Re: RE: Who use Tomcat as a stand-alone server in productionenvironm ent ?

2002-03-27 Thread Kim Altintop
Hi Charlie, >> no, I don't use a security manager. My machine is secure, so I am not >> concerned about rogue servlets somehow making their way to my system. I >> would be more concerned about it if we had a more developers, used third >> party software(non-open source), etc. Hum, that's an inte

RE: Who use Tomcat as a stand-alone server in production environment ?

2002-03-27 Thread Kim Altintop
Are you using a security manager? I posted on this list as well as on tomcat-dev because I (still!) can't get it to work. Therefore I would greatly appreciate some more details about your setup. Regards, Kim --On 3/27/2002 1:12 PM -0500 "Cox, Charlie" <[EMAIL PROTECTED]> wrote: > I use TC4 in s

Re: SecurityManager - pulling my hair out

2002-03-19 Thread Kim Altintop
Hi, > One problem I saw once related to processing files in jars. Yes, you're right. I suspected this as I also had trouble with the "codeBase" attribute. It worked well when applied to a directory containing class files whereas the specified permissions where not granted to classes inside jar

Re: SecurityManager - pulling my hair out

2002-03-18 Thread Kim Altintop
Hi Frank, thank you for responding. TldLocationsCache is a tomcat internal class that provides the web.xml and tld DTDs to the SAX parser (thus avoiding it to download them from the network). The DTD for the web.xml is deployed as part of the servlet.jar. My DTD spec in web.xml is: http://java.

SecurityManager - pulling my hair out

2002-03-16 Thread Kim Altintop
Hi, I'm trying to set up Tomcat (4.0.3-LE / Sun JDK 1.4 both win2k and RedHat 7.2) to run under a SecurityManager. However, it seems that I'm unable to grant enough permissions... Weird things happen: although all Tomcat code is granted "java.security.AllPermission", the following message appears