Re: Tomcat/Apache/JK(2)?
The only change I made to httpd.conf was to add the line: Include C:\Program Files\Apache Software Foundation\Tomcat 5.5\conf\mod_jk.conf. (You can put the .conf file anywhere, you just have to tell Apache where it's located.) I did find that the HowTo instructions directed you to use Auto-configure. I ran that once to build the mod_jk.conf-auto file. What I found was that it didn't build it correctly. The JKMount paths didn't match what I had in Tomcat. I don't recall what it put in the file, but it wasn't right. I ended up removing the line that they tell you to add to server.xml to auto-configure once I had the format of the mod_jk.conf file. Also, if you examine the mod_jk.conf file, one of the first things it does is to instruct Apache to LoadModule jk_module modules/mod_jk.so, so it isn't necessary to add that to the httpd.conf file. I did populate the information for JkWorkersFile and JkLogfile. Once I had the url's correctly defined, it just worked. I wondered if it would be helpful for those who have been successful at configuring the connector to just publish a document for the various versions of Tomcat; 4.x, 5.0.x, and 5.5.x. I only say that because even the HowTo document that I used seemed to only get me about 50% of the way there. DW --- Tom Holmes Jr. [EMAIL PROTECTED] wrote: I agree I should work with the files first to see if I can get it to work. I used the sample workers.properties file from Tomcat 5.5 in order to create my working workers,properties file. So, now when I restart Apache2, it doesn't complain and it looks like it is communicating with Tomcat 5.5. However, when I try my JSP page, I get a big 'OK' at the top of the screen and then I get this error message: The server encountered an internal error or misconfiguration and was unable to complete your request. Please contact the server administrator, [EMAIL PROTECTED] and inform them of the time the error occurred, and anything you might have done that may have caused the error. More information about this error may be available in the server error log. So . after reading the documentation you referred me to, it looks like I need to update my httpd.conf file a bit more. I mean I got the LoadModule working, but it looks like I need to add some Jk commands like JkMount to my httpd.conf file. So, I am playing with that now. I might need your files as a sample, but I'll work on this on my own for a little while. Thanks very much. Tom Darryl Wilburn wrote: Tom, If you need them, I can send you my actual files. Although I encourage you to do all you can do on your own to figure it out. It'll pay huge dividends in the end if you understand what you had to do to make it work. DW --- Tom Holmes Jr. [EMAIL PROTECTED] wrote: I can't thank you enough. I was wondering if anyone had done it, and you certainly have. The sample files I have has always been the biggest hurdle for me also. The mod_jk.so I am using is mod_jk-1.2.13-apache-2.0.54.so which I think is for Windows. I'll refer to the same directions you used, and I am sure I will get it also. Thanks for giving me hope that it can be done! Now I just have to get past those sample files also. Thanks again! Tom Darryl Wilburn wrote: Tom, I have Tomcat 5.5.7, Apache 2.0.54, JRE 1.5.0_03, JK 1.2.11, running on Win2k3 server with no problems. The biggest hurdle I had to get over was making the necessary changes on the sample files included with the software. (the worker names didn't match) The files required are mod_jk.so (downloaded at http://www.apache.org/dist/jakarta/tomcat-connectors/jk/binaries/) The instructions I followed are at http://jakarta.apache.org/tomcat/connectors-doc/howto/apache.html. The other files involved are workers.properties, mod_jk.conf. The HowTo instructions at the above link are excellent. DW --- Tom Holmes Jr. [EMAIL PROTECTED] wrote: Ok, I'm not a newbie to Apache 2.x, Tomcat 4.x, JK2 with Java SDK 1.4.x ... I have gotten these to work over the years with few problems either on a Windows or Linux environment. I've modified the httpd.conf file and workers2.properties files under Apache 2.x, and the server.xml and jk2.properties under Tomcat 4.x. However, now I am in unfamiliar territory once more. I am working on Windows 2000, and I want to use Apache 2.x which I have no problems working with. But now, I want it to work with Tomcat 5.5.x ... so, here the questions begins: I understand that I should be using the Java SDK 1.5 now with Tomcat 5.5.x, is that correct? I
Re: Tomcat/Apache/JK(2)?
Tom, If you need them, I can send you my actual files. Although I encourage you to do all you can do on your own to figure it out. It'll pay huge dividends in the end if you understand what you had to do to make it work. DW --- Tom Holmes Jr. [EMAIL PROTECTED] wrote: I can't thank you enough. I was wondering if anyone had done it, and you certainly have. The sample files I have has always been the biggest hurdle for me also. The mod_jk.so I am using is mod_jk-1.2.13-apache-2.0.54.so which I think is for Windows. I'll refer to the same directions you used, and I am sure I will get it also. Thanks for giving me hope that it can be done! Now I just have to get past those sample files also. Thanks again! Tom Darryl Wilburn wrote: Tom, I have Tomcat 5.5.7, Apache 2.0.54, JRE 1.5.0_03, JK 1.2.11, running on Win2k3 server with no problems. The biggest hurdle I had to get over was making the necessary changes on the sample files included with the software. (the worker names didn't match) The files required are mod_jk.so (downloaded at http://www.apache.org/dist/jakarta/tomcat-connectors/jk/binaries/) The instructions I followed are at http://jakarta.apache.org/tomcat/connectors-doc/howto/apache.html. The other files involved are workers.properties, mod_jk.conf. The HowTo instructions at the above link are excellent. DW --- Tom Holmes Jr. [EMAIL PROTECTED] wrote: Ok, I'm not a newbie to Apache 2.x, Tomcat 4.x, JK2 with Java SDK 1.4.x ... I have gotten these to work over the years with few problems either on a Windows or Linux environment. I've modified the httpd.conf file and workers2.properties files under Apache 2.x, and the server.xml and jk2.properties under Tomcat 4.x. However, now I am in unfamiliar territory once more. I am working on Windows 2000, and I want to use Apache 2.x which I have no problems working with. But now, I want it to work with Tomcat 5.5.x ... so, here the questions begins: I understand that I should be using the Java SDK 1.5 now with Tomcat 5.5.x, is that correct? I always thought that JK2 was the new version of JK. I have always used JK2 to connect tomcat 4.x to Apache 2.x. I understand that JK2 is now deprecated and is no longer getting any support? Does this mean I should now use JK to connect Tomcat 5.5.x with Apache 2.x? Do I still need a workers2.properties file? Where can I find documentation on using JK in order to connect Apache 2.x with Tomcat 5.5.x? Any sample files I need? I know I've seen a lot of questions about this on this list and on the net (yes, Google is my friend), but I only get bits and pieces of the whole, I was looking for anything more comprehensive. Thanks for any help you guys can provide! Tom - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Yahoo! Mail Mobile Take Yahoo! Mail with you! Check email on your mobile phone. http://mobile.yahoo.com/learn/mail - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Do you Yahoo!? Yahoo! Mail - You care about security. So do we. http://promotions.yahoo.com/new_mail - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Tomcat/Apache/JK(2)?
Tom, I have Tomcat 5.5.7, Apache 2.0.54, JRE 1.5.0_03, JK 1.2.11, running on Win2k3 server with no problems. The biggest hurdle I had to get over was making the necessary changes on the sample files included with the software. (the worker names didn't match) The files required are mod_jk.so (downloaded at http://www.apache.org/dist/jakarta/tomcat-connectors/jk/binaries/) The instructions I followed are at http://jakarta.apache.org/tomcat/connectors-doc/howto/apache.html. The other files involved are workers.properties, mod_jk.conf. The HowTo instructions at the above link are excellent. DW --- Tom Holmes Jr. [EMAIL PROTECTED] wrote: Ok, I'm not a newbie to Apache 2.x, Tomcat 4.x, JK2 with Java SDK 1.4.x ... I have gotten these to work over the years with few problems either on a Windows or Linux environment. I've modified the httpd.conf file and workers2.properties files under Apache 2.x, and the server.xml and jk2.properties under Tomcat 4.x. However, now I am in unfamiliar territory once more. I am working on Windows 2000, and I want to use Apache 2.x which I have no problems working with. But now, I want it to work with Tomcat 5.5.x ... so, here the questions begins: I understand that I should be using the Java SDK 1.5 now with Tomcat 5.5.x, is that correct? I always thought that JK2 was the new version of JK. I have always used JK2 to connect tomcat 4.x to Apache 2.x. I understand that JK2 is now deprecated and is no longer getting any support? Does this mean I should now use JK to connect Tomcat 5.5.x with Apache 2.x? Do I still need a workers2.properties file? Where can I find documentation on using JK in order to connect Apache 2.x with Tomcat 5.5.x? Any sample files I need? I know I've seen a lot of questions about this on this list and on the net (yes, Google is my friend), but I only get bits and pieces of the whole, I was looking for anything more comprehensive. Thanks for any help you guys can provide! Tom - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Yahoo! Mail Mobile Take Yahoo! Mail with you! Check email on your mobile phone. http://mobile.yahoo.com/learn/mail - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Error Running Tomcat 5.0.28 Service on Win2K3
It sounds to me as though it would have something to do with user rights. I'm assuming when you launch the bat files, you're most likely logged in as Admin with all the rights in the world. Have you tried setting the service to run as the Admin account (for testing only) as opposed to System? Does SYSTEM have access to the Tomcat files? DW --- Jackson James W MAJ MNF-I CIS KM Portal Manager [EMAIL PROTECTED] wrote: We've already checked the web, the FAQ, and the archive for starting Tomcat as a service on Win2K3 as a PDC (primary domain controller) with no luck. We installed Tomcat 5.0.28 (port 80) as a service on Win2K3 (1 GB RAM) with J2SDK 1.4.2_05. Win2K3 is running AD (active directory), DNS, DHCP, and Oracle 10g. All other services are not installed (notably IIS). We're able to start Tomcat successfully using catalina.bat. We're able to install the service; however, when starting the service, I get the following error message in the jakarta_service_20050516.log [info] Starting service... [415 javajni.c] [error] CreateJavaVM Failed [770 prunsrv.c] [error] Failed initializing java C:\j2sdk1.4.2_05\lib\tools.jar;C:\cdcie\tomcat\bin\bootstrap.jar [982 prunsrv.c] [error] ServiceStart returned 2 Where do we find the service start error codes? Or the source code for javajni.c and prunsrv.c? Thanks in advance, Jim Jackson Further details are below: We modified both catalina.bat and service.bat to display all environment variables. They appear to be the same. Output from modified catalina.bat that runs correctly: OS: Windows_NT CATALINA_HOME: C:\cdcie\tomcat CATALINA_OPTS: -Djava.security.auth.login.config=c:\cdcie\tomcat\conf\jaas.conf -Djava.awt.headless=true JAVA_OPTS: -Xms256m -Xmx512m BASEDIR:C:\cdcie\tomcat JAVA_HOME: C:\j2sdk1.4.2_05 JAVA_ENDORSED_DIRS: C:\cdcie\tomcat\common\endorsed CLASSPATH: C:\j2sdk1.4.2_05\lib\tools.jar;C:\cdcie\tomcat\bin\bootstrap.jar CATALINA_BASE: C:\cdcie\tomcat CATALINA_TMPDIR:C:\cdcie\tomcat\temp _RUNJAVA: C:\j2sdk1.4.2_05\bin\java _EXECJAVA: start Tomcat C:\j2sdk1.4.2_05\bin\java MAINCLASS: org.apache.catalina.startup.Bootstrap ACTION: start start Tomcat C:\j2sdk1.4.2_05\bin\java -Xms512m -Xmx1024m -Djava.security.auth.login.config=c:\cdcie\tomcat\conf\jaa s.conf -Djava.awt.headless=true -Djava.endorsed.dirs=C:\cdcie\tomcat\common\endorsed -classpath C:\j2sdk1.4.2_05\li b\tools.jar;C:\cdcie\tomcat\bin\bootstrap.jar -Dcatalina.base=C:\cdcie\tomcat -Dcatalina.home=C:\cdcie\tomcat -Djav a.io.tmpdir=C:\cdcie\tomcat\temp org.apache.catalina.startup.Bootstrap start Output from modified service.bat: OS: Windows_NT SERVICE_NAME: Tomcat5 PR_DISPLAYNAME: Apache Tomcat CURRENT_DIR:C:\cdcie\tomcat\bin CATALINA_HOME: C:\cdcie\tomcat CATALINA_BASE: C:\cdcie\tomcat EXECUTABLE: C:\cdcie\tomcat\bin\tomcat5.exe JAVA_HOME: C:\j2sdk1.4.2_05 PR_DESCRIPTION: Apache Tomcat Server - http://jakarta.apache.org/tomcat PR_INSTALL: C:\cdcie\tomcat\bin\tomcat5.exe PR_LOGPATH: C:\cdcie\tomcat\logs PR_CLASSPATH: C:\j2sdk1.4.2_05\lib\tools.jar;C:\cdcie\tomcat\bin\bootstrap.jar PR_JVM: C:\j2sdk1.4.2_05\jre\bin\server\jvm.dll PR_STDOUTPUT: C:\cdcie\tomcat\logs\stdout.log PR_STDERROR:C:\cdcie\tomcat\logs\stderr.log C:\cdcie\tomcat\bin\tomcat5.exe //IS//Tomcat5 --StartClass org.apache.catalina.startup.Bootstrap --StopClass org.apach e.catalina.startup.Bootstrap --StartParams start --StopParams stop C:\cdcie\tomcat\bin\tomcat5.exe //US//Tomcat5 --JvmOptions -Dcatalina.base=C:\cdcie\tomcat;-Dcatalina.home=C:\cdcie\t omcat;-Djava.endorsed.dirs=C:\cdcie\tomcat\common\endorsed;-Djava.securi ty.auth.login.config=C:\cdcie\tomcat\conf\jaas.c onf;-Djava.awt.headless=\true\;-server;-Xms256m;-Xmx512m --StartMode jvm --StopMode jvm C:\cdcie\tomcat\bin\tomcat5.exe //US//Tomcat5 ++JvmOptions -Djava.io.tmpdir=C:\cdcie\tomcat\temp - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Yahoo! Mail Stay connected, organized, and protected. Take the tour: http://tour.mail.yahoo.com/mailtour.html - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Tomcat SSL Client Authentication
What version of TC? I've read something about configuring the HTTPS connector to perform SSL client certificate authorization. I'm agree with Jim, in server.xml, the clientAuth should be set to true. That is the correct setting, if you get a page not found, that doesn't mean the cert didn't work... Also, the name on the client cert must be exactly the same as the one in the user database. I've also read that you don't need and security-constraints to use the CLIENT-CERT unless you're also using a separeat Realm. DW --- lercoli [EMAIL PROTECTED] wrote: Hi Jim I've tried with clientAuth = true but server certificate window doesn't appear and I get page not found error. - Original Message - From: ohaya [EMAIL PROTECTED] To: Tomcat Users List tomcat-user@jakarta.apache.org Sent: Wednesday, April 27, 2005 12:49 PM Subject: Re: Tomcat SSL Client Authentication Hi, I believe that the clientAuth needs to be set to true in the server.xml. Jim lercoli wrote: Hello I've configured Tomcat SSL Client Authentication with these settings : web.xml ... security-constraint web-resource-collection web-resource-nameEntire Application/web-resource-name url-pattern/*/url-pattern http-methodGET/http-method http-methodPOST/http-method /web-resource-collection user-data-constraint transport-guaranteeCONFIDENTIAL/transport-guarantee /user-data-constraint /security-constraint login-config auth-methodCLIENT-CERT/auth-method /login-config . server.xml . Connector port=8443 maxHttpHeaderSize=8192 maxThreads=150 minSpareThreads=25 maxSpareThreads=75 enableLookups=false disableUploadTimeout=true acceptCount=100 scheme=https secure=true clientAuth=false sslProtocol=TLS keystoreFile=D:\jdk1.5.0_02\bin\keystore.jks keystorePass=changeit truststoreFile=D:\jdk1.5.0_02\bin\cacerts.jks / ... Client certificate (client.cer) is installed in my IE Browser (version 6.0.28). When I invoke htpps://localhost:8443/myweapp appears a window that asks me to accept the server certificate. I accept and my webapp index page appears. So why I don't see a window for client authentication ? And why I 've the same behaviour also when I remove the client.cer from my Browser ? It seems that client-certification doesn't work. Any help would be greatly appreciated. Thank You Luca Ercoli - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Multiple services in single Tomcat instance
Do you not have to specify the className in the service? className=org.apache.coyote.tomcat4.CoyoteConnector? Darryl --- Gary Hirschhorn [EMAIL PROTECTED] wrote: Thanks for the response. However, it still didn't work. I assume the changes you made were to remove the leading / from the docBase. I am guessing the problem is that my Host elements have the same name, and the second one is overriding the first. Unfortunately, it looks like the Host elements need to have the same name as I think the name must represent a name that the local DNS recognizes. At this point, we are just going to live with a single Service that uses both ports. The reason for trying this in the first place was that we wanted to use our firewall to allow one port to be accessible from the outside that would see our public applications, while the second port would be accessible only within our company. This port would allow access to some internal applications. We are using Tomcat security to password-protect the access anyway, but we were hoping have the additional security of not allowing any traffic from the outside at all. (By the way, I think we could accomplish what we want with 2 Tomcat installations, but there are other reasons why that is not desirable.) -Original Message- From: Raghupathy,Gurumoorthy [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 20, 2005 2:12 AM To: 'Tomcat Users List' Subject: RE: Multiple services in single Tomcat instance Try this Service name=RequestsFromPort6000 Connector protocol=HTTP/1.1 port=6000/ Engine debug=0 defaultHost=localhost name=Standalone Host appBase=c:\projects name=localhost unpackWARs=false autoDeploy=false deployOnStartup=false Context docBase=app6000 path=/app6000 reloadable=false/ /Host /Engine /Service Service name=RequestsFromPort7000 Connector protocol=HTTP/1.1 port=7000/ Engine debug=0 defaultHost=localhost name=Standalone Host appBase=c:\projects name=localhost unpackWARs=false autoDeploy=false deployOnStartup=false Context docBase=app7000 path=/app7000 reloadable=false/ /Host /Engine /Service -Original Message- From: Gary Hirschhorn [mailto:[EMAIL PROTECTED] Sent: 19 April 2005 16:58 To: Tomcat Users List Subject: RE: Multiple services in single Tomcat instance We are using all of the following URL formats to access Tomcat. There is a singe IP address on the machine, and a single domain name registered for the IP address. http://localhost:6000/app6000 http://localhost:7000/app7000 http://machinename.hostname.com:6000/app6000 http://machinename.hostname.com:7000/app7000 -Original Message- From: Raghupathy,Gurumoorthy [mailto:[EMAIL PROTECTED] Sent: Tuesday, April 19, 2005 7:56 AM To: 'Tomcat Users List' Subject: RE: Multiple services in single Tomcat instance How are you accessing tomcat ? http://localhost:7000/ http://localhost:6000/ ??? -Original Message- From: Gary Hirschhorn [mailto:[EMAIL PROTECTED] Sent: 19 April 2005 15:34 To: tomcat-user@jakarta.apache.org Subject: Multiple services in single Tomcat instance We would like to have a single Tomcat instance running as a web server that allows requests received on one port to go to one context and requests on another port to go to a second context. Is there a way to do this? We tried putting the following in our server.xml, but requests meant for the first service (port 6000) were recieved by the second service (port 7000). Thank you for any help. Service name=RequestsFromPort6000 Connector protocol=HTTP/1.1 port=6000/ Engine debug=0 defaultHost=localhost name=Standalone Host appBase=c:/projects name=localhost unpackWARs=false autoDeploy=false deployOnStartup=false Context docBase=/app6000 path=/app6000 reloadable=false/ /Host /Engine /Service Service name=RequestsFromPort7000 Connector protocol=HTTP/1.1 port=7000/ Engine debug=0 defaultHost=localhost name=Standalone Host appBase=c:/projects name=localhost unpackWARs=false autoDeploy=false deployOnStartup=false Context docBase=/app7000 path=/app7000 reloadable=false/ /Host /Engine /Service - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Can't get Tomcat to use account other than System
In addition to Logon as a service, the account will also need to Act as part of the operating system. Again, these are the two minimum requirements. Depending on what you're trying to access, you may need to assign additional user rights. Darryl --- Mark Leone [EMAIL PROTECTED] wrote: Thanks. That's useful information, but unfortunately it didn't solve my problem. The account I'm trying to use was already mapped to the Logon as a Service right. I looked at all other rights that didn't have either the account or its group mapped to them, and I couldn't see any that seemed to be needed. I searched through the MS knowledge base as well, and didn't find anything relevant to this problem. I found a better way to accomplish what I was trying to do; but I'd like to find out why I can't run Tomcat as an account other than System, in case I have a need for it at some later point. Thanks for trying. Darryl Wilburn wrote: In Administrative Tools, go to Local Security Policy and navigate to Local Policies User Rights Assignment. This lists all the assignable user rights. At the very least, this account will need to be assigned to Logon On as a Service. Don't mess around with the Net Logon service. The only service you need to mess with is Apache Tomcat. The other services aren't broken, so don't try to fix them. You might also consider looking here: http://support.microsoft.com/default.aspx?scid=fh;EN-US;kbhowtosd=TECHln=EN-USFR=0 Darryl --- Mark Leone [EMAIL PROTECTED] wrote: Can you tell me how to check for that? The only options I can find for defining account properties are in Control Panel -- Users and Administrative Tools -- Computer Management; and neither of those have any settings beyond very basic things like Admin vs. limited priviliges. I played around a bit with the Net Logon service. I specified the desired account credentials in the Log On tab of the Service Properties, and then when I tried to start the service I got the following error. Could Not start the Net Logon service on local computer. Error 1079: The accout specified for this service is different from the account specified for other services running in the same process. Not sure what to make of this, or if I'm barking up the wrong tree. Please enlighten me. Darryl Wilburn wrote: Mark, Does the account you're trying to use have all the correct user rights (act as part of the operating system, run as a service, etc.)? Darryl --- Mark Leone [EMAIL PROTECTED] wrote: I think this is a pretty basic question, but I couldn't find an answer in the archives. I've been using Tomcat for a while, with Tomcat logging on as the local System account. Now I'd like Tomcat to have some additional access rights, so I'm trying to get it to log on as a privileged user. I have Tomcat 5.5.8 installed as a Service on Windows XP. I launch the Service properties window, go to the Log On tab, check the This Account radio button, and then enter the account credentials. The credentials seem to be accepted, but if I close the Service properties window and re-launch it, the Log On tab has reverted to its default configuration, i.e. Log on as Local System Account is enabled instead of the account I specified. And Tomcat doesn't have the access rights I'd like it to have, even after restart. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Yahoo! Mail Mobile Take Yahoo! Mail with you! Check email on your mobile phone. http://mobile.yahoo.com/learn/mail - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Do you Yahoo!? Plan great trips with Yahoo! Travel: Now over 17,000 guides! http://travel.yahoo.com/p-travelguide - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL
Re: Can't get Tomcat to use account other than System
In Administrative Tools, go to Local Security Policy and navigate to Local Policies User Rights Assignment. This lists all the assignable user rights. At the very least, this account will need to be assigned to Logon On as a Service. Don't mess around with the Net Logon service. The only service you need to mess with is Apache Tomcat. The other services aren't broken, so don't try to fix them. You might also consider looking here: http://support.microsoft.com/default.aspx?scid=fh;EN-US;kbhowtosd=TECHln=EN-USFR=0 Darryl --- Mark Leone [EMAIL PROTECTED] wrote: Can you tell me how to check for that? The only options I can find for defining account properties are in Control Panel -- Users and Administrative Tools -- Computer Management; and neither of those have any settings beyond very basic things like Admin vs. limited priviliges. I played around a bit with the Net Logon service. I specified the desired account credentials in the Log On tab of the Service Properties, and then when I tried to start the service I got the following error. Could Not start the Net Logon service on local computer. Error 1079: The accout specified for this service is different from the account specified for other services running in the same process. Not sure what to make of this, or if I'm barking up the wrong tree. Please enlighten me. Darryl Wilburn wrote: Mark, Does the account you're trying to use have all the correct user rights (act as part of the operating system, run as a service, etc.)? Darryl --- Mark Leone [EMAIL PROTECTED] wrote: I think this is a pretty basic question, but I couldn't find an answer in the archives. I've been using Tomcat for a while, with Tomcat logging on as the local System account. Now I'd like Tomcat to have some additional access rights, so I'm trying to get it to log on as a privileged user. I have Tomcat 5.5.8 installed as a Service on Windows XP. I launch the Service properties window, go to the Log On tab, check the This Account radio button, and then enter the account credentials. The credentials seem to be accepted, but if I close the Service properties window and re-launch it, the Log On tab has reverted to its default configuration, i.e. Log on as Local System Account is enabled instead of the account I specified. And Tomcat doesn't have the access rights I'd like it to have, even after restart. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Yahoo! Mail Mobile Take Yahoo! Mail with you! Check email on your mobile phone. http://mobile.yahoo.com/learn/mail - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Do you Yahoo!? Plan great trips with Yahoo! Travel: Now over 17,000 guides! http://travel.yahoo.com/p-travelguide - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Directory listing
For Tomcat... Change the listings parameter in the DefaultServlet to false. Don't know for Apache. Darryl --- Richard Reyes [EMAIL PROTECTED] wrote: What I do is put an access denied index.jsp on every subdirectories inside the specific webapp folder. heres my acc. deny index.jsp... html head titleAccess Denied/title /head bodyh1Access Denied/h1/body /html hth. richard On 4/15/05, dummy [EMAIL PROTECTED] wrote: How can I disable both the apache and tomcat 5.5 from displaying the directory of my web application ? - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Do you Yahoo!? Plan great trips with Yahoo! Travel: Now over 17,000 guides! http://travel.yahoo.com/p-travelguide - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Can't get Tomcat to use account other than System
Mark, Does the account you're trying to use have all the correct user rights (act as part of the operating system, run as a service, etc.)? Darryl --- Mark Leone [EMAIL PROTECTED] wrote: I think this is a pretty basic question, but I couldn't find an answer in the archives. I've been using Tomcat for a while, with Tomcat logging on as the local System account. Now I'd like Tomcat to have some additional access rights, so I'm trying to get it to log on as a privileged user. I have Tomcat 5.5.8 installed as a Service on Windows XP. I launch the Service properties window, go to the Log On tab, check the This Account radio button, and then enter the account credentials. The credentials seem to be accepted, but if I close the Service properties window and re-launch it, the Log On tab has reverted to its default configuration, i.e. Log on as Local System Account is enabled instead of the account I specified. And Tomcat doesn't have the access rights I'd like it to have, even after restart. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Yahoo! Mail Mobile Take Yahoo! Mail with you! Check email on your mobile phone. http://mobile.yahoo.com/learn/mail - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: How do I restrict access to webapps applications from browser users?
Another option would be the BadInputFilterValve. I can't really speak to that option as I have not used it. But, maybe someone else has? Darryl __ Do you Yahoo!? Yahoo! Small Business - Try our new resources site! http://smallbusiness.yahoo.com/resources/ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Redirect to https://
Where would I configure a context to automatically redirect to https? So when a user types http://host/application, it would automatically redirect them to https://host/application where a index.jsp may be a login form that I'd like to have the username and password encrypted. I assume it goes in web.xml, but is it in the web.xml of the context itself? What is the format of the entry? Thanks in advance. Darryl __ Do you Yahoo!? Yahoo! Small Business - Try our new resources site! http://smallbusiness.yahoo.com/resources/ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Redirect to https://
Not using Apache as a front end. Straight Tomcat 5.5.7 with Coyote HTTP. Darryl __ Do you Yahoo!? Make Yahoo! your home page http://www.yahoo.com/r/hs - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Virtual Host in Tomcat 4.1.29
I'm going to try to keep this short and to the point. I'm trying to configure a virtual host on a 4.1.29 server with no luck. I've successfully configured it on 5.5.7 which seems to have better facilities for configuring VH's. I've configured the server.xml to have an additional host entry as shown: Host name=ddi debug=0 appBase=webapps/ddi unpackWARs=true autoDeploy=true Logger className=org.apache.catalina.logger.FileLogger directory=logs/ddi prefix=ddi_log. suffix=.txt timestamp=true/ Aliasnt-notes2/Alias /Host Logging is working fine, but when I try to navigate to http://ddi, I get No context configured to process this request. Problem is when I try to configure a DefaultContext, I get a different error message. So what needs defined and where does it go. BTW, I have a WEB-INF under webapps/ddi with an empty web.xml. This is where I've been trying to configure the default context for this VH. Thanks for any help! Darryl __ Do you Yahoo!? Yahoo! Small Business - Try our new resources site! http://smallbusiness.yahoo.com/resources/ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Virtual Host in Tomcat 4.1.29
Disregard... I think I've got it! Darryl __ Do you Yahoo!? Yahoo! Small Business - Try our new resources site! http://smallbusiness.yahoo.com/resources/ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
How do I restrict access to webapps applications from browser users?
I lost the thread to this original message, but found what I consider good information. Ike, Here's a link to some information on using security-constraint: http://www.onjava.com/pub/a/onjava/2001/07/24/tomcat.html It also states: The login-config sub-element defines the authentication method for the defined realm. The possible values are BASIC, DIGEST, and FORM. And the realm-name sub-element names the Web resource that this login-config maps to. So it doesn't seem to require BASIC authentication. Darryl __ Do you Yahoo!? Yahoo! Small Business - Try our new resources site! http://smallbusiness.yahoo.com/resources/ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Windows Installation - Tomcat Start and Stop in the Start menu
I'm a little new at this, but I downloaded the binaries for 5.5.7 and ran through the setup program which installed Apache Tomcat as a service in Windows. In that case, you stop and start it just as you would any other service. Hope this helps, Darryl Malvey, Ramesh \(GE Consumer Industrial\) [EMAIL PROTECTED] 04/08/2005 07:17 AM Please respond to Tomcat Users List tomcat-user@jakarta.apache.org To tomcat-user@jakarta.apache.org cc Subject Windows Installation - Tomcat Start and Stop in the Start menu Hi, I have downloaded Tomcat 5 on my Windows 2000 machine. I see neither Start Tomcat nor Stop Tomcat programs in the start menu. In case I make any changes to my class files that require the restart of the server, how do I do so? Also, where can I see the logs of my application? Using Tomcat 4.1, I could restart Tomcat by selecting Start Tomcat program from the start menu which also used to display the logs of the application.. Thanks, Ramesh - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Virtual host configuration
Greetins all, New to Tomcat/Apache Implemented Tomcat 4.1.29 to support an application that required an application server. I'm migrating the application from an existing NT 4.0 system and would like to implement it as a virtual host on the Win2003 server running Tomcat. (Unfortunately, the app does not support non-Win hosts) Anyway, I'd like to define the starting point of the virtual host as a directory that is 3 levels below webapps. In other words, I want the users to see the site as http://hostname, instead http://hostname/folder1/folder2/folder3. (folder3 being the desired home directory) Thanks DW
