Re: Information on a hacked tomcat 5

2005-04-13 Thread Mark Thomas
It depends if these apps are visible to the internet. You can use a remote address filter (actually a valve not a filter in the servlet API sense of the word) to limit their accessibility. If the apps are visible, an attacker with your manager password can replace one of your trusted

Re: RES: How can I create a digest password - digest.bat is the key!

2005-04-13 Thread Mark Thomas
Paulo, I am pretty sure this won't work. Tomcat can't calculate the real password (required by the database) from the hash. The key feature of a hash is its one way nature. Also, if Tomcat could get the password from the hash so could any attacker. Mark Paulo Alvim wrote: Lorenzo, Are you using

Re: MISSING jar files and empty directories after installing TOMCAT 5.5.7 Help !!!

2005-04-12 Thread Mark Thomas
Maybe http://marc.theaimsgroup.com/?l=tomcat-userm=104978978819668w=2 Mark Parveen Pasha wrote: Can someone tell me why these files are missing after installing tomcat5.5.7? Installed instatlled tomcat 5.5.7 from jakarta-tomcat-5.5.7.tar.gz (downloaded from Apache.org) and installed jdk1.5.0_02

Re: HELP Tomcat CGI

2005-04-11 Thread Mark Thomas
Should not is rather strong and a little misleading. What you need to keep in mind is the warning in the docs. quote CAUTION - CGI scripts are used to execute programs external to the Tomcat JVM. If you are using the Java SecurityManager this will bypass your security policy configuration in

Re: Tomcat 5.0.19 restarted without explicit shutdown and startup

2005-04-11 Thread Mark Thomas
Have a look at http://jakarta.apache.org/tomcat/tomcat-5.0-doc/config/host.html#Automatic%20Application%20Deployment It describes all the circumstances where a 5.0.x Tomcat will do a redploy. Mark Richard Wang wrote: Hello, We are running Tomcat (version 5.0.19) with Apache (version:

Re: RequestDispatcher.forward() to doc located on HTTP Server

2005-04-11 Thread Mark Thomas
You might have better luck using a redirect. This should cause the client to request the alternate resource which Apache would then serve. Mark Ron Crayton wrote: Is it possible to use Request.forward() to forward a request to an html document located on an HTTP Server? I'm using Tomcat 5.5.7

Re: Realm instance within webapp

2005-04-09 Thread Mark Thomas
Graeme Pyle wrote: Hello, Can I put my Realm subclass within my webapp instead of inside Tomcat's lib directories somehow? No. Realms require access to Tomcat internals in order to work. My custom Realm subclass uses other classes within my webapp, so I'm finding I have to include more and more

Re: Container Managed Security?

2005-04-09 Thread Mark Thomas
javax.servlet.http.SessionListener For a summary, read the javadocs. For full details read the spec. Mark Bjørn T Johansen wrote: I have a small question... I am used to providing my own authentication system when developing web systems, but I am now looking into providing container based

Re: Container Managed Security?

2005-04-09 Thread Mark Thomas
Opps. Typo. That should be: javax.servlet.http.HttpSessionListener Mark Thomas wrote: javax.servlet.http.SessionListener For a summary, read the javadocs. For full details read the spec. Mark Bjørn T Johansen wrote: I have a small question... I am used to providing my own authentication system

Re: Authenticated user home folders with WebDAV

2005-04-07 Thread Mark Thomas
Much of this is beyond the simple webdav servlet provided with Tomcat. Try Apache Slide. Mark Martin Lidgard wrote: Hello. I would like to achieve the following using Tomcat 4.1: 1. use a JDBCRealm to access a mysql database containing users, passwords, and roles 2. grant WebDAV access to

Re: URL encoding/decoding of UTF-8 characters

2005-04-06 Thread Mark Thomas
It is a lack of agreed standard problem. You can force Tomcat to use UTF-8 encoding by setting the URIEncoding parameter on the connector. There are some other parameters that you can set as well. See http://jakarta.apache.org/tomcat/tomcat-5.0-doc/config/http.html Mark Steve Bosman wrote: I

Re: How to read JNDI resources?

2005-04-06 Thread Mark Thomas
You need to include a ResourceLink element in your context. Mark Andrew Watters wrote: Using tomcat 4.3.1 I have included the following in server.xml GlobalNamingResources Environment name=config_file type=java.lang.String value=test/ /GlobalNamingResources In a servlet loaded on startup I try

Re: Can you use Tomcat when you are not on line?

2005-04-06 Thread Mark Thomas
It is an IE setting - I forget which one as I don't use IE any more. Mark Walter Lee wrote: I have Tomcat installed on W2K and it says it is installed correctly. When I try the examples it tells me that I must be on line. If I am using localhost:8080 why does it need to be on line?

Re: Webdav Webfolder issue when container security enabled

2005-04-05 Thread Mark Thomas
Use /* as the servlet mapping. This will override any welcome file processing etc. Let me know which test fail with this mapping. Cheers, Mark Fernando Salazar de Paz wrote: Thanks for your help, Mark I have uncommented the servlet's readonly init parameter and security constraints for testing.

Re: My TomCat4 crash frequently

2005-04-05 Thread Mark Thomas
Maybe you have a memory leak in your app. Get a profiler and have a look. If you search the list archives there is plenty of advice for what to look for. Mark Unternaehrer Stefano wrote: Hello all. I need to finally find the cause of this problem. I have an HP webserver running HP-UX 11, 3GB

Re: Cannot modify Tomcat Contexts installed at setup

2005-04-05 Thread Mark Thomas
The app is pre-compiled. Delete the servlet mapping for /index.jsp in web.xml and then try it. (You might need to restart) Mark helena rato wrote: I use Tomcat 5.0.27 with apache Apache 2.0.40 and JK2. Just for the purpose of a test, I replace the existing index.jsp file in

Re: HttpSessionListener events after redeployment?

2005-04-05 Thread Mark Thomas
Have a look at javax.servlet.http.SessionActivationListener Clute, Andrew wrote: In my application I like to keep track of all the sessions that are currently active. So, I have a class that implements HttpSessionListener and have a static HashMap that keeps a reference to all the active sessions.

Re: Webdav Webfolder issue when container security enabled

2005-04-04 Thread Mark Thomas
Can you post you web.xml please. Thanks, Mark Fernando Salazar de Paz wrote: Deleting C:\Tomcat 4.1\webapps\webdav\index.html listings were ok If I comment welcome-files in web.xml I think it should take welcome-files defined In C:\Tomcat 4.1\conf\web.xml or not ? Now I can open PDF files with

Re: Webdav Webfolder issue when container security enabled

2005-04-01 Thread Mark Thomas
Put together some full step-by-step instructions (from a clean install of 4.1.x or 5.5.x) and I'll take another look. Mark Fernando Salazar de Paz wrote: Another thing I have problems using tcpmon from Axis. Index Out of Bounds exceptions when I put the files, and so on. I have used ethereal to

Re: Webdav Webfolder issue when container security enabled

2005-03-31 Thread Mark Thomas
I have done some testing with the latest TC4.1.x source from CVS, WinXP SP2, and tcpmon from the Axis project so I can look at the request and responses. I have a web folder and IE open on http://localhost:8080/webdav As a result of my tests I noted the following: 1. If I drag a .pdf to the

Re: BASIC Authentication for Custom Realm

2005-03-29 Thread Mark Thomas
Based on my own experience, the quickest way to work out what is happening will be to debug your way through it. See the FAQ for how to set this up: http://jakarta.apache.org/tomcat/faq/development.html Mark Mudumbai, Kalyan wrote: Hi All, I am trying to write a custom realm for my web

Re: TC55 what server version of JDK

2005-03-28 Thread Mark Thomas
The 1.5 (aka 5.0) JRE is the one you need. Tomcat does not require J2EE to be installed. Mark Ned La Celle wrote: We are currently running Tomcat 4 on Solaris 8 using Java J2EE 1.4 SDK I have been asked to setup Tomcat 5.5 on Solarix 8 . When I installed it temporarily on my Windows server it

Re: Deployment of webapplication in tomcat 5.5

2005-03-28 Thread Mark Thomas
suryadevara dushyanth wrote: Hi, I am trying to deploy a web application in my tomcat 5.5 which I am using https port. I am new to deployment of applications in Tomcat5.5. Can anybody help me here? Yes. Reading the documentation would be a good place to start. Try

Re: TC55 what server version of JDK

2005-03-28 Thread Mark Thomas
J2EE 1.4 can be thought of as just another library. It should work happily with a 1.5/5.0 JRE. Mark Ned La Celle wrote: Mark, Thanks for the response. But will the J2SE 1.5 JDK support the server functions like the J2EE 1.4 JDK ? Ned At 12:33 PM 3/28/2005, you wrote: The 1.5 (aka 5.0) JRE is

Re: changing the storage location for webdav app

2005-03-27 Thread Mark Thomas
The webdav servlet only supports accessing content within the webapp in which the servlet is used. Therefore you have two options: - move the whole webapp outside the webapps directory - on *nix you could use symbolic links but I haven't tested this For a more comprehensive webdav implementation

Re: Bug 11645 reported in Tomcat 4.0

2005-03-27 Thread Mark Thomas
This issue applies to the deprecated http/1.1 connector which is not even shipped with 5.5x 5.5.x uses the coyote connector which does not have this issue. Mark Vineet Chopra wrote: Hi, This is regarding Bug 11645 reported in Tomcat 4.0 which I came across in

Re: Problem with SSL

2005-03-27 Thread Mark Thomas
The problem appears to be that no client certificate is presented by your client. Do you get prompted by your browser to specify a client certificate? Browsers may be configured not to prompt for a certificate in any or all of the following cases: - No client certs have been imported into the

Re: Problem with SSL

2005-03-27 Thread Mark Thomas
by a security constraint that uses CLIENT-CERT authentication. /quote [EMAIL PROTECTED] wrote: By right the client should not be asked to present a cert because my server.xml setting is set to clientAuth=false --- Mark Thomas [EMAIL PROTECTED] wrote: The problem appears to be that no client

Re: Problem with SSL

2005-03-27 Thread Mark Thomas
If you don't want the clients to have to provide a client certificate, don't specify CLIENT-CERT in your web.xml Mark [EMAIL PROTECTED] wrote: I tried setting it to true and it still does not work. --- Mark Thomas [EMAIL PROTECTED] wrote: From the Tomcat documentation: quote clientAuth Set

Re: Problem with SSL

2005-03-27 Thread Mark Thomas
is. Am i right about the issue? Thanks again, you have been a great help :) --- Mark Thomas [EMAIL PROTECTED] wrote: If you don't want the clients to have to provide a client certificate, don't specify CLIENT-CERT in your web.xml Mark [EMAIL PROTECTED] wrote: I tried setting it to true

Re: Defining authorization problem

2005-03-24 Thread Mark Thomas
Not sure where exclude-pattern came from but is not part of the 2.3 or 2.4 servlet spec. Mark Guillaume Lederrey wrote: On Wednesday 23 March 2005 10.29, Geertjan Wielenga wrote: I would like to protect all my servlets except 1 or 2 ... something like : url-pattern/*/url-pattern

Re: replacing ROOT

2005-03-24 Thread Mark Thomas
As ever, if you have a simple test case that reproduces this issue then please create a bugzilla item and it will be investigated. Mark Gene Volovich wrote: This reminds me that we've been having a lot of issues with Tomcat caching (refusing to recompile) changed JSP files. Not sure if there's

Re: How to edit and automatically upload to a servlet ???

2005-03-24 Thread Mark Thomas
Have a look at webDAV. I think the Tomcat webDAV servlet is too basic for your needs but take a look at Slide. Mark John MccLain wrote: Howdy, I am using tomcat and the jakarta commons fileupload utilities. I can upload a file and store it in the db, then download it and have it come up in the

Re: address for documentation bugs? (jndi datasource examples broken)

2005-03-24 Thread Mark Thomas
All bugs, documentation or otherwise, should be reported via bugzilla. Mark Michael Stillwell wrote: Where should I send documentation bugs? There's a few problems with http://jakarta.apache.org/tomcat/tomcat-5.0-doc/jndi-datasource-examples-howto.html: 1. Section 2 says to add a slug of XML

Re: 5.5.7 Build Failed -- Missing RedirectorElement class

2005-03-22 Thread Mark Thomas
Sounds like you need to edit/create the build.properties file for your environment. For what it is worth, mine looks something like this (I have removed a couple of CVS settings) # - Default Base Path for Dependent Packages - # Replace this path with the directory path where dependencies

Re: How to trap errors while authenticating user : Custon Authentication mechanism ?

2005-03-22 Thread Mark Thomas
This is probably by design. This sort of information can be useful to an attacker. If you want to implement this yourself possible starting points would be overriding the relevant methods of org.apache.catalina.realm.JNDIRealm or extending org.apache.catalina.realm.RealmBase HTH Mark [EMAIL

Re: Persistence manager ClassNotFoundException during deserialization

2005-03-22 Thread Mark Thomas
the relevant bug# please post it or shall I post a bug report and any one close it immediately ?. On Wed, 9 Mar 2005 15:05:13 +0530, Antony Paul [EMAIL PROTECTED] wrote: It is working in 4.1.31. Thanks for the help rgds Antony Paul On Tue, 08 Mar 2005 22:52:50 +, Mark Thomas [EMAIL PROTECTED

Re: DIGEST authentication; Does it work??

2005-03-22 Thread Mark Thomas
Yes it does. I tested this extensively with both IE and Firefox. Any combination of the following is OK: Auth: BASIC, FORM, DIGEST Realm: Memory, UserDatabase, JDBC, DataSource Passwords: Cleartext, digested There is a complication when using digested passwords with the

Re: Tomcat Build-- Can I delete the \usr files?

2005-03-22 Thread Mark Thomas
Should be fine to delete but if you ever want to build Tomcat again... Mark Mark Leone wrote: I just completed a build of Tomcat 5.5.7 on Windows XP, after using the binary distribution for quite a while. Can I delete the 166 MB of stuff in the \usr directory? I didn't have any of this stuff

Re: Using RealmBase.Digest(...)

2005-03-20 Thread Mark Thomas
Mark Leone wrote: snip If you want to know what your default charset is, invoke getDigestEncoding(). Whatever value is returned is the charset you need all your users to use when they authenticate (or a charset that is compatible within the ranges of characters that the users will be

Re: Tomcat CVS Versions

2005-03-14 Thread Mark Thomas
I can't speak for TC3 but for a complete build of 4.0.x from CVS you need: jakarta-servletapi-4 (HEAD tag) jakarta-tomcat-4 (tomcat_40_ tag) jakarta-tomcat-connectors (HEAD tag) (not sure about this one) For 4.1.x you need: jakarta-servletapi-4 (HEAD tag) jakarta-tomcat-4 (HEAD tag)

Re: Tomcat 5.5.7+JRockit = windows service won't start

2005-03-14 Thread Mark Thomas
Perhaps you could try looking in the registry to see what parameters have been set there and if they are compatible with the JRockit JVM? Mark BB Commish wrote: Hi, I am running Tomcat 5.5.7 with the JRockit 1.5.0 jdk. Everything is fine if I start TC using the startup.bat approach but

Re: Persistence manager ClassNotFoundException during deserialization

2005-03-08 Thread Mark Thomas
What happens on 4.1.31? Mark Antony Paul wrote: I created a sample application and is available at http://geocities.com/antonypaul24/web.html . Any one can download it and test. rgds Antony Paul On Tue, 8 Mar 2005 10:01:13 +0530, Antony Paul [EMAIL PROTECTED] wrote: I am waiting for some

Re: RealmBase Unix Script

2005-03-07 Thread Mark Thomas
The encoding parameter is optional. If I use the digest.sh script on Fedora Core 3 all works as expected. FWIW digest.bat also works on XP SP2. I suggest using the pre-written scripts. Mark Ole Ersoy wrote: Hey everybody, I'm trying to get the following script to digest a password for me using

Re: ServletContextListener problem

2005-03-05 Thread Mark Thomas
This is bug 33463 that has been fixed in CVS and is included in 5.5.8 Mark Glenn R. Golden wrote: I'm using Spring 1.1.4 and Tomcat 5.5.7. I have a webapp with a ServletContextListener based on Spring's ContextLoaderListener. The problem I think I'm seeing is that when the listener's

Re: multiple login-config for one webapp

2005-02-21 Thread Mark Thomas
You may only have one login-config per webapp. Mark Thiwanka Wimalasuriya wrote: dear all, the servlet spec 2.4 says (page 109 of servlet-2_4-fr-spec.pdf from http://www.jcp.org/aboutJava/communityprocess/final/jsr154/ ) However, the deployment descriptor instance file must not contain multiple

[SECURITY ISSUE] Using allowLinking with deprecated HTTP 1.1 connector

2005-02-21 Thread Mark Thomas
All, A security issue has come to light where a mal-formed request may result in JSP source code disclosure. This issue only applies if all of the following are true: 1. You are using any Tomcat 4 version = 4.1.15 2. You are using the deprecated HTTP 1.1 connector

Re: CGI

2005-02-18 Thread Mark Thomas
Kelly, Steve wrote: Hi, Is the following consistent with how CGI perl scripts should execute under a tomcat webapp? I have a webapp called mywebapp and a perl script called myperl The web.xml file contains the following: servlet servlet-namecgi/servlet-name

Re: CGI

2005-02-18 Thread Mark Thomas
this mean I either need to edit the javascript or I can't do it ? Steve. -Original Message- From: Mark Thomas [mailto:[EMAIL PROTECTED] Sent: 18 February 2005 19:28 To: Tomcat Users List Subject: Re: CGI Kelly, Steve wrote: Hi, Is the following consistent with how CGI perl scripts should

Re: tomcat-user Digest 15 Feb 2005 20:05:19 -0000 Issue 5406

2005-02-16 Thread Mark Thomas
file, I just don't know what it is. Your help and time is definitely valued! --Xeth -- Forwarded message -- From: Mark Thomas [EMAIL PROTECTED] To: Tomcat Users List tomcat-user@jakarta.apache.org Date: Tue, 15 Feb 2005 19:38:40 + Subject: Re: Security Constraint Could

Re: Redirect with slash appended

2005-02-16 Thread Mark Thomas
This is by design. See http://issues.apache.org/bugzilla/show_bug.cgi?id=32424 for an explanation. Mark Felix Röthenbacher wrote: Hi I have the problem that every time I access a servlet with a URL that is equal to a servlet's directory, Tomcat redirects me to an URL with a slash appended. E.g.

Re: tomcat5.0 configuration

2005-02-16 Thread Mark Thomas
Looks like you are using the wrong url to access your servlet. Try http://host:port/context/InitParamServlet Mark Raasi Potluri wrote: Hi, I have written a simple servlet and trying to access an init param from the web.xml but the servlet is giving me a runtime error, please help, I'm stuck

Re: percent 0008 exploit

2005-02-16 Thread Mark Thomas
I can't reproduce it either. I am using the latest 4.1.x from CVS but I am 100% certain there have been no changes that would relate to this since 4.1.30. On a related topic, security bugs should be reported privately by email to [EMAIL PROTECTED] If this had been a real issue it would have

Re: Deploying with Tomcat 5.5

2005-02-16 Thread Mark Thomas
There is not a way to deploy a WAR file to a new virtual host without creating the host first. Mark [EMAIL PROTECTED] wrote: Is there not a way to deploy a WAR file in Tomcat 5.5 to a new virtual host without having to use the Admin web module to add the new host element and or manually

Re: Security Constraint

2005-02-15 Thread Mark Thomas
Could be a server.xml problem. Can you post the connector parts of your server.xml? Mark Xeth Waxman wrote: I have a new servlet which I've created - whenever you try to access this servlet, I get the security certificate dialog box (do you want to accept this certificate). However, this

Re: Memory leak in tomcat 5.0.28

2005-02-14 Thread Mark Thomas
Marx, Mitchell E (Mitch), ALABS wrote: I see the bugzilla ID: http://issues.apache.org/bugzilla/show_bug.cgi?id=33368 Anyone know if this is present in Tomcat 4.1.30? This is now fixed in CVS for TC4. Mark - To unsubscribe,

Re: Trouble getting CGI script to execute

2005-02-09 Thread Mark Thomas
Brelsfoard, Alex wrote: Luckily this server is dedicated to this one application. And I have everything backed up. Though security is ALWAYS an issue, it's at least less of an issue on this server. If today's attempts do not get this woprking, I am most likely just going to turn off Tomcat's

Re: Tomcat Realm to LDAP USING SOAP

2005-02-08 Thread Mark Thomas
Depends on what SOAP library (if any) you are using. I have seen BASIC auth work with Axis (can't remember which version but it was within the last few months). A long time ago I did try to get CLIENT-CERT working with Axis but hit a Tomcat bug. The Tomcat bug has been fixed but priorities

Re: HTTPconnector problem

2005-02-08 Thread Mark Thomas
I have just tested this on the latest TC4.1.x from CVS this works as stated in the docs. The output I see is: is secure : true port : 8080 It is possible that this is a bug that has been fixed but I don't see any changes in the archives that look relevant (I checked back to the end of 2003).

Re: Memory leak in tomcat 5.0.28

2005-02-08 Thread Mark Thomas
Marx, Mitchell E (Mitch), ALABS wrote: I see the bugzilla ID: http://issues.apache.org/bugzilla/show_bug.cgi?id=33368 Anyone know if this is present in Tomcat 4.1.30? Yes. http://issues.apache.org/bugzilla/show_bug.cgi?id=20758 is also present but is fixed in 4.1.31 Mark

Re: Trouble getting CGI script to execute

2005-02-08 Thread Mark Thomas
Exactly where did you put your script? If you follow http://jakarta.apache.org/tomcat/tomcat-5.5-doc/cgi-howto.html and use the defaults it is impossible to see the text of your script. Assuming you only uncommented the global web.xml and did not edit any of the settings, your script should be

Re: Trouble getting CGI script to execute

2005-02-08 Thread Mark Thomas
You are heading in the wrong direction. You don't need to specify a mime-type. (Neither do you need Apache.) You have a simple configuration error. See my previous post. Mark Brelsfoard, Alex wrote: OK, now we're getting somewhere. There was no entry for mime-type for file extension cgi. I

Re: Trouble getting CGI script to execute

2005-02-08 Thread Mark Thomas
Development Office Worcester Polytechnic Institute 508-831-6147 [EMAIL PROTECTED] -Original Message- From: Mark Thomas [mailto:[EMAIL PROTECTED] Sent: Tuesday, February 08, 2005 3:55 PM To: Tomcat Users List Subject: Re: Trouble getting CGI script to execute Exactly where did you put your script

Re: Trouble getting CGI script to execute

2005-02-08 Thread Mark Thomas
Brelsfoard, Alex wrote: Ok. So I did everything you said. Still not working. I get a 404 error. So I took it step by step to see if I made typos or something. If I go to http://host:port I see the directory listing including myapp This shouldn't happen. This means that myapp is a directory in

Re: Tomcat 5.5.7/DataSourceRealm/Manager app

2005-02-08 Thread Mark Thomas
It is a known bug that has been fixed and will be included in 5.5.8. Sorry. Mark Phillip Qin wrote: I am having serious issue with Tomcat Manager app using DataSourceRealm during upgrading from Tomcat 5.0.28 to 5.5.7. The issue is, after I accessed Tomcat Manager app couple of times, I got this

Re: Trouble getting CGI script to execute

2005-02-08 Thread Mark Thomas
. --Alex Alex Brelsfoard Web Applications Developer Web Development Office Worcester Polytechnic Institute 508-831-6147 [EMAIL PROTECTED] -Original Message- From: Mark Thomas [mailto:[EMAIL PROTECTED] Sent: Tuesday, February 08, 2005 4:48 PM To: Tomcat Users List Subject: Re: Trouble getting CGI

Re: Trouble getting CGI script to execute

2005-02-08 Thread Mark Thomas
Brelsfoard, Alex wrote: Yes, well this is where things get a little messy. I am using a version of Tomcat installed by a search engine software package called Endeca. They HAVE made some default settings of their own in server.xml. Ah. That explains a few things. I have not been using

Re: Trouble getting CGI script to execute

2005-02-08 Thread Mark Thomas
Brelsfoard, Alex wrote: OK. I should have spotted this from your last post. Your context path should be path=/myapp NOT path=myapp Yeah, you're right. Oops. Thanks. 1 problem down. n to go... Script should be: /station/endeca/4.5.4/i86pc-linux/webapps/myapp/WEB-INF/cgi/script.cgi Good, this is

Re: pluggable protocols in web apps

2005-02-04 Thread Mark Thomas
No useful info at the moment but this looks a lot like bug 10982 (http://issues.apache.org/bugzilla/show_bug.cgi?id=10982) that I am just starting to look at. Keep an eye on this bug report. If I make any progress I will update it. Mark Martin Goldhahn wrote: We use pluggable protocols to

Re: compiling and deployment in tomcat

2005-02-02 Thread Mark Thomas
Julio Macedo wrote: 1. Do I really have to compile a servlet manually using javac (or using another tool) or may I save it in a specific folder so Tomcat compiles it to me? You have to do this, Tomcat won't do it for you. 2. Do I really have to register my servlets in web.xml file or this process

Re: How to map client certificate to user or group?

2005-02-01 Thread Mark Thomas
What realm are you using? If you are using the memory realm you will need something like the following in tomcat-users.xml user username=CN=Mark Thomas, OU=Jakarta, O=Apache, L=London, ST=None, C=GB password=null roles=tomcat/ Mark

Re: How to map client certificate to user or group?

2005-02-01 Thread Mark Thomas
I think you would need to write a custom realm implementation. Mark Heinälä Petri wrote: Thanks! That works with listed entries, but how I can map all certificates to one role? I have plans to do further certificate checking in my application. Petri -Original Message- From: Mark Thomas

Re: Using digital signatures to log into admin webapp

2005-01-26 Thread Mark Thomas
: user username=CN=Mark Thomas, OU=Jakarta, O=Apache, L=London, ST=None, C=GB password=null roles=admin/ Mark Thank you, Edmon - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED

Re: Suggestion regarding StandardWrapper class

2005-01-23 Thread Mark Thomas
Better yet, create a bugzilla enhancement request for TC5 and attach your patch (see http://jakarta.apache.org/site/source.html#Patches). Mark Edmon Begoli wrote: Willie, You shoud probably send this e-mail to Tomcat developer list as well. Thank you, Edmon Willie Wheeler wrote: Hi all, I have a

Re: ?? Sharing the JSTL JARS and Classloading ??

2005-01-23 Thread Mark Thomas
Tony LaPaso wrote: Incidentally, in reading the Tomcat docs for Classloading, it seems that any classes in a web app's lib directory *should* be able to see classes in the shared/lib directory. Similarly, any classes in shared/lib *should* be able to see what's in common/lib. This works as you

Re: ?? Sharing the JSTL JARS and Classloading ??

2005-01-23 Thread Mark Thomas
Tony LaPaso wrote: Mark, When you cleaned out the caches (by deleting the work directory) were you able to move the standard.jar and jstl.jar to shared/lib and then be able to use JSTL? Yes. I did that -- I deleted the 'work' directory and then moved the JARs from common/lib to shared/lib and

Re: ?? Sharing the JSTL JARS and Classloading ??

2005-01-23 Thread Mark Thomas
Mark Thomas wrote: Tony LaPaso wrote: Mark, When you cleaned out the caches (by deleting the work directory) were you able to move the standard.jar and jstl.jar to shared/lib and then be able to use JSTL? Yes. I did that -- I deleted the 'work' directory and then moved the JARs from common

Re: Value for usebean class attribute is invalid

2005-01-21 Thread Mark Thomas
Try putting the class in a package. Mark [EMAIL PROTECTED] wrote: I'm attempting to get a very basic webapp up and running, but can't seem to overcome this error: org.apache.jasper.JasperException: /build/begin.jsp(1,1) The value for the useBean class attribute Question is invalid. I've made

Re: [ANN] Apache Jakarta Tomcat 5.5.7-alpha Released

2005-01-20 Thread Mark Thomas
Lionel Farbos wrote: Question : What is the reference or stable version for servlet 2.4 ? Is it Tomcat 5.0.28 or Tomcat 5.5.4 ? I don't understand why you implement 2 versions (2 branches) for this servlet API ...? http://jakarta.apache.org/tomcat/index.html has answers to these questions and

Re: TOMCAT + HttpURLConnection

2005-01-17 Thread Mark Thomas
Karthik N S wrote: ** *Hi* *Apologies* ** *I would like to use the 'HttpURLConnection' API to POST 'start/stop/reload' to Tomcat Manager URL* *'http://192.168.10.64:8080/manager/html/start?path=/XYZ' , * * So can I Code this and Do I need the Proxy Authorization to

Re: How to remotely debug with Tomcat 5.5

2005-01-14 Thread Mark Thomas
Should work in exactly the same way. Mark Rolf Zelder wrote: Hi In Tomcat 4.2 I was able to define dt_socket (see below) for remote debugging in the catalina.bat file. How do I configure a dt_socket in Tomcat 5.5 ? Cheers Rolf Catalina.bat: set JAVA_OPTS=%JAVA_OPTS% -Xdebug

Re: Apache, Tomcat, WebDAV, and Web Folders... Oh, my!

2005-01-11 Thread Mark Thomas
Garret Wilson wrote: snip Why doesn't Microsoft Web Folders ask my for my password? Why does it ignore the 401 Unauthorized and go back to asking for OPTIONS on the root? Does this have something to do with using Apache to proxy to Tomcat? Why did a non-proxied Tomcat work find on my Windows XP

Re: CGI : environment variables

2005-01-10 Thread Mark Thomas
Pierrick Brihaye wrote: Aswering to myself... Pierrick Brihaye a crit : I can't find any valuable help in the list archives. The passShellEnvironment init-parameter, which has a very promising name ;-), seems to be applicable to 4.1 releases only

Re: How do you configure webDAV

2005-01-08 Thread Mark Thomas
Liu Steve wrote: Are there known filters that will make the changes in header I suggested based on config or one must roll his own? Almost certainly, but none that I am aware of. Try Google. Mark Cheers, Steve Liu -Original Message- From: Mark Thomas [mailto:[EMAIL PROTECTED] Sent

Re: How do you configure webDAV

2005-01-07 Thread Mark Thomas
Liu Steve wrote: Hello, Is there documentation on how to configure the HTTP header properties of files delivered by the WebdavServlet? No. But there isn't any functionality within the webDAV servlet to configure either ;) The only configuration I could find for the WebdavServlet are samples with

Re: Socket Exception - Heavy load

2005-01-07 Thread Mark Thomas
Please do not hijack another message thread. If you wish to post to the list create a new message and send it. DO NOT reply to a list message and change the subject. Thread aware mail clients still recognise this as a reply and do not show it as a new message. Mark [EMAIL PROTECTED] shyam

Re: Serving files from Tomcat...sorta

2005-01-06 Thread Mark Thomas
Have you looked at using webDAV? Tomcat has a basic implementation or there is the slide project. Mark Will Hartung wrote: Simply put, we have a system where folks are able to upload files into an 'incoming' directory, and download any of their files from any place below their home directory. We

Re: catalina.out export to another file

2005-01-06 Thread Mark Thomas
Please: - Don't post messages multiple times. It is more likely to decrease rather than increase your chances of receiving an answer to your question. - Don't hi-jack another thread. Clicking reply and changing the subject line is NOT the right way to post a message on a new topic as it

[OT] Thread hi-jacking - How to avoid

2005-01-05 Thread Mark Thomas
All, There have been a number of unintentional thread hi-jackings recently and I wanted to clarify why it seems to be increasing, how it can happen and how to avoid it. Why the increase? = I don't think there has been an increase. What has increased is the use of good thread

Re: Tomcat 4.0 admin url?

2005-01-05 Thread Mark Thomas
For a default install, using a browser on the same box as tomcat: http://localhost:8080/manager/html You will need to edit conf/tomcat-users.xml to add a user that has the manager role. Mark Scott Purcell wrote: Hello, A while back, I was learning Tomct 4.1.31. Anyway, back then I used a

Re: java.lang.NullPointerException in tomcat 5.5.4

2005-01-03 Thread Mark Thomas
1. Please don't post the same message multiple times. 2. Please don't hijack another thread - it plays havoc with thread-aware mail clients. You need to start a new thread and then your message may get answered. Mark ssk 2001 wrote: Hi I installed tomcat 5.5.4 ,jdk1.5 and beanfactory 1.0.1. When

Re: ClientAbortException in Tomcat 4.1.31 console

2004-12-30 Thread Mark Thomas
for your help. -Message d'origine- De : Mark Thomas [mailto:[EMAIL PROTECTED] Envoy : mercredi 29 dcembre 2004 19:36 : Tomcat Users List Objet : Re: ClientAbortException in Tomcat 4.1.31 console This is normal. Typically, it happens when the user clicks stop on their browser before the page has

Re: WebDAV and redirects

2004-12-30 Thread Mark Thomas
trying to get the last word on this, and it looks like Mark Thomas or others may be able to set the record straight. Not sure I can set the record straight completely as it is a while since I played with any of this. TC4 and TC5 handle requests for http://www.example.com/folder differently

Re: Session restart replication when using jsvc

2004-12-30 Thread Mark Thomas
Bill Barker wrote: This is the old, buggy, code that ships with Tomcat. You need to get the code from commons-daemon CVS HEAD if you want shutdowns (and restarts) to work properly. Bill, Just thinking ahead to the next 4.1.x release - do you know if there is a commons-daemon release that

Re: ClientAbortException in Tomcat 4.1.31 console

2004-12-29 Thread Mark Thomas
This is normal. Typically, it happens when the user clicks stop on their browser before the page has finished loading. Mark MERCADIER Didier ROSI/SIFAC wrote: Hi, I'm running a servlets application (with Xerces and Xalan), and I have a lot of ClientAbortException in Tomcat console. My

Re: windows-1251 (Russian encoding)

2004-12-28 Thread Mark Thomas
There have been lots of posts about this and for a while now 99.9% of the problems have been caused by configuration or coding problems. I would suggest building up a very simple test case along the following lines and making sure everything works as expected at each stage. 1. Simple JSP that

Re: va.lang.SecurityException in tomcat 5.5.4

2004-12-28 Thread Mark Thomas
ssk 2001 wrote: Hi I installed tomcat5.5.4 and jdk1.5 in the windows xp machine. Iam using beanfactory 0.99 framework. I get this error , can anybody help on this... 1. Please don't post the same message multiple times if you don't get a reply straight away. At best it does nothing to help and

Re: questions on WebDAV implementation

2004-12-28 Thread Mark Thomas
Garret Wilson wrote: * I note that WebDAVServlet keeps a static SimpleDateFormat around for quickly formatting the creation date/time. The Java API docs for DateFormat indicate that date formats are not synchronized. Does this raise the potential for corrupted date printing, should multiple

Re: questions on WebDAV implementation

2004-12-28 Thread Mark Thomas
Peter Crowther wrote: From: Mark Thomas [mailto:[EMAIL PROTECTED] The best way forward is to create a bugzilla item for this and list the issues you find in that. Even better, would be if you had patches for some (or all) of these ;) The Bodington III project over here in the UK will also have

RE: Turning on verbose mode in the JVM

2004-12-23 Thread Mark Thomas
It is an environment variable. Have a look in catalina.bat or catalina.sh for more info on this and other environment variables. Mark -Original Message- From: Tennessee Leeuwenburg [mailto:[EMAIL PROTECTED] Sent: Wednesday, December 22, 2004 11:47 PM To: Tomcat Users List Subject:

<    1   2   3   4   5   >