Problem with security?

2005-06-10 Thread Gagnon, Joseph M \(US SSA\)
Hello, I'm new to JSP development (and to dynamic web development as a whole) so please bear with me. I'm investigating using JSP/Java for a project at my workplace. My system (test server, if you will) is a PC running Windows XP Pro and I am using Tomcat 5.5.9. I have a situation where I want

RE: Problem with security?

2005-06-10 Thread Caldarale, Charles R
From: Gagnon, Joseph M (US SSA) [mailto:[EMAIL PROTECTED] Subject: Problem with security? I have a situation where I want to be able to provide user access to an application by determining the identity of the requesting user, without them having to go through a login procedure. Those seem

RE: Problem with security?

2005-06-10 Thread Peter Crowther
From: Gagnon, Joseph M (US SSA) I have a situation where I want to be able to provide user access to an application by determining the identity of the requesting user, without them having to go through a login procedure. OK. So what identity can the browser present that you wish to

Re: Problem with security?

2005-06-10 Thread egan0019
Look into the ServletRequest interface. That interface, which is extended in HttpServletRequest. You can call the getRemoteAddr(), getRemoteHost(), etc. methods. You receive null in your getRemoteUser because the user hasn't been 'authenticated' yet. On 10 Jun 2005, Gagnon, Joseph M (US SSA)

RE: Problem with security?

2005-06-10 Thread Gagnon, Joseph M \(US SSA\)
I believe I've covered that all in my original message. Read further. -Original Message- From: egan0019 [mailto:[EMAIL PROTECTED] Sent: Friday, June 10, 2005 10:10 AM To: Tomcat Users List Subject: Re: Problem with security? Look into the ServletRequest interface. That interface

RE: Problem with security?

2005-06-10 Thread Robert Harper
M (US SSA) [mailto:[EMAIL PROTECTED] Sent: Friday, June 10, 2005 8:43 AM To: Tomcat Users List Subject: RE: Problem with security? I believe I've covered that all in my original message. Read further. -Original Message- From: egan0019 [mailto:[EMAIL PROTECTED] Sent: Friday, June 10

RE: Problem with security?

2005-06-10 Thread Gagnon, Joseph M \(US SSA\)
me know. -Original Message- From: Robert Harper [mailto:[EMAIL PROTECTED] Sent: Friday, June 10, 2005 10:59 AM To: 'Tomcat Users List' Subject: RE: Problem with security? I think you have missed the point that you cannot get user information unless the user authenticates. You don't want

RE: Problem with security?

2005-06-10 Thread Robert Harper
9:19 AM To: Tomcat Users List Subject: RE: Problem with security? Did I not say that I'm new to this? I made no mention to whether or not I was trying to make it secure. This is only meant to be used within my company's intranet and my intention was to take the user account and then compare

Re: Problem with security?

2005-06-10 Thread Patrick Thomas
in mind I'm new at this), please let me know. -Original Message- From: Robert Harper [mailto:[EMAIL PROTECTED] Sent: Friday, June 10, 2005 10:59 AM To: 'Tomcat Users List' Subject: RE: Problem with security? I think you have missed the point that you cannot get user information

Re: Problem with security?

2005-06-10 Thread Robert r. Sanders
I'm new at this), please let me know. -Original Message- From: Robert Harper [mailto:[EMAIL PROTECTED] Sent: Friday, June 10, 2005 10:59 AM To: 'Tomcat Users List' Subject: RE: Problem with security? -- Robert r. Sanders Chief Technologist iPOV (334) 821-5412

Re: Problem with security?

2005-06-10 Thread Mark
Not if you are using mutually authenticated SSL. On 6/10/05, Caldarale, Charles R [EMAIL PROTECTED] wrote: From: Gagnon, Joseph M (US SSA) [mailto:[EMAIL PROTECTED] Subject: Problem with security? I have a situation where I want to be able to provide user access to an application

Re: Problem with security?

2005-06-10 Thread Nikola Milutinovic
Gagnon, Joseph M (US SSA) wrote: Did I not say that I'm new to this? I made no mention to whether or not I was trying to make it secure. This is only meant to be used within my company's intranet and my intention was to take the user account and then compare it with a set of registered users

xalan problem with security manager

2005-01-14 Thread Michal Kwiatek
Hi all, I can't make xalan work when I run tomcat with security manager. All I get is java.lang.ExceptionInInitializerError (see stack trace below). It works fine without security manager. Has any of you used xalan on tomcat with secuirity manager? What privileges should I grant to the code? I

Re: xalan problem with security manager

2005-01-14 Thread Greg Lappen
Michael- If you suspect the error is related to the security manager, run tomcat with the following environment variable set: export CATALINA_OPTS=-Djava.security.debug=access:failure This will put logging for the security manager in your catalina.out file (or your applications log file if

Re: problem with security manager, plesk and mysql (catalina.policy ignored?)

2004-10-30 Thread Alfonso Alba García
I see now where my problem can be. If I extract the war file to directory ${catalina.home}/psa-webapps/mydomain.com/myapplication/ and insert in the policy file grant codeBase file:${catalina.home}/psa-webapps/mydomain.com/myapplication/ { permission java.net.SocketPermission localhost,resolve;

problem with security manager, plesk and mysql (catalina.policy ignored?)

2004-10-29 Thread Alfonso Alba García
Hi everybody, I have problems when connecting to mysql. I'm getting the following exception when trying to connect to a mysql database: (SQLException): java.sql.SQLException: Unable to connect to any hosts due to exception: java.security.AccessControlException: access denied

problem with security-constraint with Tomcat 5

2004-10-18 Thread Mercado . Maria
I'm looking into migrating our project from Tomcat 4.1.30 to Tomcat 5.0.28. We're also using Tiles and Struts 1.1. The problem is that Tomcat 5 seems to be confused with a url pattern that works with Tomcat 4. Here's the pertinent parts of web.xml (I get the same results with 2.3 or 2.4

RE: problem with security-constraint with Tomcat 5

2004-10-18 Thread Shapira, Yoav
] Sent: Monday, October 18, 2004 10:08 AM To: [EMAIL PROTECTED] Subject: problem with security-constraint with Tomcat 5 I'm looking into migrating our project from Tomcat 4.1.30 to Tomcat 5.0.28. We're also using Tiles and Struts 1.1. The problem is that Tomcat 5 seems to be confused with a url

RE: problem with security-constraint with Tomcat 5

2004-10-18 Thread Mercado . Maria
: problem with security-constraint with Tomcat 5 Hi, Could this be something that changed (or rather, was clarified) in the Servlet Spec between version 2.3 (which Tomcat 4.x implements) and 2.4 (which Tomcat 5.x implements)? ;) Yoav Shapira http://www.yoavshapira.com -Original Message- From

Re: problem with security-constraint with Tomcat 5

2004-10-18 Thread Remy Maucherat
On Mon, 18 Oct 2004 10:45:23 -0400, Mercado . Maria [EMAIL PROTECTED] wrote: Thanks for the suggestion, Yoav. I looked but I didn't see anything that stated that a url pattern with 2 dots is illegal. Most systems I am aware of consider that the extension is the last dot. Otherwise, it starts

Re: problem with security-constraint with Tomcat 5

2004-10-18 Thread Bill Barker
18, 2004 7:45 AM Subject: RE: problem with security-constraint with Tomcat 5 Thanks for the suggestion, Yoav. I looked but I didn't see anything that stated that a url pattern with 2 dots is illegal. - Cecile Mercado -Original Message- From: Shapira, Yoav [mailto:[EMAIL PROTECTED] Sent

problem with security manager.

2004-08-24 Thread Shilpa Nalgonda
I am running Tomcat4.1.30 on windows 2000, with security option turned on. My java application which is using JDK 1.4, connects to the the credit card authorizing company called verisign, and returns the approval authorization code. I have installed the digital certificate on $TOMCAT_HOME\certs

problem with security manager and manager webapp

2004-03-16 Thread Jason Keltz
Hi. I've been using the manager webapp, but after enabling the security manager (-security on tomcat startup), the manager doesn't run any longer, giving this error: type Exception report message description The server encountered an internal error () that prevented it from fulfilling this

Re: problem with security manager and manager webapp

2004-03-16 Thread Jeanfrancois Arcand
Jason Keltz wrote: Hi. I've been using the manager webapp, but after enabling the security manager (-security on tomcat startup), the manager doesn't run any longer, giving this error: type Exception report message description The server encountered an internal error () that prevented it

Re: problem with security manager and manager webapp

2004-03-16 Thread Jason Keltz
Hi Jeanfrancois, I'm not sure now if it's a bug or not. I realized that the problem is that the code in catalina.policy to allow access refers to ${catalina.home}: // These permissions apply to the container's core code, plus any additional // libraries installed in the server directory grant

Re: problem with security manager and manager webapp

2004-03-16 Thread Jeanfrancois Arcand
Jason Keltz wrote: Hi Jeanfrancois, I'm not sure now if it's a bug or not. I realized that the problem is that the code in catalina.policy to allow access refers to ${catalina.home}: // These permissions apply to the container's core code, plus any additional // libraries installed in the

problem configuring security appn with Netscape Directory Structure

2002-02-14 Thread jay n gaba
hi I am trying to run the sample security example (i.e http://localhost:8080/examples/jsp/security/protected/) using netscape directory structure.I can connect to ldap but while trying to connect to the application I receive an invalid user or password error. I have successfully connected

Problem with security constraints on /

2001-08-16 Thread Johannes Lehtinen
Hello, Tomcat users! Earlier this week I stumbled on the following problem. I already found a solution to it but I am still not sure whether I had misconfigured things or whether this is a Tomcat bug that should be filed (didn't find an existing record). Could someone with more expertise