RE: server.xml configuration

2008-10-14 Thread Caldarale, Charles R
 From: gjj391 [mailto:[EMAIL PROTECTED]
 Subject: server.xml configuration

 I seem to have a bit of a issue when installing railo in
 tomcat.

Don't suppose you'd care to tell us which version of Tomcat?

I am using mod_jk to bypass apache and have tomcat serve everything.

Then why bother with httpd at all?

  Host appBase=webapps/railo name=gj-dev.com
   Aliaswww.gj-dev.com/Alias
   Context path= docBase=/
   /Host

The above is illegal on any Tomcat level: a webapp's docBase must never be the 
same as the Host appBase.  If you're running on any reasonably recent version 
of Tomcat, you should not be putting any Context elements in server.xml; they 
belong in each webapp's META-INF/context.xml file.  Also, to specify the 
default webapp, name it ROOT (case sensitive).  Your config should look like 
this:

  Host appBase=webapps name=gj-dev.com
Aliaswww.gj-dev.com/Alias
  /Host

(You may want to put back the unpackWARs, xmlValidation, and xmlNamespaceAware 
attributes.)  The defaultHost attribute for the surrounding Engine must point 
to a valid Host; does it?  BTW, if you have only one Host element, there's 
no need to change the name from localhost or add any aliases.

Your file structure should be this:

  tomcat/
webapps/
  ROOT/
index.cfm
WEB-INF
  test/
test.cfm

Since you don't have any useful attributes for the Context element, you don't 
need one.

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: server.xml configuration

2008-10-14 Thread André Warnier

Caldarale, Charles R wrote:

From: gjj391 [mailto:[EMAIL PROTECTED]

[...]


I am using mod_jk to bypass apache and have tomcat serve everything.

Then why bother with httpd at all?


Hey ! I patented that line.


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: server.xml configuration..

2007-03-06 Thread Tim Funk
Use a servlet filter which is mapped to *.jsp - see Google for more 
details on Servlet Filters. (javax.servlet.Filter)


-Tim


prt wrote:

Hi to all,
Where i have to config and what, to prevent direct access to my jsp files ?



-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: server.xml configuration..

2007-03-06 Thread Raghupathy, Gurumoorthy
Any reason why cant you put all pf the jsp inside WEB-INF folder
This way you can be sure that no one is able to access your jsp file
 


Regards
Guru
 

---
Gurumoorthy Raghupathy
Email  :  [EMAIL PROTECTED]
Internal Extn : 2337 
External Phone  : 01483712337 
Nielsen Book
3rd Floor Midas House
62 Goldsworth Road
Woking Surrey GU21 6LQ
Visit us at  : http://www.nielsenbookdata.co.uk/ 

---
-Original Message-
From: Tim Funk [mailto:[EMAIL PROTECTED] 
Sent: 06 March 2007 11:37
To: Tomcat Users List
Subject: Re: server.xml configuration..

Use a servlet filter which is mapped to *.jsp - see Google for more 
details on Servlet Filters. (javax.servlet.Filter)

-Tim


prt wrote:
 Hi to all,
 Where i have to config and what, to prevent direct access to my jsp
files ?
 

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: server.xml configuration..

2007-03-06 Thread Li

Hi,

Tomcat forbids directly access to files in your WEB-INF, which you can use
the feature to setup a simple solution to protect certain jsp files so you
can not direct access your jsp resource but use dispatched way to access ...

On 3/6/07, Raghupathy, Gurumoorthy [EMAIL PROTECTED]
wrote:


Any reason why cant you put all pf the jsp inside WEB-INF folder
This way you can be sure that no one is able to access your jsp file



Regards
Guru


---
Gurumoorthy Raghupathy
Email  :  [EMAIL PROTECTED]
Internal Extn : 2337
External Phone  : 01483712337
Nielsen Book
3rd Floor Midas House
62 Goldsworth Road
Woking Surrey GU21 6LQ
Visit us at  : http://www.nielsenbookdata.co.uk/

---
-Original Message-
From: Tim Funk [mailto:[EMAIL PROTECTED]
Sent: 06 March 2007 11:37
To: Tomcat Users List
Subject: Re: server.xml configuration..

Use a servlet filter which is mapped to *.jsp - see Google for more
details on Servlet Filters. (javax.servlet.Filter)

-Tim


prt wrote:
 Hi to all,
 Where i have to config and what, to prevent direct access to my jsp
files ?


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





--
When we invent time, we invent death.


Re: server.xml configuration..

2007-03-05 Thread Li

You can move your jsp files which you would like to secure to WEB-INF/, and
use dispatched way to access ...
then you can define few error files like 404, 503 or your own
error.jspwhich can be handled by your java class

wish this helps

On 3/6/07, prt [EMAIL PROTECTED] wrote:



Hi to all,
Where i have to config and what, to prevent direct access to my jsp files
?

For example,
I have project name test.
If i whant to show product data the link is,
http://localhost/test?do=showProductData.
This link run the index.jsp that is in text, and in index.jsp there is
include to actions/showProducData.jsp.
To prevent direct access to jsp files that are locate in actions i added
this part to server.xml in the host part,
Context path=/test/actions docBase=/err debug=0
crossContext=false/
So when i try to do direct access to any jsp in actions is run the index
file under err.

The problem is when i run the link like this
http://127.0.0.1/test?do=showProductData, is not work.
If i want to cover this problem i have to add Host section to server.xmlfor
127.0.0.1 and put in it
this part Context path=/test/actions docBase=/err debug=0
crossContext=false/.

Is there any better solution for this problem ?

Thank you all.
--
View this message in context:
http://www.nabble.com/server.xml-configuration..-tf3353902.html#a9327284
Sent from the Tomcat - User mailing list archive at Nabble.com.


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





--
When we invent time, we invent death.