Re: Stopping external access to jsp files

2003-06-14 Thread Bill Barker
The easiest way is to simply put the JSP pages that you want to deny direct
access to someplace under the WEB-INF directory.  Direct access to anything
under this if forbidden, but your controller is still allowed to forward or
include.

A less good solution is to specify a security-constraint for these pages
that requires the role, say 'forbidden' (that no user actually has).  The
drawback of this is that the user will be asked to login before being denied
access to the page.  Of course, if your goal is to annoy hackers, you might
even prefer this one ;-).

"Lee W" <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]
> Hi Everyone,
>
> After some good advise from members of this lists (thanks again) I have
> started learning about servlets.
>
> I have created a simple servlet that act as a controller in my webapp,
> this is where all requests get sent to.  However I have not been able to
> find a way to stop users from getting to the .jsp files that the servlet
> uses for the presentation element.
>
> I know that I could use Tomcat along with Apache HTTP server to restrict
> access to the JSP pages but I was wondering if anyone knew how to
> specify in the web.xml file that users should not be able to get to the
> jsp's but the servlets (and  jsp's can access other jsp's via include or
> forward).  My reading of the docs on the tomcat website and by STW have
> not yielded any suggestions.
>
> Thanks again.
>
> Regards
>
> Lee




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Client authentication with X509 certificate (Apache web server+mod_jk+Tomcat 4.1.24) not working

2003-06-14 Thread Bill Barker
It's a known problem.  See http://nagoya.apache.org/bugzilla/show_bug.cgi?id=15790 for 
more details.  It is fixed in the CVS, and so will work in 4.1.25.

"Antonio Fiol Bonnín" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED]
> Hello,
> 
> I have been struggling with a strange problem:
> 
> Using Apache Web server (1.3.23 - 1.3.26, not tested others).
> Using mod_jk (EAPI version, recent download).
> On a Linux machine.
> 
> Using tomcat 4.1.24
> Both on solaris and on Linux.
> 
> When Apache is configured with
> SSLClientVerify optional
> or
> SSLClientVerify require
> 
> Mod_jk is correctly configured (see why I say that later).
> 
> Tomcat is configured with an AJP13 context, and responding well.
> 
> PROBLEM: Client certificate cannot be obtained from the application.
> PROBLEM: In fact, there is an IOException *before* calling the servlet.
> PROBLEM: When tomcat is reconstructing the certificate. I get:
>Insufficient data  ...or...
>too big
> 
> WORKAROUND: I found that the same configuration on Tomcat 4.1.9 is 
> working perfectly.
> 
> 
> I have been studying the differences between 4.1.9 and 4.1.24 and I have 
> seen that certificate handling is done in very different places in the 
> code (it has moved).
> 
> Does anybody have an idea of what can have broken this?
> 
> I am willing to submit a patch and/or do more investigation, so that 
> this problem id fixed on 4.1.25 when it comes out.
> 
> Yours sincerely,
> 
> Antonio Fiol
> 


smime.p7s
Description: S/MIME cryptographic signature


JSP refusing to respond, static html pages load up fine

2003-06-14 Thread Wayne Chang
Hi,

Once in awhile I catch my website not responding to jsp's, but loading up
html files fine.  It would mysteriously appear, and just as mysterious, it
would disappear after a few minutes.  No restarting Apache/Tomcat or
whatnot.  System is RH9.  Apache is 1.3.27, Tomcat is 1.4.1.  I have a hunch
it's mod_jk, but I'm not certain.  I'm waiting for the binary to appear
hopefully sometime soon so I can insert it into my setup.  What do you guys
think it is?  Or where should I look to provide more information?


Best regards,

Wayne Chang
Pacific Northwest Software
Mobile: (978) 869-3446
Email:   [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Stopping external access to jsp files

2003-06-14 Thread Lee W
Hi Everyone,

After some good advise from members of this lists (thanks again) I have 
started learning about servlets.

I have created a simple servlet that act as a controller in my webapp, 
this is where all requests get sent to.  However I have not been able to 
find a way to stop users from getting to the .jsp files that the servlet 
uses for the presentation element.

I know that I could use Tomcat along with Apache HTTP server to restrict 
access to the JSP pages but I was wondering if anyone knew how to 
specify in the web.xml file that users should not be able to get to the 
jsp's but the servlets (and  jsp's can access other jsp's via include or 
forward).  My reading of the docs on the tomcat website and by STW have 
not yielded any suggestions.

Thanks again.

Regards

Lee



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


RE: file/dir creation from servlet wrong?

2003-06-14 Thread Bill Ataras
Oh yeah, the tomcat icon's "start from" setting is set to:

"C:\Documents and Settings\Dad\Start Menu\Programs\Apache Tomcat 4.1"

So it looks like FileOutputStream creates files in the dir that
bootstrap.jar is executed from, while the File.mkdirs() function creates
dirs in the tomcat installation dir.


-Original Message-
From: Bill Ataras [mailto:[EMAIL PROTECTED] 
Sent: Saturday, June 14, 2003 2:59 PM
To: Tomcat Users List
Subject: file/dir creation from servlet wrong?

Running v4.1.24 on winxp.
Using jdk1.4
Installed via the apache installation program
jakarta-tomcat-4.1.24-LE-jdk14.exe


>From within a servlet the following code behaves weirdly:

File fl = new File("blah/blah/blah");
fl.mkdirs();
fl = new File("doh.txt");
FileOutputStream out = new FileOutputStream(fl);


The mkdirs creates the blah tree under the tomcat install dir:

C:\Program Files\Apache Group\Tomcat 4.1

FileOutputStream creates doh.txt under the windows start menu apache
menu:

C:\Documents and Settings\Dad\Start Menu\Programs\Apache Tomcat 4.1

Neither call is given a root dir to start from.




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



file/dir creation from servlet wrong?

2003-06-14 Thread Bill Ataras
Running v4.1.24 on winxp.
Using jdk1.4
Installed via the apache installation program
jakarta-tomcat-4.1.24-LE-jdk14.exe


>From within a servlet the following code behaves weirdly:

File fl = new File("blah/blah/blah");
fl.mkdirs();
fl = new File("doh.txt");
FileOutputStream out = new FileOutputStream(fl);


The mkdirs creates the blah tree under the tomcat install dir:

C:\Program Files\Apache Group\Tomcat 4.1

FileOutputStream creates doh.txt under the windows start menu apache
menu:

C:\Documents and Settings\Dad\Start Menu\Programs\Apache Tomcat 4.1

Neither call is given a root dir to start from.




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Trying to remove the root context using the manager app

2003-06-14 Thread Andreas Schildbach
Andreas Schildbach wrote:

I am trying to remove the root context using the manager application.
Sorry, I forgot to include my system configuration:

- Tomcat 4.1.24
- Windows.NET Server beta 1
Regards,

Andreas



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: gif image not appearing

2003-06-14 Thread Jason Bainbridge
On Sun, 15 Jun 2003 02:34, Paridhi Bansal wrote:
> https://localhost:8443/test/servlet/servletname
> where test is inside webapps folder
>
> moreover, on viewing the properties of the image on the web browser shows
> the correct path..If u give that url on the browser, the image appears, it
> gets into the cache i believe, and then when i reopen the servlet, the
> image appears but not the applet..

So the gif is within the html not the applet? I have seen similar problems 
with 4.03 with images sometimes not displaying, never worked out why but I 
haven't seen the problem with 4.1.24 so maybe an upgrade is the way to go? 
Maybe someone else can shine some light on this behaviour?

Also I highly recommend that you put your servlet(s) within a package, check 
out the second lost of links here 
http://tomcatfaq.sourceforge.net/classnotfound.html for explanations why, it 
will make your life easier and more secure. :)

Regards,
-- 
Jason Bainbridge
http://jblinux.org

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: gif image not appearing

2003-06-14 Thread Paridhi Bansal
hi
thanx for the reply..

The servlet is being invoked using this url

https://localhost:8443/test/servlet/servletname
where test is inside webapps folder

moreover, on viewing the properties of the image on the web browser shows the correct 
path..If u give that url on the browser, the image appears, it gets into the cache i 
believe, and then when i reopen the servlet, the image appears but not the applet..

Paridhi
- Original Message -
From: Jason Bainbridge <[EMAIL PROTECTED]>
Date: Sun, 15 Jun 2003 02:10:52 +0800
To: "Tomcat Users List" <[EMAIL PROTECTED]>
Subject: Re: gif image not appearing

> On Sun, 15 Jun 2003 02:05, Paridhi Bansal wrote:
> > My directory structure is :
> > i have folders test and images inside the webapps directory.the servlet is
> > inside test/WEB-INF/classes and the gif image is inside images folder..i
> > have also kept the image inside the jar file...
> 
> Are you using the servlet invoker ie. is your path to your sevlet something 
> like: http://localhost:8080/webapp/servlet/servletname ? If so I'd say you 
> have your relative path to images wrong as it needs to be ../images or even 
> better put your servlet in a package and then map to it within your web.xml.
> 
> If this isn't the problem can you post relevant snippets of code?
> 
> Regards,
> -- 
> Jason Bainbridge
> http://jblinux.org
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 

-- 
__
Sign-up for your own FREE Personalized E-mail at Mail.com
http://www.mail.com/?sr=signup


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: security constraint & web.xml

2003-06-14 Thread Euan Guttridge
Thanks John - solved.

-Original Message-
From: John Rishea [mailto:[EMAIL PROTECTED] 
Sent: 14 June 2003 16:46
To: Tomcat Users List
Subject: RE: security constraint & web.xml


Euan,

If you look at the DTD 2.3 specs, the  and
 entries have to be placed after the  entries.  It's
very picky about tags being in the correct order.

Hope that helps.

__
John Rishea
Avaya, Inc.
(303) 538-4503

-Original Message-
From: Euan Guttridge [mailto:[EMAIL PROTECTED]
Sent: Saturday, June 14, 2003 9:41 AM
To: '[EMAIL PROTECTED]'
Subject: security constraint & web.xml


The security constraint I am adding is screwing up my web.xml. After adding
the contraint tomcat cannot find my taglibs. Any ideas? (web.xml below)

Thanks,
Euan






http://java.sun.com/dtd/web-app_2_3.dtd";>


  
  TestOnline
  
 Build of Test
  

   
webmaster
[EMAIL PROTECTED]

The EMAIL address of the administrator to whom questions
and comments about this application should be addressed.
  
  

   

test1
/jsp/admin/test1/*


test1-user

   

  

test2
/jsp/admin/test2/*


test2-user

  

  
BASIC
test1
test2
  


  
User
com.test.user.UserServlet
  


  
  User
  /ProjectsOnline
  

  
30

  


  
/archtaglib
/WEB-INF/lib/archtaglib.jar
  
  
/distributiontaglib
/WEB-INF/lib/distributiontaglib.jar
  
  
/formstaglib
/WEB-INF/lib/formstaglib.jar
  
  
/localtaglib
/WEB-INF/lib/localtaglib.jar
  
  
/navigationtaglib
/WEB-INF/lib/navigationtaglib.jar
  
  
/summarytaglib
/WEB-INF/lib/summarytaglib.jar
  





Euan Guttridge
Technical Operations
BuildOnline
40 Holborn Viaduct
London
EC1N 2PB
UK Customer Services:  0870 241 2283
Telephone:   +44 (0)20 7836 2883
Fax: +44 (0)20 7836 2886


www.BuildOnline.com
'Save Time, BuildOnline'



This email and any files transmitted are confidential and intended solely
for the use of the individual or entity to which they are addressed. If you
have received this email in error, please notify
BuildOnline: Tel: +44 (0)20 7836 2883

**

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Need to restart tomcat very frequently

2003-06-14 Thread Paridhi Bansal
Hi!!

I am developing a web-based application using servlets and applets concept..I am using 
 tomcat 4.0.6 as standalone server..The server hosts two applications both at the same 
port..So i have madetwo folders app1 and app2 inside my webapps directory..i have made 
corresponding contexts in server.xml. one application take inputs from the user and 
this data is displayec and is to be subsequently saved on the server and the other 
application displays the stored data..The stored data can be as large as 5MB..

In our case,high no. of concurrent requests is not requireqd. no multithreading is 
being used at servlet end. So i have put maxProcessors in server.xml to 30..however, 
whenevr i start tomcat, it starts with 9 java threads that increase to 24 within 
seconds..WHY is this so?

when i open the applicaions frequently, tomcat starts behaving erratically..no. of 
threads is ususlly b/w 28-29..sometimes i get the applet displaying the empty table 
but no data, sometimes i am not able to save the data...sometimes, tomcat gives socket 
exception..WHY does it behaves like this?On restarting tomcat, things start 
working fine...

I am really not able to understand the cause of erratic behaviour..i have to restart 
it 5-10 times within a day..this is the case when ther are ot more than 2 users..

Can somebody help me out of the situation...

looking forward for replies,
Paridhi
-- 
__
Sign-up for your own FREE Personalized E-mail at Mail.com
http://www.mail.com/?sr=signup


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: gif image not appearing

2003-06-14 Thread Jason Bainbridge
On Sun, 15 Jun 2003 02:05, Paridhi Bansal wrote:
> My directory structure is :
> i have folders test and images inside the webapps directory.the servlet is
> inside test/WEB-INF/classes and the gif image is inside images folder..i
> have also kept the image inside the jar file...

Are you using the servlet invoker ie. is your path to your sevlet something 
like: http://localhost:8080/webapp/servlet/servletname ? If so I'd say you 
have your relative path to images wrong as it needs to be ../images or even 
better put your servlet in a package and then map to it within your web.xml.

If this isn't the problem can you post relevant snippets of code?

Regards,
-- 
Jason Bainbridge
http://jblinux.org

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



gif image not appearing

2003-06-14 Thread Paridhi Bansal
Hi!!

I have a web-based application that uses servlets and throws an applet to the client 
side..I am using tomcat4.0.6 standalone server..First an html page is displayed on the 
browser. On clicking the link, the servlet is invoked that throws the applet and jar 
file to the client. The applet has a JTable and a gif image.The table displays the 
data pushed by servlet..however, the gif image is not appearing..though it shows the 
correct path on right clicking, but it's not displayeed. If i include this gif image  
on the first html page, it appears on the applet but then the data in the table is not 
displayed..

My directory structure is :
i have folders test and images inside the webapps directory.the servlet is inside 
test/WEB-INF/classes and the gif image is inside images folder..i have also kept the 
image inside the jar file...

What can be the problem??Any help will be appreciated...

Paridhi
-- 
__
Sign-up for your own FREE Personalized E-mail at Mail.com
http://www.mail.com/?sr=signup


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: security constraint & web.xml

2003-06-14 Thread John Rishea
Euan,

If you look at the DTD 2.3 specs, the  and
 entries have to be placed after the  entries.  It's
very picky about tags being in the correct order.

Hope that helps.

__
John Rishea
Avaya, Inc.
(303) 538-4503

-Original Message-
From: Euan Guttridge [mailto:[EMAIL PROTECTED]
Sent: Saturday, June 14, 2003 9:41 AM
To: '[EMAIL PROTECTED]'
Subject: security constraint & web.xml


The security constraint I am adding is screwing up my web.xml. After adding
the contraint tomcat cannot find my taglibs. Any ideas? (web.xml below)

Thanks,
Euan






http://java.sun.com/dtd/web-app_2_3.dtd";>


  
  TestOnline
  
 Build of Test
  

   
webmaster
[EMAIL PROTECTED]

The EMAIL address of the administrator to whom questions
and comments about this application should be addressed.
  
  

   

test1
/jsp/admin/test1/*


test1-user

   

  

test2
/jsp/admin/test2/*


test2-user

  

  
BASIC
test1
test2
  


  
User
com.test.user.UserServlet
  


  
  User
  /ProjectsOnline
  

  
30

  


  
/archtaglib
/WEB-INF/lib/archtaglib.jar
  
  
/distributiontaglib
/WEB-INF/lib/distributiontaglib.jar
  
  
/formstaglib
/WEB-INF/lib/formstaglib.jar
  
  
/localtaglib
/WEB-INF/lib/localtaglib.jar
  
  
/navigationtaglib
/WEB-INF/lib/navigationtaglib.jar
  
  
/summarytaglib
/WEB-INF/lib/summarytaglib.jar
  





Euan Guttridge
Technical Operations
BuildOnline
40 Holborn Viaduct
London
EC1N 2PB
UK Customer Services:  0870 241 2283
Telephone:   +44 (0)20 7836 2883
Fax: +44 (0)20 7836 2886


www.BuildOnline.com
'Save Time, BuildOnline'



This email and any files transmitted are confidential and intended
solely for the use of the individual or entity to which they are
addressed. If you have received this email in error, please notify
BuildOnline: Tel: +44 (0)20 7836 2883

**

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



security constraint & web.xml

2003-06-14 Thread Euan Guttridge
The security constraint I am adding is screwing up my web.xml. After adding
the contraint tomcat cannot find my taglibs. Any ideas? (web.xml below) 

Thanks,
Euan






http://java.sun.com/dtd/web-app_2_3.dtd";>


  
  TestOnline
  
 Build of Test
  
 
   
webmaster
[EMAIL PROTECTED]

The EMAIL address of the administrator to whom questions
and comments about this application should be addressed.
  
  

   

test1
/jsp/admin/test1/*


test1-user

   

  

test2
/jsp/admin/test2/*


test2-user

  

  
BASIC
test1
test2
   
   
   
  
User
com.test.user.UserServlet
  
  
  
  
  User
  /ProjectsOnline
  
 
  
30

  
  
  
  
/archtaglib
/WEB-INF/lib/archtaglib.jar
  
  
/distributiontaglib
/WEB-INF/lib/distributiontaglib.jar
  
  
/formstaglib
/WEB-INF/lib/formstaglib.jar
  
  
/localtaglib
/WEB-INF/lib/localtaglib.jar
  
  
/navigationtaglib
/WEB-INF/lib/navigationtaglib.jar
  
  
/summarytaglib
/WEB-INF/lib/summarytaglib.jar
  
  




Euan Guttridge 
Technical Operations 
BuildOnline 
40 Holborn Viaduct 
London 
EC1N 2PB 
UK Customer Services:  0870 241 2283 
Telephone:   +44 (0)20 7836 2883 
Fax: +44 (0)20 7836 2886 


www.BuildOnline.com 
'Save Time, BuildOnline' 



This email and any files transmitted are confidential and intended 
solely for the use of the individual or entity to which they are 
addressed. If you have received this email in error, please notify 
BuildOnline: Tel: +44 (0)20 7836 2883 

** 

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Trying to remove the root context using the manager app

2003-06-14 Thread Andreas Schildbach
Hello everybody,

I am trying to remove the root context using the manager application.

First, I list all installed applications:

  http://www.xxx.de/manager/list

  OK - Listed applications for virtual host www.xxx.de
  /manager:running:0:../server/webapps/manager
  /:running:1:xxx
Here are my 3 unsuccessful tries:

  http://www.xxx.de/manager/remove?path=

  FAIL - Invalid context path  was specified

  http://www.xxx.de/manager/remove?path=/

  FAIL - Encountered exception java.io.IOException:
  java.lang.NullPointerException
  http://www.xxx.de/manager/remove?path=ROOT

  FAIL - No context exists for path ROOT

What am I doing wrong?

Regards,

Andreas

P.S. I have substituted all references to my real domain name with "xxx" 
in this post.



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: Tomcat classpath not set at boot

2003-06-14 Thread Dominic Parry
Do you set your CLASSPATH in your Shell script? or in .login or something like that? 
Cos then that will work for a manual start, but not for the /init.d one. You'll have 
to set up the classpath in that script.

-Tom
  - Original Message - 
  From: Tim Funk 
  To: Tomcat Users List 
  Sent: Saturday, June 14, 2003 3:26 PM
  Subject: Re: Tomcat classpath not set at boot


  Is it just your servlet that doesn't work, or all servlets? (and jsps)
  Are you using different userids when run from boot time vs command line?
  What happens if your startup command is moved to inittab? (Or other wacky 
  equivalent)

  -Tim

  Chad Lemmen wrote:
  > It's not a system CLASSPATH I have set.  I put the jar files I want in the
  > CLASSPATH in $CATALINA_HOME/shared/lib.  Tomcat does recognize these if I
  > start Tomcat manually, but not if I have Tomcat staring at boot time with
  > the script in /etc/rc.d/init.d
  > 
  > On Fri, 13 Jun 2003, Tim Funk wrote:
  > 
  > 
  >>Tomcat ignores system CLASSPATH at startup and creates its own.
  >>
  >>http://jakarta.apache.org/tomcat/tomcat-4.1-doc/class-loader-howto.html
  >>
  >>-Tim
  >>
  >>Chad Lemmen wrote:
  >>
  >>>I've got Tomcat 4.1.24 starting at boot on my Linux box with a script in
  >>>/etc/rc.d/init.d.  The script looks like this
  >>>
  >>>#!/bin/sh
  >>>JAVA_HOME=/usr/java
  >>>export JAVA_HOME
  >>>/opt/jakarta-tomcat-4.1.24/bin/startup.sh
  >>>
  >>>
  >>>Tomcat is starting at boot and seems to work fine http://localhost:8080
  >>>brings up the default Tomcat home page.  The only thing that doesn't seem
  >>>to be working is my classpaths that I set in the catalina.sh file are not
  >>>being set.  If I start Tomcat from the command line my classpaths are
  >>>being read and my servlet works, but when starting Tomcat at boot my
  >>>classpaths don't seem to be set because when I try to run my servlet I get
  >>>"java.lang.NoClassDefFoundError"
  >>>
  >>>I don't get this error when Tomcat is started from the command line.  Why
  >>>would starting it at boot time not use my user set classpaths?
  >>>
  >>>Here is the portion of catalina.sh that I added my classpath to.
  >>>
  >>># Add on extra jar files to CLASSPATH
  >>>if [ -n "$JSSE_HOME" ]; then
  >>>
  >>>CLASSPATH="$CLASSPATH":"$JSSE_HOME"/lib/jcert.jar:"$JSSE_HOME"/lib/jnet.jar:
  >>>"$JSSE_HOME"/lib/jsse.jar
  >>>fi
  >>>CLASSPATH="$CLASSPATH":"$CATALINA_HOME"/bin/bootstrap.jar:
  >>>/opt/EspressReport/lib/ReportAPIWithChart.jar:
  >>>/opt/EspressReport/lib/ExportLib.jar
  >>>
  >>>
  >>>I also tried adding the two jar files ReportAPIWithChart.jar and
  >>>ExportLib.jar to CATALINA_HOME/shared/lib
  >>>
  >>>Both methods work and my classpaths are set and my servlet works, but only
  >>>if Tomcat is started from the command line "CATALINA_HOME/bin/startup.sh".
  >>>Why doesn't this work when starting at boot?
  >>>
  >>>-
  >>>To unsubscribe, e-mail: [EMAIL PROTECTED]
  >>>For additional commands, e-mail: [EMAIL PROTECTED]
  >>>
  >>>
  >>
  >>
  >>-
  >>To unsubscribe, e-mail: [EMAIL PROTECTED]
  >>For additional commands, e-mail: [EMAIL PROTECTED]
  >>
  >>
  > 
  > 
  > -
  > To unsubscribe, e-mail: [EMAIL PROTECTED]
  > For additional commands, e-mail: [EMAIL PROTECTED]
  > 
  > 


  -
  To unsubscribe, e-mail: [EMAIL PROTECTED]
  For additional commands, e-mail: [EMAIL PROTECTED]



Re: Tomcat classpath not set at boot

2003-06-14 Thread Tim Funk
Is it just your servlet that doesn't work, or all servlets? (and jsps)
Are you using different userids when run from boot time vs command line?
What happens if your startup command is moved to inittab? (Or other wacky 
equivalent)

-Tim

Chad Lemmen wrote:
It's not a system CLASSPATH I have set.  I put the jar files I want in the
CLASSPATH in $CATALINA_HOME/shared/lib.  Tomcat does recognize these if I
start Tomcat manually, but not if I have Tomcat staring at boot time with
the script in /etc/rc.d/init.d
On Fri, 13 Jun 2003, Tim Funk wrote:


Tomcat ignores system CLASSPATH at startup and creates its own.

http://jakarta.apache.org/tomcat/tomcat-4.1-doc/class-loader-howto.html

-Tim

Chad Lemmen wrote:

I've got Tomcat 4.1.24 starting at boot on my Linux box with a script in
/etc/rc.d/init.d.  The script looks like this
#!/bin/sh
JAVA_HOME=/usr/java
export JAVA_HOME
/opt/jakarta-tomcat-4.1.24/bin/startup.sh
Tomcat is starting at boot and seems to work fine http://localhost:8080
brings up the default Tomcat home page.  The only thing that doesn't seem
to be working is my classpaths that I set in the catalina.sh file are not
being set.  If I start Tomcat from the command line my classpaths are
being read and my servlet works, but when starting Tomcat at boot my
classpaths don't seem to be set because when I try to run my servlet I get
"java.lang.NoClassDefFoundError"
I don't get this error when Tomcat is started from the command line.  Why
would starting it at boot time not use my user set classpaths?
Here is the portion of catalina.sh that I added my classpath to.

# Add on extra jar files to CLASSPATH
if [ -n "$JSSE_HOME" ]; then
CLASSPATH="$CLASSPATH":"$JSSE_HOME"/lib/jcert.jar:"$JSSE_HOME"/lib/jnet.jar:
"$JSSE_HOME"/lib/jsse.jar
fi
CLASSPATH="$CLASSPATH":"$CATALINA_HOME"/bin/bootstrap.jar:
/opt/EspressReport/lib/ReportAPIWithChart.jar:
/opt/EspressReport/lib/ExportLib.jar
I also tried adding the two jar files ReportAPIWithChart.jar and
ExportLib.jar to CATALINA_HOME/shared/lib
Both methods work and my classpaths are set and my servlet works, but only
if Tomcat is started from the command line "CATALINA_HOME/bin/startup.sh".
Why doesn't this work when starting at boot?
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: Classpath problem with Tomcat running in Embedded mode

2003-06-14 Thread Sriram N
Hi,

If you're calling Bootstrap.main(), please also have a look at the source code
within Bootstrap.

You'll find that Bootstrap just sets the ground for the Catalina classes...It
creates a classloader hierarchy, with classloaders for classes visible to just
Catalina, and for visibility between both Catalina and Webapps. Each webapp has
a classloader to itself.

What you should do instead is have a look at how Embedded works, and do
something like that yourself. This may not be the intended approach behind
supplying Embedded, but this is how I've bundled Tomcat 4.0.1 for a Swing based
app I had to once develop.

-- Sriram
--- sandeep arshanapally <[EMAIL PROTECTED]> wrote:
> 
> Thanks for your reply.
> 
> Iam calling the BootStrap.main directly from a thread in my jvm. Iam using 
> Tomcat 4.1.24. I have the catalina.home set to tomcat directory. It 
> recognizes the classes in tomcat directory but none of the classes in the 
> classpath I specify while starting the jvm.
> 
> Sandeep
> 
> 
> >From: Sriram N <[EMAIL PROTECTED]>
> >Reply-To: "Tomcat Users List" <[EMAIL PROTECTED]>
> >To: Tomcat Users List <[EMAIL PROTECTED]>
> >Subject: Re: Classpath problem with Tomcat running in Embedded mode
> >Date: Wed, 11 Jun 2003 20:55:42 -0700 (PDT)
> >
> >Hi,
> >
> >This is a ClassLoader visibility issue. Read the ClassLoader howto in the
> >Tomcat Docs.
> >
> >How exactly are you running Embedded ? Are you invoking the main method on 
> >it
> >straight out ? Which Tomcat release are you using ?
> >
> >
> >-- Sriram
> >
> >--- sandeep arshanapally <[EMAIL PROTECTED]> wrote:
> > >
> > > Hi,
> > >
> > >   Iam running tomcat in an embedded mode i.e. launching it from with 
> >in
> > > my jvm and using it with Axis for SOAP processing. I am having a problem
> > > with the classes and classpath. The SOAP implementation class files need 
> >to
> > > be there /webapps/axis/WEB-INF/classes otherwise it doesn't work and if 
> >Iam
> > > referencing any other classes from there, it throws a
> > > ClassNotFoundException.
> > > Is there anyway that I can specify the classpath so that the classes do 
> >not
> > > have to be in that directory?
> > >
> > >
> > > Thanks in advance,
> > >
> > > Sandeep
> > >
> > > _
> > > MSN 8 with e-mail virus protection service: 2 months FREE*
> > > http://join.msn.com/?page=features/virus
> > >
> > >
> > > -
> > > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > > For additional commands, e-mail: [EMAIL PROTECTED]
> > >
> >
> >
> >__
> >Do you Yahoo!?
> >Yahoo! Calendar - Free online calendar with sync to Outlook(TM).
> >http://calendar.yahoo.com
> >
> >-
> >To unsubscribe, e-mail: [EMAIL PROTECTED]
> >For additional commands, e-mail: [EMAIL PROTECTED]
> >
> 
> _
> Add photos to your e-mail with MSN 8. Get 2 months FREE*.  
> http://join.msn.com/?page=features/featuredemail
> 
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 


__
Do you Yahoo!?
SBC Yahoo! DSL - Now only $29.95 per month!
http://sbc.yahoo.com

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Client authentication with X509 certificate (Apache web server+mod_jk+Tomcat4.1.24) not working

2003-06-14 Thread Antonio Fiol Bonnín
Hello,

I have been struggling with a strange problem:

Using Apache Web server (1.3.23 - 1.3.26, not tested others).
Using mod_jk (EAPI version, recent download).
On a Linux machine.
Using tomcat 4.1.24
Both on solaris and on Linux.
When Apache is configured with
SSLClientVerify optional
or
SSLClientVerify require
Mod_jk is correctly configured (see why I say that later).

Tomcat is configured with an AJP13 context, and responding well.

PROBLEM: Client certificate cannot be obtained from the application.
PROBLEM: In fact, there is an IOException *before* calling the servlet.
PROBLEM: When tomcat is reconstructing the certificate. I get:
  Insufficient data  ...or...
  too big
WORKAROUND: I found that the same configuration on Tomcat 4.1.9 is 
working perfectly.

I have been studying the differences between 4.1.9 and 4.1.24 and I have 
seen that certificate handling is done in very different places in the 
code (it has moved).

Does anybody have an idea of what can have broken this?

I am willing to submit a patch and/or do more investigation, so that 
this problem id fixed on 4.1.25 when it comes out.

Yours sincerely,

Antonio Fiol


smime.p7s
Description: S/MIME Cryptographic Signature