Re: Tomcat sessions issue?

2010-08-19 Thread Pid
On 19/08/2010 04:50, Christopher Schultz wrote: Robin, On 8/18/2010 5:57 PM, Robin Diederen wrote: That's interesting to say the least. I agree with André's assessment: you have a cookie collision. See below for hints for removing the conflict. Without cookies enabled, I can't login to

Re: How can i tell how much of allocated heap is being used?

2010-08-19 Thread Rainer Jung
On 18.08.2010 20:41, laredotornado wrote: Hi, I'm using Tomcat 6.0.26, Java 1.6 on Linux kernel 2.6.18-164.11.1.el5. I'm trying to figure out if there if we can figure out how much of our allocated heap memory is actually being used. Grateful for any thoughts you might have, - Dave Caution

Re: Tomcat sessions issue?

2010-08-19 Thread Rainer Jung
To add the obvious: Use your browser to have a look at your JSESSIONID cookies (and any other cookies of the same name used by both apps) after loging in to LifeRay and after loging in to Alfresco. Write down domain and path properties and see whether they conflict (whether one of the cookies

Re: JNDI: LDAPv3 with StartTLS

2010-08-19 Thread Rainer Jung
On 18.08.2010 22:45, Igor Galić wrote: org.apache.catalina.realm.JNDIRealm.getUserByPattern(JNDIRealm.java:1269) This means, that you specified userPattern='...' in your realm configuration. And you since your pattern looks like '(uid={0})(...)' it is probably wrong. You have specified

Re: Installation problem [newbie]

2010-08-19 Thread Pid
On 18/08/2010 21:51, Ron Wheeler wrote: *C:\Program Files\apache-tomcat-6.0.29\binecho %JAVA_HOME%* *C:\Program Files\Java\jdk1.6.0_17\bin* and C:\Documents and Settings\Jonjava -version java version 1.6.0_21 Spot the difference between these two things. Then, uninstall Tomcat and

Re: loaderClass for jsps

2010-08-19 Thread Pid
On 18/08/2010 16:38, Konstantin Kolinko wrote: 2010/8/18 Pid p...@pidster.com: On 18/08/2010 16:09, Amir Wasim wrote: org.eclipse.jdt.internal.compiler.classfmt.ClassFormatException at org.eclipse.jdt.internal.compiler.classfmt.ClassFileReader.init(ClassFileReader.java:342)

Re: Tomcat sessions issue?

2010-08-19 Thread Rainer Jung
On 19.08.2010 09:25, Pid wrote: On 19/08/2010 04:50, Christopher Schultz wrote: Robin, On 8/18/2010 5:57 PM, Robin Diederen wrote: That's interesting to say the least. I agree with André's assessment: you have a cookie collision. See below for hints for removing the conflict. Without

Re: 501 Method not implemented with successive POST requests

2010-08-19 Thread André Warnier
Christopher Schultz wrote: You'd be amazed how fast a reproducable bug can be fixed ;) Particularly if it can also be repeated or duplicated. ;-) - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional

Re: Is there a better way to disable JSESSIONID in the URLs?

2010-08-19 Thread Wesley Acheson
I was going to write this off list because its off topic, but maybe the information is useful. On Thu, Aug 19, 2010 at 5:19 AM, Christopher Schultz ch...@christopherschultz.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Wesley, On 8/17/2010 6:05 PM, Wesley Acheson wrote: I know

Re: Tomcat sessions issue?

2010-08-19 Thread André Warnier
Pid wrote: ... After a cursory look through the server.xml, (cursory because of the trauma of wading through comments), I note: Listener className=org.apache.jk.config.ApacheConfig modJk=/opt/zimbra/httpd/modules/mod_jk.so / The OP made reference to the jvmRoute=jvmAlfresco1, so I think we

Re: war not redeploying

2010-08-19 Thread Pid
On 18/08/2010 20:04, Sean McEligot wrote: By the way, please create or edit your webapp's META-INF/context.xml, not the default one. I've reset context.xml back to default except jdbc resources and access logging. How are you configuring access logging in conf/context.xml? And why?

Problem ReverseAjax.dwr on Tomcat7.0.0

2010-08-19 Thread 魏超
*System:* Windows7 *Tomcat: *Tomcat 7.0.0 32-bit Windows zip( Simply unzip it, do nothing on configure file) *DWR:* DWR2 Firstly sorry for my English.(I'm not good at it[?]) I'm working on a project build on Appfuse. And we add DWR reverseAjax into it. You know, it works well on Tomat6. But

Re: Tomcat 5.5.23 request.getAttribute(foo) returns unexpected NULL

2010-08-19 Thread Konstantin Kolinko
2010/8/12 Thomas Treitlinger ttreitlin...@gmail.com: Hello, I have a number of JSP pages which use the JSTL core library to set a request attribute like this: c:set var=foo scope=request FOO-VALUE/c:set The JSPs then forward to a Servlet like this: jsp:forward page=/request.go / The

Re: Problem ReverseAjax.dwr on Tomcat7.0.0

2010-08-19 Thread André Warnier
魏超 wrote: *System:* Windows7 *Tomcat: *Tomcat 7.0.0 32-bit Windows zip( Simply unzip it, do nothing on configure file) *DWR:* DWR2 Firstly sorry for my English.(I'm not good at it[?]) No problem, 魏超, we're even worse in .. ? I'm working on a project build on Appfuse. And we add DWR

FW: Problem ReverseAjax.dwr on Tomcat7.0.0

2010-08-19 Thread Hadole, Nishant IN BOM SISL
Dear Weic, I think the issue more belongs to DWR-Users Mailing List than here. Some relevant information that might help: Tomcat 7 uses Servlet 3.0. To avoid certain types of cross-site scripting attacks, Servlet 3.0 supports HttpOnly cookies. HttpOnly cookies are not exposed to the

Re: 501 Method not implemented with successive POST requests

2010-08-19 Thread Hans Wahn
Thanks folks, I submitted the issue as a bug: https://issues.apache.org/bugzilla/show_bug.cgi?id=49779 Hans 2010/8/19 Christopher Schultz ch...@christopherschultz.net: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Pid/Hans, On 8/16/2010 5:53 AM, Pid wrote: On 16/08/2010 09:52, Hans Wahn

Re: JNDI: LDAPv3 with StartTLS

2010-08-19 Thread Pid
On 19/08/2010 08:36, Rainer Jung wrote: On 18.08.2010 22:45, Igor Galić wrote: Felix: would you like to contribute your code? I didn't read it in detail but I guess it is very generic and would be a nice addon to the standard JNDIRealm? +1 LDAP/JNDI seems tricky for a lot of people, the

Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread Yawar Saeed Khan/ITG/Karachi
Hi, I have developed a web application using jsp and servlets with oracle database. The application is working fine on windows, but the problem arises when we deploy it on Linux(64bit), we get session issues in the application. The session variables get mixed up and we can see previously

Re: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread André Warnier
Yawar Saeed Khan/ITG/Karachi wrote: Hi, I have developed a web application using jsp and servlets with oracle database. and with Tomcat also ? The application is working fine on windows, Windows version, JVM version, tomcat version ? but the problem arises when we deploy it on

Re: [css-d] Floating images - understanding the details

2010-08-19 Thread Wesley Acheson
Pardon I knew that, I must have been having an off day. Yes what I said is wrong. On Thu, Aug 19, 2010 at 12:46 PM, Bobby Jack bobbykj...@yahoo.co.uk wrote: --- On Wed, 8/18/10, Wesley Acheson wesley.ache...@gmail.com wrote: No-one spotted the deliberate mistake? ;) 4 values: are Top,

Re: [css-d] Floating images - understanding the details

2010-08-19 Thread André Warnier
Wesley Acheson wrote: Pardon I knew that, I must have been having an off day. Yes what I said is wrong. And you are having another, it seems. Isn't this the wrong list for that ? Oh well, there are just weeks like that.. -

Re: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread Ben Souther
On Thu, 2010-08-19 at 12:45 +0200, André Warnier wrote: Yawar Saeed Khan/ITG/Karachi wrote: Hi, I have developed a web application using jsp and servlets with oracle database. and with Tomcat also ? Look in the subject line. :) The application is working fine on

RE: Is there a better way to disable JSESSIONID in the URLs?

2010-08-19 Thread Scott Hamilton
Sorry to pull the thread back to my original problem, but I have one more question here. So far it looks like there's no way to prevent JSESSIONIDs from being injected into URLs that Tomcat might encode unless you implement a servlet filter to override that behavior. My follow-up question is

Re: war not redeploying

2010-08-19 Thread Sean McEligot
On Wed, Aug 18, 2010 at 3:57 PM, Mark Eggers its_toas...@yahoo.com wrote: Are you starting and stopping Tomcat under Cygwin? I've seen some interesting file locking problems (as well as the terminate batch job? question) when running Windows applications under Cygwin. How are you deploying

RE: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread Caldarale, Charles R
Yawar Saeed Khan/ITG/Karachi wrote: I have developed a web application using jsp and servlets with oracle database. The application is working fine on windows, Or at least running on that platform hasn't uncovered the latent bugs in your webapp. but the problem arises when we deploy it

RE: Problem ReverseAjax.dwr on Tomcat7.0.0

2010-08-19 Thread Caldarale, Charles R
From: 魏超 [mailto:nnever...@gmail.com] Subject: Problem ReverseAjax.dwr on Tomcat7.0.0 Tomcat: Tomcat 7.0.0 32-bit Please test again on 7.0.2. Many, many bugs have been fixed between 7.0.0 and 7.0.2, so the issue you're having may have already been addressed. - Chuck THIS COMMUNICATION

Re: war not redeploying

2010-08-19 Thread Sean McEligot
On Thu, Aug 19, 2010 at 3:41 AM, Pid p...@pidster.com wrote: On 18/08/2010 20:04, Sean McEligot wrote:   By the way, please create or edit your webapp's META-INF/context.xml,  not the default one. I've reset context.xml back to default except jdbc resources and access logging. How are

Re: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread André Warnier
Ben Souther wrote: On Thu, 2010-08-19 at 12:45 +0200, André Warnier wrote: Yawar Saeed Khan/ITG/Karachi wrote: Hi, I have developed a web application using jsp and servlets with oracle database. and with Tomcat also ? Look in the subject line. :) Ok, I overlooked the subject line (*).

RE: war not redeploying

2010-08-19 Thread Caldarale, Charles R
From: Sean McEligot [mailto:seanmc...@gmail.com] Subject: Re: war not redeploying I probably just saw another Valve commented out there (comet) and added this one in the same place. Where should it go? Normally, one just uncomments the existing AccessLogValve in conf/server.xml. - Chuck

Re: Feedback Requested: Proposed CLI Tool for Apache Tomcat; kitty.

2010-08-19 Thread Jim Jagielski
Any interest in the code moving to the ASF incubator? On Aug 16, 2010, at 4:06 PM, Networked wrote: Elevator pitch Myself and Peary Chiu have created a lightweight utility for administering Tomcat from the command line in our copious amounts of free time on the weekends. This is a very

Re: war not redeploying

2010-08-19 Thread Sean McEligot
On Thu, Aug 19, 2010 at 9:11 AM, Caldarale, Charles R chuck.caldar...@unisys.com wrote: From: Sean McEligot [mailto:seanmc...@gmail.com] Subject: Re: war not redeploying I probably just saw another Valve commented out there (comet) and added this one in the same place. Where should it go?

Help on Tomcat 6.0.29 and Comet

2010-08-19 Thread Thiago Locatelli da Silva
Hello everybody. We have an application which was developed using comet and gwt and it was build over the tomcat 6.0.16 code. It was working very well and as according to the documentation, we are closing all the come events when we reach the event type ERROR and END. The application has

Re: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread Pid
On 19/08/2010 14:02, Caldarale, Charles R wrote: Yawar Saeed Khan/ITG/Karachi wrote: I have developed a web application using jsp and servlets with oracle database. The application is working fine on windows, Or at least running on that platform hasn't uncovered the latent bugs in your

Re: Is there a better way to disable JSESSIONID in the URLs?

2010-08-19 Thread Pid
On 19/08/2010 13:32, Scott Hamilton wrote: Sorry to pull the thread back to my original problem, but I have one more question here. So far it looks like there's no way to prevent JSESSIONIDs from being injected into URLs that Tomcat might encode unless you implement a servlet filter to

Re: Configure read/write-access in TomCat

2010-08-19 Thread Kenneth
My project-name is Server - but I guess that your answer still is correct. Thanks! Den 19-08-2010 05:06, Christopher Schultz skrev: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mr. Andersen, On 8/18/2010 7:16 AM, K A wrote: security-constraint web-resource-collection

RE: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread Yawar Saeed Khan/ITG/Karachi
Chuck, what you say makes sense but I check the behavior on windows. the problem is in Linux environment only. I would imagine that tomcat configuration might be different on both machines, but have no clue abt configuring tomcat. (maybe session cache issue?) I just installed tomcat 6.0.26 on

Re: Tomcat sessions issue?

2010-08-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Pid, On 8/19/2010 3:25 AM, Pid wrote: On 19/08/2010 04:50, Christopher Schultz wrote: The difference is probably that in other installations you haven't deployed both applications to the root (/) context path. You never did tell us how you

RE: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread Yawar Saeed Khan/ITG/Karachi
Ok, let me share my source code with you... my index.jsp page has a html form which submits the form data to a servlet called loginmanager. this is the code inside doPost function; try { userbean user = new userbean(); // usebean is a class the has setter and getter

Re: JNDI: LDAPv3 with StartTLS

2010-08-19 Thread Felix Schumacher
Am Donnerstag, den 19.08.2010, 09:36 +0200 schrieb Rainer Jung: On 18.08.2010 22:45, Igor Galić wrote: org.apache.catalina.realm.JNDIRealm.getUserByPattern(JNDIRealm.java:1269) This means, that you specified userPattern='...' in your realm configuration. And you since your pattern looks

Re: JNDI: LDAPv3 with StartTLS

2010-08-19 Thread Felix Schumacher
Am Mittwoch, den 18.08.2010, 20:45 + schrieb Igor Galić: org.apache.catalina.realm.JNDIRealm.getUserByPattern(JNDIRealm.java:1269) This means, that you specified userPattern='...' in your realm configuration. And you since your pattern looks like '(uid={0})(...)' it is probably wrong.

Re: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread Konstantin Kolinko
2010/8/19 Yawar Saeed Khan/ITG/Karachi yawar.sa...@mcb.com.pk: Ok, let me share my source code with you...                  HttpSession session = request.getSession(true);                  response.sendRedirect(main.jsp); //logged-in page See documentation on

Re: Is there a better way to disable JSESSIONID in the URLs?

2010-08-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Wesley, On 8/19/2010 3:57 AM, Wesley Acheson wrote: We disabled both accepting of URL sessionId's and the session encoding URLs. Our application has worked well since with no problems. In fact better as we can cache certain pages in their entirity

RE: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread Yawar Saeed Khan/ITG/Karachi
Konstantin, it seems that I will have to use HttpServletResponse.encodeRedirectURL( ) in every hyperlink ? will that solve my sessions problem? From: Konstantin Kolinko [mailto:knst.koli...@gmail.com] Sent: Thu 19-Aug-10 10:00 PM To: Tomcat Users List Subject:

Re: Is there a better way to disable JSESSIONID in the URLs?

2010-08-19 Thread Len Popp
On Thu, Aug 19, 2010 at 12:01, Christopher Schultz ch...@christopherschultz.net wrote: The servlet specification mandates this behavior. Tomcat simply must support it. The spec says nothing of configurability, so Tomcat does not provide any. Hence the need to write a filter to achieve your

Re: JNDI: LDAPv3 with StartTLS

2010-08-19 Thread Igor Galić
Use it as you like. As Rainer has hinted, the apache wiki would be a good place for documentation :) Excellent. Thank you very much, will do that. i - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional

Re: [OT] Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Yawar, I'm marking this as off-topic for /your/ request. I just have some comments for you. Take them or leave them. On 8/19/2010 11:53 AM, Yawar Saeed Khan/ITG/Karachi wrote: Ok, let me share my source code with you... my index.jsp page has a

Re: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Yawar, On 8/19/2010 11:28 AM, Yawar Saeed Khan/ITG/Karachi wrote: Chuck, what you say makes sense but I check the behavior on windows. the problem is in Linux environment only. I would imagine that tomcat configuration might be different on both

Re: truststoreFile vs javax.net.ssl.trustStore

2010-08-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Estanislao, On 8/16/2010 4:34 AM, Estanislao Gonzalez wrote: thanks a lot for your help! I've solved the matter but I have still some questions and some interesting findings I would like to share, so please continue reading this email :-) Glad

Re: JNDI: LDAPv3 with StartTLS

2010-08-19 Thread Rainer Jung
On 19.08.2010 18:55, Igor Galić wrote: Use it as you like. As Rainer has hinted, the apache wiki would be a good place for documentation :) Excellent. Thank you very much, will do that. URL: http://wiki.apache.org/tomcat/ :)

RE: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread Caldarale, Charles R
On 8/19/2010 11:28 AM, Yawar Saeed Khan/ITG/Karachi wrote: Chuck, what you say makes sense but I check the behavior on windows. All that says to me is that your testing environment on Windows is inadequate. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY

Apache reverse proxy to tomcat application server

2010-08-19 Thread linux
Hi List, I'm running mod_jk on a apache 2.2.14 connecting to a second host, running tomcat 5 server with a third party application. This application is configured to display some company internal information when accessing the page directly without any subdirectory: like: http://servername/ A

Re: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread Wesley Acheson
Okay I've a little tehory could you post the entire code for loginmanager. How is udac declared? If its a class variable then *ITS NOT THREAD SAFE*. As a basic rule don't declare class variables in a servlet (There are exceptions to this rule but you shouldn't under normal circumstances)

Re: Apache reverse proxy to tomcat application server

2010-08-19 Thread Rainer Jung
On 19.08.2010 20:27, li...@cgi-net.ch wrote: Hi List, I'm running mod_jk on a apache 2.2.14 connecting to a second host, running tomcat 5 server with a third party application. This application is configured to display some company internal information when accessing the page directly without

Re: war not redeploying

2010-08-19 Thread Sean McEligot
I now have one war that redeploys correctly (Cavs.war) and one that does not redeploy (blview.war) $ ls -l work/Catalina/localhost/ total 0 drwxrwx---+ 1 Administrators SYSTEM 0 2010-08-19 14:35 Cavs drwxrwx---+ 1 Administrators SYSTEM 0 2010-08-19 14:01 blview (todays date) $ ls -l webapps/

Re: Apache reverse proxy to tomcat application server

2010-08-19 Thread linux
On Thu, 19 Aug 2010 20:57:57 +0200, Rainer Jung rainer.j...@kippdata.de wrote: On 19.08.2010 20:27, li...@cgi-net.ch wrote: Hi List, I'm running mod_jk on a apache 2.2.14 connecting to a second host, running tomcat 5 server with a third party application. This application is configured to

Re: Apache reverse proxy to tomcat application server

2010-08-19 Thread Rainer Jung
On 19.08.2010 21:17, li...@cgi-net.ch wrote: On Thu, 19 Aug 2010 20:57:57 +0200, Rainer Jungrainer.j...@kippdata.de wrote: On 19.08.2010 20:27, li...@cgi-net.ch wrote: Hi List, I'm running mod_jk on a apache 2.2.14 connecting to a second host, running tomcat 5 server with a third party

RE: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread Yawar Saeed Khan/ITG/Karachi
source code is attached; suggestions are welcome. From: Wesley Acheson [mailto:wesley.ache...@gmail.com] Sent: Fri 20-Aug-10 12:38 AM To: Tomcat Users List Subject: Re: Sessions mix-up on Tomcat 6.0.26 on Linux Okay I've a little tehory could you post the

Re: Apache reverse proxy to tomcat application server

2010-08-19 Thread André Warnier
li...@cgi-net.ch wrote: Hi List, I'm running mod_jk on a apache 2.2.14 connecting to a second host, running tomcat 5 server with a third party application. This application is configured to display some company internal information when accessing the page directly without any subdirectory:

RE: [OT] Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread Yawar Saeed Khan/ITG/Karachi
thanks for your constructive comments, as I mentioned that bad, bad, bad code is out. no longer in the application... your comments on my current code tells me that this code is not bad, but I should check out tomcat's container managed logins... right? plus I would like to mention that I

Re: Apache reverse proxy to tomcat application server

2010-08-19 Thread linux
On Thu, 19 Aug 2010 21:28:25 +0200, Rainer Jung rainer.j...@kippdata.de wrote: On 19.08.2010 21:17, li...@cgi-net.ch wrote: On Thu, 19 Aug 2010 20:57:57 +0200, Rainer Jungrainer.j...@kippdata.de wrote: On 19.08.2010 20:27, li...@cgi-net.ch wrote: Hi List, I'm running mod_jk on a apache

Re: Is there a better way to disable JSESSIONID in the URLs?

2010-08-19 Thread Wesley Acheson
On Thu, Aug 19, 2010 at 6:25 PM, Len Popp len.p...@gmail.com wrote: On Thu, Aug 19, 2010 at 12:01, Christopher Schultz ch...@christopherschultz.net wrote: The servlet specification mandates this behavior. Tomcat simply must support it. The spec says nothing of configurability, so Tomcat

Re: Apache reverse proxy to tomcat application server

2010-08-19 Thread linux
On Thu, 19 Aug 2010 21:35:40 +0200, li...@cgi-net.ch wrote: On Thu, 19 Aug 2010 21:28:25 +0200, Rainer Jung rainer.j...@kippdata.de wrote: On 19.08.2010 21:17, li...@cgi-net.ch wrote: On Thu, 19 Aug 2010 20:57:57 +0200, Rainer Jungrainer.j...@kippdata.de wrote: On 19.08.2010 20:27,

Re: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread Wesley Acheson
Sorry can't see it. Are you sure you attached it? you could use something like pastebin if the mail list does accept attachments On Thu, Aug 19, 2010 at 9:27 PM, Yawar Saeed Khan/ITG/Karachi yawar.sa...@mcb.com.pk wrote: source code is attached; suggestions are welcome.

Re: [OT] Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread Mark Eggers
Client side validation is for convenience and user feedback. Server side validation is still required. Nothing requires a user to use a browser, or to not use extension like Fiddle or Tamper to play with the information once it's passed your validation scripts. . . . just my two cents. /mde/

Re: Apache reverse proxy to tomcat application server

2010-08-19 Thread linux
On Thu, 19 Aug 2010 21:33:24 +0200, André Warnier a...@ice-sa.com wrote: li...@cgi-net.ch wrote: Hi List, I'm running mod_jk on a apache 2.2.14 connecting to a second host, running tomcat 5 server with a third party application. This application is configured to display some company

tomcat mutual authentication doesn't work

2010-08-19 Thread aravidu
Hi All, I am trying to setup mutual authentication for an app in tomcat/webapps/ folder. I have done the following to create a Trust Store for Tomcat 6.0 to use: I created the keystore and truststore too. keystore has a PrivateKeyEntry and truststore has a trustedCertEntry. Here is my

RE: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread Yawar Saeed Khan/ITG/Karachi
yea I did attach a .java file, anyways I am posting the code here; package org.mcb.services; import java.io.IOException; import java.io.PrintWriter; import javax.servlet.ServletException; import javax.servlet.http.HttpServlet; import javax.servlet.http.HttpServletRequest; import

Re: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread Wesley Acheson
Maybe its just be but I still don't see where uadc is declared or even imported. On Thu, Aug 19, 2010 at 10:26 PM, Yawar Saeed Khan/ITG/Karachi yawar.sa...@mcb.com.pk wrote: yea I did attach a .java file, anyways I am posting the code here; package org.mcb.services; import

Re: Tomcat 5.5 Trust Stores and Client Authentication

2010-08-19 Thread aravidu
Did you finally figure out how to fix this issue? I am having the same issue today.. Can you please help, if you happen to look at this? The only change is I am using tomcat 6.0 Thanks much. -A Ron Perkins-2 wrote: Hi All, I have done the following to create a Trust Store for Tomcat to

Re: tomcat mutual authentication doesn't work

2010-08-19 Thread Ognjen Blagojevic
On 19.8.2010 22:35, aravidu wrote: I created the keystore and truststore too. keystore has a PrivateKeyEntry and truststore has a trustedCertEntry. Are those self-signed certificates? Could you provide exact commands you used to create them? I believe you must have one key pair for server,

Re: JNDI: LDAPv3 with StartTLS

2010-08-19 Thread Igor Galić
- Rainer Jung rainer.j...@kippdata.de wrote: On 19.08.2010 18:55, Igor Galić wrote: Use it as you like. As Rainer has hinted, the apache wiki would be a good place for documentation :) Excellent. Thank you very much, will do that. URL: http://wiki.apache.org/tomcat/ :) Done:

Re: [OT] Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Yawar, On 8/19/2010 3:27 PM, Yawar Saeed Khan/ITG/Karachi wrote: your comments on my current code tells me that this code is not bad, but I should check out tomcat's container managed logins... right? This code seems to be doing more work than

Re: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Wesley, On 8/19/2010 5:04 PM, Wesley Acheson wrote: Maybe its just be but I still don't see where uadc is declared or even imported. ...or even used. I'm guessing that the bad code exists outside of this login servlet. - -chris -BEGIN PGP

Re: tomcat mutual authentication doesn't work

2010-08-19 Thread aravidu
Thank you so much for your response!! To answer your questions: 1. Yes, they are self-signed certificates. 2. Yes, I am dealing with only one client. I am using firefox. Here is the tomcat.keystore entry: (i believe this will be my ServerPrivateKey)