Re: How use an external C program in a Servlet

2003-06-25 Thread Michel Jubault
Thanks for this advice !

Michel

- Original Message -
From: Holger Klawitter [EMAIL PROTECTED]
To: Tomcat Users List [EMAIL PROTECTED]
Sent: Tuesday, June 24, 2003 11:46 AM
Subject: Re: How use an external C program in a Servlet


Am Dienstag, 24. Juni 2003 11:13 schrieb Michel Jubault:
 Thanks, I try it straight away !
 What kind of problem could occur with security ?

It depends on your situation. If any user may upload servlets, these
servlets
may execute every program on that machine - with the rights of the tomcat
account, which might be root! Same problem if the arguments to the C program
are not sufficiently checked.

Mit freundlichem Gruß / With kind regards
Holger Klawitter
--
[EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: How use an external C program in a Servlet

2003-06-24 Thread Holger Klawitter
Am Dienstag, 24. Juni 2003 09:51 schrieb Michel Jubault:
 Hi there !!

 I've  a little C program. This computes some variables and return a kind of
 statistic result. I need it in a servlet. But I don't know how to call it.
 I'm using Tomcat 4.1.24.
 Where this program must be to be launched ?
 How can I pass arguments to C program and use in servlet the return value ?

The normal java contains the solution:

http://java.sun.com/j2se/1.4.1/docs/api/java/lang/Runtime.html#exec(java.lang.String[])

However, this imposes a lot of security concerns. You will probably have to 
dig into $TOMCAT_HOME/conf/catalina.policy.

Mit freundlichem Gruß / With kind regards
Holger Klawitter
--
[EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: How use an external C program in a Servlet

2003-06-24 Thread Michel Jubault
Thanks, I try it straight away !
What kind of problem could occur with security ?

Regards

Michel

- Original Message -
From: Holger Klawitter [EMAIL PROTECTED]
To: Tomcat Users List [EMAIL PROTECTED]
Sent: Tuesday, June 24, 2003 10:53 AM
Subject: Re: How use an external C program in a Servlet


Am Dienstag, 24. Juni 2003 09:51 schrieb Michel Jubault:
 Hi there !!

 I've  a little C program. This computes some variables and return a kind
of
 statistic result. I need it in a servlet. But I don't know how to call it.
 I'm using Tomcat 4.1.24.
 Where this program must be to be launched ?
 How can I pass arguments to C program and use in servlet the return value
?

The normal java contains the solution:

http://java.sun.com/j2se/1.4.1/docs/api/java/lang/Runtime.html#exec(java.lan
g.String[])

However, this imposes a lot of security concerns. You will probably have to
dig into $TOMCAT_HOME/conf/catalina.policy.

Mit freundlichem Gruß / With kind regards
Holger Klawitter
--
[EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: How use an external C program in a Servlet

2003-06-24 Thread Holger Klawitter
Am Dienstag, 24. Juni 2003 11:13 schrieb Michel Jubault:
 Thanks, I try it straight away !
 What kind of problem could occur with security ?

It depends on your situation. If any user may upload servlets, these servlets 
may execute every program on that machine - with the rights of the tomcat 
account, which might be root! Same problem if the arguments to the C program 
are not sufficiently checked.

Mit freundlichem Gruß / With kind regards
Holger Klawitter
--
[EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: How use an external C program in a Servlet

2003-06-24 Thread Collins, Jim
Why don't you wrap a Java interface around the C program?

Regards

Jim.

-Original Message-
From: Michel Jubault [mailto:[EMAIL PROTECTED]
Sent: 24 June 2003 10:14
To: Tomcat Users List
Subject: Re: How use an external C program in a Servlet


Thanks, I try it straight away !
What kind of problem could occur with security ?

Regards

Michel

- Original Message -
From: Holger Klawitter [EMAIL PROTECTED]
To: Tomcat Users List [EMAIL PROTECTED]
Sent: Tuesday, June 24, 2003 10:53 AM
Subject: Re: How use an external C program in a Servlet


Am Dienstag, 24. Juni 2003 09:51 schrieb Michel Jubault:
 Hi there !!

 I've  a little C program. This computes some variables and return a kind
of
 statistic result. I need it in a servlet. But I don't know how to call it.
 I'm using Tomcat 4.1.24.
 Where this program must be to be launched ?
 How can I pass arguments to C program and use in servlet the return value
?

The normal java contains the solution:

http://java.sun.com/j2se/1.4.1/docs/api/java/lang/Runtime.html#exec(java.lan
g.String[])

However, this imposes a lot of security concerns. You will probably have to
dig into $TOMCAT_HOME/conf/catalina.policy.

Mit freundlichem Gruß / With kind regards
Holger Klawitter
--
[EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


PLEASE READ: The information contained in this email is confidential
and intended for the named recipient(s) only. If you are not an intended
recipient of this email you must not copy, distribute or take any
further action in reliance on it and you should delete it and notify the
sender immediately. Email is not a secure method of communication and
Nomura International plc cannot accept responsibility for the accuracy
or completeness of this message or any attachment(s). Please examine this
email for virus infection, for which Nomura International plc accepts
no responsibility. If verification of this email is sought then please
request a hard copy. Unless otherwise stated any views or opinions
presented are solely those of the author and do not represent those of
Nomura International plc. This email is intended for informational
purposes only and is not a solicitation or offer to buy or sell
securities or related financial instruments. Nomura International plc is
regulated by the Financial Services Authority and is a member of the
London Stock Exchange.



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: How use an external C program in a Servlet

2003-06-24 Thread Atreya Basu
Hi Holger,

There are two things that you can do.  If your programme is a Library
then you can use JNI to create native wrappers then just call them from
the servlet.  This is pretty straightforward and I use them.

The other is to use: Runtime.getRuntime().exec(exec_name_and_params);
That will just execute a programme, you can get the Process object and
get it's InputStream and OutputStream.

Good Luck,

_
Atreya Basu
Developer,
Greenfield Research Inc.
e-mail: atreya (at) greenfieldresearch (dot) ca

-Original Message-
From: Holger Klawitter [mailto:[EMAIL PROTECTED] 
Sent: June 24, 2003 6:46 AM
To: Tomcat Users List
Subject: Re: How use an external C program in a Servlet

Am Dienstag, 24. Juni 2003 11:13 schrieb Michel Jubault:
 Thanks, I try it straight away !
 What kind of problem could occur with security ?

It depends on your situation. If any user may upload servlets, these
servlets 
may execute every program on that machine - with the rights of the
tomcat 
account, which might be root! Same problem if the arguments to the C
program 
are not sufficiently checked.

Mit freundlichem Gruß / With kind regards
Holger Klawitter
--
[EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]