Re: Returned mail: User unknown

2002-02-12 Thread E B

 --- jean-frederic clere
[EMAIL PROTECTED] wrote: 
Abhishek Pamecha wrote:
  
  are yu guys getting this mail from mike campbell
 repeatedly...
 
 Yes... But that should a configuration problem in
 the TC user list, should not
 it? I have receive 15 of these (for the moment).
 

If you can block this user, like in hotmail/yahoo, do 
it. 


__
Do You Yahoo!?
Everything you'll ever need on one web page
from News and Sport to Email and Music Charts
http://uk.my.yahoo.com

--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]




ending slash

2002-01-21 Thread E B

Whats the difference between the url
http://localhost:8080/myapp/MyServlet
and
http://localhost:8080/myapp/MyServlet/



__
Do You Yahoo!?
Everything you'll ever need on one web page
from News and Sport to Email and Music Charts
http://uk.my.yahoo.com

--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]




Re: Who starts tomcat??

2002-01-21 Thread E B

 --- Emerson [EMAIL PROTECTED] wrote:  How you
guys start tomcat in linux??? as root??? in
 the initialization with
 apache
 


Well, during development phase its better to use
plain tomcat without an apache.(unless you want to
test apache's functionality too).

Apache, since it binds to port 80, needs root.
tomcat listens at 8080 and hence it doesnt need root.

HTH,
eb!

__
Do You Yahoo!?
Everything you'll ever need on one web page
from News and Sport to Email and Music Charts
http://uk.my.yahoo.com

--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]




Re: shipping a webapp

2002-01-21 Thread E B

 --- Hans Schlenker
[EMAIL PROTECTED] wrote:  E B
wrote:
  
  Hi
  How do you package a webapp for shipping?
  make a war? okay, but I want things to be
  setup in other directories as well. like
  putting some jar files in common/lib and
  putting a file myconfig.xml in common/classes.
  
 Making a war should be fine. Why do you want to
 install things
 elsewhere?
 

well, I want my classes to be visible to soap webapp.
so I need to put them under common/classes.
Now once I take my webapp's classes up, I have to take
them all. so additional config files too in the
common/classes.




 I have the problem to use a native library from
 different web apps (i.e.
 different versions of the same one) which requires
 to install files into
 some shared location, e.g. $CATALINA_HOME/lib. This,
 however, yielded
 some runtime problems: see subject howto install
 shared jar's at
 runtime in this mailing list.
 
 Generally, if you want to deploy your webapp using
 the (Tomcat4) manager
 tool, there is no standard way to install files
 other than in
 $CATALINA_HOME/webapps/XXX . Copying anything
 elsewhere must be done by
 your own webapp. If this is your problem, I could
 provide you with some
 code that allows you to unzip one given
 jar/zip/war-file into different
 file system locations.
 


But it would not be as easy as deploying a war file.
just place it in webapps folder and start tomcat once
and its done.
In my case, a script needs to be run explicitly.
telling this to a user makes his life hard :)
It seems I have to live with this :-)



 Regards,
 
 Hans
 
  

__
Do You Yahoo!?
Everything you'll ever need on one web page
from News and Sport to Email and Music Charts
http://uk.my.yahoo.com

--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]




Re: Who starts tomcat??

2002-01-21 Thread E B

 --- John Kolvereid [EMAIL PROTECTED] wrote:  Hi,
 This is exactly what I had done previously.  I
 might add that it works like
 a charm for Oracle, and other programs on our
 system.  However, when I tried the
 same thing for Tom it has never open automatically -
 no matter where I place it
 in the init list.  I tried
 $CATALINA_HOME/bin/startup.sh
 and
 /home/down/jakarta-tomcat-4.0/bin/startup.sh
 and the same for
 su root -c...
 and
 su -c...
 None of these seem to work.  I have no idea why. 
 Any advise?  Thanks.
 
 

Is this command really executed?
Did you set JAVA_HOME, and does startup.sh see this
variable? What do the logs show? catalina.out?


__
Do You Yahoo!?
Everything you'll ever need on one web page
from News and Sport to Email and Music Charts
http://uk.my.yahoo.com

--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]




shipping a webapp

2002-01-20 Thread E B

Hi
How do you package a webapp for shipping?
make a war? okay, but I want things to be
setup in other directories as well. like
putting some jar files in common/lib and
putting a file myconfig.xml in common/classes.

How are others handling this? Is making a war
sufficient for you?

thanks.

__
Do You Yahoo!?
Everything you'll ever need on one web page
from News and Sport to Email and Music Charts
http://uk.my.yahoo.com

--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]




Re: Protecting static content

2002-01-16 Thread E B

 I want to protect static content in a webapp from
 un-authenticated access. Is this possible?
 


Is pumping the html out from a servlet the only way
to handle this?

btw, is there a concept of global URL, global to all
webapps?

__
Do You Yahoo!?
Everything you'll ever need on one web page
from News and Sport to Email and Music Charts
http://uk.my.yahoo.com

--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]




Protecting static content

2002-01-12 Thread E B

Hi
I want to protect static content in a webapp from
un-authenticated access. Is this possible?

thanks, eb.
PS: The archives at archive.covalent.net are not
searchable.

__
Do You Yahoo!?
Everything you'll ever need on one web page
from News and Sport to Email and Music Charts
http://uk.my.yahoo.com

--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]




RE: google

2001-12-26 Thread E B

You can go to the archives through jakarta.apache.org,
and this site is in google. Isnt this enuf for google.
Or is it that this page itself has a low pagerank?



 --- Lai Kok Cheong [EMAIL PROTECTED] wrote: 
Not only that you did need to write some code or
 some utilites as well
 
  -Original Message-
  From:   [EMAIL PROTECTED] [SMTP:[EMAIL PROTECTED]]
  google's algorithm is based on people linking to
 the site... if you want
  the archives in google, you need some webpages
 pointing to them.
  


__
Do You Yahoo!?
Everything you'll ever need on one web page
from News and Sport to Email and Music Charts
http://uk.my.yahoo.com

--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]




google

2001-12-20 Thread E B

google doesnt  index this tomcat mailing list from
some archive; wouldnt it be nice if it does. It would
be easy for me to search there first b4 posting
here.

__
Do You Yahoo!?
Everything you'll ever need on one web page
from News and Sport to Email and Music Charts
http://uk.my.yahoo.com

--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]




shlow(some times never) shutdown

2001-12-20 Thread E B


tomcat shuts down slowly on my linux. It shows 
'Stopping service Tomcat-Standalone' and doesnt
say anything about Tomcat-Apache.

btw, what are these two?

 

__
Do You Yahoo!?
Everything you'll ever need on one web page
from News and Sport to Email and Music Charts
http://uk.my.yahoo.com

--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]




google

2001-12-20 Thread E B

google doesnt  index this tomcat mailing list from
some archive; wouldnt it be nice if it does. It would
be easy for me to search there first b4 posting
here.

__
Do You Yahoo!?
Everything you'll ever need on one web page
from News and Sport to Email and Music Charts
http://uk.my.yahoo.com

--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]




Re: google

2001-12-20 Thread E B

I know, but why doesnt google index these archives?


 --- [EMAIL PROTECTED] wrote: 
http://marc.theaimsgroup.com/?l=tomcat-userr=1w=2
 
 
 E B wrote:
 
  google doesnt  index this tomcat mailing list from
  some archive; wouldnt it be nice if it does. It
 would
  be easy for me to search there first b4 posting
  here.
  
  __
  Do You Yahoo!?
  Everything you'll ever need on one web page
  from News and Sport to Email and Music Charts
  http://uk.my.yahoo.com
  
  --
  To unsubscribe:  
 mailto:[EMAIL PROTECTED]
  For additional commands:
 mailto:[EMAIL PROTECTED]
  Troubles with the list:
 mailto:[EMAIL PROTECTED]
  
  
 
 
 
 
 --
 To unsubscribe:  
 mailto:[EMAIL PROTECTED]
 For additional commands:
 mailto:[EMAIL PROTECTED]
 Troubles with the list:
 mailto:[EMAIL PROTECTED]
  

__
Do You Yahoo!?
Everything you'll ever need on one web page
from News and Sport to Email and Music Charts
http://uk.my.yahoo.com

--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]




black magic mystery

2001-12-20 Thread E B

This is about classloaders again. Same old problem
about message style soap services, and soap classes
in soap/WEB-INF/classes.

1. How do I find out which classloader loaded the 
classes shown in the stack trace?

2. In the stack trace that is shown below, 
   the class MessageServer is in the common/classes, 
   but soap is in its web-inf/classes. So soap's 
   class loader should be able to take the help of
   common classloader to load the MessageServer class.
   Why then does it complain?



  ?xml version=1.0 encoding=UTF-8 ? 
- SOAP-ENV:Envelope
xmlns:SOAP-ENV=http://schemas.xmlsoap.org/soap/envelope/;
xmlns:xsi=http://www.w3.org/1999/XMLSchema-instance;
xmlns:xsd=http://www.w3.org/1999/XMLSchema;
- SOAP-ENV:Body
- SOAP-ENV:Fault
  faultcodeSOAP-ENV:Server/faultcode 
  faultstringException while handling service
request:
MessageServer.processMessage(org.apache.soap.Envelope,org.apache.soap.rpc.SOAPContext,org.apache.soap.rpc.SOAPContext)
-- no signature match/faultstring 
  faultactor/soap/servlet/messagerouter/faultactor

- detail
  stackTracejava.lang.NoSuchMethodException:
MessageServer.processMessage(org.apache.soap.Envelope,org.apache.soap.rpc.SOAPContext,org.apache.soap.rpc.SOAPContext)
-- no signature match at
org.apache.soap.util.MethodUtils.getEntryPoint(MethodUtils.java:194)
at
org.apache.soap.util.MethodUtils.getMethod(MethodUtils.java:548)
at
org.apache.soap.util.MethodUtils.getMethod(MethodUtils.java:528)
at
org.apache.soap.server.MessageRouter.invoke(MessageRouter.java:54)
at
org.apache.soap.providers.MsgJavaProvider.invoke(MsgJavaProvider.java:125)
at
org.apache.soap.server.http.MessageRouterServlet.doPost(MessageRouterServlet.java:268)
at
javax.servlet.http.HttpServlet.service(HttpServlet.java,
Compiled Code) at
javax.servlet.http.HttpServlet.service(HttpServlet.java,
Compiled Code) at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java,
Compiled Code) at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java,
Compiled Code) at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java,
Compiled Code) at
org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java,
Compiled Code) at
org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java,
Compiled Code) at
org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java,
Compiled Code) at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java,
Compiled Code) at
org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java,
Compiled Code) at
org.apache.catalina.valves.CertificatesValve.invoke(CertificatesValve.java,
Compiled Code) at
org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java,
Compiled Code) at
org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java,
Compiled Code) at
org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java,
Compiled Code) at
org.apache.catalina.core.StandardContext.invoke(StandardContext.java,
Compiled Code) at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java,
Compiled Code) at
org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java,
Compiled Code) at
org.apache.catalina.valves.ErrorDispatcherValve.invoke(ErrorDispatcherValve.java,
Compiled Code) at
org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java,
Compiled Code) at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java,
Compiled Code) at
org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java,
Compiled Code) at
org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java,
Compiled Code) at
org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java,
Compiled Code) at
org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java,
Compiled Code) at
org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java,
Compiled Code) at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java,
Compiled Code) at
org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java,
Compiled Code) at
org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java,
Compiled Code) at
org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java,
Compiled Code) at
org.apache.catalina.connector.http.HttpProcessor.process(HttpProcessor.java,
Compiled Code) at
org.apache.catalina.connector.http.HttpProcessor.run(HttpProcessor.java,
Compiled Code) at java.lang.Thread.run(Thread.java,
Compiled Code)/stackTrace 
  /detail
  /SOAP-ENV:Fault
  /SOAP-ENV:Body
  /SOAP-ENV:Envelope

__
Do You Yahoo!?
Everything you'll ever need on one web page
from News and Sport to Email and Music Charts
http://uk.my.yahoo.com

--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]




Re: black magic mystery

2001-12-20 Thread E B

 --- James Williamson [EMAIL PROTECTED] wrote:  

 Have you tried starting up Tomcat under a debugger
 (gdb) 

I have never used a debugger for java before,
can gdb be used on java? strange.



 
  2. In the stack trace that is shown below,
 the class MessageServer is in the
 common/classes,
 but soap is in its web-inf/classes. So soap's
 class loader should be able to take the help of
 common classloader to load the MessageServer
 class.
 Why then does it complain?
 
 
 I'm not an expert but isn't there some known issue
 with SOAP and
 classloading?


I searched the tomcat archive with 'classloading soap'
and there is not much in it. I am on soap-user list 
since a long time, I have not come accross soln to 
this problem.



__
Do You Yahoo!?
Everything you'll ever need on one web page
from News and Sport to Email and Music Charts
http://uk.my.yahoo.com

--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]




mail.jar

2001-12-19 Thread E B

Why is mail.jar put in common/libs ?


__
Do You Yahoo!?
Everything you'll ever need on one web page
from News and Sport to Email and Music Charts
http://uk.my.yahoo.com

--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]




Re: Tomcat4 standalone and port 80

2001-12-18 Thread E B

Did u run it from root? ports  1024 need root
to bind to.

__
Do You Yahoo!?
Everything you'll ever need on one web page
from News and Sport to Email and Music Charts
http://uk.my.yahoo.com

--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]




Re: AW: Classloader question -- soap

2001-12-17 Thread E B

I (and a few others) have observed that when using
soap+tomcat4 for message style services, I need to 
remove the soap classes from soap/WEB-INF/classes
and put soap.jar in the common/lib. This is only
with the message style services.

this means, the messagerouter's class(say MR) is being

loaded by a class X in (common/shared)/lib and so MR
shouldnt exist in the soap/WEB_INF/classes. Now this 
is weird. What is thsi class X. Can things be made
better here?

__
Do You Yahoo!?
Everything you'll ever need on one web page
from News and Sport to Email and Music Charts
http://uk.my.yahoo.com

--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]




Re: somebody trying hack me, what they really wanted?

2001-12-14 Thread E B

just for statistics, how many of you run tomcat
directly without apache/iis, with your machine
being on the internet.

All the responses for this thread indicate they
do so. Be careful, I know of one machine which
was compromised and which had tomcat on 80.
although I am not sure that hack was through
tomcat.

__
Do You Yahoo!?
Everything you'll ever need on one web page
from News and Sport to Email and Music Charts
http://uk.my.yahoo.com

--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]




Re: Starting TC from inittab

2001-12-13 Thread E B

 --- Erwin Ambrosch [EMAIL PROTECTED] wrote:  Hi!
 
 The TC3.3 doc. writes about starting TC from
 inittab. This is OK and 
 works, but now TC runs as root.
 Is there a possibility to start TC from inittab
 under a user other than 
 root.
 


su user -c tomcat_start 


__
Do You Yahoo!?
Everything you'll ever need on one web page
from News and Sport to Email and Music Charts
http://uk.my.yahoo.com

--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]




Re: Tomcat 4.0.1 doesn't seem to start

2001-12-13 Thread E B

 --- Kukkapalli  PraveenKumar [EMAIL PROTECTED]
wrote:  
 
 It means thats working fine
 


Have you read the mail correctly ? doesnt seem so :-)



 On Tue, 11 Dec 2001 Mihai Gheorghiu wrote :

  logs/catalina.out is empty
  There seems to be no server on port 8080.


__
Do You Yahoo!?
Everything you'll ever need on one web page
from News and Sport to Email and Music Charts
http://uk.my.yahoo.com

--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]




Re: AW: security issue: tomcat on port 80

2001-12-11 Thread E B

 I asked once on the OpenBSD list.  Those guys are
 very much
 traditionalists so they did not like the idea. 
 Still, there is no
 longer any rational reason for this restriction.  I
 challenge anyone
 to point out a good reason for it.  Basically, it

I discussed this on a local LUG. It seems there are
plenty of local root exploits and even if u run the
servers as non-root, you can still gain access to
this non-root user and then use the local root 
exploits to get root. Now how do u beat this ?




 used to be the case
 that sysadmins didn't want ordinary users to be able
 to run sendmail
 on port 25.  This altruisticly protects other users
 on other machines
 from dealing with trojaned services (ie, trojan
 telnetd, etc).  This
 concern is ridiculous today, because how often do
 you telnet to some
 unknown server and enter a password?  Never,
 probably.
 


__
Do You Yahoo!?
Everything you'll ever need on one web page
from News and Sport to Email and Music Charts
http://uk.my.yahoo.com

--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]




Re: AW: security issue: tomcat on port 80

2001-12-09 Thread E B

Dr. Evil:
Have you tried asking your question in the linux
mailing lists ? What do those guys got to say about
this restriction to bind to ports  1024 in the
present day server systems?



 --- Dr. Evil [EMAIL PROTECTED] wrote:   The VM
itself is typically writen in C/C++, so I
 wouldn't beg on more=20
  safety for a VM than Apache.
 
 That's probably true.  However, the likelihood of
 someone being able
 to send a web request to Tomcat that will result in
 Tomcat triggering
 a buffer overflow in the VM seems ridiculously
 small.  It's not like
 the VM is executing arbitrary code from users, even
 though it is
 designed to be able to do that safely.
 
  And there are other potential risks running tomcat
 as root. (If you=20
  make a configuration or implementation error that
 allows to store
  JSP on the server, an intruder can do anything on
 your server)
 
 Yeah, that could be a big problem.
 
  This was introduced to protect the ports that are
 used for the most
  fundamental services from missuse by any user.
 
 Which is plain old stupid, I must say.  It's not
 like Yahoo sells
 shell accounts on www.yahoo.com, right?  It dates
 from the good old
 days (now long gone) when root/sysadmins users
 basically trusted other
 root users, but didn't trust their own misbehaving
 shell account
 users.  This is totally irrelevant on today's
 Internet.  In the old
 days there had to be many users on one machine doing
 different things
 because machines were expensive.  Machines today are
 not shared.  They
 are owned and used by single entities, and for
 server machines (like
 www.yahoo.com) the only people with access to the
 machine are ones who
 already have root access.  Either you trust the
 machine and all of its
 sysadmins and users, or you don't.  How many
 companies still sell
 shell account service?  This OS limitation no longer
 has any security
 upside, and it has a huge downside, which is that
 the same process
 which runs CGIs or servlets also has (at some point)
 the power to edit
 /etc/passwd, and similar things which it should not
 have the
 capability of doing.
 
 The ultimate solution for this is capabilities based
 security.  At a
 very fundamental level, I should be able to give a
 proc the capability
 to bind to a port without also giving it the
 capability to edit
 /etc/passwd or read arbitrary RAM.  The uid 0 to
 bind  1024
 restriction just makes things worse.
 
 I'm still waiting for TrustedBSD which will
 implement all this.
 Pretty much every exploit known in the Unix world
 has, as one of its
 steps, or as its end goal, getting root.  The
 solution to this is to
 not have root, obviously.
 
 --
 To unsubscribe:  
 mailto:[EMAIL PROTECTED]
 For additional commands:
 mailto:[EMAIL PROTECTED]
 Troubles with the list:
 mailto:[EMAIL PROTECTED]
  


Nokia 5510 looks weird sounds great. 
Go to http://uk.promotions.yahoo.com/nokia/ discover and win it! 
The competition ends 16 th of December 2001.

--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]




security issue: tomcat on port 80

2001-12-06 Thread E B

How safe is it to have tomcat listening on port 80
running on a RH6.2, which  is on the internet ?
Did anybody face any security problems ever ?




Nokia 5510 looks weird sounds great. 
Go to http://uk.promotions.yahoo.com/nokia/ discover and win it! 
The competition ends 16 th of December 2001.

--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]




tomcat-apache doc

2001-12-06 Thread E B

where in the tomcat 4.0.1 docs, is the documentation
to configure tomcat to work behind apache server ?
I couldnt find it on the main doc page.
  


Nokia 5510 looks weird sounds great. 
Go to http://uk.promotions.yahoo.com/nokia/ discover and win it! 
The competition ends 16 th of December 2001.

--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]




Re: security issue: tomcat on port 80

2001-12-06 Thread E B

 --- Attila Szegedi [EMAIL PROTECTED] wrote: 
Java VM actually shields you from buffer overflow
 attacks, since you cannot
 overflow an array, let alone do it so that it
 overwrites code segments. So
 in case of Tomcat (or any Java-written server),
 buffer overflow attacks are
 out of question. Other attacks are still possible,
 though.
 

Can u list some of the other attacks ?


Nokia 5510 looks weird sounds great. 
Go to http://uk.promotions.yahoo.com/nokia/ discover and win it! 
The competition ends 16 th of December 2001.

--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]




Re: servlet upload

2001-10-25 Thread E B

 --- Bo Xu [EMAIL PROTECTED] wrote:  E B wrote:
 
  In my webapp under tomcat, I am using oreilly's
  cos.jar for uploading files. I observe that
  repeated uploading of same file fails. ie., when
  I upload a file for second time(different content,
  same file name), in my servlet I am getting the
  old file only. It is probably due to caching,
   does anybody know how do disable this caching ?
 
  the files are jar files. does jvm cache them ?
  or tomcat ? I see some jar cache files in the
 temp.
  The class used to access the uploaded file is
  com.oreilly.servlet.MultipartRequest
  [...]
 
 I use TC-4.0 + cos.jar(cos-23Jan2001.zip from
 www.servlets.com) to test
 it,
 I upload zTest.jar twice(same name, different
 content),  in
 Servlet-side, I get
 the new zTest.jar in the 2nd time.
 


For me, the second upload works only if I 
restart tomcat. does tomcat got to do anything
with this ?



Nokia Game is on again. 
Go to http://uk.yahoo.com/nokiagame/ and join the new
all media adventure before November 3rd.



Re: servlet upload

2001-10-25 Thread E B

 --- Pier Fumagalli [EMAIL PROTECTED] wrote:  E
B at [EMAIL PROTECTED] wrote:
 
  In my webapp under tomcat, I am using oreilly's
  cos.jar for uploading files. I observe that
  repeated uploading of same file fails. ie., when
  I upload a file for second time(different content,
  same file name), in my servlet I am getting the
  old file only. It is probably due to caching,
  does anybody know how do disable this caching ?
  
  the files are jar files. does jvm cache them ?
  or tomcat ? I see some jar cache files in the
 temp.
  The class used to access the uploaded file is
  com.oreilly.servlet.MultipartRequest
 
 Nope, but AFAICS, those servlets use a file system
 path, not a path relative
 to the web-application temporary path to store the
 uploaded files... Did you
 try changing the upload directory parameter to be
 different for the two
 web-applications?
 

There is only one webapp. 
btw, I have some files like jar_cache22482.tmp
Who is caching these. Is it jvm, or tomcat, 
or cos.jar ? Any idea? More over, I get these
tmp files only with tomcat 4.





Nokia Game is on again. 
Go to http://uk.yahoo.com/nokiagame/ and join the new
all media adventure before November 3rd.



upload cache disabling

2001-10-24 Thread E B

Hello
In my app under tomcat 4, I am using orielly's cos.jar
for upload some files. Uploading works fine first
time,
but for the second file if I upload the same file
(different content, same filename), I am not
getting the new file in my servlet. Seems to be
a cache problem. Has anybody else encountered
this problem ? How do I disable the cache ?

I am using
com.oreilly.servlet.multipart.MultipartRequest




Nokia Game is on again. 
Go to http://uk.yahoo.com/nokiagame/ and join the new
all media adventure before November 3rd.



servlet upload

2001-10-24 Thread E B

In my webapp under tomcat, I am using oreilly's
cos.jar for uploading files. I observe that 
repeated uploading of same file fails. ie., when
I upload a file for second time(different content,
same file name), in my servlet I am getting the
old file only. It is probably due to caching,
 does anybody know how do disable this caching ?

the files are jar files. does jvm cache them ?
or tomcat ? I see some jar cache files in the temp.
The class used to access the uploaded file is
com.oreilly.servlet.MultipartRequest



Nokia Game is on again. 
Go to http://uk.yahoo.com/nokiagame/ and join the new
all media adventure before November 3rd.



Re: automatic shutdown from servlet.init() that is load-on-startup

2001-10-22 Thread E B

Do you mean a webapp should be able to stop the
appserver tomcat ?
If this is what you wanted, then will other webapps be

happy with this ?



 --- Brett Porter [EMAIL PROTECTED] wrote: 
Hi,
 
 I saw a message a while back on this, but don't
 remember a solution and 
 failed to find it in the archives.
 
 I am looking to shutdown Tomcat 4 if a set of
 initialisation functions 
 fail. These functions are in the init() method of a
 servlet that is set 
 to load on startup (the first).
 
 Throwing a ServletException doesn't stop Tomcat, and
 I tried calling 
 Bootstrap.main( new String[] { stop } ); but that
 didn't unbind it 
 from the port either (it didn't give me any log
 messages either, but it 
 did prevent anything executing after that :)
 
 Thanks,
 Brett Porter
 
  


Nokia Game is on again. 
Go to http://uk.yahoo.com/nokiagame/ and join the new
all media adventure before November 3rd.



RE: webapps' classpath

2001-10-18 Thread E B

I think I can get around this problem by moving
to tomcat 4. There seems to be a shared classloader
for all the webapps. But I am wondering if other
app servers also support tomcat-4's classloading
structure, otherwise my app will become tc4-only.

 --- Brendan Johnston [EMAIL PROTECTED] wrote: 
Theoretically when a class wants to load a class it
 asks its own classloader
 to do it.
 Its own classloader then asks its parent to do it
 and if its parent can't it
 tries.
 
 Some concept of how to work around this might be:
 
 1. Have a factory class that return the instances
 you want in A1 (therefore
 A1 classloader)
 
 2. Register the factory it in some collection that
 the soap classloader can
 see (potentially create some factory registry and
 load it with the
 application servers classloader)
 
 3. Call methods on the factory to get instances
 
 I have not tested this I may have missed something,
 and don't recommend this complex approach.
 
 I think the answer in your case is to
 have fewer (one) web applications.
 
 Brendan
 
 
 
 
 -Original Message-
 From: E B [mailto:[EMAIL PROTECTED]]
 Sent: Monday, October 15, 2001 11:34 PM
 To: [EMAIL PROTECTED]
 Subject: RE: webapps' classpath
 
 
 So that means there are two classloaders:
 soap's and the other webapps's (in my case A1).
 now when the contol goes from soap to
 A1's class, which class loader loads the 
 classes of A1. ?
 Can I make A1's classloader come into picture
 and take over things ?
 
 
  --- Brendan Johnston [EMAIL PROTECTED] wrote: 
 Each Web Application gets its own private class
  loader.
  A class loader can only see classes
 loaded/loadable
  by it and by its
  parents.
  The Two Web Applications are siblings, independant
  from each other.
  
  I think you should give each WebApplication a
  complete set of its own
  classes so that you can upgrade each
 independantly.
  
  Brendan
   
  
  -Original Message-
  From: E B
  To: [EMAIL PROTECTED]
  Sent: 10/15/01 9:04 PM
  Subject: webapps' classpath
  
  I am using apache soap 2.2 with tomcat 3.2.1.
  There seem to be 2 classpaths, one tomcat's
  and the other webappp's WEB-INF/classes.
  For a SOAP service class, which of these two
  is visible first ?
  which of the two is recommended and why ?
  
  I have two web-app's: A1 and A2. (A2 is soap).
  I want to refer A1's objects in A2's class.
  But A1's classes are not visible to A2. why ?
  I had to put A1's classes in tomcat's classpath
  to get it working.
  
  thanks.
  
  
  
 


  Do You Yahoo!?
  Get your free @yahoo.co.uk address at
  http://mail.yahoo.co.uk
  or your free @yahoo.ie address at
  http://mail.yahoo.ie
   
 


 Do You Yahoo!?
 Get your free @yahoo.co.uk address at
 http://mail.yahoo.co.uk
 or your free @yahoo.ie address at
 http://mail.yahoo.ie
  


Nokia Game is on again. 
Go to http://uk.yahoo.com/nokiagame/ and join the new
all media adventure before November 3rd.