Re: JNDIRealm doesn't work when binding as non-admin user

2014-10-01 Thread Konstantin Kolinko
2014-10-02 1:33 GMT+04:00 Christopher Schultz : > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Jesse, > > On 10/1/14 5:13 PM, Jesse Barnum wrote: >> On Oct 1, 2014, at 8:55 AM, Mark Thomas wrote: >> >>> It is likely to be at least a month before those versions are >>> released. How do you

Re: [OT] Forward TLS connection information from AWS ELB -> httpd -> Tomcat

2014-10-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Stefan, On 10/1/14 5:33 PM, Stefan Mayr wrote: > Hi Christopher, > > Am 01.10.2014 20:40, schrieb Christopher Schultz: >> -BEGIN PGP SIGNED MESSAGE- > ... >> >> I've been trying to get mod_remoteip to handle the client's IP >> address for

Re: JNDIRealm doesn't work when binding as non-admin user

2014-10-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jesse, On 10/1/14 5:13 PM, Jesse Barnum wrote: > On Oct 1, 2014, at 8:55 AM, Mark Thomas wrote: > >> It is likely to be at least a month before those versions are >> released. How do you feel about building from source? The other >> option is th

Re: [OT] Forward TLS connection information from AWS ELB -> httpd -> Tomcat

2014-10-01 Thread Stefan Mayr
Hi Christopher, Am 01.10.2014 20:40, schrieb Christopher Schultz: -BEGIN PGP SIGNED MESSAGE- ... I've been trying to get mod_remoteip to handle the client's IP address for me -- especially for logging -- but I'm having some difficulty and have asked a question over on the httpd users'

Re: JNDIRealm doesn't work when binding as non-admin user

2014-10-01 Thread Jesse Barnum
On Oct 1, 2014, at 8:55 AM, Mark Thomas wrote: > It is likely to be at least a month before those versions are released. > How do you feel about building from source? The other option is that I > can make some snapshot versions available for you to test. > > Mark Sorry for the double-posting.

Re: JNDIRealm doesn't work when binding as non-admin user

2014-10-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jesse, On 10/1/14 4:33 PM, Jesse Barnum wrote: > On Sep 30, 2014, at 4:06 PM, Mark Thomas wrote: > >> On 30/09/2014 20:24, Mark Thomas wrote: >>> On 30/09/2014 15:19, Jesse Barnum wrote: >> >> >> By the way, I've noticed that I get a NPE i

Re: Session lost in Tomcat 5.5.36

2014-10-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Diego, On 9/30/14 6:56 AM, Diego Ruotolo wrote: > Working on my company webapp I notice the following problem: > sometimes the jsession cookie is lost, and therefore my whole http > session is lost. > > The context is: > > - Tomcat v. 5.5.36 > >

Re: JNDIRealm doesn't work when binding as non-admin user

2014-10-01 Thread Jesse Barnum
On Sep 30, 2014, at 4:06 PM, Mark Thomas wrote: > On 30/09/2014 20:24, Mark Thomas wrote: >> On 30/09/2014 15:19, Jesse Barnum wrote: > > > >>> By the way, I've noticed that I get a NPE if I don't define roleBase with >>> an empty string (it should be optional, since I've specified the search

Re: question on certificate use - resending with attachment descriptions in case they get stripped out again. If this doesnt work I will resend the email when I get home

2014-10-01 Thread ray . diaz
Thanks Ongnjen, you gave me the hint I needed to fix the issue! What I did was delete my keystore and start back from scratch. I had to run these extra steps though: keytool -genkey -alias tomcat -keyalg RSA then enter in the exact matching info that was specified in the assigned certificate i

Re: tomcat 8 depends on URL.setURLStreamHandlerFactory method

2014-10-01 Thread Mark Thomas
On 01/10/2014 16:59, Johan Compagner wrote: > Hi, > > we have tomcat completely as an OSGI plugin project: > > https://github.com/Servoy/servoy-eclipse-tomcat/tree/master/org.apache.tomcat > > so that we can start it from our eclipse application and also dynamically > add servlets and filters fr

Re: [OT] Forward TLS connection information from AWS ELB -> httpd -> Tomcat

2014-10-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Stefan, On 10/1/14 2:18 PM, Stefan Mayr wrote: > Am 01.10.2014 19:18, schrieb Christopher Schultz: >> -BEGIN PGP SIGNED MESSAGE- > ... What I'm mainly looking for is a way to say "the incoming connection (from ELB) is HTTP and I w

Re: [OT] Forward TLS connection information from AWS ELB -> httpd -> Tomcat

2014-10-01 Thread Stefan Mayr
Am 01.10.2014 19:18, schrieb Christopher Schultz: -BEGIN PGP SIGNED MESSAGE- ... What I'm mainly looking for is a way to say "the incoming connection (from ELB) is HTTP and I want to pretend that the connection is HTTPS". Then the easier solution seems using ELB for SSL termination an

Tomcat mixing sessions in production, can't reproduce on development

2014-10-01 Thread Fabio Sobral
Hi. We have a GWT web application running on Glassfish for well over a year now, but I never liked it. After much insistence I convinced people to try Tomcat 8 and the results were great. However, after running for 48h in production the user sessions started to get mixed and we reverted to using G

Re: [OT] Forward TLS connection information from AWS ELB -> httpd -> Tomcat

2014-10-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Frederik, On 10/1/14 12:52 PM, Frederik Nosi wrote: > Hi Christopher, > > On 10/01/2014 06:05 PM, Christopher Schultz wrote: >> -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 >> >> Frederik, >> >> On 10/1/14 11:15 AM, Frederik Nosi wrote: >>> Hi

Re: [OT] Forward TLS connection information from AWS ELB -> httpd -> Tomcat

2014-10-01 Thread Frederik Nosi
Hi Christopher, On 10/01/2014 06:05 PM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Frederik, On 10/1/14 11:15 AM, Frederik Nosi wrote: Hi Christopher, On 10/01/2014 04:26 PM, Christopher Schultz wrote: All, I'm interested in using AWS ELB for SSL termination b

Re: Client authentication for specific path

2014-10-01 Thread Cédric Couralet
2014-10-01 18:16 GMT+02:00 Nathan Quirynen : > On 01/10/14 18:08, Christopher Schultz wrote: >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA256 >> >> Nathan, >> >> On 10/1/14 10:02 AM, Nathan Quirynen wrote: >>> Hi Tomcat users, >>> >>> A current application has client authentication configured

Re: Client authentication for specific path

2014-10-01 Thread Nathan Quirynen
On 01/10/14 18:08, Christopher Schultz wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Nathan, > > On 10/1/14 10:02 AM, Nathan Quirynen wrote: >> Hi Tomcat users, >> >> A current application has client authentication configured in the >> SSL Connector (server.xml): >> >> > keystoreFi

Re: Client authentication for specific path

2014-10-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Nathan, On 10/1/14 10:02 AM, Nathan Quirynen wrote: > Hi Tomcat users, > > A current application has client authentication configured in the > SSL Connector (server.xml): > > keystoreFile=".keystore" keystorePass="..." > truststoreFile=".trustst

Re: [OT] Forward TLS connection information from AWS ELB -> httpd -> Tomcat

2014-10-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Frederik, On 10/1/14 11:15 AM, Frederik Nosi wrote: > Hi Christopher, On 10/01/2014 04:26 PM, Christopher Schultz wrote: > All, > > I'm interested in using AWS ELB for SSL termination but allowing > the client's TLS connection information to be fo

tomcat 8 depends on URL.setURLStreamHandlerFactory method

2014-10-01 Thread Johan Compagner
Hi, we have tomcat completely as an OSGI plugin project: https://github.com/Servoy/servoy-eclipse-tomcat/tree/master/org.apache.tomcat so that we can start it from our eclipse application and also dynamically add servlets and filters from all kinds of plugins (so everything is osgi based) Our a

Re: question on certificate use - resending with attachment descriptions in case they get stripped out again. If this doesnt work I will resend the email when I get home

2014-10-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Ognjen, On 9/30/14 4:33 PM, Ognjen Blagojevic wrote: > On 30.9.2014 20:54, ray.d...@usbank.com wrote: >> > secure="true" SSLEnabled="true" >> keystoreFile="C:\Bonaire\REVPORT\.keystore" >> keystorePass="changeit" keyAlias="tomcat2" >> proxyName="r

Re: [OT] Forward TLS connection information from AWS ELB -> httpd -> Tomcat

2014-10-01 Thread Frederik Nosi
Hi Christopher, On 10/01/2014 04:26 PM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, I'm interested in using AWS ELB for SSL termination but allowing the client's TLS connection information to be forwarded all the way through the chain to Tomcat. The setup lo

Re: Tomcat returns Jsp source code as text/plain to the browser

2014-10-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Gadi, On 10/1/14 9:32 AM, Gadi Sastiel wrote: > Probably it happens since our JSP's are not under the WEB-INF > folder. Should be moved there. That's unlikely to be the problem. > Problem solved temporary by adding rewrite rule to the apache > ht

[OT] Forward TLS connection information from AWS ELB -> httpd -> Tomcat

2014-10-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, I'm interested in using AWS ELB for SSL termination but allowing the client's TLS connection information to be forwarded all the way through the chain to Tomcat. The setup looks like this: ELB /\ / \ /\ w0

Client authentication for specific path

2014-10-01 Thread Nathan Quirynen
Hi Tomcat users, A current application has client authentication configured in the SSL Connector (server.xml): And the CA root certificates have been added to the truststore. This way it asks for a client certificate in any case, which works and is fine for this application. For a new applicat

Re: Tomcat returns Jsp source code as text/plain to the browser

2014-10-01 Thread Gadi Sastiel
Probably it happens since our JSP's are not under the WEB-INF folder. Should be moved there. Problem solved temporary by adding rewrite rule to the apache httpd-ssl.conf: RewriteRule ^.*\.jsp/*".*$ - [F] Thanks for everyone who tried to help. On Wed, Oct 1, 2014 at 12:10 PM, Gadi Sastiel wrote

Re: JNDIRealm doesn't work when binding as non-admin user

2014-10-01 Thread Mark Thomas
On 01/10/2014 02:46, Jesse Barnum wrote: > On Sep 30, 2014, at 4:06 PM, Mark Thomas wrote: > >> On 30/09/2014 20:24, Mark Thomas wrote: >>> On 30/09/2014 15:19, Jesse Barnum wrote: >> >> >> By the way, I've noticed that I get a NPE if I don't define roleBase with an empty string (it s

Re: JNDIRealm doesn't work when binding as non-admin user

2014-10-01 Thread Jesse Barnum
On Sep 30, 2014, at 4:06 PM, Mark Thomas wrote: > On 30/09/2014 20:24, Mark Thomas wrote: >> On 30/09/2014 15:19, Jesse Barnum wrote: > > > >>> By the way, I've noticed that I get a NPE if I don't define roleBase with >>> an empty string (it should be optional, since I've specified the search

Re: [ANN] Apache Tomcat 8.0.14 available

2014-10-01 Thread Mark Thomas
On 01/10/2014 11:00, Johan Compagner wrote: > On 1 October 2014 10:48, Mark Thomas wrote: > >> Please refer to the change log for the complete list of changes: >> http://tomcat.apache.org/tomcat-8.0-doc/changelog.html >> > > that one only goes to max .12 (at least at this time) The changelog fo

Re: [ANN] Apache Tomcat 8.0.14 available

2014-10-01 Thread Johan Compagner
On 1 October 2014 10:48, Mark Thomas wrote: > Please refer to the change log for the complete list of changes: > http://tomcat.apache.org/tomcat-8.0-doc/changelog.html > that one only goes to max .12 (at least at this time) -- Johan Compagner Servoy

Re: Tomcat returns Jsp source code as text/plain to the browser

2014-10-01 Thread Gadi Sastiel
In the web.xml under /tomcat/conf/ default org.apache.catalina.servlets.DefaultServlet debug 0 listings false 1 default / -

[ANN] Apache Tomcat 8.0.14 available

2014-10-01 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat 8.0.14. Apache Tomcat 8 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language and Java WebSocket technologies. Apache Tomcat 8.0.14 includes numerous fixes for

Re: Tomcat returns Jsp source code as text/plain to the browser

2014-10-01 Thread Mark Thomas
On 01/10/2014 08:14, Gadi Sastiel wrote: > Hi, the request is seen on the tomcat access log ( i've changed the > path deliberately) > > [01/Oct/2014:10:01:27 +0300] "GET /x/yy/z/Page.jsp%22 > HTTP/1.1" 200 30223 OK. Given that this doesn't happen on a clean Tomcat install it is l

Re: Tomcat returns Jsp source code as text/plain to the browser

2014-10-01 Thread Gadi Sastiel
Hi, the request is seen on the tomcat access log ( i've changed the path deliberately) [01/Oct/2014:10:01:27 +0300] "GET /x/yy/z/Page.jsp%22 HTTP/1.1" 200 30223 Thanks Gadi On Tue, Sep 30, 2014 at 10:06 PM, André Warnier wrote: > Gadi Sastiel wrote: > >> I have in httpd.conf: >