Re: How to *properly* create and use a CATALINA_BASE installation

2021-11-16 Thread Mark H. Wood
The Gentoo Linux packaging of Tomcat does a nice job of laying out separate CATALINA_HOME and one or more CATALINA_BASE trees, if you'd like something to study. -- Mark H. Wood Lead Technology Analyst University Library Indiana University - Purdue University Indianapolis 755 W. Michigan S

Re: javax.servlet vs jakarta.servlet?

2022-01-03 Thread Mark H. Wood
t. You may wish to have a look at https://stackoverflow.com/a/12160863/2916377 -- Mark H. Wood Lead Technology Analyst University Library Indiana University - Purdue University Indianapolis 755 W. Michigan Street Indianapolis, IN 46202 317-274-0749 www.ulib.iupui.edu signature.asc Description: PGP signature

Re: correct usage of properties to supply database port

2022-03-11 Thread Mark H. Wood
uot;5" >   logAbandoned="true" >   username="shoc" >   password="password" >   /> > >   >         className="org.apache.catalina.valves.AccessLogValve" >     prefix="s

Re: Encryption of Tomcat AJP

2022-05-19 Thread Mark H. Wood
simple and straightforward. > > Would it make sense to create a solution with less caveats and up to date > security requirements? If the OP's cyber security group insists, then maybe they would care to give him their requirements and suggestions for setting up IPSEC. -- Mark H.

Re: Mod_JK vs Mod_Proxy

2022-12-06 Thread Mark H. Wood
well but I very much prefer the way mod_proxy_ajp integrates with the proxy configuration in HTTPD. -- Mark H. Wood Lead Technology Analyst University Library Indiana University - Purdue University Indianapolis 755 W. Michigan Street Indianapolis, IN 46202 317-274-0749 www.ulib.iupui.edu signature.asc Description: PGP signature

Re: AW: AW: Password in Tomcat 9.x

2023-01-20 Thread Mark H. Wood
different means. -- Mark H. Wood Lead Technology Analyst University Library Indiana University - Purdue University Indianapolis 755 W. Michigan Street Indianapolis, IN 46202 317-274-0749 www.ulib.iupui.edu signature.asc Description: PGP signature

Re: AW: AW: AW: Password in Tomcat 9.x

2023-01-23 Thread Mark H. Wood
ing it, there may not *be* a way to specify "no encryption" of the PKCS12 structure itself, only ways to express a zero-length password. Of course I pay strict attention to file and directory permissions. -- Mark H. Wood Lead Technology Analyst University Library Indiana Universit

Re: JNDI match of LDAP hashed passwords fail against cleartext

2020-04-21 Thread Mark H. Wood
e clever uses they hadn't thought of. One result is a rather Wild West approach to using directory services for authentication. (I see this also in services dedicated to authentication: seemingly no two organizations use CAS in the same way.) -- Mark H. Wood Lead Technology Analyst Unive

Session attribute disappears across requests

2020-05-26 Thread Mark H. Wood
s proxied through Apache HTTPD via AJP.) -- Mark H. Wood Lead Technology Analyst University Library Indiana University - Purdue University Indianapolis 755 W. Michigan Street Indianapolis, IN 46202 317-274-0749 www.ulib.iupui.edu signature.asc Description: PGP signature

Re: Session attribute disappears across requests

2020-05-26 Thread Mark H. Wood
wrong place to clean it up anyway. Sorry for the noise. -- Mark H. Wood Lead Technology Analyst University Library Indiana University - Purdue University Indianapolis 755 W. Michigan Street Indianapolis, IN 46202 317-274-0749 www.ulib.iupui.edu signature.asc Description: PGP signature

Re: Browser complains of "weak signature algorithm" in cert on a new Tomcat installation. Does anybody here know anything about that sort of thing

2021-01-07 Thread Mark H. Wood
rtified public key was signed by hashing it with SHA1 and then encrypting the hash with the CA's RSA private key. I just remembered that your browser probably has a way to display details of a certificate, too. BTW that certificate above was issued in 1999, when SHA1 was considered sufficient.

Re: [OT] programming style or mental process ?

2021-04-09 Thread Mark H. Wood
I've appreciated this discussion. It's caused me to think a bit more about my use of this pattern. [regarding tests for null references] This has got me wondering why there is no operator for such an irritatingly common need: if (my_reference isNull) { ... } -- Mark H. Wood Lead

Re: [EXTERNAL] Re: tomcat timeout

2021-04-16 Thread Mark H. Wood
I decided that just lengthening timeouts was a losing strategy, because these particular reports can be requested over any portion of a record set that steadily grows in size, and can thus take longer to generate every month. Your situation may be different. -- Mark H. Wood Lead Technolog

Re: Problem posting to Tomcat ssl connector ..

2021-06-01 Thread Mark H. Wood
going on!? I suppose there's nothing useful in the logs? Can anyone suggest adjustments that might log relevant observations? -- Mark H. Wood Lead Technology Analyst University Library Indiana University - Purdue University Indianapolis 755 W. Michigan Street Indianapolis, IN 46202 317-274-0749 www.ulib.iupui.edu signature.asc Description: PGP signature

Re: Most recent security-related update to 8.5? And setting up access to Manager?

2021-06-21 Thread Mark H. Wood
. https://tomcat.apache.org/tomcat-7.0-doc/config/valve.html#Remote_CIDR_Valve I got so tired of those eye-watering IP address REs that I wrote my own CIDR-based Valve some years ago, but I'm happy to discover that I can now throw it away and use one that ships with Tomcat. -- Mark H. Wood Lead

Re: Re-Use TCP Source Ports if the Socket is Unique?

2021-06-25 Thread Mark H. Wood
ase knows which distant hosts should be reachable via each local address. 'connect' should use this to pick an address that can reach the distant host, assign an unallocated port, and send SYN to request a connection. So the answer to your question is "it depends on the service

Re: Tomcat producing (near) duplicate Catalina logs

2008-06-16 Thread Mark H. Wood
;s a shame that the package is in such a poor state, because it has a number of clever and useful features which are rarely mentioned. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "intuitive" he means the exact opposite. pgp1UL7EgEQWH.pgp Description: PGP signature

Re: Logging for Dummies in Tomcat 5.5/6.0

2008-06-19 Thread Mark H. Wood
ies whose names are specified by the logger. The only distro-specific thing in any of this is the particular paths assigned to these properties, and determining those values is the responsibility of the asker because, as you say, you cannot know them in advance. But an answer expressed in ter

Re: Logging for Dummies in Tomcat 5.5/6.0

2008-06-19 Thread Mark H. Wood
scovered long ago on my Linux Debian Etch system, but could not > figure out how Tomcat found it or used it. Tomcat doesn't find or use it. The logging package does that. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "intuitive" he means the exact opposite. pgpInunMsNEg7.pgp Description: PGP signature

Re: Mapping question

2008-06-26 Thread Mark H. Wood
fic is routed properly. I can't say anything about sharing a single copy of a webapp on three vhosts, because although two of our three vhosts are running the same webapp, each has a separate on-disk copy. We need to keep them that way, since the services are updated on unrelated schedules. -- M

Re: logging

2008-07-08 Thread Mark H. Wood
n mind that there should still be a local "log of last resort" to note the evidence when network logging fails. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "intuitive" he means the exact opposite. pgp

Re: Strange startorder of webapps

2008-08-11 Thread Mark H. Wood
n lexical order. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "intuitive" he means the exact opposite. pgpwKSCP0nZKD.pgp Description: PGP signature

Re: where to place context configuration

2008-08-14 Thread Mark H. Wood
alf, it Just Works. Currently on Tomcat 6.0.16, but I've had this frustration with 6.0, 5.5, and I believe 5.0. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "intuitive" he means the exact opposite. pgpQTeCbpaS7X.pgp Description: PGP signature

Re: HOW TO install/setup 2 instances of tomcat on same server

2008-08-21 Thread Mark H. Wood
, as we update a developing app. a mere dozen times. I am ever so happy to have not just separate production and development containers, but separate hosts, to contain the problems of unfinished software until they can be fixed. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typi

Re: [programmazione] Struts vs JSF (poll?)

2008-08-25 Thread Mark H. Wood
nice clean site that Just Works. So when selecting technology, do consider the balance between providing useful functionality to the users and just bothering them. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "intuitive&quo

Re: Struts vs JSF (poll?)

2008-08-26 Thread Mark H. Wood
opinions don't carry as much weight as others (having your > opinion carry more weight is one of the perks of moving up the ladder > after all). Yes, borrow as many brains as you can, and give everyone a chance to contribute. THEN make the decision, and be clear that what is decided is

Re: SNMP tomcat 5.5!

2008-09-12 Thread Mark H. Wood
gt; Is there any MIBS that I can use? > > In short, you can't. Tomcat does not provide SNMP, even with the Admin app. Hep probably means something like this: http://java.sun.com/j2se/1.5.0/docs/guide/management/SNMP.html -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED]

Re: Appeal to Tomcat developers

2008-10-16 Thread Mark H. Wood
t; /myserver/manager/logs Because it is waiting for YOU to write it? -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "intuitive" he means the exact opposite. pgpiNkIPIPa0f.pgp Description: PGP signature

Re: Appeal to Tomcat developers

2008-10-16 Thread Mark H. Wood
it's appropriate to point out that much more subtle arrangements are available, and when you want more, come back, here are pointers to all the hairy details. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "intuitive&

Tomcat 5.5 destroys $TOMCAT_HOME/Catalina/[host]/[app].xml on reload

2007-05-21 Thread Mark H. Wood
changed) so I can't just pile them into 'server.xml' even if that weren't bad form. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "intuitive" he means the exact opposite. pgpcce84PISkL.pgp Description: PGP signature

Re: How-to make default Running status = false

2007-05-23 Thread Mark H. Wood
x27;host' element's 'deployOnStartup' attribute looks like it would do this, if set to 'false'. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "intuitive" he means the exact opposite. pgpHVHN2a8u4Q.pgp Description: PGP signature

Re: How to monitor Tomcat Server.

2007-05-24 Thread Mark H. Wood
mebody to watch screens and check things periodically. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "intuitive" he means the exact opposite. pgpxkmTChiio2.pgp Description: PGP signature

Re: Server.xml Sort on Start

2007-05-24 Thread Mark H. Wood
of what went wrong each time might be useful. As you spot patterns, you may be able to develop antibugging techniques and tools to better avoid the common problems. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "intuitive" he means the exact opposite. pgp6j3MqFMdLN.pgp Description: PGP signature

Re: How-to make default Running status = false

2007-05-25 Thread Mark H. Wood
s deployXML='false'. Otherwise the webapp itself will supply a Context. Tomcat will generate a Context on its own in some circumstances which I've not yet completely worked out from the documentation. How did you disable this? -- Mark H. Wood, Lead System Programmer [EM

Re: Server.xml Sort on Start

2007-05-25 Thread Mark H. Wood
red on insertion. Hashing data is like hashing meat and potatoes: the result is expected to be finely divided and well mixed. --- * You could sort its content into some other data structure, but apparently that's not done here. -- Mark H. Wood, Lead System Programmer [EM

Re: How to customize the context paths for several web application.

2007-06-04 Thread Mark H. Wood
code a 'path' attribute in the Context element. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "intuitive" he means the exact opposite. pgp4YDWzpIkwI.pgp Description: PGP signature

Re: New to Apache

2007-10-02 Thread Mark H. Wood
iation of a folder with an address and providing a button for "send to this folder's associated address". -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "intuitive" he means the exact opposite. pgpcSwaAsBimg.pgp Description: PGP signature

Re: Copying large files around

2007-10-15 Thread Mark H. Wood
nstead of scripting it from your webapp. > > Or in this case scp (or rcp, or sftp, or ftp) ? Definitely. While you're at it, just pipe the backup stream through instead of collecting a huge file on host A and then moving it to host B. I have some DBMS backups that run that way. --

Re: Copying large files around

2007-10-15 Thread Mark H. Wood
y until the job is done. I still use it to throw huge files across WAN paths, even dialup links. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] "Don't throw the past away. / You might need it some rainy day." pgpjPpH7E7dZP.pgp Description: PGP signature

Tomcat 5.5: org.apache.catalina.startup.HostConfig logs too much

2007-10-15 Thread Mark H. Wood
host/host-manager.xml -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "intuitive" he means the exact opposite. pgpOxPa7PBlzd.pgp Description: PGP signature

Re: tomcat/java process strangeness

2007-10-19 Thread Mark H. Wood
s of procps v2. At one point I had one Tomcat running on Red Hat Linux and another on Gentoo Linux, and one showed a huge number of Tomcat "processes" while the other showed only one. Switching attention between the two was, uh, interesting. -- Mark H. Wood, Lead System Programmer [EM

Re: Best Linux distribution

2007-11-14 Thread Mark H. Wood
27;ll take Gentoo any day, but I'm a very hands-on, tweak-the-last-cycle-out, do-it-with-a-text-editor-or-don't-do-it sort of sysadmin. There are good reasons to choose any of those, or others, and you have to decide which reasons are yours. -- Mark H. Wood, Lead System Programmer [EM

Re: User roles

2007-12-14 Thread Mark H. Wood
I wonder if the OP means the shutdown password? That's in server.xml, and the only consequence of changing it that I know of is that your shutdown script needs to be kept in sync. with this or it won't work. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when

Re: Why use a Web Server over Tomcat?

2008-01-08 Thread Mark H. Wood
of returning port-not-reachable * many many well-tested specialty modules for Apache HTTPD should you need to do something out of the ordinary -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "intuitive" he me

Re: Is Tomcat FIPS compliant

2008-01-14 Thread Mark H. Wood
That probably depends on which FIPS you mean. There are at least 201 different U.S. Federal Information Processing Standards. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "intuitive" he means the exac

Re: How can I preserve a directory on Deployment?

2008-01-16 Thread Mark H. Wood
Well, I probably wouldn't put that directory anywhere near $TOMCAT_HOME; I'd want it somewhere on /var with other volatile and temporary stuff. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "intuitive"

Re: Ordered loading of WAR files

2008-01-23 Thread Mark H. Wood
27;t say anything about Tomcat owning these files and being allowed to create and destroy them at will. The documentation apparently doesn't reflect the behavior of the code. Let me say that I find the documented behavior much more useful than what we actually get. -- Mark H. Wood, Lead Syst

Re: 30 Mb of common jars in each of 5 war files, should i consolidate?

2007-06-08 Thread Mark H. Wood
Okay, I'll ask: why? -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "intuitive" he means the exact opposite. pgpeFZrT5TC4a.pgp Description: PGP signature

Re: Programmatically Determine JVM Version used by Tomcat

2007-06-08 Thread Mark H. Wood
uage="java" contentType="text/html; charset=US-ASCII" pageEncoding="US-ASCII"%> http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd";> http://www.w3.org/1999/xhtml";> Dummy Web Application This is a test. Java Runtime Environment versi

Re: Programmatically Determine JVM Version used by Tomcat

2007-06-08 Thread Mark H. Wood
/manager/serverinfo OK - Server info Tomcat Version: Apache Tomcat/5.5 OS Name: Linux OS Version: 2.6.18-gentoo-r6 OS Architecture: i386 JVM Version: 1.5.0_11-b03 JVM Vendor: Sun Microsystems Inc. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a

Re: Embed license to tomcat

2007-06-08 Thread Mark H. Wood
host B has different NIC(s). Having to re-register a product for reasons unrelated to the product is a negative Customer Experience, and the marketplace will punish such designs. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is

Re: Stop deployOnStartup for only one webapp

2007-06-15 Thread Mark H. Wood
n you want it. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "intuitive" he means the exact opposite. pgpyToR6JHnz1.pgp Description: PGP signature

Re: JavaMail SMTP authentication in JSP

2007-07-13 Thread Mark H. Wood
If you *do* get it working with TLS, I'd appreciate hearing how. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "intuitive" he means the exact opposite. pgpvqA6KJOlKV.pgp Description: PGP signature

Re: Tomcat and JRE redistribution

2007-07-19 Thread Mark H. Wood
o, and didn't cause any trouble. That is so rare that they will think of you first the next time they need software. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "intuitive" he means the exact opposite. pgpCWYrsu9OB6.pgp Description: PGP signature

Re: Tomcat with 8 GB memory

2007-07-31 Thread Mark H. Wood
e, etc. Then there were a number of designs built around the Zilog Z80, by Radio Shack, Sinclair, and others. Intel's line never caught on beyond the industrial and hobbyist markets until the 8086, but there were plenty of others. CP/M's market was 8-bit machines. -- Mark H. Wood, Lead S

Re: Tomcat with 8 GB memory

2007-07-31 Thread Mark H. Wood
uot;64-bit machines are faster/slower" really don't say much outside the context of a specific application. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "intuitive" he means the exact opposite. pgp7

Re: Recovery from OutOfMemoryError?

2007-08-01 Thread Mark H. Wood
Would you (or anyone) care to provide a link to where I can learn more about swatch? Everything I've turned up so far points to a wanna-be replacement for UTC called "internet time" promoted by a watchmaker. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically

Re: Installing Tomcat on Linux

2007-08-03 Thread Mark H. Wood
f Tomcat source on my desk right now, and a pile of somebody else's servlet code as well. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "intuitive" he means the exact opposite. pgpu9wPj3oawH.pgp Description: PGP signature

Re: How to avoide delete context.xml - 6.0.14

2007-08-03 Thread Mark H. Wood
st/myapp.xml will be deleted by the server > automatically. > > So I have to provide the file again, and to restart the server ;( > > In 5.0.30 it works so cool... If you get an answer off-list, please share. 5.5 has the same problem. -- Mark H. Wood, Lead System Programmer

Re: Installing Tomcat on Linux

2007-08-03 Thread Mark H. Wood
g a source kit that you intend to blindly install. I doubt this would sway many sysadmin.s. As another Gentoo fan, I'd certainly get source and tweak the living daylights out of the build configuration and compiler switches of any non-Java app. I wanted. But I probably wouldn't do the sam

Re: RES: RES: Context.xml file

2007-08-17 Thread Mark H. Wood
security depends on the trustworthiness of that human. The choice is made based on whether you think you are likely to lose more by someone breaking into the machine's privileged accounts, or by ignoring customers until a human notices the request for secrets. -- Mark H. Wood, Lead System Progr

Re: Tomcat Feature List

2007-08-28 Thread Mark H. Wood
I take it that you found http://tomcat.apache.org ? In what way does it not answer your question? Your question is rather vague -- the answer depends on what you consider to be a "feature". What do you expect to find? -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typi

Re: Need info on IPv6 support for Tomcat in RHEL and SLES distros

2007-08-31 Thread Mark H. Wood
to have done a thorough job. But I wouldn't be surprised to find that there are applications which will need some fixing for v6. Have a look at this for starters: http://java.sun.com/javase/6/docs/technotes/guides/net/ipv6_guide/index.html -- Mark H. Wood, Lead System Programmer [EMAIL

Re: Context deletion on redeploy

2007-09-12 Thread Mark H. Wood
ple of Least Surprise. Programs should not muck with their own configurations on their own initiative. Sysadmin.s expect the settings they make to stay set. If they need to override default values within a .war, their changes shouldn't be blown away with every redeployment. -- Mark H. Wo

Re: is jsvc not used here? Re: slow shutdown with jsvc

2007-09-13 Thread Mark H. Wood
Gentoo Linux comes with its own startup script for Tomcat (using, I believe, tools from Debian) that fits into the Gentoo startup structure, so one doesn't need jsvc there. I suppose that many other distro.s do likewise, although some may use jsvc "under the covers". -- Mar

Re: Xmx and Xms size

2008-01-30 Thread Mark H. Wood
pplication design, bigger/faster hardware, network optimization, whatever). -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "intuitive" he means the exact opposite. pgpDnJKNkbGhr.pgp Description: PGP signature

Re: Xmx and Xms size

2008-01-30 Thread Mark H. Wood
larly. Again, you either know all about your system and can calculate this already, or you pick any non-ridiculous number and measure/adjust until you are satisfied. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "intuitive

Re: Using mod_jk with other Java programs

2008-02-19 Thread Mark H. Wood
phons off for that worker. (The URL/worker mapping is done with jkMount directives in the main config.) -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "intuitive" he means the exact opposite. pgpgPnqFeVfpe.pgp D

Re: Apache2 adn/or Tomcat6?

2008-02-22 Thread Mark H. Wood
make arbitrary changes anywhere on your server. If I ever have time to do something about that, I'll be sure to submit a patch. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "intuitive" he means the exact opposite.

Re: Apache2 adn/or Tomcat6?

2008-02-25 Thread Mark H. Wood
he last time I looked at jsvc, or the documentation has improved quite a bit. I've tried it before and it wouldn't do what I wanted. Time to try again. Thanks. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "

Re: Configuring Tomcat for multiple users

2008-02-25 Thread Mark H. Wood
/Catalina/$HOST/$CONTEXTNAME.xml on the user's behalf. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "intuitive" he means the exact opposite. pgpvEJOFTk10Q.pgp Description: PGP signature

Re: Security and Performance Configuration

2008-02-25 Thread Mark H. Wood
Well, IF you are sure you want to use Apache HTTPD to frontend Tomcat, there's no reason for Tomcat to run an HTTP connector at all. Just use the AJP connector, and only allow it to listen to your frontend service(s), or firewall it away from the Big Bad Internet. (Or both.) -- Mark H.

Re: mod_jk or mod_proxy_ajp - encryption benefits?

2008-03-03 Thread Mark H. Wood
A hollow voice whispers, "IPSec". -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "intuitive" he means the exact opposite. pgpXHb0gRtjuo.pgp Description: PGP signature

Re: tomcat-users.xml

2008-03-12 Thread Mark H. Wood
On Tue, Mar 11, 2008 at 06:37:03PM +, Mark Thomas wrote: > Tomcat re-writes the file. Any comments are lost. Real users, groups etc > will be kept. Since the question came up, would someone please tell me *why* Tomcat does such a strange thing? -- Mark H. Wood, Lead System Prog

Re: Making the most of 8G of RAM

2008-03-18 Thread Mark H. Wood
y* or it will croak" then your developers are insufficiently trained. Code so haywired that it depends on the quirks of a single version of anything in its environment is too fragile for production use. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a softwar

Re: [OT] RE: Making the most of 8G of RAM

2008-03-18 Thread Mark H. Wood
your app.s. In that case you may want to see if giving some of it back to the OS (see caching above) would give better overall performance. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "intuitive" he means

Re: Top mail servers

2008-03-28 Thread Mark H. Wood
configuring it. Properly setting up an MUA, *any* MUA, is not simple. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "intuitive" he means the exact opposite. pgpNOiorupUkj.pgp Description: PGP signature

Re: Securing Tomcat on FC8

2008-03-28 Thread Mark H. Wood
ngle executable. Anyway, recent Tomcat exposes the necessary methods to be run by jsvc. I don't use jsvc yet, but I want to experiment a bit and eventually submit patches to Gentoo to replace the current complicated rigmarole in their Tomcat startup script with something simpler built aro

Re: Deleting context xml files

2008-04-02 Thread Mark H. Wood
e context file. But I haven't seen it happen recently. I may have been keeping the affected '.war's in the appbase directory, and then moved them out. The fundamental rule seems to be: don't keep any part of your app. in Tomcat's own directories, except a context specif

Re: Tomcat has stopped working

2008-04-07 Thread Mark H. Wood
"iSeriesNavigator" sounds like some application that came with your IBM i-Series hardware. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "intuitive" he means the exact opposite. pgp61d45t1yD0.pgp Description: PGP signature

Re: Why use SOAP in Java

2008-04-09 Thread Mark H. Wood
I wonder if the real question here is not more like: what advantage does one gain in using RPC rather than some other method? I must admit that I sometimes ask myself that question. I must also admit that this whole thread is too general to be topical on the Tomcat list. -- Mark H. Wood, Lead

Re: jsvc creates pid file owned by root

2008-04-10 Thread Mark H. Wood
Do you *really* want that file to be world-writable? Why not 644? -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "intuitive" he means the exact opposite. pgp8EEJOzvw1S.pgp Description: PGP signature

Re: Changing the Webapps directory

2008-04-10 Thread Mark H. Wood
need access to remote resources. On older versions you'd need to create or select a domain account, grant it sufficient rights and privileges on the host, and use that account to run your service. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor

Re: Problem with datasource connecting to postgresql

2008-04-17 Thread Mark H. Wood
empted, it wouldn't appear to be a problem with the database user. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "intuitive" he means the exact opposite. pgpotqU5kaI4g.pgp Description: PGP signature

Re: tomcat disappearing...

2008-04-24 Thread Mark H. Wood
are signs of severe memory pressure. You could also investigate by experiment: try to provide a lot more swap space and see if the problem is alleviated. If this is it, the real cure is more memory. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor s

Re: httpd SSL -> Tomcat VS. Tomcat SSL standalone?

2008-04-28 Thread Mark H. Wood
y using OpenSSL facilities plus its own "mixer", and I don't know what your JRE uses. If your processor provides a source of randomness that you trust, be sure it's being used, since a number of sources (keyboard and mouse event timing, for example) are of little use on a s

Re: Hot deploy deletes my context file...

2008-05-02 Thread Mark H. Wood
his drove me crazy for a while. Eventually I began keeping the .war files *out* of /webapps and I haven't seen this problem for a while. You'll need to add the docBase attribute to the Context to point to such an "external" webapp. -- Mark H. Wood, Lead System Programmer [EM

Re: Best practice? configuration of a web application

2008-05-28 Thread Mark H. Wood
want to do that. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "intuitive" he means the exact opposite. pgpL6aT0Blf51.pgp Description: PGP signature

Does HTTPRequest.getParameter() return encoded or decoded?

2008-06-04 Thread Mark H. Wood
If there's a better place to ask, please direct me. I'm tracking down a problem with third-party code which looks more and more like double URI-decoding. But I can't find anywhere in the servlet documentation where it says whether getParameter returns decoded or encoded data.

Re: Does HTTPRequest.getParameter() return encoded or decoded?

2008-06-05 Thread Mark H. Wood
nner in working with servlet code myself I want to be very sure there is not a good reason for these calls. I think now I'm sure enough to take them out. Thanks! -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is "intuitiv

Re: request for simplistic Tomcat 5.5 log config

2008-06-09 Thread Mark H. Wood
d find that the logs have eaten up all the available space. If /var/log fills up, we lose a few data that have a 1:1 chance of being interesting; if /var fills up, we lose customers because nothing works for them. So, that's why some people insist on separating files that have different li

Re: log viewer

2010-01-14 Thread Mark H. Wood
Oh, come on, guys. The log4j package includes the log viewers "chainsaw" and "lf5". There are probably others, but these are the only ones I can recall quickly. (And I'm not at all experienced with either one yet, sorry.) -- Mark H. Wood, Lead System Programmer mw..

Re: Allocated memory and VMWare

2010-01-15 Thread Mark H. Wood
t of time. So overcommitting a VMware host might be a reasonable short-term approach while one is budgeting, pushing papers, and waiting for one's purchase to arrive. -- Mark H. Wood, Lead System Programmer mw...@iupui.edu Friends don't let friends publish revisable-form documents. pgp5KVksBmkqe.pgp Description: PGP signature

Re: Securing Tomcat Applications from Reverse Engineering

2010-01-21 Thread Mark H. Wood
Reverse engineering is not a technical problem; it is a legal problem. You need a lawyer, not a program. -- Mark H. Wood, Lead System Programmer mw...@iupui.edu Friends don't let friends publish revisable-form documents. pgpRmc02QIJYG.pgp Description: PGP signature

Re: [OT] Re: Securing Tomcat Applications from Reverse Engineering

2010-01-22 Thread Mark H. Wood
On Thu, Jan 21, 2010 at 03:02:41PM +, Peter Crowther wrote: > 2010/1/21 Mark H. Wood > > > Reverse engineering is not a technical problem; it is a legal > > problem. You need a lawyer, not a program. > > > > Mmm, yes and no. Burglary is also a legal problem, b

Re: JSP Page "hangs"... clues?

2010-02-11 Thread Mark H. Wood
all that memory back and continue as if nothing had happend. Maybe you've found a way to do something similar with Tomcat, but it takes 16 minutes to cycle. Just waiting until you think it's been long enough is not a very strong test. What's it doing while you wait? is a question

Re: [OT] Tomcat dies suddenly

2010-02-16 Thread Mark H. Wood
classes were in session the EMI was picked up by my keyboard. (Written from one of my xterms.) -- Mark H. Wood, Lead System Programmer mw...@iupui.edu Friends don't let friends publish revisable-form documents. pgpu1LttJE0ti.pgp Description: PGP signature

Re: [OT] Batch-processing of emailed log4j log messages

2010-02-24 Thread Mark H. Wood
An alternative approach: you could pump the messages through a mailing-list digest builder. You may get 100 messages in five minutes, but you only get interrupted once. Sorry, I've never run a digested list so I don't have a name handy. -- Mark H. Wood, Lead System Progr

Re: Apache Tomcat 5.5.34 Question (UNCLASSIFIED)

2011-09-30 Thread Mark H. Wood
Consider something like: $ openssl rand -base64 32 DJaLgg+fcT8ygQVCd1uKcpLAuxGPmEWhv7j+aorobVs= if you want help coming up with reasonably hard-to-guess secrets. -- Mark H. Wood, Lead System Programmer mw...@iupui.edu Asking whether markets are efficient is like asking whether people are

Re: Denying IPs using the Valve command in context.xml

2011-10-05 Thread Mark H. Wood
styles out of my head. Again, I should try writing a DNS-style globber. It might be fun. (But don't hold your breath waiting for it.) -- Mark H. Wood, Lead System Programmer mw...@iupui.edu Asking whether markets are efficient is like asking whether people are smart. pgpBlPBdN6hmN.pgp Descri

  1   2   >