Re: explanation of resource-ref in web.xml

I have tried google, but this links don't explain me, eg 4 states resource-ref res-ref-namejdbc/primaryDB/res-ref-name jndi-namejdbc/PrimaryDBInTheContainer/jndi-name/resource-ref I have already tried it, and it doesn't work. In my opinion resource-ref is useless under tomcat, or better

Re: explanation of resource-ref in web.xml

2013/4/18 Jakub 1983 jjaku...@gmail.com: I have tried google, but this links don't explain me, eg 4 states resource-ref res-ref-namejdbc/primaryDB/res-ref-name jndi-namejdbc/PrimaryDBInTheContainer/jndi-name/resource-ref I have already tried it, and it doesn't work. In my opinion

Re: problems with import in jsp file

2013/4/18 caio lima caiore...@gmail.com: hi, sorry for my english. i just publish my web site made with java, jsp, and i'm stuck with a problem. my .class files is in the directory WEB-INF/classes/... and i have the class Diversos in WEB-INF/classes/ferramentas/Diversos.class when i use

Re: explanation of resource-ref in web.xml

Konstantin, thx for your reply. Do you know name of such a tool and application server which offers configuration of database connection on basis of web.xml.resource-ref ? regards Jakub On Thu, Apr 18, 2013 at 11:05 AM, Konstantin Kolinko knst.koli...@gmail.com wrote: 2013/4/18 Jakub 1983

Re: multi-tenant web app

Chris / Tomcat Users This can already be done with the common or shared classloaders (which were removed by default because nobody could make head or tail of how to use them properly). They can be trivially re-enabled using conf/catalina.properties. I found some vague references to this in

Re: context.xml.Resource and web.xml.resource-ref

On 17/04/2013 23:40, Jakub 1983 wrote: what are differences/similarities and dependencies between Environment name... Resource name=... ResourceLink name=... from context.xml and resource-ref resource-ref-link from web.xml ?

Tomcat security vulnerability/ or security config issue

Howdy, I have a issue with Tomcat security, please find the spec below: Server version: Apache Tomcat/6.0.35 Server built: Nov 28 2011 11:20:06 Server number: 6.0.35.0 OS Name:SunOS OS Version: 5.10 Architecture: x86 JVM Version:1.6.0_33-b03 JVM Vendor: Sun

Re: Tomcat security vulnerability/ or security config issue

On 18/04/2013 14:14, Wen Liu wrote: Howdy, I have a issue with Tomcat security, please find the spec below: Server version: Apache Tomcat/6.0.35 Server built: Nov 28 2011 11:20:06 Server number: 6.0.35.0 OS Name:SunOS OS Version: 5.10 Architecture: x86 JVM

Re: problems with import in jsp file

Hi, my index.jsp is inside webapps/ROOT i have the same folder structure in my local machine and it works. 2013/4/18 Konstantin Kolinko knst.koli...@gmail.com 2013/4/18 caio lima caiore...@gmail.com: hi, sorry for my english. i just publish my web site made with java, jsp, and i'm

Re: Tomcat security vulnerability/ or security config issue

If things are configured properly, web users won't be able to see anything outside your app hierarchy, so something clearly isn't set up properly. On 4/18/2013 9:14 AM, Wen Liu wrote: Howdy, I have a issue with Tomcat security, please find the spec below: Server version: Apache

RE: multi-tenant web app

-Original Message- From: Rainer Frey [mailto:rainer.f...@inxmail.de] Sent: Thursday, April 18, 2013 12:51 AM To: Tomcat Users List Subject: Re: multi-tenant web app On 12.04.2013, at 13:08, Jamie ja...@mailarchiva.com wrote: Greetings! I would like some advice with

RE: Tomcat security vulnerability/ or security config issue

From: David kerber [mailto:dcker...@verizon.net] Subject: Re: Tomcat security vulnerability/ or security config issue If things are configured properly, web users won't be able to see anything outside your app hierarchy, so something clearly isn't set up properly. This has little to do

Re: server.xml shutdown port command string

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Chuck, On 4/17/13 11:34 PM, Caldarale, Charles R wrote: From: Leo Donahue - RDSA IT [mailto:leodona...@mail.maricopa.gov] Subject: RE: server.xml shutdown port command string If I am the only person deploying web apps (that I have

Re: Apache HTTPD + Tomcat restarts

Hi André, Hi all, On Mon, Apr 15, 2013 at 7:02 PM, André Warnier a...@ice-sa.com wrote: Well, you wrote that you wanted to know our thoughts. Yes or No would not have been an appropriate response to that, so we elaborated a bit. ;-) Yes, true. Thank you! I am a bit unsure what's

Re: multi-tenant web app

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jamie, On 4/18/13 6:42 AM, Jamie wrote: Chris / Tomcat Users This can already be done with the common or shared classloaders (which were removed by default because nobody could make head or tail of how to use them properly). They can be

Re: Tomcat access log reveals hack attempt: HEAD /manager/html HTTP/1.0 404

chris derham wrote: Hi. Long and thoughtful post. Thanks. just hope it helps move the discussion forward Say you have a botnet composed of 100 bots, and you want (collectively) to have them scan 100,000 hosts in total, each one for 30 known buggy URLs. These 30 URLs are unrelated to

Form Authentication

This is driving me crazy! I have configured from authentication in my web.xml with a number of security constraints. None of the constraints map to any CSS files. However, when I bring up the application the CSS files are hitting the authentication. Since my form has styling this is a problem

Re: Form Authentication

Hello, Without knowing how are your security-constraint, and where are the css file, I don't think anyone could help you. Did you try as a last measure to force css file to pass through the authentification, something as : security-constraint

Re: Form Authentication

Thank you for your reply. I figured it out...someone had put a security constrain on / which meant everything ended up passing through the form authenticator. Once I removed the constraint everything started working. So yay for me. = The

Access-log ordering

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, I suspect I already know the answer to this, but I wanted to double-check. Requests are logged to the access log in the order in which they were accepted from the connector, right? Or, if they can't be guaranteed to be

Re: resource-ref in web.xml

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jakub, On 4/17/13 9:22 PM, Jakub 1983 wrote: can I define database connection only in web.xml, without using context.xml files ? can I pass database url, login and password into resource-ref ? when I define database conn in context.xml,

Re: Errors when trying to configure SSL for Apache Tomcat 7

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 James, On 4/17/13 4:10 PM, James Snider wrote: I have reinstalled Apache Tomcat with the tcnative library and I am not receiving the SSL certificate errors as seen earlier. Good. But I am now receiving the following errors upon startup: Not

Re: Access-log ordering

On 18/04/2013 22:58, Christopher Schultz wrote: So, this is my due diligence to determine if, in addition to the mountain of evidence we otherwise have, Tomcat does in fact log requests in the order in which they are received. Tomcat logs requests in the order they complete (so it can log the

Re: conf/Catalina/localhost/myWebApp.xml context file disappears

On 17/04/2013 23:46, Jakub 1983 wrote: I call ant task target name=deploy-war depends=create-war copy file=${target.dir}/${war.file} todir=${deploy.dir}/ /target application is called jdbc.war, and I create jdbc.xml in conf/Catalina/localhost/ after I deploy war and

Tomcat 7.0 spring web applcaiton context - Fedora 17

Hi, After spending days I am writing my problem on this forum. The problem is when I undeploy a webapp or shutdown tomcat, spring WebApplicationContext is closed and spring singleton beans destroyed before webapp Servlet's destroy() method is called. This leads me to

security-role-ref doesn't work

my tomcat users: role rolename=tomcat/ role rolename=role1/ role rolename=manager-gui/ role rolename=admin/ user username=tomcat password=tomcat roles=tomcat,manager-gui,admin/ user username=both password=tomcat roles=tomcat,role1/ user username=role1 password=tomcat roles=role1/

Re: Tomcat 7.0 spring web applcaiton context - Fedora 17

On 4/18/2013 6:35 PM, Khurram Raza wrote: Hi, After spending days I am writing my problem on this forum. The problem is when I undeploy a webapp or shutdown tomcat, spring WebApplicationContext is closed and spring singleton beans destroyed before webapp Servlet's destroy() method is called.

Re: Access-log ordering

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 4/18/13 6:30 PM, Mark Thomas wrote: On 18/04/2013 22:58, Christopher Schultz wrote: So, this is my due diligence to determine if, in addition to the mountain of evidence we otherwise have, Tomcat does in fact log requests in the

RE: Tomcat 7.0 spring web applcaiton context - Fedora 17

-Original Message- From: Mark Eggers [mailto:its_toas...@yahoo.com] Sent: Thursday, April 18, 2013 9:55 PM To: users@tomcat.apache.org Subject: Re: Tomcat 7.0 spring web applcaiton context - Fedora 17 On 4/18/2013 6:35 PM, Khurram Raza wrote: Hi, After spending days I am writing

Re: Tomcat 7.0 spring web applcaiton context - Fedora 17

On 4/18/2013 8:20 PM, Khurram Raza wrote: -Original Message- From: Mark Eggers [mailto:its_toas...@yahoo.com] Sent: Thursday, April 18, 2013 9:55 PM To: users@tomcat.apache.org Subject: Re: Tomcat 7.0 spring web applcaiton context - Fedora 17 On 4/18/2013 6:35 PM, Khurram Raza wrote: