Re: AW: security issue: tomcat on port 80

[E B]

Dr. Evil:
Have you tried asking your question in the linux
mailing lists ? What do those guys got to say about
this restriction to bind to ports < 1024 in the
present day server systems?



 --- "Dr. Evil" <[EMAIL PROTECTED]> wrote: > > The VM
itself is typically writen in C/C++, so I
> wouldn't beg on more=20
> > safety for a VM than Apache.
> 
> That's probably true.  However, the likelihood of
> someone being able
> to send a web request to Tomcat that will result in
> Tomcat triggering
> a buffer overflow in the VM seems ridiculously
> small.  It's not like
> the VM is executing arbitrary code from users, even
> though it is
> designed to be able to do that safely.
> 
> > And there are other potential risks running tomcat
> as root. (If you=20
> > make a configuration or implementation error that
> allows to store
> > JSP on the server, an intruder can do anything on
> your server)
> 
> Yeah, that could be a big problem.
> 
> > This was introduced to protect the ports that are
> used for the most
> > fundamental services from missuse by any user.
> 
> Which is plain old stupid, I must say.  It's not
> like Yahoo sells
> shell accounts on www.yahoo.com, right?  It dates
> from the good old
> days (now long gone) when root/sysadmins users
> basically trusted other
> root users, but didn't trust their own misbehaving
> shell account
> users.  This is totally irrelevant on today's
> Internet.  In the old
> days there had to be many users on one machine doing
> different things
> because machines were expensive.  Machines today are
> not shared.  They
> are owned and used by single entities, and for
> server machines (like
> www.yahoo.com) the only people with access to the
> machine are ones who
> already have root access.  Either you trust the
> machine and all of its
> sysadmins and users, or you don't.  How many
> companies still sell
> shell account service?  This OS limitation no longer
> has any security
> upside, and it has a huge downside, which is that
> the same process
> which runs CGIs or servlets also has (at some point)
> the power to edit
> /etc/passwd, and similar things which it should not
> have the
> capability of doing.
> 
> The ultimate solution for this is capabilities based
> security.  At a
> very fundamental level, I should be able to give a
> proc the capability
> to bind to a port without also giving it the
> capability to edit
> /etc/passwd or read arbitrary RAM.  The "uid 0 to
> bind < 1024"
> restriction just makes things worse.
> 
> I'm still waiting for TrustedBSD which will
> implement all this.
> Pretty much every exploit known in the Unix world
> has, as one of its
> steps, or as its end goal, getting root.  The
> solution to this is to
> not have root, obviously.
> 
> --
> To unsubscribe:  
> 
> For additional commands:
> 
> Troubles with the list:
> 
>  


Nokia 5510 looks weird sounds great. 
Go to http://uk.promotions.yahoo.com/nokia/ discover and win it! 
The competition ends 16 th of December 2001.

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Unable to include *.sum files (Again)

[Kusel, Jonathan J]

Hi all,

Thanks for all the responses(including the debate) to this question! It made
some real interesting reading material after the SHORT weekend! To get back
to August's suggestion: we've tried it but our problem is that the file
content is generated by a VB program and 
contains some funny characters e.g. "CPI" rather than "CPI". When we
translate these to a string it either comes out as ?CPI? or as illustrated
in the attached image(This is also how
it displays in JBuilder).

Regarding the debate I tend to agree with Jeff. If you want to display the
pure contents of a file you should be able to include the file using
 without having to define a mime type. I mean what happens if
you want to include a "code" example, for example a code snippet that
illustrates how to code something in C,C++,Java etc. If you define the mime
type it will try to translate it, which is not what we want in this case...
You could define it as type text but now you need to maintain two mime types
for one extension? Just doesn't sound right to me. The other thing that
bothers me is the fact that it works for the <%@ include...%> directive but
not for the  surely they should perform similar actions
simply using a different syntax? 

Thanks again,
Jonathan 

-Original Message-
From: August Detlefsen [mailto:[EMAIL PROTECTED]]
Sent: 09 December 2001 01:53
To: Tomcat Users List
Subject: Re: Unable to include *.sum files (Again)


If it does use PrintWriter to write the output, then it makes sense for
it to only output text. See this from the PrintWriter javadoc: 

Print formatted representations of objects to a text-output stream.
This class implements all of the print methods found in PrintStream. It
does not contain methods for writing raw bytes, for which a program
should use unencoded byte streams. 

If you want to include files of non-text types (or types that are text,
but not included in your MIME types list), why not just write a utility
method that opens a file, reads it and returns its contents as a
String? 

-August

--- Micael Padraig Og mac Grene <[EMAIL PROTECTED]> wrote:
> At 08:22 PM 12/7/01 -0800, you wrote:
> >Yeah, see my last post. Since JSP output is written with a
> PrintWriter, the
> >Catalina code is restricting it to only being able to output known
> text/*
> >MIME types. This just doesn't "feel" right to me.
> >
> >Thanks,
> >--jeff
> 
> Well, jeff, then it is not a "bug".  At best it is a difference of 
> opinion.  That makes all the sense in the world to me.  If you want
> to 
> bring in something other than the "known 'text/* MIME types," just
> include 
> the proper code in your include?  We have differing intuitions here. 
> I 
> think what Catalina is doing is proper and makes sense.  But, at
> worst for 
> you, it is an inconvenience.  Right?
> 
> -- micael
> 
> 
> --
> To unsubscribe:   
> For additional commands: 
> Troubles with the list: 
> 


__
Do You Yahoo!?
Send your FREE holiday greetings online!
http://greetings.yahoo.com

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 




funnychar.bmp
Description: Windows bitmap




Disclaimer and Confidentiality Note.

Everything in this e-mail and attachments relating to the
official business of Standard Bank Investment Corporation(Stanbic)
is proprietary to the company. It is confidential, legally privileged
and protected by law. Stanbic does not own and endorse
any other content. Views and opinions are those of the
sender unless clearly stated as being that of Stanbic.

The person addressed in the e-mail is the sole authorised recipient.
Please notify the sender immediately if it has unintentionally reached
you and do not read, disclose or use the content in any way.

Stanbic can not assure that the integrity of this communication has been
maintained nor that it is free of errors, virus, interception or interference.







--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

tomcat in w2k under apache a simple problem

[Ronaldim]

My apache is initializing first by tomcat and then, I must restart the
apache because if apache starts first, the directory of tomcat is not
readable by apache.


--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

mod_webapp error

[Preston Hogue]

I noticed some people had the same issue in the past, I was unable to find the 
resolution.  Any help would be greatly appreciated.  I am currently attempting to Run 
Apache, Tomcat, JDK 1.3.1 on a Solaris 8 (Sun Installed Netra) and I am getting the 
following error:  

Cannot load /usr/apache/libexec/mod_webapp.so into server: ld.so.1:
>> /usr/apache/
>> bin/httpd: fatal: relocation error: file
/usr/apache/libexec/mod_webapp.so:
>> symbol __lshrdi3: referenced symbol not found
 
Thanks,
Preston

Some help out a newbie with tomcat and iis

[Yau Chin]

hi, i've recently set up tomcat on my system.  i've been trying to set up
tomcat with iis so that iis goes to tomcat to render a .jsp page.  i've
followed instructions i've found on the web, and so far, i have it so that
the examples work in the localhost:8080/examples/ directory, as well as the
localhost/examples directory.  so i know that its successfully redirecting
some of it.  i made a folder in inetpub/wwwroot named jsptest and put a .jsp
file into it, and tried to run it by going to localhost/jsptest/test.jsp.
it gives me an HTTP Stats 404 error, with the type being status report,
message being jsptest/test.jsp, and the description as the requested
resource (jsptest/test.jsp) is not available.  since the examples folder
works but this one doesn't, i'm thinking i need to add/change something in
my server.xml file, but don't know what.  can anyone help me?  thanks in
advance

Yau

here's my server.xml file








  

  
  

























  
  

  
  

  

  

  

  

  

  

  
  




















  
  
  
  
  
  
  
  
usersa
password
driverClassName
  org.hsql.jdbcDriver
driverName
  jdbc:HypersonicSQL:database
  
  
  

  mail.smtp.host
  localhost

  


  



  

  

  
  






  
  

  
  



  




--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Load balance with mod-webapp

[William Tansill]

If you're using mod_web_app, you're probably using Tomcat 4.01.  A number of
people have commented in the recent past that this version of Tomcat does
not support load balancing.

-Original Message-
From: Andy Olliver [mailto:[EMAIL PROTECTED]]
Sent: Sunday, December 09, 2001 19:14 PM
To: Tomcat-User
Subject: Load balance with mod-webapp


Hi

Looking through archives and doco and cannot find anything on this.

Does anybody have any pointers on where i can find info.

ie. config instructions for setting up multiple instances of Tomcat behind
single Apache instance when using mod_webapp.

thanks

Andy


--
To unsubscribe:   
For additional commands: 
Troubles with the list: 



--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

Load balance with mod-webapp

[Andy Olliver]

Hi

Looking through archives and doco and cannot find anything on this.

Does anybody have any pointers on where i can find info.

ie. config instructions for setting up multiple instances of Tomcat behind
single Apache instance when using mod_webapp.

thanks

Andy


--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

a newbie is becoming mad ...

[Arnauld Dravet]

hello *

I installed tomcat on my linux server yesterday, and i have a few problems
I think i've read all availables docs i have found, but it didn't really help me :(

My server is now using apache 1.3.22 + Tomcat 4.0.1 and i have updated my httpd.conf 
as explained in the webapp INSTALL file.
I don't want to have to store my servlets in the tomcat /webapps directory, i want to 
be able to store them as i store other files inside my public_html directory in my 
home dir.

my home dir is /home/smurfie
my webpage dir is /home/smurfie/public_html/_epsi
the url used to access this webpage is http://epsi.bz

i use in my httpd.conf:

ServerAdmin [EMAIL PROTECTED]
DocumentRoot /home/smurfie/public_html/_epsi
ServerAlias *.epsi.bz
ServerName epsi.bz
ErrorLog /home/smurfie/public_html/_epsi/apache_error_log
TransferLog /home/smurfie/public_html/_epsi/apache_access_log
WebAppConnectionconnwarplocalhost:8008
WebAppDeploy/home/smurfie/public_html/_epsi/servletsconn
/servlets/
#WebAppInfo /webapp-info


if i uncomment the /webAppInfo line, i can use http://epsi.bz/webapp-info so i assume 
tomcat is working fine.
the problem is whan i want to sue servlets in /home/smurfie/public_html/_epsi/servlets 
 :
in /home/smurfie/public_html/_epsi/servlets  i've put a WEB-INF directory and inside 
the WEB-INF i got a basic web.xml file, and also a classes dir in wich i've put a 
basic servlet found on the SUN servlet tutorial. I called the .class 
SimpleServlet.class  and so i compiled it in SimpleServlet.java, inside the same dir

smurfie@mushroom:~/public_html/_epsi/servlets/WEB-INF$ more web.xml 


http://java.sun.com/dtd/web-app_2_3.dtd";>




SimpleServlet
SimpleServlet




PROBLEM:
http://epsi.bz ---> work
http://epsi.bz/servlets  --> 404 not found

my apache log says:
[Mon Dec 10 00:59:49 2001] [error] Web-application not yet deployed


could anyone help me please ?

thanks
Arnauld Dravet

Re: Possible To Share A Session Across Ports 8080 and 8443?

[Matt Egyhazy]

i think sessions are webapp specific.

matt
- Original Message -
From: "David White" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Sunday, December 09, 2001 4:22 PM
Subject: Possible To Share A Session Across Ports 8080 and 8443?


> Due to problems with my cable modem, please respond via email as well as
to
> the list if possible. Thanks...
>
> I am running Tomcat 3.2.x in development mode with default http on port
8080
> and default https on port 8443.
>
> My web application needs to switch in and out of https on occasion while
> prompting for/passing sensitive info. The rest of the time, it is fine in
> normal http.
>
> I have found (experimentally) that the browser does not seem to be passing
> the cookie containing the JSESSIONID value back and forth between urls
like
> http://hostname:8080/webapp and httpa://hostname:8443/webapp. I am
guessing
> that this is because the host names are different and the browser
maintains
> cookies on a per-host name basis.
>
> So when I do the switch between http and https, I loose my session data. I
> have tried getting the value of the JSESSIONID cookie and appending its
> value to the url I go to whilst switching (ex.
> http://hostname:8443/webapp;jessionid=xxx) hoping that I could get the
> session info maintained.
>
> However, this did not appear to work either. Can anyone please give me a
way
> to do this? If I use the default ports (80 and 443), I do not have to
place
> the port id in with the hostname on the url. In this circumstance, I do
get
> session state preserved. This would appear to be because the hostname
> portion of the url does not "change".
>
> It is just something of a pain to use ports lower than 1024 on Linux for
> development (have to be root).
>
> Thanks in advance for you help.
>
> David
>
> _
> Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp
>
>
> --
> To unsubscribe:   
> For additional commands: 
> Troubles with the list: 


--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

Possible To Share A Session Across Ports 8080 and 8443?

[David White]

Due to problems with my cable modem, please respond via email as well as to 
the list if possible. Thanks...

I am running Tomcat 3.2.x in development mode with default http on port 8080 
and default https on port 8443.

My web application needs to switch in and out of https on occasion while 
prompting for/passing sensitive info. The rest of the time, it is fine in 
normal http.

I have found (experimentally) that the browser does not seem to be passing 
the cookie containing the JSESSIONID value back and forth between urls like 
http://hostname:8080/webapp and httpa://hostname:8443/webapp. I am guessing 
that this is because the host names are different and the browser maintains 
cookies on a per-host name basis.

So when I do the switch between http and https, I loose my session data. I 
have tried getting the value of the JSESSIONID cookie and appending its 
value to the url I go to whilst switching (ex. 
http://hostname:8443/webapp;jessionid=xxx) hoping that I could get the 
session info maintained.

However, this did not appear to work either. Can anyone please give me a way 
to do this? If I use the default ports (80 and 443), I do not have to place 
the port id in with the hostname on the url. In this circumstance, I do get 
session state preserved. This would appear to be because the hostname 
portion of the url does not "change".

It is just something of a pain to use ports lower than 1024 on Linux for 
development (have to be root).

Thanks in advance for you help.

David

_
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp


--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

Tomcat won't start: java.lang.ArrayStoreException

[Graham Leggett]

Hi all,

After upgrading my system (but not my Blackdown JDK v1.3.0 nor my Tomcat
v4.0.1) Tomcat suddenly refuses to start. The following exception is
thrown on startup in catalina.out:

  ERROR reading /var/tomcat4/conf/server.xml
  At Line 58 /Server/Service/Connector/
className=org.apache.catalina.connector.http.HttpConnector port=8180
minProcessors=5 maxProcessors=75 enableLookups=true redirectPort=8543
acceptCount=10 debug=0 connectionTimeout=6 

  Catalina.start: java.lang.ArrayStoreException
  java.lang.ArrayStoreException
  at java.lang.reflect.Method.copy(Method.java:280)
  at java.lang.reflect.Method.getParameterTypes(Method.java:90)
  at
org.apache.catalina.util.xml.SetProperties.setProperty(XmlMapper.java)
  at
org.apache.catalina.util.xml.SetProperties.start(XmlMapper.java)
  [snip]

This exact same config worked perfectly on the previous machine
(LinuxPPC YDL v1.2), but on the new machine (LinuxPPC YDL v2.1) there
are problems.

I am completely baffled, as this exception isn't telling me anything.
Can someone who understands the Tomcat code explain what is happening?

Regards,
Graham
--


smime.p7s
Description: S/MIME Cryptographic Signature

RE: how can I switch off the directory listing

[Reynir Hübner]

yes.
by going into the /$tomcathome/conf/web.xml and changing the listings
attribute of the servlet configuration to false 

<--- cut from my web.xml -->
 
default
 
org.apache.catalina.servlets.DefaultServlet

  debug
  0


  listings
  false

1
  
<-- cut ends-->

hope it helps,

[EMAIL PROTECTED]

-Original Message-
From: Daniel Knoll [mailto:[EMAIL PROTECTED]]
Sent: 9. desember 2001 16:08
To: 'Tomcat Users List'
Subject: how can I switch off the directory listing


How can I switch off the directory listing in Tomcat4
 that the user can't be make this www.xyz.de/app/user1 and see what in
this
directory is.

has anybody an answer ?

daniel knoll

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 


--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

tomcat 4.0.1 with apache 1.3 on win2k, or IIS

[Ronaldim]

Hi,
I need help to configure tomcat on apache. Actually, I have apache in a port
80 and tomcat in a port 8080. What i need to do to configure it? (it's the
first time that I use apache).

I have tried to install tomcat on IIS 5, but i don't finished with
sucesseful. I only put the isapi filter, but the pages were not filter by
tomcat. Anybody has configured tomcat 4.0.1 with IIS 5?


Ronaldo Rezende Vilela Luiz
1º Período de Sistemas de Informação
Universidade de Uberaba
Brasil, Uberaba - MG



--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Session tracking across virtual hosts?

[Neil Aggarwal]

Craig:

Does the alias directive work in tomcat 3.2.3?

Here is what I put in my server.xml file:

  dev.leads-unlimited.com
  


You can try it by visiting
http://dev.JAMMConsulting.com/sessionTest/index.jsp

But, when I try visiting
http://dev.leads-unlimited.com/sessionTest/index.jsp
I get an error.

Thanks,
Neil.

--
Neil Aggarwal
JAMM Consulting, Inc.(972) 612-6056, http://www.JAMMConsulting.com
Custom Internet DevelopmentWebsites, Ecommerce, Java, databases

> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Craig R. McClanahan
> Sent: Friday, December 07, 2001 10:38 PM
> To: Tomcat Users List
> Subject: RE: Session tracking across virtual hosts?
>
>
>
>
> On Fri, 7 Dec 2001, Neil Aggarwal wrote:
>
> > Date: Fri, 7 Dec 2001 21:14:47 -0600
> > From: Neil Aggarwal <[EMAIL PROTECTED]>
> > Reply-To: Tomcat Users List <[EMAIL PROTECTED]>
> > To: Tomcat Users List <[EMAIL PROTECTED]>
> > Subject: RE: Session tracking across virtual hosts?
> >
> > Craig:
> >
> > It is the same webapp, not two different ones.  We just
> > need to access it in two different ways, depending
> > on if we are using http or https.
> >
> > There has to be a way to do this since it is the SAME
> > application.
> >
>
> Try the  element inside a  element.  That declares the second
> host name to be an alias of the "real" one, and shares the same pool of
> webapps underneath.
>
>
> > Thanks,
> > Neil.
> >
>
> Craig
>
>
> > --
> > Neil Aggarwal
> > JAMM Consulting, Inc.(972) 612-6056, http://www.JAMMConsulting.com
> > Custom Internet DevelopmentWebsites, Ecommerce, Java, databases
> >
> > > -Original Message-
> > > From: [EMAIL PROTECTED]
> > > [mailto:[EMAIL PROTECTED]]On Behalf Of Craig R.
> McClanahan
> > > Sent: Friday, December 07, 2001 6:13 PM
> > > To: Tomcat Users List
> > > Subject: Re: Session tracking across virtual hosts?
> > >
> > >
> > >
> > >
> > > On Fri, 7 Dec 2001, Neil Aggarwal wrote:
> > >
> > > > Date: Fri, 7 Dec 2001 13:18:32 -0600
> > > > From: Neil Aggarwal <[EMAIL PROTECTED]>
> > > > Reply-To: Tomcat Users List <[EMAIL PROTECTED]>
> > > > To: Tomcat-User <[EMAIL PROTECTED]>
> > > > Subject: Session tracking across virtual hosts?
> > > >
> > > > Hello:
> > > >
> > > > I am developing a web application that requires session tracking.
> > > >
> > > > Because we are using a virtual host with a shared SSL certificate,
> > > > we need to track sessions using two different hosts.  For example,
> > > > we need to use URLs like:
> > > >
> > > > http://www.virtdomain.com/appName/page.jsp
> > > > and
> > > > https://www.JAMMConsulting.com/appName/page.jsp
> > > >
> > > > Session tracking does not work across this scenario since the
> > > > domains are different.
> > > >
> > >
> > > By definition, sessions are scoped to a single web application, so you
> > > cannot even share them across two webapps on the same virtual host.
> > > You will need to use some other mechanism to share information between
> > > webapps -- perhaps using a database, or EJBs, or something like that.
> > >
> > > Craig
> > >
> > >
> > >
> > > --
> > > To unsubscribe:   
> > > For additional commands: 
> > > Troubles with the list: 
> >
> > --
> > To unsubscribe:   
> > For additional commands: 
> > Troubles with the list: 
> >
> >
>
>
> --
> To unsubscribe:   
> For additional commands: 
> Troubles with the list: 


--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

using jswdk with tomcat installed

[John Kilbourne]

Now that tomcat is actually running on my machine (thank you all 
again), I learn that I need to submit my servlet to be run on 
*jswdk*. Can both tomcat and jswdk exist side by side on my machine? 

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

how can I switch off the directory listing

[Daniel Knoll]

How can I switch off the directory listing in Tomcat4
 that the user can't be make this www.xyz.de/app/user1 and see what in this
directory is.

has anybody an answer ?

daniel knoll

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

Re: Re: : newbie tomcat 4.0.1installation on NT

[John Kilbourne]

Thanks. After emptying my JAVA_HOME\jre\lib\ext folder, I don't get 
error messages of class not found on running "catalina.bat run" from 
the tomcat\bin directory. And it works!! (At least the examoles.)

Thank you Siriam and Paul!




-- Reply Separator 
Originally From: Sriram Narayanan <[EMAIL PROTECTED]>
Subject: Re: : newbie tomcat 4.0.1installation on NT
Date: 12/09/2001 12:33pm


Hi John,

I just tested my Tomcat 4 setup on my WinNT 4.0 system, and the whole 
thing worked just fine.

Here's my config.
-> JDK 1.3
-> Nothing in the JAVA_HOME\jre\lib\ext folder.
-> PATH environment variable points to d:\jdk1.3.1\bin

I run Tomcat 4 via the startup.bat batch file.

Here's what I did.
-> I unzipped the whole tgz to my f:\ and called this folder tc4.0.1
-> From the DOS command prompt, I changed to the folder f:\tc4.0.1\bin
-> Here I issued the command startup

This started Tomcat for me.

I am able to test the examples,etc.

After you do a basic setup as above, without adding any of your 
applications, are you able to run at least the default examples ?

Sriram


09/12/2001 12:17:11 PM, John Kilbourne <[EMAIL PROTECTED]> wrote:

>While waiting for the download, I unzipped the tomcat I downloaded 
>earlier today, and had the same results, which is what happened with 
>the newly installled version. I un-jarred the bootstrap.jar just to 
>be sure the Naming/jndiPermissions class was in there (it was). If 
>the class is in the jar that is also the current directory, and my 
>setCLASSPATH command ended in a period (all true), then what is 
going 
>on here? I tried compiling some other java source I had lying 
around, 
>and had no problem. I feel I understand tomcat installation much 
>better, except that I still can't get it to work. I would start 
over, 
>except I've done that twice already. I am tempted to just use the 
old 
>jwsdk, even though it is out of date; I just want this servlet of 
>mine to run. I don't see similar questions to mine on the archives, 
>so others must not be having my frustration.
>
>Any advice?
>
>John
>
>
>
>-- Reply Separator 



_
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com


--
To unsubscribe:   
For additional commands: 
Troubles with the list: 



--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

create an security directory

[Daniel Knoll]

Hi news list

I have a question

 - How can I create a security directory?
 - some details
   - user can not be access to the directory, but the application!!
 when I call  www.xxx.xy/application/user directly then no access
 when I call  www.xxx.xy/application/test.jsp then the application have
access to the
 directory

Has anybody an Idea ?

Daniel Knoll



--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

tomcat 4.0.1 with iis5 in win2k

[Ronaldim]

My tomcat is working in 8080 and in the iis5 the isapi filter is ok (it's
green). But the jsp and servlets is not filtering by the iis.

I want to test the examples. I must to copy the examples directory or there
is a way that iis read the directory of the tomcat?

I used the following guide
http://members.ozemail.com.au/~lampante/howto/tomcat/iisnt/index.html.



Ronaldo Rezende Vilela Luiz
1º Período de Sistemas de Informação
Universidade de Uberaba
Brasil, Uberaba - MG



--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

Re: Installing the MM MySQL driver

[Jayson Yu]

Hi,

First you can try placing it in your 
/webapps//WEB-INF/lib directory or if you're running
several contexts (all using the same mm.mysql driver), then you might want 
to place it in the
/common/lib directory.   If all things fail you can do the 
following:

1)  unjar the jar file mm.mysql-2.0.6.1.jar (or whatever version) in some 
directory, for example:

 jar x mm.mysql-2.0.6.1.jar

  this will create a directory called  "mm.mysql-2.0.6".

2)  edit /bin/catalina.sh and look for the classpath definition, 
you should see something like this:

# - Set Up The System Classpath ---
CP="$CATALINA_HOME/bin/bootstrap.jar"

add the real path of the unjar'd mysql driver and you should have something 
like this:

# - Set Up The System Classpath ---
CP="$CATALINA_HOME/bin/bootstrap.jar":"/path/to/mysql/driver/mm.mysql-2.0.6"

3) restart tomcat.

hope this helps.

json



At 06:50 AM 12/9/01 +, you wrote:
>Hi,nk
>
>I am using Tomcat 4.0.  I want to install the MM MySQL driver from 
>mmmysql.sf.net.
>
>Firstly, in which directory should I put the file mm.mysql.jar?  I was 
>thinking of either the lib or the classes directory but wasn't sure.
>
>Secondly, how should I change my classpath to include this driver?
>
>Thanks very much, Saqib


--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

what's this error?

[louie miranda]

[09/12/2001 11:12:16:904] (EMERGENCY) ajp12[1]: cannot scan servlet headers
(500)
[09/12/2001 11:12:16:904] (ERROR) an error returned handling request via
protocol "ajpv12"



anyone know what is this error?
hm, missing zone properties?


ty





--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

Re: HAHAHAHHA

[Sri K Ganjam]

Hi Louie,
Can you explain it in detail.. it would be of help to others.. I am trying
to figure out how to use mod_jk with tomcat V4.0.1 .. it seems a lot should
be tweaked for it.. where as mod_webapp can be enabled very easily
Regards,
Sri K Ganjam


--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

HAHAHAHHA

[louie miranda]

YEY, hey GUYS I GOT IT WORKING!!
WAHAHhahah =) yupee!!!



hehe, ty..





louie *happy*





- Original Message -
From: "louie miranda" <[EMAIL PROTECTED]>
To: "Tomcat Users List" <[EMAIL PROTECTED]>
Sent: Sunday, December 09, 2001 5:27 PM
Subject: Re: Installation from scratch, retry2 PLS HELP!


> Sri, apache+tomcat on a solaris 5.8 sparc machine.
>
> Im done making the apache to handle DSO.
> - and thats all, im stuck there..
>
> i' have been reading stuffs about the installation for tomcat apache
> and still could'nt figure it out.
>
> btw, after that.. apache (DSO)
> whats next?
>
> i presume,
>
> ill choose what to use, mod_jk / mod_jserv
> and put it on httpd.conf "Include /loc/of/tomcat.conf <-- i have read
> somewhere that this config "apache-tomcat.conf" is automatically being
> generated by tomcat, i did install the binary of tomcat yesterday, but i
> could't see it generating one, hmm.. i just build it standalone..
>
> can i use tomcat standalone for apache? and just link it using mod_jk,
etc?
> is this possible?
>
>
> thanks sri, thnx everyone.. :)
>
>
> pls advise ty.
>
>
>
> louie *curious*
>
>
>
>
>
> - Original Message -
> From: "Sri K Ganjam" <[EMAIL PROTECTED]>
> To: "Tomcat Users List" <[EMAIL PROTECTED]>
> Sent: Sunday, December 09, 2001 5:16 PM
> Subject: Re: Installation from scratch, retry2 PLS HELP!
>
>
> > Hi,
> > I dont know much about this... look here :
> > http://jakarta.apache.org/~hgomez/ajp13-tc4.0/
> > This page gives complete connectors for tc4.0 along with sources and
> how-to
> > s . hope it will be of help to you. btw what is your configuration i.e..
> OS
> > etc
> > Regards,
> > Sri K Ganjam
> >
> >
> > --
> > To unsubscribe:   
> > For additional commands: 
> > Troubles with the list: 
> >
>
>
> --
> To unsubscribe:   
> For additional commands: 
> Troubles with the list: 
>


--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

Re: Installation from scratch, retry2 PLS HELP!

[louie miranda]

Sri, apache+tomcat on a solaris 5.8 sparc machine.

Im done making the apache to handle DSO.
- and thats all, im stuck there..

i' have been reading stuffs about the installation for tomcat apache
and still could'nt figure it out.

btw, after that.. apache (DSO)
whats next?

i presume,

ill choose what to use, mod_jk / mod_jserv
and put it on httpd.conf "Include /loc/of/tomcat.conf <-- i have read
somewhere that this config "apache-tomcat.conf" is automatically being
generated by tomcat, i did install the binary of tomcat yesterday, but i
could't see it generating one, hmm.. i just build it standalone..

can i use tomcat standalone for apache? and just link it using mod_jk, etc?
is this possible?


thanks sri, thnx everyone.. :)


pls advise ty.



louie *curious*





- Original Message -
From: "Sri K Ganjam" <[EMAIL PROTECTED]>
To: "Tomcat Users List" <[EMAIL PROTECTED]>
Sent: Sunday, December 09, 2001 5:16 PM
Subject: Re: Installation from scratch, retry2 PLS HELP!


> Hi,
> I dont know much about this... look here :
> http://jakarta.apache.org/~hgomez/ajp13-tc4.0/
> This page gives complete connectors for tc4.0 along with sources and
how-to
> s . hope it will be of help to you. btw what is your configuration i.e..
OS
> etc
> Regards,
> Sri K Ganjam
>
>
> --
> To unsubscribe:   
> For additional commands: 
> Troubles with the list: 
>


--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

Re: Installation from scratch, retry2 PLS HELP!

[Sri K Ganjam]

Hi,
I dont know much about this... look here :
http://jakarta.apache.org/~hgomez/ajp13-tc4.0/
This page gives complete connectors for tc4.0 along with sources and how-to
s . hope it will be of help to you. btw what is your configuration i.e.. OS
etc
Regards,
Sri K Ganjam


--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

Re: Installation from scratch, retry2 PLS HELP!

[louie miranda]

i think, ill use mod_jk.
i have a lilttle question though,

how come tomcat 4.0.1-src, doesnt have all the components like
tomcat 3.3-src * have?


i hope, this one's clear, and howcome the ver 4.0.1-src on the
jakarta-website, doesnt
have a install howto? like the old article on tomcat 3.3* have?

i mean this

3.3 =
http://jakarta.apache.org/tomcat/tomcat-3.2-doc/tomcat-apache-howto.html
4.0 = http://jakarta.apache.org/tomcat/tomcat-4.0-doc/index.html


?


pls advise, ty..



louie *confused*


- Original Message -
From: "Sri K Ganjam" <[EMAIL PROTECTED]>
To: "Tomcat Users List" <[EMAIL PROTECTED]>
Sent: Sunday, December 09, 2001 4:17 PM
Subject: Re: Installation from scratch, retry2 PLS HELP!


> Hi louie,
>
> It depends on which module you want to use for  communication between
apache
> and tomcat. Do u want to use mod_jk or mod_webapp. u need to build one of
> these modules or take the available binary dist and proceed according to
the
> INSTALL.txt which comes along with them.. the config is very easy.
> Regards,
> Sri K Ganjam
>
>
> --
> To unsubscribe:   
> For additional commands: 
> Troubles with the list: 
>


--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

Re: Installation from scratch, retry2 PLS HELP!

[Sri K Ganjam]

Hi louie,

It depends on which module you want to use for  communication between apache
and tomcat. Do u want to use mod_jk or mod_webapp. u need to build one of
these modules or take the available binary dist and proceed according to the
INSTALL.txt which comes along with them.. the config is very easy.
Regards,
Sri K Ganjam


--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

where to find this?

[louie miranda]

Hi,


6.Build the Tomcat's mod_jserv.so connector module for Apache
Gotcha:  Since the build is done in the Tomcat src tree, be sure to copy
autochange.so and mod_jserv.so into Apache's libexec/ directory!
 


i found this note somewhere, but i cant find it on the src of tomcat
4.0.1-src ?



--
To unsubscribe:   
For additional commands: 
Troubles with the list: