AW: Bypassing user role assignment???

The only way I see, is to create your own realm by extending JDBC Realm and overriding the hasRole() method. -Ursprüngliche Nachricht- Von: Geoff Peters [mailto:[EMAIL PROTECTED]] Gesendet: Dienstag, 4. Juni 2002 13:19 An: [EMAIL PROTECTED] Betreff: Bypassing user role

AW: MS Driver (again)

This sounds to me as the pool has reached it maximal count on concurrent connections and the application doesn't give back a connection within the timeout of the request for a new connection. - request the connections as late as possible. (E.G. don't hold a connection in a session or servlet,

AW: Solaris JVM never seems to garbage collect, runs out eventually.

- First make shure that you don't have memory leaks on your own. - Make shure that you store as few data in sessions as possible. Remember that the sessions stay around for 30 minutes after the last action in the action. (30 minutes is the default for the session timeout). This way the

AW: jdbc connection list

For connection you are out of luck. There is nothing like a common event model for connections or connection pools. (No driver or pool that I know has a feature like this). One solution if you have complete control over any class that accesses the database: Wrap the pool or the connection

AW: Improper timing using Calendar class (JSP/servlet)

Date deprecated ? Until 1.4 this class is not deptrecated (and I guess it will not be in future versions). Only all constructors and methods that try to treat the Date as an calendar are deprecated. It still valid to use Date with time in ms and to do math with that. -Ursprüngliche

AW: Socrates (slightly off topic)

Some open + free solutions: - ab a part of the apeche web server http://httpd.apache.org/docs/programs/ab.html the best result you get with the version that is delivered with apache 2.* - jMeter a part of the jakarta project http://jakarta.apache.org/jmeter/index.html Just free: (No

AW: Improper timing using Calendar class (JSP/servlet)

Although it might be a personal view I thing this is a valid opinion. Listening to this list for a while I got the impression that using declarations inside %! % is a thing, that can lead to much trouble. Most people that are new to multithreaded programming or the architecture of a servlet

AW: need X running tomcat

Better user Xvfb. Depending on the distribution you use you can place a start script like this in /etc/init.d or /etc/rc.d/init.d to start xvfb. XVFB=/usr/X11R6/bin/Xvfb XVFBARGS=:99 -screen 0 1024x768x24 -fbdir /var/run -ac PIDFILE=/var/run/xvfb.pid case $1 in start) echo -n Starting

AW: need X running tomcat

Alternativly use JDK 1.4 with the headless option to create the images. -Ursprüngliche Nachricht- Von: Michael Reutter [mailto:[EMAIL PROTECTED]] Gesendet: Donnerstag, 6. Juni 2002 09:52 An: Tomcat Users List Betreff: need X running tomcat my servlets need some fonts to

AW: need X running tomcat

It was not a bug, but a missing feature. Yes it is solved from 1.4 on, if you use an additional headless option. -Ursprüngliche Nachricht- Von: Wouter Boers List [mailto:[EMAIL PROTECTED]] Gesendet: Donnerstag, 6. Juni 2002 10:54 An: 'Tomcat Users List' Betreff: RE: need X running

AW: CrossContext. Is there a easier solution?

There are serveral options: - Define a context with the name images and use something like /images/common/img1.gif to reference them from the other contexts. - The dirty solution for linux: mkdir -p /webcommon/images ln -s /webcommon/images /webapp1/images ln -s /webcommon/images

AW: Access-Control for Tomcat-Webserver (Version 4.0.1)

Depending on how good you wan't to disable access from the outside and what the outside is (other departments, internet) there are at least the following options: - Use org.apache.catalina.valves.RemoteHostValve or org.apache.catalina.valves.RemoteAddrValve To allow/block certain Hosts/IP's.

AW: How to close an HTTP port on Apache Tomcat 4?

Just remove the HTTP Connector entry in server xml. (Asuming that you want to run tomcat behind a web server) -Ursprüngliche Nachricht- Von: Luca Ventura [mailto:[EMAIL PROTECTED]] Gesendet: Freitag, 7. Juni 2002 08:28 An: tomcat-user; tomcat-dev Betreff: How to close an HTTP port

AW: Security problem?

HTTPS Alone won't help much in the described szenario. HTTPS can't enshure that the user is not manipulating the request. To disable that you have to sign the data. I think it's better to use a complete different architecture. If this has to be done with EJB as you suggest, a WebService over

AW: Redirect port 80 requests to 443

According to http://jakarta.apache.org/tomcat/tomcat-4.0-doc/config/http11.html redirectPort=443 only works if you set a security constraint (in web.xml). This should look like this. (Haven't tried it, but should give you a direction where to look and go on.) security-constraint

AW: Solaris JVM never seems to garbage collect, runs out eventually.

Answer to both questions: I don't know. Haven't looked much at jikes. In the past there was a big difference, sun's licence didn't allow to redistribute a jdk (just a jre which has no compiler). So people who wanted to distribute JSP's applications without precompiled pages used jikes. But

AW: Secure connection between Apache and Tomcat

AFAIK there is no builtin support for SSL connections between a connector and tomcat. Those parameters are for the communication between the connector and apache: http://jakarta.apache.org/tomcat/tomcat-3.3-doc/tomcat-ssl-howto.html#s4 Two alternative solutions: - Use a VPN - Use a SSH Daemon

AW: AW: need X running tomcat

Have a look at: http://java.sun.com/j2se/1.4/docs/guide/awt/AWTChanges.html#headless http://forum.java.sun.com/thread.jsp?forum=20thread=132877 -Ursprüngliche Nachricht- Von: Zsolt Koppany [mailto:[EMAIL PROTECTED]] Gesendet: Dienstag, 11. Juni 2002 09:34 An: Tomcat Users List

AW: no way to avoid log ?

In this case implementing and defining a 'QuietLogger' would help. (A logger of your own that just has empty methods) This way you wouldn't have to patch tomcat sources. If this would be enough I'm not shure. Didn't look at the tomcat sources and didn't try it on my own. -Ursprüngliche

AW: Tomcat Unexplained Shutdown

An unintended shutdown of tomcat whithout a log message typically indicates a problem in the VM or in a native library. - Whick JDK are you using (Vendor and version). - Did you try other JDK's (other version, other vendor) - Do you use tomcat standalone or behind a web server - If behind a

AW: Tomcat Unexplained Shutdown

My first bet is the JdbcOdbcDriver. It has no production quality. What database do you access with it ? To access SQL Server 2000 you can use a driver from microsoft. (they licensed it from merant) http://msdn.microsoft.com/downloads/sample.asp?url=/MSDN-FILES/027/001/7

AW: Tomcat Unexplained Shutdown

Some sidenotes to your source code: - You shouldn't open a connection in the init method. This way you share one connection between two concurent requests to the same servlet. It's better to use a connection pool and get the connection for every request. - All your instance variables are

AW: Tomcat Unexplained Shutdown

Access calls for trouble, as it isn't designed for multithreaded write access. Two option for a cheap database: - mysql (Although I personally don't like it much it might be good enough for you: No Views, No Subselects) http://www.mysql.com/downloads/mysql-max-3.23.html - postgreSQL (I like it

AW: Auto Start Tomcat

No cron isn't the right tool for that. That just good for sceduled starts. If you want to start processes on 'power on', you have to look at the init program. man init Also have a look at http://www.redhat.com/support/resources/tips/Boot-Process-Tips/Boot-Proc ess-Tips-3.html

AW: Tomcat Unexplained Shutdown

I think then you have to serialize the write access to the database. If it's possible to read from Access while somebody else (in this case another Thread) is reading, I haven't tried. I would think about decoupling the application, use one application with a 'real database' to implement the

AW: LOGGING TIME TAKEN TO SERVE A REQUEST

AFAIK to log that information you have to define your own Valve or Filter. -Ursprüngliche Nachricht- Von: Charles Sanders [mailto:[EMAIL PROTECTED]] Gesendet: Dienstag, 11. Juni 2002 16:00 An: Tomcat Users List (E-mail) Betreff: LOGGING TIME TAKEN TO SERVE A REQUEST

AW: problem with connections not closing...

The finalize method migth not be called until tomcat is shut down. Recommended actions: - Use a connection pool - Request the connection as close as possible to the usage - Return the connection as soon as possible after the usage - Always use a pattern like Connection mCon = null; try {

AW: problem with connections not closing...

This kind of design will give you nothing but headache. - The connection will be longer open than needed. - You must do hard work to close the connections at all - You have hardly control about the number of connections I prefer to manage the connections outside of my dao's. My DAO's get the

AW: AW: problem with connections not closing...

A JDBC Realm is just a tool to authenticate and authorize an user against a database. So it has nothing to do with your problem. As said earlier finalize() won't help you, as the time when a servlet instance is destroyed is undetermined. It might never be destroyed until tomcat is shut down.

AW: Line Numbers in compiled code...

- Make shure that you compile with -g. - If you did it and you still don't get the numbers, it may help to disable the jit/hotspot compiler. -Ursprüngliche Nachricht- Von: August Detlefsen [mailto:[EMAIL PROTECTED]] Gesendet: Mittwoch, 12. Juni 2002 09:56 An: Tomcat Users List

AW: Is it available Tomcat 2?

- Apache is not tomcat. Apache is 'just' a web server, tomcat is a web server, a servlet engine and a jsp engine. The web server part of tomcat can be replaced by apache. In this mode tomcat is an extension of apache that provides apache with servlets and JSP's. - There are modules

AW: getting exception when trying to close connection

It's probaly not a timeout of the connection object, but one of the database server. If the database server has a timeout for open connections, the connection on the driver side is 'open' but not functional any more. What exactly happens depends on the driver. (I've seen posts where people

AW: Storing Java Objects in SQL

The most driver I know, just support setObject for a given set of classes (typically some or all Subclasses of Number, String, Date) or column types (typicaly no blobs) To use a portable solution I would serialize the Object to an byte array and store it with PreparedStatement.setBytes() As

AW: Other question

One solution is to look at the open ports. Onother is to look at the process tree. How to do that, depends on your operation system. E.g.: if tomcat is configured to use port 8007 under linux you can use something like that: lsof -i :8007 -Ursprüngliche Nachricht- Von: Laura

AW: Security - Attack

I have doubts that the viruses will follow the redirect. I prefer to to answer with a 400/403/406 (still will be logged) or 204 (No log entry). I also have doubts that this is legal, so be carefull what you do. -Ursprüngliche Nachricht- Von: Cato, Christopher [mailto:[EMAIL

AW: Security - Attack

On which level did you implement this ? - apache/iis configuration - tomcat configuration - tomcat filter/valve Or where else ? -Ursprüngliche Nachricht- Von: Jean Christophe Rousseau [mailto:[EMAIL PROTECTED]] Gesendet: Donnerstag, 13. Juni 2002 14:21 An: Tomcat Users List

AW: Security - Attack

Blocking the IP can be a dangerous thing: - If there are several people behind a proxy, you will disable all. - If the attacking pc has a provider wih dynamic IP's it dousn't help at all, it will just diable all user users that get this IP in the future. - It makes you vulnerable to dos

AW: Security - Attack

I wouldn't say that they do no harm: - They mess up your statistics If you don't change your configuration it's not possible to distinguish the 404 from the viruses from others that might indicated errors in your site. (I always get nervous if a server has a 'file not found' count 0)

AW: mapping upper-case to lower !

Store all files in lower case and write a filter that tranforms any requested jsp name to lower case. (Of course the same works with upper case) But that requires that all (!!!) jsp files name have the same case. -Ursprüngliche Nachricht- Von: Walid Al-Abbadi [mailto:[EMAIL

AW: flush=false not working?

I see one additonal problem with the original aproach. If you don't set the buffersize big enough to hold the complete result of a request and there several includes that produce parts of the result you don't have control which include will be the last one to access the header before the

AW: testing tomcat

You can use wget to request pages locally. http://wget.sunsite.dk/ http://www.sunfreeware.com/programlistsparc8.html#wget -Ursprüngliche Nachricht- Von: Matthew Oatham [mailto:[EMAIL PROTECTED]] Gesendet: Freitag, 14. Juni 2002 13:37 An: '[EMAIL PROTECTED]' Betreff: testing tomcat

AW: Other question

I think that under linux this will not work anyway because every thread has it's own pid and you won't know wether the thread that was used to run the servlet is still alive. -Ursprüngliche Nachricht- Von: Tim Funk [mailto:[EMAIL PROTECTED]] Gesendet: Freitag, 14. Juni 2002 14:26 An:

AW: Other question

What operating system do you have ? -Ursprüngliche Nachricht- Von: Laura [mailto:[EMAIL PROTECTED]] Gesendet: Freitag, 14. Juni 2002 13:59 An: Tomcat Users List Betreff: Re: Other question But it doesn't seem to be correct. It writes in tomcat.pid a PID that doesn't seem to

AW: AW: Other question

Yes linux has a complete different process model: Every thread has it's own pid. The PID you get is at best the one of the thread that is used to run the servlet. Chances are high that this thread doesn't live anymore. The worst that can happen, is that the pid is reassigned to a complete

AW: Expiring a page on Apache/Tomcat

I think you have to provide a bit more info. What do you mean with doesn't work ? Which browser version do you use ? Which apache version do you use ? Which tomcat version do you use ? Which connector do you use ? -Ursprüngliche Nachricht- Von: Mariela Schafer [mailto:[EMAIL

AW: Tomcat 3.3.1: how to deny access for certain IP addresses?

A firewall doesn't have to be an external device. It can be software that runs on the server that runs tomcat. (Which kind of software depends on the operating system you use to run tomcat). If you use linux you have already a firewall as part of the os. (IPChains for linux 2.2/IPTables for

AW: request.getParameter(th) returned null

I think that no value was selected when this happens. Maybe you should define a default: option value=00 selected00/option -Ursprüngliche Nachricht- Von: Vano Beridze [mailto:[EMAIL PROTECTED]] Gesendet: Dienstag, 18. Juni 2002 13:37 An: '[EMAIL PROTECTED]' Betreff:

AW: AJP vs WARP Connector

The only way I can imagine, is to place the static resources outside of the webapp. (But this requires additional configuration on the apache site if you want to protect some of these resources.) Don't know if that realy works, as I use tomcat stand alone. -Ursprüngliche Nachricht-

AW: Apache Tomcat Filter

If apache serves the static resources you can't protect them by a Filter-Servlet. The requests never reach your servlet. AFAIK in a future version of mod_webapp it will be possible to define security contraints on the tomcat side which will be honored by the connector. (Currently it's not

AW: JasperException: Unable to compile class for JSP

Your error message sounds as if pageContext.handlePageException() is is defined to accept just an Instance of Exception not Throwable. That could be caused be a jar file that contains an older version of the jsdk. (servlet.jar, ...) Have a look at your jar files that are used for your tomcat.

AW: Catalina.start: LifecycleException:

Shouldn't it be oracle.jdbc.driver.OracleDriver instead of oracle.jdbc.OracleDriver ? -Ursprüngliche Nachricht- Von: Gita [mailto:[EMAIL PROTECTED]] Gesendet: Freitag, 21. Juni 2002 09:30 An: Tomcat Users List Betreff: Catalina.start: LifecycleException:

AW: set content type to text/pdf

MS IE has sometimes his own opinion what to open and ignores the content type. The safest way to convince IE to open PDF is to set the content type to load the file from a url that has the extension .pdf. Additional hint: Make shure that your servlet supports Byte range requests (HTTP

AW: AW: Catalina.start: LifecycleException:

Looks like I'm a bit outdated. Sorry. -Ursprüngliche Nachricht- Von: Gita [mailto:[EMAIL PROTECTED]] Gesendet: Freitag, 21. Juni 2002 09:53 An: Tomcat Users List Betreff: Re: AW: Catalina.start: LifecycleException: no. in new version there are oracle.jdbc.OracleDriver... -- To

AW: set content type to text/pdf

Sorry a little typo: The safest way to convince IE to open PDF is to set the content type and to load the file from a url that has the ^ extension .pdf. -Ursprüngliche Nachricht- Von: Ralph Einfeldt Gesendet: Freitag, 21. Juni 2002 09:44 An: Tomcat Users List

AW: AW: set content type to text/pdf

It's possible to configure tomcat to let you request /servlet/Tiparire/text.pdf and to get /servlet/Tiparire executed. I haven't tried by now to do something like that so can't give you much more help. Maybe something like this should do the trick: servlet-mapping

AW: AW: AW: set content type to text/pdf

This was posted some hours ago to an error that looks similar to yours: This error is caused by a problem in the web.xml file and the full error can be seen in the webapp loader log files. If you have not overridden this with a Logger tag, then the file will be named catalina_somedate.log in

AW: native library not found

java.library.path is a system property. This can either be set through System.setProperty() or at startup of java with -Djava.library.path=path. To achive this for tomcat you can set it through the environment variable JAVA_OPTS. (Have a look at catalina.bat) -Ursprüngliche

AW: how to set environment variable in tomcat?

If you really want to use environment variables you have to define them outside of tomcat. (E.g. in a (wrapper-)startscript for tomcat). Note that in java reading of environment variables is deprecated (see alse API doc of System.getenv() in favour of systzem properties. -Ursprüngliche

AW: SessionListener does not get enough information

Define a class (bean) that store the information that the user has to confirm. Let this classs implement the HttpSessionBindingListener and do the 'rollback' in the valueUnbound() method. -Ursprüngliche Nachricht- Von: Software AG [mailto:[EMAIL PROTECTED]] Gesendet: Montag, 24. Juni

AW: Two questions !

One answer to two questions: String mTomcatHome = System.getenv(CATALINA_HOME); -Ursprüngliche Nachricht- Von: Jakarta Tomcat Newsgroup (@Basebeans.com) [mailto:[EMAIL PROTECTED]] Gesendet: Montag, 24. Juni 2002 18:55 An: [EMAIL PROTECTED] Betreff: Two questions ! 1. How

AW: Design Question: Static vs. Dynamic

With this amount of users I wouldn't think about caching the html output for dynamic elements. What we do is to cache essential data from the database and generate the pages on the fly. That design works with several 1000 hits an hour. (Not with tomcat but with jserv and gnujsp, but I don't

AW: problems with encodeURL

The URL looks OK. I have no problems reading the parameters from such an URL (tomcat 4.0.3). (Assuming that HttpServletResponse's getAttribute was just a typo and should be HttpServletRequest's getAttribute) - Which tomcat version do you use ? - Do you use a connector ? (Which one) - Have you

AW: how to set environment variable in tomcat?

getenv() and getProperty(): http://java.sun.com/j2se/1.4/docs/api/java/lang/System.html#getenv(java. lang.String) http://java.sun.com/j2se/1.4/docs/api/java/lang/System.html#getProperty( java.lang.String) Have a look at the startup scripts for tomcat for you platform. -Ursprüngliche

AW: Native library cannot be loaded twice

Depends on which classloader finds the class. If you have a classloader hierarchy as tomcat, you can have either one instance of the class (the class is only found through the parent class loader) or several instances of the class (some or all context class loader find the class on their own

AW: -Xmx/-Xms Parameters, Where do they go???

Which version of tomcat are you using? The following should work for 4.0.x: You can specify CATALINA_OPTS=-server in catalina.sh. I prefer to have a wrapperscript like this: #!/bin/sh JAVA_HOME=/usr/local/java/jdk1.3.1 CATALINA_HOME=/usr/local/java/jakarta-tomcat-4.0.3

AW: -Xmx/-Xms Parameters, Where do they go???

Nachricht- Von: Ralph Einfeldt Gesendet: Dienstag, 25. Juni 2002 14:15 An: Tomcat Users List Betreff: AW: -Xmx/-Xms Parameters, Where do they go??? -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]

AW: appache could not be started

There should be a message in the logs with more info what went wrong. -Ursprüngliche Nachricht- Von: Hao Ding [mailto:[EMAIL PROTECTED]] Gesendet: Dienstag, 25. Juni 2002 15:37 An: Tomcat Users List Betreff: appache could not be started I got a message httpd could not be started

AW: Tomcat is very slow when used with Netscape browser

It is not necessary the time to load, but it also can be the time to render the data. We have a website wherer netscape 4.7 takes 16 seconds to render. IE and netspape 6.1 do it in less than 2 seconds. -Ursprüngliche Nachricht- Von: Kiran Kumar [mailto:[EMAIL PROTECTED]] Gesendet:

AW: Create JSP file or a Servlet file for web browser.

That's one way to go. (Although I wouldn't use FrontPage, but that's a matter of taste) Anpother way is to use an editor that is (more or less) aware of jsp (HomeSite, DreamWeaver UltraDev, Sun Forte). Those tools are better in helping you to insert the jsp. As they highlight the code

AW: Navigating between application context

AFAIK you can't share sessions between different contexts. Each context has it's own classloader, so you can't read objects created in one context from another context. (See also craigs response in the thread 'Emulating JServ's session.topleveldomain with Catalina') -Ursprüngliche

AW: .gif images not displaying with JSPs

It looks like you access the jsp through an url like /myapp/servlet/some.jsp. If you call it like that, you tell the browser with src=image1.gif to look for image1.gif in the same directory as the requested page. As the browser isn't aware of the internal directory structure of the server he

AW: JAKARTA--------JSP ERROR!!! PLEASE HELP

Have a closer look at the root cause of the servlet exception: In this case a NullPointerException in line 244 of the generated java file archivio_list_dati_pers_1.java So take look at this file, to see what causes the Exception. -Ursprüngliche Nachricht- Von: Catalin [mailto:[EMAIL

AW: Session Length

To set the minimal time to live for a session, you can use any of the following: in web.xml: session-config session-timeout30/session-timeout!-- 30 minutes -- /session-config In your JSP or servlet: session.setMaxInactiveInterval(30); P.S.: Remember that this is just the minimal age

AW: Best JDK For Tomcat ?

This kind of test doesn't tell anything. Better have a look a at somebody who nows what he does: http://www.volano.com/report/index.html But these test won't show which JDK is the fastest for a specific application, because the performance differences are not the same in every aspect of the VM.

AW: Different Tomcat for each Apache Virtual Host?

Make shure that you have defined different port numbers for all ports tomcat is listening on. Make shure that you disabled the HttpConnector on port 80/8080. Each tomcat that is connected with a web server has 2 ports: - One to receive the shutdown command (default: 8007 (not shure)) - One

AW: Antwort: AW: Session Length - more accurate: Session value length

accurate: Session value length Thank you. But I'd like to set the length of the session value. Regards, Kirsten Ralph Einfeldt

AW: Wrong line number in stack trace

Which JDK do you use ? Never experienced something like that with either IBM's JDK or Suns JDK. Was 'class file' just a typo? (It should be the source you looked at) -Ursprüngliche Nachricht- Von: Volker Leidl [mailto:[EMAIL PROTECTED]] Gesendet: Donnerstag, 29. November 2001 10:45

AW: Wrong line number in stack trace

AFAIK tomcat only output those characters that are in your JSP. It is not introducing any line feeds on it's own. Is it possible, that the files have been edited (at least once) with different settings for the editor, or under linux ? -Ursprüngliche Nachricht- Von: Volker Leidl

AW: Wrong line number in stack trace

, , true, 8192, true); with a single linefeed after the third parameter (followed by a view tabs). This is definitely not from my jsp. -Original Message- From: Ralph Einfeldt [mailto:[EMAIL PROTECTED]] Sent: Thursday, November 29, 2001 2:00 PM To: Tomcat

AW: Looking for RFC1867 base upload JAVA lib

Be carefull: This implementation misses some 'dirty hacks' to deal with unfriendly browsers that don't follow the spec. (Jasons Class has those hacks) -Ursprüngliche Nachricht- Von: Daniel Rall [mailto:[EMAIL PROTECTED]] Gesendet: Donnerstag, 29. November 2001 02:27 An: Tomcat

AW: benchmarking Tomcat4?

Depends on what you mean with 'better'. There is a tools named ab (Apache Bench) that is part of the apache web server. (The apache guys recommend to use the version that comes with apache 2.0). It doesn't have all those gui features and some restricted means to simulate user interactions,

AW: TC 3.3 jsessionid

How did you get that URL? It should look like this: http://localhost:8080/news/servlet/lm;jsessionid=22ym1bzx71?act=bgetinde x -Ursprüngliche Nachricht- Von: Erwin Ambrosch [mailto:[EMAIL PROTECTED]] Gesendet: Montag, 3. Dezember 2001 17:35 An: Tomcat Mailinglist Betreff: TC 3.3

AW: AW: TC 3.3 jsessionid

logged in properly the ;jsessionid is no longer part of the URL for additional requests. Erwin Ralph Einfeldt wrote: How did you get that URL? It should look like this: http://localhost:8080/news/servlet/lm;jsessionid=22ym1bzx71?a ct=bgetinde x -Ursprüngliche Nachricht

AW: AW: AW: TC 3.3 jsessionid

Try to change the action to: form method=POST action=%= response.encodeURL(j_security_check) % -Ursprüngliche Nachricht- Von: Erwin Ambrosch [mailto:[EMAIL PROTECTED]] Gesendet: Montag, 3. Dezember 2001 22:35 An: Tomcat Users List Betreff: Re: AW: AW: TC 3.3 jsessionid snip/ --

AW: Tomcat 3.3, server.xml and a lot of fun

What a nice guy you are. You startet to insult people while wanting help. If you can't stand the answers for insulting others you should not start it. If you wan't some more insults: Insulting others while hoping to get help is cheeky. Insulting others and hiding the real name is cowardly.

AW: request.getParameter problem

What do mean with 'not always succesfull'? (Exceptions, wrong value printed) What type of form do you use (standard or multipart (file upload)). -Ursprüngliche Nachricht- Von: Rama [mailto:[EMAIL PROTECTED]] Gesendet: Dienstag, 4. Dezember 2001 11:17 An: [EMAIL PROTECTED] Betreff:

AW: Tomcat 3.3, server.xml and a lot of fun

To be right in technical terms, doesn't give him the right to insult others for their names or their lack of english. I can't see anything funny in this kind of 'rants'. To be right in technical terms, doesn't justify to first insult others and then ask those he just insulted for help. P.S.:

AW: Need help on Session's null pointer exception

Have a look at com.fub.its.servlet.SecuredServlet Line 162 That's where the NullPointer comes from. -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Gesendet: Dienstag, 4. Dezember 2001 22:43 An: Tomcat Users List Betreff: RE: Need help on Session's null

AW: Tomcat creates a file called startup.log

It is defined in the shell script that starts tomcat. -Ursprüngliche Nachricht- Von: Hitchman, Peter [mailto:[EMAIL PROTECTED]] Gesendet: Mittwoch, 5. Dezember 2001 10:02 An: 'Tomcat Users List' Betreff: Tomcat creates a file called startup.log Hi, We are running tomcat on

AW: security issue: tomcat on port 80

I wouldn't beg on that. Java VM are programs that are implemente in C or C++ or other 'classic' languages. So Bugs introduces here can open the server to overflow attacks. Other problems: With a wrong configuration it may be possible, that a attacker can place a jsp on your server. If the

AW: Solaris VM crash? Full docs included

Is completely a question to sun. I suspect that it is a bug in the incremental gc. May be you should upgrade to JVM 1.3.1_01 There two bugs fixed that might help you: (Don't know if this changes where between v1.3.1-b24 and 1.3.1_01)

AW: Last attempt before I heave sun box out of the window!

Please wait until I'm ready to catch it under your window... :) -Ursprüngliche Nachricht- Von: Cross Fire Labs B.A. Lambrechts [mailto:[EMAIL PROTECTED]] Gesendet: Donnerstag, 6. Dezember 2001 16:28 An: [EMAIL PROTECTED] Betreff: Last attempt before I heave sun box out of the

AW: Last attempt before I heave sun box out of the window!

that could hurt or even kill a person. :) Jim -Original Message- From: Ralph Einfeldt [mailto:[EMAIL PROTECTED]] Sent: Thursday, December 06, 2001 9:52 AM To: Tomcat Users List Subject: AW: Last attempt before I heave sun box out of the window! Please wait until I'm ready to catch

AW: Last attempt before I heave sun box out of the window!

I wouldn't try Single Sign on, just makes the case even more complicated. It's purpose is to enable one login for more than one application. As I'm not using tomcat, it's hard to give hints. May it would help to forget about SSL for the start. -Ursprüngliche Nachricht- Von: Cross

AW: mod_jserv.so vs mod_webapp.so

mod_jserv is not recommended any longer. mod_jk is currently the best documented connector for TC 4.0 http://jakarta.apache.org/~hgomez/ajp13-tc4.0/ mod_webapp is the connector for the future, but misses some documentation and as the volume of traffic it caused in this list indicates, people

AW: Question re: static/dynamic content, cookies, session tracking

The picture is correct, but you don't have to use an own servlet to serve the static pages. Define all static pages as JSP's and use encodeURL on all ebedded URL's. -Ursprüngliche Nachricht- Von: Kevin McBrearty [mailto:[EMAIL PROTECTED]] Gesendet: Donnerstag, 6. Dezember 2001 19:57

AW: AW: security issue: tomcat on port 80

You don't have to sell shell accounts. The past 12 years I worked constantly for companies that had one or more unix servers and always only a small number of users had an admin account, all other had 'normal' user accounts. Even today we share one linux box with several users. (Each user has

AW: mod_jserv.so vs mod_webapp.so

Group 1445 New York Ave 4th Floor Washington, DC 20005 - Original Message - From: Ralph Einfeldt [EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Thursday, December 06, 2001 11:49 AM Subject: AW: mod_jserv.so vs mod_webapp.so mod_jserv is not recommended

AW: tomcat 3.1.1

Versions prior to 3.2 are not supported any longer. There are several bugs in the versions below 3.2 that won't ever be fixed. (Some of them can be real show stoppers) -Ursprüngliche Nachricht- Von: Anagha Mudigonda [mailto:[EMAIL PROTECTED]] Gesendet: Freitag, 7. Dezember 2001

AW: Apache Tomcat/4.01 - HTTP Status 500 - Internal Server Error

Depens on the owner of the directory, the class file and the owner of the tomcat process. They have to be at least in the same group with this settings. Have also a look at the parent directories of the class folder. The user that runs tomcat must have the right to traverse all parents.

<    1   2   3   4   5   6   7   8   9   10   >