Good book

2001-04-12 Thread davea

Hi,

 Being a newbie to TOMCAT and Java.  Is there a good book or some other type of 
reading material for TOMCAT.  I work as a system administrator and will not be 
developing JAVA servlet applications.  But, I do need to understand the ins and outs 
of TOMCAT for installation, configurations and security.  I don't understand the 
information in the various files, like server.xml, web.xml, etc and their 
releationships.

Dave




[ANS] Good book

2001-04-12 Thread davea

Ken,

 Do happen to know the URL for the website? 

 Thanks a bunch,

Dave
 From [EMAIL PROTECTED]  Thu Apr 
12 11:37:01 2001
 Received: from otto.nawcad.navy.mil (otto-internal.nawcad.navy.mil [192.58.199.212])
   by tecnet1.jcte.jcs.mil (8.9.3/8.9.3) with ESMTP id LAA23125
   for [EMAIL PROTECTED]; Thu, 12 Apr 2001 11:37:01 -0400 (EDT)
 Received: by otto.nawcad.navy.mil; id LAA05276; Thu, 12 Apr 2001 11:37:00 -0400 (EDT)
 Received: from unknown(64.208.42.41) by otto.nawcad.navy.mil via smap (V4.2)
   id xma004897; Thu, 12 Apr 01 11:36:48 -0400
 Received: (qmail 74671 invoked by uid 500); 12 Apr 2001 15:32:48 -
 Mailing-List: contact [EMAIL PROTECTED]; run by ezmlm
 Precedence: bulk
 Reply-To: [EMAIL PROTECTED]
 list-help: mailto:[EMAIL PROTECTED]
 list-unsubscribe: mailto:[EMAIL PROTECTED]
 list-post: mailto:[EMAIL PROTECTED]
 Delivered-To: mailing list [EMAIL PROTECTED]
 Received: (qmail 74649 invoked from network); 12 Apr 2001 15:32:48 -
 Received: from f85.law4.hotmail.com (HELO hotmail.com) (216.33.149.85)
   by h31.sny.collab.net with SMTP; 12 Apr 2001 15:32:48 -
 Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
Thu, 12 Apr 2001 08:32:49 -0700
 Received: from 195.207.101.123 by lw4fd.law4.hotmail.msn.com with HTTP;   Thu, 
12 Apr 2001 15:32:49 GMT
 X-Originating-IP: [195.207.101.123]
 From: "Kenneth Westelinck" [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Subject: Re: Good book
 Date: Thu, 12 Apr 2001 15:32:49 -
 Mime-Version: 1.0
 Content-Type: text/plain; format=flowed
 Message-ID: [EMAIL PROTECTED]
 X-OriginalArrivalTime: 12 Apr 2001 15:32:49.0347 (UTC) FILETIME=[D4AB1930:01C0C365]
 X-Spam-Rating: h31.sny.collab.net 1.6.2 0/1000/N
 
 Hi,
 
 I'm not sure if there's a good book yet about Tomcat. I think some dudes on 
 this mailing list are working on that. There is however a good website which 
 is being updated frequently and describes everything you need to administer 
 a Tomcat web site.
 
 
 hope this helps.
 
 Kenneth Westelinck
 
 
 From: [EMAIL PROTECTED]
 Reply-To: [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Subject: Good book
 Date: Thu, 12 Apr 01 11:08:00 EDT
 
 Hi,
 
   Being a newbie to TOMCAT and Java.  Is there a good book or some other 
 type of reading material for TOMCAT.  I work as a system administrator and 
 will not be developing JAVA servlet applications.  But, I do need to 
 understand the ins and outs of TOMCAT for installation, configurations and 
 security.  I don't understand the information in the various files, like 
 server.xml, web.xml, etc and their releationships.
 
 Dave
 
 
 _
 Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
 





[ANS] RE: virtual hosts on different ports

2001-04-11 Thread davea

Bill,

  What you stated is what I'm trying to do. I have a single server, in which I need to 
utiltize ports 8601 and 443.  But, I want each port to examine a certain 'context'.  
Right now I'm manily concerned about 8601 for our developemt team.
Here is my entry from the server.xml and httpsd.conf file.  But, when I try to connect 
to the pages I receive a 404 error and in the jasper log file I notice TOMCAT is 
trying to excute the code from $TOMCAT_HOME/webapps/ROOT/WEB-INF/classes directory.  
Can you give me a clue on what I'm doing wrong.

 Thanks a bunch.

server.xml

Host Name="140.229.33.200:8601"
Context path="/paxAIP"
 docBase="/tecnet/WWW/NetScape/Alpha/paxAIP"
 crossContext="true"
 reloadable="true"
 trusted="false"
 debug="0"/
/Host

httpsd

#  General setup for the virtual host
DocumentRoot "/tecnet/WWW/NetScape/Alpha"
ServerName tecnet1.jcte.jcs.mil
ServerAdmin [EMAIL PROTECTED]
ErrorLog logs/tecnet8601_error_log
TransferLog logs/tecnet8601_access_log
SetEnvIf Request_URI wwwAuthenticatedEntrance.cgi$ login
CustomLog logs/agent_log loginagent env=login
JkMount /*.jsp ajp13
JkMount /servlet/* ajp13

Dave


 From [EMAIL PROTECTED]  Tue Apr 
10 14:50:35 2001
 Received: from otto.nawcad.navy.mil (otto-internal.nawcad.navy.mil [192.58.199.212])
   by tecnet1.jcte.jcs.mil (8.9.3/8.9.3) with ESMTP id OAA19625
   for [EMAIL PROTECTED]; Tue, 10 Apr 2001 14:50:34 -0400 (EDT)
 Received: by otto.nawcad.navy.mil; id OAA20256; Tue, 10 Apr 2001 14:50:34 -0400 (EDT)
 Received: from unknown(64.208.42.41) by otto.nawcad.navy.mil via smap (V4.2)
   id xma019868; Tue, 10 Apr 01 14:50:27 -0400
 Received: (qmail 45293 invoked by uid 500); 10 Apr 2001 18:49:36 -
 Mailing-List: contact [EMAIL PROTECTED]; run by ezmlm
 Precedence: bulk
 Reply-To: [EMAIL PROTECTED]
 list-help: mailto:[EMAIL PROTECTED]
 list-unsubscribe: mailto:[EMAIL PROTECTED]
 list-post: mailto:[EMAIL PROTECTED]
 Delivered-To: mailing list [EMAIL PROTECTED]
 Received: (qmail 45276 invoked from network); 10 Apr 2001 18:49:36 -
 Received: from unknown (HELO jnm-main.pictureiq.com) (63.127.69.253)
   by h31.sny.collab.net with SMTP; 10 Apr 2001 18:49:36 -
 Received: from ecto1 (jnm0-215 [192.168.0.215]) by jnm-main.pictureiq.com with SMTP 
(Microsoft Exchange Internet Mail Service Version 5.5.2653.13)
   id HMS1GX6X; Tue, 10 Apr 2001 11:54:00 -0700
 From: "William Wishon" [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Subject: RE: virtual hosts on different ports
 Date: Tue, 10 Apr 2001 11:48:33 -0700
 Keywords: MailingLists
 Message-ID: [EMAIL PROTECTED]
 MIME-Version: 1.0
 Content-Type: text/plain;
   charset="iso-8859-1"
 Content-Transfer-Encoding: 7bit
 X-Priority: 3 (Normal)
 X-MSMail-Priority: Normal
 X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0)
 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
 In-Reply-To: B9D7EB6E06F0D1119AA800A0C9C74B4A2731C7@STR_CONNECT2
 Importance: Normal
 X-Spam-Rating: h31.sny.collab.net 1.6.2 0/1000/N
 
 You can configure tomcat to listen on multiple ports, but you cannot
 restrict particular contexts to particular ports.  If you setup tomcat to
 listen on ports 8080 and 8082 then all of your contexts become available on
 both ports.  Using virtual hosts you can restrict particular contexts to
 particular virtual hosts, but all virtual hosts are available on all ports.
 
 That's what I found when I did some research and code archeology a little
 while ago. I wanted to separate two contexts by restricting the first
 context to the first port, and assigning the second context to the second
 port.
 
 -Bill
 
  -Original Message-
  From: Chris Andreou [mailto:[EMAIL PROTECTED]]
  Sent: Tuesday, April 10, 2001 11:30 AM
  To: '[EMAIL PROTECTED]'
  Subject: RE: virtual hosts on different ports
 
 
  you can create different contexts that listen on different ports
 
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
  Sent: Tuesday, April 10, 2001 1:22 PM
  To: [EMAIL PROTECTED]
  Subject: virtual hosts on different ports
 
 
  Hi,
 
   Can I configure TOMCAT virutal hosts on different ports, not ip
  addresses?
  I seen this question asked in the archives but there was no responses.
 
  Dave
 





Apache, SSL and TOMCAT

2001-04-11 Thread davea

Hi,

 I'm confused and can't find any good documentation dealing with TOMCAT,SSL and
Apache.  I'm using a 128 bit SSL key from Verisign with my Apache web server.
I noticed in the TOMCAT's server.xml file a series of steps to be completed if
I need SSL support.  I don't understand step 1 and 3. I'm new at this so please
forgive me.  But what is JSSE and where do I added it to the CLASSPATH.  If I'm
intergrating TOMCAT with Apache why do I generate key as outlined in Step 3.

Dave




virtual hosting problem

2001-04-10 Thread davea

Hi,

  I'm attempting to setup virtual hosts with tomcat/apache and I ran into a problem.  
It appears from the log messages TOMCAT is not following the
docBase directive in my vitural host setup.  Here are sections of the server.xml file 
and httpsd file, along with the error from my jasper.log file.  Could give me an idea 
what might be wrong.  

Server.xml file:

Host Name="myhost.com"
Context path="/mystuff"
 docBase="/software/Alpha/mystuff"
 debug="0"/
/Host


httpsd.conf

VirtualHost 1.1.1.1:8601
DocumentRoot "/software/Alpha"
ServerName myhost.com
ServerAdmin [EMAIL PROTECTED]
ErrorLog logs/8601_error_log
TransferLog logs/8601_access_log
SetEnvIf Request_URI wwwAuthenticatedEntrance.cgi$ login
CustomLog logs/agent_log loginagent env=login
JkMount /*.jsp ajp13
JkMount /servlet/* ajp13
SSLEngine on

  (ssl stuff omitted)
/VirtualHost

Error from jasper.log

2001-04-10 09:43:51 - IMPORTANT: Do not modify the generated servlets
2001-04-10 09:44:11 - JspEngine -- /mystuff/footer.jsp
2001-04-10 09:44:11 -ServletPath: /mystuff/footer.jsp
2001-04-10 09:44:11 -   PathInfo: null
2001-04-10 09:44:11 -   RealPath: 
/software/jakarta-tomcat-3.2.1/webapps/ROOT/mystuff/footer.jsp
2001-04-10 09:44:11 - RequestURI: /mystuff/footer.jsp
2001-04-10 09:44:11 -QueryString: null
2001-04-10 09:44:11 - Request Params: 
2001-04-10 09:44:11 - Classpath according to the Servlet Engine is: 
/software/jakarta-tomcat-3.2.1/webapps/ROOT/WEB-INF/classes

Dave




virtual hosts on different ports

2001-04-10 Thread davea

Hi,

 Can I configure TOMCAT virutal hosts on different ports, not ip addresses?
I seen this question asked in the archives but there was no responses.

Dave




[ANS] RE: virtual hosts on different ports

2001-04-10 Thread davea

I tried setting up different contexts but when TOMCAT started it searched for
the servlets in $TOMCAT_HOME and ignored the docBase directive.

Dave
 From [EMAIL PROTECTED]  Tue Apr 
10 14:29:42 2001
 Received: from otto.nawcad.navy.mil (otto-internal.nawcad.navy.mil [192.58.199.212])
   by tecnet1.jcte.jcs.mil (8.9.3/8.9.3) with ESMTP id OAA14334
   for [EMAIL PROTECTED]; Tue, 10 Apr 2001 14:29:37 -0400 (EDT)
 Received: by otto.nawcad.navy.mil; id OAA07525; Tue, 10 Apr 2001 14:29:37 -0400 (EDT)
 Received: from unknown(64.208.42.41) by otto.nawcad.navy.mil via smap (V4.2)
   id xma006940; Tue, 10 Apr 01 14:29:20 -0400
 Received: (qmail 7703 invoked by uid 500); 10 Apr 2001 18:28:49 -
 Mailing-List: contact [EMAIL PROTECTED]; run by ezmlm
 Precedence: bulk
 Reply-To: [EMAIL PROTECTED]
 list-help: mailto:[EMAIL PROTECTED]
 list-unsubscribe: mailto:[EMAIL PROTECTED]
 list-post: mailto:[EMAIL PROTECTED]
 Delivered-To: mailing list [EMAIL PROTECTED]
 Received: (qmail 7694 invoked from network); 10 Apr 2001 18:28:48 -
 Received: from str-gw.customer.dsl.alter.net (HELO str?connect2.strllc.com) 
(206.114.235.241)
   by h31.sny.collab.net with SMTP; 10 Apr 2001 18:28:48 -
 Received: by STR_CONNECT2 with Internet Mail Service (5.5.2650.21)
   id HC3KAJXN; Tue, 10 Apr 2001 14:29:49 -0400
 Message-ID: B9D7EB6E06F0D1119AA800A0C9C74B4A2731C7@STR_CONNECT2
 From: Chris Andreou [EMAIL PROTECTED]
 To: "'[EMAIL PROTECTED]'" [EMAIL PROTECTED]
 Subject: RE: virtual hosts on different ports
 Date: Tue, 10 Apr 2001 14:29:42 -0400
 MIME-Version: 1.0
 X-Mailer: Internet Mail Service (5.5.2650.21)
 Content-Type: text/plain;
   charset="iso-8859-1"
 X-Spam-Rating: h31.sny.collab.net 1.6.2 0/1000/N
 
 you can create different contexts that listen on different ports
 
 
 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, April 10, 2001 1:22 PM
 To: [EMAIL PROTECTED]
 Subject: virtual hosts on different ports
 
 
 Hi,
 
  Can I configure TOMCAT virutal hosts on different ports, not ip addresses?
 I seen this question asked in the archives but there was no responses.
 
 Dave





Security Problem with Tomcat

2001-04-03 Thread davea

Hi,

  I've been reading the recent security reports concerning TOMCAT and I'm a little bit 
confused, so I'm hoping someone can explain them to me.

 I saw where you can walk the directory structure of your TOMCAT server.  From what I 
seen, the problem was on a WIN2K box with 3.2.1 using the TOMCAT web server.  I also 
read you can download your .jsp files.  Here again it seems this problem is evident 
with the TOMCAT web sever.  Later messages reported this problem with 4.02Beta.  
Somewhere, the thread was lost and I can't piece all of it together. Therefor, I need 
to know if I have a problem with my configuration.

 My configuration consist of Solaris 2.6, Apache 1.3.9 and Tomcat 3.2.1.  Tomcat has 
been intergrated within our Apache web server.  But, I do start the TOMCAT server.  
Also, should I upgrade to the latest Beta version to be more secure?  Is there 
anything I have to do to my jsp scripts if I upgrade?

 Finally, could someone give me a good detail explanation of the security issues with 
TOMCAT?

Dave Ansalvish