Re: Problem with security?

2005-06-10 Thread Nikola Milutinovic
Gagnon, Joseph M (US SSA) wrote: Did I not say that I'm new to this? I made no mention to whether or not I was trying to make it secure. This is only meant to be used within my company's intranet and my intention was to take the user account and then compare it with a set of registered users in

Re: Problem with security?

2005-06-10 Thread Mark
Not if you are using mutually authenticated SSL. On 6/10/05, Caldarale, Charles R <[EMAIL PROTECTED]> wrote: > > From: Gagnon, Joseph M (US SSA) > [mailto:[EMAIL PROTECTED] > > Subject: Problem with security? > > > > I have a situation where I want to be able

Re: Problem with security?

2005-06-10 Thread Robert r. Sanders
can provide information on how to do this (keep in mind I'm new at this), please let me know. -Original Message- From: Robert Harper [mailto:[EMAIL PROTECTED] Sent: Friday, June 10, 2005 10:59 AM To: 'Tomcat Users List' Subject: RE: Problem with security? -

Re: Problem with security?

2005-06-10 Thread Patrick Thomas
many different ways it can be done) to perform user authentication. > > If anyone can provide information on how to do this (keep in mind I'm > new at this), please let me know. > > -Original Message- > From: Robert Harper [mailto:[EMAIL PROTECTED] > Sent: Friday,

RE: Problem with security?

2005-06-10 Thread Robert Harper
9:19 AM To: Tomcat Users List Subject: RE: Problem with security? Did I not say that I'm new to this? I made no mention to whether or not I was trying to make it secure. This is only meant to be used within my company's intranet and my intention was to take the user account and then

RE: Problem with security?

2005-06-10 Thread Gagnon, Joseph M \(US SSA\)
new at this), please let me know. -Original Message- From: Robert Harper [mailto:[EMAIL PROTECTED] Sent: Friday, June 10, 2005 10:59 AM To: 'Tomcat Users List' Subject: RE: Problem with security? I think you have missed the point that you cannot get user information unless the

RE: Problem with security?

2005-06-10 Thread Robert Harper
From: Gagnon, Joseph M (US SSA) [mailto:[EMAIL PROTECTED] Sent: Friday, June 10, 2005 8:43 AM To: Tomcat Users List Subject: RE: Problem with security? I believe I've covered that all in my original message. Read further. -Original Message- From: egan0019 [mailto:[EMAIL PROTECTE

RE: Problem with security?

2005-06-10 Thread Gagnon, Joseph M \(US SSA\)
I believe I've covered that all in my original message. Read further. -Original Message- From: egan0019 [mailto:[EMAIL PROTECTED] Sent: Friday, June 10, 2005 10:10 AM To: Tomcat Users List Subject: Re: Problem with security? Look into the ServletRequest interface. That inte

Re: Problem with security?

2005-06-10 Thread egan0019
Look into the ServletRequest interface. That interface, which is extended in HttpServletRequest. You can call the getRemoteAddr(), getRemoteHost(), etc. methods. You receive null in your getRemoteUser because the user hasn't been 'authenticated' yet. On 10 Jun 2005, Gagnon, Joseph M (US SSA)

RE: Problem with security?

2005-06-10 Thread Peter Crowther
> From: Gagnon, Joseph M (US SSA) > I have a situation where I want to be able to provide user > access to an > application by determining the identity of the requesting > user, without > them having to go through a login procedure. OK. So what identity can the browser present that you wish to

RE: Problem with security?

2005-06-10 Thread Caldarale, Charles R
> From: Gagnon, Joseph M (US SSA) [mailto:[EMAIL PROTECTED] > Subject: Problem with security? > > I have a situation where I want to be able to provide user access > to an application by determining the identity of the requesting > user, without them having to go through

Problem with security?

2005-06-10 Thread Gagnon, Joseph M \(US SSA\)
Hello, I'm new to JSP development (and to dynamic web development as a whole) so please bear with me. I'm investigating using JSP/Java for a project at my workplace. My system (test server, if you will) is a PC running Windows XP Pro and I am using Tomcat 5.5.9. I have a situation where I want

Re: xalan problem with security manager

2005-01-14 Thread Greg Lappen
Michael- If you suspect the error is related to the security manager, run tomcat with the following environment variable set: export CATALINA_OPTS=-Djava.security.debug=access:failure This will put logging for the security manager in your catalina.out file (or your applications log file if you

xalan problem with security manager

2005-01-14 Thread Michal Kwiatek
Hi all, I can't make xalan work when I run tomcat with security manager. All I get is java.lang.ExceptionInInitializerError (see stack trace below). It works fine without security manager. Has any of you used xalan on tomcat with secuirity manager? What privileges should I grant to the code? I

Re: problem with security manager, plesk and mysql (catalina.policy ignored?)

2004-10-30 Thread Alfonso Alba García
I see now where my problem can be. If I extract the war file to directory ${catalina.home}/psa-webapps/mydomain.com/myapplication/ and insert in the policy file grant codeBase "file:${catalina.home}/psa-webapps/mydomain.com/myapplication/" { permission java.net.SocketPermission "localhost","resol

problem with security manager, plesk and mysql (catalina.policy ignored?)

2004-10-29 Thread Alfonso Alba García
Hi everybody, I have problems when connecting to mysql. I'm getting the following exception when trying to connect to a mysql database: (SQLException): java.sql.SQLException: Unable to connect to any hosts due to exception: java.security.AccessControlException: access denied (java.net.SocketPermi

Re: problem with security-constraint with Tomcat 5

2004-10-18 Thread Bill Barker
PROTECTED] Sent: Monday, October 18, 2004 9:12 AM To: Tomcat Users List Subject: RE: problem with security-constraint with Tomcat 5 Hi, Could this be something that changed (or rather, was clarified) in the Servlet Spec between version 2.3 (which Tomcat 4.x implements) and 2.4

Re: problem with security-constraint with Tomcat 5

2004-10-18 Thread Remy Maucherat
On Mon, 18 Oct 2004 10:45:23 -0400, Mercado . Maria <[EMAIL PROTECTED]> wrote: > Thanks for the suggestion, Yoav. I looked but I didn't see anything that stated > that a url pattern with 2 dots is illegal. Most systems I am aware of consider that the extension is the last dot. Otherwise, it star

RE: problem with security-constraint with Tomcat 5

2004-10-18 Thread Mercado . Maria
t: RE: problem with security-constraint with Tomcat 5 Hi, Could this be something that changed (or rather, was clarified) in the Servlet Spec between version 2.3 (which Tomcat 4.x implements) and 2.4 (which Tomcat 5.x implements)? ;) Yoav Shapira http://www.yoavshapira.com >-Original

RE: problem with security-constraint with Tomcat 5

2004-10-18 Thread Shapira, Yoav
[EMAIL PROTECTED] >Sent: Monday, October 18, 2004 10:08 AM >To: [EMAIL PROTECTED] >Subject: problem with security-constraint with Tomcat 5 > >I'm looking into migrating our project from Tomcat 4.1.30 to Tomcat 5.0.28. >We're also using Tiles and Struts 1.1. The problem is that T

problem with security-constraint with Tomcat 5

2004-10-18 Thread Mercado . Maria
I'm looking into migrating our project from Tomcat 4.1.30 to Tomcat 5.0.28. We're also using Tiles and Struts 1.1. The problem is that Tomcat 5 seems to be confused with a url pattern that works with Tomcat 4. Here's the pertinent parts of web.xml (I get the same results with 2.3 or 2.4 versi

problem with security manager.

2004-08-24 Thread Shilpa Nalgonda
I am running Tomcat4.1.30 on windows 2000, with security option turned on. My java application which is using JDK 1.4, connects to the the credit card authorizing company called verisign, and returns the approval authorization code. I have installed the digital certificate on $TOMCAT_HOME\certs di

Re: problem with security manager and manager webapp

2004-03-16 Thread Jeanfrancois Arcand
Jason Keltz wrote: Hi Jeanfrancois, I'm not sure now if it's a bug or not. I realized that the problem is that the code in "catalina.policy" to allow access refers to "${catalina.home}": // These permissions apply to the container's core code, plus any additional // libraries installed in the

Re: problem with security manager and manager webapp

2004-03-16 Thread Jason Keltz
Hi Jeanfrancois, I'm not sure now if it's a bug or not. I realized that the problem is that the code in "catalina.policy" to allow access refers to "${catalina.home}": // These permissions apply to the container's core code, plus any additional // libraries installed in the "server" directory gr

Re: problem with security manager and manager webapp

2004-03-16 Thread Jeanfrancois Arcand
Jason Keltz wrote: Hi. I've been using the manager webapp, but after enabling the security manager (-security on tomcat startup), the manager doesn't run any longer, giving this error: type Exception report message description The server encountered an internal error () that prevented it from

problem with security manager and manager webapp

2004-03-16 Thread Jason Keltz
Hi. I've been using the manager webapp, but after enabling the security manager (-security on tomcat startup), the manager doesn't run any longer, giving this error: type Exception report message description The server encountered an internal error () that prevented it from fulfilling this requ

Problem with security constraints on /

2001-08-16 Thread Johannes Lehtinen
Hello, Tomcat users! Earlier this week I stumbled on the following problem. I already found a solution to it but I am still not sure whether I had misconfigured things or whether this is a Tomcat bug that should be filed (didn't find an existing record). Could someone with more expertise confirm