Re: admin interface: jdbcrealm usage

2003-12-12 Thread Bill Barker
Patches are always welcome ;-). Ostad, James [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] I have implemented the jdbcrealm user authentication. Now when I go to the tomcat admin site, there is no sign of our users and roles. Am I supposed to assume that once I moved to jdbcrealm, I

Re: Question - TOMCAT

2003-12-12 Thread Bill Barker
Probably the first thing you need to do is to read the ssl-howto in the Tomcat documentation. After that you will probably realize that you forgot to set the 'keystoreFile' and 'keystorePass' attributes on the Connector ;-) Mirna Misere [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED]

Re: [WORKAROUND] Re: VERY weird problem with commons-logging and Tomcat5

2003-12-12 Thread Remy Maucherat
Philipp Taprogge wrote: Hi! I still do not know what is causing this behavior, but I found a workaround in case anyone else stumbles upon this problem: In my log4j.properties I left the log4j.rootCategory property alone and only set log4j.category.package.name.of.my.classes properties for each

RE: response.reset() and forward() ... problematic? DBCP related?

2003-12-12 Thread Altankov Peter
I totally agree with you, its not :), I just had 10 free minutes and layed out some hints -Original Message- From: Antonio Fiol Bonnin [mailto:[EMAIL PROTECTED] Sent: 11 2003 . 22:51 To: Tomcat Users List Subject: Re: response.reset() and forward() ... problematic? DBCP related?

Re: Can't get jk2 to work!

2003-12-12 Thread Dola Woolfe
Sorry, I still couldn't get it to work. (Apache would not restart.) I took the file mod_jk_1.2.5_2.0.47.dll renamed it as intructed and put it in the modules directory. I left the rest unchanged as in the original email. Perhaps I'm doing something dumb and altogether wrong! Dola --- Mark

JNDI comp namespace

2003-12-12 Thread Tony Colson
Dear Tomcat Users, I am using Tomcat 4 and trying to use JNDI to connect to a data source and environment variables. I get the following when trying to access the InitialContext via DataSource ds = (DataSource)initialContext.lookup( java:comp/env/jdbc/mydb );

Re: [WORKAROUND] Re: VERY weird problem with commons-logging and Tomcat5

2003-12-12 Thread Remy Maucherat
Remy Maucherat wrote: Philipp Taprogge wrote: Hi! I still do not know what is causing this behavior, but I found a workaround in case anyone else stumbles upon this problem: In my log4j.properties I left the log4j.rootCategory property alone and only set

Re: Image Viewing

2003-12-12 Thread Rodrigo Ruiz
Kiran, if condifentiality is your main concern, I will suppose you are using some kind of authentication mechanism in your webapp. If you are using container authentication, just add the image directory to your security restriction, and only authenticated users will have access to the images.

, ! 6u

2003-12-12 Thread
, ! Webra : . , , , , , , , , ,, . , , , , . 782-47-94 ( ) -. , ,, , . , ,. 1000 . - 782-47-94 : 20 ( ) . 15. . . 50

AW: JNDI comp namespace

2003-12-12 Thread Jan Behrens
Hi Tony, I have - and it allways proved to be my fault in the end ;) I would suggest that you post your server xml to have someone look it over. Don't forget to change your connect data and password before though! Is the resource bound in the appropriate context or globally? Cheers, Jan

RE: JNDI comp namespace

2003-12-12 Thread Tony Colson
As per a suggestion I am posting my server.xml file. I have several applications on different ports. I am trying to use JNDI on the NNT application running on port 9000. Do a search for 9000 and you will be at the Service... tag. Just scroll down to see the Context and Resource tags to look at

RE: Tomcat 5 and oracle

2003-12-12 Thread Altankov Peter
By the way, since you are redefining the Resource in your metrology2.xml, you can actually remove it form the server.xml. -Original Message- From: Jonathan Drnek [mailto:[EMAIL PROTECTED] Sent: 11 2003 . 21:05 To: Tomcat Users List Subject: RE: Tomcat 5 and oracle I got it. I was

Re: Tomcat 5.0.16 : manager-app access - solved

2003-12-12 Thread Dirk Griesbach
Hi Andy, yes, you were completely right with your assumption about the user roles. Thanks a lot greets Dirk - Original Message - From: Adam Hardy [EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Thursday, December 11, 2003 10:33 PM Subject: Re: Tomcat 5.0.16 : manager-app

Apache SSL variables...

2003-12-12 Thread Federico Fernandez Cruz
smime.p7s Description: S/MIME Cryptographic Signature

SQL Injection and Tomcat

2003-12-12 Thread Curley, Thomas
Hi, I have an app using MySql and TC4 on linux o JSP app Does Tomcat have any inbuild features to filter out certain characters like ', ;, etc from request URI's. Would a filters or values impl help with this or is it necessary to parse all input (may affect performance) any experience

RE: JNDI comp namespace

2003-12-12 Thread Altankov Peter
Howdy,Try this setup in your context definition: Resource name=jdbc/NNT auth=Container type=javax.sql.DataSource/ ResourceParams name=jdbc/NNT . After that in the source where u access it go for: Context ictx = new InitialContext(); if (ictx == null) { throw new

Apache SSL Variables

2003-12-12 Thread Federico Fernandez Cruz
Hi! How can I get the Apache SSL variables in Tomcat? I am trying this: % out.println(Is secure = + request.isSecure() + br); Enumeration e = request.getHeaderNames(); while (e.hasMoreElements()) { String header = (String) e.nextElement(); String value =

service installer for TC5

2003-12-12 Thread Jacob Lund
I am sorry if this is a stupid question - but I cannot find any documentation on how to use the tomcat.exe service installer included in tomcat 5.0.16. Thanks /Jacob - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional

Re: strange error messages in tomcat log and mod_jk2 log

2003-12-12 Thread Chris Joelly
Hello again! has anybody expirienced the same error messages in his log files? i can't figure out whats going on and need help soon, because the server crashes very often :-| thxalot, Chris -- mit freundlichen Grüßen / with kind regards Ing. Christian Jölly @ Solutions unycom Information

Vedr.: service installer for TC5

2003-12-12 Thread Thomas Nybro Bolding
Having been through the installation process for 5.0.16 a few times by now I can assure it is pretty self explanatory. Ensure you have j2sdk installed and a JAVA_HOME variable set. Im still strugling trying to get Tomcat not to use the public JRE though but this may be NT specific??? I have had

RE: Vedr.: service installer for TC5

2003-12-12 Thread Jacob Lund
OK thanks that was very helpful! I told you I might be stupid ;-) What parameters are valid? Tomcat /? Or /help does not give me any pointers! /Jacob -Original Message- From: Thomas Nybro Bolding [mailto:[EMAIL PROTECTED] Sent: 12. december 2003 11:25 To: Tomcat Users List Subject:

Disabling JSP execution under certain dirs

2003-12-12 Thread Albert Moliner
Hello. I've searched the archives on this subject, but the nearest I've reached has been some posts about not serving static content. It's a bit of a surprise that no one has asked this before, so sorry if it is a recurrent question. I want Tomcat (4) to execute JSPs as usual, but prevent it

Re: Vedr.: service installer for TC5

2003-12-12 Thread Remy Maucherat
Jacob Lund wrote: OK thanks that was very helpful! I told you I might be stupid ;-) What parameters are valid? Tomcat /? Or /help does not give me any pointers! Here's some (basic) doc on procrun (aka tomcat.exe): http://jakarta.apache.org/commons/daemon/procrun.html Next to it is the jsvc

See WebApps in Manager and Admin application

2003-12-12 Thread Michel-Ange Anton
Hello, I'm using Tomcat-5.0.16 with the default configuration. I have just added in the tomcat-users.xml file, my user with admin and manager role. In the Manager application, I see all the webapps : (/), (/admin), (/balancer), (/jsp-examples), (/manager), (/servlets-examples), (/tomcat-docs).

RE: strange error messages in tomcat log and mod_jk2 log

2003-12-12 Thread Altankov Peter
Hi! Im gettting a similar traces in catalina.out: Dec 11, 2003 8:00:03 PM org.apache.jk.server.JkCoyoteHandler action SEVERE: Error in action code java.net.SocketException: Broken pipe at java.net.SocketOutputStream.socketWrite0(Native Method) at

Re: SQL Injection and Tomcat

2003-12-12 Thread Andrey Rogov
Hi, U can configure the Valve param in your server.xml file Context path= docBase=Root debug=0 Valve className=path.to.your.app.BadInputFilterValve deny=\x00,\x04,\x08,\xoa,\x0d/ /Context U Can Also buy wonderfull book TOMCAT The definitive Guide by Ian E.Darwin

Re: SQL Injection and Tomcat

2003-12-12 Thread Andrey Rogov
Hi, U can configure the Valve param in your server.xml file Context path= docBase=Root debug=0 Valve className=path.to.your.app.BadInputFilterValve deny=\x00,\x04,\x08,\xoa,\x0d/ /Context U Can Also buy wonderfull book TOMCAT The definitive Guide by Ian E.Darwin

Re: SQL Injection and Tomcat

2003-12-12 Thread Graham Reeds
U Can Also buy wonderfull book TOMCAT The definitive Guide by Ian E.Darwin Jason Brittain Which version(s) of Tomcat does it cover? Amazon synopsis doesn't say which version. I'm currently locked into TC3.2.3 so a book that covers 4.x might not be a wise purchase. G.

Re: SQL Injection and Tomcat

2003-12-12 Thread Tim Funk
Not really. But as long as you use *only* bind variables in JDBC, you should be immune to sql injection. -Tim Curley, Thomas wrote: Hi, I have an app using MySql and TC4 on linux o JSP app Does Tomcat have any inbuild features to filter out certain characters like ', ;, etc from request

Re[2]: SQL Injection and Tomcat

2003-12-12 Thread Andrey Rogov
TC4 U Can Also buy wonderfull book TOMCAT The definitive Guide by Ian E.Darwin Jason Brittain GR Which version(s) of Tomcat does it cover? Amazon synopsis doesn't say which GR version. I'm currently locked into TC3.2.3 so a book that covers 4.x might GR not be a wise purchase. GR G.

Apache SSL variables - Imposible!

2003-12-12 Thread Federico Fernandez Cruz
I have connected Apache and Tomcat (5) using JK2. The communication is right, but I can't access any apache SSL variables! No matter what I do. It's impossible! I have read several docs and all I get is frustration! :-( Can someone tell me how to do it, pleease? Thanks! smime.p7s

Re: context

2003-12-12 Thread Adam Hardy
On 12/12/2003 12:21 AM Jerald Powel wrote: It's sorted. To cut a long story short, the same people who 'configured' it so that webapps was completey separated from Tomcat, and removed the examples, also decided to use a renamed server.xml. Once I figured that out, and added the context, it ran

Re: context

2003-12-12 Thread Ben Souther
Is autoDeploy for that host set to false? On Friday 12 December 2003 06:04 am, you wrote: On 12/12/2003 12:21 AM Jerald Powel wrote: It's sorted. To cut a long story short, the same people who 'configured' it so that webapps was completey separated from Tomcat, and removed the examples,

Re: Re[2]: SQL Injection and Tomcat

2003-12-12 Thread Graham Reeds
Looking around for a book that covers TC 3.x I found Wrox Press' Professional Apache Tomcat which covers 3.x, 4.0.x, and 4.1.x. Anyone have any comments on this book (besides the glowing review at Amazon.co.uk?) TC4 U Can Also buy wonderfull book TOMCAT The definitive Guide by Ian

RE: SQL Injection and Tomcat

2003-12-12 Thread Curley, Thomas
Thanks Andrey and Tim for replies - appreciate it Has thought of setting rewrite rules in Apache and only allow valid chars in - would the value be better/worse Thomas -Original Message- From: Andrey Rogov [mailto:[EMAIL PROTECTED] Sent: 12 December 2003 12:00 To: Tomcat Users List

Detecting HTTP connection state in Tomcat 4.x

2003-12-12 Thread Trott, David
Hi I have a batch transaction that takes a significant amount of time (more than an hour). However I have a requirement that the user needs to be able to kick of the transaction from a web interface and be notified when it completes. I know this isn't the best way to solve the problem, but I was

RE: Vedr.: service installer for TC5

2003-12-12 Thread Jacob Lund
Hi Thomas! OK, now I am getting closer! I am using windows and I also need to use a JRE in a specific location! In this case I have the JRE placed in the tomcat directory! I have made following .bat file in the tomcat directory: set RUNTIME_MODULE=%CD%\jre set ServerPath=%CD% bin\tomcat.exe

Re: Apache SSL variables - Imposible!

2003-12-12 Thread Nikola Milutinovic
Federico Fernandez Cruz wrote: I have connected Apache and Tomcat (5) using JK2. The communication is right, but I can't access any apache SSL variables! No matter what I do. It's impossible! I have read several docs and all I get is frustration! :-( Can someone tell me how to do it,

Problems using Files from a central machine

2003-12-12 Thread daniel
system config: 2 machines both are win2k boxes machine 1 has apache with tomcat 5.0.16 and jk mod the webapps/files and content are on this box machine 2 has just tomcat 5.0.16 both machines can serve local files but i want them to use a central server (just have the files on one machine) the

Re: Problems using Files from a central machine

2003-12-12 Thread Duncan Smith
The problem is, tomcat is running as a service and as such does not have access to the drives that are mapped when you are logged on. The way arround it is the use the full path of the server. eg: //hostname/sharename/sites\biteme Hope this helps - Duncan www.pennymail.com [EMAIL PROTECTED]

javax.mail.SendFailedException: Sending failed

2003-12-12 Thread Ashwin Kutty
Was wondering if someone could help me out here. I am trying a product out called DSPACE which gives the following error in catalina.out 2003-12-12 08:53:34,957 INFO org.dspace.app.webui.servlet.RegisterServlet @ anonymous:session_id=B3D285B12E90E6BCCAF3E4097712D59B:error_emai$

new JVM feature, just an idea

2003-12-12 Thread Edson Alves Pereira
Hello folks, as you know windows has a limit for command-line ( something like 128kb ), i´m not a windows fan, but here for a while i still using this OS. Then as we cannot change this behaviour ( in win95, win98 and winnt, others i don´t known and i hope never use them ), would

Re: javax.mail.SendFailedException: Sending failed

2003-12-12 Thread Ben Souther
Looks like you were trying to send to a SMTP host that doesn't allow relaying. On Friday 12 December 2003 08:16 am, Ashwin Kutty wrote: Was wondering if someone could help me out here. I am trying a product out called DSPACE which gives the following error in catalina.out 2003-12-12

Re: javax.mail.SendFailedException: Sending failed

2003-12-12 Thread Duncan Smith
The 'Relaying Denied' indicates that it is your SMTP server rejecting the request. If you haven't tried it already, it may be worth trying the send a mail from a standard mail client on the machine to test this? -Duncan www.pennymail.com Ashwin Kutty wrote: Was wondering if someone could

Re: javax.mail.SendFailedException: Sending failed

2003-12-12 Thread Nikola Milutinovic
Ashwin Kutty wrote: Was wondering if someone could help me out here. I am trying a product out called DSPACE which gives the following error in catalina.out 2003-12-12 08:53:34,957 INFO org.dspace.app.webui.servlet.RegisterServlet @

Re: [WORKAROUND] Re: VERY weird problem with commons-logging and Tomcat5

2003-12-12 Thread Philipp Taprogge
Hi! Jacob Kjome wrote: You can also use a repository selector. BTW, do you have log4j.jar *and* commons-logging.jar (not commons-logging-api.jar) in WEB-INF/lib? Yes, I do, but I have tried several scenarios with and without either of them in my WEB-INF/lib. Also I tried putting/removing them

Re: javax.mail.SendFailedException: Sending failed

2003-12-12 Thread Ashwin Kutty
The SMTP host is the same machine as the page being served are at. Sendmail is configured to allow relaying from the localhost. On Fri, 12 Dec 2003, Ben Souther wrote: Looks like you were trying to send to a SMTP host that doesn't allow relaying. On Friday 12 December 2003 08:16 am, Ashwin

Re: Problems using Files from a central machine

2003-12-12 Thread daniel
Thanks Duncan After realizing that the running as a service I decided to run it from the startup command, which worked. thanks, Daniel Schulken - Original Message - From: Duncan Smith [EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Friday, December 12, 2003 8:13 AM

Re: javax.mail.SendFailedException: Sending failed

2003-12-12 Thread Duncan Smith
Still may be worth trying to send a mail from a differant application on the same machine, such as trying to send create a mail message through telnet. That way you can be sure whether it is your app or the mail setup. -Duncan www.pennymail.com Ashwin Kutty wrote: The SMTP host is the same

Re: javax.mail.SendFailedException: Sending failed

2003-12-12 Thread Ashwin Kutty
Tested and it worked fine. I telnetted in from another box that was added in the relay list and sent a message with no problems. I also set my smtp server add in my mail client as this server and it sent the message out with no errors. On Fri, 12 Dec 2003, Duncan Smith wrote: Still may be

Re: javax.mail.SendFailedException: Sending failed

2003-12-12 Thread Duncan Smith
OK. Are you able to publis the source for the file thats generating the error? -Duncan www.pennymail.com Ashwin Kutty wrote: Tested and it worked fine. I telnetted in from another box that was added in the relay list and sent a message with no problems. I also set my smtp server add in my

RE: Detecting HTTP connection state in Tomcat 4.x

2003-12-12 Thread Shapira, Yoav
Howdy, I'll confirm that, not because of a tomcat limitation but because of the HTTP protocol being stateless. How would java.nio help you here? Yoav Shapira Millennium ChemInformatics -Original Message- From: Trott, David [mailto:[EMAIL PROTECTED] Sent: Thursday, December 11, 2003

RE: new JVM feature, just an idea

2003-12-12 Thread Shapira, Yoav
Howdy, You can use the environment variables on windows as well. And FYI, though I'm not a big M$ fan, Windows XP and 2003 are not bad, I've been working with them a bit without stability problems. Yoav Shapira Millennium ChemInformatics -Original Message- From: Edson Alves Pereira

Re: SQL Injection and Tomcat

2003-12-12 Thread Tim Funk
Filter bad characters only get your so far in the request is only a stop gap solution. Only using bind variables for JDBC and not using string concatenation (from input parameters) to create SQL statements is the safest path. If you need string concatentation, either use a servlet or filter

RE: admin interface: jdbcrealm usage

2003-12-12 Thread Ostad, James
Are you saying that there is a patch for this issue, or did I just come across a bug? James -Original Message- From: Bill Barker [mailto:[EMAIL PROTECTED] Sent: Friday, December 12, 2003 2:48 AM To: [EMAIL PROTECTED] Subject: Re: admin interface: jdbcrealm usage Patches are always

Re: Detecting HTTP connection state in Tomcat 4.x

2003-12-12 Thread Tim Funk
DO NOT rely on connection state. This might actually cause a DOS attack on you. Use some ID to identify the transaction - then use a cookie (or session) with a META refresh to a page which can use that ID to see how the transacation is progressing. Upon finishing, the status page can send you

Re: admin interface: jdbcrealm usage

2003-12-12 Thread Tim Funk
Not a bug, a feature gap ;) -Tim Ostad, James wrote: Are you saying that there is a patch for this issue, or did I just come across a bug? James -Original Message- From: Bill Barker [mailto:[EMAIL PROTECTED] Sent: Friday, December 12, 2003 2:48 AM To: [EMAIL PROTECTED] Subject: Re:

Re: javax.mail.SendFailedException: Sending failed

2003-12-12 Thread Ashwin Kutty
I am testing DSPACE available at http://www.dspace.org.. Their mailing list indicates that in the same environment people have this running with no problems. Thats the reason I thought it could be something I am doing wrong in the configs. On Fri, 12 Dec 2003, Duncan Smith wrote: OK. Are you

RE: admin interface: jdbcrealm usage

2003-12-12 Thread Ostad, James
thank you. James -Original Message- From: Tim Funk [mailto:[EMAIL PROTECTED] Sent: Friday, December 12, 2003 8:59 AM To: Tomcat Users List Subject: Re: admin interface: jdbcrealm usage Not a bug, a feature gap ;) -Tim Ostad, James wrote: Are you saying that there is a patch for

Re: Tomcat 5 Newbie

2003-12-12 Thread Tim Funk
Buffering is essential for speedy response time and overall system performace in a concurrent environment. Sending every byte to the client by itself is horrible for performance. A buffer minimum should be the TCP packet size. But even that is *real* small. For some pages, a smaller buffer than

Re: Disabling JSP execution under certain dirs

2003-12-12 Thread Tim Funk
Ideally, files you don't want to be seen should be placed in WEB-INF. An alternative is to use a security constraint on the directory that has all of the content. This can be done in apache too via the Location directive. Another way is to place all those JSP's with a different extension and

Vedr.: RE: Vedr.: service installer for TC5

2003-12-12 Thread Thomas Nybro Bolding
Hi Jacob, I guess not really as I simply installed Tomcat out-of-the box thus letting the Tomcat installation take care of the windows service. Afterwards I tried without succes to change to server jvm whereby I learned it used my public JRE. So far I havent been able to find any documentation

Re: Disabling JSP execution under certain dirs

2003-12-12 Thread Ben Souther
It sounds like Albert wants certain (static) files to be viewable. He just doesn't want anyone to be able to execute JSPs from this directory. One thing you could try is a servlet mapping that sends all requests ending in that directory that end with .jsp to a servlet that sends back a message

RE: Vedr.: RE: Vedr.: service installer for TC5

2003-12-12 Thread Jacob Lund
Have a look in registry at location: HKEY_LOCAL_MACHINE\SOFTWARE\Apache Software Foundation\Tomcat Service Manager I am pretty sure that you will have to do the service installation yourself or change the one installed by tomcat! Try to put the batch program I made into a .bat file at execute it

Re: [WORKAROUND] Re: VERY weird problem with commons-logging and Tomcat5

2003-12-12 Thread Jacob Kjome
At 02:22 PM 12/12/2003 +0100, you wrote: Hi! Jacob Kjome wrote: You can also use a repository selector. BTW, do you have log4j.jar *and* commons-logging.jar (not commons-logging-api.jar) in WEB-INF/lib? Yes, I do, but I have tried several scenarios with and without either of them in my

Re: Disabling JSP execution under certain dirs

2003-12-12 Thread Ben Souther
One thing you could try is a servlet mapping that sends all requests ending in that directory that end with .jsp ...all requests FROM that directory that end with .jsp. Haven't had my coffee yet.. ;-) On Friday 12 December 2003 09:36 am, Ben Souther wrote: It sounds like Albert wants

Vedr.: RE: Vedr.: RE: Vedr.: service installer for TC5

2003-12-12 Thread Thomas Nybro Bolding
I have found the location but what ever I put in the Java string value Tomcat refuses to start :-( I will look at your batch script and see whether that might work out. /Thomas Jacob Lund [EMAIL PROTECTED] 12-12-03 15:40 Besvar venligst til Tomcat Users List Til:'Tomcat

Re: Disabling JSP execution under certain dirs

2003-12-12 Thread Albert Moliner
Finally I'll add the restriction on publication, but anyway it would nice to know whether there's a solution to prevent the JSP from being served (yes, retrieving an error message or just returning the JSP contents without executing the class would be alright), at least for the sake of knowing.

/devices/pseudo/mm@0:null

2003-12-12 Thread Hollerman Geralyn M
While using Tomcat, I have often encountered a problem (a java.net.SocketException) with Too many open files. I understand that to combat this, I need to up the limit on file descriptors in my Solaris 8 system (ulimit command). The system went from 256 - 1024 descriptors, but I still get the

Re: Disabling JSP execution under certain dirs

2003-12-12 Thread Mark R. Diggory
Yes, Unfortunately, I bounced off this as well, it would have behooved the Servlet API developers to allow URL Rewrites to be a little more powerful from a REGEXP standpoint. Look at the j2sdk1.4 api, we now have regexp's available there default. One would suspect that the Servlet API could

deploy-task with directory-structure

2003-12-12 Thread Franz-Josef Herpers
Hi, i used to work with the ant install task during development. Now i migrated to Tomcat 5.0.16 and from the docs and this mailing list I know, that the install task is deprecated in favour of the deploy task. So i changed my install target: target name=install depends=compile

Re: Disabling JSP execution under certain dirs

2003-12-12 Thread Tim Funk
Yup - the spec sucks with respect to combining path prefix and extension mapping. :( The ideal solution is still to put the jsps inside WEB-INF or to use apache and disallow via a deny directive. As for the default servlet, you can add a init parameter to it for debugging, if you set it to 99,

Re: Disabling JSP execution under certain dirs

2003-12-12 Thread Albert Moliner
Touché. I don't know why I had not thought of filters for this... Oh, yes, now I know: My initial intention was to return the JSP file contents as if it were a .txt file, and though ServletContext.getResourceAsStream could be used, it involved having to implement the same behaviour as the

Re: Disabling JSP execution under certain dirs

2003-12-12 Thread Ben Souther
Hmm... Should have tested the theory before suggesting it. I knew you could use wildcards in the mappings. I assumed it was more robust Sorry. On Friday 12 December 2003 10:24 am, Mark R. Diggory wrote: Yes, Unfortunately, I bounced off this as well, it would have behooved the Servlet

Re: deploy-task with directory-structure

2003-12-12 Thread Remy Maucherat
Franz-Josef Herpers wrote: Hi, i used to work with the ant install task during development. Now i migrated to Tomcat 5.0.16 and from the docs and this mailing list I know, that the install task is deprecated in favour of the deploy task. So i changed my install target: target name=install

Question about mcastAddr for clustering

2003-12-12 Thread daniel
Does the ip address need to be a internal ip address on my network or should i just use the defaul ip address? --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.550 / Virus Database: 342 - Release Date: 12/10/2003

Re: Image Viewing

2003-12-12 Thread Jon Yeargers
So your tag would be img src='servlet(params);' alt='something' ? If you do this do the images get cached by the browser? It sounds like what you're asking is: How can you allow users to view images via the app without allowing them to look at them directly with a browser? If that's what

Re: response.reset() and forward() ... problematic? DBCP related?

2003-12-12 Thread Anthony Presley
Thanks for your help everyone . after some number of hours of work yesterday, I managed to get everything changed over, and I'm NOT using the SingleThreadModel. I inherited part of the code, and wrote most of the rest a couple of perl scripts was able to help significantly. Long and the

RE: Image Viewing

2003-12-12 Thread Shapira, Yoav
Howdy, It would be img src=http://yourserver/yourservlet?param=paramValue; alt=something Yoav Shapira Millennium ChemInformatics -Original Message- From: Jon Yeargers [mailto:[EMAIL PROTECTED] Sent: Friday, December 12, 2003 11:30 AM To: [EMAIL PROTECTED] Subject: Re: Image Viewing So

Re: Image Viewing

2003-12-12 Thread Christopher Schultz
All, It would be img src=http://yourserver/yourservlet?param=paramValue; alt=something This still doesn't answer the original interpreted question. I don't think it's possible to display an image on a page and prevent users from browsing to it directly from their browser. The only thing I can

Re: Image Viewing

2003-12-12 Thread Ben Souther
If you're using a servlet to serve up images by name, you have plenty of ways to filter non-allowed users. You can reference thier sessionID to determine who they are, you can (as you said) check the referer to make sure that the request comes from the correct page, you can map the real

Re: Image Viewing

2003-12-12 Thread Erik Wright
How does an image get displayed in a page? 1. The browser receives an HTML page with an IMG tag in it. The IMG tag contains a src attr (an HTTP URL). 2. The browser makes another request, for the URL of the image. 3. The server returns the image, which is displayed. Clearly, if you want an

Re: /devices/pseudo/mm@0:null

2003-12-12 Thread Antonio Fiol Bonnín
Hello, Not that I have used Tomcat on Solaris a lot, but I have never seen that file. A general advice is to check that you close everything you open. Antonio Fiol Hollerman Geralyn M wrote: While using Tomcat, I have often encountered a problem (a java.net.SocketException) with Too many

RE: new JVM feature, just an idea

2003-12-12 Thread Edson Alves Pereira
The point here is that my classpath is very big and even using environment variables winnt complain about it. -- De: Shapira, Yoav[SMTP:[EMAIL PROTECTED] Responder:Tomcat Users List Enviada: sexta-feira, 12 de dezembro de 2003 10:47 Para: Tomcat Users List

Re: Disabling JSP execution under certain dirs

2003-12-12 Thread Mark R. Diggory
If I understand correctly chain.doFilter(request, wrapper); is basically managing the forwarding behavior your looking to accomplish during the decision making process (IE to execute the servlet, jsp, or return static content via the default servlet. In otherwords, if the request matches a

RE: new JVM feature, just an idea

2003-12-12 Thread Shapira, Yoav
Howdy, So you really have a classpath environment variable that's bigger than 128KB? (If that's really the limit, as you say in your original message). Yoav Shapira Millennium ChemInformatics -Original Message- From: Edson Alves Pereira [mailto:[EMAIL PROTECTED] Sent: Friday,

RE: new JVM feature, just an idea

2003-12-12 Thread Edson Alves Pereira
Exactly, that´s it! Even using environment variable in a MSDOS shell you can reach the line limit. -- De: Shapira, Yoav[SMTP:[EMAIL PROTECTED] Responder:Tomcat Users List Enviada: sexta-feira, 12 de dezembro de 2003 13:57 Para: Tomcat Users List Assunto:

jsvc and security

2003-12-12 Thread Maxime Colas des Francs
Hello, I attempt to use jsvc from commons-daemon project to launch my tomcat instance. How can I specify the '-security' option (used with catalina.sh)? If I write some system properties (like in catalina.sh): $CATALINA_HOME/bin/jsvc [...] -Djava.security.manager \

Re: new JVM feature, just an idea

2003-12-12 Thread Ben Souther
I used to get around this by having seperate batch scripts that set my classpath for each project I was working on. On Friday 12 December 2003 01:03 pm, Edson Alves Pereira wrote: Exactly, that´s it! Even using environment variable in a MSDOS shell you can reach the line limit.

RE: new JVM feature, just an idea

2003-12-12 Thread Shapira, Yoav
Howdy, It's fascinating other people in the almost decade-long history of the language haven't had this problem. Don't you find that curious? ;) Can you post one such classpath example that's giving you problems? Yoav Shapira Millennium ChemInformatics -Original Message- From:

Re: Image Viewing

2003-12-12 Thread Ben Souther
If you really want to only provide content to specific users, you must provide some sort of access control mechanism. The same mechanism should apply to images you wish to protect. Which was the point of this thread. ;-) On Friday 12 December 2003 11:52 am, Erik Wright wrote: How does an

Do I need a Custom Resource Factory for this?

2003-12-12 Thread Mark R. Diggory
I have a JNDI DirContext I use for accessing and LDAP server within my webapplication. I'd like to configure/instatiate it from my server.xml and store it in the provided InitialContext provided to the webapp (as opposed to allowing the webapp to configure it). My question is: Do I need to

Re: Disabling JSP execution under certain dirs

2003-12-12 Thread Mark R. Diggory
If I understand correctly chain.doFilter(request, wrapper); is basically managing the forwarding behavior your looking to accomplish during the decision making process (IE to execute the servlet, jsp, or return static content via the default servlet. In otherwords, if the request matches a

: Re: /devices/pseudo/mm@0:null

2003-12-12 Thread Hollerman Geralyn M
Antonio Fiol Bonnín wrote: Not that I have used Tomcat on Solaris a lot, but I have never seen that file. A general advice is to check that you close everything you open. That's just it - I never open /devices/pseudo/[EMAIL PROTECTED]:null! Something obviously IS opening it - but how do I find

Re: Do I need a Custom Resource Factory for this?

2003-12-12 Thread Mark R. Diggory
I wonder if this would work? Are ResourceParams actually the envronment configured in the JNDI ObjectFactory? Resource name=ldap/MyLDAPConnection auth=Container type=javax.naming.directory.DirContext/ ResourceParams name=ldap/MyLDAPConnection parameter

RE: new JVM feature, just an idea

2003-12-12 Thread Edson Alves Pereira
This mainly it happen with ant, here a snapshot of it: D:\home\edsonset LOCALCLASSPATH=d:\usr\local\jakarta\apache-ant-1.5.4\lib\xmlta sk.jar;d:\usr\local\jakarta\apache-ant-1.5.4\lib\xml-apis.jar;d:\usr\local\j akar

RE: :Re: /devices/pseudo/mm@0:null

2003-12-12 Thread Ralph Einfeldt
Although my solaris days are long gone I would guess that this aren't 'real files' but memory mapped files. Are you shure that there are several handles on the same file, or is the same handle just reuses several times ? -Original Message- From: Hollerman Geralyn M [mailto:[EMAIL

RE: new JVM feature, just an idea

2003-12-12 Thread Shapira, Yoav
Howdy, I see -- thanks for the example. You do realize Ant adds a lot of these jars for you automatically to the classpath, right? You don't need to add anything in ANT_HOME/lib, as that's automatically included. Furthermore, if you're using JDK 1.4 or later, you can remove a bunch of other

RE: How to bind to multiple IP addresses?

2003-12-12 Thread Ralph Einfeldt
IIS bind per default to all interfaces. http://support.microsoft.com:/support/kb/articles/Q238/1/31.ASP -Original Message- From: Ryan Golhar [mailto:[EMAIL PROTECTED] Sent: Thursday, December 11, 2003 4:02 AM To: 'Tomcat Users List' Subject: RE: How to bind to multiple IP

CSS in War file

2003-12-12 Thread Duncan Smith
I've just started deploying a web app as a war file instead of uploading individual files. Everything works except my styles don't load. The stylesheet is added to the war file in the same location as before, but if I try to request the css file on it's own I get a java.lang.NullPointerException

  1   2   >