamail

2008-11-27 Thread Lyallex
2008/11/27 Rainer Frey [EMAIL PROTECTED]: On Thursday 27 November 2008 12:52:56 Lyallex wrote: (It would be easier to answer if you'd stop top quoting - but I won't correct this whole mail) Well that's most kind of you, you are being very patient. I think I need to take a step back here.

RE: Tomcat 6 and javamail

2008-11-27 Thread Caldarale, Charles R
From: Lyallex [mailto:[EMAIL PROTECTED] Subject: Re: Tomcat 6 and javamail The mail server does not require authentication when accessed from the office subnet. The server guys have confirmed this. Or is it that your mail server is configured to accept the network signon that each

RE: Odd encoding of servlet parameters

2008-11-27 Thread Caldarale, Charles R
From: Chris Mannion [mailto:[EMAIL PROTECTED] Subject: Re: Odd encoding of servlet parameters It's true that the program sending the data is ours as well but I don't suspect it to be the culprit because the problem doesn't occur in a way consistent with that. Get Wireshark captures of both

RE: GPGPU and Tomcat

2008-11-27 Thread Caldarale, Charles R
From: James Law [mailto:[EMAIL PROTECTED] Subject: GPGPU and Tomcat Would Tomcat see any benefits from implementing gpgpu support in the way that the distributed project Folding has seen? Tomcat is pure Java (except for the APR connector), so any such support would have to be in the JVM,

RE: Tomcat Security

2008-11-27 Thread Caldarale, Charles R
From: Pieter Temmerman [mailto:[EMAIL PROTECTED] Subject: Re: Tomcat Security It's a pitty das mein Deutsch nicht so gut ist! ;) Ja, nach vierzig Jahren Nichtanwendung, mein Deutsch ist groß unbrauchbar. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY

Re: Exception in thread

2008-11-27 Thread Christian Poecher
Pieter Temmerman-2 wrote: Hi Chris, That's what I was afraid of. The only thing listed in the logs was what I posted. No stacktrace, nor name of the exception. I'll try to bump up the logging level, and hope this error occurs again in a reasonable amount of time (it's been working for

RE: Jconsole through firewall

2008-11-27 Thread Caldarale, Charles R
From: André Warnier [mailto:[EMAIL PROTECTED] Subject: Re: Jconsole through firewall With the announced thing above, would I be able to monitor them with jconsole behind their respective firewalls, and if yes what would I need to do for that ? Yes, the patch Mark T spoke of does exactly

RE: Manager app language

2008-11-27 Thread Caldarale, Charles R
From: André Warnier [mailto:[EMAIL PROTECTED] Subject: Re: Manager app language It means that despite its inherent capability of speaking in tongues, it only does so according to the overall Tomcat LANG setting, and does not pay attention to the browser's Accept-Language headers. That's

Re: Manager app language

2008-11-27 Thread André Warnier
Caldarale, Charles R wrote: Is the server named after a legendary British king, the Kinks album, or the HHGTTG character? HHGTTG. We also have marvin, ford, dent, zaphod, trillian, fenchurch,.. even a slartibartfast (wich also has an alias, for evident reasons). marvin is an old Sun, which

Re: Tomcat 6 and javamail

2008-11-27 Thread Don Millhofer
Hi Lyallex, for everybody that is still struggling with this issue, here is a base non-authentication email class. Once you get this working start adding the special features you need. This worked with my hosting provider (Kattare) who were absolutely worthless in providing any guidance,

Re: Tomcat 6 and javamail

2008-11-27 Thread Lyallex
2008/11/27 Caldarale, Charles R [EMAIL PROTECTED]: From: Lyallex [mailto:[EMAIL PROTECTED] Subject: Re: Tomcat 6 and javamail The mail server does not require authentication when accessed from the office subnet. The server guys have confirmed this. Or is it that your mail server is

RE: GPGPU and Tomcat

2008-11-27 Thread Peter Crowther
From: Caldarale, Charles R [mailto:[EMAIL PROTECTED] Frequently, webapps do relatively minor processing, with the brunt of the work being performed in a data base engine (usually running on a separate system). To me, the database is one of the more interesting places to use GPUs. Half a

Re: Manager app language

2008-11-27 Thread André Warnier
Caldarale, Charles R wrote: Also, since the manager app is an administrative function, one would expect that responsibility to be handled in-country.. Yeah, thought of that too. Ok, I guess it is acceptable for the Manager. As I mentioned previously, the user.language setting can be

Re: HowTo update tomcat-users.xml without restarting tomcat

2008-11-27 Thread Mark Thomas
[EMAIL PROTECTED] wrote: Hello everybody, I need to update the tomcat-users.xml quite often in a productive environment. Therefore it would be nice to have a possibility to update the file without the need for restarting tomcat. I tried to define the resource UserDatabase as reloadable

Re: Jconsole through firewall

2008-11-27 Thread Mark Thomas
Caldarale, Charles R wrote: From: André Warnier [mailto:[EMAIL PROTECTED] Subject: Re: Jconsole through firewall With the announced thing above, would I be able to monitor them with jconsole behind their respective firewalls, and if yes what would I need to do for that ? However, the

Re: BUILD FAILED ...

2008-11-27 Thread Albretch Mueller
yeah! I had to take the result of the build from ~ /media/hda3/tc/tc-6.0.18/output/build ~ and by the way I noticed tc doesn't seem to be using the /common directory anymore ~ Thank you again lbrtchx - To start a new topic,

Re: Odd encoding of servlet parameters

2008-11-27 Thread Michael Ludwig
Chris Mannion schrieb am 27.11.2008 um 10:17:43 (+): The servlet in question accepts XML data that is posted to it as a URL parameter called 'xml'. Posted as a URL parameter? POST or GET? You want a POST here. lt;xml version=quot;1.0quot; encoding=quot;UTF-8quot;?gt; lt;recordsgt;

RE: BUILD FAILED ...

2008-11-27 Thread Caldarale, Charles R
From: Albretch Mueller [mailto:[EMAIL PROTECTED] Subject: Re: BUILD FAILED ... and by the way I noticed tc doesn't seem to be using the /common directory anymore Correct; the default directory structure has been greatly simplified:

Re: BUILD FAILED ...

2008-11-27 Thread Albretch Mueller
~ Thanks so much Chuck ~ I am still having little problems (which I think don't exactly related to java/tomcat) ~ Everything seems to be working fine locally (I haven't still set up logging), but I can't see the server from out there. And as I said I am using my raw IP address for now. So I

RE: BUILD FAILED ...

2008-11-27 Thread Caldarale, Charles R
From: Albretch Mueller [mailto:[EMAIL PROTECTED] Subject: Re: BUILD FAILED ... So I need to be able to access the webserver by going http://IP_address/ Have you configured Tomcat to use port 80? (The default HTTP port is 8080.) If you want to use port 80, you'll have to run Tomcat as root

Re: BUILD FAILED ...

2008-11-27 Thread Albretch Mueller
Thanks anyway Chuck you are this list's angel ~ I did set up 80 as the port and the internal address of my box in the conf/server.xml file ~ this is what my conf/server.xml file looks like: ~ ?xml version='1.0' encoding='utf-8'? Server port=8005 shutdown=SHUTDOWN Listener

RE: BUILD FAILED ...

2008-11-27 Thread Caldarale, Charles R
From: Albretch Mueller [mailto:[EMAIL PROTECTED] Subject: Re: BUILD FAILED ... Engine name=Catalina defaultHost=localhost Host name=192.168.1.249 appBase=webapps unpackWARs=true autoDeploy=true xmlValidation=false xmlNamespaceAware=false Change the Host name back to localhost; this

Re: BUILD FAILED ...

2008-11-27 Thread Albretch Mueller
Change the Host name back to localhost ~ I did, but I still think I am having some networking problems ~ I am running wireshark (the network sniffer) to see that there are only requests from my box going out though the transparent proxy (208.62.125.146) but nothing is coming back ~ No. Time

SSI Filter Recursive Includes

2008-11-27 Thread Ahmed Hammad
Hi, I am using Tomcat 6.0.18 on java version 1.5.0_09 Recursive includes with SSI Servlet works without problem but not with SSI Filter. Does SSI Filter support recursive includes? I have the following in WEB-INF/web.xml filter filter-namessi/filter-name filter-class