two questions

2003-11-21 Thread Kumar, Sumit
I am trying to use authentication of a product, that uses Basic
authentication using JAAS. It stores data in database using SHA-1 encryption
and uses Tomcat as servlet engine. Not in any of the web.xml of several
webapps deployed do they specify to use Basic authentication. I am wondering
is there any other place also where you can specify the login-config and
realm-name besides  web.xml. or any other suggestions to go abt it.

-sumit

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: two questions

2003-11-21 Thread Sean Bruton
On Fri, 2003-11-21 at 16:00, Kumar, Sumit wrote:
 I am trying to use authentication of a product, that uses Basic
 authentication using JAAS. It stores data in database using SHA-1 encryption
 and uses Tomcat as servlet engine. Not in any of the web.xml of several
 webapps deployed do they specify to use Basic authentication. I am wondering

Tomcat supports basic, form, client-cert, and digest authentication. 

Unfortunately digest suffers the same security issues as basic
authentication, is not supported by most browsers, and is not required
by the servlet spec... so I wouldn't recommend you use it.

If client-cert authentication is not an option then go for basic or form
auth and assign a transport-guarantee to ensure the authentication
happens over secure channels (SSL). (Not sure how transport-guarantee
works w/ alternate front-end via mod_jk and such but similar steps can
be taken with Apache or IIS)

 is there any other place also where you can specify the login-config and
 realm-name besides  web.xml. or any other suggestions to go abt it.

Nope, not for container managed authentication with Tomcat.

 
 -sumit
 
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 
 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: two questions

2003-11-21 Thread Bill Barker

Sean Bruton [EMAIL PROTECTED] wrote in message
news:[EMAIL PROTECTED]
 On Fri, 2003-11-21 at 16:00, Kumar, Sumit wrote:
  I am trying to use authentication of a product, that uses Basic
  authentication using JAAS. It stores data in database using SHA-1
encryption
  and uses Tomcat as servlet engine. Not in any of the web.xml of several
  webapps deployed do they specify to use Basic authentication. I am
wondering

 Tomcat supports basic, form, client-cert, and digest authentication.

 Unfortunately digest suffers the same security issues as basic
 authentication, is not supported by most browsers, and is not required
 by the servlet spec... so I wouldn't recommend you use it.


Unfortunately, the JAASRealm (like most Tomcat Realms) doesn't support
client-cert auth.  You will probably need your own custom Realm to deal with
this.

 If client-cert authentication is not an option then go for basic or form
 auth and assign a transport-guarantee to ensure the authentication
 happens over secure channels (SSL). (Not sure how transport-guarantee
 works w/ alternate front-end via mod_jk and such but similar steps can
 be taken with Apache or IIS)

  is there any other place also where you can specify the login-config and
  realm-name besides  web.xml. or any other suggestions to go abt it.

 Nope, not for container managed authentication with Tomcat.

 
  -sumit
 
  -
  To unsubscribe, e-mail: [EMAIL PROTECTED]
  For additional commands, e-mail: [EMAIL PROTECTED]
 
 




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Two Questions Tomcat 4.1.12 Win2000

2002-12-06 Thread Scott Purcell

Running Tomcat 4.1.12 on Win2000.

Problem 1) I created a site under webapps in which only servlets will run. I created a 
web-xml file: (see Below): All works good.
Question: When I hit the URL http://localhost/site I see a directory listing. I do not 
want this. I thought the welcome-file-list was my solution, but maybe I am wrong. How 
is the best way to turn off any type of directory listing.?

Problem 2) I am also running a vendors software on the same box, which uses tomcat 
running on 8091. I was told not to use any of its servlet engine to run my stuff, so I 
need to run another tomcat lets say on 8080. A tomcat for use on some servlets and 
rpc-xml stuff.
Anyway, is it ok to run two tomcats on one box, as long as they have different port 
numbers? Anything I may need to be aware of in this case?


Thanks,
Sincerely
Scott



?xml version=1.0 encoding=ISO-8859-1?

!DOCTYPE web-app
PUBLIC -//Sun Microsystems, Inc.//DTD Web Application 2.3//EN
http://java.sun.com/dtd/web-app_2_3.dtd;

web-app

   servlet
  servlet-nametestServlet/servlet-name
  servlet-class/servlet/testServlet/servlet-class
   /servlet

   servlet-mapping
servlet-nameinvoker/servlet-name
url-pattern/servlet/*/url-pattern
   /servlet-mapping

   welcome-file-list
welcome-fileindex.html/welcome-file
   /welcome-file-list

/web-app
~

--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




Re: Two Questions Tomcat 4.1.12 Win2000

2002-12-06 Thread David Brown
Scott Purcell writes: 


Running Tomcat 4.1.12 on Win2000. 

Problem 1) I created a site under webapps in which only servlets will run. I created a web-xml file: (see Below): All works good.
Question: When I hit the URL http://localhost/site I see a directory listing. I do not want this. I thought the welcome-file-list was my solution, but maybe I am wrong. How is the best way to turn off any type of directory listing.? 

Problem 2) I am also running a vendors software on the same box, which uses tomcat running on 8091. I was told not to use any of its servlet engine to run my stuff, so I need to run another tomcat lets say on 8080. A tomcat for use on some servlets and rpc-xml stuff.
Anyway, is it ok to run two tomcats on one box, as long as they have different port numbers? Anything I may need to be aware of in this case? 


Thanks,
Sincerely
Scott 

 

?xml version=1.0 encoding=ISO-8859-1? 

!DOCTYPE web-app
PUBLIC -//Sun Microsystems, Inc.//DTD Web Application 2.3//EN
http://java.sun.com/dtd/web-app_2_3.dtd; 

web-app 

   servlet
  servlet-nametestServlet/servlet-name
  servlet-class/servlet/testServlet/servlet-class
   /servlet 

   servlet-mapping
servlet-nameinvoker/servlet-name
url-pattern/servlet/*/url-pattern
   /servlet-mapping 

   welcome-file-list
welcome-fileindex.html/welcome-file
   /welcome-file-list 

/web-app
~ 

--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED] 




Hello Scott, asuuming u have not packaged ur servlet try:
web-app 

 servlet
servlet-nametestServlet/servlet-name
servlet-classtestServlet/servlet-class
 /servlet 

 servlet-mapping
  servlet-nametestServlet/servlet-name
  url-pattern/testServleturl-pattern
 /servlet-mapping 

 welcome-file-list
  welcome-fileindex.html/welcome-file
 /welcome-file-list 

/web-app 



in any case u have to get rid of the invoker. hope this helps, david. 

--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]



AW: Two Questions about Tomcat

2002-07-12 Thread Ralph Einfeldt

See below:

 -Ursprüngliche Nachricht-
 Von: Serdar BOZDAG [mailto:[EMAIL PROTECTED]]
 Gesendet: Freitag, 12. Juli 2002 15:18
 An: tomcatGroup
 Betreff: Two Questions about Tomcat
 
 1. Can I access from browser to a folder under the WEB-INF folder.

No.

 2. How can I add another server (on port 85 for instance) in Tomcat

If you use tomcat standlone, define a second http connector with this 
port.

--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




Re: Two Questions about Tomcat

2002-07-12 Thread Serdar BOZDAG

thanks but when i add another http  connector how will the context elements
know to use the correct connector.

for instance there are two ports (connectors) 80 and 85
and in server.xml
two contexts

   Context path= docBase=c:\folder1 debug=0/
and
   Context path= docBase=c:\folder2 debug=0/

and which page will be shown when I call
http://localhost
and http://localhost:85
thanks..
serdar
- Original Message -
From: Ralph Einfeldt [EMAIL PROTECTED]
To: Tomcat Users List [EMAIL PROTECTED]
Sent: Friday, July 12, 2002 4:22 PM
Subject: AW: Two Questions about Tomcat


See below:

 -Ursprüngliche Nachricht-
 Von: Serdar BOZDAG [mailto:[EMAIL PROTECTED]]
 Gesendet: Freitag, 12. Juli 2002 15:18
 An: tomcatGroup
 Betreff: Two Questions about Tomcat

 1. Can I access from browser to a folder under the WEB-INF folder.

No.

 2. How can I add another server (on port 85 for instance) in Tomcat

If you use tomcat standlone, define a second http connector with this
port.

--
To unsubscribe, e-mail:
mailto:[EMAIL PROTECTED]
For additional commands, e-mail:
mailto:[EMAIL PROTECTED]




--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




RE: Two Questions about Tomcat

2002-07-12 Thread Andrew Conrad

To accept requests on a different port for the same Tomcat instance,
you need to define another port.

I haven't seen in the documentation how to handle your issue, but you
could try creating another Host element with the name localhost:85
and the approprate context elements.  Let us know what you find.



You can also install another instance of Tomcat with the appropriate
connector for port 85.


- Andrew

-Original Message-
From: Serdar BOZDAG [mailto:[EMAIL PROTECTED]] 
Sent: Friday, July 12, 2002 9:46 AM
To: Tomcat Users List
Subject: Re: Two Questions about Tomcat


thanks but when i add another http  connector how will the context
elements know to use the correct connector.

for instance there are two ports (connectors) 80 and 85
and in server.xml
two contexts

   Context path= docBase=c:\folder1 debug=0/
and
   Context path= docBase=c:\folder2 debug=0/

and which page will be shown when I call
http://localhost
and http://localhost:85
thanks..
serdar
- Original Message -
From: Ralph Einfeldt [EMAIL PROTECTED]
To: Tomcat Users List [EMAIL PROTECTED]
Sent: Friday, July 12, 2002 4:22 PM
Subject: AW: Two Questions about Tomcat


See below:

 -Ursprüngliche Nachricht-
 Von: Serdar BOZDAG [mailto:[EMAIL PROTECTED]]
 Gesendet: Freitag, 12. Juli 2002 15:18
 An: tomcatGroup
 Betreff: Two Questions about Tomcat

 1. Can I access from browser to a folder under the WEB-INF folder.

No.

 2. How can I add another server (on port 85 for instance) in Tomcat

If you use tomcat standlone, define a second http connector with this
port.

--
To unsubscribe, e-mail:
mailto:[EMAIL PROTECTED]
For additional commands, e-mail:
mailto:[EMAIL PROTECTED]




--
To unsubscribe, e-mail:
mailto:[EMAIL PROTECTED]
For additional commands, e-mail:
mailto:[EMAIL PROTECTED]


--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




Two questions !

2002-06-24 Thread @Basebeans.com

Subject: Two questions !
From: Dan Paraschiv [EMAIL PROTECTED]
 ===



1. How do I get from a servlet the path where is installed Tomcat
(not the path of my web application) ?

The solution could be specific to Tomcat, because I am  sure that my
application it will always run on Tomcat.

2. It is possible to  find out (in Java) the value of a system variable like
%CLASSPATH% or %CATALINA_HOME% ?


Thanks and Best regards,
  Dan



--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




RE: Two questions !

2002-06-24 Thread Charles N. Harvey III

System variables should be available to all of your servlets and other class
files.

{java.home}
{catalina.home}


catalina.home is where tomcat is installed.


Charlie

 -Original Message-
 From: Jakarta Tomcat Newsgroup
 [mailto:@[EMAIL PROTECTED]]
 Sent: Monday, June 24, 2002 12:55 PM
 To: [EMAIL PROTECTED]
 Subject: Two questions !


 Subject: Two questions !
 From: Dan Paraschiv [EMAIL PROTECTED]
  ===



 1. How do I get from a servlet the path where is installed Tomcat
 (not the path of my web application) ?

 The solution could be specific to Tomcat, because I am  sure that my
 application it will always run on Tomcat.

 2. It is possible to  find out (in Java) the value of a system
 variable like
 %CLASSPATH% or %CATALINA_HOME% ?


 Thanks and Best regards,
   Dan



 --
 To unsubscribe, e-mail:
 mailto:[EMAIL PROTECTED]
 For additional commands, e-mail:
 mailto:[EMAIL PROTECTED]



--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




AW: Two questions !

2002-06-24 Thread Ralph Einfeldt

One answer to two questions:

  String mTomcatHome = System.getenv(CATALINA_HOME);
   
 -Ursprüngliche Nachricht-
 Von: Jakarta Tomcat Newsgroup (@Basebeans.com)
 [mailto:[EMAIL PROTECTED]]
 Gesendet: Montag, 24. Juni 2002 18:55
 An: [EMAIL PROTECTED]
 Betreff: Two questions !
 
 1. How do I get from a servlet the path where is installed Tomcat
 (not the path of my web application) ?
 
 2. It is possible to  find out (in Java) the value of a 
 system variable like
 %CLASSPATH% or %CATALINA_HOME% ?
 

--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




RE: Two questions !

2002-06-24 Thread Shapira, Yoav

Howdy,
Your two questions are related.  The path where tomcat is would be
$CATALINA_HOME, which is an environment variable.

2. It is possible to  find out (in Java) the value of a system variable
like
%CLASSPATH% or %CATALINA_HOME% ?

There's a difference between an environment variable and a java runtime
option.  Anything passed as -Dname=value to java will be accessible via
System.getProperty(name).

Getting environment variable is different, and not always possible.  The
classpath, coincidentally, is accessible as 
System.getProperty(java.class.path).

See the JavaDoc for System.getProperties() for a complete list.  Tomcat
may add something like a jakarta.tomcat.home property, but I don't know
if it does.

Finally, although it's sometimes kludgey (sp?), you can always add a
parameter to your web.xml if you know it in advance (at deploy time,
versus run time).

Yoav Shapira
Millennium ChemInformatics

--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




two questions

2001-10-18 Thread Henry

Tomcat 3.2.3 runs wrong on my computer, and when it starts up,
the new windows generates a bunch of errors and disappear before I
was able to see clearly what the errors are. These are not logged
in and log files. How can i start tomcat in the original window,
or where can i find the run time error log?

second question is how can i specify username/password for Oracle in the
same way as MySQL does like below?

connectionURL=jdbc:mysql://localhost/authority?user=test;password=test





RE: two questions

2001-10-18 Thread Donie Kelly

Hi Henry

Use a command prompt to edit tomcat.bat in TOMCAT_HOME/bin

Find a line that looks like:  set _STARTJAVA=start Tomcat 3.2
%JAVA_HOME%\bin\java
And remove the... start Tomcat 3.2

Now run tomcat.bat start and it should start in the same command window. If
it exits you'll still be able to see the errors...

Hope that helps
Donie


 -Original Message-
From:   Henry [mailto:[EMAIL PROTECTED]] 
Sent:   18 October 2001 19:02
To: Tomcat (E-mail)
Subject:two questions

Tomcat 3.2.3 runs wrong on my computer, and when it starts up,
the new windows generates a bunch of errors and disappear before I
was able to see clearly what the errors are. These are not logged
in and log files. How can i start tomcat in the original window,
or where can i find the run time error log?

second question is how can i specify username/password for Oracle in the
same way as MySQL does like below?

connectionURL=jdbc:mysql://localhost/authority?user=test;password=test




RE: two questions

2001-10-18 Thread Jim Urban

Open a command window.  Change to the tomcat bin directory and execute
tomcat run.

Jim

-Original Message-
From: Henry [mailto:[EMAIL PROTECTED]]
Sent: Thursday, October 18, 2001 1:02 PM
To: Tomcat (E-mail)
Subject: two questions


Tomcat 3.2.3 runs wrong on my computer, and when it starts up,
the new windows generates a bunch of errors and disappear before I
was able to see clearly what the errors are. These are not logged
in and log files. How can i start tomcat in the original window,
or where can i find the run time error log?

second question is how can i specify username/password for Oracle in the
same way as MySQL does like below?

connectionURL=jdbc:mysql://localhost/authority?user=test;password=test






Re: two questions

2001-10-18 Thread Kar YEOW

the oracle url look like this
jdbc:oracle:thin:user/password@server:port:sid
hope this help
kar
- Original Message - 
From: Jim Urban [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, October 19, 2001 5:14 AM
Subject: RE: two questions


Open a command window.  Change to the tomcat bin directory and execute
tomcat run.

Jim

-Original Message-
From: Henry [mailto:[EMAIL PROTECTED]]
Sent: Thursday, October 18, 2001 1:02 PM
To: Tomcat (E-mail)
Subject: two questions


Tomcat 3.2.3 runs wrong on my computer, and when it starts up,
the new windows generates a bunch of errors and disappear before I
was able to see clearly what the errors are. These are not logged
in and log files. How can i start tomcat in the original window,
or where can i find the run time error log?

second question is how can i specify username/password for Oracle in the
same way as MySQL does like below?

connectionURL=jdbc:mysql://localhost/authority?user=test;password=test







Two questions

2001-09-13 Thread Renato


Hi all,

I'm using Tomcat-3.2.3 on Linux, JVM 1.3.1 Sun, AJP13 protocol.

Two quick questions. 

1. I was doing some tests with several contexts/domains. All of them has 
the option 'crossContext=false'. I included about 800 context and when I 
start Tomcat I have about 800 java linux-threads running ! I know this is 
probably a FAQ, but I could find an explanation for this behaviour.

2. I have a very simple servlet that I use to monitor Tomcat ( I execute it 
once every minute and look for errors... and of course I plan to automate 
it :)) ), which is integrated with Apache. I realized sometimes I have 
the 'Internal Server error' from Apache. It's like I keep clicking on the 
refresh button on the browser and in 1 out of 10 clicks I get the error. 
What's happening ? Anybody has seen this behaviour ?

Thanks
Renato.




Two questions from a new user

2001-01-12 Thread Collins, Jim

Hi,

I am new to this mailing list and I have two questions I would like to ask
(sorry if they have been asked before).

1. Is there an archive of this list I can search to avoid asking questions
that have already been asked.

2. Two I am getting a NoClassDefFoundError, I know that the class is where
it should be, it is in a Jar file in which other classes are accessed with
no problem. I believe that the problem may lie in the fact that the class in
question uses JNI. I set LD_LIBRARY_PATH to point to the library but I am
still getting the same error.

Any help would be greatly appreciated thanks.

Jim.


PLEASE READ: The information contained in this e-mail is confidential
and intended for the named recipient(s) only. If you are not an intended
recipient of this email you must not copy, distribute or take any
further action in reliance on it and you should delete it and notify the
sender immediately. Email is not a secure method of communication and
Nomura International plc cannot accept responsibility for the accuracy
or completeness of this message or any attachment(s).  Please check this
e-mail for virus infection, for which Nomura International plc accepts
no responsibility. If verification of this email is sought then please
request a hard copy. Unless otherwise stated any views or opinions
presented are solely those of the author and do not represent those of
Nomura International plc. This email is intended for informational
purposes only and is not a solicitation or offer to buy or sell
securities or related financial instruments. Nomura International plc is
regulated by the Securities and Futures Authority Limited and is a
member of the London Stock Exchange.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, email: [EMAIL PROTECTED]




Re: Two questions from a new user

2001-01-12 Thread Ted Husted

On 1/12/2001 at 10:06 AM Collins, Jim wrote:
 1. Is there an archive of this list I can search to avoid asking
questions that have already been asked.

The official archive listed on the Web site isn't really searchable,
but the one at mail-archive.com is. (Look for Tomcat-User). 




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, email: [EMAIL PROTECTED]




Follow up Two questions from a new user

2001-01-12 Thread Collins, Jim

Hi,

Someone pointed me to where the archives are (thanks Graham) and I believe
that the problem is that the code I am calling is a native method wrapper
and the native code library that the wrapper class is supposed to load
cannot be found. Someone else posted a similar problem and they were told
that this was what the problem is but not how to resolve it. I am running
tomcat 3.3.1 on Solaris. If anyone could shed some light on this I would
appreciate it thanks.

Jim.

PS I have set the LD_LIBRARY_PATH variable to point to the library.


PLEASE READ: The information contained in this e-mail is confidential
and intended for the named recipient(s) only. If you are not an intended
recipient of this email you must not copy, distribute or take any
further action in reliance on it and you should delete it and notify the
sender immediately. Email is not a secure method of communication and
Nomura International plc cannot accept responsibility for the accuracy
or completeness of this message or any attachment(s).  Please check this
e-mail for virus infection, for which Nomura International plc accepts
no responsibility. If verification of this email is sought then please
request a hard copy. Unless otherwise stated any views or opinions
presented are solely those of the author and do not represent those of
Nomura International plc. This email is intended for informational
purposes only and is not a solicitation or offer to buy or sell
securities or related financial instruments. Nomura International plc is
regulated by the Securities and Futures Authority Limited and is a
member of the London Stock Exchange.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, email: [EMAIL PROTECTED]




Two questions

2001-01-11 Thread Charles Dusseau

How do I set up Tomcat so that I can run servlets from my home directory?
I have set it up so that I can run servlets from root's home directory but 
not my as my normal user.  I get a "Forbidden: You do not have permission" 
error when I try to access servlets on my home directory.
I have the identical configuration as I did when I set it up to run in roots 
home directory.

Secondly, I would rather be able to run my servlets by going to 
http://localhost/servlets/MyServlet than going to 
http://localhost/servlets/servlet/MyServlet.
In the mod_jk.conf file I changed.
JkMount /servlets/servlet/* ajp12
to
JkMoung /servlets/* ajp12
but it did not work. What do I have to do instead.
_
Get your FREE download of MSN Explorer at http://explorer.msn.com


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, email: [EMAIL PROTECTED]