How can I extend AceessLogValue

2023-02-01 Thread shallowinggg
I want to print skywalking traceId in tomcat access log, how to extend AceessLogValue class or any other solutions?? - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail:

Re: Message from a security scan

2023-02-01 Thread James H. H. Lampert
On 2/1/23 12:06 PM, Mark Thomas wrote: The pen tester requested "/app/..;/manager" The proxy passed that as is to Tomcat since it starts with "/app" Thanks. As it happens, this particular customer was the first one in which I tried putting the only IP addresses with any business accessing

Re: Message from a security scan

2023-02-01 Thread Mark Thomas
On 01/02/2023 18:48, James H. H. Lampert wrote: We got this from a customer who did a security scan: A Tomcat Manager login panel was discovered via path normalization. Normalizing a path involves modifying the string that identifies a path or file so that it conforms to a valid path on the

Message from a security scan

2023-02-01 Thread James H. H. Lampert
We got this from a customer who did a security scan: A Tomcat Manager login panel was discovered via path normalization. Normalizing a path involves modifying the string that identifies a path or file so that it conforms to a valid path on the target operating system. QID Detection Logic: This

Re: [solved] How to debug 404s / How to enable error log

2023-02-01 Thread Michael B Allen
On Tue, Jan 31, 2023 at 5:48 PM Konstantin Kolinko wrote: > and your configuration is missing > catalina.properties > context.xml > logging.properties > > files that are required for proper operation. > Thanks. I have confirmed that also copying logging.properties results in a

Re: [External] : Re: Tomcat as a Windows Service not picking JAVA_OPTS parameter

2023-02-01 Thread Christopher Schultz
Rajagopalan, On 2/1/23 10:22, Rajagopalan Hariharan wrote: No it is not working even after setting the same. Can you copy/paste the entire contents (with any secrets removed) of your Java Options section? After changing that, you did both "save" and re-restart the service, right? Did you

Re: Tomcat client certicate authentication

2023-02-01 Thread Christopher Schultz
Dave, On 2/1/23 06:17, Dave Breeze wrote: Chris thanks for your mail Apologies for confusion. Yes I am requesting certificates - sslCon.setProperty("clientAuth", "required") and a user can only connect by supplying a valid certificate. I removed constraints from the web.xml as I did not want

AW: [External] : Re: Tomcat as a Windows Service not picking JAVA_OPTS parameter

2023-02-01 Thread Thomas Hoffmann (Speed4Trade GmbH)
Hello, could you print out all system properties, e.g. within a debug.jsp? Similar to: https://mkyong.com/java/how-to-list-all-system-properties-key-and-value-in-java/ Maybe you can find your option somewhere else or is it completely missing? Greetings, Thomas > -Ursprüngliche

RE: [External] : Re: Tomcat as a Windows Service not picking JAVA_OPTS parameter

2023-02-01 Thread Rajagopalan Hariharan
Hi, No it is not working even after setting the same. Regards, Rajagopalan H -Original Message- From: Mark Thomas Sent: Wednesday, February 1, 2023 3:41 PM To: users@tomcat.apache.org Subject: [External] : Re: Tomcat as a Windows Service not picking JAVA_OPTS parameter On 01/02/2023

AW: Tomcat client certicate authentication

2023-02-01 Thread Thomas Hoffmann (Speed4Trade GmbH)
Hello Dave, > -Ursprüngliche Nachricht- > Von: Dave Breeze > Gesendet: Mittwoch, 1. Februar 2023 12:17 > An: Tomcat Users List > Betreff: Re: Tomcat client certicate authentication > > Chris > thanks for your mail > Apologies for confusion. Yes I am requesting certificates > -

Re: Tomcat client certicate authentication

2023-02-01 Thread Dave Breeze
Chris thanks for your mail Apologies for confusion. Yes I am requesting certificates - sslCon.setProperty("clientAuth", "required") and a user can only connect by supplying a valid certificate. I removed constraints from the web.xml as I did not want access to a servlet restricted to a role - I

Re: Tomcat as a Windows Service not picking JAVA_OPTS parameter

2023-02-01 Thread Mark Thomas
On 01/02/2023 02:37, Rajagopalan Hariharan wrote: Hi, I have deployed ORDS 22.4 version in Tomcat 9 (which is installed as a Windows Service). For ORDS to work e have to set JAVA_OPTS parameter before starting Tomcat. This works perfectly fine when set in cmd and Tomcat started in cmd using