Re: Session does not get invalidated when sessionCookiePath is set to "/"

2013-10-04 Thread Mark Thomas
On 02/10/2013 22:26, Stefan Haberl wrote: > I've a context.xml like so: > > useHttpOnly="true" disableURLRewriting="true" /> > > > > > > > I'm using Spring Security, which creates a new session after a user > has been authenticated to prevent session fixation attacks. > Everything works as

Re: SSL Configuration with in Tomcat

2013-10-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Shyam, On 10/3/13 11:35 PM, Shyam Kumar wrote: > I am not sure which is the port ,I got the port (18443) from > tomcat default SSL configuration that was commented in the > server.xml but in my windows I used 443 port and it worked well. Windows al

Re: Getting error 403 forbidden while using HTTP PUT method

2013-10-04 Thread Albert Kam
You were stating that it's ok for GET, and not for PUT. But what about POST methods ? Are they doing okay ? Some suggestions : I wonder whether the HiddenHttpMethodFilter is reached. You have many filters, and maybe one of them could be causing this ? To answer this, you might consider extending

RE: Getting error 403 forbidden while using HTTP PUT method

2013-10-04 Thread Caldarale, Charles R
> From: Christopher Schultz [mailto:ch...@christopherschultz.net] > Subject: Re: Getting error 403 forbidden while using HTTP PUT method > > > >

Re: Getting error 403 forbidden while using HTTP PUT method

2013-10-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Arnab, On 10/4/13 9:10 AM, Arnab Majumder wrote: > I am still getting the error 403 forbidden (Access to the > specified resource has been forbidden). Which resource? (Not that it matters) > > > > >

Re: Different handling of -Dfoo="bar" between versions

2013-10-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 André, On 10/3/13 4:03 PM, André Warnier wrote: > I think that the basic misunderstanding here is simply this : The > executable program that is being launched by the above > command-line is not Tomcat. It is "/usr/lib/jvm/jre/bin/java". > > All th

Re: Getting error 403 forbidden while using HTTP PUT method

2013-10-04 Thread Arnab Majumder
I am still getting the error 403 forbidden (Access to the specified resource has been forbidden). This is my web.xml http://java.sun.com/xml/ns/javaee"; xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; version="2.5" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun