Re: (SLIGHTOFFTOPIC)SSL configuration for apache and tomcat

2003-06-13 Thread Bill Barker
mod_ssl ships with Apache 2.0.x. Try: $ ./configure --enable-ssl $ make $ sudo make install Shyama Gavulla [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi All, Thanks to everyone here who responded to my emails immediatly and helped me in moving my from Jrun to Tomcat.

Re: Integrating iPlanet 4.1 and Tomcat 4.1.24

2003-06-13 Thread Bill Barker
I haven't personally dealt with iPlanet in so long, that it was called NS back then ;-). The first thing that I would do is to enable the AutoConfig: Listener className=org.apache.ajp.tomcat4.config.NSConfig !-- your options here -- / and compare it to what you've configured. The options

Re: Directory Listing in Tomcat 4.1.24

2003-06-13 Thread Bill Barker
My thoughts exactly ;-). Patches are always welcome. Angus Mezick [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Well, if he got REALLY ambitious he could go edit tomcat itself couldn't he? -Original Message- From: Tim Funk [mailto:[EMAIL PROTECTED] Sent: Thursday, June

Re: Auto Login Using Form Based Authentication

2003-06-12 Thread Bill Barker
I was using mod_jk as a short-hand for the entire server-suite. There is a Domino connector, but I don't believe that there is a binary for it. You can get the source and compile it from http://jakarta.apache.org/builds/jakarta-tomcat-connectors/jk/release/v1.2.4 /src/. Documentation is at

Re: Running Tomcat3 on port 80

2003-06-12 Thread Bill Barker
The most likely reason it fails is that you already have Apache running on port 80. Only one application on the box can bind to port 80. You have to stop Apache first. After that, it is pretty much: sudo $TOMCAT_HOME/bin/startup.sh If you are running 3.3.1 stand-alone, you might want to look

Re: Custom Realm, /admin webapp

2003-06-11 Thread Bill Barker
The admin webapp in TC 4.x doesn't play well with custom Realms/Valves. Hopefully this will change in TC 5.x (but it is much the same at the moment). Since the developer currently in charge of JMX regularly hangs out on this list, it might even be a good bet :). The alternative is to enable the

Re: MemoryRealm.java, HashMap synchronized???

2003-06-11 Thread Bill Barker
Probably. However MemoryRealm is deprecated. Oliver Wulff [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] com... Shouldn't the variable principals of type HashMap be synchronized in MemoryRealm??? *** BITTE BEACHTEN *** Diese Nachricht (wie

Re: AJP13 Connector reliability

2003-06-11 Thread Bill Barker
Using the latest mod_jk, then fail-over should work fine. However, the session data will be lost. TC 5.x has support for session fail-over, but not lower versions. Jeremy Nix [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Does anybody out there have a good amount of experience with

Re: Valve as Custom Authenticator

2003-06-11 Thread Bill Barker
BasicAutheniticator is a Context-level Valve, so it can't possibly get invoked before an Engine-level Valve. You've got something really strange in your setup. The other thing to point out is that if you configure your Valve at the Context-level, and implement org.apache.catalina.Authenticator,

Re: Tomcat 4 control panel

2003-06-11 Thread Bill Barker
Michele Neylon :: Blacknight Solutions [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Er.. manager app and admin app? I mean something that will write to server.xml etc. We offer virtual hosting, so easy control for our admins is important. My understanding of manager and admin

Re: MBean Server Failure

2003-06-10 Thread Bill Barker
The machine that has problems has an older version of JMX installed somewhere. That's about all I can make out from the stack traces. Michael Duffy [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] I HATE it when I ask a question that nobody will touch! ;) I learned more about my

Re: Auto Login Using Form Based Authentication

2003-06-10 Thread Bill Barker
There are two problems with this: 1) Your Filter will not get called, since authentication happens before Filters (you'd need to use a Valve, but then you are locked into Tomcat). 2) Unless you are using Tomcat 5.x nightly, Request attibutes won't be available to the login-page for the simple

Re: MBeanServer Fails - Admin Tool Won't Work

2003-06-09 Thread Bill Barker
I'm not a Windows user myself, but it looks like you are missing the JMX jars.In your %CATALINA_HOME%\server\lib their should be either a 'mx4j-jmx.jar' or a 'jmxri.jar'. If missing, you can grab the first from http://mx4j.sourceforge.net, and the second from

Re: Servlet thread safety

2003-06-09 Thread Bill Barker
If your servlet doesn't implement SingleThreadModel, then it is actually guaranteed by the Spec that there will be exactly one instance (per-Context) that executes the request. John Corrigan [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] No. Concurrent requests will most likely be

Re: precompiled jsp's as a part of application war file

2003-06-08 Thread Bill Barker
You have a bunch of servlet-mappings in your web.xml file that map that maps the jsp URL to the pre-compiled class. Jspc will generate these for you. One gotcha with doing this is that TC 4.x won't find welcome-files (e.g. index.jsp) unless there is an actual file with that name. The file can

Re: what's an MBean and why won't my AJP13 listenere work?

2003-06-07 Thread Bill Barker
To answer your original question: 1) An MBean is a JMX manageable object. (http://java.sun.com/products/JavaManagement/) 2) As Tim has pointed out, the Ajp13Connector is deprecated in TC 4.1.x. As a result, it doesn't have an MBean defined for it, since the admin webapp won't allow you to

Re: RE: one web.xml for many web apps

2003-06-07 Thread Bill Barker
What I use on my systems is to define xml-Entities for the components that I want common to my webapps. BOULAY Arnaud [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Ok, thanks ! but what about commons tips (like timeout) : one web.xml for many web apps implies the same session timeout

Re: Sun JVM vs. JRockit

2003-06-07 Thread Bill Barker
with tagpooling and using the osCache (www.opensymphony.com) library. For some reason it does not work correctly with tomcat, so I have to disable tagpooling too. -reynir -Original Message- From: Bill Barker [mailto:[EMAIL PROTECTED] Sent: 7. júní 2003 04:24 To: [EMAIL PROTECTED

Re: Sun JVM vs. JRockit

2003-06-06 Thread Bill Barker
From what I've seen, for small number of requests like this, the overhead of managing the tagpool swamps what it saves in GC. You might want to try disabling tag-pooling (and clear the work dir), and re-run the test on 4.1. Victor Popiol [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED]

Re: security of server.xml

2003-06-06 Thread Bill Barker
TC 3.3.x has a variable-replacement option, which is very nice for this sort of thing. Unfortunately, it hasn't been ported to TC 4.x. Mohamed Tagari [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi, Is there any way of taking the password and username for connecting to a

Re: Tomcat 4.1 HTTP headers?

2003-06-06 Thread Bill Barker
The Fixed in the bug was applied to TC 5.x. It wasn't until after 4.1.24 was released that I realized that it hadn't been ported to TC 4.1.x. It has since been ported in the CVS (get jakarta-tomcat-connectors with the target coyote_10). Please don't re-open the bug, since I'll just have to

Re: More than one lbworker possible with mod_jk 1.2.3 ?

2003-06-06 Thread Bill Barker
It is possible to have multiple lbworkers defined for mod_jk1. However, they are known to not play well with others :). You won't get true load-balancing with this sort of a config. I would recommend upgrading the mod_jk component (possibly to mod_jk2). This will still work fine with TC 3.3.x

Re: Mod_jk, ssl, java, and certificates question

2003-06-06 Thread Bill Barker
The client only needs to deal with Apache-ssl. Apache with mod_jk (configured correctly, e.g. the default config) will pass the SSL variables to Tomcat, but all of the SSL handling (including server-cert) will be done by Apache. Jeff Owens [EMAIL PROTECTED] wrote in message news:[EMAIL

Re: Cannot get keep -alive to work with SSL

2003-06-06 Thread Bill Barker
You'll need to post more info if you want any real help. At the very least, which Tomcat version you are using. McClure, Timothy J(IndSys, GE Interlogix) [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] I am running Tomcat standalone with SSL turned on but the TCP/IP connections keep

Re: SSL client authentication with tomcat 4.1.24

2003-06-06 Thread Bill Barker
I believe that the Sun 1.4 JVM ships with the certs for Verisign and Thawte (to verify this, search the java.sun.com site). To allow OpenExchange signed certs, you need to get the signing cert (not hard), and import it into cacerts. Mario Ivankovits [EMAIL PROTECTED] wrote in message news:[EMAIL

Re: Creation of socket by tomcat

2003-06-06 Thread Bill Barker
I haven't really played with the UNIX sockets option, but my first guess would be that the user that Tomcat/Apache are running under doesn't have permission to create the socket at the configured location. Posting error messages from your logs will likely get you a more helpful answer :). Mark F

Re: Loading Different XML Parser

2003-06-06 Thread Bill Barker
I haven't tried it myself, but other people have reported that my moving the xerces jars server/lib and putting their xml-parser in shared/lib works. Brendle, Douglas A. [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi all, I'm using the JDOM api for xml parsing. Trouble is, Tomcat

Re: Re: customized MBean

2003-06-06 Thread Bill Barker
The admin webapp in TC 4.1.x has a very narrow view of what it displays. In particular, it doesn't display custom Valves. There has been discussion to change this in TC 5.x, but at the moment it doesn't work there either. You can enable the JMX consol in Tomcat by setting mx.port=9000 (or your

Re: using error-page element

2003-06-06 Thread Bill Barker
Any error-page elements must come after welcome-file-list and before tablib elements. The error message gives you enough info to put it in the correct order. Tim O'Dowd [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] I am trying to setup an error page for 404 errors in tomcat4.1.24.

Re: Help Please: Starting Tomcat using channelUnix with mod_jk2

2003-06-06 Thread Bill Barker
You need to have libapr on your LD_LIBRARY_PATH when you start Tomcat. Michael Cardon [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Where I am missing this?: undefined symbol: apr_md5_final When I start my instance of tomcat it writes the following to catalina.out: Jun 6, 2003

Re: Sun JVM vs. JRockit

2003-06-06 Thread Bill Barker
joe user [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] --- Bill Barker [EMAIL PROTECTED] wrote: From what I've seen, for small number of requests like this, the overhead of managing the tagpool swamps what it saves in GC. You might want to try disabling tag-pooling

Re: Tomcat 4.1 HTTP headers?

2003-06-05 Thread Bill Barker
This is a known issue. See http://nagoya.apache.org/bugzilla/show_bug.cgi?id=14292 for more details. Jim Michael [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] I recently switched from Tomcat 4.0.3 to 4.1.24, and now I'm seeing something unexpected: When Tomcat 4.1.24 returns valid

Re: Auto login using a cookie

2003-06-04 Thread Bill Barker
This more or less works for TC 3.x (where j_security_check is a [psuedo-]Servlet). It won't work for TC 4.x and higher (basically the same as the recuring topic: My users are bookmarking the login page). As Tim mentioned, Filters are called after Container-Managed authentication is checked. Of

Re: Restarting Tomcat without restarting Apache

2003-06-04 Thread Bill Barker
If you are using the mod_jk from 3.2.x, then this is true. Any more recent version allows you to restart Tomcat independently of Apache. You can even simply upgrade mod_jk, and continue to use TC 3.2.x if you want. softspt [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Protective

Re: Using symlinks in webapps

2003-06-04 Thread Bill Barker
The security risk are relatively minor if you have control over who can update your webapp. An example of a problem (if you aren't using a sandbox) would be somebody deciding to do ln -s /etc/passwd within $CATALINA_HOME/webapps/ROOT (and letting the entire world know what user accounts are on

Re: Nightmare with Tomcat 4.1 and SSL configuration

2003-06-04 Thread Bill Barker
The standalone SSL connector for 4.1.24 only works with Sun's 1.4.x JVM. There is support in the CVS for other vendors. You could try checking out the coyote_10 branch of jakarta-tomcat-connectors, and see if you have more luck. Cosmin [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED]

Re: Load-balancing not equal amongst 2 Tomcat (using Apache and mod_jk)

2003-06-04 Thread Bill Barker
I don't have access to a HP-UX box, but at a guess, the HP-UX Apache uses the pre-fork MPM. What you are seeing is pretty typical of that case. At the very least, you need to be using the worker MPM for this to work at the moment. You'll also have to upgrade your version of mod_jk (at the very

Re: Catalina Command Line Options

2003-06-04 Thread Bill Barker
RE: Catalina Command Line OptionsAFAIK, the port=${server.port} is a 3.3.x feature that has never been ported to 4.x. TREGAN Fabien [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Howdy, What version of tomcat are you trying to run? TC 4.0.6 Tomcat version 4.x do not

Re: What is it ? useURIValidationHack

2003-05-31 Thread Bill Barker
That's pretty much it. TC 4.0.x didn't handle some traversal attacks well without this set. TC 4.1.x should handle it fine without it being set. The especially paranoid can set it anyway, and have one more choke-point for traversal attacks. I'm including the source for 'validate' so you can

Re: SSL and Non-Browser Traffic

2003-05-30 Thread Bill Barker
It depends on the cert, really. If it is signed by someone already in cacerts (I believe that this means Versign/Thwate, but check the JSSE docs at http://java.sun.com to be certain), then you don't have to put it anywhere. If the signer is trusted, then the certificate is trusted (it's sort of

Re: JAAS LoginModule ?

2003-05-30 Thread Bill Barker
It really depends on what you need to do. For the simplest case, you implement your own Realm (public class MyRealm implements org.apache.cataliana.Realm), and configure it in server.xml like anyother Realm. In TC 4.x, Realms don't have access to the Request/Response: They just get the login

Re: A Question about Realm

2003-05-30 Thread Bill Barker
1) Assuming that auth.jsp is configured as your login-page: form name=authForm method=post action=j_security_check input type=text value=j_username / input type=password value=j_password / /form 2) You can't (portably) get the password. If you have a way to look it up from the userName,

Re: Example error pages?

2003-05-30 Thread Bill Barker
My own error-pages are designed to hide as much as possible from the end-user (and write to the server-logs if necessary), so I'm not much help here. If you want to print the stack trace, the best I can think of is (for a jsp error-page): pre class=error!-- define the 'error' class in your css to

Re: What is the maximum session handling capability

2003-05-30 Thread Bill Barker
For sessions, it really depends on what you do with them. It is very different if you are storing 1MB of data per-session vs. storing 1KB of data per session. For a very crude (and inaccurate, but often times close-enough-for-government-work :) estimate, divide the max memory in the JVM by the

Re: CoyoteConnector (was Re: Access Log Valve)

2003-05-30 Thread Bill Barker
The j-t-c Releases are very old. There should be another j-t-c release coming out in the next few weeks. In the meantime, the safest bet is to do a CVS checkout (using the coyote_10 tag, to get the stable version), and build-from-source. For any TC 4.1.x, it should be possible to grab the

Re: Multiple instances

2003-05-30 Thread Bill Barker
It should be a piece of cake. Setup your workers.properties file to define all of your Tomcats, and then within each Apache VirtualHost, define the JkMounts to go to the correct version of Tomcat. Rohit Peyyeti [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] I'm managing virtualhosts

Re: JAAS LoginModule ?

2003-05-30 Thread Bill Barker
in any other application servers.(JBoss, WebLogic, etc) ? Eric - Original Message - From: Bill Barker [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, May 30, 2003 11:50 AM Subject: Re: JAAS LoginModule ? It really depends on what you need to do. For the simplest case

Re: response.sendRedirect() and the servlet path?

2003-05-30 Thread Bill Barker
My reading of section 5.3 of the servlet-spec (version=2.3), says that you are wrong. Paths to sendRedirect are normal URL patterns, and are *not* based on the calling Context. joe user [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi, if I have a context path such as /mycontext and

Re: Antwort: Re: JAAS LoginModule ?

2003-05-30 Thread Bill Barker
to customize this step, you have to do it individually for each container. Oliver Bill Barker [EMAIL PROTECTED] An: [EMAIL PROTECTED] e.com Kopie: Gesendet von:Thema

Re: CharConversionException: isHexDigit

2003-05-29 Thread Bill Barker
From the code (and stack-trace), the problem is with an unescaped '%' sign in the query-string. Something like: /foo.jsp?progress=58%foo=bar or /foo.jsp?value=%xy. If your machine is connected to the internet, then I think that there are a couple of IIS traversal worms that send something like

Re: Exclusion of certain file types with JK2

2003-05-29 Thread Bill Barker
I don't use Jk2 myself (yet), but I believe it is: [uri:!/myApp/*.html] info=Ignore static files Note: you'll need to use the most recent version of Jk2, and compile it with an Apache that has PCRE. Paul Gregoire [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Does anyone here know how

Re: How do I listen for threads starting and stopping?

2003-05-29 Thread Bill Barker
The simplest (portable) way to do this is to pretend that Threads are the same as Requests, and use request.setAttribute(foo,bar). These will automatically be discarded (i.e. eligible for GC) at the end of the Request. If you need to do explicit cleanup, then you have to wait for TC 5.x, which

Re: building mod_proxy Apache 1.3

2003-05-29 Thread Bill Barker
What you are seeing is fine for most people. It is simply that mod_proxy is being statically compiled into the httpd executable. In this case, you simply skip the LoadModule statement, since it is automatically loaded. If you really want mod_proxy.so, then you must also include the

Re: Content type problem

2003-05-29 Thread Bill Barker
I'm guessing that you are using an rd.include(request, response), which specifically forbids changing things like content-type. Reynir Hübner [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi, I have a content-type problem... I have a website where most urls are not with an file

Re: Tomcat jsp exception

2003-05-29 Thread Bill Barker
Further done in the trace, there should be a root-cause. Including this will help greatly in getting help for your particular problem. Mindaugas Genutis [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hello, I developed my application with Tomcat 4.0.3/Java 1.3. Now I moved to

Re: Taglib using BodyTagSupport

2003-05-29 Thread Bill Barker
The class looks Ok to me. How are you referring to it in your JSP page? It should fail if you are doing something like: my:sendMail to=[EMAIL PROTECTED] from=[EMAIL PROTECTED] subject=test / (e.g. an empty body). Edson Alves Pereira [EMAIL

Re: mod_jk2 - catch html, images with Alias?

2003-05-29 Thread Bill Barker
Urm, err, you don't? If you are connecting to Tomcat via mod_proxy, then you can cache stuff in the usual way (and must take care to not cache stuff that you shouldn't). If you are using mod_jk without an intermediate proxy, then the available caching isn't really worth mentioning. Just assume

Re: servlet question

2003-05-27 Thread Bill Barker
You need to wrap the request with a wrapper that overrides the getMethod() method. Something like: class GetWrapper extends HttpServletRequestWrapper { public GetWrapper(HttpServletRequest request) { super(request); } public String getMethod() { return GET;

Re: HttpSession not exclusive to one client. Seems to be getting mixed up. swapping over.

2003-04-04 Thread Bill Barker
This is a known problem with TC3.3.1. See http://nagoya.apache.org/bugzilla/show_bug.cgi?id=15894 for more details. The fix is to use TC3.3.2-dev (aka nightly). David Rocks [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] We have a JSP/Struts application that runs on tomcat. We

Re: wanted: pure fast apache servlet enginge without jsp etc. + ASCII/ISO Enc. Prob.

2003-04-04 Thread Bill Barker
As I understand it, removing the jsp servlet and associated mappings from conf/web.xml effectively disables all JSP support in 4.1.24. For good mesure, you could also remove the jasper jars from your installation (to prevent users from being able to add JspServlet to their own web.xml). Peter H.

Re: STRUTS in Tomcat?

2003-04-04 Thread Bill Barker
Raible, Matt [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] The 4.1.x version of Tomcat has an Administration app that's written using Struts. This is true. However the struts jar is packaged in admin/WEB-INF/lib, so it isn't generally accessable to other web-apps. There is

Re: how speficy an exclusive context ssl

2003-04-04 Thread Bill Barker
In your web.xml file add: security-constraint web-resource-collection web-resource-nameProtected Context/web-resource-name url-pattern/*/url-pattern /web-resource-collection !-- auth-constraint goes here if you requre authentication --

Re: sendRedirect using jsp:include ...

2003-04-04 Thread Bill Barker
The JSP-spec forbids jsp:include pages from changing headers, so Tomcat is working as expected :-). Probably the simplest way to do what you want is to change the jsp:include directives to [EMAIL PROTECTED] directives. jakarta-pipon [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] i'd

Re: Is there a Online Archive for searching tomcat-users Mailinglist?

2003-04-04 Thread Bill Barker
The Apache mirror is at http://nagoya.apache.org/eyebrowse/SummarizeList?listId=88. I rarely use it myself for this list (I prefer the nntp interface that I'm using now). Peter H. [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Thanks Peter

Re: HTTP user authentication

2003-04-04 Thread Bill Barker
Grab the pdf for the servlet-spec that you care about (TC3.3.x := 2.2, TC4.1.x:= 2.3, TC5.x:= 2.4) and look at how to configure the security-constraint element in your web.xml file. It offers something close to Apache's .httpaccess. Of course, the true masochists can set tomcatAuth=false on the

Re: WEB-INF/web.xml problem

2003-04-03 Thread Bill Barker
I'm assuming that you haven't enabled the ApacheConfig Listener (or, you haven't restarted Apache after Tomcat was started). Assuming that you are using mod_jk1.x, you need to include the directive: JkMount /mycontext/Submit ajp13 somewhere in your httpd.conf file. Despite it's many

Re: Antwort: RE: Antwort: RE: Antwort: RE: user principal, realm

2003-04-03 Thread Bill Barker
You got it: Authenticator is called before Filter. If you want to get in before the Authenticator is called, then you need to use the (Tomcat-specific, and totally non-portable) Valve. Oliver Wulff [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] I wrote a custom

Re: getting browser certificate into servlet

2003-04-03 Thread Bill Barker
Well, the basics are simple: import java.security.cert.X509Certificate; . X509Certificate [] certs = (X509Certificate [])request.getAttribute(javax.servlet.request.X509Certificate); Now comes the hard part :-). certs[0] is always the clients certificate. For the HTTP/1.1

Re: JkMount mapping question

2003-04-03 Thread Bill Barker
Without more info, I'd probably use mod_rewrite for this: RewriteRule ^/servlet/(.*) /$1 Dan Allen [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Is there anyway to have JkMount map an apache url to a tomcat url with the following jist: apache request - tomcat request

Re: Tomcat 4.1 slower than Tomcat 3.3

2003-04-03 Thread Bill Barker
Well, the big performance change in TC4.1 over TC3.3 is Jasper2 vs. Jasper1. For heavy JSP sites, my benchmarks say that TC4.1 wins. Since it seems that you aren't using JSP at all, it isn't surprising (to me at least :) that the extra over-head of supporting the 2.3 Servlet spec drags down TC4.1

Re: Antwort: RE: Antwort: RE: Antwort: RE: user principal, realm

2003-04-03 Thread Bill Barker
It's Tomcat-specific (and, so, non-portable to other servlet containers), but yes, Valves are called before Authenticators. Ralph Einfeldt [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] From the code in catalina/src/share/org/apache/catalina/authenticator/BasicAuthenticator.java

Re: Tomcat 4.1 slower than Tomcat 3.3

2003-04-03 Thread Bill Barker
PROTECTED] wrote in message news:[EMAIL PROTECTED] Howdy, I would add Coyote as another big change from the older HttpConnector. Yoav Shapira Millennium ChemInformatics -Original Message- From: Bill Barker [mailto:[EMAIL PROTECTED] Sent: Thursday, April 03, 2003 4:30 AM To: [EMAIL PROTECTED

Re: Tomcat 4.1 slower than Tomcat 3.3

2003-04-03 Thread Bill Barker
:-). Chris Agmen-Smith [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hello, Thanks for all the great feedback so far. Firstly, Bill Barker writes that: For non-JSP sites that don't require Servlet-2.3 features, it is very hard to beat TC3.3 for performance. Oh dear! We use Velocity

Re: Help on mod_jk for tomcat 4.0.x + httpd 2.0.40 on RedHat 8.0

2003-04-03 Thread Bill Barker
The no apache given warning is a red-herring. It is simply saying that it can't build mod_jk for non-so. You also shouldn't have to specify '--enable-EAPI', since that will be picked up from the apxs settings. I've never tried to build mod_jk1.2.x on RH myself. It works well enough under

Re: compilation of mod_jk, Solaris 8 (intel) using ANT

2003-04-01 Thread Bill Barker
I did this once a while back, just to see how. Then I decided to stick with configure and make. The main thing that is needed is to add ${java.home}/../include/solaris to the includes section of jk/native/build.xml. If you a building from CVS HEAD, that should be enough. If you are building

Re: JSP pages will not work for me. Please help

2003-04-01 Thread Bill Barker
It looks like you've got a stray XML parser lying around somewhere. My first guess would be $JAVA_HOME/jre/lib/ext, but you should check all of the usual suspects. Donie Kelly [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi all, I posted this earlier and no response and I've been

Re: Multiple jre's in single tomcat server

2003-03-31 Thread Bill Barker
It's easy enough to do in general (you set 'tomcat.home' to be the Tomcat installation directory for both, and set 'tomcat.install' to point to the individual directories that have the web-apps defined.). The tricky part is how you are accessing them. If they are on seperate vhosts, then it is

Re: which IBM SDK for AIX to use with Tomcat 4.1.24?

2003-03-30 Thread Bill Barker
I agree with Filip. While TC 4.1.x is only supposed to depend on Java 1.2.x, the testing on 1.3 has been near zero. I have enough headaches fighting the Java version battles for TC 3.3.x, so I really don't want to take this one on. Filip Hanik [EMAIL PROTECTED] wrote in message news:[EMAIL

Re: Bug in CoyoteConnector when using JkCoyoteHandler

2003-03-29 Thread Bill Barker
There is a bug in 4.1.18 where it will always behave as you are seeing. It should be fixed in 4.1.24. Even with 4.1.18, you should be able to override the port setting in the jk2.properties file. Quinton McCombs [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] I am running into a

Re: Can't disable cookies when web-app running on localhost

2003-03-29 Thread Bill Barker
You'll have to complain to Bill Gates about this one ;-). The MSIE-6 Privacy settings are for the Internet Zone only. They are ignored for the Local Intranet Zone (which includes localhost). gardener [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi, I am unable to disable cookies

Re: Configuring Tomcat5/Apache2/JK2 for load balancing??

2003-03-28 Thread Bill Barker
Yeah, well, you wanted to live life on the bleeding edge ;-). You can expect a little blood loss. As John has pointed out (to you and countless others on the list :), the Jk* Apache directives don't work with mod_jk2. The configuration is done with the jk2.properties file (which isn't really a

Re: MBeanException on init new Realm class

2003-03-28 Thread Bill Barker
It's sparsely documented (and AFAIK only at all for 4.1.18), but it comes up on this list like clockwork ;-). You need to do a better search on the archives. You need to create an mbeans-descriptors.xml file (in your case, just copy the JDBCRealm stuff and change the name), usually in the same

Re: CoyoteConnector insecure

2003-03-28 Thread Bill Barker
You set the 'address' attribute on the Connector element. In your case you would set it to something like: address=127.0.0.1. This will will cause the Connector to only bind to that address. Matthias Brunner [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hello, the

Re: SSL client auth - Realms

2003-03-28 Thread Bill Barker
It would be much easier to just replace and/or extend the JDBCRealm with your own custom Realm, then trying to jump through the hoops to get a Valve working. If you must go the Valve route, then look at o.a.c.authenticator.SingleSignOn to see what to do. Assuming that you want to go with the

Re: Limiting access to mapped resources using jk2, IIS 5.0, and Tomcat 4.1.20

2003-03-28 Thread Bill Barker
It's simple enough to configure the /foo context to require BASIC authentication for the entire app, but it seems that you want more. It is also easy enough to write a Filter that does what you want. The following is an over-simplified version: public class myAccessFilter implements Filter {

Re: Tomcat context ...: list

2003-03-28 Thread Bill Barker
Unless you mark you app as 'trusted', you can't (since it's a major security hole). For this, I would just use the manager webapp that ships with Tomcat. [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hello, Can anyone give me a way where I can have a list of all the context

Re: Authenticating against Kerberos

2003-03-28 Thread Bill Barker
It should be easy enough (with a possible JNI layer). However, Tomcat currently doesn't have a KerberosRealm. If you feel like writing one, and contributing it back to Apache, I'm sure it would be appreciated. Sreedhar, Dantam [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi, In

Re: Apache1.3.27 + Tomcat 4.1+FreeBSD4.7

2003-03-22 Thread Bill Barker
While I'm close to being the number one fan of Tomcat 3.3.x ;-), I can't really see the reason to switch Tomcat versions here. Depending on what exactly you want to do, this may be easier with 4.1.x (which has support for user-directories, that 3.3.x doesn't). In any case, all currently

Re: MemoryRoles Roles and Users

2003-03-22 Thread Bill Barker
Well, by default, the GenericPrincipal class shouldn't be accessible from your Servlet/Filter (ClassLoader magic :). The best way is a do-it-yourself parsing of tomcat-users.xml. Francois Paris [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi, I am trying to list the current user

Re: Lb_factor didn't work as expected

2003-03-22 Thread Bill Barker
Which MPM are you using? AFAIK, the load balancing only works currently with the 'worker' MPM. LAGALISSE Eric [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] After several test using mod_jk 2.0.43 on Linux with apache 2.0.43 we noticed that if we define workers.properties as follow

Re: Servlet, Tomcat 3.3, IIS virtual directory access denied

2003-03-22 Thread Bill Barker
On W2K, by default, the service user doesn't have access to any remote shared drives. IMHO, this is a good thing. Cinzia S [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hello people, I've set up Tomcat to run as a service with a domain log on usr/pswd. IIS works fine redirecting

Re: [OT] Servlet process issue

2003-03-22 Thread Bill Barker
Well, in most cases, you are SOL. You have no possible way of finding out (under any current spec) that the client has hit the stop button except to try and write something back to the OutputStream and hope that you get an IOException in return (and even this is not guaranteed :). Generally, you

Re: Custom JDBCRealm

2003-03-22 Thread Bill Barker
Carl Maib [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] i am attempting the exact same thing, but have been advised it would be better to override the FormAuthenticator. this gives you direct access to the session. the solution seems perfect, however, i i can't seem to get past

Re: [JK2] JK2 Properties for Coyote Connector

2003-03-22 Thread Bill Barker
Jerry Jalenak [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi, I'm trying to get the Coyote Connector working with Apache 2.x and Tomcat 3.3.1. I've been through the Coyote 1.0rc2 doc and have updated all of the .jar files in Tomcat. What I'm missing is the JK2.properties

Re: custom JDBCRealm

2003-03-22 Thread Bill Barker
a newbie to tomcat, so perhaps i am missing something simple. if anyone has had any luck overriding any of the catalina classes in their webapp and has had some success actually running it, please lend a hand! thanks! Bill Barker [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Carl Maib

Re: tomcat responds with localhost, but refuses the connection w/ mach inename

2003-03-22 Thread Bill Barker
I'm assuming that you are using a Tomcat 3.x version. As John says, this probably means that you've disabled the Ajp12Connector, or (less likely) that it died for some reason. If the Ajp12Connector is enabled, then you'll have to post more info (e.g. log files) to get a more helpful answer.

Re: User Interface To Tomcat User List

2003-03-20 Thread Bill Barker
Over a year ago, there was an attempt to setup a forum for Tomcat. It is actually still there at http://nagoya.apache.org/jive/index.jsp. It pretty much died for lack of interest. Chris Dodunski [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] How about an eForum that in addition to

Re: java.lang.IllegalArgumentException: 0111111Englishm%2Fd%2Fyy%2E ,,

2003-03-20 Thread Bill Barker
The fix in 4.1.24 handles the case when an illegal name/value pair is sent from the browser (e.g. via a JavaScript directive in the page). The way it works is by logging the problem, and dropping the cookie. For server-side cookies (for e.g. bug #18162), you simply need to use version 1 cookies

Re: error-page used by multiple contexts

2003-03-20 Thread Bill Barker
Madere, Colin [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] So I set error-page in the /conf/web.xml for the whole server. error-page error-code401/error-code location/pub/error/401.html/location /error-page error-page error-code403/error-code

Re: compiling from source: error on jasper...

2003-03-20 Thread Bill Barker
If you are behind a corporate firewall, then you also need to uncomment the: proxy.host proxy.port proxy.use settings (and set the values to your proxy server's settings). For example: proxy.host=proxy.myfirm.com proxy.port=8080 proxy.use=true Filip Hanik [EMAIL PROTECTED] wrote in message

<    4   5   6   7   8   9   10   11   12   13   >