Velocity / Avalon

2002-08-27 Thread Carsten Burstedde
Hi, I am repeating a question I posted several days ago, any answers welcome... I am using velocity 1.2 with tomcat 4.0.4 on SuSE Linux 8.0 and Sun's JDK 1.4. How do I activate log file rotation for the avalon log system used by velocity? And what to write into the velocity.properties file?

Re: Velocity / Avalon

2002-08-27 Thread Carsten Burstedde
Have you asked this question to the avalon or velocity mailing lists? grmpf, I am rather sure that I was not able to find access to these lists on the jakarta web pages at that time. Now I have got it. Sorry for bothering. Carsten -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For

Re: Velocity / Avalon

2002-08-27 Thread Carsten Burstedde
Wouldn't you do this in a cron job similar to that of other system logs? This would imply that I have to restart Tomcat at rotation time which I do not want. Velocity seems to keep the log file open forever in my configuration, so even if I rename it, it continues filling up at the new

Re: mod_jk error

2002-08-26 Thread Carsten Burstedde
Hi Nicholas, I have always assumed these error messages were caused by the browser closing the connection -- generally because the user has clicked on something else or pressed STOP. (Of course, a double-click can exhibit the same way.) The servlet doesn't know that the user is no longer

Re: tomcat - nobody

2002-03-29 Thread Carsten Burstedde
How can I start tomcat as nobody/nobody? Does it exist a script? What must I modify? I assume you are talking linux? For my setup, I created an extra tomcat user (account /home/tomcat) and installed tomcat there. In the bootup script /etc/init.d/boot.local you can put a line like - su -l -c

Re: AW: sessions, security, and the RFCs

2002-03-27 Thread Carsten Burstedde
The problem is, that if you keep the same session id after you switch to https it is possible that somebody steals your secure session. The only That's true. At least in theory, and some crackers might come pretty close. Dump sniffers and traffic loggers cannot read your data with SSL, but a

Re: AW: sessions, security, and the RFCs

2002-03-27 Thread Carsten Burstedde
I would say that you are partially right. It may be valid to protect passwords in a https session and run the rest of the app (for performance reasons) in http. This is BTW how Microsoft's Passport is used in Hotmail used by 100 millions of users so this (bad habit) is definitely not that

Re: RE: Who use Tomcat as a stand-alone server in production environm ent ?

2002-03-27 Thread Carsten Burstedde
no, I don't use a security manager. My machine is secure, so I am not concerned about rogue servlets somehow making their way to my system. I would be more concerned about it if we had a more developers, used third party software(non-open source), etc. Imho, the Security manager is one of the

Tomcat hangs

2002-03-24 Thread Carsten Burstedde
Hi, I looked through the archives a bit, but I think I have to post this: I am running Tomcat 3.3 on SuSE Linux 7.3, apache 1.3.20/mod_jk and IBM's JDK 1.3. And velocity 1.1. 1. Occasionally, tomcat freezes: no pages are being served any more. Usually, then there are over 100 apache