Re: [ Tomcat8 ] [ SingleSignOn ] 2 Webapplications

2015-01-29 Thread Mark Thomas
On 29/01/2015 10:54, Leonid Rozenblyum wrote: Hello! I'm trying to extend the SingleSignOn valve and if possible could you point me how can I create a global session listener without modifying configurations of web applications? The idea is that I should catch all 'session create' events

Re: [ Tomcat8 ] [ SingleSignOn ] 2 Webapplications

2015-01-29 Thread Leonid Rozenblyum
Thanks for the great advice! On Thu, Jan 29, 2015 at 12:57 PM, Mark Thomas ma...@apache.org wrote: On 29/01/2015 10:54, Leonid Rozenblyum wrote: Hello! I'm trying to extend the SingleSignOn valve and if possible could you point me how can I create a global session listener without modifying

How-to disable SSL V3 on Tomcat 6.0.18.0

2015-01-29 Thread Jammy Chen
Hello team, Do everybody knows how-to disable SSL v3 in older tomcat version, I have tried to variety solution including sslProtocols or sslEnabledProtocols but it both did not work well, the Firefox I am using to test is only select TLS 1 and result is that I were not able to access the site.

Re: [ Tomcat8 ] [ SingleSignOn ] 2 Webapplications

2015-01-29 Thread Leonid Rozenblyum
Hello! I'm trying to extend the SingleSignOn valve and if possible could you point me how can I create a global session listener without modifying configurations of web applications? The idea is that I should catch all 'session create' events from all webapps, and if they have the 'custom SSO

Re: [ Tomcat8 ] [ SingleSignOn ] 2 Webapplications

2015-01-29 Thread Leonid Rozenblyum
I wonder if it's possible in HttpSessionListener implementation get access to actual Tomcat's StandardSession? HttpSessionEvent contains reference to StandardSessionFacade. Otherwise I cannot access Manager, Context etc which should led me to SingleSignOn. Should I go through dangerous

Re: FIPS Mode enabling on Tomcat 7.00.057

2015-01-29 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Geett, On 1/29/15 12:45 AM, Geett Chanddra Singha wrote: I'm getting the following error when enabling FIPS mode on Apache Tomcat: Jan 28, 2015 5:02:33 PM org.apache.catalina.core.AprLifecycleListener lifecycleEvent SEVERE: Failed to

Re: How to use Jasper to Parse JSP

2015-01-29 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Zhang, On 1/29/15 7:22 AM, t-zhang wrote: I need a JSP codecheck tool (like PMD) But PMD's JSP parser is not enouth. So I need a better JSPparser and I want to try Jasper as a parser. What do you want your checker to do? Anything more than make

Re: AJP connector address vs. IPv4/6

2015-01-29 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Andy, On 1/28/15 3:21 PM, Wang, Andy wrote: On Fri, 2015-01-23 at 16:05 -0500, Christopher Schultz wrote: If only one address per Connector can be specified, can you not just use 2 Connectors, one for each ? They should not conflict.

Re: How to use Jasper to Parse JSP

2015-01-29 Thread t-zhang
Thanks for your reply. I need a JSP codecheck tool (like PMD) But PMD's JSP parser is not enouth. So I need a better JSPparser and I want to try Jasper as a parser. Best Regards Tao Zhang On Tue, 27 Jan 2015 11:56:42 + Mark Thomas ma...@apache.org wrote: On 27/01/2015 11:36, t-zhang

Re: How-to disable SSL V3 on Tomcat 6.0.18.0

2015-01-29 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jammy, On 1/29/15 11:02 AM, Jammy Chen wrote: Thanks for replying, I understood this is old, our product has already upgraded to latest version, but somehow, some of our users are still in such old stage, they do not plan uptake now but they

RE: How-to disable SSL V3 on Tomcat 6.0.18.0

2015-01-29 Thread Caldarale, Charles R
From: Jammy Chen [mailto:jamm...@gmail.com] Subject: How-to disable SSL V3 on Tomcat 6.0.18.0 Do everybody knows how-to disable SSL v3 in older tomcat version Server version: Apache Tomcat/6.0.18 Server built: Jul 22 2008 02:00:36 Yes - move up to a current level and read the docs.

Re: How-to disable SSL V3 on Tomcat 6.0.18.0

2015-01-29 Thread Jammy Chen
Hello Chuck, Thanks for replying, I understood this is old, our product has already upgraded to latest version, but somehow, some of our users are still in such old stage, they do not plan uptake now but they want disable SSL V3 as everybody know this is big security vulnerability. *so now the

Tomcat sending 411 Length Required due to Chunked Transfer Encoding

2015-01-29 Thread Jeff Kohut
My first post to Tomcat list, pardon me if I make any mistakes, Any help you can provide would be greatly appreciated. I have a Tomcat Server (V 7.0.54) running under Windows 2008 R2 With Service Pack 1 (and up to date on Security as well as OS patches). That server is running a vendor supplied

Re: mod_jk and session stickiness

2015-01-29 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Rainer, On 7/23/14 5:14 PM, Christopher Schultz wrote: Rainer, On 7/23/14, 4:10 PM, Rainer Jung wrote: Am 23.07.2014 um 21:03 schrieb Christopher Schultz: On 7/23/14, 1:49 PM, Rainer Jung wrote: The other case, a request with an invalid

Re: Tomcat sending 411 Length Required due to Chunked Transfer Encoding

2015-01-29 Thread Mark Thomas
On 29/01/2015 22:29, Jeff Kohut wrote: My first post to Tomcat list, pardon me if I make any mistakes, Any help you can provide would be greatly appreciated. I have a Tomcat Server (V 7.0.54) running under Windows 2008 R2 With Service Pack 1 (and up to date on Security as well as OS

Re: Tomcat sending 411 Length Required due to Chunked Transfer Encoding

2015-01-29 Thread Konstantin Kolinko
2015-01-30 1:29 GMT+03:00 Jeff Kohut jeff.ko...@gmail.com: My first post to Tomcat list, pardon me if I make any mistakes, Any help you can provide would be greatly appreciated. I have a Tomcat Server (V 7.0.54) running under Windows 2008 R2 With Service Pack 1 (and up to date on Security as

Re: FIPS Mode enabling on Tomcat 7.00.057

2015-01-29 Thread Geett Chanddra Singha
Thanks Chris! Please find the inline comments from my side On 1/29/15 12:45 AM, Geett Chanddra Singha wrote: I'm getting the following error when enabling FIPS mode on Apache Tomcat: Jan 28, 2015 5:02:33 PM org.apache.catalina.core.AprLifecycleListener lifecycleEvent SEVERE: Failed to

Re: How-to disable SSL V3 on Tomcat 6.0.18.0

2015-01-29 Thread Terence M. Bandoian
On 1/29/2015 10:02 AM, Jammy Chen wrote: Hello Chuck, Thanks for replying, I understood this is old, our product has already upgraded to latest version, but somehow, some of our users are still in such old stage, they do not plan uptake now but they want disable SSL V3 as everybody know this is