Http11Nio2Protocol allows brand-new sockets to live indefinitely? (Tomcat 9.0.8 and others)

2018-05-29 Thread Adam Feder
Hi -- While testing 9.0.8 in staging, we found that when a client connects to our Tomcat's TLS connector and doesn't send any data (not even to do the handshake), the connection is allowed to stay open indefinitely. We first saw this problem on Debian. We have been able to reproduce it using

Re: 401 Unauthorized Exception restful webservice Linux OS, Tomcat Server

2018-05-29 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Prasanna, On 5/26/18 2:09 PM, Prasanna Pati wrote: > We are trying to access the Lithium Rest Api (its a https site) > through Spring Rest Template as below > > `String plainCreds = lswUserName + ":" + lswPassword; > > byte[] plainCredsBytes =

Re: How do we prevent directory access in apache

2018-05-29 Thread Greg Huber
In httpd.conf, uncomment: Options -Indexes -FollowSymLinks Cheers Greg On 29 May 2018 at 08:33, Olaf Kock wrote: > On 29.05.2018 05:07, Jins Raju Abraham wrote: > >> How do we prevent a directory access in apache. Tried searching this and >> there are a lot of suggestion about doing it in the

Re: How do we prevent directory access in apache

2018-05-29 Thread Olaf Kock
On 29.05.2018 05:07, Jins Raju Abraham wrote: How do we prevent a directory access in apache. Tried searching this and there are a lot of suggestion about doing it in the .htaccess file. "Apache Tomcat" doesn't know about .htaccess files. "Apache httpd" does, but you won't get an answer