RE: How to prevent direct access to login.jsp

2003-12-08 Thread Chaikin, Yaakov Y (US SSA)
> Put the file in something like WEB-INF/jsp/login.jsp.  Then either
> configure form-based authentication for the path to that JSP 

I tried doing that, but when I specified /WEB-INF/jsp/login.html in 

FORM

/WEB-INF/jsp
/login.html
/WEB-INF/jsp
/loginError.html



The server tried to actually put that into the URL of the browser!  Am I
doing something wrong?

I can't really do your second option since I am not using struts. I am
using a much simpler custom MVC package that doesn't support things like
this very easily.

Would you be able to explain to me what I am doing wrong or how to set
up your first option?

Thanks,
Yaakov.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Tomcat 4.1 WindowsXP Service not working

2003-12-08 Thread Derek Hohls
I need help getting Tomcat 4.1 (or 5.0) working...

I had version 4.0.4 working just fine (under WindowsXP, JDK1.3)
but had to upgrade Tomcat because some newer servlets were not 
working on this older version.

I downloaded and ran the Windows .exe version; remembering to
check the 'install as service' option.  However, when I try
and start the service, Tomcat 4.1 does not startup and run as
normal (i.e. as it did with version 4.0.4). (I tried the install
procedure twice now, as well as rebooting)

When I look in the error.log file, the only message is one that
starts:

Created catalinaLoader in: d:\tomcat\server\lib
[ERROR] Digester - -Begin event threw exception 

java.util.MissingResourceException: Can't find bundle for 
base name org.apache.coyote.tomcat4.LocalStrings, locale en_ZA
...

Could this be why Tomcat does not start?  If so, how to fix it??

Thanks
Derek


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
MailScanner thanks transtec Computers for their support.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: tomcat-5.0.16 with jsvc exists with error

2003-12-08 Thread Bill Barker

"Marten Lehmann" <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]
> Hello,
>
> I'm using tomcat-5.0.16 with jsvc to bind tomcat to port 80, but running
> it with a different user than root. Startup and running is fine.
> Shutdown (in general) also. But when tomcat (or jsvc?) exits, the
> following entry always appears in catalina.out:
>
> jsvc.exec error: Service exit with a return value of 143
>
> Also, when jsvc is running, all processes are named jsvc, not java. I
> don't understand how jsvc is integrated with tomcat. Can anyone explain,
> please? And why can't I shutdown tomcat via the shutdown-message on port
> 8005 by default anymore, but only kill the master jsvc-process? It seems
> that this is a hard shutdown which could kill threads of webapps which
> must shutdown gracefully. Or did I get something wrong?
>

The jsvc name is a Linux thing, having to do with quirks in Linux
permissions.  You can look through the source if you really find this
interesting (it's half decently documentented there :).  Jsvc works on a
parent-slave model.  The parent sits around to see if the slave has died,
and recieves signals.  The slave invokes Tomcat via JNI, and does Tomcat
things :).  It invokes Tomcat in 'daemon' mode, so that Tomcat doesn't
listen on 8005.  When you send a kill, you send it to the parent, which then
tells the slave to gracefully shutdown.

> Regards
> Marten




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Testing servlet for thread safety.

2003-12-08 Thread Antony Paul
Hi,
I asked this question as part of another mail but Mr. Tim Funk left it
unanswered.
How to test a servlet for thread safety.

rgds
Antony Paul.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Copying files from Tomcat 4.1.x to Tomcat 5.x

2003-12-08 Thread Antony Paul
Hi all,
Is there any compatibility issues in putting the jsp/servlet files
developed in Tomcat 4.1.x series to Tomcat 5.x. Application uses only
Servlets 2.3 and JSP 1.2.

rgds
Antony Paul.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: maxActiveSessions

2003-12-08 Thread Bill Barker
This is somewhat TC 3.3 specific, but something like:
   HttpSession session = request.getSession(true);
   if(session == null) {
  returnBusyPage(request, response);
  return;
   }

TC 3.3 will return null for the session if it is unable to create one (e.g.
because maxActiveSessions is exceeded).

"Maria Vetzabet Dzul Gutierrez" <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]
> I´m working with  tomcat-3.3. I configured the server.xml I allowed 25
> sessions.
>  . When the 26 session
> acces the jsp  I want to show the page that said . "Sorry the Server is
> busy".  How I can do it.
> Thank 's
> Vetza




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



context

2003-12-08 Thread Jerald Powel

Hello,

Prostrating my self to a tongue lashing, can any one tell me why I am getting the 
500 error: 

 

HTTP Status 500 - No Context configured to process this request

 

? In my server.xml I have defined: 

 



 

where it resides:

 

c:/…/tomcat/webapps/myapp/….etc

 

Appreciated

 

G  


-
   BT Yahoo! Broadband - Save £80 when you order online today. Hurry! Offer ends 21st 
December 2003. The way the internet was meant to be. 

context

2003-12-08 Thread Jerald Powel

Hello,

Prostrating my self to a tongue lashing, can any one tell me why I am getting the 
500 error: 

 

HTTP Status 500 - No Context configured to process this request

 

? In my server.xml I have defined: 

 



 

where it resides:

 

c:/…/tomcat/webapps/myapp/….etc

 

Appreciated

 

G  


-
   BT Yahoo! Broadband - Save £80 when you order online today. Hurry! Offer ends 21st 
December 2003. The way the internet was meant to be. 

Re: How to prevent direct access to login.jsp

2003-12-08 Thread Jacob Kjome
Put the file in something like WEB-INF/jsp/login.jsp.  Then either 
configure form-based authentication for the path to that JSP or have your 
MVC framework serve up that JSP page upon access to a protected 
resource.  The "back" button will never know the exact location of the page.

Jake

At 05:59 PM 12/8/2003 -0500, you wrote:
Hi,

I realized that my user can mess himself by bookmarking the login page
he is asked to log in. The login.jsp appears in the URL address in the
browser...
Does anyone know how to avoid this? How do I block that URL for the user
and not for the server?
Thanks.

Yaakov Chaikin
Software Engineer
BAE SYSTEMS
301-838-6899 (phone)
301-838-6802 (fax)
[EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Placement of JSP/HTML Files

2003-12-08 Thread Asad Habib
Hello. Does anyone know if there is a way to place
your JSP/HTML files in a subfolder of the root level
directory instead of in the root level directory. For
example, if I have a web app named Test, I would like
to place my files in /Test/jsp instead of in /Test.
Your help would be greatly appreciated. Thanks.

- Asad

__
Do you Yahoo!?
Free Pop-Up Blocker - Get it now
http://companion.yahoo.com/

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Ant install tasks

2003-12-08 Thread Mike
Correct me if I'm wrong, but shouldn't the host be:

file:///C:/Documents%20and%20Settings/rich/My%20Documents/workbench/java/build.xml

the difference being the three slashes between "file:" and "C"?

- Mike

- Original Message - 
From: "Rich Garabedian" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, December 08, 2003 11:57 AM
Subject: Ant install tasks


> I've used the custom ant tasks to build and install web apps a zillion
> times. However, I'm setting up a new build/test environment on a fresh
> machine and I'm having a problem getting the install task to work. I can
> do all the normal all/compile/dist tasks. plus I can do the LIST task. I
> can also use the HTML manager app to do the install. Just can't do the
> install via ant.
>
> Environment:
>
> Windows XP Pro
> jakarta-tomcat-5.0.16
> apache-ant-1.5.4
>
> Error:
>
> BUILD FAILED
> file:C:/Documents%20and%20Settings/rich/My%20Documents/workbench/java/bu
> ild.xml:368: java.net.UnknownHostException: C
>
> I'm nearly 100% the host is correct - it's simply localhost. Plus, the
> list task works fine, so it has to be hitting the correct url to do
> that. I've also echoed all the variables being passed to the install
> target (in the build.xml), and they look correct.
>
> Running ant with debug doesn't offer much more insight:
>
> BUILD FAILED
> file:C:/Documents%20and%20Settings/rich/My%20Documents/workbench/java/bu
> ild.xml:368: java.net.UnknownHostException: C
> at
> org.apache.catalina.ant.DeployTask.execute(DeployTask.java:208)
> at org.apache.tools.ant.Task.perform(Task.java:341)
> at org.apache.tools.ant.Target.execute(Target.java:309)
> at org.apache.tools.ant.Target.performTasks(Target.java:336)
> at org.apache.tools.ant.Project.executeTarget(Project.java:1339)
> at
> org.apache.tools.ant.Project.executeTargets(Project.java:1255)
> at org.apache.tools.ant.Main.runBuild(Main.java:609)
> at org.apache.tools.ant.Main.start(Main.java:196)
> at org.apache.tools.ant.Main.main(Main.java:235)
> Caused by: java.net.UnknownHostException: C
> at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:153)
> at java.net.Socket.connect(Socket.java:452)
> at java.net.Socket.connect(Socket.java:402)
> at sun.net.NetworkClient.doConnect(NetworkClient.java:139)
> at sun.net.NetworkClient.openServer(NetworkClient.java:118)
> at sun.net.ftp.FtpClient.openServer(FtpClient.java:423)
> at sun.net.ftp.FtpClient.(FtpClient.java:692)
> at
> sun.net.www.protocol.ftp.FtpURLConnection.connect(FtpURLConnection.ja
> va:175)
> at
> sun.net.www.protocol.ftp.FtpURLConnection.getInputStream(FtpURLConnec
> tion.java:257)
> at
> org.apache.catalina.ant.DeployTask.execute(DeployTask.java:205)
> ... 8 more
> --- Nested Exception ---
> java.net.UnknownHostException: C
> at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:153)
> at java.net.Socket.connect(Socket.java:452)
> at java.net.Socket.connect(Socket.java:402)
> at sun.net.NetworkClient.doConnect(NetworkClient.java:139)
> at sun.net.NetworkClient.openServer(NetworkClient.java:118)
> at sun.net.ftp.FtpClient.openServer(FtpClient.java:423)
> at sun.net.ftp.FtpClient.(FtpClient.java:692)
> at
> sun.net.www.protocol.ftp.FtpURLConnection.connect(FtpURLConnection.ja
> va:175)
> at
> sun.net.www.protocol.ftp.FtpURLConnection.getInputStream(FtpURLConnec
> tion.java:257)
> at
> org.apache.catalina.ant.DeployTask.execute(DeployTask.java:205)
> at org.apache.tools.ant.Task.perform(Task.java:341)
> at org.apache.tools.ant.Target.execute(Target.java:309)
> at org.apache.tools.ant.Target.performTasks(Target.java:336)
> at org.apache.tools.ant.Project.executeTarget(Project.java:1339)
> at
> org.apache.tools.ant.Project.executeTargets(Project.java:1255)
> at org.apache.tools.ant.Main.runBuild(Main.java:609)
> at org.apache.tools.ant.Main.start(Main.java:196)
> at org.apache.tools.ant.Main.main(Main.java:235)
>
> Total time: 11 seconds
>
> Anyone have a hint? I've never run into this before and I'm going crazy
> trying to figure out what's wrong.
>
> Many thanks,
>
> Rich
>



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: ssl vs. servlets

2003-12-08 Thread Ed Robbins
SSL has nothing to do with user authentication.  SSL simply implies a 
secure connection between the two end points of the transaction.  As far 
as user auth is concerned you would still have to authenticate the user 
when using an SSL connection.

Ed

zvi gutterman wrote:

Hello,

1. Can someone point out some benchmark comparing Apache (and other
webservers) 
performance while using SSL vs. Servlet. Number of connections, CPU load,
etc?
2. Besides encrypting important data (such as credit cards), which I want to
make sure
   no one is reading along the way to the server, is there a reason not to
use Servlet
   for user authentication? session tracking? Are  Servlets secure enough?
   It seems to me that sites like Amazon are doing exactly this - using ssl
for
   credit card transactions and some other session tracking mechanism for
the rest.
   Am I right?

thanks,

Zvika.

 



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: SSL problem with TC 5.0.16

2003-12-08 Thread Ankur Shah
Are you able to query your keystore
("D:\ourwebapp\certificate\keystore") using the specified password from
the command-line?

For instance, what happens when you do this?:

c:\>%JAVA_HOME%/bin/keytool -list -keystore
"D:\ourwebapp\certificate\keystore" -storepass yeahsure

I just downloaded TC 5.0.16, configured SSL and ran it with no problems,
FWIW.

Baer Peter Christoph Alexander wrote:

>Yes, we set keystorePass to what we entered when
>creating the keystore. 
>
>Below are the Connectors from our server.xml.
>Do you see anything wrong, here? Something,
>that was ok with TC 4.0.6, but is no longer valid
>for TC 5.0.16?
>
>   Thanks in advance!
>
>   Alex
>
>
>   acceptCount="100"
>   connectionTimeout="3"
>   debug="0"
>   disableUploadTimeout="true" 
>   enableLookups="true"
>   maxSpareThreads="75"
>   maxThreads="150"
>   minSpareThreads="25"
>   port="8080"
>   redirectPort="8443"
>   scheme="https"
>   secure="yes"
>/>
>
>   acceptCount="100"
>   debug="0"
>   disableUploadTimeout="true"
>   enableLookups="false"
>   maxSpareThreads="75"
>   maxThreads="150"
>   minSpareThreads="25"
>   port="8443"
>   scheme="https"
>   secure="true">
>  clientAuth="false"
>   keystoreFile="D:\ourwebapp\certificate\keystore"
>   keystorePass="yeahsure"
>   protocol="TLS"
>   />
>
>
>   debug="0"
>   enableLookups="false"
>   port="8009"
>   protocol="AJP/1.3"
>   redirectPort="8443"
>/>
>
>
>  
>
>>-Original Message-
>>From: Luc Foisy [mailto:[EMAIL PROTECTED]
>>Sent: Monday, December 08, 2003 5:53 PM
>>To: Tomcat Users List
>>Subject: RE: SSL problem with TC 5.0.16
>>
>>
>>Did you set keystorePass?
>>
>>-Original Message-
>>From: Baer Peter Christoph Alexander 
>>[mailto:[EMAIL PROTECTED]
>>Sent: Monday, December 08, 2003 11:49 AM
>>To: '[EMAIL PROTECTED]'
>>Subject: SSL problem with TC 5.0.16
>>
>>
>>Hi,
>>
>>before you start throwing eggs and tomatoes at me:
>>I *have* searched the mailing list archive before
>>posting this message... ;-)
>>
>>
>>I just installed Tomcat 5.0.16. Now we want to
>>migrate an application from TC 4.0.6 to it.
>>For this we need to run TC with SSL.
>>However, there's apparently a mistake in our
>>SSL configuration. After adapting server.xml
>>for our webapp, we see the following startup
>>error message:
>>
>>
>>INFO: Starting Coyote HTTP/1.1 on port 8080
>>08.12.2003 17:01:45 org.apache.coyote.http11.Http11Protocol start
>>SCHWERWIEGEND: Error starting endpoint
>>java.io.IOException: Keystore was tampered with, or password 
>>was incorrect
>>at
>>sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:748)
>>at java.security.KeyStore.load(KeyStore.java:652)
>>at
>>org.apache.tomcat.util.net.jsse.JSSESocketFactory.getStore(JSSESocket
>>Factory.java:295)
>>at
>>org.apache.tomcat.util.net.jsse.JSSESocketFactory.getKeystore(JSSESoc
>>ketFactory.java:259)
>>at
>>org.apache.tomcat.util.net.jsse.JSSE14SocketFactory.getKeyManagers(JS
>>SE14SocketFactory.java:172)
>>
>>
>>Following the docs, we checked the password
>>and we have also created quite a few new
>>keystores and put there paths into the
>>keystoreFile attribute of the Factory
>>tag.
>>
>>In TC5 even the old keystore with the
>>original certificate of our application
>>is rejected.
>>
>>Has anybody seen this before? Can you provide
>>some hint, what the problem could be caused
>>by? We can rule out the things mentioned in
>>the docs, I think!
>>
>>Thanks in advance!
>>
>>  Regards
>>  Alex
>>
>>-
>>To unsubscribe, e-mail: [EMAIL PROTECTED]
>>For additional commands, e-mail: [EMAIL PROTECTED]
>>
>>
>>-
>>To unsubscribe, e-mail: [EMAIL PROTECTED]
>>For additional commands, e-mail: [EMAIL PROTECTED]
>>
>>
>>
>
>-
>To unsubscribe, e-mail: [EMAIL PROTECTED]
>For additional commands, e-mail: [EMAIL PROTECTED]
>
>
>  
>


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [OFF-TOPIC] Tomcat web hosting

2003-12-08 Thread Oscar Carrillo
http://www.servepath.com

On Mon, 8 Dec 2003, Pitre, Russell wrote:

> Hello All-
> 
>  
> 
> Sorry to bother you with another one of my questions..
> 
>  
> 
> Can anyone suggest a good and inexpensive web hosting service that
> provides tomcat and mySQL support??
> 
>  
> 
>  
> 
> Russ
> 
> 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



JVMLK002 Current thread not owner

2003-12-08 Thread Daniel Gibby
Has anyone had this error recently?

JVMLK002 Current thread not owner

It is accompanied with an IllegalMonitorStateException, the problem is 
that looking at my stack trace, this error is not from my application 
code, but from the IBM JDK 1.4.1 implementation of StringBuffer or string!

This seems to be almost the same problem I was having before with the 
LD_ASSUME_KERNEL fix. Everything was running fine for at least a month 
until now.

Any help or comments?

I tried wrapping the code that produces it with synchronized (sb) {
// where sb is the StringBuffer in question... however
// it looks like the thing actually causing it may be a String
// because of the String.getChars line in the stack trace.
}
Notice the Root Cause in the Stack Trace:
org.apache.jasper.JasperException: JVMLK002: current thread not owner
   at 
org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java(Compiled 
Code))
   at 
org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java(Compiled 
Code))
   at 
org.apache.jasper.servlet.JspServlet.service(JspServlet.java(Compiled Code))
   at javax.servlet.http.HttpServlet.service(HttpServlet.java(Compiled 
Code))
   at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java(Compiled 
Code))
   at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java(Compiled 
Code))
   at 
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java(Compiled 
Code))
   at 
org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java(Compiled 
Code))
   at 
org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java(Compiled 
Code))
   at 
org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java(Compiled 
Code))
   at 
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java(Compiled 
Code))
   at 
org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java(Compiled 
Code))
   at 
org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java(Compiled 
Code))
   at 
org.apache.catalina.core.StandardContext.invoke(StandardContext.java(Compiled 
Code))
   at 
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java(Compiled 
Code))
   at 
org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java(Compiled 
Code))
   at 
org.apache.catalina.valves.ErrorDispatcherValve.invoke(ErrorDispatcherValve.java(Compiled 
Code))
   at 
org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java(Compiled 
Code))
   at 
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java(Compiled 
Code))
   at 
org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java(Compiled 
Code))
   at 
org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java(Compiled 
Code))
   at 
org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java(Compiled 
Code))
   at 
org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java(Compiled 
Code))
   at 
org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java(Compiled 
Code))
   at 
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java(Compiled 
Code))
   at 
org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java(Compiled 
Code))
   at 
org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java(Compiled 
Code))
   at 
org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java(Compiled 
Code))
   at 
org.apache.coyote.tomcat4.CoyoteAdapter.service(CoyoteAdapter.java(Compiled 
Code))
   at 
org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java(Compiled 
Code))
   at 
org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java(Compiled 
Code))
   at org.apache.jk.common.ChannelUn.processConnection(ChannelUn.java:253)
   at org.apache.jk.common.AprConnection.runIt(ChannelUn.java:314)
   at 
org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:619)
   at java.lang.Thread.run(Thread.java:568)
- Root Cause -
java.lang.IllegalMonitorStateException: JVMLK002: current thread not owner
   at java.lang.String.getChars(String.java(Inlined Compiled Code))
   at java.lang.StringBuffer.append(StringBuffer.java(Inlined Compiled 
Code))
   at 
com.resumerabbit.tracking.EntryTracking.trackEntry(EntryTracking.java(Compiled 
Code))
   at com.resumerabbit.tracking.EntryTracking.(EntryTracking.java:59)
   at org.apache.jsp.index_jsp._jspService(index_jsp.java:87)
   at 
org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java(Compiled 
Code))
   at javax.servlet.http.HttpServlet.service(HttpServlet.java(Compiled 
Code))
   at 
org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper

How to prevent direct access to login.jsp

2003-12-08 Thread Chaikin, Yaakov Y (US SSA)
Hi,

I realized that my user can mess himself by bookmarking the login page
he is asked to log in. The login.jsp appears in the URL address in the
browser...

Does anyone know how to avoid this? How do I block that URL for the user
and not for the server?

Thanks.

Yaakov Chaikin
Software Engineer
BAE SYSTEMS
301-838-6899 (phone)
301-838-6802 (fax)
[EMAIL PROTECTED]



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



ssl vs. servlets

2003-12-08 Thread zvi gutterman
Hello,
 
1. Can someone point out some benchmark comparing Apache (and other
webservers) 
 performance while using SSL vs. Servlet. Number of connections, CPU load,
etc?
2. Besides encrypting important data (such as credit cards), which I want to
make sure
no one is reading along the way to the server, is there a reason not to
use Servlet
for user authentication? session tracking? Are  Servlets secure enough?
It seems to me that sites like Amazon are doing exactly this - using ssl
for
credit card transactions and some other session tracking mechanism for
the rest.
Am I right?
 
thanks,
 
Zvika.
 


RE: Lock on database file not being released...

2003-12-08 Thread George Sexton
At this point, I would have to say the answer is to get a real database.
FWIW, I use access in our application and except for the
ImplicitUserSync and UserCommitSync issue have never really had any
problems. Of course you could be running into problems specific to your
version of Java, or Jet.

-Original Message-
From: Chaikin, Yaakov Y (US SSA)
[mailto:[EMAIL PROTECTED] 
Sent: Monday, December 08, 2003 8:43 AM
To: Tomcat Users List
Subject: RE: Lock on database file not being released...


Hi,

I did as you said and adjusted those values for the odbc. Same result.
The database file is still showing as locked.

Yaakov Chaikin
Software Engineer
BAE SYSTEMS
301-838-6899 (phone)
301-838-6802 (fax)
[EMAIL PROTECTED]


> -Original Message-
> From: George Sexton [mailto:[EMAIL PROTECTED]
> Sent: Monday, December 08, 2003 1:11 AM
> To: 'Tomcat Users List'
> Subject: RE: Lock on database file not being released...
> 
> In the ODBC connection entry in the registry, or by using the ODBC
> Connection editor, change those two parameters. They are probably set
> for Yes and should be set to No.
> 
> If you are not using an ODBC Connection entry, then you need to pass
> these as arguments in the connection string.
> 
> -Original Message-
> From: Chaikin, Yaakov Y (US SSA)
> [mailto:[EMAIL PROTECTED]
> Sent: Sunday, December 07, 2003 11:07 PM
> To: Tomcat Users List
> Subject: RE: Lock on database file not being released...
> 
> 
> How do I do that in server.xml file? Is that what you are suggesting?
> Specifying other parameters for the connection pooling?
> 
> Please elaborate on what you think I should do.
> 
> Thanks.
> 
> Yaakov Chaikin
> Software Engineer
> BAE SYSTEMS
> 301-838-6899 (phone)
> 301-838-6802 (fax)
> [EMAIL PROTECTED]
> 
> 
> > -Original Message-
> > From: George Sexton [mailto:[EMAIL PROTECTED]
> > Sent: Sunday, December 07, 2003 11:28 PM
> > To: 'Tomcat Users List'
> > Subject: RE: Lock on database file not being released...
> >
> > OK, I now think I know the issue. Try changing the entries for the
> ODBC
> > connection. Specifically change:
> >
> > ImplicitCommitSync
> >
> > And
> >
> > UserCommitSync
> >
> > The docs are inconsistent on their usage, and I think the drivers
vary
> > depending upon the version of the Jet engine you are using.
> >
> > Anyhow, adjust these and see what happens.
> >
> >
> >
> > -Original Message-
> > From: Chaikin, Yaakov Y (US SSA)
> > [mailto:[EMAIL PROTECTED]
> > Sent: Sunday, December 07, 2003 2:13 PM
> > To: Tomcat Users List
> > Subject: RE: Lock on database file not being released...
> >
> >
> > > > However, I have used this driver before in a standalone app and
> when
> > you
> > > close a connection, it certainly does release the lock on the
> database
> > file.
> > >
> > > This makes me think, you didn't use pooling in this standalone
app.
> > Therefor
> > > check weather you close all your ResultSets and Statements. In
> > standalone
> > > apps where no pooling is involved, they are caught by the garbage
> > collector,
> > > but not in connection pooling.
> > >
> > > Trapped into this myself.
> >
> > Steffen,
> >
> > I tried what you said and closed the ResultSet and Statement before
I
> > close the Connection. Still same affect.
> >
> > Any other ideas anyone?
> >
> > I highly doubt it's the driver. I would bet that I am doing
something
> > wrong. I just can't figure out what it is.
> >
> > Thanks,
> > Yaakov.
> >
> >
> >
-
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> >
> >
> >
> >
-
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> 
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 
> 
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Ant install tasks

2003-12-08 Thread Remy Maucherat
Robert D. Abernethy IV wrote:
I was getting this same error and it took me some time to get around it.
First, I decided to use a WAR file to deploy, rather than an unpacked
directory.  Second, I had to comment out the jasper2 task in the compile
target because it was messing up my web.xml file in unimaginable ways.
It is supposed to automatically add the mappings for the compiled JSPs. 
It doesn't do that in your original web.xml.

The result is not supposed to be messed up, and there's an attribute 
(with an explicit name) which triggers that.

Do I get more details about what went wrong ?

I would switch to deploying via WAR file and check your web.xml file for
problems.  Are you using the Deployer package to deploy?
--
x
Rémy Maucherat
Senior Developer & Consultant
JBoss Group (Europe) SàRL
x
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


tomcat-5.0.16 with jsvc exists with error

2003-12-08 Thread Marten Lehmann
Hello,

I'm using tomcat-5.0.16 with jsvc to bind tomcat to port 80, but running 
it with a different user than root. Startup and running is fine. 
Shutdown (in general) also. But when tomcat (or jsvc?) exits, the 
following entry always appears in catalina.out:

jsvc.exec error: Service exit with a return value of 143

Also, when jsvc is running, all processes are named jsvc, not java. I 
don't understand how jsvc is integrated with tomcat. Can anyone explain, 
please? And why can't I shutdown tomcat via the shutdown-message on port 
8005 by default anymore, but only kill the master jsvc-process? It seems 
that this is a hard shutdown which could kill threads of webapps which 
must shutdown gracefully. Or did I get something wrong?

Regards
Marten
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


RE: Ant install tasks

2003-12-08 Thread Robert D. Abernethy IV
I was getting this same error and it took me some time to get around it.
First, I decided to use a WAR file to deploy, rather than an unpacked
directory.  Second, I had to comment out the jasper2 task in the compile
target because it was messing up my web.xml file in unimaginable ways.
I would switch to deploying via WAR file and check your web.xml file for
problems.  Are you using the Deployer package to deploy?

Rob Abernethy
Dynamic Edge, Inc.

-Original Message-
From: Kumar, Sumit [mailto:[EMAIL PROTECTED] 
Sent: Monday, December 08, 2003 3:39 PM
To: 'Tomcat Users List'; [EMAIL PROTECTED]
Subject: RE: Ant install tasks

Hello,

Is it possible to put an object in session of another webapp, like I am
in
context of webapp1 and I want to put an UserInfo object in session of
webapp2. Can I even access session of webapp2 from webapp1. Both are
deployed under Tomcat4.1.

Thanks
-sumit

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Placement of Tag Library Descriptor

2003-12-08 Thread Asad Habib
Hello. I figured out the problem. Thanks for your
help.

- Asad


--- Ben Souther <[EMAIL PROTECTED]> wrote:
> What are you using for a URL to access the tld?
> 
> 
> On Monday 08 December 2003 04:29 pm, Asad Habib
> wrote:
> > Hello. I am using Tomcat 4.1.24 on Mac OS 10.3 and
> > when I place the tld file used by my web
> application
> > in /Test/tlds(where Test is the name of the
> > application), I get a 404 Error. When I place the
> same
> > tld file in /Test, everything works fine. Does
> anyone
> > know why this is happening? Apparently, the
> > application is able to find the tld since the
> Tomcat
> > logs show no errors. Any help would be greatly
> > appreciated. Thanks.
> >
> > - Asad
> >
> > __
> > Do you Yahoo!?
> > Free Pop-Up Blocker - Get it now
> > http://companion.yahoo.com/
> >
> >
>
-
> > To unsubscribe, e-mail:
> [EMAIL PROTECTED]
> > For additional commands, e-mail:
> [EMAIL PROTECTED]
> 
> -- 
> Ben Souther
> F.W. Davison & Company, Inc.
> 
> 
> 
>
-
> To unsubscribe, e-mail:
> [EMAIL PROTECTED]
> For additional commands, e-mail:
> [EMAIL PROTECTED]
> 

__
Do you Yahoo!?
Free Pop-Up Blocker - Get it now
http://companion.yahoo.com/

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



maxActiveSessions

2003-12-08 Thread Maria Vetzabet Dzul Gutierrez
I´m working with  tomcat-3.3. I configured the server.xml I allowed 25
sessions.
 . When the 26 session
acces the jsp  I want to show the page that said . “Sorry the Server is
busy”.  How I can do it.
Thank ‘s
Vetza



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [OFF-TOPIC] Tomcat web hosting

2003-12-08 Thread Prabhat Kumar (IT)
http://www.webappcabaret.com/index.html

-Original Message-
From: Pitre, Russell [mailto:[EMAIL PROTECTED]
Sent: Monday, December 08, 2003 4:24 PM
To: Tomcat Users List
Subject: [OFF-TOPIC] Tomcat web hosting


Hello All-

 

Sorry to bother you with another one of my questions..

 

Can anyone suggest a good and inexpensive web hosting service that
provides tomcat and mySQL support??

 

 

Russ


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Compression 5.0.16 - web.xml or server.xml

2003-12-08 Thread Ron Andersen
 
After reviewing the Tomcat 5. doco for the Coyotte connector (port 808), it stated 
that the compresssion attribute is part of the connector tag?? 
 
http://jakarta.apache.org/tomcat/tomcat-5.0-doc/config/coyote.html
 
However, after downloading the Tomcat 5.0.16 and reviewing the connector tag within 
server.xml file, I could not find this attribute. After setting compression to "on" in 
the admin console, it uncommented the 
Compression Filter in the WEB-INF/web.xml file. However, it 
still did not add anything to the Coyotte connector. Is the doco wrong(i.e. should the 
compression attribute be included in the Coyotte connector tag)?
 
Also, (as stated earlier in an earlier email) there are other attributes associated 
with compression? Which file should they be included in - server.xml or web.xml???

Jacob Kjome <[EMAIL PROTECTED]> wrote:

You should verify information with the official Tomcat docs before posting 
questions here.
http://jakarta.apache.org/tomcat/tomcat-5.0-doc/config/host.html

If you don't find the answers in Tomcat's own docs, then don't hesitate to 
ask further questions.

Jake

At 07:39 AM 11/30/2003 -0800, you wrote:
>Thanks!
>
>I was reading the Wrox's "Professional Tomcat" book and it states that 
>Tomcat's web servers does not support Virtual Hosts. Does it now support 
>Virtual Hosts?
>
>Jacob Kjome wrote:
>
>The Coyote connector supports this already. No need to write a servlet
>filter. Look in server.xml or the tomcat docs for details.
>
>Jake
>
>At 03:16 PM 11/30/2003 +0100, you wrote:
> >Ron Andersen wrote:
> >
> >>Is GZIP-encoding/mod_gzip avaliable in Tomcats web server?
> >>
> >
> >Hello,
> >
> >You can write a ServletFilter, and a HttpServletResponse wrapper to
> >achieve the same results.
> >
> >Look into java.util.zip.*
> >
> >-- I never said it was easy ;-)
> >
> >Antonio Fiol
> >
> >
> >-
> >To unsubscribe, e-mail: [EMAIL PROTECTED]
> >For additional commands, e-mail: [EMAIL PROTECTED]
>
>
>-
>To unsubscribe, e-mail: [EMAIL PROTECTED]
>For additional commands, e-mail: [EMAIL PROTECTED]
>
>
>-
>Do you Yahoo!?
>Protect your identity with Yahoo! Mail AddressGuard


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
Do you Yahoo!?
Protect your identity with Yahoo! Mail AddressGuard

RE: Giving access to an html file in tomcat

2003-12-08 Thread Steph Richardson
IE uses some voodoo logic to decide when to show it's own error page or not. Anytime 
it get's something other than a HTTP 200 or
302, it looks at the HTML returned with it, and if it "seems" to be a well-formed html 
doc, and/or exceeds a certain length, then it
will show that HTML, else it decides to show it's own "Friendly HTTP Error page" ( 
which IMHO is completely useless to experienced
and novice users alike, but that's beside the point ).

You can turn off this behaviour in Tools->Internet Options->Advanced->Browsing->Show 
Friendly HTTP Error Messages
And this will at least show you exactly what you are returning to the browser.


Steph


> -Original Message-
> From: Bender, Christopher [mailto:[EMAIL PROTECTED]
> Sent: Monday, December 08, 2003 3:40 PM
> To: Tomcat Users List
> Subject: Giving access to an html file in tomcat
>
>
> Hey,
>
> I have added the following to my web.xml of one of my web apps:
>
>   
>   403
>   /error/error.htm
>   
>
>
> When I try and test this (go to a page I do not have access to that will throw a 403 
> error),  i get the Internet Explorer
> error page that says "You might not have permission to view this directory or page 
> using the credentials you supplied"
> and not my page (and not even a tomcat page).
>
> Am I missing some configuration somewhere?
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>
>


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [OFF-TOPIC] Tomcat web hosting

2003-12-08 Thread Ben Souther
http://www.assortedinternet.com


On Monday 08 December 2003 04:32 pm, Schalk wrote:
> Have a look at sevenc.co.za
>
> Kind Regards
> Schalk Neethling
> Web Developer.Designer.Programmer.CEO
> Volume4.Development.Multimedia.Branding
> emotionalize.conceptualize.visualize.realize
> Tel: +27125468436
> Fax: +27125468436
> email:[EMAIL PROTECTED]
> web: www.volume4.com
>
> This message contains information that is considered to be sensitive or
> confidential and may not be forwarded or disclosed to any other party
> without the permission of the sender. If you received this message in
> error, please notify me immediately so that I can correct and delete the
> original email. Thank you.
>
> :: -Original Message-
> :: From: Pitre, Russell [mailto:[EMAIL PROTECTED]
> :: Sent: Monday, December 08, 2003 11:24 PM
> :: To: Tomcat Users List
> :: Subject: [OFF-TOPIC] Tomcat web hosting
> ::
> :: Hello All-
> ::
> ::
> ::
> :: Sorry to bother you with another one of my questions..
> ::
> ::
> ::
> :: Can anyone suggest a good and inexpensive web hosting service that
> :: provides tomcat and mySQL support??
> ::
> ::
> ::
> ::
> ::
> :: Russ
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]

-- 
Ben Souther
F.W. Davison & Company, Inc.



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [OFF-TOPIC] Tomcat web hosting

2003-12-08 Thread Schalk
Have a look at sevenc.co.za

Kind Regards
Schalk Neethling
Web Developer.Designer.Programmer.CEO
Volume4.Development.Multimedia.Branding
emotionalize.conceptualize.visualize.realize
Tel: +27125468436
Fax: +27125468436
email:[EMAIL PROTECTED]
web: www.volume4.com
 
This message contains information that is considered to be sensitive or
confidential and may not be forwarded or disclosed to any other party
without the permission of the sender. If you received this message in error,
please notify me immediately so that I can correct and delete the original
email. Thank you. 

:: -Original Message-
:: From: Pitre, Russell [mailto:[EMAIL PROTECTED]
:: Sent: Monday, December 08, 2003 11:24 PM
:: To: Tomcat Users List
:: Subject: [OFF-TOPIC] Tomcat web hosting
:: 
:: Hello All-
:: 
:: 
:: 
:: Sorry to bother you with another one of my questions..
:: 
:: 
:: 
:: Can anyone suggest a good and inexpensive web hosting service that
:: provides tomcat and mySQL support??
:: 
:: 
:: 
:: 
:: 
:: Russ




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Placement of Tag Library Descriptor

2003-12-08 Thread Ben Souther
What are you using for a URL to access the tld?


On Monday 08 December 2003 04:29 pm, Asad Habib wrote:
> Hello. I am using Tomcat 4.1.24 on Mac OS 10.3 and
> when I place the tld file used by my web application
> in /Test/tlds(where Test is the name of the
> application), I get a 404 Error. When I place the same
> tld file in /Test, everything works fine. Does anyone
> know why this is happening? Apparently, the
> application is able to find the tld since the Tomcat
> logs show no errors. Any help would be greatly
> appreciated. Thanks.
>
> - Asad
>
> __
> Do you Yahoo!?
> Free Pop-Up Blocker - Get it now
> http://companion.yahoo.com/
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]

-- 
Ben Souther
F.W. Davison & Company, Inc.



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Placement of Tag Library Descriptor

2003-12-08 Thread Asad Habib
Hello. I am using Tomcat 4.1.24 on Mac OS 10.3 and
when I place the tld file used by my web application
in /Test/tlds(where Test is the name of the
application), I get a 404 Error. When I place the same
tld file in /Test, everything works fine. Does anyone
know why this is happening? Apparently, the
application is able to find the tld since the Tomcat
logs show no errors. Any help would be greatly
appreciated. Thanks.

- Asad

__
Do you Yahoo!?
Free Pop-Up Blocker - Get it now
http://companion.yahoo.com/

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[OFF-TOPIC] Tomcat web hosting

2003-12-08 Thread Pitre, Russell
Hello All-

 

Sorry to bother you with another one of my questions..

 

Can anyone suggest a good and inexpensive web hosting service that
provides tomcat and mySQL support??

 

 

Russ



RE: connection refused, localhost not found

2003-12-08 Thread Luc Foisy
Does the manager report that the context is loaded?

-Original Message-
From: Damien Pacaud [mailto:[EMAIL PROTECTED]
Sent: Monday, December 08, 2003 7:46 AM
To: Tomcat Users List
Subject: Re: connection refused, localhost not found


i disagree with you, since the root context works fine
he's got a server up and running listenning on port 8080 but his app does
create an error/interaction with it (hope i got this correct for the
original email)

Unfortunately i haven't got a clue what is wrongDoes your app handle
some network code that could cause it to crash when loaded via te url :
http://localhost:8080/myapp/ ?

- Original Message - 
From: "Patrick Ale" <[EMAIL PROTECTED]>
To: "Tomcat Users List" <[EMAIL PROTECTED]>
Sent: Monday, December 08, 2003 1:41 PM
Subject: RE: connection refused, localhost not found


Well,

I got this problem with MLDonkey (not really java, I know but hey.. :P)

This simply means your program crashes on startup and that nothing listens
on port 8080.

Now.. dunno what browser you use but I had this with Mozilla.
I tried to connect to http://localhost:4080/ it didnt find anything on that
port so it
went on with resolving random/known by mozilla things, till it found
localhost.net.au which
actually is an existing page.

Motto of this story is: your app is not running or not on port 8080 :-)

Patrick Ale
System administrator Freeler B.V

"Muda o mundo, começe com você mesmo"


> -Oorspronkelijk bericht-
> Van: Adam Hardy [mailto:[EMAIL PROTECTED]
> Verzonden: maandag 8 december 2003 13:29
> Aan: Tomcat Users List
> Onderwerp: connection refused, localhost not found
>
>
> Hi Listers
> I'm sceptical whether anybody else has ever suffered this bizarre
> problem so I'm not expecting anybody to be able to help, but this is
> seriously damaging my enjoyment of Monday morning.
>
> I have tomcat 5.0.14 set up on one computer and it works fine mostly,
> i.e. root context, JSP examples, manager apps are working fine.
>
> The problem is with the app I'm developing. On Friday night
> last week I
> did loads of debugging to sort out the JNDI connection pool, e.g.
> configuring the app context, the web.xml etc.
>
> Now when I try to call up http://localhost:8080/myapp/ the
> browser zooms
> off to find http://www.localhost.net.au! When I try
> http://127.0.0.1:8080/myapp/ I get a 'connection refused' pop-up from
> the browsers - on my machine and on others. (root context
> still works as
> I said).
>
> Obviously I tried restarting tomcat, redeploying the app,
> taking out all
> the filters, changing the context name, checked server.xml.
>
> Anybody care to take a wild guess about what I need to do?
>
> Tx
> Adam
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: Re: Database pool problem

2003-12-08 Thread Hart, Justin
I agree, sometimes clients ask for illogical things.  Hell, sometimes developers ask 
for illogical things.  If the choice is not yours to make, then you're stuck.  I will 
caveat this with "Point out if it is actually impossible."

-Original Message-
From: Doug Parsons [mailto:[EMAIL PROTECTED]
Sent: Monday, December 08, 2003 8:37 AM
To: Tomcat Users List
Subject: OT: Re: Database pool problem


Everyone has reasons. And some may question our choice. But the goal here is
to help each other. Had he ask which database to use, then I would have
nothing to say. But each of us have conditions which we must work with that
are not under our control. The question of changing databases had already
been asked and he repeated that he could not change. So lets just do our
best to support each other. I don't use MSAccess for mine, but may need to
accomodate the wishes of a client and this information might prove
invaluable at that time. Just my humble opinion.

Doug

P.S. If you wish to flame me you are welcome to do so, just send it to me
directly.




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



AW: Giving access to an html file in tomcat

2003-12-08 Thread SH Solutions
AFAIK the page needs to be > 1024 byte. If they are smaller, IE replaces
them.

cu
  Steffen 


-- 
SH Solutions, Steffen Heil
Web: http://www.sh-solutions.de
eMail: [EMAIL PROTECTED]
MSNMS: [EMAIL PROTECTED]
-Ursprüngliche Nachricht-
Von: Bender, Christopher [mailto:[EMAIL PROTECTED] 
Gesendet: Montag, 8. Dezember 2003 21:40
An: Tomcat Users List
Betreff: Giving access to an html file in tomcat

Hey,

I have added the following to my web.xml of one of my web apps:


403
/error/error.htm



When I try and test this (go to a page I do not have access to that will
throw a 403 error),  i get the Internet Explorer error page that says "You
might not have permission to view this directory or page using the
credentials you supplied" and not my page (and not even a tomcat page).

Am I missing some configuration somewhere?

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Giving access to an html file in tomcat

2003-12-08 Thread Cees van de Griend
On Monday 08 December 2003 21:40, Bender, Christopher wrote:
> Hey,
>
> I have added the following to my web.xml of one of my web apps:
>
>   
>   403
>   /error/error.htm
>   
>
>
> When I try and test this (go to a page I do not have access to that will
> throw a 403 error),  i get the Internet Explorer error page that says "You
> might not have permission to view this directory or page using the
> credentials you supplied" and not my page (and not even a tomcat page).
>
> Am I missing some configuration somewhere?

IE has some (un)helpfull option which translates error codes to a self 
generated page. If I recall correctly, it shows the correct page if the size 
of the error page is greater then some KB (8 KB?).

So, you have 2 options: disable the option in IE or generate larger error 
pages.

Regards,
Cees.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



OT: Re: Database pool problem

2003-12-08 Thread Doug Parsons
Everyone has reasons. And some may question our choice. But the goal here is
to help each other. Had he ask which database to use, then I would have
nothing to say. But each of us have conditions which we must work with that
are not under our control. The question of changing databases had already
been asked and he repeated that he could not change. So lets just do our
best to support each other. I don't use MSAccess for mine, but may need to
accomodate the wishes of a client and this information might prove
invaluable at that time. Just my humble opinion.

Doug

P.S. If you wish to flame me you are welcome to do so, just send it to me
directly.




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: connection refused, localhost not found

2003-12-08 Thread Doug Parsons
If I read correctly, he said root context still worked. This means the
server is running. What is lost is the ability to move to another context.
Since the standard context are working, it sounds like a typo in the setup.
Learning the details myself, so maybe someone else can narrow the area to
search.

Doug


- Original Message - 
From: "Patrick Ale" <[EMAIL PROTECTED]>
To: "Tomcat Users List" <[EMAIL PROTECTED]>
Sent: Monday, December 08, 2003 7:41 AM
Subject: RE: connection refused, localhost not found


Well,

I got this problem with MLDonkey (not really java, I know but hey.. :P)

This simply means your program crashes on startup and that nothing listens
on port 8080.

Now.. dunno what browser you use but I had this with Mozilla.
I tried to connect to http://localhost:4080/ it didnt find anything on that
port so it
went on with resolving random/known by mozilla things, till it found
localhost.net.au which
actually is an existing page.

Motto of this story is: your app is not running or not on port 8080 :-)

Patrick Ale
System administrator Freeler B.V

"Muda o mundo, começe com você mesmo"


> -Oorspronkelijk bericht-
> Van: Adam Hardy [mailto:[EMAIL PROTECTED]
> Verzonden: maandag 8 december 2003 13:29
> Aan: Tomcat Users List
> Onderwerp: connection refused, localhost not found
>
>
> Hi Listers
> I'm sceptical whether anybody else has ever suffered this bizarre
> problem so I'm not expecting anybody to be able to help, but this is
> seriously damaging my enjoyment of Monday morning.
>
> I have tomcat 5.0.14 set up on one computer and it works fine mostly,
> i.e. root context, JSP examples, manager apps are working fine.
>
> The problem is with the app I'm developing. On Friday night
> last week I
> did loads of debugging to sort out the JNDI connection pool, e.g.
> configuring the app context, the web.xml etc.
>
> Now when I try to call up http://localhost:8080/myapp/ the
> browser zooms
> off to find http://www.localhost.net.au! When I try
> http://127.0.0.1:8080/myapp/ I get a 'connection refused' pop-up from
> the browsers - on my machine and on others. (root context
> still works as
> I said).
>
> Obviously I tried restarting tomcat, redeploying the app,
> taking out all
> the filters, changing the context name, checked server.xml.
>
> Anybody care to take a wild guess about what I need to do?
>
> Tx
> Adam
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



tomcat configuration problem

2003-12-08 Thread peter minev
Hi, my name is Peter Minev. 

I have the following problem configuring my web
applicaton. When i build the application with the ant,
i deploy it to the %catalina_home%/webapp directory.
but when i restart the tomcat and write down
http://localhost:8080/myappname/myjsp.jsp, the
following http status description appears:
"The requested resource (/myappname/myjsp.jsp) is not
available"
My beans are in the web-inf/classes directory, and the
directory three is ok, but it seems like the tomcat
can't see my application at all. I didn't make any
changes in the server.xml context path, because i
deploy the unpacked application in the webapp
directory. 
Can you tell me where the problem is? 
Thanks.
  Best regards:
  Peter Minev


__
Do you Yahoo!?
New Yahoo! Photos - easier uploading and sharing.
http://photos.yahoo.com/

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: connection refused, localhost not found

2003-12-08 Thread Damien Pacaud
one idea that jumps in my head after re-reading your original post is : did
you configure well the entry for your app in the web.xml file?

just an idea (as you said you were looking for wild guesses ;) )

- Original Message - 
From: "Adam Hardy" <[EMAIL PROTECTED]>
To: "Tomcat Users List" <[EMAIL PROTECTED]>
Sent: Monday, December 08, 2003 1:28 PM
Subject: connection refused, localhost not found


> Hi Listers
> I'm sceptical whether anybody else has ever suffered this bizarre
> problem so I'm not expecting anybody to be able to help, but this is
> seriously damaging my enjoyment of Monday morning.
>
> I have tomcat 5.0.14 set up on one computer and it works fine mostly,
> i.e. root context, JSP examples, manager apps are working fine.
>
> The problem is with the app I'm developing. On Friday night last week I
> did loads of debugging to sort out the JNDI connection pool, e.g.
> configuring the app context, the web.xml etc.
>
> Now when I try to call up http://localhost:8080/myapp/ the browser zooms
> off to find http://www.localhost.net.au! When I try
> http://127.0.0.1:8080/myapp/ I get a 'connection refused' pop-up from
> the browsers - on my machine and on others. (root context still works as
> I said).
>
> Obviously I tried restarting tomcat, redeploying the app, taking out all
> the filters, changing the context name, checked server.xml.
>
> Anybody care to take a wild guess about what I need to do?
>
> Tx
> Adam
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: connection refused, localhost not found

2003-12-08 Thread Damien Pacaud
i disagree with you, since the root context works fine
he's got a server up and running listenning on port 8080 but his app does
create an error/interaction with it (hope i got this correct for the
original email)

Unfortunately i haven't got a clue what is wrongDoes your app handle
some network code that could cause it to crash when loaded via te url :
http://localhost:8080/myapp/ ?

- Original Message - 
From: "Patrick Ale" <[EMAIL PROTECTED]>
To: "Tomcat Users List" <[EMAIL PROTECTED]>
Sent: Monday, December 08, 2003 1:41 PM
Subject: RE: connection refused, localhost not found


Well,

I got this problem with MLDonkey (not really java, I know but hey.. :P)

This simply means your program crashes on startup and that nothing listens
on port 8080.

Now.. dunno what browser you use but I had this with Mozilla.
I tried to connect to http://localhost:4080/ it didnt find anything on that
port so it
went on with resolving random/known by mozilla things, till it found
localhost.net.au which
actually is an existing page.

Motto of this story is: your app is not running or not on port 8080 :-)

Patrick Ale
System administrator Freeler B.V

"Muda o mundo, começe com você mesmo"


> -Oorspronkelijk bericht-
> Van: Adam Hardy [mailto:[EMAIL PROTECTED]
> Verzonden: maandag 8 december 2003 13:29
> Aan: Tomcat Users List
> Onderwerp: connection refused, localhost not found
>
>
> Hi Listers
> I'm sceptical whether anybody else has ever suffered this bizarre
> problem so I'm not expecting anybody to be able to help, but this is
> seriously damaging my enjoyment of Monday morning.
>
> I have tomcat 5.0.14 set up on one computer and it works fine mostly,
> i.e. root context, JSP examples, manager apps are working fine.
>
> The problem is with the app I'm developing. On Friday night
> last week I
> did loads of debugging to sort out the JNDI connection pool, e.g.
> configuring the app context, the web.xml etc.
>
> Now when I try to call up http://localhost:8080/myapp/ the
> browser zooms
> off to find http://www.localhost.net.au! When I try
> http://127.0.0.1:8080/myapp/ I get a 'connection refused' pop-up from
> the browsers - on my machine and on others. (root context
> still works as
> I said).
>
> Obviously I tried restarting tomcat, redeploying the app,
> taking out all
> the filters, changing the context name, checked server.xml.
>
> Anybody care to take a wild guess about what I need to do?
>
> Tx
> Adam
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: Giving access to an html file in tomcat

2003-12-08 Thread Shapira, Yoav

Howdy,
Turn off the "Display Friendly Error Pages" option in the IE preferences
section.

Yoav Shapira
Millennium ChemInformatics


>-Original Message-
>From: Bender, Christopher [mailto:[EMAIL PROTECTED]
>Sent: Monday, December 08, 2003 4:02 PM
>To: Tomcat Users List
>Subject: RE: Giving access to an html file in tomcat
>
>if i go to
>
>http://localhost/dmt/error/error.htm
>
>or
>
>http://localhost:8080/dmt/error/error.htm
>
>the page comes up.  If i trigger the error code 403, i get it thrown
back
>to me as an IE error, and I do not see my page./
>
>-Original Message-
>From: Bender, Christopher
>Sent: Monday, December 08, 2003 3:40 PM
>To: Tomcat Users List
>Subject: Giving access to an html file in tomcat
>
>
>Hey,
>
>I have added the following to my web.xml of one of my web apps:
>
>   
>   403
>   /error/error.htm
>   
>
>
>When I try and test this (go to a page I do not have access to that
will
>throw a 403 error),  i get the Internet Explorer error page that says
"You
>might not have permission to view this directory or page using the
>credentials you supplied" and not my page (and not even a tomcat page).
>
>Am I missing some configuration somewhere?
>
>-
>To unsubscribe, e-mail: [EMAIL PROTECTED]
>For additional commands, e-mail: [EMAIL PROTECTED]
>
>
>-
>To unsubscribe, e-mail: [EMAIL PROTECTED]
>For additional commands, e-mail: [EMAIL PROTECTED]




This e-mail, including any attachments, is a confidential business communication, and 
may contain information that is confidential, proprietary and/or privileged.  This 
e-mail is intended only for the individual(s) to whom it is addressed, and may not be 
saved, copied, printed, disclosed or used by anyone else.  If you are not the(an) 
intended recipient, please immediately delete this e-mail from your computer system 
and notify the sender.  Thank you.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: Giving access to an html file in tomcat

2003-12-08 Thread Bender, Christopher
if i go to

http://localhost/dmt/error/error.htm

or

http://localhost:8080/dmt/error/error.htm

the page comes up.  If i trigger the error code 403, i get it thrown back to me as an 
IE error, and I do not see my page./

-Original Message-
From: Bender, Christopher 
Sent: Monday, December 08, 2003 3:40 PM
To: Tomcat Users List
Subject: Giving access to an html file in tomcat


Hey,

I have added the following to my web.xml of one of my web apps:


403
/error/error.htm



When I try and test this (go to a page I do not have access to that will throw a 403 
error),  i get the Internet Explorer error page that says "You might not have 
permission to view this directory or page using the credentials you supplied" and not 
my page (and not even a tomcat page).

Am I missing some configuration somewhere?

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: Tomcat 5.0.16 fails to compile JSP page where 4.1.18 would...

2003-12-08 Thread Lon Palmer
Thanks Remmy,

That was it.

Lon


-Original Message-
From: Remy Maucherat [mailto:[EMAIL PROTECTED]
Sent: Monday, December 08, 2003 3:38 PM
To: Tomcat Users List
Subject: Re: Tomcat 5.0.16 fails to compile JSP page where 4.1.18
would...


Lon Palmer wrote:
> Hello Group!
> 
> I'm trying to upgrade to tomcat 5.0.16 but I'm having some trouble with
just
> one JSP page.  The pagew will not compile and the error points to this
line
> in the JSP:
> 
>  "application" />
> 
> A pretty straight forward JSP line to be sure.  Here is the error message:
> type Exception report
> message 
> description The server encountered an internal error () that prevented it
> from fulfilling this request.
> exception 
> org.apache.jasper.JasperException: Unable to compile class for JSP
> 
> An error occurred at line: 17 in the jsp file: /LogCheck.jsp
> 
> Generated servlet error:
> [javac] Compiling 1 source file
> 
>
/usr/local/tomcat/jakarta-tomcat-5.0.16/work/Catalina/k4sv.com/_/org/apache/
> jsp/LogCheck_jsp.java:59: LogKeeper(java.lang.String) in
> com.k4sv.web.LogKeeper cannot be applied to ()
>   LOG_KEEPER = new com.k4sv.web.LogKeeper();
>^
> 1 error
> 
> 
>   
>
org.apache.jasper.compiler.DefaultErrorHandler.javacError(DefaultErrorHandle
> r.java:127)
>   
>
org.apache.jasper.compiler.ErrorDispatcher.javacError(ErrorDispatcher.java:3
> 51)
>   org.apache.jasper.compiler.Compiler.generateClass(Compiler.java:415)
>   org.apache.jasper.compiler.Compiler.compile(Compiler.java:458)
>   org.apache.jasper.compiler.Compiler.compile(Compiler.java:439)
>   
>
org.apache.jasper.JspCompilationContext.compile(JspCompilationContext.java:5
> 52)
>   
>
org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:2
> 91)
>   
> org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:301)
>   org.apache.jasper.servlet.JspServlet.service(JspServlet.java:248)
>   javax.servlet.http.HttpServlet.service(HttpServlet.java:856)
> note The full stack trace of the root cause is available in the Tomcat
logs.
> 
> Is there something in the new JSP spec that prevents this syntax?  Am I
> doing something wrong?  This page compiles great under 4.1.18 by the way.

For jsp:getProperty and the others, your bean must comply with the 
JavaBean specification (ie, have a no arg constructor). I think this is 
indeed a change from 4.1.x (you can compare the generated code).

BTW, you can use the Jasper from 4.1.x with 5.0.x without any problems 
if you don't care about JSP 2.0 for now (I suggest you care, it's nice :) ).

-- 
x
Rémy Maucherat
Senior Developer & Consultant
JBoss Group (Europe) SàRL
x


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


RE: session sharing across webapps

2003-12-08 Thread Shapira, Yoav

Howdy,
The short answer is you can't access another webapp's sessions, period.
But you can have a singleton you write live in shared/lib and both
webapps will see the same instance of the singleton.

Yoav Shapira
Millennium ChemInformatics


>-Original Message-
>From: Kumar, Sumit [mailto:[EMAIL PROTECTED]
>Sent: Monday, December 08, 2003 3:42 PM
>To: 'Tomcat Users List'
>Subject: session sharing across webapps
>
>Sorry, I posted the message earlier with a wrong subject.
>
>Is it possible to put an object in session of another webapp, like I am
in
>context of webapp1 and I want to put an UserInfo object in session of
>webapp2. Can I even access session of webapp2 from webapp1. Both are
>deployed under Tomcat4.1.
>
>Thanks
>-sumit
>-Original Message-
>From: Kumar, Sumit
>Sent: Monday, December 08, 2003 2:39 PM
>To: 'Tomcat Users List'; [EMAIL PROTECTED]
>Subject: RE: Ant install tasks
>
>
>Hello,
>
>Is it possible to put an object in session of another webapp, like I am
in
>context of webapp1 and I want to put an UserInfo object in session of
>webapp2. Can I even access session of webapp2 from webapp1. Both are
>deployed under Tomcat4.1.
>
>Thanks
>-sumit
>
>-
>To unsubscribe, e-mail: [EMAIL PROTECTED]
>For additional commands, e-mail: [EMAIL PROTECTED]
>
>-
>To unsubscribe, e-mail: [EMAIL PROTECTED]
>For additional commands, e-mail: [EMAIL PROTECTED]




This e-mail, including any attachments, is a confidential business communication, and 
may contain information that is confidential, proprietary and/or privileged.  This 
e-mail is intended only for the individual(s) to whom it is addressed, and may not be 
saved, copied, printed, disclosed or used by anyone else.  If you are not the(an) 
intended recipient, please immediately delete this e-mail from your computer system 
and notify the sender.  Thank you.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



session sharing across webapps

2003-12-08 Thread Kumar, Sumit
Sorry, I posted the message earlier with a wrong subject.

Is it possible to put an object in session of another webapp, like I am in
context of webapp1 and I want to put an UserInfo object in session of
webapp2. Can I even access session of webapp2 from webapp1. Both are
deployed under Tomcat4.1.

Thanks
-sumit
-Original Message-
From: Kumar, Sumit 
Sent: Monday, December 08, 2003 2:39 PM
To: 'Tomcat Users List'; [EMAIL PROTECTED]
Subject: RE: Ant install tasks


Hello,

Is it possible to put an object in session of another webapp, like I am in
context of webapp1 and I want to put an UserInfo object in session of
webapp2. Can I even access session of webapp2 from webapp1. Both are
deployed under Tomcat4.1.

Thanks
-sumit

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Giving access to an html file in tomcat

2003-12-08 Thread Bender, Christopher
Hey,

I have added the following to my web.xml of one of my web apps:


403
/error/error.htm



When I try and test this (go to a page I do not have access to that will throw a 403 
error),  i get the Internet Explorer error page that says "You might not have 
permission to view this directory or page using the credentials you supplied" and not 
my page (and not even a tomcat page).

Am I missing some configuration somewhere?

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: Ant install tasks

2003-12-08 Thread Kumar, Sumit
Hello,

Is it possible to put an object in session of another webapp, like I am in
context of webapp1 and I want to put an UserInfo object in session of
webapp2. Can I even access session of webapp2 from webapp1. Both are
deployed under Tomcat4.1.

Thanks
-sumit

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Tomcat 5.0.16 fails to compile JSP page where 4.1.18 would...

2003-12-08 Thread Remy Maucherat
Lon Palmer wrote:
Hello Group!

I'm trying to upgrade to tomcat 5.0.16 but I'm having some trouble with just
one JSP page.  The pagew will not compile and the error points to this line
in the JSP:

A pretty straight forward JSP line to be sure.  Here is the error message:
type Exception report
message 
description The server encountered an internal error () that prevented it
from fulfilling this request.
exception 
org.apache.jasper.JasperException: Unable to compile class for JSP

An error occurred at line: 17 in the jsp file: /LogCheck.jsp

Generated servlet error:
[javac] Compiling 1 source file
/usr/local/tomcat/jakarta-tomcat-5.0.16/work/Catalina/k4sv.com/_/org/apache/
jsp/LogCheck_jsp.java:59: LogKeeper(java.lang.String) in
com.k4sv.web.LogKeeper cannot be applied to ()
  LOG_KEEPER = new com.k4sv.web.LogKeeper();
   ^
1 error

org.apache.jasper.compiler.DefaultErrorHandler.javacError(DefaultErrorHandle
r.java:127)

org.apache.jasper.compiler.ErrorDispatcher.javacError(ErrorDispatcher.java:3
51)
org.apache.jasper.compiler.Compiler.generateClass(Compiler.java:415)
org.apache.jasper.compiler.Compiler.compile(Compiler.java:458)
org.apache.jasper.compiler.Compiler.compile(Compiler.java:439)

org.apache.jasper.JspCompilationContext.compile(JspCompilationContext.java:5
52)

org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:2
91)

org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:301)
org.apache.jasper.servlet.JspServlet.service(JspServlet.java:248)
javax.servlet.http.HttpServlet.service(HttpServlet.java:856)
note The full stack trace of the root cause is available in the Tomcat logs.
Is there something in the new JSP spec that prevents this syntax?  Am I
doing something wrong?  This page compiles great under 4.1.18 by the way.
For jsp:getProperty and the others, your bean must comply with the 
JavaBean specification (ie, have a no arg constructor). I think this is 
indeed a change from 4.1.x (you can compare the generated code).

BTW, you can use the Jasper from 4.1.x with 5.0.x without any problems 
if you don't care about JSP 2.0 for now (I suggest you care, it's nice :) ).

--
x
Rémy Maucherat
Senior Developer & Consultant
JBoss Group (Europe) SàRL
x
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


RE: login page css not applied

2003-12-08 Thread Chaikin, Yaakov Y (US SSA)
Rod,

Actually, I am pretty sure that the welcome-file has nothing to do with
it. All that does is tell the server which URL to try to serve up if you
were to leave off the file name from the url you are typing in. So, in
my case typing localhost/xxxWEB/ is equivalent to
localhost/xxxWEB/welcome.jsp.

The real problem that I can't figure out is why when I specify that I am
only securing *.jsp, it secures nothing.

I'll have to research that one.

Yaakov Chaikin
Software Engineer
BAE SYSTEMS
301-838-6899 (phone)
301-838-6802 (fax)
[EMAIL PROTECTED]


> -Original Message-
> From: Rod Giffin [mailto:[EMAIL PROTECTED]
> Sent: Monday, December 08, 2003 2:34 PM
> To: [EMAIL PROTECTED]
> Subject: RE: login page css not applied
> 
> US SSA said:
> > Rod,
> >
> > I am sorry, but I am not 100% following you...
> >
> > Yes, you are right. I have the following situation:
> >
> > I am trying url: localhost/xxxWEB/
> 
> I think it would work if you set the welcome-file element to send the
user
> by default to localhost/xxxWEB/login.html (or index.html or whatever)
> where the login form could reside.  The welcome.jsp page should not be
a
> default page if it is protected, or it will be served before the user
is
> authenticated.  Since login.html or whatnot is not a jsp page, it
won't be
> protected by a security-constraint such as /*.jsp, and it will be able
to
> be accessed.
> 
> > This gets forwared by the  to welcome.jsp, which I
want to
> > be protected.
> > welcome.jsp page is in xxxWEB/ directory.
> >
> > Could you explain what you are suggesting again?
> 
> 
> 
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



AW: Ant install tasks

2003-12-08 Thread SH Solutions
Hi

First, I don't know anything about ant...

BUILD FAILED
file:C:/Documents%20and%20Settings/rich/My%20Documents/workbench/java/bu
ild.xml:368: java.net.UnknownHostException: C
 
> I'm nearly 100% the host is correct - it's simply localhost.

But it seams to read your c:/... as (host):, so it says: "I dont know
host 'C'!".
It isn't trying to connet to "localhost" but to "C".

Just my 5 cents,
  Steffen


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Ant install tasks

2003-12-08 Thread Remy Maucherat
Rich Garabedian wrote:
I've used the custom ant tasks to build and install web apps a zillion
times. However, I'm setting up a new build/test environment on a fresh
machine and I'm having a problem getting the install task to work. I can
do all the normal all/compile/dist tasks. plus I can do the LIST task. I
can also use the HTML manager app to do the install. Just can't do the
install via ant.
The tasks did change to some extent. In particular, "install/remove" 
were deprecated in favor of "deploy/undeploy", to avoid confusing users 
(deploy includes the install functionality).

Please look in the docs or the deployer package for the full story.

--
x
Rémy Maucherat
Senior Developer & Consultant
JBoss Group (Europe) SàRL
x
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Tomcat 5.0.16 fails to compile JSP page where 4.1.18 would...

2003-12-08 Thread Lon Palmer
Hello Group!

I'm trying to upgrade to tomcat 5.0.16 but I'm having some trouble with just
one JSP page.  The pagew will not compile and the error points to this line
in the JSP:



A pretty straight forward JSP line to be sure.  Here is the error message:
type Exception report
message 
description The server encountered an internal error () that prevented it
from fulfilling this request.
exception 
org.apache.jasper.JasperException: Unable to compile class for JSP

An error occurred at line: 17 in the jsp file: /LogCheck.jsp

Generated servlet error:
[javac] Compiling 1 source file

/usr/local/tomcat/jakarta-tomcat-5.0.16/work/Catalina/k4sv.com/_/org/apache/
jsp/LogCheck_jsp.java:59: LogKeeper(java.lang.String) in
com.k4sv.web.LogKeeper cannot be applied to ()
  LOG_KEEPER = new com.k4sv.web.LogKeeper();
   ^
1 error



org.apache.jasper.compiler.DefaultErrorHandler.javacError(DefaultErrorHandle
r.java:127)

org.apache.jasper.compiler.ErrorDispatcher.javacError(ErrorDispatcher.java:3
51)
org.apache.jasper.compiler.Compiler.generateClass(Compiler.java:415)
org.apache.jasper.compiler.Compiler.compile(Compiler.java:458)
org.apache.jasper.compiler.Compiler.compile(Compiler.java:439)

org.apache.jasper.JspCompilationContext.compile(JspCompilationContext.java:5
52)

org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:2
91)

org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:301)
org.apache.jasper.servlet.JspServlet.service(JspServlet.java:248)
javax.servlet.http.HttpServlet.service(HttpServlet.java:856)
note The full stack trace of the root cause is available in the Tomcat logs.

Is there something in the new JSP spec that prevents this syntax?  Am I
doing something wrong?  This page compiles great under 4.1.18 by the way.

Thanks,

Lon



RE: Custom Realm deployment, was "More sophisticated JDBCRealm Security"

2003-12-08 Thread Chaikin, Yaakov Y (US SSA)
Basically, jar your package that you are using for your JDBCRealm and
put the .jar file into
common/lib directory.

That will make your package visible to both your webapps and Tomcat
server. Well, in your case, you only care about the server seeing this
package.

HTH.

Yaakov Chaikin
Software Engineer
BAE SYSTEMS
301-838-6899 (phone)
301-838-6802 (fax)
[EMAIL PROTECTED]


> -Original Message-
> From: Frank Febbraro [mailto:[EMAIL PROTECTED]
> Sent: Monday, December 08, 2003 3:10 PM
> To: Tomcat Users List
> Subject: Custom Realm deployment, was "More sophisticated JDBCRealm
Security"
> 
> Thanks Yoav,
> 
> One more question to you or the group,
> 
> When deploying a custom Realm implementation, I am defining the

> inside the  for my specific application. But on startup I
get:
> 
> java.lang.ClassNotFoundException: .util.CustomJDBCRealm
> 
> Can I have the Realm class in my WAR file or do I have to put it on
the
> tomcat classpath somewhere?
> 
> Thanks again,
> Frank
> 
> - Original Message -
> From: "Shapira, Yoav" <[EMAIL PROTECTED]>
> To: "Tomcat Users List" <[EMAIL PROTECTED]>
> Sent: Monday, December 08, 2003 2:52 PM
> Subject: RE: More sophisticated JDBCRealm Security
> 
> 
> 
> Howdy,
> You can search the archives of this list for many examples.
> 
> Yoav Shapira
> Millennium ChemInformatics
> 
> 
> >-Original Message-
> >From: Frank Febbraro [mailto:[EMAIL PROTECTED]
> >Sent: Monday, December 08, 2003 12:10 PM
> >To: Tomcat Users List
> >Subject: Re: More sophisticated JDBCRealm Security
> >
> >Well crap!
> >
> >Turns out we are using MySQL 4.0.x which does not have support for
> views.
> >
> >Can anyone point me in a direction that would help me in implementing
> my
> >own
> >Realm (either brand new or by extending another)
> >
> >Thank you very much,
> >Frank
> >
> >- Original Message -
> >From: "Shapira, Yoav" <[EMAIL PROTECTED]>
> >To: "Tomcat Users List" <[EMAIL PROTECTED]>
> >Sent: Monday, December 08, 2003 11:49 AM
> >Subject: RE: More sophisticated JDBCRealm Security
> >
> >
> >
> >Howdy,
> >Your other option is to extend JDBCRealm into your own custom realm
> >implementation.
> >
> >Yoav Shapira
> >Millennium ChemInformatics
> >
> >
> >>-Original Message-
> >>From: Frank Febbraro [mailto:[EMAIL PROTECTED]
> >>Sent: Monday, December 08, 2003 11:41 AM
> >>To: Tomcat Users List
> >>Subject: Re: More sophisticated JDBCRealm Security
> >>
> >>What about the fact that the groupId column in User is called id in
> the
> >>Groups table, would it be a case of making another view to
accomplish
> >that
> >>translation too?
> >>
> >>Besides craeting views, which is easy, what are the other options
> here?
> >>
> >>- Original Message -
> >>From: "Shapira, Yoav" <[EMAIL PROTECTED]>
> >>To: "Tomcat Users List" <[EMAIL PROTECTED]>
> >>Sent: Monday, December 08, 2003 10:48 AM
> >>Subject: RE: More sophisticated JDBCRealm Security
> >>
> >>
> >>
> >>Howdy,
> >>The typical solution in many cases involving JDBCRealm is (if you
> don't
> >>want to customize the realm by coding) to create a view for use by
the
> >>JDBC realm.  In your case, you'd create a view on the user table
where
> >>only active users are shown, and configure the JDBC realm to query
> this
> >>view rather than the user table.
> >>
> >>Yoav Shapira
> >>Millennium ChemInformatics
> >>
> >>
> >>>-Original Message-
> >>>From: Frank Febbraro [mailto:[EMAIL PROTECTED]
> >>>Sent: Monday, December 08, 2003 10:48 AM
> >>>To: Tomcat Users List
> >>>Subject: More sophisticated JDBCRealm Security
> >>>
> >>>In looking through the docs I am surpised that I dont see a way to
do
> >>some
> >>>more "sophisticated" JDBCRealm security. I may just be looking in
the
> >>wrong
> >>>place or misreading something so please let me know if I am.
> >>>
> >>>My DB tables are arranged as follows
> >>>
> >>>create table user
> >>>(
> >>>   id BIGINT NOT NULL AUTO_INCREMENT,
> >>>   email VARCHAR(100) not null unique,
> >>>   groupId BIGINT not null,
> >>>   password VARCHAR(20) not null,
> >>>   active BIT,
> >>>   primary key (id)
> >>>);
> >>>
> >>>create table groups
> >>>(
> >>>   id BIGINT NOT NULL AUTO_INCREMENT,
> >>>   role VARCHAR(255) not null,
> >>>   primary key (id)
> >>>);
> >>>
> >>>The email address is the "user login", password is obvious.
> >>>
> >>>I would want something that would only let ACTIVE users log in
> (active
> >>=
> >>>1),
> >>>and User.groupId maps to Groups.id field.
> >>>
> >>>Using the standard JDBCRealm I do not see how this is possible.
Would
> >I
> >>>actually have to create my own custom Realm implementation in order
> to
> >>>achieve these goals?
> >>>
> >>>Thanks for any input/advice,
> >>>Frank
> >>>
> >>>
> >>>
> >>>
>
>>>-
> >>>To unsubscribe, e-mail: [EMAIL PROTECTED]
> >>>For additional commands, e-mail:
[EMAIL PROTECTED]
> >>
> >>
> >>
> >>
> >>This e-mail, including any attachments, is a confide

Re: Custom Realm deployment, was "More sophisticated JDBCRealm Security"

2003-12-08 Thread Tim Funk
To be more sepcific - it needs to be in the server classpath. You may also 
need to do some MBean registration work too. (editing/creating an mbeans.xml 
file)

-Tim

Hart, Justin wrote:
It must be in Tomcat's classpath, not in your WAR file.

-Original Message-
From: Frank Febbraro [mailto:[EMAIL PROTECTED]
Sent: Monday, December 08, 2003 3:10 PM
To: Tomcat Users List
Subject: Custom Realm deployment, was "More sophisticated JDBCRealm
Security"
Thanks Yoav,

One more question to you or the group,

When deploying a custom Realm implementation, I am defining the 
inside the  for my specific application. But on startup I get:
java.lang.ClassNotFoundException: .util.CustomJDBCRealm

Can I have the Realm class in my WAR file or do I have to put it on the
tomcat classpath somewhere?
Thanks again,
Frank
- Original Message - 
From: "Shapira, Yoav" <[EMAIL PROTECTED]>
To: "Tomcat Users List" <[EMAIL PROTECTED]>
Sent: Monday, December 08, 2003 2:52 PM
Subject: RE: More sophisticated JDBCRealm Security



Howdy,
You can search the archives of this list for many examples.
Yoav Shapira
Millennium ChemInformatics


-Original Message-
From: Frank Febbraro [mailto:[EMAIL PROTECTED]
Sent: Monday, December 08, 2003 12:10 PM
To: Tomcat Users List
Subject: Re: More sophisticated JDBCRealm Security
Well crap!

Turns out we are using MySQL 4.0.x which does not have support for
views.

Can anyone point me in a direction that would help me in implementing
my

own
Realm (either brand new or by extending another)
Thank you very much,
Frank
- Original Message -
From: "Shapira, Yoav" <[EMAIL PROTECTED]>
To: "Tomcat Users List" <[EMAIL PROTECTED]>
Sent: Monday, December 08, 2003 11:49 AM
Subject: RE: More sophisticated JDBCRealm Security


Howdy,
Your other option is to extend JDBCRealm into your own custom realm
implementation.
Yoav Shapira
Millennium ChemInformatics


-Original Message-
From: Frank Febbraro [mailto:[EMAIL PROTECTED]
Sent: Monday, December 08, 2003 11:41 AM
To: Tomcat Users List
Subject: Re: More sophisticated JDBCRealm Security
What about the fact that the groupId column in User is called id in
the

Groups table, would it be a case of making another view to accomplish
that

translation too?

Besides craeting views, which is easy, what are the other options
here?

- Original Message -
From: "Shapira, Yoav" <[EMAIL PROTECTED]>
To: "Tomcat Users List" <[EMAIL PROTECTED]>
Sent: Monday, December 08, 2003 10:48 AM
Subject: RE: More sophisticated JDBCRealm Security


Howdy,
The typical solution in many cases involving JDBCRealm is (if you
don't

want to customize the realm by coding) to create a view for use by the
JDBC realm.  In your case, you'd create a view on the user table where
only active users are shown, and configure the JDBC realm to query
this

view rather than the user table.

Yoav Shapira
Millennium ChemInformatics


-Original Message-
From: Frank Febbraro [mailto:[EMAIL PROTECTED]
Sent: Monday, December 08, 2003 10:48 AM
To: Tomcat Users List
Subject: More sophisticated JDBCRealm Security
In looking through the docs I am surpised that I dont see a way to do
some

more "sophisticated" JDBCRealm security. I may just be looking in the
wrong

place or misreading something so please let me know if I am.

My DB tables are arranged as follows

create table user
(
 id BIGINT NOT NULL AUTO_INCREMENT,
 email VARCHAR(100) not null unique,
 groupId BIGINT not null,
 password VARCHAR(20) not null,
 active BIT,
 primary key (id)
);
create table groups
(
 id BIGINT NOT NULL AUTO_INCREMENT,
 role VARCHAR(255) not null,
 primary key (id)
);
The email address is the "user login", password is obvious.

I would want something that would only let ACTIVE users log in
(active

=

1),
and User.groupId maps to Groups.id field.
Using the standard JDBCRealm I do not see how this is possible. Would
I

actually have to create my own custom Realm implementation in order
to

achieve these goals?

Thanks for any input/advice,
Frank


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




This e-mail, including any attachments, is a confidential business
communication, and may contain information that is confidential,
proprietary
and/or privileged.  This e-mail is intended only for the individual(s)
to

whom it is addressed, and may not be saved, copied, printed, disclosed
or

used by anyone else.  If you are not the(an) intended recipient,
please

immediately delete this e-mail from your computer system and notify
the

sender.  Thank you.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




This

RE: Custom Realm deployment, was "More sophisticated JDBCRealm Security"

2003-12-08 Thread Hart, Justin
It must be in Tomcat's classpath, not in your WAR file.

-Original Message-
From: Frank Febbraro [mailto:[EMAIL PROTECTED]
Sent: Monday, December 08, 2003 3:10 PM
To: Tomcat Users List
Subject: Custom Realm deployment, was "More sophisticated JDBCRealm
Security"


Thanks Yoav,

One more question to you or the group,

When deploying a custom Realm implementation, I am defining the 
inside the  for my specific application. But on startup I get:

java.lang.ClassNotFoundException: .util.CustomJDBCRealm

Can I have the Realm class in my WAR file or do I have to put it on the
tomcat classpath somewhere?

Thanks again,
Frank

- Original Message - 
From: "Shapira, Yoav" <[EMAIL PROTECTED]>
To: "Tomcat Users List" <[EMAIL PROTECTED]>
Sent: Monday, December 08, 2003 2:52 PM
Subject: RE: More sophisticated JDBCRealm Security



Howdy,
You can search the archives of this list for many examples.

Yoav Shapira
Millennium ChemInformatics


>-Original Message-
>From: Frank Febbraro [mailto:[EMAIL PROTECTED]
>Sent: Monday, December 08, 2003 12:10 PM
>To: Tomcat Users List
>Subject: Re: More sophisticated JDBCRealm Security
>
>Well crap!
>
>Turns out we are using MySQL 4.0.x which does not have support for
views.
>
>Can anyone point me in a direction that would help me in implementing
my
>own
>Realm (either brand new or by extending another)
>
>Thank you very much,
>Frank
>
>- Original Message -
>From: "Shapira, Yoav" <[EMAIL PROTECTED]>
>To: "Tomcat Users List" <[EMAIL PROTECTED]>
>Sent: Monday, December 08, 2003 11:49 AM
>Subject: RE: More sophisticated JDBCRealm Security
>
>
>
>Howdy,
>Your other option is to extend JDBCRealm into your own custom realm
>implementation.
>
>Yoav Shapira
>Millennium ChemInformatics
>
>
>>-Original Message-
>>From: Frank Febbraro [mailto:[EMAIL PROTECTED]
>>Sent: Monday, December 08, 2003 11:41 AM
>>To: Tomcat Users List
>>Subject: Re: More sophisticated JDBCRealm Security
>>
>>What about the fact that the groupId column in User is called id in
the
>>Groups table, would it be a case of making another view to accomplish
>that
>>translation too?
>>
>>Besides craeting views, which is easy, what are the other options
here?
>>
>>- Original Message -
>>From: "Shapira, Yoav" <[EMAIL PROTECTED]>
>>To: "Tomcat Users List" <[EMAIL PROTECTED]>
>>Sent: Monday, December 08, 2003 10:48 AM
>>Subject: RE: More sophisticated JDBCRealm Security
>>
>>
>>
>>Howdy,
>>The typical solution in many cases involving JDBCRealm is (if you
don't
>>want to customize the realm by coding) to create a view for use by the
>>JDBC realm.  In your case, you'd create a view on the user table where
>>only active users are shown, and configure the JDBC realm to query
this
>>view rather than the user table.
>>
>>Yoav Shapira
>>Millennium ChemInformatics
>>
>>
>>>-Original Message-
>>>From: Frank Febbraro [mailto:[EMAIL PROTECTED]
>>>Sent: Monday, December 08, 2003 10:48 AM
>>>To: Tomcat Users List
>>>Subject: More sophisticated JDBCRealm Security
>>>
>>>In looking through the docs I am surpised that I dont see a way to do
>>some
>>>more "sophisticated" JDBCRealm security. I may just be looking in the
>>wrong
>>>place or misreading something so please let me know if I am.
>>>
>>>My DB tables are arranged as follows
>>>
>>>create table user
>>>(
>>>   id BIGINT NOT NULL AUTO_INCREMENT,
>>>   email VARCHAR(100) not null unique,
>>>   groupId BIGINT not null,
>>>   password VARCHAR(20) not null,
>>>   active BIT,
>>>   primary key (id)
>>>);
>>>
>>>create table groups
>>>(
>>>   id BIGINT NOT NULL AUTO_INCREMENT,
>>>   role VARCHAR(255) not null,
>>>   primary key (id)
>>>);
>>>
>>>The email address is the "user login", password is obvious.
>>>
>>>I would want something that would only let ACTIVE users log in
(active
>>=
>>>1),
>>>and User.groupId maps to Groups.id field.
>>>
>>>Using the standard JDBCRealm I do not see how this is possible. Would
>I
>>>actually have to create my own custom Realm implementation in order
to
>>>achieve these goals?
>>>
>>>Thanks for any input/advice,
>>>Frank
>>>
>>>
>>>
>>>
>>>-
>>>To unsubscribe, e-mail: [EMAIL PROTECTED]
>>>For additional commands, e-mail: [EMAIL PROTECTED]
>>
>>
>>
>>
>>This e-mail, including any attachments, is a confidential business
>>communication, and may contain information that is confidential,
>>proprietary
>>and/or privileged.  This e-mail is intended only for the individual(s)
>to
>>whom it is addressed, and may not be saved, copied, printed, disclosed
>or
>>used by anyone else.  If you are not the(an) intended recipient,
please
>>immediately delete this e-mail from your computer system and notify
the
>>sender.  Thank you.
>>
>>
>>-
>>To unsubscribe, e-mail: [EMAIL PROTECTED]
>>For additional commands, e-mail: [EMAIL PROTECTED]
>>
>>
>>
>>
>>

Custom Realm deployment, was "More sophisticated JDBCRealm Security"

2003-12-08 Thread Frank Febbraro
Thanks Yoav,

One more question to you or the group,

When deploying a custom Realm implementation, I am defining the 
inside the  for my specific application. But on startup I get:

java.lang.ClassNotFoundException: .util.CustomJDBCRealm

Can I have the Realm class in my WAR file or do I have to put it on the
tomcat classpath somewhere?

Thanks again,
Frank

- Original Message - 
From: "Shapira, Yoav" <[EMAIL PROTECTED]>
To: "Tomcat Users List" <[EMAIL PROTECTED]>
Sent: Monday, December 08, 2003 2:52 PM
Subject: RE: More sophisticated JDBCRealm Security



Howdy,
You can search the archives of this list for many examples.

Yoav Shapira
Millennium ChemInformatics


>-Original Message-
>From: Frank Febbraro [mailto:[EMAIL PROTECTED]
>Sent: Monday, December 08, 2003 12:10 PM
>To: Tomcat Users List
>Subject: Re: More sophisticated JDBCRealm Security
>
>Well crap!
>
>Turns out we are using MySQL 4.0.x which does not have support for
views.
>
>Can anyone point me in a direction that would help me in implementing
my
>own
>Realm (either brand new or by extending another)
>
>Thank you very much,
>Frank
>
>- Original Message -
>From: "Shapira, Yoav" <[EMAIL PROTECTED]>
>To: "Tomcat Users List" <[EMAIL PROTECTED]>
>Sent: Monday, December 08, 2003 11:49 AM
>Subject: RE: More sophisticated JDBCRealm Security
>
>
>
>Howdy,
>Your other option is to extend JDBCRealm into your own custom realm
>implementation.
>
>Yoav Shapira
>Millennium ChemInformatics
>
>
>>-Original Message-
>>From: Frank Febbraro [mailto:[EMAIL PROTECTED]
>>Sent: Monday, December 08, 2003 11:41 AM
>>To: Tomcat Users List
>>Subject: Re: More sophisticated JDBCRealm Security
>>
>>What about the fact that the groupId column in User is called id in
the
>>Groups table, would it be a case of making another view to accomplish
>that
>>translation too?
>>
>>Besides craeting views, which is easy, what are the other options
here?
>>
>>- Original Message -
>>From: "Shapira, Yoav" <[EMAIL PROTECTED]>
>>To: "Tomcat Users List" <[EMAIL PROTECTED]>
>>Sent: Monday, December 08, 2003 10:48 AM
>>Subject: RE: More sophisticated JDBCRealm Security
>>
>>
>>
>>Howdy,
>>The typical solution in many cases involving JDBCRealm is (if you
don't
>>want to customize the realm by coding) to create a view for use by the
>>JDBC realm.  In your case, you'd create a view on the user table where
>>only active users are shown, and configure the JDBC realm to query
this
>>view rather than the user table.
>>
>>Yoav Shapira
>>Millennium ChemInformatics
>>
>>
>>>-Original Message-
>>>From: Frank Febbraro [mailto:[EMAIL PROTECTED]
>>>Sent: Monday, December 08, 2003 10:48 AM
>>>To: Tomcat Users List
>>>Subject: More sophisticated JDBCRealm Security
>>>
>>>In looking through the docs I am surpised that I dont see a way to do
>>some
>>>more "sophisticated" JDBCRealm security. I may just be looking in the
>>wrong
>>>place or misreading something so please let me know if I am.
>>>
>>>My DB tables are arranged as follows
>>>
>>>create table user
>>>(
>>>   id BIGINT NOT NULL AUTO_INCREMENT,
>>>   email VARCHAR(100) not null unique,
>>>   groupId BIGINT not null,
>>>   password VARCHAR(20) not null,
>>>   active BIT,
>>>   primary key (id)
>>>);
>>>
>>>create table groups
>>>(
>>>   id BIGINT NOT NULL AUTO_INCREMENT,
>>>   role VARCHAR(255) not null,
>>>   primary key (id)
>>>);
>>>
>>>The email address is the "user login", password is obvious.
>>>
>>>I would want something that would only let ACTIVE users log in
(active
>>=
>>>1),
>>>and User.groupId maps to Groups.id field.
>>>
>>>Using the standard JDBCRealm I do not see how this is possible. Would
>I
>>>actually have to create my own custom Realm implementation in order
to
>>>achieve these goals?
>>>
>>>Thanks for any input/advice,
>>>Frank
>>>
>>>
>>>
>>>
>>>-
>>>To unsubscribe, e-mail: [EMAIL PROTECTED]
>>>For additional commands, e-mail: [EMAIL PROTECTED]
>>
>>
>>
>>
>>This e-mail, including any attachments, is a confidential business
>>communication, and may contain information that is confidential,
>>proprietary
>>and/or privileged.  This e-mail is intended only for the individual(s)
>to
>>whom it is addressed, and may not be saved, copied, printed, disclosed
>or
>>used by anyone else.  If you are not the(an) intended recipient,
please
>>immediately delete this e-mail from your computer system and notify
the
>>sender.  Thank you.
>>
>>
>>-
>>To unsubscribe, e-mail: [EMAIL PROTECTED]
>>For additional commands, e-mail: [EMAIL PROTECTED]
>>
>>
>>
>>
>>-
>>To unsubscribe, e-mail: [EMAIL PROTECTED]
>>For additional commands, e-mail: [EMAIL PROTECTED]
>
>
>
>
>This e-mail, including any attachments, is a confidential business
>communication, and may contain information that is confidential,
>pro

Ant install tasks

2003-12-08 Thread Rich Garabedian
I've used the custom ant tasks to build and install web apps a zillion
times. However, I'm setting up a new build/test environment on a fresh
machine and I'm having a problem getting the install task to work. I can
do all the normal all/compile/dist tasks. plus I can do the LIST task. I
can also use the HTML manager app to do the install. Just can't do the
install via ant.
 
Environment:
 
Windows XP Pro
jakarta-tomcat-5.0.16
apache-ant-1.5.4
 
Error:
 
BUILD FAILED
file:C:/Documents%20and%20Settings/rich/My%20Documents/workbench/java/bu
ild.xml:368: java.net.UnknownHostException: C
 
I'm nearly 100% the host is correct - it's simply localhost. Plus, the
list task works fine, so it has to be hitting the correct url to do
that. I've also echoed all the variables being passed to the install
target (in the build.xml), and they look correct.
 
Running ant with debug doesn't offer much more insight:
 
BUILD FAILED
file:C:/Documents%20and%20Settings/rich/My%20Documents/workbench/java/bu
ild.xml:368: java.net.UnknownHostException: C
at
org.apache.catalina.ant.DeployTask.execute(DeployTask.java:208)
at org.apache.tools.ant.Task.perform(Task.java:341)
at org.apache.tools.ant.Target.execute(Target.java:309)
at org.apache.tools.ant.Target.performTasks(Target.java:336)
at org.apache.tools.ant.Project.executeTarget(Project.java:1339)
at
org.apache.tools.ant.Project.executeTargets(Project.java:1255)
at org.apache.tools.ant.Main.runBuild(Main.java:609)
at org.apache.tools.ant.Main.start(Main.java:196)
at org.apache.tools.ant.Main.main(Main.java:235)
Caused by: java.net.UnknownHostException: C
at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:153)
at java.net.Socket.connect(Socket.java:452)
at java.net.Socket.connect(Socket.java:402)
at sun.net.NetworkClient.doConnect(NetworkClient.java:139)
at sun.net.NetworkClient.openServer(NetworkClient.java:118)
at sun.net.ftp.FtpClient.openServer(FtpClient.java:423)
at sun.net.ftp.FtpClient.(FtpClient.java:692)
at
sun.net.www.protocol.ftp.FtpURLConnection.connect(FtpURLConnection.ja
va:175)
at
sun.net.www.protocol.ftp.FtpURLConnection.getInputStream(FtpURLConnec
tion.java:257)
at
org.apache.catalina.ant.DeployTask.execute(DeployTask.java:205)
... 8 more
--- Nested Exception ---
java.net.UnknownHostException: C
at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:153)
at java.net.Socket.connect(Socket.java:452)
at java.net.Socket.connect(Socket.java:402)
at sun.net.NetworkClient.doConnect(NetworkClient.java:139)
at sun.net.NetworkClient.openServer(NetworkClient.java:118)
at sun.net.ftp.FtpClient.openServer(FtpClient.java:423)
at sun.net.ftp.FtpClient.(FtpClient.java:692)
at
sun.net.www.protocol.ftp.FtpURLConnection.connect(FtpURLConnection.ja
va:175)
at
sun.net.www.protocol.ftp.FtpURLConnection.getInputStream(FtpURLConnec
tion.java:257)
at
org.apache.catalina.ant.DeployTask.execute(DeployTask.java:205)
at org.apache.tools.ant.Task.perform(Task.java:341)
at org.apache.tools.ant.Target.execute(Target.java:309)
at org.apache.tools.ant.Target.performTasks(Target.java:336)
at org.apache.tools.ant.Project.executeTarget(Project.java:1339)
at
org.apache.tools.ant.Project.executeTargets(Project.java:1255)
at org.apache.tools.ant.Main.runBuild(Main.java:609)
at org.apache.tools.ant.Main.start(Main.java:196)
at org.apache.tools.ant.Main.main(Main.java:235)
 
Total time: 11 seconds
 
Anyone have a hint? I've never run into this before and I'm going crazy
trying to figure out what's wrong.
 
Many thanks,
 
Rich


RE: More sophisticated JDBCRealm Security

2003-12-08 Thread Shapira, Yoav

Howdy,
You can search the archives of this list for many examples.

Yoav Shapira
Millennium ChemInformatics


>-Original Message-
>From: Frank Febbraro [mailto:[EMAIL PROTECTED]
>Sent: Monday, December 08, 2003 12:10 PM
>To: Tomcat Users List
>Subject: Re: More sophisticated JDBCRealm Security
>
>Well crap!
>
>Turns out we are using MySQL 4.0.x which does not have support for
views.
>
>Can anyone point me in a direction that would help me in implementing
my
>own
>Realm (either brand new or by extending another)
>
>Thank you very much,
>Frank
>
>- Original Message -
>From: "Shapira, Yoav" <[EMAIL PROTECTED]>
>To: "Tomcat Users List" <[EMAIL PROTECTED]>
>Sent: Monday, December 08, 2003 11:49 AM
>Subject: RE: More sophisticated JDBCRealm Security
>
>
>
>Howdy,
>Your other option is to extend JDBCRealm into your own custom realm
>implementation.
>
>Yoav Shapira
>Millennium ChemInformatics
>
>
>>-Original Message-
>>From: Frank Febbraro [mailto:[EMAIL PROTECTED]
>>Sent: Monday, December 08, 2003 11:41 AM
>>To: Tomcat Users List
>>Subject: Re: More sophisticated JDBCRealm Security
>>
>>What about the fact that the groupId column in User is called id in
the
>>Groups table, would it be a case of making another view to accomplish
>that
>>translation too?
>>
>>Besides craeting views, which is easy, what are the other options
here?
>>
>>- Original Message -
>>From: "Shapira, Yoav" <[EMAIL PROTECTED]>
>>To: "Tomcat Users List" <[EMAIL PROTECTED]>
>>Sent: Monday, December 08, 2003 10:48 AM
>>Subject: RE: More sophisticated JDBCRealm Security
>>
>>
>>
>>Howdy,
>>The typical solution in many cases involving JDBCRealm is (if you
don't
>>want to customize the realm by coding) to create a view for use by the
>>JDBC realm.  In your case, you'd create a view on the user table where
>>only active users are shown, and configure the JDBC realm to query
this
>>view rather than the user table.
>>
>>Yoav Shapira
>>Millennium ChemInformatics
>>
>>
>>>-Original Message-
>>>From: Frank Febbraro [mailto:[EMAIL PROTECTED]
>>>Sent: Monday, December 08, 2003 10:48 AM
>>>To: Tomcat Users List
>>>Subject: More sophisticated JDBCRealm Security
>>>
>>>In looking through the docs I am surpised that I dont see a way to do
>>some
>>>more "sophisticated" JDBCRealm security. I may just be looking in the
>>wrong
>>>place or misreading something so please let me know if I am.
>>>
>>>My DB tables are arranged as follows
>>>
>>>create table user
>>>(
>>>   id BIGINT NOT NULL AUTO_INCREMENT,
>>>   email VARCHAR(100) not null unique,
>>>   groupId BIGINT not null,
>>>   password VARCHAR(20) not null,
>>>   active BIT,
>>>   primary key (id)
>>>);
>>>
>>>create table groups
>>>(
>>>   id BIGINT NOT NULL AUTO_INCREMENT,
>>>   role VARCHAR(255) not null,
>>>   primary key (id)
>>>);
>>>
>>>The email address is the "user login", password is obvious.
>>>
>>>I would want something that would only let ACTIVE users log in
(active
>>=
>>>1),
>>>and User.groupId maps to Groups.id field.
>>>
>>>Using the standard JDBCRealm I do not see how this is possible. Would
>I
>>>actually have to create my own custom Realm implementation in order
to
>>>achieve these goals?
>>>
>>>Thanks for any input/advice,
>>>Frank
>>>
>>>
>>>
>>>
>>>-
>>>To unsubscribe, e-mail: [EMAIL PROTECTED]
>>>For additional commands, e-mail: [EMAIL PROTECTED]
>>
>>
>>
>>
>>This e-mail, including any attachments, is a confidential business
>>communication, and may contain information that is confidential,
>>proprietary
>>and/or privileged.  This e-mail is intended only for the individual(s)
>to
>>whom it is addressed, and may not be saved, copied, printed, disclosed
>or
>>used by anyone else.  If you are not the(an) intended recipient,
please
>>immediately delete this e-mail from your computer system and notify
the
>>sender.  Thank you.
>>
>>
>>-
>>To unsubscribe, e-mail: [EMAIL PROTECTED]
>>For additional commands, e-mail: [EMAIL PROTECTED]
>>
>>
>>
>>
>>-
>>To unsubscribe, e-mail: [EMAIL PROTECTED]
>>For additional commands, e-mail: [EMAIL PROTECTED]
>
>
>
>
>This e-mail, including any attachments, is a confidential business
>communication, and may contain information that is confidential,
>proprietary
>and/or privileged.  This e-mail is intended only for the individual(s)
to
>whom it is addressed, and may not be saved, copied, printed, disclosed
or
>used by anyone else.  If you are not the(an) intended recipient, please
>immediately delete this e-mail from your computer system and notify the
>sender.  Thank you.
>
>
>-
>To unsubscribe, e-mail: [EMAIL PROTECTED]
>For additional commands, e-mail: [EMAIL PROTECTED]
>
>
>
>-
>T

RE: Hot deploy?

2003-12-08 Thread Shapira, Yoav

Howdy,
Hot deployment as you describe exists and is enabled by default, i.e.
you don't have to do anything but drop the WAR into the webapps
directory.  This is true for tomcat 4 as well as tomcat 5, for which you
can stop waiting as it's available already.

Yoav Shapira
Millennium ChemInformatics


>-Original Message-
>From: Chris [mailto:[EMAIL PROTECTED]
>Sent: Monday, December 08, 2003 1:07 PM
>To: [EMAIL PROTECTED]
>Subject: Hot deploy?
>
>Hi all,
>
>I'm very much looking forward to Tomcat 5.x! Reading the docs, I can't
tell
> if Tomcat 5.0 offers JBoss-style hot-deployment of WARs or not. By
"JBoss-
>style",
>I mean all I have to do is drop a new WAR into a deployment directory,
and
>it will
>get picked up and redeployed. Section 4 of the User's Guide
("Deployment")
>implies
>that this is possible, using something called the host's "autodeploy"
>attribute.
>However, Section 3 ("First Webapp") seems to have an exhaustive list of
all
>possible deployment methods, and automatic hot deployment is not
mentioned.
>
>Does such hot deployment exist? Or is the only option to use the
deployment
>Ant tasks?
>
>Thanks,
>Chris
>
>
>__
>Do you Yahoo!?
>New Yahoo! Photos - easier uploading and sharing.
>http://photos.yahoo.com/
>
>-
>To unsubscribe, e-mail: [EMAIL PROTECTED]
>For additional commands, e-mail: [EMAIL PROTECTED]




This e-mail, including any attachments, is a confidential business communication, and 
may contain information that is confidential, proprietary and/or privileged.  This 
e-mail is intended only for the individual(s) to whom it is addressed, and may not be 
saved, copied, printed, disclosed or used by anyone else.  If you are not the(an) 
intended recipient, please immediately delete this e-mail from your computer system 
and notify the sender.  Thank you.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: login page css not applied

2003-12-08 Thread Rod Giffin
US SSA said:
> Rod,
>
> I am sorry, but I am not 100% following you...
>
> Yes, you are right. I have the following situation:
>
> I am trying url: localhost/xxxWEB/

I think it would work if you set the welcome-file element to send the user
by default to localhost/xxxWEB/login.html (or index.html or whatever)
where the login form could reside.  The welcome.jsp page should not be a
default page if it is protected, or it will be served before the user is
authenticated.  Since login.html or whatnot is not a jsp page, it won't be
protected by a security-constraint such as /*.jsp, and it will be able to
be accessed.

> This gets forwared by the  to welcome.jsp, which I want to
> be protected.
> welcome.jsp page is in xxxWEB/ directory.
>
> Could you explain what you are suggesting again?




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



REPOST: Can't find child 2386 in scoreboard

2003-12-08 Thread Sachin Dole
This is a repost. Please help.

Hi

I have checked the archives and google to solve the problem but to no avail.
Please help.

The error I get in my apache error_log when navigating to
http://localhost/examples is:

[Sat Dec 06 00:11:21 2003] [info] Server: Apache/2.0.46, Interface:
mod_ssl/2.0.46, Library: OpenSSL/0.9.6b
[Sat Dec 06 00:11:21 2003] [error] jk2_init() Can't find child 2386 in
scoreboard
[Sat Dec 06 00:11:21 2003] [error] mod_jk child init 1 -2
[Sat Dec 06 00:11:21 2003] [error] jk2_init() Can't find child 2389 in
scoreboard
[Sat Dec 06 00:11:21 2003] [error] mod_jk child init 1 -2
[Sat Dec 06 00:11:21 2003] [notice] Apache/2.0.46 (Unix) mod_ssl/2.0.46
OpenSSL/0.9.6b mod_jk2/2.0.3-dev configured -- resuming normal operations
[Sat Dec 06 00:11:21 2003] [info] Server built: Nov 30 2003 02:31:06
[Sat Dec 06 00:11:21 2003] [debug]

in the catalina.out log output seems fine:
[Sat Dec 06 00:10:08 2003] ( info ) [jk_uriEnv.c (245)]  uriEnv.setAttribute()
t
he worker directive is deprecated. Use 'group' instead.
[Sat Dec 06 00:10:08 2003] ( info ) [jk_uriEnv.c (245)]  uriEnv.setAttribute()
t
he worker directive is deprecated. Use 'group' instead.
[Sat Dec 06 00:10:08 2003] ( info ) [jk_logger_file.c (184)]  Initializing log
f
ile stderr
[Sat Dec 06 00:10:08 2003] ( info ) [jk_workerEnv.c (403)]  workerEnv.init() ok
/usr/local/apache2/conf/workers2.properties
Dec 6, 2003 12:10:08 AM org.apache.jk.apr.AprImpl init
INFO: JK2: Initialized apr
Dec 6, 2003 12:10:08 AM org.apache.jk.common.ChannelUn init
INFO: JK: listening on unix socket:
/opt/apache/jakarta-tomcat-4.1.29/work/jk2.s
ocket
Dec 6, 2003 12:10:08 AM org.apache.jk.common.ChannelSocket init
INFO: JK2: ajp13 listening on /0.0.0.0:8009


I am trying to use unix sockets.

WHAT could be wrong? I have made sure that shm.file exists and that the same
shm.file is being used by tomcat and apache.

I am using apache 2.0.46, jk2 2.0.3 and tomcat 4.1.29.

Please help.

sachin dole


=
Cheers!

Sachin Dole  


__
Do you Yahoo!?
New Yahoo! Photos - easier uploading and sharing.
http://photos.yahoo.com/

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: Enforce no cache

2003-12-08 Thread Ralph Einfeldt

If it really is not allowed, then the handling of several proxies 
and/or browsers is severly broken. We had several problems with
caching until we forced the reload by appending a unique query 
parameter in each link.

> -Original Message-
> From: Tim Funk [mailto:[EMAIL PROTECTED]
> Sent: Monday, December 08, 2003 12:50 PM
> To: Tomcat Users List
> Subject: Re: Enforce no cache
> 
> 
> Write a filter that adds all the no-cacheing headers. (Google)
> 
> (Or to be "lazy", use ssl - since I think cacheing is not 
> allowed in ssl)
> 
> -Tim
> 
> Jerald Powel wrote:
> 
> > Hello, 
> > How do I enforce no caching for a particular context 
> under TC? Sites/doco welcome
> >  
> > G. 
> >  
> 
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 
> 
> 

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



"Unable to compile class for JSP"

2003-12-08 Thread Marc Dugger
I've recently upgraded from 4.1.29 to 5.0.16 and Jasper appears to be
(inconsistently) unable to rename temporary class files.  One moment, a JSP
will compile cleanly and, after a very simple page modification, the same
JSP will cause this exception:

2003-12-08 12:29:30,527 [http8080-Processor25] ERROR
org.apache.struts.taglib.tiles.InsertTag - ServletException in
'/property/edit/title.jsp': tmpFile.rena
meTo(classFile) failed
org.apache.jasper.JasperException: Unable to compile class for JSP
at
org.apache.jasper.JspCompilationContext.compile(JspCompilationContext.java:5
58)
at
org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:2
91)
at
org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:301)
at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:248)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:856)
  ...yada x 3...

Thanks in advance for any insight.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



AW: Database pool problem

2003-12-08 Thread SH Solutions
Seams a bit off-topic, but proposing databases, have a look at
firebirdsql.org.
Firebird ist very good, stable, wide-spread (in flavor of interbase), even
used in tanks.

Firebird has all features of a good database, including triggers, views,
stored procedures, referential integrity, and a lot more.
It is actually free even for commercial use!

Maybe PostgreSQL is as good as firebird (or even better), but MySQL doen't
even reach the power of firebird partly.

Just my 5 cent,
  Steffen


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: login page css not applied

2003-12-08 Thread Chaikin, Yaakov Y (US SSA)
Rod,

I am sorry, but I am not 100% following you...

Yes, you are right. I have the following situation:

I am trying url: localhost/xxxWEB/

This gets forwared by the  to welcome.jsp, which I want to
be protected.
welcome.jsp page is in xxxWEB/ directory.

Could you explain what you are suggesting again?

Thanks.

Yaakov Chaikin
Software Engineer
BAE SYSTEMS
301-838-6899 (phone)
301-838-6802 (fax)
[EMAIL PROTECTED]


> -Original Message-
> From: Rod Giffin [mailto:[EMAIL PROTECTED]
> Sent: Monday, December 08, 2003 1:46 PM
> To: [EMAIL PROTECTED]
> Subject: RE: login page css not applied
> 
> Ok, I've seen that before.  Probably your protected page has the same
name
> as one of the welcome-file page matches in web.xml, or they're both
> present.
> 
> If index.html is your welcome page, use that in the welcome-file
setting
> and not an existing .jsp file.  I think that's the way it works.
> 
> Rod.
> 
> US SSA said:
> > Yes, you are right.
> >
> > However, when I changed the pattern to /*.jsp, the login page was
> > skipped and the browser went straight to the protected page without
any
> > authentication.
> >
> > I am not sure what's going on.
> >
> > Yaakov Chaikin
> > Software Engineer
> > BAE SYSTEMS
> > 301-838-6899 (phone)
> > 301-838-6802 (fax)
> > [EMAIL PROTECTED]
> >
> >
> >> -Original Message-
> >> From: Rod Giffin [mailto:[EMAIL PROTECTED]
> >> Sent: Monday, December 08, 2003 1:31 PM
> >> To: [EMAIL PROTECTED]
> >> Subject: Re: login page css not applied
> >>
> >> US SSA said:
> >> > Hi,
> >> >
> >> > I have a problem where the login page is not showing any images
and
> > not
> >> > having the css applied to it.
> >>
> >> But after the user has authenticated, it works right?
> >>
> >> I'm not 100% sure about the setup of your webapp and I've been
> > spending so
> >> much time with other products I've forgotten a lot of stuff, but it
> >> appears to me on first glance that you've got a security constraint
on
> > /*,
> >> which would include images/ and css/ in that webapp before the user
> > has
> >> authenticated, wouldn't it?  If not, then I've forgotten more than
I
> >> realized.
> >>
> >> Anyway, if so, the browser is requesting the css and image files
> > before
> >> the user has enough authentication to get them.  That's why it's
> > working
> >> after the user is authenticated and a role assigned.
> >>
> >> Rod.
> >>
> >>
> >> [snip]
> >> >  
> >> >  
> >> >  Regular and Power
> >> > User
> >> >  /*
> >> >  
> >> >  
> >> >  RegularUser
> >> >  PowerUser
> >> >  Administrator
> >> >  
> >> >  
> >> >  NONE
> >> >  
> >> >  
> >>
> 
> 
> 
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: login page css not applied

2003-12-08 Thread Rod Giffin
Ok, I've seen that before.  Probably your protected page has the same name
as one of the welcome-file page matches in web.xml, or they're both
present.

If index.html is your welcome page, use that in the welcome-file setting
and not an existing .jsp file.  I think that's the way it works.

Rod.

US SSA said:
> Yes, you are right.
>
> However, when I changed the pattern to /*.jsp, the login page was
> skipped and the browser went straight to the protected page without any
> authentication.
>
> I am not sure what's going on.
>
> Yaakov Chaikin
> Software Engineer
> BAE SYSTEMS
> 301-838-6899 (phone)
> 301-838-6802 (fax)
> [EMAIL PROTECTED]
>
>
>> -Original Message-
>> From: Rod Giffin [mailto:[EMAIL PROTECTED]
>> Sent: Monday, December 08, 2003 1:31 PM
>> To: [EMAIL PROTECTED]
>> Subject: Re: login page css not applied
>>
>> US SSA said:
>> > Hi,
>> >
>> > I have a problem where the login page is not showing any images and
> not
>> > having the css applied to it.
>>
>> But after the user has authenticated, it works right?
>>
>> I'm not 100% sure about the setup of your webapp and I've been
> spending so
>> much time with other products I've forgotten a lot of stuff, but it
>> appears to me on first glance that you've got a security constraint on
> /*,
>> which would include images/ and css/ in that webapp before the user
> has
>> authenticated, wouldn't it?  If not, then I've forgotten more than I
>> realized.
>>
>> Anyway, if so, the browser is requesting the css and image files
> before
>> the user has enough authentication to get them.  That's why it's
> working
>> after the user is authenticated and a role assigned.
>>
>> Rod.
>>
>>
>> [snip]
>> >
>> >
>> >Regular and Power
>> > User
>> >/*
>> >
>> >
>> >RegularUser
>> >PowerUser
>> >Administrator
>> >
>> >
>> >NONE
>> >
>> >
>>




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: login page css not applied

2003-12-08 Thread Marc Dugger
I just did this same thing yesterday.  Your CSS and images are being
protected by the web resource containing /*.
Until a user has logged in, they won't be able to receive images, css, etc.
Be more specific in your URL pattern so you don't include those common
resources.


> -Original Message-
> From: Chaikin, Yaakov Y (US SSA)
> [mailto:[EMAIL PROTECTED]
> Sent: Monday, December 08, 2003 12:06 PM
> To: [EMAIL PROTECTED]
> Subject: login page css not applied
>
>
> Hi,
>
> I have a problem where the login page is not showing any images and not
> having the css applied to it.
>
> Here is my web.xml:
> ---
> 
>
>   
>   Controller
>   corej2ee.web.Controller
>   
>
> corej2ee.web.navigation.class
>
> corej2ee.web.EnvEntryNavigator
>   
>   
>
>   
>   Controller
>   /*.jsp
>   
>
>   
>   welcome.jsp
>   index.html
>   
>
>   
>jdbc/afecWEBDB
>javax.sql.DataSource
>Container
>
>
>   
>   
>   Regular and Power
> User
>   /*
>   
>   
>   RegularUser
>   PowerUser
>   Administrator
>   
>   
>   NONE
>   
>   
>
>   
>   
>
> Administrator
>   /admin/*
>   
>   
>   Administrator
>   
>   
>   NONE
>   
>   
>
>   
>   FORM
>   
>   /login.jsp
>
> /loginError.html
>   
>   
>
>   
>
> route/welcomePage/success
>   /welcome.jsp
>   java.lang.String
>   
> 
>
> My images are under images folder in the root of the application and my
> css in under css folder in the root of my application.
>
> The webpage is referencing css, for example, like this:
> 
>
> I am know I am messing up security paths, but I can't figure out what to
> do about it.
>
> Any help would be greatly appreciated.
>
> Thanks.
>
> Yaakov Chaikin
> Software Engineer
> BAE SYSTEMS
> 301-838-6899 (phone)
> 301-838-6802 (fax)
> [EMAIL PROTECTED]
>
>
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: login page css not applied

2003-12-08 Thread Chaikin, Yaakov Y (US SSA)
Yes, you are right.

However, when I changed the pattern to /*.jsp, the login page was
skipped and the browser went straight to the protected page without any
authentication.

I am not sure what's going on.

Yaakov Chaikin
Software Engineer
BAE SYSTEMS
301-838-6899 (phone)
301-838-6802 (fax)
[EMAIL PROTECTED]


> -Original Message-
> From: Rod Giffin [mailto:[EMAIL PROTECTED]
> Sent: Monday, December 08, 2003 1:31 PM
> To: [EMAIL PROTECTED]
> Subject: Re: login page css not applied
> 
> US SSA said:
> > Hi,
> >
> > I have a problem where the login page is not showing any images and
not
> > having the css applied to it.
> 
> But after the user has authenticated, it works right?
> 
> I'm not 100% sure about the setup of your webapp and I've been
spending so
> much time with other products I've forgotten a lot of stuff, but it
> appears to me on first glance that you've got a security constraint on
/*,
> which would include images/ and css/ in that webapp before the user
has
> authenticated, wouldn't it?  If not, then I've forgotten more than I
> realized.
> 
> Anyway, if so, the browser is requesting the css and image files
before
> the user has enough authentication to get them.  That's why it's
working
> after the user is authenticated and a role assigned.
> 
> Rod.
> 
> 
> [snip]
> > 
> > 
> > Regular and Power
> > User
> > /*
> > 
> > 
> > RegularUser
> > PowerUser
> > Administrator
> > 
> > 
> > NONE
> > 
> > 
> 
> 
> 
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: login page css not applied

2003-12-08 Thread Rod Giffin
US SSA said:
> Hi,
>
> I have a problem where the login page is not showing any images and not
> having the css applied to it.

But after the user has authenticated, it works right?

I'm not 100% sure about the setup of your webapp and I've been spending so
much time with other products I've forgotten a lot of stuff, but it
appears to me on first glance that you've got a security constraint on /*,
which would include images/ and css/ in that webapp before the user has
authenticated, wouldn't it?  If not, then I've forgotten more than I
realized.

Anyway, if so, the browser is requesting the css and image files before
the user has enough authentication to get them.  That's why it's working
after the user is authenticated and a role assigned.

Rod.


[snip]
>   
>   
>   Regular and Power
> User
>   /*
>   
>   
>   RegularUser
>   PowerUser
>   Administrator
>   
>   
>   NONE
>   
>   




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



java.net.SocketException: Broken pipe

2003-12-08 Thread Altankov Peter
Im running tomcat 4.1.29 with mod_jk2 under apache and getting constant
stack traces in catalina.out like this one:
 
Dec 8, 2003 8:04:49 PM org.apache.jk.server.JkCoyoteHandler action
SEVERE: Error in action code
java.net.SocketException: Broken pipe
at java.net.SocketOutputStream.socketWrite0(Native Method)
at
java.net.SocketOutputStream.socketWrite(SocketOutputStream.java:92)
at
java.net.SocketOutputStream.write(SocketOutputStream.java:136)
at
org.apache.jk.common.ChannelSocket.send(ChannelSocket.java:457)
at
org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:654)
at
org.apache.jk.server.JkCoyoteHandler.action(JkCoyoteHandler.java:435)
at org.apache.coyote.Response.action(Response.java:222)
at org.apache.coyote.Response.finish(Response.java:343)
at
org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:314)
at
org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:387)
at
org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:673)
at
org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:
615)
at
org.apache.jk.common.SocketConnection.runIt(ChannelSocket.java:786)
at
org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool
.java:666)
at java.lang.Thread.run(Thread.java:536)

 
Have anybody ran over this issue and is it fixable? I already red some
posting about firewalls closing connections after some period of time
and "Stop" button pressed in browser. But is there any reasonable
solution for this, since i cant ignore firewalls and cant make users not
press stop?
 
thanks in advance for any hints
 


Hot deploy?

2003-12-08 Thread Chris
Hi all,

I'm very much looking forward to Tomcat 5.x! Reading the docs, I can't tell
 if Tomcat 5.0 offers JBoss-style hot-deployment of WARs or not. By "JBoss-style", 
I mean all I have to do is drop a new WAR into a deployment directory, and it will 
get picked up and redeployed. Section 4 of the User's Guide ("Deployment") implies 
that this is possible, using something called the host's "autodeploy" attribute. 
However, Section 3 ("First Webapp") seems to have an exhaustive list of all 
possible deployment methods, and automatic hot deployment is not mentioned.

Does such hot deployment exist? Or is the only option to use the deployment 
Ant tasks?

Thanks,
Chris


__
Do you Yahoo!?
New Yahoo! Photos - easier uploading and sharing.
http://photos.yahoo.com/

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



login page css not applied

2003-12-08 Thread Chaikin, Yaakov Y (US SSA)
Hi,

I have a problem where the login page is not showing any images and not
having the css applied to it.

Here is my web.xml:
---



Controller
corej2ee.web.Controller


corej2ee.web.navigation.class

corej2ee.web.EnvEntryNavigator




Controller
/*.jsp



welcome.jsp
index.html



 jdbc/afecWEBDB
 javax.sql.DataSource
 Container
 
   


Regular and Power
User
/*


RegularUser
PowerUser
Administrator


NONE






Administrator
/admin/*


Administrator


NONE




FORM

/login.jsp

/loginError.html





route/welcomePage/success
/welcome.jsp
java.lang.String



My images are under images folder in the root of the application and my
css in under css folder in the root of my application.

The webpage is referencing css, for example, like this:


I am know I am messing up security paths, but I can't figure out what to
do about it.

Any help would be greatly appreciated.

Thanks.

Yaakov Chaikin
Software Engineer
BAE SYSTEMS
301-838-6899 (phone)
301-838-6802 (fax)
[EMAIL PROTECTED]



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Tomcat5.0.16 not reading request attributes from mod_jk

2003-12-08 Thread Remy Maucherat
Martin Kuba wrote:
Hi,

I have a problem getting request attributes (like
SSL information and additional CGI variables) in Tomcat5.0.16
connected to Apache using mod_jk/1.2.5
It seems to be some problem with the new "Coyote/JK2 AJP 1.3"
connector, because it works in Tomcat4.1.29.
Please help.
I don't know about your problem, but most of the connector code is 
identical with TC 4.1.29 (in particular, the JK implementation is the same).

The code in CoyoteRequest.getAttribute from TC 5 seems fine, when 
compared to the code from TC 4.1.

Here are the details:

I have it working with Tomcat4.1.29, after some experiments
I figured out that in Apache's httpd.conf, I have to set
JkMount /myapp/* myworker
JkEnvVar SSL_CLIENT_S_DN "none"

  SSLOptions +ExportCertData +StdEnvVars

so that mod_jk extracts the SSL-related information
from CGI variables, adds value of CGI variable specified by the JkEnvVar 
directive and sends the information to TomCat.
In Tomcat4.1.29's server.xml I can use both prepared connectors





to get the information as request attributes,
but the older "Ajp13Connector" is better, because it
gets also the SSL_CLIENT_S_DN value, but "JkCoyoteHandler"
does not, it gets only the SSL attributes.
But in Tomcat5.0.16, with exactly the same Apache setup
and the standard Coyote connector in server.xml:


it sets no request attributes at all ! Is it a bug
in Tomcat5.0.16's Coyote connector or is something
wrong with my configuration ?
--
x
Rémy Maucherat
Senior Developer & Consultant
JBoss Group (Europe) SàRL
x
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: [OT}RE: directive.include problem

2003-12-08 Thread Atreya Basu
That's right.  The XML equivalent for <%@ include> is .  That's what I am having difficulty with. 

Anyone with experience using the above directive?

Atreya

David Evans wrote:

The <%@ include> directive includes the contents of the file before
compilation.
http://java.sun.com/products/jsp/tags/syntaxref.fm6.html#8772
dave
 



--
_
Atreya Basu
Developer,
Greenfield Research Inc.
e-mail: atreya (at) greenfieldresearch (dot) ca


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Tomcat5.0.16 not reading request attributes from mod_jk

2003-12-08 Thread Martin Kuba
Hi,

I have a problem getting request attributes (like
SSL information and additional CGI variables) in Tomcat5.0.16
connected to Apache using mod_jk/1.2.5
It seems to be some problem with the new "Coyote/JK2 AJP 1.3"
connector, because it works in Tomcat4.1.29.
Please help.
Here are the details:

I have it working with Tomcat4.1.29, after some experiments
I figured out that in Apache's httpd.conf, I have to set
JkMount /myapp/* myworker
JkEnvVar SSL_CLIENT_S_DN "none"

  SSLOptions +ExportCertData +StdEnvVars

so that mod_jk extracts the SSL-related information
from CGI variables, adds value of CGI variable specified by the JkEnvVar 
directive and sends the information to TomCat.
In Tomcat4.1.29's server.xml I can use both prepared connectors





to get the information as request attributes,
but the older "Ajp13Connector" is better, because it
gets also the SSL_CLIENT_S_DN value, but "JkCoyoteHandler"
does not, it gets only the SSL attributes.
But in Tomcat5.0.16, with exactly the same Apache setup
and the standard Coyote connector in server.xml:


it sets no request attributes at all ! Is it a bug
in Tomcat5.0.16's Coyote connector or is something
wrong with my configuration ?
Martin
--
~~
Supercomputing Center Brno Martin Kuba
Institute of Computer Scienceemail: [EMAIL PROTECTED]
Masaryk University http://www.ics.muni.cz/~makub/
Botanicka 68a, 60200 Brno, CZ mobil: +420-603-533775
--


smime.p7s
Description: S/MIME Cryptographic Signature


Re: [OT}RE: directive.include problem

2003-12-08 Thread David Evans
On Mon, 2003-12-08 at 11:53, Atreya Basu wrote:
> The only problem with the include directive is that it actually outputs 
> the result of a jsp rather than just the text. What I want to do is have 
> some content in a another file, have the two file put together then 
> compiled.

I don't think this is true.

The  action tag acts as you describe above, outputing its
results during the request proccessing phase. 
http://java.sun.com/products/jsp/tags/syntaxref.fm11.html

The <%@ include> directive includes the contents of the file before
compilation.
http://java.sun.com/products/jsp/tags/syntaxref.fm6.html#8772
dave

> 
> Is there a way to do that I wonder?
> 
> Michele Emmi wrote:
> 
> > Try:
> >
> > <%@ include file="..." %>
> >
> > Michele
> >
> >
> >> From: Atreya Basu <[EMAIL PROTECTED]>
> >> Reply-To: "Tomcat Users List" <[EMAIL PROTECTED]>
> >> To: Tomcat Users List <[EMAIL PROTECTED]>
> >> Subject: directive.include problem
> >> Date: Mon, 08 Dec 2003 12:24:06 -0400
> >>
> >> Hello,
> >>
> >> I'm getting a weird error when using  >> />.
> >>
> >> I get an jsp.error.badaction error.
> >>
> >> I don't know maybe I'm using the the directive incorrectly. What I am 
> >> trying to do is make my JSPs cleaner by moving some of the header and 
> >> footer code onto a different file. Since I use the same header and 
> >> footer code, I thought that I could use the directive.include 
> >> element. But no luck.
> >>
> >> Any help?
> >>
> >> -- 
> >> _
> >> Atreya Basu
> >> Developer,
> >> Greenfield Research Inc.
> >> e-mail: atreya (at) greenfieldresearch (dot) ca
> >>
> >>
> >>
> >>
> >> -
> >> To unsubscribe, e-mail: [EMAIL PROTECTED]
> >> For additional commands, e-mail: [EMAIL PROTECTED]
> >>
> >
> > _
> > Cell phone ‘switch’ rules are taking effect — find out more here. 
> > http://special.msn.com/msnbc/consumeradvocate.armx
> >
> >
> > -
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> >
> >
> 
> 
> -- 
> _
> Atreya Basu
> Developer,
> Greenfield Research Inc.
> e-mail: atreya (at) greenfieldresearch (dot) ca
> 
> 
> 
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Urgent! Tomcat4 closed giving Out of Memory Error

2003-12-08 Thread Jeff Tulley
Look at the open files  - it is 9182.  That IS already pretty high, but
you may be hitting that limit since in Unix, everything is a file. 
Sockets, etc.

On Linux, is there a way in the JVM to tell the difference between
memory given to the new generation, old generation, and permanent
generation in the JVM?  There were users on this list posting weird
OutOfMemory errors last week that were doing class reloading, and the
permanent generation was filling up even though there was plenty of
space in the old and new gen.  Of course, I think these comments only
apply to a 1.4.x JVM.  Does your code do funky stuff with the
classloaders, or are you reloading your application in Tomcat's manager?
 (or changing web.xml, which would cause reloads??)  

Have you profiled your application to find any memory leaks?

>>> [EMAIL PROTECTED] 12/6/03 11:45:27 AM >>>
I am using Linux2.4.20-smp. I think the limits for the entire system
are
not problem:
>cat /proc/sys/kernel/threads-max
14336
>cat /proc/sys/fs/file-max
209708
>cat /proc/sys/fs/file-nr
22311366209708
>ulimit -a
core file size(blocks, -c) 0
data seg size (kbytes, -d) unlimited
file size (blocks, -f) unlimited
max locked memory (kbytes, -l) unlimited
max memory size   (kbytes, -m) unlimited
open files(-n) 9182
pipe size  (512 bytes, -p) 8
stack size(kbytes, -s) 8192
cpu time (seconds, -t) unlimited
max user processes(-u) 7168
virtual memory(kbytes, -v) unlimited

But I can't find where the limits for each process/user are. One
message 
found from google said PTHREAD_THREADS_MAX could be the max thread
count
per process. In my /usr/include/bits/local_lim.h, I have

/* The number of threads per process.  */
#define _POSIX_THREAD_THREADS_MAX   64
/* This is the value this implementation supports.  */
#define PTHREAD_THREADS_MAX 16384

16384 is large enough, I believe. Then what could be the reason of the

error?

By the way, the "Out of Memory" error didn't appear all the time. 
Sometimes there was just no response without any error message. Do you

know where I can get more detailed bug files?

Thank you very much.

Qi


On Sat, 6 Dec 2003, Tim Funk wrote:

> When you get "java.lang.OutOfMemoryError: unable to create new native
thread" 
> it means you are running into an operating system limit. You can give
the JVM 
> 1 Exabyte of memory and you'll still get this error.
> 
> Look at the kernel parameters for your machine and the following
limits:
> 1) Threads allowable on the system
> 2) Threads run by a user
> 3) Threads run by a process
> 4) File handles per process
> 5) File handles per user
> 
> Use your OS manual or Google to tweak these parameters.
> 
> http://jakarta.apache.org/tomcat/faq/memory.html#why 
> 
> -Tim
> 
> qi zhang wrote:
> > Hi,
> > 
> > I have stunk on this problem for almost 2 weeks. :-( 
> > In these two weeks, I have tried many methods, but it still doesn't
work.
> > 
> > I built a system to run TPCW benchmark. One web and application
server, 
> > with tomcat4.0 running, one database with mysql4.0 running on it
and 
> > several client machines. The Jave version is j2sdk1.4.0_03. The
system 
> > worked perfect under light load. But when the number of clients 
> > exceeded some number (like 600), the tomcat4 didn't work anymore.
> > I checked catalina.out. Sometimes no error message appear, while in
some 
> > time it appeared the error:
> > 
> > SEVERE: Caught exception executing 
> > [EMAIL PROTECTED], terminating
thread
> > java.lang.OutOfMemoryError: unable to create new native thread
> > at java.lang.Thread.start(Native Method)
> > at 
> >
org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.(ThreadPool.java:497)
> > at 
> 
> 
>
-
> To unsubscribe, e-mail: [EMAIL PROTECTED] 
> For additional commands, e-mail: [EMAIL PROTECTED]

> 

-- 
Qi Zhang, Ph.D Student

Department of Computer Science,
College of William and Mary
P.O. Box 8795
Williamsburg, VA 23187-8795



-
To unsubscribe, e-mail: [EMAIL PROTECTED] 
For additional commands, e-mail: [EMAIL PROTECTED] 


Jeff Tulley  ([EMAIL PROTECTED])
(801)861-5322
Novell, Inc., The Leading Provider of Net Business Solutions
http://www.novell.com

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: More sophisticated JDBCRealm Security

2003-12-08 Thread Tim Funk
Easiest alternative:
Cron and a sql script.
lock user and group table
truncate user and group table
insert into user and group tables with query
unlock
-Tim

Frank Febbraro wrote:

Well crap!

Turns out we are using MySQL 4.0.x which does not have support for views.

Can anyone point me in a direction that would help me in implementing my own
Realm (either brand new or by extending another)


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: [OT}RE: directive.include problem

2003-12-08 Thread Jon Wingfield
Oops. Note to self: must read JSP2.0 spec ;) (specifically JSP.6.2.4)

Jon Wingfield wrote:

erm. shouldn't it be:

as per section JSP.4.4 of the JSP 1.2 specification.
HTH,

Jon

Atreya Basu wrote:

The only problem with the include directive is that it actually 
outputs the result of a jsp rather than just the text. What I want to 
do is have some content in a another file, have the two file put 
together then compiled.

Is there a way to do that I wonder?

Michele Emmi wrote:

Try:

<%@ include file="..." %>

Michele


From: Atreya Basu <[EMAIL PROTECTED]>
Reply-To: "Tomcat Users List" <[EMAIL PROTECTED]>
To: Tomcat Users List <[EMAIL PROTECTED]>
Subject: directive.include problem
Date: Mon, 08 Dec 2003 12:24:06 -0400
Hello,

I'm getting a weird error when using .

I get an jsp.error.badaction error.

I don't know maybe I'm using the the directive incorrectly. What I 
am trying to do is make my JSPs cleaner by moving some of the header 
and footer code onto a different file. Since I use the same header 
and footer code, I thought that I could use the directive.include 
element. But no luck.

Any help?

--
_
Atreya Basu
Developer,
Greenfield Research Inc.
e-mail: atreya (at) greenfieldresearch (dot) ca




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: More sophisticated JDBCRealm Security

2003-12-08 Thread Tim Funk
Since your making a view to only be used by tomcat, there is "no problem". 
You can change column names when creating a view.

Additionally, if you want more security, make your group and user views 
locked to a tomcat id (sql login that is). Then tomcat itself is locked out 
of other changes or looks into your sql database.

-Tim

Frank Febbraro wrote:

What about the fact that the groupId column in User is called id in the
Groups table, would it be a case of making another view to accomplish that
translation too?
Besides craeting views, which is easy, what are the other options here?

- Original Message - 
From: "Shapira, Yoav" <[EMAIL PROTECTED]>
To: "Tomcat Users List" <[EMAIL PROTECTED]>
Sent: Monday, December 08, 2003 10:48 AM
Subject: RE: More sophisticated JDBCRealm Security



Howdy,
The typical solution in many cases involving JDBCRealm is (if you don't
want to customize the realm by coding) to create a view for use by the
JDBC realm.  In your case, you'd create a view on the user table where
only active users are shown, and configure the JDBC realm to query this
view rather than the user table.
Yoav Shapira
Millennium ChemInformatics


-Original Message-
From: Frank Febbraro [mailto:[EMAIL PROTECTED]
Sent: Monday, December 08, 2003 10:48 AM
To: Tomcat Users List
Subject: More sophisticated JDBCRealm Security
In looking through the docs I am surpised that I dont see a way to do
some

more "sophisticated" JDBCRealm security. I may just be looking in the
wrong

place or misreading something so please let me know if I am.

My DB tables are arranged as follows

create table user
(
 id BIGINT NOT NULL AUTO_INCREMENT,
 email VARCHAR(100) not null unique,
 groupId BIGINT not null,
 password VARCHAR(20) not null,
 active BIT,
 primary key (id)
);
create table groups
(
 id BIGINT NOT NULL AUTO_INCREMENT,
 role VARCHAR(255) not null,
 primary key (id)
);
The email address is the "user login", password is obvious.

I would want something that would only let ACTIVE users log in (active
=

1),
and User.groupId maps to Groups.id field.
Using the standard JDBCRealm I do not see how this is possible. Would I
actually have to create my own custom Realm implementation in order to
achieve these goals?


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


RE: SSL problem with TC 5.0.16

2003-12-08 Thread Baer Peter Christoph Alexander
Yes, we set keystorePass to what we entered when
creating the keystore. 

Below are the Connectors from our server.xml.
Do you see anything wrong, here? Something,
that was ok with TC 4.0.6, but is no longer valid
for TC 5.0.16?

Thanks in advance!

Alex











> -Original Message-
> From: Luc Foisy [mailto:[EMAIL PROTECTED]
> Sent: Monday, December 08, 2003 5:53 PM
> To: Tomcat Users List
> Subject: RE: SSL problem with TC 5.0.16
> 
> 
> Did you set keystorePass?
> 
> -Original Message-
> From: Baer Peter Christoph Alexander 
> [mailto:[EMAIL PROTECTED]
> Sent: Monday, December 08, 2003 11:49 AM
> To: '[EMAIL PROTECTED]'
> Subject: SSL problem with TC 5.0.16
> 
> 
> Hi,
> 
> before you start throwing eggs and tomatoes at me:
> I *have* searched the mailing list archive before
> posting this message... ;-)
> 
> 
> I just installed Tomcat 5.0.16. Now we want to
> migrate an application from TC 4.0.6 to it.
> For this we need to run TC with SSL.
> However, there's apparently a mistake in our
> SSL configuration. After adapting server.xml
> for our webapp, we see the following startup
> error message:
> 
> 
> INFO: Starting Coyote HTTP/1.1 on port 8080
> 08.12.2003 17:01:45 org.apache.coyote.http11.Http11Protocol start
> SCHWERWIEGEND: Error starting endpoint
> java.io.IOException: Keystore was tampered with, or password 
> was incorrect
> at
> sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:748)
> at java.security.KeyStore.load(KeyStore.java:652)
> at
> org.apache.tomcat.util.net.jsse.JSSESocketFactory.getStore(JSSESocket
> Factory.java:295)
> at
> org.apache.tomcat.util.net.jsse.JSSESocketFactory.getKeystore(JSSESoc
> ketFactory.java:259)
> at
> org.apache.tomcat.util.net.jsse.JSSE14SocketFactory.getKeyManagers(JS
> SE14SocketFactory.java:172)
> 
> 
> Following the docs, we checked the password
> and we have also created quite a few new
> keystores and put there paths into the
> keystoreFile attribute of the Factory
> tag.
> 
> In TC5 even the old keystore with the
> original certificate of our application
> is rejected.
> 
> Has anybody seen this before? Can you provide
> some hint, what the problem could be caused
> by? We can rule out the things mentioned in
> the docs, I think!
> 
> Thanks in advance!
> 
>   Regards
>   Alex
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: More sophisticated JDBCRealm Security

2003-12-08 Thread Frank Febbraro
Well crap!

Turns out we are using MySQL 4.0.x which does not have support for views.

Can anyone point me in a direction that would help me in implementing my own
Realm (either brand new or by extending another)

Thank you very much,
Frank

- Original Message - 
From: "Shapira, Yoav" <[EMAIL PROTECTED]>
To: "Tomcat Users List" <[EMAIL PROTECTED]>
Sent: Monday, December 08, 2003 11:49 AM
Subject: RE: More sophisticated JDBCRealm Security



Howdy,
Your other option is to extend JDBCRealm into your own custom realm
implementation.

Yoav Shapira
Millennium ChemInformatics


>-Original Message-
>From: Frank Febbraro [mailto:[EMAIL PROTECTED]
>Sent: Monday, December 08, 2003 11:41 AM
>To: Tomcat Users List
>Subject: Re: More sophisticated JDBCRealm Security
>
>What about the fact that the groupId column in User is called id in the
>Groups table, would it be a case of making another view to accomplish
that
>translation too?
>
>Besides craeting views, which is easy, what are the other options here?
>
>- Original Message -
>From: "Shapira, Yoav" <[EMAIL PROTECTED]>
>To: "Tomcat Users List" <[EMAIL PROTECTED]>
>Sent: Monday, December 08, 2003 10:48 AM
>Subject: RE: More sophisticated JDBCRealm Security
>
>
>
>Howdy,
>The typical solution in many cases involving JDBCRealm is (if you don't
>want to customize the realm by coding) to create a view for use by the
>JDBC realm.  In your case, you'd create a view on the user table where
>only active users are shown, and configure the JDBC realm to query this
>view rather than the user table.
>
>Yoav Shapira
>Millennium ChemInformatics
>
>
>>-Original Message-
>>From: Frank Febbraro [mailto:[EMAIL PROTECTED]
>>Sent: Monday, December 08, 2003 10:48 AM
>>To: Tomcat Users List
>>Subject: More sophisticated JDBCRealm Security
>>
>>In looking through the docs I am surpised that I dont see a way to do
>some
>>more "sophisticated" JDBCRealm security. I may just be looking in the
>wrong
>>place or misreading something so please let me know if I am.
>>
>>My DB tables are arranged as follows
>>
>>create table user
>>(
>>   id BIGINT NOT NULL AUTO_INCREMENT,
>>   email VARCHAR(100) not null unique,
>>   groupId BIGINT not null,
>>   password VARCHAR(20) not null,
>>   active BIT,
>>   primary key (id)
>>);
>>
>>create table groups
>>(
>>   id BIGINT NOT NULL AUTO_INCREMENT,
>>   role VARCHAR(255) not null,
>>   primary key (id)
>>);
>>
>>The email address is the "user login", password is obvious.
>>
>>I would want something that would only let ACTIVE users log in (active
>=
>>1),
>>and User.groupId maps to Groups.id field.
>>
>>Using the standard JDBCRealm I do not see how this is possible. Would
I
>>actually have to create my own custom Realm implementation in order to
>>achieve these goals?
>>
>>Thanks for any input/advice,
>>Frank
>>
>>
>>
>>
>>-
>>To unsubscribe, e-mail: [EMAIL PROTECTED]
>>For additional commands, e-mail: [EMAIL PROTECTED]
>
>
>
>
>This e-mail, including any attachments, is a confidential business
>communication, and may contain information that is confidential,
>proprietary
>and/or privileged.  This e-mail is intended only for the individual(s)
to
>whom it is addressed, and may not be saved, copied, printed, disclosed
or
>used by anyone else.  If you are not the(an) intended recipient, please
>immediately delete this e-mail from your computer system and notify the
>sender.  Thank you.
>
>
>-
>To unsubscribe, e-mail: [EMAIL PROTECTED]
>For additional commands, e-mail: [EMAIL PROTECTED]
>
>
>
>
>-
>To unsubscribe, e-mail: [EMAIL PROTECTED]
>For additional commands, e-mail: [EMAIL PROTECTED]




This e-mail, including any attachments, is a confidential business
communication, and may contain information that is confidential, proprietary
and/or privileged.  This e-mail is intended only for the individual(s) to
whom it is addressed, and may not be saved, copied, printed, disclosed or
used by anyone else.  If you are not the(an) intended recipient, please
immediately delete this e-mail from your computer system and notify the
sender.  Thank you.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [OT}RE: directive.include problem

2003-12-08 Thread Jon Wingfield
erm. shouldn't it be:

as per section JSP.4.4 of the JSP 1.2 specification.
HTH,

Jon

Atreya Basu wrote:

The only problem with the include directive is that it actually outputs 
the result of a jsp rather than just the text. What I want to do is have 
some content in a another file, have the two file put together then 
compiled.

Is there a way to do that I wonder?

Michele Emmi wrote:

Try:

<%@ include file="..." %>

Michele


From: Atreya Basu <[EMAIL PROTECTED]>
Reply-To: "Tomcat Users List" <[EMAIL PROTECTED]>
To: Tomcat Users List <[EMAIL PROTECTED]>
Subject: directive.include problem
Date: Mon, 08 Dec 2003 12:24:06 -0400
Hello,

I'm getting a weird error when using .

I get an jsp.error.badaction error.

I don't know maybe I'm using the the directive incorrectly. What I am 
trying to do is make my JSPs cleaner by moving some of the header and 
footer code onto a different file. Since I use the same header and 
footer code, I thought that I could use the directive.include 
element. But no luck.

Any help?

--
_
Atreya Basu
Developer,
Greenfield Research Inc.
e-mail: atreya (at) greenfieldresearch (dot) ca




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Urgent: referencing external jar files from a jar in WEB-INF/lib

2003-12-08 Thread Krause Karin
Hello,
I just posted a very similar question some time ago, but got no answer until now.
see http://marc.theaimsgroup.com/?l=tomcat-user&m=106337028016813&w=2
I use Tomcat 4.1.27.
My question was, if Tomcat ClassLoaders can evaluate  the CLASS-PATH attribute set in 
the manifest of a jar file, to reference external jar files.
In the meantime I saw that the common class loader (and also server and shared)
can interprete the CLASS-PATH variable of the Manifest file of a jar file.
Unfortunately it seems not to work if I put a jar file, that references an external 
jar file by means of the CLASS-PATH
variable in the Manifest, in the WEB-INF/lib of my WAR file.
Should this be possible, or not ? Are there any other methods (do I use the wrong 
one)? As I understood the servlet spec 2.3
chapter 9.7.1 it should be possible by means of the CLASS-PATH attribute:
Snippet from the servlet spec 2.3 chapter 9.7.1
"WebContainers should be able to recognize declared dependencies expressed
in the manifest entry of any of the library JARs under the WEB-INF/lib entry 
in a WAR"
So the question is very urgent to me. Please help me.
Cheers Karin



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: Differences between jServ and Tomcat

2003-12-08 Thread Ralph Einfeldt

jServ is just a servlet engine (JSDK 2.0).
Tomcat is a servlet engine (JSDK 2.2/2.3/2.4), 
a jsp engine and a webserver and contains much
more additional functionality (DB Connection Pool,
Realms, Manager, )

> -Original Message-
> From: Jan Behrens [mailto:[EMAIL PROTECTED]
> Sent: Saturday, December 06, 2003 12:37 PM
> To: 'Tomcat Users List'
> Subject: Differences between jServ and Tomcat
> 
> 
> Hi List,
> 
> I wonder whether anyone out there could give me some insight 
> on the main
> differences between jServ and Tomcat. As far as I understand, 
> jServ is a
> Servlet Engine to be included with an instance of Apache, 
> whereas Tomcat of
> course can be used as a Standalone Server doing more than 
> just handling
> jsp/servlet requests from a webserver. Is that about right?
> 
> Any comments or good links on the matter would be highly appreciated.
> 
> Cheers, Jan
> 
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 
> 
> 

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: connection refused, localhost not found

2003-12-08 Thread Adam Hardy
I took out the welcome-file config in web.xml and now I just get a plain 
status 404.

But the tomcat manager shows the context is started and has a session 
after I try to access it.

On 12/08/2003 02:32 PM Adam Hardy wrote:
I changed the web.xml and have now managed to get tomcat to generate a 
status 404. This is also what comes thro to telnet.

Strange because the context appears in tomcat manager as running, with 
sessions.

I'm thinking about upgrading to 5.0.16 on this machine but I wanted to 
solve this problem before tackling the upgrade.

On 12/08/2003 02:19 PM Patrick Ale wrote:

what happens when you do:

telnet localhost 8080 GET /myapp/ HTTP/1.1 host:
localhost  
Patrick Ale System administrator Freeler B.V

Email: [EMAIL PROTECTED] Tel.:  +31 320 267678

"Muda o mundo, começe com você mesmo"



-Oorspronkelijk bericht- Van: Adam Hardy
[mailto:[EMAIL PROTECTED] Verzonden: maandag 8
december 2003 14:16 Aan: Tomcat Users List Onderwerp: Re:
connection refused, localhost not found
The app is not running, yup, guess I can't argue with that. 
Unfortunately it's not logging any exceptions. I see that tomcat
starts a session for the context, and it logs the request in 
localhost_access_log, but otherwise, it's dead as a dodo.

It's definitely on 8080 - the other contexts are obviously on 8080
and still run fine.
On 12/08/2003 01:41 PM Patrick Ale wrote:

Well,

I got this problem with MLDonkey (not really java, I know


but hey.. :P)

This simply means your program crashes on startup and that


nothing listens on port 8080.

Now.. dunno what browser you use but I had this with Mozilla. I
tried to connect to http://localhost:4080/ it didnt find


anything on that port so it

went on with resolving random/known by mozilla things, till


it found localhost.net.au which

actually is an existing page.

Motto of this story is: your app is not running or not on


port 8080 :-)

Patrick Ale System administrator Freeler B.V

"Muda o mundo, começe com você mesmo"




-Oorspronkelijk bericht- Van: Adam Hardy
[mailto:[EMAIL PROTECTED] Verzonden: maandag 8
december 2003 13:29 Aan: Tomcat Users List Onderwerp:
connection refused, localhost not found
Hi Listers I'm sceptical whether anybody else has ever suffered
this bizarre problem so I'm not expecting anybody to be able to
help,


but this is

seriously damaging my enjoyment of Monday morning.

I have tomcat 5.0.14 set up on one computer and it works


fine mostly,

i.e. root context, JSP examples, manager apps are working fine.

The problem is with the app I'm developing. On Friday night last 
week I did loads of debugging to sort out the JNDI
connection pool, e.g. configuring the app context, the web.xml
etc.

Now when I try to call up http://localhost:8080/myapp/ the browser 
zooms off to find http://www.localhost.net.au! When I
try http://127.0.0.1:8080/myapp/ I get a 'connection refused'
pop-up from the browsers - on my machine and on others. (root 
context still
works as I said).

Obviously I tried restarting tomcat, redeploying the app, taking 
out all the filters, changing the context name, checked
server.xml.

Anybody care to take a wild guess about what I need to do?


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: [OT}RE: directive.include problem

2003-12-08 Thread Atreya Basu
The only problem with the include directive is that it actually outputs 
the result of a jsp rather than just the text. What I want to do is have 
some content in a another file, have the two file put together then 
compiled.

Is there a way to do that I wonder?

Michele Emmi wrote:

Try:

<%@ include file="..." %>

Michele


From: Atreya Basu <[EMAIL PROTECTED]>
Reply-To: "Tomcat Users List" <[EMAIL PROTECTED]>
To: Tomcat Users List <[EMAIL PROTECTED]>
Subject: directive.include problem
Date: Mon, 08 Dec 2003 12:24:06 -0400
Hello,

I'm getting a weird error when using .

I get an jsp.error.badaction error.

I don't know maybe I'm using the the directive incorrectly. What I am 
trying to do is make my JSPs cleaner by moving some of the header and 
footer code onto a different file. Since I use the same header and 
footer code, I thought that I could use the directive.include 
element. But no luck.

Any help?

--
_
Atreya Basu
Developer,
Greenfield Research Inc.
e-mail: atreya (at) greenfieldresearch (dot) ca


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
_
Cell phone ‘switch’ rules are taking effect — find out more here. 
http://special.msn.com/msnbc/consumeradvocate.armx

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



--
_
Atreya Basu
Developer,
Greenfield Research Inc.
e-mail: atreya (at) greenfieldresearch (dot) ca


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


RE: SSL problem with TC 5.0.16

2003-12-08 Thread Luc Foisy
Did you set keystorePass?

-Original Message-
From: Baer Peter Christoph Alexander [mailto:[EMAIL PROTECTED]
Sent: Monday, December 08, 2003 11:49 AM
To: '[EMAIL PROTECTED]'
Subject: SSL problem with TC 5.0.16


Hi,

before you start throwing eggs and tomatoes at me:
I *have* searched the mailing list archive before
posting this message... ;-)


I just installed Tomcat 5.0.16. Now we want to
migrate an application from TC 4.0.6 to it.
For this we need to run TC with SSL.
However, there's apparently a mistake in our
SSL configuration. After adapting server.xml
for our webapp, we see the following startup
error message:


INFO: Starting Coyote HTTP/1.1 on port 8080
08.12.2003 17:01:45 org.apache.coyote.http11.Http11Protocol start
SCHWERWIEGEND: Error starting endpoint
java.io.IOException: Keystore was tampered with, or password was incorrect
at
sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:748)
at java.security.KeyStore.load(KeyStore.java:652)
at
org.apache.tomcat.util.net.jsse.JSSESocketFactory.getStore(JSSESocket
Factory.java:295)
at
org.apache.tomcat.util.net.jsse.JSSESocketFactory.getKeystore(JSSESoc
ketFactory.java:259)
at
org.apache.tomcat.util.net.jsse.JSSE14SocketFactory.getKeyManagers(JS
SE14SocketFactory.java:172)


Following the docs, we checked the password
and we have also created quite a few new
keystores and put there paths into the
keystoreFile attribute of the Factory
tag.

In TC5 even the old keystore with the
original certificate of our application
is rejected.

Has anybody seen this before? Can you provide
some hint, what the problem could be caused
by? We can rule out the things mentioned in
the docs, I think!

Thanks in advance!

Regards
Alex

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: More sophisticated JDBCRealm Security

2003-12-08 Thread Shapira, Yoav

Howdy,
Your other option is to extend JDBCRealm into your own custom realm
implementation.

Yoav Shapira
Millennium ChemInformatics


>-Original Message-
>From: Frank Febbraro [mailto:[EMAIL PROTECTED]
>Sent: Monday, December 08, 2003 11:41 AM
>To: Tomcat Users List
>Subject: Re: More sophisticated JDBCRealm Security
>
>What about the fact that the groupId column in User is called id in the
>Groups table, would it be a case of making another view to accomplish
that
>translation too?
>
>Besides craeting views, which is easy, what are the other options here?
>
>- Original Message -
>From: "Shapira, Yoav" <[EMAIL PROTECTED]>
>To: "Tomcat Users List" <[EMAIL PROTECTED]>
>Sent: Monday, December 08, 2003 10:48 AM
>Subject: RE: More sophisticated JDBCRealm Security
>
>
>
>Howdy,
>The typical solution in many cases involving JDBCRealm is (if you don't
>want to customize the realm by coding) to create a view for use by the
>JDBC realm.  In your case, you'd create a view on the user table where
>only active users are shown, and configure the JDBC realm to query this
>view rather than the user table.
>
>Yoav Shapira
>Millennium ChemInformatics
>
>
>>-Original Message-
>>From: Frank Febbraro [mailto:[EMAIL PROTECTED]
>>Sent: Monday, December 08, 2003 10:48 AM
>>To: Tomcat Users List
>>Subject: More sophisticated JDBCRealm Security
>>
>>In looking through the docs I am surpised that I dont see a way to do
>some
>>more "sophisticated" JDBCRealm security. I may just be looking in the
>wrong
>>place or misreading something so please let me know if I am.
>>
>>My DB tables are arranged as follows
>>
>>create table user
>>(
>>   id BIGINT NOT NULL AUTO_INCREMENT,
>>   email VARCHAR(100) not null unique,
>>   groupId BIGINT not null,
>>   password VARCHAR(20) not null,
>>   active BIT,
>>   primary key (id)
>>);
>>
>>create table groups
>>(
>>   id BIGINT NOT NULL AUTO_INCREMENT,
>>   role VARCHAR(255) not null,
>>   primary key (id)
>>);
>>
>>The email address is the "user login", password is obvious.
>>
>>I would want something that would only let ACTIVE users log in (active
>=
>>1),
>>and User.groupId maps to Groups.id field.
>>
>>Using the standard JDBCRealm I do not see how this is possible. Would
I
>>actually have to create my own custom Realm implementation in order to
>>achieve these goals?
>>
>>Thanks for any input/advice,
>>Frank
>>
>>
>>
>>
>>-
>>To unsubscribe, e-mail: [EMAIL PROTECTED]
>>For additional commands, e-mail: [EMAIL PROTECTED]
>
>
>
>
>This e-mail, including any attachments, is a confidential business
>communication, and may contain information that is confidential,
>proprietary
>and/or privileged.  This e-mail is intended only for the individual(s)
to
>whom it is addressed, and may not be saved, copied, printed, disclosed
or
>used by anyone else.  If you are not the(an) intended recipient, please
>immediately delete this e-mail from your computer system and notify the
>sender.  Thank you.
>
>
>-
>To unsubscribe, e-mail: [EMAIL PROTECTED]
>For additional commands, e-mail: [EMAIL PROTECTED]
>
>
>
>
>-
>To unsubscribe, e-mail: [EMAIL PROTECTED]
>For additional commands, e-mail: [EMAIL PROTECTED]




This e-mail, including any attachments, is a confidential business communication, and 
may contain information that is confidential, proprietary and/or privileged.  This 
e-mail is intended only for the individual(s) to whom it is addressed, and may not be 
saved, copied, printed, disclosed or used by anyone else.  If you are not the(an) 
intended recipient, please immediately delete this e-mail from your computer system 
and notify the sender.  Thank you.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



SSL problem with TC 5.0.16

2003-12-08 Thread Baer Peter Christoph Alexander
Hi,

before you start throwing eggs and tomatoes at me:
I *have* searched the mailing list archive before
posting this message... ;-)


I just installed Tomcat 5.0.16. Now we want to
migrate an application from TC 4.0.6 to it.
For this we need to run TC with SSL.
However, there's apparently a mistake in our
SSL configuration. After adapting server.xml
for our webapp, we see the following startup
error message:


INFO: Starting Coyote HTTP/1.1 on port 8080
08.12.2003 17:01:45 org.apache.coyote.http11.Http11Protocol start
SCHWERWIEGEND: Error starting endpoint
java.io.IOException: Keystore was tampered with, or password was incorrect
at
sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:748)
at java.security.KeyStore.load(KeyStore.java:652)
at
org.apache.tomcat.util.net.jsse.JSSESocketFactory.getStore(JSSESocket
Factory.java:295)
at
org.apache.tomcat.util.net.jsse.JSSESocketFactory.getKeystore(JSSESoc
ketFactory.java:259)
at
org.apache.tomcat.util.net.jsse.JSSE14SocketFactory.getKeyManagers(JS
SE14SocketFactory.java:172)


Following the docs, we checked the password
and we have also created quite a few new
keystores and put there paths into the
keystoreFile attribute of the Factory
tag.

In TC5 even the old keystore with the
original certificate of our application
is rejected.

Has anybody seen this before? Can you provide
some hint, what the problem could be caused
by? We can rule out the things mentioned in
the docs, I think!

Thanks in advance!

Regards
Alex

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[OT}RE: directive.include problem

2003-12-08 Thread Michele Emmi
Try:

<%@ include file="..." %>

Michele


From: Atreya Basu <[EMAIL PROTECTED]>
Reply-To: "Tomcat Users List" <[EMAIL PROTECTED]>
To: Tomcat Users List <[EMAIL PROTECTED]>
Subject: directive.include problem
Date: Mon, 08 Dec 2003 12:24:06 -0400
Hello,

I'm getting a weird error when using .

I get an jsp.error.badaction error.

I don't know maybe I'm using the the directive incorrectly.  What I am 
trying to do is make my JSPs cleaner by moving some of the header and 
footer code onto a different file.  Since I use the same header and footer 
code, I thought that I could use the directive.include element.  But no 
luck.

Any help?

--
_
Atreya Basu
Developer,
Greenfield Research Inc.
e-mail: atreya (at) greenfieldresearch (dot) ca


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
_
Cell phone ‘switch’ rules are taking effect — find out more here. 
http://special.msn.com/msnbc/consumeradvocate.armx

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: More sophisticated JDBCRealm Security

2003-12-08 Thread Frank Febbraro
What about the fact that the groupId column in User is called id in the
Groups table, would it be a case of making another view to accomplish that
translation too?

Besides craeting views, which is easy, what are the other options here?

- Original Message - 
From: "Shapira, Yoav" <[EMAIL PROTECTED]>
To: "Tomcat Users List" <[EMAIL PROTECTED]>
Sent: Monday, December 08, 2003 10:48 AM
Subject: RE: More sophisticated JDBCRealm Security



Howdy,
The typical solution in many cases involving JDBCRealm is (if you don't
want to customize the realm by coding) to create a view for use by the
JDBC realm.  In your case, you'd create a view on the user table where
only active users are shown, and configure the JDBC realm to query this
view rather than the user table.

Yoav Shapira
Millennium ChemInformatics


>-Original Message-
>From: Frank Febbraro [mailto:[EMAIL PROTECTED]
>Sent: Monday, December 08, 2003 10:48 AM
>To: Tomcat Users List
>Subject: More sophisticated JDBCRealm Security
>
>In looking through the docs I am surpised that I dont see a way to do
some
>more "sophisticated" JDBCRealm security. I may just be looking in the
wrong
>place or misreading something so please let me know if I am.
>
>My DB tables are arranged as follows
>
>create table user
>(
>   id BIGINT NOT NULL AUTO_INCREMENT,
>   email VARCHAR(100) not null unique,
>   groupId BIGINT not null,
>   password VARCHAR(20) not null,
>   active BIT,
>   primary key (id)
>);
>
>create table groups
>(
>   id BIGINT NOT NULL AUTO_INCREMENT,
>   role VARCHAR(255) not null,
>   primary key (id)
>);
>
>The email address is the "user login", password is obvious.
>
>I would want something that would only let ACTIVE users log in (active
=
>1),
>and User.groupId maps to Groups.id field.
>
>Using the standard JDBCRealm I do not see how this is possible. Would I
>actually have to create my own custom Realm implementation in order to
>achieve these goals?
>
>Thanks for any input/advice,
>Frank
>
>
>
>
>-
>To unsubscribe, e-mail: [EMAIL PROTECTED]
>For additional commands, e-mail: [EMAIL PROTECTED]




This e-mail, including any attachments, is a confidential business
communication, and may contain information that is confidential, proprietary
and/or privileged.  This e-mail is intended only for the individual(s) to
whom it is addressed, and may not be saved, copied, printed, disclosed or
used by anyone else.  If you are not the(an) intended recipient, please
immediately delete this e-mail from your computer system and notify the
sender.  Thank you.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



directive.include problem

2003-12-08 Thread Atreya Basu
Hello,

I'm getting a weird error when using .

I get an jsp.error.badaction error.

I don't know maybe I'm using the the directive incorrectly.  What I am 
trying to do is make my JSPs cleaner by moving some of the header and 
footer code onto a different file.  Since I use the same header and 
footer code, I thought that I could use the directive.include element.  
But no luck.

Any help?

--
_
Atreya Basu
Developer,
Greenfield Research Inc.
e-mail: atreya (at) greenfieldresearch (dot) ca


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


[OT] Rad Game Tools

2003-12-08 Thread Graham Reeds
Does anyone else get a message from [EMAIL PROTECTED] asking them to
update their email address?

Everytime I email this list I get one back.

G.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Cookies.

2003-12-08 Thread Graham Reeds
> I checked the javadoc documentation for the Cookie class, and it doesn't
> seem to mention the default "life" of a Cookie object once sent to the
> browser. I'm inclined to think that the default is that it will live as
> long as the browser session does (especially because of your evidence).

It is.  I've been implementing cookies in my app.

> Try this:
>
> Cookie cookie = new Cookie("entId", eID);
> cookie.setMaxAge(cookie_life_in_seconds);
>
> res.addCookie(cookie);
>
> cookie = new Cookie("ognId", ignId);
> cookies.setMaxAge(cookie_life_in_seconds);
>
> res.addCookie(cookie);
>
> This is likely to extend the life of your cookies beyond the browser's
> session. Therefore, they will be sent in requests after the browser is
> restarted.

[OT]  Personally I think that being able to have a single name=value
attribute in a cookie is a bad idea.  I can't find anywhere that explains
the reason for this.  Anyway to get around this I have been looking at
formatting my cookie as:

name=lang:en;usr:grahamr;pswrd:fud;

and deencode the result afterwards.  Then you don't have to mess around with
lots of cookies.

G.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: More sophisticated JDBCRealm Security

2003-12-08 Thread Shapira, Yoav

Howdy,
The typical solution in many cases involving JDBCRealm is (if you don't
want to customize the realm by coding) to create a view for use by the
JDBC realm.  In your case, you'd create a view on the user table where
only active users are shown, and configure the JDBC realm to query this
view rather than the user table.

Yoav Shapira
Millennium ChemInformatics


>-Original Message-
>From: Frank Febbraro [mailto:[EMAIL PROTECTED]
>Sent: Monday, December 08, 2003 10:48 AM
>To: Tomcat Users List
>Subject: More sophisticated JDBCRealm Security
>
>In looking through the docs I am surpised that I dont see a way to do
some
>more "sophisticated" JDBCRealm security. I may just be looking in the
wrong
>place or misreading something so please let me know if I am.
>
>My DB tables are arranged as follows
>
>create table user
>(
>   id BIGINT NOT NULL AUTO_INCREMENT,
>   email VARCHAR(100) not null unique,
>   groupId BIGINT not null,
>   password VARCHAR(20) not null,
>   active BIT,
>   primary key (id)
>);
>
>create table groups
>(
>   id BIGINT NOT NULL AUTO_INCREMENT,
>   role VARCHAR(255) not null,
>   primary key (id)
>);
>
>The email address is the "user login", password is obvious.
>
>I would want something that would only let ACTIVE users log in (active
=
>1),
>and User.groupId maps to Groups.id field.
>
>Using the standard JDBCRealm I do not see how this is possible. Would I
>actually have to create my own custom Realm implementation in order to
>achieve these goals?
>
>Thanks for any input/advice,
>Frank
>
>
>
>
>-
>To unsubscribe, e-mail: [EMAIL PROTECTED]
>For additional commands, e-mail: [EMAIL PROTECTED]




This e-mail, including any attachments, is a confidential business communication, and 
may contain information that is confidential, proprietary and/or privileged.  This 
e-mail is intended only for the individual(s) to whom it is addressed, and may not be 
saved, copied, printed, disclosed or used by anyone else.  If you are not the(an) 
intended recipient, please immediately delete this e-mail from your computer system 
and notify the sender.  Thank you.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



More sophisticated JDBCRealm Security

2003-12-08 Thread Frank Febbraro
In looking through the docs I am surpised that I dont see a way to do some
more "sophisticated" JDBCRealm security. I may just be looking in the wrong
place or misreading something so please let me know if I am.

My DB tables are arranged as follows

create table user
(
   id BIGINT NOT NULL AUTO_INCREMENT,
   email VARCHAR(100) not null unique,
   groupId BIGINT not null,
   password VARCHAR(20) not null,
   active BIT,
   primary key (id)
);

create table groups
(
   id BIGINT NOT NULL AUTO_INCREMENT,
   role VARCHAR(255) not null,
   primary key (id)
);

The email address is the "user login", password is obvious.

I would want something that would only let ACTIVE users log in (active = 1),
and User.groupId maps to Groups.id field.

Using the standard JDBCRealm I do not see how this is possible. Would I
actually have to create my own custom Realm implementation in order to
achieve these goals?

Thanks for any input/advice,
Frank




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: Lock on database file not being released...

2003-12-08 Thread Chaikin, Yaakov Y (US SSA)
Hi,

I did as you said and adjusted those values for the odbc. Same result.
The database file is still showing as locked.

Yaakov Chaikin
Software Engineer
BAE SYSTEMS
301-838-6899 (phone)
301-838-6802 (fax)
[EMAIL PROTECTED]


> -Original Message-
> From: George Sexton [mailto:[EMAIL PROTECTED]
> Sent: Monday, December 08, 2003 1:11 AM
> To: 'Tomcat Users List'
> Subject: RE: Lock on database file not being released...
> 
> In the ODBC connection entry in the registry, or by using the ODBC
> Connection editor, change those two parameters. They are probably set
> for Yes and should be set to No.
> 
> If you are not using an ODBC Connection entry, then you need to pass
> these as arguments in the connection string.
> 
> -Original Message-
> From: Chaikin, Yaakov Y (US SSA)
> [mailto:[EMAIL PROTECTED]
> Sent: Sunday, December 07, 2003 11:07 PM
> To: Tomcat Users List
> Subject: RE: Lock on database file not being released...
> 
> 
> How do I do that in server.xml file? Is that what you are suggesting?
> Specifying other parameters for the connection pooling?
> 
> Please elaborate on what you think I should do.
> 
> Thanks.
> 
> Yaakov Chaikin
> Software Engineer
> BAE SYSTEMS
> 301-838-6899 (phone)
> 301-838-6802 (fax)
> [EMAIL PROTECTED]
> 
> 
> > -Original Message-
> > From: George Sexton [mailto:[EMAIL PROTECTED]
> > Sent: Sunday, December 07, 2003 11:28 PM
> > To: 'Tomcat Users List'
> > Subject: RE: Lock on database file not being released...
> >
> > OK, I now think I know the issue. Try changing the entries for the
> ODBC
> > connection. Specifically change:
> >
> > ImplicitCommitSync
> >
> > And
> >
> > UserCommitSync
> >
> > The docs are inconsistent on their usage, and I think the drivers
vary
> > depending upon the version of the Jet engine you are using.
> >
> > Anyhow, adjust these and see what happens.
> >
> >
> >
> > -Original Message-
> > From: Chaikin, Yaakov Y (US SSA)
> > [mailto:[EMAIL PROTECTED]
> > Sent: Sunday, December 07, 2003 2:13 PM
> > To: Tomcat Users List
> > Subject: RE: Lock on database file not being released...
> >
> >
> > > > However, I have used this driver before in a standalone app and
> when
> > you
> > > close a connection, it certainly does release the lock on the
> database
> > file.
> > >
> > > This makes me think, you didn't use pooling in this standalone
app.
> > Therefor
> > > check weather you close all your ResultSets and Statements. In
> > standalone
> > > apps where no pooling is involved, they are caught by the garbage
> > collector,
> > > but not in connection pooling.
> > >
> > > Trapped into this myself.
> >
> > Steffen,
> >
> > I tried what you said and closed the ResultSet and Statement before
I
> > close the Connection. Still same affect.
> >
> > Any other ideas anyone?
> >
> > I highly doubt it's the driver. I would bet that I am doing
something
> > wrong. I just can't figure out what it is.
> >
> > Thanks,
> > Yaakov.
> >
> >
> >
-
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> >
> >
> >
> >
-
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> 
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 
> 
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Cookies.

2003-12-08 Thread Christopher Schultz
Abdul,

So, I have added the cookies value in servlet, and I can get the cookie
value in jsp. When I work with the same browser fine working. But when close
and open the new browser window I cant get the cookie values.
Setting cookie,
res.addCookie(new Cookie("entID",eID));
res.addCookie(new Cookie("lgnId",lgnId));
I checked the javadoc documentation for the Cookie class, and it doesn't 
seem to mention the default "life" of a Cookie object once sent to the 
browser. I'm inclined to think that the default is that it will live as 
long as the browser session does (especially because of your evidence).

Try this:

Cookie cookie = new Cookie("entId", eID);
cookie.setMaxAge(cookie_life_in_seconds);
res.addCookie(cookie);

cookie = new Cookie("ognId", ignId);
cookies.setMaxAge(cookie_life_in_seconds);
res.addCookie(cookie);

This is likely to extend the life of your cookies beyond the browser's 
session. Therefore, they will be sent in requests after the browser is 
restarted.

-chris

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


RE: Tomcat command line console

2003-12-08 Thread Shapira, Yoav

Howdy,
You can use the ant tasks that connect to the manager webapp in
conjunction with a filter/valve to deny non-localhost requests to the
manager webapp.

What did you find insecure about the manager webapp?

Yoav Shapira
Millennium ChemInformatics


>-Original Message-
>From: Artur Karazniewicz [mailto:[EMAIL PROTECTED]
>Sent: Monday, December 08, 2003 6:38 AM
>To: [EMAIL PROTECTED]
>Subject: Tomcat command line console
>
>Hello,
>
>We have used few tomcat instances in our production environment. Since
>number of our Tomcats grew, we are looking for better approach to
manage
>it. Especially we are looking for something like - lets say -
>"command line tomcat console" - something simillar to manager webapp,
but
>as a regular command line application (since we use ssh, and some of
>tomcats are
>hidden behind firewalls we can't use GUIs), rather than deployed
manager
>webapp.
>We found a bit insecure to run tomcat manager in an production
environment,
>but, of course, it would be great to get a manager's functionality
anyway.
>Unfortunatelly I haven't seen something usable yet. Maybe someone has
seen
>something like this? Sugestions would be greatly appreciated.
>
>regards,
>Artur
>
>--
>Artur Karazniewicz
>
>
>-
>To unsubscribe, e-mail: [EMAIL PROTECTED]
>For additional commands, e-mail: [EMAIL PROTECTED]




This e-mail, including any attachments, is a confidential business communication, and 
may contain information that is confidential, proprietary and/or privileged.  This 
e-mail is intended only for the individual(s) to whom it is addressed, and may not be 
saved, copied, printed, disclosed or used by anyone else.  If you are not the(an) 
intended recipient, please immediately delete this e-mail from your computer system 
and notify the sender.  Thank you.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



  1   2   >