Re: Authentication without Authorization ( JNDI Realm )

2009-12-02 Thread Robert Koberg
On Dec 2, 2009, at 6:01 PM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chuck, On 12/2/2009 5:15 PM, Caldarale, Charles R wrote: From: Christopher Schultz [mailto:ch...@christopherschultz.net] Subject: Re: Authentication without Authorization ( JNDI Realm )

Re: Tomcat 6 and Apache2 VS Tomcat 6 alone

2009-11-24 Thread Robert Koberg
On Nov 24, 2009, at 3:09 AM, Peter Crowther wrote: 2009/11/24 TheGrailer ken...@gmail.com: The most compellig argument from the Apache2 and Tomcat 6-friend was indeed the static content part. http://tomcat.markmail.org/message/il33wqqjb2dok6xz might be illuminating - along with the

Re: Tomcat 6 and Apache2 VS Tomcat 6 alone

2009-11-24 Thread Robert Koberg
On Nov 24, 2009, at 4:12 AM, Pid wrote: On 24/11/2009 11:57, Robert Koberg wrote: On Nov 24, 2009, at 3:09 AM, Peter Crowther wrote: 2009/11/24 TheGrailerken...@gmail.com: The most compellig argument from the Apache2 and Tomcat 6-friend was indeed the static content part. http

Re: Tomcat 6 and Apache2 VS Tomcat 6 alone

2009-11-24 Thread Robert Koberg
On Nov 24, 2009, at 4:30 AM, Robert Koberg wrote: On Nov 24, 2009, at 4:12 AM, Pid wrote: On 24/11/2009 11:57, Robert Koberg wrote: On Nov 24, 2009, at 3:09 AM, Peter Crowther wrote: 2009/11/24 TheGrailerken...@gmail.com: The most compellig argument from the Apache2 and Tomcat 6

Re: [OT] Hammers and nails (was Re: A question about log-rotationon catalina.out)

2009-10-30 Thread Robert Koberg
On Oct 30, 2009, at 10:17 AM, Caldarale, Charles R wrote: From: Christopher Schultz [mailto:ch...@christopherschultz.net] Subject: Re: [OT] Hammers and nails (was Re: A question about log- rotationon catalina.out) Here's one Java can't do (without significant help): Write a command-line (no

Re: Display of velocity template emails in clients that might not display HTML

2009-08-28 Thread Robert Koberg
Date: Fri, 28 Aug 2009 11:02:31 -0400 Subject: Display of velocity template emails in clients that might not display HTML From: pradnya.gawa...@gmail.com To: users@tomcat.apache.org Hi, This is my second post about Velocity as I am using the Velocity templates for the first time. I am

Re: How do you handle 'rewrite queries' ?

2009-08-05 Thread Robert Koberg
Don't know if this is an option, but you can use Jersey: https://jersey.dev.java.net/ and something like: @Path(/users/{username}) public class UserResource { @GET @Produces(text/xml) public String getUser(@PathParam(username) String userName) { ... } } On Aug 5, 2009,

how to get realm name

2009-08-03 Thread Robert Koberg
Hi, I want to digest the users credentials the same way as Digest authentication: RealmBase.Digest(username + : + somehowGetRealm() + : + password, MD5, UTF-8); I have been looking through the code and API, but cannot find a way to get the realm name to perform the digest. How do you

Re: how to get realm name

2009-08-03 Thread Robert Koberg
On Aug 3, 2009, at 9:21 PM, Caldarale, Charles R wrote: From: Robert Koberg [mailto:r...@koberg.com] Subject: how to get realm name I have been looking through the code and API, but cannot find a way to get the realm name to perform the digest. snip/ Note that if you leave out the realm

Re: Caching rendered page - reducing hits to the backend?

2009-06-01 Thread Robert Koberg
On Jun 1, 2009, at 7:12 AM, Tim Funk wrote: Worrying is good. Making sure you have metrics is better. You can cache lots of different items such as - stuff from the database - parts of a rendered page - the entire page - any combination of above But it really depends on where the

Re: Caching rendered page - reducing hits to the backend?

2009-06-01 Thread Robert Koberg
On Jun 1, 2009, at 8:08 AM, Leon Rosenberg wrote: On Mon, Jun 1, 2009 at 1:37 PM, Robert Koberg r...@koberg.com wrote: On Jun 1, 2009, at 7:12 AM, Tim Funk wrote: The key is making sure you have the ability to log how long differnt things take. (And the ability to turn them on or off

Re: .html pages as .jsp pages

2009-05-14 Thread Robert Koberg
On May 14, 2009, at 4:02 PM, André Warnier wrote: Ken Bowen wrote: The point of dynamic jsp pages is to dynamically create pages on the fly based on information from the user. What's the point of using jsp to dynamically create pages offline that you only serve statically? Why not just

Re: .html pages as .jsp pages

2009-05-14 Thread Robert Koberg
On May 14, 2009, at 5:37 PM, Dola Woolfe wrote: Exactly right. I produce my static content programmatically. Many pages are too complex to be generated otherwise. Also, I get to write java not html. When I want to change a font, I do it in one place not 1000 places. well, that should be

Re: GlobalNamingResources outside of server.xml

2009-04-22 Thread Robert Koberg
On Apr 22, 2009, at 4:25 AM, André Warnier wrote: Allright, but I'm afraid this is still somewhat flying over my head, what we me not being /either/ a Java expert, /nor/ a Tomcat expert, / nor/ an XML expert. (What am I then doing on this list, one might ask). So, since everyone but

Re: GlobalNamingResources outside of server.xml

2009-04-22 Thread Robert Koberg
, at 5:41 AM, Robert Koberg wrote: On Apr 22, 2009, at 4:25 AM, André Warnier wrote: Allright, but I'm afraid this is still somewhat flying over my head, what we me not being /either/ a Java expert, /nor/ a Tomcat expert, /nor/ an XML expert. (What am I then doing on this list, one might

Re: GlobalNamingResources outside of server.xml

2009-04-21 Thread Robert Koberg
On Apr 21, 2009, at 7:02 PM, André Warnier wrote: André Warnier wrote: Mark Thomas wrote: André Warnier wrote: Mark Thomas wrote: Anthony J. Biacco wrote: I did end up trying it and it did work, I just didn't know if it was something that's frowned upon, or would for whatever reason was

Re: Lazy Virtual Hosting?

2009-03-12 Thread Robert Koberg
On Mar 12, 2009, at 12:18 PM, Mark Thomas wrote: Gregor Schneider wrote: Mark, I guess I didn't phrase properly since you seem to have misunderstood me: I want a *separation* of the hosts. Alias, as I understand it, helps to run multiple domains within the same IP-adress. I thought the

Re: RemoteAddrValve and RemoteHostValve

2009-02-27 Thread Robert Koberg
On Feb 27, 2009, at 9:28 PM, Zak Mc Kracken wrote: Hi all, I'd like to filter incoming requests with this criterion: if it's www.somewhere.com - OK else if it's 1.2.3.4 - OK else - KO Is it possible to do that by combining RemoteHostValve and RemoteAddrValve? How? I simply tried to write

Re: Authenticating Users

2009-02-22 Thread Robert Koberg
(function() { var doLogin = function() { var uname = doc.byId(name).toLowerCase(); var passw = doc.byId(password).toLowerCase(); //var digest = sha1.digest(uname + :My Realm: + passw); xhr.send(...); } return { login: function() { doLogin(); return false;

Re: TC6 ${CATALINA_HOME}/conf/web.xml Is this the place to constrain the mime type?

2009-02-06 Thread Robert Koberg
On Feb 6, 2009, at 10:20 AM, Dave Pawson wrote: 2009/2/6 Caldarale, Charles R chuck.caldar...@unisys.com: From: Dave Pawson [mailto:dave.paw...@gmail.com] Subject: Re: TC6 ${CATALINA_HOME}/conf/web.xml Is this the place to constrain the mime type? I'm coming down in favour of a valve, rather

Re: TC6 ${CATALINA_HOME}/conf/web.xml Is this the place to constrain the mime type?

2009-02-06 Thread Robert Koberg
On Feb 6, 2009, at 4:45 PM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dave, Dave Pawson wrote: Only one aspect of security Rob. As needed I'll look at others later. Can you suggest alternatives to achieve what I want, rather than something else? Instead of

Re: TC6 ${CATALINA_HOME}/conf/web.xml Is this the place to constrain the mime type?

2009-02-05 Thread Robert Koberg
On Feb 5, 2009, at 1:28 PM, Caldarale, Charles R wrote: From: Dave Pawson [mailto:dave.paw...@gmail.com] Subject: TC6 ${CATALINA_HOME}/conf/web.xml Is this the place to constrain the mime type? I want to 'reject' (if that's the right word) any http get with mime type != application/xml The

Re: TC6 ${CATALINA_HOME}/conf/web.xml Is this the place to constrain the mime type?

2009-02-05 Thread Robert Koberg
On Feb 5, 2009, at 1:36 PM, Dave Pawson wrote: 2009/2/5 Caldarale, Charles R chuck.caldar...@unisys.com: From: Dave Pawson [mailto:dave.paw...@gmail.com] Subject: TC6 ${CATALINA_HOME}/conf/web.xml Is this the place to constrain the mime type? I want to 'reject' (if that's the right word) any

Re: No URL rewriting when cookies are disabled

2009-02-05 Thread Robert Koberg
Hi, Pimping the JSP XML syntax and XSL... :) If, by any chance your JSPs are using XML syntax (or well-formed or can be well-formed), you can use XSL to transform all of your links to be encoded for cookie-less users. For example, the following JSP: jsp:root

Re: A question about excluding URL patterns from filters

2009-02-05 Thread Robert Koberg
On Feb 6, 2009, at 12:24 AM, Anand HS wrote: However, I believe there must be a more 'elegant' way to exclude a url pattern through configuration than adding/modifying more code. :) Could you shed more ideas on this. ? Move it?

Re: Encrypting database resouce password

2008-11-13 Thread Robert Koberg
We use: http://www.jasypt.org/ best, -Rob On Nov 13, 2008, at 11:35 AM, Kevin Nash wrote: Hello, I'm using apache-tomcat-5.5.26, Oracle 10.2.0.3, java version 1.5.0_14 I have a data resource defined in the server.xml and I wish to create a digest of the database password.

Re: Encrypting database resouce password

2008-11-13 Thread Robert Koberg
On Nov 13, 2008, at 12:31 PM, Christopher Schultz wrote: Kevin Nash wrote: I have a data resource defined in the server.xml and I wish to [encrypt the] database password. This question comes up occasionally. Things to consider: 1. If you encrypt the password in context.xml, where will you

Re: Monitoring Tomcat availability in a load balanced capacity

2008-11-12 Thread Robert Koberg
You mentioned you just upgraded your MS SQL. Is it possible that the default encoding changed? It should be using UTF-8. Can you check that? On Nov 12, 2008, at 4:48 PM, André Warnier wrote: Adam Gordon wrote: See my reply to Hassan. I think setting up a proxy would be overkill, and

Re: Monitoring Tomcat availability in a load balanced capacity

2008-11-12 Thread Robert Koberg
Ooops, sorry. I meant this to go to someone else... On Nov 12, 2008, at 5:06 PM, Robert Koberg wrote: You mentioned you just upgraded your MS SQL. Is it possible that the default encoding changed? It should be using UTF-8. Can you check that? On Nov 12, 2008, at 4:48 PM, André Warnier

mod_proxy_http v. mod_jk, was Re: Data Truncated when proxied from Apache

2008-10-15 Thread Robert Koberg
On Oct 15, 2008, at 5:44 PM, Filip Hanik - Dev Lists wrote: use mod_proxy_http or mod_jk, I have seen a few posts recommending mod_proxy_http a little bit over mod_jk. Why is that? I used mod_jk recently simply because it was on the tomcat site. I just assumed it was the default/best

restricted use JSP impl

2008-10-04 Thread Robert Koberg
Hi, Is there an implementation of JSP that only allows execution of java code as provided by taglibs and EL? In other words, something that will not allow declarations or scriptlets. thanks, -Rob - To start a new topic,

Re: Etags vs Week Etags

2008-09-11 Thread Robert Koberg
On Sep 11, 2008, at 10:36 AM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Johnny, Johnny Kewl wrote: For example if you want XSLT in tomcat, first impression is its xerces (Jumping without reading previous posts) You first impression is wrong :) Xerces is an

Re: Etags vs Week Etags

2008-09-11 Thread Robert Koberg
On Sep 11, 2008, at 11:44 AM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Robert, Robert Koberg wrote: On Sep 11, 2008, at 10:36 AM, Christopher Schultz wrote: Huh? The DefaultServlet handles XSLT? Which version of TC is that in? There is XSL for directory

Re: [ANN] Apache Tomcat 5.5.27 released

2008-09-08 Thread Robert Koberg
Hi, Regarding: https://issues.apache.org/bugzilla/show_bug.cgi?id=45015 Have things like the follwoing been tested: input value=${quot;booquot;} / input value=${quot;booquot; foo's} / input value='${quot;booquot;}' / input value='${quot;booquot;} foo' / I guess I am more concerned about

Re: [ANN] Apache Tomcat 5.5.27 released

2008-09-08 Thread Robert Koberg
On Sep 8, 2008, at 1:59 PM, Mark Thomas wrote: Robert Koberg wrote: Hi, Regarding: https://issues.apache.org/bugzilla/show_bug.cgi?id=45015 Have things like the follwoing been tested: input value=${quot;booquot;} / input value=${quot;booquot; foo's} / input value='${quot;booquot

Re: Why GlassFish

2008-08-28 Thread Robert Koberg
On Aug 28, 2008, at 9:31 AM, sam wun wrote: Hi, Just a quick question, I found that Tomcat is quite capable with servlet application, but lack of EJB support. Is GlassFish designed to fill the gaps to support EJB application only? As Pythagoras said, just say no to beans.

Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: enabling/disabling a servlet filter conditionally

2008-08-01 Thread Robert Koberg
Hola Juan, Have a great vacation! On Fri, 2008-08-01 at 22:54 +0200, [EMAIL PROTECTED] wrote: Hola, Estaré ausente de la oficina por vacaciones hasta el 20 de agosto. Para cualquier tema urgente por favor enviar el correo a la dirección [EMAIL PROTECTED] Muchas gracias, Juan

Re: Embedding custom metadata in a jsp page; access generated Class via reflection?

2008-07-29 Thread Robert Koberg
Since you have a well-formed (XML) jsp and well-formed XML metadata, you could run an (pre-runtime) XSL transformation that combines the two however you need. In other words, instead of combining known metadata at runtime, pre-generate the JSPX in some prior stage. With JSP 2.0, EL and the

mod_jk not connecting

2008-07-17 Thread Robert Koberg
Hi, I am trying to get httpd and tomcat to work together and not having much luck. Redhat ES 5 jdk1.6.0_07 tomcat 6.0.16 tomcat-connectors-1.2.26-src (built on the machine) tomcat-native-1.1.14-src (built on the machine) If I put mod_jk directives inside a (httpd.conf) virtual host I can't

Re: mod_jk not connecting

2008-07-17 Thread Robert Koberg
with SetHandler. I should have responded earlier. It turns out I needed: NameVirtualHost *:80 and then adding directives to virtual hosts worked fine. And I could use JkMount and did not need SetHandler, etc. Now on to SSL for one of them... thanks, -Rob --David Robert Koberg wrote: Hi

mod_jk: docBase and appBase -- 'ROOT' taken out

2008-07-17 Thread Robert Koberg
Hi, Redhat ES 5 jdk1.6.0_07 tomcat 6.0.16 tomcat-connectors-1.2.26-src (built on the machine) tomcat-native-1.1.14-src (built on the machine) After getting the connector working for httpd without SSL I am trying to get it working with SSL. A strange warning occurs followed by the severe error.

Re: mod_jk: docBase and appBase -- 'ROOT' taken out

2008-07-17 Thread Robert Koberg
On Thu, 2008-07-17 at 22:47 -0500, Charles Caldarale wrote: On Jul 17, 2008, at 21:56, Robert Koberg [EMAIL PROTECTED] wrote: The problem: even though I specifiy 'docBase=/home/app/wwwapps/ROOT/members' Which is completely illegal; buzzwrecker. why? Is there a technical problem

Re: [OT] Parsing xs:dateTime values

2008-05-15 Thread Robert Koberg
Hi, You don't need regexp. Do you mean something like: private static final String ISO8601_DATEFORMAT = -MM-dd'T'HH:mm:ss; private static final java.text.SimpleDateFormat ISO8601 = new java.text.SimpleDateFormat( ISO8601_DATEFORMAT, java.util.Locale.US); public static final

Re: [OT] Parsing xs:dateTime values

2008-05-15 Thread Robert Koberg
whoops and thanks :) On Thu, 2008-05-15 at 12:27 -0400, [EMAIL PROTECTED] wrote: One cautionary observation about the use of shared SimpleDateFormat instances: they are not threadsafe. While it seems like a good idea to create these for various formats and hold them as class static or

logging catalina.out and localhost-##.log - don't append

2008-05-09 Thread Robert Koberg
What do you need to do to get tomcat to create a fresh catalina.out and localhost.log file for every restart? For development, I don't want those log files to append or roll for each new day. thanks, -Rob - To start a new

RE: logging catalina.out and localhost-##.log - don't append

2008-05-09 Thread Robert Koberg
On Fri, 2008-05-09 at 13:27 -0500, Caldarale, Charles R wrote: From: Robert Koberg [mailto:[EMAIL PROTECTED] Subject: logging catalina.out and localhost-##.log - don't append What do you need to do to get tomcat to create a fresh catalina.out and localhost.log file for every restart

Re: Hot deploy deletes my context file...

2008-05-02 Thread Robert Koberg
On Fri, 2008-05-02 at 12:31 -0400, Mark H. Wood wrote: On Fri, May 02, 2008 at 05:32:58AM -0700, Michael Burbidge wrote: By experimenting from the shell copying files I can see what Tomcat is doing. I think that it deletes associated contexts whenever an application is undeployed by

Re: Bending Jasper to My Will

2008-04-21 Thread Robert Koberg
On Mon, 2008-04-21 at 19:16 -0700, Andy Clark wrote: Notice that the JSP/tag files that compose the response are a mixture of the default ones and the custom ones that the skin overrides. Skin authors should not have to make complete copies of the default skin tree in order to edit only a

Re: Cookie-less session tracking - whats are the downsides

2008-04-17 Thread Robert Koberg
On Thu, 2008-04-17 at 09:38 -0400, Christopher Schultz wrote: The only runtime bottleneck is the time required to add ;jsessionid=123456789 to your outgoing URLs, which is to say pretty much nothing. The engineering bottleneck is that you have to run all your URLs through

jsp hack or better solution ??

2008-03-29 Thread Robert Koberg
Hi, (using 6.0.16) I want to create a jsp that is able to be seen in a browser without using tomcat (a simple HTMLish preview) in addition to using (rendering) it with tomcat. The kicker is I *need* the JSP to be well-formed XML. The problems are elements that contain HTML attributes held

TC6: Saxon (actually AElfred) anywhere on classpath causes failure to start

2007-09-15 Thread Robert Koberg
Hi, Even if Saxon (v 6.5.3) is in, e.g. $TC/webapps/webapp/WEB-INF/lib/saxon.jar, tomcat fails to start. It sees AElfred as the XML parser and gives a Digester exception. Does anybody have saxon.jar in tomcat 6 working? If so, how? thanks, -Rob

RE: i am looking for professional tomcat support for enterprise

2007-07-17 Thread Robert Koberg
is anybody looking in on this thread with incredulity? jeebus help me On Tue, 2007-07-17 at 11:40 -0700, Fargusson.Alan wrote: That could be fun. I tried to move a couple of small servlets from WAS to Tomcat. I found that Tomcat does not understand EAR files, so I had to use WAR files.

Re: Problem with XSL stylesheet not being applied when XML served through Tomcat

2007-06-13 Thread Robert Koberg
On Wed, 2007-06-13 at 13:00 +0200, Markus Schönhaber wrote: Another comment targeted @ the OP: IMO XSL transformations should be done on the server side, not on the client side. Doing it on the client side may be OK if you have a very specific user base and you can be sure that their clients

Re: ampersand (amp;) handling in jspx - any workaround?

2007-02-14 Thread Robert Koberg
On Wed, 14 Feb 2007 12:24:43 -0500, Leon Rosenberg [EMAIL PROTECTED] wrote: correct me if i wrong, but isn't amp; forbidden in xml anyway? you're wrong. Leon On 2/14/07, Stefan [EMAIL PROTECTED] wrote: Hello, for sure, the problem is well known. jspx pages turn the amp; in simple

Re: ampersand (amp;) handling in jspx - any workaround?

2007-02-14 Thread Robert Koberg
On Wed, 14 Feb 2007 15:05:02 -0500, Christopher Schultz [EMAIL PROTECTED] wrote: Stefan wrote: but where do I need a single in the generated XML. That's forbidden a causes the problems. Can You come up a use case? Oh, I'm not saying that it's a good idea. I actually agree that emitting a

Re: BOOBIES!

2006-07-23 Thread Robert Koberg
Wow... how do some people make it through the day without exploding from some terrible insult. I can't believe this thread subject has turned into such a big deal. I deleted the first 5 or so because I thought it was spam. Then I saw names responding which I recognized. I really don't

extending Embedded (basically copying Catalina) - Address already in use: JVM_Bind:80

2006-06-15 Thread Robert Koberg
Hi, I want to use a standard startup the same way startup.sh - catalina.sh - Bootstrap - Catalina handles it. I want to make the (standard)server available to a custom manager in the main webapp. I want to be able to start up a Context when a user enters a project in my webapp (i.e. I don't

custom error page and working around a mozilla bug

2006-05-03 Thread Robert Koberg
There is a bug in mozilla when using client side XSLT: https://bugzilla.mozilla.org/show_bug.cgi?id=334179 Basically, the problem is that mozilla ends a response when it sees a redirect or forward. Since I am using client side XSL to transform XML, I get an error when, say, a 404 happens

Re: static server implementation?

2005-10-27 Thread Robert Koberg
Caldarale, Charles R wrote: From: John Laughton [mailto:[EMAIL PROTECTED] Subject: Re: static server implementation? I ended up created a second context in tomcat that allows access to the static content (ie. large jpegs) I'm confused. Why wasn't Tomcat's default servlet sufficient? It's

Re: static server implementation?

2005-10-27 Thread Robert Koberg
Caldarale, Charles R wrote: From: Robert Koberg [mailto:[EMAIL PROTECTED] Subject: Re: static server implementation? If you have a need for many virtual hosts, but do not need or want any ability for dynamic activity it would make sense to have a limited version of a tomcat host/context. I

Re: static server implementation?

2005-10-27 Thread Robert Koberg
Steve Kirk wrote: Have you considered that you can remove much of the dynamic config from conf\web.xml so that there is no default servlet or other dynamic behaviour in any webapp unless you explictly configure it so in the webapp's own web.xml? Right, but say an evil user creates a