tomcat -- SSL

2001-08-24 Thread brian luk

I am now using apache web server with SSL already
setup.

that means I can connect to HTTP server using SSL:
https://10.0.0.105:443/
or I can connect to HTTP server w/o SSL
http://10.0.0.105:80

I can make a request to servlet using SSL:
https://10.0.0.105:443/admin/servlet/com.app.Admin
or I can make request to servelt w/o SSL
http://10.0.0.105/admin/servlet/com.app.Admin

Will I get a secure connection between servlet  web
browser if I 

- block all port that can access servlet engine(e.g.
tomcat) from internet (e.g. 80, 8080) except SSL port
443.
- now web browser to apache web server connection is
secure.
- apache server to tomcat is not secure but only
apache can access tomcat, then it means
tomcat(servlet) is secure too??

If the above way is secure. how can I block access to
servlet through port 80?  or block access to a
sepecific web application through port 80?  which
means access is only granted through SSL port 443. (in
tomcat for example)
 
Since i need to send private info up from web browser
to servlet and make sure no one spy it. (
user/password for example )

thanks.


__
Do You Yahoo!?
Make international calls for as low as $.04/minute with Yahoo! Messenger
http://phonecard.yahoo.com/



request to servlet through SSL

2001-08-23 Thread brian luk

I am now using apache web server with SSL already
setup.

that means I can connect to HTTP server using SSL:
https://10.0.0.105:443/
or I can connect to HTTP server w/o SSL
http://10.0.0.105:80

I can make a request to servlet using SSL:
https://10.0.0.105:443/admin/servlet/com.app.Admin
or I can make request to servelt w/o SSL
http://10.0.0.105/admin/servlet/com.app.Admin

Will I get a secure connection between servlet  web
browser if I 

- block all port that can access servlet engine(e.g.
tomcat) from internet (e.g. 80, 8080) except SSL port
443.
- now web browser to apache web server connection is
secure.
- apache server to tomcat is not secure but only
apache can access tomcat, then it means
tomcat(servlet) is secure too??

If the above way is secure. how can I block access to
servlet through port 80?  or block access to a
sepecific web application through port 80?  which
means access is only granted through SSL port 443. (in
tomcat for example)
 
Since i need to send private info up from web browser
to servlet and make sure no one spy it. (
user/password for example )

thanks.

__
Do You Yahoo!?
Make international calls for as low as $.04/minute with Yahoo! Messenger
http://phonecard.yahoo.com/



AddModule mod_jk.c

2001-04-14 Thread brian luk

Hi,
can any one tell me what's difference between the 2:

LoadModule jk_module  libexec/mod_jk.so
AddModule mod_jk.c

i must load the jk module before i can connect to
tomcat.  I think tomcat works without AddModule
mod_jk.c, what's AddModule mod_jk.c use for? No use?

thanks. 


P.S.
part of the httpd.conf
LoadModule env_module libexec/mod_env.so
LoadModule config_log_module 
libexec/mod_log_config.so
LoadModule mime_modulelibexec/mod_mime.so
LoadModule negotiation_module
libexec/mod_negotiation.so
LoadModule status_module  libexec/mod_status.so
LoadModule includes_modulelibexec/mod_include.so
LoadModule autoindex_module   libexec/mod_autoindex.so
LoadModule dir_module libexec/mod_dir.so
LoadModule cgi_module libexec/mod_cgi.so
LoadModule asis_modulelibexec/mod_asis.so
LoadModule imap_modulelibexec/mod_imap.so
LoadModule action_module  libexec/mod_actions.so
LoadModule userdir_module libexec/mod_userdir.so
LoadModule alias_module   libexec/mod_alias.so
LoadModule access_module  libexec/mod_access.so
LoadModule auth_modulelibexec/mod_auth.so
LoadModule setenvif_modulelibexec/mod_setenvif.so
LoadModule jk_module  libexec/mod_jk.so
LoadModule rewrite_module libexec/mod_rewrite.so
IfDefine SSL
LoadModule ssl_module libexec/libssl.so
/IfDefine

ClearModuleList
AddModule mod_env.c
AddModule mod_log_config.c
AddModule mod_mime.c
AddModule mod_negotiation.c
AddModule mod_status.c
AddModule mod_include.c
AddModule mod_autoindex.c
AddModule mod_dir.c
AddModule mod_cgi.c
AddModule mod_asis.c
AddModule mod_imap.c
AddModule mod_actions.c
AddModule mod_userdir.c
AddModule mod_alias.c
AddModule mod_access.c
AddModule mod_auth.c
AddModule mod_so.c
AddModule mod_setenvif.c
AddModule mod_jk.c
AddModule mod_rewrite.c
IfDefine SSL
AddModule mod_ssl.c
/IfDefine

__
Do You Yahoo!?
Get email at your own domain with Yahoo! Mail. 
http://personal.mail.yahoo.com/



tomcat classpath -- \tomcat\lib

2001-03-29 Thread brian luk

Hi all,
tomcat documentation told me to put all my JAR files
in
c:\tomcat\lib\.  but when i put my JAR files
there, the classpath semes didn't find the JARs in
c:\tomcat\lib dir.  

It works on unix but not WIN32. and i was forced to
put my JAR files inside JDK/JRE's lib\ext directory. 
Anyone has problems when put JARs in tomcat\lib\? 

thanks.


__
Do You Yahoo!?
Get email at your own domain with Yahoo! Mail. 
http://personal.mail.yahoo.com/?.refer=text



RE: tomcat classpath -- \tomcat\lib

2001-03-29 Thread brian luk

I run tomcat standalone ( not NT service ). is it
matter to the classpath? and what's wrapper.properties
use for?
thanks


--- "Dalia, Keith A - TOS-DITT1" [EMAIL PROTECTED]
wrote:
 Are you running tomcat as a service/daemon with
 Apache or IIS or from the
 startup.bat
 
 You might want to look at the wrapper.properties
 file.
 
 
  
 
 -Original Message-----
 From: brian luk [mailto:[EMAIL PROTECTED]]
 Sent: Thursday, March 29, 2001 3:35 PM
 To: [EMAIL PROTECTED]
 Subject: tomcat classpath -- \tomcat\lib
 
 
 Hi all,
 tomcat documentation told me to put all my JAR files
 in
 c:\tomcat\lib\.  but when i put my JAR files
 there, the classpath semes didn't find the JARs in
 c:\tomcat\lib dir.  
 
 It works on unix but not WIN32. and i was forced to
 put my JAR files inside JDK/JRE's lib\ext directory.
 
 Anyone has problems when put JARs in tomcat\lib\? 
 
 thanks.
 
 
 __
 Do You Yahoo!?
 Get email at your own domain with Yahoo! Mail. 
 http://personal.mail.yahoo.com/?.refer=text


__
Do You Yahoo!?
Get email at your own domain with Yahoo! Mail. 
http://personal.mail.yahoo.com/?.refer=text



Modify startup script – allocate more memory

2001-03-28 Thread brian luk

Hi,
-- My servlet got java.lang.OutOfMemoryError and my
Solaris machine is still have free memory left ( no
disk swap occur ).  Any way to modify tomcat startup
file to allocate more memory?

-- Does VM only use only PART of the system memroy? 
like 32MB or 64MB out of 128MB system memory? would
that means VM will never use the virtual memory ( Disk
Swap )? 
 
-- Why VM doesn't use all the system RAM ( for
example128MB) by default?  and need to manually
specify the amount of system RAM it use through java
-Xmx128m option? 

-- If one specify VM to use as much as memory it can
use ( Include virtual memroy ) disk swap, then I will
never get java.lang.OutOfMemoryError, right?

thanks.



__
Do You Yahoo!?
Get email at your own domain with Yahoo! Mail. 
http://personal.mail.yahoo.com/?.refer=text



Re: j_security_check

2001-03-25 Thread brian luk

I just looked at web.xml inside the example directory.
there is a block defined like this, but i am not sure
if you are ask this.

security-constraint
  web-resource-collection
 web-resource-nameProtected
Area/web-resource-name

url-pattern/jsp/security/protected/*/url-pattern
  http-methodDELETE/http-method
 http-methodGET/http-method
 http-methodPOST/http-method
  http-methodPUT/http-method
  /web-resource-collection
  auth-constraint
 role-nametomcat/role-name
  role-namerole1/role-name
  /auth-constraint
/security-constraint

login-config
  auth-methodFORM/auth-method
  realm-nameExample Form-Based Authentication
Area/realm-name
  form-login-config
   
form-login-page/jsp/security/login/login.jsp/form-login-page
   
form-error-page/jsp/security/login/error.jsp/form-error-page
  /form-login-config
/login-config

--- Ian Kallen [EMAIL PROTECTED] wrote:
 
 I haven't seen any real useful answers in the
 archive about the
 form based auth jsp security example 404'ing on
 /examples/jsp/security/login/j_security_check
 
 Does something need to be in server.xml to enable
 this?  I'm including
 mod_jk-auto that tomcat generates in my httpd.conf
 and other examples seem
 to be fine but this example is missing any
 explanation of its usage.  Any
 pointer to how this is supposed to be configured
 would be appreciated!
 
 The setup is:
 Apache 1.3.19
 Tomcat 3.2.1
 JDK 1.2.2
 FreeBSD 4.2
 
 thanks,
 -Ian
 
 --
 Ian Kallen [EMAIL PROTECTED] | AIM: iankallen |
 efax: (415) 354-3326
 


__
Do You Yahoo!?
Get email at your own domain with Yahoo! Mail. 
http://personal.mail.yahoo.com/



putting JAR files on tomcat ( WIN32 )

2001-03-25 Thread brian luk

Hi all,
The documentation told me to put all my JAR files in
c:\tomcat\lib\ directory.  but when i put my JAR files
there, the JAR/classes was not find.  

It works on unix but not WIN32. and i was forced to
put my JAR files inside JDK/JRE's lib\ext directory. 
Any one knows what's the problem? 

thanks.

__
Do You Yahoo!?
Get email at your own domain with Yahoo! Mail. 
http://personal.mail.yahoo.com/



Re: AW: java.lang.OutOfMemoryError

2001-03-23 Thread brian luk

Hi,
there is no session for each client. It's only HTTP
POST request/response, then it's over. 

--- Ralph Einfeldt [EMAIL PROTECTED]
wrote:
 Are you working with cookies or url rewriting?
 
 You have to keep some facts in mind:
   - each session needs some memory
   - each session will be alive some time after the
 last
 request to the session (default: 30 Minutes)
   - each request without a cookie or an encoded Url
 that
 matches an active session will create a new
 session.
   - It's quite easy to create memory leaks
 (especialy with a database)
 
 So your memory requirement is something like
   ("number of sessions created per minute" * 
   "session timeout in minutes" * 
   "memory usage per session") +
   ("number of requests" * "leaked bytes per
 request")
 
 Maybe increasing the heap size for the VM may help.
 Maybe decreasing the session timeout helps you to
 find
 out where your problems are.
 
  -Ursprüngliche Nachricht-
  Von: brian luk [mailto:[EMAIL PROTECTED]]
  Gesendet: Freitag, 23. März 2001 01:19
  An: [EMAIL PROTECTED]
  Betreff: java.lang.OutOfMemoryError
  
  
  Hi,
  I have a servlet listens for HTTP POST request. 
 then
  query the oracle database and response -- request
 /
  response are XML.  
  
  I had 10 Load Test client keep sending HTTP
 request to
  servlet as fast as they can -- for 10 hours
  
  But within 10 hours, all the response are OK,
 except i
  got a couple of servlet internal error says "Out
 of
  Memory" for some of the client.
  
  Error: 500
  Location: /test/server
  Internal Servlet Error:
  java.lang.OutOfMemoryError 
  
  Do I have a memory leak?  or that means too
 servlet is
  overLoad?  or Any thing cause this error? Is this
 a
  common error? I believe my servlet's memeory
  requirement is not that big. but i had at least
 100
  String object in it.
  
  thanks.
  
  P.S, my Config is:
  oracle 8.1.6
  tomcat 3.2
  apache 1.3.17
  Sun OS 5.6
  use HTTP / XML for request / response
  average run time / request = 500 milli - second
  # of client = 10
  
  
  
  __
  Do You Yahoo!?
  Get email at your own domain with Yahoo! Mail. 
  http://personal.mail.yahoo.com/
  


__
Do You Yahoo!?
Get email at your own domain with Yahoo! Mail. 
http://personal.mail.yahoo.com/



Is Apache web server 1.3.x multithreaded

2001-03-23 Thread brian luk

Hi,
Is Apache web server 1.3.x multithreaded?  that's each
request and handle by a thread. OR each request is
handle by a child process fork by parent?

thanks.

__
Do You Yahoo!?
Get email at your own domain with Yahoo! Mail. 
http://personal.mail.yahoo.com/



limit servlet access to user

2001-03-23 Thread brian luk

Hi,
I have a web application running on tomcat. there are
2 httpServlet in that web app.  how can i limit user
access to one of the httpServlet?

I read the example application in tomcat under
\tomcat\webapps\examples\jsp\security which demo form
base authentication.  I looked through all the
property files but can't find where it defines the
directory restrict access. 

OR the defualt dir is \protected on the same directory
as JSP? i really not quite sure how it works.

thanks.

__
Do You Yahoo!?
Get email at your own domain with Yahoo! Mail. 
http://personal.mail.yahoo.com/



java.lang.OutOfMemoryError

2001-03-22 Thread brian luk

Hi,
I have a servlet listens for HTTP POST request.  then
query the oracle database and response -- request /
response are XML.  

I had 10 Load Test client keep sending HTTP request to
servlet as fast as they can -- for 10 hours

But within 10 hours, all the response are OK, except i
got a couple of servlet internal error says "Out of
Memory" for some of the client.

Error: 500
Location: /test/server
Internal Servlet Error:
java.lang.OutOfMemoryError 

Do I have a memory leak?  or that means too servlet is
overLoad?  or Any thing cause this error? Is this a
common error? I believe my servlet's memeory
requirement is not that big. but i had at least 100
String object in it.

thanks.

P.S, my Config is:
oracle 8.1.6
tomcat 3.2
apache 1.3.17
Sun OS 5.6
use HTTP / XML for request / response
average run time / request = 500 milli - second
# of client = 10



__
Do You Yahoo!?
Get email at your own domain with Yahoo! Mail. 
http://personal.mail.yahoo.com/



java.lang.OutOfMemoryError

2001-03-22 Thread brian luk

Hi,
I have a servlet listens for HTTP POST request.  then
query the oracle database and response -- request /
response are XML.  

I had 10 Load Test client keep sending HTTP request to
servlet as fast as they can -- for 10 hours

But within 10 hours, all the response are OK, except i
got a couple of servlet internal error says "Out of
Memory" for some of the client.

Error: 500
Location: /test/server
Internal Servlet Error:
java.lang.OutOfMemoryError 

Do I have a memory leak?  or that means too servlet is
overLoad?  or Any thing cause this error? Is this a
common error? I believe my servlet's memeory
requirement is not that big. but i had at least 100
String object in it.

thanks.

P.S, my Config is:
oracle 8.1.6
tomcat 3.2
apache 1.3.17
Sun OS 5.6
use HTTP / XML for request / response
average run time / request = 500 milli - second
# of client = 10



__
Do You Yahoo!?
Get email at your own domain with Yahoo! Mail. 
http://personal.mail.yahoo.com/



mod_rewrite.so / mod_rewrite.dll / difference

2001-03-19 Thread brian luk

Hi,
can any one tell me what's the difference between .so
file and .dll files inside the module directory (Win32
)?  

what i think is .so is module file for unix and dll is
for win32 is that right?  

But when i install the apache web server, inside
module dir is all .so files. any where i can get dll
modlues?

thanks

__
Do You Yahoo!?
Get email at your own domain with Yahoo! Mail. 
http://personal.mail.yahoo.com/