Re: another problem with JAAS

2004-04-23 Thread Adam Hardy
Michiel, that would be the one that you put there, right? Adam On 04/23/2004 10:33 AM Michiel Toneman wrote: Oops, missed the How ;-) Subject subject = (Subject)session.getAttribute(javax.security.auth.subject); if (subject == null) { subject = new Subject(); }

Re: another problem with JAAS

2004-04-22 Thread Adam Hardy
The servlet container spec from Sun doesn't specify any integration requirements for JAAS. The JAAS support is basically fledgeling authentication, and that's it for servlet spec 2.4 - I would be interested myself in seeing the discussions and motivations behind the progress and changes on the

Re: LoginModules

2004-04-21 Thread Adam Hardy
On 04/21/2004 10:27 PM Alan Weissman wrote: I've written a simple login module that I've configured to run from a Struts Action class and it appears to be working wonderfully - authentication takes place and principal/credentials are returned. However, I can't get any of this information back when

Re: Configuration and performance questions

2004-04-20 Thread Adam Hardy
1. Yes of course. 4.1.30 is many release cycles ahead of 5.0.19. But that's a matter of course with all software. 2. Don't know. 3. I thought 'enterprise' was a marketing word ;) 4. Are you sure you've got apache configured correctly? I don't think there should be such a noticeable

Re: Realm(?) authentication

2004-04-18 Thread Adam Hardy
On 04/18/2004 12:22 PM Frank Schaare wrote: I've written one step by step for this. It's for Tomcat on Linux, but I don't think Windows is different at all, at least for the realm part. Can't say the same for the installation. You can view it at

Re: tomcat 4 vs 5 form based container auth filters

2004-04-16 Thread Adam Hardy
2004 16:42 To: 'Tomcat Users List' Subject: RE: tomcat 4 vs 5 form based container auth filters Thanks Adam It seems to me that the separation idea is not clear cut. There is certainly a down side. I wonder whether this will stick. Martin -Original Message- From: Adam Hardy [mailto:[EMAIL

Re: Authentication in tomcat

2004-04-12 Thread Adam Hardy
On 04/12/2004 10:31 AM [EMAIL PROTECTED] wrote: Hello. I'm a bit confused. I'm trying tomcat's authentication with bad or no results. The documentation is very simple and I don't understand so well. I've a web application and I want to make authentication with a user role and a admin role. The

Re: tomcat 4 vs 5 form based container auth filters

2004-04-12 Thread Adam Hardy
Yes your observations are correct. It's my understanding that filters are not invoked until after authentication. i.e. after the form-based login. I have no experience of site-mesh, but it seems a bit weird anyway to put decorations on a page via a filter - surely you should be encapsulating

Re: tomcat 4 vs 5 form based container auth filters

2004-04-12 Thread Adam Hardy
Martin Alley wrote: Hi Adam, Why do you think this behaviour changed from tomcat4 ? I haven't gone into the full architecture of sitemesh, as yet, but I know it includes a filter. Martin -Original Message- From: Adam Hardy [mailto:[EMAIL PROTECTED] Sent: 12 April 2004 11:26 To: Tomcat

Re: tomcat 4 vs 5 form based container auth filters

2004-04-12 Thread Adam Hardy
. I'll see if I can find anything in the tc5 release notes on this. Thanks again Martin -Original Message- From: Adam Hardy [mailto:[EMAIL PROTECTED] Sent: 12 April 2004 13:13 To: Tomcat Users List Subject: Re: tomcat 4 vs 5 form based container auth filters AFAIK it has something to do

Re: Problem with configuing Tomcat

2004-04-07 Thread Adam Hardy
Hi Mike, I'm not familiar with openejb but I assume that you are talking about fetching the initial context for JBoss? Try this in your code: Hashtable env = new java.util.Hashtable(); env.put(java.naming.factory.initial, org.jnp.interfaces.NamingContextFactory);

Re: JAAS problems migrating from JRun

2004-04-06 Thread Adam Hardy
Michiel, you are programming your own login trigger in a filter - I don't this this will work (although I'm happy to be wrong). I think tomcat is only going to adopt your principals as authenticated if you protect whichever pages necessary via security-constraints in the deployment descriptor.

Re: JAAS problems migrating from JRun

2004-04-06 Thread Adam Hardy
bluppie of type security.UserPrincipal to user bluppie Assigned principal authenticateduser of type security.RolePrincipal to user bluppie Assigned principal developer of type security.CustomPrincipal to user bluppie Adam Hardy wrote: Michiel, you are programming your own login trigger

Re: FORM authentication - prevent login from popping up

2004-04-05 Thread Adam Hardy
To do a login programmatically via form-based authentication, you would need to watch for the login form being returned that has a submit action to j_security_check. You must submit that with the correct headers and form element parameters - j_username and j_password. Adam On 04/04/2004 11:20

Re: configuring realm in web.xml

2004-04-05 Thread Adam Hardy
On 04/05/2004 02:02 PM Simone - Dev wrote: Hello All, I'm developing a webapplication that needs to authorize and authenticate users looking inside a database. Generally I'll be doing it adding a JDBCRealm inside the server.xml (or in the contex xml file) But I don't have access to these files.

Re: tomcat performance with 100 webapps

2004-03-30 Thread Adam Hardy
Pardon my ignorance but how do you share one port between multiple instances of tomcat? Are you talking launching tomcat 100 times (100 JVMs), or are you talking 100 Hosts configured in server.xml? Adam On 03/30/2004 05:28 PM Reynir Þór Hübner wrote: I just wanted to post my info on the

Re: post data through form based authentication example?

2004-03-29 Thread Adam Hardy
//DTD Web Application 2.3//EN http://www.jboss.org/j2ee/dtd/jboss-web_3_0.dtd; jboss-web security-domainjava:/jaas/authtest/security-domain !-- Resource Environment References -- !-- Resource references -- !-- EJB References -- /jboss-web -Original Message- From: Adam Hardy

Re: post data through form based authentication example?

2004-03-29 Thread Adam Hardy
... Thanks Martin -Original Message- From: Adam Hardy [mailto:[EMAIL PROTECTED] Sent: 29 March 2004 09:17 To: Tomcat Users List Subject: Re: post data through form based authentication example? Hmm. You're right. I just tested it on my JBoss (running 3.2.4RC1 with tomcat 5.0.19) and I got

Re: JSP preloading taking a lot of time

2004-03-29 Thread Adam Hardy
Tomcat 3.3? Are you not able to upgrade? On 03/29/2004 01:10 PM Abhinandan Karmakar wrote: Hi, My web site has a lot of JSP pages ~60. Some JSPs are big ~400 lines. I have given load-on-startup for all my JSP pages. I notice that tomcat takes up about 200 secs to preload all my JSPs and during

Re: post data through form based authentication example?

2004-03-25 Thread Adam Hardy
Martin, I would check your problem again. That is not the normal behaviour of the container-managed login. It will cache the original request during the login and send it on to the originally requested URL. Adam On 03/25/2004 02:45 PM Martin Alley wrote: Hi, Has any one got an example of a

Re: Write my own Realm - HOWTO ?

2004-03-25 Thread Adam Hardy
Tom, FIXME means it needs to be written... :) (Although I may be wrong there - perhaps someone will jump in) I should imagine that the original class for the JDBC realm would be a fine basis to start from. You should jar it up and put it in tomcat's common/lib directory. Adam On 03/25/2004

Re: NEWBIE question: JAAS- versus JDBC- versus MemoryRealms

2004-03-23 Thread Adam Hardy
Leonard, I went the other way. I wrote a login module for tomcat's JAAS implementation and recently found it relatively easy to adapt it to JBoss. However I see you're going down the JDBC route. Adam On 03/23/2004 09:22 AM Leonard Wolters wrote: Hi, I've got a question concerning the

Re: Security

2004-03-21 Thread Adam Hardy
On 03/21/2004 05:53 AM Matt Anderson wrote: Hi All, This is the first time I have used this list so this question may have been asked many times before, however I tried to download previous message but were unsucessful. My question is, how do you configure the security manager to disable

Re: WARNING: Duplicate name in Manifest: Class-Path

2004-03-19 Thread Adam Hardy
On 03/19/2004 06:35 AM Tom K wrote: Any clues where I would look to determine where this message? Start from only happens during sart up of my application. Mar 18, 2004 11:33:48 PM java.util.jar.Attributes read WARNING: Duplicate name in Manifest: Class-Path Sounds like somebody is

Re: Kumar's JDBC problems with MySQL

2004-03-18 Thread Adam Hardy
If you are having problems with JNDI connection pooling and you can't work out the problem, I would pay attention to the Host node settings in the server.xml. I would even get a fresh installation of tomcat and start from scratch with a simple test case. The attributes of Host, e.g.

Re: Connection warning

2004-03-18 Thread Adam Hardy
On 03/18/2004 03:22 PM Jeff Poling wrote: We use tomcat as our middleware to provide a GUI-like interface for our UNIX character-based back-end. We are running into a problem with maxProcesses being maxed out and users not being able to use the system. A good rule of thumb is to multiply

Re: JDBC problems with MySQL

2004-03-17 Thread Adam Hardy
these files as requested in just a sec. Thanks for your help. Steve -Original Message- From: Adam Hardy [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 16, 2004 2:07 PM To: Tomcat Users List Subject: Re: JDBC problems with MySQL Steve, post the Resource ResourceParams tags from your context

Re: JDBC problems with MySQL

2004-03-16 Thread Adam Hardy
Steve, post the Resource ResourceParams tags from your context for the webapp. State whether it's in a context.xml file, server.xml or whatever. Perhaps we can spot something. Adam ps this email has got some weird font - my mail reader is up the creek at the mo'. sorry On 03/16/2004 09:47

Re: Dump HTTP Request and Response Headers

2004-03-12 Thread Adam Hardy
On 03/12/2004 06:05 AM mganesh wrote: Dear folks, How could i dump HTTP Response and Request headers. Im using Apache 1.3 and Tomcat 4.0 MOD_JK. Hi Ganesh, if you are talking client-side, then there is an excellent extension for Firefox browser called HTTP headers. I expect there's something

Re: Java Hosting

2004-03-12 Thread Adam Hardy
On 03/12/2004 08:49 AM Andi Reinbrech wrote: The next best thing since sliced bread is UML (no, not drawings of stickmen) User Mode Linux. Some hosting companies give you a Linux VM with full root telnet access. You can do with it whatever you want, install Tomcat, install JDK, PostgreSQL -

Re: Java Hosting

2004-03-12 Thread Adam Hardy
On 03/12/2004 11:19 AM Graham Reeds wrote: Yes, +1 from me. I've been using UML at www.memset.co.uk for 3 months so far without the slightest glitch. I couldn't live without my root access :) I notice that memset.co.uk charge £9.60/year for the registration of .com domains. This is significantly

Re: Setting page content Type

2004-03-12 Thread Adam Hardy
On 03/12/2004 12:23 PM Keith Hyland wrote: I'm looking at internationalizing a series of pages, which cover different character sets. I've been planning to store the content type value in a properties files along wit hthe rest of the internationalized text, but I've run into some problems. I

Re: Java Hosting

2004-03-12 Thread Adam Hardy
Graham, when doing your cost calculation don't forget that the email pop3 server is extra - normally. Only a couple of quid a month, but still. Adam On 03/12/2004 03:12 PM Graham Reeds wrote: They were nice enough to email me directly back with the answer: Just saw a link to your site while

Re: transitioning from non-logged in to logged in using security constraint....

2004-03-12 Thread Adam Hardy
On 03/12/2004 03:34 PM Paul Tomsic wrote: What does tomcat do to ensure that you're logged in while using the j_security_check ? We're trying to transition users from non-logged in to logged in, but we've got a fair amt. of portions of the site that should be accessible from both states

Re: JAAS: Where does role information go in a Subject?

2004-03-12 Thread Adam Hardy
On 03/12/2004 06:44 PM Alan Weissman wrote: I'm implementing a JAAS login mechanism in my app, not as a Realm but via Struts Action classes. In my loginModule, I am creating the Subject with principals and credentials and want to store role information. Where does Tomcat expect a list of roles

Re: JAAS: Where does role information go in a Subject?

2004-03-12 Thread Adam Hardy
On 03/12/2004 08:02 PM Alan Weissman wrote: Hm! Thanks Adam - I guess that makes sense! Ok, so my two requirements for my authentication are 1) that I can load custom information into the session object and 2) that I support isUserInRole(). Realm authentication should take care of #2, but what

Re: Tomcat Realm Authentication + Storing Objects In The Session

2004-03-11 Thread Adam Hardy
On 03/11/2004 08:56 AM Ronald Wildenberg wrote: My biggest unknown right now is, because the server handles the creation of the session, what would it take to make the server grab a user object from the database and store it in the session after the user logs in? Can't you use an

Re: OT: Java Hosting

2004-03-11 Thread Adam Hardy
Try kgbinternet.com. They have very reasonable developer accounts with tomcat and mysql or postgresql. They have dedicated jvm's so you can start and stop your own tomcat. I have used them with good success. The person to talk to is Keith Bjorndahl at [EMAIL PROTECTED] Good luck, Phil

Re: Hiding Apache-Coyote/1.1 banner in Tomcat 5

2004-03-09 Thread Adam Hardy
Well in that case, it sounds like something which is sorely needed! ;) On 03/09/2004 10:36 AM Alex wrote: Lots of scripts out there for little script kiddies to run simply look at banners of different services to determine their worth in attempting to run an exploit against to gain access. By

Re: Disabling PUT and DELETE methods in Tomcat 5 standalone

2004-03-08 Thread Adam Hardy
On 03/08/2004 10:15 AM funkster wrote: security-constraint web-resource-collection web-resource-nameDisable Methods/web-resource-name url-pattern/*/url-pattern http-methodPUT/http-method http-methodDELETE/http-method

Re: Hiding Apache-Coyote/1.1 banner in Tomcat 5

2004-03-08 Thread Adam Hardy
On 03/08/2004 02:57 PM James Agnew wrote: I've been looking for a way to prevent security scanners such as Nessus from being able to easily read Tomcat's standalone webserver details. I'm running Tomcat 5.0.18 standalone and Nessus identifies it as follows: Server Version: Apache-Coyote/1.1

Re: Disabling PUT and DELETE methods in Tomcat 5 standalone

2004-03-08 Thread Adam Hardy
What I was implying is that you have effectively disabled it already this way. Or are you able to do PUTs and DELETEs despite the security constraint? I'd be surprised. Adam On 03/08/2004 11:24 PM James Agnew wrote: So, how would I go about actually prevent PUT and DELETE for all users,

Re: JAAS and container managed security

2004-03-04 Thread Adam Hardy
On 03/04/2004 04:12 PM Renato Romano wrote: I used container managed security (I mean declaring security issues in web.xml, and using security standard servlet API isUserInRole, getUserPrincipal and so on) for several webapp, but I'm now facing the following need that this approach seem not to

Re: Lost the Administrator function

2004-03-01 Thread Adam Hardy
On 02/29/2004 09:01 PM George Hester wrote: Well it just died entirely. crap. Which? The fresh installation? -- struts 1.1 + tomcat 5.0.16 + java 1.4.2 Linux 2.4.20 Debian - To unsubscribe, e-mail: [EMAIL PROTECTED] For

Re: Lost the Administrator function

2004-03-01 Thread Adam Hardy
On 03/01/2004 09:25 AM Adam Hardy wrote: On 02/29/2004 09:01 PM George Hester wrote: Well it just died entirely. crap. Which? The fresh installation? OK, just read your other messages. Glad you sorted it out. Adam -- struts 1.1 + tomcat 5.0.16 + java 1.4.2 Linux 2.4.20 Debian

Re: Lost the Administrator function

2004-02-29 Thread Adam Hardy
On 02/29/2004 01:34 AM George Hester wrote: This is the error: org.apache.jasper.JasperException: Cannot find ActionMappings or ActionFormBeans collection Hmmm, sounds like your admin app is really struggling. :) I think your best bet is to do a fresh install of tomcat. If that's a problem,

Re: Lost the Administrator function

2004-02-29 Thread Adam Hardy
On 02/29/2004 02:02 PM Adam Hardy wrote: On 02/29/2004 01:34 AM George Hester wrote: This is the error: org.apache.jasper.JasperException: Cannot find ActionMappings or ActionFormBeans collection Hmmm, sounds like your admin app is really struggling. :) I think your best bet is to do a fresh

Re: Lost the Administrator function

2004-02-28 Thread Adam Hardy
On 02/28/2004 04:24 PM George Hester wrote: I access Tomcat by http://localhost:8080 I then go to Tomcat Administration. I sign in with the user name and password I set at the installation of Tomcat. (Windows 2000 Server SP3) On the left side I select anything. Say users under User

Re: Lost the Administrator function

2004-02-28 Thread Adam Hardy
You got to have admin.xml in the webapps directory (or your APPBASE) Are you talking about server.xml? I've forgotten how to use tomcat4. tomcat5 is slightly different in several ways. Server.xml won't affect the admin app. On 02/28/2004 06:15 PM George Hester wrote: Jeeze I may have. Who

Re: Tomcat 4.1.29 CoyoteAdapter Exception

2004-02-25 Thread Adam Hardy
Randall, I've often had issues that cause major problems, and my experience is that user groups and mailing lists are normally unable to help without there being an easily reproducible error. For instance, are you able to nail it down to a particular page or servlet? Does it happen regularly

Re: Réf. : read it immediately

2004-02-25 Thread Adam Hardy
On 02/25/2004 12:44 PM Graham Reeds wrote: Without wanting to cause too much alarm, that is the kind of message that could potentially contain a virus. Virus's need a little more than 1byte in size to be lethal - the payload probably got pulled by a virus checker before leaving Sun. G. It's a

Re: read it immediately

2004-02-25 Thread Adam Hardy
What you are seeing is a failed attempt to spread a virus over this mailing list. You should ignore the email. The email address is almost 100% certain to be spoofed (faked). If you happen to get the message with a file attached, be very wary of opening it. Perhaps the list administrator

Re: Tomcat 4.1.29 CoyoteAdapter Exception

2004-02-25 Thread Adam Hardy
the problem to see if I can pin point the exact error. Thanks for the advice on using news groups. It is my first experience with them. Thanks, Randall -Original Message- From: Adam Hardy [mailto:[EMAIL PROTECTED] Sent: Wednesday, February 25, 2004 2:47 AM To: Tomcat Users List Subject: Re

tomcat building *.tld mapping at startup

2004-02-24 Thread Adam Hardy
Where can I find out what *.tld files tomcat is finding in its startup procedure when it scans through the webapps? I have a problem with tomcat5 SAR in JBoss. My app works fine in stand-alone, but under JBoss, I get a Jasper Exception: The absolute uri: http://java.sun.com/jsp/jstl/fmt cannot

Re: tomcat building *.tld mapping at startup

2004-02-24 Thread Adam Hardy
ChemInformatics -Original Message- From: Adam Hardy [mailto:[EMAIL PROTECTED] Sent: Tuesday, February 24, 2004 11:21 AM To: Tomcat Users List Subject: tomcat building *.tld mapping at startup Where can I find out what *.tld files tomcat is finding in its startup procedure when it scans through

Re: tomcat building *.tld mapping at startup

2004-02-24 Thread Adam Hardy
OK, sorry - forget the JBoss factor. This seems to be a difference between a deploy directory and a WAR. Tomcat isn't looking in the Jars in a War. On 02/24/2004 07:52 PM Adam Hardy wrote: Argh. I can't get jboss-tomcat to look in the jars in my war for the tlds. In the logging I can see

Re: tomcat building *.tld mapping at startup

2004-02-24 Thread Adam Hardy
. Thanks Adam On 02/24/2004 08:16 PM Adam Hardy wrote: OK, sorry - forget the JBoss factor. This seems to be a difference between a deploy directory and a WAR. Tomcat isn't looking in the Jars in a War. On 02/24/2004 07:52 PM Adam Hardy wrote: Argh. I can't get jboss-tomcat to look in the jars

Re: ant emulation of Upload a WAR file to install

2004-02-23 Thread Adam Hardy
On 02/23/2004 03:04 PM Dean A. Hoover wrote: I am using ant 1.6 and tomcat 4.1.29. I have set my webapps directory to someplace other than the usual place. When I use the /manager/html/list application through my browser, I can use the Upload a WAR file to install form to put my war file in the

Re: JAAS and Datasources

2004-02-23 Thread Adam Hardy
On 02/23/2004 08:45 PM Dan Thiffault wrote: Hello, I am trying to transition my companies internal applications from IIS contained ASP pages to jsp pages using struts on tomcat. Currently we are using tomcat 4 but we could easily be swayed to switching to version 5 as we are just in the

Re: 5.0.16 and 5.0.18 international character support

2004-02-20 Thread Adam Hardy
On 02/20/2004 01:17 PM Trygve Hardersen wrote: I'm having a silly problem with 5.0.16 and 5.0.18, regarding the Scandinavian characters æ, ø and å (probably others to). I've developed a project using tomcat and struts, where both message resources and actual data in the database contain these

Re: 5.0.16 and 5.0.18 international character support

2004-02-20 Thread Adam Hardy
-Original Message- From: Adam Hardy [mailto:[EMAIL PROTECTED] Sent: Friday, February 20, 2004 2:43 PM To: Tomcat Users List Subject: Re: 5.0.16 and 5.0.18 international character support On 02/20/2004 01:17 PM Trygve Hardersen wrote: I'm having a silly problem with 5.0.16 and 5.0.18, regarding

Re: 5.0.16 and 5.0.18 international character support

2004-02-20 Thread Adam Hardy
now, Opera does not support xhtml with script elements. Idea? milx -Original Message- From: Adam Hardy [mailto:[EMAIL PROTECTED] Sent: Friday, February 20, 2004 2:43 PM To: Tomcat Users List Subject: Re: 5.0.16 and 5.0.18 international character support On 02/20/2004 01:17 PM Trygve

Re: 5.0.18 + keytool

2004-02-20 Thread Adam Hardy
Yes, your message is getting through. I've never had that error, although I have almost the same config as you. I assume you've googled as well? On 02/20/2004 05:14 PM Stewart Walker wrote: Wondering if I my message is getting out there as as I've seen no response. Going to try again. Could

Re: 5.0.16 and 5.0.18 international character support

2004-02-20 Thread Adam Hardy
use iso-8859-1 or other? milx -Original Message- From: Adam Hardy [mailto:[EMAIL PROTECTED] Sent: Friday, February 20, 2004 6:00 PM To: Tomcat Users List Subject: Re: 5.0.16 and 5.0.18 international character support The point is that the browser sees the HTTP response headers, even

Re: 5.0.16 and 5.0.18 international character support

2004-02-20 Thread Adam Hardy
confirm that this is not a single case. However, if it works with iso-8859-1, I really don't care (: Thanks a bunch for the help! milx -Original Message- From: Adam Hardy [mailto:[EMAIL PROTECTED] Sent: Friday, February 20, 2004 6:24 PM To: Tomcat Users List Subject: Re: 5.0.16 and 5.0.18

Re: Logging

2004-02-20 Thread Adam Hardy
Nathan, it seems from your signature that you're already at the right place. Or are you a troll? Seriously though, log4j, like the other loggers, is an API that you code with - there's no compliancy involved. Adam On 02/20/2004 09:13 PM Nathan Maves wrote: Where is the best resource on how to

Re: Apache/Tomcat/Struts Certification Proposal

2004-02-20 Thread Adam Hardy
If you don't mind me asking, compared to the 16 hours for SCJ2P, how is it going with SCJ2D ? I assume SCJ2D is the next one up from SCJ2P? On 02/20/2004 08:03 PM Hans Wichman wrote: Hi, I guess it's a matter of which way you look at it. Starting from scratch and getting certified doesn't

Re: Apache/Tomcat/Struts Certification Proposal

2004-02-19 Thread Adam Hardy
On 02/19/2004 06:20 PM Yan Lin wrote: Hi, I am not sure if anyone has thought of this. From my research, I don't think it's possible for anyone to get certified on Apache products at this point. But since there are so many companies looking for people with these kind of skills, it would be

Re: JAAS and TOMCAT 5

2004-02-17 Thread Adam Hardy
On 02/16/2004 07:17 PM Miller, Steve wrote: But, if anybody out there needs any help with configuring JAAS into Tomcat 5, let me know. I've integrated LDAP authentication into the process as well...works beautifully...finally. :-) I'll be happy to share my code in order to prevent others from

Re: JAAS and TOMCAT 5

2004-02-16 Thread Adam Hardy
: Adam Hardy [mailto:[EMAIL PROTECTED] Sent: Saturday, February 14, 2004 8:38 AM To: Tomcat Users List Subject: Re: JAAS and TOMCAT 5 On 02/13/2004 09:34 PM Shapira, Yoav wrote: JAVA_OPTS=- Djava.security.auth.login.config==$CATALINA_HOME/conf/jaas.conf You probably want JAVA_OPTS

Re: JAAS and TOMCAT 5

2004-02-14 Thread Adam Hardy
On 02/13/2004 09:34 PM Shapira, Yoav wrote: JAVA_OPTS=- Djava.security.auth.login.config==$CATALINA_HOME/conf/jaas.conf You probably want JAVA_OPTS='-Djava.security.auth.login.config=$CATALINA_HOME/conf/jaas. conf' (one line, single equals signs, quotes containing the whole JAVA_OPTS value. I

Re: Form Based Authentication - Registration

2004-02-14 Thread Adam Hardy
On 02/14/2004 10:31 AM Alexander F. Hartner wrote: No we want to add registration and have the following happen 1.) Customer requests access to a realm 2.) Redirect to login page 3.) Customer doesn't have an account yet and accesses registration page 4.) Customer registers 5.) On successful

Re: Another Try at MySQL Connection Pooling

2004-02-11 Thread Adam Hardy
Merrill, you should be absolutely sure that your context is getting loaded from the file you think. Make sure that there is no context config for the app in any of the other files in tomcat/conf/Catalina/localhost, nor in server.xml, nor in META-INF in any webapp directory. You can chuck out

Re: Another Try at MySQL Connection Pooling

2004-02-11 Thread Adam Hardy
On 02/11/2004 10:15 PM Merrill Cornish wrote: Adam, The following line occurs in stdout.log: INFO: Processing Context configuration file URL file:C:\Program Files\Apache Group\Tomcat 5.0.18\conf\Catalina\localhost\timesheet.xml so it appears to be getting the correct context fragment. What if

Re: Another Try at MySQL Connection Pooling

2004-02-11 Thread Adam Hardy
Merrill, I think everyone's waiting to see you kick yourself when you discover what the problem is... ;) No seriously, there are 2 things that I would try - (1) debug the context - I think it returns an enum of entries available from some method, and (2) go back to the most basic test servlet

Re: [Repost] Tomcat logging

2004-02-09 Thread Adam Hardy
On 02/09/2004 07:51 AM Marcel Stor wrote: explains the new context descriptors. I still don't quite get it. It says ...which would normally be found in the main server configuration file Well, does this mean I can (have to?) remove all my context descriptions from server.xml and place them

Re: [Repost] Tomcat logging

2004-02-09 Thread Adam Hardy
On 02/09/2004 10:07 AM Marcel Stor wrote: What are you using to log? The java.utils.logging framework will log to anywhere you define in its configuration. By default, as a file java0.log in the tomcat user's home directory. I know. And if the app is started one would have to a runtime parameter

Re: root context loaded again under its docbase name

2004-02-09 Thread Adam Hardy
On 02/09/2004 02:58 PM Shapira, Yoav wrote: and this is my context (which is found in META-INF/context.xml): Context path= docBase=gargantus.war cachingAllowed=false reloadable=false Anybody else with the same setup see this? Bug or not bug? snip/ Seems like a bug. What happens if you don't

Re: root context loaded again under its docbase name

2004-02-09 Thread Adam Hardy
On 02/09/2004 11:01 PM Shapira, Yoav wrote: If there's no context.xml, then I don't get a root context - no _, no nada - and no errors. Just the context with the same name as the war file. So if there's no context.xml, the behavior is correct (with all default values, e.g. reloadable). If you

root context loaded again under its docbase name

2004-02-07 Thread Adam Hardy
I've seen and asked about this about a year ago but since it wasn't important, I didn't bother chasing it up when I found no solution. It's happening again. Tomcat loads my context twice. Once for root and once with the name of its WAR file. My war file is called gargantus.war. This is my

Re: root context loaded again under its docbase name

2004-02-07 Thread Adam Hardy
to the error message: context already in use. Do you have the some problem? Hernani -Original Message- From: Adam Hardy [mailto:[EMAIL PROTECTED] Sent: sabado, 7 de Fevereiro de 2004 12:47 To: Tomcat Users List Subject: root context loaded again under its docbase name I've seen and asked

Re: Problem adding access log valve.

2004-02-06 Thread Adam Hardy
Hi Mufaddal, the accesslogvalve config requires a Valve / tag, not a Logger/ tag. Check the exception messages carefully, normally they tell you. Also check your config against the documentation - I don't think 'timestamp' is a valid attribute for Valve/ HTH Adam On 02/05/2004 11:06 PM

Re: SOLUTION: SSL certificates HOW-TO

2004-02-04 Thread Adam Hardy
Good one Bruno. On 02/03/2004 10:09 PM [EMAIL PROTECTED] wrote: It seems that obtaining and installing SSL certificates from different Certificate Authorities is not consistent. Even within the same CA, the procedure for real and test certificates is not necessarily the same. To make matters

Re: access log

2004-02-03 Thread Adam Hardy
Hi Yan, I'm only writing the access logs to a DB, I'm not too interested in keeping the normal logs as long as everything runs peachy. There is actually a small comment in the JDBCAccessLogValve noting that it would be good to develop a filter on the mime type - with which one could just drop

Re: Yet another OT question.

2004-02-03 Thread Adam Hardy
Try writing a really obviously wrong SQL statement, just rubbish, see if you force an error. Also check your DB logs to see whether it spat out an error log msg. On 02/03/2004 07:51 AM Antonio Fiol Bonnín wrote: When we insert duplicates, we do get SQLException as a response. We are using

Re: access log

2004-02-03 Thread Adam Hardy
On 02/03/2004 04:57 PM Yansheng Lin wrote: If you are not doing this for security/alerts, you can go and get an access log analyzer. There are tones of analyzers out there. If all fails, /xusage is still going to be there. And if your website becomes hugely successful, at that point of course

access log

2004-02-02 Thread Adam Hardy
I'm using the access log valve to record my traffic and I was wondering: - if anyone was thinking of adapting it to write to a database via jdbc? - if anyone has a script to import the daily log files into a mysql database? - how easy it would be to adapt the date output to '2004-02-02'

Re: access log

2004-02-02 Thread Adam Hardy
On 02/02/2004 02:54 PM Shapira, Yoav wrote: - if anyone was thinking of adapting it to write to a database via jdbc? Too slow, unless done very carefully asynchronously (and then you have to really take care to keep entries in the right order, etc -- it's a nightmare). There are no open bugs

Re: ServletFilter on j_security_check

2004-02-01 Thread Adam Hardy
Frank, if you develop a JAAS login module, you can get it to do pretty much anything you want, apart from having instant access to that user's session. You could write the login attempts to a database for instance. Adam On 01/31/2004 11:51 PM Tim Funk wrote: Yeah. Use a Valve. A Valve is just

Re: update tomcat 4 to tomcat 5

2004-02-01 Thread Adam Hardy
On 01/31/2004 10:45 PM Lars Schreiber wrote: Hi can anybody explain me how to update between different versions of tomcat without install and configure the complete tomcat? its all if im copy the jars from the new tomcat in the /server/lib dir from the old tomcat ? Thanks Sounds like tomcat

Re: dumb newbie question

2004-01-30 Thread Adam Hardy
I read on this list a while back that there is now a configuration parameter or switch somewhere take care of this. Apparently it is by default OFF, because it doesn't comply with the servlet spec. I am not sure what the parameter is, nor whether it is in a production release yet. Perhaps

Re: Client Authentication

2004-01-29 Thread Adam Hardy
Michael, with SSL the browser and tomcat will handle the certs for you without having to parse them. You just have to make a cert for your tomcat and tell tomcat where it is, in the config for the connector. It's all well documented on the tomcat site. Otherwise the only thing you need to do

tomcat logging and java.util.logging

2004-01-27 Thread Adam Hardy
In my webapp's context I configured a logger: Logger className=org.apache.catalina.logger.FileLogger prefix=localhost_gargantus_log. suffix=.txt timestamp=true / I changed over from using log4j to using the native java.util.logging package, and I have lost the ability to

[OT] installing new java jdk

2004-01-26 Thread Adam Hardy
I haven't worked out how to install new versions of java onto my remote webserver effectively yet. If I go to my webserver with a linux shell and use Lynx, the download page at java.sun.com gets truncated. wget and curl don't work either because they're not interactive so you can't click on

Re: [OT] installing new java jdk

2004-01-26 Thread Adam Hardy
I thought there weren't any mirrors. Which do you mean? On 01/26/2004 03:05 PM Yiannis Mavroukakis wrote: Why not try to get it from a mirror? -Original Message- From: Adam Hardy [mailto:[EMAIL PROTECTED] Sent: 26 January 2004 13:40 To: Tomcat Users List Subject: [OT] installing new java

Re: [OT] installing new java jdk

2004-01-26 Thread Adam Hardy
That trick with wget didn't work for me because wget complained it couldn't run the https protocol. Is there a wget that will run https? I'll check it out. On 01/26/2004 04:54 PM Philipp Taprogge wrote: Hi! Adam Hardy wrote: If I go to my webserver with a linux shell and use Lynx

Re: [OT] installing new java jdk

2004-01-26 Thread Adam Hardy
Wow. How did you do that? wget must have been redirected at least 2 times then! On 01/26/2004 09:12 PM Ankur Shah wrote: Try the following URI under wget to see if that works for you: http://tinyurl.com/yugvm Its the download link to the J2SDK 1.4.2 RPM. Adam Hardy wrote: That trick

Re: Tomcat Session Managment Problem under Linux

2004-01-26 Thread Adam Hardy
On 01/26/2004 07:12 PM Shane O'Sullivan wrote: Hi All, I am using Tomcat 4.1 running on Red Hat Linux 9.0. I have succesfully deployed my servlet and all seems to be running ok except for one issue. The number of sessions for my servlet seems to be incrementing, even if I stop and restart

Re: Tomcat und SSL

2004-01-25 Thread Adam Hardy
a information about unsecure parts on my website. i dont have find any good solution to work with apache and tomcat together someone dont work if anybody here to explain me step to step how to setup a apache with ssl and a conector to tomcat with ssl ? Thanks - Original Message - From: Adam Hardy

Re: Tomcat und SSL

2004-01-24 Thread Adam Hardy
Hi Lars, just try it - there's often /really/ bad English on the list, and people still understand. As long as you keep it simple! Anyway, what you want to do is just connect via HTTPS, correct? And you say, your browser gives the message choose a certificate? I don't understand why you see

  1   2   3   4   >