Re: confusions with conf/tomcat-users.xml setup

I would recommend reading the role settings from here first: https://tomcat.apache.org/tomcat-7.0-doc/manager-howto.html Also, if everything is okay for you try using comma-separated roles e.g. roles=“manager-gui,admin”. Even better, try to create new roles and assign them correctly. See if

confusions with conf/tomcat-users.xml setup

I have Apache Tomcat/7.0.94 installed and running. However I had a hard time to get to the ManagerApp and Host Manager to work properly. Briefly: If I set up "conf/tomcat-users.xml" as in: -- The "/manager/html/" can get connected and "/host-manager/html" gets "404 Access Denied";

Re: why is ContextListener.attributeAdded means?

On Wednesday, July 24, 2019, 11:29:39 PM GMT+8, Mark Eggers wrote: On 7/24/2019 12:58 AM, Karen Goh wrote: > > > > > > On Wednesday, July 24, 2019, 12:54:35 PM GMT+8, Mark Eggers > wrote: > > > Karen, > > On 7/23/2019 7:41 PM, Karen Goh wrote: >> Dear experts, >> >> I need some help

Re: Tomcat TLS session resumption in cluster

On 17/07/2019 00:06, M.S. Dousti wrote: > Dear all, > > TLS allows session resumption via session IDs or session tickets. [This > post]( > https://timtaubert.de/blog/2014/11/the-sad-state-of-server-side-tls-session-resumption-implementations/) > shows how this can be performed in Apache web

Re: TLS client cert clarification

On 12/07/2019 19:07, Wilmoth, Jon wrote: > Thanks for the very quick response! Out of curiosity is this ensured by some > sort of caching in the Tomcat server after the TLS handshake? Or is it > expected that the client would send the certificate with each post handshake > request. I ask as

Login Failure /manager.html

http://localhost:8080/manager/html I am trying to access the sever status or manager app screens. I am prompted by the page to input my credentials, and I input the ones I entered in tomcat-users.xml. The page never accepts them and I get 401. I looked at catlina.out and it is reading the

Login Failure /manager.html

http://localhost:8080/manager/html I am trying to access the sever status or manager app screens. I am prompted by the page to input my credentials, and I input the ones I entered in tomcat-users.xml. The page never accepts them and I get 401. I looked at catlina.out and it is reading the

Login Failure /manager.html

http://localhost:8080/manager/html I am trying to access the sever status or manager app screens. I am prompted by the page to input my credentials, and I input the ones I entered in tomcat-users.xml. The page never accepts them and I get 401. I looked at catlina.out and it is reading the

Negative pattern match in rewrite rule is not as documented

Hi, The mention of using "NOT character ('!')" in rule patterns as negative match no longer matches implementation: https://tomcat.apache.org/tomcat-8.5-doc/rewrite.html In the rules, the NOT character ('!') is also available as a possible > pattern prefix. This enables you to negate a pattern;

RE: Security vulnerabilities with tomcat 9

Hi Sumit Please see my response below your question. -Original Message- From: Sumit Bhardwaj Sent: Saturday, July 20, 2019 8:48 AM To: Tomcat Users List Subject: Security vulnerabilities with tomcat 9 > Hi, > > We are using tomcat 9 and getting following two vulnerabilities in

Have to Login Twice to Enter the Application Main Page

Tomcat Experts: I deployed my web application TOPS in to our DEV web server. I start the web server 9.0.13, and enter the application URL,, the login screen show up. I entered the LoginID/Password and click the "Login" button, the log on the catalina.out is: 23-Jul-2019

Re: why is ContextListener.attributeAdded means?

On 7/24/2019 12:58 AM, Karen Goh wrote: > > > > > > On Wednesday, July 24, 2019, 12:54:35 PM GMT+8, Mark Eggers > wrote: > > > Karen, > > On 7/23/2019 7:41 PM, Karen Goh wrote: >> Dear experts, >> >> I need some help again. >> >> I am trying to get a html page out on my browser, I

Re: OT: Connection timeout with HttpClient

Hi Chris, On Tue, Jul 23, 2019 at 6:00 PM Christopher Schultz wrote: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Suvendu, > > On 7/23/19 07:39, Suvendu Sekhar Mondal wrote: > > One of our legacy applications is using Apache Commons HttpClient > > 3.1. POST call to one REST service

PooledConnection#connectUsingDriver, Thread.currentThread().getContextClassLoader() is null

Context: Debian GNU/Linux 9 \n \l java version 1.8.0_162 Tomcat 8.5.35 From time to time we are facing the follwing exception (call stack): ... Caused by: java.sql.SQLException: Unable to load class: org.mariadb.jdbc.Driver from ClassLoader:java.net.URLClassLoader@4c873330;ClassLoader:null

Re: why is ContextListener.attributeAdded means?

On Wednesday, July 24, 2019, 12:54:35 PM GMT+8, Mark Eggers wrote: Karen, On 7/23/2019 7:41 PM, Karen Goh wrote: > Dear experts, > > I need some help again. > > I am trying to get a html page out on my browser, I changed my Tomcat server > as the previous one has some Ant script