RE: Manager Valve

2003-12-16 Thread Shapira, Yoav

Howdy,

Ahhvery nice..i was ripping my hair out, I used
everything but a comma.Thank you..

No problem.  The documentation is really clear on this, so I'm surprised
you didn't see it, but that happens ;)

Filter eh?  Good idea...which is more secure?

Same security.  The Filter has the advantage that it's portable to any
servlet container (servlet spec 2.3 or later), Valve is tomcat-specific.
The filter is also more configurable, e.g. if you decide you do want
certain locations under the webapp's root to be accessible but others
not.  But the Valve will perform slightly faster.

Yoav Shapira



Russ



-Original Message-
From: Shapira, Yoav [mailto:[EMAIL PROTECTED]
Sent: Monday, December 15, 2003 4:27 PM
To: Tomcat Users List
Subject: RE: Manager Valve


Howdy,
You can use comma-separated address in the allow list of the
RemoteAddressValve.

Of course you can also write your own Filter and map it to /* in the
manager app's web.xml.

Yoav Shapira
Millennium ChemInformatics


-Original Message-
From: Pitre, Russell [mailto:[EMAIL PROTECTED]
Sent: Monday, December 15, 2003 4:26 PM
To: Tomcat Users List
Subject: Manager Valve

How can I restrict access to my manager app to only TWO ip
addresses

When I go into the admin app to add a valve for an ip address other
than
127.0.0.1 or add multiple ip addresses to a single valvei get the
following error:

==
Validation Errors:

-Allow is invalid.  Need to include the admin's IP address.
==

Any help greatly appreciated.

Russ






-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




This e-mail, including any attachments, is a confidential business
communication, and may contain information that is confidential,
proprietary and/or privileged.  This e-mail is intended only for the
individual(s) to whom it is addressed, and may not be saved, copied,
printed, disclosed or used by anyone else.  If you are not the(an)
intended recipient, please immediately delete this e-mail from your
computer system and notify the sender.  Thank you.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




This e-mail, including any attachments, is a confidential business communication, and 
may contain information that is confidential, proprietary and/or privileged.  This 
e-mail is intended only for the individual(s) to whom it is addressed, and may not be 
saved, copied, printed, disclosed or used by anyone else.  If you are not the(an) 
intended recipient, please immediately delete this e-mail from your computer system 
and notify the sender.  Thank you.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: Manager Valve

2003-12-16 Thread Shapira, Yoav

Howdy,
Don't hijack threads.  Start your own even if you think your question is related.

Yoav Shapira
Millennium ChemInformatics


-Original Message-
From: Pedro Garcia [mailto:[EMAIL PROTECTED]
Sent: Monday, December 15, 2003 5:01 PM
To: Tomcat Users List
Subject: Re: Manager Valve


Well, that works fine... but a new question arrives to my mind:
why, when using a valve for a context it works well in one OS and not in
another?
This is what is happening:
i put a valve tag in one of my contexts (Valve
className=org.apache.catalina.valves.RemoteHostValve
allow=xx.xx.xx.* /). When trying to access the corresponding web
application from my computer running Linux Red Hat i get the following
message
description _Access to the specified resource () has been forbidden.
_
but if i access the same web application from a computer running
WindowsXP it works well.

Can somebody help me?

Thanks!


Pitre, Russell wrote:

Ahhvery nice..i was ripping my hair out, I used
everything but a comma.Thank you..

Filter eh?  Good idea...which is more secure?


Russ



-Original Message-
From: Shapira, Yoav [mailto:[EMAIL PROTECTED]
Sent: Monday, December 15, 2003 4:27 PM
To: Tomcat Users List
Subject: RE: Manager Valve


Howdy,
You can use comma-separated address in the allow list of the
RemoteAddressValve.

Of course you can also write your own Filter and map it to /* in the
manager app's web.xml.

Yoav Shapira
Millennium ChemInformatics




-Original Message-
From: Pitre, Russell [mailto:[EMAIL PROTECTED]
Sent: Monday, December 15, 2003 4:26 PM
To: Tomcat Users List
Subject: Manager Valve

How can I restrict access to my manager app to only TWO ip


addresses


When I go into the admin app to add a valve for an ip address other


than


127.0.0.1 or add multiple ip addresses to a single valvei get the
following error:

==
Validation Errors:

-Allow is invalid.  Need to include the admin's IP address.
==

Any help greatly appreciated.

Russ






-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]






This e-mail, including any attachments, is a confidential business
communication, and may contain information that is confidential,
proprietary and/or privileged.  This e-mail is intended only for the
individual(s) to whom it is addressed, and may not be saved, copied,
printed, disclosed or used by anyone else.  If you are not the(an)
intended recipient, please immediately delete this e-mail from your
computer system and notify the sender.  Thank you.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





--
---
| Pedro A García Medina   |
| Groove Media|
| emailto: [EMAIL PROTECTED] |
| Tel: 6211072|
|--



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




This e-mail, including any attachments, is a confidential business communication, and 
may contain information that is confidential, proprietary and/or privileged.  This 
e-mail is intended only for the individual(s) to whom it is addressed, and may not be 
saved, copied, printed, disclosed or used by anyone else.  If you are not the(an) 
intended recipient, please immediately delete this e-mail from your computer system 
and notify the sender.  Thank you.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Manager Valve

2003-12-15 Thread Pitre, Russell
How can I restrict access to my manager app to only TWO ip addresses

When I go into the admin app to add a valve for an ip address other than
127.0.0.1 or add multiple ip addresses to a single valvei get the
following error:

==
Validation Errors:

-Allow is invalid.  Need to include the admin's IP address.
==

Any help greatly appreciated.

Russ






-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: Manager Valve

2003-12-15 Thread Shapira, Yoav

Howdy,
You can use comma-separated address in the allow list of the
RemoteAddressValve.

Of course you can also write your own Filter and map it to /* in the
manager app's web.xml.

Yoav Shapira
Millennium ChemInformatics


-Original Message-
From: Pitre, Russell [mailto:[EMAIL PROTECTED]
Sent: Monday, December 15, 2003 4:26 PM
To: Tomcat Users List
Subject: Manager Valve

How can I restrict access to my manager app to only TWO ip
addresses

When I go into the admin app to add a valve for an ip address other
than
127.0.0.1 or add multiple ip addresses to a single valvei get the
following error:

==
Validation Errors:

-Allow is invalid.  Need to include the admin's IP address.
==

Any help greatly appreciated.

Russ






-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




This e-mail, including any attachments, is a confidential business communication, and 
may contain information that is confidential, proprietary and/or privileged.  This 
e-mail is intended only for the individual(s) to whom it is addressed, and may not be 
saved, copied, printed, disclosed or used by anyone else.  If you are not the(an) 
intended recipient, please immediately delete this e-mail from your computer system 
and notify the sender.  Thank you.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: Manager Valve

2003-12-15 Thread Pitre, Russell
Ahhvery nice..i was ripping my hair out, I used
everything but a comma.Thank you..

Filter eh?  Good idea...which is more secure? 


Russ



-Original Message-
From: Shapira, Yoav [mailto:[EMAIL PROTECTED] 
Sent: Monday, December 15, 2003 4:27 PM
To: Tomcat Users List
Subject: RE: Manager Valve


Howdy,
You can use comma-separated address in the allow list of the
RemoteAddressValve.

Of course you can also write your own Filter and map it to /* in the
manager app's web.xml.

Yoav Shapira
Millennium ChemInformatics


-Original Message-
From: Pitre, Russell [mailto:[EMAIL PROTECTED]
Sent: Monday, December 15, 2003 4:26 PM
To: Tomcat Users List
Subject: Manager Valve

How can I restrict access to my manager app to only TWO ip
addresses

When I go into the admin app to add a valve for an ip address other
than
127.0.0.1 or add multiple ip addresses to a single valvei get the
following error:

==
Validation Errors:

-Allow is invalid.  Need to include the admin's IP address.
==

Any help greatly appreciated.

Russ






-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




This e-mail, including any attachments, is a confidential business
communication, and may contain information that is confidential,
proprietary and/or privileged.  This e-mail is intended only for the
individual(s) to whom it is addressed, and may not be saved, copied,
printed, disclosed or used by anyone else.  If you are not the(an)
intended recipient, please immediately delete this e-mail from your
computer system and notify the sender.  Thank you.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Manager Valve

2003-12-15 Thread Pedro Garcia
Well, that works fine... but a new question arrives to my mind:
why, when using a valve for a context it works well in one OS and not in 
another?
This is what is happening:
i put a valve tag in one of my contexts (Valve 
className=org.apache.catalina.valves.RemoteHostValve 
allow=xx.xx.xx.* /). When trying to access the corresponding web 
application from my computer running Linux Red Hat i get the following
message
description _Access to the specified resource () has been forbidden.
_
but if i access the same web application from a computer running 
WindowsXP it works well.

Can somebody help me?

Thanks!

Pitre, Russell wrote:

Ahhvery nice..i was ripping my hair out, I used
everything but a comma.Thank you..
Filter eh?  Good idea...which is more secure? 

Russ



-Original Message-
From: Shapira, Yoav [mailto:[EMAIL PROTECTED] 
Sent: Monday, December 15, 2003 4:27 PM
To: Tomcat Users List
Subject: RE: Manager Valve

Howdy,
You can use comma-separated address in the allow list of the
RemoteAddressValve.
Of course you can also write your own Filter and map it to /* in the
manager app's web.xml.
Yoav Shapira
Millennium ChemInformatics
 

-Original Message-
From: Pitre, Russell [mailto:[EMAIL PROTECTED]
Sent: Monday, December 15, 2003 4:26 PM
To: Tomcat Users List
Subject: Manager Valve
How can I restrict access to my manager app to only TWO ip
   

addresses
 

When I go into the admin app to add a valve for an ip address other
   

than
 

127.0.0.1 or add multiple ip addresses to a single valvei get the
following error:
==
Validation Errors:
-Allow is invalid.  Need to include the admin's IP address.
==
Any help greatly appreciated.

Russ





-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
   





This e-mail, including any attachments, is a confidential business
communication, and may contain information that is confidential,
proprietary and/or privileged.  This e-mail is intended only for the
individual(s) to whom it is addressed, and may not be saved, copied,
printed, disclosed or used by anyone else.  If you are not the(an)
intended recipient, please immediately delete this e-mail from your
computer system and notify the sender.  Thank you.
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
 

--
---
| Pedro A García Medina   |
| Groove Media|
| emailto: [EMAIL PROTECTED] |
| Tel: 6211072|
|--


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


RE: Manager Valve

2003-12-15 Thread Pitre, Russell
I'm sure you have and I don't want to sound patronizing, but are both pc's on the same 
network you specified (allow=xxx.xxx.xxx.*)





-Original Message-
From: Pedro Garcia [mailto:[EMAIL PROTECTED] 
Sent: Monday, December 15, 2003 5:01 PM
To: Tomcat Users List
Subject: Re: Manager Valve


Well, that works fine... but a new question arrives to my mind:
why, when using a valve for a context it works well in one OS and not in 
another?
This is what is happening:
i put a valve tag in one of my contexts (Valve 
className=org.apache.catalina.valves.RemoteHostValve 
allow=xx.xx.xx.* /). When trying to access the corresponding web 
application from my computer running Linux Red Hat i get the following
message
description _Access to the specified resource () has been forbidden.
_
but if i access the same web application from a computer running 
WindowsXP it works well.

Can somebody help me?

Thanks!


Pitre, Russell wrote:

Ahhvery nice..i was ripping my hair out, I used
everything but a comma.Thank you..

Filter eh?  Good idea...which is more secure? 


Russ



-Original Message-
From: Shapira, Yoav [mailto:[EMAIL PROTECTED] 
Sent: Monday, December 15, 2003 4:27 PM
To: Tomcat Users List
Subject: RE: Manager Valve


Howdy,
You can use comma-separated address in the allow list of the
RemoteAddressValve.

Of course you can also write your own Filter and map it to /* in the
manager app's web.xml.

Yoav Shapira
Millennium ChemInformatics


  

-Original Message-
From: Pitre, Russell [mailto:[EMAIL PROTECTED]
Sent: Monday, December 15, 2003 4:26 PM
To: Tomcat Users List
Subject: Manager Valve

How can I restrict access to my manager app to only TWO ip


addresses
  

When I go into the admin app to add a valve for an ip address other


than
  

127.0.0.1 or add multiple ip addresses to a single valvei get the
following error:

==
Validation Errors:

-Allow is invalid.  Need to include the admin's IP address.
==

Any help greatly appreciated.

Russ






-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]






This e-mail, including any attachments, is a confidential business
communication, and may contain information that is confidential,
proprietary and/or privileged.  This e-mail is intended only for the
individual(s) to whom it is addressed, and may not be saved, copied,
printed, disclosed or used by anyone else.  If you are not the(an)
intended recipient, please immediately delete this e-mail from your
computer system and notify the sender.  Thank you.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


  


-- 
---
| Pedro A García Medina   |
| Groove Media|
| emailto: [EMAIL PROTECTED] |
| Tel: 6211072|
|--



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Manager Valve

2003-12-15 Thread Pedro Garcia
Yes, both pc's are on the same network. What i have found now is that it 
doesn't matter what OS the pc is running, the problem is with the one on 
which the web server is running -mine-. If the attribute 'allow' is 
specified in the 'valve' tag it takes me to the troubble; however if 
'deny' is specified all works well. I think that when using 'allow' 
something else must be specified, what?, that's my question.

Thanks

Pitre, Russell wrote:

I'm sure you have and I don't want to sound patronizing, but are both pc's on the same network you specified (allow=xxx.xxx.xxx.*)





-Original Message-
From: Pedro Garcia [mailto:[EMAIL PROTECTED] 
Sent: Monday, December 15, 2003 5:01 PM
To: Tomcat Users List
Subject: Re: Manager Valve

Well, that works fine... but a new question arrives to my mind:
why, when using a valve for a context it works well in one OS and not in 
another?
This is what is happening:
i put a valve tag in one of my contexts (Valve 
className=org.apache.catalina.valves.RemoteHostValve 
allow=xx.xx.xx.* /). When trying to access the corresponding web 
application from my computer running Linux Red Hat i get the following
message
description _Access to the specified resource () has been forbidden.
_
but if i access the same web application from a computer running 
WindowsXP it works well.

Can somebody help me?

Thanks!

Pitre, Russell wrote:

 

Ahhvery nice..i was ripping my hair out, I used
everything but a comma.Thank you..
Filter eh?  Good idea...which is more secure? 

Russ



-Original Message-
From: Shapira, Yoav [mailto:[EMAIL PROTECTED] 
Sent: Monday, December 15, 2003 4:27 PM
To: Tomcat Users List
Subject: RE: Manager Valve

Howdy,
You can use comma-separated address in the allow list of the
RemoteAddressValve.
Of course you can also write your own Filter and map it to /* in the
manager app's web.xml.
Yoav Shapira
Millennium ChemInformatics


   

-Original Message-
From: Pitre, Russell [mailto:[EMAIL PROTECTED]
Sent: Monday, December 15, 2003 4:26 PM
To: Tomcat Users List
Subject: Manager Valve
How can I restrict access to my manager app to only TWO ip
  

 

addresses

   

When I go into the admin app to add a valve for an ip address other
  

 

than

   

127.0.0.1 or add multiple ip addresses to a single valvei get the
following error:
==
Validation Errors:
-Allow is invalid.  Need to include the admin's IP address.
==
Any help greatly appreciated.

Russ





-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
  

 



This e-mail, including any attachments, is a confidential business
communication, and may contain information that is confidential,
proprietary and/or privileged.  This e-mail is intended only for the
individual(s) to whom it is addressed, and may not be saved, copied,
printed, disclosed or used by anyone else.  If you are not the(an)
intended recipient, please immediately delete this e-mail from your
computer system and notify the sender.  Thank you.
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


   

 

--
---
| Pedro A García Medina   |
| Groove Media|
| emailto: [EMAIL PROTECTED] |
| Tel: 6211072|
|--


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]