Reloadable attribute not working

2007-05-19 Thread lightbulb432
When I update a servlet class and it gets compiled automatically into WEB-INF/classes, my context does not reload automatically. It is only when I restart Tomcat that the changes to the servlet are viewable. I am using Tomcat 6 and have set reloadable to true in context.xml in my

Re: Suspected mod_jk connection problems

2007-05-19 Thread Pid
Martin Gainty wrote: I used to work with a Sys Admin whose expertise was chaing the sys admin password when asked about issues such as interconnecting thru Pix he would say let me get back to you..it sounds like this sys admin is working for you now Anyway here is a quick tutorial on

Re: Prevent unwanted requests

2007-05-19 Thread Pid
This is less programmatical than pragmatical but you could try not putting your .java files on the web server... :oP Lucas Galfaso wrote: I think that a new servlet to filter these files is not the proper approach, and you should use a filter :) - LG On 5/18/07, Milanez, Marcus [EMAIL

Re: UserDatabase security

2007-05-19 Thread Pid
I'm trying to write a regex that will turn Mr Kewl's posts into something readable, if anyone would care to help. If there's sufficient interest I'll start a project on SourceForge to turn it into a plugin for Outlook, Thunderbird etc. p Johnny Kewl wrote: Hi Jerome... Dont think its

Re: Overriding Default Servlet?

2007-05-19 Thread Johnny Kewl
Thanks everyone for the info magic mailing list this! My interest in the default servlet is 2 fold A Resin user asked whether tomcat could do this path-mapping url-pattern=/activeadv/* real-path=/doc_root/activeadv// path-mapping url-pattern=/includes/*

Re: UserDatabase security

2007-05-19 Thread Johnny Kewl
Ha ha... if you get it working, I'll buy it from you ;) - Original Message - From: Pid [EMAIL PROTECTED] To: Tomcat Users List users@tomcat.apache.org Sent: Saturday, May 19, 2007 11:00 AM Subject: Re: UserDatabase security I'm trying to write a regex that will turn Mr Kewl's posts

Tomcat WebDAV Security

2007-05-19 Thread Colin71
Hi, I want to use tomcat/webdav as a simple file server. The only restriction is that I want files with certain extensions to be read only and all other files read/write (i.e. files with suffix myext.xls to be read only where filenames can be file1.myext.xls). I have tried to do this by

Re: [OT] UserDatabase security

2007-05-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Pid, Pid wrote: I'm trying to write a regex that will turn Mr Kewl's posts into something readable, if anyone would care to help. How about: s/wot/what/g s/\.\.\./.\n/g That ought to help quite a bit ;) - -chris -BEGIN PGP SIGNATURE-

Re: Marking servlet ... as unavailable

2007-05-19 Thread Philipp Führer - netzbeben
Hi Joe, the problem is, that the UnavailableException is buggy in some tomcat versions. If thrown, tomcat will set the servlet as unavailable but won't print the exception message. Use the newest tomcat-version. Or change all UnavailableException to ServletException, so you will see the

Re: Tomcat WebDAV Security

2007-05-19 Thread Mark Thomas
Colin71 wrote: My question is, is this possible using the webdav/web.xml file or do I need to look into jaas realms or something else? This should work but I haven't tested it: - set the readonly init-param for the webdav servlet to false - use security constraints to limit the methods

Re: [OT] UserDatabase security

2007-05-19 Thread Pid
Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Pid, Pid wrote: I'm trying to write a regex that will turn Mr Kewl's posts into something readable, if anyone would care to help. How about: s/wot/what/g s/\.\.\./.\n/g Many thanks. I will add your first rule, and:

[CVE-2007-1355] Tomcat documentation XSS vulnerabilities

2007-05-19 Thread Mark Thomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 CVE-2007-1355: Tomcat documentation XSS vulnerabilities Severity: Moderate (Cross-site scripting) Vendor: The Apache Software Foundation Versions Affected: Tomcat 4.0.0 to 4.0.6 Tomcat 4.1.0 to 4.1.36 Tomcat 5.0.0 to 5.0.30 Tomcat 5.5.0 to 5.5.23

tomcat-dbcp from Maven

2007-05-19 Thread lightbulb432
The tomcat-dbcp library doesn't seem to be available from the Maven repository for Tomcat at http://tomcat.apache.org/dev/dist/m2-repository or repo1.maven.org...am I just missing another maven repository that I should be looking at, or must I manually install this JAR into my own local

Re: Prevent unwanted requests

2007-05-19 Thread Rashmi Rubdi
I agree, there's no need to place .java files, the .class files under /WEB-INF/ are sufficient. Unless you're writing an Applet, which has to exist outside /WEB-INF/ , all other classes are protected from browser/ client access when they're under /WEB-INF/ -Rashmi On 5/19/07, Pid [EMAIL

RE: Reloadable attribute not working

2007-05-19 Thread Caldarale, Charles R
From: lightbulb432 [mailto:[EMAIL PROTECTED] Subject: Reloadable attribute not working I am using Tomcat 6 and have set reloadable to true in context.xml in my META-INF/context.xml file. Does a conf/Catalina/[host]/[appname].xml file exist? (I don't actually know if embedded uses a conf

RE: Reloadable attribute not working

2007-05-19 Thread lightbulb432
There's no folders under CATALINA_BASE/conf, but I have a guess as to what's going on and perhaps you could comment. I'm using the invoker servlet - could that be a reason, or does it have nothing to do with this? Also, could it be why no .java and .class files are generated in my work

Re: javax.servlet.ServletException: Java heap space

2007-05-19 Thread Rashmi Rubdi
On 5/18/07, Aurélien Allienne [EMAIL PROTECTED] wrote: Hi, I have this error : javax.servlet.ServletException: Java heap space But I can find how I can change this in catalina.sh. Can you have the solution? Here are some memory configuration information:

Re: displaying customized error page in tomcat 5.5.12

2007-05-19 Thread Len Popp
That doesn't work for me. The ErrorDocument 503 declaration in httpd.conf only works when Tomcat is completely down, not when a single webapp is stopped or reloading. As long as Tomcat is running, you'll get Tomcat's error pages. And, you can't override this in Tomcat's conf/web.xml, only in each

Re: javax.servlet.ServletException: Java heap space

2007-05-19 Thread Aurélien Allienne
Thank, but tomcat use 64Mb by default. I can do change this parameter?

Re: javax.servlet.ServletException: Java heap space

2007-05-19 Thread Rashmi Rubdi
On 5/19/07, Aurélien Allienne [EMAIL PROTECTED] wrote: Thank, but tomcat use 64Mb by default. I can do change this parameter? Example: JAVA_OPTS=-server -Xms128m -Xmx384m catalina.sh (Unix/Linux) or catalina.bat (MS Windows) Additional documents:

Re: Missing ETag in 304 Header

2007-05-19 Thread Rashmi Rubdi
On 5/16/07, Joe Mun [EMAIL PROTECTED] wrote: Hi guys... so according to the HTTP 1.1 spec ( http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html), 304 Not Modified responses must include the ETag in the header. Well, according to RFC 2616's section 10.3.5 on 304 Not Modified - ETag and/or

Re: Missing ETag in 304 Header

2007-05-19 Thread Len Popp
I think you've got that wrong. 1. Spec says: The response MUST include the following header fields: ... - ETag and/or Content-Location, if the header would have been sent in a 200 response to the same request 2. ETag header *was* sent in a 200 response to the same request. (See the header logs

Re: Missing ETag in 304 Header

2007-05-19 Thread Rashmi Rubdi
I might be wrong but I have a few doubts On 5/19/07, Len Popp [EMAIL PROTECTED] wrote: I think you've got that wrong. 1. Spec says: The response MUST include the following header fields: ... - ETag and/or Content-Location, if the header would have been sent in a 200 response to the same

Re: javax.servlet.ServletException: Java heap space

2007-05-19 Thread Martin Gainty
e.g. set MaxHeap to 512MB For all Java Processes [unix]export JVM_OPTS =-Xmx512M [windows] SET JVM_OPTS=-Xmx256m For Tomcat only [unix] export TOMCAT_OPTS=3D-DXmx=3D512m [Windows] set TOMCAT_OPTS=3D-DXmx=3D512m Does this help? M-- This email message and any files transmitted with it contain

Re: Missing ETag in 304 Header

2007-05-19 Thread Rashmi Rubdi
On 5/19/07, Rashmi Rubdi [EMAIL PROTECTED] wrote: 1. Spec says: The response MUST include the following header fields: ... - ETag and/or Content-Location, if the header would have been sent in a 200 response to the same request Just to test this, I created a JSP and put a jsp:froward tag

Re: Missing ETag in 304 Header

2007-05-19 Thread Len Popp
It's hypothetical. It says *if* the header *would have* been sent in a 200 response to the same request. I can know what Tomcat would have done, because I've seen what it *does* do with requests that are identical. In my test case, Tomcat *would have* included an ETag header *if* it responded 200

Re: Missing ETag in 304 Header

2007-05-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Rashmi, Rashmi Rubdi wrote: 1. Spec says: The response MUST include the following header fields: ... - ETag and/or Content-Location, if the header would have been sent in a 200 response to the same request By *same request* , I think you are

Re: Missing ETag in 304 Header

2007-05-19 Thread Rashmi Rubdi
On 5/19/07, Christopher Schultz [EMAIL PROTECTED] wrote: Rashmi, Rashmi Rubdi wrote: 1. Spec says: The response MUST include the following header fields: ... - ETag and/or Content-Location, if the header would have been sent in a 200 response to the same request By *same request* , I

Re: Missing ETag in 304 Header

2007-05-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Rashmi, Rashmi Rubdi wrote: Thank you both for clarifying, I understand what you're saying. [snip] And the definition of ETag : http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.19 mentions entity-tag , which is also the value of a

Re: Missing ETag in 304 Header

2007-05-19 Thread Rashmi Rubdi
On 5/19/07, Christopher Schultz [EMAIL PROTECTED] wrote: Rashmi, Rashmi Rubdi wrote: Thank you both for clarifying, I understand what you're saying. [snip] And the definition of ETag : http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.19 mentions entity-tag , which is also the

Re: Missing ETag in 304 Header

2007-05-19 Thread Len Popp
On 5/19/07, Christopher Schultz [EMAIL PROTECTED] wrote: Len, I recommend you cross-post this (if you haven't already) to the tomcat-dev mailing list to see what they have to say. I will do this, today if I have time. -- Len

Re: transaction manager cannot load in Tomcat 6

2007-05-19 Thread Rashmi Rubdi
On 5/17/07, Molina, Teresa [EMAIL PROTECTED] wrote: I've been trying to use Tomcat 6 (with Java 6) on FC6, but I cannot seem to get the third-party transaction manager integrated as in previous versions. I have configured everything just as in Tomcat 5.5, but there seems to be a change in the

Re: transaction manager cannot load in Tomcat 6

2007-05-19 Thread Rashmi Rubdi
On 5/19/07, Rashmi Rubdi [EMAIL PROTECTED] wrote: This is what's configured as a global resource in server.xml: Resource name=AdminCop min=1 max=1 auth=Container type=javax.sql.DataSource

Tomcat error log analyzer

2007-05-19 Thread confusionvalley
Hi all, Is there any tool to analyse the Apache Tomcat logs and detect errors such as Exceptions? I know that it is very easy to do a little application to check these errors but I really would like to know the names of tools that can do this kind of job. The only log analyzers I know is