Re: Difference between JK 2.0.2 JK 4.1.29

2003-11-26 Thread Nikola Milutinovic
Jose wrote: Hello. What is the difference between both ? I use tomcat-4.1.29 then which i must use to works with apache 2.0.48 ? Connectors accompanying TC distribution are for that version. WARP, JK and JK2 consist of two parts: Tomcat part (Java classes) and Apache/(otehr web servers) part (C

Re: Virtual host with Squid, Apache and Tomcat

2003-11-26 Thread Venkata Srinivasa Rao, Yerra
Hi, As far as I know, we can do it in both workers2.properties and httpd.conf (virtual hosts). It seems some problem in apache side virtual host configuration for the same uri for example VirtualHost ServerName www.abc.com DocumentRoot Location /eng/* JkUriSet worker

Re: Virtual host with Squid, Apache and Tomcat

2003-11-26 Thread Venkata Srinivasa Rao, Yerra
Hi, As far as I know, we can do it in both workers2.properties and httpd.conf (virtual hosts). It seems some problem in apache side virtual host configuration for the same uri for example VirtualHost ServerName www.abc.com DocumentRoot Location /eng/* JkUriSet worker

Re: [OT] Mozilla/Firebird and Session Cookie Problem (Mozilla-BUG)

2003-11-26 Thread Mario Ivankovits
Just for the records: Someone on mozillazine told me, this is an open bug/enhancement http://bugzilla.mozilla.org/show_bug.cgi?id=117222 Maybe we should vote on it. Ciao, Mario smime.p7s Description: S/MIME Cryptographic Signature

HTTP instead of FTP downloads with Tomcat

2003-11-26 Thread Tom Bednarz
Hi, Could anybody please give me some hints how to solve the following problem: Some of my customers cannot use FTP from their offices due to security restrictions. I have to offer them the possibility to download files using the HTTP protocol. I use TOMCAT but have the listings tag set to

Re: Any jsp examples that pull from a local db?

2003-11-26 Thread Antony Paul
Check this link. It have downloadable code. For more code do Googling. http://www.onjava.com/pub/a/onjava/2003/01/08/tomcat4.html Antony Paul - Original Message - From: SL [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, November 26, 2003 11:12 AM Subject: Any jsp examples that

Re: Invalid Number error when regional setting set to English (Canada )

2003-11-26 Thread John Sidney-Woollett
If you're saving numeric data back to an Oracle (or any) database, then consider using binding native java data types instead of passing strings in your update/insert statements or calls to stored procs. For example, instead of: String qry = update CUSTOMER set TOTAL_INVOICED = + numValStr +

Re: HTTP instead of FTP downloads with Tomcat

2003-11-26 Thread Sean Utt
How about: create an jsp that requires a login using a private password file or database table, have it read the names of the files (using java.io) in the folder you want them to be able to retrieve, and create links to another jsp (using a session to maintain your login, and probably the

Re: HTTP instead of FTP downloads with Tomcat

2003-11-26 Thread Pike
Hi Some of my customers cannot use FTP from their offices due to security restrictions. strange. have you tried both active and passive ftp ? I have to offer them the possibility to download files using the HTTP protocol. use webdav. there is a webdav example in the tomcat distro. with webdav,

RE: Tomcat 4.1.29 and Remedy 5.1.2 MidTier

2003-11-26 Thread Simon Taylor
Hi Jeff, Thanks for the response. I already have a call in with Remedy and postings on the ARSLIST (no value from either so far). The ARSList does not have one posting that states the Midtier can be made to work with Tomcat (even though the doc states it can). Remedy Midtier comes with

RE: Manager app in 4.1.27 behaves differently to 4.1.18

2003-11-26 Thread Tom Lyle
Thanks for confirming that. I just tried setting the unpackWARs to false and now 4.1.27 behaves just like 4.1.18. I did think i was going mad though.. -Original Message- From: Larry Isaacs [mailto:[EMAIL PROTECTED] Sent: 25 November 2003 17:59 To: Tomcat Users List Subject:

Re: HTTP instead of FTP downloads with Tomcat

2003-11-26 Thread Tom Bednarz
Thanks a lot for all input. I will give it a try and come back if I experience problems. Tom - Original Message - From: Tom Bednarz [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, November 26, 2003 6:45 AM Subject: HTTP instead of FTP downloads with Tomcat Hi, Could anybody

TOMCAT 3.3 crash daily

2003-11-26 Thread Sarel Bester
Hi all I have an app running on the following config: - Windows 2000 Advanced server (Dual PIII 1GHz CPU with 4GB RAM) - IIS 5 - Tomcat 3.3 (NOT 3.3.x) - ISAPI redirector 1.2 (size = 128K) - JDK 1.3.1_09 - Oracle 8.1.7 Tomcat is locking up almost everyday. Log files show a lot of bad DB

RE: Install manually Tomcat 4.x + JDK1.3

2003-11-26 Thread Sylvain MACHEFERT
Hi folks ! I'm new to this list and I didn't find any answer in FAQs and Google :-\ and I don't know if this message I sent yesterday worked... so sorry if you see it for the second time... :-P I want to create an all-in-one package (for Windows, using a program like Inno Setup) which install

Re: Tomcat 4 - IIS 5 on Win 2K: Unable to connect IIS to tomcat on AJP13 connector

2003-11-26 Thread Walter do Valle
Try this It helps me a lot. http://www.getnet.net/~rbarr/TomcatOnIIS/default.htm - Original Message - From: Bhavdeep Sharma To: Tomcat Users List Sent: Tuesday, November 25, 2003 11:21 AM Subject: Tomcat 4 - IIS 5 on Win 2K: Unable to connect IIS to tomcat on AJP13

Tomcat 4.1.29 deployment stops with 'java.lang.exception FIXME'

2003-11-26 Thread Arne Wolf Kösling
Hi ! I' ve made a wsdd file for deployment. the syntax of that file is correct, i am pretty sure, because i took an example of a webservices book and it has only 5 lines. i placed my class in the correct path (as it was described in the book) and i started the deployment by entering java

Re: TOMCAT 3.3 crash daily

2003-11-26 Thread jerome moliere
Sarel Bester wrote: Hi all I have an app running on the following config: - Windows 2000 Advanced server (Dual PIII 1GHz CPU with 4GB RAM) - IIS 5 - Tomcat 3.3 (NOT 3.3.x) - ISAPI redirector 1.2 (size = 128K) - JDK 1.3.1_09 - Oracle 8.1.7 Tomcat is locking up almost everyday. Log files show a

JK2 help!!!

2003-11-26 Thread Yuval Zantkeren
Hi, I need to use tomcat for few websites with each one of them use the tomcat but each one of them have different IP address (on the same computer) the question is what I need to write in the worker.properties under the: # Example socket channel, override port and host.

Re: Access to Session ID from Realm

2003-11-26 Thread Tim Funk
In tomcat 4 - no. In tomcat 5 - maybe. (It has methods which can access take an HttpRequest as an arguement) -Tim Hart, Justin wrote: Is there a way to get at the Session ID from RealmBase? Justin - To unsubscribe, e-mail:

Vedr.: Re: TOMCAT 3.3 crash daily

2003-11-26 Thread Thomas Nybro Bolding
Hi Sarel, regarding the jvm settings you might want to look at http://web.bvu.edu/staff/david/index.jsp?section=softwaresubsection=tcservcfgpage=overview from http://jakarta.apache.org/tomcat/faq/windows.html. I havent tried the utility myself but has modified the parameters in the Windows

Disable Directory Listing

2003-11-26 Thread Yuval Zantkeren
HI, How do I disable that in the Tomcat 4.1.27 that if someone write only the directory like 127.0.0.1/servlet with no file name after and he gets Directory Listing of all the directory. Regards, Yuval Zantkeren This email message and any attachments hereto are intended only for use by the

Re: Disable Directory Listing

2003-11-26 Thread Tim Funk
http://jakarta.apache.org/tomcat/faq/misc.html#listing Yuval Zantkeren wrote: HI, How do I disable that in the Tomcat 4.1.27 that if someone write only the directory like 127.0.0.1/servlet with no file name after and he gets Directory Listing of all the directory.

nsapi_redirect.dll

2003-11-26 Thread Wilson Chang
To whom it may conern, I am a tomcat, net.commerce 3 user, I would like to use tomcat to integrate with Net.Commerce, I found some of the document about how to do it. However, it needs nsapi_redirect.dll, but I can't find where to d/l it. anyone can help to let me d/l it ? many thanks, Wilson

RE: Disable Directory Listing

2003-11-26 Thread Yuval Zantkeren
Its not working do i need to change it in each web.xml under each directory or just in the conf/web.xml? Regards, Yuval Zantkeren This email message and any attachments hereto are intended only for use by the addressee(s) named above, and may contain legally privileged and/or confidential

Re: Disable Directory Listing

2003-11-26 Thread Tim Funk
Only $CATALINA_HOME/conf/web.xml needs changed. (Make sure browser cache is cleared) -Tim Yuval Zantkeren wrote: Its not working do i need to change it in each web.xml under each directory or just in the conf/web.xml? Regards, Yuval Zantkeren This email message and any attachments hereto are

Webapp obfuscation

2003-11-26 Thread Steve
Hi, Can anyone recommend a good product (preferably cheap, although all considered) to protect my JSP/Servlet/Bean application from being reverse engineered? It's an intranet application to be installed in many customer sites we would prefer to protect our IP as much as possible. Thanks, Steve

RE: Disable Directory Listing

2003-11-26 Thread Yuval Zantkeren
I wrote false in the listing but it still giving the listing, any idea? Regards, Yuval Zantkeren Domain The Net Technologies Ltd. 81 Sokolov St. Ramat-Hasharon Israel 47238 Tel: 972-3-7600500 Fax: 972-3-7600505 www.DomainTheNet.com This email message and any attachments hereto are intended

Re: Catalina.stop: java.net.ConnectException Help - Thanks!

2003-11-26 Thread Ben Souther
Is something else already bound to port 80 on that machine? IE.. IIS? On Wednesday 26 November 2003 12:41 am, SL wrote: Hi everyone, I am Tomcat newbie, so please pardon the dumb question. I am using Windows 2000, jdk 1.4.1, tomcat 4.1. Here is what I have done so far: installed jdk

Re: Webapp obfuscation

2003-11-26 Thread Tim Funk
1) Precompile all jsps 2) Don't provide the jsps since they are precompiled (see 1) 3) Compile all code with debugging off so line numbers don't appear in compiled objects 4) Compile with optimizations (from javac: Optimize; may hinder debugging or enlarge class file) Other than that - any

Re: Disable Directory Listing

2003-11-26 Thread Tim Funk
You need to restart tomcat for the property to take effect. Yuval Zantkeren wrote: I wrote false in the listing but it still giving the listing, any idea? - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands,

JK2 in server.xml with 4.1.29

2003-11-26 Thread Antony Paul
Hi, I am trying configure Tomcat 4.1.27 + IIS on win2k. In server.xml there are two entries namely !-- Define a Coyote/JK2 AJP 1.3 Connector on port 8009 -- and !-- Define an AJP 1.3 Connector on port 8009 -- which one is to uncommented. rgds Antony Paul.

Security Hole - server.xml

2003-11-26 Thread Curley, Thomas
Hi all, A direct question arising from a security review :- Using a datasource it is possible to remove the 'username', 'password' or at least encrypt them using someting like MD5 thanks in advance for your info Thomas

Re: Security Hole - server.xml

2003-11-26 Thread Tim Funk
The username and password still need decrypted at some time. It just makes the attacker jump through 1 hoop. Using file permissions on the config file as well and server security are the ways to go. -Tim Curley, Thomas wrote: Hi all, A direct question arising from a security review :-

RE: nsapi_redirect.dll

2003-11-26 Thread Hart, Justin
You mean asapi_redirect.dll? I don't know what net.commerce 3 is, but you'd use asapi_redirect.dll to connect to IIS (and I would assume any web server that uses asapi). Justin -Original Message- From: Wilson Chang [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 25, 2003 11:03 PM To:

RE: Security Hole - server.xml

2003-11-26 Thread Curley, Thomas
I'd feel more secure with an MD5 or SHA1 encrypted user and password that relying on unix file level security - what happens if a hacker gets root priv's ? thanks Thomas -Original Message- From: Tim Funk [mailto:[EMAIL PROTECTED] Sent: 26 November 2003 13:51 To: Tomcat Users List

RE: Tomcat 4.1.29 deployment stops with 'java.lang.exception FIXME'

2003-11-26 Thread Shapira, Yoav
Howdy, You're asking the wrong list: this is an axis issue. Yoav Shapira Millennium ChemInformatics -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 26, 2003 5:50 AM To: [EMAIL PROTECTED] Subject: Tomcat 4.1.29 deployment stops with

Re: Security Hole - server.xml

2003-11-26 Thread Tim Funk
To connect to a database, you need the *real* userid password. (IIRC) SHA1 and MD5 are both one way hashes so you can't use it to for database connectivity. The only feasible alternative (which isn't present in tomcat) is too force a password to be entered by keyboard on tomcat startup to allow

RE: Importing WAR File in Tomacat

2003-11-26 Thread Shapira, Yoav
Howdy, Tomcat has administration and manager webapps: RTFM on how to use them. To deploy a war file, again RTFM. By default you can just drop it into $CATALINA_HOME/webapps. Yoav Shapira Millennium ChemInformatics -Original Message- From: dakavara [mailto:[EMAIL PROTECTED] Sent:

Re: Security Hole - server.xml

2003-11-26 Thread Ben Souther
If a hacker gets root privileges, the username and password for tomcat are the least of your concerns. On Wednesday 26 November 2003 08:53 am, Curley, Thomas wrote: I'd feel more secure with an MD5 or SHA1 encrypted user and password that relying on unix file level security - what happens

Tomcat and Firewall

2003-11-26 Thread Ullrich, Ralf
Hello list, i'm a tomcat newbie looking for information about tomcat and firewalls. what i want to do is to connect apache2(mod_ssl) and tomcat with mod_jk2 , where tomcat is within a firewall. which ports do i need to open for apache to connect to tomcat? the ServerPort and all ConnectorPort in

RE: Security Hole - server.xml

2003-11-26 Thread Hart, Justin
You're not reusing the passwords anywhere else in the system (IE, you don't have a multi-tier login, do you?) If you do, you can quite feasibly shadow the passwords. I don't know if such an implementation exists in tomcat, but I would assume that someone, somewhere, has written a realm

RE: Removing Examples context in Tomcat 4.1

2003-11-26 Thread Bob Jacoby
This may be what I have to do - just leave a broken examples there. As to other comments received, I already tried them before even emailing the group. I actually doubt it's really an error in the web.xml documents. The default one is the default one that comes with tomcat. The application

RE: Webapp obfuscation

2003-11-26 Thread Shapira, Yoav
Howdy, 1) Precompile all jsps 2) Don't provide the jsps since they are precompiled (see 1) 3) Compile all code with debugging off so line numbers don't appear in compiled objects 4) Compile with optimizations (from javac: Optimize; may hinder debugging or enlarge class file) All good advice.

mail.jar and activation.jar in Tomcat 4.1.29

2003-11-26 Thread Ronald Klop
Hello, Why is mail.jar and activation.jar added in Tomcat 4.1.29 in common/lib? My webapp uses it's own mail.jar (1.3.1 in stead of 1.2) and activation.jar and everything doesn't work anymore. I think this is a major 'API' change for a minor release. For what are these api's used by

Connection not timing out

2003-11-26 Thread Terry Orechia
When the client issues a request on Explorer to the tomcat servlet and the request takes longer than the connectionTimeout, the client hangs. I am no longer able to make any html requests to my tomcat appliction or the tomcat manager/html application and must restart tomcat. I am running

RE: mail.jar and activation.jar in Tomcat 4.1.29

2003-11-26 Thread Shapira, Yoav
Howdy, Tomcat can provide mail sessions to you via JNDI as illustrated here: http://jakarta.apache.org/tomcat/tomcat-4.1-doc/jndi-resources-howto.htm l. mail.jar and activation.jar are not new nor moved in 4.1.29, they were in common/lib before. FYI, I also use mail 1.3.1 by putting it in

A lot of Warnings building JK2 on Aix

2003-11-26 Thread Jose
Hi! I'm compiling mod_jk2 on Aix 4.3.3. I follow this process: I use: gcc.3.2.1, libtool 1.4.2,autoconf 2.53,automake 1.5, make 3.79 #cd jakarta-tomcat-connectors-4.1.29-src/jk/native2 #./buildconf.sh #CC=gcc ./configure --with-java-home=/usr/java131 --with-apxs2=/usr/local/apache2/bi n/apxs

Re: Security Hole - server.xml

2003-11-26 Thread srevilak
A direct question arising from a security review :- Using a datasource it is possible to remove the 'username', 'password' or at least encrypt them using someting like MD5 The Password can be digested. See

RE: Tomcat 4 - IIS 5 on Win 2K: Unable to connect IIS to tomcat on AJP13 connector

2003-11-26 Thread Stphane Brogi
You will find more infos here. http://www.onjava.com/pub/a/onjava/2002/12/18/tomcat.html Remember to restart iis and tomcat after modify properties files (workers.properties; uriworkermap.properties) Stphane Brogi -Message d'origine- De : Walter do Valle [mailto:[EMAIL PROTECTED]

Re: Security Hole - server.xml

2003-11-26 Thread Tim Funk
The link below is for users logging-in (FORM or BASIC). Not for database connections. -Tim [EMAIL PROTECTED] wrote: A direct question arising from a security review :- Using a datasource it is possible to remove the 'username', 'password' or at least encrypt them using someting like MD5 The

Problem getting Tomcat 4.1.29 on board

2003-11-26 Thread P. Chewning Toulmin
Hi everyone, I've been having some strange problems in getting Tomcat 4.1.29 going. I've installed the software according to instructions--basically unzip it into a directory. I got Tomcat server up and running without problem and can even run the examples. But I can't seem to log into

concerning availability and performance of e-commerce applications

2003-11-26 Thread Raquel V. Lopes
Hello! I am a Ph.D. student at Universidade Federal de Campina Grande. I am currently trying to better understand why and when n-tier applications fail, and how administrators keep e-commerce applications up and running. We intend to make this task easier than it is up to now. In order to come up

RE: mail.jar and activation.jar in Tomcat 4.1.29

2003-11-26 Thread Ronald Klop
I have made handlers for multipart/related, etc. for use in a web based mailclient. This gives a lot of trouble with ClassLoaders. Removing mail.jar and activation.jar from common/lib solves the problem. And I'm 100% sure, that I've never had to do that before 4.1.29. Greetings, Ronald. On

OT: Using authenticated URLs

2003-11-26 Thread Rodrigo Ruiz
Hi all, I am trying to implement a downloading web service that will act as an internet front-end for an intranet server. I want my service to return a file as an attachment. For this, I have a method like this (simplified code): public DataHandler download(String path) throws AxisFault {

including a .jsp from within a taglib.

2003-11-26 Thread Mufaddal Khumri
Hi, I have a one.jsp on which i am using a taglib called pf:mytag somepath='path'/ Inside the taghandler class i do the following: try { pageContext.include(path); }

RE: Security Hole - server.xml

2003-11-26 Thread Greg . Cope
From: Curley, Thomas [mailto:[EMAIL PROTECTED] I'd feel more secure with an MD5 or SHA1 encrypted user and password that relying on unix file level security - what happens if a hacker gets root priv's ? Er ... Without wishing to flame, but if they've got root priv's they can do what they

RE: Problem getting Tomcat 4.1.29 on board

2003-11-26 Thread Shapira, Yoav
Hi, The admin and manager webapps requires users with specific roles to be define. Add user name=admin roles=manager, admin / to $CATALINA_HOME/conf/tomcat-users.xml. Yoav Shapira Millennium ChemInformatics -Original Message- From: P. Chewning Toulmin [mailto:[EMAIL PROTECTED] Sent:

Difficulty with SSL authentication without client certificate

2003-11-26 Thread Lira, Alesio
Hello there. I've tried to configure a security realm for pages; that if a user certificate is present it will be used, but if it doesn't exist the application will resolve the situation with the user authentication level already known. After wrestling with the web.xml parameters and defining a

building mod_jk - exportable?

2003-11-26 Thread jon yeargers
Im wanting to integrate tomcat and Apache on a 'public' server. In the directions for building mod_jk it states that you need to modify the build.properties files to point to your apache and tomcat installations and the use 'ant' to build the code. For obvious reasons I don't have ant or any

Re: JK2 in server.xml with 4.1.29

2003-11-26 Thread Mike Millson
If you are going to use the mod_jk connector, I would stick with the old AJP connector. If you are going to use the mod)jk2 connector, use the newer Coyote connector. On Wed, 2003-11-26 at 08:44, Antony Paul wrote: Hi, I am trying configure Tomcat 4.1.27 + IIS on win2k. In server.xml there

Re: Catalina.stop: java.net.ConnectException Help - Thanks!

2003-11-26 Thread SL
Good question. I am not doubt it, because I dont have IIS and it was doing this when it was on thed default port 8080. how would I determine and possibily disable that? thanks! --- Ben Souther [EMAIL PROTECTED] wrote: Is something else already bound to port 80 on that machine? IE.. IIS?

JDBCRealm problem

2003-11-26 Thread Ostad, James
Hi everyone, Hope everyone will have a great TG Day. Problem: I am not able to login successfully. It keeps failing. Structure: using JDBCRealm + form authentication database property: match exactly as explained in tomcat documentation for setting up JDBCRealm I am including three things:

RE: Security Hole - server.xml

2003-11-26 Thread Bob Jacoby
I consider things like this. By encrypting the password I'm protecting against casual learning of the password. I'm not really referring to hackers, but administrators of the system. There's a big difference between a hacker and an administrator. What if I need the administrator to add a new

RE: JDBCRealm problem

2003-11-26 Thread Ostad, James
one more thing, you might have notice by my first email, I am initializing the database connection within the web.xml. I am not sure that has to do with the problem. The initialization in web.xml is for internal bean usage. thanks, James -Original Message- From: Ostad, James Sent:

Taglib problem with more information ...

2003-11-26 Thread Mufaddal Khumri
Hi, I have two taglibs. 1. myTag1 2. myTag2 Both taglibs essentially do the following: I have a one.jsp on which i am using a taglib called pf:mytag somepath='path'/ Inside the taghandler class i do the following: try {

Datasource problem upgrading from 4.06

2003-11-26 Thread Jim Kennedy
Below is a little bit of the trace I'm seeing. org.apache.commons.dbcp.SQLNestedException: Cannot create JDBC driver of class 'com. microsoft.jdbc.sqlserver.SQLServerDriver' for connect URL 'null', cause: java.lang.NullPointerException at java.lang.String.regionMatches(String.java:967)

Re: JK2 in server.xml with 4.1.29

2003-11-26 Thread Jeff Tulley
Really? With all due respect, I have to totally disagree. You can use the Coyote Connector with mod_jk, and really should do so. The Ajp13Connector has had an exception at startup time and problems shutting down since about 4.1.18. It is an easy fix - I submitted a patch for it, only a simple

RE: Datasource problem upgrading from 4.06

2003-11-26 Thread Shapira, Yoav
Howdy, You need a ResourceParam for the DB URL. It looks like your driver name me be the URL? Yoav Shapira Millennium ChemInformatics -Original Message- From: Jim Kennedy [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 26, 2003 12:30 PM To: Tomcat Users List Subject: Datasource

Re: Datasource problem upgrading from 4.06

2003-11-26 Thread Jim Kennedy
How do I define host and database name with this version? Need a good example to look at. Thanks Jim Kennedy IT Consultant Mobile Phone: 813-503-1484 - - Original Message - From: Shapira, Yoav [EMAIL PROTECTED] To: Tomcat Users List

RE: Datasource problem upgrading from 4.06

2003-11-26 Thread Shapira, Yoav
Howdy, http://jakarta.apache.org/tomcat/tomcat-4.1-doc/jndi-datasource-examples -howto.html Yoav Shapira Millennium ChemInformatics -Original Message- From: Jim Kennedy [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 26, 2003 12:47 PM To: Tomcat Users List Subject: Re: Datasource

RE: Tomcat 4.1.29 and Remedy 5.1.2 MidTier

2003-11-26 Thread Jeff Tulley
Yeah, that is mostly correct. There are also places where the spec is vague or doesn't specify behavior, and different application servers implement things differently. There are not a whole lot of spec or operation changes from the 4.0.x series that would completely break you. Offhand I can

Re: Datasource problem upgrading from 4.06

2003-11-26 Thread Jim Kennedy
Much thanks, I can figure it out from here. http://jakarta.apache.org/tomcat/tomcat-4.1-doc/jndi-datasource-examples-how to.html Actual link above. Jim Kennedy IT Consultant Mobile Phone: 813-503-1484 - - Original Message - From:

HttpSessionListener in Tomcat 4.1.27 (or HttpSessionListener in general)

2003-11-26 Thread Lukas Bradley
All, When I attempt to access the HttpSession object within the sessionDestroyed(), I get the following error. DEBUG [StandardManager[]] (SessionListener.java:40) - sessionDestroyed() StandardManager[] Session event listener threw exception java.lang.IllegalStateException: getAttribute: Session

Re: JK2 in server.xml with 4.1.29

2003-11-26 Thread Mike Millson
I'm using Red Hat Linux 9, and my experience has been the opposite. When I used CoyoteConnector I got errors like this in catalina.out: java.net.SocketException: Broken pipe Also, I got this: INFO: Jk running ID=0 time=2/85 config=/usr/local/jakarta-tomcat/conf/jk2.properties Why the heck am

RE: Security Hole - server.xml

2003-11-26 Thread Curley, Thomas
Note - in reply to Justin - I don't have a multi-tier login So to sumarise I guess the ansswer to this is that Tomcat currently does not support encrypted datasource user/passwd or does not allow the option to enter user/passwd at startup The most one can do is to apply strict unix permissions

org.apache.catalina.valves.RemoteHostValve

2003-11-26 Thread Drinkwater, GJ (Glen)
Hi I am trying to only allow localhost to access my tomcat server. I have tried to put Valve className=org.apache.catalina.valves.RemoteHostValve deny=*.my.host.uk/ in my context but it keeps on throwing an exception Catalina.start: java.lang.IllegalArgumentException: Syntax error in

RE: Security Hole - server.xml

2003-11-26 Thread Hart, Justin
Well, right, but if you were to inherit from the realm that you wanted to use, you can manipulate the password field in any way that you wish. Unix password shadows are plantext, as are MD5 hashes. All you do now is run MD5 over the password field in the authenticate method, and viola, you

RE: Security Hole - server.xml

2003-11-26 Thread Curley, Thomas
thanks for your time Justin - I will look into this - T -Original Message- From: Hart, Justin [mailto:[EMAIL PROTECTED] Sent: 26 November 2003 18:17 To: Tomcat Users List Subject: RE: Security Hole - server.xml Well, right, but if you were to inherit from the realm that you wanted to

RE: HttpSessionListener in Tomcat 4.1.27 (or HttpSessionListener in general)

2003-11-26 Thread Shapira, Yoav
Howdy, By the time sessionDestroyed is call, the session has been invalidated. That doesn't mean you can't get information about it: only certain information ;) HttpSession#getAttribute is clearly documented to throw an IllegalStateException if called on an invalidated session. If you're

RE: org.apache.catalina.valves.RemoteHostValve

2003-11-26 Thread Shapira, Yoav
Howdy, The allow and deny attributes of RemoteHostValve are regular expressions. Try deny=my.host.uk for example. As for using the valve for a Context of a Server: it applies wherever you put it in server.xml, so if you put it inside a specific Context the valve will apply only to that context.

Re: Problem creating Tyrex resources in GlobalNamingResources

2003-11-26 Thread Patrick van Kann
Hello, In answer to my own question... it would seem that whenever a tyrex.resource.Resource is requested from JNDI in Tomcat, the TyrexFactory that deals with these requests will only ever create/iniatilise one TransactionDomain... thereby making all tyrex.resource.Resources declared in a

RE: Security Hole - server.xml

2003-11-26 Thread Hart, Justin
No prob, good luck. -Original Message- From: Curley, Thomas [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 26, 2003 1:21 PM To: Tomcat Users List Subject: RE: Security Hole - server.xml thanks for your time Justin - I will look into this - T -Original Message- From: Hart,

RE: org.apache.catalina.valves.RemoteHostValve

2003-11-26 Thread Drinkwater, GJ (Glen)
Hi If i specify a host, then i only deny one machine. How do you deny all hosts on a sub net? Glen - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

RE: org.apache.catalina.valves.RemoteHostValve

2003-11-26 Thread Shapira, Yoav
Howdy, By specifying just the subnet. It's a regular expression match. Since you had *.my.host.uk I took my.host.uk. Anything with 'my.host.uk' will be denied. Yoav Shapira Millennium ChemInformatics -Original Message- From: Drinkwater, GJ (Glen) [mailto:[EMAIL PROTECTED] Sent:

RE: Tomcat 4.1.24 Standalone max requests serviced java exception

2003-11-26 Thread Kilic, Hakan
Hi all, After realizing that the application bug wasn't a bug or my main culprit, I did some checking on my machine setup. I found that Hyperthreading actually decreased the total load Tomcat could handle. Once I turned HT off, I was able to significantly increase the amount of load the server

RE: Tomcat 4.1.24 Standalone max requests serviced java exception

2003-11-26 Thread Shapira, Yoav
Howdy, Thank you for posting the followup -- it's important when people actually report results. Expect JDK 1.5 (this is not a tomcat-specific issue) to run better on Hyperthreaded machines. Yoav Shapira Millennium ChemInformatics -Original Message- From: Kilic, Hakan [mailto:[EMAIL

Re: Tomcat Dies

2003-11-26 Thread Jeff Tulley
I had not thought of that, but that should work well. I'll try it out and see. Right now I'm evaluating whether my test is actually a reasonable real-world test. The reason our testers did not find this earlier, is that their tests are a little more realistic to typical web site use. My test

Re: HttpSessionListener in Tomcat 4.1.27 (or HttpSessionListener in general)

2003-11-26 Thread Jon Wingfield
Lukas, Check the difference in the javadoc for HttpSessionListener between servlet specs 2.3 (J2EE 1.3) and 2.4 (J2EE 1.4). In 2.4 containers the session should (as I read it) still be valid in sessionDestroyed(...). Jon J2EE 1.3: http://java.sun.com/j2ee/sdk_1.3/techdocs/api/index.html J2EE

Intermittent failures using DataSources

2003-11-26 Thread Chris Ward
Hi all, Please excuse any going over of old ground with this question, I have searched every archive I can find. I have recently started using DataSources from JSPs using the JSTL taglib (I think this is a Tomcat rather than taglib question). I've got a Context for my apps and initially had

Problem with JNDIRealm

2003-11-26 Thread Jörn Heid
I have successfully installed mod_auth_ldap with Apache. Here's the configuration: LDAP_Protocol_Version 2 LDAP_Server server LDAP_Port port Base_DN ou=People,o=company,c=DE UID_Attr_Alt uid require valid-user Bind_DN cn=appadmin,o=company,c=DE Bind_Pass password I want to use this in Tomcat.

Re: HTTP Error 302

2003-11-26 Thread Antonio Fiol Bonnín
Well... Try it! ;-) I believe it should work, but it's a matter of faith and not of knowledge... I can't see how you will be doing magic on your request anyway. Maybe you can use URL encoded session ID instead of cookies, or whatever it is called. I'm sure you know what I mean. Good luck!

Tomcat Multi-Tier Authentication

2003-11-26 Thread Hart, Justin
Is there anywhere in tomcat that there is convenient access to: 1) The authenticated principal 2) The session 3) The private credentials associated with the principal Or even just the username, password and session? I want to authenticate a user to my database (IE,

Re: [OT] Mozilla/Firebird and Session Cookie Problem (Mozilla-BUG)

2003-11-26 Thread Antonio Fiol Bonnín
What is the behaviour on other browsers? (MSIE, Opera, ...) Antonio Fiol Mario Ivankovits wrote: Just for the records: Someone on mozillazine told me, this is an open bug/enhancement http://bugzilla.mozilla.org/show_bug.cgi?id=117222 Maybe we should vote on it. Ciao, Mario

RE: Tomcat 4.1.29 and Remedy 5.1.2 MidTier

2003-11-26 Thread Simon Taylor
Ok thanks for the feedback. Ended up reverting to Tomcat 4.0.6 which played better with the midtier. Cheers Simon -Original Message- From: Jeff Tulley [mailto:[EMAIL PROTECTED] Sent: 26 November 2003 18:04 To: [EMAIL PROTECTED] Subject: RE: Tomcat 4.1.29 and Remedy 5.1.2 MidTier

Re: Tomcat 4.1.27/IE 6.0 Lockup

2003-11-26 Thread Antonio Fiol Bonnín
Hi, What do you mean by real-time? Red.es uses Tomcat for the Spanish NIC domain registration system. Good experience so far... If you want sth more specific, please ask me privately. Antonio Fiol S R wrote: Chris, Yup - quite a busy front end! Typically 100 dynamic objects (images

RE: Tomcat 4.1.27/IE 6.0 Lockup

2003-11-26 Thread Hart, Justin
http://www.dcs.napier.ac.uk/~shaun/rtse/week06.pdf :-) Justin -Original Message- From: Antonio Fiol Bonnín [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 26, 2003 3:42 PM To: Tomcat Users List Subject: Re: Tomcat 4.1.27/IE 6.0 Lockup Hi, What do you mean by real-time? Red.es

Re: Tomcat and Firewall

2003-11-26 Thread Antonio Fiol Bonnín
Ullrich, Ralf wrote: Hello list, i'm a tomcat newbie looking for information about tomcat and firewalls. what i want to do is to connect apache2(mod_ssl) and tomcat with mod_jk2 , where tomcat is within a firewall. which ports do i need to open for apache to connect to tomcat? the ServerPort

Re: JDBCRealm problem

2003-11-26 Thread Tim Funk
The problem is this: 2003-11-26 11:53:19 JDBCRealm[localhost]: Exception performing authentication java.sql.SQLException: [Microsoft][SQLServer 2000 Driver for JDBC]Can't start a cloned connection while in manual transaction mode. Since I don't use SQL server and Java, I can't be of more help,

Re: Tomcat Multi-Tier Authentication

2003-11-26 Thread Tim Funk
HttpServletRequest.getUserPrincipal() or HttpServletRequest.getRemoteUser() -Tim Hart, Justin wrote: Is there anywhere in tomcat that there is convenient access to: 1) The authenticated principal 2) The session 3) The private credentials associated with the principal

RE: JDBCRealm problem

2003-11-26 Thread Ostad, James
The line above the line you mentioned in the error log indicates that the connection was established at one point: 2003-11-26 11:53:19 JDBCRealm[localhost]: Username admin successfully authenticated 2003-11-26 11:53:19 JDBCRealm[localhost]: Exception performing authentication So, I don't think

  1   2   >