RE: using a datasource connection pool resource with username and password supplied by user

2005-10-10 Thread Akoulov, Alexandre [IT]
Hi Jeff, I will implement storing the connection in the session with the log out killing the connection. what happens if the user never logs out? then your Tomcat might end up with quite a few open connections that it cannot close and the only way to close such connections would be to

FW: Tomcat security realms question

2005-07-18 Thread Akoulov, Alexandre [IT]
over - they have won. Your security team knows the threat model for you situation far better than I do but it sounds to me like they are trying too hard in one area and have missed a bunch of other threats. Mark Akoulov, Alexandre [IT] wrote: Hi all I have a problem that's been raised

RE: Tomcat security realms question

2005-07-17 Thread Akoulov, Alexandre [IT]
to a machine it is game over - they have won. Your security team knows the threat model for you situation far better than I do but it sounds to me like they are trying too hard in one area and have missed a bunch of other threats. Mark Akoulov, Alexandre [IT] wrote: Hi all I have a problem

Tomcat security realms question

2005-07-15 Thread Akoulov, Alexandre [IT]
Hi all I have a problem that's been raised by my security team to do with using Tomcat JDBCRealms. We're using such realms to protect restricted resources. We also have a custom login form. The steps Tomcat seems to follow when using such a setup is: 1. Check to see if the user is

RE: non-web app in tomcat

2005-07-06 Thread Akoulov, Alexandre [IT]
If your non-web application is to be only accessed by web apps why would not you run it in the tomcat's JVM (just place non-web application in the ${catalina.base}/shared/classes or as a jar file into ${catalina.base}/shared/classes). In this scenario you eliminate the need for maintaining the

RE: Use JSPC

2005-06-20 Thread Akoulov, Alexandre [IT]
Hi Mino, that is what we do: a) generate java files with JspC compiler b) compile java files with javac compiler c) copy class files to the required location (ie class directory under WEB-INF ) Hope it helps, Sasha. -Original Message- From: Giacomino Raccuia [mailto:[EMAIL PROTECTED]

RE: problem: Session invalidation in the servlet accessed via foreign context

2005-05-23 Thread Akoulov, Alexandre [IT]
it wrong. That's possible as to be honest I've never tried what you're trying for real, I'm going on what the docs say not personal experience. -Original Message- From: Akoulov, Alexandre [IT] [mailto:[EMAIL PROTECTED] Sent: Monday 23 May 2005 06:53 To: Tomcat Users List Subject: RE

Re: problem: Session invalidation in the servlet accessed via foreign context

2005-05-22 Thread Akoulov, Alexandre [IT]
Hi all, I'd greatly appreciate if you could shed a ray of light on the following problem ( see below) -Original Message- From: Akoulov, Alexandre [IT] Sent: Friday, 20 May 2005 11:15 AM To: Tomcat Users List Subject: problem: Session invalidation in the servlet accessed via foreign

RE: problem: Session invalidation in the servlet accessed via foreign context

2005-05-22 Thread Akoulov, Alexandre [IT]
line 2? -Original Message- From: Akoulov, Alexandre [IT] [mailto:[EMAIL PROTECTED] Sent: Monday 23 May 2005 00:43 To: tomcat-user@jakarta.apache.org Subject: Re: problem: Session invalidation in the servlet accessed via foreign context Hi all, I'd greatly appreciate

RE: problem: Session invalidation in the servlet accessed via foreign context

2005-05-22 Thread Akoulov, Alexandre [IT]
versions of the servlet spec, but perhaps session behaviour was defined differently in previous versions. You could find out with a google search, or maybe someone else will answer -Original Message- From: Akoulov, Alexandre [IT] [mailto:[EMAIL PROTECTED] Sent: Monday 23 May 2005 01

problem: Session invalidation in the servlet accessed via foreign context

2005-05-19 Thread Akoulov, Alexandre [IT]
Hi all, It seems that there is a problem with session invalidation in tomcat5.0. Please refer to the explanation below: 1. HttpSession session = req.getSession(true); // get existing user session or create one if does not exist 2. session.invalidate(); // invalidate user session

RE: Recent spam

2005-05-18 Thread Akoulov, Alexandre [IT]
Thanks Mark and Co. for fixing the problem -Original Message- From: Mark Thomas [mailto:[EMAIL PROTECTED] Sent: Wednesday, 18 May 2005 4:59 PM To: tomcat-user@jakarta.apache.org Subject: Recent spam All, Just a quick update on the recent issues. 1. The spam with German subject

RE: Problem with the classloader in jakarta-tomcat-5.0.28 - cannot add a jar file to class repository

2005-04-22 Thread Akoulov, Alexandre [IT]
To: Tomcat Users List Subject: RE: Problem with the classloader in jakarta-tomcat-5.0.28 - cannot add a jar file to class repository From: Akoulov, Alexandre [IT] [mailto:[EMAIL PROTECTED] Subject: RE: Problem with the classloader in jakarta-tomcat-5.0.28 - cannot add a jar file to class repository

Problem with the classloader in jakarta-tomcat-5.0.28 - cannot add a jar file to class repository

2005-04-21 Thread Akoulov, Alexandre [IT]
Hi all, I'd greatly appreciate your thoughts on the following issue (and the proposed solution ): When adding a jar file (eg, foo/bar.jar) to the class loader's repository it treats as a directory and therefore it cannot load any classes from this jar. The following explains why it happens.

RE: Problem with the classloader in jakarta-tomcat-5.0.28 - cannot add a jar file to class repository

2005-04-21 Thread Akoulov, Alexandre [IT]
, 21 April 2005 9:27 PM To: Tomcat Users List Subject: RE: Problem with the classloader in jakarta-tomcat-5.0.28 - cannot add a jar file to class repository From: Akoulov, Alexandre [IT] [mailto:[EMAIL PROTECTED] Subject: Problem with the classloader in jakarta-tomcat-5.0.28 - cannot add a jar

RE: Problem with the classloader in jakarta-tomcat-5.0.28 - cannot add a jar file to class repository

2005-04-21 Thread Akoulov, Alexandre [IT]
To: Tomcat Users List Subject: RE: Problem with the classloader in jakarta-tomcat-5.0.28 - cannot add a jar file to class repository From: Akoulov, Alexandre [IT] [mailto:[EMAIL PROTECTED] Sent: 2005 April 21, Thursday 19:48 Subject: RE: Problem with the classloader in jakarta-tomcat-5.0.28