Re: charset problems coming up during runtime

2003-11-05 Thread Adam Hardy
On 11/05/2003 09:31 AM Christoph Lechleitner wrote: I have a really weird problem with charset handling concerning special characters like German umlaute (i.e. ä, ö, ü) (it also concerns characters from French and so on). I have done extensive Google and list searches, but all information I

Re: charset problems coming up during runtime

2003-11-05 Thread Adam Hardy
On 11/05/2003 07:02 PM Christoph Lechleitner wrote: Basically the problem manifests in producing the html output. i.e., the so far correct data from the DB or file are not getting encoded, the browser gets ? instead of auml; (for ä). If this happens when filling forms with current values of some

Re: [OT] Linux Distribution

2003-11-04 Thread Adam Hardy
On 11/04/2003 01:43 PM Wade Chandler wrote: Actually Red Hat isn't just dropping their free distro. They are moving to a model closer to the model you see right here. http://fedora.redhat.com Why not just use that? You are used to the Red Hat setup (I guess). SuSE is a good distro. You could

Re: Tomcat connection limitation

2003-11-03 Thread Adam Hardy
On 11/03/2003 04:30 PM epyonne wrote: Oops, sorry, I forgot to change the subject line. Hi Epyonne, you not only forgot to change the subject line, but you hijacked a thread, which means that your new thread and the original thread will get all jumbled together in the archives and it makes it

Re: Which version of xerces, Tomcat 4.1.24 is using?

2003-11-01 Thread Adam Hardy
On 10/31/2003 06:41 PM Jon Wingfield wrote: What does the invocation of this static java method return? org.apache.xerces.impl.Version.getVersion(); http://xml.apache.org/xerces2-j/javadocs/xerces2/index.html This will help too: java -cp xercesImpl.jar org.apache.xerces.impl.Version soapboxI

Re: Configuring Tomcat

2003-10-30 Thread Adam Hardy
On 10/29/2003 10:57 PM Balan Srinivasan wrote: Hi I'm in the process of installing/configuring Tomcat on a Linux machine and I'm having troubles doing all this. Would like to know if there is a step-by-step instruction available with you guys with reference to the configuration of a Tomcat

Re: xhtml and Internet Explorer

2003-10-30 Thread Adam Hardy
On 10/30/2003 12:24 AM Marius Scurtescu wrote: Hi, I am using Tomcat 4.0.5 with JBoss 3.0.3 under Win2K and I am trying to generate XHTML pages with JSP. Everything is fine with Mozilla, but IE keeps showing the pages as raw XML. I know that this issue came up before on this list, but the

Re: xhtml and Internet Explorer

2003-10-30 Thread Adam Hardy
On 10/30/2003 10:08 PM Marius Scurtescu wrote: I will consider implementing a filter to remove the empty lines before the html tag. For now I eliminated most of the empty lines by changing: [EMAIL PROTECTED] import=... % [EMAIL PROTECTED] language=Java % jsp:include page=foo.jsp / jsp:include

session hijacking and tying session to IP address with filter

2003-10-28 Thread Adam Hardy
What does everyone think of the idea of noting the IP address in the session so that session hijackers identified if they try to steal a session that has a different IP address from their own? Are there any drawbacks to this method? Nobody can spoof an IP address and still get back the

Re: Form Double Submit Detection

2003-10-28 Thread Adam Hardy
On 10/28/2003 10:42 AM Walker Chris wrote: Tom, You can also put JavaScript code in the form's onSubmit event code to disable all the elements in the form. To make sure this happens after submission (otherwise nothing gets submitted) use window.setTimeout() to run the disable script after a

Re: How do I get off this list?

2003-10-28 Thread Adam Hardy
Send an email to the address below (tomcat-user-unsubscribe) and make sure you reply to the confirm-request. Adam On 10/27/2003 09:06 PM Adam Mantell wrote: Hello, How do I get off this list? Thanks, Adam

Re: session hijacking and tying session to IP address with filter

2003-10-28 Thread Adam Hardy
On 10/28/2003 12:06 PM Tim Funk wrote: I think they can and you'll break AOL users. AOL and other large entities sometimes employ megaproxies where the user might appear to be coming from different ip addresses. OK I guess if I write a filter to reject requests where the IP address doesn't

Re: session hijacking and tying session to IP address with filter

2003-10-28 Thread Adam Hardy
On 10/28/2003 12:06 PM Tim Funk wrote: I think they can and you'll break AOL users. AOL and other large entities sometimes employ megaproxies where the user might appear to be coming from different ip addresses. The guaranteed way to prevent session hijacking is by using ssl. (And making sure

Re: session hijacking and tying session to IP address with filter

2003-10-28 Thread Adam Hardy
On 10/28/2003 01:30 PM Frode E. Moe wrote: On Tue, Oct 28, 2003 at 13:23:43 +0100, Adam Hardy wrote: BTW, what are css attacks? Cross-site scripting attack. If an attacker can put text into your application which are echoed back verbatim within the HTML source for different users, the attacker

Re: session hijacking and tying session to IP address with filter

2003-10-28 Thread Adam Hardy
On 10/28/2003 01:49 PM Morgan Pyne wrote: And I actually find it a bit disturbing that in this day and age of somebody would be called anal about security for simply implementing their website via SSL :-) - I would consider this to be a minimum requirement and only the first step for any

Re: encrypting a form's action URL with HTTPS link

2003-10-24 Thread Adam Hardy
On 10/23/2003 05:33 PM Punjabi, Naveen K wrote: Hello Adam, Well yes, in case of SSL (secure socket Layer) all your form content along with the page header will go in an encrypted format. If you want to know in detail how SSL works then here goes the entire explanation

Re: Mozilla, SSL certificates, and Tomcat 5

2003-10-23 Thread Adam Hardy
. It also does form-based authentication without any trouble. Jeff Adam Hardy wrote: Jeff, I get strange behaviour with Moz tomcat5 SSL but not what you're describing. To do with the form-based authentication. Adam On 10/22/2003 05:58 PM Jeff Jackson wrote: I'm using Sun's j2sdk1.4.2. Are you

Re: POI

2003-10-22 Thread Adam Hardy
On 10/22/2003 04:00 PM Hart, Justin wrote: I'm considering using POI (the jakarta package for managing OLE objects in java) in a commercial project. 2 Questions 1) Is it any good? 2) Will the license allow for this? IANAL. Justin W. Hart A colleague used it on a project I was on - seemed to

Re: Mozilla, SSL certificates, and Tomcat 5

2003-10-22 Thread Adam Hardy
Jeff, I get strange behaviour with Moz tomcat5 SSL but not what you're describing. To do with the form-based authentication. Adam On 10/22/2003 05:58 PM Jeff Jackson wrote: I'm using Sun's j2sdk1.4.2. Are you saying that using IBM's JVM would make a difference? I've read the howto.

encrypting a form's action URL with HTTPS link

2003-10-21 Thread Adam Hardy
Hi All, I am trying to work out whether my form submission is sent encrypted in SSL or not. If I code my form like this: form method=POST action=https://localhost:8443/sslform; will it actually be encrypted? When I click submit, the browser pops up a certificate dialog box (since I'm not

Re: Abandoned Connections not removed

2003-10-18 Thread Adam Hardy
Hi Matt, read the fine manual, man: http://jakarta.apache.org/tomcat/tomcat-5.0-doc/RELEASE-NOTES.txt ;) Adam On 10/17/2003 05:53 PM Matt Raible wrote: So I guess the question is - which version of DBCP ships with Tomcat 5.0.12? Thanks, Matt On 10/17/03 2:47 AM, Adam Hardy [EMAIL PROTECTED

Re: JavaMail Session JNDI Resource and Authentication

2003-10-18 Thread Adam Hardy
Hi Andreas, I'm planning on implementing this at some point soon too so I thought I'd have a look to see what's up. I googled on javamail.providers and your message here was one of the results that came up first! Anyway, I couldn't find anything descriptive of your problem, but a couple of

Re: Abandoned Connections not removed

2003-10-17 Thread Adam Hardy
On 10/17/2003 01:45 AM Matt Raible wrote: Is there a new release of DBCP that fixes this problem b/c currently these settings have no effect. I'm running JDK 1.4.2 on RedHat 9, Tomcat 5.0.12. My application is the open source Roller Weblogger. Hi Matt, I heard before, here I think, that someone

Re: TC5 ssl form-based authentication mozilla

2003-10-15 Thread Adam Hardy
On 10/15/2003 10:32 AM Remy Maucherat wrote: With this security: web-resource-collection web-resource-nameSSL 4 Login/web-resource-name url-pattern/login.do/url-pattern /web-resource-collection auth-constraint role-nameuser/role-name role-nameadmin/role-name

Re: Invalidated session

2003-10-15 Thread Adam Hardy
On 10/15/2003 02:10 PM Carlos-Roberto Queiroz wrote: Sorry for the dull question, but I´d like to know what an invalidated session is, and when a session gets invalidated (just timeout ?) also when you call session.invalidate() Adam -- struts 1.1 + tomcat 5.0.12 + java 1.4.2 Linux 2.4.20

meaning of some log output

2003-10-15 Thread Adam Hardy
I'm getting the following on tomcat5 for my 3 contexts at start-up: The test context is a really simple app with just a couple of JSPs. Can anyone tell me what is the significance of: action: []: null createObjectName with

Re: manager.xml: cannot configure SSL for form-based authentication

2003-10-14 Thread Adam Hardy
On 10/14/2003 08:41 AM Bill Barker wrote: Adam Hardy [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Basically it always stays in non-SSL protocol. I posted this in bugzilla, being confident that tomcat was not doing what it was supposed to, but apparently it is. I got the following

TC5 ssl form-based authentication mozilla

2003-10-14 Thread Adam Hardy
I have set this up with the minimum configuration possible to try to find the problem. 1 JSP, one Struts action mapping, 1 servlet mapping, and the tomcat realm - no SSO, no filters, no templates, no SSL-redirection. With this security: web-resource-collection web-resource-nameSSL 4

Re: Tomcat JDBCRealm And security-constraint in the web.xml

2003-10-13 Thread Adam Hardy
On 10/13/2003 07:56 AM Bill Barker wrote: Caroline Jen [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Tim: Before I posted my questions regarding the problem that I encountered, I have gone through

Re: Hosting

2003-10-13 Thread Adam Hardy
:: Hi, :: :: I know this could be a little off topic, but I would like some suggestions about with :: alternatives to host my website (I need a :: mysql DB and J2EE support) :: :: Thanks in advance, http://jakarta.apache.org/struts/resources/hosts.html -- struts 1.1 + tomcat 5.0.12 + java

Re: [OT] Hosting

2003-10-13 Thread Adam Hardy
On 10/13/2003 08:21 AM Schalk wrote: Another great hosting provider you may want to have a look at is SevenC Computing (www.sevenc.co.za). Linux boxes, with Tomcat, Apache. The staff are all Linux and Java experts and offer 24/7 support. Kind Regards Schalk Neethling Hi Schalk, I don't know why

manager.xml: cannot configure SSL for form-based authentication

2003-10-13 Thread Adam Hardy
Sorry if this comes through twice. I think it got eaten by my email software the first time. I have tried putting the following in $CATALINA_HOME/server/webapps/manager/WEB-INF/web.xml but the SSL config is ignored: security-constraint web-resource-collection web-resource-nameSSL 4

servlet mappings and security constraints with j_security_check

2003-10-13 Thread Adam Hardy
I am getting the familiar status 400 - invalid direct reference, and yet I am absolutely not surfing to the login page myself. This is the page I am on: https://localhost:8443/mywebapp/registerdone.do and this is the link I am using: https://localhost:8443/mywebapp/private/editprofile.do

cannot configure SSL for form-based authentication

2003-10-13 Thread Adam Hardy
I have tried putting the following in $CATALINA_HOME/server/webapps/manager/WEB-INF/web.xml but the SSL config is ignored: security-constraint web-resource-collection web-resource-nameSSL 4 Login/web-resource-name url-pattern/ssllogin.html/url-pattern

Re: form-based authentication session.invalidate

2003-10-12 Thread Adam Hardy
{ // invalidate just one session deregister(ssoId, session); } I haven't been able to locate how logout can be a value in a SessionEvent. -Tim Adam Hardy wrote: I have just figured out that the SSO in JSESSIONIDSSO stands for single-sign-on. I have the following

Re: [HELP!] Which key alias names to use for SSL?

2003-10-12 Thread Adam Hardy
On 10/11/2003 11:12 PM Sonny Sukumar wrote: Hi Adam, Your first step was: # keytool -genkey -alias tomcat -keyalg RSA and your last step was: # keytool -import trustcacerts -file public.crt -alias tomcat So you used the same alias (tomcat) for both the private key and the signed public

form-based authentication session.invalidate

2003-10-11 Thread Adam Hardy
I am using session.invalidate() to try to cause the user to receive another login request, using CMS form-based authentication. I saw the same issue in bugzilla but for basic authentication: http://nagoya.apache.org/bugzilla/show_bug.cgi?id=12147 where the tomcat developer/bugzilla person

Re: form-based authentication session.invalidate

2003-10-11 Thread Adam Hardy
is restarted or web app restarted - I can't recall what happens to the authentication information. ] -Tim Adam Hardy wrote: I am using session.invalidate() to try to cause the user to receive another login request, using CMS form-based authentication. I saw the same issue in bugzilla

Re: [HELP!] Which key alias names to use for SSL?

2003-10-11 Thread Adam Hardy
On 10/11/2003 09:08 PM Sonny Sukumar wrote: [I sent this once before, but got no response, and I'm not sure what to do. Thanks in advance.] Hi guys, I'm trying to setup my Tomcat (4.1.27) server to work with SSL. I got a CA-signed cert to go with my private key and CA root cert, but I'm

Re: Still needing help with DBCP - slow response time

2003-10-10 Thread Adam Hardy
On 10/09/2003 11:58 PM Jose Euclides da Silva Junior - DATAPREVRJ wrote: Hi, i am still having problems with DBCP 1.0 - TomCat 4.18. Some hints: 1 - I didnt setted the server.xml up. 2 - I am using the Oracle Thin Driver 3 - I ve created my own connection pooling class, called BeanPoolConn, which

Re: StackOverflow

2003-10-09 Thread Adam Hardy
? On 10/08/2003 10:00 PM Adam Hardy wrote: I'm getting a Status 500 error page in my app javax.servlet.ServletException: Servlet execution threw an exception org.blacksail.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:146) root cause java.lang.StackOverflowError It goes on to say

Re: StackOverflow

2003-10-09 Thread Adam Hardy
OK can someone answer a simple question here: if tomcat gives me a StackOverflowError, does that mean that there is no way of getting a stack trace? Or am I making 2 + 2 = 5? Adam On 10/09/2003 01:45 PM Adam Hardy wrote: OK so I took the SetCharacterEncodingFilter out of the equation

Re: StackOverflow

2003-10-09 Thread Adam Hardy
it even passed it on to struts my code. No? Is this an issue? Adam On 10/09/2003 02:09 PM Adam Hardy wrote: OK can someone answer a simple question here: if tomcat gives me a StackOverflowError, does that mean that there is no way of getting a stack trace? Or am I making 2 + 2 = 5? Adam On 10/09

Re: not getting a stacktrace on an exception

2003-10-09 Thread Adam Hardy
and not to other URLs. Yoav Shapira Millennium ChemInformatics -Original Message- From: Adam Hardy [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 08, 2003 4:00 PM To: Tomcat Users List Subject: not getting a stacktrace on an exception I'm getting a Status 500 error page in my app

Re: StackOverflow

2003-10-09 Thread Adam Hardy
the same behavior on Weblogic and Websphere. The reason is simple: there's no room on the stack to store the error stack trace itself ;) Yoav Shapira Millennium ChemInformatics -Original Message- From: Adam Hardy [mailto:[EMAIL PROTECTED] Sent: Thursday, October 09, 2003 8:44 AM To: Tomcat

Re: xerces version used by Tomcat 4.1.27

2003-10-09 Thread Adam Hardy
Yoav, in the xerces bundled with tomcat 5.0.12, there is nothing of use in the manifest. You have to run something like: java -cp xercesImpl.jar org.apache.xerces.impl.Version to get the version. Not exactly intuitive. Adam On 10/09/2003 03:01 PM Shapira, Yoav wrote: Howdy, It's Xerces 2.4.0

Re: AW: Urgent help, please!Best practices using Connection Pool

2003-10-09 Thread Adam Hardy
I think he must be having problems with his email because he send more or less the same msg 12 hours ago but didn't respond to any of the replies. On 10/09/2003 03:27 PM Nitschke Michael wrote: I could remember that there was a mail today that answered your question. The pool provides an wrapper

not getting a stacktrace on an exception

2003-10-08 Thread Adam Hardy
I'm getting a Status 500 error page in my app javax.servlet.ServletException: Servlet execution threw an exception org.blacksail.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:146) root cause java.lang.StackOverflowError It goes on to say that the full stack trace of the root

Re: Where does system.out go?

2003-10-08 Thread Adam Hardy
Dude, you just hijacked my thread! Bad netiquette. Anyway, your System.out.println statements will go to the console, i.e. the command line window where you are running tomcat. If you have no command line window, they will probably get caught in a system.out or system.err file although I'm not

Re: Urgent help, please!Best practices using Connection Pool

2003-10-08 Thread Adam Hardy
Hi Jose, the connection that you are served by your data source is a connection wrapper where the close method will not really close the connection, rather it will tell the connection pool that this connection is free and can be put back in the pool. HTH Adam PS I wouldn't flag your email as

Re: Accessing objects with any servlets, where the object is already pre-created

2003-10-07 Thread Adam Hardy
Another issue might be sharing the objects between servlets - I think that is what the original poster meant. Doesn't each servlet have its own servlet context? On 10/07/2003 01:50 PM Peter Guyatt wrote: Hi there, I beleive that using the setAttribute adds the object to a hashtable. If when

Re: JNDI+dbcp Can't find my jdbc driver

2003-10-06 Thread Adam Hardy
and this is mine (guaranteed to work! well, maybe... ;) ) It's in my context for the particular app. Did somebody say removeAbandoned was depracated? Resource name=jdbc/LinkLibDB auth=Container type=javax.sql.DataSource /Resource ResourceParams name=jdbc/LinkLibDB parameter

Re: JNDI+dbcp Can't find my jdbc driver

2003-10-06 Thread Adam Hardy
I don't have a problem in 5.0.12 with GlobalNamingResources and a ResourceLink in the context. Adam On 10/06/2003 03:50 PM Derek Mahar wrote: I found that on Tomcat 5.0.12, contexts can find database JNDI resources listed under DefaultContext, but not GlobalNamingResources, even with a

Re: Tomcat 5.0.12: Does DataSourceRealm work inside a Context?

2003-10-06 Thread Adam Hardy
Just a guess but have you tried configuring the realm to use dataSourceName=BondTest ? Adam On 10/06/2003 07:36 PM Derek Mahar wrote: On Tomcat 5.0.12, should context /bondtest have access to the following DataSourceRealm? Tomcat complains that it cannot perform the authentication because the

Re: Tomcat 5.0.12: Does DataSourceRealm work inside a Context?

2003-10-06 Thread Adam Hardy
Hi Peter, re bugzilla, if you log on and then click on the link at the bottom called 'my bugs', you get shown all your open bugs, albeit not unconfirmed ones. You can then click on 'edit this query' and just select all bug status codes, and you will see any bugs you have ever posted. :) Adam

Re: I want to hide /index.jsp and having / at the root of my site

2003-10-06 Thread Adam Hardy
Check the archives, I'm pretty sure it was discussed recently. http://www.mail-archive.com On 10/06/2003 11:13 PM GL wrote: Hi, I have a webapp with a welcome file called index.jsp. When i visit my site http://www.mysite.com/ , it convert the url in http://www.mysite.com/index.jsp !! I don't

manager.xml in tomcat 5

2003-10-05 Thread Adam Hardy
Just found out that manager.xml is found under conf/Catalina/localhost/ nowadays. It means the docs on the website are a bit out-of-date. Took me half an hour to work out what was going on because I didn't realise, and copied my tomcat-4 manager.xml over to webapps/, because it's got my realm

Re: manager.xml in tomcat 5

2003-10-05 Thread Adam Hardy
-15 19:22:30 jakarta-tomcat-5.0.12/server/webapps/manager/manager.xml On 10/05/2003 09:57 PM Tim Funk wrote: Nope. Its an xml file in jakarta-tomcat-catalina/webapps/docs -Tim Adam Hardy wrote: Just found out that manager.xml is found under conf/Catalina/localhost/ nowadays. It means

Re: manager.xml in tomcat 5

2003-10-05 Thread Adam Hardy
. The xml files for the docs won't be in the binary release. -Tim Adam Hardy wrote: In the src distro I can see, but not in the binary 5.0.12 tarball: [EMAIL PROTECTED] junk]$ tar -tvzf jakarta-tomcat-5.0.12.tar.gz |grep manager.xml -rw--- 0/0 418 2003-09-15 19:25:48 jakarta

Re: Server Locale and Supported Languages

2003-10-04 Thread Adam Hardy
Hi Jeremy, what version of tomcat are you using, and what OS are you running on? Is your friend running on the same? What does his response.getCharacterEncoding() say? When you say can't display characters what do you mean? Question marks, square blobs? Regards Adam On 10/03/2003 08:31 PM

configuration of page encoding in tomcat 5

2003-10-04 Thread Adam Hardy
I'm testing the character encoding configuration in tomcat 5 in the deployment descriptor. I'm using Struts - Tiles servlets and normal JSPs. I'm using the locale-encoding-mapping-list/ and the jsp-config/ . If I leave out the pageEncoding page directive from the JSPs and I leave out the

Re: Datasource connections not released when reloading context

2003-10-03 Thread Adam Hardy
Sorry, but I didn't see which datasource you were using. With DBCP, you have these optional parameters: !-- abandoned dB connections are removed and recycled -- parameter nameremoveAbandoned/name valuetrue/value /parameter !-- set the number of seconds a dB connection has been idle

Re: JNDI+dbcp Can't find my jdbc driver

2003-10-03 Thread Adam Hardy
Josh, try jdbc:mysql://localhost:3306/docomatic On 10/03/2003 04:34 AM Josh G wrote: Filip Hanik wrote: put it in the same place as your DBCP jar files are Ok done that, now I'm getting a new error that I can't find an explanation of on google :( java.sql.SQLException: Cannot create JDBC

Re: Datasource connections not released when reloading context

2003-10-01 Thread Adam Hardy
Hi Matt, you don't destroy them, you just close them. if (!conn.isClosed()) conn.close(); On 09/30/2003 12:51 AM Matt Raible wrote: If I'm getting my database connections from a JNDI resource (configured in server.xml) how do I destroy these suckers. Sample code would be great - or tell me

Re: Datasource connections not released when reloading context

2003-10-01 Thread Adam Hardy
actually that doesn't really close them, since it's a connection pool, but it tells the connection pool that they're free for someone else. On 10/01/2003 11:05 AM Adam Hardy wrote: Hi Matt, you don't destroy them, you just close them. if (!conn.isClosed()) conn.close(); On 09/30/2003 12:51

Re: Filter for Form Authentication Problem

2003-10-01 Thread Adam Hardy
That bugzilla issue only addresses filters, not character encoding, with j_security_check. On the one hand the servlet 2.4 spec actually addresses response character encoding issues nicely, with the addition of stuff like: locale-encoding-mapping-list locale-encoding-mapping

Re: form-based login / cookies disabled / JSPs in WEB-INF

2003-10-01 Thread Adam Hardy
there. other ideas or comments Jose On Sun, Sep 28, 2003 at 06:50:05PM +0200, Adam Hardy wrote: On 09/28/2003 06:09 PM Jose Alfonso Martinez wrote: Do you really need to maintain a session, even when the user is just browsing static html files (before logging in)??? If the answer is no, then you

Re: java.util.logging and tomcat

2003-09-29 Thread Adam Hardy
wrote: Adam Hardy wrote: Statements should go to $CATALINA_HOME/logs/ if you have set up your JDK logging.properties not to filter them out. How do I make that change? -- struts 1.1 + tomcat 4.1.27 + java 1.4.2 Linux 2.4.20 RH9

Re: Capturing all Requests to Tomcat.

2003-09-29 Thread Adam Hardy
Hi Steven, check out the AccessLogValve in your server.xml Adam On 09/29/2003 11:35 AM Steven Perry wrote: Hello All, I have got Tomcat 4.1. I would like to read all the requests that are passed onto Tomcat from all the different applications, and print them either onto the screen or a file. I

form-based login / cookies disabled / JSPs in WEB-INF

2003-09-28 Thread Adam Hardy
I think I have a problem. I want form-based container-managed authentication on my app. I also want to allow cookies to be disabled. And I want to keep my JSPs under WEB-INF for security. It seems I cannot have these 3 combined, because disabling cookies means I have to do URL rewriting in

Re: form-based login / cookies disabled / JSPs in WEB-INF

2003-09-28 Thread Adam Hardy
On 09/28/2003 06:09 PM Jose Alfonso Martinez wrote: Do you really need to maintain a session, even when the user is just browsing static html files (before logging in)??? If the answer is no, then you could have an html login form. Try it! If tomcat doesn't have a session id to store the user's

Re: java.util.logging and tomcat

2003-09-27 Thread Adam Hardy
Statements should go to $CATALINA_HOME/logs/ if you have set up your JDK logging.properties not to filter them out. Adam On 09/26/2003 08:34 AM Josh G wrote: Just wondering if anybody here has any experience on using java.util.logging with tomcat? I was under the impression that logged lines

Re: Configuring a JDBC Data Source

2003-09-24 Thread Adam Hardy
sounds like you need the commons-dbcp and commons-pool jar files as well. Adam On 09/24/2003 01:52 AM Renda, Michael wrote: I'm trying to configure a JDBC Data Source for a Tomcat 4.1.27 installation. I used the Admin tool which wrote the following entry to my server.xml file:

Re: Is struts.jar mandatory for tomcat 4.1.24 ?

2003-09-24 Thread Adam Hardy
struts.jar ? Do we need to make any changes in the web.xml ? Please let us know on this. Thanks Much, Sarika -Original Message- From: Adam Hardy [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 23, 2003 1:49 PM To: Tomcat Users List Subject: Re: Is struts.jar mandatory for tomcat

Re: OT: Apologies

2003-09-24 Thread Adam Hardy
Stop it, you're giving me dxlseiya On 09/24/2003 08:18 AM Micael wrote: Aoccdrnig to a rscheearch at Cmabrigde Uinervtisy, it deosn't mttaer in waht oredr the ltteers in a wrod are, the olny iprmoetnt tihng is taht the frist and lsat ltteer be at the rghit pclae. The rset can be a total mses and

Re: JDBC Realm problems

2003-09-24 Thread Adam Hardy
Don't you get: Digester.error(): org.xml.sax.SAXParseException: Element security-constraint requires additional elements. On 09/24/2003 09:48 AM Laurent Perez wrote: in case no one noticed and it matters, web.xml has following typo in it, where resource is spelled ressource:

Re: JDBC Realm problems

2003-09-24 Thread Adam Hardy
Yes! I was unaware that you could disable xml parsing exceptions. But it seems you have. :( Perhaps it depends on the xml parser you are running. Mine is crimson (SAX?). Adam On 09/24/2003 11:29 AM Laurent Perez wrote: Don't you get: Digester.error(): org.xml.sax.SAXParseException: Element

Re: JDBC Realm problems

2003-09-24 Thread Adam Hardy
Oh I'm very sorry, perhaps I confused your post with somebody else's. The problem I am referring to is the issue with the web-resource-name being spelt wrong. Adam On 09/24/2003 12:08 PM Laurent Perez wrote: Yes! I was unaware that you could disable xml parsing exceptions. But it seems you

Re: Configuring a JDBC Data Source

2003-09-24 Thread Adam Hardy
at jakarta.apache.org from their binary downloads page. On 09/24/2003 01:05 PM Renda, Michael wrote: I've got the commons-dbcp.jar file in the common/lib directory. Where do I find the commons-pool.jar file? Mike -Original Message- From: Adam Hardy [mailto:[EMAIL PROTECTED] Sent

Re: Is struts.jar mandatory for tomcat 4.1.24 ?

2003-09-24 Thread Adam Hardy
-nameapplication/param-name param-valueApplicationResources/param-value /init-param Is there a way that we can tell tomcat not to use struts.jar ? Do we need to make any changes in the web.xml ? Please let us know on this. Thanks Much, Sarika -Original Message- From: Adam Hardy [mailto:[EMAIL

Re: character encoding, JAAS, servlet filter vs. valve

2003-09-24 Thread Adam Hardy
PM Joerg Heinicke wrote: Adam Hardy wrote: I can't see why. Perhaps you are overriding it later in the request processing? Struts uses response.setContentType() The docs say: overridden automatically if a * codeRequestDispatcher.forward()/code call is * ultimately invoked

Re: Is struts.jar mandatory for tomcat 4.1.24 ?

2003-09-23 Thread Adam Hardy
No it's not mandatory. But tomcat's admin app uses struts. This is controlled by an .xml file in your webapps directory, and it points to the deployment in tomcat/server/webapps/admin. Adam On 09/23/2003 06:07 AM Sarika N Inamdar wrote: Hi All, Please let me know if struts.jar should be

Re: Forwarding with Tomcat Standalone

2003-09-23 Thread Adam Hardy
Have you set up the security-constraint in your web.xml for those pages? security-constraint web-resource-collection web-resource-nameLogin 4 Everything/web-resource-name !-- Define the context-relative URL(s) to be protected -- url-pattern/private/*/url-pattern

Re: Single Login Authentication with Tomcat

2003-09-23 Thread Adam Hardy
I believe somewhere on java.sun.com I saw an article about setting up JAAS as a tomcat realm to use NT authorisation. Good luck, Adam On 09/23/2003 07:29 AM Peter Harrison wrote: I was wondering it anyone knows how to do NT based one login authentication with web applications. I was hoping

Re: Is struts.jar mandatory for tomcat 4.1.24 ?

2003-09-23 Thread Adam Hardy
Is there a way that we can tell tomcat not to use struts.jar ? Do we need to make any changes in the web.xml ? Please let us know on this. Thanks Much, Sarika -Original Message- From: Adam Hardy [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 23, 2003 1:49 PM To: Tomcat Users List Subject

Re: character encoding, JAAS, servlet filter vs. valve

2003-09-23 Thread Adam Hardy
Hi Joerg, since you are using struts, why don't you ditch the SetCharacterEncodingFilter and set the character-encoding as a property of the struts controller? This means you also don't need anything in your JSPs. I assume you are using form-based container-managed authentication as the

Re: Is struts.jar mandatory for tomcat 4.1.24 ?

2003-09-23 Thread Adam Hardy
. Adam On 09/23/2003 11:56 AM Adam Hardy wrote: Hi Sarika, I think the easiest solution is to move the admin.xml file out of your tomcat/webapps directory. Then the admin app will not be started with tomcat. HTH Adam On 09/23/2003 10:36 AM Sarika N Inamdar wrote: Hi, Thanks for the inputs. We

Re: character encoding, JAAS, servlet filter vs. valve

2003-09-23 Thread Adam Hardy
I can't see why. Perhaps you are overriding it later in the request processing? Struts uses response.setContentType() The docs say: overridden automatically if a * codeRequestDispatcher.forward()/code call is * ultimately invoked. but that leaves me none the wiser. Adam On 09/23/2003

Re: character encoding, JAAS, servlet filter vs. valve

2003-09-23 Thread Adam Hardy
On 09/23/2003 03:20 PM Joerg Heinicke wrote: Ah, okay. It's our first Struts project and experience. I found http://jakarta.apache.org/struts/api/org/apache/struts/config/ControllerConfig.html#contentType and set the contentType in the struts-config.xml with controller

Re: JDBC Realm problems

2003-09-23 Thread Adam Hardy
Your config looks OK. Are you getting any errors logged when you try to log on? On 09/23/2003 04:43 PM Laurent Perez wrote: Hello I am trying to protect a webapp I wrote using a JDBCRealm, but it doesn't seem to work as expected. I am using Tomcat 4.1.27, and Postgresql 7.3.2, with latest

single sign-on, form-based CMA, etc

2003-09-22 Thread Adam Hardy
Looking through the archives I see this topic has had some heavy discussion in the past, but I just want to bring it up again to verify a few points. To overcome the issue with tomcat 4.x where the first session amongst all contexts to time-out will time-out all the user's other sessions, I

Re: stdout.log file growing very quickly.

2003-09-22 Thread Adam Hardy
another question on this topic which has long puzzled me: is tomcat being changed over to commons-logging to output log statements? Or is it all configured going to remain controlled by the debug attributes of nodes in server.xml? If I set all those debug attributes to 0, will tomcat become

Re: stdout.log file growing very quickly.

2003-09-22 Thread Adam Hardy
On 09/22/2003 04:25 PM Shapira, Yoav wrote: Tomcat is already mostly switched over to commons logging. tomcat 4 as well, or just 5? If so, then presumably there is a logging properties config file somewhere, which the original poster could configure so that less output goes to the console? In

manager/html app

2003-09-19 Thread Adam Hardy
Is there a way to configure the manager app to use form-based or digest authentication so I can use SSL to encrypt the login? As I understand it, with basic authentication the passwords are sent in plain text across the net, allowing them to be snooped out from caches and logs. I've no

Re: manager/html app

2003-09-19 Thread Adam Hardy
Thanks, I'll do that. Adam On 09/19/2003 07:48 PM Filip Hanik wrote: in web.xml for the manager app, force it to use SSL, that way the only way to connect into it is over SSL and you are good to go, even with basic authentication Filip - Original Message - From: Adam Hardy [EMAIL

Re: MySQL DBCP pool exausted error message

2003-09-18 Thread Adam Hardy
Hi Nathan, could you rephrase what the problem is? It's a bit ambiguous. Do you mean that each thread can only do one DB operation and then it gets the exception on its next DB operation, or on its next http request? Have you checked in bugzilla? I think there are some unresolved issues with

Re: MySQL DBCP pool exausted error message [SOLVED]

2003-09-18 Thread Adam Hardy
Guess you won't be needing my reply then, but looking at your code, it seems that your finally block could be improved slightly :) In the rare situation where statement.close() throws an exception, your connection won't be closed. Adam On 09/17/2003 10:20 PM Nathan Christiansen wrote: Sorry.

Re: Trying to get off this list

2003-09-18 Thread Adam Hardy
you have to answer the confirm email it sends you. On 09/18/2003 01:29 PM Ronaldo Quispe wrote: Hello, How does one get off this list? I tried the by sending email as described in the web site but that does not work. Is there a moderator that can help? Ronaldo Q.

Re: ? catalina.out under Windows

2003-09-16 Thread Adam Hardy
It depends on your logging configuration rather than catalina.bat. When you say catalina.out, you mean the console? On 09/16/2003 02:20 PM Csaba Nemeth wrote: Hi all, I would like to log everything under Windows (like under linux) to catalina.out. How should I configure this? ( A proper

Re: setup of global resources, dbcp, mail, etc.

2003-09-15 Thread Adam Hardy
The tricky bit is to remember to put a reference to the global-resource in the contexts which want to use it: ResourceLink name=jdbc/RealmDB global=jdbc/GlobalRealmDB type=javax.sql.DataSource/ Adam On 09/15/2003 07:03 PM Paul wrote: has anyone been successful

<    1   2   3   4   >