Re: Tomcat 5.5 and Windows 7

2010-08-27 Thread Pid
On 27/08/2010 04:22, Marcos Molina wrote: Hi there, I only wanna know if i can run Tomcat 5.5 on windows 7 ??? And if i have to take any considerations to do it. Thanks for yours answers. Only if you install Java first. p Regards Marcos.

Re: Is there a better way to disable JSESSIONID in the URLs?

2010-08-27 Thread Rainer Jung
On 26.08.2010 23:29, Wesley Acheson wrote: On Sat, Aug 21, 2010 at 12:12 PM, Pidp...@pidster.com wrote: On 20/08/2010 22:40, Wesley Acheson wrote: I'm a bit lost with this thread. Are people suggesting I should submit a patch. I really wouldn't know where to begin looking. That's where the

Engine Cluster definition and FarmWarDeployer

2010-08-27 Thread Brett Delle Grazie
Hi, Tomcat: 6.0.29, binary distribution downloaded from apache.org JVM: 1.6.0_21 (Sun, 64-bit). OS: Linux RHEL 5.5, fully patched. I understand that FarmWarDeployer can only be used cluster context defined in a Host, this is fine. I have a cluster fully defined in the Engine context. My

Re: Engine Cluster definition and FarmWarDeployer

2010-08-27 Thread Pid
On 27/08/2010 09:41, Brett Delle Grazie wrote: Hi, Tomcat: 6.0.29, binary distribution downloaded from apache.org JVM: 1.6.0_21 (Sun, 64-bit). OS: Linux RHEL 5.5, fully patched. I understand that FarmWarDeployer can only be used cluster context defined in a Host, this is fine. I have a

Re: Best practices for deployment on cluster environment

2010-08-27 Thread David Nillesen
Hi, Our current system has two servers in a clustered environment with shared disk, but we ended up splitting the webapps areas into seperate. This gave us more control in the end and our promote procedure for a new version of an app is now scripted. So one server gets removed from the pool of

Re: clear text keystore password in server.xml

2010-08-27 Thread Mark Thomas
On 27/08/2010 10:41, Vijay wrote: I am looking to write a wrapper class that decrypts the password passed as an environment variable to tomcat, and then sets the system property javax.net.ssl.keyStorePassword inside the JVM itself. And how do you propose to provide the secret key required to

Re: clear text keystore password in server.xml

2010-08-27 Thread Vijay
For prototyping purposes, I am embedding the secret key in the program itself. If the solution works out, having it in a secure database is an option I am considering.. On Fri, Aug 27, 2010 at 3:45 PM, Mark Thomas ma...@apache.org wrote: On 27/08/2010 10:41, Vijay wrote: I am looking to write

Re: clear text keystore password in server.xml

2010-08-27 Thread Mark Thomas
On 27/08/2010 11:26, Vijay wrote: For prototyping purposes, I am embedding the secret key in the program itself. If the solution works out, having it in a secure database is an option I am considering.. And how do you propose to provide the password Tomcat uses to access this secure database?

Re: Engine Cluster definition and FarmWarDeployer

2010-08-27 Thread Brett Delle Grazie
On Fri, 2010-08-27 at 10:18 +0100, Pid wrote: On 27/08/2010 09:41, Brett Delle Grazie wrote: Hi, Tomcat: 6.0.29, binary distribution downloaded from apache.org JVM: 1.6.0_21 (Sun, 64-bit). OS: Linux RHEL 5.5, fully patched. I understand that FarmWarDeployer can only be used

Re: Best practices for deployment on cluster environment

2010-08-27 Thread Domenico Briganti
I've read many response to this thread, but when you redeploy in an enterprise environment (many httpd+mod_jk - 4 tomcat server - a db) independently if use shared or not appBase, manual or scripted deployer, with or without tomcat manager, you return to your client at 404 or worst a 503 when a

Re: Access StandardContext in WebappClassLoader

2010-08-27 Thread Chefo
Hi Chris, thanks for the interest - of course I'll give you an example. Surprisingly it is not java.lang.Object that I'm trying to hide but the stax api in java 6. I need to do so because of the notorious fault in the XMLOutputFactory#newInstance(String, ClassLoader). Therefore I'm using using

Re: clear text keystore password in server.xml

2010-08-27 Thread Vijay
Hi Mark, I guess I am getting the point you are trying to make .. As long as the password or (the encrypted password and the secret key) are present at some location (file system / database/ etc) .. there is a security gap .. I agree with this .. This said, I am trying to find a way

Tomcat load balancing question x problem

2010-08-27 Thread Thiago Locatelli da Silva
Hello list! :) Here at work I was asked to give a try on load balancing two tomcat servers running tomcat 6.0.29. The problem is that I was given only two servers to do this, what gave me only one option: run the apache in one of these servers. So I decided to put the apache httpd server

Mike Wilde is out of the office

2010-08-27 Thread Michael Wilde
I will be out of the office starting 27/08/2010 and will not return until 31/08/2010. If you have any urgent production Healthcare issues please contact Pauline Drummond or George Rae. If urgent please raise an incident in the TST DBAMR USD queue.

Re: clear text keystore password in server.xml

2010-08-27 Thread Mark Thomas
On 27/08/2010 13:19, Vijay wrote: Hi Mark, I guess I am getting the point you are trying to make .. As long as the password or (the encrypted password and the secret key) are present at some location (file system / database/ etc) .. there is a security gap .. I agree with this ..

Re: clear text keystore password in server.xml

2010-08-27 Thread Wesley Acheson
On Fri, Aug 27, 2010 at 2:36 PM, Mark Thomas ma...@apache.org wrote: On 27/08/2010 13:19, Vijay wrote: Hi Mark,             I guess I am getting the point you are trying to make .. As long as the password or (the encrypted password and the secret key) are present at some location (file system

Re: Tomcat 5.5 and Windows 7

2010-08-27 Thread Marcos Molina
hi, you are talking about JVM or something more? thxs Mensaje original De: p...@pidster.com Fecha: 27/08/2010 04:37 Para: Tomcat Users Listusers@tomcat.apache.org Asunto: Re: Tomcat 5.5 and Windows 7 On 27/08/2010 04:22, Marcos Molina wrote: Hi there, I only wanna know if i can

Re: clear text keystore password in server.xml

2010-08-27 Thread David kerber
On 8/27/2010 9:02 AM, Wesley Acheson wrote: ... I've been giving this whole issue a lot of thought. And not just now for months now. I was wondering if the following was possible in theory, When tomcat is started up it prompts for the password? Wouldn't that help with the whole smoke and

Re: Tomcat 5.5 and Windows 7

2010-08-27 Thread Pid
On 27/08/2010 14:02, Marcos Molina wrote: hi, you are talking about JVM or something more? Which documents have you read so far? Have you read the RELEASE NOTES? http://www.apache.org/dist/tomcat/tomcat-5/v5.5.30/RELEASE-NOTES p Mensaje original De: p...@pidster.com Fecha:

RE: Tomcat 5.5 and Windows 7

2010-08-27 Thread Jeffrey Janner
Yes, it is possible. I've done it. However, you might run into some problems with Windows 7's enhanced user access stuff. -Original Message- From: Marcos Molina [mailto:mmfo...@adinet.com.uy] Sent: Thursday, August 26, 2010 10:23 PM To: users@tomcat.apache.org Subject: Tomcat 5.5

Re: Tomcat load balancing question x problem

2010-08-27 Thread Rainer Jung
On 27.08.2010 14:17, Thiago Locatelli da Silva wrote: Hello list! :) Here at work I was asked to give a try on load balancing two tomcat servers running tomcat 6.0.29. The problem is that I was given only two servers to do this, what gave me only one option: run the apache in one of these

Re: Tomcat load balancing question x problem

2010-08-27 Thread Thiago Locatelli da Silva
My apache version is 2.2.3 as follow. [r...@servera ~]$ httpd -version Server version: Apache/2.2.3 Server built: Nov 10 2007 12:44:08 I will take a look at your suggestions and give a try. I will be further posting my finding on this thread. Thanks a lot Rainer T Rainer Jung escreveu:

Re: clear text keystore password in server.xml

2010-08-27 Thread Mark Thomas
On 27/08/2010 14:02, Wesley Acheson wrote: I've been giving this whole issue a lot of thought. And not just now for months now. I was wondering if the following was possible in theory, When tomcat is started up it prompts for the password? Wouldn't that help with the whole smoke and mirrors

Re: clear text keystore password in server.xml

2010-08-27 Thread Ken Bowen
If you wanted to go down this path, besides the web page for entering the password, you could add sending alerts to the cells of all your sysadmins to improve the probability of the password being entered in a timely manner. Perhaps Tomcats in clusters could obtain the password from

Re: Tomcat 5.5 and Windows 7

2010-08-27 Thread Pid
On 27/08/2010 14:35, Jeffrey Janner wrote: Yes, it is possible. I've done it. However, you might run into some problems with Windows 7's enhanced user access stuff. Which isn't a Tomcat specific problem, it happens to all sorts of apps on Windows 7. p -Original Message- From:

Re: Engine Cluster definition and FarmWarDeployer

2010-08-27 Thread Pid
On 27/08/2010 11:40, Brett Delle Grazie wrote: On Fri, 2010-08-27 at 10:18 +0100, Pid wrote: On 27/08/2010 09:41, Brett Delle Grazie wrote: Hi, Tomcat: 6.0.29, binary distribution downloaded from apache.org JVM: 1.6.0_21 (Sun, 64-bit). OS: Linux RHEL 5.5, fully patched. I understand that

CLIENT-AUTH x509 attribute mapping to user name

2010-08-27 Thread Michael Dockery
Can anyone tell me what class/method i would need to override  to make a client x509 cert subject/dn attribute   to a valid tomcat username (in memory realm or otherwise) I assume the authenticator method  or perhaps the login method...

RE: Tomcat 5.5 and Windows 7

2010-08-27 Thread Jeffrey Janner
Yes, sorry I didn't make that clear. I forgot specifically what the problem(s) was/were, but they were trivial. General install using the setup.exe went just fine, but Windows insisted on getting in the way of admin-type tasks. Our webapp ran just fine. Jeff -Original Message- From:

RE: clear text keystore password in server.xml

2010-08-27 Thread Propes, Barry L
I was told by my company we're not supposed to have passwords stored in clear text. I explained to them the architecture of Tomcat, and didn't get a clear answer on whether or not it's ok, though I think it is. I don't know what kind of DB you're using, Vijay, but the Oracle DBA told me he

Re: Best practices for deployment on cluster environment

2010-08-27 Thread Pid
On 27/08/2010 12:21, Domenico Briganti wrote: I've read many response to this thread, but when you redeploy in an enterprise environment (many httpd+mod_jk - 4 tomcat server - a db) independently if use shared or not appBase, manual or scripted deployer, with or without tomcat manager, you

RE: Tomcat 5.5 and Windows 7

2010-08-27 Thread Caldarale, Charles R
From: Jeffrey Janner [mailto:jeffrey.jan...@polydyne.com] Subject: RE: Tomcat 5.5 and Windows 7 I forgot specifically what the problem(s) was/were, but they were trivial. Basically, anything (such as tomcat6w.exe) manipulating a service or the registry must be run as administrator, not

Re: CLIENT-AUTH x509 attribute mapping to user name

2010-08-27 Thread Pid
On 27/08/2010 15:16, Michael Dockery wrote: Can anyone tell me what class/method i would need to override to make a client x509 cert subject/dn attribute to a valid tomcat username (in memory realm or otherwise) I assume the authenticator method or perhaps the login method... Please

RE: Engine Cluster definition and FarmWarDeployer

2010-08-27 Thread Brett Delle Grazie
Hi Pid, That's what I suspected. Thanks for your help. Regards, Brett -Original Message- From: Pid [mailto:p...@pidster.com] Sent: Fri 27/08/2010 15:13 To: Tomcat Users List Subject: Re: Engine Cluster definition and FarmWarDeployer On 27/08/2010 11:40, Brett Delle Grazie wrote:

Re: clear text keystore password in server.xml

2010-08-27 Thread André Warnier
Ken Bowen wrote: If you wanted to go down this path, besides the web page for entering the password, you could add sending alerts to the cells of all your sysadmins to improve the probability of the password being entered in a timely manner. Perhaps Tomcats in clusters could obtain the

CLIENT-AUTH x509 attribute mapping to user name

2010-08-27 Thread Michael Dockery
Can anyone tell me what class.method   which I would need to override   to map a client x509 cert subject/dn attribute     to a valid tomcat username (in memory realm or otherwise)   I assume the authenticator method    or perhaps the login method...

Re: A little trouble with SSL

2010-08-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Andrea, Please keep discussions on the mailing list. On 8/26/2010 5:19 PM, Andrea Freire wrote: I pass you my configuration, go ahead It looks like you have not configured Apache httpd for SSL. Did you want to have SSL terminate at Apache httpd or

multiple instances on a server

2010-08-27 Thread S Ahmed
Hi, If you have a server with 15 GB of ram (or any large number for arguments sake), does it ever make sense to run multiple instances of tomcat on the same server? (serving http requests for the same web application) Or can a single instance utilize all the server resources just fine

Re: multiple instances on a server

2010-08-27 Thread Pid
On 27/08/2010 17:57, S Ahmed wrote: Hi, If you have a server with 15 GB of ram (or any large number for arguments sake), does it ever make sense to run multiple instances of tomcat on the same server? (serving http requests for the same web application) If you have a 64bit JVM, probably

RE: CLIENT-AUTH x509 attribute mapping to user name

2010-08-27 Thread Caldarale, Charles R
From: Michael Dockery [mailto:dockeryjava...@yahoo.com] Subject: CLIENT-AUTH x509 attribute mapping to user name Can anyone tell me what class.method  Can anyone tell me what Tomcat version you're using? which I would need to override   to map a client x509 cert subject/dn attribute     

Re: clear text keystore password in server.xml

2010-08-27 Thread DJohnson
André Warnier a...@ice-sa.com wrote on 08/27/2010 12:32:43 PM: Ken Bowen wrote: If you wanted to go down this path, besides the web page for entering the password, you could add sending alerts to the cells of all your sysadmins to improve the probability of the password being entered in a

Re: Session problem

2010-08-27 Thread Hisham
Hi Chris, sorry for the late reply In your listener, why don't you dump a stack trace when a session attribute is removed? That will let you know where the code is that is removing your attributes. You may be surprised. This would be very useful, but how would i generate it since theres no

Re: clear text keystore password in server.xml

2010-08-27 Thread David kerber
On 8/27/2010 1:14 PM, djohn...@desknetinc.com wrote: André Warniera...@ice-sa.com wrote on 08/27/2010 12:32:43 PM: Ken Bowen wrote: If you wanted to go down this path, besides the web page for entering the password, you could add sending alerts to the cells of all your sysadmins to improve

RE: clear text keystore password in server.xml

2010-08-27 Thread Caldarale, Charles R
André Warnier a...@ice-sa.com wrote on 08/27/2010 12:32:43 PM: And to complete the circle and make it all more user-friendly, I would also add the password to the SMS being sent. Just put it on Facebook... To quote from some architecture specs: Meaningful programming has not been achieved.

Re: Session problem

2010-08-27 Thread Pid
On 27/08/2010 18:16, Hisham wrote: Hi Chris, sorry for the late reply In your listener, why don't you dump a stack trace when a session attribute is removed? That will let you know where the code is that is removing your attributes. You may be surprised. Thread.dumpStack(); p This

Character encoding question

2010-08-27 Thread laredotornado
Hi, I'm using Tomcat 6.0.26. I'm noticing that when our JSPs pages are served, we frequently have ?s where apostrophes should be. We think this is because the database-driven content contains the Microsoft style apostrophe. My question is, if I adjust the character encoding on Tomcat, will

RE: Session problem

2010-08-27 Thread Caldarale, Charles R
From: Hisham [mailto:mohis...@gmail.com] Subject: Re: Session problem how would i generate it since theres no exception that's been thrown? Standard API call: Thread.dumpStack(). - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for

Re: Tomcat load balancing question x problem

2010-08-27 Thread Thiago Locatelli da Silva
Hi Rainer, I followed your suggestions and it seems to be working, the load balacing, now i need to look into why my application, created with gwt + comet is not working. It seems that comet stopped working. Thanks T Rainer Jung escreveu: On 27.08.2010 14:17, Thiago Locatelli da Silva

Re: CLIENT-AUTH x509 attribute mapping to user name

2010-08-27 Thread Michael Dockery
Our usernames are not named  exactly the same    as the x509 cert 'subject' attr.  (or any other attr) I was hoping i could do some mapping   to match a client cert (attr)    to an existing tomcat username ...perhaps  similar to the way it appears CAS does

Re: Session problem

2010-08-27 Thread Hisham
Yeah i found that through google! Thanks pid and chuck! -h On Fri, Aug 27, 2010 at 1:25 PM, Caldarale, Charles R chuck.caldar...@unisys.com wrote: From: Hisham [mailto:mohis...@gmail.com] Subject: Re: Session problem how would i generate it since theres no exception that's been thrown?

RE: multiple instances on a server

2010-08-27 Thread Jeffrey Janner
The only reasons I have ever come up with are all operations-related, not techincal. For example, different maintenance windows requirements get different Tomcat instances. -Original Message- From: S Ahmed [mailto:sahmed1...@gmail.com] Sent: Friday, August 27, 2010 11:57 AM To:

Re: clear text keystore password in server.xml

2010-08-27 Thread Wesley Acheson
If the hacker has root privilages I'm pretty sure you have worse problems. On Fri, Aug 27, 2010 at 7:14 PM, djohn...@desknetinc.com wrote: André Warnier a...@ice-sa.com wrote on 08/27/2010 12:32:43 PM: Ken Bowen wrote: If you wanted to go down this path, besides the web page for entering

RE: Tomcat 5.5 and Windows 7

2010-08-27 Thread Jeffrey Janner
-Original Message- From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] Sent: Friday, August 27, 2010 9:35 AM To: Tomcat Users List Subject: RE: Tomcat 5.5 and Windows 7 From: Jeffrey Janner [mailto:jeffrey.jan...@polydyne.com] Subject: RE: Tomcat 5.5 and Windows 7

Re: Character encoding question

2010-08-27 Thread Pid
On 27/08/2010 18:23, laredotornado wrote: Hi, I'm using Tomcat 6.0.26. I'm noticing that when our JSPs pages are served, we frequently have ?s where apostrophes should be. We think this is because the database-driven content contains the Microsoft style apostrophe. [wince] My

Re: multiple instances on a server

2010-08-27 Thread Wesley Acheson
I think the reason for doing this in ruby is that ruby is single threaded, I've been told. The JVM isn't. This is of course muddied with Jruby. http://stackoverflow.com/questions/3086467/confused-are-languages-like-python-ruby-single-threaded-unlike-say-java-for Anyway I don't see any

RE: multiple instances on a server

2010-08-27 Thread Caldarale, Charles R
From: Wesley Acheson [mailto:wesley.ache...@gmail.com] Subject: Re: multiple instances on a server I believe that they'll both end up running in the same JVM also but again could be wrong. No, separate Tomcat instances would run in separate JVM instances (processes). - Chuck THIS

Re: CLIENT-AUTH x509 attribute mapping to user name

2010-08-27 Thread Mark Thomas
On 27/08/2010 18:33, Michael Dockery wrote: Our usernames are not named exactly the same as the x509 cert 'subject' attr. (or any other attr) I was hoping i could do some mapping to match a client cert (attr) to an existing tomcat username ...perhaps similar to the way it

Re: Tomcat 5.5 and Windows 7

2010-08-27 Thread michel
- Original Message - From: Jeffrey Janner jeffrey.jan...@polydyne.com To: Tomcat Users List users@tomcat.apache.org Sent: Friday, August 27, 2010 1:37 PM Subject: RE: Tomcat 5.5 and Windows 7 -Original Message- From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com]

Re: multiple instances on a server

2010-08-27 Thread Pid
On 27/08/2010 18:51, Wesley Acheson wrote: I think the reason for doing this in ruby is that ruby is single threaded, I've been told. The JVM isn't. I'm raising an eyebrow. This is of course muddied with Jruby.

RE: Tomcat 5.5 and Windows 7

2010-08-27 Thread Jeffrey Janner
Properties.. -Original Message- From: michel [mailto:compu...@videotron.ca] Sent: Friday, August 27, 2010 2:03 PM To: Tomcat Users List Subject: Re: Tomcat 5.5 and Windows 7 - Original Message - From: Jeffrey Janner jeffrey.jan...@polydyne.com To: Tomcat Users List

Re: multiple instances on a server

2010-08-27 Thread Wesley Acheson
On Fri, Aug 27, 2010 at 9:41 PM, Pid p...@pidster.com wrote: On 27/08/2010 18:51, Wesley Acheson wrote: I think the reason for doing this in ruby is that ruby is single threaded, I've been told. The JVM isn't. I'm raising an eyebrow. Huh?

Re: clear text keystore password in server.xml

2010-08-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Vijay, On 8/27/2010 5:41 AM, Vijay wrote: I am looking for a way to use only encrypted passwords. Cool. How are you going to do that? I am looking to write a wrapper class that decrypts the password passed as an environment variable to tomcat,

Re: multiple instances on a server

2010-08-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ahmed, On 8/27/2010 12:57 PM, S Ahmed wrote: If you have a server with 15 GB of ram (or any large number for arguments sake), does it ever make sense to run multiple instances of tomcat on the same server? (serving http requests for the same web

Re: Tomcat load balancing question x problem

2010-08-27 Thread Rainer Jung
On 27.08.2010 19:22, Thiago Locatelli da Silva wrote: Hi Rainer, I followed your suggestions and it seems to be working, the load balacing, now i need to look into why my application, created with gwt + comet is not working. It seems that comet stopped working. Any information about what the

Re: Tomcat 5.5 and Windows 7

2010-08-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Pid, On 8/27/2010 3:37 AM, Pid wrote: On 27/08/2010 04:22, Marcos Molina wrote: Hi there, I only wanna know if i can run Tomcat 5.5 on windows 7 ??? And if i have to take any considerations to do it. Thanks for yours answers. Only if you

Re: Mike Wilde is out of the office

2010-08-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Martin, On 8/27/2010 9:38 AM, Martin Gainty wrote: what is a TST DBAMR USD queue ? See? I told you this guy goes on a lot of vacations. Heh. TST DBAMR USD -Mike is a Google thwack. Not for long, though. - -chris -BEGIN PGP SIGNATURE-

Re: multiple instances on a server

2010-08-27 Thread Rainer Jung
On 27.08.2010 21:58, Wesley Acheson wrote: On Fri, Aug 27, 2010 at 9:41 PM, Pidp...@pidster.com wrote: On 27/08/2010 18:51, Wesley Acheson wrote: I think the reason for doing this in ruby is that ruby is single threaded, I've been told. The JVM isn't. I'm raising an eyebrow. Huh?

Re: Access StandardContext in WebappClassLoader

2010-08-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Stefan, On 8/27/2010 7:34 AM, Chefo wrote: thanks for the interest - of course I'll give you an example. Surprisingly it is not java.lang.Object that I'm trying to hide but the stax api in java 6. I need to do so because of the notorious fault in

PHP on Tomcat?

2010-08-27 Thread michel
I have tried running PHP using Quercus, and I may have screwed it up but it worked poorly, with some of the PHP code not being interpreted, instead showing up on the wepage as text. I have also seen different PHP/Java bridge implementation, but just looking at how to set one of them up had me