RE: Spam on tomcat-user?

2004-03-08 Thread Shapira, Yoav
Hi, I contacted the technical and administrative owner of the source (as reported by the mail header) of the spam. (rzone.de and webmailer.de) Let's see what happens. Probably nothing, but it's good to try. I've unsubscribed the address from the list, so hopefully we're all set. Yoav Shapira

RE: Tomcat ports

2004-03-08 Thread Shapira, Yoav
Hi, You will also have to run Tomcat as root if you use port 80. No, you don't. You can use commons-daemon which ships with tomcat 5 to run either tomcat 5 or tomcat 4.1 on port 80 (or any port 1024) without running as root. Yoav Shapira -Original Message- From: Reynir Þór Hübner

Classloader issues in tomcat 4.1.x (SDK1.4.2), using multi-containers

2004-03-08 Thread David Henry
We are trying to setup a Tomcat Service for our developers. The intention is that our platform is to be consolidated, meaning we will be running multiple Tomcat Containers under a single Tomcat installation (in this case 4.1.29). We work with a number of scientists who have paid for a 3rd

Re: Apache as Service on Linux - Help

2004-03-08 Thread Apahce Tomact
Mathew, Yes. I want to run Apache and Tomcat as servcices. Thanks, Rama Mathew [EMAIL PROTECTED] wrote: As service in Linux ?? In NT U can do that Hi All, Is there any way to install Apache2 and Tomcat4 as service on Linux? If so, please advise me. Your help is greatly appreciated.

hung tomcat problem

2004-03-08 Thread Mike Charnoky
Hello, we are currently using the following setup: * Tomcat 4.1.24-LE * Apache 1.3.27 * mod_jk 1.2.4 * Sun JVM 1.4.1_05 * all running on Linux RH 8.0 For quite some time now, our website has been encountering a hung tomcat problem at random times. The symptoms are typically: * Apache

Development Environment on a pen drive

2004-03-08 Thread A.White
I am thinking about setting up a development environment on my USB flash drive as I would like to be able to do some work/demonstrate to customers on the move and was wondering if anyone else had done it before or if it was possible. Any assistance would be appreciated Cheers Andrew

RE: Filter causing memory on TC-5.0.18 and 5.0.19

2004-03-08 Thread Ilyschenko, Vlad
Hi, We also are experiencing memory leaks in tomcat since we upgraded from 5.0.16 to 5.0.19. In particular I found out that web app sessions will not timeout with session-timeout=1 (or rather it will, but not after 1 minute): session-config session-timeout1/session-timeout

RE: Filter causing memory on TC-5.0.18 and 5.0.19

2004-03-08 Thread Shapira, Yoav
Hi, We also are experiencing memory leaks in tomcat since we upgraded from 5.0.16 to 5.0.19. In particular I found out that web app sessions will not timeout with session-timeout=1 (or rather it will, but not after 1 minute): What is it recently with people hijacking threads? Please use a

Re: mod_jk

2004-03-08 Thread John Sidney-Woollett
Chris Haines said: I spent nine hours trying to get mod_jk to compile properly for Linux but had no luck. I wanted to download the binary but couldn't find one. So, I downloaded the source code. The instructions I had were full of misinformation. Then I got to a point where I seemed to have

RE: Filter causing memory on TC-5.0.18 and 5.0.19

2004-03-08 Thread Ilyschenko, Vlad
Sorry about that. I was thinking that those issues are related. -Original Message- From: Shapira, Yoav [mailto:[EMAIL PROTECTED] Sent: Monday, March 08, 2004 3:54 PM To: Tomcat Users List Subject: RE: Filter causing memory on TC-5.0.18 and 5.0.19 Hi, We also are experiencing memory

Re: Apache as Service on Linux - Help

2004-03-08 Thread Parsons Technical Services
Rama, What Mathew is talking about is that Linux does not have services as windows does. I think that the term you need to search for is daemon. Or google for run Tomcat daemon. Tomcat 5 has instructions for this on the setup page. I don't know if this can be applied to TC4.

RE: Arabic encoding problem

2004-03-08 Thread Yansheng Lin
Hi, It's likely that request.getCharacterEncoding() is not null at that point(most likely iso-8859-1). A better conditional statement: if (request.getCharacterEncoding()==null) || ! request.getCharacterEncoding().equals(windows-1256)) {} Cheers:). -Yan -Original Message- From:

JNI?

2004-03-08 Thread Marc Hughes
I have a bean which relies on a native dll (win32). When a page using the bean attempts to use one of the native methods, the page fails org.apache.jasper.JasperException: loadBook at org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:254) at

AW: IIS + Tomcat 4.1.x + Load Balancing with session affinity (s ticky sessions) possible ? Yes !

2004-03-08 Thread Bjoern . Andersen
Thanks a lot, Ralph. After some work on the jvmroute-attrib it works. Didn't realize that the names must be exactly equal to the Worker names. But now, thinking about it, it's the only way it makes sense. -- MfG Björn Andersen _ Webservices -Ursprüngliche

RE: Hotswap servlet code in Tomcat 5?

2004-03-08 Thread Samuel Cheung
Thanks. I try this, but it is different from what I expected. In my doGet() of my servlet, I have a Counter object in my session. When I reload the page in my browser, I see the value of the counter increments. (say from 0 to 1 to 2). Then I go to the Tomcat manager web page, and then undeploy

RE: Hotswap servlet code in Tomcat 5?

2004-03-08 Thread Shapira, Yoav
Hi, Is Counter Serializable? Yoav Shapira Millennium ChemInformatics -Original Message- From: Samuel Cheung [mailto:[EMAIL PROTECTED] Sent: Monday, March 08, 2004 12:15 PM To: 'Tomcat Users List' Subject: RE: Hotswap servlet code in Tomcat 5? Thanks. I try this, but it is different

Re: Entity Declarations in JSP/XML

2004-03-08 Thread Eric Suen
If you really want add internal entity declarations in you jspx, maybe you should enter a feature request at http://issues.apache.org/bugzilla/. And you can change the org.apache.jasper.compiler.JspDocumentParser source, modify the startDTD(...) method to fit your need. and if you don't want to

RE: Hotswap servlet code in Tomcat 5?

2004-03-08 Thread Samuel Cheung
Sorry, it is my fault. Now I understanding. Sam -Original Message- From: Shapira, Yoav [mailto:[EMAIL PROTECTED] Sent: Monday, March 08, 2004 11:20 AM To: Tomcat Users List Subject: RE: Hotswap servlet code in Tomcat 5? Hi, Is Counter Serializable? Yoav Shapira Millennium

RE: tomcat monitor comp

2004-03-08 Thread Angus Mezick
Will this allow me to monitor multiple servers at one times? Or is it for localhost only? -Original Message- From: Peter Lin [mailto:[EMAIL PROTECTED] Sent: Saturday, March 06, 2004 4:03 PM To: [EMAIL PROTECTED] Subject: tomcat monitor comp

clustering question?

2004-03-08 Thread daniel
I am getting the following info in my log file. Mar 8, 2004 12:45:10 PM org.apache.catalina.cluster.tcp.SimpleTcpCluster start INFO: Cluster is about to start Mar 8, 2004 12:45:10 PM org.apache.catalina.cluster.tcp.ReplicationListener run SEVERE: Unable to start cluster listener.

RE: tomcat monitor comp

2004-03-08 Thread Kannan Sundararajan
Great! good work.. -Original Message- From: Peter Lin [mailto:[EMAIL PROTECTED] Sent: Saturday, March 06, 2004 4:03 PM To: [EMAIL PROTECTED] Subject: tomcat monitor comp http://cvs.apache.org/~woolfel/monitor-comp.gif I've posted a screen shot of the UI, it's just the beginning, but

RE: tomcat monitor comp

2004-03-08 Thread Peter Lin
it will be a standard part of JMeter. If you haven't used JMeter before here's a quick description. 1. you add a monitor to a test plan 2. add the kind of timer you would like to use. for the monitor, a constant timer makes the most sense, but some one could use a random timer 3. add the

JNDI DataSource clarification questions.

2004-03-08 Thread Parsons Technical Services
Now I am to the point of needing some clarification on JNDI. Current config. TC 4.1.29 Standalone RH 9 Planned config TC 5 (latest stable) TAO Linux (Approx RH Enterprise) I am running an application and using JNDI against MySQL. All is working fine but! 1. I deploy via a war file. I must

Re: Apache as Service on Linux - Help

2004-03-08 Thread Apahce Tomact
Hi Doug, Thank you very much for your info. Regards, Rama Parsons Technical Services [EMAIL PROTECTED] wrote: Rama, What Mathew is talking about is that Linux does not have services as windows does. I think that the term you need to search for is daemon. Or google for run Tomcat daemon.

Tomcat 5 and IIS

2004-03-08 Thread LILES, DAVID (CONTRACTOR)
I am looking for an alternative to our current environment. Currently we = are using JRun 3.0 for our Java needs and IIS for our web configuration. = Our environment requires our use of IIS. With regard to JRun, we = recently installed our upgrade to version 4.0 only to find functionality = we

JNDI Datasource Reference in DD Not Necessary?

2004-03-08 Thread Harry Mantheakis
Hello For some time now I have implemented the Tomcat 'JNDI DataSource' How-To on connection pooling, and everything has been fine. I define a resource in the context fragment: Resource name=jdbc/postgres auth=Container type=javax.sql.DataSource/

cookies, second instance of, causing tomcat 500 error

2004-03-08 Thread Paul
Hi All, any help solving this mystery is more than welcome: problem summary: i am using the identical cookie setting and getting code on different pages within WEBAPPS/ROOT, but second instance of setting and getting cookies is causing undecipherable 500 error in Tomcat. -paul. i have an

Tomcat is not finding my classes

2004-03-08 Thread Faine, Mark
Tomat 4.1.27 on Solaris 8 I've spent the past two days reading about classloaders and from what I've read my problem should not exist. Tomcat is not finding classes/jars in $TOMCAT_HOME/shared classes/lib. The only way I can get my classes loaded is to put them in

RE: Tomcat is not finding my classes

2004-03-08 Thread Hofmann, Benjamin
I don't know if this will help but I've had the same problem in the past and I started putting classes in $TOMACT_HOME/common/lib. This has worked great for everything that was not appropriate for the WEB-INF/lib. Ben -Original Message- From: Faine, Mark [mailto:[EMAIL PROTECTED] Sent:

Tomcat as a Windows Service and the security manager

2004-03-08 Thread A.J. Ostman
Hello All, Platform: Windows XP / Tomcat 4.1 and 5.0 If I invoke Tomcat from the command line as catalina run -security, then the security manager loads, however how do I get the Tomcat running as a service to invoke the security manager? I have tried putting -security in the optional parameters

Re: Disabling PUT and DELETE methods in Tomcat 5 standalone

2004-03-08 Thread Adam Hardy
On 03/08/2004 10:15 AM funkster wrote: security-constraint web-resource-collection web-resource-nameDisable Methods/web-resource-name url-pattern/*/url-pattern http-methodPUT/http-method http-methodDELETE/http-method

deploying war to tomcat 5.0.19 via manager app

2004-03-08 Thread Rob Ross
I'm sorry if this is a well known-issue. I've checked the archives and didn't find anything like this description, so here goes. I have a web app in a war file, with a META-INF/context.xml that looks like this: Context path=/dept/post/vale docBase=vale debug=0 reloadable=true

Re: Hiding Apache-Coyote/1.1 banner in Tomcat 5

2004-03-08 Thread Adam Hardy
On 03/08/2004 02:57 PM James Agnew wrote: I've been looking for a way to prevent security scanners such as Nessus from being able to easily read Tomcat's standalone webserver details. I'm running Tomcat 5.0.18 standalone and Nessus identifies it as follows: Server Version: Apache-Coyote/1.1

Re: Hiding Apache-Coyote/1.1 banner in Tomcat 5

2004-03-08 Thread James Agnew
I just like to reduce as much as possible the amount of information that a server gives out. Letting oppotunist crackers, who run a 1 minute nessus scan, know the version and type of the webserver, should IMO be avoided if possible. Sure, it won't put-off the determined cracker, but it might force

Re: Disabling PUT and DELETE methods in Tomcat 5 standalone

2004-03-08 Thread James Agnew
So, how would I go about actually prevent PUT and DELETE for all users, logged in or otherwise? I've been hitting my head against this one for some time, with no luck. The solution needs to allow anonymous users to access the site (i.e. no login) and still prevent PUT and DELETE methods. Thanks,

RE: Hiding Apache-Coyote/1.1 banner in Tomcat 5

2004-03-08 Thread Mike Curwen
I used to work with a guy that had a favourite past-time. He'd grep the source for those strings, and them replace them with a MOTD - usually flavoured with monty python references. So if there's no configuration for this, that's one option. (alter the source to return 'empty string' and

session-timeout

2004-03-08 Thread Jerald Powel
Hi all, I am experiencing problems with memory management. I load up my app in 10 or 15 browsers where various stuff is put on a session each time. In Windows Task Manager I can see java.exe incrementing by an amount of memory for each browser/app opened. No problem there. In my web.xml

Re: Disabling PUT and DELETE methods in Tomcat 5 standalone

2004-03-08 Thread Adam Hardy
What I was implying is that you have effectively disabled it already this way. Or are you able to do PUTs and DELETEs despite the security constraint? I'd be surprised. Adam On 03/08/2004 11:24 PM James Agnew wrote: So, how would I go about actually prevent PUT and DELETE for all users,

RE: Disabling PUT and DELETE methods in Tomcat 5 standalone

2004-03-08 Thread Mike Curwen
You've disabled it in the sense that no matter what you type in, you will not be allowed in, but it's not a blackhole or tarpit situation (ie: the server does NOT respond in ANY way to a PUT or DELETE request). In the case of configuring a null role, the server still responds with an authorization

RE: deploying war to tomcat 5.0.19 via manager app

2004-03-08 Thread Shapira, Yoav
Hi, Context path=/dept/post/vale docBase=vale debug=0 reloadable=true crossContext=false Logger className=org.apache.catalina.logger.FileLogger prefix=localhost_vale_log. suffix=.txt timestamp=true/ /Context That is, I want the context to be /dept/post/vale. I

server status from console

2004-03-08 Thread Simone - Dev
Hello, I just installed the 5.0.18 version (upgrading from 4.0.4) and I was impressed by the complete server status in the manager. Is there a way to have the same output from the server console instead from a web page? Simone - Simone Chiaretta

RE: server status from console

2004-03-08 Thread Shapira, Yoav
Hi, I just installed the 5.0.18 version (upgrading from 4.0.4) and I was impressed by the complete server status in the manager. Is there a way to have the same output from the server console instead from a web page? wget or your favorite network client tool, maybe? ;) There's no script that

R: server status from console

2004-03-08 Thread Simone - Dev
The idea was using a console so that I don't access the web page. Simone - Simone Chiaretta www.piyosailing.com/S Any sufficiently advanced technology is indistinguishable from magic Life is short, play hard -Messaggio originale- Da: Shapira, Yoav

Re: session-timeout

2004-03-08 Thread Seth Ladd
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jerald Powel wrote: | Hi all, | | I am experiencing problems with memory management. I load up my app in 10 or 15 browsers where various stuff is put on a session each time. In Windows Task Manager I can see java.exe incrementing by an amount of

Re: Disabling PUT and DELETE methods in Tomcat 5 standalone

2004-03-08 Thread James Agnew
There's no implementation of the servlet doPut() and doDelete() methods so nothing can actually be put or deleted, but that's true before even creating the security constraint. Yet, testing for PUT and DELETE methods still show that they're enabled. Our security scanners still flag these methods

RE: JK contra JK2 with IIS-Authentification

2004-03-08 Thread Piccoli, Lucio
Have you tried the setting in jk2.proprties #gets tomcat to obtain authentication from jk which gets from IIS request.tomcatAuthentication=false -lp -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Monday, 8 March 2004 10:23 PM To: [EMAIL PROTECTED]

RE: session-timeout

2004-03-08 Thread Mike Curwen
My understanding on this topic is perhaps not clearest, but here's what I've been able to glean from watching tomcat-user (amongst others). The VM will not 'release' back to the OS, any memory it grabs during the run of a program. But that doesn't mean that it is currently in use. ex: You've

Re: session-timeout

2004-03-08 Thread Justin Ruthenbeck
At 02:37 PM 3/8/2004, you wrote: Hi all, I am experiencing problems with memory management. I load up my app in 10 or 15 browsers where various stuff is put on a session each time. In Windows Task Manager I can see java.exe incrementing by an amount of memory for each browser/app opened.

RE: session-timeout

2004-03-08 Thread Justin Ruthenbeck
At 03:07 PM 3/8/2004, you wrote: My understanding on this topic is perhaps not clearest, but here's what I've been able to glean from watching tomcat-user (amongst others). The VM will not 'release' back to the OS, any memory it grabs during the run of a program. But that doesn't mean that it is

newbie need help whit server naming

2004-03-08 Thread FRANCOIS Dufour
is there a way to rite the server name instead off the ip adress in the adress bar? [EMAIL PROTECTED] administrateur http://entre-nous.qc.tc _ MSN Search, le moteur de recherche qui pense comme vous !

RE: Loosing sessions when poping a window

2004-03-08 Thread Derek Clarkson
Hmm, the popup is this case is definitely accessing a different domain. We have our main site www.foo.com and a secure site for transactions (secure.foo.com). We actually don't care about sessions on the popup secure site because it uses it's own session. The problem appears to be that once the

Re: Tomcat is not finding my classes

2004-03-08 Thread Paul
what about tomcat_home\common\lib\x.jar tomcat_home\common\classes\x\x.class and do you use an %@ page=x.* % type tag in your jsp files? - Original Message - From: Faine, Mark [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, March 08, 2004 4:20 PM Subject: Tomcat

Entity Include Into web.xml w/ Tomcat 5

2004-03-08 Thread Seth Ladd
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello, I've been precompiling my JSPs w/ ant, and I would like to include the web.xml snippet that results from the ant task into my web.xml. All of the examples of using a DOCTYPE ENTITY I've see are for servlet spec 2.3, which uses a DTD. Is there a

RE: session-timeout

2004-03-08 Thread Jerald Powel
Hi and thank you to all concerned, Before I close, and consult the doco you talk of (URLs welcome), can you exaplain what you mean by whoever implements the JVM? In this instance, are we talking about Apache/TC developer team? thnx G. Yes, this is correct. The important point,

cookies and forward tag interact

2004-03-08 Thread Paul
does anyone know if cookies interact in any way with jsp forward tag? -paul - Original Message - From: Paul [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, March 08, 2004 3:43 PM Subject: cookies, second instance of, causing tomcat 500 error Hi All, any help solving this mystery

tar 1.13.93 and jakarta-tomcat-5.0.19.tar.gz errors.

2004-03-08 Thread Carl Howells
Running version 1.13.93 of tar on linux (debian unstable)... Attempting to untar jakarta-tomcat-5.0.19.tar.gz fails. I confirmed that the file is uncorrupted, and it untars correctly with other versions of tar. This is of course a bug with version 1.13.93 of tar, but I thought I'd point it

RE: session-timeout

2004-03-08 Thread Justin Ruthenbeck
At 04:50 PM 3/8/2004, you wrote: Hi and thank you to all concerned, Before I close, and consult the doco you talk of (URLs welcome), can you exaplain what you mean by whoever implements the JVM? In this instance, are we talking about Apache/TC developer team? Try these (from a really quick

RE: RE: NTLM and Post request

2004-03-08 Thread Piccoli, Lucio
String strAuth = request.getHeader(Authorization); if (strAuth == null) { response.setStatus(response.SC_UNAUTHORIZED); response.setHeader(WWW-Authenticate, NTLM); return; } If i return a JSP page with status UNAUTHORIZED, then subsequent POST request will quit working.

Re: JNDI Datasource Reference in DD Not Necessary?

2004-03-08 Thread Parsons Technical Services
Harry, Take a look at this page: http://jakarta.apache.org/tomcat/tomcat-4.1-doc/config/globalresources.html As noted on the page: This is equivalent to the inclusion of the following element in the web application deployment descriptor (/WEB-INF/web.xml): The question is: Is the fragment

Multiple instances of tomcat 4.1.30 with Win2K.

2004-03-08 Thread Kawthar Bt M Sulaiman
I'm trying to setup multiple instaces of tomcat with Win2K. Here's my directory structure: CATALINA_HOME == C:\programs\jakarta-tomcat-4.1.30 CATALINA_BASE == c:\programs\usr\mo Inside CATALINA_BASE, I have the following directories (using port 8101): conf logs temp webapps work How do I setup

Steps to follow for SSL

2004-03-08 Thread UmamaheswarKalluru
Hi, Can some one tell me what are the steps that I need to follow for installing SSL on Tomcat 5. I have already woked on creating a self cretified certificate and it works good. But when I purchase a certificate what are the steps that I need to do i.e importing the certificate and where to

Re: JNDI Datasource Reference in DD Not Necessary?

2004-03-08 Thread Daniel Savard
Doug, I really hope someone will shed some light on this, because I struggle to make my JNDI DataSource definition working properly with 5.0.19. And it seems the Resources still need to be defined in the server.xml even if the documentation for 5.0.19 is saying you should no longer put your

Re: Tomcat as a Windows Service and the security manager

2004-03-08 Thread Bill Barker
Try adding '-Djava.security.manager' and '-Djava.security.manager==c:\path\to\catalina\conf\catalina.policy' to your JavaOptions. A.J. Ostman [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hello All, Platform: Windows XP / Tomcat 4.1 and 5.0 If I invoke Tomcat from the command

Re: RE: NTLM and Post request

2004-03-08 Thread mganesh
Thanks Piccoli. String strAuth = request.getHeader(Authorization); if (strAuth == null) { response.setStatus(response.SC_UNAUTHORIZED); response.setHeader(WWW-Authenticate, NTLM); return; } If i return a JSP page with status UNAUTHORIZED, then subsequent POST

Re: server status from console

2004-03-08 Thread Bill Barker
The status page is just a particular JMX dump. You could do the same thing with your favorite JMX console app. Simone - Dev [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] The idea was using a console so that I don't access the web page. Simone - Simone

Application developed for Tomcat 4.1.27 failed to tun with Tomcat 5.0.19....

2004-03-08 Thread S.Latha Kamatchi
Dear Tomcat users, I run my web application with Tomcat 4.1.27. My own folder name is myFolder. I put it under webapps folder. I have placed jar , html and jsp pages inside myFolder. I have the folder structure WEB-INF\classes inside myFolder and placed the servelt files there. Its

RE: RE: NTLM and Post request

2004-03-08 Thread Piccoli, Lucio
If i do the above step, client returns NTLM authorization header and client is authenticated at step 6. No. step 3 the client only send the message contains the host name and the NT domain name of the client. The client is not authenticated at this stage! It requires a further challenge

Re: Steps to follow for SSL

2004-03-08 Thread James Agnew
Uma Checkout the section entitled 'Installing a Certificate from a Certificate Authority' here: http://jakarta.apache.org/tomcat/tomcat-5.0-doc/ssl-howto.html You'll need to create a CSR that you send to your Certificate Authority, along with company registration details etc, for the company

Re: Application developed for Tomcat 4.1.27 failed to tun with Tomcat 5.0.19....

2004-03-08 Thread Antonio Fiol Bonnn
Hi, Does your app map all servlets? Or did you (lazily) use the invoker servlet? The invoker servlet comes commented out in Tomcat 5. You have two options: - Correct your app. (My advice, it makes your app more portable) - Uncomment the invoker (Quick kludge, but it also works) Yours, Antonio

AW: JK contra JK2 with IIS-Authentification

2004-03-08 Thread Bjoern . Andersen
Hi Piccoli Group, Yes, it works (-ish) with request.tomcatAuthentication=false, but despite of what the switch should do, the Tomcat is still Requesting a full groups-list from the DC / AD every time, even if the IIS has already done the auth. On big systems this creates a not bearable network

Re: RE: NTLM and Post request

2004-03-08 Thread mganesh
Thanks Piccoli. Ya Im able to authenticate the user. The problem is not in the authentication, it is in the followinng lines of Code. String strAuth = request.getHeader(Authorization); if (strAuth == null) { response.setStatus(response.SC_UNAUTHORIZED);

Disabling PUT and DELETE methods in Tomcat 5 standalone

2004-03-08 Thread funkster
Running Nessus against our server (Debian Woody + standalone Tomcat 5.0.18) produces a security warning that the PUT and DELETE http methods are enabled in Tomcat. Although these warning were not exploitable, I really need to ensure that these 2 methods are completely disabled. I've spent a good

NT Service terminates

2004-03-08 Thread Tariq Chalabi
I have Tomcat 4.1.24 running as Windows Service on Windows 2000 Server - hosting a number of applications. I currently have it running When I run a simple load test using Microsoft Stress Tester - as I increase the load I can repeatedly force the Window Service to terminate. I'm only

IIS + Tomcat 4.1.x + Load Balancing with session affinity (stick y sessions) possible ?

2004-03-08 Thread Bjoern . Andersen
Hi Group, We got a small webfarm with 2 IIS JK on a WLBS balancer. Behind them are two Tomcat workers on different machines. So we need Session affinity to have the JK choose the right (same) Tomcat for the session. Client (Browser) || WLBS /\

RE: IIS + Tomcat 4.1.x + Load Balancing with session affinity (sticky sessions) possible ?

2004-03-08 Thread Ralph Einfeldt
I don't know if your suggested solution works with IIS. But what should work is a solution without sticky sessions. (If that works for you depends on your application) You can use tomcat with session replication: http://www.apache.org/~fhanik/ I'm not aware of the current state of the

Tomcat JMX and Model MBean

2004-03-08 Thread Marco Mistroni
Hi all, Does Tomcat supports Model Mbean? If so, does it support also the persistence feature of Model MBean? Thanx and regards Marco - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands,

AW: IIS + Tomcat 4.1.x + Load Balancing with session affinity (s ticky sessions) possible ?

2004-03-08 Thread Bjoern . Andersen
Thanks, but that is exactly what I need to know. We can't replicate sessions coz our crap Framework can't serialize the sessions. So we depend on sticky sessions to get to the right worker. I thought the code for mod_jk and isapi redirector is quite similar or equal, apart from the interface bit,

Re: AW: IIS + Tomcat 4.1.x + Load Balancing with session affinity (s ticky sessions) possible ?

2004-03-08 Thread Alex
New code in cvs i've found for jk2 isapi fll for IIS5 does support sticky sessions going to multiple tomcat instances using ajp13. All my attempts to check out and compile it into a dll though have failed. On Mon, 8 Mar 2004 [EMAIL PROTECTED] wrote: Date: Mon, 8 Mar 2004 13:16:20 +0100

JK contra JK2 with IIS-Authentification

2004-03-08 Thread Bjoern . Andersen
Hi Group, We used JK 1.2.5 isapi-redirector in our IIS. The IIS authenticates the Users against the domain, and many applications take this info from request.getremoteuser and work with it. With JK2, this doesn't work any more. There is no Username passed to Tomcat. Why? Or anybody knows a

RE: IIS + Tomcat 4.1.x + Load Balancing with session affinity (sticky sessions) possible ?

2004-03-08 Thread Ralph Einfeldt
I can just answer one question of yours: 'How do these sticky sessions work anyway' Tomcat appends a engine specific postfix to the session id. (That's why you have to define a jvmroute in the engine tag) An incoming request is balanced depending on the included postfix of the session id.

RE: Spam on tomcat-user?

2004-03-08 Thread Ralph Einfeldt
I contacted the technical and administrative owner of the source (as reported by the mail header) of the spam. (rzone.de and webmailer.de) Let's see what happens. -Original Message- From: Parsons Technical Services [mailto:[EMAIL PROTECTED] Sent: Monday, March 08, 2004 6:01 AM

Re: NT Service terminates

2004-03-08 Thread Adrian Kristiawan
I have a similiarproblem with you, I amusing Tomcat 4.1.18, but currently I'm not running it as a Windows Service on Windows 2000 Server, instead I start the Tomcat service byclicking the Start Tomcatshortcut in the windows desktop. Whenever there is a communication link error or the

How to set default charset?

2004-03-08 Thread vijaya prasad pala
Hi, what is tomcat default charset? How to set default charset in tomocat 4.x please help Vijay __ Do you Yahoo!? Yahoo! Search - Find what you’re looking for faster http://search.yahoo.com -

Vedr.: JK contra JK2 with IIS-Authentification

2004-03-08 Thread Thomas Nybro Bolding
Hi Björn, I am using IIS 5.0 and JK2, dunno which version though. As in your setup users are authenticated by IIS and the credentials are passed to Tomcat. Since upgrading from JK I have experienced no problems so I assume its NOT a JK2 issue. Cant tell whats wrong but be sure to add

RE: Entity Declarations in JSP/XML

2004-03-08 Thread Lipov, Felix
Thanks for the info. Do you know though what would be the proper approach to deal with that problem. How can I make it so tha the JSP compiler is satisfied with the JSP and the jsp:root declaration and my additional entity declarations? -Original Message- From: news [mailto:[EMAIL

charset issues with jsp include and forward

2004-03-08 Thread vijaya prasad pala
Hi i am reading arabic text from oracle database. if i am displaying that text in that page its ok. if i am passing the same arabic string to another page then in that page it is displaying in ?. i tried like this if(request.getCharacterEncoding()==null)

RE: Filter causing memory on TC-5.0.18 and 5.0.19

2004-03-08 Thread Shapira, Yoav
Hi, We search hard in the archive and found many, many questions in regards of this. Can you please point out specific messages or threads in the archives that ask about a filter causing a tomcat memory leak? Yoav Shapira This e-mail, including any attachments, is a confidential business

Hiding Apache-Coyote/1.1 banner in Tomcat 5

2004-03-08 Thread James Agnew
I've been looking for a way to prevent security scanners such as Nessus from being able to easily read Tomcat's standalone webserver details. I'm running Tomcat 5.0.18 standalone and Nessus identifies it as follows: Server Version: Apache-Coyote/1.1 Server Banner: Apache-Coyote/1.1 I can't seen