How to close an HTTP port on Apache Tomcat 4?

2002-06-07 Thread Luca Ventura
Hello everybody! I use Apache Tomcat 4.0 as Web Server an I would like to know how I can close an opened port (eg. 8000 or 9000) to avoid that someone can use it to enter in my system. Which configuration files I must modify? Thanks a lot in advance! Luca

HELP!! I need urgent information about Tomcat's configuration

2002-06-07 Thread Luca Ventura
Hello everybody! I have the following problem I have installed Internet Information Services (IIS) as Web Server on my local machine and Apache Tomcat 4.0 as plug-in of IIS to support JSP-Servlets (to do this I installed an ISAPI filter in IIS that redirects all my JSP-servlet requests to

AW: How to close an HTTP port on Apache Tomcat 4?

2002-06-07 Thread Ralph Einfeldt
Just remove the HTTP Connector entry in server xml. (Asuming that you want to run tomcat behind a web server) -Ursprüngliche Nachricht- Von: Luca Ventura [mailto:[EMAIL PROTECTED]] Gesendet: Freitag, 7. Juni 2002 08:28 An: tomcat-user; tomcat-dev Betreff: How to close an HTTP port

R: How to close an HTTP port on Apache Tomcat 4?

2002-06-07 Thread Luca Ventura
Thanks a lot Ralph!:-) Luca -Messaggio originale- Da: Ralph Einfeldt [mailto:[EMAIL PROTECTED]] Inviato: venerdì 7 giugno 2002 8.32 A: Tomcat Users List Oggetto: AW: How to close an HTTP port on Apache Tomcat 4? Just remove the HTTP Connector entry in server xml. (Asuming that

Re: Socrates (slightly off topic)

2002-06-07 Thread Markus Kirsten
Somewhat more off-topic: wget was originally included with Mac OS X and was later replaced with curl. Curl has got pretty many features and works just as wget if you give curl the -o flag. Basiclly curl is a browser without support for rendering HTML. Markus On torsdag, juni 6, 2002, at

Encrypted passwords in a JDBC Realm

2002-06-07 Thread Markus Kirsten
I've just went through the documentation concerning setting up a JDBC Realm as well as some of the MySQL documentation. It seems to me that to use encrypted passwords I need to manually encrypt them before I store them in my database since it is not possible to set the digest attribute in the

Apache to Tomcat

2002-06-07 Thread Frans Stofberg
How do I set up Tomcat 4.x and Apache so that Tomcat serves as an app server and Apache as the Web server? please help -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]

Security problem?

2002-06-07 Thread Laura
Hi all, it might be that I have a security problem and you should tell me if I am right. Well, I have a server with an ecommerce application: an user can buy something a when he has to pay the servlet of the web application executes a redirect to my servlet (in a different server) passing me

AW: Security problem?

2002-06-07 Thread Power-Netz \(Schwarz\)
-Ursprüngliche Nachricht- Von: Laura [mailto:[EMAIL PROTECTED]] Gesendet: Freitag, 7. Juni 2002 10:47 An: [EMAIL PROTECTED] Betreff: Security problem? Hi all, it might be that I have a security problem and you should tell me if I am right. Well, I have a server with an

Re: Security problem?

2002-06-07 Thread Phillip Morelock
On 6/7/02 1:47 AM, Laura [EMAIL PROTECTED] wrote: Hi all, it might be that I have a security problem and you should tell me if I am right. Well, I have a server with an ecommerce application: an user can buy something a when he has to pay the servlet of the web application executes a

RE: Security problem?

2002-06-07 Thread Barney Hamish
This is one way, there are probably others. By using encryption you can make such a transaction secure. If site X is where they buy the thing and site Y is your site: You could get site X to pass two things: - the amount of money the user is to pay in clear text - the amount of money the user is

Re: Security problem?

2002-06-07 Thread Phillip Morelock
On 6/7/02 1:54 AM, Barney Hamish [EMAIL PROTECTED] wrote: - the amount of money the user is to pay encrypted with the private key of site X as a digest. On site Y you recieve both. You decrypt the encrypted amount with site X's public key. If the clear text amount matches the encrypted

Re: Security problem?

2002-06-07 Thread Nikola Milutinovic
On 6/7/02 1:54 AM, Barney Hamish [EMAIL PROTECTED] wrote: - the amount of money the user is to pay encrypted with the private key of site X as a digest. On site Y you recieve both. You decrypt the encrypted amount with site X's public key. If the clear text amount matches the

Re: Security problem?

2002-06-07 Thread Phillip Morelock
On 6/7/02 2:14 AM, Nikola Milutinovic [EMAIL PROTECTED] wrote: On 6/7/02 1:54 AM, Barney Hamish [EMAIL PROTECTED] wrote: - the amount of money the user is to pay encrypted with the private key of site X as a digest. On site Y you recieve both. You decrypt the encrypted amount with site

RE: Security problem?

2002-06-07 Thread Barney Hamish
Public and private keys can both generally be used to encrypt and decrypt.* With this algorithm it's just as hard to try and crack the key in either direction. In fact site X encrypting the message with it's private key is the only way you can be sure that the message originated from site X.

Re: Security problem?

2002-06-07 Thread Phillip Morelock
On 6/7/02 2:23 AM, Barney Hamish [EMAIL PROTECTED] wrote: Public and private keys can both generally be used to encrypt and decrypt.* With this algorithm it's just as hard to try and crack the key in either direction. In fact site X encrypting the message with it's private key is the only

Re: Security problem?

2002-06-07 Thread Nikola Milutinovic
So, what is suggested is that the shopping cart server creates the final payment report and signs it with it's private key/certificate. The financial transaction server would verify that *that* is an authentic request from the shopping cart server. Ok, it was signing. This still

Major server crash due to BAD packet

2002-06-07 Thread Stefan.Landro
Hi, there! I just had a major server crash with tomcat 4.0.3 caused by a bad packet. The exception was probably caused by POSTing (For some reason it says GET in the dump ) a lost of data to a servlet, but I cant tell for sure. Does anyone know what this could be? Cheers, Stef.

AW: Security problem?

2002-06-07 Thread Power-Netz \(Schwarz\)
This is one way, there are probably others. By using encryption you can make such a transaction secure. If site X is where they buy the thing and site Y is your site: You could get site X to pass two things: - the amount of money the user is to pay in clear text - the amount of money the

Re: Security problem?

2002-06-07 Thread Phillip Morelock
On 6/7/02 2:30 AM, Nikola Milutinovic [EMAIL PROTECTED] wrote: Just as Barney Hamish pointed out, with RSA (and I think DSA) keys, you can encrypt/decript both ways. It is just that these two modes of operation have been established as common. And yes, a signed object is not encrypted. What

RE: Security problem?

2002-06-07 Thread Barney Hamish
The point of encrypting with the private key is exactly that it can be decrypted by anyone _with_ the public key. If a message can be decrypted with the public key then that means that only the someone who knows the private key could have encrypted it. In our example, if you're sure that the

AW: Security problem?

2002-06-07 Thread Ralph Einfeldt
HTTPS Alone won't help much in the described szenario. HTTPS can't enshure that the user is not manipulating the request. To disable that you have to sign the data. I think it's better to use a complete different architecture. If this has to be done with EJB as you suggest, a WebService over

Re: AW: Security problem?

2002-06-07 Thread Laura
Hi all, thanks for your advices. Well, I have never worked with encryption. Well I know what is RSA, but how can I implement it? Do I have to install something? What have I to use to implement ansd use an RSA alghoritm? Thanks Laura Alle 11:33, venerdì 7 giugno 2002, Power-Netz

tomcat with IIS

2002-06-07 Thread Chris Ruegger
We are attempting to get IIS to work with Tomcat such that IIS forwards JSP requests to Tomcat and otherwise handles static content. Has anyone gotten this to work? Thanks, Chris

RE: tomcat with IIS

2002-06-07 Thread Steven Sporen
Use hard links (FQ URL eg. http://wwwiis.xxx.com/graphics1.gif vs. ./graphics1.gif) on your jsp pages ref the static content on the IIS service. Question is why would you want to - twice the risk of being hacked. -Original Message- From: Chris Ruegger [mailto:[EMAIL PROTECTED]] Sent: 07

Re: tomcat with IIS

2002-06-07 Thread Chris Ruegger
Steve, I think you misunderstood my question. Here is what we want to do. We want to put all of our files, static html, images, jsps under the IIS server and tell Tomcat that its docroot is under IIS (point to the IIS docroot from Tomcat's server.xml file) When the user asks for an HTML page,

AW: Security problem?

2002-06-07 Thread Power-Netz \(Schwarz\)
In response to M. Schwarz, with public key encryption schemes know the clear text of really doesn't help very much at cracking the private key. Besides which, the user (presumably) knows what the price of the thing they are buy anyway right? So they know what the cleartext of the message

AW: AW: Security problem?

2002-06-07 Thread Power-Netz \(Schwarz\)
Hi all, thanks for your advices. Well, I have never worked with encryption. Well I know what is RSA, but how can I implement it? Do I have to install something? What have I to use to implement ansd use an RSA alghoritm? javax.crypto classes could help you. M.Schwarz -- To

secure aplications with JDBCRealm

2002-06-07 Thread Urtzi Larrazabal
Hi ! I am trying to secure my application thought JDBCRealm # 2002-06-07 12:24:05 - Ctx(/Myaplication) : Exception in R( /Myaplication + + null) - java.lang.RuntimeException: JDBCRealm.checkConnection: java.lang.ClassNotFoundException: org.gjt.mm.mysql.Driver at

RE: tomcat with IIS

2002-06-07 Thread Steven Sporen
Hi, I take it you've read through something along the lines of http://www.aoindustries.com/docs/jakarta-tomcat-3.2b6/tomcat-iis-howto.h tml And done http://www.google.com/search?hl=enie=UTF8oe=UTF8q=isapi_redirect.dll; btnG=Google+Search Have you confirmed that the ISAPI filter is installed

RE: tomact not staring

2002-06-07 Thread puneet sachar
hi shapira ..well u r right.. tomcat 4.0.3 is working at my home not the new one.. i'll try that out and if i stuck i'll let u know tahnx a lot u all developers Puneet --- Shapira, Yoav [EMAIL PROTECTED] wrote: Howdy, We're going to need a bit more than that to help you ;) 1) How do

Tomcat+Apache

2002-06-07 Thread Vico Palomino, José Antonio
Hello! My english is bad, sorry. I need integrated Tomcat with Apache. :-? Please help! PD: si alguien sabe como integrar Tomcat bajo apache con una RedHat que me eche un cablecito, por favor. -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail:

Configuration

2002-06-07 Thread Zsaroq R Powe
What is the best solution for integrating tomcat and apache on a Solaris 8 system? Meaning what version of Apache, Tomcat and what connector should I use( mod_jk or webapps). Thanks in advance. -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL

RE: Tomcat+Apache

2002-06-07 Thread chris . karema
http://jakarta.apache.org/tomcat/tomcat-4.0-doc/config/ajp.html -Original Message- From: Vico Palomino, José Antonio [mailto:[EMAIL PROTECTED]] Sent: 07 June 2002 11:44 To: 'Tomcat Users List' Subject: Tomcat+Apache Importance: High Hello! My english is bad, sorry. I need integrated

AW: Tomcat 4.0.1 and memory usage

2002-06-07 Thread Friedli Beat
I use a batch-file that looks like that - @echo off echo echo Usage: %0 jdk_home tomcat_home (classic/hotspot/server) echo NOTE:You MAY NOT use spaces in the path names. If you know how echo to fix this, please tell me. echo

RE:access to secure aplications with JDBCRealm authentification

2002-06-07 Thread Urtzi Larrazabal
Hi ! I am trying to secure my application thought JDBCRealm When I access to my application and after introducing the required user and password I have the following error. # 2002-06-07 12:24:05 - Ctx(/Myaplication) : Exception in R( /Myaplication + + null) -

RE: access to secure aplications with JDBCRealm authentification

2002-06-07 Thread Stefan.Landro
Depends of course. If you want to make the package visible to all webapps, then you place it in /common/lib There are docs on this on the tomcat homepage. Stef. -Original Message- From: Urtzi Larrazabal [mailto:[EMAIL PROTECTED]] Sent: Freitag, 7. Juni 2002 13:43 To: Tomcat Users

AW: access to secure aplications with JDBCRealm authentification

2002-06-07 Thread Friedli Beat
Put it in the common/lib mit freundlichen Grüssen Galexis AG Beat Friedli · SW-Entwicklung (DDIS/ASW) Grubenstrasse 11 · CH-3322 Schoenbuehl tel: +41 (0)31 858 72 32 · fax: +41 (0)31 858 78 81 -Ursprüngliche Nachricht- Von: Urtzi Larrazabal [mailto:[EMAIL PROTECTED]] Gesendet:

Re: AW: Security problem?

2002-06-07 Thread peter lin
There's been a lot of discussion already reguarding Public Key Cryptography. Just to make sure I am reading your post correctly, the process is the following: 1. user adds items to shopping cart on e-commerce server A 2. when user is ready to check out, the following process occurs.

Re: Configuration

2002-06-07 Thread @Basebeans.com
Subject: Re: Configuration From: Bruno V [EMAIL PROTECTED] === There are some info on Jguru. Let me know if you find more pages. Check mod_jk (APJ13) by Detlev Beutner : http://www.acg-gmbh.de/mod_jk/solaris/index.htm http://bruno.vernay.free.fr/HowTo/Apache-tomcat/bWebServer/references.html

Details on IIS/Tomcat Question

2002-06-07 Thread Harlan Messinger
Hi, my colleague Chris got here before I had signed onto the group, but let me fill in some details about our attempt to get IIS to work with Tomcat. We want to do this because we have JSP files sharing directories with static HTML files, *and* we also have Cold Fusion files. This is Tomcat

RE: Details on IIS/Tomcat Question

2002-06-07 Thread Wagoner, Mark
I couldn't help noticing that the extension_uri in the Registry entry has isapi_redirect.dll instead of isapi_redirectOR.dll. I finally noticed that the instructions say to download the Tomcat 3.3 isapi_redirect.dll! Then why is there a file with a different name in the Tomcat 4.0.3 area,

Problems in redirecting requests from IIS to Tomcat 4

2002-06-07 Thread Luca Ventura
Hello everybody! I have installed Internet Information Services (IIS) as Web Server and Apache Tomcat 4.0 as plug-in of IIS to support JSP-Servlets (to do this I installed an ISAPI filter in IIS that redirects all my JSP-servlet requests to Tomcat). All works fine when I am on localhost but if

RE: Problems in redirecting requests from IIS to Tomcat 4

2002-06-07 Thread Wagoner, Mark
If I recall... Go to the Properties page of the web server and select the Directory Security tab. Click the Edit button for Anonymous Access and Authentication Control. Select Anonymous Access and un-select everything under Authenticated Access. HTH -Original Message- From: Luca

R: Problems in redirecting requests from IIS to Tomcat 4

2002-06-07 Thread Luca Ventura
Hello! Thank you for your help! Anyway if you are right I don't understand why IIS doesn't ask me the network login and password for all other sites that must not be redirected to Tomcatin fact IIS ask me login and password ONLY for the sites that are redirected to Tomcat...:-( What do you

access to HttpHeader

2002-06-07 Thread Ekkehard Gentz
hi, is there a way to have access to the HttpHeader from Tomcat ? I want to set cache-controls and expires thanks ekkehard -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]

RE: Tomcat 4.0.1 and memory usage

2002-06-07 Thread Shapira, Yoav
Howdy, -verbosegc outputs to the console via System.out.println(). Unless you're doing something to trap System.out(), the verbosegc statements would go in $CATALINA_HOME/logs/catalina.out. As a sidenote, the default maximum memory Java allows is 64MB. Unless you use -Xmx you will never exceed

Re: Security problem?

2002-06-07 Thread Nikola Milutinovic
HTTPS Alone won't help much in the described szenario. HTTPS can't enshure that the user is not manipulating the request. To disable that you have to sign the data. I think it's better to use a complete different architecture. If this has to be done with EJB as you suggest, a WebService

RE: tomcat probs

2002-06-07 Thread Shapira, Yoav
Howdy, See Mr. Morelock's reply: you need the JDK, not the JRE, as your $JAVA_HOME. And if you have a lot of JSPs, consider using Jikes at runtime or JSPC to pre-compile your JSPs, as Javac has a memory leak (see the README file). To The Powers That Be: We have to put this question in a FAQ

RE: access to HttpHeader

2002-06-07 Thread Wagoner, Mark
request.getHeader() response.setHeader() -Original Message- From: Ekkehard Gentz [mailto:[EMAIL PROTECTED]] Sent: Friday, June 07, 2002 9:01 AM To: Tomcat Users List Subject: access to HttpHeader hi, is there a way to have access to the HttpHeader from Tomcat ? I want to set

RE: tomcat 4.0.3 servlet having problem loading class via rmi ?

2002-06-07 Thread Shapira, Yoav
Howdy, 1st thing that comes to mind from looking at the stack trace, not having tried tomcat-JINI connectivity: is that file (com.sun.jini.reggie.RegistrarProxy) in your runtime classpath? It should be in the /WEB-INF/lib or /WEB-INF/classes (or one of the common lib/classes directories).

Problem with doPost() method executed twice in parallel

2002-06-07 Thread rosset . synlog
Hi everybody, excuse my poor english ;) , I decided to subscribe because I have a serious problem blocking me and my developments since one week: I work on an classical application using servlet and jsp and a database (INGRES) but no EJB.

RE: Details on IIS/Tomcat Question

2002-06-07 Thread Harlan Messinger
OK, thanks. You're right, it still didn't help :), but I got my green arrow back. I can't help wondering about the number of people who try to link IIS and Tomcast 4 together, *all* having to go through this exercise. -Original Message- From: Wagoner, Mark [mailto:[EMAIL PROTECTED]]

Re: Problem with doPost() method executed twice in parallel

2002-06-07 Thread Tom Oinn
[EMAIL PROTECTED] wrote: And suddenly, whereas the code is executing in an extern method, the traces situed at the begin of doPost() method are displayed a second time !!! It looks like if doPost() method was executed a second time IN PARALLEL of the first

tomcat 4 having trouble with loading rmi classes from codebase

2002-06-07 Thread java guru
Hi., i am trying to use servlet with tomcat 4.0.3 that tries to load classes from rmi codebase defined by http protocol. catalina.out log is reporting classnot found exception while other stand alone clients are working fine. Read somewhere about Jar handler problems in tomcat but that

Re: Problem with doPost() method executed twice in paralle

2002-06-07 Thread rosset . synlog
Maybe you're right but I forgot to precise some things : - for the moment I'm the only user testing my application so there is no risk that another user creates a new thread by connecting. - the external classes are objects stored in session __

R: Problems in redirecting requests from IIS to Tomcat 4 (new Information)

2002-06-07 Thread Luca Ventura
Escuse me all in the forum I want to point out that in my server.xml of Tomcat I have the following entries: !-- Define the default virtual host -- Host name=localhost debug=0 appBase=webapps unpackWARs=true !-- Define the top level container in our container hierarchy -- Engine

Problem With Params In Web.xml

2002-06-07 Thread Marek, Tomas
Guys, could anybody help, please? Having a servlet reading parameters in init() method but it reads nothing. The servlet is in path install_dir/webapps/ROOT/WEB-INF/classes/examples and web.xml is in path install_dir/webapps/ROOT/WEB-INF. The content of web.xml looks like the following: ?xml

Problems in redirecting requests from IIS to Tomcat 4 (2nd new Information)

2002-06-07 Thread Luca Ventura
I forgot to say another thing... In my workers.properties file I have the following entries: worker.ajp12.port=8007 worker.ajp12.host=localhost worker.ajp12.type=ajp12 .. worker.ajp13.port=8009 worker.ajp13.host=localhost worker.ajp13.type=ajp13 Must I set www.mydomain.com instead of

RE: Problem With Params In Web.xml

2002-06-07 Thread Aline
Hi, Try to init your parameters like yhis : web-app context-param param-nameconfigFile/param-name param-value/WEB-INF/conf.xml/param-value descriptionpath .../description /context-param servlet

RE: Problem With Params In Web.xml

2002-06-07 Thread Shapira, Yoav
Howdy, Can you post your init() method? Does getServletConfig().getInitParameter(message) return null? What does getServletConfig().getInitParameterNames() return? Yoav Shapira Millennium ChemInformatics -Original Message- From: Marek, Tomas [mailto:[EMAIL PROTECTED]] Sent: Friday,

RE: Help! I am so stuck. Tomcat NT credential

2002-06-07 Thread BBui
Hi all, Thanks for all of your help. I did a test by taking the administrators group off the allowed NT credential list on my JSP folder. It stops working. Put it back in, it works. So, Tomcat must be using that credential to load JSPs. My question now is that how can we direct Tomcat to use

RE: Problem With Params In Web.xml

2002-06-07 Thread Marek, Tomas
Sure: public void init(ServletConfig config) throws ServletException { // Always call super.init super.init(config); message = config.getInitParameter(message); if (message == null) { message = defaultMessage; } try { String repeatString =

Tomcat Unexplained Shutdown

2002-06-07 Thread Geoff Peters
I am running Tomcat 4.0.2 on Windows NT 4.0, it is running a web based faxing application that users can attach a document to send to a server process that sends it as an attachment. This is done using servlets. Every so often, if a user uploads an attachment the server doesn't like, it shuts

Aliasing ROOT path to /XXX: How To?

2002-06-07 Thread Sissler, John
I am using JBoss/Tomcat RC3 and automatically deploying .war files with no problem. However I would like the default path for these apps to be /XXX rather than . For example, if I deploy a.war and b.war, the roots of these contexts are addressed: http://host:port/a/ http://host:port/a/ and

Re: Solaris JVM never seems to garbage collect, runs out eventually.

2002-06-07 Thread Dave Hladky
Rick Fincher wrote: The javac in J2SE 1.4 has the memory leak 1.1.1 works OK under Solaris. - Original Message - From: Ralph Einfeldt [EMAIL PROTECTED] - First make shure that you don't have memory leaks on your own. - Make shure that you store as few data in sessions as possible.

AW: Pl help : I am stuck : Getting the manager app to work with t omcat 4.0.3 and IIS 5.0

2002-06-07 Thread Friedli Beat
Just an idea: In http://jakarta.apache.org/tomcat/tomcat-4.1-doc/config/host.html I read the following: Network name of this virtual host, as registered in your Domain Name Service server. One of the Hosts nested within an Engine MUST have a name that matches the defaultHost setting for that

RE: Servlet / Tomcat question

2002-06-07 Thread Jacob Kjome
Sorry, I was tired when I wrote this and my answer makes no sense. Obviously, the context is lt2001 and the syntax provided by Shapira is propper. The only other reason why this might not be working is that the path in which Tomcat is installed contains spaces. If so, an you are on a

RE: Problems in redirecting requests from IIS to Tomcat 4 (new Information)

2002-06-07 Thread Harlan Messinger
Luca, Does there have to be a separate Host tag for each host name? I haven't gotten this far, but since the default Host tag has the name localhost I'm deducing that it's only good for requests that come in for the host localhost. To be sure, this seems clunky, since it means you have to

Redirect port 80 requests to 443

2002-06-07 Thread John Roth
This seems simple, but ... I am running Tomcat 4.0.3, standalone on w2k. I would like all requests to http://oursite/ to be automatically redirected to https://oursite/ but am not finding an elegant/simple solution. Below is a snippet from server.xml: Connector

RE: Classpaths

2002-06-07 Thread Larry Isaacs
Since you are using Tomcat 3.3, see: http://jakarta.apache.org/tomcat/tomcat-3.3-doc/tomcat-ug.html#configuring_classes It describes how to add classes. Item 2, describes two System properties that can be used to add directories or jars to the Common and Apps classloaders. Cheers, Larry

RE: Classpaths

2002-06-07 Thread Muñoz Ordenes Andrés (Casa Matriz)
thanks a lot!!! Atte. Andrés Muñoz O. Fono: 690 3155 -Mensaje original- De: Larry Isaacs [mailto:[EMAIL PROTECTED]] Enviado el: Friday, June 07, 2002 11:13 AM Para: 'Tomcat Users List' Asunto: RE: Classpaths Since you are using Tomcat 3.3, see:

Re: tomcat with IIS

2002-06-07 Thread Tia Haenni
Also, check out this document which Ii have used to install tomcat 4.0.1 with IIS 5.0 on several windows 2000 server boxes: http://members.ozemail.com.au/~lampante/howto/tomcat/iisnt/index.html http://members.ozemail.com.au/%7Elampante/howto/tomcat/iisnt/index.html To add contexts to tomcat

How to prevent users from listing the content of directory in Tomcat 4?

2002-06-07 Thread Jack Li
Hello all, How to prevent users from listing the content of directory in Tomcat 4? Thanks, Jack Li

AW: Redirect port 80 requests to 443

2002-06-07 Thread Ralph Einfeldt
According to http://jakarta.apache.org/tomcat/tomcat-4.0-doc/config/http11.html redirectPort=443 only works if you set a security constraint (in web.xml). This should look like this. (Haven't tried it, but should give you a direction where to look and go on.) security-constraint

Installation of a signed SSL certificate

2002-06-07 Thread Sven Woltmann
Hi, I have a problem installing an SSL certificate. I am using Tomcat 4.0.4-b3 standalone on Linux. First, I created a key pair with keytool -genkey... and configured the server.xml. I am now able to view my webpages with https://myserver Of course, my browser tells me that the certificate

RE: How to prevent users from listing the content of directory in Tom cat 4?

2002-06-07 Thread chris . karema
either add an index.? in the directory you want protected or look in $TOMCAT_HOME/conf/web.xml, find something like this ~ line 45 servlet servlet-namedefault/servlet-name servlet-classorg.apache.catalina.servlets.DefaultServlet/servlet-class init-param param-namedebug/param-name

AW: Installation of a signed SSL certificate

2002-06-07 Thread Sven Woltmann
Hi all, I finally managed to install the certificate. In case someone else gets into the same situation, here's the solution: 1. I installed a test root certificate from Thawte into $JAVA_HOME/jre/lib/security/cacerts. 2. When importing the certificate for my website, I had to use the same

IIS/Tomcat redirection solved

2002-06-07 Thread Harlan Messinger
Folks, Chris Ruegger and I solved the problem we reported earlier. I had isapi_redirector.dll properly installed as an ISAPI filter for the *site*, but we discovered that ISAPI filters are also installed at the *server* level, and one of them was from a JRun installation that I'm no longer

Tomcat 4.0 nightly build binary downloads broken?

2002-06-07 Thread Jonathan Eric Miller
file jakarta-tomcat-4.0-20020607.tar.gz 07-Jun-2002 03:02 45 GZIP compressed file src/ 07-Jun-2002 03:04- test1/ 02-May-2002 01:02- Apache/2.0.37-dev Server at jakarta.apache.org Port 80 Jon -- To unsubscribe, e-mail

IIS/Tomcat: scriptlets, POST not working

2002-06-07 Thread Harlan Messinger
In my new IIS/Tomcat configuration, IIS *seems* to be forwarding requests for JSPs to Tomcat, because it displays them. IIS on its own doesn't display JSPs, it just asks if you want to open them or save them to your local drive. BUT: the scriptlets and expressions aren't being executed, so only

Number of Tomcat Instances/Applications

2002-06-07 Thread Knutsen Jeffrey S
I am doing some Tomcat cost/benefit projections for my company. I need to determine the maximum number of applications that will run on Tomcat and still provide stable performance. I am not interested in a theoretical number at this time, just seeking information about what real developers are

Re: Solaris JVM never seems to garbage collect, runs out eventually.

2002-06-07 Thread Rick Fincher
Rick Fincher wrote: The javac in J2SE 1.4 has the memory leak 1.1.1 works OK under Solaris. Sorry, that should have been JVM 1.3.1 works OK under Solaris. Rick -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]

Re: Encrypted passwords in a JDBC Realm

2002-06-07 Thread Rick Fincher
Hi Markus, You can use the same calls in Java to encrypt that Tomcat does. When you use encrypted passwords with form based authentication, Tomcat reads the clear text password from the user, then encrypts it according to your settings (MD-5 for exmple), then retrieves the pre-encrypted

Re: Redirect port 80 requests to 443

2002-06-07 Thread Rick Fincher
Hi John, Tomcat will do this automatically with your app but it has to know that it is meant for the secure port only. You tell it this by including something like the following in your web.xml for the app. security-constraint web-resource-collection

RE: How to prevent users from listing the content of directory in Tom cat 4?

2002-06-07 Thread Jack Li
Thanks, it works after I changed listings to false in web.xml. But it gives you a tomcat 404 error message when you try to browse the directory. How can I customerize this message? Thanks Jack Li -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Friday, June

Logout using FORM based authentication

2002-06-07 Thread Markus Kirsten
Hi, I use a JDBC Realm with FORM based authentication but haven't figured out a way for users to log out. Is it just to call session.invalidate() or is there any better way to do it? Markus -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL

ROOT.war / server.xml context / tomcat 4.0.3 problem.. help!

2002-06-07 Thread Miller, Andy
I've got a ROOT.war file that I build for my app, when i deploy it to tomcat/webapps with the default server.xml config file, it extracts upon tomcat startup. The problem is i need to configure some logging connection pool info that my app uses in my server.xml. When i modify the server.xml

RE: IIS/Tomcat: scriptlets, POST not working

2002-06-07 Thread Harlan Messinger
It DOES seem to be that IIS is handling the JSP pages itself: the same thing happens even when Tomcat is shut down. I checked, and there are no other ISAPI filters or app filters handling JSP files in the web site I set up for Tomcat OR at the server level. -Original Message- From:

RE: Problem With Params In Web.xml

2002-06-07 Thread Greg Trasuk
Tomas: How are you invoking the servlet? If you don't have a servlet-mapping element in your web.xml (I don't see one in what you posted, but I realize you might have posted an extract) and you're accessing it using something like http://localhost:8080/App/servlet/examples.ShowMessage,

How to write files when web-app is a WAR?

2002-06-07 Thread Chris Bailey
From what I've read, it seems that if you package your web application in a WAR file, you have no way of attaining a path on the server's file system that you can use to write files. Reference: http://mikal.org/interests/java/tomcat/archive/view?mesg=15006. I have a web app that we'd like to

guys plz..help..servlet not responding

2002-06-07 Thread puneet sachar
hi friends well today i stuck..so badly.. Argentina lost..and ...i'm not solving a simple ..error i might be ...doing some silly mistake well ... I made new app directory by name sachar and new virtual host by name puneet i'm not able to access the servlets from this , giving me error 404

Release date for 4.0.4

2002-06-07 Thread Tim Funk
Is there a FAQ that states when releases occur? I see there is a vote by committers, but no more information. In particular - I am interested in when Tomcat 4.0.4 final may be released. Or are there plans for a beta4 first? -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional

Number of Tomcat Instances/Applications (improved question)

2002-06-07 Thread Knutsen Jeffrey S
I am doing some Tomcat cost/benefit projections for my company. I need to determine the maximum number of applications that will run on Tomcat and still provide stable performance. I am not interested in a theoretical number at this time, just seeking information about what real developers are

Re: Logout using FORM based authentication

2002-06-07 Thread Eric Everman
Prior to the Servlet 2.3 spec, it was ambiguous as to when a client was no longer logged in. The 2.3 servlet spec states that a client is logged out when their session is invalidated. So if Tomcat works as advertised, session.invalidate() should do what you expect. Eric Everman At 12:49 PM

jk2 Connector Problem [jk_worker_lb.c (322)]

2002-06-07 Thread Robert Priest
Hello, I was able to get the filter loaded, but I am getting the following error in the event log: Event Type: Warning Event Source: Apache Jakarta Connector2 Event Category: None Event ID: 2 Date: 6/7/2002 Time: 1:53:27 PM User: N/A Computer:

serious issues with tomcat and rmi

2002-06-07 Thread java guru
I am encountering serious issues with tomcat and rmi.. I am getting all sorts of problems ranging from 1. version 4.0.3 cannot load classes from rmi codebase.. reading the codebase but returning classnotfound exceptions.. 2. version 4.0.4 webappclass loader dying with 'Life cycle error' and

Re: guys plz..help..servlet not responding

2002-06-07 Thread TMotte
If you haven't done so, you need to config your WEB-INF/web.xml. Read the docs for such. Sample below (may be buggy) servlet servlet-nameMyExample/servlet-name servlet-classcom.me.HelloWorldExample/servlet-class run-as descriptionSecurity role for

RE: Redirect port 80 requests to 443

2002-06-07 Thread Richard S. Huntrods
John Roth said: This seems simple, but ... I am running Tomcat 4.0.3, standalone on w2k. I would like all requests to http://oursite/ to be automatically redirected to https://oursite/ but am not finding an elegant/simple solution. Below is a snippet from server.xml: Why not simply

RE: serious issues with tomcat and rmi

2002-06-07 Thread Greg Trasuk
Srini: Could you post the full stack trace that contains the ClassNotFound exception? Is it contained within an RMIServerException, with some message like Can't unmarshall ? Also, where are the access control exceptions showing up? Log files, or does Tomcat return a '404' message?

  1   2   >