Security constraints with http-method
Hello, Does anybody know how to use the security constraint to restrict webdav access to authenticated users but let get and post requests get by? Christopher
Re: Manager options...
Create a user in conf/tomcat-users.xml and give the use a manager role instead of tomcat and so on. Then try to login again. - Original Message - From: Jean-Luc BEAUDET [EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Wednesday, February 20, 2002 7:02 PM Subject: Manager options... Hi all ! Well i try hard to get Manager working well through Warp Connector. We use Tomcat 4.0.2/Warp 1.0.2 with Apache 1.3.22. All is correct except a few little things like... Manager ! I really found no way to do it. Error messages like Can't deploy manager cause it's a priviliged application ... make me nervous ! So i decided to have a serious look on the ../server/webapps/manager/WEB-INF/web.xml file. BUT i don't really understand what is doin': servlet servlet-nameManager/servlet-name servlet-classorg.apache.catalina.servlets.ManagerServlet/servlet-class init-param param-namedebug/param-name param-value2/param-value /init-param /servlet !-- Define the Manager Servlet Mapping -- servlet-mapping servlet-nameManager/servlet-name url-pattern/*/url-pattern /servlet-mapping What does means that part ? a mapping like /* ??? !-- Define a Security Constraint on this Application -- security-constraint web-resource-collection web-resource-nameEntire Application/web-resource-name url-pattern/*/url-pattern Is this part relative to the one just above ? /web-resource-collection auth-constraint !-- NOTE: This role is not present in the default users file -- role-namemanager/role-name /auth-constraint /security-constraint !-- Define the Login Configuration for this Application -- login-config auth-methodBASIC/auth-method realm-nameTomcat Manager Application/realm-name /login-config Well if someone can help or give me a way to perfectly understand all the possibilities of such a web.xml would be very very appreciated. Best regards. Jean-Luc B :O) -- To unsubscribe: mailto:[EMAIL PROTECTED] For additional commands: mailto:[EMAIL PROTECTED] Troubles with the list: mailto:[EMAIL PROTECTED]
Re: Manager options...
maybe you should lose the slash at the end of /manager/. (try /manager) Is the name of your webappconnection Warp_conn? Christophe - Original Message - From: Jean-Luc BEAUDET [EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Wednesday, February 20, 2002 8:42 PM Subject: Re: Manager options... Christopher Chan a écrit : Create a user in conf/tomcat-users.xml and give the use a manager role instead of tomcat and so on. Then try to login again. - Original Message - From: Jean-Luc BEAUDET [EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Wednesday, February 20, 2002 7:02 PM Subject: Manager options... Thank yu for the answer, Chan. I made the stuff, but now i miss the way to declare the WebAppDeploy in Apache httpd.conf config file. Is it smth like WebAppDeploy manager Warp_Conn /manager/ ??? Cause each time i did it, it failed... Jean-Luc B :O) -- To unsubscribe: mailto:[EMAIL PROTECTED] For additional commands: mailto:[EMAIL PROTECTED] Troubles with the list: mailto:[EMAIL PROTECTED] -- To unsubscribe: mailto:[EMAIL PROTECTED] For additional commands: mailto:[EMAIL PROTECTED] Troubles with the list: mailto:[EMAIL PROTECTED]
Anybody have any idea where to find some more comprehensive doc on tomcat?
Can anybody please tell me where I can more information on the security constraint configuration? I want to let http methods get and post in without user authentication but I want to restrict options, propfind, head, put and other webdav methods to authenticated users only. I mean, if I just use a security constraint without the http methods, everybody has to login even if they are browsing and not using webdav. I have tried restricting the webdav methods but that just pops an error on the client side. The client apparently cannot attempt to login... Any ideas please? Christopher
Re: classpath-problem??
try putting the jar files for the database driver in the WEB-INF/lib directory of your webapp and see if that works if they are not already there. Christopher - Original Message - From: Øyvind Vestavik [EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Wednesday, February 20, 2002 9:46 PM Subject: classpath-problem?? I'm building a servlet which is accessing a dbxm/Windice database via a separat class (loginTest.java). Connecting to Xindice means I have to use classes contained in 'xmldb.jar' and 'dbxml.jar'. These jar files are referenced from my classpath. Both the class (loginTest.java) and the servlet calling it compiles ok, and can be run from command but as I try to let the serlet create the separat class a javax.ServletException is thrown. The message shown is this : java.lang.NoClassDefFoundError : org/xmldb/api/base/XMLDBException. It seems like this runtime error is due to that the servlet engine cant find the Exception class, because it doesn't have access to the classpath? Where should the jar files be places and what effect will that have on making a war-file of my application??? Probabaly a common problem??? Øyvind Vestavik Øyvind Vestavik Øvre Møllenberggt 44b 7014 Trondheim [EMAIL PROTECTED] 41422911 On Wed, 20 Feb 2002, Larry Isaacs wrote: The stack trace doesn't show any classes coming from your com or dir directories under WEB-INF/classes. Is this the same problem? Where are each of the kitabe classes located? Cheers, Larry -Original Message- From: Amine AMAR [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 19, 2002 4:11 PM To: Tomcat Users List Subject: Re: classes visibility in the WEB-INF dir Thank's for your reply, but my web application has no particular definition. The stack trace is as follows (root cause): java.lang.NoClassDefFoundError: kitabe/SearchUtilities at kitabe.dal.home.BookHome.rechercheMulticriteres(BookHome.java:485) at kitabe.bl.Catalogue.rechercheMulticriteres(Catalogue.java:231) at org.apache.jsp.results$jsp._jspService(results$jsp.java:160) at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:107) at javax.servlet.http.HttpServlet.service(HttpServlet.java:853) at org.apache.jasper.servlet.JspServlet$JspServletWrapper.service (JspServlet.java:202) at org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet .java:382) at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:474) at javax.servlet.http.HttpServlet.service(HttpServlet.java:853) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilt er(ApplicationFilterChain.java:247) at org.apache.catalina.core.ApplicationFilterChain.doFilter(Appli cationFilterChain.java:193) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardW rapperValve.java:243) at org.apache.catalina.core.StandardPipeline.invokeNext(StandardP ipeline.java:566) at org.apache.catalina.core.StandardPipeline.invoke(StandardPipel ine.java:472) at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:943) at org.apache.catalina.core.StandardContextValve.invoke(StandardC ontextValve.java:201) at org.apache.catalina.core.StandardPipeline.invokeNext(StandardP ipeline.java:566) at org.apache.catalina.valves.CertificatesValve.invoke(Certificat esValve.java:246) at org.apache.catalina.core.StandardPipeline.invokeNext(StandardP ipeline.java:564) If you can just have a look at it and tell me if you see anything wrong. The logs contain just the same info. Thank's again Amine - Original Message - From: Larry Isaacs [EMAIL PROTECTED] To: 'Tomcat Users List' [EMAIL PROTECTED] Sent: Tuesday, February 19, 2002 9:01 PM Subject: RE: classes visibility in the WEB-INF dir This error implies that a class that needs to see your com and/or dir classes is being loaded in a parent of the web application's class loader. This parent classloader is at or between the classpath classloader and the web application classloader. The stacktrace should give you a clue as to who this class is. Cheers, Larry -Original Message- From: Amine AMAR [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 19, 2002 3:56 PM To: Tomcat Users List Subject: classes visibility in the WEB-INF dir Hi all, I've been using TC for a couple of years, and I have a fancy little question :) I have two directories (com and dir) in the WEB-INF\classes directory of an application context. The classes in dir are not visible (noClassDefFoundError). When I put the path of my WEB-INF\classes in the startup classpath of catalina.bat, the classes are visible. Does anyone ave a clue why? PS: I have
Please help
Does anybody know to restrict webdav access and at the same time allow browsers to the webapp? Using the webdav example with the security constraint locks both webdav and browsers out if they do not login. Thank you Christopher
Anybody know why tomcat 4.0.1 does not look in the classes directory for resources?
I have a problem. I have two webapps running on Tomcat. The first one has no problems reading from its classes directory for resource files like .properties The second one however is throwing missing resource bundle exceptions and insists it cannot find bundle for base name WEB. But I do have a WEB.properties file in the second one's classes directory. The solution? Put the file in the %catalina_home%\classes directory. But when I try to use the WEB.properties file in jsp for the first webapp, it ends up reading the one in the %catalina_home%\classes directory!! Anybody know how to make tomcat get resources for the second webapp from its classes directory and not fall back to reading the %catalina_home%\classes directory? Christopher
Cannot find bundle for base name
I have tomcat 4.0.1 running with a couple of webapps running together. The funny thing is, it won't search for .properties files in the classes directory of one of the webapps. One has no problem at all but the other will not be able to find the relevant properties file in its directory. Any ideas why? Christopher
Cannot find class name.css
I have a name.css file in my webapps/name/ directory and in my jsp files I have a html tag link href=name.css .. I always get this cannot find class exception in the log files in Windows but in Linux the error message is passed to the browser and that is not acceptable. I am running tomcat 4.0.1. Anybody know how I can tell tomcat not to treat a css file as a java class? Christopher
Re: [TC4.0.1] - catalina.out : an irrecoverable stack overflow has occured
I think using Sun's jdk 1.3.1 is an issue. I read in another post and, else where, that the sun jdks are pretty buggy on Redhat 7.0/7.1/7.2, especially if they are new installations and not upgrades from redhat 6.2 It seems to have something to do with the version of glibc you are using. versions 2.1.x especially the one on redhat 6.2 are okay but the newer 2.2.x are, well, not compatible with jdk 1.3.1 The other post in the archives mentioned using IBM's SDK and I have had no problems with them even though they are version 1.3.0. I am using tomcat 4.0.1. At least you got an error message, when i was using sun's jdk I got huge core dumps. Christopher - Original Message - From: chris brown [EMAIL PROTECTED] To: tomcat-user [EMAIL PROTECTED] Sent: Thursday, January 17, 2002 7:20 PM Subject: [TC4.0.1] - catalina.out : an irrecoverable stack overflow has occured I've setup of TC4.0.1, based on the RPMs, and everything seems ok (apart from the corrupt images I mentioned in a previous post to this list). But to be sure, I checked catalina.out, as generated in the logs directory. Every time I start up Tomcat, the same message repeats itself over and over: An irrecoverable stack overflow has occured. This appears as the first line of catalina.out, and is followed by these two lines (seems normal enough to me): Starting service Tomcat-Standalone Apache Tomcat/4.0.2 ...and then I get the first message about stack overflow repeating itself again for the next 31 lines (the lines are added in a matter of seconds, then nothing more is added). This seems to be a startup problem, but I don't know what causes it, and what I should do about it... I'm using Sun's 1.3.1 JDK on Linux, if that's an issue. Thanks, Chris B. -- To unsubscribe: mailto:[EMAIL PROTECTED] For additional commands: mailto:[EMAIL PROTECTED] Troubles with the list: mailto:[EMAIL PROTECTED] -- To unsubscribe: mailto:[EMAIL PROTECTED] For additional commands: mailto:[EMAIL PROTECTED] Troubles with the list: mailto:[EMAIL PROTECTED]
Can't find bundle for base name WEB
Hello all, I have this funny problem. I have some webapps running together on tomcat 4.0.1 One of them has no problems accessing its name.properties files in its classes directory and another cannot find them at all unless I add the classes directory of that webapp into the classpath... Why is tomcat not checking the web-inf classes directory for this one webapp? Christopher
Re: Can't find bundle for base name WEB
The web-inf directory are all in upper case. Otherwise my class files will not work right? The log files only give the same missing resource exception that i see in the browser. Putting the .properties file in the %CATALINA_HOME%\classes directory will solve the problem but that means the webappx class loader is not trying to get the resource from the classes directory of the relevant webapp. Why? Christopher - Original Message - From: [EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Friday, January 18, 2002 3:00 AM Subject: Re: Can't find bundle for base name WEB Christopher Chan [EMAIL PROTECTED] on 01/16/2002 10:24:23 PM Please respond to Tomcat Users List [EMAIL PROTECTED] To: [EMAIL PROTECTED] cc: Subject: Can't find bundle for base name WEB Hello all, I have this funny problem. I have some webapps running together on tomcat 4.0.1 One of them has no problems accessing its name.properties files in its classes directory and another cannot find them at all unless I add the classes directory of that webapp into the classpath... Why is tomcat not checking the web-inf classes directory for this one webapp? Checking th log files would be a good idea. Also make sure that WEB-INF is all uppercase. Christopher Hope this helps. Thanks. RS -- To unsubscribe: mailto:[EMAIL PROTECTED] For additional commands: mailto:[EMAIL PROTECTED] Troubles with the list: mailto:[EMAIL PROTECTED] -- To unsubscribe: mailto:[EMAIL PROTECTED] For additional commands: mailto:[EMAIL PROTECTED] Troubles with the list: mailto:[EMAIL PROTECTED]
Re: Cannot find class name.css
Okay, I've solved the problem. A bad url mapping to the css file lead tomcat to try to look for it in the classes which it would not find. Fixing the bad url mappings resolved the problems. Christopher - Original Message - From: Christopher Chan [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, January 17, 2002 10:58 PM Subject: Cannot find class name.css I have a name.css file in my webapps/name/ directory and in my jsp files I have a html tag link href=name.css .. I always get this cannot find class exception in the log files in Windows but in Linux the error message is passed to the browser and that is not acceptable. I am running tomcat 4.0.1. Anybody know how I can tell tomcat not to treat a css file as a java class? Christopher -- To unsubscribe: mailto:[EMAIL PROTECTED] For additional commands: mailto:[EMAIL PROTECTED] Troubles with the list: mailto:[EMAIL PROTECTED]
