Re: tomcat 7 slow to deploy web applications on m1 mac

2022-01-04 Thread Robert J. Carr
On Tue, Jan 4, 2022 at 2:50 PM Mark Thomas wrote: > > > On 04/01/2022 19:23, Robert J. Carr wrote: > > I've been using tomcat for many years but unfortunately I'm stuck on > > version 7 (long story). I recently picked up a new workstation, an Apple > > M1 MacBook (

Re: tomcat 7 slow to deploy web applications on m1 mac

2022-01-04 Thread Robert J. Carr
On Tue, Jan 4, 2022 at 2:50 PM Mark Thomas wrote: > > On 04/01/2022 19:23, Robert J. Carr wrote: > > I've been using tomcat for many years but unfortunately I'm stuck on > > version 7 (long story). I recently picked up a new workstation, an Apple > > M1 MacBook (M1

tomcat 7 slow to deploy web applications on m1 mac

2022-01-04 Thread Robert J. Carr
I've been using tomcat for many years but unfortunately I'm stuck on version 7 (long story). I recently picked up a new workstation, an Apple M1 MacBook (M1 Max - macOS 12.1), and I installed the ARM version of Azul Zulu (1.8.0_312), and by all accounts everything is really fast, as you'd expect.

Re: inconsistency with session persistence

2018-10-24 Thread Robert J. Carr
Hi Mark- Thanks again for the response. I fixed the credential handler config, it just had a superfluous attribute, so the WARNING went away and as you predicted didn't change the session outcome. Now when stopping and starting tomcat I'm not seeing any log higher than an INFO, it is appears to

Re: inconsistency with session persistence

2018-10-24 Thread Robert J. Carr
Hi Mark- Thanks for the response. > > * if the application is undeployed and redeployed (while the server > >remains running) a new session is silently generated, and any contents > >disappear, but the user maintains her authentication > > As expected. Redeploy (undeploy+deploy) != reload

Re: inconsistency with session persistence

2018-10-23 Thread Robert J. Carr
Actually, there's a small correction to my session persistence description from before. From the doc I referenced here: https://tomcat.apache.org/tomcat-8.5-doc/config/manager.html#Special_Features It says: > Whenever Apache Tomcat is shut down normally and restarted, or when an application

inconsistency with session persistence

2018-10-23 Thread Robert J. Carr
I've read around the docs and various help sites trying to figure this out, by my situation isn't matching anything I've read, so looking for a little extra help. Here's my config: [tomcat 8.5.24 | java 8.0 | macos 10.14] According to here:

Re: capturing response output in filter

2018-01-29 Thread Robert J. Carr
On Mon, Jan 29, 2018 at 9:27 AM, Mark Thomas <ma...@apache.org> wrote: > > On 29/01/18 17:19, Robert J. Carr wrote: > > I have a Filter that uses the output stream from the response of the > > servlet in the chain. In order to do this I create a custom response >

capturing response output in filter

2018-01-29 Thread Robert J. Carr
I have a Filter that uses the output stream from the response of the servlet in the chain. In order to do this I create a custom response wrapper that has a custom servlet output stream. This works fine, but in moving to a newer Java EE API there have been a couple new (abstract) methods added

tomcat version question

2018-01-25 Thread Robert J. Carr
Hello. There is a "which version" page on the main site which is really useful, and it lists all the versions of the various specs related to the version of tomcat, but a really important one IMO that is missing is the Java EE version, so I can look up the api docs. Is there a reason why this is

Re: roles stripped when using login() in tomcat 8.5 but not 8.0

2018-01-24 Thread Robert J. Carr
On Tue, Jan 23, 2018 at 1:03 PM, Robert J. Carr <rjc...@gmail.com> wrote: > On Tue, Jan 23, 2018 at 9:54 AM, Konstantin Kolinko < > knst.koli...@gmail.com> wrote: > >> 2018-01-22 11:25 GMT+03:00 Robert J. Carr <rjc...@gmail.com>: >> > Hi Mark, everyon

Re: roles stripped when using login() in tomcat 8.5 but not 8.0

2018-01-23 Thread Robert J. Carr
On Tue, Jan 23, 2018 at 9:54 AM, Konstantin Kolinko <knst.koli...@gmail.com> wrote: > 2018-01-22 11:25 GMT+03:00 Robert J. Carr <rjc...@gmail.com>: > > Hi Mark, everyone- > > > > I've constructed a sample app of ~5 files. The code is bundled in the > jar &

Re: roles stripped when using login() in tomcat 8.5 but not 8.0

2018-01-22 Thread Robert J. Carr
Please let me know if you have any questions. Thanks again for the help! Robert (Note: I ripped this code from a larger codebase, so please don't hold me to the strictest coding standards :) ) On Fri, Jan 19, 2018 at 12:37 AM, Robert J. Carr <rjc...@gmail.com> wrote: > > OK, thanks

Re: roles stripped when using login() in tomcat 8.5 but not 8.0

2018-01-19 Thread Robert J. Carr
OK, thanks Mark, I'll try to come up with a test plan, but I'm seriously pressed for time as this has eaten two full days. Thanks again for the help! On Fri, Jan 19, 2018 at 12:14 AM, Mark Thomas <ma...@apache.org> wrote: > On 18/01/18 22:03, Robert J. Carr wrote: > >

Re: roles stripped when using login() in tomcat 8.5 but not 8.0

2018-01-19 Thread Robert J. Carr
In my last (long) email I described how adding a BASIC login-config changes things and the roles are no longer getting stripped when using login() (even when never triggering a basic prompt). I figured I'd use this as a workaround until I figure out what is really going wrong. However, now I've

roles stripped when using login() in tomcat 8.5 but not 8.0

2018-01-18 Thread Robert J. Carr
(Bear with me as there are a lot of details; I'll try to be as clear as possible) I've been setting up a simple application in tomcat 8.0 where some resources are protected but others aren't. I want to login using AJAX instead of FORM or BASIC so I don't have any login-config specified in my

oauth guidance

2018-01-01 Thread Robert J. Carr
I'm looking to use some kind of combined realm where I can authenticate (and authorize) users both using the built-in login-config and externally using oauth. Ideally, in both cases, I'd be able to have access to roles, but this isn't a necessity. You see this sort of thing a lot now, where you

Re: Configuring DIGEST auth for manager

2017-12-08 Thread Robert J. Carr
Hi Philippe- I'm new to the list, and didn't see the previous response either, but I just did this recently do a similar config so I might have some guidance. Where you have algorithm="*SHA-256*", for digest.sh too, you shouldn't need the asterisks. Why are you using those? > Set the last part

Re: Is it possible to externally authenticate using OAuth?

2017-12-08 Thread Robert J. Carr
Hi Mark- Thanks for the quick reply and I'll look into Authenticators. Since you suggest 8.5.x, does that mean I was on the right track with JASPIC? Thanks again! Robert On Fri, Dec 8, 2017 at 12:26 AM, Mark Thomas <ma...@apache.org> wrote: > On 08/12/17 07:08, Robert J. C

Is it possible to externally authenticate using OAuth?

2017-12-07 Thread Robert J. Carr
[tomcat 8, java 8, ubuntu xenial] I have setup security constraints that allow certain resources to only be accessed by authorized users. The users are authenticated using either BASIC or FORM, where a username and password is provided, and this works great. However, I'd also like to allow users

strangeness with MemoryUserDatabase

2014-11-19 Thread Robert J. Carr
Yesterday I asked a question about using tomcat authorization with httpd authentication. Here's the subject: httpd authentication with tomcat authorization. I'm still awaiting a response, but I thought I'd come up with a solution anyway. I've got something working, but wanted to dig a bit

httpd authentication with tomcat authorization

2014-11-18 Thread Robert J. Carr
I have a setup where httpd is doing my (basic) authentication but I need tomcat (6, if it matters) to manage the roles and do the authorization. The link between httpd and tomcat is through the ajp connector and on this connector's config I've added: tomcatAuthentication=false This passes

DefaultServlet, WebDAV, and Permissions

2007-08-15 Thread Robert J. Carr
I sent this out last week and didn't get any responses ... just wanted to make sure it hit the list and didn't get dropped somewhere. Any help is appreciated! I'm using the WebDAV servlet in tomcat 5.5.22 and I'm having some issues that I was hoping I could get sorted out. First of all, I'm

WebDAV, DefaultServlet, and Permissions

2007-08-09 Thread Robert J. Carr
I'm using the WebDAV servlet in tomcat 5.5.22 and I'm having some issues that I was hoping I could get sorted out. First of all, I'm seeing reams and reams of these in the logs: Aug 8, 2007 5:15:30 PM org.apache.catalina.core.ApplicationContext log INFO: webdav: DefaultServlet.doPut: couldn't

Re: CGIServlet

2007-07-02 Thread Robert J. Carr
Both. You've made the incorrect assumption that made visible means made visible to web applications, which is incorrect. A classloader makes classes and resources visible to whoever has access to the classloader; webapps do not have access to the Catalina classloader. ... Tomcat is the one

Re: CGIServlet

2007-06-30 Thread Robert J. Carr
in /server/lib. So, in summary, you're saying the only way I can get CGIServlet defined in a single webapp is to leave servlets-cgi.jar in /server/lib and require an administrator to rename it? On 6/30/07, Mark Thomas [EMAIL PROTECTED] wrote: Robert J. Carr wrote: To do this, I simply put the servlet

Re: WebdavServlet

2007-06-30 Thread Robert J. Carr
with anything. The 'edit' folder would just be implied ... both normal users and system admin would still be exposed to the whole of the webapp, right? On 6/30/07, Mark Thomas [EMAIL PROTECTED] wrote: Robert J. Carr wrote: I'd like to add the webdav servlet to my own web application. I can do

CGIServlet

2007-06-29 Thread Robert J. Carr
I'd like to use some basic CGI in my webapp but I don't want to rely on server admins to set it up per the directions of the how to (found at http://tomcat.apache.org/tomcat-5.5-doc/cgi-howto.html). When I follow those directions, everything works fine, however I'd like to put the CGIServlet

WebdavServlet

2007-06-29 Thread Robert J. Carr
I'd like to add the webdav servlet to my own web application. I can do this and it works, but it treats the root of my webapp as the root of the dav share. I would like to have my webapp do more than webdav, so I was hoping I could specify that only a portion of my webapp is visible to dav. I