IIS 6.0 + Tomcat... does it work?

2003-10-16 Thread Hart, Justin
Hi, I've been hacking around with getting Tomcat to work with IIS 6.0 all day. Is there a known configuration for this that works? Justin - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL

RE: HTTP 403 - isapi_redirector

2003-10-16 Thread Hart, Justin
What version of IIS? -Original Message- From: Watkins, James [mailto:[EMAIL PROTECTED] Sent: Thursday, October 16, 2003 4:19 PM To: 'Tomcat Users List' Subject: RE: HTTP 403 - isapi_redirector Do you get the form if you go directly to it through IIS, I mean http://host/site/form.jsp

RE: HTTP 403 - isapi_redirector

2003-10-16 Thread Hart, Justin
: IIS 5 Tomcat 4.1.24 (listen on port 8080) Win2k Avanced Server Browser: IE 6 or Netscape 7.1 don't make any difference -Original Message- From: Hart, Justin [mailto:[EMAIL PROTECTED] Sent: 16 octobre, 2003 16:20 To: Tomcat Users List Subject: RE: HTTP 403 - isapi_redirector What version

Tomcat + IIS 6.0

2003-10-17 Thread Hart, Justin
Hey, What's the story on Tomcat + IIS 6.0 and AJP connectors? Does this scenario work or not? I've seen scattered throughout the net where noone can get this to work. Can somebody just tell me yes or no, this does or does not work? Justin W. Hart

RE: Java/JSP/Servlet Programmer

2003-10-17 Thread Hart, Justin
That's what I've found. The market is full of tech workers, but that doesn't mean that they're a programmer, or as familiar with technology X (for position Y) as they should be. I went to a job fair a couple years ago for 4 job opennings, 2 for programmers. 2 for techs. 1000 people showed

RE: Java/JSP/Servlet Programmer

2003-10-17 Thread Hart, Justin
postings want the person to have x years of experience in 6-7 different areas, mostly unrelated and the total experience years exceeds most normal human's productive lifespans, even accounting for reasonable overlap...G) John.. Hart, Justin wrote: That's what I've found. The market

RE: Java/JSP/Servlet Programmer

2003-10-17 Thread Hart, Justin
Honestly, I've been a professional C++ programmer for several years now, and I don't mean to toot my own horn, but I'm a damn good one. I don't expect anyone to be able to sit down at the terminal in vi with no man pages and hammer out code in an hour or 2 that does much anything useful.

RE: Java/JSP/Servlet Programmer

2003-10-17 Thread Hart, Justin
. (Not to mention the observation that many of these job postings want the person to have x years of experience in 6-7 different areas, mostly unrelated and the total experience years exceeds most normal human's productive lifespans, even accounting for reasonable overlap...G) John.. Hart, Justin

RE: Java/JSP/Servlet Programmer

2003-10-17 Thread Hart, Justin
accounting for reasonable overlap...G) John.. Hart, Justin wrote: That's what I've found. The market is full of tech workers, but that doesn't mean that they're a programmer, or as familiar with technology X (for position Y) as they should be. I went to a job fair a couple years ago for 4 job

RE: Java/JSP/Servlet Programmer [off topic]

2003-10-17 Thread Hart, Justin
yet. Thank You, Justin A. Stanczak Web Manager Shake Learning Resource Center Vincennes University (812)888-5813 Hart, Justin [EMAIL PROTECTED] 10/17/2003 03:00 PM Please respond to Tomcat Users List To: Tomcat Users List [EMAIL PROTECTED

RE: Java/JSP/Servlet Programmer

2003-10-17 Thread Hart, Justin
areas, mostly unrelated and the total experience years exceeds most normal human's productive lifespans, even accounting for reasonable overlap...G) John.. Hart, Justin wrote: That's what I've found. The market is full of tech workers, but that doesn't mean that they're

RE: Java/JSP/Servlet Programmer [off topic]

2003-10-17 Thread Hart, Justin
= select count(*) from ( + sql + ); Statement stmt = connection.createStatement(); ResultSet rs = stmt.executeQuery(countSql); rs.next(); return rs.getInt(1); } Or something like that... Yoav Shapira Millennium ChemInformatics -Original Message- From: Hart, Justin [mailto:[EMAIL

RE: Java/JSP/Servlet Programmer [off topic]

2003-10-17 Thread Hart, Justin
); rs.next(); return rs.getInt(1); } Or something like that... Yoav Shapira Millennium ChemInformatics -Original Message- From: Hart, Justin [mailto:[EMAIL PROTECTED] Sent: Friday, October 17, 2003 4:49 PM To: Tomcat Users List Subject: RE: Java/JSP/Servlet Programmer [off topic] I

RE: Java/JSP/Servlet Programmer

2003-10-17 Thread Hart, Justin
It's not that it's difficult, but I wouldn't ask questions about specific functions/parameters/methods. I have written plenty of java, and couldn't tell you what methods most specific interfaces implement. I couldn't even tell you what methods the interfaces that I've written implement.

RE: Java/JSP/Servlet Programmer [off topic]

2003-10-17 Thread Hart, Justin
ChemInformatics -Original Message- From: Hart, Justin [mailto:[EMAIL PROTECTED] Sent: Friday, October 17, 2003 5:15 PM To: Tomcat Users List Subject: RE: Java/JSP/Servlet Programmer [off topic] But what if it's a busy database, or the query is complex? -Original Message- From: Shapira, Yoav

RE: Java/JSP/Servlet Programmer

2003-10-17 Thread Hart, Justin
want a programmer that wouldn't know that. If you've spent ANY amount of time writing Servlets, you SHOULD know doGet and doPost. That is very basic. -Original Message- From: Hart, Justin [mailto:[EMAIL PROTECTED] Sent: Friday, October 17, 2003 5:21 PM To: Tomcat Users List Subject: RE

RE: Unable to compile class for JSP?

2003-10-17 Thread Hart, Justin
Goto java.sun.com and download the latest JDK. -Original Message- From: Richardson, Robert [mailto:[EMAIL PROTECTED] Sent: Friday, October 17, 2003 5:42 PM To: 'Tomcat Users List' Subject: RE: Unable to compile class for JSP? I looked at my localhost_log.2003-10-17.txt and it showed

POI

2003-10-22 Thread Hart, Justin
I'm considering using POI (the jakarta package for managing OLE objects in java) in a commercial project. 2 Questions 1) Is it any good? 2) Will the license allow for this? IANAL. Justin W. Hart - To unsubscribe, e-mail:

Realms JSPs

2003-10-31 Thread Hart, Justin
Hi, I'm kind of new to JSP programming. I was wondering, is there a way to extract the username used to log in(I am using JNDIRealm for authentication), and use that data within the web application from the perspective of the JSP? Any help would be great! Thanks. Justin

RE: Realms JSPs

2003-10-31 Thread Hart, Justin
Excellent, thanks :-) -Original Message- From: Tim Funk [mailto:[EMAIL PROTECTED] Sent: Friday, October 31, 2003 2:58 PM To: Tomcat Users List Subject: Re: Realms JSPs request.getRemoteUser() -Tim Hart, Justin wrote: Hi, I'm kind of new to JSP programming. I was wondering

RE: Realms JSPs

2003-10-31 Thread Hart, Justin
: Tim Funk [mailto:[EMAIL PROTECTED] Sent: Friday, October 31, 2003 2:58 PM To: Tomcat Users List Subject: Re: Realms JSPs request.getRemoteUser() -Tim Hart, Justin wrote: Hi, I'm kind of new to JSP programming. I was wondering, is there a way to extract the username used to log in(I am using

JNDIRealm Configuration

2003-11-03 Thread Hart, Justin
Does anybody have an example JDNIRealm configuration (server.xml web.xml). I feel like I'm just taking stabs in the dark with these files... Currently I can get it to pop up a window and ask for your username/password. I use my NT username and password and it rejects them. I think that I

JNDIRealm

2003-11-03 Thread Hart, Justin
Realm className=org.apache.catalina.realm.JNDIRealm connectionURL=ldap://[Windows 2000 Domain Controller]:389 userBase=CN=Users,dc=[domain name],dc=com userSearch=(userPrincipalName={0}) userRoleName=member roleBase=CN=Users,dc=[domain name],dc=com roleName=cn roleSearch=(member={0})

RE: Tomcat and PHP

2003-11-03 Thread Hart, Justin
Why not connect Tomcat to Apache, and use mod-php? -Original Message- From: Joao Medeiros [mailto:[EMAIL PROTECTED] Sent: Monday, November 03, 2003 12:08 PM To: Tomcat Users List Subject: Tomcat and PHP Hi folks, I was wondering if anyone has any experience with Tomcat serving PHP...

JNDIRealm...more

2003-11-03 Thread Hart, Justin
My server.xml now looks like this : Realm className=org.apache.catalina.realm.JNDIRealm debug=99 connectionURL=A good active directory server userBase=dc=MY DOMAIN NAME,dc=com userRoleName=member roleName=cn

RE: JNDIRealm...more

2003-11-03 Thread Hart, Justin
,DC=[Domain],DC=com connectionPassword=[password] roleSubtree=true userSubtree=true/ -Original Message- From: Hart, Justin [mailto:[EMAIL PROTECTED] Sent: Monday, November 03, 2003 12:57 PM To: Tomcat Users List Subject: JNDIRealm...more My

RE: JNDIRealm...more

2003-11-03 Thread Hart, Justin
PROTECTED] Subject: RE: JNDIRealm...more You don't need the admin password, you do need a domain account the has read permissions.just about any account will do thiscreate a test account.and use that instead of the admin account.. -Original Message- From: Hart, Justin

RE: JNDIRealm...more

2003-11-04 Thread Hart, Justin
roleSearch=(memberOf=CN=tomcat,CN=Users,DC=[Domain],DC=com) connectionName=CN=Administrator,CN=Users,DC=[Domain],DC=com connectionPassword=[password] roleSubtree=true userSubtree=true/ -Original Message- From: Hart, Justin [mailto

RE: JNDIRealm...more

2003-11-04 Thread Hart, Justin
and it will be the first one in our group to authenticate against the AD. Our previous authentication is being eliminated. -Original Message- From: Hart, Justin [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 04, 2003 11:14 AM To: Tomcat Users List Subject: RE: JNDIRealm...more 1) In terms

RE: JNDIRealm...more

2003-11-04 Thread Hart, Justin
Oh, for the AD LDAP, I've been using the programs that came with Active Directory. There is also an ldp.exe, I dunno where that came from, but that's pretty useful. -Original Message- From: Hart, Justin Sent: Tuesday, November 04, 2003 12:39 PM To: Tomcat Users List Subject: RE

RE: JNDIRealm...more

2003-11-04 Thread Hart, Justin
they have yet. I really appreciate your time. Thanks, Rob Ps I expect I'll have more questions later. Right now, I'm still stuck just figuring out where all users are. -Original Message- From: Hart, Justin [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 04, 2003 11:40 AM To: Tomcat Users

Formerly: Tomcat clustering and servletContext.

2003-11-04 Thread Hart, Justin
Ahh, you seem to know a bit about this. Given that I've authenticated someone, using JNDIRealm, can I then operate with their permissions on the server? IE, if they authenticate to Tomcat in JNDIRealm, do I get access to files that carry their NT permissions? Justin -Original

RE: Formerly: Tomcat clustering and servletContext.

2003-11-04 Thread Hart, Justin
Works for me. Thanks. Justin -Original Message- From: Christopher Schultz [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 04, 2003 2:23 PM To: Tomcat Users List Subject: Re: Formerly: Tomcat clustering and servletContext. Justin, Given that I've authenticated someone, using

NT Groups

2003-11-05 Thread Hart, Justin
Ok, so, I have a user logged in through JNDIRealm, and I would like to identify what NT groups they are members of. Is this conveniently possible, or do I need to write additional code to query them from our ActiveDirectory.? Justin

RE: NT Groups

2003-11-05 Thread Hart, Justin
-4.1-doc/realm-howto.html#JNDIRealm -Tim Hart, Justin wrote: Ok, so, I have a user logged in through JNDIRealm, and I would like to identify what NT groups they are members of. Is this conveniently possible, or do I need to write additional code to query them from our ActiveDirectory

RE: JNDIRealm...more

2003-11-05 Thread Hart, Justin
Ok, cool, so, how I have a question about the parts: roleBase=OU=Users,OU=[my OU],DC=[Domain],DC=com roleName=memberOf roleSearch=(memberOf=CN=tomcat,CN=Users,DC=[Domain],DC=com) This is going to specify what roles apply to the user under the

RE: JNDIRealm...more

2003-11-05 Thread Hart, Justin
to log in should be a part of) Now, when you refer to their role in the rest of your application, you use the DN of the NT Group that they are supposed to be a part of. That way, you can use NT permissions to control your web app. Justin -Original Message- From: Hart, Justin Sent

server.xml JNDIRealm

2003-11-05 Thread Hart, Justin
Ok, more nifty questions from myself. The format that the rest of the company uses for NT Authentication is [domain].com\[username] in the username field, and then [pass] in the password field. The NT Admins would really like if my application would do the same (so as not to throw off users).

RE: JNDIRealm...more

2003-11-06 Thread Hart, Justin
: JNDIRealm...more Thanks. -Original Message- From: Hart, Justin [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 04, 2003 12:10 PM To: Tomcat Users List Subject: RE: JNDIRealm...more Good luck. -Original Message- From: Robyne Vaughn [mailto:[EMAIL PROTECTED] Sent: Tuesday, November

RE: ISAPI_REDIRECT.DLL Windows Server 2003

2003-11-06 Thread Hart, Justin
That seems to be a common problem, people have had mixed results getting that combo to work. I'm going to take a wild guess and say it's IIS 6.0? Justin -Original Message- From: Chris Freeborn [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 05, 2003 3:46 PM To: '[EMAIL PROTECTED]'

Tomcat SSL ... more

2003-11-06 Thread Hart, Justin
Is there a way to use SSL in tomcat without having to type the password to your keystore in plaintext in the server.conf file? Justin - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL

Microsoft Certificate Services

2003-11-06 Thread Hart, Justin
Hey, I'm trying to import certificates from Microsoft Certificate Services into my keystore for use with SSL in tomcat (what a mouthful). Having problems, keytool says that the certs are not in x.509 format, but I selected DER (x.509) from Microsoft Certificate Services. Is there a known

Server Tweaking

2003-11-07 Thread Hart, Justin
Hi, I've read of people having difficulties with their tomcat servers, where no page shows up the first time they try to load a page, and then when they hit refresh, it loads fine. I understand that this is just a tweaking issue with the config files, and have heard that there are a few

RE: Server Tweaking

2003-11-07 Thread Hart, Justin
K, I have this issue, and I've heard of it. Anybody got a fix? Justin -Original Message- From: David Rees [mailto:[EMAIL PROTECTED] Sent: Friday, November 07, 2003 1:40 PM To: Tomcat Users List Subject: Re: Server Tweaking On Fri, November 7, 2003 at 6:36 am, Hart, Justin wrote: Hi

RE: Server Tweaking

2003-11-07 Thread Hart, Justin
me a lot. Justin -Original Message- From: David Rees [mailto:[EMAIL PROTECTED] Sent: Friday, November 07, 2003 2:18 PM To: Tomcat Users List Subject: RE: Server Tweaking On Fri, November 7, 2003 1at 0:40 am, Hart, Justin wrote: K, I have this issue, and I've heard of it. Anybody got

RE: Help : Linux Debian

2003-11-14 Thread Hart, Justin
Download the Sun java installation that installs from a shell script, it runs fine. Also, Debian used to maintain a java package in their contrib branch, if you're using dselect via ftp. I've been on RedHat for about 6 months now, but I switched from Debian essentially to check up on my

RE: Help : Linux Debian

2003-11-14 Thread Hart, Justin
think the development branch had 4.0.something. not ideal. If you need any help/guidance, mail me off list, i'd be glad to help. Regards, James. Hart, Justin wrote: Download the Sun java installation that installs from a shell script, it runs fine. Also, Debian used to maintain a java

RE: Help : Linux Debian

2003-11-14 Thread Hart, Justin
Lots of Debian users compile just about everything from souds. I don't think that he means just Tomcat. A lot of us recompile our kernel from source, our compiler from source, and so forth. A lot of Linux users pick debian because it has a flexible package manager that will put up with us

RE: Testing] Am I blacklisted?

2003-11-17 Thread Hart, Justin
Could I suggest the formation of such a list? j/k Justin -Original Message- From: Shapira, Yoav [mailto:[EMAIL PROTECTED] Sent: Monday, November 17, 2003 8:59 AM To: Tomcat Users List Subject: RE: Testing] Am I blacklisted? Howdy, There's no such thing as being blacklisted on this

RE: Testing] Am I blacklisted?

2003-11-17 Thread Hart, Justin
blacklisted on it :) -Message d'origine- De : Hart, Justin [mailto:[EMAIL PROTECTED] Envoyé : lundi 17 novembre 2003 15:03 À : Tomcat Users List Objet : RE: Testing] Am I blacklisted? Could I suggest the formation of such a list? j/k Justin -Original Message- From

End of Session Event?

2003-11-17 Thread Hart, Justin
Is there an event listener or something that can detect when Tomcat decides to close a session with a user? IE this would hit both explicit logoff and incidental (the user closes the browser, and cookies expire and good things like that). Justin

RE: Testing] Am I blacklisted?

2003-11-17 Thread Hart, Justin
? Must be a slow-starting work week. -Original Message- From: Hart, Justin [mailto:[EMAIL PROTECTED] Sent: Monday, November 17, 2003 9:20 AM To: Tomcat Users List Subject: RE: Testing] Am I blacklisted? Ahh, that would explain why the traffic has been so light

RE: End of Session Event?

2003-11-17 Thread Hart, Justin
Heh, works for me. Thanks. Justin -Original Message- From: Christopher Schultz [mailto:[EMAIL PROTECTED] Sent: Monday, November 17, 2003 11:56 AM To: Tomcat Users List Subject: Re: End of Session Event? Justin, Is there an event listener or something that can detect when Tomcat

Microsoft Certificate Services

2003-11-17 Thread Hart, Justin
I'm having a bear of a time getting certificates from Microsoft Certificate Services into my java keystore. Has anyone else had this problem? Does anybody have a relatively good/simple solution? No matter what I do, keytool says that my certificate file is not in the correct format. Justin

RE: UNSUBSCRIBE!!!

2003-11-17 Thread Hart, Justin
Read the bottom of your email... Justin -Original Message- From: Jean B. Denis [mailto:[EMAIL PROTECTED] Sent: Monday, November 17, 2003 6:50 PM To: 'Tomcat Users List' Subject: RE: UNSUBSCRIBE!!! Me t -Original Message- From: ArcherDaPunk [mailto:[EMAIL PROTECTED] Sent:

Configuration via database, rather than XML

2003-11-19 Thread Hart, Justin
I heard that it is possible to load Tomcat configurations from a database rather than from server.xml/web.xml files. Is this true? Is this difficult to configure? Are there shortcomings in this configuration? Justin

RE: Configuration via database, rather than XML

2003-11-19 Thread Hart, Justin
. -Tim Hart, Justin wrote: I heard that it is possible to load Tomcat configurations from a database rather than from server.xml/web.xml files. Is this true? Is this difficult to configure? Are there shortcomings

Realm Username Password from TagSupport

2003-11-21 Thread Hart, Justin
I would like to use a users username/password to login to a database as that user, after they authenticate HOPEFULLY using BASIC authentication. Is there anyway to do this? Justin - To unsubscribe, e-mail: [EMAIL PROTECTED]

RE: When is Tomcat 5 Release version scheduled to come out?

2003-11-21 Thread Hart, Justin
Only if you don't plan on releasing until the release is out, imhop. Justin -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Friday, November 21, 2003 2:08 PM To: Tomcat Users List Subject: Re: When is Tomcat 5 Release version scheduled to come out? Is it a

RE: [off-topic] jakarta, java, indonesia

2003-11-21 Thread Hart, Justin
Sun's a big company, they probably named their conference room in order to distinguish it from other conference rooms. Jakarta, seems to me, to just be more interesting than A, B, C... Just like when you stay at a hotel and all of the conference rooms have names. Justin -Original

RE: Realm Username Password from TagSupport

2003-11-21 Thread Hart, Justin
To: Tomcat Users List Subject: Re: Realm Username Password from TagSupport Are you saying that you want to build a custom tag to do this. In any case here is the connection logic http://www.kickjava.com/1541.htm - Original Message - From: Hart, Justin [EMAIL PROTECTED] To: Tomcat Users List (E

RE: Realm Username Password from TagSupport

2003-11-21 Thread Hart, Justin
. - Original Message - From: Hart, Justin [EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Friday, November 21, 2003 1:24 PM Subject: RE: Realm Username Password from TagSupport I would like to authenticate my users with my database without prompting them a second time for a username

My Solution to Intercepting Login Information Realm Username Password from TagSupport

2003-11-21 Thread Hart, Justin
I think that what we BOTH need to do in this case is create a subclass of whatever realm we are using, and using this subclass provide our specific functionality, in my case authenticating to a database, in yours logging. Justin

RE: My Solution to Intercepting Login Information Realm Username Password from TagSupport

2003-11-21 Thread Hart, Justin
, November 21, 2003 3:54 PM To: Tomcat Users List Subject: Re: My Solution to Intercepting Login Information Realm Username Password from TagSupport On 11/21/2003 09:11 PM Hart, Justin wrote: I think that what we BOTH need to do in this case is create a subclass of whatever realm we are using

Extending JNDIRealm

2003-11-24 Thread Hart, Justin
No sure what's going on with this code... I'm attempting to extend JNDIRealm so I can add a few features I need for my site, I have an interesting issue, however. If, I try this : public Principal authenticate(DirContext context, String username, String credentials) throws NamingException

RE: Extending JNDIRealm

2003-11-24 Thread Hart, Justin
Whoops, the code is actually as follows... No sure what's going on with this code... I'm attempting to extend JNDIRealm so I can add a few features I need for my site, I have an interesting issue, however. If, I try this : public Principal authenticate(DirContext context, String username,

RE: Extending JNDIRealm

2003-11-25 Thread Hart, Justin
with a StackOverFlow exception. -Tim Hart, Justin wrote: Whoops, the code is actually as follows... No sure what's going on with this code... I'm attempting to extend JNDIRealm so I can add a few features I need for my site, I have an interesting issue, however. If, I try

RE: Extending JNDIRealm

2003-11-25 Thread Hart, Justin
, String, String) which you had overridden which is indirect recursion. -Tim Hart, Justin wrote: Ok, why? What am I doing that should cause a stack overflow? Justin -Original Message- From: Tim Funk [mailto:[EMAIL PROTECTED] Sent: Monday, November 24, 2003 7:26 PM To: Tomcat

RE: Extending JNDIRealm

2003-11-25 Thread Hart, Justin
Wait, reading the stack trace doesn't show anything like that. No, that can't be the issue. Justin -Original Message- From: Hart, Justin Sent: Tuesday, November 25, 2003 9:30 AM To: Tomcat Users List Subject: RE: Extending JNDIRealm I *cough* didn't download the JNDIRealm code. I'll

RE: Extending JNDIRealm

2003-11-25 Thread Hart, Justin
Read through the code, ran some example stuff. What I'm doing in my implementation is fine. Justin -Original Message- From: Hart, Justin Sent: Tuesday, November 25, 2003 9:31 AM To: Tomcat Users List Subject: RE: Extending JNDIRealm Wait, reading the stack trace doesn't show

RE: Extending JNDIRealm

2003-11-25 Thread Hart, Justin
username. Since the username is null, taking its length causes a null pointer exception. I added a check, and now it works fine. Justin -Original Message- From: Hart, Justin Sent: Tuesday, November 25, 2003 10:19 AM To: Tomcat Users List Subject: RE: Extending JNDIRealm Read through

Access to Session ID from Realm

2003-11-25 Thread Hart, Justin
Is there a way to get at the Session ID from RealmBase? Justin - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

RE: nsapi_redirect.dll

2003-11-26 Thread Hart, Justin
You mean asapi_redirect.dll? I don't know what net.commerce 3 is, but you'd use asapi_redirect.dll to connect to IIS (and I would assume any web server that uses asapi). Justin -Original Message- From: Wilson Chang [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 25, 2003 11:03 PM To:

RE: Security Hole - server.xml

2003-11-26 Thread Hart, Justin
You're not reusing the passwords anywhere else in the system (IE, you don't have a multi-tier login, do you?) If you do, you can quite feasibly shadow the passwords. I don't know if such an implementation exists in tomcat, but I would assume that someone, somewhere, has written a realm

RE: Security Hole - server.xml

2003-11-26 Thread Hart, Justin
Well, right, but if you were to inherit from the realm that you wanted to use, you can manipulate the password field in any way that you wish. Unix password shadows are plantext, as are MD5 hashes. All you do now is run MD5 over the password field in the authenticate method, and viola, you

RE: Security Hole - server.xml

2003-11-26 Thread Hart, Justin
No prob, good luck. -Original Message- From: Curley, Thomas [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 26, 2003 1:21 PM To: Tomcat Users List Subject: RE: Security Hole - server.xml thanks for your time Justin - I will look into this - T -Original Message- From: Hart

Tomcat Multi-Tier Authentication

2003-11-26 Thread Hart, Justin
Is there anywhere in tomcat that there is convenient access to: 1) The authenticated principal 2) The session 3) The private credentials associated with the principal Or even just the username, password and session? I want to authenticate a user to my database (IE,

RE: Tomcat 4.1.27/IE 6.0 Lockup

2003-11-26 Thread Hart, Justin
http://www.dcs.napier.ac.uk/~shaun/rtse/week06.pdf :-) Justin -Original Message- From: Antonio Fiol Bonnín [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 26, 2003 3:42 PM To: Tomcat Users List Subject: Re: Tomcat 4.1.27/IE 6.0 Lockup Hi, What do you mean by real-time? Red.es

SessionListener

2003-12-01 Thread Hart, Justin
My SessionListener doesn't seem to be firing, any help? I have a SessionListener that I want to go off when a user authenticates to my web app (this is a correct usage, right?) So, in the web.xml of my app, I would put the lines: web-app listener listener-class

RE: SessionListener

2003-12-01 Thread Hart, Justin
Ok, so, the listener in there must implement HttpSessionListener, where can I use SessionListeners? Justin -Original Message- From: Hart, Justin Sent: Monday, December 01, 2003 11:34 AM To: Tomcat Users List (E-mail) Subject: SessionListener My SessionListener doesn't seem

Listening to Session Creation... Need Access to Session

2003-12-01 Thread Hart, Justin
Ok, here's what I've tried. 1) Implement SessionListener, put in web.xml file in listener tags. This never seems to run. 2) Implement HttpSessionListener, put in web.xml file in listener tags. This runs, but doesn't seem to have access to the Session (I need the username and

RE: Listening to Session Creation... Need Access to Session

2003-12-01 Thread Hart, Justin
What am I looking for in order to get the username/password out of this? I'm using BASIC authentication. Are these credentials dumped somewhere that I could find them? I haven't been able to find that data in HttpSession? Justin -Original Message- From: Shapira, Yoav [mailto:[EMAIL

RE: SessionListener

2003-12-01 Thread Hart, Justin
, that are proprietary to tomcat. Yoav Shapira Millennium ChemInformatics -Original Message- From: Hart, Justin [mailto:[EMAIL PROTECTED] Sent: Monday, December 01, 2003 11:53 AM To: Tomcat Users List Subject: RE: SessionListener Ok, so, the listener in there must implement HttpSessionListener, where

RE: SessionListener

2003-12-01 Thread Hart, Justin
I still don't see how one gets a session from HttpSession or user credentials? I see how to get a UserPrincipal, but without the password, I still can't authenticate the user :-/ Am I missing something? Justin -Original Message- From: Shapira, Yoav [mailto:[EMAIL PROTECTED] Sent:

RE: SessionListener

2003-12-01 Thread Hart, Justin
If this can be done with HttpSessionListener, than I am game. What I want to do, is get the username and password when the user signs on, so I can then use this data to authenticate the user to other programs as themselves. I'm using BASIC authentication, and trying to avoid having them sign on

Argument Type Mismatch

2003-12-01 Thread Hart, Justin
Listener className=class inheriting from SessionListener/ I get an argument type mismatch error parsing my server.xml... Is there something wrong with this line? Justin - To unsubscribe, e-mail: [EMAIL PROTECTED] For

RE: Argument Type Mismatch

2003-12-01 Thread Hart, Justin
PROTECTED] Sent: Monday, December 01, 2003 7:29 PM To: Tomcat Users List Subject: Re: Argument Type Mismatch In server.xml, Listeners are LifeCycleListeners http://jakarta.apache.org/tomcat/tomcat-5.0-doc/catalina/docs/api/org/apache/catalina/LifecycleListener.html -Tim Hart, Justin wrote

RE: Argument Type Mismatch

2003-12-01 Thread Hart, Justin
to implement a no-op Vavle that registers the Listener on initialization of the Vavle. But thats just a no code look swag. -Tim Hart, Justin wrote: I thought that there was something related to that, is it that it must implement LifeCycleListener SessionListener, or is SessionListener just

RE: Argument Type Mismatch

2003-12-02 Thread Hart, Justin
extend the Realm to ensure it does. http://jakarta.apache.org/tomcat/tomcat-5.0-doc/catalina/docs/api/org/apache/catalina/realm/GenericPrincipal.html -Tim Hart, Justin wrote: I need access to the user's password, which all of the Servlet specific ones seem to guard the programmer from getting

RE: SessionListener

2003-12-02 Thread Hart, Justin
MySessionListener.getLastSession().getAttribute(j_username) /jsp:expression |jsp:text |Username of current person /jsp:text jsp:expression session.getAttribute(j_username) /jsp:expression |/jsp:root |/body /html /jsp:root Hart, Justin wrote: Ok, still, I haven't found any documentation on how to add a SessionListener

RE: SessionListener

2003-12-02 Thread Hart, Justin
/jsp:text jsp:expression session.getAttribute(j_username) /jsp:expression |/jsp:root |/body /html /jsp:root Hart, Justin wrote: Ok, still, I haven't found any documentation on how to add a SessionListener in the server.xml file, and adding one using the listener tags defined for web.xml files doesn't

RE: SessionListener

2003-12-02 Thread Hart, Justin
may not have to do any custom coding, just the JDBC realm. Yoav Shapira Millennium ChemInformatics -Original Message- From: Hart, Justin [mailto:[EMAIL PROTECTED] Sent: Tuesday, December 02, 2003 9:22 AM To: Tomcat Users List Subject: RE: SessionListener How will the container get my user

RE: Argument Type Mismatch

2003-12-02 Thread Hart, Justin
/apache/catalina/realm/GenericPrincipal.html -Tim Hart, Justin wrote: I need access to the user's password, which all of the Servlet specific ones seem to guard the programmer from getting access to. Justin -Original Message- From: Tim Funk [mailto:[EMAIL PROTECTED] Sent: Monday

RE: SessionListener

2003-12-02 Thread Hart, Justin
Unfortunately, the paranoia is founded in this case, though I do agree. Justin -Original Message- From: Christopher Schultz [mailto:[EMAIL PROTECTED] Sent: Tuesday, December 02, 2003 10:23 AM To: Tomcat Users List Subject: Re: SessionListener Justin, Won't quite do it, JDBCRealm

RE: Configure tomcat for LDAP

2003-12-02 Thread Hart, Justin
JNDIRealm can be used to authenticate users against an LDAP (I'm guessing in this case ActiveDirectory). You will, however, want to use Basic authentication, and prompt the user username for a username and password. Justin -Original Message- From: Damien Pacaud [mailto:[EMAIL

RE: Question using JProfiler with Tomcat

2003-12-02 Thread Hart, Justin
You saw the 30 MB in JProfiler? I haven't used it myself, but I would imagine that JProfiler tares its own consumption off of the scores. Justin -Original Message- From: Laurent Michenaud [mailto:[EMAIL PROTECTED] Sent: Tuesday, December 02, 2003 12:32 PM To: [EMAIL PROTECTED] Subject:

RE: [OT] Quality of open source code - not a survey.

2003-12-08 Thread Hart, Justin
I don't think that looking at code will help you to develop a sense of best practices. There are books written on the subject that will help much more than attempting to glean such information from code. Especially since code is the end-product of the practices, not the other way around.

RE: Custom Realm deployment, was More sophisticated JDBCRealm Security

2003-12-08 Thread Hart, Justin
It must be in Tomcat's classpath, not in your WAR file. -Original Message- From: Frank Febbraro [mailto:[EMAIL PROTECTED] Sent: Monday, December 08, 2003 3:10 PM To: Tomcat Users List Subject: Custom Realm deployment, was More sophisticated JDBCRealm Security Thanks Yoav, One more

RE: Re: Database pool problem

2003-12-08 Thread Hart, Justin
I agree, sometimes clients ask for illogical things. Hell, sometimes developers ask for illogical things. If the choice is not yours to make, then you're stuck. I will caveat this with Point out if it is actually impossible. -Original Message- From: Doug Parsons [mailto:[EMAIL

RE: servlet-mapping like mod_rewrite?

2003-12-09 Thread Hart, Justin
Have a session variable that tracks what language they're using. Justin to offer language-depended websites I want to make a webapp available through /de/* (german) and /en/* (english). Of course, I don't want to use two servlet-repositories for that. My idea is, that no matter if e.g.

  1   2   >