RE: Why use a Web Server over Tomcat?

Hi everyone! David, imagine that you are developing a web application to provide services like internet banking. What network architecture would you propose? How will you implement a DMZ? Probably you put a firewall between Web Server and Database Server!! Or not? Regards, Bárbara Vieira

RE: Why use a Web Server over Tomcat?

Hi Mikolaj! Thanks for your help. But my question isn't just about design a DMZ. It's much more. And answering your question: yes, google is not enough. There are certain questions that google doesn't answer. Regards, Bárbara Vieira -Original Message- From: Mikolaj Rydzewski [mailto

RE: Why use a Web Server over Tomcat?

you mean? If you have a Tomcat inside a DMZ, usually we have one firewall, that separates internet from intranet, i.e., the firewall filters requests that comes from de outside. Isn't that? Thanks, Regards, Bárbara Vieira -Original Message- From: Alan Chaney [mailto:[EMAIL PROTECTED

Why use a Web Server over Tomcat?

a Apache Server over Tomcat or an IIS server over Tomcat? What kind of security am I providing doing this? My research is in the beginning and the documentation about it is vague, so I apologize if I’m saying something wrong. Regards, Bárbara Vieira

RE: Why use a Web Server over Tomcat?

. Should I have some Web Server over Tomcat? I think that if I have an Apache Server over Tomcat, it causes an overhead, because all requests sent to Apache, must be sent to Tomcat. Regards, Bárbara Vieira -Original Message- From: Diego [mailto:[EMAIL PROTECTED] Sent: terça-feira, 8

RE: SSL Session expires every request

and everything works fine!! Thanks any away :-) Regards from Braga, Portugal Bárbara Vieira -Original Message- From: Caldarale, Charles R [mailto:[EMAIL PROTECTED] Sent: sábado, 1 de Dezembro de 2007 18:46 To: Tomcat Users List Subject: RE: SSL Session expires every request From: Bárbara Vieira

RE: SSL Session expires every request

idea of what's happen?! Thanks, Regards from Braga, Portugal Bárbara Vieira -Original Message- From: Caldarale, Charles R [mailto:[EMAIL PROTECTED] Sent: sábado, 1 de Dezembro de 2007 00:30 To: Tomcat Users List Subject: RE: SSL Session expires every request From: Bárbara Vieira [mailto

RE: SSL Session expires every request

Subject: Re: SSL Session expires every request what session are you talking about, the HTTP session or the actual SSL session? Filip Bárbara Vieira wrote: Hi there!! I have a problem with SSL Session in Tomcat. I’m using CLIENT_CERT authentication to authenticate users in my web

RE: SSL Session expires every request

originale - Da: Bárbara Vieira [EMAIL PROTECTED] A: Tomcat Users List users@tomcat.apache.org Inviato: Venerdì 30 novembre 2007, 23:26:39 Oggetto: RE: SSL Session expires every request Hi carlo!! Yes, it validates the certs. The certs are valid :) When the application is running all pages

RE: SSL Session expires every request

request what session are you talking about, the HTTP session or the actual SSL session? Filip Bárbara Vieira wrote: Hi there!! I have a problem with SSL Session in Tomcat. I’m using CLIENT_CERT authentication to authenticate users in my web application. But, the session expires at every

RE: SSL Session expires every request

PROTECTED] Sent: sexta-feira, 30 de Novembro de 2007 18:47 To: Tomcat Users List Subject: Re: SSL Session expires every request but the certs are valids? - Messaggio originale - Da: Bárbara Vieira [EMAIL PROTECTED] A: Tomcat Users List users@tomcat.apache.org Inviato: Venerdì 30 novembre

RE: SSL Session expires every request

List Subject: Re: SSL Session expires every request which value is session-timeout assgined to in web.xml? M-- - Original Message - From: Bárbara Vieira [EMAIL PROTECTED] To: 'Tomcat Users List' users@tomcat.apache.org Sent: Friday, November 30, 2007 12:22 PM Subject: SSL Session expires

SSL Session expires every request

this problem L If somebody can help, I really appreciate that. Thanks for everything, Regards from Braga, Portugal Bárbara Vieira

RE: Tomcat's container architecture - Authenticator

of security this process provides?! Was I cleat enough? Thanks for everything, Regards from Braga, Portugal Bárbara Vieira From: Carlo Politi [mailto:[EMAIL PROTECTED] Sent: terça-feira, 27 de Novembro de 2007 23:49 To: [EMAIL PROTECTED] Subject: Re: Tomcat's container architecture

RE: Tomcat's container architecture - Authenticator

Hi Carlo!! In fact I have to develop a new one and at the same time study and analyze Authenticator package code. Why are you asking? -Original Message- From: Carlo Politi [mailto:[EMAIL PROTECTED] Sent: quarta-feira, 28 de Novembro de 2007 16:52 To: Tomcat Users List Subject: Re:

RE: Tomcat's container architecture - Authenticator

' Subject: Re: Tomcat's container architecture - Authenticator -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Barbara, Bárbara Vieira wrote: My question is: why we are putting the Principal in the Request? So that request.getUserPrincipal() will return a value. Why we can’t just authenticate

Tomcat's container architecture - Authenticator

a little bit confused about that J Thanks for everything, Regards from Braga, Portugal, Bárbara Vieira

MemoryRealm question

trying to implement my own realm, but using that MemoryRealm as a model. However when I run my program with my own realm, the principals variable is null. If anyone can help, I appreciate. Regards from Braga, Portugal Bárbara Vieira

Different Realms with Differents Authentications Mecanisms

on differents authentications mechanisms in the same application? Regards from Braga, Portugal Bárbara Vieira

Difference between org.apacha.catalina.Session and javax.servlet.http.HttpSession

have one session scope. I know that HttpSession is available from Session object – session.getSession(). Another question about it is that, when I invalidate the HttpSession, am I invalidating Session object too? Thanks for help me, Regards from Braga, Portugal Bárbara Vieira

SSL session is the same HTTP session and is the same Servlet session

) - I turn off the network – the SSL session is broken(I suppose that is what’s happen) - When I turn on the network, the user is authenticated because the session on server didn’t end(there wasn’t a timeout yet) This is a big problem. How can I control this?! Thanks, Bárbara