RE: Manager Valve
Howdy, Ahhvery nice..i was ripping my hair out, I used everything but a comma.Thank you.. No problem. The documentation is really clear on this, so I'm surprised you didn't see it, but that happens ;) Filter eh? Good idea...which is more secure? Same security. The Filter has the advantage that it's portable to any servlet container (servlet spec 2.3 or later), Valve is tomcat-specific. The filter is also more configurable, e.g. if you decide you do want certain locations under the webapp's root to be accessible but others not. But the Valve will perform slightly faster. Yoav Shapira Russ -Original Message- From: Shapira, Yoav [mailto:[EMAIL PROTECTED] Sent: Monday, December 15, 2003 4:27 PM To: Tomcat Users List Subject: RE: Manager Valve Howdy, You can use comma-separated address in the allow list of the RemoteAddressValve. Of course you can also write your own Filter and map it to /* in the manager app's web.xml. Yoav Shapira Millennium ChemInformatics -Original Message- From: Pitre, Russell [mailto:[EMAIL PROTECTED] Sent: Monday, December 15, 2003 4:26 PM To: Tomcat Users List Subject: Manager Valve How can I restrict access to my manager app to only TWO ip addresses When I go into the admin app to add a valve for an ip address other than 127.0.0.1 or add multiple ip addresses to a single valvei get the following error: == Validation Errors: -Allow is invalid. Need to include the admin's IP address. == Any help greatly appreciated. Russ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] This e-mail, including any attachments, is a confidential business communication, and may contain information that is confidential, proprietary and/or privileged. This e-mail is intended only for the individual(s) to whom it is addressed, and may not be saved, copied, printed, disclosed or used by anyone else. If you are not the(an) intended recipient, please immediately delete this e-mail from your computer system and notify the sender. Thank you. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] This e-mail, including any attachments, is a confidential business communication, and may contain information that is confidential, proprietary and/or privileged. This e-mail is intended only for the individual(s) to whom it is addressed, and may not be saved, copied, printed, disclosed or used by anyone else. If you are not the(an) intended recipient, please immediately delete this e-mail from your computer system and notify the sender. Thank you. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Manager Valve
Howdy, Don't hijack threads. Start your own even if you think your question is related. Yoav Shapira Millennium ChemInformatics -Original Message- From: Pedro Garcia [mailto:[EMAIL PROTECTED] Sent: Monday, December 15, 2003 5:01 PM To: Tomcat Users List Subject: Re: Manager Valve Well, that works fine... but a new question arrives to my mind: why, when using a valve for a context it works well in one OS and not in another? This is what is happening: i put a valve tag in one of my contexts (Valve className=org.apache.catalina.valves.RemoteHostValve allow=xx.xx.xx.* /). When trying to access the corresponding web application from my computer running Linux Red Hat i get the following message description _Access to the specified resource () has been forbidden. _ but if i access the same web application from a computer running WindowsXP it works well. Can somebody help me? Thanks! Pitre, Russell wrote: Ahhvery nice..i was ripping my hair out, I used everything but a comma.Thank you.. Filter eh? Good idea...which is more secure? Russ -Original Message- From: Shapira, Yoav [mailto:[EMAIL PROTECTED] Sent: Monday, December 15, 2003 4:27 PM To: Tomcat Users List Subject: RE: Manager Valve Howdy, You can use comma-separated address in the allow list of the RemoteAddressValve. Of course you can also write your own Filter and map it to /* in the manager app's web.xml. Yoav Shapira Millennium ChemInformatics -Original Message- From: Pitre, Russell [mailto:[EMAIL PROTECTED] Sent: Monday, December 15, 2003 4:26 PM To: Tomcat Users List Subject: Manager Valve How can I restrict access to my manager app to only TWO ip addresses When I go into the admin app to add a valve for an ip address other than 127.0.0.1 or add multiple ip addresses to a single valvei get the following error: == Validation Errors: -Allow is invalid. Need to include the admin's IP address. == Any help greatly appreciated. Russ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] This e-mail, including any attachments, is a confidential business communication, and may contain information that is confidential, proprietary and/or privileged. This e-mail is intended only for the individual(s) to whom it is addressed, and may not be saved, copied, printed, disclosed or used by anyone else. If you are not the(an) intended recipient, please immediately delete this e-mail from your computer system and notify the sender. Thank you. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] -- --- | Pedro A García Medina | | Groove Media| | emailto: [EMAIL PROTECTED] | | Tel: 6211072| |-- - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] This e-mail, including any attachments, is a confidential business communication, and may contain information that is confidential, proprietary and/or privileged. This e-mail is intended only for the individual(s) to whom it is addressed, and may not be saved, copied, printed, disclosed or used by anyone else. If you are not the(an) intended recipient, please immediately delete this e-mail from your computer system and notify the sender. Thank you. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Manager Valve
How can I restrict access to my manager app to only TWO ip addresses When I go into the admin app to add a valve for an ip address other than 127.0.0.1 or add multiple ip addresses to a single valvei get the following error: == Validation Errors: -Allow is invalid. Need to include the admin's IP address. == Any help greatly appreciated. Russ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Manager Valve
Howdy, You can use comma-separated address in the allow list of the RemoteAddressValve. Of course you can also write your own Filter and map it to /* in the manager app's web.xml. Yoav Shapira Millennium ChemInformatics -Original Message- From: Pitre, Russell [mailto:[EMAIL PROTECTED] Sent: Monday, December 15, 2003 4:26 PM To: Tomcat Users List Subject: Manager Valve How can I restrict access to my manager app to only TWO ip addresses When I go into the admin app to add a valve for an ip address other than 127.0.0.1 or add multiple ip addresses to a single valvei get the following error: == Validation Errors: -Allow is invalid. Need to include the admin's IP address. == Any help greatly appreciated. Russ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] This e-mail, including any attachments, is a confidential business communication, and may contain information that is confidential, proprietary and/or privileged. This e-mail is intended only for the individual(s) to whom it is addressed, and may not be saved, copied, printed, disclosed or used by anyone else. If you are not the(an) intended recipient, please immediately delete this e-mail from your computer system and notify the sender. Thank you. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Manager Valve
Ahhvery nice..i was ripping my hair out, I used everything but a comma.Thank you.. Filter eh? Good idea...which is more secure? Russ -Original Message- From: Shapira, Yoav [mailto:[EMAIL PROTECTED] Sent: Monday, December 15, 2003 4:27 PM To: Tomcat Users List Subject: RE: Manager Valve Howdy, You can use comma-separated address in the allow list of the RemoteAddressValve. Of course you can also write your own Filter and map it to /* in the manager app's web.xml. Yoav Shapira Millennium ChemInformatics -Original Message- From: Pitre, Russell [mailto:[EMAIL PROTECTED] Sent: Monday, December 15, 2003 4:26 PM To: Tomcat Users List Subject: Manager Valve How can I restrict access to my manager app to only TWO ip addresses When I go into the admin app to add a valve for an ip address other than 127.0.0.1 or add multiple ip addresses to a single valvei get the following error: == Validation Errors: -Allow is invalid. Need to include the admin's IP address. == Any help greatly appreciated. Russ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] This e-mail, including any attachments, is a confidential business communication, and may contain information that is confidential, proprietary and/or privileged. This e-mail is intended only for the individual(s) to whom it is addressed, and may not be saved, copied, printed, disclosed or used by anyone else. If you are not the(an) intended recipient, please immediately delete this e-mail from your computer system and notify the sender. Thank you. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Manager Valve
Well, that works fine... but a new question arrives to my mind: why, when using a valve for a context it works well in one OS and not in another? This is what is happening: i put a valve tag in one of my contexts (Valve className=org.apache.catalina.valves.RemoteHostValve allow=xx.xx.xx.* /). When trying to access the corresponding web application from my computer running Linux Red Hat i get the following message description _Access to the specified resource () has been forbidden. _ but if i access the same web application from a computer running WindowsXP it works well. Can somebody help me? Thanks! Pitre, Russell wrote: Ahhvery nice..i was ripping my hair out, I used everything but a comma.Thank you.. Filter eh? Good idea...which is more secure? Russ -Original Message- From: Shapira, Yoav [mailto:[EMAIL PROTECTED] Sent: Monday, December 15, 2003 4:27 PM To: Tomcat Users List Subject: RE: Manager Valve Howdy, You can use comma-separated address in the allow list of the RemoteAddressValve. Of course you can also write your own Filter and map it to /* in the manager app's web.xml. Yoav Shapira Millennium ChemInformatics -Original Message- From: Pitre, Russell [mailto:[EMAIL PROTECTED] Sent: Monday, December 15, 2003 4:26 PM To: Tomcat Users List Subject: Manager Valve How can I restrict access to my manager app to only TWO ip addresses When I go into the admin app to add a valve for an ip address other than 127.0.0.1 or add multiple ip addresses to a single valvei get the following error: == Validation Errors: -Allow is invalid. Need to include the admin's IP address. == Any help greatly appreciated. Russ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] This e-mail, including any attachments, is a confidential business communication, and may contain information that is confidential, proprietary and/or privileged. This e-mail is intended only for the individual(s) to whom it is addressed, and may not be saved, copied, printed, disclosed or used by anyone else. If you are not the(an) intended recipient, please immediately delete this e-mail from your computer system and notify the sender. Thank you. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] -- --- | Pedro A García Medina | | Groove Media| | emailto: [EMAIL PROTECTED] | | Tel: 6211072| |-- - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Manager Valve
I'm sure you have and I don't want to sound patronizing, but are both pc's on the same network you specified (allow=xxx.xxx.xxx.*) -Original Message- From: Pedro Garcia [mailto:[EMAIL PROTECTED] Sent: Monday, December 15, 2003 5:01 PM To: Tomcat Users List Subject: Re: Manager Valve Well, that works fine... but a new question arrives to my mind: why, when using a valve for a context it works well in one OS and not in another? This is what is happening: i put a valve tag in one of my contexts (Valve className=org.apache.catalina.valves.RemoteHostValve allow=xx.xx.xx.* /). When trying to access the corresponding web application from my computer running Linux Red Hat i get the following message description _Access to the specified resource () has been forbidden. _ but if i access the same web application from a computer running WindowsXP it works well. Can somebody help me? Thanks! Pitre, Russell wrote: Ahhvery nice..i was ripping my hair out, I used everything but a comma.Thank you.. Filter eh? Good idea...which is more secure? Russ -Original Message- From: Shapira, Yoav [mailto:[EMAIL PROTECTED] Sent: Monday, December 15, 2003 4:27 PM To: Tomcat Users List Subject: RE: Manager Valve Howdy, You can use comma-separated address in the allow list of the RemoteAddressValve. Of course you can also write your own Filter and map it to /* in the manager app's web.xml. Yoav Shapira Millennium ChemInformatics -Original Message- From: Pitre, Russell [mailto:[EMAIL PROTECTED] Sent: Monday, December 15, 2003 4:26 PM To: Tomcat Users List Subject: Manager Valve How can I restrict access to my manager app to only TWO ip addresses When I go into the admin app to add a valve for an ip address other than 127.0.0.1 or add multiple ip addresses to a single valvei get the following error: == Validation Errors: -Allow is invalid. Need to include the admin's IP address. == Any help greatly appreciated. Russ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] This e-mail, including any attachments, is a confidential business communication, and may contain information that is confidential, proprietary and/or privileged. This e-mail is intended only for the individual(s) to whom it is addressed, and may not be saved, copied, printed, disclosed or used by anyone else. If you are not the(an) intended recipient, please immediately delete this e-mail from your computer system and notify the sender. Thank you. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] -- --- | Pedro A García Medina | | Groove Media| | emailto: [EMAIL PROTECTED] | | Tel: 6211072| |-- - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Manager Valve
Yes, both pc's are on the same network. What i have found now is that it doesn't matter what OS the pc is running, the problem is with the one on which the web server is running -mine-. If the attribute 'allow' is specified in the 'valve' tag it takes me to the troubble; however if 'deny' is specified all works well. I think that when using 'allow' something else must be specified, what?, that's my question. Thanks Pitre, Russell wrote: I'm sure you have and I don't want to sound patronizing, but are both pc's on the same network you specified (allow=xxx.xxx.xxx.*) -Original Message- From: Pedro Garcia [mailto:[EMAIL PROTECTED] Sent: Monday, December 15, 2003 5:01 PM To: Tomcat Users List Subject: Re: Manager Valve Well, that works fine... but a new question arrives to my mind: why, when using a valve for a context it works well in one OS and not in another? This is what is happening: i put a valve tag in one of my contexts (Valve className=org.apache.catalina.valves.RemoteHostValve allow=xx.xx.xx.* /). When trying to access the corresponding web application from my computer running Linux Red Hat i get the following message description _Access to the specified resource () has been forbidden. _ but if i access the same web application from a computer running WindowsXP it works well. Can somebody help me? Thanks! Pitre, Russell wrote: Ahhvery nice..i was ripping my hair out, I used everything but a comma.Thank you.. Filter eh? Good idea...which is more secure? Russ -Original Message- From: Shapira, Yoav [mailto:[EMAIL PROTECTED] Sent: Monday, December 15, 2003 4:27 PM To: Tomcat Users List Subject: RE: Manager Valve Howdy, You can use comma-separated address in the allow list of the RemoteAddressValve. Of course you can also write your own Filter and map it to /* in the manager app's web.xml. Yoav Shapira Millennium ChemInformatics -Original Message- From: Pitre, Russell [mailto:[EMAIL PROTECTED] Sent: Monday, December 15, 2003 4:26 PM To: Tomcat Users List Subject: Manager Valve How can I restrict access to my manager app to only TWO ip addresses When I go into the admin app to add a valve for an ip address other than 127.0.0.1 or add multiple ip addresses to a single valvei get the following error: == Validation Errors: -Allow is invalid. Need to include the admin's IP address. == Any help greatly appreciated. Russ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] This e-mail, including any attachments, is a confidential business communication, and may contain information that is confidential, proprietary and/or privileged. This e-mail is intended only for the individual(s) to whom it is addressed, and may not be saved, copied, printed, disclosed or used by anyone else. If you are not the(an) intended recipient, please immediately delete this e-mail from your computer system and notify the sender. Thank you. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] -- --- | Pedro A García Medina | | Groove Media| | emailto: [EMAIL PROTECTED] | | Tel: 6211072| |-- - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]