Re: tomcat-native 1.1.24

2012-11-16 Thread André Warnier
Hi. Isaac López Marín wrote: We kind of guessed as much, considering the sender and the signature. :-) I'll try not to be so newbie next time :)) I don't know anything about Mac OS, but I would guess that the question is : *where and how* did you install tomcat-native-1.1.24-src.tar.gz ?

Re: Https connection not working from specific static public IP Address

2012-11-16 Thread André Warnier
Anuroop wrote: Hi, I am facing issue with connecting to https from my ISP provided particular static public IP address. Problem. I have website online where I have hosted my application. Whenever I am trying to connect from office lease line connection where I have static IP address

Help regarding CSRF Filter in Tomcat 7

2012-11-16 Thread Vijaya Kumar
Hi, I work on a web application that is vulnerable to CSRF(Cross Site Request Forgery) attack. Tomcat 7 has a CSRF prevention filter. I went through the description to configure this filter. This filter expects that we call HttpServletResponse#encodeRedirectURL(String) or

Re: Help regarding CSRF Filter in Tomcat 7

2012-11-16 Thread André Warnier
Vijaya Kumar wrote: Hi, I work on a web application that is vulnerable to CSRF(Cross Site Request Forgery) attack. Tomcat 7 has a CSRF prevention filter. I went through the description to configure this filter. This filter expects that we call HttpServletResponse#encodeRedirectURL(String) or

Re: Help regarding CSRF Filter in Tomcat 7

2012-11-16 Thread Vijaya Kumar
Hi, Thanks a lot for the quick response. I have already gone through the suggestions given on Wikipedia. I found that the suggestions provided over there are not feasible in our application's context. Therefore, I am looking for an alternate way of preventing this attack. -Vijay André

Re: Help regarding CSRF Filter in Tomcat 7

2012-11-16 Thread Mark Thomas
On 16/11/2012 10:01, André Warnier wrote: Vijaya Kumar wrote: Hi, I work on a web application that is vulnerable to CSRF(Cross Site Request Forgery) attack. Tomcat 7 has a CSRF prevention filter. I went through the description to configure this filter. This filter expects that we call

RE: Https connection not working from specific static public IP Address

2012-11-16 Thread Anuroop
Is there any where tomcat is stopping my IP because of more request or cache issue or something? -Original Message- From: André Warnier [mailto:a...@ice-sa.com] Sent: Friday, November 16, 2012 2:08 PM To: Tomcat Users List Subject: Re: Https connection not working from specific static

Not serving pages to anything but localhost

2012-11-16 Thread David Elliott
Hi All Tomcat is running and is able to serve up pages but only to itself. If I do wget http://localhost:8080 I get a page saved and the text looks right. However if I browse from any other machine (inside subnet mask, from web) it return nothing but a connection error. I am sure I have left

Re: Not serving pages to anything but localhost

2012-11-16 Thread David kerber
On 11/16/2012 10:59 AM, David Elliott wrote: Hi All Tomcat is running and is able to serve up pages but only to itself. If I do wget http://localhost:8080 I get a page saved and the text looks right. However if I browse from any other machine (inside subnet mask, from web) it return nothing

Re: Not serving pages to anything but localhost

2012-11-16 Thread techienote . com
Hi David, Are you able to telnet from remote machine on port 8080? Sent on my BlackBerry® from Vodafone -Original Message- From: David kerber dcker...@verizon.net Date: Fri, 16 Nov 2012 11:14:30 To: Tomcat Users Listusers@tomcat.apache.org Reply-To: Tomcat Users List

Re: Not serving pages to anything but localhost

2012-11-16 Thread André Warnier
David Elliott wrote: Hi All Tomcat is running and is able to serve up pages but only to itself. Huh ? Care to explain what you mean here ? If I do wget http://localhost:8080 I get a page saved and the text looks right. Hmm. So I guess that's what you meant above. You can access your

RE: Not serving pages to anything but localhost

2012-11-16 Thread David Elliott
Hi All David kerber wrote on 16 November 2012 at 16:15 my time On 11/16/2012 10:59 AM, David Elliott wrote: Tomcat is running and is able to serve up pages but only to itself. If I do wget http://localhost:8080 I get a page saved and the text looks right. However if I browse from any

RE: Not serving pages to anything but localhost

2012-11-16 Thread David Elliott
Hi techienote techienote@gmail.com wrote on 16 November 2012 at 16:20 my time Are you able to telnet from remote machine on port 8080? No, but I can get on SSH. -- David Elliott The TMTI Group includes the following brands www.clickdontcall.comhttp://www.clickdontcall.com,

Re: Help regarding CSRF Filter in Tomcat 7

2012-11-16 Thread Mark Thomas
On 16/11/2012 16:12, André Warnier wrote: Mark Thomas wrote: On 16/11/2012 10:01, André Warnier wrote: Vijaya Kumar wrote: Hi, I work on a web application that is vulnerable to CSRF(Cross Site Request Forgery) attack. Tomcat 7 has a CSRF prevention filter. I went through the description to

Re: Not serving pages to anything but localhost

2012-11-16 Thread techienote . com
Hi David, That means your host machine where you have installed tomcat is blocking connection. May be firewall of centos. To confirm the same you can either 1.include port 8080 in iptable allow rules Or 2. you can stop iptables for temporary purpose. Also check remote machine firewall status.

RE: Not serving pages to anything but localhost

2012-11-16 Thread David Elliott
Hi André André Warnier wrote on 16 November 2012 at 16:20 my time. Tomcat is running and is able to serve up pages but only to itself. Huh ? Care to explain what you mean here ? I would say see below, but... If I do wget http://localhost:8080 I get a page saved and the text looks right.

RE: Not serving pages to anything but localhost

2012-11-16 Thread David Elliott
Hi techienote techienote@gmail.com wrote on 16 November 2012 at 16:35 my time That means your host machine where you have installed tomcat is blocking connection. May be firewall of centos. To confirm the same you can either 1.include port 8080 in iptable allow rules Or 2. you can stop

RE: Not serving pages to anything but localhost

2012-11-16 Thread David Elliott
Hi techienote techienote@gmail.com wrote on 16 November 2012 at 16:35 my time. 1.include port 8080 in iptable allow rules Or 2. you can stop iptables for temporary purpose. Yes it is the iptables. Thanks. -- David Elliott The TMTI Group includes the following brands

Re: Help regarding CSRF Filter in Tomcat 7

2012-11-16 Thread André Warnier
Mark Thomas wrote: On 16/11/2012 16:12, André Warnier wrote: Mark Thomas wrote: On 16/11/2012 10:01, André Warnier wrote: Vijaya Kumar wrote: Hi, I work on a web application that is vulnerable to CSRF(Cross Site Request Forgery) attack. Tomcat 7 has a CSRF prevention filter. I went through

Fwd: Contact requests from Mary Lou and Howard

2012-11-16 Thread Kris Schneider
-- Forwarded message -- From: *Kris Schneider* Date: Friday, November 16, 2012 Subject: Contact requests from Mary Lou and Howard To: kurt schneider kurtbo...@gmail.com Kurt, Howard and Mary Lou have both expressed their inability to get responses from you on matters concerning

Problem with tomcat and JRE1.7

2012-11-16 Thread Ralph Grove
I just upgraded my JRE from 1.6 to 1.7, and the tomcat home page now throws an exception (below). The example apps, and my own apps are still working OK, though. Anyone else noticed this problem? System configuration: MacOS 10.8.2 JRE 1.7.0_09 Tomcat 7.0.32 The server is at

Re: Fwd: Contact requests from Mary Lou and Howard

2012-11-16 Thread Casper Wandahl Schmidt
Den 16-11-2012 20:05, Kris Schneider skrev: -- Forwarded message -- From: *Kris Schneider* Date: Friday, November 16, 2012 Subject: Contact requests from Mary Lou and Howard To: kurt schneider kurtbo...@gmail.com Kurt, Howard and Mary Lou have both expressed their inability to

Re: Help regarding CSRF Filter in Tomcat 7

2012-11-16 Thread Mark Thomas
On 16/11/2012 18:50, André Warnier wrote: Mark Thomas wrote: On 16/11/2012 16:12, André Warnier wrote: Mark Thomas wrote: On 16/11/2012 10:01, André Warnier wrote: Vijaya Kumar wrote: Hi, I work on a web application that is vulnerable to CSRF(Cross Site Request Forgery) attack. Tomcat 7 has

Re: Not serving pages to anything but localhost

2012-11-16 Thread André Warnier
David Elliott wrote: Hi André André Warnier wrote on 16 November 2012 at 16:20 my time. Tomcat is running and is able to serve up pages but only to itself. Huh ? Care to explain what you mean here ? I would say see below, but... If I do wget http://localhost:8080 I get a page saved and

Re: Problem with tomcat and JRE1.7

2012-11-16 Thread Daniel Mikusa
On Nov 16, 2012, at 2:06 PM, Ralph Grove wrote: I just upgraded my JRE from 1.6 to 1.7, and the tomcat home page now throws an exception (below). The example apps, and my own apps are still working OK, though. Anyone else noticed this problem? Have not seen this before. Just a guess,

Re: Problem with tomcat and JRE1.7

2012-11-16 Thread Ralph Grove
I stopped tomcat, deleted work and all of the application directories that were derived from war files. Same problem after restarting, though. It looks like all JSP's are failing. Ralph On 11/16/12 3:01 PM, Daniel Mikusa wrote: On Nov 16, 2012, at 2:06 PM, Ralph Grove wrote: I just

PROBLEM - APACHE HTTPD IS SERVING JSP SOURCE CODE

2012-11-16 Thread Farid Haider
Hi. I have Fedora 17 (Kernel Linux 3.6.6-1.fc17.i686) installed in an ASUS laptop (A6Jseries). I have Apache/2.2.22 installed that came with the Fedora 17. I have the following Java: java version 1.7.0_09-icedtea OpenJDK Runtime Environment (fedora-2.3.3.fc17.1-i386) OpenJDK Client VM (build

Re: Help regarding CSRF Filter in Tomcat 7

2012-11-16 Thread André Warnier
Mark Thomas wrote: On 16/11/2012 18:50, André Warnier wrote: Mark Thomas wrote: On 16/11/2012 16:12, André Warnier wrote: Mark Thomas wrote: On 16/11/2012 10:01, André Warnier wrote: Vijaya Kumar wrote: Hi, I work on a web application that is vulnerable to CSRF(Cross Site Request Forgery)

Modify Cache-Control header

2012-11-16 Thread Jose María Zaragoza
Hi: I'm using Tomcat 6 ( I don't remember the exact release, I hope to be forgiven by Pid ) I need to modify Cache-Control header in some responses ( forcing them to not be cached ) What is the best way to do it ? a) To implement a Valve ( check request context path and if it match ,to modify

Re: PROBLEM - APACHE HTTPD IS SERVING JSP SOURCE CODE

2012-11-16 Thread Casper Wandahl Schmidt
Den 16-11-2012 21:26, Farid Haider skrev: Hi. I have Fedora 17 (Kernel Linux 3.6.6-1.fc17.i686) installed in an ASUS laptop (A6Jseries). I have Apache/2.2.22 installed that came with the Fedora 17. I have the following Java: java version 1.7.0_09-icedtea OpenJDK Runtime Environment

Re: Help regarding CSRF Filter in Tomcat 7

2012-11-16 Thread David kerber
On 11/16/2012 3:29 PM, André Warnier wrote: Mark Thomas wrote: On 16/11/2012 18:50, André Warnier wrote: Mark Thomas wrote: On 16/11/2012 16:12, André Warnier wrote: Mark Thomas wrote: On 16/11/2012 10:01, André Warnier wrote: Vijaya Kumar wrote: Hi, I work on a web application that is

Re: Help regarding CSRF Filter in Tomcat 7

2012-11-16 Thread Mark Thomas
On 16/11/2012 20:29, André Warnier wrote: Ok, so let's back up a little. The OP wrote : ..This filter expects that we call HttpServletResponse#encodeRedirectURL(String) or HttpServletResponse#encodeURL(String). I see that in my application we don't use the above mentioned methods. ..

Re: PROBLEM - APACHE HTTPD IS SERVING JSP SOURCE CODE

2012-11-16 Thread André Warnier
Casper Wandahl Schmidt wrote: Den 16-11-2012 21:26, Farid Haider skrev: Hi. I have Fedora 17 (Kernel Linux 3.6.6-1.fc17.i686) installed in an ASUS laptop (A6Jseries). I have Apache/2.2.22 installed that came with the Fedora 17. I have the following Java: java version 1.7.0_09-icedtea OpenJDK

Re: Modify Cache-Control header

2012-11-16 Thread Igor Cicimov
On 17/11/2012 7:38 AM, Jose María Zaragoza demablo...@gmail.com wrote: Hi: I'm using Tomcat 6 ( I don't remember the exact release, I hope to be forgiven by Pid ) I need to modify Cache-Control header in some responses ( forcing them to not be cached ) What is the best way to do it ?

Re: Help regarding CSRF Filter in Tomcat 7

2012-11-16 Thread André Warnier
Mark Thomas wrote: On 16/11/2012 20:29, André Warnier wrote: Ok, so let's back up a little. The OP wrote : ..This filter expects that we call HttpServletResponse#encodeRedirectURL(String) or HttpServletResponse#encodeURL(String). I see that in my application we don't use the above mentioned

Re: Help regarding CSRF Filter in Tomcat 7

2012-11-16 Thread Bob Hall
André, On 16/11/2012 14:39, André Warnier wrote:  Response (to Mark and David) : I accept the verdict of the native English-speakers.  In my defense, I would say that to me, the word useless has more of a negative connotation than what I wanted to express.  Using an expression  such as

Re: Help regarding CSRF Filter in Tomcat 7

2012-11-16 Thread André Warnier
Bob Hall wrote: André, On 16/11/2012 14:39, André Warnier wrote: Response (to Mark and David) : I accept the verdict of the native English-speakers. In my defense, I would say that to me, the word useless has more of a negative connotation than what I wanted to express. Using an

Re: PROBLEM - APACHE HTTPD IS SERVING JSP SOURCE CODE

2012-11-16 Thread Pete Storey
Yup, your mount point aren't quite right: - They need to be in a virtual host if they are for that (or turn on inheritance) - You have to mount _either_ a path or an extension - not both - i.e. JkMount *.jsp or JkMount /myapp - not what you've got with JkMount /*.jsp cheers Pete On 17 November

Re: Fwd: Contact requests from Mary Lou and Howard

2012-11-16 Thread Kris Schneider
On Fri, Nov 16, 2012 at 2:08 PM, Casper Wandahl Schmidt kalle.pri...@gmail.com wrote: Den 16-11-2012 20:05, Kris Schneider skrev: -- Forwarded message -- 8 snip 8 Thanks for letting us know :) Probably the wrong recipient? So...this isn't the non-communicative sibling