A pool question

2013-02-25 Thread Jukka Ruohonen
Hello. A question related to pools. Background: a big application in which it is preferable to enforce different roles for different databases and tables. This implies that there are different user names and passwords for different connections. As I understand, there are two options for

Tomcat6 j_security_check any parameter / sessions variable on failure?

2013-02-25 Thread Tanmoy Chatterjee
Hello, Tech Stack: Tomcat: 6.0.35 Java: 1.6.0_18 OS: RHEL 5.3 I am using j_security_check (JNDIRealm - LDAP authentication). On failure I am sending the user to a common error.jsp in the application. On successful authentication of-course the page requested is displayed.

Tomcat(7.0.35) vulnerability or issues

2013-02-25 Thread dkumar
Dear All, We are upgrading the tomcat from version 6.0.18 to 7.0.35 Operating System Version : HP-UX 11.31 Please inform us if there are any known issues or any vulnerability on latest tomcat version of 7.0.35. Thanks and Regards Deepak Kumar Disclaimer and confidentiality clause - This

RE: Question regarding JNDIRealm - tomcat 6.0.35

2013-02-25 Thread Tanmoy Chatterjee
We are not using openldap but eDirectory. Unfortunately we do not have access to the ldap configurations...only information we have is that after about 2 mins of idle connection, ldap drops the same from its side. Bit if we see in app server side using netstat, we can still see the same

Re: tomcat7 tomcat6 session replication

2013-02-25 Thread Mark Thomas
On 25/02/2013 04:24, Son Nguyen Xuan wrote: I want to know how can I have the session replication working between tomcat6 tomcat7 under JRE7 That is not supported. It might work in some circumstances. Mark - To unsubscribe,

Re: tomcat7 tomcat6 session replication

2013-02-25 Thread Son Nguyen Xuan
thanks for your answer It might work in some circumstances. do you mean it will work with some modification?? do you have any suggestion for those modification? thank you very much 2013/2/25 Mark Thomas ma...@apache.org On 25/02/2013 04:24, Son Nguyen Xuan wrote: I want to know how can I

Re: Question regarding JNDIRealm - tomcat 6.0.35

2013-02-25 Thread André Warnier
Tanmoy Chatterjee wrote: We are not using openldap but eDirectory. Unfortunately we do not have access to the ldap configurations...only information we have is that after about 2 mins of idle connection, ldap drops the same from its side. Bit if we see in app server side using netstat, we can

RE: Question regarding JNDIRealm - tomcat 6.0.35

2013-02-25 Thread Tanmoy Chatterjee
As I said, we do not have much visibility / access on the LDAP side to do a deep dive. Neither am I a networking expert but some more info on what actually happens (application - netstat log) when I say...tomcat(or JVM as you say) keeps on trying the 'broken' connection.. tcp0 81

Re: Does windows authentication works on Tomcat under Linux.

2013-02-25 Thread André Warnier
Denis wrote: Hello, I want to use Tomcat's Windows Authentication http://tomcat.apache.org/tomcat-7.0-doc/windows-auth-howto.html#Third_party_libraries feature to have a reliable domain user name via HTTPServletRequest.getRemoteUser() within my servlet. Questions: 1) Is

Re: Does windows authentication works on Tomcat under Linux.

2013-02-25 Thread Mark Thomas
On 25/02/2013 10:48, André Warnier wrote: Denis wrote: Hello, I want to use Tomcat's Windows Authentication http://tomcat.apache.org/tomcat-7.0-doc/windows-auth-howto.html#Third_party_libraries feature to have a reliable domain user name via HTTPServletRequest.getRemoteUser() within my

Re: Does windows authentication works on Tomcat under Linux.

2013-02-25 Thread Denis
It will be helpful for those who don't have time to try-and-fail. On 2/25/2013 2:10 PM, Mark Thomas wrote: On 25/02/2013 10:48, André Warnier wrote: Denis wrote: Hello, I want to use Tomcat's Windows Authentication

Re: Tomcat(7.0.35) vulnerability or issues

2013-02-25 Thread Ognjen Blagojevic
dkumar, On 25.2.2013 10:02, dku...@ccilindia.co.in wrote: We are upgrading the tomcat from version 6.0.18 to 7.0.35 Operating System Version : HP-UX 11.31 Please inform us if there are any known issues or any vulnerability on latest tomcat version of 7.0.35. 1. Good you are upgrading,

Re: Question regarding JNDIRealm - tomcat 6.0.35

2013-02-25 Thread Ognjen Blagojevic
André, On 25.2.2013 10:34, André Warnier wrote: So, on the face of it, there seems to be a contradiction between you saying on the one hand that the LDAP server closes the connection, and on the other hand that netstat shows the connection still being active. TCP connection is established

Re: Question regarding JNDIRealm - tomcat 6.0.35

2013-02-25 Thread André Warnier
Ognjen Blagojevic wrote: André, On 25.2.2013 10:34, André Warnier wrote: So, on the face of it, there seems to be a contradiction between you saying on the one hand that the LDAP server closes the connection, and on the other hand that netstat shows the connection still being active. TCP

Re: Webapp reload corrupts Tomcat

2013-02-25 Thread Daniel Mikusa
On Feb 24, 2013, at 9:27 PM, Kirill Ilyukhin wrote: On 25.02.2013 2:10, Daniel Mikusa wrote: On Feb 24, 2013, at 11:48 AM, Kirill Ilyukhin wrote: On Feb 22, 2013, at 22:32 , Daniel Mikusa dmik...@vmware.com wrote: On Feb 22, 2013, at 12:09 AM, Kirill Ilyukhin wrote: Hi! I have 5

Re: A pool question

2013-02-25 Thread Daniel Mikusa
On Feb 25, 2013, at 3:52 AM, Jukka Ruohonen wrote: Hello. A question related to pools. Background: a big application in which it is preferable to enforce different roles for different databases and tables. This implies that there are different user names and passwords for different

Re: Question regarding JNDIRealm - tomcat 6.0.35

2013-02-25 Thread Ognjen Blagojevic
André, On 25.2.2013 14:53, André Warnier wrote: Yes, but as soon as Tomcat would try to write to (or read from) that connection, it would immediately get an error, no ? So to say that in the meantime tomcat keeps on trying one of these connections doesn't seem to fit, or ? In regular

[ANN] Apache Tomcat Maven plugin 2.1

2013-02-25 Thread Olivier Lamy
Hi, The Apache Tomcat is pleased to announce the release of the 2.1 version. This plugin can used to run your war project inside an embeded Apache Tomcat and to deploy your project to a running Apache Tomcat instance. Documentation available: http://tomcat.apache.org/maven-plugin-2.1/index.html

Nessus scan claims vulnerability in Tomcat 6

2013-02-25 Thread Robert Klemme
Hi there, I have been confronted with a Nessus scan result which claims vulnerability to exploit TLS CRIME. Plugin 62565 allegedly has found this and the report states: The remote service has one of two configurations that are known to be required for the CRIME attack: - SSL / TLS compression is

JAVA_OPTS catalina.bat vs tomcat7w.exe

2013-02-25 Thread Leo Donahue - RDSA IT
If I've asked this question before, my apologies. What is the difference between setting Java_OPTS in catalina.bat vs using the tomcat7w.exe with -D options in the Java Tab if you installed Tomcat as a windows service? Leo

RE: JAVA_OPTS catalina.bat vs tomcat7w.exe

2013-02-25 Thread Caldarale, Charles R
From: Leo Donahue - RDSA IT [mailto:leodona...@mail.maricopa.gov] Subject: JAVA_OPTS catalina.bat vs tomcat7w.exe What is the difference between setting Java_OPTS in catalina.bat vs using the tomcat7w.exe with -D options in the Java Tab if you installed Tomcat as a windows service? The

RE: JAVA_OPTS catalina.bat vs tomcat7w.exe

2013-02-25 Thread Leo Donahue - RDSA IT
-Original Message- From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] Subject: RE: JAVA_OPTS catalina.bat vs tomcat7w.exe From: Leo Donahue - RDSA IT [mailto:leodona...@mail.maricopa.gov] Subject: JAVA_OPTS catalina.bat vs tomcat7w.exe What is the difference between

RE: JAVA_OPTS catalina.bat vs tomcat7w.exe

2013-02-25 Thread Leo Donahue - RDSA IT
-Original Message- From: Leo Donahue - RDSA IT [mailto:leodona...@mail.maricopa.gov] Subject: RE: JAVA_OPTS catalina.bat vs tomcat7w.exe If running Tomcat 7.0.37 as a windows service, and using the tomcat7w.exe to set the options, are these wrong? Java Options:

RE: JAVA_OPTS catalina.bat vs tomcat7w.exe

2013-02-25 Thread Caldarale, Charles R
From: Leo Donahue - RDSA IT [mailto:leodona...@mail.maricopa.gov] Subject: RE: JAVA_OPTS catalina.bat vs tomcat7w.exe If running Tomcat 7.0.37 as a windows service, and using the tomcat7w.exe to set the options, are these wrong? -Dcatalina.base=C:\ApacheTomcat\apache-tomcat-7.0.37

Re: JAVA_OPTS catalina.bat vs tomcat7w.exe

2013-02-25 Thread Howard W. Smith, Jr.
On Mon, Feb 25, 2013 at 2:42 PM, Caldarale, Charles R chuck.caldar...@unisys.com wrote: From: Leo Donahue - RDSA IT [mailto:leodona...@mail.maricopa.gov] Subject: RE: JAVA_OPTS catalina.bat vs tomcat7w.exe -Dcom.sun.management.jmxremote=true -Dcom.sun.management.jmxremote.port=9090

RE: JAVA_OPTS catalina.bat vs tomcat7w.exe

2013-02-25 Thread Leo Donahue - RDSA IT
-Original Message- From: Howard W. Smith, Jr. [mailto:smithh032...@gmail.com] Subject: Re: JAVA_OPTS catalina.bat vs tomcat7w.exe Chuck, I have similar settings, and so far, so good (no abuse/attack), and I recently re-added jmx settings in tomcat7w.exe for my app...just to routinely

Re: JAVA_OPTS catalina.bat vs tomcat7w.exe

2013-02-25 Thread Howard W. Smith, Jr.
On Mon, Feb 25, 2013 at 3:08 PM, Howard W. Smith, Jr. smithh032...@gmail.com wrote: can you please clarify 'the server is open to abuse from pretty much anyone who can reach it'? can you refer to me a blog or an article that discusses app abuse via jmx? i have hardware firewall in place and

RE: JAVA_OPTS catalina.bat vs tomcat7w.exe

2013-02-25 Thread Caldarale, Charles R
From: Howard W. Smith, Jr. [mailto:smithh032...@gmail.com] Subject: Re: JAVA_OPTS catalina.bat vs tomcat7w.exe can you please clarify 'the server is open to abuse from pretty much anyone who can reach it'? The key phrase is anyone who can reach it. If everyone within your firewall is

RE: JAVA_OPTS catalina.bat vs tomcat7w.exe

2013-02-25 Thread Howard W. Smith, Jr.
On Feb 25, 2013 5:41 PM, Caldarale, Charles R chuck.caldar...@unisys.com wrote: From: Howard W. Smith, Jr. [mailto:smithh032...@gmail.com] Subject: Re: JAVA_OPTS catalina.bat vs tomcat7w.exe can you please clarify 'the server is open to abuse from pretty much anyone who can reach it'?

Re: Nessus scan claims vulnerability in Tomcat 6

2013-02-25 Thread Mark Thomas
On 25/02/2013 08:42, Robert Klemme wrote: Hi there, I have been confronted with a Nessus scan result which claims vulnerability to exploit TLS CRIME. Plugin 62565 allegedly has found this and the report states: The remote service has one of two configurations that are known to be required for

Re: Tomcat wont allow me to create files

2013-02-25 Thread Elias Kopsiaftis
Hi Ben, I didnt mention that but I did check that write permissions were on. Currently I dont have a log4j configuration. I am just trying to get it to work. On Mon, Feb 25, 2013 at 8:39 PM, Ben Stringer b...@burbong.com wrote: On 26/02/2013, at 12:14 PM, Elias Kopsiaftis yemi...@gmail.com

tomcat-7.0.35-windows-x86 ON 64 bit UNIX

2013-02-25 Thread dkumar
Hi, I have downloaded apache-tomcat-7.0.35-windows-x86.zip and runiing it on 64 bit UNIX machine and it is working fine. Is it OK to run x86 setup on 64 bit UNIX machine? Please reply. Server version: Apache Tomcat/7.0.35 Server built: Jan 10 2013 10:52:49 Server number: 7.0.35.0 OS Name: